# Top **URL:** https://discuss.elastic.co/top.md?page=1345&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1346 --- ## [Remove\_field with regex as argument](https://discuss.elastic.co/t/remove-field-with-regex-as-argument/134001)
**Author:** [@dr01](https://discuss.elastic.co/u/dr01)\ **Replies:** 3\ **Last updated:** [May 31, 2018, 2:58pm UTC](https://discuss.elastic.co/t/remove-field-with-regex-as-argument/134001 "2018-05-31T14:58:33Z")
I'd like to remove all fields that begin by "foobar". Is there any way to pass a regex to the remove\_field command, or is there any remove command that accepts regexs? --- ## [Count field matches](https://discuss.elastic.co/t/count-field-matches/60547)
**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\ **Replies:** 3\ **Last updated:** [September 15, 2016, 6:21pm UTC](https://discuss.elastic.co/t/count-field-matches/60547 "2016-09-15T18:21:23Z")
Is there a way to count field occurences on an entry? I have this data: "cpus" =\> { "cpu0" =\> { "user" =\> 448515294, "user\_p" =\> 0.3256, "nice" =\> 4644, "system" =\> … --- ## [HDSF backup restore no progress info](https://discuss.elastic.co/t/hdsf-backup-restore-no-progress-info/25989)
**Author:** [@awislowski](https://discuss.elastic.co/u/awislowski)\ **Replies:** 3\ **Last updated:** [July 29, 2015, 6:33pm UTC](https://discuss.elastic.co/t/hdsf-backup-restore-no-progress-info/25989 "2015-07-29T18:33:40Z")
Hi, I have a problem with restoring backup through hdfs plugin (elasticsearch/elasticsearch-repository-hdfs/2.1.0-hadoop2) on elasticsearch cluster version 1.6.0 I was restoring 12GB data (20000000 documents) backup… --- ## [Split series containing top N terms sorted by numeric field](https://discuss.elastic.co/t/split-series-containing-top-n-terms-sorted-by-numeric-field/168402)
**Author:** [@gciubotaru](https://discuss.elastic.co/u/gciubotaru)\ **Replies:** 4\ **Last updated:** [February 20, 2019, 9:35pm UTC](https://discuss.elastic.co/t/split-series-containing-top-n-terms-sorted-by-numeric-field/168402 "2019-02-20T21:35:28Z")
Hello, I need a bit of help to build a split series visualization. I have an time-series index containing temperature and humidity in different locations. Here is a sample entry: { "@timestamp": "2019-02-04T00:00:… --- ## [Metricbeat/mongodb leaks connections when metricbeat.config.modules.reload.enabled set to true](https://discuss.elastic.co/t/metricbeat-mongodb-leaks-connections-when-metricbeat-config-modules-reload-enabled-set-to-true/108723)
**Author:** [@david.kostal](https://discuss.elastic.co/u/david.kostal)\ **Replies:** 4\ **Last updated:** [November 26, 2017, 9:47pm UTC](https://discuss.elastic.co/t/metricbeat-mongodb-leaks-connections-when-metricbeat-config-modules-reload-enabled-set-to-true/108723 "2017-11-26T21:47:33Z")
Hi, I just enabled metricbeat's mongodb module (5.6) and suddenly our mongdb run out of file descriptors. I noticed that metricbeat keeps thousands of connections open to the mongodb. Further investigation showed that … --- ## [Perl, query, sorting](https://discuss.elastic.co/t/perl-query-sorting/14634)
**Author:** [@Oliver\_B\_Fischer](https://discuss.elastic.co/u/Oliver_B_Fischer)\ **Replies:** 4\ **Last updated:** [November 29, 2013, 3:10pm UTC](https://discuss.elastic.co/t/perl-query-sorting/14634 "2013-11-29T15:10:21Z")
Hi, can someone help me to add a working sort clause to this search statement (Perl): my $result = $es-\>search(fields =\> \['message'\], size =\> $opt-\>{'size'}, sort =\>… --- ## [New insallation stuck at loading integrations](https://discuss.elastic.co/t/new-insallation-stuck-at-loading-integrations/370283)
