# Top **URL:** https://discuss.elastic.co/top.md?page=138&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 139 --- ## [Node Starts Without Its Shards](https://discuss.elastic.co/t/node-starts-without-its-shards/48636)
**Author:** [@Bombe](https://discuss.elastic.co/u/Bombe)\ **Replies:** 10\ **Last updated:** [April 28, 2016, 6:42pm UTC](https://discuss.elastic.co/t/node-starts-without-its-shards/48636 "2016-04-28T18:42:17Z")
I am currently managing a 12-node ES cluster (version 2.1.1). Yesterday, one node, when restarted, would start up without any shards. That means that the Marvel plugins lists 0 shards for that node on the “Nodes” page, a… --- ## [Unable to escape special character ""](https://discuss.elastic.co/t/unable-to-escape-special-character/273474)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 9\ **Last updated:** [May 22, 2021, 12:03am UTC](https://discuss.elastic.co/t/unable-to-escape-special-character/273474 "2021-05-22T00:03:32Z")
I am trying to index my data into elasticsearch cluster through logstash. Currently my data is in aws postgres and i have to move data from postgres to elasticsearch. Below is my logstash config file: input { jdbc { … --- ## [Elasticsearch configuration](https://discuss.elastic.co/t/elasticsearch-configuration/286480)
**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\ **Replies:** 29\ **Last updated:** [October 16, 2021, 4:31am UTC](https://discuss.elastic.co/t/elasticsearch-configuration/286480 "2021-10-16T04:31:14Z")
Hi , I am trying to configure Elasticsearch 7.0.0 with 2 master and 1 data nodes (will add more data nodes later). Below are the configuration details for each node. But when I ran the API (curl -X GET "rw-elkm2-vm:9200… --- ## [NoClassDefFoundError in Wildlfy 16 for Java APM agent](https://discuss.elastic.co/t/noclassdeffounderror-in-wildlfy-16-for-java-apm-agent/181482)
**Author:** [@thiyagarajan-angappa](https://discuss.elastic.co/u/thiyagarajan-angappa)\ **Replies:** 10\ **Last updated:** [May 26, 2019, 7:40am UTC](https://discuss.elastic.co/t/noclassdeffounderror-in-wildlfy-16-for-java-apm-agent/181482 "2019-05-26T07:40:22Z")
Kibana version: 6.7.1 Elasticsearch version: 6.7.1 APM Server version: 6.7.1 APM Agent language and version: Java and 1.6.1 Browser version: Chrome 74.0.3729.131 (Official Build) (64-bit) Original install method … --- ## [Auditbeat default dashboards missing required field](https://discuss.elastic.co/t/auditbeat-default-dashboards-missing-required-field/128891)
**Author:** [@nlh](https://discuss.elastic.co/u/nlh)\ **Replies:** 9\ **Last updated:** [May 9, 2018, 10:07am UTC](https://discuss.elastic.co/t/auditbeat-default-dashboards-missing-required-field/128891 "2018-05-09T10:07:23Z")
Running Auditbeat 6.2.4 on Redhat connecting to ELK 6.2.2 on Ubuntu. Auditbeat.yml as follows: # You can find the full configuration reference here: # https://www.elastic.co/guide/en/beats/auditbeat/index.html #======… --- ## [Need Help to Update Record in Elasticsearch Index](https://discuss.elastic.co/t/need-help-to-update-record-in-elasticsearch-index/169295)
**Author:** [@rajatdey80](https://discuss.elastic.co/u/rajatdey80)\ **Replies:** 12\ **Last updated:** [March 14, 2019, 10:03pm UTC](https://discuss.elastic.co/t/need-help-to-update-record-in-elasticsearch-index/169295 "2019-03-14T22:03:16Z")
Hi All. , I am not an expert in Elasticsearch, hence forgive me if this question is very silly . I am trying to update a record in. elastic search but unable to achieve the goal. . Elastic Version. : 6.6.\* Requireme… --- ## [Overriding Builtin Datastream Index / Component Templates](https://discuss.elastic.co/t/overriding-builtin-datastream-index-component-templates/259744)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 15\ **Last updated:** [January 13, 2021, 10:59pm UTC](https://discuss.elastic.co/t/overriding-builtin-datastream-index-component-templates/259744 "2021-01-13T22:59:06Z")
