# Top

**URL:** https://discuss.elastic.co/top.md?page=1358&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1359

---

## [Disk I/O 100%](https://discuss.elastic.co/t/disk-i-o-100/38114)

<div class="topic-metadata">

**Author:** [@Andrei\_Vaduva](https://discuss.elastic.co/u/Andrei_Vaduva)\
**Replies:** 1\
**Last updated:** [December 29, 2015, 6:09pm UTC](https://discuss.elastic.co/t/disk-i-o-100/38114 "2015-12-29T18:09:18Z")

</div>

Hi, I have a 2 node setup (with default configs, ES 2.1), both are set as master and data. Both of them are identical servers (cpu, ram, disk) in ec2 enviroment, the disks are magnetic. The data is streamed via bulk api…

---

## [Indexing logs with es-hadoop](https://discuss.elastic.co/t/indexing-logs-with-es-hadoop/25963)

<div class="topic-metadata">

**Author:** [@shubhamgupta1404](https://discuss.elastic.co/u/shubhamgupta1404)\
**Replies:** 1\
**Last updated:** [July 22, 2015, 8:14am UTC](https://discuss.elastic.co/t/indexing-logs-with-es-hadoop/25963 "2015-07-22T08:14:37Z")

</div>

I am new to elasticsearch and want to index my website logs which are stored on HDFS for fast querying. I have a well structured pipeline which runs a script every 20 minutes to ingest the data into HDFS. I want to integ…

---

## [Multiple instance of Kibana displayed in monitoring dashboard on same port](https://discuss.elastic.co/t/multiple-instance-of-kibana-displayed-in-monitoring-dashboard-on-same-port/151203)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 8:04am UTC](https://discuss.elastic.co/t/multiple-instance-of-kibana-displayed-in-monitoring-dashboard-on-same-port/151203 "2018-10-11T08:04:58Z")

</div>

Currently I have deployed the ELK stack with Docker. After making a small change in config I restarted all the docker containers. The Kibana monitoring dashboard is showing 2 instance of Kibana running and that too on s…

---

## [How to get the top hits of the search results?](https://discuss.elastic.co/t/how-to-get-the-top-hits-of-the-search-results/45305)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 2\
**Last updated:** [November 17, 2016, 5:04pm UTC](https://discuss.elastic.co/t/how-to-get-the-top-hits-of-the-search-results/45305 "2016-11-17T17:04:54Z")

</div>

Can any one can help how to get the top hits list from the search results that they are searched.

---

## [\_ilm/explain returns illegal\_argument\_exception: "duration cannot be negative, was given \[-1613792563\]"](https://discuss.elastic.co/t/ilm-explain-returns-illegal-argument-exception-duration-cannot-be-negative-was-given-1613792563/288868)

<div class="topic-metadata">

**Author:** [@fuphil](https://discuss.elastic.co/u/fuphil)\
**Replies:** 3\
**Last updated:** [November 11, 2021, 8:12am UTC](https://discuss.elastic.co/t/ilm-explain-returns-illegal-argument-exception-duration-cannot-be-negative-was-given-1613792563/288868 "2021-11-11T08:12:01Z")

</div>

Hi guys, I am running Kibana 7.15 and somehow the ilm information of each index got lost in the UI. Usually (still like this in my test and monitoring cluster) when loading all indices via "Stack Management -\> Index Ma…

---

## [Elasticsearch ingest pipelines not configured](https://discuss.elastic.co/t/elasticsearch-ingest-pipelines-not-configured/224878)

<div class="topic-metadata">

**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\
**Replies:** 3\
**Last updated:** [March 25, 2020, 12:23pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipelines-not-configured/224878 "2020-03-25T12:23:58Z")

</div>

Hello all, not entirely sure if this should be classified as Filebeat, Elasticsearch or Kibana but as I'm executing a Filebeat command, I will start here. I'm trying to setup Elasticsearch ingest pipelines per this doc…

---

## [How to get all documents in Elasticsearch?](https://discuss.elastic.co/t/how-to-get-all-documents-in-elasticsearch/118809)

