# Top

**URL:** https://discuss.elastic.co/top.md?page=1272&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1273

---

## [Error from NodeJS APM package: "APM Server transport error: error fetching APM Server version"](https://discuss.elastic.co/t/error-from-nodejs-apm-package-apm-server-transport-error-error-fetching-apm-server-version/326707)

<div class="topic-metadata">

**Author:** [@pocketcolin](https://discuss.elastic.co/u/pocketcolin)\
**Replies:** 2\
**Last updated:** [March 6, 2023, 3:05pm UTC](https://discuss.elastic.co/t/error-from-nodejs-apm-package-apm-server-transport-error-error-fetching-apm-server-version/326707 "2023-03-06T15:05:52Z")

</div>

This error is showing up when my server first starts up and initializes the APM service. It doesn't actually cause any issues from what I can tell and the APM starts up fine, but I'd love to understand why it's throwing …

---

## [Elasticsearch is not starting for Search Guard error](https://discuss.elastic.co/t/elasticsearch-is-not-starting-for-search-guard-error/239909)

<div class="topic-metadata">

**Author:** [@Mahathir\_Mohammad](https://discuss.elastic.co/u/Mahathir_Mohammad)\
**Replies:** 2\
**Last updated:** [July 6, 2020, 9:59am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting-for-search-guard-error/239909 "2020-07-06T09:59:42Z")

</div>

I'm trying to configure Search Guard admin. here is my elasticsearch.yml configurations: searchguard.ssl.transport.pemcert\_filepath: /home/rsa-key-20200528/search-guard-ssl-master/example-pki-scripts/node-0.crt.pem sear…

---

## [How to split gauge by more than one group](https://discuss.elastic.co/t/how-to-split-gauge-by-more-than-one-group/113283)

<div class="topic-metadata">

**Author:** [@davidv](https://discuss.elastic.co/u/davidv)\
**Replies:** 2\
**Last updated:** [December 28, 2017, 7:34am UTC](https://discuss.elastic.co/t/how-to-split-gauge-by-more-than-one-group/113283 "2017-12-28T07:34:54Z")

</div>

Hi, I have the following document example for my disk\_size index. {"available": "156", "node": "aio3", "used": "121", "use\_precent": "59", "filesystem": "/dev/vdc1", "collection\_id": "1001", "mounted on": …

---

## [X-Pack -"Monitoring: Error 400 Bad Request: Request Timeout after 60000ms"](https://discuss.elastic.co/t/x-pack-monitoring-error-400-bad-request-request-timeout-after-60000ms/84808)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 2\
**Last updated:** [May 11, 2017, 9:30pm UTC](https://discuss.elastic.co/t/x-pack-monitoring-error-400-bad-request-request-timeout-after-60000ms/84808 "2017-05-11T21:30:39Z")

</div>

Hi. Got a problem where when I click on the monitoring icon I get the dreaded red bar fatal error... Fatal Error Monitoring: Error 400 Bad Request: Request Timeout after 60000ms Version: 5.3.1 Build: 14844 Can anybo…

---

## [Filebeat output.kafka load balancer vip](https://discuss.elastic.co/t/filebeat-output-kafka-load-balancer-vip/79641)

<div class="topic-metadata">

**Author:** [@sdiver78](https://discuss.elastic.co/u/sdiver78)\
**Replies:** 2\
**Last updated:** [March 28, 2017, 8:04am UTC](https://discuss.elastic.co/t/filebeat-output-kafka-load-balancer-vip/79641 "2017-03-28T08:04:57Z")

</div>

Looking at using the latest filebeat-5.2.2-1 (as of post) and using the output.kafka option. The Kafka "hosts" - brokers for reading cluster metadata - pointed to a VIP on a hardware load balancer which is the front-end …

---

## [Issue changing value of JSON field in logstash](https://discuss.elastic.co/t/issue-changing-value-of-json-field-in-logstash/52309)

<div class="topic-metadata">

**Author:** [@Mick\_Mahoney](https://discuss.elastic.co/u/Mick_Mahoney)\
**Replies:** 2\
**Last updated:** [June 10, 2016, 7:33am UTC](https://discuss.elastic.co/t/issue-changing-value-of-json-field-in-logstash/52309 "2016-06-10T07:33:46Z")