Hello, With legacy index templates, in order to add extra fields without risk that an Elastic update would ovverwrite changes, we created override templates with a higher order which contained extra fields settings etc. … --- ## [Optimize logstash filter plugin with million lines of dictionary look up](https://discuss.elastic.co/t/optimize-logstash-filter-plugin-with-million-lines-of-dictionary-look-up/164723)
**Author:** [@ronchav](https://discuss.elastic.co/u/ronchav)\ **Replies:** 15\ **Last updated:** [January 29, 2019, 6:05pm UTC](https://discuss.elastic.co/t/optimize-logstash-filter-plugin-with-million-lines-of-dictionary-look-up/164723 "2019-01-29T18:05:51Z")
Hi, I am implementing data masking which is based in a dictionary lookup. Currently there are four dictionary files (total of ~1.2 million lines) reference to translate my greedy message. When transformation runs using… --- ## [Parsing mixed: plain-text and json log files in logstash](https://discuss.elastic.co/t/parsing-mixed-plain-text-and-json-log-files-in-logstash/307024)
**Author:** [@xyz3](https://discuss.elastic.co/u/xyz3)\ **Replies:** 14\ **Last updated:** [June 15, 2022, 5:46am UTC](https://discuss.elastic.co/t/parsing-mixed-plain-text-and-json-log-files-in-logstash/307024 "2022-06-15T05:46:31Z")
Hello I have log lines containing of two parts - plain-text and json. Example line below: Jun 13 07:58:00 c4e-gen1 c4edlog\[555007\]: {"level":"info","commit":"436F6D6D697449447B5B3135362031303720362036362032353120323331… --- ## [How to build beats in windows](https://discuss.elastic.co/t/how-to-build-beats-in-windows/141711)
**Author:** [@Manjukb](https://discuss.elastic.co/u/Manjukb)\ **Replies:** 15\ **Last updated:** [August 7, 2018, 2:19pm UTC](https://discuss.elastic.co/t/how-to-build-beats-in-windows/141711 "2018-08-07T14:19:42Z")
i'm currently trying to build a beats plugin to get some windows specific info so trying to build it on windows seams there is lot of dependency on Linux to develop the beats if i try to do make setup it says mkdir c… --- ## [elasticSearch as a document database](https://discuss.elastic.co/t/elasticsearch-as-a-document-database/5148)
**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\ **Replies:** 15\ **Last updated:** [March 13, 2012, 5:34pm UTC](https://discuss.elastic.co/t/elasticsearch-as-a-document-database/5148 "2012-03-13T17:34:55Z")
Hi , I am modelling elastic search both as a search engine AND a document database. I am finding enough features in elastic DB to do this like 1) Unique document ID 2) Ability to store PDF or any other format an… --- ## [message: \[WARN \]\[cluster.service \] \[node1\] failed to reconnect to node \[node1\]\[I4Wltlc9RSm0jJhumBRtpQ\]\[inet\[/10.10.10.1:9300\]\]](https://discuss.elastic.co/t/message-warn-cluster-service-node1-failed-to-reconnect-to-node-node1-i4wltlc9rsm0jjhumbrtpq-inet-10-10-10-1-9300/15050)
**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\ **Replies:** 13\ **Last updated:** [December 31, 2013, 11:21am UTC](https://discuss.elastic.co/t/message-warn-cluster-service-node1-failed-to-reconnect-to-node-node1-i4wltlc9rsm0jjhumbrtpq-inet-10-10-10-1-9300/15050 "2013-12-31T11:21:45Z")
--- ## [One search query puts whole cluster on knees](https://discuss.elastic.co/t/one-search-query-puts-whole-cluster-on-knees/510)
