# Top

**URL:** https://discuss.elastic.co/top.md?page=130&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 131

---

## [Elastic simple search considering timezones](https://discuss.elastic.co/t/elastic-simple-search-considering-timezones/9847)

<div class="topic-metadata">

**Author:** [@vannya](https://discuss.elastic.co/u/vannya)\
**Replies:** 9\
**Last updated:** [November 27, 2012, 10:15pm UTC](https://discuss.elastic.co/t/elastic-simple-search-considering-timezones/9847 "2012-11-27T22:15:20Z")

</div>

Hi all, I have an issue that requires timezone handling, meaning that I need to use dates given by user (in a certain timezone) to search in ES. All dates indexed to ES are UTC, and what I'm looking for is a way to…

---

## [Adding third node from subnet](https://discuss.elastic.co/t/adding-third-node-from-subnet/70770)

<div class="topic-metadata">

**Author:** [@Grenouille06](https://discuss.elastic.co/u/Grenouille06)\
**Replies:** 15\
**Last updated:** [January 9, 2017, 12:25pm UTC](https://discuss.elastic.co/t/adding-third-node-from-subnet/70770 "2017-01-09T12:25:25Z")

</div>

Hi, I have a cluster on the same subnet that works VM1 cluster.name: NCA-CLUSTER node.name: logwarehouse\_master1 network.host: 192.168.18.15 discovery.zen.ping.unicast.hosts: \["192.168.18.18:9300", "172.16.207.33:9300…

---

## [Failed to start Elasticsearch](https://discuss.elastic.co/t/failed-to-start-elasticsearch/271251)

<div class="topic-metadata">

**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\
**Replies:** 9\
**Last updated:** [April 27, 2021, 12:11pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch/271251 "2021-04-27T12:11:16Z")

</div>

hello, I have a problem regarding elasticsearch, where to start, the error "Failed to start Elasticsearch" always appears, please help to solve my error, thank you Apr 27 02:48:09 bigdata systemd\[1\]: Unit elasticsearch.…

---

## [Elasticsearch index throughtput](https://discuss.elastic.co/t/elasticsearch-index-throughtput/172160)

<div class="topic-metadata">

**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\
**Replies:** 14\
**Last updated:** [March 20, 2019, 3:17pm UTC](https://discuss.elastic.co/t/elasticsearch-index-throughtput/172160 "2019-03-20T15:17:03Z")

</div>

We have ES-Cluster setup as following, but we cant index not more than 1000 documents per second. We are trying verifying performance and scalablity. Client node (2 cpu,4GB memory) - 1 Data node (2 cpu,4GB memory) - 10 …

---

## [Is ElasticSearch truly scalable for analytics?](https://discuss.elastic.co/t/is-elasticsearch-truly-scalable-for-analytics/21263)

<div class="topic-metadata">

**Author:** [@Yifan\_Wang](https://discuss.elastic.co/u/Yifan_Wang)\
**Replies:** 25\
**Last updated:** [January 15, 2015, 6:53pm UTC](https://discuss.elastic.co/t/is-elasticsearch-truly-scalable-for-analytics/21263 "2015-01-15T18:53:51Z")

</div>

If I understand correctly, ElasticSearch directly sends query to and collects aggregated results from each shard. With number of shards increases, Reduce phase on the Client node will become overwhelmed. One woul…

---

## [Kibana and elasticsearch status is active , i can access elasticsearch via browser but kibana is giving error](https://discuss.elastic.co/t/kibana-and-elasticsearch-status-is-active-i-can-access-elasticsearch-via-browser-but-kibana-is-giving-error/194197)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 14\
**Last updated:** [August 9, 2019, 6:47pm UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-status-is-active-i-can-access-elasticsearch-via-browser-but-kibana-is-giving-error/194197 "2019-08-09T18:47:09Z")

</div>

I installed kibana and elasticsearch on google instance, elasticsearch is working fine. curl -X GET "10.128.0.26:9200/" { "name" : "node-1", "cluster\_name" : "ElasticsearchStaging", "cluster\_uuid" : "r-A1o-coQlWUWeo…