<div class="topic-metadata">

**Author:** [@cheleyace](https://discuss.elastic.co/u/cheleyace)\
**Replies:** 3\
**Last updated:** [February 8, 2018, 2:38am UTC](https://discuss.elastic.co/t/how-to-get-all-documents-in-elasticsearch/118809 "2018-02-08T02:38:33Z")

</div>

Dear all, I would like to know how to get all the documents in Elasticsearch? I know that the default value of getting the elasticsearch was 10 and can still get up to 10,000. It seems that Kibana cannot handle the larg…

---

## [Event is not created for null value records](https://discuss.elastic.co/t/event-is-not-created-for-null-value-records/112423)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 3\
**Last updated:** [December 27, 2017, 2:52pm UTC](https://discuss.elastic.co/t/event-is-not-created-for-null-value-records/112423 "2017-12-27T14:52:14Z")

</div>

Hi All I have a json file, which is in this below format, for all the records date2 is always null. But in future this date2 can have the value. Since currently date2 is having null value, because of this date2 event …

---

## [What is the best (and easiest) way to insert Elasticsearch into a website?](https://discuss.elastic.co/t/what-is-the-best-and-easiest-way-to-insert-elasticsearch-into-a-website/108329)

<div class="topic-metadata">

**Author:** [@Liron1379](https://discuss.elastic.co/u/Liron1379)\
**Replies:** 3\
**Last updated:** [November 20, 2017, 10:25am UTC](https://discuss.elastic.co/t/what-is-the-best-and-easiest-way-to-insert-elasticsearch-into-a-website/108329 "2017-11-20T10:25:26Z")

</div>

Hi there! I'm writing a website in HTML and C#, in an offline environment (no global internet, on a private network). I'm struggling with inserting and using Elasticsearch from the website code. I've searched for tuto…

---

## [Elasticsearch-hadoop and Apache Storm integration](https://discuss.elastic.co/t/elasticsearch-hadoop-and-apache-storm-integration/52751)

<div class="topic-metadata">

**Author:** [@adisajohnson](https://discuss.elastic.co/u/adisajohnson)\
**Replies:** 3\
**Last updated:** [June 16, 2016, 6:28am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-and-apache-storm-integration/52751 "2016-06-16T06:28:41Z")

</div>

Hello there, I am following https://www.elastic.co/guide/en/elasticsearch/hadoop/current/storm.html . I am trying to write to elastic search using the ESBolt. The flow's topology consists of only 1 spout and 1 bolt b…

---

## [Cluster flooded with random date index](https://discuss.elastic.co/t/cluster-flooded-with-random-date-index/222677)

<div class="topic-metadata">

**Author:** [@stack](https://discuss.elastic.co/u/stack)\
**Replies:** 6\
**Last updated:** [March 18, 2020, 8:30pm UTC](https://discuss.elastic.co/t/cluster-flooded-with-random-date-index/222677 "2020-03-18T20:30:48Z")

</div>

Hello, I've been deploying winlogbeat on many servers at the same time lately and it seem like one or more of them if provoking a bug that create lot of indexs with differents date stamp (my index defined as winlogbeat-…

---

## [How to improve performance in this case?](https://discuss.elastic.co/t/how-to-improve-performance-in-this-case/196267)

<div class="topic-metadata">

**Author:** [@b0nes](https://discuss.elastic.co/u/b0nes)\
**Replies:** 6\
**Last updated:** [August 26, 2019, 7:22am UTC](https://discuss.elastic.co/t/how-to-improve-performance-in-this-case/196267 "2019-08-26T07:22:27Z")

</div>

Hi there, I've setup a single node Elastic stack instance with 48G Ram (24G Heap) and 8 cores. Everything was working fine until I actually started ingesting some real logs. Kibana discover tab is now actually unusabl…

---

## [Probleme with grock logstash 5.0](https://discuss.elastic.co/t/probleme-with-grock-logstash-5-0/68149)

<div class="topic-metadata">

**Author:** [@pierre](https://discuss.elastic.co/u/pierre)\
**Replies:** 6\
**Last updated:** [December 15, 2016, 12:08pm UTC](https://discuss.elastic.co/t/probleme-with-grock-logstash-5-0/68149 "2016-12-15T12:08:07Z")

