# Top **URL:** https://discuss.elastic.co/top.md?page=1389&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1390 --- ## [Xkcd style map?](https://discuss.elastic.co/t/xkcd-style-map/70636)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 5\ **Last updated:** [January 5, 2017, 9:04am UTC](https://discuss.elastic.co/t/xkcd-style-map/70636 "2017-01-05T09:04:47Z")
I was looking at the blog for significatn terms aggregation and found this super cool map! Which xkcd map is this blog using to plot the geohash key ? --- ## [JRE 1.7.0\_11 / ES 1.0.1 - GC not collecting old gen / Memory Leak? (reposted with better formatting)](https://discuss.elastic.co/t/jre-1-7-0-11-es-1-0-1-gc-not-collecting-old-gen-memory-leak-reposted-with-better-formatting/20347)
**Author:** [@Gavin\_Seng](https://discuss.elastic.co/u/Gavin_Seng)\ **Replies:** 5\ **Last updated:** [November 8, 2014, 4:12pm UTC](https://discuss.elastic.co/t/jre-1-7-0-11-es-1-0-1-gc-not-collecting-old-gen-memory-leak-reposted-with-better-formatting/20347 "2014-11-08T16:12:50Z")
\### JRE 1.7.0\_11 / ES 1.0.1 - GC not collecting old gen / Memory Leak? \*\* reposting because 1st one came out w/o images and all kinds of strange spaces. Hi, We're seeing issues where GC collects less and less… --- ## [Passing Values From Links to Controls](https://discuss.elastic.co/t/passing-values-from-links-to-controls/372169)
**Author:** [@msavitski](https://discuss.elastic.co/u/msavitski)\ **Replies:** 1\ **Last updated:** [September 22, 2025, 8:06am UTC](https://discuss.elastic.co/t/passing-values-from-links-to-controls/372169 "2025-09-22T08:06:15Z")
Hi there! I have a question related to the link panel. Thanks for functionality, I have successfully integrated it into the dashboard. On the first dashboard, I have controls, and when I navigate to another dashboard, … --- ## [Daemonset - collecting the pod's namespace along with log](https://discuss.elastic.co/t/daemonset-collecting-the-pods-namespace-along-with-log/278979)
**Author:** [@Jongz\_Puangput](https://discuss.elastic.co/u/Jongz_Puangput)\ **Replies:** 1\ **Last updated:** [July 20, 2021, 3:00am UTC](https://discuss.elastic.co/t/daemonset-collecting-the-pods-namespace-along-with-log/278979 "2021-07-20T03:00:13Z")
Hi Guys, I set up Filebeat with the DaemonSet approach. All containers log is shipped to LogStash successfully. However, I'm facing the issue that I cannot differentiate container logs for DEV and QA namespace under the… --- ## [Unable to access payload \_source fields using Watcher foreach with rollup data](https://discuss.elastic.co/t/unable-to-access-payload-source-fields-using-watcher-foreach-with-rollup-data/221049)
**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 9:30am UTC](https://discuss.elastic.co/t/unable-to-access-payload-source-fields-using-watcher-foreach-with-rollup-data/221049 "2020-02-27T09:30:53Z")
Hi, I'm using Elastic 7.6.0. I created a very simple trigger that queries on aggregated rolled up metricbeat data, and logs any documents retrieved using the foreach action. However, I'm able to get the whole ctx.payl… --- ## [Visualizing unique counts aggregations](https://discuss.elastic.co/t/visualizing-unique-counts-aggregations/200754)
**Author:** [@Juan\_Francisco\_Verho](https://discuss.elastic.co/u/Juan_Francisco_Verho)\ **Replies:** 1\ **Last updated:** [September 25, 2019, 1:01pm UTC](https://discuss.elastic.co/t/visualizing-unique-counts-aggregations/200754 "2019-09-25T13:01:06Z")
I'm using the cardinality aggregation to get all the events on a weekly interval on the visual builder. What I'm trying to achieve is something similar to a cumulative sum but that takes in consideration only new unique … --- ## [Logstash convert data from array list to objects](https://discuss.elastic.co/t/logstash-convert-data-from-array-list-to-objects/186978)
