# Top

**URL:** https://discuss.elastic.co/top.md?page=1365&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1366

---

## [Transaction Log when making new replica](https://discuss.elastic.co/t/transaction-log-when-making-new-replica/37871)

<div class="topic-metadata">

**Author:** [@haldrich](https://discuss.elastic.co/u/haldrich)\
**Replies:** 3\
**Last updated:** [December 25, 2015, 2:00am UTC](https://discuss.elastic.co/t/transaction-log-when-making-new-replica/37871 "2015-12-25T02:00:17Z")

</div>

Our system requires that we reindex potentially 1m+ records several times per day. To improve indexing time, we set the replicas to 0 while indexing... then, after the indexing is done, we call a flush and then set the r…

---

## [Kibana crashing when storing complex items on Elasticsearch](https://discuss.elastic.co/t/kibana-crashing-when-storing-complex-items-on-elasticsearch/305984)

<div class="topic-metadata">

**Author:** [@robjennings](https://discuss.elastic.co/u/robjennings)\
**Replies:** 6\
**Last updated:** [May 31, 2022, 1:32am UTC](https://discuss.elastic.co/t/kibana-crashing-when-storing-complex-items-on-elasticsearch/305984 "2022-05-31T01:32:31Z")

</div>

Hello, This is my first post in the community. I've been following this forum over the last months as I started to use more and more Elasticsearch on my day to day. I've been using Elasticsearch to store data from sever…

---

## [Logstash azure log analytics output - Failed to flush outgoing items - block in start\_workers](https://discuss.elastic.co/t/logstash-azure-log-analytics-output-failed-to-flush-outgoing-items-block-in-start-workers/305078)

<div class="topic-metadata">

**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\
**Replies:** 6\
**Last updated:** [May 24, 2022, 12:29pm UTC](https://discuss.elastic.co/t/logstash-azure-log-analytics-output-failed-to-flush-outgoing-items-block-in-start-workers/305078 "2022-05-24T12:29:11Z")

</div>

Hi, I am using the redhat openshift logging operator provided fluentd forward to forward my logs to a Logstash instance, and using the azure log analytics output plugin to forward the logs to an Azure Log Analytics Work…

---

## [Dashboard Drilldowns do not work in Data Table (7.13.1)](https://discuss.elastic.co/t/dashboard-drilldowns-do-not-work-in-data-table-7-13-1/275878)

<div class="topic-metadata">

**Author:** [@Jeffrey\_Wilk](https://discuss.elastic.co/u/Jeffrey_Wilk)\
**Replies:** 6\
**Last updated:** [June 14, 2021, 8:15pm UTC](https://discuss.elastic.co/t/dashboard-drilldowns-do-not-work-in-data-table-7-13-1/275878 "2021-06-14T20:15:26Z")

</div>

At the help page here it says that Drilldowns are supported in data tables, and the option exists when editing a table panel from a dashboard. However, it does not work. I have tried on our previous version of 7.12.1 a…

---

## [Loading MYSQL database into Elasticsearch using Logstash](https://discuss.elastic.co/t/loading-mysql-database-into-elasticsearch-using-logstash/141451)

<div class="topic-metadata">

**Author:** [@anon98066099](https://discuss.elastic.co/u/anon98066099)\
**Replies:** 6\
**Last updated:** [July 26, 2018, 8:14am UTC](https://discuss.elastic.co/t/loading-mysql-database-into-elasticsearch-using-logstash/141451 "2018-07-26T08:14:23Z")

</div>

I am trying to load a simple table using logstash into elasticsearch. But i am unable to do so as i am getting the below error: C:\\Users\\IYE8288\\Downloads\\logstash-6.3.1\\logstash-6.3.1\\bin\>logstash -f mysql.conf Sendin…

---

## [Confused about tuning](https://discuss.elastic.co/t/confused-about-tuning/9279)

<div class="topic-metadata">

**Author:** [@Mohamed\_Lrhazi](https://discuss.elastic.co/u/Mohamed_Lrhazi)\
**Replies:** 6\
**Last updated:** [October 8, 2012, 8:03pm UTC](https://discuss.elastic.co/t/confused-about-tuning/9279 "2012-10-08T20:03:23Z")