</div>

hey, i have a problem with logstash, syntax of logstash. my log is : 14\>1 2016-03-02T14:26:10.620+01:00 AAAAAAA-AAAA AA\_AAAA- AA\_FLOW\_SESSION\_CLOSE \[blablabla@2222.2.1.1.2.222 reason="idle Timeout" source-address="…

---

## [Why is TSVB being depricated](https://discuss.elastic.co/t/why-is-tsvb-being-depricated/373678)

<div class="topic-metadata">

**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\
**Replies:** 8\
**Last updated:** [January 31, 2025, 7:30pm UTC](https://discuss.elastic.co/t/why-is-tsvb-being-depricated/373678 "2025-01-31T19:30:43Z")

</div>

well the main question what is the main reason behind deprecation of TSVB and what will be going to be the alternative solution? TSVB is such a nice feature, it would give the opportunity to search on your data in one…

---

## [How to parse \_jsonparsefailure from Laravel with backslashes](https://discuss.elastic.co/t/how-to-parse-jsonparsefailure-from-laravel-with-backslashes/319724)

<div class="topic-metadata">

**Author:** [@strazhnyk](https://discuss.elastic.co/u/strazhnyk)\
**Replies:** 8\
**Last updated:** [November 25, 2022, 4:36pm UTC](https://discuss.elastic.co/t/how-to-parse-jsonparsefailure-from-laravel-with-backslashes/319724 "2022-11-25T16:36:28Z")

</div>

Could anyone help me with the reason why logstash doesn't parse Laraver logs, please? Where is the core problem? Interesting that access logs and some errors log are parsed well. I can't understand why Laravel access lo…

---

## [Metricbeat AWS module endpoint not working correctly](https://discuss.elastic.co/t/metricbeat-aws-module-endpoint-not-working-correctly/261589)

<div class="topic-metadata">

**Author:** [@cjm3625](https://discuss.elastic.co/u/cjm3625)\
**Replies:** 8\
**Last updated:** [January 26, 2021, 8:43pm UTC](https://discuss.elastic.co/t/metricbeat-aws-module-endpoint-not-working-correctly/261589 "2021-01-26T20:43:56Z")

</div>

aws.yml is as follows regions: us-iso-east-1 endpoint: us-iso-east-1.c2s.ic.gov period: 5m metricsets: - ec2 The error is ListMetricsRequest failed: send request failed. followed by a proxy error driven by …

---

## [\[API Logs\] App Search Self Managed config time save logs?](https://discuss.elastic.co/t/api-logs-app-search-self-managed-config-time-save-logs/189101)

<div class="topic-metadata">

**Author:** [@tuyndv](https://discuss.elastic.co/u/tuyndv)\
**Replies:** 8\
**Last updated:** [July 19, 2019, 2:59am UTC](https://discuss.elastic.co/t/api-logs-app-search-self-managed-config-time-save-logs/189101 "2019-07-19T02:59:14Z")

</div>

Dear Team, I'm using App Search Self Managed 7.2.0 Please help me, config time save logs? (Current default 24h) Thanks Team

---

## [Can we customize Kibana UI](https://discuss.elastic.co/t/can-we-customize-kibana-ui/240698)

<div class="topic-metadata">

**Author:** [@vkg0312](https://discuss.elastic.co/u/vkg0312)\
**Replies:** 1\
**Last updated:** [July 13, 2020, 6:11am UTC](https://discuss.elastic.co/t/can-we-customize-kibana-ui/240698 "2020-07-13T06:11:56Z")

</div>

Hi I want to customize kibana UI to show some UI Like system healh and its usage

---

## [How to give s3 client and server certificates to s3 repository client](https://discuss.elastic.co/t/how-to-give-s3-client-and-server-certificates-to-s3-repository-client/218518)

<div class="topic-metadata">

**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\
**Replies:** 1\
**Last updated:** [February 10, 2020, 6:42am UTC](https://discuss.elastic.co/t/how-to-give-s3-client-and-server-certificates-to-s3-repository-client/218518 "2020-02-10T06:42:44Z")