**Author:** [@arash\_moosavi](https://discuss.elastic.co/u/arash_moosavi)\ **Replies:** 1\ **Last updated:** [June 23, 2019, 9:41am UTC](https://discuss.elastic.co/t/logstash-convert-data-from-array-list-to-objects/186978 "2019-06-23T09:41:02Z")
I send following data to Logstash: { "a": 1, "b": 2, "c": 3, "d": { \["key": "felan", "value": 123\], \["key": "bahman", "value":321\] } } I want to convert it to: { "a": 1, "b": 2, "c": 3, "d": { "felan":… --- ## [Multiline JSON file not ingested with logstash to ElasticSearch](https://discuss.elastic.co/t/multiline-json-file-not-ingested-with-logstash-to-elasticsearch/177144)
**Author:** [@releaseblocker](https://discuss.elastic.co/u/releaseblocker)\ **Replies:** 1\ **Last updated:** [April 16, 2019, 8:03pm UTC](https://discuss.elastic.co/t/multiline-json-file-not-ingested-with-logstash-to-elasticsearch/177144 "2019-04-16T20:03:49Z")
I have a logstash config file as input{ file { type =\> "json" path =\> "/home/$user/MOCK\_DATA.json" start\_position =\> "beginning" codec =\> multiline { pattern =\> '^{' what =\> previous } } } output{ elasticse… --- ## [Change default index name for marvel.agent.exporters](https://discuss.elastic.co/t/change-default-index-name-for-marvel-agent-exporters/66499)
**Author:** [@girirajsharma](https://discuss.elastic.co/u/girirajsharma)\ **Replies:** 1\ **Last updated:** [December 5, 2016, 8:00pm UTC](https://discuss.elastic.co/t/change-default-index-name-for-marvel-agent-exporters/66499 "2016-12-05T20:00:35Z")
In reference to https://www.elastic.co/guide/en/marvel/2.3/configuration.html, we have following marvel.agent.exporters config to change the time format suffix for marvel indices index: name: time\_format:… --- ## [Permalink - snapshot und saved-search reference](https://discuss.elastic.co/t/permalink-snapshot-und-saved-search-reference/214814)
**Author:** [@kkensy](https://discuss.elastic.co/u/kkensy)\ **Replies:** 2\ **Last updated:** [January 28, 2020, 4:43pm UTC](https://discuss.elastic.co/t/permalink-snapshot-und-saved-search-reference/214814 "2020-01-28T16:43:08Z")
Hey, shouldn't the snapshot share links be independent from the saved search? This works for the changes on the saved search, but not if the saved search was deleted. The error message in this case is "Saved object is … --- ## [Capture multiple information for one match grok](https://discuss.elastic.co/t/capture-multiple-information-for-one-match-grok/214069)
**Author:** [@focheur91300](https://discuss.elastic.co/u/focheur91300)\ **Replies:** 2\ **Last updated:** [January 7, 2020, 3:42pm UTC](https://discuss.elastic.co/t/capture-multiple-information-for-one-match-grok/214069 "2020-01-07T15:42:56Z")
Hello, I am currently stuck on a parsing topic. I am looking with a single match to recover several information from the same information to already capture. I'm working on DNS log: Jan 7 13:49:02 192.168.10.254 unb… --- ## [Configuring Watcher with basic-auth and Elastic Cloud](https://discuss.elastic.co/t/configuring-watcher-with-basic-auth-and-elastic-cloud/132189)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 2\ **Last updated:** [May 17, 2018, 4:09pm UTC](https://discuss.elastic.co/t/configuring-watcher-with-basic-auth-and-elastic-cloud/132189 "2018-05-17T16:09:10Z")