</div>

I indexed 20K documents using a 5 node ES setup, (RHEL 6.x) with everything in its default values. It took 15mins. I then doubled the vCPUs on the VMs, from 4 to 8, and RAM from 4 to 8 GB. Rerun the indexing which…

---

## [Modern Plugin router, specify timeout](https://discuss.elastic.co/t/modern-plugin-router-specify-timeout/242088)

<div class="topic-metadata">

**Author:** [@McKittrick\_Kaminski](https://discuss.elastic.co/u/McKittrick_Kaminski)\
**Replies:** 5\
**Last updated:** [July 29, 2020, 7:20am UTC](https://discuss.elastic.co/t/modern-plugin-router-specify-timeout/242088 "2020-07-29T07:20:15Z")

</div>

Hey guys, making a Kibana plugin. I'm uploading a large-ish (think 100mb) file with HTTP2 multipart/form-data, and streaming the data into a GCP bucket. I was able to do this cleanly with the old plugin, with the follow…

---

## [Forwarding detection alert status changes (acknowledged / closed) to an external system](https://discuss.elastic.co/t/forwarding-detection-alert-status-changes-acknowledged-closed-to-an-external-system/390784)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 2\
**Last updated:** [September 30, 2026, 6:17pm UTC](https://discuss.elastic.co/t/forwarding-detection-alert-status-changes-acknowledged-closed-to-an-external-system/390784 "2026-09-30T18:17:33Z")

</div>

Hello, We forward Elastic Security detection alerts to an external system through a Webhook connector configured as a rule action. That works well for new alerts. However, the receiving side also requires every subseque…

---

## [Send emails with PDF Dashboard](https://discuss.elastic.co/t/send-emails-with-pdf-dashboard/341105)

<div class="topic-metadata">

**Author:** [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\
**Replies:** 2\
**Last updated:** [September 19, 2023, 12:01pm UTC](https://discuss.elastic.co/t/send-emails-with-pdf-dashboard/341105 "2023-09-19T12:01:36Z")

</div>

Hello, I read the documentation about sending email with PDF dashboard in the attachment \>\>\> Automatically generate reports | Kibana Guide \[8.9\] | Elastic I wanted to create my own watcher. My Kibana version is 7.17.8 …

---

## [Processors in Endpoint/Elastic-Agent](https://discuss.elastic.co/t/processors-in-endpoint-elastic-agent/279889)

<div class="topic-metadata">

**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\
**Replies:** 2\
**Last updated:** [August 5, 2021, 3:28pm UTC](https://discuss.elastic.co/t/processors-in-endpoint-elastic-agent/279889 "2021-08-05T15:28:52Z")

</div>

Hello, We are testing Elastic-Agent and found that the streams configuration we can add "processors" that take care of adding custom fields for things like Filebeats/Metricbeats. This is a useful feature but we cannot f…

---

## [Return specified fields using spring data elastic search](https://discuss.elastic.co/t/return-specified-fields-using-spring-data-elastic-search/239465)

<div class="topic-metadata">

**Author:** [@mohsin](https://discuss.elastic.co/u/mohsin)\
**Replies:** 2\
**Last updated:** [July 1, 2020, 2:11pm UTC](https://discuss.elastic.co/t/return-specified-fields-using-spring-data-elastic-search/239465 "2020-07-01T14:11:27Z")

</div>

I have a document User having fields like User(id, name, address, List ) etc. depending upon request we want to return either these three: id, name, address or all the fields, by default ElasticsearchRepository find\*\* m…

---

## [Indexing eml files](https://discuss.elastic.co/t/indexing-eml-files/215557)

<div class="topic-metadata">

**Author:** [@ataoumi](https://discuss.elastic.co/u/ataoumi)\
**Replies:** 2\
**Last updated:** [January 20, 2020, 12:03pm UTC](https://discuss.elastic.co/t/indexing-eml-files/215557 "2020-01-20T12:03:01Z")

</div>

Hi Everyone, I'm trying to index eml files and I'm not very excited by converting my files to HTML or other formats already supported. Any tips or suggestions Cheers