---

## [Cluster Timeout 30s ELK2.4](https://discuss.elastic.co/t/cluster-timeout-30s-elk2-4/78285)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 12\
**Last updated:** [April 3, 2017, 2:59am UTC](https://discuss.elastic.co/t/cluster-timeout-30s-elk2-4/78285 "2017-04-03T02:59:19Z")

</div>

Looking for some suggestions on how to figure out what is bottle necking out cluster. I have 18 Servers ( \>128gb ,and 20 Cores) running 22 Nodes (3 clients, 5 masters, 14 Data Nodes) (JVMs are all at 30GB Heap) ~…

---

## [How to get document by id (Get API) on a time series multi indexes environment?](https://discuss.elastic.co/t/how-to-get-document-by-id-get-api-on-a-time-series-multi-indexes-environment/103044)

<div class="topic-metadata">

**Author:** [@elia.palme](https://discuss.elastic.co/u/elia.palme)\
**Replies:** 9\
**Last updated:** [October 8, 2017, 4:33pm UTC](https://discuss.elastic.co/t/how-to-get-document-by-id-get-api-on-a-time-series-multi-indexes-environment/103044 "2017-10-08T16:33:23Z")

</div>

On a time series multi index environment where a new index is created every month what is the best approach to search for a document by id to ensure the document is unique among all indexes? I came up with two solutions…

---

## [Map data not displaying in 8.2.0](https://discuss.elastic.co/t/map-data-not-displaying-in-8-2-0/307450)

<div class="topic-metadata">

**Author:** [@martb](https://discuss.elastic.co/u/martb)\
**Replies:** 17\
**Last updated:** [June 20, 2022, 2:12pm UTC](https://discuss.elastic.co/t/map-data-not-displaying-in-8-2-0/307450 "2022-06-20T14:12:57Z")

</div>

Hi, Ive migrated from 7.16 to 8.2 but since then my maps are not displaying. The data is there and mapped with a gep\_point for the location. I also noticed the location is no longer displaying in the discover ie with t…

---

## [How to enable "Management / Security" in Kibana; runs xpack.security.enabled=true in Elasticsearch (Basic license plan)](https://discuss.elastic.co/t/how-to-enable-management-security-in-kibana-runs-xpack-security-enabled-true-in-elasticsearch-basic-license-plan/190339)

<div class="topic-metadata">

**Author:** [@azhurbilo](https://discuss.elastic.co/u/azhurbilo)\
**Replies:** 10\
**Last updated:** [August 8, 2019, 9:16am UTC](https://discuss.elastic.co/t/how-to-enable-management-security-in-kibana-runs-xpack-security-enabled-true-in-elasticsearch-basic-license-plan/190339 "2019-08-08T09:16:08Z")

</div>

How to enable "Management / Security" in Kibana for Basic plan? According to Subscriptions | Elastic Stack Products & Support | Elastic Basic Plan support Elasticsearch: Role-based access control File and native auth…

---

## [Indexing different types from a CouchDB database](https://discuss.elastic.co/t/indexing-different-types-from-a-couchdb-database/8729)

<div class="topic-metadata">

**Author:** [@Mark\_Huang\_2](https://discuss.elastic.co/u/Mark_Huang_2)\
**Replies:** 10\
**Last updated:** [August 20, 2012, 1:30am UTC](https://discuss.elastic.co/t/indexing-different-types-from-a-couchdb-database/8729 "2012-08-20T01:30:55Z")

</div>

Hi, Reading http://www.elasticsearch.org/blog/2010/02/12/yourdatayoursearch.html, I realized my problem is exactly the same as the article except for one huge difference: Instead of indexing one book or cd at a t…

---

## [Find matching word in text file using elk](https://discuss.elastic.co/t/find-matching-word-in-text-file-using-elk/179162)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 13\
**Last updated:** [May 6, 2019, 2:21pm UTC](https://discuss.elastic.co/t/find-matching-word-in-text-file-using-elk/179162 "2019-05-06T14:21:31Z")

</div>

hi, can anyone help me, i want to find all sentneces containing a word in log or txt file using ELK, any examples plz

