# Top **URL:** https://discuss.elastic.co/top.md?page=1402&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1403 --- ## [Filebeat on central Syslog Server for loadbalancing](https://discuss.elastic.co/t/filebeat-on-central-syslog-server-for-loadbalancing/199054)
**Author:** [@Mugen](https://discuss.elastic.co/u/Mugen)\ **Replies:** 4\ **Last updated:** [September 11, 2019, 12:38pm UTC](https://discuss.elastic.co/t/filebeat-on-central-syslog-server-for-loadbalancing/199054 "2019-09-11T12:38:22Z")
I'm planning to get rid of our kafka messaging queue since we just set it up it because it was part of a hdfs, wich will be removed. I now want to scale up from one to two logstash with persisted queue and setup load ba… --- ## [Which ways to copy subfields of kubernetes.container.\_module.labels.\* to kubernetes.lables.\*?](https://discuss.elastic.co/t/which-ways-to-copy-subfields-of-kubernetes-container-module-labels-to-kubernetes-lables/195546)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [August 16, 2019, 7:46pm UTC](https://discuss.elastic.co/t/which-ways-to-copy-subfields-of-kubernetes-container-module-labels-to-kubernetes-lables/195546 "2019-08-16T19:46:22Z")
Hi, to simplify filtering I want to copy all substructure of kubernetes.container.\_module.labels.\* to kubernetes.lables.\*. Just moving a copy levels up. The structure below .labels is dynamic, so I cannot hardcode the … --- ## [Ingest Processor Plugin with Analyzer Support](https://discuss.elastic.co/t/ingest-processor-plugin-with-analyzer-support/123365)
**Author:** [@purefield](https://discuss.elastic.co/u/purefield)\ **Replies:** 4\ **Last updated:** [March 16, 2018, 9:16pm UTC](https://discuss.elastic.co/t/ingest-processor-plugin-with-analyzer-support/123365 "2018-03-16T21:16:41Z")
We are working on building an ingest processor plugin to support the use of analyzer for tokenization. This can be used to create word clouds from text. How does one access an Analyzer to perform this task of tokenizing… --- ## [Kibana graph for anamoly detection](https://discuss.elastic.co/t/kibana-graph-for-anamoly-detection/76281)
**Author:** [@RSundareswaran](https://discuss.elastic.co/u/RSundareswaran)\ **Replies:** 4\ **Last updated:** [February 24, 2017, 1:42pm UTC](https://discuss.elastic.co/t/kibana-graph-for-anamoly-detection/76281 "2017-02-24T13:42:35Z")
With some data loaded into ES using LS, is there a way to mention in Kibana a threshold and display an indicator it breaches the threshold. For example number of transaction in an hour across the system lets set to 200. … --- ## [Defining period of sending logs](https://discuss.elastic.co/t/defining-period-of-sending-logs/60793)
**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\ **Replies:** 4\ **Last updated:** [October 1, 2016, 4:52pm UTC](https://discuss.elastic.co/t/defining-period-of-sending-logs/60793 "2016-10-01T16:52:35Z")
How to define how often an event is sent to the output? I want to send logs after every 10 min. not continuously. Thank you. --- ## [Script not executing \_update\_by\_query](https://discuss.elastic.co/t/script-not-executing--update-by-query/23436)
**Author:** [@redserpent7](https://discuss.elastic.co/u/redserpent7)\ **Replies:** 4\ **Last updated:** [April 29, 2015, 10:17pm UTC](https://discuss.elastic.co/t/script-not-executing--update-by-query/23436 "2015-04-29T22:17:41Z")
Hi, I am trying to update several documents at the same time using the update by query plugin. The problem seems to be with the script as the query it self returns the correct result with no issues. The thing i… --- ## [Disappearing Data and Unassigned Shards](https://discuss.elastic.co/t/disappearing-data-and-unassigned-shards/9892)
**Author:** [@Dan\_Lecocq](https://discuss.elastic.co/u/Dan_Lecocq)\ **Replies:** 4\ **Last updated:** [December 4, 2012, 9:32pm UTC](https://discuss.elastic.co/t/disappearing-data-and-unassigned-shards/9892 "2012-12-04T21:32:32Z")
It's become a recurring problem that our ES cluster crashes, and then when we bring it back up, shards are missing. We keep tweaking and tuning parameters, but it's mostly grasping at straws and it continues to hap… --- ## [Add ceph cluster status to metricbeat](https://discuss.elastic.co/t/add-ceph-cluster-status-to-metricbeat/98196)
