# Top **URL:** https://discuss.elastic.co/top.md?page=1289&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1290 --- ## [Diferent value on Y axis depending on time interval](https://discuss.elastic.co/t/diferent-value-on-y-axis-depending-on-time-interval/67785)
**Author:** [@revolucio](https://discuss.elastic.co/u/revolucio)\ **Replies:** 2\ **Last updated:** [December 2, 2016, 7:16am UTC](https://discuss.elastic.co/t/diferent-value-on-y-axis-depending-on-time-interval/67785 "2016-12-02T07:16:41Z")
Hi I'm doing some experiments on Timelion and there is a behaviour that I don't understand. If I select the time interval in AUTO I see : So the Y axis has a limit at 20000. Instead if I select 1m I see: Now the … --- ## [KIBANA DSL Date filtering using timepicker picked date range](https://discuss.elastic.co/t/kibana-dsl-date-filtering-using-timepicker-picked-date-range/55658)
**Author:** [@rokasat](https://discuss.elastic.co/u/rokasat)\ **Replies:** 2\ **Last updated:** [July 20, 2016, 4:37pm UTC](https://discuss.elastic.co/t/kibana-dsl-date-filtering-using-timepicker-picked-date-range/55658 "2016-07-20T16:37:44Z")
Is it possible to use Kibana selected date range in dsl query, eg: If you look at following query I need the "kibana selected lower timestamp" field to take kibana timepicker selected time range. { "query": { "b… --- ## [Comparing two numeric fields of a Document](https://discuss.elastic.co/t/comparing-two-numeric-fields-of-a-document/9796)
**Author:** [@Rahul\_Sharma](https://discuss.elastic.co/u/Rahul_Sharma)\ **Replies:** 2\ **Last updated:** [November 23, 2012, 8:13am UTC](https://discuss.elastic.co/t/comparing-two-numeric-fields-of-a-document/9796 "2012-11-23T08:13:46Z")
Hi, Is it possible to compare 2 numeric fields of a document? I want to fire a search query where I want to achieve n1 \> n2, where n1 and n2 are numeric terms of an Index. Would really appreciate your help. T… --- ## [API to show kibana dashboards](https://discuss.elastic.co/t/api-to-show-kibana-dashboards/151941)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 4\ **Last updated:** [October 29, 2018, 1:45am UTC](https://discuss.elastic.co/t/api-to-show-kibana-dashboards/151941 "2018-10-29T01:45:42Z")
I have a kibana secured with SearchGuard and we also have an application written in Node which includes all types of user configs. I want to show the user specific dashboards based on their permissions. One way to do th… --- ## [How to monitor cumulative totals and send distinct alerts](https://discuss.elastic.co/t/how-to-monitor-cumulative-totals-and-send-distinct-alerts/72144)
**Author:** [@Chris\_Blackwell](https://discuss.elastic.co/u/Chris_Blackwell)\ **Replies:** 4\ **Last updated:** [January 24, 2017, 10:11am UTC](https://discuss.elastic.co/t/how-to-monitor-cumulative-totals-and-send-distinct-alerts/72144 "2017-01-24T10:11:29Z")
We're using elastic to analyze some voip call traffic and I'm trying to figure out how to use watcher to monitor some limits we'd like to impose. So an example would be; Send me an alert when a calling number makes … --- ## [Why is 7.15 not available in docker hub yet?](https://discuss.elastic.co/t/why-is-7-15-not-available-in-docker-hub-yet/286930)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 6\ **Last updated:** [October 18, 2021, 12:53pm UTC](https://discuss.elastic.co/t/why-is-7-15-not-available-in-docker-hub-yet/286930 "2021-10-18T12:53:08Z")
Why is 7.15 of Elasticsearch / kibana not available in dockerhub yet? When is it likely to be made available? At the moment, I only see 7.14.2 as the latest available tag. https://hub.docker.com/\_/elasticsearch --- ## [Xpack from msi](https://discuss.elastic.co/t/xpack-from-msi/262279)