---

## [How to increase writing speed to an index using Spark ES](https://discuss.elastic.co/t/how-to-increase-writing-speed-to-an-index-using-spark-es/291165)

<div class="topic-metadata">

**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\
**Replies:** 11\
**Last updated:** [December 9, 2021, 5:43am UTC](https://discuss.elastic.co/t/how-to-increase-writing-speed-to-an-index-using-spark-es/291165 "2021-12-09T05:43:16Z")

</div>

Hi, I am trying to write a DataFrame with 10k rows and 31 columns into an Elasticsearch index using spark. I am using "JavaEsSparkSQL.saveToEs" function. There are 12 concurrent tasks. I used the default "es.batch.size.b…

---

## [Mark IP Value with an external list](https://discuss.elastic.co/t/mark-ip-value-with-an-external-list/69055)

<div class="topic-metadata">

**Author:** [@Vomitar](https://discuss.elastic.co/u/Vomitar)\
**Replies:** 9\
**Last updated:** [December 15, 2016, 1:49pm UTC](https://discuss.elastic.co/t/mark-ip-value-with-an-external-list/69055 "2016-12-15T13:49:59Z")

</div>

Hallo to everyone, it's my first topic here. scenario I have to check if some IP are SECURE and i do it checking the value (send me by apache logs) by an external list and so i have to mark or add a field . Here an …

---

## [Date parse failure](https://discuss.elastic.co/t/date-parse-failure/103123)

<div class="topic-metadata">

**Author:** [@Clemens\_Overbosch](https://discuss.elastic.co/u/Clemens_Overbosch)\
**Replies:** 12\
**Last updated:** [October 7, 2017, 9:23pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123 "2017-10-07T21:23:06Z")

</div>

So I'm doing a school project with a scraper, I'm now trying to visualize this scraped data inside kibana. This is what my logstash config file looks like: input { file{ path =\> "/home/nod/Desktop/Data/bodybuildin…

---

## [Geopoint on Region Map](https://discuss.elastic.co/t/geopoint-on-region-map/190242)

<div class="topic-metadata">

**Author:** [@naknak987](https://discuss.elastic.co/u/naknak987)\
**Replies:** 9\
**Last updated:** [July 18, 2019, 5:45pm UTC](https://discuss.elastic.co/t/geopoint-on-region-map/190242 "2019-07-18T17:45:42Z")

</div>

Is it possible to plot geopoints and highlight regions in the same map? I would like to build a map that shows both our facility locations and highlight our customer zip codes. I can already do both of of these things in…

---

## [Using external Json-Queries in Kibana-Console with load\_from](https://discuss.elastic.co/t/using-external-json-queries-in-kibana-console-with-load-from/78585)

<div class="topic-metadata">

**Author:** [@mos](https://discuss.elastic.co/u/mos)\
**Replies:** 9\
**Last updated:** [March 27, 2017, 6:07am UTC](https://discuss.elastic.co/t/using-external-json-queries-in-kibana-console-with-load-from/78585 "2017-03-27T06:07:20Z")

</div>

Hello, I have a hard time to get the "load\_from" parameter working?! My call: http://localhost:5601/app/kibana#/dev\_tools/console?load\_from=http://localhost:8090/myApplication/elasticQuery.json My Kibana-Console …

---

## [Removing Data Without Deleting Index While Using Filebeat on Elasticsearch](https://discuss.elastic.co/t/removing-data-without-deleting-index-while-using-filebeat-on-elasticsearch/324761)

<div class="topic-metadata">

**Author:** [@SFD13](https://discuss.elastic.co/u/SFD13)\
**Replies:** 11\
**Last updated:** [February 13, 2023, 10:49am UTC](https://discuss.elastic.co/t/removing-data-without-deleting-index-while-using-filebeat-on-elasticsearch/324761 "2023-02-13T10:49:18Z")

</div>

Hi everyone, I am using filebeat-\* index with some fields on Elasticsearch. I want to remove all data on the elasticsearch which I used but that index remains. It means that without deleting index name and contents (ava…