</div>

I am trying to create s3 client PUT \_snapshot/my\_s3\_repository { "type": "s3", "settings": { "bucket": "test1", "endpoint": "s3.tally.com", "access\_key": "", "secret\_key": "" } } Getting following error { "e…

---

## [Hadoop connection with Elasticsearch](https://discuss.elastic.co/t/hadoop-connection-with-elasticsearch/203065)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 1\
**Last updated:** [October 16, 2019, 8:32pm UTC](https://discuss.elastic.co/t/hadoop-connection-with-elasticsearch/203065 "2019-10-16T20:32:44Z")

</div>

Hi, While trying to connect to elasticsearch through hive, getting below exception ERROR : Job Submission failed with exception 'org.elasticsearch.hadoop.EsHadoopIllegalArgumentException(Cannot detect ES version - ty…

---

## [Convert mysql to elasticsearch](https://discuss.elastic.co/t/convert-mysql-to-elasticsearch/120030)

<div class="topic-metadata">

**Author:** [@PauloViegas](https://discuss.elastic.co/u/PauloViegas)\
**Replies:** 1\
**Last updated:** [February 15, 2018, 6:44pm UTC](https://discuss.elastic.co/t/convert-mysql-to-elasticsearch/120030 "2018-02-15T18:44:27Z")

</div>

I try to convert a sql search query to elasticsearch query from elasticsearch documantation, but samething are worng anyone can help me? I have a document with same fields like age and city. i need search a people with …

---

## [Sorting in painless](https://discuss.elastic.co/t/sorting-in-painless/87174)

<div class="topic-metadata">

**Author:** [@Nick\_Peterson](https://discuss.elastic.co/u/Nick_Peterson)\
**Replies:** 1\
**Last updated:** [May 25, 2017, 8:54pm UTC](https://discuss.elastic.co/t/sorting-in-painless/87174 "2017-05-25T20:54:03Z")

</div>

Hi, I had the following line in a groovy script that I'm attempting to rewrite into painless - def buckets = ctx.payload.aggregations.metrics.buckets.sort(a,b -\> a.largest\_surprise.value == b.largest\_surprise.value …

---

## [Using grok instead of csv filter](https://discuss.elastic.co/t/using-grok-instead-of-csv-filter/75540)

<div class="topic-metadata">

**Author:** [@abd.wsu](https://discuss.elastic.co/u/abd.wsu)\
**Replies:** 1\
**Last updated:** [February 18, 2017, 7:22am UTC](https://discuss.elastic.co/t/using-grok-instead-of-csv-filter/75540 "2017-02-18T07:22:41Z")

</div>

I have a csv files with multiple lines as follows "Archive","Major Interval","DEV1","f328c29c-c695-11e5-addb-cc355a180000","EG1","5d56048e-5201-0000-0080-b2bb5fd9a209","TestHeartBeatFlow","3e452a8e-5201-0000-0080-a896a…

---

## [Can I limit a watch to today and yesterday using "indices"?](https://discuss.elastic.co/t/can-i-limit-a-watch-to-today-and-yesterday-using-indices/34455)

<div class="topic-metadata">

**Author:** [@JohnMunson](https://discuss.elastic.co/u/JohnMunson)\
**Replies:** 1\
**Last updated:** [November 13, 2015, 12:24am UTC](https://discuss.elastic.co/t/can-i-limit-a-watch-to-today-and-yesterday-using-indices/34455 "2015-11-13T00:24:00Z")

</div>

Hi. I'm brand new to Elasticsearch and Watcher, so I'm still finding my way around. We have daily indices of the form myindex-YYYY.MM.DD, and I've set up a watch that can search them using... "indices" : \[ "myindex-\*"…

---

## [How to simulate node in a red state?](https://discuss.elastic.co/t/how-to-simulate-node-in-a-red-state/9645)

<div class="topic-metadata">

**Author:** [@Andreas\_W](https://discuss.elastic.co/u/Andreas_W)\
**Replies:** 1\
**Last updated:** [November 9, 2012, 11:54am UTC](https://discuss.elastic.co/t/how-to-simulate-node-in-a-red-state/9645 "2012-11-09T11:54:23Z")