**Author:** [@elaron](https://discuss.elastic.co/u/elaron)\ **Replies:** 2\ **Last updated:** [August 24, 2017, 10:03am UTC](https://discuss.elastic.co/t/add-ceph-cluster-status-to-metricbeat/98196 "2017-08-24T10:03:29Z")
Hi, I am trying to add a cluster\_status to metricbeat’s ceph module. Here is the git URL: Cluster\_status will collect pgmap, osdmap, throughput and iops information of ceph cluster. --- ## [How to calculate old date from today by subtracting given years, months, days in logstash?](https://discuss.elastic.co/t/how-to-calculate-old-date-from-today-by-subtracting-given-years-months-days-in-logstash/283349)
**Author:** [@priyaankaa](https://discuss.elastic.co/u/priyaankaa)\ **Replies:** 2\ **Last updated:** [September 4, 2021, 5:36pm UTC](https://discuss.elastic.co/t/how-to-calculate-old-date-from-today-by-subtracting-given-years-months-days-in-logstash/283349 "2021-09-04T17:36:53Z")
I want to subtract current date with given years, months, days using logstash pipeline. For example : Today = 1 Aug 2021 Given values : Years=25, Months=10, Days=10 Expected date : 22 Sept 1995 My logstash filter sec… --- ## [Logstash service restarts constantly and does send data to elasticsearch](https://discuss.elastic.co/t/logstash-service-restarts-constantly-and-does-send-data-to-elasticsearch/168662)
**Author:** [@bradfordaemorton](https://discuss.elastic.co/u/bradfordaemorton)\ **Replies:** 2\ **Last updated:** [February 18, 2019, 8:49pm UTC](https://discuss.elastic.co/t/logstash-service-restarts-constantly-and-does-send-data-to-elasticsearch/168662 "2019-02-18T20:49:43Z")
I have a problem with the Logstash service constantly restarting and never sending data elasticsearch. There must be a bad config or a file missing in a location that it is set to read on startup. If I run manually, Logs… --- ## [FileBeat consumes free disk space until restart](https://discuss.elastic.co/t/filebeat-consumes-free-disk-space-until-restart/148460)
**Author:** [@dns](https://discuss.elastic.co/u/dns)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 10:13am UTC](https://discuss.elastic.co/t/filebeat-consumes-free-disk-space-until-restart/148460 "2018-09-14T10:13:36Z")
Hello! Could you please help with Filebeat configuration. Now we have a group of servers with the same Linux version (Ubuntu xenial) and the same FileBeat 5.5.1. Zabbix sometimes handles empty disk space at one server… --- ## [Disable \_all and search](https://discuss.elastic.co/t/disable--all-and-search/23994)
**Author:** [@bvnagaraju](https://discuss.elastic.co/u/bvnagaraju)\ **Replies:** 2\ **Last updated:** [June 24, 2015, 12:00am UTC](https://discuss.elastic.co/t/disable--all-and-search/23994 "2015-06-24T00:00:16Z")
I want to disable \_all to reduce the index size and I was using \_all and searches works Now searches doesnt work after removing \_all , can some one help me understand this and how to do this --- ## [ES\_MIN\_MEM and ES\_MAX\_MEM settings](https://discuss.elastic.co/t/es-min-mem-and-es-max-mem-settings/13588)
**Author:** [@Ashwin\_Sathya](https://discuss.elastic.co/u/Ashwin_Sathya)\ **Replies:** 2\ **Last updated:** [September 13, 2013, 7:17am UTC](https://discuss.elastic.co/t/es-min-mem-and-es-max-mem-settings/13588 "2013-09-13T07:17:53Z")
HI, My ES setup ran out of heap space and is throwing "java.lang.OutOfMemoryError: Java heap space" I understand I have to configure the ES\_MAX\_MEM environment variable. Now, ES is the only process running o… --- ## [How to use last value in a custom visualization?](https://discuss.elastic.co/t/how-to-use-last-value-in-a-custom-visualization/286213)
