# Top **URL:** https://discuss.elastic.co/top.md?page=1290&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1291 --- ## [Hot node](https://discuss.elastic.co/t/hot-node/26571)
**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\ **Replies:** 4\ **Last updated:** [July 31, 2015, 4:49am UTC](https://discuss.elastic.co/t/hot-node/26571 "2015-07-31T04:49:59Z")
Hello, I have very strange situation. One node uses nearly 100% CPU all the time. The cluster is evenly balanced, one shard per each node with one replication. Index has 5 shards, and cluster is 10 nodes. No matter which… --- ## [Problems installing carrot2/elasticsearch-carrot2 plugin](https://discuss.elastic.co/t/problems-installing-carrot2-elasticsearch-carrot2-plugin/13303)
**Author:** [@Maggie\_Nelson](https://discuss.elastic.co/u/Maggie_Nelson)\ **Replies:** 4\ **Last updated:** [August 29, 2013, 12:37am UTC](https://discuss.elastic.co/t/problems-installing-carrot2-elasticsearch-carrot2-plugin/13303 "2013-08-29T00:37:53Z")
I'd love to use carrot2 with our ElasticSearch setup. I am however running into issues with installing the plugin. I installed it from source following directions here: https://github.com/carrot2/elasticsearch-ca… --- ## [How can I force the order of labels?](https://discuss.elastic.co/t/how-can-i-force-the-order-of-labels/327424)
**Author:** [@Wpq](https://discuss.elastic.co/u/Wpq)\ **Replies:** 2\ **Last updated:** [March 10, 2023, 7:29pm UTC](https://discuss.elastic.co/t/how-can-i-force-the-order-of-labels/327424 "2023-03-10T19:29:22Z")
I have data with a label priority that I show on a heatmap: The order at the bottom is not the one I would like to have (which is CRITICAL, HIGH, ...) How can I instruct Kibana to use a specific order for the labels… --- ## [:message=\>"undefined method for twitter input plugin](https://discuss.elastic.co/t/message-undefined-method-for-twitter-input-plugin/62481)
**Author:** [@anon45667325](https://discuss.elastic.co/u/anon45667325)\ **Replies:** 1\ **Last updated:** [November 7, 2016, 12:50pm UTC](https://discuss.elastic.co/t/message-undefined-method-for-twitter-input-plugin/62481 "2016-11-07T12:50:19Z")
Hello ! I'm not sure what is going on, I cannot ingest tweets from Twitter with my basic configuration: input { twitter { consumer\_key =\> "my consumer key" consumer\_secret =\> "m… --- ## [ES cluster throughput drops with 6 node cluster](https://discuss.elastic.co/t/es-cluster-throughput-drops-with-6-node-cluster/223566)
**Author:** [@sumeet\_dembra](https://discuss.elastic.co/u/sumeet_dembra)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 5:52am UTC](https://discuss.elastic.co/t/es-cluster-throughput-drops-with-6-node-cluster/223566 "2020-03-19T05:52:53Z")
Hi, I am trying to benchmark ES cluster. The cluster has a single index with single shard. We need to benchmark no. of read operations supported by the cluster. If we have 3 master eligible data nodes (all data nodes h… --- ## [Elasticsearch exited with code 0](https://discuss.elastic.co/t/elasticsearch-exited-with-code-0/212131)
**Author:** [@jporter](https://discuss.elastic.co/u/jporter)\ **Replies:** 1\ **Last updated:** [December 17, 2019, 11:14am UTC](https://discuss.elastic.co/t/elasticsearch-exited-with-code-0/212131 "2019-12-17T11:14:02Z")
I came in yesterday morning, and my elasticsearch would no longer start. I have checked my docker preferrences on my mac running OS X version 10.14.6 memory allocation is set to 4GiB (and I fiddled with this just to be s… --- ## [Error while adding Java APM agent as dependency](https://discuss.elastic.co/t/error-while-adding-java-apm-agent-as-dependency/192602)