**Author:** [@ahsan0331](https://discuss.elastic.co/u/ahsan0331)\ **Replies:** 8\ **Last updated:** [November 10, 2024, 5:07pm UTC](https://discuss.elastic.co/t/new-insallation-stuck-at-loading-integrations/370283 "2024-11-10T17:07:23Z")
Hi I am new to this world of elastic. looks really fantastic. i was about to explore it for netflow. i installed elk stack. and when i browse the page at host:5601/app/integrations/browse there only the loading circle… --- ## [ILM enabled Logstash Pipeline Issue](https://discuss.elastic.co/t/ilm-enabled-logstash-pipeline-issue/358697)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 8\ **Last updated:** [May 9, 2024, 4:57am UTC](https://discuss.elastic.co/t/ilm-enabled-logstash-pipeline-issue/358697 "2024-05-09T04:57:57Z")
Hi Folks, I am facing an issue with a ILM enabled logstash pipeline. Let me describe my objective. So I have created a logstash pipeline that has upsert feature to update/insert documents in the elasticsearch index. My … --- ## [403 Forbidden when using '"es.nodes.path.prefix" pyspark 8.4.1 pyspark 3.3](https://discuss.elastic.co/t/403-forbidden-when-using-es-nodes-path-prefix-pyspark-8-4-1-pyspark-3-3/315084)
**Author:** [@rbigley](https://discuss.elastic.co/u/rbigley)\ **Replies:** 8\ **Last updated:** [September 27, 2022, 3:42pm UTC](https://discuss.elastic.co/t/403-forbidden-when-using-es-nodes-path-prefix-pyspark-8-4-1-pyspark-3-3/315084 "2022-09-27T15:42:01Z")
Pyspark 3.3 with elasticsearch-spark-30\_2.12-8.4.1.jar (I've also tried with the elasticsearch-spark-30\_2.12-717.6.jar with same result) I have access to the index and have validated via curl and the normal python elas… --- ## [Single word suggester or autocomplete single word](https://discuss.elastic.co/t/single-word-suggester-or-autocomplete-single-word/290754)
**Author:** [@pranjali\_dhumal](https://discuss.elastic.co/u/pranjali_dhumal)\ **Replies:** 8\ **Last updated:** [December 7, 2021, 6:27am UTC](https://discuss.elastic.co/t/single-word-suggester-or-autocomplete-single-word/290754 "2021-12-07T06:27:20Z")
Hello Everyone, Problem: Lets consider I have a index for books And I have following book documents with name "Manage your time" "Improvement management skills" "The making of manager" "How to manage people" "Man… --- ## [Looking for advices on how to improve an Elastic architecture](https://discuss.elastic.co/t/looking-for-advices-on-how-to-improve-an-elastic-architecture/235024)
**Author:** [@LomigFR](https://discuss.elastic.co/u/LomigFR)\ **Replies:** 8\ **Last updated:** [June 16, 2020, 7:42am UTC](https://discuss.elastic.co/t/looking-for-advices-on-how-to-improve-an-elastic-architecture/235024 "2020-06-16T07:42:10Z")
Good evening, During an internship in computer science (so I start with Docker, K8S and the Elastic stack), I'm asked to set up a log retrieval environment using the Elastic stack under ECK. For the moment, I'm trainin… --- ## [IBM Qradar and elastic search SIEM solution](https://discuss.elastic.co/t/ibm-qradar-and-elastic-search-siem-solution/120982)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 0\ **Last updated:** [February 22, 2018, 5:45am UTC](https://discuss.elastic.co/t/ibm-qradar-and-elastic-search-siem-solution/120982 "2018-02-22T05:45:08Z")
Hi Guys, I am evaluating elastic search as a probable SIEM solution in my internal organization and working for IBM Qradar as well. Since this a very huge/intelligent elastic community out there, what points probably I… --- ## [Ok, why isn't my cluster rebalancing?](https://discuss.elastic.co/t/ok-why-isnt-my-cluster-rebalancing/13308)