</div>

Hi, I'm trying to change a value in logstash of JSON which has been generated by Topbeat Below are the input file name, the logstash filter, and the error that I am getting Can anyone spot why I'm getting the error…

---

## [Get search results count using Elasticsearch input plugin](https://discuss.elastic.co/t/get-search-results-count-using-elasticsearch-input-plugin/216762)

<div class="topic-metadata">

**Author:** [@saijana](https://discuss.elastic.co/u/saijana)\
**Replies:** 0\
**Last updated:** [January 28, 2020, 6:31am UTC](https://discuss.elastic.co/t/get-search-results-count-using-elasticsearch-input-plugin/216762 "2020-01-28T06:31:38Z")

</div>

Hi, Is it possible to get the count of the query using elasticsearch input plugin. elasticsearch { hosts =\> "local:9200" index =\> "test\*" size =\> 500 scroll =\> "2m" }

---

## [Multiple scatter plots (with different combinations of x and y values) in single graph](https://discuss.elastic.co/t/multiple-scatter-plots-with-different-combinations-of-x-and-y-values-in-single-graph/169760)

<div class="topic-metadata">

**Author:** [@ewerkema](https://discuss.elastic.co/u/ewerkema)\
**Replies:** 0\
**Last updated:** [February 25, 2019, 7:30am UTC](https://discuss.elastic.co/t/multiple-scatter-plots-with-different-combinations-of-x-and-y-values-in-single-graph/169760 "2019-02-25T07:30:27Z")

</div>

Hi, I was wondering if it is possible to combine multiple scatter plots, of each different combinations of x and y values, into a single graph. To illustrate the problem I have a dataset that contains velocities and a F…

---

## [A cool use case of Elasticsearch](https://discuss.elastic.co/t/a-cool-use-case-of-elasticsearch/133366)

<div class="topic-metadata">

**Author:** [@Sheker](https://discuss.elastic.co/u/Sheker)\
**Replies:** 0\
**Last updated:** [May 25, 2018, 9:44pm UTC](https://discuss.elastic.co/t/a-cool-use-case-of-elasticsearch/133366 "2018-05-25T21:44:25Z")

</div>

Very interesting. Combines free text search, highlighting, geolocation and basically all the good stuff in elasticsearch. search page: https://copernix.io examples: https://copernix.io/about

---

## [Hot-cold setup](https://discuss.elastic.co/t/hot-cold-setup/246858)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [September 1, 2020, 7:53pm UTC](https://discuss.elastic.co/t/hot-cold-setup/246858 "2020-09-01T19:53:07Z")

</div>

I have running cluster, five data node with node.attr.box\_type: hot now I would like to introduce cold storage as well I have a node which I will be using as cold storage node.attr.box\_type: cold but most all my i…

---

## [Logstash reads my entry 2 times (or more)](https://discuss.elastic.co/t/logstash-reads-my-entry-2-times-or-more/29039)

<div class="topic-metadata">

**Author:** [@Hornov](https://discuss.elastic.co/u/Hornov)\
**Replies:** 2\
**Last updated:** [September 11, 2015, 8:44am UTC](https://discuss.elastic.co/t/logstash-reads-my-entry-2-times-or-more/29039 "2015-09-11T08:44:23Z")

</div>

When I use elasticsearch input, sometimes logstash refers several times my result in succession. I don't understand why. Sometimes it works, sometimes not and nevertheless neither my configuration nor my data changed.

---

## [Вопрос по дата нодам](https://discuss.elastic.co/t/topic/323849)

<div class="topic-metadata">

**Author:** [@freeman999](https://discuss.elastic.co/u/freeman999)\
**Replies:** 7\
**Last updated:** [January 25, 2023, 3:31pm UTC](https://discuss.elastic.co/t/topic/323849 "2023-01-25T15:31:31Z")

</div>

добрый день, я в данной теме новенький и хочу уточнить пару моментов: правильно ли я понимаю что если у меня есть 2 дата ноды в кластере и каждый индекс имеем 1 праймери шард и один реплика шард то при выходе из строя …

---

## [Convert Number to String Kibana JSON Input](https://discuss.elastic.co/t/convert-number-to-string-kibana-json-input/221297)

