# Top

**URL:** https://discuss.elastic.co/top.md?page=1306&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1307

---

## [Missing nginx.access.geoip.location](https://discuss.elastic.co/t/missing-nginx-access-geoip-location/84085)

<div class="topic-metadata">

**Author:** [@ribellusmt](https://discuss.elastic.co/u/ribellusmt)\
**Replies:** 2\
**Last updated:** [April 30, 2017, 1:50pm UTC](https://discuss.elastic.co/t/missing-nginx-access-geoip-location/84085 "2017-04-30T13:50:49Z")

</div>

Hello the Elastic familly I deployed a new server with nginx and I use Filebeat to send nginx logs the the elasticsearch cluster. I added the pluggin nginx and imported the dashboard. The probvlem I have is that there …

---

## [To know the space occupied by index and data respectively in elasticsearch](https://discuss.elastic.co/t/to-know-the-space-occupied-by-index-and-data-respectively-in-elasticsearch/52017)

<div class="topic-metadata">

**Author:** [@Ujjainee](https://discuss.elastic.co/u/Ujjainee)\
**Replies:** 2\
**Last updated:** [June 7, 2016, 9:58am UTC](https://discuss.elastic.co/t/to-know-the-space-occupied-by-index-and-data-respectively-in-elasticsearch/52017 "2016-06-07T09:58:44Z")

</div>

How to find out how much space is occupied by my data and indices respectively in elasticsearch? I want to know the proportion of data:indices. How can i find out that?

---

## [Terms aggregation on more than one term](https://discuss.elastic.co/t/terms-aggregation-on-more-than-one-term/47234)

<div class="topic-metadata">

**Author:** [@yehua984710](https://discuss.elastic.co/u/yehua984710)\
**Replies:** 2\
**Last updated:** [April 18, 2016, 5:36am UTC](https://discuss.elastic.co/t/terms-aggregation-on-more-than-one-term/47234 "2016-04-18T05:36:19Z")

</div>

I know that term aggregation can return the buckets with how many docs that one specific term resides in. Recently I got a task to aggregate on a dataset to get the distribution of combined terms. eg. I have the docs …

---

## [How to convert String timestamp to actual timestamp?](https://discuss.elastic.co/t/how-to-convert-string-timestamp-to-actual-timestamp/39926)

<div class="topic-metadata">

**Author:** [@gaurav1424](https://discuss.elastic.co/u/gaurav1424)\
**Replies:** 2\
**Last updated:** [January 24, 2016, 3:44am UTC](https://discuss.elastic.co/t/how-to-convert-string-timestamp-to-actual-timestamp/39926 "2016-01-24T03:44:23Z")

</div>

Hello All, I have such kind of syslog events : Jan 22 14:24:23 mike.local DDP\_Agent\[83\]: Complete - state change from encrypted\_state to encrypted\_state, commandState = encrypt\_commandedState Once I parse using sys…

---

## [What is the best way to change the dims for a dense\_vector in an index?](https://discuss.elastic.co/t/what-is-the-best-way-to-change-the-dims-for-a-dense-vector-in-an-index/313920)

<div class="topic-metadata">

**Author:** [@reisner](https://discuss.elastic.co/u/reisner)\
**Replies:** 1\
**Last updated:** [September 8, 2022, 4:01am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-change-the-dims-for-a-dense-vector-in-an-index/313920 "2022-09-08T04:01:18Z")

</div>

I have an index with a dense\_vector field with 256 dimensions. I want to change to a new embedding model that uses a different number of dimensions. I dont mind losing the data in the old field. What's the best way to ke…

---

## [Kibana - HTTP 500 error - circuit\_breaking\_exception](https://discuss.elastic.co/t/kibana-http-500-error-circuit-breaking-exception/246708)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 1\
**Last updated:** [August 28, 2020, 5:00am UTC](https://discuss.elastic.co/t/kibana-http-500-error-circuit-breaking-exception/246708 "2020-08-28T05:00:23Z")

</div>

Hello, I hope you and your loved ones are safe and healthy. I have Kibana and Elasticsearch installed on the same VM. I am getting following error post successful login to Kibana instance using root privileged account. …

---

## [Is there is a way to create a custom map plugin in Kibana?](https://discuss.elastic.co/t/is-there-is-a-way-to-create-a-custom-map-plugin-in-kibana/92827)