**Author:** [@pksinghal](https://discuss.elastic.co/u/pksinghal)\ **Replies:** 1\ **Last updated:** [August 2, 2019, 9:28am UTC](https://discuss.elastic.co/t/error-while-adding-java-apm-agent-as-dependency/192602 "2019-08-02T09:28:05Z")
I want to do distributed tracking using Java APM. Initially, we use Java agent as manual setup with -javaagent flag and we get tracing data using this. Then we deploy this on our test server and its working fine. Now, … --- ## [Elastic Cloud - Reporting error Can't reach the server. Please try again](https://discuss.elastic.co/t/elastic-cloud-reporting-error-cant-reach-the-server-please-try-again/153696)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 1\ **Last updated:** [October 24, 2018, 2:43am UTC](https://discuss.elastic.co/t/elastic-cloud-reporting-error-cant-reach-the-server-please-try-again/153696 "2018-10-24T02:43:44Z")
As per the subject, when trying to generate a report I get the above error. Some Googling tells me this apparently indicates not enough permissions but even if I assign superuser, kibana\_user and reporting\_user and a ex… --- ## [How to parse log in “message” fieled cisco-ise](https://discuss.elastic.co/t/how-to-parse-log-in-message-fieled-cisco-ise/337492)
**Author:** [@Mbrezzy](https://discuss.elastic.co/u/Mbrezzy)\ **Replies:** 5\ **Last updated:** [July 3, 2023, 10:05pm UTC](https://discuss.elastic.co/t/how-to-parse-log-in-message-fieled-cisco-ise/337492 "2023-07-03T22:05:57Z")
How to parsing this log logstash Hey everyone i am facing a problem with logstash. I want to parse log that are coming from cisco-ise but all information i want is inside message fields : I want parsing like Net… --- ## [Runing multiple Kibana Instances vs load balancing](https://discuss.elastic.co/t/runing-multiple-kibana-instances-vs-load-balancing/328550)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 5\ **Last updated:** [March 26, 2023, 4:14pm UTC](https://discuss.elastic.co/t/runing-multiple-kibana-instances-vs-load-balancing/328550 "2023-03-26T16:14:56Z")
Want to load balancing multiple Kibana v.8.6 instances, wondering if login sessions are to be considered state-less or if we need to apply session stickyness and if rooted sticky on what, cookie...? Also what to do abou… --- ## [Kibana balancing via VIP](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 5\ **Last updated:** [April 17, 2019, 1:53pm UTC](https://discuss.elastic.co/t/kibana-balancing-via-vip/177260 "2019-04-17T13:53:15Z")
Hi there, I'm trying to balance two kibana instances running in different machine listening on https://10.0.0.250:5601 and https://10.0.0.251:5601. The network admin set a cirtix load balancer to redirect the net… --- ## [Input File Path (not working) vs Input Beats (working) all conf setting are the same but Input](https://discuss.elastic.co/t/input-file-path-not-working-vs-input-beats-working-all-conf-setting-are-the-same-but-input/164800)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 5\ **Last updated:** [January 18, 2019, 9:38pm UTC](https://discuss.elastic.co/t/input-file-path-not-working-vs-input-beats-working-all-conf-setting-are-the-same-but-input/164800 "2019-01-18T21:38:45Z")
Hi @ all, I mess arround with follwing and hope you have some Ideas: input { file { path =\> \["C:\\EsKiLo\_6.5.4\\Test.csv"\] start\_position =\> "beginning" } } filter { csv { columns =\>\["Date","Time","… --- ## [Weird issue with elastic search with no error in logs](https://discuss.elastic.co/t/weird-issue-with-elastic-search-with-no-error-in-logs/77436)