**Author:** [@Joao\_Silva](https://discuss.elastic.co/u/Joao_Silva)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 3:51pm UTC](https://discuss.elastic.co/t/how-to-use-last-value-in-a-custom-visualization/286213 "2021-10-28T15:51:44Z")
I have been trying to create a custom visualization with vega to display some simple data. In this case, I wanted to display the data from a vehicle where it would show the battery current vs the vehicle speed (I'm start… --- ## [Elasticsearch cannot parse the string value in json？](https://discuss.elastic.co/t/elasticsearch-cannot-parse-the-string-value-in-json/272793)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-cannot-parse-the-string-value-in-json/272793 "2021-05-12T13:06:40Z")
Failure when writing some json data to es with logstash. {"type"=\>"mapper\_parsing\_exception", "reason"=\>"object mapping for \[Data.responsedto\] tried to parse field \[responsedto\] as object, but found a concrete value"} … --- ## [Logstash without NSSM](https://discuss.elastic.co/t/logstash-without-nssm/204480)
**Author:** [@philu](https://discuss.elastic.co/u/philu)\ **Replies:** 3\ **Last updated:** [October 21, 2019, 1:47pm UTC](https://discuss.elastic.co/t/logstash-without-nssm/204480 "2019-10-21T13:47:42Z")
Is there a way to install Logstash (7.x) on Windows WITHOUT nssm (non su\*\*ing Service Manager? Every tutorial is based on nssm. Same for Kibana. Does SC.exe not provided enough possiblities? Why is that so? Also anothe… --- ## [File Name in Kibana Report](https://discuss.elastic.co/t/file-name-in-kibana-report/124131)
**Author:** [@adolfo.diaz](https://discuss.elastic.co/u/adolfo.diaz)\ **Replies:** 3\ **Last updated:** [March 15, 2018, 7:59pm UTC](https://discuss.elastic.co/t/file-name-in-kibana-report/124131 "2018-03-15T19:59:06Z")
Hi friends In these moments when we generate a report from Kibana and we export it to CSV we obtain a file with a name with this format or similar "jequmsq202rkd7699226sij5" My query is. Is it possible to specify the n… --- ## [ERROR: failed to write index state](https://discuss.elastic.co/t/error-failed-to-write-index-state/90494)
**Author:** [@zak](https://discuss.elastic.co/u/zak)\ **Replies:** 0\ **Last updated:** [June 22, 2017, 3:50pm UTC](https://discuss.elastic.co/t/error-failed-to-write-index-state/90494 "2017-06-22T15:50:59Z")
When I want to strat Elasticsearch. I had this ERROR: \[2017-06-22 15:12:53,017\]\[WARN \]\[cluster.action.shard \] \[Living Planet\] \[dubai-dep\]\[0\] received shard failed for \[dubai-dep\]\[0\], node\[iXCi74XGT8-jvaT2nvrkgA\], … --- ## [Joining of documents in search results](https://discuss.elastic.co/t/joining-of-documents-in-search-results/40581)
**Author:** [@sandeep\_reddy](https://discuss.elastic.co/u/sandeep_reddy)\ **Replies:** 3\ **Last updated:** [February 2, 2016, 8:29am UTC](https://discuss.elastic.co/t/joining-of-documents-in-search-results/40581 "2016-02-02T08:29:58Z")
We have a requirement where we need to combine the documents in search results. Below example depicts it. Assuming we have two documents say Teachers.json { "id": "Teacher1", "contextType": "Teacher", … --- ## [Custom Cluster name issue](https://discuss.elastic.co/t/custom-cluster-name-issue/9917)
**Author:** [@Mayank](https://discuss.elastic.co/u/Mayank)\ **Replies:** 3\ **Last updated:** [December 4, 2012, 2:04pm UTC](https://discuss.elastic.co/t/custom-cluster-name-issue/9917 "2012-12-04T14:04:22Z")
Hi, I want to give custom cluster name to create index but I am not able to do so as after changing the setting in elasticsearch.yml when I tries to start the instance it gives me following error as: \[dmadmin… --- ## [Error when try to create a new cluster elasticsearch](https://discuss.elastic.co/t/error-when-try-to-create-a-new-cluster-elasticsearch/154887)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 5\ **Last updated:** [November 6, 2018, 1:57pm UTC](https://discuss.elastic.co/t/error-when-try-to-create-a-new-cluster-elasticsearch/154887 "2018-11-06T13:57:11Z")
I would like to create an elastic cluster with 3 nodes to training purpose. This is my conf for node1 \[elastic@localhost config\]$ more elasticsearch.yml # ======================== Elasticsearch Configuration ======… --- ## [Write csv to elastic search by using logstash](https://discuss.elastic.co/t/write-csv-to-elastic-search-by-using-logstash/76338)