Working on an Elastic Cloud project that I did not set up myself. Configuring a watch using an HTTP input back to itself. I am missing something incredibly basic since I get 404s. Using the same 'elastic' user used for … --- ## [Elasticsearch query on kibana](https://discuss.elastic.co/t/elasticsearch-query-on-kibana/43411)
**Author:** [@luis.carvalho](https://discuss.elastic.co/u/luis.carvalho)\ **Replies:** 2\ **Last updated:** [March 9, 2016, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-query-on-kibana/43411 "2016-03-09T11:08:20Z")
Hi, I would like to know if it's possible in some way, to visualize the next Elasticsearch query on a kibana metric or chart? I tried using JSON input but without a good result, and I don't know if it's the correct way… --- ## [SSL client certs allowed, but lumberjack-input doesn't seem to validate them?](https://discuss.elastic.co/t/ssl-client-certs-allowed-but-lumberjack-input-doesnt-seem-to-validate-them/23946)
**Author:** [@finn](https://discuss.elastic.co/u/finn)\ **Replies:** 2\ **Last updated:** [June 26, 2015, 12:01am UTC](https://discuss.elastic.co/t/ssl-client-certs-allowed-but-lumberjack-input-doesnt-seem-to-validate-them/23946 "2015-06-26T00:01:30Z")
First off, not sure if this would fit better in the main logstash forum, as it's about the input plugin which doesn't seem to technically be part of logstash-forwarder. So, logstash-forwarder allows me to specify SSL… --- ## [How can I tune for Elasticsearch performance?](https://discuss.elastic.co/t/how-can-i-tune-for-elasticsearch-performance/227063)
**Author:** [@sgonv](https://discuss.elastic.co/u/sgonv)\ **Replies:** 8\ **Last updated:** [April 20, 2020, 2:35pm UTC](https://discuss.elastic.co/t/how-can-i-tune-for-elasticsearch-performance/227063 "2020-04-20T14:35:00Z")
Hello, I have the Elasticsearch index with 2 Billion documents. And my Elasticsearch cluster has 2 data node with 32GB memory each. The index looks like below, { "mappings": { "properties": { "userName": { … --- ## [SQL Handle for Elastic Search](https://discuss.elastic.co/t/sql-handle-for-elastic-search/224226)
**Author:** [@Basil\_Paul](https://discuss.elastic.co/u/Basil_Paul)\ **Replies:** 8\ **Last updated:** [April 1, 2020, 6:39am UTC](https://discuss.elastic.co/t/sql-handle-for-elastic-search/224226 "2020-04-01T06:39:36Z")
Hello guys, Iam unable to query data residing in Elastic. I need to install SQL for querying the data residing in Elastic search. Please let me know whether it is possible to install SQL handle for Kibana or Elastic sea… --- ## [Closed index shard replication prior to Elasticsearch 7.2](https://discuss.elastic.co/t/closed-index-shard-replication-prior-to-elasticsearch-7-2/218337)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 3\ **Last updated:** [February 7, 2020, 1:08pm UTC](https://discuss.elastic.co/t/closed-index-shard-replication-prior-to-elasticsearch-7-2/218337 "2020-02-07T13:08:12Z")
Could someone clarify how replicas of closed index shards are handled prior to 7.2? I work with a cluster that's currently running Elasticsearch 6.8.6. I have always thought that closed index shards are replicated. I.e.… --- ## [Run long running search](https://discuss.elastic.co/t/run-long-running-search/198174)
**Author:** [@philippkahr](https://discuss.elastic.co/u/philippkahr)\ **Replies:** 8\ **Last updated:** [September 6, 2019, 7:00am UTC](https://discuss.elastic.co/t/run-long-running-search/198174 "2019-09-06T07:00:44Z")
hi guys, I am struggeling with a simple task. I have netflow indexes that spread over a month and are all in a hot cluster. They combine to up to 200gb and around 700 million log lines. I have a few dashboards and I alr… --- ## [How to write custom gork for logstash](https://discuss.elastic.co/t/how-to-write-custom-gork-for-logstash/163858)
