# Top **URL:** https://discuss.elastic.co/top.md?page=1270&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1271 --- ## [Excluding Access Files](https://discuss.elastic.co/t/excluding-access-files/140358)
**Author:** [@Luis\_Alejandro\_Galan](https://discuss.elastic.co/u/Luis_Alejandro_Galan)\ **Replies:** 4\ **Last updated:** [July 18, 2018, 6:21pm UTC](https://discuss.elastic.co/t/excluding-access-files/140358 "2018-07-18T18:21:09Z")
version 6.3 for the entire ELK Stack hello! i am trying to exclude all access files from filebeat but am having trouble with the syntax. i am allowing all of the files because i have multiple folders with the same stru… --- ## [Kibana@5.5.0 source npm run test](https://discuss.elastic.co/t/kibana-5-5-0-source-npm-run-test/95367)
**Author:** [@xiaopeng\_zhang](https://discuss.elastic.co/u/xiaopeng_zhang)\ **Replies:** 4\ **Last updated:** [August 2, 2017, 12:58am UTC](https://discuss.elastic.co/t/kibana-5-5-0-source-npm-run-test/95367 "2017-08-02T00:58:30Z")
after i follow the CONTRIBUTING.md ,and i use this bath : npm run test .I got some error \[root@zk1 kibana\]# npm run test kibana@5.5.0 test /home/ftpadmin/data/kibana grunt test Running "test" task Running "eslint… --- ## [Rolling Restart -- Local Replicas do not reuse local data (2.4.2)](https://discuss.elastic.co/t/rolling-restart-local-replicas-do-not-reuse-local-data-2-4-2/90162)
**Author:** [@promiseofcake](https://discuss.elastic.co/u/promiseofcake)\ **Replies:** 4\ **Last updated:** [June 23, 2017, 4:41pm UTC](https://discuss.elastic.co/t/rolling-restart-local-replicas-do-not-reuse-local-data-2-4-2/90162 "2017-06-23T16:41:01Z")
We are in the process of doing some rolling restarts on our Elasticsearch data nodes and running into issues relating to shard recovery. When I performed an upgrade from 2.3.x to 2.4.2 we followed these steps and did n… --- ## [Wondering if Marvel is free for now?](https://discuss.elastic.co/t/wondering-if-marvel-is-free-for-now/37078)
**Author:** [@shilong](https://discuss.elastic.co/u/shilong)\ **Replies:** 4\ **Last updated:** [December 14, 2015, 7:20am UTC](https://discuss.elastic.co/t/wondering-if-marvel-is-free-for-now/37078 "2015-12-14T07:20:57Z")
Some one in this forum told me Marvel is free, but when I installed that I could see the free trail for 1 month yet? Any one can help me confirm? Thanks very much! --- ## [Ship logs of application using Filbeat](https://discuss.elastic.co/t/ship-logs-of-application-using-filbeat/307257)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 5\ **Last updated:** [July 6, 2022, 7:46am UTC](https://discuss.elastic.co/t/ship-logs-of-application-using-filbeat/307257 "2022-07-06T07:46:26Z")
Hi, I have a kubernetes cluster on which I have deployed the elastic stack using ECK. I have several microservices deployed in the cluster as pods and I want to fetch logs from particular microservice pods. Also I have… --- ## [Setting up Index Life Management](https://discuss.elastic.co/t/setting-up-index-life-management/300077)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 5\ **Last updated:** [March 21, 2022, 6:11pm UTC](https://discuss.elastic.co/t/setting-up-index-life-management/300077 "2022-03-21T18:11:00Z")
I use Logstash grok patterns to parse my logs. These logs are outputted to Elasticsearch in daily indexes. I want to create an index template to then apply to an ILM policy that will delete these logs after 60 days. Whe… --- ## [How to define scripted fields using scripts](https://discuss.elastic.co/t/how-to-define-scripted-fields-using-scripts/128101)