**Author:** [@Fodoj](https://discuss.elastic.co/u/Fodoj)\ **Replies:** 15\ **Last updated:** [May 27, 2015, 9:48am UTC](https://discuss.elastic.co/t/one-search-query-puts-whole-cluster-on-knees/510 "2015-05-27T09:48:10Z")
If I try to perform a search (4 kibana visualisations on single dashboard) against 1 week worth of data (~200gb) of documents which don't have any analyzed fields, then first I get timeout, then every next search query t… --- ## [Setting different ilm policy based on index name](https://discuss.elastic.co/t/setting-different-ilm-policy-based-on-index-name/234497)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 11\ **Last updated:** [June 3, 2020, 6:16pm UTC](https://discuss.elastic.co/t/setting-different-ilm-policy-based-on-index-name/234497 "2020-06-03T18:16:06Z")
I use "indices" syntax to create a different indexes based on a module name. I want to apply different ilm policy based on index name? How can I achieve that? indices: - index: "filebeat-netflow-%{+yyyy.MM.dd}" … --- ## [Elasticsearch Index Mapping Exceeded](https://discuss.elastic.co/t/elasticsearch-index-mapping-exceeded/186537)
**Author:** [@motts](https://discuss.elastic.co/u/motts)\ **Replies:** 24\ **Last updated:** [June 22, 2019, 2:53am UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping-exceeded/186537 "2019-06-22T02:53:07Z")
Hello there, As the title suggests, our index mapping has exceeded 1,000. What happens to the logs that introduce new fields? Are they not recorded or are the 1,001+ fields just not usable at this time? It's looking li… --- ## [Unable to run endpoint-security through Elastic Agent](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631)
**Author:** [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\ **Replies:** 11\ **Last updated:** [August 7, 2020, 6:50pm UTC](https://discuss.elastic.co/t/unable-to-run-endpoint-security-through-elastic-agent/243631 "2020-08-07T18:50:28Z")
Using the endpoint-security-7.9.0-SNAPSHOT based on commit hash e221c95cd0b0e72d5d153fac57e86feec12db408. OS: Windows 10 Enterprise Version: 2004 Build: 19041.388 Kernel: 10.0.19041.388 (WinBuild.160101.0800) Error … --- ## [No throughput metrics available for \[bulk\]. Likely cause: The benchmark ended already during warmup](https://discuss.elastic.co/t/no-throughput-metrics-available-for-bulk-likely-cause-the-benchmark-ended-already-during-warmup/147368)
**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\ **Replies:** 9\ **Last updated:** [September 6, 2018, 5:43am UTC](https://discuss.elastic.co/t/no-throughput-metrics-available-for-bulk-likely-cause-the-benchmark-ended-already-during-warmup/147368 "2018-09-06T05:43:00Z")
Rally version (get with esrally --version): esrally 1.0.0 Invoked command: esrally race --pipeline=benchmark-only --target-hosts="/root/.rally/benchmarks/tracks/billions-rally-tracks/jssz\_benchmark\_scene\_1/target\_host… --- ## [Finaliser la récupération de logs Nginx via la stack Elastic/ECK](https://discuss.elastic.co/t/finaliser-la-recuperation-de-logs-nginx-via-la-stack-elastic-eck/242034)
**Author:** [@LomigFR](https://discuss.elastic.co/u/LomigFR)\ **Replies:** 11\ **Last updated:** [August 2, 2020, 4:04pm UTC](https://discuss.elastic.co/t/finaliser-la-recuperation-de-logs-nginx-via-la-stack-elastic-eck/242034 "2020-08-02T16:04:56Z")
Bonjour, Je reviens vers vous pour une demande d'aide quant à la récolte de logs Nginx. Je me permets de poster en deux fois étant donnée la limitation sur le nombre de caractères. La situation est la suivante : Win1… --- ## [Split document into multiple documents](https://discuss.elastic.co/t/split-document-into-multiple-documents/303305)
**Author:** [@ciavam](https://discuss.elastic.co/u/ciavam)\ **Replies:** 12\ **Last updated:** [April 27, 2022, 3:47pm UTC](https://discuss.elastic.co/t/split-document-into-multiple-documents/303305 "2022-04-27T15:47:16Z")
Hello, Through the logstash code I was able to get a result like: {field0 = value field1 = \[value1\_field1; value1\_field1\] field2 = \[value1\_field2; value2\_field2\] } Is it possible through logstash to go to what is w… --- ## [Kibana-Create Data Table-Attributes with different \_type](https://discuss.elastic.co/t/kibana-create-data-table-attributes-with-different--type/54155)
