# Top

**URL:** https://discuss.elastic.co/top.md?page=1363&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1364

---

## [Email sent to my for my own posts](https://discuss.elastic.co/t/email-sent-to-my-for-my-own-posts/351)

<div class="topic-metadata">

**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Replies:** 1\
**Last updated:** [May 7, 2015, 10:59pm UTC](https://discuss.elastic.co/t/email-sent-to-my-for-my-own-posts/351 "2015-05-07T22:59:50Z")

</div>

When I post on the forums I get an email from the forums containing my post. I suspect this is because I've ticked "Do not suppress email notifications when I am active on the site". I do want email notifications of thin…

---

## [Bulk insert vs Single insert](https://discuss.elastic.co/t/bulk-insert-vs-single-insert/20184)

<div class="topic-metadata">

**Author:** [@mike\_giardinelli](https://discuss.elastic.co/u/mike_giardinelli)\
**Replies:** 1\
**Last updated:** [October 11, 2014, 8:56am UTC](https://discuss.elastic.co/t/bulk-insert-vs-single-insert/20184 "2014-10-11T08:56:50Z")

</div>

Hi All, The primary dev managing our ES cluster has made the statement that single document writes to ES will only provide us with roughly 30 / 40 writes a second. Whereas the bulk operations will give us more …

---

## [Error Message: trying to serialize a value with no field associated with it, current value](https://discuss.elastic.co/t/error-message-trying-to-serialize-a-value-with-no-field-associated-with-it-current-value/7067)

<div class="topic-metadata">

**Author:** [@posejavier](https://discuss.elastic.co/u/posejavier)\
**Replies:** 1\
**Last updated:** [March 20, 2012, 8:20pm UTC](https://discuss.elastic.co/t/error-message-trying-to-serialize-a-value-with-no-field-associated-with-it-current-value/7067 "2012-03-20T20:20:27Z")

</div>

Hello everybody, this is a problem I am trying to solve already for some time and I didn't find still a solution. I have a database ("database1") where I have defined the following index using elasticsearch: cur…

---

## [Reindex data with with new timestamp field](https://discuss.elastic.co/t/reindex-data-with-with-new-timestamp-field/161961)

<div class="topic-metadata">

**Author:** [@Roman\_Kournjaev](https://discuss.elastic.co/u/Roman_Kournjaev)\
**Replies:** 0\
**Last updated:** [December 24, 2018, 12:03am UTC](https://discuss.elastic.co/t/reindex-data-with-with-new-timestamp-field/161961 "2018-12-24T00:03:14Z")

</div>

I am creating index every day for some computation i am running , turns out i forgot to add a timestamp field to the index. I would like to reindex every index into a new one and add a @timestamp field that is extract…

---

## [Parsing or Formating Min/Max date value - For elaticsearch aggregation](https://discuss.elastic.co/t/parsing-or-formating-min-max-date-value-for-elaticsearch-aggregation/41834)

<div class="topic-metadata">

**Author:** [@paulohss](https://discuss.elastic.co/u/paulohss)\
**Replies:** 0\
**Last updated:** [February 16, 2016, 3:55am UTC](https://discuss.elastic.co/t/parsing-or-formating-min-max-date-value-for-elaticsearch-aggregation/41834 "2016-02-16T03:55:33Z")

</div>

I have end up here with a odd scenario. I have this aggregation to perform using Elasticsearch and c#: "aggs": { "Max\_opened\_at": { "max": { "field": "opened\_at" } }, "Min\_opened\_at": {…

---

## [\[7.10.2\] Alerting avec plusieurs instances de kibana qui reste en PENDING](https://discuss.elastic.co/t/7-10-2-alerting-avec-plusieurs-instances-de-kibana-qui-reste-en-pending/263414)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 6\
**Last updated:** [February 8, 2021, 11:13am UTC](https://discuss.elastic.co/t/7-10-2-alerting-avec-plusieurs-instances-de-kibana-qui-reste-en-pending/263414 "2021-02-08T11:13:20Z")

</div>

Bonjour, Je reste toujours sans solutions pource thread, malgré un passage en 7.10.2 donc je m'y suis repenché, j'ai créé un nouveau déploiement tout neuf sur cloud.elastic.co, et effectivement, ca marche: je crée une …