**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\ **Replies:** 8\ **Last updated:** [January 15, 2019, 5:37pm UTC](https://discuss.elastic.co/t/how-to-write-custom-gork-for-logstash/163858 "2019-01-15T17:37:28Z")
I'm trying to test the some custom log filter for logstash but somehow i'm not able to get it, I googled and looked over many examples but I am not able to create a one I want. Below is my log patterns: testhost-in2,19… --- ## [Elastic Search and Storage Area Network](https://discuss.elastic.co/t/elastic-search-and-storage-area-network/102937)
**Author:** [@Sudhindra\_Magadi](https://discuss.elastic.co/u/Sudhindra_Magadi)\ **Replies:** 3\ **Last updated:** [October 6, 2017, 5:26am UTC](https://discuss.elastic.co/t/elastic-search-and-storage-area-network/102937 "2017-10-06T05:26:29Z")
All, We have 3 ES servers and we would like to store the ES data files in a SAN instead of local storage .We can have 3 differnt LUNs presented to these 3 differnt severs. Please let us know if this work or there is a b… --- ## [Elasticsearch data storage](https://discuss.elastic.co/t/elasticsearch-data-storage/86559)
**Author:** [@Amin1](https://discuss.elastic.co/u/Amin1)\ **Replies:** 3\ **Last updated:** [May 21, 2017, 9:32pm UTC](https://discuss.elastic.co/t/elasticsearch-data-storage/86559 "2017-05-21T21:32:41Z")
Hi I assigned storage to my elasticsearch path, after that elasticsearch don't save logs. follow is my storage : \[root@es-data-01 ~\]# df Filesystem 1K-blocks Used Available Use% Mounted on /dev/mappe… --- ## [Kibana WMS Maps Zoom Breaks on Higher Resolution](https://discuss.elastic.co/t/kibana-wms-maps-zoom-breaks-on-higher-resolution/84635)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [May 8, 2017, 5:59am UTC](https://discuss.elastic.co/t/kibana-wms-maps-zoom-breaks-on-higher-resolution/84635 "2017-05-08T05:59:44Z")
I'm using Kibana 5.3.0 and attempting to use the WMS compliant USGS maps (the default provided when selecting 'Use WMS compliant maps' in Kibana. When at a certain zoom, it works great, but at the next zoom level the ma… --- ## [Best Storage Setup for 5k docs/sec Architecture](https://discuss.elastic.co/t/best-storage-setup-for-5k-docs-sec-architecture/67381)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [November 28, 2016, 11:47pm UTC](https://discuss.elastic.co/t/best-storage-setup-for-5k-docs-sec-architecture/67381 "2016-11-28T23:47:44Z")
I'm at the point where I'm deploying a POC into a production environment. The architecture needs to be able to handle processing & indexing upwards of 5000 events per second and the ability to somewhat efficiently query … --- ## [Colour into visualization](https://discuss.elastic.co/t/colour-into-visualization/33509)
**Author:** [@Massimo\_Carro](https://discuss.elastic.co/u/Massimo_Carro)\ **Replies:** 3\ **Last updated:** [February 18, 2016, 7:37pm UTC](https://discuss.elastic.co/t/colour-into-visualization/33509 "2016-02-18T19:37:46Z")
Hi guys, we've problems with color visualization on chart into kibana. With many different data-set charts often show all information in black/gray color. Is it an issue or is not a configured step? Here a chart ok a… --- ## [Indexing from hdfs to elasticsearch using Pig](https://discuss.elastic.co/t/indexing-from-hdfs-to-elasticsearch-using-pig/40374)