**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\ **Replies:** 5\ **Last updated:** [May 8, 2018, 11:11am UTC](https://discuss.elastic.co/t/how-to-define-scripted-fields-using-scripts/128101 "2018-05-08T11:11:46Z")
I have more than 10 scriped fields in kibana. i want to define each and every scripted field as we do in kibana but using some python or shell scripts. How can i achieve that? Thank You, Meet --- ## [Elasticsearch Update Doc String Replacement](https://discuss.elastic.co/t/elasticsearch-update-doc-string-replacement/120992)
**Author:** [@adityosn](https://discuss.elastic.co/u/adityosn)\ **Replies:** 5\ **Last updated:** [February 22, 2018, 11:14am UTC](https://discuss.elastic.co/t/elasticsearch-update-doc-string-replacement/120992 "2018-02-22T11:14:34Z")
I have some documents on my Elasticsearch. I want to update my document contents by using String Regexp. For example, I would like to replace all http words into https words with in a paragraph, is it possible ? Thank … --- ## [Elastic Cluster from Azure market place](https://discuss.elastic.co/t/elastic-cluster-from-azure-market-place/108244)
**Author:** [@HeadScratcher](https://discuss.elastic.co/u/HeadScratcher)\ **Replies:** 5\ **Last updated:** [November 18, 2017, 7:04pm UTC](https://discuss.elastic.co/t/elastic-cluster-from-azure-market-place/108244 "2017-11-18T19:04:38Z")
Hello all, Been a while since i posted here, but i got a bit of a head scratcher. i went and tested this rollout https://azuremarketplace.microsoft.com/en-us/marketplace/apps/elastic.elasticsearch?tab=Overview and it … --- ## [Possible to create a single facet covering multiple fields?](https://discuss.elastic.co/t/possible-to-create-a-single-facet-covering-multiple-fields/5577)
**Author:** [@datadev](https://discuss.elastic.co/u/datadev)\ **Replies:** 5\ **Last updated:** [October 14, 2011, 2:07pm UTC](https://discuss.elastic.co/t/possible-to-create-a-single-facet-covering-multiple-fields/5577 "2011-10-14T14:07:46Z")
Suppose I have the following index comprised of 3 documents: foo:A, bar:X foo:B, bar:X foo:C, bar:Y The use case requires that I retrieve a facet on foo with the following counts: A-X: 1 B-X: 1 C-Y:1 Basic… --- ## [Filebeat won't load input](https://discuss.elastic.co/t/filebeat-wont-load-input/210181)
**Author:** [@Sams](https://discuss.elastic.co/u/Sams)\ **Replies:** 0\ **Last updated:** [December 2, 2019, 12:34pm UTC](https://discuss.elastic.co/t/filebeat-wont-load-input/210181 "2019-12-02T12:34:09Z")
filebeat parse my input to logstash and logstash parse it to elastic. but filebeat loading inouts =0. this is my filebeat.yaml filebeat.config.modules: path: "${path.config}/modules.d/\*.yml" reload.enabled: true … --- ## [APM Integration Issue](https://discuss.elastic.co/t/apm-integration-issue/345468)
**Author:** [@fenixon](https://discuss.elastic.co/u/fenixon)\ **Replies:** 1\ **Last updated:** [October 23, 2023, 1:55am UTC](https://discuss.elastic.co/t/apm-integration-issue/345468 "2023-10-23T01:55:10Z")
{"log.level":"error","@timestamp":"2023-10-20T13:15:35.973Z","log.logger":"agentcfg","log.origin":{"file.name":"agentcfg/elasticsearch.go","file.line":134},"message":"refresh cache error: context deadline exceeded","serv… --- ## [Errors with High Level Rest Client After Upgrading to Elasticsearch 8.0.1](https://discuss.elastic.co/t/errors-with-high-level-rest-client-after-upgrading-to-elasticsearch-8-0-1/298972)