**Author:** [@Pierce\_Wetter](https://discuss.elastic.co/u/Pierce_Wetter)\ **Replies:** 8\ **Last updated:** [August 27, 2013, 10:56am UTC](https://discuss.elastic.co/t/ok-why-isnt-my-cluster-rebalancing/13308 "2013-08-27T10:56:39Z")
Background: I've setup the number of shards to 3, and I have allocation awareness set to match the awszone property which I'm setting in a config. There's 6 nodes total: 2 in us-west-2a 2 in us-wes… --- ## [Kibana VM Specs](https://discuss.elastic.co/t/kibana-vm-specs/211703)
**Author:** [@Omair](https://discuss.elastic.co/u/Omair)\ **Replies:** 1\ **Last updated:** [December 12, 2019, 6:48pm UTC](https://discuss.elastic.co/t/kibana-vm-specs/211703 "2019-12-12T18:48:22Z")
Hi, Im new to ELK and I want to setup Kibana instance. I would like to know the recommended specs for setting up kibana. I found specs for Elasticsearch, but unable to get any recommendations for Logstash and Kibana. Th… --- ## [Metricbeat: Failed to encode event: unsupported float value: NaN](https://discuss.elastic.co/t/metricbeat-failed-to-encode-event-unsupported-float-value-nan/139093)
**Author:** [@cck](https://discuss.elastic.co/u/cck)\ **Replies:** 1\ **Last updated:** [July 9, 2018, 6:30pm UTC](https://discuss.elastic.co/t/metricbeat-failed-to-encode-event-unsupported-float-value-nan/139093 "2018-07-09T18:30:09Z")
I am trying to inspect docker containers with metricbeat:6.3.0 in docker, and post data to elasticsearch: 6.3.0, and my host is Ubuntu16.04, the metricbeat.yml and docker.yml works when I install metricbeat on host dire… --- ## [Error job spark streaming elasticsearch](https://discuss.elastic.co/t/error-job-spark-streaming-elasticsearch/116358)
**Author:** [@Jyounes](https://discuss.elastic.co/u/Jyounes)\ **Replies:** 1\ **Last updated:** [January 24, 2018, 3:34pm UTC](https://discuss.elastic.co/t/error-job-spark-streaming-elasticsearch/116358 "2018-01-24T15:34:53Z")
hello, I am getting error while using kafka ---\> job streaming spark -----\> save to Elasticsearch 18/01/17 22:11:44 INFO HttpMethodDirector: Retrying request 18/01/17 22:13:51 INFO HttpMethodDirector: I/O exception (j… --- ## [System.cpu.cores count per host](https://discuss.elastic.co/t/system-cpu-cores-count-per-host/112479)
**Author:** [@dutch3000](https://discuss.elastic.co/u/dutch3000)\ **Replies:** 1\ **Last updated:** [December 20, 2017, 6:22pm UTC](https://discuss.elastic.co/t/system-cpu-cores-count-per-host/112479 "2017-12-20T18:22:04Z")
Is it possible to visualize cpu counts per host? I see cpu cores in the metricbeat-\*index. "system": { "cpu": { "cores": Many thanks for any help. --- ## [\_ingest.timestamp Invalid Format for Date field](https://discuss.elastic.co/t/-ingest-timestamp-invalid-format-for-date-field/92718)
**Author:** [@mstruve](https://discuss.elastic.co/u/mstruve)\ **Replies:** 1\ **Last updated:** [July 12, 2017, 10:24pm UTC](https://discuss.elastic.co/t/-ingest-timestamp-invalid-format-for-date-field/92718 "2017-07-12T22:24:45Z")
I was reading the docs about how to use the timestamp from the ingest node to set a field on the document. However, when I try to set a date field(last\_indexed\_at) to the ingest.timestamp I get an Invalid format error wh… --- ## [Java Agent APM won't send data to Elasticsearch](https://discuss.elastic.co/t/java-agent-apm-wont-send-data-to-elasticsearch/323489)