**Author:** [@Gitika\_Srivastava](https://discuss.elastic.co/u/Gitika_Srivastava)\ **Replies:** 9\ **Last updated:** [July 1, 2016, 11:12am UTC](https://discuss.elastic.co/t/kibana-create-data-table-attributes-with-different--type/54155 "2016-07-01T11:12:52Z")
How to create a data table with 2 attributes that are of 2 different document types but are in the same index? Thanks in advance! --- ## [How to enable size-mapper plugin / \_size field via RestHighLevelClient](https://discuss.elastic.co/t/how-to-enable-size-mapper-plugin-size-field-via-resthighlevelclient/314501)
**Author:** [@rowi1de](https://discuss.elastic.co/u/rowi1de)\ **Replies:** 19\ **Last updated:** [October 18, 2022, 7:19pm UTC](https://discuss.elastic.co/t/how-to-enable-size-mapper-plugin-size-field-via-resthighlevelclient/314501 "2022-10-18T19:19:38Z")
Hey Folks, I'm trying to add the \_size field to an existing index via RestHighLevelClient and failing to see there I could put the following "mappings": { "\_size": { "enabled": true } } the Dev Tools… --- ## [Can not monitor Logstash in Kibana](https://discuss.elastic.co/t/can-not-monitor-logstash-in-kibana/120715)
**Author:** [@Yoel\_Navas\_Escalante](https://discuss.elastic.co/u/Yoel_Navas_Escalante)\ **Replies:** 9\ **Last updated:** [February 20, 2018, 8:52pm UTC](https://discuss.elastic.co/t/can-not-monitor-logstash-in-kibana/120715 "2018-02-20T20:52:33Z")
Hello friends, I'm testing an elastic stack installation on a single server before going to production environment, I have intalled Elasticsearch 6.2.1 wiht X-Pack, and the same with Kibana 6.2.1, I followed the installa… --- ## [Filebeat unable to monitor container custom log path](https://discuss.elastic.co/t/filebeat-unable-to-monitor-container-custom-log-path/329905)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 16\ **Last updated:** [April 24, 2023, 8:40am UTC](https://discuss.elastic.co/t/filebeat-unable-to-monitor-container-custom-log-path/329905 "2023-04-24T08:40:40Z")
Hello, I want to monitor the containers logs using filebeat kubernetes deplyment and the log format is in json format it is just monitoring the logs from containers but not this json file saved inside the container So … --- ## [How to create a default index pattern via python api](https://discuss.elastic.co/t/how-to-create-a-default-index-pattern-via-python-api/243085)
**Author:** [@momora9809](https://discuss.elastic.co/u/momora9809)\ **Replies:** 9\ **Last updated:** [July 30, 2020, 11:42am UTC](https://discuss.elastic.co/t/how-to-create-a-default-index-pattern-via-python-api/243085 "2020-07-30T11:42:36Z")
Hi, I saw How to create a default index pattern via kibana api that used Kibana API. I wanted to use python, but didn't know what uri should I use. header = { "kbn-xsrf": "true", 'Content-Type': 'application/j… --- ## [Elastic Search - Free Text Search - Nested fields - (Elastic 6.2)](https://discuss.elastic.co/t/elastic-search-free-text-search-nested-fields-elastic-6-2/132081)
**Author:** [@Sarathmskr](https://discuss.elastic.co/u/Sarathmskr)\ **Replies:** 11\ **Last updated:** [May 24, 2018, 10:23am UTC](https://discuss.elastic.co/t/elastic-search-free-text-search-nested-fields-elastic-6-2/132081 "2018-05-24T10:23:42Z")
GET /companies\_v1/\_search { "query": { "simple\_query\_string": { "query": "so-well" } } } This works fine. The same I need to search in Nested objects and in non nested at the same time. My full document contain … --- ## [Metricbeat is unable to send data to elastic search(011Attempting to reconnect to backoff(elasticsearch(http://x.x.x.x:9200)) with 441 reconnect attempt(s))](https://discuss.elastic.co/t/metricbeat-is-unable-to-send-data-to-elastic-search-011attempting-to-reconnect-to-backoff-elasticsearch-http-x-x-x-x-9200-with-441-reconnect-attempt-s/250102)