**Author:** [@chris.stack.bb](https://discuss.elastic.co/u/chris.stack.bb)\ **Replies:** 1\ **Last updated:** [March 7, 2022, 1:56pm UTC](https://discuss.elastic.co/t/errors-with-high-level-rest-client-after-upgrading-to-elasticsearch-8-0-1/298972 "2022-03-07T13:56:50Z")
Hello, After upgrading to Elasticsearch 8.0.1, I am having a variety of errors interfacing from my Java High Level Rest Client version 7.17.1 (originally tried with 7.15.2). The code now seems extremely sensitive to nul… --- ## [DNS lookup failure "X.X.X": lookup X.X.X on \[::1\]:53: dial udp \[::1\]:53: socket: too many open files](https://discuss.elastic.co/t/dns-lookup-failure-x-x-x-lookup-x-x-x-on-1-dial-udp-1-socket-too-many-open-files/168667)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [February 25, 2019, 7:47pm UTC](https://discuss.elastic.co/t/dns-lookup-failure-x-x-x-lookup-x-x-x-on-1-dial-udp-1-socket-too-many-open-files/168667 "2019-02-25T19:47:43Z")
Hello World! I'm using Elastic stack 6.6.1 and my metricbeat worked fine for a while, then it stopped on it's own and I'm seeing following error in /var/log/metricbeat/metricbeat: 2019-02-16T04:36:05.176Z WARN transpor… --- ## [Performance of Packetbeat?](https://discuss.elastic.co/t/performance-of-packetbeat/116022)
**Author:** [@foxfire881](https://discuss.elastic.co/u/foxfire881)\ **Replies:** 1\ **Last updated:** [January 23, 2018, 4:35pm UTC](https://discuss.elastic.co/t/performance-of-packetbeat/116022 "2018-01-23T16:35:27Z")
hi，in our network we use packetbeat with 'af\_packet' mode on readhat 6.5 (22 core CPU, 768G memory, 16 SATA disks, 10Gbs NIC) to analyze HTTP traffic which is about 4Gbps, and we find that it does not work very well, t… --- ## [Match VS term Query on keyword datatype](https://discuss.elastic.co/t/match-vs-term-query-on-keyword-datatype/82952)
**Author:** [@Rory](https://discuss.elastic.co/u/Rory)\ **Replies:** 1\ **Last updated:** [April 21, 2017, 8:16am UTC](https://discuss.elastic.co/t/match-vs-term-query-on-keyword-datatype/82952 "2017-04-21T08:16:40Z")
Hi All, I know this sounds like a dumb question. If I store a field with type as keyword, will it matter if I perform a match or term query to find exact matches. Will both of them work the same? If no, which one wil… --- ## [Integration of Hive and Elasticsearch on cloudera Hadoop hive version 1.1.0](https://discuss.elastic.co/t/integration-of-hive-and-elasticsearch-on-cloudera-hadoop-hive-version-1-1-0/59403)
**Author:** [@ppramanick](https://discuss.elastic.co/u/ppramanick)\ **Replies:** 1\ **Last updated:** [April 12, 2017, 10:10pm UTC](https://discuss.elastic.co/t/integration-of-hive-and-elasticsearch-on-cloudera-hadoop-hive-version-1-1-0/59403 "2017-04-12T22:10:34Z")
What I am trying to Integrate Hive and Elasticsearch ,I am getting the below issue ,Please allow me to explain as below :- Hive version is my centos Hive 1.1.0-cdh5.8.0 Elasticsearch version elasticsearch-2.3.5 I… --- ## [Searching special characters !, $, #, @](https://discuss.elastic.co/t/searching-special-characters/322727)
**Author:** [@oktaykalfa](https://discuss.elastic.co/u/oktaykalfa)\ **Replies:** 2\ **Last updated:** [January 10, 2023, 1:43pm UTC](https://discuss.elastic.co/t/searching-special-characters/322727 "2023-01-10T13:43:37Z")
Hello, My config is be like in the following and i want to search special characters like !, $, @, # too. class ConversationIndexConfigurator extends IndexConfigurator { use Migratable; protected $name = 'conv… --- ## [Performance: Sorting / Filtering by runtime fields](https://discuss.elastic.co/t/performance-sorting-filtering-by-runtime-fields/320540)
**Author:** [@kennyprisjakt](https://discuss.elastic.co/u/kennyprisjakt)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 9:58am UTC](https://discuss.elastic.co/t/performance-sorting-filtering-by-runtime-fields/320540 "2022-12-08T09:58:38Z")
Hey, I'm looking into getting price conversions up to date in my indices. Price data: Updated index time Price conversions: Updated in query time (via runtime fields) The data for the currency conversion changes ofte… --- ## [ElasticSeach SSL Signed overrun error](https://discuss.elastic.co/t/elasticseach-ssl-signed-overrun-error/293071)