**Author:** [@zerratriani](https://discuss.elastic.co/u/zerratriani)\ **Replies:** 2\ **Last updated:** [January 19, 2023, 2:02pm UTC](https://discuss.elastic.co/t/java-agent-apm-wont-send-data-to-elasticsearch/323489 "2023-01-19T14:02:12Z")
I have a java application and want to monitor it. the two hosts between the APM server and the application server are well connected. I have also deactivated the firewall but the data from the apm agent was not successfu… --- ## [Remove field after parsing json](https://discuss.elastic.co/t/remove-field-after-parsing-json/299973)
**Author:** [@raspi](https://discuss.elastic.co/u/raspi)\ **Replies:** 2\ **Last updated:** [March 17, 2022, 5:27pm UTC](https://discuss.elastic.co/t/remove-field-after-parsing-json/299973 "2022-03-17T17:27:35Z")
Hello i need help please this is my logstash.conf \< filter { if "jaeger" in \[message\] { drop { } } mutate { gsub =\> \["message", '"message":', '"containerlogs":'\] remove\_tag =\> \[ "pfd", "middle", "fluentd", "bea… --- ## [How can I delete all the stored scripts?](https://discuss.elastic.co/t/how-can-i-delete-all-the-stored-scripts/183274)
**Author:** [@goniaks](https://discuss.elastic.co/u/goniaks)\ **Replies:** 2\ **Last updated:** [June 21, 2019, 10:59am UTC](https://discuss.elastic.co/t/how-can-i-delete-all-the-stored-scripts/183274 "2019-06-21T10:59:39Z")
This way I can delete 1: DELETE \_scripts/my\_script I just want to delete them all, I don't know the list of scripts I have stored. --- ## [Transport.tcp.compress slowing down shard relocation](https://discuss.elastic.co/t/transport-tcp-compress-slowing-down-shard-relocation/148033)
**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\ **Replies:** 2\ **Last updated:** [October 3, 2018, 6:32pm UTC](https://discuss.elastic.co/t/transport-tcp-compress-slowing-down-shard-relocation/148033 "2018-10-03T18:32:19Z")
Looks like enabling tcp compression actually slows down the transfer rate of shards. Setting this I'm basically stuck to 13Mbs even though I've set the max\_bytes\_per\_sec to -1 This has led to it taking about 1.2h to tran… --- ## [PostgreSQL module got error when parsing AWS RDS PostgreSQL log](https://discuss.elastic.co/t/postgresql-module-got-error-when-parsing-aws-rds-postgresql-log/136209)
**Author:** [@nyamada2](https://discuss.elastic.co/u/nyamada2)\ **Replies:** 2\ **Last updated:** [June 20, 2018, 2:42pm UTC](https://discuss.elastic.co/t/postgresql-module-got-error-when-parsing-aws-rds-postgresql-log/136209 "2018-06-20T14:42:55Z")
I wrote a script that downloads AWS RDS PostgreSQL log files and let the filebeat reads log files using PostgreSQL module, though I found it fails to parse in kibana dashboard. There was a similar post before at below U… --- ## [Error while creating snapshot](https://discuss.elastic.co/t/error-while-creating-snapshot/97646)
**Author:** [@sripathi\_kammari](https://discuss.elastic.co/u/sripathi_kammari)\ **Replies:** 2\ **Last updated:** [September 2, 2017, 10:09am UTC](https://discuss.elastic.co/t/error-while-creating-snapshot/97646 "2017-09-02T10:09:30Z")
I found following error while creating snopshot using URL : http://192.168.33.10/\_snapshot/temp {"error":"RepositoryException\[\[temp\] failed to create repository\]; nested: CreationException\[Guice creation errors:\\n\\n1) … --- ## [Filebeat on solaris sparc](https://discuss.elastic.co/t/filebeat-on-solaris-sparc/64434)
**Author:** [@Ollm4c](https://discuss.elastic.co/u/Ollm4c)\ **Replies:** 2\ **Last updated:** [October 31, 2016, 2:05pm UTC](https://discuss.elastic.co/t/filebeat-on-solaris-sparc/64434 "2016-10-31T14:05:02Z")
Hi there, I want to install filebeat on solaris sparc. Could you help me? --- ## [Match query in a filter](https://discuss.elastic.co/t/match-query-in-a-filter/12910)