**Author:** [@adityajain19](https://discuss.elastic.co/u/adityajain19)\ **Replies:** 5\ **Last updated:** [March 6, 2017, 2:33pm UTC](https://discuss.elastic.co/t/weird-issue-with-elastic-search-with-no-error-in-logs/77436 "2017-03-06T14:33:05Z")
We have FluentD sending logs to elastic search, and we have installed x-pack on Kibana and elastic search. everything works fine and after some time we stop seeing logs in ? what can we check. we have 5.1.2 and 5.1.2 ver… --- ## [Collectd agent ethstat error](https://discuss.elastic.co/t/collectd-agent-ethstat-error/65501)
**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\ **Replies:** 5\ **Last updated:** [November 11, 2016, 9:58am UTC](https://discuss.elastic.co/t/collectd-agent-ethstat-error/65501 "2016-11-11T09:58:51Z")
Hi there guys, Do not know if I should ask this question in here or in the docker forum, please advice. I'm trying to gather stats from a container iface and I get this error: \[error\] ethstat plugin: Reading statist… --- ## [Generate Event in Kibana when clicking at the table row in Dashboard?](https://discuss.elastic.co/t/generate-event-in-kibana-when-clicking-at-the-table-row-in-dashboard/273929)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 6:18pm UTC](https://discuss.elastic.co/t/generate-event-in-kibana-when-clicking-at-the-table-row-in-dashboard/273929 "2021-06-22T18:18:26Z")
It is possible to generate event when clicking at the table row and That generated event send data to the other index in the kibana. Is it possible to generate event on table row in kibana. --- ## [Filebeat not reading the input log file](https://discuss.elastic.co/t/filebeat-not-reading-the-input-log-file/274854)
**Author:** [@Ashwani\_Shukla](https://discuss.elastic.co/u/Ashwani_Shukla)\ **Replies:** 3\ **Last updated:** [June 3, 2021, 11:06am UTC](https://discuss.elastic.co/t/filebeat-not-reading-the-input-log-file/274854 "2021-06-03T11:06:55Z")
I am trying to fetch data using beats input from a log file whose path I have given in filebeat.yml. But the log file is not read by the logstash while running. filebeat.inputs: - type: log enabled: true paths: … --- ## [Elasticsearch group data](https://discuss.elastic.co/t/elasticsearch-group-data/174040)
**Author:** [@Timotius\_Pamungkas](https://discuss.elastic.co/u/Timotius_Pamungkas)\ **Replies:** 3\ **Last updated:** [March 28, 2019, 8:06am UTC](https://discuss.elastic.co/t/elasticsearch-group-data/174040 "2019-03-28T08:06:00Z")
Hello, if I have data like this ID Username Role Email 1001 johndoe admin johndoe@mail.com 1001 jonathan.doe user johndoe@mail.com 1001 johnnydoe user johndoe@mail.com Can I do some kind of grouping? Not… --- ## [How to authenticate?](https://discuss.elastic.co/t/how-to-authenticate/155875)
**Author:** [@jonaspreisler](https://discuss.elastic.co/u/jonaspreisler)\ **Replies:** 3\ **Last updated:** [November 9, 2018, 5:33am UTC](https://discuss.elastic.co/t/how-to-authenticate/155875 "2018-11-09T05:33:22Z")
What's going on with my Elasticsearch in my app? My app is RoR and deployed to Heroku. I get this error: Faraday::ConnectionFailed (Failed to open TCP connection to localhost:9200 (Connection refused - connect(2) for … --- ## [Analysis of the (lime)survey results using ELK](https://discuss.elastic.co/t/analysis-of-the-lime-survey-results-using-elk/121338)
**Author:** [@vitaly\_r](https://discuss.elastic.co/u/vitaly_r)\ **Replies:** 3\ **Last updated:** [February 26, 2018, 6:40am UTC](https://discuss.elastic.co/t/analysis-of-the-lime-survey-results-using-elk/121338 "2018-02-26T06:40:02Z")
Hello, I want to take the survey data from LimeSurvey and import it into ElasticSearch in order to be able to analyze/visualize it with Kibana later. Could you point me to any examples / best practicies of working with… --- ## [Can't start filebeat on client server](https://discuss.elastic.co/t/cant-start-filebeat-on-client-server/109417)