<div class="topic-metadata">

**Author:** [@Yasir](https://discuss.elastic.co/u/Yasir)\
**Replies:** 1\
**Last updated:** [March 23, 2020, 4:02pm UTC](https://discuss.elastic.co/t/convert-number-to-string-kibana-json-input/221297 "2020-03-23T16:02:24Z")

</div>

Hello, I am trying to use translate in the JSON INPUT to convert ItemValue 0 to Test/String Healthy I have been trying to use painless in the JSON Input but for some reason it doesnt work. Not too familiar with Pain…

---

## [Sum aggregation is incorrect compare to scroll all docs to sum](https://discuss.elastic.co/t/sum-aggregation-is-incorrect-compare-to-scroll-all-docs-to-sum/213009)

<div class="topic-metadata">

**Author:** [@hackerwin7](https://discuss.elastic.co/u/hackerwin7)\
**Replies:** 7\
**Last updated:** [December 26, 2019, 1:08pm UTC](https://discuss.elastic.co/t/sum-aggregation-is-incorrect-compare-to-scroll-all-docs-to-sum/213009 "2019-12-26T13:08:51Z")

</div>

Hi, I discovered that a simple sum aggregation is different to that I write a code to scroll all documents and sum the field value. the value formula is always ${sum-aggregation-result} + 1 == ${scroll-sum} Elasticsea…

---

## [Java Agent for a Tomcat JVM](https://discuss.elastic.co/t/java-agent-for-a-tomcat-jvm/168197)

<div class="topic-metadata">

**Author:** [@Oliv](https://discuss.elastic.co/u/Oliv)\
**Replies:** 7\
**Last updated:** [February 14, 2019, 11:02am UTC](https://discuss.elastic.co/t/java-agent-for-a-tomcat-jvm/168197 "2019-02-14T11:02:44Z")

</div>

Hi, I'm trying to pass the jar file with a properties file. As I understood that this was possible. The properties file is in the same folder and named elasticapm.properties. How can I pass this file at the startup of…

---

## [Logstash input-\> file-\> path...Why the wildcard \* doesn't work?](https://discuss.elastic.co/t/logstash-input-file-path-why-the-wildcard-doesnt-work/130177)

<div class="topic-metadata">

**Author:** [@cuiyingjia](https://discuss.elastic.co/u/cuiyingjia)\
**Replies:** 1\
**Last updated:** [May 2, 2018, 6:06am UTC](https://discuss.elastic.co/t/logstash-input-file-path-why-the-wildcard-doesnt-work/130177 "2018-05-02T06:06:17Z")

</div>

I tried both on Windows7 and Windows10 , ELK are all latest version. If the file path is a specific file as below , it works: input{ file { path =\> "C:\\PATH\\Folder1\\Branch1\\target.log" start\_position =\> "begi…

---

## [Logstash S3 Input - How does it know where to start?](https://discuss.elastic.co/t/logstash-s3-input-how-does-it-know-where-to-start/127398)

<div class="topic-metadata">

**Author:** [@Shahzaib\_Gill](https://discuss.elastic.co/u/Shahzaib_Gill)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 12:39am UTC](https://discuss.elastic.co/t/logstash-s3-input-how-does-it-know-where-to-start/127398 "2018-04-10T00:39:20Z")

</div>

If I define an S3 bucket as input, and logstash processes a few before being turned off, how does it know where to begin so that it doesn't process the same data again? For example, if I have 2 files in my S3 bucket , an…

---

## [Not so painless script: max of time-series](https://discuss.elastic.co/t/not-so-painless-script-max-of-time-series/91449)

<div class="topic-metadata">

**Author:** [@gregbk](https://discuss.elastic.co/u/gregbk)\
**Replies:** 1\
**Last updated:** [July 7, 2017, 1:26pm UTC](https://discuss.elastic.co/t/not-so-painless-script-max-of-time-series/91449 "2017-07-07T13:26:21Z")

</div>

Hello, I have trouble finding documentation for paintless script. https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-scripting-painless.html I don't know java nor groovy. I just wanted to do a max …

---

## [Error on logstash during elasticsearch insert](https://discuss.elastic.co/t/error-on-logstash-during-elasticsearch-insert/68548)

<div class="topic-metadata">

**Author:** [@fdamico](https://discuss.elastic.co/u/fdamico)\
**Replies:** 1\
**Last updated:** [December 12, 2016, 4:28am UTC](https://discuss.elastic.co/t/error-on-logstash-during-elasticsearch-insert/68548 "2016-12-12T04:28:08Z")