<div class="topic-metadata">

**Author:** [@Alex\_S](https://discuss.elastic.co/u/Alex_S)\
**Replies:** 1\
**Last updated:** [July 12, 2017, 3:24pm UTC](https://discuss.elastic.co/t/is-there-is-a-way-to-create-a-custom-map-plugin-in-kibana/92827 "2017-07-12T15:24:04Z")

</div>

Hello Geeks , I'd like to create a custom map (Indoor) for plotting , is this possible in kibana ? is there is any plugin already that does the same functionality ? Thanks Alex

---

## [GET Document from Index with Kibana API](https://discuss.elastic.co/t/get-document-from-index-with-kibana-api/324887)

<div class="topic-metadata">

**Author:** [@Jonathan\_Emami](https://discuss.elastic.co/u/Jonathan_Emami)\
**Replies:** 3\
**Last updated:** [February 7, 2023, 2:58pm UTC](https://discuss.elastic.co/t/get-document-from-index-with-kibana-api/324887 "2023-02-07T14:58:21Z")

</div>

Hi, I'm writing here cause I've read through all of the Kibana REST API, but I still have not found an answer to my question REST API | Kibana Guide \[8.6\] | Elastic I basically want to access a document in the index, i…

---

## [Logstash 7.1.1 - Any quote symbol except ' and " for ruby code?](https://discuss.elastic.co/t/logstash-7-1-1-any-quote-symbol-except-and-for-ruby-code/186527)

<div class="topic-metadata">

**Author:** [@Alexl](https://discuss.elastic.co/u/Alexl)\
**Replies:** 3\
**Last updated:** [June 19, 2019, 10:35pm UTC](https://discuss.elastic.co/t/logstash-7-1-1-any-quote-symbol-except-and-for-ruby-code/186527 "2019-06-19T22:35:33Z")

</div>

Hello all! I'm trying to pass obtained by grok variable data into ruby code filter and I need to do that in double quotas of plain ruby code which contain 'somestring' that I would like to concatenate with my variable. …

---

## [I have an issue in installing x-pack the following text appears whenever I try to install it](https://discuss.elastic.co/t/i-have-an-issue-in-installing-x-pack-the-following-text-appears-whenever-i-try-to-install-it/138594)

<div class="topic-metadata">

**Author:** [@Ibra](https://discuss.elastic.co/u/Ibra)\
**Replies:** 3\
**Last updated:** [July 5, 2018, 9:03am UTC](https://discuss.elastic.co/t/i-have-an-issue-in-installing-x-pack-the-following-text-appears-whenever-i-try-to-install-it/138594 "2018-07-05T09:03:44Z")

</div>

\-\> Installing x-pack/... Trying https://download.elastic.co/elasticsearch/release/org/elasticsearch/plugin/x-pack/2.3.1/x-pack-2.3.1.zip ... ERROR: failed to download out of all possible locations..., use --verbose to …

---

## [Failed to send join request to master on Centos7](https://discuss.elastic.co/t/failed-to-send-join-request-to-master-on-centos7/115625)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 3\
**Last updated:** [January 16, 2018, 3:53am UTC](https://discuss.elastic.co/t/failed-to-send-join-request-to-master-on-centos7/115625 "2018-01-16T03:53:26Z")

</div>

Hi, I want to set up a ES cluster on my Centos7 pc, but there are some problems. I have two nodes, and this is the config: node1: # ---------------------------------- Cluster ----------------------------------- # # U…

---

## [Filebeat Multiline log messages - Behaving differently with version 5.1 and 5.3](https://discuss.elastic.co/t/filebeat-multiline-log-messages-behaving-differently-with-version-5-1-and-5-3/82100)

<div class="topic-metadata">

**Author:** [@venugopal.doddi](https://discuss.elastic.co/u/venugopal.doddi)\
**Replies:** 3\
**Last updated:** [April 12, 2017, 2:44pm UTC](https://discuss.elastic.co/t/filebeat-multiline-log-messages-behaving-differently-with-version-5-1-and-5-3/82100 "2017-04-12T14:44:41Z")