**Author:** [@NiranjanMurali](https://discuss.elastic.co/u/NiranjanMurali)\ **Replies:** 10\ **Last updated:** [September 28, 2020, 4:56am UTC](https://discuss.elastic.co/t/metricbeat-is-unable-to-send-data-to-elastic-search-011attempting-to-reconnect-to-backoff-elasticsearch-http-x-x-x-x-9200-with-441-reconnect-attempt-s/250102 "2020-09-28T04:56:25Z")
I have recently updated ES, Kibana, Logstash, All the services are running but the data is not getting collected. and UI is also loading. Please help me to resolve this. Kibana Log: {"type":"log","@timestamp":"2020-09-… --- ## [Term contains a dot (.), nothing is returned](https://discuss.elastic.co/t/term-contains-a-dot-nothing-is-returned/325508)
**Author:** [@thales788](https://discuss.elastic.co/u/thales788)\ **Replies:** 9\ **Last updated:** [February 15, 2023, 5:28pm UTC](https://discuss.elastic.co/t/term-contains-a-dot-nothing-is-returned/325508 "2023-02-15T17:28:45Z")
Hello. I'm doing a query on the "username" field. The results are correct in most cases. When the given term contains a dot (.), nothing is returned. Ex: "firstname.lastname" = nothing is returned "firstname lastname" … --- ## [Multiple Logstash pipelines](https://discuss.elastic.co/t/multiple-logstash-pipelines/181379)
**Author:** [@Costi](https://discuss.elastic.co/u/Costi)\ **Replies:** 16\ **Last updated:** [May 29, 2019, 1:43pm UTC](https://discuss.elastic.co/t/multiple-logstash-pipelines/181379 "2019-05-29T13:43:22Z")
Hi, I am using Logstash 6.5 as a service on a windows machine. I have defined a pipelines.yml file that looks like this: # List of pipelines to be loaded by Logstash - pipeline.id: filebeat path.config: "CPA/LogStash… --- ## [Empty snapshots](https://discuss.elastic.co/t/empty-snapshots/325194)
**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\ **Replies:** 17\ **Last updated:** [February 13, 2023, 7:46pm UTC](https://discuss.elastic.co/t/empty-snapshots/325194 "2023-02-13T19:46:42Z")
Hi, I have a problem when trying to create and restore a snapshot in Elasticsearch. The snapshots are blank. Some specifications: I'm using a Mac (MacOS Monterey 12.6.2) if relevant. I'm running Elasticsearch in it a… --- ## [Were to find working current Currator and Kopf for 5.1 ELK](https://discuss.elastic.co/t/were-to-find-working-current-currator-and-kopf-for-5-1-elk/73701)
**Author:** [@ElNormeoRodeo](https://discuss.elastic.co/u/ElNormeoRodeo)\ **Replies:** 12\ **Last updated:** [February 7, 2017, 7:28pm UTC](https://discuss.elastic.co/t/were-to-find-working-current-currator-and-kopf-for-5-1-elk/73701 "2017-02-07T19:28:13Z")
Hello everybody, I'm looking for a working Currator and working KOPF Plugin to manage the ELK 5.1. I actually don't want to patch source codes or fixing programm lines to get it work (kopf as a stand alone) My ELK 5.1 St… --- ## [How to make the changes in filebeat effective](https://discuss.elastic.co/t/how-to-make-the-changes-in-filebeat-effective/260143)
**Author:** [@aagarwal3](https://discuss.elastic.co/u/aagarwal3)\ **Replies:** 21\ **Last updated:** [January 5, 2021, 8:59pm UTC](https://discuss.elastic.co/t/how-to-make-the-changes-in-filebeat-effective/260143 "2021-01-05T20:59:17Z")
Hello all, I am trying to use the filebeat.yml file for the first time. Since, the logs are being logged in a different country and sometimes I see an abrupt jump in the logs visibility. It might be (not sure) because p… --- ## [Error when building new visualization factory](https://discuss.elastic.co/t/error-when-building-new-visualization-factory/124650)