**Author:** [@Zurek](https://discuss.elastic.co/u/Zurek)\ **Replies:** 3\ **Last updated:** [November 29, 2017, 8:27pm UTC](https://discuss.elastic.co/t/cant-start-filebeat-on-client-server/109417 "2017-11-29T20:27:08Z")
So i follow this tutorial https://www.linuxtechi.com/install-elk-stack-elasticsearch-logstash-kibana-centos7-rhel7/ and i have problem on client, with filebeat. \[filebeat\] \[journal\] conf yml file: https://www.dropbox… --- ## [IP geolocation without Logstash](https://discuss.elastic.co/t/ip-geolocation-without-logstash/18716)
**Author:** [@Justin\_Koehler](https://discuss.elastic.co/u/Justin_Koehler)\ **Replies:** 3\ **Last updated:** [September 5, 2014, 3:36pm UTC](https://discuss.elastic.co/t/ip-geolocation-without-logstash/18716 "2014-09-05T15:36:22Z")
I'm working on a system to record usage data for an application that submits its data to an ES cluster. I would like to record the location of each data point based on IP geolocation. I found the Logstash plugin that… --- ## [Why can't we rename indices?](https://discuss.elastic.co/t/why-cant-we-rename-indices/357011)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 6\ **Last updated:** [May 7, 2024, 8:19pm UTC](https://discuss.elastic.co/t/why-cant-we-rename-indices/357011 "2024-05-07T20:19:09Z")
Ok, so, I ran into a situation where I really needed to be able to rename my index. Somehow it was created before my template was applied and as a result it was a normal index instead of an alias. Which turned into a gia… --- ## [Local Storage Full](https://discuss.elastic.co/t/local-storage-full/296078)
**Author:** [@eprop-marc](https://discuss.elastic.co/u/eprop-marc)\ **Replies:** 6\ **Last updated:** [February 4, 2022, 11:43am UTC](https://discuss.elastic.co/t/local-storage-full/296078 "2022-02-04T11:43:18Z")
Hi, the local storage on my ELK stack is 95% full and I can no longer see logs in Elastic. I just wanted some advice on how best to reduce the storage on the local disk please and start using Elastic again. I don't reall… --- ## [Creating dynamic watcher](https://discuss.elastic.co/t/creating-dynamic-watcher/252473)
**Author:** [@Wilbert\_Silverio](https://discuss.elastic.co/u/Wilbert_Silverio)\ **Replies:** 6\ **Last updated:** [October 28, 2020, 1:02am UTC](https://discuss.elastic.co/t/creating-dynamic-watcher/252473 "2020-10-28T01:02:28Z")
Hi All, we had a watcher wherein it sends us a notification when the transactions are going in per hour. we wanted to create a dynamic watcher wherein it checks for the peak hours and checks during off-peak hours. Can s… --- ## [Minimum Privilege Required for Beats](https://discuss.elastic.co/t/minimum-privilege-required-for-beats/247729)
**Author:** [@hpicass0](https://discuss.elastic.co/u/hpicass0)\ **Replies:** 6\ **Last updated:** [September 25, 2020, 8:37am UTC](https://discuss.elastic.co/t/minimum-privilege-required-for-beats/247729 "2020-09-25T08:37:40Z")
Hi, Given than I need to set the API key or username/password pair in the beats config (and they might get exposed). I need to set the privilege to the absolute minimum for the relevant account I've went over the roles… --- ## [Metric beat service turns off automatically in windows sever](https://discuss.elastic.co/t/metric-beat-service-turns-off-automatically-in-windows-sever/211060)