</div>

I am working on a requirement where, I have to capture the multi line log messages, sending them via logstach and view them on Kibana. I am trying with version 5.1 and 5.3 versions of filebeat. In 5.1, with the pattern…

---

## [Java client version upgrade causing issues](https://discuss.elastic.co/t/java-client-version-upgrade-causing-issues/27531)

<div class="topic-metadata">

**Author:** [@Pradeep\_Sadashivamur](https://discuss.elastic.co/u/Pradeep_Sadashivamur)\
**Replies:** 3\
**Last updated:** [August 18, 2015, 10:27am UTC](https://discuss.elastic.co/t/java-client-version-upgrade-causing-issues/27531 "2015-08-18T10:27:34Z")

</div>

I have upgraded Java client from 1.3.1 version to 1.3.4 but the order of search results are not what I was expecting (in a random order). I tried with many times reverting back and forth the version. All good until 1.3.2…

---

## [Using elasticsearch as a realtime fire hose](https://discuss.elastic.co/t/using-elasticsearch-as-a-realtime-fire-hose/19421)

<div class="topic-metadata">

**Author:** [@Jim\_Alateras](https://discuss.elastic.co/u/Jim_Alateras)\
**Replies:** 3\
**Last updated:** [August 26, 2014, 2:28pm UTC](https://discuss.elastic.co/t/using-elasticsearch-as-a-realtime-fire-hose/19421 "2014-08-26T14:28:12Z")

</div>

I was wondering whether there were any mechanisms to use ES as a realtime feed for downstream systems. I have a cluster that gathers observations from many sensors. I have a need to maintain a list of realtime counte…

---

## [Elasticsearch Service: Email whitelisting alternative](https://discuss.elastic.co/t/elasticsearch-service-email-whitelisting-alternative/239789)

<div class="topic-metadata">

**Author:** [@Max96](https://discuss.elastic.co/u/Max96)\
**Replies:** 0\
**Last updated:** [July 3, 2020, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-service-email-whitelisting-alternative/239789 "2020-07-03T11:42:03Z")

</div>

Hello, I am new to the ELK-Stack and we are using the Elasticsearch Service. Is it possible to send emails without whitelisting them first? Thanks Max

---

## [Identical documents have different scores when using fuzziness](https://discuss.elastic.co/t/identical-documents-have-different-scores-when-using-fuzziness/8200)

<div class="topic-metadata">

**Author:** [@Burrito](https://discuss.elastic.co/u/Burrito)\
**Replies:** 0\
**Last updated:** [June 22, 2012, 7:29pm UTC](https://discuss.elastic.co/t/identical-documents-have-different-scores-when-using-fuzziness/8200 "2012-06-22T19:29:51Z")

</div>

I'm having trouble understanding why identical documents will have different scores on occasion. This gist sh file creates an index and adds 4 documents. The single string property has the same value "crime" for 3 of…

---

## [Saved Objectsにて「-」を含む名称の検索について](https://discuss.elastic.co/t/saved-objects/306642)

<div class="topic-metadata">

**Author:** [@na\_taka](https://discuss.elastic.co/u/na_taka)\
**Replies:** 5\
**Last updated:** [June 8, 2022, 10:33am UTC](https://discuss.elastic.co/t/saved-objects/306642 "2022-06-08T10:33:11Z")

</div>

zzz-zzzのようなObject名称である場合に、名称を完全一致で検索を行うには、どのように指定したら検索できるのでしょうか。 部分一致では、以下のように検索は可能である。 しかし、以下のように完全一致となるように指定した場合には該当しない。 "zzz-zzz"と「"」で囲ってみた場合でも検索がでませんでした。

---

## [Unknown\_host\_exception | watcher webhook](https://discuss.elastic.co/t/unknown-host-exception-watcher-webhook/285753)

<div class="topic-metadata">

**Author:** [@Juliana\_Sabino](https://discuss.elastic.co/u/Juliana_Sabino)\
**Replies:** 5\
**Last updated:** [October 2, 2021, 7:45pm UTC](https://discuss.elastic.co/t/unknown-host-exception-watcher-webhook/285753 "2021-10-02T19:45:03Z")

</div>

Hi Team, I'm a newbie and I'm trying to create a watcher. I'm receiving this error and I don't know what I'm doing wrong. "actions": \[ { "id": "my\_webhook", "type": "webhook", "status": "…