**Author:** [@jarajapu](https://discuss.elastic.co/u/jarajapu)\ **Replies:** 11\ **Last updated:** [March 27, 2018, 2:37pm UTC](https://discuss.elastic.co/t/error-when-building-new-visualization-factory/124650 "2018-03-27T14:37:51Z")
I am trying to build a new visualization using the base visualization type in your visualization factory. After following the standard documentation as well as tutorials, I was able to get the plugin to try and register … --- ## [Why packetbeat generates result of "libbeat.publisher.published\_events" changing every time](https://discuss.elastic.co/t/why-packetbeat-generates-result-of-libbeat-publisher-published-events-changing-every-time/71699)
**Author:** [@moooofly](https://discuss.elastic.co/u/moooofly)\ **Replies:** 9\ **Last updated:** [January 19, 2017, 11:07am UTC](https://discuss.elastic.co/t/why-packetbeat-generates-result-of-libbeat-publisher-published-events-changing-every-time/71699 "2017-01-19T11:07:54Z")
Hi,all: I use packetbeat to analyse pcap file for redis protocol. The command i use is ./packetbeat -c ./packetbeat.yml -e -I redis\_xg-bjdev-rediscluster-2\_prot-7101\_20161222110723\_20161222110733.pcap -E packetbea… --- ## [Number of shards](https://discuss.elastic.co/t/number-of-shards/26481)
**Author:** [@saif](https://discuss.elastic.co/u/saif)\ **Replies:** 9\ **Last updated:** [July 30, 2015, 7:40pm UTC](https://discuss.elastic.co/t/number-of-shards/26481 "2015-07-30T19:40:05Z")
Hello i have an ES cluster run with 3 nodes "3 servers" 2 master and 3 data nodes rsyslog-2015.07.28 size: 4.72Gi (7.55Gi) docs: 30,477,510 (30,477,510) i want to optimize the number of shards pr node actually 1 re… --- ## [Filebeat logs with .txt extension -- no geoip.location or geoip\_point](https://discuss.elastic.co/t/filebeat-logs-with-txt-extension-no-geoip-location-or-geoip-point/89196)
**Author:** [@lewis15](https://discuss.elastic.co/u/lewis15)\ **Replies:** 10\ **Last updated:** [June 16, 2017, 11:34am UTC](https://discuss.elastic.co/t/filebeat-logs-with-txt-extension-no-geoip-location-or-geoip-point/89196 "2017-06-16T11:34:18Z")
Filebeat logs with .log somewhere in the extensions works fine, but will not present the IP address if the extension is .txt I have not been able to find how to resolve this opportunity on the web. Thanks for the hel… --- ## [APM Agent Status states "No data has been received from agents yet"](https://discuss.elastic.co/t/apm-agent-status-states-no-data-has-been-received-from-agents-yet/268295)
**Author:** [@Stud21](https://discuss.elastic.co/u/Stud21)\ **Replies:** 9\ **Last updated:** [April 5, 2021, 10:25am UTC](https://discuss.elastic.co/t/apm-agent-status-states-no-data-has-been-received-from-agents-yet/268295 "2021-04-05T10:25:19Z")
Hi, I have deployed and configured APM which on clicking APM server status states as "You have correctly setup APM Server" I am successfully running a Petclinic application using the below script: sudo java -javaage… --- ## [Elasticsearch cluster data nodes are being removed from cluster by timeout](https://discuss.elastic.co/t/elasticsearch-cluster-data-nodes-are-being-removed-from-cluster-by-timeout/285635)
**Author:** [@Vadym](https://discuss.elastic.co/u/Vadym)\ **Replies:** 17\ **Last updated:** [October 14, 2021, 10:43pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-data-nodes-are-being-removed-from-cluster-by-timeout/285635 "2021-10-14T22:43:52Z")
Hi everyone, I have an issue while deleting rather big 800Gb Elasticsearch index. Shortly after index deletion data nodes are getting disconnected, cluster loses all data nodes and switches into "red" state for ~10 minu… --- ## [Recurring index corruption](https://discuss.elastic.co/t/recurring-index-corruption/322144)