---

## [Jdbc river driver in Elasticsearch 6.x](https://discuss.elastic.co/t/jdbc-river-driver-in-elasticsearch-6-x/170382)

<div class="topic-metadata">

**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\
**Replies:** 6\
**Last updated:** [February 28, 2019, 6:11pm UTC](https://discuss.elastic.co/t/jdbc-river-driver-in-elasticsearch-6-x/170382 "2019-02-28T18:11:50Z")

</div>

i am following this GitHub link but I can't find the JDBC driver and also the elasticserch-plugin command does not recognize the syntax given. can someone point out the latest related document to work with hbase 1.1.2, …

---

## [Not able to start Elastic Search](https://discuss.elastic.co/t/not-able-to-start-elastic-search/156087)

<div class="topic-metadata">

**Author:** [@pavankrishna116](https://discuss.elastic.co/u/pavankrishna116)\
**Replies:** 6\
**Last updated:** [November 12, 2018, 11:12am UTC](https://discuss.elastic.co/t/not-able-to-start-elastic-search/156087 "2018-11-12T11:12:02Z")

</div>

Hi, Team I installed elasticsearch in my System(Desktop) it is working fine, However, when I installed the same in my PC(Laptop) it is throwing an error (The data area passed to a system call is too small). Failed to s…

---

## [Logs is sending into Elasticsearch takes much more disk space than in txt format](https://discuss.elastic.co/t/logs-is-sending-into-elasticsearch-takes-much-more-disk-space-than-in-txt-format/84717)

<div class="topic-metadata">

**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\
**Replies:** 6\
**Last updated:** [May 8, 2017, 7:52am UTC](https://discuss.elastic.co/t/logs-is-sending-into-elasticsearch-takes-much-more-disk-space-than-in-txt-format/84717 "2017-05-08T07:52:25Z")

</div>

Dear all, Logs is sending into Elasticsearch takes much more disk space than in txt format. I have 20 application servers with ~ 5 apps on every host. So daily volume of logs ~ 10GB. But in ES it equals ~ 90-100GB. …

---

## [ES load test ended up with out of memory error after enabling the clustering](https://discuss.elastic.co/t/es-load-test-ended-up-with-out-of-memory-error-after-enabling-the-clustering/23281)

<div class="topic-metadata">

**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\
**Replies:** 6\
**Last updated:** [April 25, 2015, 6:30pm UTC](https://discuss.elastic.co/t/es-load-test-ended-up-with-out-of-memory-error-after-enabling-the-clustering/23281 "2015-04-25T18:30:00Z")

</div>

Hi all, I am trying to run load test with ES to identify system requirements and optimum configurations with respect to my load. I have 10 data publishing tasks and 100 data consuming tasks in my load test. Data…

---

## [APM latency statistics - what is it exactly? why does it not align with "transaction.duration.us"?](https://discuss.elastic.co/t/apm-latency-statistics-what-is-it-exactly-why-does-it-not-align-with-transaction-duration-us/349412)

<div class="topic-metadata">

**Author:** [@cozog](https://discuss.elastic.co/u/cozog)\
**Replies:** 2\
**Last updated:** [December 15, 2023, 5:07am UTC](https://discuss.elastic.co/t/apm-latency-statistics-what-is-it-exactly-why-does-it-not-align-with-transaction-duration-us/349412 "2023-12-15T05:07:53Z")

</div>

Kibana version: 8.5.3 Elasticsearch version: 8.5.3 APM Server version: 8.5.3 APM Agent language and version: Java, 1.26.0 Hi, We have APM visualizations that are showing us average latency: now i am also trying …

---

## [Base64 decode issue](https://discuss.elastic.co/t/base64-decode-issue/319874)

<div class="topic-metadata">

**Author:** [@Rajesh\_R](https://discuss.elastic.co/u/Rajesh_R)\
**Replies:** 2\
**Last updated:** [November 28, 2022, 2:55am UTC](https://discuss.elastic.co/t/base64-decode-issue/319874 "2022-11-28T02:55:18Z")

</div>

Hi Team, Does Anyone know how to decode base64 in logstash? Logfile : {"ID":"11166946081959","Type":"LOG","pID":"rajesh.r@gmail.com","Interface":"Offboarding","payload": "PD94bWzCoHZlcnNpb249IjEuMCLCoGVuY29kaW5nPSJJU08…

---

## [Logstash drop based on size](https://discuss.elastic.co/t/logstash-drop-based-on-size/275610)

<div class="topic-metadata">

**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\
**Replies:** 2\
**Last updated:** [June 11, 2021, 9:11pm UTC](https://discuss.elastic.co/t/logstash-drop-based-on-size/275610 "2021-06-11T21:11:12Z")