</div>

Hi there I'm running locally Elastic Search 5.0.1 and Logstash 5.0.1. This is my logstash filter: input { file { path =\> "/Users/macosx/Desktop/logs/\*" start\_position =\> "beginning" ignore\_older =\> 0 …

---

## [How to support Bulk Delete in Es-hadoop?](https://discuss.elastic.co/t/how-to-support-bulk-delete-in-es-hadoop/65326)

<div class="topic-metadata">

**Author:** [@zhifengMaBeijing](https://discuss.elastic.co/u/zhifengMaBeijing)\
**Replies:** 1\
**Last updated:** [November 10, 2016, 6:18pm UTC](https://discuss.elastic.co/t/how-to-support-bulk-delete-in-es-hadoop/65326 "2016-11-10T18:18:51Z")

</div>

Hi All, My use case is as follows: I want to implement a BulkDelete with the help of ES-spark library which will be called by each partition. rdd.foreachpartition{ p=\> BulkDelete(index,type,p) } def BulkDelete…

---

## [Add filed inside of array](https://discuss.elastic.co/t/add-filed-inside-of-array/61899)

<div class="topic-metadata">

**Author:** [@dsever](https://discuss.elastic.co/u/dsever)\
**Replies:** 1\
**Last updated:** [September 30, 2016, 12:27pm UTC](https://discuss.elastic.co/t/add-filed-inside-of-array/61899 "2016-09-30T12:27:32Z")

</div>

Hi, I've run into situation that we need to insert new filed into json array, let say for instance: json alert:\[ {attrib1:"something",attrib2:"something"}, {attrib1:"somethingddd",attrib2:"somethingsss"}, …

---

## [Mute all bar one or two categories?](https://discuss.elastic.co/t/mute-all-bar-one-or-two-categories/24768)

<div class="topic-metadata">

**Author:** [@jmkgreen](https://discuss.elastic.co/u/jmkgreen)\
**Replies:** 1\
**Last updated:** [July 2, 2015, 11:38am UTC](https://discuss.elastic.co/t/mute-all-bar-one-or-two-categories/24768 "2015-07-02T11:38:33Z")

</div>

I originally signed up to the ElasticSearch Google Group mailing list. Now I'm signed up here yet I'm getting emails for all sorts of categories. I managed to mute those for native language and a couple of others but I…

---

## [Using something like ELB in front of ElasticSearch](https://discuss.elastic.co/t/using-something-like-elb-in-front-of-elasticsearch/2391)

<div class="topic-metadata">

**Author:** [@faitlezen](https://discuss.elastic.co/u/faitlezen)\
**Replies:** 1\
**Last updated:** [June 11, 2015, 12:58am UTC](https://discuss.elastic.co/t/using-something-like-elb-in-front-of-elasticsearch/2391 "2015-06-11T00:58:42Z")

</div>

I'm wondering what you guys think about using ELB (AWS Elastic Load Balancer) in front of ElasticSearch. I know I can create an ES node and turn it into a smart load balancer but it's not very cost effective if you want…

---

## [Getting exception "Timed out while waiting for a dynamic mapping update"](https://discuss.elastic.co/t/getting-exception-timed-out-while-waiting-for-a-dynamic-mapping-update/362719)

<div class="topic-metadata">

**Author:** [@sibasish.palo](https://discuss.elastic.co/u/sibasish.palo)\
**Replies:** 5\
**Last updated:** [July 15, 2024, 1:34pm UTC](https://discuss.elastic.co/t/getting-exception-timed-out-while-waiting-for-a-dynamic-mapping-update/362719 "2024-07-15T13:34:34Z")

</div>

Hi we have dynamic mappings for our indices, we are receiving below exception while bulk indexing using kafka-connect-elasticsearch plugin type: mapper\_exception, reason: timed out while waiting for a dynamic mapping u…

---

## [Failed to parse field \[document.error\] of type \[text\] in document](https://discuss.elastic.co/t/failed-to-parse-field-document-error-of-type-text-in-document/344108)

<div class="topic-metadata">

**Author:** [@Keremcan\_Seker](https://discuss.elastic.co/u/Keremcan_Seker)\
**Replies:** 5\
**Last updated:** [September 29, 2023, 12:19pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-document-error-of-type-text-in-document/344108 "2023-09-29T12:19:35Z")