---

## [Loop through json arrays](https://discuss.elastic.co/t/loop-through-json-arrays/232336)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 9\
**Last updated:** [May 15, 2020, 10:00pm UTC](https://discuss.elastic.co/t/loop-through-json-arrays/232336 "2020-05-15T22:00:41Z")

</div>

Hi, My JSON file looks like this : { "bookings": \[ { "bookingId": 553267, "bookingRef": "VO20200108460", "statusId": 1, "status": "Confirmed", "rooms": \[ { "board": "Demi pension", "paxes": { "adults": 2, "…

---

## [Migrating data off of ES 0.90.3 and into ES 1.7.x](https://discuss.elastic.co/t/migrating-data-off-of-es-0-90-3-and-into-es-1-7-x/35471)

<div class="topic-metadata">

**Author:** [@rysiek](https://discuss.elastic.co/u/rysiek)\
**Replies:** 9\
**Last updated:** [November 30, 2015, 3:07pm UTC](https://discuss.elastic.co/t/migrating-data-off-of-es-0-90-3-and-into-es-1-7-x/35471 "2015-11-30T15:07:57Z")

</div>

I have found myself in an uncomfortable spot where I have to migrate data off of ES 0.90.3 (I have no access to the server itself, just to the data) and into a different ES 1.7.x (here I have full access). So far I have…

---

## [RoR/es-hadoop connector/Hive problem](https://discuss.elastic.co/t/ror-es-hadoop-connector-hive-problem/116777)

<div class="topic-metadata">

**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\
**Replies:** 11\
**Last updated:** [March 18, 2018, 4:24pm UTC](https://discuss.elastic.co/t/ror-es-hadoop-connector-hive-problem/116777 "2018-03-18T16:24:52Z")

</div>

I'm experiencing the issue when querying ES with RoR (readonlyrest) from external Hive table with property 'es.net.http.header.Authorization'='Basic (base64 encoded user:pwd)' in hive table definition. Running select st…

---

## [APM-Server not connecting to my application](https://discuss.elastic.co/t/apm-server-not-connecting-to-my-application/281475)

<div class="topic-metadata">

**Author:** [@Piyush\_Mittal](https://discuss.elastic.co/u/Piyush_Mittal)\
**Replies:** 13\
**Last updated:** [August 28, 2021, 8:08pm UTC](https://discuss.elastic.co/t/apm-server-not-connecting-to-my-application/281475 "2021-08-28T20:08:56Z")

</div>

Hey, I just started using APM to monitor my application. I done successful setup of APM-server along with my nodejs apm-agent on my local machine. But, When I go to setup the same for production, my APM-server is not con…

---

## [Scaling elastic search for read heavy applications](https://discuss.elastic.co/t/scaling-elastic-search-for-read-heavy-applications/317597)

<div class="topic-metadata">

**Author:** [@himesh](https://discuss.elastic.co/u/himesh)\
**Replies:** 11\
**Last updated:** [November 11, 2022, 12:03pm UTC](https://discuss.elastic.co/t/scaling-elastic-search-for-read-heavy-applications/317597 "2022-11-11T12:03:37Z")

</div>

We have Node JS (Nest JS / Express) - based application services on the GCP cloud. We are using Elasticsearch to support full-text search on a blog/news website. Our requirement is to support 2000 reads per second mini…

---

## [🧐 Observability \> Alerts \> Manage Rules: "Unable to load rules"](https://discuss.elastic.co/t/observability-alerts-manage-rules-unable-to-load-rules/315170)

<div class="topic-metadata">

**Author:** [@Its\_Anton](https://discuss.elastic.co/u/Its_Anton)\
**Replies:** 12\
**Last updated:** [September 28, 2022, 12:02am UTC](https://discuss.elastic.co/t/observability-alerts-manage-rules-unable-to-load-rules/315170 "2022-09-28T00:02:40Z")

</div>

Hi! When I navigate to Observability \> Alerts \> Manage Rules, I get 2 "Unable to load rules" errors in a small popup: And I see two 400 errors, that say {"statusCode":400,"error":"Bad Request","message":"KQLSyntaxE…

---

## [Elasticsearch: Creating template using java](https://discuss.elastic.co/t/elasticsearch-creating-template-using-java/41456)