**Author:** [@a09hopper](https://discuss.elastic.co/u/a09hopper)\ **Replies:** 2\ **Last updated:** [December 28, 2021, 10:39pm UTC](https://discuss.elastic.co/t/elasticseach-ssl-signed-overrun-error/293071 "2021-12-28T22:39:31Z")
Searching around I have not seen anyone run into this error. I am using Elasticsearch 7.16.2 with a Windows CA, I request a CSR and then sign it with the Windows web enrolment under the web server setting, the followin… --- ## [Watcher trigger on sub-bucket count](https://discuss.elastic.co/t/watcher-trigger-on-sub-bucket-count/173817)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 2\ **Last updated:** [March 26, 2019, 12:35pm UTC](https://discuss.elastic.co/t/watcher-trigger-on-sub-bucket-count/173817 "2019-03-26T12:35:51Z")
I am trying to create a watch that will trigger on a couple aggregations. Below is the results of my query and I have essentially two buckets. I'm looking to trigger on the unique count of the sub-buckets in this case is… --- ## [HTTP Security Header Not Detected Vulnerability](https://discuss.elastic.co/t/http-security-header-not-detected-vulnerability/109339)
**Author:** [@Rachit\_Mohan\_Garg](https://discuss.elastic.co/u/Rachit_Mohan_Garg)\ **Replies:** 2\ **Last updated:** [November 28, 2017, 8:46am UTC](https://discuss.elastic.co/t/http-security-header-not-detected-vulnerability/109339 "2017-11-28T08:46:01Z")
Our vulnerability scanning tool, the absence of the following HTTP headers X-Frame-Options, X-XSS-Protection, X-Content-Type-Options has been reported. I want to know how we can rectify this? Is it fixed in the upgraded … --- ## [Unassigned shards in 10 node cluster?](https://discuss.elastic.co/t/unassigned-shards-in-10-node-cluster/70049)
**Author:** [@ivten](https://discuss.elastic.co/u/ivten)\ **Replies:** 2\ **Last updated:** [December 27, 2016, 9:01am UTC](https://discuss.elastic.co/t/unassigned-shards-in-10-node-cluster/70049 "2016-12-27T09:01:52Z")
Hi, I have a ELK setup with 10 node elasticsearch cluster (1 master, 1 coordinator/ingest and 8 data nodes). It all works fine, but today I noticed that the cluster health is yellow showing that there are unassigned sh… --- ## [Moving from Logstash to Filebeat =\> no duplicate log](https://discuss.elastic.co/t/moving-from-logstash-to-filebeat-no-duplicate-log/68278)
**Author:** [@Nicolas\_Guyomar](https://discuss.elastic.co/u/Nicolas_Guyomar)\ **Replies:** 2\ **Last updated:** [December 7, 2016, 1:02pm UTC](https://discuss.elastic.co/t/moving-from-logstash-to-filebeat-no-duplicate-log/68278 "2016-12-07T13:02:14Z")
Hi everyone, I would like to move from logstash as a log shipper, to filebeat. I'm using the logstash file input plugin to collect logs, same thing with filebeat, to send everything to a centralized logstash-shipper … --- ## [Issues with process monitoration](https://discuss.elastic.co/t/issues-with-process-monitoration/64287)
**Author:** [@poiati](https://discuss.elastic.co/u/poiati)\ **Replies:** 2\ **Last updated:** [November 8, 2016, 8:28pm UTC](https://discuss.elastic.co/t/issues-with-process-monitoration/64287 "2016-11-08T20:28:35Z")
Hello, I'm using Metricbeat to collect processes data. While aggregating to show the avg. memory usage per process for example I could use one of the properties bellow to split the data per row (terms): system.proce… --- ## [Indexing same field twice is not working](https://discuss.elastic.co/t/indexing-same-field-twice-is-not-working/44035)