**Author:** [@Stefanie](https://discuss.elastic.co/u/Stefanie)\ **Replies:** 2\ **Last updated:** [July 24, 2013, 8:38pm UTC](https://discuss.elastic.co/t/match-query-in-a-filter/12910 "2013-07-24T20:38:01Z")
I am working on translating a match query into a filter and was not having a problem until I added a type. My query looks like this and runs fine: curl -X GET 'http://localhost:9200/u1/\_search?from=0&size=20&pret… --- ## [Unsupported scope was requested. Enterprise Search integration with Box using OAuth 2](https://discuss.elastic.co/t/unsupported-scope-was-requested-enterprise-search-integration-with-box-using-oauth-2/308964)
**Author:** [@rajkeshav](https://discuss.elastic.co/u/rajkeshav)\ **Replies:** 6\ **Last updated:** [July 15, 2022, 5:44pm UTC](https://discuss.elastic.co/t/unsupported-scope-was-requested-enterprise-search-integration-with-box-using-oauth-2/308964 "2022-07-15T17:44:09Z")
I am trying to connect a Box application as a Source in Workplace Search. The Box application is using OAuth 2.0 by following the documentation link: Connecting Box | Workplace Search Guide \[8.3\] | Elastic The redirect … --- ## [Search Query with Lucene Query issue](https://discuss.elastic.co/t/search-query-with-lucene-query-issue/251727)
**Author:** [@sikeeoh](https://discuss.elastic.co/u/sikeeoh)\ **Replies:** 6\ **Last updated:** [June 18, 2021, 6:46am UTC](https://discuss.elastic.co/t/search-query-with-lucene-query-issue/251727 "2021-06-18T06:46:39Z")
Search Query with Lucene Query Syntax If there are more than 4 OR or AND conditions, it does not work properly. query : "ten" OR "teen" OR "alask" query : "ten" OR "teen" OR "alask" OR "hihi" OR "bye" --- ## [Java APM agent sample rate ignored](https://discuss.elastic.co/t/java-apm-agent-sample-rate-ignored/242711)
**Author:** [@Alexey\_Kuplensky](https://discuss.elastic.co/u/Alexey_Kuplensky)\ **Replies:** 6\ **Last updated:** [July 27, 2020, 12:20pm UTC](https://discuss.elastic.co/t/java-apm-agent-sample-rate-ignored/242711 "2020-07-27T12:20:29Z")
Hi, we are running Elastic APM Agent 1.17.0 on Java 1.8.0\_92 Centos 6.5 on several applications. We are setting sample rate via Kibana, agent receives settings properly INFO co.elastic.apm.agent.configuration.ApmServe… --- ## [Moving Nodes Updates in 2.4.3](https://discuss.elastic.co/t/moving-nodes-updates-in-2-4-3/212240)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 6\ **Last updated:** [December 18, 2019, 9:54pm UTC](https://discuss.elastic.co/t/moving-nodes-updates-in-2-4-3/212240 "2019-12-18T21:54:23Z")
From the 2.4.3 ECE release note: Moving nodes off allocators for the system-owned deployments admin-console-elasticsearch and logging-and-metrics now works as expected. I've been trying to move Kibana, the one fro… --- ## [Cannot combine two indexes to one using logstash](https://discuss.elastic.co/t/cannot-combine-two-indexes-to-one-using-logstash/182083)
**Author:** [@aldol](https://discuss.elastic.co/u/aldol)\ **Replies:** 6\ **Last updated:** [May 23, 2019, 12:44pm UTC](https://discuss.elastic.co/t/cannot-combine-two-indexes-to-one-using-logstash/182083 "2019-05-23T12:44:33Z")
I have the following two indexes: PUT twitter1/doc/1 { "name" : "Mike", "c\_num" : 1, "tags" : "in1" } PUT twitter2/doc/1 { "resume" : "Mike blah, blah, blah", "c\_num" : 1, "tags" : "in2" } I would like to ha… --- ## [How to add two value from two type?](https://discuss.elastic.co/t/how-to-add-two-value-from-two-type/97652)