---

## [GUI suggestion](https://discuss.elastic.co/t/gui-suggestion/176692)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 2\
**Last updated:** [April 15, 2019, 5:19pm UTC](https://discuss.elastic.co/t/gui-suggestion/176692 "2019-04-15T17:19:34Z")

</div>

It would be nice we can see the same GUI as an infrastructure. where I can monitor multiple sites as cubes. I am only monitoring status of multiple site inside my environment. I am monitoring 500 server urls http statu…

---

## [Elasticsearch not showing data](https://discuss.elastic.co/t/elasticsearch-not-showing-data/159144)

<div class="topic-metadata">

**Author:** [@Ganesh1](https://discuss.elastic.co/u/Ganesh1)\
**Replies:** 2\
**Last updated:** [December 5, 2018, 10:50am UTC](https://discuss.elastic.co/t/elasticsearch-not-showing-data/159144 "2018-12-05T10:50:55Z")

</div>

I am trying to link postgres with Elasticsearch using logstash. I am see the data in my logstash console. C:\\Users\\Admin\\Downloads\\logstash-6.5.1\\bin\>logstash -f c:\\Users\\Admin\\Desktop\\hardata.config Sending Logstash l…

---

## [Fuzzy query exclude exact match](https://discuss.elastic.co/t/fuzzy-query-exclude-exact-match/123289)

<div class="topic-metadata">

**Author:** [@acastellano](https://discuss.elastic.co/u/acastellano)\
**Replies:** 2\
**Last updated:** [March 9, 2018, 3:46pm UTC](https://discuss.elastic.co/t/fuzzy-query-exclude-exact-match/123289 "2018-03-09T15:46:54Z")

</div>

Is there any way to express the 'fuzziness' parameter in terms of a range that excludes exact matches or fuzziness = 0 hits? Basically just a return on fuzzy matches of edit distances 1 and 2?

---

## [Why is the type of system.cpu.total.norm.pct is long?](https://discuss.elastic.co/t/why-is-the-type-of-system-cpu-total-norm-pct-is-long/116241)

<div class="topic-metadata">

**Author:** [@HelloUniverse](https://discuss.elastic.co/u/HelloUniverse)\
**Replies:** 2\
**Last updated:** [January 20, 2018, 2:07am UTC](https://discuss.elastic.co/t/why-is-the-type-of-system-cpu-total-norm-pct-is-long/116241 "2018-01-20T02:07:03Z")

</div>

I used metricbeat to fetch cpu& process cpu metrics to elasticsearch. When trying to get the system.cpu.total.norm.pct usage by aggregation, it always get 0. I typed the query in kibana and found that within the tips t…

---

## [Periodic delete of old indices using curator](https://discuss.elastic.co/t/periodic-delete-of-old-indices-using-curator/85715)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 2\
**Last updated:** [May 16, 2017, 11:37am UTC](https://discuss.elastic.co/t/periodic-delete-of-old-indices-using-curator/85715 "2017-05-16T11:37:16Z")

</div>

Hi, I have tried out curator 5.0.1 and can make it clean out older indices than 3 days when I manually run curator. I am not sure about how curator is expected to work. Documentation is not clear. Does it expect me …

---

## [Logstack netflow getting error for Netflowversion 9](https://discuss.elastic.co/t/logstack-netflow-getting-error-for-netflowversion-9/69902)

<div class="topic-metadata">

**Author:** [@rajunair](https://discuss.elastic.co/u/rajunair)\
**Replies:** 2\
**Last updated:** [December 24, 2016, 5:14am UTC](https://discuss.elastic.co/t/logstack-netflow-getting-error-for-netflowversion-9/69902 "2016-12-24T05:14:12Z")

</div>

Hi Team , During my testing it seems that logstah 5.1.1 is sending WARN message to process Netflow 9 messages In my setup Netflow 5 version is working fine . Any body knows root cases for this issue My error message…

---

## [Logstash produces duplicates](https://discuss.elastic.co/t/logstash-produces-duplicates/35216)

<div class="topic-metadata">

**Author:** [@vladmiller](https://discuss.elastic.co/u/vladmiller)\
**Replies:** 2\
**Last updated:** [November 23, 2015, 8:38am UTC](https://discuss.elastic.co/t/logstash-produces-duplicates/35216 "2015-11-23T08:38:18Z")