</div>

I'm sending data to logstash through kafka python client. this is the object i send {"user\_id":"kafka12","service\_name":"kafka12","activity\_type":"kafka","error":{"message":"Invalid username","component\_id":"Y456"},"add…

---

## [Running queue tasks more than max queue capacity](https://discuss.elastic.co/t/running-queue-tasks-more-than-max-queue-capacity/316496)

<div class="topic-metadata">

**Author:** [@liuhuang9492](https://discuss.elastic.co/u/liuhuang9492)\
**Replies:** 5\
**Last updated:** [October 14, 2022, 6:13am UTC](https://discuss.elastic.co/t/running-queue-tasks-more-than-max-queue-capacity/316496 "2022-10-14T06:13:35Z")

</div>

version 6.3.2, elasticsearch, version 6.3.2, has 5 master nodes and 15 data nodes. The following problems occur in the log: Caused by: org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected ex…

---

## [Create bulkRequest using latest java API client(8.1.1) for list of products using builder lambda method](https://discuss.elastic.co/t/create-bulkrequest-using-latest-java-api-client-8-1-1-for-list-of-products-using-builder-lambda-method/301573)

<div class="topic-metadata">

**Author:** [@amitmbm](https://discuss.elastic.co/u/amitmbm)\
**Replies:** 5\
**Last updated:** [April 7, 2022, 10:49am UTC](https://discuss.elastic.co/t/create-bulkrequest-using-latest-java-api-client-8-1-1-for-list-of-products-using-builder-lambda-method/301573 "2022-04-07T10:49:49Z")

</div>

I am having a list of Products(for simplicity let's assume it has an id, brand, and name properties), and I want to index this list of products to Elasticsearch using java API client version 8.1.1. BulkRequest in java a…

---

## [Email not sent when inviting new users "block in start\_queue\_manager"](https://discuss.elastic.co/t/email-not-sent-when-inviting-new-users-block-in-start-queue-manager/267916)

<div class="topic-metadata">

**Author:** [@Patrice\_G](https://discuss.elastic.co/u/Patrice_G)\
**Replies:** 5\
**Last updated:** [March 26, 2021, 3:54pm UTC](https://discuss.elastic.co/t/email-not-sent-when-inviting-new-users-block-in-start-queue-manager/267916 "2021-03-26T15:54:57Z")

</div>

I try to invite users using app search/Users Invite user using the standard authentification mode. The invitation is shown as pending, and I tried to resend mail many times. Email is never received, I checked of course s…

---

## [Elastic machine learning on a different node but same server](https://discuss.elastic.co/t/elastic-machine-learning-on-a-different-node-but-same-server/264314)

<div class="topic-metadata">

**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\
**Replies:** 5\
**Last updated:** [February 22, 2021, 3:03pm UTC](https://discuss.elastic.co/t/elastic-machine-learning-on-a-different-node-but-same-server/264314 "2021-02-22T15:03:50Z")

</div>

Hi, I'm thinking about running two containers: elasticsearch master/data/ingest/ node -\> container A elasticsearch machine learning -\> container B but they must run on the same server. I think there might be two appr…

---

## [Adding Elasticsearch Node to ES Cluster](https://discuss.elastic.co/t/adding-elasticsearch-node-to-es-cluster/223969)

<div class="topic-metadata">

**Author:** [@heywoodlh](https://discuss.elastic.co/u/heywoodlh)\
**Replies:** 5\
**Last updated:** [March 17, 2020, 6:58pm UTC](https://discuss.elastic.co/t/adding-elasticsearch-node-to-es-cluster/223969 "2020-03-17T18:58:00Z")

</div>

Attempting to add an Elasticsearch node to my current single node cluster. However, I am running into issues adding the new node. I'm using Ansible to deploy the Elasticsearch Docker container so I'll just post the port…

---

## [Unable to start kibana server\[6.4.2\] using yarn in development mode](https://discuss.elastic.co/t/unable-to-start-kibana-server-6-4-2-using-yarn-in-development-mode/161130)