<div class="topic-metadata">

**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\
**Replies:** 11\
**Last updated:** [February 11, 2016, 9:10am UTC](https://discuss.elastic.co/t/elasticsearch-creating-template-using-java/41456 "2016-02-11T09:10:41Z")

</div>

I want to create a custom template in elasticsearch as it by default analyses all fields. I want only specific fields to be analysed and I want to do this using a java client. Also where can I find required jar for the…

---

## [When do you need more then 1 shard?](https://discuss.elastic.co/t/when-do-you-need-more-then-1-shard/1272)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 11\
**Last updated:** [May 28, 2015, 5:06pm UTC](https://discuss.elastic.co/t/when-do-you-need-more-then-1-shard/1272 "2015-05-28T17:06:36Z")

</div>

So I tested my data on a single shard and it seems to perform adequately. Would single shard affect parallelism or doing ops in parallel like bulk indexing and search at same time? I have 4 physical machines with 32 co…

---

## [How to index routing id based document in rally](https://discuss.elastic.co/t/how-to-index-routing-id-based-document-in-rally/95321)

<div class="topic-metadata">

**Author:** [@thennamca](https://discuss.elastic.co/u/thennamca)\
**Replies:** 9\
**Last updated:** [August 4, 2017, 6:09am UTC](https://discuss.elastic.co/t/how-to-index-routing-id-based-document-in-rally/95321 "2017-08-04T06:09:40Z")

</div>

Hi I want to do a routing id based bulk index in rally ,i know how to do in rest call ,but using rally i dont know how to pass routing id,can you please guide me how to do it This way i used routing based index in rest…

---

## [Fields](https://discuss.elastic.co/t/fields/224799)

<div class="topic-metadata">

**Author:** [@rockyu](https://discuss.elastic.co/u/rockyu)\
**Replies:** 13\
**Last updated:** [March 27, 2020, 2:27am UTC](https://discuss.elastic.co/t/fields/224799 "2020-03-27T02:27:29Z")

</div>

Error while initializing input: missing field accessing 'filebeat.inputs.0.fields.host\_ip'

---

## [Issues with jvm lock](https://discuss.elastic.co/t/issues-with-jvm-lock/291318)

<div class="topic-metadata">

**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\
**Replies:** 9\
**Last updated:** [December 14, 2021, 6:25am UTC](https://discuss.elastic.co/t/issues-with-jvm-lock/291318 "2021-12-14T06:25:33Z")

</div>

Hello, I have below issues, after start Elasticsearch I see warnings "message": "Unable to lock JVM Memory: error=12, reason=Cannot allocate memory" "message": "This can result in part of the JVM being swapped out." "…

---

## [Elasticsearch discovery issues kubernetes](https://discuss.elastic.co/t/elasticsearch-discovery-issues-kubernetes/311465)

<div class="topic-metadata">

**Author:** [@willsc](https://discuss.elastic.co/u/willsc)\
**Replies:** 17\
**Last updated:** [August 9, 2022, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-discovery-issues-kubernetes/311465 "2022-08-09T10:43:58Z")

</div>

Deploying elasticsearch 7.17.4 into kubernetes {rancher}, and have noticed that elastic doesn't form a cluster, it partitions into 3 separate master nodes. How do i increase the level of debugging on the masters, as all…

---

## [Filebeat Grok for Date IIS logs](https://discuss.elastic.co/t/filebeat-grok-for-date-iis-logs/147659)

<div class="topic-metadata">

**Author:** [@necrolingus](https://discuss.elastic.co/u/necrolingus)\
**Replies:** 9\
**Last updated:** [September 11, 2018, 6:19am UTC](https://discuss.elastic.co/t/filebeat-grok-for-date-iis-logs/147659 "2018-09-11T06:19:09Z")

</div>

Hi everyone I am trying to import IIS Logs, for now literally one field which is the date and time. Here is what my log file looks like: #Software: IIS Advanced Logging Module #Version: 1.0 #Start-Date: 2018-09-07 05…

---

## [Unbalanced primary shards affects index performance?](https://discuss.elastic.co/t/unbalanced-primary-shards-affects-index-performance/105489)