**Author:** [@shiva13](https://discuss.elastic.co/u/shiva13)\ **Replies:** 6\ **Last updated:** [December 17, 2019, 8:48am UTC](https://discuss.elastic.co/t/metric-beat-service-turns-off-automatically-in-windows-sever/211060 "2019-12-17T08:48:45Z")
Hi, I have integrated my windows server using metric beat to ELK. But the services automatically goes to off mode every few minutes. Please help. Thanks, Shiva --- ## [\[ANNOUNCEMENT\] Luke 5.4.0 released](https://discuss.elastic.co/t/announcement-luke-5-4-0-released/41726)
**Author:** [@Dmitry\_Kan](https://discuss.elastic.co/u/Dmitry_Kan)\ **Replies:** 6\ **Last updated:** [February 12, 2017, 8:39am UTC](https://discuss.elastic.co/t/announcement-luke-5-4-0-released/41726 "2017-02-12T08:39:30Z")
This is a major release supporting lucene / solr 5.3.0. Download the release zip here: https://github.com/DmitryKey/luke/releases/tag/luke-5.4.0 Fixed in this release: 43 Build failure due to missing org.restlet-2.3.… --- ## [Scoring docs that are not natural language](https://discuss.elastic.co/t/scoring-docs-that-are-not-natural-language/58418)
**Author:** [@neil.bacon](https://discuss.elastic.co/u/neil.bacon)\ **Replies:** 6\ **Last updated:** [August 23, 2016, 11:33pm UTC](https://discuss.elastic.co/t/scoring-docs-that-are-not-natural-language/58418 "2016-08-23T23:33:27Z")
Hi. I'm doing fuzzy match address lookup on a field using a shingle filter. It appears that language model based scoring (TFIDF, BM25 etc.) isn't appropriate. E.g. a fuzzy match on a rare term (SMYTH STREET) shouldn't sc… --- ## [How to model this relationship in ES?](https://discuss.elastic.co/t/how-to-model-this-relationship-in-es/9188)
**Author:** [@Greg\_3](https://discuss.elastic.co/u/Greg_3)\ **Replies:** 6\ **Last updated:** [September 29, 2012, 9:31pm UTC](https://discuss.elastic.co/t/how-to-model-this-relationship-in-es/9188 "2012-09-29T21:31:21Z")
Hi all I am trying to model a one-to-many relationship in Elasticsearch: - One user has many articles. - The user and article data will always be returned together (e.g. a list of articles with correspo… --- ## [APM transaction data for very long or infinite HTTP Requests](https://discuss.elastic.co/t/apm-transaction-data-for-very-long-or-infinite-http-requests/281921)
**Author:** [@kbalys](https://discuss.elastic.co/u/kbalys)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 11:44am UTC](https://discuss.elastic.co/t/apm-transaction-data-for-very-long-or-infinite-http-requests/281921 "2021-09-08T11:44:49Z")
Hi, If I understand correctly the APM .net agent sends transaction details to APM only when a http request ends (either with an error or success result). What if a http request has an error and it is an infinite call sp… --- ## [SSL in Elasticsearch - is it free?](https://discuss.elastic.co/t/ssl-in-elasticsearch-is-it-free/209438)
**Author:** [@mgomse](https://discuss.elastic.co/u/mgomse)\ **Replies:** 2\ **Last updated:** [November 26, 2019, 8:20am UTC](https://discuss.elastic.co/t/ssl-in-elasticsearch-is-it-free/209438 "2019-11-26T08:20:37Z")
Good morning, This is my first post here so I hope that I'll do everything correctly :slight\_smile: So here is my story: I'm using https://github.com/elastic/helm-charts/tree/master/elasticsearch in my k8s cluster I w… --- ## [Watcher for index size](https://discuss.elastic.co/t/watcher-for-index-size/172612)