<div class="topic-metadata">

**Author:** [@mandritac](https://discuss.elastic.co/u/mandritac)\
**Replies:** 5\
**Last updated:** [December 24, 2018, 9:04am UTC](https://discuss.elastic.co/t/unable-to-start-kibana-server-6-4-2-using-yarn-in-development-mode/161130 "2018-12-24T09:04:38Z")

</div>

Hi, I have followed documentation - to setup kibana development environment for creating custom plugin. However the server crashes due to following error - \[oracle@obdcnode7 kibana\] yarn start yarn run v1.10.1 sh ./…

---

## [Index.translog.durability async](https://discuss.elastic.co/t/index-translog-durability-async/92646)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 5\
**Last updated:** [July 17, 2017, 8:15am UTC](https://discuss.elastic.co/t/index-translog-durability-async/92646 "2017-07-17T08:15:13Z")

</div>

In case an index.translog.durability is set to async and process is killed, but OS is up and running. Will there be any data loss? From what I understand, only in case of OS reboot/ power loss/ hardware issues, there wil…

---

## [Issue with OpenJDK Vulnerabilities (CVE-2024) in Elasticsearch 8.15.2](https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377328)

<div class="topic-metadata">

**Author:** [@debbbuu](https://discuss.elastic.co/u/debbbuu)\
**Replies:** 8\
**Last updated:** [April 23, 2025, 11:14am UTC](https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377328 "2025-04-23T11:14:19Z")

</div>

Hi, As part of the vulnerability assessment (VA) scan on our ELK servers, we identified that the OpenJDK version is affected by multiple vulnerabilities. We are using a self-managed cluster. We did upgrade the ELK stack…

---

## [Filebeat filestream with pipeline and multiline](https://discuss.elastic.co/t/filebeat-filestream-with-pipeline-and-multiline/335015)

<div class="topic-metadata">

**Author:** [@das](https://discuss.elastic.co/u/das)\
**Replies:** 3\
**Last updated:** [June 2, 2023, 1:12pm UTC](https://discuss.elastic.co/t/filebeat-filestream-with-pipeline-and-multiline/335015 "2023-06-02T13:12:44Z")

</div>

I have a log format I cannot change that leads into multiline messages. I have a Ingest Pipeline set up in Kibana that works just fine on sample records. My problem is that My multiline parser seems to be ignored (at lea…

---

## [Extract exctly/only json docs from ES Index into C# (NEST)](https://discuss.elastic.co/t/extract-exctly-only-json-docs-from-es-index-into-c-nest/273856)

<div class="topic-metadata">

**Author:** [@prgmrESNet](https://discuss.elastic.co/u/prgmrESNet)\
**Replies:** 3\
**Last updated:** [June 22, 2021, 12:55pm UTC](https://discuss.elastic.co/t/extract-exctly-only-json-docs-from-es-index-into-c-nest/273856 "2021-06-22T12:55:07Z")

</div>

Hello elastic.co, New user here, hence am learning the forum rules as well. Forum Admins, if this was asked previously, pardon me. I am an intermediate .Net C# programmer and novice ElasticSearch user. Here is my issu…

---

## [Can Active Master election priority be decided?](https://discuss.elastic.co/t/can-active-master-election-priority-be-decided/149669)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 3\
**Last updated:** [September 25, 2018, 5:22am UTC](https://discuss.elastic.co/t/can-active-master-election-priority-be-decided/149669 "2018-09-25T05:22:09Z")

</div>

My setup: 1 Master node: Low RAM and CPU machine 2 Coordinating nodes (also eligible masters): Highly configured machines 2 Data nodes (One Replica)(RAID-0) Issue: By the master election process, any of the Master o…

---

## [ES Spark API writing to a Cluster failes when connecting to CLient Node](https://discuss.elastic.co/t/es-spark-api-writing-to-a-cluster-failes-when-connecting-to-client-node/34697)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 3\
**Last updated:** [November 16, 2015, 6:28pm UTC](https://discuss.elastic.co/t/es-spark-api-writing-to-a-cluster-failes-when-connecting-to-client-node/34697 "2015-11-16T18:28:19Z")

</div>

Hi: I am trying to use the Spark API to write data from a file to an ES index. My ES Cluster config : 3 data nodes (with HTTP disabled) 2 Client nodes (with no data stored on the nodes). As I understand, the Sp…

---

## [\[Docker\] Documentation in https://github.com/elastic/stack-docker](https://discuss.elastic.co/t/docker-documentation-in-https-github-com-elastic-stack-docker/169537)