---

## [How not to query on specific fields in elasticsearch](https://discuss.elastic.co/t/how-not-to-query-on-specific-fields-in-elasticsearch/76193)

<div class="topic-metadata">

**Author:** [@Divya\_Bhardwaj](https://discuss.elastic.co/u/Divya_Bhardwaj)\
**Replies:** 5\
**Last updated:** [March 3, 2017, 7:01am UTC](https://discuss.elastic.co/t/how-not-to-query-on-specific-fields-in-elasticsearch/76193 "2017-03-03T07:01:51Z")

</div>

My usecase demands to search on all fields for a given keyword except 2 fields. must\_not is not working, Pls guide. Thanks

---

## [Modifying the timestamp](https://discuss.elastic.co/t/modifying-the-timestamp/55002)

<div class="topic-metadata">

**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\
**Replies:** 5\
**Last updated:** [July 8, 2016, 1:01am UTC](https://discuss.elastic.co/t/modifying-the-timestamp/55002 "2016-07-08T01:01:30Z")

</div>

I've got a filebeat daemon outputting logs to my redis server. My logstash is getting the input from redis and the timestamps are looking like this: "2016-07-07T23:49:19.882Z". I'm trying to modify it with this logstash …

---

## [Number of replicas and query speed](https://discuss.elastic.co/t/number-of-replicas-and-query-speed/6321)

<div class="topic-metadata">

**Author:** [@bogdanionescu](https://discuss.elastic.co/u/bogdanionescu)\
**Replies:** 5\
**Last updated:** [January 9, 2012, 7:49pm UTC](https://discuss.elastic.co/t/number-of-replicas-and-query-speed/6321 "2012-01-09T19:49:43Z")

</div>

Hello I have a 4 node cluster with 7.7M docs indexed. 5 shards. Fist I've tried with 1 replica (default config) and we tested the query speed. It worked fine. The we used the REST API to increase the number of repl…

---

## [Processor foreach field error hash map](https://discuss.elastic.co/t/processor-foreach-field-error-hash-map/274848)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 6\
**Last updated:** [June 7, 2021, 4:02pm UTC](https://discuss.elastic.co/t/processor-foreach-field-error-hash-map/274848 "2021-06-07T16:02:26Z")

</div>

Hi, I have this processor: \[ { "foreach": { "field": "location", "processor": { "set": { "field": "geo.lat", "value": "{{\_ingest.\_value.lat}}" } } } }, …

---

## [Ingest pipeline script field math](https://discuss.elastic.co/t/ingest-pipeline-script-field-math/265136)

<div class="topic-metadata">

**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\
**Replies:** 6\
**Last updated:** [March 9, 2021, 7:54pm UTC](https://discuss.elastic.co/t/ingest-pipeline-script-field-math/265136 "2021-03-09T19:54:48Z")

</div>

Hello, I'm trying to create a ingest processor pipeline in kibana and could use some help. I'm trying to divide 2 values by each other which is the problem. Value 1 is an integer and Value 2 is a string. I'd like to …

---

## [Elasticsearch won't rebalance (v. 2.0.1); Need to upgrade!](https://discuss.elastic.co/t/elasticsearch-wont-rebalance-v-2-0-1-need-to-upgrade/141245)

<div class="topic-metadata">

**Author:** [@eschie](https://discuss.elastic.co/u/eschie)\
**Replies:** 6\
**Last updated:** [July 26, 2018, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-wont-rebalance-v-2-0-1-need-to-upgrade/141245 "2018-07-26T10:13:56Z")

</div>

I inherited a 1 node cluster running on 2.0.1 that is crashing due to too many open file descriptors! (1258 indices, 6280 shards, 5 each w/no replicas). To mitigate the load, I added a new node to the cluster but the sh…

---

## [Running multiple filebeat instances](https://discuss.elastic.co/t/running-multiple-filebeat-instances/305423)

<div class="topic-metadata">

**Author:** [@justplanenutz](https://discuss.elastic.co/u/justplanenutz)\
**Replies:** 2\
**Last updated:** [May 23, 2022, 8:59pm UTC](https://discuss.elastic.co/t/running-multiple-filebeat-instances/305423 "2022-05-23T20:59:07Z")