**Author:** [@Sebastiano](https://discuss.elastic.co/u/Sebastiano)\ **Replies:** 11\ **Last updated:** [December 29, 2022, 1:07pm UTC](https://discuss.elastic.co/t/recurring-index-corruption/322144 "2022-12-29T13:07:27Z")
Hi, we are experimenting setting up an ELK cluster using Azure Container Instances. We successfully setup the cluster and we started using it to push log entries, generated by our distributed system, using and Azure Ev… --- ## [ELK - Time taking to parse](https://discuss.elastic.co/t/elk-time-taking-to-parse/94738)
**Author:** [@paulachinthpaul](https://discuss.elastic.co/u/paulachinthpaul)\ **Replies:** 17\ **Last updated:** [July 27, 2017, 9:59am UTC](https://discuss.elastic.co/t/elk-time-taking-to-parse/94738 "2017-07-27T09:59:34Z")
I am new to ELK \[ Elasticsearch Logstash and Kibana\]. I have three machines having 30 GB RAM and around 400 GB space I have millions of file to parse \[size is around 300 GB\] I have split the files and placed in thr… --- ## [Need Watcher configuration and settings ElasticSearch yml](https://discuss.elastic.co/t/need-watcher-configuration-and-settings-elasticsearch-yml/330291)
**Author:** [@Praveen\_kr](https://discuss.elastic.co/u/Praveen_kr)\ **Replies:** 20\ **Last updated:** [May 24, 2023, 1:11pm UTC](https://discuss.elastic.co/t/need-watcher-configuration-and-settings-elasticsearch-yml/330291 "2023-05-24T13:11:06Z")
Hi Team, , Anyone one Could you please help me with the watcher configuration elasticsearch yml setup as we have 13 nodes I need to add the watcher settings to send a mail alert (outlook). Challenges what am facing her… --- ## [ES 5.2 query performance much worse than ES 2.4?](https://discuss.elastic.co/t/es-5-2-query-performance-much-worse-than-es-2-4/74990)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 9\ **Last updated:** [February 17, 2017, 1:06am UTC](https://discuss.elastic.co/t/es-5-2-query-performance-much-worse-than-es-2-4/74990 "2017-02-17T01:06:10Z")
I just upgraded our existing ES 2.4 cluster to ES 5.2 with following steps: Take snapshot of all indices on ES 2.4 cluster Remove the ES 2.4 cluster Create new ES 5.2 cluster with same hardware configurations Restore … --- ## [Constantly increasing memory outside of Java heap](https://discuss.elastic.co/t/constantly-increasing-memory-outside-of-java-heap/16368)
**Author:** [@Jos\_Kraaijeveld](https://discuss.elastic.co/u/Jos_Kraaijeveld)\ **Replies:** 10\ **Last updated:** [April 9, 2014, 4:39pm UTC](https://discuss.elastic.co/t/constantly-increasing-memory-outside-of-java-heap/16368 "2014-04-09T16:39:39Z")
Hey, I've run into an issue which is preventing me from moving forwards with ES. I've got an application where I keep 'live' documents in ElasticSearch. Each document is a combination from data from multiple sourc… --- ## [Problèmes lors d'indexation de fichiers CSV](https://discuss.elastic.co/t/problemes-lors-dindexation-de-fichiers-csv/182688)
**Author:** [@Ayumalex](https://discuss.elastic.co/u/Ayumalex)\ **Replies:** 14\ **Last updated:** [May 26, 2019, 3:14pm UTC](https://discuss.elastic.co/t/problemes-lors-dindexation-de-fichiers-csv/182688 "2019-05-26T15:14:55Z")
Bonjour, J'utilise ELK (pour la première fois) pour traiter des fichiers CSV. Cependant, j'ai un problème lorsque je lance logstash avec mon fichier de configuration que voici : input { file { path =\> "/home/user/n… --- ## [Jdk fails with out of memory error / es critical index counts](https://discuss.elastic.co/t/jdk-fails-with-out-of-memory-error-es-critical-index-counts/17335)
**Author:** [@Nish](https://discuss.elastic.co/u/Nish)\ **Replies:** 14\ **Last updated:** [May 8, 2014, 2:30pm UTC](https://discuss.elastic.co/t/jdk-fails-with-out-of-memory-error-es-critical-index-counts/17335 "2014-05-08T14:30:03Z")
elasticsearch is set as a single node instance on a 60G RAM and 32\*2.6GHz machine. I am actively indexing historic data with logstash. It worked well with ~300 million documents (search and indexing were doing ok) ,… --- ## [Very slow has\_child query for large index](https://discuss.elastic.co/t/very-slow-has-child-query-for-large-index/12494)