**Author:** [@Tino23](https://discuss.elastic.co/u/Tino23)\ **Replies:** 6\ **Last updated:** [February 10, 2021, 7:57am UTC](https://discuss.elastic.co/t/xpack-from-msi/262279 "2021-02-10T07:57:18Z")
please help me fix this installed my search using msi version elasticsearch-7.10.2 Unexpected response code \[405\] from calling GET http://127.0.0.1:9200/\_security/\_authenticate?pretty It doesn't look like the X-Pack se… --- ## [Elasticsearch and Portworx](https://discuss.elastic.co/t/elasticsearch-and-portworx/201312)
**Author:** [@Nathan\_Julsrud](https://discuss.elastic.co/u/Nathan_Julsrud)\ **Replies:** 6\ **Last updated:** [October 10, 2019, 8:46pm UTC](https://discuss.elastic.co/t/elasticsearch-and-portworx/201312 "2019-10-10T20:46:43Z")
Hi All, Has anybody had success with using these two technologies together? We are running ES in a docker container, orchestrated by Hashicorp Nomad, and have successfully instantiated ES using portworx volumes. The … --- ## [Intranet solution Java agent send metric to cloud apm server via proxy server](https://discuss.elastic.co/t/intranet-solution-java-agent-send-metric-to-cloud-apm-server-via-proxy-server/190153)
**Author:** [@Wayne\_Shen](https://discuss.elastic.co/u/Wayne_Shen)\ **Replies:** 6\ **Last updated:** [July 15, 2019, 1:41pm UTC](https://discuss.elastic.co/t/intranet-solution-java-agent-send-metric-to-cloud-apm-server-via-proxy-server/190153 "2019-07-15T13:41:14Z")
Hello, Is it possible to configure the java agent to send the metrics through a proxy server? My service is deployed in an intranet server, it connect to apm server (deployed in cloud) though a proxy server. ELK versi… --- ## [org.elasticsearch.tools.launchers.JavaVersionChecker](https://discuss.elastic.co/t/org-elasticsearch-tools-launchers-javaversionchecker/147179)
**Author:** [@akuma](https://discuss.elastic.co/u/akuma)\ **Replies:** 6\ **Last updated:** [September 5, 2018, 4:49pm UTC](https://discuss.elastic.co/t/org-elasticsearch-tools-launchers-javaversionchecker/147179 "2018-09-05T16:49:13Z")
Hello, I have a question. My ElasticSearch version: 6.2.4. os: centos7. java 1.8. Prompt when I run: org.elasticsearch.tools.launchers.JavaVersionChecker. Please help me. --- ## [How to divert the logstash logs?](https://discuss.elastic.co/t/how-to-divert-the-logstash-logs/80922)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 6\ **Last updated:** [April 4, 2017, 1:12pm UTC](https://discuss.elastic.co/t/how-to-divert-the-logstash-logs/80922 "2017-04-04T13:12:49Z")
I am getting my LogStash logs to /var/log/logstash while I want to send them to /log/logstash. I saw many places writing how to do so but still I am a little confused. From now I am guessing I have to change the log4j … --- ## [Deployment Architecture Scenarios Using ELK for SIEM at Large Scale on-promise](https://discuss.elastic.co/t/deployment-architecture-scenarios-using-elk-for-siem-at-large-scale-on-promise/358525)
**Author:** [@NasrJBr](https://discuss.elastic.co/u/NasrJBr)\ **Replies:** 5\ **Last updated:** [May 1, 2024, 3:49pm UTC](https://discuss.elastic.co/t/deployment-architecture-scenarios-using-elk-for-siem-at-large-scale-on-promise/358525 "2024-05-01T15:49:59Z")
i want to create some scenarios of deployment of ELK for SIEM usage in a large scale. any help/suggestions about this ? --- ## [Filebeat is sending the empty value to logstash for the paramters configured in filebeat](https://discuss.elastic.co/t/filebeat-is-sending-the-empty-value-to-logstash-for-the-paramters-configured-in-filebeat/143632)