**Author:** [@taandrews](https://discuss.elastic.co/u/taandrews)\ **Replies:** 2\ **Last updated:** [March 21, 2019, 3:23pm UTC](https://discuss.elastic.co/t/watcher-for-index-size/172612 "2019-03-21T15:23:04Z")
I have several indices that have a prefix, let's say ABCD-123-\* . Is there a way to monitor/watch each individual index that starts with the aforementioned prefix and alert when the index reach a particular size. For in… --- ## [How to put two histograms in one plot?](https://discuss.elastic.co/t/how-to-put-two-histograms-in-one-plot/151265)
**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\ **Replies:** 2\ **Last updated:** [October 5, 2018, 9:54pm UTC](https://discuss.elastic.co/t/how-to-put-two-histograms-in-one-plot/151265 "2018-10-05T21:54:28Z")
I would like to put two histogram with similar topic in one plot for comparison. But I could not find how to do it. May I know how to do that? Thanks in advance. --- ## [Can't order by metric: MaxBucket in visualisation](https://discuss.elastic.co/t/cant-order-by-metric-maxbucket-in-visualisation/133089)
**Author:** [@Erik\_M](https://discuss.elastic.co/u/Erik_M)\ **Replies:** 2\ **Last updated:** [May 25, 2018, 7:05am UTC](https://discuss.elastic.co/t/cant-order-by-metric-maxbucket-in-visualisation/133089 "2018-05-25T07:05:17Z")
Hey, I'm trying to make a (preferably bar) visualisation using the Max Bucket metric. The reason I'm using Max Bucket is because datapoints repeat per weekly basis spread over a year and I'm only looking for week with … --- ## [Slow Kibana Dashboard](https://discuss.elastic.co/t/slow-kibana-dashboard/94471)
**Author:** [@N31LR](https://discuss.elastic.co/u/N31LR)\ **Replies:** 2\ **Last updated:** [July 26, 2017, 7:13am UTC](https://discuss.elastic.co/t/slow-kibana-dashboard/94471 "2017-07-26T07:13:46Z")
I have a kibana visualisation that runs a query containing a wildcard { "query\_string": { "query": "system.auth.message:Connection closed\*preauth\\\]", "analyze\_wildcard": true … --- ## [Topbeat does not report per-core statistics](https://discuss.elastic.co/t/topbeat-does-not-report-per-core-statistics/83130)
**Author:** [@alexander.bensch](https://discuss.elastic.co/u/alexander.bensch)\ **Replies:** 2\ **Last updated:** [May 2, 2017, 5:35pm UTC](https://discuss.elastic.co/t/topbeat-does-not-report-per-core-statistics/83130 "2017-05-02T17:35:04Z")
Howdy! I'm trying to analyze an OpenStack cloud's performance for different services using topbeat and packetbeat. I chose topbeat specifically because it supported per-core reporting for processes' CPU usage. However… --- ## [NEST API to configure built in analyzers](https://discuss.elastic.co/t/nest-api-to-configure-built-in-analyzers/64542)
**Author:** [@paul2](https://discuss.elastic.co/u/paul2)\ **Replies:** 2\ **Last updated:** [November 1, 2016, 3:34pm UTC](https://discuss.elastic.co/t/nest-api-to-configure-built-in-analyzers/64542 "2016-11-01T15:34:27Z")
Hi, I'm trying to figure out how to set one of my fields to use the Pattern Analyzer with "\\W|\_" Basically the 'fullAddress' field could include an underscore within the postcode, eg WC1V\_6hh. I want to do a wildcard s… --- ## [Object to string gets indexed as object in elasticsearch](https://discuss.elastic.co/t/object-to-string-gets-indexed-as-object-in-elasticsearch/61282)
**Author:** [@derEremit](https://discuss.elastic.co/u/derEremit)\ **Replies:** 2\ **Last updated:** [September 25, 2016, 6:34pm UTC](https://discuss.elastic.co/t/object-to-string-gets-indexed-as-object-in-elasticsearch/61282 "2016-09-25T18:34:17Z")
I need to convert a field to string so it does not create multiple fields and subfields in elasticsearch. Reason is I get logs from a source I can't control and they are in the format data: { 23423432\_23434343: { .… --- ## [Missing data in index](https://discuss.elastic.co/t/missing-data-in-index/12143)