</div>

Hi all, Is it possible to drop a message based on it's size (ex: above 1 MB)? I'm reading from tcp port and writing into Kafka topic. All messages bigger then 1 MB give errors similar to this and then logstash retry t…

---

## [Query SQL failed: Internal Server Error](https://discuss.elastic.co/t/query-sql-failed-internal-server-error/213124)

<div class="topic-metadata">

**Author:** [@Jun\_Zhang](https://discuss.elastic.co/u/Jun_Zhang)\
**Replies:** 2\
**Last updated:** [January 2, 2020, 9:12pm UTC](https://discuss.elastic.co/t/query-sql-failed-internal-server-error/213124 "2020-01-02T21:12:51Z")

</div>

Elasticsearch & Kibana Version: 7.5.1 Query SQL like: POST /\_sql?format=txt { "query": """ DESCRIBE "metricbeat-7.2.0-2019.12.26-000001" """ } response: { "statusCode": 500, "error": "Internal Serv…

---

## [Elasticsearch conditional filter](https://discuss.elastic.co/t/elasticsearch-conditional-filter/198398)

<div class="topic-metadata">

**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\
**Replies:** 2\
**Last updated:** [September 9, 2019, 11:28am UTC](https://discuss.elastic.co/t/elasticsearch-conditional-filter/198398 "2019-09-09T11:28:00Z")

</div>

We have a use case where around 65% of our documents can be uniquely identified by a single field however we cannot guarantee that this will match, in which case we want to fall back to a complex full text search query u…

---

## [Image not getting loaded in Markdown Element](https://discuss.elastic.co/t/image-not-getting-loaded-in-markdown-element/167631)

<div class="topic-metadata">

**Author:** [@vinay.rao](https://discuss.elastic.co/u/vinay.rao)\
**Replies:** 2\
**Last updated:** [February 15, 2019, 8:01am UTC](https://discuss.elastic.co/t/image-not-getting-loaded-in-markdown-element/167631 "2019-02-15T08:01:30Z")

</div>

Dear All, I tried uploading image in Markdown element and image is not getting uploaded. Tried multiple ways from the solutions provided in community. Request you all help me to upload image successfully. Below are th…

---

## [Restore a snapshot: RemoteTransportException](https://discuss.elastic.co/t/restore-a-snapshot-remotetransportexception/138732)

<div class="topic-metadata">

**Author:** [@mohammedEssabri](https://discuss.elastic.co/u/mohammedEssabri)\
**Replies:** 2\
**Last updated:** [July 5, 2018, 3:25pm UTC](https://discuss.elastic.co/t/restore-a-snapshot-remotetransportexception/138732 "2018-07-05T15:25:17Z")

</div>

Dear Elasticsearch team, I'm using Elasticsearch 1.7, and I've created a snapshot named snapshot20180625 in an environment and i copied it into another environment, then i tried to register the repository using: curl -…

---

## [Kibana.yml does not contain any x-pack](https://discuss.elastic.co/t/kibana-yml-does-not-contain-any-x-pack/110232)

<div class="topic-metadata">

**Author:** [@hoangkhac](https://discuss.elastic.co/u/hoangkhac)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 5:15am UTC](https://discuss.elastic.co/t/kibana-yml-does-not-contain-any-x-pack/110232 "2017-12-05T05:15:09Z")

</div>

Hi i am currently new to the elastic stack. i have x-pack successfully installed on elasticsearch and also kibana. I want to disable the security of x-pack but i can not find the xpack.security.enabled in my kibana.yml f…

---

## [Data is not coming in kibana Dashborad](https://discuss.elastic.co/t/data-is-not-coming-in-kibana-dashborad/100874)

<div class="topic-metadata">

**Author:** [@Manik\_Mahajan](https://discuss.elastic.co/u/Manik_Mahajan)\
**Replies:** 2\
**Last updated:** [September 20, 2017, 5:02am UTC](https://discuss.elastic.co/t/data-is-not-coming-in-kibana-dashborad/100874 "2017-09-20T05:02:40Z")

</div>

Elasticsearch version:2..4.6 kibana version:4.6.2 Searchguard version:2.4.6 Headers: Request URL:https://192.168.0.221:5602/elasticsearch/isp\_vodafone\_cdncache\*/\_field\_stats?level=indices Request Method:POST Status…