</div>

Hello, So the goal is to import existing mysql table which has about 2 million records in the ES index. However, ES index after a while has much more data. I also try to generate unique sha1 fingerprint of each message…

---

## [AggregationのBucketingについて](https://discuss.elastic.co/t/aggregation-bucketing/23846)

<div class="topic-metadata">

**Author:** [@hirarin](https://discuss.elastic.co/u/hirarin)\
**Replies:** 2\
**Last updated:** [June 18, 2015, 8:25am UTC](https://discuss.elastic.co/t/aggregation-bucketing/23846 "2015-06-18T08:25:39Z")

</div>

初めまして。 Aggregationのやり方について質問です。 ElasticsearchのDynamic Mappingを使って任意のフィールド名でindexさせようと考えています。 ただ、後々ある一定のルールで集計をかけたいため、フィールド名のprefixでバケッティング後、 集計できないかと思い、方法を探しています。 あくまで例なのですが、例えば PUT aggregation\_test/factor/1 { …

---

## [How can I become a part of Elastic Team Member](https://discuss.elastic.co/t/how-can-i-become-a-part-of-elastic-team-member/249903)

<div class="topic-metadata">

**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\
**Replies:** 4\
**Last updated:** [September 25, 2020, 6:12am UTC](https://discuss.elastic.co/t/how-can-i-become-a-part-of-elastic-team-member/249903 "2020-09-25T06:12:17Z")

</div>

Hi All, I wanna become a member of Elastic Team. What are the per-requisites? Can anybody please guide me. Thank you

---

## [Filebeat 7.8 Azure module issue](https://discuss.elastic.co/t/filebeat-7-8-azure-module-issue/237727)

<div class="topic-metadata">

**Author:** [@sera123k](https://discuss.elastic.co/u/sera123k)\
**Replies:** 4\
**Last updated:** [June 23, 2020, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-7-8-azure-module-issue/237727 "2020-06-23T15:24:03Z")

</div>

Testing out the Azure module and leveraging the exact same configuration from a working 7.7 install generates the following error: 2020-06-18T23:19:14.508-0500 INFO cfgfile/reload.go:224 Loading of config files complete…

---

## [Can I use Canvas to refresh every second 1500 elements on a RPI 4?](https://discuss.elastic.co/t/can-i-use-canvas-to-refresh-every-second-1500-elements-on-a-rpi-4/224445)

<div class="topic-metadata">

**Author:** [@MikaelB](https://discuss.elastic.co/u/MikaelB)\
**Replies:** 4\
**Last updated:** [March 25, 2020, 10:12am UTC](https://discuss.elastic.co/t/can-i-use-canvas-to-refresh-every-second-1500-elements-on-a-rpi-4/224445 "2020-03-25T10:12:54Z")

</div>

Hello, I'm struggling with Canvas performance on a Raspberry Pi 4. My data are stored in Elastic every second to the server (i7-5500U, 16 Go RAM). Around 1500 metric elements in my Canvas should be ideally updated at th…

---

## [.net core 2.1 no Database statment in Stacktrace](https://discuss.elastic.co/t/net-core-2-1-no-database-statment-in-stacktrace/197457)

<div class="topic-metadata">

**Author:** [@marcus.labohm](https://discuss.elastic.co/u/marcus.labohm)\
**Replies:** 4\
**Last updated:** [September 2, 2019, 12:47pm UTC](https://discuss.elastic.co/t/net-core-2-1-no-database-statment-in-stacktrace/197457 "2019-09-02T12:47:25Z")

</div>

I am trying to get Database statements from the APM Stacktrace as shown in Greg Kalapos video YouTube i am following the instructions in the video and on the github page but only see the http request in Kibana. screens…

---

## [Doc values for @timestamp and geo.location](https://discuss.elastic.co/t/doc-values-for-timestamp-and-geo-location/31747)

<div class="topic-metadata">

**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\
**Replies:** 4\
**Last updated:** [October 8, 2015, 1:16am UTC](https://discuss.elastic.co/t/doc-values-for-timestamp-and-geo-location/31747 "2015-10-08T01:16:22Z")