**Author:** [@Anshul\_Bhatnagar](https://discuss.elastic.co/u/Anshul_Bhatnagar)\ **Replies:** 3\ **Last updated:** [January 29, 2016, 10:49am UTC](https://discuss.elastic.co/t/indexing-from-hdfs-to-elasticsearch-using-pig/40374 "2016-01-29T10:49:56Z")
A= LOAD 'hdfs://10.70.16.91:8020/travel\_stats/travel/stats-1453945200000/part-00001' USING PigStorage('\\t'); STORE A INTO 'logs/travels' USING org.elasticsearch.hadoop.pig.EsStorage('es.nodes=xx.xx.xx.xx,xx.xx.xx.xx,xx… --- ## [One of Elasticsearch node is disconnected](https://discuss.elastic.co/t/one-of-elasticsearch-node-is-disconnected/27558)
**Author:** [@Mustafa\_Sener](https://discuss.elastic.co/u/Mustafa_Sener)\ **Replies:** 3\ **Last updated:** [August 18, 2015, 8:08am UTC](https://discuss.elastic.co/t/one-of-elasticsearch-node-is-disconnected/27558 "2015-08-18T08:08:53Z")
Hi All, I have a problem with my cluster. I have 2 nodes. They are on the same physical machine. But one of them disconnected. I don't understand why it is disconnected while they are on the same physical machine. DO y… --- ## [Heartbeat autodiscover kubernetes pod](https://discuss.elastic.co/t/heartbeat-autodiscover-kubernetes-pod/290629)
**Author:** [@lalchand\_rajak](https://discuss.elastic.co/u/lalchand_rajak)\ **Replies:** 4\ **Last updated:** [December 14, 2021, 9:02am UTC](https://discuss.elastic.co/t/heartbeat-autodiscover-kubernetes-pod/290629 "2021-12-14T09:02:41Z")
Hi I want heartbeat to find every single kubernetes pod and send it to Elasticsearch uptime, however all I am able to currently get is the kubernetes nodes. Below is the config. apiVersion: v1 kind: ConfigMap metadata:… --- ## [Clarification towards logstash batch\_size and memory usage](https://discuss.elastic.co/t/clarification-towards-logstash-batch-size-and-memory-usage/247073)
**Author:** [@vaishno.avi](https://discuss.elastic.co/u/vaishno.avi)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 3:37pm UTC](https://discuss.elastic.co/t/clarification-towards-logstash-batch-size-and-memory-usage/247073 "2020-09-03T15:37:02Z")
Hello All, I have two concerns I have a pipeline.yml where I am explicitly setting batch size as 100, but when I start logstash it shows me 125, is this an expected behavior ? config - pipeline.id: filebeat path.c… --- ## [Help! logstash conf filter add\_tag not working](https://discuss.elastic.co/t/help-logstash-conf-filter-add-tag-not-working/221582)
**Author:** [@elady](https://discuss.elastic.co/u/elady)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 11:55am UTC](https://discuss.elastic.co/t/help-logstash-conf-filter-add-tag-not-working/221582 "2020-03-04T11:55:51Z")
Hey all. This is my first post in these forums, so- hey everyone :slight\_smile: I am parsing few different input file sources using grok filters. if there is no match on any of them I have created a "fail safe" while … --- ## [APM Sidekiq Maxium duration for trace?](https://discuss.elastic.co/t/apm-sidekiq-maxium-duration-for-trace/203092)
**Author:** [@dnorth98](https://discuss.elastic.co/u/dnorth98)\ **Replies:** 4\ **Last updated:** [October 14, 2019, 12:06pm UTC](https://discuss.elastic.co/t/apm-sidekiq-maxium-duration-for-trace/203092 "2019-10-14T12:06:00Z")
Kibana version: 7.4 Elasticsearch version: 7.4 APM Server version: 7.4 APM Agent language and version: Latest v3, Ruby We're using Ruby APM to trace some Sidekiq jobs and the APM agent picks these up nicely. Howeve… --- ## [POST to /api/canvas/workpad with overwrite option](https://discuss.elastic.co/t/post-to-api-canvas-workpad-with-overwrite-option/167362)