---

## [Nested/non nested property in similar mappings](https://discuss.elastic.co/t/nested-non-nested-property-in-similar-mappings/88379)

<div class="topic-metadata">

**Author:** [@Stefano\_Ghisaura](https://discuss.elastic.co/u/Stefano_Ghisaura)\
**Replies:** 2\
**Last updated:** [June 13, 2017, 10:29am UTC](https://discuss.elastic.co/t/nested-non-nested-property-in-similar-mappings/88379 "2017-06-13T10:29:17Z")

</div>

Hi all, As general overview, we have monthly indexes ("index\_2017.01", "index\_2017.02", etc...) under the same alias ("index\_all") and we monthly add a new index. Now I'd need to change a property from non nested to ne…

---

## [I can only send curl commands on the localhost](https://discuss.elastic.co/t/i-can-only-send-curl-commands-on-the-localhost/85769)

<div class="topic-metadata">

**Author:** [@menelink](https://discuss.elastic.co/u/menelink)\
**Replies:** 2\
**Last updated:** [May 16, 2017, 3:17pm UTC](https://discuss.elastic.co/t/i-can-only-send-curl-commands-on-the-localhost/85769 "2017-05-16T15:17:36Z")

</div>

Greetings, I've been trying to send some curl requests to elasticsearch (port 9200) from my desktop but all I get is a net::ERR\_CONNECTION\_REFUSED message. Now all problems disappear when I execute the command locall…

---

## [Using @metadata in logstash custom pattern for grok?](https://discuss.elastic.co/t/using-metadata-in-logstash-custom-pattern-for-grok/67177)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [November 28, 2016, 10:03am UTC](https://discuss.elastic.co/t/using-metadata-in-logstash-custom-pattern-for-grok/67177 "2016-11-28T10:03:30Z")

</div>

Hi. I am trying to use @metadata in logstash custom pattern for grok. But looks like @ is not allowed when using in the fieldname. Is there any way to escape @ in the custom pattern? \[2016-11-25T19:51:21,685\]\[ERROR\]\[…

---

## [Kibanaの配置自動調整機能を無効にしたい](https://discuss.elastic.co/t/kibana/48029)

<div class="topic-metadata">

**Author:** [@arum](https://discuss.elastic.co/u/arum)\
**Replies:** 2\
**Last updated:** [April 24, 2016, 2:16pm UTC](https://discuss.elastic.co/t/kibana/48029 "2016-04-24T14:16:28Z")

</div>

kibana-4.5.0のDashboardの画面で、 Visualizeの画面で作成したVisualizationを配置する時、 デフォルトでは、隣接すると、位置とサイズが自動調整されますが これはこれで便利な機能なのですが、 ある局面ではとても使い辛くて困っています。 例えば、「Vertical bar chart」が左、「Pie chart」が右に 接近して並んで、Dashboardの画面にぴったり収まっている状態で、 「Ver…

---

## [ElasticSearch server 1.4.0 throws ClosedChannelException and IOException when connected using elasticsearch-head](https://discuss.elastic.co/t/elasticsearch-server-1-4-0-throws-closedchannelexception-and-ioexception-when-connected-using-elasticsearch-head/20799)

<div class="topic-metadata">

**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\
**Replies:** 2\
**Last updated:** [November 18, 2014, 12:12pm UTC](https://discuss.elastic.co/t/elasticsearch-server-1-4-0-throws-closedchannelexception-and-ioexception-when-connected-using-elasticsearch-head/20799 "2014-11-18T12:12:13Z")

</div>

Hi, I installed ElasticSearch server on CentOS and launched. I downloaded elasticsearch-head using git command. When I try to connect to the cluster, the server throws exception: ---------------- \[root@uranu…

---

## [Dockerfile for Metricbeat based on ubi8](https://discuss.elastic.co/t/dockerfile-for-metricbeat-based-on-ubi8/268210)

<div class="topic-metadata">

**Author:** [@noid999](https://discuss.elastic.co/u/noid999)\
**Replies:** 5\
**Last updated:** [April 27, 2021, 9:41am UTC](https://discuss.elastic.co/t/dockerfile-for-metricbeat-based-on-ubi8/268210 "2021-04-27T09:41:56Z")

</div>

Hi everyone, we are trying to build a Metricbeat Image based on ubi8. There are a lot of information's but no one explaines how this can be archived. I reverse engineered the official Image but there must be another wa…