<div class="topic-metadata">

**Author:** [@drs](https://discuss.elastic.co/u/drs)\
**Replies:** 9\
**Last updated:** [November 22, 2017, 1:45pm UTC](https://discuss.elastic.co/t/unbalanced-primary-shards-affects-index-performance/105489 "2017-11-22T13:45:09Z")

</div>

In a previous discussion there's a claim that we shouldn't worry about balancing primary shards across all nodes because primaries and replicas do almost the same amount of work during indexing. Currently my primaries a…

---

## [Using packetbeat to extract user's IP](https://discuss.elastic.co/t/using-packetbeat-to-extract-users-ip/75258)

<div class="topic-metadata">

**Author:** [@bobpurewal](https://discuss.elastic.co/u/bobpurewal)\
**Replies:** 9\
**Last updated:** [February 16, 2017, 7:50pm UTC](https://discuss.elastic.co/t/using-packetbeat-to-extract-users-ip/75258 "2017-02-16T19:50:06Z")

</div>

Hello, I'm trying to get Packetbeat to add the user's IP address to the incoming payload, and then submit that to ES. I'm running ES and I can see the data that's being submitted (it's all correct). I then ran Packetbe…

---

## [Logstash executable accepts filebeat data, but when installed as service not working with same conf files](https://discuss.elastic.co/t/logstash-executable-accepts-filebeat-data-but-when-installed-as-service-not-working-with-same-conf-files/98792)

<div class="topic-metadata">

**Author:** [@sunny1](https://discuss.elastic.co/u/sunny1)\
**Replies:** 17\
**Last updated:** [August 30, 2017, 7:08pm UTC](https://discuss.elastic.co/t/logstash-executable-accepts-filebeat-data-but-when-installed-as-service-not-working-with-same-conf-files/98792 "2017-08-30T19:08:41Z")

</div>

Hi All, I am in process of setting up ELK for monitoring my data. Elastic and Kibana is installed as service. For testing purpose i had filebeat and logstash running from executable. I checked everything is working fin…

---

## [Ingest performance degrades sharply along with the documents having more fileds](https://discuss.elastic.co/t/ingest-performance-degrades-sharply-along-with-the-documents-having-more-fileds/18087)

<div class="topic-metadata">

**Author:** [@Maco\_Ma](https://discuss.elastic.co/u/Maco_Ma)\
**Replies:** 24\
**Last updated:** [July 8, 2014, 3:19pm UTC](https://discuss.elastic.co/t/ingest-performance-degrades-sharply-along-with-the-documents-having-more-fileds/18087 "2014-07-08T15:19:54Z")

</div>

I try to measure the performance of ingesting the documents having lots of fields. The latest elasticsearch 1.2.1: Total docs count: 10k (a small set definitely) ES\_HEAP\_SIZE: 48G settings: {"doc":{"settings":…

---

## [Setup-password file is not available upon new install](https://discuss.elastic.co/t/setup-password-file-is-not-available-upon-new-install/132086)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 11\
**Last updated:** [June 1, 2018, 8:52am UTC](https://discuss.elastic.co/t/setup-password-file-is-not-available-upon-new-install/132086 "2018-06-01T08:52:26Z")

</div>

When I initially install x-pack, there is no "setup-password" file to set the password. Then I gotten a guide, trying to uninstall the package, and reinstall, it still not there. May I know is there any solution to it?

---

## [Master node with 100% CPU](https://discuss.elastic.co/t/master-node-with-100-cpu/263003)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 9\
**Last updated:** [February 10, 2021, 9:36pm UTC](https://discuss.elastic.co/t/master-node-with-100-cpu/263003 "2021-02-10T21:36:32Z")

</div>

we are getting 100% CPU usage for a master node. the cluster is hosted in the Elastic cloud. any help will be appreciated! attached below the tasks (it seems to run /admin/snapshot/delete constantly )

---

## [Query DSL as json](https://discuss.elastic.co/t/query-dsl-as-json/10443)

<div class="topic-metadata">

**Author:** [@Jimi\_Parekh](https://discuss.elastic.co/u/Jimi_Parekh)\
**Replies:** 16\
**Last updated:** [January 24, 2013, 8:19am UTC](https://discuss.elastic.co/t/query-dsl-as-json/10443 "2013-01-24T08:19:21Z")