</div>

I am running into high JVM on my data nodes. I noticed @timestamp and geo.location seems to be taking up 2gb of my heap. Are there any ill effects of turning on doc values for these two fields? My use case is logstash in…

---

## [Installation Failed GCS Repo, Exception in thread "main" java.net.ConnectException: Connection timed out](https://discuss.elastic.co/t/installation-failed-gcs-repo-exception-in-thread-main-java-net-connectexception-connection-timed-out/310673)

<div class="topic-metadata">

**Author:** [@adilusmani](https://discuss.elastic.co/u/adilusmani)\
**Replies:** 2\
**Last updated:** [August 1, 2022, 8:55pm UTC](https://discuss.elastic.co/t/installation-failed-gcs-repo-exception-in-thread-main-java-net-connectexception-connection-timed-out/310673 "2022-08-01T20:55:32Z")

</div>

Hello, I am getting below error while installing Elasticsearch GCS plugin I am running the following command sudo ES\_JAVA\_OPTS="-Dhttp.proxyHost=\*\*\*\* -Dhttp.proxyPort=9200 Dhttps.proxyHost=\*\*\*\* -Dhttps.proxyPort=9200"…

---

## [Elastic endpoint security blocklist process delete the binary file](https://discuss.elastic.co/t/elastic-endpoint-security-blocklist-process-delete-the-binary-file/320868)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 7\
**Last updated:** [December 10, 2022, 4:00pm UTC](https://discuss.elastic.co/t/elastic-endpoint-security-blocklist-process-delete-the-binary-file/320868 "2022-12-10T16:00:06Z")

</div>

Hi all I have a case using the elastic endpoint. I tried using the blocklist in elastic endpoint to block the process /bin/ls. After the policy got installed the binary file in /bin/ls disaprear and i cannot execute l…

---

## [AppSearch feature request. Filter only fields](https://discuss.elastic.co/t/appsearch-feature-request-filter-only-fields/243594)

<div class="topic-metadata">

**Author:** [@mbrimmer83](https://discuss.elastic.co/u/mbrimmer83)\
**Replies:** 7\
**Last updated:** [August 19, 2020, 12:32pm UTC](https://discuss.elastic.co/t/appsearch-feature-request-filter-only-fields/243594 "2020-08-19T12:32:45Z")

</div>

I understand nested fields like arrays would be problematic for AppSearch, but would it be possible to support arrays that are unsearchable and can only be used to filter results? In ES you can filter an array with an ar…

---

## [Parse json data into elasticsearch](https://discuss.elastic.co/t/parse-json-data-into-elasticsearch/222918)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 10:58am UTC](https://discuss.elastic.co/t/parse-json-data-into-elasticsearch/222918 "2020-03-11T10:58:58Z")

</div>

I have this json downloaded from a website: \[ { "data": "2020-02-24 21:00:00", "stato": "ITA", "codice\_regione": 13, …

---

## [SSL error while setting up passwords](https://discuss.elastic.co/t/ssl-error-while-setting-up-passwords/212509)

<div class="topic-metadata">

**Author:** [@rajat\_badjatya](https://discuss.elastic.co/u/rajat_badjatya)\
**Replies:** 1\
**Last updated:** [December 20, 2019, 6:19am UTC](https://discuss.elastic.co/t/ssl-error-while-setting-up-passwords/212509 "2019-12-20T06:19:55Z")

</div>

I have followed this elastic blog for configuring SSL in the elastic stack and tried using verification mode as certificate as well as none in elastic's configuration YAML but when I am trying to set up a password using …

---

## [(LoadError) no such file to load -- gssapi](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-gssapi/192619)

<div class="topic-metadata">

**Author:** [@Darshan\_Parab](https://discuss.elastic.co/u/Darshan_Parab)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 12:25pm UTC](https://discuss.elastic.co/t/loaderror-no-such-file-to-load-gssapi/192619 "2019-07-29T12:25:34Z")

</div>

Hi, I have configured webhdfs output as show below. I'm getting error that says I don't have gssapi conf webhdfs output. Pipeline: input { beats { port =\> 5044 } } filter { } output { webhdfs { host =\> "hdfs…

---

## [Elasticsearch ssl without x-pack](https://discuss.elastic.co/t/elasticsearch-ssl-without-x-pack/88830)

<div class="topic-metadata">

**Author:** [@Julian\_Fazri](https://discuss.elastic.co/u/Julian_Fazri)\
**Replies:** 1\
**Last updated:** [June 10, 2017, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-ssl-without-x-pack/88830 "2017-06-10T14:29:43Z")

</div>

Is possible to encrypt the communication of elasticsearch and the others without using x-pack?