**Author:** [@rcodestuff](https://discuss.elastic.co/u/rcodestuff)\ **Replies:** 4\ **Last updated:** [February 22, 2019, 11:31am UTC](https://discuss.elastic.co/t/post-to-api-canvas-workpad-with-overwrite-option/167362 "2019-02-22T11:31:27Z")
Hi, Using curl I can post a new workpad to canvas like this: curl -X POST -H "kbn-xsrf: reporting" -H "Content-Type: application/json" -d @myworkpad.json "/api/canvas/workpad" In the json I am posting I am setting up … --- ## [SingleSignOnService Binding HTTP-POST](https://discuss.elastic.co/t/singlesignonservice-binding-http-post/134474)
**Author:** [@everson](https://discuss.elastic.co/u/everson)\ **Replies:** 4\ **Last updated:** [June 5, 2018, 4:27pm UTC](https://discuss.elastic.co/t/singlesignonservice-binding-http-post/134474 "2018-06-05T16:27:55Z")
Hi! We are configuring x-pack to integrates with an SSO provider, but unfortunately, this SSO Service exposes only HTTP-POST binding. I saw on X-Pack documentation that it only supports Redirect binding but I would want… --- ## [Relating two fields](https://discuss.elastic.co/t/relating-two-fields/123788)
**Author:** [@Francisco1](https://discuss.elastic.co/u/Francisco1)\ **Replies:** 4\ **Last updated:** [March 14, 2018, 3:07pm UTC](https://discuss.elastic.co/t/relating-two-fields/123788 "2018-03-14T15:07:48Z")
Hello, I don't know if I'm righting post the question here or if it would be more correct post it in elasticforum. So, I got two arrays of strings in the same document. The first array is an array of names, and the sec… --- ## [KIbana 5.1.2 not rendering correctly](https://discuss.elastic.co/t/kibana-5-1-2-not-rendering-correctly/72128)
**Author:** [@nzHillNet](https://discuss.elastic.co/u/nzHillNet)\ **Replies:** 4\ **Last updated:** [January 22, 2017, 1:07am UTC](https://discuss.elastic.co/t/kibana-5-1-2-not-rendering-correctly/72128 "2017-01-22T01:07:35Z")
Hi all, I've just install Elasticsearch, Kibana and Logstash (all 5.1.2) on Ubuntu 16.04. Kibana isn't rendering correctly and I'm not sure if its a path or permissions issue, nor where to start looking. Here is a scr… --- ## [Index Migration Strategy](https://discuss.elastic.co/t/index-migration-strategy/66435)
**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\ **Replies:** 4\ **Last updated:** [November 25, 2016, 8:10pm UTC](https://discuss.elastic.co/t/index-migration-strategy/66435 "2016-11-25T20:10:54Z")
Hi, I'm wondering if there's a way to migrate to a new ES index without shutting down logstash on our web servers. I'm using Logstash (ES to ES configuration) to migrate data to a new index. I normally use the reindex… --- ## [Fleet not working after update](https://discuss.elastic.co/t/fleet-not-working-after-update/335950)
**Author:** [@acosta353](https://discuss.elastic.co/u/acosta353)\ **Replies:** 0\ **Last updated:** [June 14, 2023, 8:33am UTC](https://discuss.elastic.co/t/fleet-not-working-after-update/335950 "2023-06-14T08:33:19Z")
Hello, Unfortunately, by mistake, one of my elasticsearch hosts updated from version 8.5.3 to 8.8.0, so this caused a lot of problems with my installation. I've already updated the other 2 elasticserver hosts, but now … --- ## [Canva IMAGE moving](https://discuss.elastic.co/t/canva-image-moving/332339)
**Author:** [@ifalanrocha](https://discuss.elastic.co/u/ifalanrocha)\ **Replies:** 4\ **Last updated:** [June 2, 2023, 8:45pm UTC](https://discuss.elastic.co/t/canva-image-moving/332339 "2023-06-02T20:45:35Z")
Hello everyone, I hope you are well. I need to define margins on my elements inside the canvas, but when I use padding, only the canvasRenderE1 modifies, I would like to move the image. image dataurl={asset "asset-98f5… --- ## [ElasticSearch 8.1.1 Java API - Sort doesn't work](https://discuss.elastic.co/t/elasticsearch-8-1-1-java-api-sort-doesnt-work/301003)