**Author:** [@Saurab\_Dahal](https://discuss.elastic.co/u/Saurab_Dahal)\ **Replies:** 6\ **Last updated:** [August 21, 2017, 11:04am UTC](https://discuss.elastic.co/t/how-to-add-two-value-from-two-type/97652 "2017-08-21T11:04:02Z")
For example, I have this structure index/type1 which has item1 with mrp 20 like this {"item":"item1","mrp"20} and on second type index/type2 which has item1 with mrp 10 like this {"item":"item1","mrp"20}. Now I need t… --- ## [Exporting big number of entries from elasticsearch](https://discuss.elastic.co/t/exporting-big-number-of-entries-from-elasticsearch/6412)
**Author:** [@Simeon\_Zaharici](https://discuss.elastic.co/u/Simeon_Zaharici)\ **Replies:** 6\ **Last updated:** [January 18, 2012, 11:52pm UTC](https://discuss.elastic.co/t/exporting-big-number-of-entries-from-elasticsearch/6412 "2012-01-18T23:52:56Z")
Hello I am a new user of elasticsearch. We are using graylog2, a log management solution that stores the log messages in elasticsearch. I would like to be able to extract all log messages that are created in one … --- ## [Logstash file input not reading files when run as service](https://discuss.elastic.co/t/logstash-file-input-not-reading-files-when-run-as-service/50651)
**Author:** [@tmo](https://discuss.elastic.co/u/tmo)\ **Replies:** 2\ **Last updated:** [May 25, 2016, 8:54pm UTC](https://discuss.elastic.co/t/logstash-file-input-not-reading-files-when-run-as-service/50651 "2016-05-25T20:54:51Z")
This one is a bit odd. If I run logstash as any user from the command line, it will index the files, changes, etc., but when I run it as a service via the repo install on Ubuntu it just doesn't do anything with regard t… --- ## [Is it always necessary to use size attribute in DSL query?](https://discuss.elastic.co/t/is-it-always-necessary-to-use-size-attribute-in-dsl-query/339377)
**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\ **Replies:** 3\ **Last updated:** [July 27, 2023, 1:23pm UTC](https://discuss.elastic.co/t/is-it-always-necessary-to-use-size-attribute-in-dsl-query/339377 "2023-07-27T13:23:26Z")
Hi, Is it always necessary to use the size attribute in Elasticsearch DSL query? What if there are many documents and I do not know the exact no of documents that I would need? I am trying to get the last poll data fr… --- ## [Parsing Windows DHCP Logs with Filebeat Microsoft Module](https://discuss.elastic.co/t/parsing-windows-dhcp-logs-with-filebeat-microsoft-module/260849)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 3\ **Last updated:** [February 4, 2021, 5:17pm UTC](https://discuss.elastic.co/t/parsing-windows-dhcp-logs-with-filebeat-microsoft-module/260849 "2021-02-04T17:17:22Z")
I somehow lost track of the previous thread regarding this issue, and it ended up closing due to inactivity. I am still seeing this same problem now on 7.10.1. Related thread: Has this been looked into any more? --- ## [Identify unlabeled RUM activity in timeline](https://discuss.elastic.co/t/identify-unlabeled-rum-activity-in-timeline/235850)
**Author:** [@stitch-bb8](https://discuss.elastic.co/u/stitch-bb8)\ **Replies:** 3\ **Last updated:** [June 24, 2020, 8:35am UTC](https://discuss.elastic.co/t/identify-unlabeled-rum-activity-in-timeline/235850 "2020-06-24T08:35:13Z")
Kibana version: Elasticsearch version: 7.5.2 APM Server version: 7.5.2 APM Agent language and version: Java 1.15.0 Browser version: Cordova browser, but essentially Android 8.1.0 Chrome Mobile WebView Original ins… --- ## [Elasticsearch Unreachable - Docker](https://discuss.elastic.co/t/elasticsearch-unreachable-docker/194574)