<div class="topic-metadata">

**Author:** [@mmonjas](https://discuss.elastic.co/u/mmonjas)\
**Replies:** 1\
**Last updated:** [March 6, 2019, 7:20pm UTC](https://discuss.elastic.co/t/docker-documentation-in-https-github-com-elastic-stack-docker/169537 "2019-03-06T19:20:29Z")

</div>

Hi there, I'm trying to use the Docker ensemble described in said github repo and I've finding several issues I'm not sure about how to sort out (I have a background in ES 5.6 and now am trying to catch up with the new v…

---

## [Recommend pls Elasticsearch courses or tutorials](https://discuss.elastic.co/t/recommend-pls-elasticsearch-courses-or-tutorials/305876)

<div class="topic-metadata">

**Author:** [@MarkDoronin](https://discuss.elastic.co/u/MarkDoronin)\
**Replies:** 1\
**Last updated:** [May 29, 2022, 3:03pm UTC](https://discuss.elastic.co/t/recommend-pls-elasticsearch-courses-or-tutorials/305876 "2022-05-29T15:03:58Z")

</div>

Help pls to choose an online course about Elasticsearch. I have found this list, but there are better options.

---

## [Optimal node roles for 100-node cluster](https://discuss.elastic.co/t/optimal-node-roles-for-100-node-cluster/298511)

<div class="topic-metadata">

**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\
**Replies:** 1\
**Last updated:** [March 1, 2022, 10:27pm UTC](https://discuss.elastic.co/t/optimal-node-roles-for-100-node-cluster/298511 "2022-03-01T22:27:38Z")

</div>

A cluster of 100 nodes was installed. We want it to serve as a search engine like Google. Servers are located in a data center. Raid-0 structure was preferred for the high-speed requirement. Query traffic will be more…

---

## [Understanding curator filters for aging out old indices](https://discuss.elastic.co/t/understanding-curator-filters-for-aging-out-old-indices/189862)

<div class="topic-metadata">

**Author:** [@luma](https://discuss.elastic.co/u/luma)\
**Replies:** 4\
**Last updated:** [July 11, 2019, 10:49am UTC](https://discuss.elastic.co/t/understanding-curator-filters-for-aging-out-old-indices/189862 "2019-07-11T10:49:02Z")

</div>

I'm running Elastic Stack 7.2 to support an ElastiFlow installation. In my use case the data being collected is ephemeral and I have no need to keep it longer than a few days. It appears that curator is the tool of cho…

---

## [ElasticSearch\[5.5\] Aggs Range filter on string datatype](https://discuss.elastic.co/t/elasticsearch-5-5-aggs-range-filter-on-string-datatype/106400)

<div class="topic-metadata">

**Author:** [@satz](https://discuss.elastic.co/u/satz)\
**Replies:** 4\
**Last updated:** [November 20, 2017, 6:21am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-aggs-range-filter-on-string-datatype/106400 "2017-11-20T06:21:58Z")

</div>

RAM field in Mobile specifications has lots of data which i need to apply some kind of Range filter on strings . I have formatted bucket into key value pair RAM and Doc count "RAM": { "1": 7, "32": 1, "32 MB": 490, …

---

## [Kibana crashes during search](https://discuss.elastic.co/t/kibana-crashes-during-search/59721)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 4\
**Last updated:** [September 6, 2016, 9:10pm UTC](https://discuss.elastic.co/t/kibana-crashes-during-search/59721 "2016-09-06T21:10:24Z")

</div>

Steps to repeat this issue - Open Kibana and search for a text. Once the search is completed, click inside the search bar on the previously text. Kibana reloads. Is there any fix for this issue because it is really…

---

## [Identifying fields using sprintf](https://discuss.elastic.co/t/identifying-fields-using-sprintf/47941)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 4\
**Last updated:** [April 21, 2016, 2:28pm UTC](https://discuss.elastic.co/t/identifying-fields-using-sprintf/47941 "2016-04-21T14:28:49Z")

</div>

I have some JSON data coming to me over HTTP. Each record has a field that needs to be converted to an integer but its name will vary, e.g. "fieldA\_count" in one record and "fieldfB\_count" in another. Each record contain…