**Author:** [@stevebissett](https://discuss.elastic.co/u/stevebissett)\ **Replies:** 2\ **Last updated:** [March 12, 2016, 2:26am UTC](https://discuss.elastic.co/t/indexing-same-field-twice-is-not-working/44035 "2016-03-12T02:26:30Z")
I have the following Ruby code to define my index: self.client.indices.create index: self.index, body: { settings: { … --- ## [Using pagination to divide chart](https://discuss.elastic.co/t/using-pagination-to-divide-chart/27184)
**Author:** [@rcazorla](https://discuss.elastic.co/u/rcazorla)\ **Replies:** 2\ **Last updated:** [August 12, 2015, 9:05am UTC](https://discuss.elastic.co/t/using-pagination-to-divide-chart/27184 "2015-08-12T09:05:47Z")
Hello, I'm currently working with a bunch of data and I would like to do pagined-like chart. To be more precise I would like, for example, my top 5 data on a first pie chart and the sixth to the tenth on another one. … --- ## [Intersection between any documents](https://discuss.elastic.co/t/intersection-between-any-documents/22735)
**Author:** [@Phil\_2](https://discuss.elastic.co/u/Phil_2)\ **Replies:** 2\ **Last updated:** [March 18, 2015, 7:01pm UTC](https://discuss.elastic.co/t/intersection-between-any-documents/22735 "2015-03-18T19:01:33Z")
I'm trying to wrap my head around this but it may not be possible due to the nature of ES. I have an index of appointments with start time, end time, location and participants. I'd like to search for \*any \*appoint… --- ## [Http input plugin is throwing errors](https://discuss.elastic.co/t/http-input-plugin-is-throwing-errors/252970)
**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\ **Replies:** 3\ **Last updated:** [October 24, 2020, 9:53am UTC](https://discuss.elastic.co/t/http-input-plugin-is-throwing-errors/252970 "2020-10-24T09:53:05Z")
Still in the initial steps of learning Logstash. I have written the following pipeline in a configuration file: input { stdin { codec =\> json } http { } } output { stdout{ codec =\> rubydebug } } When I run logs… --- ## [How can I calculate difference of count from last day with TSVB metrics?](https://discuss.elastic.co/t/how-can-i-calculate-difference-of-count-from-last-day-with-tsvb-metrics/234062)
**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\ **Replies:** 3\ **Last updated:** [June 3, 2020, 7:01pm UTC](https://discuss.elastic.co/t/how-can-i-calculate-difference-of-count-from-last-day-with-tsvb-metrics/234062 "2020-06-03T19:01:39Z")
Hello I as trying to use derivative of count to calculate difference between count from today and yesterday, but the value shown is 0 Could you help me? Thank you Hugo --- ## [Elasticsearch Search data](https://discuss.elastic.co/t/elasticsearch-search-data/205148)
**Author:** [@anand1](https://discuss.elastic.co/u/anand1)\ **Replies:** 3\ **Last updated:** [November 12, 2019, 1:34am UTC](https://discuss.elastic.co/t/elasticsearch-search-data/205148 "2019-11-12T01:34:36Z")
Hi All, I am new to Elasticsearch. I have created the below indexes and have pushed the same document to both the indexes. Only the difference is index settings that is first index has five shards and second index has o… --- ## [Match\_phrase not giving expected output](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560)
**Author:** [@sanjaykirushnan](https://discuss.elastic.co/u/sanjaykirushnan)\ **Replies:** 3\ **Last updated:** [May 6, 2019, 12:22pm UTC](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560 "2019-05-06T12:22:12Z")
This is my sample json in elastic search { "\_index": "logstash-dds-2019.05.03", "\_type": "dds\_next", "\_id": "AWp-Y\_-uIGa9uJGBjmoM", "\_version": 1, "\_score": null, "\_source": { "runDateTime": "2019-05-03… --- ## [Filebeat "fatal error: concurrent map iteration and map write"](https://discuss.elastic.co/t/filebeat-fatal-error-concurrent-map-iteration-and-map-write/150736)