**Author:** [@swethamahesh](https://discuss.elastic.co/u/swethamahesh)\ **Replies:** 5\ **Last updated:** [August 14, 2018, 5:24pm UTC](https://discuss.elastic.co/t/filebeat-is-sending-the-empty-value-to-logstash-for-the-paramters-configured-in-filebeat/143632 "2018-08-14T17:24:14Z")
Hi, Further to my discussion in the logstash forum regarding the junk directory getting created by logstash. It is conveyed that filebeat is sending the data empty, Hence logstash is writing the directory with junk nam… --- ## [Issue with dynamic index template with a dynamic mapping template](https://discuss.elastic.co/t/issue-with-dynamic-index-template-with-a-dynamic-mapping-template/6657)
**Author:** [@Wes\_Plunk](https://discuss.elastic.co/u/Wes_Plunk)\ **Replies:** 5\ **Last updated:** [February 12, 2012, 5:35pm UTC](https://discuss.elastic.co/t/issue-with-dynamic-index-template-with-a-dynamic-mapping-template/6657 "2012-02-12T17:35:37Z")
here's the gist I've setup a index template and within that template a dynamic mapping template It seems that when I add a new document with a new field the dynamically created field uses the dynamic mapping I… --- ## [Define Primaries and Replicas for Elastic Agent Integrations](https://discuss.elastic.co/t/define-primaries-and-replicas-for-elastic-agent-integrations/305560)
**Author:** [@Fikrat\_Karimli](https://discuss.elastic.co/u/Fikrat_Karimli)\ **Replies:** 8\ **Last updated:** [May 27, 2022, 8:46pm UTC](https://discuss.elastic.co/t/define-primaries-and-replicas-for-elastic-agent-integrations/305560 "2022-05-27T20:46:37Z")
Hi, I have elastic agent managed by fleet and I want to define primaries and replicas. By default it has 1 primary and 1 replica but want to do 3 primary and 0 replica. I tried to play with data stream but nothing seem … --- ## [Elasticsearch cluster issue](https://discuss.elastic.co/t/elasticsearch-cluster-issue/298882)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 8\ **Last updated:** [March 10, 2022, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-issue/298882 "2022-03-10T09:20:31Z")
I had one node. I didnt delete data in first node. Then I deleted data from second and third nodes, try to add to first node cluster. But it created two clusters. One with first node alone Another with second and third… --- ## [Disable Warnings about TLSv1.0, TLSv1.1 and SSLv3](https://discuss.elastic.co/t/disable-warnings-about-tlsv1-0-tlsv1-1-and-sslv3/282375)
**Author:** [@shaheer.siddiqui](https://discuss.elastic.co/u/shaheer.siddiqui)\ **Replies:** 3\ **Last updated:** [August 26, 2021, 3:53pm UTC](https://discuss.elastic.co/t/disable-warnings-about-tlsv1-0-tlsv1-1-and-sslv3/282375 "2021-08-26T15:53:15Z")
I am currently running a ES7.10.2 with XPACK enabled on Linux servers. I was able to configure and run ES with no issues however I keep getting the following warns "Client requested protocol TLSv1 is not enabled or suppo… --- ## [Filebeat error when importing logs](https://discuss.elastic.co/t/filebeat-error-when-importing-logs/267395)
**Author:** [@Liliana\_Novais](https://discuss.elastic.co/u/Liliana_Novais)\ **Replies:** 8\ **Last updated:** [March 19, 2021, 10:27am UTC](https://discuss.elastic.co/t/filebeat-error-when-importing-logs/267395 "2021-03-19T10:27:33Z")
Hello, I configured my elasticsearch with file beat. When my file is changed I get the following error from filebeat: can someone helpme understand this error? --- ## [Elasticsearch Curator restore only if there are changes](https://discuss.elastic.co/t/elasticsearch-curator-restore-only-if-there-are-changes/233155)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 8\ **Last updated:** [May 20, 2020, 2:11pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-restore-only-if-there-are-changes/233155 "2020-05-20T14:11:24Z")