</div>

We have a system that is very chatty with regard to the number of logs produced. Our current production implementation has a single filebeat container ( in k8s ) running and it is struggling to keep up. We have adjusted …

---

## [No ouput using logstash file plugin](https://discuss.elastic.co/t/no-ouput-using-logstash-file-plugin/189650)

<div class="topic-metadata">

**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\
**Replies:** 2\
**Last updated:** [July 11, 2019, 5:28am UTC](https://discuss.elastic.co/t/no-ouput-using-logstash-file-plugin/189650 "2019-07-11T05:28:54Z")

</div>

I'm using Windows 10. Logstash 7.2.0 I just want to see the output of filter in console window.. My config c.conf: input { file { path =\> "D:\\Elastic\\logstash-7.2.0\\test\\theLogFile" start\_posit…

---

## [Using HTTP output plugin and mapping tag](https://discuss.elastic.co/t/using-http-output-plugin-and-mapping-tag/176278)

<div class="topic-metadata">

**Author:** [@cyxop](https://discuss.elastic.co/u/cyxop)\
**Replies:** 2\
**Last updated:** [April 10, 2019, 8:21pm UTC](https://discuss.elastic.co/t/using-http-output-plugin-and-mapping-tag/176278 "2019-04-10T20:21:16Z")

</div>

I am adding fields to event using mutate { add\_field } When I try to ship it adding event in mapping, I get an error: http { http\_method =\> "post" url =\> "http://endpoint" mapping =\> { "event" =\> "%{event}" "so…

---

## [Indexing emails to elasticsearch](https://discuss.elastic.co/t/indexing-emails-to-elasticsearch/131275)

<div class="topic-metadata">

**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Replies:** 2\
**Last updated:** [May 10, 2018, 9:31am UTC](https://discuss.elastic.co/t/indexing-emails-to-elasticsearch/131275 "2018-05-10T09:31:25Z")

</div>

hello everyone .. finally my indexing code worked just there is an error when the messages are transmitted from gmail to kibana they do not pass all i found just a few input { imap { host =\> "imap.gmail.com" password…

---

## [Is it safe to move a log file?](https://discuss.elastic.co/t/is-it-safe-to-move-a-log-file/70499)

<div class="topic-metadata">

**Author:** [@SolarBear](https://discuss.elastic.co/u/SolarBear)\
**Replies:** 2\
**Last updated:** [January 5, 2017, 12:27pm UTC](https://discuss.elastic.co/t/is-it-safe-to-move-a-log-file/70499 "2017-01-05T12:27:15Z")

</div>

Hello everyone! We've started using Filebeat very recently to monitor a certain log file and it's working all right. However I've been asked to move that file to a different location on disk as well as perform a daily …

---

## [Conector ElasticSearch-Hadood parameter es.resource of conf](https://discuss.elastic.co/t/conector-elasticsearch-hadood-parameter-es-resource-of-conf/28724)

<div class="topic-metadata">

**Author:** [@Vidal](https://discuss.elastic.co/u/Vidal)\
**Replies:** 2\
**Last updated:** [September 12, 2015, 5:57pm UTC](https://discuss.elastic.co/t/conector-elasticsearch-hadood-parameter-es-resource-of-conf/28724 "2015-09-12T17:57:56Z")

</div>

Hi, My doubt is about index/type in to es.resource parameter. For example, I'm trying to read everything from ElasticSearch, but it is more than one index... so... How I can do this? I\`m try conf(es.resource, "\* /…

---

## [Elasticsearch and Kibana on two machines](https://discuss.elastic.co/t/elasticsearch-and-kibana-on-two-machines/27146)

<div class="topic-metadata">

**Author:** [@DavidL](https://discuss.elastic.co/u/DavidL)\
**Replies:** 2\
**Last updated:** [August 11, 2015, 3:46pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-on-two-machines/27146 "2015-08-11T15:46:23Z")

</div>

I installed elasticsearch(Along with logstash, and they worked as expected) on a virtual machine, and currently I am trying to view my data on Kibana from local. What is the setup I need to change in the configs? Thank…

---

## [Caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel-localaddress/292521)

<div class="topic-metadata">

**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\
**Replies:** 1\
**Last updated:** [December 21, 2021, 5:35am UTC](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel-localaddress/292521 "2021-12-21T05:35:53Z")