**Author:** [@shoffmeister](https://discuss.elastic.co/u/shoffmeister)\ **Replies:** 3\ **Last updated:** [October 2, 2018, 6:03pm UTC](https://discuss.elastic.co/t/filebeat-fatal-error-concurrent-map-iteration-and-map-write/150736 "2018-10-02T18:03:03Z")
Hi, on startup of the filebeat 6.4.0 docker image I get "fatal error: concurrent map iteration and map write" I am aware of the thread Filebeat Autodiscover gives fatal error: concurrent map iteration and map write whi… --- ## [Persistent Queues delay output](https://discuss.elastic.co/t/persistent-queues-delay-output/123255)
**Author:** [@Hai](https://discuss.elastic.co/u/Hai)\ **Replies:** 3\ **Last updated:** [March 13, 2018, 3:47am UTC](https://discuss.elastic.co/t/persistent-queues-delay-output/123255 "2018-03-13T03:47:12Z")
when logstash enable queue.type: persisted, other parameters is default, i found logstash output very slow, but queue has buffered hundreds of megabytes of data. from visualize i got follow pic, normally data jitter fr… --- ## [How to calculate the overlap / elapsed time range in elasticsearch?](https://discuss.elastic.co/t/how-to-calculate-the-overlap-elapsed-time-range-in-elasticsearch/108301)
**Author:** [@betimer](https://discuss.elastic.co/u/betimer)\ **Replies:** 3\ **Last updated:** [November 22, 2017, 2:58am UTC](https://discuss.elastic.co/t/how-to-calculate-the-overlap-elapsed-time-range-in-elasticsearch/108301 "2017-11-22T02:58:34Z")
Hi, I have around million records in ES, they are different online meeting records that people join/leave at the different time. {name:"p1", join:'2017-11-17T00:01:00.293Z', leave: "2017-11-17T00:06:00.293Z"} {name:"p2… --- ## [HDFS snapshot java access denied](https://discuss.elastic.co/t/hdfs-snapshot-java-access-denied/100397)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 3\ **Last updated:** [October 4, 2017, 1:19pm UTC](https://discuss.elastic.co/t/hdfs-snapshot-java-access-denied/100397 "2017-10-04T13:19:40Z")
Hi, I'm trying to setup HDFS as a snapshot respository. I'm able to create the repo. But upon creating the first snapshot, I'm getting these errors. "shards": { "0": { "stage": "FAILURE", "stats": { "number\_of\_fi… --- ## [Set maximum shards for all indices on one specific node](https://discuss.elastic.co/t/set-maximum-shards-for-all-indices-on-one-specific-node/99684)
**Author:** [@oranciog](https://discuss.elastic.co/u/oranciog)\ **Replies:** 3\ **Last updated:** [September 7, 2017, 12:05pm UTC](https://discuss.elastic.co/t/set-maximum-shards-for-all-indices-on-one-specific-node/99684 "2017-09-07T12:05:40Z")
Hello! Is there any settings that specify the maximum number of shards for all indexes for one node? My simplified scenario is that I have two machines, one with 8 CPUs and one with 4 CPUs, and one index with 10 shards… --- ## [How to filter uwsgi logs on the basis of date specified inside logs](https://discuss.elastic.co/t/how-to-filter-uwsgi-logs-on-the-basis-of-date-specified-inside-logs/65308)
**Author:** [@sumitgupta0001](https://discuss.elastic.co/u/sumitgupta0001)\ **Replies:** 3\ **Last updated:** [November 8, 2016, 9:31am UTC](https://discuss.elastic.co/t/how-to-filter-uwsgi-logs-on-the-basis-of-date-specified-inside-logs/65308 "2016-11-08T09:31:24Z")
\[pid: 5413|app: 0|req: 374528/2711349\] 107.167.105.4 () {82 vars in 1747 bytes} \[Tue Nov 8 11:47:28 2016\] GET /api/v1/core/capturedata/?tag\_id=a1aa493710fc4584aafd4c066119e6a0&cid=a762b82eba66493694058cf4602f6e5a =\> ge… --- ## [Watcher Queries](https://discuss.elastic.co/t/watcher-queries/44465)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 3\ **Last updated:** [March 17, 2016, 12:26pm UTC](https://discuss.elastic.co/t/watcher-queries/44465 "2016-03-17T12:26:03Z")