</div>

Hello, In our cluster, we have 3 nodes, each running in a virtual machine. Each shard has 2 replicas, so that each node contains all data. We are currently reviewing our production processes. Especially, we are …

---

## [Installing Fleet agent on servers with existing winlogbeats/filebeats etc](https://discuss.elastic.co/t/installing-fleet-agent-on-servers-with-existing-winlogbeats-filebeats-etc/293547)

<div class="topic-metadata">

**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\
**Replies:** 2\
**Last updated:** [January 6, 2022, 7:49am UTC](https://discuss.elastic.co/t/installing-fleet-agent-on-servers-with-existing-winlogbeats-filebeats-etc/293547 "2022-01-06T07:49:40Z")

</div>

I have a number of servers where i manually installed filebeat/winlogbeat/metricbeat etc. What impact does that have if i wish to now use the Fleet agent and policies to collect this data? Do i need to manually uninsta…

---

## [Snapshot restore with basic license](https://discuss.elastic.co/t/snapshot-restore-with-basic-license/293555)

<div class="topic-metadata">

**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 10:45pm UTC](https://discuss.elastic.co/t/snapshot-restore-with-basic-license/293555 "2022-01-05T22:45:37Z")

</div>

I am using the basic license but noticed on the subscription page (Subscriptions | Elastic Stack Products & Support | Elastic), it shows the basic license for snapshot/restore but further down under Recovery from snapsh…

---

## [Certificate problems adding node to cluster](https://discuss.elastic.co/t/certificate-problems-adding-node-to-cluster/292511)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 2\
**Last updated:** [December 21, 2021, 6:38pm UTC](https://discuss.elastic.co/t/certificate-problems-adding-node-to-cluster/292511 "2021-12-21T18:38:57Z")

</div>

I am preparing to turn on "security" on my production cluster by setting up a test cluster first. I have a single node running fine with security enabled but when I try and bring up a second node with the same configura…

---

## [Content\_tier](https://discuss.elastic.co/t/content-tier/256513)

<div class="topic-metadata">

**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\
**Replies:** 2\
**Last updated:** [November 25, 2020, 7:49am UTC](https://discuss.elastic.co/t/content-tier/256513 "2020-11-25T07:49:47Z")

</div>

Hello, with reference to 7.10 and Data tiers | Elasticsearch Guide \[master\] | Elastic Content tier nodes are usually optimized for query performance—​they prioritize processing power over IO throughput so they can proc…

---

## [Elasticsearch is still initializing the kibana index. Too many shards maybe?](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-too-many-shards-maybe/197639)

<div class="topic-metadata">

**Author:** [@huon](https://discuss.elastic.co/u/huon)\
**Replies:** 2\
**Last updated:** [September 2, 2019, 6:32am UTC](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-too-many-shards-maybe/197639 "2019-09-02T06:32:42Z")

</div>

Hi all! I have inherited a simple Elasticsearch + Kibana set up, and I have no prior experience with either. I am getting the error in the title: In my elasticsearch log I am getting lots of this: \[2019-09-02T01:46…

---

## [Testing multivalue field value existence in painless](https://discuss.elastic.co/t/testing-multivalue-field-value-existence-in-painless/90060)

<div class="topic-metadata">

**Author:** [@srd](https://discuss.elastic.co/u/srd)\
**Replies:** 2\
**Last updated:** [June 27, 2017, 7:39am UTC](https://discuss.elastic.co/t/testing-multivalue-field-value-existence-in-painless/90060 "2017-06-27T07:39:08Z")

</div>

I have a multivalue field of type long. Depending on the inclusion of a per-query value in this field, I want to modify the documents score. I'm trying to achieve this with a function\_score and script\_score, but I can'…