**Author:** [@11116](https://discuss.elastic.co/u/11116)\ **Replies:** 2\ **Last updated:** [May 28, 2013, 11:05am UTC](https://discuss.elastic.co/t/missing-data-in-index/12143 "2013-05-28T11:05:22Z")
Hello! I collect large amounts of logs using logstash(~5000 lines per second). Configuration logstash: output { stdout { debug =\> true } elasticsearch { … --- ## [Point In Time for multi threaded queries / slices](https://discuss.elastic.co/t/point-in-time-for-multi-threaded-queries-slices/316243)
**Author:** [@str8y](https://discuss.elastic.co/u/str8y)\ **Replies:** 0\ **Last updated:** [October 10, 2022, 3:51pm UTC](https://discuss.elastic.co/t/point-in-time-for-multi-threaded-queries-slices/316243 "2022-10-10T15:51:19Z")
Hi, I read in the documentation that every result could contain an updated id for the pit I created, which I have to use in subsequent search requests. How does that behave in scenarios where I'm using multiple searche… --- ## [PATTERN ERROR WHEN ADDING IN INGEST PIPELINE GROK PROCESSOR](https://discuss.elastic.co/t/pattern-error-when-adding-in-ingest-pipeline-grok-processor/294667)
**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Replies:** 0\ **Last updated:** [January 18, 2022, 8:36am UTC](https://discuss.elastic.co/t/pattern-error-when-adding-in-ingest-pipeline-grok-processor/294667 "2022-01-18T08:36:53Z")
Hi all, I am stucked in one thing and want to ask in community that I am trying to create a grok pattern for a log and in dev tools grok tester I am successfull in writing up a pattern as the below screenshow indicates … --- ## [Upgrade elasticsearch from 6.8 to 7.8 date format](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-8-to-7-8-date-format/240072)
**Author:** [@krishm](https://discuss.elastic.co/u/krishm)\ **Replies:** 0\ **Last updated:** [July 7, 2020, 1:18am UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-8-to-7-8-date-format/240072 "2020-07-07T01:18:25Z")
Hello There, I am working on elasticsearch upgrade from 6.8 to 7.x. i have a date field using format below and i understand that i need to change the mapping to "uuuu-MM-dd HH:mm:ss" before upgrading to elasticsearch 7.… --- ## [How to add a new Event in logstash java filter](https://discuss.elastic.co/t/how-to-add-a-new-event-in-logstash-java-filter/218959)
**Author:** [@robert.hauser](https://discuss.elastic.co/u/robert.hauser)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 11:22am UTC](https://discuss.elastic.co/t/how-to-add-a-new-event-in-logstash-java-filter/218959 "2020-02-12T11:22:30Z")
Hi, i cloned the incoming event in the filter, but I do not know how to add it. i have tried. events.add(newEvent); I get an exception: java.util.ConcurrentModificationException: null at java.util.ArrayList$Itr.che… --- ## [Metric beat kubernetes example not showing k8s pod metrics](https://discuss.elastic.co/t/metric-beat-kubernetes-example-not-showing-k8s-pod-metrics/191486)
**Author:** [@Soumitra\_Ghosh](https://discuss.elastic.co/u/Soumitra_Ghosh)\ **Replies:** 0\ **Last updated:** [July 20, 2019, 4:35pm UTC](https://discuss.elastic.co/t/metric-beat-kubernetes-example-not-showing-k8s-pod-metrics/191486 "2019-07-20T16:35:00Z")
Hi i can get data from metricsbeat in every env but from EKS i get the following error is there a workaround? localhost or hostip does not work either Error making http request: Get http://localhost:10255/stats/summary: … --- ## [Persistent queue viewing tool and issue with parsing the records in queue](https://discuss.elastic.co/t/persistent-queue-viewing-tool-and-issue-with-parsing-the-records-in-queue/109699)