**Author:** [@David\_MZ](https://discuss.elastic.co/u/David_MZ)\ **Replies:** 14\ **Last updated:** [June 26, 2013, 9:52am UTC](https://discuss.elastic.co/t/very-slow-has-child-query-for-large-index/12494 "2013-06-26T09:52:44Z")
I have a 40 million child documents with 20 million parents on 3 shards all hosted within one machine My specs are elastic 0.9, 8 cores, 8 gigs dedicated memory I am performing a has\_child query, and it doesn't see… --- ## [Need help to improve performance with ES](https://discuss.elastic.co/t/need-help-to-improve-performance-with-es/39973)
**Author:** [@Deep\_2](https://discuss.elastic.co/u/Deep_2)\ **Replies:** 11\ **Last updated:** [February 5, 2016, 3:00pm UTC](https://discuss.elastic.co/t/need-help-to-improve-performance-with-es/39973 "2016-02-05T15:00:44Z")
Hi, I have a single node elastic search deployment with 15K documents. The machine has 4 cores and 8 Gb of RAM. The node is handling 1300 request per second with 25% cpu utilization, 75% memory utilization. In the curr… --- ## [Actions firing, but nothing shows up under alerts](https://discuss.elastic.co/t/actions-firing-but-nothing-shows-up-under-alerts/297783)
**Author:** [@jeremyross](https://discuss.elastic.co/u/jeremyross)\ **Replies:** 12\ **Last updated:** [February 22, 2022, 3:12pm UTC](https://discuss.elastic.co/t/actions-firing-but-nothing-shows-up-under-alerts/297783 "2022-02-22T15:12:02Z")
I've got a rule that triggers based on an arbitrary query and fires a slack message action. This works great, but no alerts show up under the Rule in Stack management, and also not seeing anything under Observability \> A… --- ## [Logstash - problems with date](https://discuss.elastic.co/t/logstash-problems-with-date/129084)
**Author:** [@piccasso007](https://discuss.elastic.co/u/piccasso007)\ **Replies:** 12\ **Last updated:** [April 25, 2018, 12:00pm UTC](https://discuss.elastic.co/t/logstash-problems-with-date/129084 "2018-04-25T12:00:07Z")
Log example: \[2018-03-28 12:00:21\] Processed: shop\\Export\\Jobs\\ExportOrders \[2018-03-28 12:00:22\] Processed: shop\\Export\\Jobs\\ExportOrders Logstash configuration: input { file { path =\> "path/to/test/file.log" sta… --- ## [Elasticsearch snapshot is failing due to access denied exception](https://discuss.elastic.co/t/elasticsearch-snapshot-is-failing-due-to-access-denied-exception/350474)
**Author:** [@tykarthick](https://discuss.elastic.co/u/tykarthick)\ **Replies:** 15\ **Last updated:** [January 16, 2024, 9:28am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-is-failing-due-to-access-denied-exception/350474 "2024-01-16T09:28:25Z")
Hi Team, Greetings ! A POC is under progress for the Elasticsearch snapshot and restoration and this POC is on the Azure VM's Linux environment. The version of Elasticsearch is 8.6.2 with three node cluster setup. The… --- ## [Aws plugin installation problem](https://discuss.elastic.co/t/aws-plugin-installation-problem/270085)
**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\ **Replies:** 20\ **Last updated:** [April 19, 2021, 9:23am UTC](https://discuss.elastic.co/t/aws-plugin-installation-problem/270085 "2021-04-19T09:23:06Z")
Hello, In order to send my elasticsearch indexes to aws S3, I find myself having to install the aws-cloud plugin on my server For that, I have to enter this order while being in the file /usr/share/elasticsearch: sudo… [Previous page](https://discuss.elastic.co/top.md?page=137&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=139&per_page=50&period=all)