**Author:** [@AKDAS\_System](https://discuss.elastic.co/u/AKDAS_System)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 7:06pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-1-java-api-sort-doesnt-work/301003 "2022-03-29T19:06:19Z")
Hello, I'm currently in the process of migrating from Elasticsearch 6.8 to the new Java API in 8.1.1. So far everything is going well but the only problem that is left is that adding sort to SearchRequest breaks everythi… --- ## [Correct way to drop older events?](https://discuss.elastic.co/t/correct-way-to-drop-older-events/131043)
**Author:** [@jonrust](https://discuss.elastic.co/u/jonrust)\ **Replies:** 1\ **Last updated:** [May 8, 2018, 7:29pm UTC](https://discuss.elastic.co/t/correct-way-to-drop-older-events/131043 "2018-05-08T19:29:56Z")
I'd like to drop older events at logstash parsing time. Going with 100 days as my cutoff, I tried and failed to do this with the ruby module: ruby { code =\> "event.cancel if event.get(@timestamp) \< (Time.now - (864… --- ## [Recommended redis HA architecture](https://discuss.elastic.co/t/recommended-redis-ha-architecture/55866)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [July 21, 2016, 2:11am UTC](https://discuss.elastic.co/t/recommended-redis-ha-architecture/55866 "2016-07-21T02:11:57Z")
Hi! I was not sure where to ask but I thought this category was most suitable one. My apology if I am posting in wrong category. What I am trying to do I am planning to deploy a multiple message broker to elude singl… --- ## [Different Query format for wildcard query and term query](https://discuss.elastic.co/t/different-query-format-for-wildcard-query-and-term-query/321250)
**Author:** [@adholpuria](https://discuss.elastic.co/u/adholpuria)\ **Replies:** 2\ **Last updated:** [December 15, 2022, 10:50am UTC](https://discuss.elastic.co/t/different-query-format-for-wildcard-query-and-term-query/321250 "2022-12-15T10:50:59Z")
Hey community, I am currently using below mentioned query format for term query { "query": { "term": { "core.externalId": "Kimchy" } } Below is the query format described in Elasticsearch Document Ter… --- ## [Converting String to Date in Kibana](https://discuss.elastic.co/t/converting-string-to-date-in-kibana/278080)
**Author:** [@robertashok](https://discuss.elastic.co/u/robertashok)\ **Replies:** 2\ **Last updated:** [July 11, 2021, 3:54pm UTC](https://discuss.elastic.co/t/converting-string-to-date-in-kibana/278080 "2021-07-11T15:54:43Z")
I have the date as YYYY-MM-DD in kibana, I want to convert this one to date, so that i can use it in Visualisation. --- ## [Problems with Traefik/Keycloak in front of Kibana](https://discuss.elastic.co/t/problems-with-traefik-keycloak-in-front-of-kibana/250898)
**Author:** [@kodo65](https://discuss.elastic.co/u/kodo65)\ **Replies:** 2\ **Last updated:** [October 6, 2020, 4:58am UTC](https://discuss.elastic.co/t/problems-with-traefik-keycloak-in-front-of-kibana/250898 "2020-10-06T04:58:23Z")
Hi! I want to use Keycloak as a standard way of authenticating users to applications running in our Kubernetes clusters. One of the clusters is running the Elastic ECK component (v1.1.1) and we use the operator to deplo… --- ## [How to make my index default index pattern](https://discuss.elastic.co/t/how-to-make-my-index-default-index-pattern/148020)