Hello, Since restoring the .kibana index requires closing the .kibana index, restoring the .kibana index and then reopening the .kibana index, thus creating downtime in Kibana, I would like Curator to restore the .kiban… --- ## [Reading the logs from Remote server](https://discuss.elastic.co/t/reading-the-logs-from-remote-server/219840)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 6:23pm UTC](https://discuss.elastic.co/t/reading-the-logs-from-remote-server/219840 "2020-02-18T18:23:33Z")
Whether filebeat can read the logs from remote linux/Windows servers? Path field can be set to remote server folder path? So is it possible to have multiple instances of filesbeats installed on a single server and they … --- ## [Help me modify this query so that it can find out the matches which contain N terms in a specific order as opposed to all matches possible which contain the N terms](https://discuss.elastic.co/t/help-me-modify-this-query-so-that-it-can-find-out-the-matches-which-contain-n-terms-in-a-specific-order-as-opposed-to-all-matches-possible-which-contain-the-n-terms/203507)
**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\ **Replies:** 8\ **Last updated:** [October 14, 2019, 8:28pm UTC](https://discuss.elastic.co/t/help-me-modify-this-query-so-that-it-can-find-out-the-matches-which-contain-n-terms-in-a-specific-order-as-opposed-to-all-matches-possible-which-contain-the-n-terms/203507 "2019-10-14T20:28:57Z")
This is what I had, this can query for phrases but they will always be in any order {'query': {'bool': {'should': \[{'bool': {'must': \[{'match\_phrase': {'data': 'word1'}}, {'match\_phrase': {'data': 'word2'}}\]}}\]}}, 'from… --- ## [Dynamic mapping is changing existing fields format and type](https://discuss.elastic.co/t/dynamic-mapping-is-changing-existing-fields-format-and-type/92576)
**Author:** [@Vinish\_Soman](https://discuss.elastic.co/u/Vinish_Soman)\ **Replies:** 3\ **Last updated:** [July 11, 2017, 7:18am UTC](https://discuss.elastic.co/t/dynamic-mapping-is-changing-existing-fields-format-and-type/92576 "2017-07-11T07:18:53Z")
Hello Team, We are using Elasticsearch - 2.3.5 for feeding the Amazon Cloudtrail data. We have created mapping for a index and for certain fields their type will changes automatically. We want certain fields to use par… --- ## [Can not run elasticsearch as root](https://discuss.elastic.co/t/can-not-run-elasticsearch-as-root/86083)
**Author:** [@pjayramkumar](https://discuss.elastic.co/u/pjayramkumar)\ **Replies:** 3\ **Last updated:** [May 17, 2017, 11:36am UTC](https://discuss.elastic.co/t/can-not-run-elasticsearch-as-root/86083 "2017-05-17T11:36:00Z")
Hello i am working with elasticsearch 5.4 os : centos 7 when i run this command bash -x usr/share/elasticsearch/bin/elasticsearch then it's give me error and i research that root user is disable to elasticsearch… --- ## [Wrong values in \_count API in ES 5.3.0?](https://discuss.elastic.co/t/wrong-values-in--count-api-in-es-5-3-0/82348)
**Author:** [@mkelkar](https://discuss.elastic.co/u/mkelkar)\ **Replies:** 3\ **Last updated:** [April 13, 2017, 9:22pm UTC](https://discuss.elastic.co/t/wrong-values-in--count-api-in-es-5-3-0/82348 "2017-04-13T21:22:54Z")
Hi There, I am using ES 5.3.0. I have indexed about 2.2M documents in my index, and it seems like count API is returning results that are far too different than \_cat/indices API..is there something wrong? curl loc… --- ## [What is the optimal way to check if array is not empty in function\_score query?](https://discuss.elastic.co/t/what-is-the-optimal-way-to-check-if-array-is-not-empty-in-function-score-query/59744)