**Author:** [@Louis-Clement](https://discuss.elastic.co/u/Louis-Clement)\ **Replies:** 0\ **Last updated:** [August 9, 2019, 8:43am UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-docker/194574 "2019-08-09T08:43:57Z")
Hi! I'm using the ELK Stack with Docker. Everything worked fine, except the day when my server ran out of space because I didn't manage well the lifetime of my data. I had to remove and build again my Docker container… --- ## [\[LOGSTASH\] collecte de données après redémarrage](https://discuss.elastic.co/t/logstash-collecte-de-donnees-apres-redemarrage/88958)
**Author:** [@Christophe\_Gautraud](https://discuss.elastic.co/u/Christophe_Gautraud)\ **Replies:** 3\ **Last updated:** [June 18, 2017, 1:10pm UTC](https://discuss.elastic.co/t/logstash-collecte-de-donnees-apres-redemarrage/88958 "2017-06-18T13:10:31Z")
Bonjour, J'ai installé le Stack ELK dans le but de monitorer les logs de SQUID. Mon problème est dans Logstash, il crée bien mes index en lançant la commande: ./logstash --path.settings /etc/logstash/ -f /etc/logst… --- ## [Mapper-size plugin query](https://discuss.elastic.co/t/mapper-size-plugin-query/54010)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [June 27, 2016, 2:31pm UTC](https://discuss.elastic.co/t/mapper-size-plugin-query/54010 "2016-06-27T14:31:21Z")
Hi, I have started using the mapper-size plugin with one of our elasticsearch 2.2.0 clusters. In kibana I'm seeing that this field has a type of unknown and is unindexed. I've tried updating the mapping to: "\_size": { … --- ## [Java client handling connection failure](https://discuss.elastic.co/t/java-client-handling-connection-failure/16965)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 3\ **Last updated:** [April 13, 2014, 9:48am UTC](https://discuss.elastic.co/t/java-client-handling-connection-failure/16965 "2014-04-13T09:48:19Z")
I am currently creating a client connection as shown below. One of the questions I have is what is the right way to provide high availability and reseliency on the client side when the node that I am connecting to fail… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/279624)
**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 11:03pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/279624 "2021-07-26T23:03:46Z")
Hi all. I have been running ELK for a few months now version 7.12.0. I tried to log on today with username elastic and my browser saved password and it would not let me. I restarted the server but I cannot get to the log… --- ## [Can ruby code be a speed bottleneck in logstash config file?](https://discuss.elastic.co/t/can-ruby-code-be-a-speed-bottleneck-in-logstash-config-file/270395)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 4\ **Last updated:** [April 17, 2021, 3:21am UTC](https://discuss.elastic.co/t/can-ruby-code-be-a-speed-bottleneck-in-logstash-config-file/270395 "2021-04-17T03:21:09Z")
I m trying to get as much throughput as possible from my setup. I am using the http input. The client sometimes sends a collection of events instead of a single event for efficiency sake. Here is the relevant thread with… --- ## [Put array elements into new fields with logstash filter](https://discuss.elastic.co/t/put-array-elements-into-new-fields-with-logstash-filter/250980)
**Author:** [@LuigiDelavega](https://discuss.elastic.co/u/LuigiDelavega)\ **Replies:** 4\ **Last updated:** [October 8, 2020, 2:06pm UTC](https://discuss.elastic.co/t/put-array-elements-into-new-fields-with-logstash-filter/250980 "2020-10-08T14:06:56Z")
Hello, I have an issue finding a solution for my problem : My filebeat sends IIS logs to logstash, with an URIPATH field named iis.uri, it looks like : /aaaaa/bbbbb/cccccc/dddddd/eeeeee I copy this field i wanna keep… --- ## [Kibana 6.3.2 does not work on ipv6](https://discuss.elastic.co/t/kibana-6-3-2-does-not-work-on-ipv6/171731)