---

## [Search UI sometimes asks for username and password](https://discuss.elastic.co/t/search-ui-sometimes-asks-for-username-and-password/241505)

<div class="topic-metadata">

**Author:** [@coding\_martian](https://discuss.elastic.co/u/coding_martian)\
**Replies:** 5\
**Last updated:** [July 22, 2020, 10:07am UTC](https://discuss.elastic.co/t/search-ui-sometimes-asks-for-username-and-password/241505 "2020-07-22T10:07:04Z")

</div>

I am currently using an App Search instance for the backend and a React front end user interface based on Elasticsearch-ui. The config for the SearchProvider element have the right authentication details (searchKey, endp…

---

## [System.diskio.iostat.await value bump too high](https://discuss.elastic.co/t/system-diskio-iostat-await-value-bump-too-high/224240)

<div class="topic-metadata">

**Author:** [@HenryDuong](https://discuss.elastic.co/u/HenryDuong)\
**Replies:** 5\
**Last updated:** [March 27, 2020, 8:27pm UTC](https://discuss.elastic.co/t/system-diskio-iostat-await-value-bump-too-high/224240 "2020-03-27T20:27:58Z")

</div>

Hi guys, I'm using the Metricbeat module version 7.2.0 to collect system KPI, but the system.diskio.iostat.await value is so wrong, it returns the value too large to be right. And I make sure the system has nothing wron…

---

## [Restoring machine learning config from a snapshot](https://discuss.elastic.co/t/restoring-machine-learning-config-from-a-snapshot/169847)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 5\
**Last updated:** [February 26, 2019, 6:56pm UTC](https://discuss.elastic.co/t/restoring-machine-learning-config-from-a-snapshot/169847 "2019-02-26T18:56:00Z")

</div>

I am migrating my on-premise ELK stack to elastic cloud as per this article I use the snapshot method and I did restored all the .ml\* indices Unfortunately, I cannot retreive my ML job configurations. According to the d…

---

## [Heap Usage is not as usual](https://discuss.elastic.co/t/heap-usage-is-not-as-usual/88205)

<div class="topic-metadata">

**Author:** [@Nicolas\_Garfinkiel](https://discuss.elastic.co/u/Nicolas_Garfinkiel)\
**Replies:** 5\
**Last updated:** [June 5, 2017, 9:45am UTC](https://discuss.elastic.co/t/heap-usage-is-not-as-usual/88205 "2017-06-05T09:45:25Z")

</div>

Hello all, I have a 3 nodes cluster with two main indices, 3 shards and 3 replicas each. Each node has total 16GB RAM with 6GB reserved to ES. I see the following pattern. Memory percent starts at ~14% and in 22/24hs…

---

## [Jumped from 1.X to 2.X and noticed my tokenization changed](https://discuss.elastic.co/t/jumped-from-1-x-to-2-x-and-noticed-my-tokenization-changed/55244)

<div class="topic-metadata">

**Author:** [@Shadoninja](https://discuss.elastic.co/u/Shadoninja)\
**Replies:** 5\
**Last updated:** [July 29, 2016, 9:12pm UTC](https://discuss.elastic.co/t/jumped-from-1-x-to-2-x-and-noticed-my-tokenization-changed/55244 "2016-07-29T21:12:52Z")

</div>

Here is an old entry: }, { "\_index" : "logs-2014-12-11", "\_type" : "logs", "\_id" : "505", "\_score" : 1.0, "fields" : { "terms" : \[ \[ "smith/robert/principal/janitor" \] \] } }, { Here is the new entry: …

---

## [Reverse connections from lumberjack](https://discuss.elastic.co/t/reverse-connections-from-lumberjack/31990)

<div class="topic-metadata">

**Author:** [@qwerty](https://discuss.elastic.co/u/qwerty)\
**Replies:** 5\
**Last updated:** [October 12, 2015, 5:12pm UTC](https://discuss.elastic.co/t/reverse-connections-from-lumberjack/31990 "2015-10-12T17:12:46Z")

</div>

Here is my setup: 1) system-A -- running logstash-forwarder, shipping to B 2) system-B -- running lumberjack on port 5043 and logstash-forwarder 3) system-C -- running logstash-forwarder, shipping to B I'm seeing rever…