</div>

Hi, I have included the query dsl in a json file. Below is the exact how my "input.json" looks like (Please note the use of '\*' before and after the text: { "query" : { "term" : { "@message" : "\*…

---

## [Curator no indices found](https://discuss.elastic.co/t/curator-no-indices-found/187576)

<div class="topic-metadata">

**Author:** [@wToad](https://discuss.elastic.co/u/wToad)\
**Replies:** 13\
**Last updated:** [July 1, 2019, 9:16am UTC](https://discuss.elastic.co/t/curator-no-indices-found/187576 "2019-07-01T09:16:25Z")

</div>

Hello, I'm using ElasticSearch v6.3.2 and Curator v5.7.6 to delete indices. Unfortunately it seems that my configuration doesn't find any indices even though there are many. My commands: $ curator\_cli --host elasticsea…

---

## [Kibana Refresh Fields fails with Error: socket hang up](https://discuss.elastic.co/t/kibana-refresh-fields-fails-with-error-socket-hang-up/97846)

<div class="topic-metadata">

**Author:** [@JeffParsons](https://discuss.elastic.co/u/JeffParsons)\
**Replies:** 9\
**Last updated:** [September 25, 2017, 2:27pm UTC](https://discuss.elastic.co/t/kibana-refresh-fields-fails-with-error-socket-hang-up/97846 "2017-09-25T14:27:00Z")

</div>

Hello All, We need to run refresh fields on an index pattern in Kibana 5.4.1 (running with ES 5.4.1) and are running into issues getting the command to complete. Not really sure when the problem started, but has become …

---

## [Filebeat Output error while using file](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268)

<div class="topic-metadata">

**Author:** [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Replies:** 9\
**Last updated:** [May 6, 2016, 1:04pm UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268 "2016-05-06T13:04:12Z")

</div>

PS C:\\Program Files\\Filebeat\> ./filebeat -e -c filebeat0.yml -d "publish" 2016/05/05 07:26:16.287762 geolite.go:24: INFO GeoIP disabled: No paths were set under output.geoip.paths 2016/05/05 07:26:16.287762 logstash.go:1…

---

## [Shards and replicas](https://discuss.elastic.co/t/shards-and-replicas/4234)

<div class="topic-metadata">

**Author:** [@Barsk](https://discuss.elastic.co/u/Barsk)\
**Replies:** 15\
**Last updated:** [May 30, 2012, 8:45am UTC](https://discuss.elastic.co/t/shards-and-replicas/4234 "2012-05-30T08:45:33Z")

</div>

Well, I am probably looking a bit dumb asking this. But anyways here it goes. The first time ever I came by the names shards and replicas was when I started looking into new search engines for my web applications an…

---

## [Elasticsearch 6.0-beta1 - Boosting](https://discuss.elastic.co/t/elasticsearch-6-0-beta1-boosting/97049)

<div class="topic-metadata">

**Author:** [@p365labs](https://discuss.elastic.co/u/p365labs)\
**Replies:** 14\
**Last updated:** [August 23, 2017, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-beta1-boosting/97049 "2017-08-23T16:01:09Z")

</div>

Hi All ! I found some different behaviours between ES 5 and ES 6 on query Boosting but I did not find anything in the documentation about this change. Can someone help me ? The RESULTS are the SAME but the \_score value…

---

## [Need to ship confluent cloud logs and metrics](https://discuss.elastic.co/t/need-to-ship-confluent-cloud-logs-and-metrics/297962)

<div class="topic-metadata">

**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\
**Replies:** 16\
**Last updated:** [March 17, 2022, 5:39am UTC](https://discuss.elastic.co/t/need-to-ship-confluent-cloud-logs-and-metrics/297962 "2022-03-17T05:39:08Z")

</div>

Hi team, Need to ship confluent cloud logs/metrics to beats that are installed on a Kubernetes cluster and eventually to Elasticsearch. Have read about Elasticsearch syn connector but can we first ship it to beats and …