</div>

{"type": "server", "timestamp": "2021-12-17T19:45:21,865Z", "level": "WARN", "component": "o.e.h.AbstractHttpServerTransport", "cluster.name": "dev", "node.name": "dev-es-data-node-hot-0", "message": "caught exception wh…

---

## [Handling offsets in a custom Lucene tokenizer for multi-value fields](https://discuss.elastic.co/t/handling-offsets-in-a-custom-lucene-tokenizer-for-multi-value-fields/117422)

<div class="topic-metadata">

**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\
**Replies:** 1\
**Last updated:** [January 29, 2018, 9:42am UTC](https://discuss.elastic.co/t/handling-offsets-in-a-custom-lucene-tokenizer-for-multi-value-fields/117422 "2018-01-29T09:42:24Z")

</div>

Hi! We've got a custom Lucene tokenizer that after upgrading from Elasticsearch 5.5.2 to 6.1.2 doesn't seem to handle offset correctly when the indexed field has multiple values. So for example, when trying to index a …

---

## [Cannot set property 'text' of undefined"](https://discuss.elastic.co/t/cannot-set-property-text-of-undefined/115791)

<div class="topic-metadata">

**Author:** [@ericschlichting](https://discuss.elastic.co/u/ericschlichting)\
**Replies:** 1\
**Last updated:** [January 17, 2018, 1:55pm UTC](https://discuss.elastic.co/t/cannot-set-property-text-of-undefined/115791 "2018-01-17T13:55:51Z")

</div>

Ran into an issue where I couldn't set up an email action on a watch in Kibana 6.1.1 and was getting this error in the kibana log: "error":{"message":"Uncaught error: Cannot set property 'text' of undefined","name":"Typ…

---

## [How to visualize data with the latest date](https://discuss.elastic.co/t/how-to-visualize-data-with-the-latest-date/91552)

<div class="topic-metadata">

**Author:** [@mkudlinski](https://discuss.elastic.co/u/mkudlinski)\
**Replies:** 1\
**Last updated:** [July 3, 2017, 5:27pm UTC](https://discuss.elastic.co/t/how-to-visualize-data-with-the-latest-date/91552 "2017-07-03T17:27:02Z")

</div>

Hi all, How to create a visualization that takes into account only documents with the latest date? Let's say I have documents with three fields: \* Name \* Status \* Date And now I would like to create a chart (Name vs …

---

## [Failed to flush outgoing items - Help appreciated](https://discuss.elastic.co/t/failed-to-flush-outgoing-items-help-appreciated/24741)

<div class="topic-metadata">

**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\
**Replies:** 1\
**Last updated:** [March 1, 2016, 9:38pm UTC](https://discuss.elastic.co/t/failed-to-flush-outgoing-items-help-appreciated/24741 "2016-03-01T21:38:22Z")

</div>

This happens frequently,and it's a show stopper. Sometimes rebooting the node fixes the problem. Sometimes not. In this case, right now, it's just repeating 'failed to flush' error. What I"m trying to do is load web…

---

## [Need help to run Elastic Search](https://discuss.elastic.co/t/need-help-to-run-elastic-search/25958)

<div class="topic-metadata">

**Author:** [@ssundararaman](https://discuss.elastic.co/u/ssundararaman)\
**Replies:** 1\
**Last updated:** [July 21, 2015, 8:31am UTC](https://discuss.elastic.co/t/need-help-to-run-elastic-search/25958 "2015-07-21T08:31:48Z")

</div>

Hi All, I am new to Elastic Search. We are going to start using the Sugarcrm Application, in Sugarcrm they already using ES. Currently i am trying to install Sugarcrm in my local dev environment. But i am getting some …

---

## [Slow indexing performance via http](https://discuss.elastic.co/t/slow-indexing-performance-via-http/3568)

<div class="topic-metadata">

**Author:** [@phuoq](https://discuss.elastic.co/u/phuoq)\
**Replies:** 7\
**Last updated:** [November 16, 2010, 10:53pm UTC](https://discuss.elastic.co/t/slow-indexing-performance-via-http/3568 "2010-11-16T22:53:34Z")