---

## [Handling cookies in HTTP parser](https://discuss.elastic.co/t/handling-cookies-in-http-parser/67335)

<div class="topic-metadata">

**Author:** [@PinXo](https://discuss.elastic.co/u/PinXo)\
**Replies:** 2\
**Last updated:** [November 29, 2016, 8:15pm UTC](https://discuss.elastic.co/t/handling-cookies-in-http-parser/67335 "2016-11-29T20:15:49Z")

</div>

There are several errors parsing Cookies in HTTP protocol. 1. If split\_cookies is enabled, all the other request headers are lost. 2. If a response has two or more cookies, the json is not correctly composed. This cou…

---

## [Search across indices](https://discuss.elastic.co/t/search-across-indices/46580)

<div class="topic-metadata">

**Author:** [@sreeramg](https://discuss.elastic.co/u/sreeramg)\
**Replies:** 2\
**Last updated:** [July 5, 2016, 4:35pm UTC](https://discuss.elastic.co/t/search-across-indices/46580 "2016-07-05T16:35:51Z")

</div>

Hi, I have multiple indices in Elastic Search containing data about subjects and I have built dashboards for each of these indices and sharing them to end users. example: index A: has subjecID, subjecttype, subject…

---

## [Using aliases to search with java client](https://discuss.elastic.co/t/using-aliases-to-search-with-java-client/6469)

<div class="topic-metadata">

**Author:** [@danpolites](https://discuss.elastic.co/u/danpolites)\
**Replies:** 2\
**Last updated:** [January 23, 2012, 7:34pm UTC](https://discuss.elastic.co/t/using-aliases-to-search-with-java-client/6469 "2012-01-23T19:34:18Z")

</div>

I'm working on refactoring our application to use filtered aliases instead of separate indices to handle multi-tenancy. I've got the api working to create and remove indices, but I haven't figured out how to actually …

---

## [License server IPs](https://discuss.elastic.co/t/license-server-ips/314088)

<div class="topic-metadata">

**Author:** [@jonathanmreiter](https://discuss.elastic.co/u/jonathanmreiter)\
**Replies:** 3\
**Last updated:** [September 12, 2022, 2:30pm UTC](https://discuss.elastic.co/t/license-server-ips/314088 "2022-09-12T14:30:01Z")

</div>

Hi there, I'm part of a concern that runs licensed Elasticsearch instances within sensitive environments, and we have been noticing that our instance tries to call home to an unpredictable range of hostnames and IPs ass…

---

## [How to get size disk closed index - Mapper size plugin](https://discuss.elastic.co/t/how-to-get-size-disk-closed-index-mapper-size-plugin/250685)

<div class="topic-metadata">

**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\
**Replies:** 4\
**Last updated:** [October 8, 2020, 1:55pm UTC](https://discuss.elastic.co/t/how-to-get-size-disk-closed-index-mapper-size-plugin/250685 "2020-10-08T13:55:17Z")

</div>

Hi, Is it possible to retrieve disk size information of closed index with mapper size plugin ? I need to create index disk usage statistics but I don't really know how to get closed index information.. Kind regards, …

---

## [Logstash - переписать с нуля?](https://discuss.elastic.co/t/logstash/106291)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 4\
**Last updated:** [November 3, 2017, 8:30pm UTC](https://discuss.elastic.co/t/logstash/106291 "2017-11-03T20:30:43Z")

</div>

Ребята из Эластика! У вас, случайно, есть планы полностью переписать logstash, например, на яве, без этого ужасного jruby? Надеюсь, что вопрос "вотс ронг виф логстэш" излишен :slight\_smile: Спасибо!