---

## [Searching most recent objects](https://discuss.elastic.co/t/searching-most-recent-objects/17036)

<div class="topic-metadata">

**Author:** [@Joris\_Bolsens](https://discuss.elastic.co/u/Joris_Bolsens)\
**Replies:** 5\
**Last updated:** [April 18, 2014, 6:19pm UTC](https://discuss.elastic.co/t/searching-most-recent-objects/17036 "2014-04-18T18:19:34Z")

</div>

I am using the javascript API and want to do a search and have it search through the most recent objects, IE I call a search with size 100, I want to have the most recent 100 objects returned to me, how would I go ab…

---

## [Design help: What do I gain with Redis?](https://discuss.elastic.co/t/design-help-what-do-i-gain-with-redis/14159)

<div class="topic-metadata">

**Author:** [@thealy](https://discuss.elastic.co/u/thealy)\
**Replies:** 5\
**Last updated:** [October 30, 2013, 12:48pm UTC](https://discuss.elastic.co/t/design-help-what-do-i-gain-with-redis/14159 "2013-10-30T12:48:35Z")

</div>

Running Elasticsearch version 0.90.3 on 10 nodes. Two indexes in use with replication 4, shards 5. Just over 200 million records total so far. Records are email and http proxy log information, sent to dedicated Java …

---

## [Using G1GC in ES 7.7.0](https://discuss.elastic.co/t/using-g1gc-in-es-7-7-0/239547)

<div class="topic-metadata">

**Author:** [@praveenmak](https://discuss.elastic.co/u/praveenmak)\
**Replies:** 2\
**Last updated:** [July 8, 2020, 6:52pm UTC](https://discuss.elastic.co/t/using-g1gc-in-es-7-7-0/239547 "2020-07-08T18:52:02Z")

</div>

Hello Guys, I am using ES 7.7.0 JDK is bin/java --version openjdk 14 2020-03-17 OpenJDK Runtime Environment AdoptOpenJDK (build 14+36) OpenJDK 64-Bit Server VM AdoptOpenJDK (build 14+36, mixed mode, sharing) -Xm…

---

## [Timeout in Logstash Elasticsearch Filter and Elasticsearch Output](https://discuss.elastic.co/t/timeout-in-logstash-elasticsearch-filter-and-elasticsearch-output/304253)

<div class="topic-metadata">

**Author:** [@sagarpatel](https://discuss.elastic.co/u/sagarpatel)\
**Replies:** 0\
**Last updated:** [May 9, 2022, 12:46pm UTC](https://discuss.elastic.co/t/timeout-in-logstash-elasticsearch-filter-and-elasticsearch-output/304253 "2022-05-09T12:46:00Z")

</div>

Elasticsearch version: 7.16 (running as elastic cloud) Logstash version: 7.16 I am using http\_poller input plugin which is scheduled every 15 mins. Based on the http\_poller API response I need to execute Elasticsearch …

---

## [Multiple values in field json parser](https://discuss.elastic.co/t/multiple-values-in-field-json-parser/290530)

<div class="topic-metadata">

**Author:** [@svenvg93](https://discuss.elastic.co/u/svenvg93)\
**Replies:** 3\
**Last updated:** [December 16, 2021, 4:12pm UTC](https://discuss.elastic.co/t/multiple-values-in-field-json-parser/290530 "2021-12-16T16:12:17Z")

</div>

In order to learn more about ELK, I try to combine it with fun stuff to build :slight\_smile: . On of the things I try to make is dashboard with Formula 1 data. Im able to get the data in Elasticsearch by curl an json a…

---

## [Search across multiple indices with diffrent fields](https://discuss.elastic.co/t/search-across-multiple-indices-with-diffrent-fields/209706)

<div class="topic-metadata">

**Author:** [@william\_ganrot](https://discuss.elastic.co/u/william_ganrot)\
**Replies:** 3\
**Last updated:** [November 27, 2019, 4:44pm UTC](https://discuss.elastic.co/t/search-across-multiple-indices-with-diffrent-fields/209706 "2019-11-27T16:44:22Z")

</div>

Hi! I have a cluster with multiple indices which have different fields with the same content. For example one index has the field 'FullName' and another field might have 'FirstName' & 'LastName'. I want to search a full…

---

## [What happens if primary shard fail during publication?](https://discuss.elastic.co/t/what-happens-if-primary-shard-fail-during-publication/195599)

<div class="topic-metadata">

**Author:** [@lotabout](https://discuss.elastic.co/u/lotabout)\
**Replies:** 3\
**Last updated:** [August 26, 2019, 2:47pm UTC](https://discuss.elastic.co/t/what-happens-if-primary-shard-fail-during-publication/195599 "2019-08-26T14:47:17Z")