</div>

Hi, I've been having extremely slow indexing performance via http (from a variety of clients). I've written a quick test case to demonstrate. #!/usr/bin/env python # -\*- coding: utf-8 -\*- import json,httpli…

---

## [Moving from source to synthetic\_source](https://discuss.elastic.co/t/moving-from-source-to-synthetic-source/358107)

<div class="topic-metadata">

**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\
**Replies:** 4\
**Last updated:** [January 27, 2025, 11:16am UTC](https://discuss.elastic.co/t/moving-from-source-to-synthetic-source/358107 "2025-01-27T11:16:26Z")

</div>

Hi everyone, I am moving set of indices from ES7 to ES8 with synthetic source. I added "mappings": { "\_source": { "mode": "synthetic" } } this in the mappings. But now I am getting following error - o…

---

## [Using Vega to create a Histogram with Global Mean](https://discuss.elastic.co/t/using-vega-to-create-a-histogram-with-global-mean/269335)

<div class="topic-metadata">

**Author:** [@AquaX](https://discuss.elastic.co/u/AquaX)\
**Replies:** 4\
**Last updated:** [April 6, 2021, 2:37pm UTC](https://discuss.elastic.co/t/using-vega-to-create-a-histogram-with-global-mean/269335 "2021-04-06T14:37:52Z")

</div>

Hey everyone. EDIT: I'm using Kibana 7.11 I'm eventually trying to create one of these diagrams using Vega-Lite: It looks easy enough but I'm trying to use pre-aggregated data so I'm starting by just trying to get t…

---

## [Filebeat HTTP JSON with epochtime](https://discuss.elastic.co/t/filebeat-http-json-with-epochtime/263318)

<div class="topic-metadata">

**Author:** [@seefor](https://discuss.elastic.co/u/seefor)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 7:06pm UTC](https://discuss.elastic.co/t/filebeat-http-json-with-epochtime/263318 "2021-02-09T19:06:21Z")

</div>

Can filebeat be configured to pass epoch time every 15 minutes? filebeat.inputs: type: httpjson url: https://api.ipify.org/?format=json&t0=epochtime-15minutes&t1=epochtimenow

---

## [How to show three point in single line in bar graph](https://discuss.elastic.co/t/how-to-show-three-point-in-single-line-in-bar-graph/218740)

<div class="topic-metadata">

**Author:** [@naveenj](https://discuss.elastic.co/u/naveenj)\
**Replies:** 4\
**Last updated:** [February 13, 2020, 9:08am UTC](https://discuss.elastic.co/t/how-to-show-three-point-in-single-line-in-bar-graph/218740 "2020-02-13T09:08:59Z")

</div>

The chart is depicting fictional fruit consumption data, with the minimum, maximum and median values for each month of 2019. Can we active this chart in kibana?

---

## [Journalbeat for armv7l GNU/Linux](https://discuss.elastic.co/t/journalbeat-for-armv7l-gnu-linux/178911)

<div class="topic-metadata">

**Author:** [@lecndav](https://discuss.elastic.co/u/lecndav)\
**Replies:** 4\
**Last updated:** [April 30, 2019, 7:15am UTC](https://discuss.elastic.co/t/journalbeat-for-armv7l-gnu-linux/178911 "2019-04-30T07:15:55Z")

</div>

Hi, I want to compile and run Journalbeat for an armv7l architecture. Therefore my go build arguments are "GOOS=linux" and "GOARCH=arm". When I run journalbeat on my target machine it exits with "ERROR instance/beat…

---

## [Estimating RAM requirements for new deployment](https://discuss.elastic.co/t/estimating-ram-requirements-for-new-deployment/167373)

<div class="topic-metadata">

**Author:** [@keithag](https://discuss.elastic.co/u/keithag)\
**Replies:** 4\
**Last updated:** [February 7, 2019, 2:58pm UTC](https://discuss.elastic.co/t/estimating-ram-requirements-for-new-deployment/167373 "2019-02-07T14:58:29Z")

</div>

I have a new deployment to plan and I need to estimate the hardware requirements. On my test deployment the index size is about 180 GB. I was planning on deploying on machines with 64 GB RAM and allocating 31 GB RAM fo…