**Author:** [@vara0855](https://discuss.elastic.co/u/vara0855)\ **Replies:** 4\ **Last updated:** [March 19, 2019, 9:03pm UTC](https://discuss.elastic.co/t/kibana-6-3-2-does-not-work-on-ipv6/171731 "2019-03-19T21:03:55Z")
Kibana version: 6.3.2 OSS Elasticsearch version: 6.3.2 OSS Elasticsearch and kibana are located on the same hosts my properties on kibana.yml file: elasticsearch.url: "http://\[fd95:ff55:7fb8:f1e5:f816:3eff:feed:ce5b… --- ## [Not equal to function](https://discuss.elastic.co/t/not-equal-to-function/81318)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 4\ **Last updated:** [April 5, 2017, 2:40pm UTC](https://discuss.elastic.co/t/not-equal-to-function/81318 "2017-04-05T14:40:36Z")
Hi All, I have a fields called subject.Account name and Target.account name , sometimes both have same values like subject.Accountname : abc11 subject,Targetname : abc11 sometimes both values will be different lik… --- ## [OOM Java heapspace on ES1.1.1 cluster](https://discuss.elastic.co/t/oom-java-heapspace-on-es1-1-1-cluster/78854)
**Author:** [@krckumar](https://discuss.elastic.co/u/krckumar)\ **Replies:** 1\ **Last updated:** [March 16, 2017, 2:39pm UTC](https://discuss.elastic.co/t/oom-java-heapspace-on-es1-1-1-cluster/78854 "2017-03-16T14:39:04Z")
I have an Elasticsearch 1.1.1 cluster with two nodes configured heap of 18G each. (RAM on each node is 32G) With 6 Shards and one replica for each shard. There is only one index in our cluster. Cluster health looks Gr… --- ## [ES creating thousands of segments with 1 document each](https://discuss.elastic.co/t/es-creating-thousands-of-segments-with-1-document-each/31849)
**Author:** [@Herve\_Bry](https://discuss.elastic.co/u/Herve_Bry)\ **Replies:** 4\ **Last updated:** [October 8, 2015, 2:34pm UTC](https://discuss.elastic.co/t/es-creating-thousands-of-segments-with-1-document-each/31849 "2015-10-08T14:34:44Z")
Hello Community, I am calling for help as we are struggling with a strange problem: often when indexing a bulk of data, thousands of tiny segments with only one doc in each are created. This brings the cluster to its k… --- ## [Duplicate an elasticsearch cluster](https://discuss.elastic.co/t/duplicate-an-elasticsearch-cluster/7934)
**Author:** [@Welson\_Wong](https://discuss.elastic.co/u/Welson_Wong)\ **Replies:** 4\ **Last updated:** [June 7, 2012, 11:15am UTC](https://discuss.elastic.co/t/duplicate-an-elasticsearch-cluster/7934 "2012-06-07T11:15:54Z")
I just started to use elasticsearch and created a small cluster (2 machines) filled with some index data. So far everything works well. Now I have to duplicate the cluster on another two machines and hopefully I do … --- ## [Unable to set search.max\_buckets for \_cluster/settings](https://discuss.elastic.co/t/unable-to-set-search-max-buckets-for-cluster-settings/250015)
**Author:** [@Suparna\_Shankar](https://discuss.elastic.co/u/Suparna_Shankar)\ **Replies:** 5\ **Last updated:** [September 25, 2020, 10:00pm UTC](https://discuss.elastic.co/t/unable-to-set-search-max-buckets-for-cluster-settings/250015 "2020-09-25T22:00:00Z")
m trying to curl -XPUT "http://localhost:9200/\_cluster/settings -H 'Content-Type: application/json'{"transient":{"search.max\_buckets": 200000}} but am getting below error please correct me if i am wrong C:\\Users\\ssuparn… [Previous page](https://discuss.elastic.co/top.md?page=1344&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1346&per_page=50&period=all)