---

## [Iframe not updating when changing time parameter](https://discuss.elastic.co/t/iframe-not-updating-when-changing-time-parameter/66407)

<div class="topic-metadata">

**Author:** [@Joao\_Garin](https://discuss.elastic.co/u/Joao_Garin)\
**Replies:** 1\
**Last updated:** [November 18, 2016, 12:20am UTC](https://discuss.elastic.co/t/iframe-not-updating-when-changing-time-parameter/66407 "2016-11-18T00:20:13Z")

</div>

Hello all, I am running Kibana 5.0.0 and using the share option for putting the dashboard in the page I want it to display in. In that page I also have two dropdown boxes for some datepickers to put the time in the …

---

## [Es sync with sqlserver](https://discuss.elastic.co/t/es-sync-with-sqlserver/61769)

<div class="topic-metadata">

**Author:** [@sergio\_imperato](https://discuss.elastic.co/u/sergio_imperato)\
**Replies:** 1\
**Last updated:** [September 29, 2016, 6:13am UTC](https://discuss.elastic.co/t/es-sync-with-sqlserver/61769 "2016-09-29T06:13:29Z")

</div>

hi, I have no experience in this area, but I have a classic requirement to synchronize a sql server with elastic search databases to speed up searches. I should evaluate two strategies: the first to keep the data updated…

---

## [The bird view of the communication flows](https://discuss.elastic.co/t/the-bird-view-of-the-communication-flows/44399)

<div class="topic-metadata">

**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\
**Replies:** 1\
**Last updated:** [March 16, 2016, 10:15am UTC](https://discuss.elastic.co/t/the-bird-view-of-the-communication-flows/44399 "2016-03-16T10:15:59Z")

</div>

In the introduction page of the packet, I notice the following chart and the introduction: Sometimes you need the bird's eye view of how communications flow through your network. I install the beat dashboard, but the…

---

## [Logstash-input-wmi error in logs](https://discuss.elastic.co/t/logstash-input-wmi-error-in-logs/246796)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 3\
**Last updated:** [September 3, 2020, 9:53am UTC](https://discuss.elastic.co/t/logstash-input-wmi-error-in-logs/246796 "2020-09-03T09:53:50Z")

</div>

Hello, I installed logstash-wmi plugin into my logstash installation 7.8 using logstash executable and command install. I am not able to move forward with my configuration becouse of "(LoadError) load error: win32ole/w…

---

## [Corrupt index due to missing file](https://discuss.elastic.co/t/corrupt-index-due-to-missing-file/281867)

<div class="topic-metadata">

**Author:** [@RonJenningsFTI](https://discuss.elastic.co/u/RonJenningsFTI)\
**Replies:** 3\
**Last updated:** [August 18, 2021, 9:46pm UTC](https://discuss.elastic.co/t/corrupt-index-due-to-missing-file/281867 "2021-08-18T21:46:54Z")

</div>

Greetings, people who know way more about ElasticSearch than I do! I'm very new to Elastic administration, as our organization has only recently started using it, so please pardon my lack of knowledge. We have a 4-node …

---

## [Error 1053: “The service did not respond in a timely fashion” when attempting to start winlogbeat service](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service/176032)

<div class="topic-metadata">

**Author:** [@aaa111aaa](https://discuss.elastic.co/u/aaa111aaa)\
**Replies:** 0\
**Last updated:** [April 9, 2019, 1:20pm UTC](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service/176032 "2019-04-09T13:20:47Z")

</div>

Hello all, When attempting to start the winlogbeat service in Windows I receive the following: Error 1053: "The service did not respond in a timely fashion" when attempting to start, stop or pause a service." I've suc…