**Author:** [@lessless](https://discuss.elastic.co/u/lessless)\ **Replies:** 0\ **Last updated:** [September 4, 2016, 6:40am UTC](https://discuss.elastic.co/t/what-is-the-optimal-way-to-check-if-array-is-not-empty-in-function-score-query/59744 "2016-09-04T06:40:25Z")
Hello, In our documents, there is an array field which holds URLs to the entity pictures. Naturally, we want to score documents with pictures present higher than documents w/o pictures. According to my experience, we… --- ## [Restarting node takes time](https://discuss.elastic.co/t/restarting-node-takes-time/53094)
**Author:** [@fulya](https://discuss.elastic.co/u/fulya)\ **Replies:** 3\ **Last updated:** [June 17, 2016, 7:49am UTC](https://discuss.elastic.co/t/restarting-node-takes-time/53094 "2016-06-17T07:49:37Z")
Hello, We have a test cluster running since 8 months. index per day, 16 GB RAM, 1 node, 5 shards 1 replica approximately each index is 2.5GB so 500MB per shard. Since we have only 1 node replicas are not assigned and … --- ## [Monitoring Logstash using Metricbeat](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/293344)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 7\ **Last updated:** [January 3, 2022, 2:44pm UTC](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/293344 "2022-01-03T14:44:04Z")
Hi, I have 3 instances of Logstash and want to monitor them in Kibana This is my /etc/metricbeat/modules.d/logstash-xpack.yml configuration: # Module: logstash # Docs: https://www.elastic.co/guide/en/beats/metricbeat/… --- ## [Structured hierarchy: Repeating fields causing low performance](https://discuss.elastic.co/t/structured-hierarchy-repeating-fields-causing-low-performance/182482)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 7\ **Last updated:** [May 28, 2019, 1:18pm UTC](https://discuss.elastic.co/t/structured-hierarchy-repeating-fields-causing-low-performance/182482 "2019-05-28T13:18:22Z")
I have a mapping setting that has below types (self maintained type field). I have not used parent child relationship, rather repeated fields and the data for writing simpler queries. { "type": "city", "countryName": … --- ## [Cluster issue](https://discuss.elastic.co/t/cluster-issue/112007)
**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\ **Replies:** 7\ **Last updated:** [December 18, 2017, 9:29am UTC](https://discuss.elastic.co/t/cluster-issue/112007 "2017-12-18T09:29:55Z")
Hi , I have two nodes in my cluster , but while starting both nodes , they are not joining cluster but running independently . Please let know what could be the issue ? --- ## [Error sending data to APM server: Read timed out, response code is -1](https://discuss.elastic.co/t/error-sending-data-to-apm-server-read-timed-out-response-code-is-1/322242)
**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\ **Replies:** 1\ **Last updated:** [January 2, 2023, 6:23am UTC](https://discuss.elastic.co/t/error-sending-data-to-apm-server-read-timed-out-response-code-is-1/322242 "2023-01-02T06:23:35Z")
Hi APM agent \>\>\> APM server. APM agent can't send data to APM server. FYI1: Telnet and curl work properly from agent to server. FYI2: On agent log i can see traces are log correctly but not send to server! FYI3: Eve… --- ## [Can we use Gitter for elastic search community communication?](https://discuss.elastic.co/t/can-we-use-gitter-for-elastic-search-community-communication/161327)
**Author:** [@\_razi](https://discuss.elastic.co/u/_razi)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 9:43pm UTC](https://discuss.elastic.co/t/can-we-use-gitter-for-elastic-search-community-communication/161327 "2018-12-18T21:43:47Z")
Idea is to use Gitter(Github) chat box for communication.Its easy to use and more collaborative. --- ## [Logstash6.3 grok mysql slow日志](https://discuss.elastic.co/t/logstash6-3-grok-mysql-slow/142667)