---

## [Scale for the size and number of active indices](https://discuss.elastic.co/t/scale-for-the-size-and-number-of-active-indices/54878)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 4\
**Last updated:** [July 7, 2016, 1:58pm UTC](https://discuss.elastic.co/t/scale-for-the-size-and-number-of-active-indices/54878 "2016-07-07T13:58:32Z")

</div>

I have 15 GB or 80,000,000 documents generated everyday streamed from logstash pipeline into elasticsearch, and I need to allow 30 days data to be active and queriable. My queries are all aggregation quries with multiple…

---

## [\[new beat\]Panic with the beat code](https://discuss.elastic.co/t/new-beat-panic-with-the-beat-code/39482)

<div class="topic-metadata">

**Author:** [@pollux](https://discuss.elastic.co/u/pollux)\
**Replies:** 4\
**Last updated:** [January 19, 2016, 11:27am UTC](https://discuss.elastic.co/t/new-beat-panic-with-the-beat-code/39482 "2016-01-19T11:27:01Z")

</div>

Hi, I would monitor file and folder size. So I said "ok I saw all this community beat, it must be not so hard :D". At first I'm trying using filepath.Walk with a custom (simple) callback function like that : p…

---

## [Migrate SSAS Olap to the Elasticsearch](https://discuss.elastic.co/t/migrate-ssas-olap-to-the-elasticsearch/220265)

<div class="topic-metadata">

**Author:** [@luis2](https://discuss.elastic.co/u/luis2)\
**Replies:** 5\
**Last updated:** [February 27, 2020, 10:16pm UTC](https://discuss.elastic.co/t/migrate-ssas-olap-to-the-elasticsearch/220265 "2020-02-27T22:16:28Z")

</div>

Hi, I work at a company that is thinking about migrate his BI structure ( SSAS Olap and Power BI ) to the ElasticSearch. Our BI work basically with aggregations as sum, max, min, first, last, average at aggregation in m…

---

## [Index Mismatch](https://discuss.elastic.co/t/index-mismatch/118303)

<div class="topic-metadata">

**Author:** [@danni](https://discuss.elastic.co/u/danni)\
**Replies:** 5\
**Last updated:** [February 6, 2018, 10:35pm UTC](https://discuss.elastic.co/t/index-mismatch/118303 "2018-02-06T22:35:42Z")

</div>

I am having an issue with kibana. My setup is a little like this: Windows Logs from a WEC server Linux logs including apache and weblogic Winlogbeat and filebeat with filebeat-\* index and winevnt-\* index and being inge…

---

## [Changing elastic password via Kibana doesn't update the yml file](https://discuss.elastic.co/t/changing-elastic-password-via-kibana-doesnt-update-the-yml-file/107065)

<div class="topic-metadata">

**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\
**Replies:** 5\
**Last updated:** [November 10, 2017, 8:32pm UTC](https://discuss.elastic.co/t/changing-elastic-password-via-kibana-doesnt-update-the-yml-file/107065 "2017-11-10T20:32:17Z")

</div>

Using Elasticsearch 5.6.3 with xpack 5.6.3 and Kibana 5.6.3. When going to the elastic option in Kibana and changing Elastics password, it successfully changes for Elasticsearch. After a While (probably after recycling…

---

## [Default similarity in Elasticsearch](https://discuss.elastic.co/t/default-similarity-in-elasticsearch/64034)

<div class="topic-metadata">

**Author:** [@adriel](https://discuss.elastic.co/u/adriel)\
**Replies:** 5\
**Last updated:** [October 27, 2016, 1:46pm UTC](https://discuss.elastic.co/t/default-similarity-in-elasticsearch/64034 "2016-10-27T13:46:37Z")

</div>

The docs (https://www.elastic.co/guide/en/elasticsearch/reference/current/similarity) and announcement blog post (https://www.elastic.co/blog/elasticsearch-5-0-0-released) seem to disagree about the new default similarit…

---

## [Is changing the jvm heap size a problem?](https://discuss.elastic.co/t/is-changing-the-jvm-heap-size-a-problem/284172)

<div class="topic-metadata">

**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\
**Replies:** 3\
**Last updated:** [September 14, 2021, 9:50pm UTC](https://discuss.elastic.co/t/is-changing-the-jvm-heap-size-a-problem/284172 "2021-09-14T21:50:58Z")

</div>

Hello, there are a total of 16 nodes in the cluster, including 13 data nodes and 3 master nodes. Master nodes have 64 gb ram. But jvm heap is set to 16gb. Data nodes have 64 GB ram. But jvm heap is set to 30gb. Does t…

---

## [Make filters option read only in Kibana](https://discuss.elastic.co/t/make-filters-option-read-only-in-kibana/176169)