---

## [Не удается перераспределить шарды](https://discuss.elastic.co/t/topic/154635)

<div class="topic-metadata">

**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\
**Replies:** 10\
**Last updated:** [October 30, 2018, 6:14pm UTC](https://discuss.elastic.co/t/topic/154635 "2018-10-30T18:14:02Z")

</div>

Здравствуйте! У меня в кластере 2 ноды, на каждой установлено по 2 диска. В настройках ноды прописано использование обоих дисков: path.data: - C:\\ProgramData\\Elastic\\Elasticsearch\\data - D:\\data Сегодня столкнулся с п…

---

## [Create jobs with field combinations](https://discuss.elastic.co/t/create-jobs-with-field-combinations/186268)

<div class="topic-metadata">

**Author:** [@Bharath\_Kumar\_R](https://discuss.elastic.co/u/Bharath_Kumar_R)\
**Replies:** 24\
**Last updated:** [July 12, 2019, 6:25pm UTC](https://discuss.elastic.co/t/create-jobs-with-field-combinations/186268 "2019-07-12T18:25:38Z")

</div>

Hey, I have 2 fields: field1 and field2 in my data. Right now, Im filtering the data for some combinations of field1 and field2 and creating the jobs for those saved searches. What modifications/configurations are to be …

---

## [Use mapping character filter from file](https://discuss.elastic.co/t/use-mapping-character-filter-from-file/102485)

<div class="topic-metadata">

**Author:** [@MPurcell](https://discuss.elastic.co/u/MPurcell)\
**Replies:** 11\
**Last updated:** [October 26, 2017, 3:22am UTC](https://discuss.elastic.co/t/use-mapping-character-filter-from-file/102485 "2017-10-26T03:22:24Z")

</div>

Hello! I'm looking to use the mapping character filter over a large number of terms. The basic idea is that I'm trying to standardize street addresses based on the USPS list seen here: https://pe.usps.com/text/pub28/28…

---

## [Long time to create TransportClient object](https://discuss.elastic.co/t/long-time-to-create-transportclient-object/56579)

<div class="topic-metadata">

**Author:** [@vinayakshukre](https://discuss.elastic.co/u/vinayakshukre)\
**Replies:** 13\
**Last updated:** [July 29, 2016, 7:58am UTC](https://discuss.elastic.co/t/long-time-to-create-transportclient-object/56579 "2016-07-29T07:58:48Z")

</div>

I am using below Java code to create Transportclient object. logger.info("Starting creation of Transport Client object"); try { Settings settings = Settings.settingsBuilder().put("cluster.name", clu…

---

## [Beats Received on Port 11001 Are Being Processed By Port 11000 Config](https://discuss.elastic.co/t/beats-received-on-port-11001-are-being-processed-by-port-11000-config/126603)

<div class="topic-metadata">

**Author:** [@mn\_dev](https://discuss.elastic.co/u/mn_dev)\
**Replies:** 18\
**Last updated:** [April 5, 2018, 9:09pm UTC](https://discuss.elastic.co/t/beats-received-on-port-11001-are-being-processed-by-port-11000-config/126603 "2018-04-05T21:09:36Z")

</div>

From the guidance of Two filebeat instances, I have successfully setup two instances of Filebeat on one machine. Instance1 reads logs for AppA and ships them to Logstash:11000 while Instance2 reads logs for AppB and ship…

---

## [New node is not getting added to the cluster](https://discuss.elastic.co/t/new-node-is-not-getting-added-to-the-cluster/154769)

<div class="topic-metadata">

**Author:** [@Eva](https://discuss.elastic.co/u/Eva)\
**Replies:** 9\
**Last updated:** [October 31, 2018, 12:21pm UTC](https://discuss.elastic.co/t/new-node-is-not-getting-added-to-the-cluster/154769 "2018-10-31T12:21:35Z")

</div>

Hello there I have a test cluster on aws ami with one node and i'm trying to add a new node to the same cluster and have installed elasticsearch of same version as in node 1, on an other aws instance. Below are my node…

[Previous page](https://discuss.elastic.co/top.md?page=129&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=131&per_page=50&period=all)