---

## [ES/Kibana/XPack 6.2.1: issue assigning unassigned indexes](https://discuss.elastic.co/t/es-kibana-xpack-6-2-1-issue-assigning-unassigned-indexes/119543)

<div class="topic-metadata">

**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\
**Replies:** 3\
**Last updated:** [February 13, 2018, 10:05pm UTC](https://discuss.elastic.co/t/es-kibana-xpack-6-2-1-issue-assigning-unassigned-indexes/119543 "2018-02-13T22:05:46Z")

</div>

root@test1:/opt/estest# curl -XGET localhost:9200/\_cat/shards?h=index,shard,prirep,state,unassigned.reason| grep UNASSIGNED % Total % Received % Xferd Average Speed Time Time Time Current …

---

## [Problem with MongoConnector + GridFS + ES + Ingest Mapper](https://discuss.elastic.co/t/problem-with-mongoconnector-gridfs-es-ingest-mapper/106339)

<div class="topic-metadata">

**Author:** [@2ihelp](https://discuss.elastic.co/u/2ihelp)\
**Replies:** 3\
**Last updated:** [November 3, 2017, 4:36pm UTC](https://discuss.elastic.co/t/problem-with-mongoconnector-gridfs-es-ingest-mapper/106339 "2017-11-03T16:36:18Z")

</div>

We are trying to map the Ingest Mapper plugin within ES to our MongoDB in order to be able to index binary data contained within the fs.chunks collection created automatically by GridFS. We tried to do the following com…

---

## [Compiling WLB with hardcoded ElasticSearch Host URL](https://discuss.elastic.co/t/compiling-wlb-with-hardcoded-elasticsearch-host-url/79807)

<div class="topic-metadata">

**Author:** [@bcable](https://discuss.elastic.co/u/bcable)\
**Replies:** 3\
**Last updated:** [March 28, 2017, 4:29pm UTC](https://discuss.elastic.co/t/compiling-wlb-with-hardcoded-elasticsearch-host-url/79807 "2017-03-28T16:29:22Z")

</div>

So I have my GO env up and running great. Compiling winlogbeat.exe flawlessly. I found that you can bake in ElasticSearch credentials into /libbeat/outputs/elasticsearch/config.go My Question: How can I bake in Elastic…

---

## [IS cloud-aws ready for Long Resource ID](https://discuss.elastic.co/t/is-cloud-aws-ready-for-long-resource-id/62805)

<div class="topic-metadata">

**Author:** [@Amit\_Dunsky](https://discuss.elastic.co/u/Amit_Dunsky)\
**Replies:** 8\
**Last updated:** [October 12, 2016, 3:39pm UTC](https://discuss.elastic.co/t/is-cloud-aws-ready-for-long-resource-id/62805 "2016-10-12T15:39:59Z")

</div>

Starting end of Dec. 2016, AWS will begin using a Long Resource ID format for EC2 Instances, EBS, RI and Snapshots. According to AWS, previously created resources which still uses the short id format will retain its ID a…

---

## [Terms aggregation on \_field\_names field](https://discuss.elastic.co/t/terms-aggregation-on--field-names-field/39259)

<div class="topic-metadata">

**Author:** [@skundrik](https://discuss.elastic.co/u/skundrik)\
**Replies:** 3\
**Last updated:** [January 15, 2016, 5:04pm UTC](https://discuss.elastic.co/t/terms-aggregation-on--field-names-field/39259 "2016-01-15T17:04:34Z")

</div>

Does anyone know if it's possible to do terms aggregation on \_field\_names field in Kibana? I can do it in Sense by hand crafting the query. GET index1/\_search?size=0 { "query": { "query\_string":{ "query":…

---

## [At what point should I use a queue](https://discuss.elastic.co/t/at-what-point-should-i-use-a-queue/29415)

<div class="topic-metadata">

**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\
**Replies:** 3\
**Last updated:** [September 23, 2015, 5:44am UTC](https://discuss.elastic.co/t/at-what-point-should-i-use-a-queue/29415 "2015-09-23T05:44:04Z")

</div>

I have been working on just an ELK stack with LSF. But I have come to the cross roads of do I need to put a queue in my system? I have only been on a test environment and do not even know what type of log traffic to expe…