<div class="topic-metadata">

**Author:** [@Ashwin\_Bharadwaj](https://discuss.elastic.co/u/Ashwin_Bharadwaj)\
**Replies:** 3\
**Last updated:** [April 23, 2019, 8:30am UTC](https://discuss.elastic.co/t/make-filters-option-read-only-in-kibana/176169 "2019-04-23T08:30:50Z")

</div>

Hello Team, We are using kibana for logs tracking purpose. Ours is a multi tenant application and i'm working on securing the kibana logs from different tenant users. The intent is to disable the filter option or make i…

---

## [Client-only routing specified but no client nodes with HTTP-enabled were found in the cluster](https://discuss.elastic.co/t/client-only-routing-specified-but-no-client-nodes-with-http-enabled-were-found-in-the-cluster/167466)

<div class="topic-metadata">

**Author:** [@saklar](https://discuss.elastic.co/u/saklar)\
**Replies:** 3\
**Last updated:** [February 15, 2019, 4:59pm UTC](https://discuss.elastic.co/t/client-only-routing-specified-but-no-client-nodes-with-http-enabled-were-found-in-the-cluster/167466 "2019-02-15T16:59:55Z")

</div>

Hİ, We have elasticsearch 6.5.4 version and Cloudera 5.4.7-1 version. We installed elasticsearch-hadoop-2.1.1.jar to connect between hdfs and elasticsearch. Then the hive table below were created to fetch the data from…

---

## [Unsuccessful GETS missing\_total = 7138 in nodes/stats](https://discuss.elastic.co/t/unsuccessful-gets-missing-total-7138-in-nodes-stats/147650)

<div class="topic-metadata">

**Author:** [@Priya\_Prabhakar](https://discuss.elastic.co/u/Priya_Prabhakar)\
**Replies:** 3\
**Last updated:** [September 17, 2018, 6:02am UTC](https://discuss.elastic.co/t/unsuccessful-gets-missing-total-7138-in-nodes-stats/147650 "2018-09-17T06:02:49Z")

</div>

Hello Team, -What I checked : I have gone through the below doc, which only give the overview, I need more details about the stats: get shows statistics about get-by-ID statistics. This includes GET and HEAD req…

---

## [Watcher: \[parse\_exception\] password is a required option when trying to call cluster status](https://discuss.elastic.co/t/watcher-parse-exception-password-is-a-required-option-when-trying-to-call-cluster-status/134852)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 3\
**Last updated:** [June 26, 2018, 3:28pm UTC](https://discuss.elastic.co/t/watcher-parse-exception-password-is-a-required-option-when-trying-to-call-cluster-status/134852 "2018-06-26T15:28:50Z")

</div>

Referring to below thread, I am experiencing same issue, we allow only https communication. here is my watcher call, { "trigger": { "schedule": { "interval": "10s" } }, "input": { "http": { …

---

## [Math calculation on different fields? How to?](https://discuss.elastic.co/t/math-calculation-on-different-fields-how-to/133269)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [May 25, 2018, 8:46am UTC](https://discuss.elastic.co/t/math-calculation-on-different-fields-how-to/133269 "2018-05-25T08:46:11Z")

</div>

Hi, our system which we monitor with elastic stack is queuing messages in different parts of the application. Unfortunately they are stored in different fields. THere are some example field names where the values are s…

---

## [Unable to update analyzer](https://discuss.elastic.co/t/unable-to-update-analyzer/99113)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 3\
**Last updated:** [September 4, 2017, 2:58pm UTC](https://discuss.elastic.co/t/unable-to-update-analyzer/99113 "2017-09-04T14:58:38Z")

</div>

Hi, I have used tokenizer as below: “text\_general\_likely\_new”: { “tokenizer”: "standard ", “filter”: \[ “StopFilterFactory”, “LowerCaseFilterFactory”, “SynonymFilterFactory”, “ASCIIFoldingFilterFactory” \] } But…

[Previous page](https://discuss.elastic.co/top.md?page=1357&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1359&per_page=50&period=all)