**Author:** [@Ximeng\_Zhao](https://discuss.elastic.co/u/Ximeng_Zhao)\ **Replies:** 5\ **Last updated:** [February 24, 2017, 4:10am UTC](https://discuss.elastic.co/t/write-csv-to-elastic-search-by-using-logstash/76338 "2017-02-24T04:10:24Z")
Hello All, I want to write a csv file to the elasticsearch, but after running ./logstash -f logstash.conf, es and kibana, you can check the indices is created properly but only with ten records. It doesn't import all d… --- ## [Change datatype for responsetimemillis field from String to Number](https://discuss.elastic.co/t/change-datatype-for-responsetimemillis-field-from-string-to-number/57757)
**Author:** [@Viswanath\_S](https://discuss.elastic.co/u/Viswanath_S)\ **Replies:** 5\ **Last updated:** [August 11, 2016, 9:02pm UTC](https://discuss.elastic.co/t/change-datatype-for-responsetimemillis-field-from-string-to-number/57757 "2016-08-11T21:02:48Z")
Hi, I have parsed my access logs using logstash. In my grok filter, i have given as %{NONNEGINT:responsetimemillis} in Kibana i could see that responsetimemillis is showing as string and not a number/integer. can someo… --- ## [Ionic/Angular client](https://discuss.elastic.co/t/ionic-angular-client/191097)
**Author:** [@crossmeister](https://discuss.elastic.co/u/crossmeister)\ **Replies:** 1\ **Last updated:** [July 18, 2019, 12:41pm UTC](https://discuss.elastic.co/t/ionic-angular-client/191097 "2019-07-18T12:41:38Z")
Hi, First post, so please be gentle :grinning: I'm currently evaluating Elasticsearch Cloud and am prototyping access from Ionic/Angular clients. My understanding is that the new JavaScript client is solely for node.j… --- ## [Data table has exclamation triangle icon](https://discuss.elastic.co/t/data-table-has-exclamation-triangle-icon/189927)
**Author:** [@yidaqiang](https://discuss.elastic.co/u/yidaqiang)\ **Replies:** 1\ **Last updated:** [July 12, 2019, 9:37am UTC](https://discuss.elastic.co/t/data-table-has-exclamation-triangle-icon/189927 "2019-07-12T09:37:49Z")
when i user kibana to veiw data table, it has exclamation triangle icon.like this: What does it mean? --- ## [Relative path to save filebeat logs](https://discuss.elastic.co/t/relative-path-to-save-filebeat-logs/69756)
**Author:** [@wenyao](https://discuss.elastic.co/u/wenyao)\ **Replies:** 1\ **Last updated:** [December 23, 2016, 12:56pm UTC](https://discuss.elastic.co/t/relative-path-to-save-filebeat-logs/69756 "2016-12-23T12:56:06Z")
In filebeat config file, there is a section regarding logging to files, namely: logging.to\_files: true logging.files: # Configure the path where the logs are written. The default is the logs directory # under the h… --- ## [Grok pattern for java exceptions](https://discuss.elastic.co/t/grok-pattern-for-java-exceptions/58510)
**Author:** [@tpk543](https://discuss.elastic.co/u/tpk543)\ **Replies:** 1\ **Last updated:** [August 20, 2016, 8:27pm UTC](https://discuss.elastic.co/t/grok-pattern-for-java-exceptions/58510 "2016-08-20T20:27:15Z")
As the java exception doesn't log with timestamp. Could you help me on creating grok pattern for it? All the lines in my log file are similar but I want to parse the logs only when either STUCK or Outofmemory. Could you … --- ## [Logstash output conditions doesn't works](https://discuss.elastic.co/t/logstash-output-conditions-doesnt-works/53779)
**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\ **Replies:** 1\ **Last updated:** [June 29, 2016, 8:07pm UTC](https://discuss.elastic.co/t/logstash-output-conditions-doesnt-works/53779 "2016-06-29T20:07:55Z")
Hi, My problem is that the conditions in my logstash conf file in the output section, seems to not work. here is my output section: output { if "topbeat" in \[tags\] { if "\_grokparsefailure"… --- ## [Metricbeat monitor systemd process](https://discuss.elastic.co/t/metricbeat-monitor-systemd-process/283607)