**Author:** [@Jas\_Ahluwalia](https://discuss.elastic.co/u/Jas_Ahluwalia)\ **Replies:** 2\ **Last updated:** [September 11, 2018, 4:15pm UTC](https://discuss.elastic.co/t/how-to-make-my-index-default-index-pattern/148020 "2018-09-11T16:15:36Z")
Hi, I have the following in my logstash.conf file: output { elasticsearch { hosts =\> "elasticsearch:9200" index =\> "myIndex-%{+YYYY.MM.dd}" } } How can I get myIndex to be the default index in kibana… --- ## [Kibana Vega visualisation - empty aggregation buckets in JS object](https://discuss.elastic.co/t/kibana-vega-visualisation-empty-aggregation-buckets-in-js-object/146338)
**Author:** [@krakora](https://discuss.elastic.co/u/krakora)\ **Replies:** 2\ **Last updated:** [August 28, 2018, 1:39pm UTC](https://discuss.elastic.co/t/kibana-vega-visualisation-empty-aggregation-buckets-in-js-object/146338 "2018-08-28T13:39:34Z")
Dear team, I like create a word cloud visualisation like the one in https://vega.github.io/vega/examples/word-cloud/ but I got stuck in Vega data object definition. Using the Kibana Dev tools I can search query GET /… --- ## [Random 100% CPU Spikes on an staging cluster](https://discuss.elastic.co/t/random-100-cpu-spikes-on-an-staging-cluster/72348)
**Author:** [@xgantan](https://discuss.elastic.co/u/xgantan)\ **Replies:** 2\ **Last updated:** [January 23, 2017, 10:34pm UTC](https://discuss.elastic.co/t/random-100-cpu-spikes-on-an-staging-cluster/72348 "2017-01-23T22:34:33Z")
We have a 2 node (r3.large.elasticsearch) cluster that's running filter-based queries to retrieve documents from a small index (around 9 million documents total). From time to time, under no particular queries, the CPUs … --- ## [Deafult stop words list for languages](https://discuss.elastic.co/t/deafult-stop-words-list-for-languages/58163)
**Author:** [@richetdan](https://discuss.elastic.co/u/richetdan)\ **Replies:** 2\ **Last updated:** [August 17, 2016, 9:44am UTC](https://discuss.elastic.co/t/deafult-stop-words-list-for-languages/58163 "2016-08-17T09:44:04Z")
How can I check the default stop words list for a given language analyzer (i.e italian)? (I have to check in order to evaluate if it need tp be extendend with our personal terms) Thanks in advance. -Daniele- --- ## [Filter after selecting top 5 hits](https://discuss.elastic.co/t/filter-after-selecting-top-5-hits/245290)
**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\ **Replies:** 5\ **Last updated:** [August 20, 2020, 7:52pm UTC](https://discuss.elastic.co/t/filter-after-selecting-top-5-hits/245290 "2020-08-20T19:52:49Z")
Hi, I'm using the alerting feature in Kibana and I want to check if the last 5 consecutive values of a field exceed a threshold x but if I use a filter in my elastic query, it gets applied before the top N aggregation. … --- ## [ES 6.5.1 Two nodes not connecting into cluster using ssl certificate](https://discuss.elastic.co/t/es-6-5-1-two-nodes-not-connecting-into-cluster-using-ssl-certificate/241997)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 5\ **Last updated:** [July 27, 2020, 1:06pm UTC](https://discuss.elastic.co/t/es-6-5-1-two-nodes-not-connecting-into-cluster-using-ssl-certificate/241997 "2020-07-27T13:06:27Z")
I am trying to configure 2 node cluster for Elasticsearch 6.5.1 on Debian 10 machines. For each cluster I installed Elasticsearch instance from apt-get. I also generated certificate keys using ca.crt and ca.key files I… --- ## [Bulk API - Elastic Cloud](https://discuss.elastic.co/t/bulk-api-elastic-cloud/153929)
**Author:** [@sebastiaanspeck](https://discuss.elastic.co/u/sebastiaanspeck)\ **Replies:** 5\ **Last updated:** [October 25, 2018, 9:36pm UTC](https://discuss.elastic.co/t/bulk-api-elastic-cloud/153929 "2018-10-25T21:36:13Z")
How can I use this in Elastic Cloud? [Previous page](https://discuss.elastic.co/top.md?page=1388&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1390&per_page=50&period=all)