</div>

As I understand ES's synchronization is kind of like 2 Phase Commit(2PC) and the problem of 2PC is when the "master" node fails during commit. Quote from Github Reply: An indexing request goes through the following pr…

---

## [Many Apache servers on one machine?](https://discuss.elastic.co/t/many-apache-servers-on-one-machine/186386)

<div class="topic-metadata">

**Author:** [@baerrach](https://discuss.elastic.co/u/baerrach)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 7:02am UTC](https://discuss.elastic.co/t/many-apache-servers-on-one-machine/186386 "2019-06-20T07:02:15Z")

</div>

I've got a machine with many Apache servers on it. The Apache logs got into different directories, /srv/host1.com/logs /srv/host2.com/logs etc If I enable modules this will use the default paths, which obviously wont…

---

## [Discovery problem](https://discuss.elastic.co/t/discovery-problem/174958)

<div class="topic-metadata">

**Author:** [@jof300](https://discuss.elastic.co/u/jof300)\
**Replies:** 3\
**Last updated:** [April 21, 2019, 8:42pm UTC](https://discuss.elastic.co/t/discovery-problem/174958 "2019-04-21T20:42:36Z")

</div>

Hi, I am trying to implement a sample example with autodiscover and modules I created 2 docker : nginx filebeat I want filebeat container to get logs from nginx container with autodiscover and use nginx module to pa…

---

## [Netflow missing field](https://discuss.elastic.co/t/netflow-missing-field/110520)

<div class="topic-metadata">

**Author:** [@tim-timmer](https://discuss.elastic.co/u/tim-timmer)\
**Replies:** 3\
**Last updated:** [December 15, 2017, 1:07pm UTC](https://discuss.elastic.co/t/netflow-missing-field/110520 "2017-12-15T13:07:22Z")

</div>

Hi everyone! I'm very new to ELK... So, I've got the following: Elasticsearch v6.0.0 + X-Pack Logstash v6.0.0 + X-Pack Kibana v6.0.0 + X-Pack I want to collect netflow data. The issue is: I've executed /usr/share/…

---

## [I have a problem connecting my 2 nodes with the same cluster](https://discuss.elastic.co/t/i-have-a-problem-connecting-my-2-nodes-with-the-same-cluster/42014)

<div class="topic-metadata">

**Author:** [@arianayay](https://discuss.elastic.co/u/arianayay)\
**Replies:** 3\
**Last updated:** [February 19, 2016, 10:00am UTC](https://discuss.elastic.co/t/i-have-a-problem-connecting-my-2-nodes-with-the-same-cluster/42014 "2016-02-19T10:00:38Z")

</div>

What Host IP should I use to bind my 2 nodes with the same cluster. Given this configuration: Node1: cluster.name: sql node.name: engineering node.master: true node.data: true network.host: 127.0.0.3 transport…

---

## [Cluster of Machines or a single machine on EC2?](https://discuss.elastic.co/t/cluster-of-machines-or-a-single-machine-on-ec2/28766)

<div class="topic-metadata">

**Author:** [@siddharth\_gupta](https://discuss.elastic.co/u/siddharth_gupta)\
**Replies:** 3\
**Last updated:** [September 7, 2015, 11:18am UTC](https://discuss.elastic.co/t/cluster-of-machines-or-a-single-machine-on-ec2/28766 "2015-09-07T11:18:48Z")

</div>

Hello, I have to index around 300,000 documents on AWS EC2 instance. Can anybody please suggest whether I should go for a single instance or consider multiple instances for indexing ? Thanks & Regards, Siddharth.

---

## [Multiple nodes on same machine : replicas?](https://discuss.elastic.co/t/multiple-nodes-on-same-machine-replicas/23566)

<div class="topic-metadata">

**Author:** [@DH1](https://discuss.elastic.co/u/DH1)\
**Replies:** 3\
**Last updated:** [May 6, 2015, 12:21pm UTC](https://discuss.elastic.co/t/multiple-nodes-on-same-machine-replicas/23566 "2015-05-06T12:21:15Z")

</div>

Hello, everyone. I'm trying to set up a cluster of 10 nodes, distributed on five different computers. Each computer have 2 full installation of ES v 0.90.5. All indices on this cluster have 5 shards, 1 replica …