**Author:** [@josh12](https://discuss.elastic.co/u/josh12)\ **Replies:** 6\ **Last updated:** [September 8, 2021, 3:05pm UTC](https://discuss.elastic.co/t/metricbeat-monitor-systemd-process/283607 "2021-09-08T15:05:48Z")
Can I know, do you have example how i can monitor systemd and few java process. One of it is httpd and java process based on folder for isntance config. usually i do is ps -ef | grep config/ --- ## [Remove labels (or ownership) from secret](https://discuss.elastic.co/t/remove-labels-or-ownership-from-secret/280293)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 6\ **Last updated:** [August 3, 2021, 2:58pm UTC](https://discuss.elastic.co/t/remove-labels-or-ownership-from-secret/280293 "2021-08-03T14:58:34Z")
I want to edit / remove those labels from the elastic user secret eck.k8s.elastic.co/credentials: "true" eck.k8s.elastic.co/owner-kind: Elasticsearch eck.k8s.elastic.co/owner-name: myClusterName eck.k8s.… --- ## [Logstash Ouptut to Elasticsearch when one node is down](https://discuss.elastic.co/t/logstash-ouptut-to-elasticsearch-when-one-node-is-down/270876)
**Author:** [@linfordwoode](https://discuss.elastic.co/u/linfordwoode)\ **Replies:** 6\ **Last updated:** [April 28, 2021, 1:52pm UTC](https://discuss.elastic.co/t/logstash-ouptut-to-elasticsearch-when-one-node-is-down/270876 "2021-04-28T13:52:52Z")
Logstash sending output to three ES nodes. When one ES node is down, Logstash doesn't forward specific outputs to other nodes, probably because the dead node was receiving the output. For example, in the Logstash conf be… --- ## [Elk container upgrade](https://discuss.elastic.co/t/elk-container-upgrade/197376)
**Author:** [@Walter\_Hiranpat](https://discuss.elastic.co/u/Walter_Hiranpat)\ **Replies:** 6\ **Last updated:** [September 17, 2019, 3:24pm UTC](https://discuss.elastic.co/t/elk-container-upgrade/197376 "2019-09-17T15:24:35Z")
Hello, I have deploy elasticsearch and kibana using docker container with mounted storage. It was at version 6.8 and now I have upgrade to 7.3 so I stoped the container and redeployed it with the new container images. E… --- ## [Multiple Pipeline - Single or multiple events?](https://discuss.elastic.co/t/multiple-pipeline-single-or-multiple-events/125078)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 6\ **Last updated:** [March 29, 2018, 2:54pm UTC](https://discuss.elastic.co/t/multiple-pipeline-single-or-multiple-events/125078 "2018-03-29T14:54:25Z")
I could configure multiple pipelines using logstash setup. But have a generic query on practice. Source from redis cache, but cache key is different for each type of event. Pipelines filters are different for each type… --- ## [Grok filter inquiry](https://discuss.elastic.co/t/grok-filter-inquiry/89064)
**Author:** [@ibrahimsharaf](https://discuss.elastic.co/u/ibrahimsharaf)\ **Replies:** 6\ **Last updated:** [June 13, 2017, 8:43pm UTC](https://discuss.elastic.co/t/grok-filter-inquiry/89064 "2017-06-13T20:43:25Z")
Hello, how to extract a specific word out of a string without spaces, for example: 'stock\_status': 'IN\_STOCK','title\_ar': u'Happy Wedding Card' I want to extract the (IN\_STOCK), I tried: grok{ match =\> \[ "message", … --- ## [Avoiding delete by query to write in logs](https://discuss.elastic.co/t/avoiding-delete-by-query-to-write-in-logs/70711)
**Author:** [@saisn](https://discuss.elastic.co/u/saisn)\ **Replies:** 6\ **Last updated:** [January 9, 2017, 8:47am UTC](https://discuss.elastic.co/t/avoiding-delete-by-query-to-write-in-logs/70711 "2017-01-09T08:47:10Z")
Hi I am using delete by query plugin to delete around 10 million records. However, doing so is eating up my disk space as each document deletion event is recorded in elasticsearch logs file. How can i avoid elasticsearch… --- ## [Configuring "consumer\_threads" for a Kafka input with multiple Logstash instances](https://discuss.elastic.co/t/configuring-consumer-threads-for-a-kafka-input-with-multiple-logstash-instances/363279)