**Author:** [@hjfeng1988](https://discuss.elastic.co/u/hjfeng1988)\ **Replies:** 1\ **Last updated:** [August 2, 2018, 2:11am UTC](https://discuss.elastic.co/t/logstash6-3-grok-mysql-slow/142667 "2018-08-02T02:11:39Z")
官方参考页：https://www.elastic.co/guide/en/logstash/current/logstash-config-for-filebeat-modules.html grok { match =\> { "message" =\> \["^# User@Host: %{USER:\[mysql\]\[slowlog\]\[user\]}(\\\[\[^\\\]\]+\\\])? @ %{HOSTNAME:\[mys… --- ## [Reading from files to a directory to which files are being added continuously](https://discuss.elastic.co/t/reading-from-files-to-a-directory-to-which-files-are-being-added-continuously/56949)
**Author:** [@yesyesdhar](https://discuss.elastic.co/u/yesyesdhar)\ **Replies:** 1\ **Last updated:** [August 2, 2016, 10:38am UTC](https://discuss.elastic.co/t/reading-from-files-to-a-directory-to-which-files-are-being-added-continuously/56949 "2016-08-02T10:38:55Z")
I have a small question. suppose if we give below in logstash configuration file, input { file { path =\> "/Users/shashi/CSVFiles/Core2/\*.txt" I know above can be used to read input from multiple files in Core2 direc… --- ## [Unable to set auth header using javascript client elasticsearch.js](https://discuss.elastic.co/t/unable-to-set-auth-header-using-javascript-client-elasticsearch-js/34372)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 1\ **Last updated:** [November 12, 2015, 2:55am UTC](https://discuss.elastic.co/t/unable-to-set-auth-header-using-javascript-client-elasticsearch-js/34372 "2015-11-12T02:55:59Z")
Hi, I am using elasticsearch-angular.js client to connect from my UI built using angularjs to connect to elasticserach 1.4. Our es instance has a custom plugin with Base authentication to intercept every request to ch… --- ## [Timestamp update](https://discuss.elastic.co/t/timestamp-update/262110)
**Author:** [@Makss39](https://discuss.elastic.co/u/Makss39)\ **Replies:** 2\ **Last updated:** [January 25, 2021, 3:21pm UTC](https://discuss.elastic.co/t/timestamp-update/262110 "2021-01-25T15:21:15Z")
Hello ! I would like to update my timestamp field, but all the info that i've found are not working... Probably a synthax error but i'm not able to figure out where it stucks... I already tried several option... POST … --- ## [Transform Exception - all shards failed](https://discuss.elastic.co/t/transform-exception-all-shards-failed/217879)
**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\ **Replies:** 2\ **Last updated:** [February 5, 2020, 4:04pm UTC](https://discuss.elastic.co/t/transform-exception-all-shards-failed/217879 "2020-02-05T16:04:45Z")
Hello, I am making tests locally with Transform to check if it is feasible to use it and the first time it runs it does its job nicely, once I add more data into the source index (logstash-roaming-dwf-202002) I see in t… --- ## [How to get sql rest api working from kibana?](https://discuss.elastic.co/t/how-to-get-sql-rest-api-working-from-kibana/128954)
**Author:** [@dalinqin](https://discuss.elastic.co/u/dalinqin)\ **Replies:** 2\ **Last updated:** [April 21, 2018, 6:10am UTC](https://discuss.elastic.co/t/how-to-get-sql-rest-api-working-from-kibana/128954 "2018-04-21T06:10:13Z")
Hello everyone , i'm trying with sql rest api my elasticsearch version is 6.2.4. after installed xpack for both es and kibana ,i tried the following command from kibana dev tools, it give me the error below . Also i… --- ## [Storing Percolate Queries](https://discuss.elastic.co/t/storing-percolate-queries/28194)