---

## [DOS attack Elasticsearch with Mappings](https://discuss.elastic.co/t/dos-attack-elasticsearch-with-mappings/19429)

<div class="topic-metadata">

**Author:** [@Joshua\_Montgomery](https://discuss.elastic.co/u/Joshua_Montgomery)\
**Replies:** 3\
**Last updated:** [August 25, 2014, 8:38am UTC](https://discuss.elastic.co/t/dos-attack-elasticsearch-with-mappings/19429 "2014-08-25T08:38:44Z")

</div>

So an Elasticsearch clusters I help run had an interesting issue last week around mappings and I wanted to get the communities thoughts about how to handle it. \*Issue:\* Our cluster one morning went into utter c…

---

## [Shards stuck in initializing status for long time](https://discuss.elastic.co/t/shards-stuck-in-initializing-status-for-long-time/10900)

<div class="topic-metadata">

**Author:** [@Dong\_Aihua](https://discuss.elastic.co/u/Dong_Aihua)\
**Replies:** 3\
**Last updated:** [February 26, 2013, 8:02am UTC](https://discuss.elastic.co/t/shards-stuck-in-initializing-status-for-long-time/10900 "2013-02-26T08:02:36Z")

</div>

Hi, guys: I created a new cluster from scratch. After the cluster is up, I tried to create some empty indices for example index-2013-02-25, index-2013-02-26, index-2013-02-27, index-2013-03-01, etc But some sh…

---

## [Logstash 7.8 doesn't re-parse existing file](https://discuss.elastic.co/t/logstash-7-8-doesnt-re-parse-existing-file/240669)

<div class="topic-metadata">

**Author:** [@Alex\_Liu](https://discuss.elastic.co/u/Alex_Liu)\
**Replies:** 7\
**Last updated:** [July 21, 2020, 3:34am UTC](https://discuss.elastic.co/t/logstash-7-8-doesnt-re-parse-existing-file/240669 "2020-07-21T03:34:53Z")

</div>

Hi team, I'm using Elastic Stack 7.8, below logstash doesn't read old files in /usr/data/nsg/ folder. input { file { path =\> "/usr/data/nsg/\*" start\_position =\> "beginning" codec =\> "json" …

---

## [Is it possible to run Auditbeat on Ubuntu on Power (ppc64le) hardware?](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702)

<div class="topic-metadata">

**Author:** [@nlh](https://discuss.elastic.co/u/nlh)\
**Replies:** 7\
**Last updated:** [November 16, 2018, 8:48am UTC](https://discuss.elastic.co/t/is-it-possible-to-run-auditbeat-on-ubuntu-on-power-ppc64le-hardware/156702 "2018-11-16T08:48:20Z")

</div>

Question pretty much says it. Having to migrate to a beast of a machine with Ubuntu and a Power architecture. https://www.elastic.co/downloads/beats/auditbeat ,deb is the wrong architecture, but not sure what the Linux…

---

## [Elasticsearch using bundled JDK instead of the one at JAVA\_HOME](https://discuss.elastic.co/t/elasticsearch-using-bundled-jdk-instead-of-the-one-at-java-home/342797)

<div class="topic-metadata">

**Author:** [@martha889](https://discuss.elastic.co/u/martha889)\
**Replies:** 1\
**Last updated:** [September 12, 2023, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-using-bundled-jdk-instead-of-the-one-at-java-home/342797 "2023-09-12T13:06:30Z")

</div>

Seeing this error while trying to run elasticsearch on redhat docker container. Any idea why elasticserach is not using the JDK present in JAVA\_HOME or how to fix this error? root@5196a84b088b:/var/lib/avi/logs# JAVA\_HO…

---

## [Kibana server.publicBaseUrl](https://discuss.elastic.co/t/kibana-server-publicbaseurl/328444)

<div class="topic-metadata">

**Author:** [@MahithaSarala](https://discuss.elastic.co/u/MahithaSarala)\
**Replies:** 1\
**Last updated:** [April 15, 2023, 4:05am UTC](https://discuss.elastic.co/t/kibana-server-publicbaseurl/328444 "2023-04-15T04:05:17Z")

</div>

Hi Team , Deployed kibana 8.5.3 through ECK Facing issue like Kibana server.publicBaseUrl Please find kibana manifest file apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: kibana spec: version: 8.…

[Previous page](https://discuss.elastic.co/top.md?page=1362&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1364&per_page=50&period=all)