---

## [ElasticSearch pri.store.size](https://discuss.elastic.co/t/elasticsearch-pri-store-size/321397)

<div class="topic-metadata">

**Author:** [@gjahagir](https://discuss.elastic.co/u/gjahagir)\
**Replies:** 2\
**Last updated:** [December 16, 2022, 1:43pm UTC](https://discuss.elastic.co/t/elasticsearch-pri-store-size/321397 "2022-12-16T13:43:58Z")

</div>

Hi, We are performing capacity planning in elastic to evaluate the storage sizes. For this we indexed one doc with dummy fields (7 simple fields and 13 nested) took the size of the doc which is 1148 bytes. Then we ex…

---

## [Error: Port 5601 is already in use. Another instance of Kibana may be running!--Sometime it's working sometime not if it is not worked then i restart my pc then it's worked](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running-sometime-its-working-sometime-not-if-it-is-not-worked-then-i-restart-my-pc-then-its-worked/294762)

<div class="topic-metadata">

**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\
**Replies:** 2\
**Last updated:** [January 21, 2022, 5:26am UTC](https://discuss.elastic.co/t/error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running-sometime-its-working-sometime-not-if-it-is-not-worked-then-i-restart-my-pc-then-its-worked/294762 "2022-01-21T05:26:17Z")

</div>

I already kill port 5601 and also reinstall kibana but still not working log \[10:32:00.035\] \[info\]\[plugins-service\] Plugin "metricsEntities" is disabled. log \[10:32:00.161\] \[fatal\]\[root\] Error: Port 5601 is alread…

---

## [Не отрабатывает смена имени индекса](https://discuss.elastic.co/t/topic/185985)

<div class="topic-metadata">

**Author:** [@PashaMak](https://discuss.elastic.co/u/PashaMak)\
**Replies:** 2\
**Last updated:** [June 18, 2019, 2:19am UTC](https://discuss.elastic.co/t/topic/185985 "2019-06-18T02:19:51Z")

</div>

Добрый день. Установил эластик версии 7.0.0. В настройках прописал имя нового индекса: #==================== Elasticsearch template ========================== # загружать шаблон индекса в эластик, если шаблон есть он…

---

## [Couldnot decode flowset for first flow packet](https://discuss.elastic.co/t/couldnot-decode-flowset-for-first-flow-packet/176943)

<div class="topic-metadata">

**Author:** [@certesrajesh](https://discuss.elastic.co/u/certesrajesh)\
**Replies:** 2\
**Last updated:** [April 24, 2019, 2:15pm UTC](https://discuss.elastic.co/t/couldnot-decode-flowset-for-first-flow-packet/176943 "2019-04-24T14:15:20Z")

</div>

Logstash receives the attached packets (template and flow packets) but it seems to drop the flow packet with the error \[WARN \]\[logstash.codecs.netflow \] Can't (yet) decode flowset id 2048 from observation domain id…

---

## [Kibana can't download the .geojson file from the localhost](https://discuss.elastic.co/t/kibana-cant-download-the-geojson-file-from-the-localhost/170245)

<div class="topic-metadata">

**Author:** [@CronoNes](https://discuss.elastic.co/u/CronoNes)\
**Replies:** 2\
**Last updated:** [March 1, 2019, 7:50pm UTC](https://discuss.elastic.co/t/kibana-cant-download-the-geojson-file-from-the-localhost/170245 "2019-03-01T19:50:16Z")

</div>

Hello. I've been trying to use the regionmap feature of Kibana with a custom geojson file. The file is in the same container as Kibana. I installed http-server and started it. If I curl the localhost:port/file.geojson, I…

---

## [Aggregating using ingest Node](https://discuss.elastic.co/t/aggregating-using-ingest-node/92304)

<div class="topic-metadata">

**Author:** [@Novak478](https://discuss.elastic.co/u/Novak478)\
**Replies:** 2\
**Last updated:** [July 7, 2017, 7:34pm UTC](https://discuss.elastic.co/t/aggregating-using-ingest-node/92304 "2017-07-07T19:34:29Z")

</div>

Hi all, I was curious if it is possible to perform a "count/terms" aggregation in an ingest node/pipeline using a script processor, or if there is any plan to add in support for a processor like that in the future? T…

[Previous page](https://discuss.elastic.co/top.md?page=1271&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1273&per_page=50&period=all)