---

## [Multiple instance of ES and Kibana](https://discuss.elastic.co/t/multiple-instance-of-es-and-kibana/70295)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 4\
**Last updated:** [December 31, 2016, 11:43pm UTC](https://discuss.elastic.co/t/multiple-instance-of-es-and-kibana/70295 "2016-12-31T23:43:16Z")

</div>

Hi, I have some basic questions regarding ES and Kibana. Can we have more than one instance of elasticsearch and Kibana in the same server? If this question has been answered elsewhere, can someone refer me to that d…

---

## [Elastic search certified exam](https://discuss.elastic.co/t/elastic-search-certified-exam/311109)

<div class="topic-metadata">

**Author:** [@Sourabh\_Korde](https://discuss.elastic.co/u/Sourabh_Korde)\
**Replies:** 3\
**Last updated:** [August 2, 2022, 7:53am UTC](https://discuss.elastic.co/t/elastic-search-certified-exam/311109 "2022-08-02T07:53:09Z")

</div>

Dear All, Please help me on the criteria to pass elastic certified exam. Which are the required number of use cases I must complete out of 10 to pass the exam ? If I implement partial use case how much score I will get…

---

## [Continuously read from .evtx logfile?](https://discuss.elastic.co/t/continuously-read-from-evtx-logfile/293658)

<div class="topic-metadata">

**Author:** [@Andreas\_Falk](https://discuss.elastic.co/u/Andreas_Falk)\
**Replies:** 3\
**Last updated:** [January 7, 2022, 3:06am UTC](https://discuss.elastic.co/t/continuously-read-from-evtx-logfile/293658 "2022-01-07T03:06:38Z")

</div>

(crosspost from slack) Hi, We are trying to get the logs from our netapp cifs shares. Netapp exports their logs to a smb share and writes .evtx files there. And with the help of mounting and pointing winlogbeat to th…

---

## [30 Day Daily Average Gauge](https://discuss.elastic.co/t/30-day-daily-average-gauge/277205)

<div class="topic-metadata">

**Author:** [@Ryan\_Kapsak](https://discuss.elastic.co/u/Ryan_Kapsak)\
**Replies:** 3\
**Last updated:** [June 29, 2021, 4:33pm UTC](https://discuss.elastic.co/t/30-day-daily-average-gauge/277205 "2021-06-29T16:33:00Z")

</div>

Hi! I am having some trouble setting up a gauge accurately for a visualization in Kibana. I want to display a Daily # of orders that is sold over a 30 day period. My variables are 'order\_qty' and 'date' for the timestamp…

---

## [How to Monitor IIS deployed ASP.NET Framework Site using Elastic APM?](https://discuss.elastic.co/t/how-to-monitor-iis-deployed-asp-net-framework-site-using-elastic-apm/254489)

<div class="topic-metadata">

**Author:** [@aris\_lawrence](https://discuss.elastic.co/u/aris_lawrence)\
**Replies:** 0\
**Last updated:** [November 6, 2020, 7:18am UTC](https://discuss.elastic.co/t/how-to-monitor-iis-deployed-asp-net-framework-site-using-elastic-apm/254489 "2020-11-06T07:18:40Z")

</div>

Kibana version: 7.9.1 Elasticsearch version: 7.9.1 APM Server version: 7.9.1 APM Agent language and version: .Net Browser version: Chrome Version 86.0.4240.183 Original install method (e.g. download page, yum, deb, …

---

## [Can a local Elasticsearch connect to a remote Elasticsearch with remote cluster feature?](https://discuss.elastic.co/t/can-a-local-elasticsearch-connect-to-a-remote-elasticsearch-with-remote-cluster-feature/170591)

<div class="topic-metadata">

**Author:** [@fr0der1c](https://discuss.elastic.co/u/fr0der1c)\
**Replies:** 3\
**Last updated:** [March 3, 2019, 12:47pm UTC](https://discuss.elastic.co/t/can-a-local-elasticsearch-connect-to-a-remote-elasticsearch-with-remote-cluster-feature/170591 "2019-03-03T12:47:41Z")

</div>

I have a cloud server with very limited resource running ES for my personal project. The resource is really limited so I'm thinking using a local ES cluster and the remote cluster feature to "download" indices in the clo…

[Previous page](https://discuss.elastic.co/top.md?page=1305&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1307&per_page=50&period=all)