**Author:** [@raunak](https://discuss.elastic.co/u/raunak)\ **Replies:** 2\ **Last updated:** [September 1, 2015, 10:22am UTC](https://discuss.elastic.co/t/storing-percolate-queries/28194 "2015-09-01T10:22:38Z")
I'm new to ES, so please bear with me while I explain what I'm trying to do. I'm using ES version 1.5.2, and making use of the JAVA APIs via JEST wrapper. I would like to create some percolate queries and store them i… --- ## [Any way to exclude not responding node from running ES cluster?](https://discuss.elastic.co/t/any-way-to-exclude-not-responding-node-from-running-es-cluster/2616)
**Author:** [@Sp4rKy](https://discuss.elastic.co/u/Sp4rKy)\ **Replies:** 2\ **Last updated:** [June 14, 2015, 10:58am UTC](https://discuss.elastic.co/t/any-way-to-exclude-not-responding-node-from-running-es-cluster/2616 "2015-06-14T10:58:56Z")
We have the following setup : 4 data nodes, 2 instances per node (128G / 24 cpus, each instance has 24G) 3 master node (data: false, node: true) Today one of our node got stuck for some time, cpu were not respondi… --- ## [Memory management for elasticsearch](https://discuss.elastic.co/t/memory-management-for-elasticsearch/280702)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 4\ **Last updated:** [August 10, 2021, 6:32am UTC](https://discuss.elastic.co/t/memory-management-for-elasticsearch/280702 "2021-08-10T06:32:50Z")
Hi Team, I am trying to calculate good balance of total memory in three node es cluster. If I have three node e.s cluster each with 32G memory, 8 vcpu. Which combination would be more suitable for balancing memory betw… --- ## [Winlogbeat: lire tous les fichiers evtx d'un dossier](https://discuss.elastic.co/t/winlogbeat-lire-tous-les-fichiers-evtx-dun-dossier/233500)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 4\ **Last updated:** [May 20, 2020, 1:13pm UTC](https://discuss.elastic.co/t/winlogbeat-lire-tous-les-fichiers-evtx-dun-dossier/233500 "2020-05-20T13:13:52Z")
Bonjour, J'ai plusieurs fichiers evtx dans un dossier sur clé et je souhaiterai les intégrer dans elastic. Le problème c'est que pour chaque fichier, je suis actuellement obligé de modifier winlogbeat.yml afin de point… --- ## [Problems when upgrading from 7.5.2 to 7.6.0](https://discuss.elastic.co/t/problems-when-upgrading-from-7-5-2-to-7-6-0/218960)
**Author:** [@Jan-Philipp\_Bolle](https://discuss.elastic.co/u/Jan-Philipp_Bolle)\ **Replies:** 4\ **Last updated:** [February 12, 2020, 2:16pm UTC](https://discuss.elastic.co/t/problems-when-upgrading-from-7-5-2-to-7-6-0/218960 "2020-02-12T14:16:20Z")
Hi, i using elasicsearch in a docker container with 3 nodes. The configuration I have been using for a long time looks like this: node.name=pear10 discovery.seed\_hosts=xxx.xx.xx.230,xxx.xx.xx.231,xxx.xx.xx.232 cluster… --- ## [Why am I geting error \[logstash.outputs.elasticsearch\] Action?](https://discuss.elastic.co/t/why-am-i-geting-error-logstash-outputs-elasticsearch-action/135342)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [June 18, 2018, 5:40am UTC](https://discuss.elastic.co/t/why-am-i-geting-error-logstash-outputs-elasticsearch-action/135342 "2018-06-18T05:40:36Z")
I am using ELK GA 5.0.0. I am using Logstash to fetch data from Kafka topic. My config i like below; input { kafka{ group\_id =\> "mygroup" topics =\> \["mytopic"\] bootstrap\_servers =\> "192.168.0.1:9092,192.168.0.2:9… --- ## [Query docs with circular references](https://discuss.elastic.co/t/query-docs-with-circular-references/131419)