**Author:** [@Viachaslau\_Kabak](https://discuss.elastic.co/u/Viachaslau_Kabak)\ **Replies:** 0\ **Last updated:** [November 30, 2017, 7:49am UTC](https://discuss.elastic.co/t/persistent-queue-viewing-tool-and-issue-with-parsing-the-records-in-queue/109699 "2017-11-30T07:49:38Z")
Sometimes seems the logs are changed somewhere and grok freezing ang logstash uses 100% CPU permanently and does not filtering logs. After restart logstash is trying to parse the records in persistent queue but in some … --- ## [ElasticSearch : Performance of nested fields](https://discuss.elastic.co/t/elasticsearch-performance-of-nested-fields/62161)
**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\ **Replies:** 0\ **Last updated:** [October 4, 2016, 1:08pm UTC](https://discuss.elastic.co/t/elasticsearch-performance-of-nested-fields/62161 "2016-10-04T13:08:59Z")
Hi, To address one of our search scenarios we are planning to introduce nested fields. Has anyone used nested fields to support their feature(s) at a large scale and can share info around (1) how would it impact index s… --- ## [Difference b/w Normal DBs vs Elasticsearch](https://discuss.elastic.co/t/difference-b-w-normal-dbs-vs-elasticsearch/314207)
**Author:** [@Karan\_Koya](https://discuss.elastic.co/u/Karan_Koya)\ **Replies:** 8\ **Last updated:** [September 14, 2022, 10:27am UTC](https://discuss.elastic.co/t/difference-b-w-normal-dbs-vs-elasticsearch/314207 "2022-09-14T10:27:45Z")
I have recently started exploring Elastic Stack and came across your Beginner's series which has solved many doubts about Elasticsearch but I am still not sure why we not use Database and prefer Elasticsearch, and why/ho… --- ## [Access to elasticsearch host from kibana in other host](https://discuss.elastic.co/t/access-to-elasticsearch-host-from-kibana-in-other-host/303353)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 8\ **Last updated:** [April 28, 2022, 7:43am UTC](https://discuss.elastic.co/t/access-to-elasticsearch-host-from-kibana-in-other-host/303353 "2022-04-28T07:43:09Z")
hi I can't access to Elasticsearch host from kibana host , i tested this command and it not work this cmd : curl -XGET es-ip-or-hostname:9200/ , the response of the command : kibana@kibana:~$ curl -XGET 172.19.14.67:9… --- ## [Create a simple http status code watcher](https://discuss.elastic.co/t/create-a-simple-http-status-code-watcher/224891)
**Author:** [@leftright1](https://discuss.elastic.co/u/leftright1)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 5:19pm UTC](https://discuss.elastic.co/t/create-a-simple-http-status-code-watcher/224891 "2020-03-24T17:19:45Z")
Hi I am pretty new to this and I have been studying the docs for the last two days but I am struggling to create a simple watcher that does following: From a Heartbeat that checks multiple URLs and sends the log to the… --- ## [How to manage bookings with es nested structure](https://discuss.elastic.co/t/how-to-manage-bookings-with-es-nested-structure/207426)
**Author:** [@\_avinashks](https://discuss.elastic.co/u/_avinashks)\ **Replies:** 8\ **Last updated:** [November 13, 2019, 4:34am UTC](https://discuss.elastic.co/t/how-to-manage-bookings-with-es-nested-structure/207426 "2019-11-13T04:34:17Z")
Hello, I am working on a booking management system for vehicles, I have a nested structure for bookings inside the vehicle document as shown below. Each booking will include 2 timestamps: fromTime and tillTime which ind… [Previous page](https://discuss.elastic.co/top.md?page=1289&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1291&per_page=50&period=all)