---

## [Use Case Question - Zipped logs from appliance at customer site](https://discuss.elastic.co/t/use-case-question-zipped-logs-from-appliance-at-customer-site/24143)

<div class="topic-metadata">

**Author:** [@fishpen0](https://discuss.elastic.co/u/fishpen0)\
**Replies:** 3\
**Last updated:** [June 23, 2015, 6:16am UTC](https://discuss.elastic.co/t/use-case-question-zipped-logs-from-appliance-at-customer-site/24143 "2015-06-23T06:16:40Z")

</div>

I just finished reading the documentation for logstash and I am still processing a bit, perhaps I am asking this question to early. I'm not sure if I can utilize logstash the way I had hoped. We get logs bundled in zip …

---

## [ES gone into a hung state, our production down. please help!](https://discuss.elastic.co/t/es-gone-into-a-hung-state-our-production-down-please-help/7773)

<div class="topic-metadata">

**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\
**Replies:** 3\
**Last updated:** [May 20, 2012, 9:28am UTC](https://discuss.elastic.co/t/es-gone-into-a-hung-state-our-production-down-please-help/7773 "2012-05-20T09:28:36Z")

</div>

Hi, Our website kept going down within 5min of apache restart and after hours of debugging, it turned out that the calls to ES were hanging forever. and that would prevent apache from serving any more requests. I not…

---

## [When do we need dedicated coordinating node?](https://discuss.elastic.co/t/when-do-we-need-dedicated-coordinating-node/357473)

<div class="topic-metadata">

**Author:** [@Dylan\_Juan](https://discuss.elastic.co/u/Dylan_Juan)\
**Replies:** 5\
**Last updated:** [April 16, 2024, 8:21am UTC](https://discuss.elastic.co/t/when-do-we-need-dedicated-coordinating-node/357473 "2024-04-16T08:21:24Z")

</div>

Hi everyone, we're currenty facing an issue when we want to deploy our elasticstack deployment. I'm just wondering when do we need dedicated coordinating node, because as i search across elasticsearch documentation ther…

---

## [Infrastructure tab in the APM UI/App](https://discuss.elastic.co/t/infrastructure-tab-in-the-apm-ui-app/323577)

<div class="topic-metadata">

**Author:** [@marsdea](https://discuss.elastic.co/u/marsdea)\
**Replies:** 5\
**Last updated:** [February 7, 2023, 2:54pm UTC](https://discuss.elastic.co/t/infrastructure-tab-in-the-apm-ui-app/323577 "2023-02-07T14:54:32Z")

</div>

Hi there, Anyone know what the 'key' is to correlate infrastructure metrics with APM agent metrics so they appear in the infrastructure tab in the APM UI? I am not seeing any infra metrics for an APM service but I know…

---

## [Remove the number from the field, and only remain letter](https://discuss.elastic.co/t/remove-the-number-from-the-field-and-only-remain-letter/284548)

<div class="topic-metadata">

**Author:** [@zaidsalah](https://discuss.elastic.co/u/zaidsalah)\
**Replies:** 5\
**Last updated:** [September 19, 2021, 10:23am UTC](https://discuss.elastic.co/t/remove-the-number-from-the-field-and-only-remain-letter/284548 "2021-09-19T10:23:35Z")

</div>

remove the number from the field, only I want letter . in my PDF have table contain name and id, id is number when I index and using ingest attachment pipeline number will store as well like this id name 123 user…

---

## [Automate rollover for daily indices using ILM](https://discuss.elastic.co/t/automate-rollover-for-daily-indices-using-ilm/249233)

<div class="topic-metadata">

**Author:** [@Akshay\_Pawar](https://discuss.elastic.co/u/Akshay_Pawar)\
**Replies:** 5\
**Last updated:** [September 20, 2020, 10:12pm UTC](https://discuss.elastic.co/t/automate-rollover-for-daily-indices-using-ilm/249233 "2020-09-20T22:12:57Z")

</div>

Hello, I am looking into automating rollover using Index lifecycle management for daily indices. I am looking for the pattern as follows so that I would be seamlessly able to search across all three indices rollove…

[Previous page](https://discuss.elastic.co/top.md?page=1364&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1366&per_page=50&period=all)