Hi, Please suggest where can i find sample queries on beats (topbeat,packetbeat, filebeat (message)). I am looking for cpu,disk, 4xx etc. alerts. Regards... --- ## [With terms aggregations, should fields be marked store:true?](https://discuss.elastic.co/t/with-terms-aggregations-should-fields-be-marked-store-true/40096)
**Author:** [@Andrew\_McFague](https://discuss.elastic.co/u/Andrew_McFague)\ **Replies:** 3\ **Last updated:** [January 28, 2016, 8:04pm UTC](https://discuss.elastic.co/t/with-terms-aggregations-should-fields-be-marked-store-true/40096 "2016-01-28T20:04:17Z")
I have billions of documents and am trying to do a Terms Aggregation on a string field. The field is not analyzed. However, when I try to perform the aggregation, it uses a significant amount of heap on my "aggregator"… --- ## [Geo\_point not plotted correctly on tile map](https://discuss.elastic.co/t/geo-point-not-plotted-correctly-on-tile-map/29325)
**Author:** [@pontipine](https://discuss.elastic.co/u/pontipine)\ **Replies:** 3\ **Last updated:** [November 12, 2015, 7:34pm UTC](https://discuss.elastic.co/t/geo-point-not-plotted-correctly-on-tile-map/29325 "2015-11-12T19:34:13Z")
Hi Kibana v4.1.1 is showing two geo\_point fields in my index, called geo1 and geo1. 1 document I have in there have both fields, which when put into any other map plot correctly to London, UK and Surrey, UK. However w… --- ## [Security tab not display under Stack Management after security setup](https://discuss.elastic.co/t/security-tab-not-display-under-stack-management-after-security-setup/243418)
**Author:** [@aaristotle](https://discuss.elastic.co/u/aaristotle)\ **Replies:** 6\ **Last updated:** [August 3, 2020, 11:01pm UTC](https://discuss.elastic.co/t/security-tab-not-display-under-stack-management-after-security-setup/243418 "2020-08-03T23:01:22Z")
Hello, I am new to Elastic Stack, i have setup security in version 7.7.1 of Eleasticsearch and Kibana, but recently i did that in version 7.8.1 but i can't see the security tab that use to be under stack management in th… --- ## [Number of Replicas is always 1 by default](https://discuss.elastic.co/t/number-of-replicas-is-always-1-by-default/148064)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 6\ **Last updated:** [September 11, 2018, 8:21am UTC](https://discuss.elastic.co/t/number-of-replicas-is-always-1-by-default/148064 "2018-09-11T08:21:32Z")
All our indices were "yellow" and we discovered it's because the number of replicas was set to 1. When we update the number of replicas to 0 the indexes are green. Because we periodically re-create our indices and re-in… --- ## [Slow bulk indexing with lots of different 'types'](https://discuss.elastic.co/t/slow-bulk-indexing-with-lots-of-different-types/63185)
**Author:** [@saucam](https://discuss.elastic.co/u/saucam)\ **Replies:** 6\ **Last updated:** [October 17, 2016, 11:55am UTC](https://discuss.elastic.co/t/slow-bulk-indexing-with-lots-of-different-types/63185 "2016-10-17T11:55:56Z")
Hi all, I have been trying to index data into elasticsearch using bulk index api. I am using elastic4s to construct the bulk query and execute using the client which uses java api under the hood. I have a 5 node elas… --- ## [Using pre-configured email connector instead of using configured email connector](https://discuss.elastic.co/t/using-pre-configured-email-connector-instead-of-using-configured-email-connector/291720)