**Author:** [@Buntu\_Dev](https://discuss.elastic.co/u/Buntu_Dev)\ **Replies:** 4\ **Last updated:** [May 23, 2018, 6:53pm UTC](https://discuss.elastic.co/t/query-docs-with-circular-references/131419 "2018-05-23T18:53:19Z")
New to writing ES queries and have a docs like: { "state" : "california", "relation" : "neighour\_right", "related\_state" : "arizona" }, .. { "state" : "arizona", "relation" : "neighour\_left", … --- ## [ELK Stack (version 6 ) for Production](https://discuss.elastic.co/t/elk-stack-version-6-for-production/113029)
**Author:** [@raghureddyads](https://discuss.elastic.co/u/raghureddyads)\ **Replies:** 4\ **Last updated:** [January 5, 2018, 1:13pm UTC](https://discuss.elastic.co/t/elk-stack-version-6-for-production/113029 "2018-01-05T13:13:00Z")
Hi All, I am installing elasticsearch stack in our environment for testing purpose. Linux -OS : CentOS 6.9 JAVA JDK 1.8 Reference for installtion: elastic.co Elasticsearch 6.0.0 Kibana 6.… --- ## [Hardware - Recommendations](https://discuss.elastic.co/t/hardware-recommendations/103386)
**Author:** [@Yann](https://discuss.elastic.co/u/Yann)\ **Replies:** 4\ **Last updated:** [October 12, 2017, 2:12pm UTC](https://discuss.elastic.co/t/hardware-recommendations/103386 "2017-10-12T14:12:59Z")
Hello, I want to migrate ELK on a VM to a more powerful physical machine and I would need recommendations. Currently, the VM includes 8 vCPU 2.3 GHz and 32 GB RAM. We process about 6 GB of data per day and we wish to … --- ## [Grok pattern from within kibana dev tools](https://discuss.elastic.co/t/grok-pattern-from-within-kibana-dev-tools/103509)
**Author:** [@barry.marshall73](https://discuss.elastic.co/u/barry.marshall73)\ **Replies:** 4\ **Last updated:** [October 12, 2017, 8:05am UTC](https://discuss.elastic.co/t/grok-pattern-from-within-kibana-dev-tools/103509 "2017-10-12T08:05:11Z")
I am configuring an ingest pipeline from within the Kibana Dev Tools and I am having issues with grok pattern, apparently some characters require to be preceeded by a double backslash such as "\\\\\[", and DATA pattern give… --- ## [Multiple tribe nodes - disaster recovery](https://discuss.elastic.co/t/multiple-tribe-nodes-disaster-recovery/40057)
**Author:** [@bennett](https://discuss.elastic.co/u/bennett)\ **Replies:** 4\ **Last updated:** [January 26, 2016, 6:42pm UTC](https://discuss.elastic.co/t/multiple-tribe-nodes-disaster-recovery/40057 "2016-01-26T18:42:20Z")
Hi, I have a setup with 3 tribe nodes, all looking at the same 4 elasticsearch clusters. The reason behind this, is they are all in separate datacenters and if one goes down, we still have visibility in the other 3 da… --- ## [Simple grapth of 2 values](https://discuss.elastic.co/t/simple-grapth-of-2-values/28925)
**Author:** [@11191](https://discuss.elastic.co/u/11191)\ **Replies:** 4\ **Last updated:** [September 9, 2015, 2:48pm UTC](https://discuss.elastic.co/t/simple-grapth-of-2-values/28925 "2015-09-09T14:48:56Z")
Hi everyone. I have this much of information and I want 2 values (WLNode and JSession) to be displayed on a graph. I want to see amount of JSession of each WLNode to be more specific. I really tried to figure it out … --- ## [Is logstash forwarder expected to be slower than logstash?](https://discuss.elastic.co/t/is-logstash-forwarder-expected-to-be-slower-than-logstash/26885)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 4\ **Last updated:** [August 11, 2015, 3:50am UTC](https://discuss.elastic.co/t/is-logstash-forwarder-expected-to-be-slower-than-logstash/26885 "2015-08-11T03:50:52Z")
At the beginning, I set up a logstash service on windows to monitor all files in one folder. The service runs fine, data feeding to elasticsearch through redis is up to date and good. The only drawback is the cpu and mem… [Previous page](https://discuss.elastic.co/top.md?page=1288&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1290&per_page=50&period=all)