**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\ **Replies:** 4\ **Last updated:** [December 16, 2021, 7:24am UTC](https://discuss.elastic.co/t/using-pre-configured-email-connector-instead-of-using-configured-email-connector/291720 "2021-12-16T07:24:58Z")
Hi, I am working on watcher emails. Configured a connector in "Rules and Connectors" I have validated the connector validation by test email. I am able to receive the email from the Test tab by clicking on the "Run" bu… --- ## [Kibana cannot perform migrations due to validation error](https://discuss.elastic.co/t/kibana-cannot-perform-migrations-due-to-validation-error/278678)
**Author:** [@dbernard](https://discuss.elastic.co/u/dbernard)\ **Replies:** 4\ **Last updated:** [July 15, 2021, 3:13pm UTC](https://discuss.elastic.co/t/kibana-cannot-perform-migrations-due-to-validation-error/278678 "2021-07-15T15:13:26Z")
Kibana is unable to perform migrations and then reports it cannot connect to elastic search. elasticsearch is running locally. Upgrading to 7.11.2 elasticsearch and kibana. "type":"log","@timestamp":"2021-07-14T14:02:… --- ## [Intercept specific Request/Response](https://discuss.elastic.co/t/intercept-specific-request-response/243829)
**Author:** [@koyassan](https://discuss.elastic.co/u/koyassan)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 1:44pm UTC](https://discuss.elastic.co/t/intercept-specific-request-response/243829 "2020-08-12T13:44:20Z")
Hi guys, I'm trying to develop a plugin that intercept some specific requests, such as /some/api/request. My main goal is intercept the payload and the response of that request. I'm thinking about add these script in so… --- ## [Metricbeat does not write data to elasticsearch](https://discuss.elastic.co/t/metricbeat-does-not-write-data-to-elasticsearch/147488)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 4\ **Last updated:** [September 12, 2018, 4:32am UTC](https://discuss.elastic.co/t/metricbeat-does-not-write-data-to-elasticsearch/147488 "2018-09-12T04:32:24Z")
Hello, I have a newly installed metricbeat with the latest version elasticsearch upgraded to the latest version. I started metricbeat I can see in the logs that it's gathering data however the data is not loaded into el… --- ## [Async Replication across Clusters in separate Data Center's](https://discuss.elastic.co/t/async-replication-across-clusters-in-separate-data-centers/98419)
**Author:** [@Sunny\_Goel](https://discuss.elastic.co/u/Sunny_Goel)\ **Replies:** 4\ **Last updated:** [August 27, 2017, 10:06pm UTC](https://discuss.elastic.co/t/async-replication-across-clusters-in-separate-data-centers/98419 "2017-08-27T22:06:35Z")
Hi, We are presently running ES v 2.4.1 so wanted to check, does that support Async replication across clusters or not ? Currently we’re loading data in all production clusters separately via. IIB. What’s the best sol… --- ## [How to change default center point and zoom level in Region Maps?](https://discuss.elastic.co/t/how-to-change-default-center-point-and-zoom-level-in-region-maps/95165)
**Author:** [@ICG](https://discuss.elastic.co/u/ICG)\ **Replies:** 4\ **Last updated:** [August 4, 2017, 6:21am UTC](https://discuss.elastic.co/t/how-to-change-default-center-point-and-zoom-level-in-region-maps/95165 "2017-08-04T06:21:19Z")
I created Region Map to show states of US. By default, when I open a dashboard, the map always shows North Africa area and I should manually scroll the map to US. Is it possible to change the default center of the map in… [Previous page](https://discuss.elastic.co/top.md?page=1269&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1271&per_page=50&period=all)