**Author:** [@mmfsilva](https://discuss.elastic.co/u/mmfsilva)\ **Replies:** 4\ **Last updated:** [July 17, 2024, 3:08pm UTC](https://discuss.elastic.co/t/configuring-consumer-threads-for-a-kafka-input-with-multiple-logstash-instances/363279 "2024-07-17T15:08:28Z")
I'm analysing the way a logging stack has been configured and am facing a particular issue. We have 2 Logstash instances. In those two instances, we have two pipelines which are consuming from Kafka. See the input secti… --- ## [All fields are not listed under metric drop down](https://discuss.elastic.co/t/all-fields-are-not-listed-under-metric-drop-down/124789)
**Author:** [@suripaleru](https://discuss.elastic.co/u/suripaleru)\ **Replies:** 4\ **Last updated:** [March 20, 2018, 2:40pm UTC](https://discuss.elastic.co/t/all-fields-are-not-listed-under-metric-drop-down/124789 "2018-03-20T14:40:44Z")
I tried to generate pie chat but I could not see all the fields under Metric which I could see from split slices area. What could be the issue here ? --- ## [Kibana 6.0 not working](https://discuss.elastic.co/t/kibana-6-0-not-working/122011)
**Author:** [@sheen2x](https://discuss.elastic.co/u/sheen2x)\ **Replies:** 4\ **Last updated:** [March 2, 2018, 5:10am UTC](https://discuss.elastic.co/t/kibana-6-0-not-working/122011 "2018-03-02T05:10:26Z")
Hello, I'm having an issue using Kibana. When I'm running the log below is showing. Details: Elasticsearch - AWS ES 6.0.1 Kibana - Kibana 6.0.1 Logs: \[info\]\[status\]\[plugin:kibana@6.0.1\] Status changed from uninitia… --- ## [Document count mismatch in shards](https://discuss.elastic.co/t/document-count-mismatch-in-shards/108640)
**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\ **Replies:** 4\ **Last updated:** [November 22, 2017, 8:08am UTC](https://discuss.elastic.co/t/document-count-mismatch-in-shards/108640 "2017-11-22T08:08:26Z")
HI team, We are often facing doc\_count mismatch between primary and replica shards, Is there any solution for this ? FYI, we are using elasticsearch 1.3.7 and now working hardly for upgradation. Please suggest us and… --- ## [Scaling ELK stack](https://discuss.elastic.co/t/scaling-elk-stack/101416)
**Author:** [@manthan\_patel](https://discuss.elastic.co/u/manthan_patel)\ **Replies:** 4\ **Last updated:** [September 22, 2017, 6:33am UTC](https://discuss.elastic.co/t/scaling-elk-stack/101416 "2017-09-22T06:33:12Z")
Hi, I have ELK stack on AWS. It has capacity of around 5000 UDP msg/sec. I want to scale it up to capacity of 20,000 msg/sec. What would be the recommended architecture for ELK stack. Will it help If I keep N number o… --- ## [\[suggestion\] Filebeat prospector configuration template](https://discuss.elastic.co/t/suggestion-filebeat-prospector-configuration-template/62687)
**Author:** [@fld](https://discuss.elastic.co/u/fld)\ **Replies:** 4\ **Last updated:** [October 26, 2016, 7:25am UTC](https://discuss.elastic.co/t/suggestion-filebeat-prospector-configuration-template/62687 "2016-10-26T07:25:53Z")
We are heavily starting to use filebeat (to push to kafka) and we have a configuration with 100+ prospectors (100+ kafka topics) For each prospector we repeat some parameters like encoding, ignore\_older, scan\_frequency, … --- ## [ESIntegTestCase logging configuration](https://discuss.elastic.co/t/esintegtestcase-logging-configuration/36640)
**Author:** [@zoltan](https://discuss.elastic.co/u/zoltan)\ **Replies:** 4\ **Last updated:** [December 8, 2015, 4:49pm UTC](https://discuss.elastic.co/t/esintegtestcase-logging-configuration/36640 "2015-12-08T16:49:15Z")
How can I configure the logging of an ESIntegeTestCase? Bridging not works via slf4j. I tried to set a custom ESLoggerFactory with a custom noop ESLogger, no luck. Loggers.disableConsoleLogging() had no effect. Is t… --- ## [Add\_cloud\_metadata fails to retrieve instance ID on Oracle Cloud Infrastructure (OCI) in versions after 8.12.0](https://discuss.elastic.co/t/add-cloud-metadata-fails-to-retrieve-instance-id-on-oracle-cloud-infrastructure-oci-in-versions-after-8-12-0/375731)
**Author:** [@daniel\_ferraz](https://discuss.elastic.co/u/daniel_ferraz)\ **Replies:** 1\ **Last updated:** [March 12, 2025, 7:06pm UTC](https://discuss.elastic.co/t/add-cloud-metadata-fails-to-retrieve-instance-id-on-oracle-cloud-infrastructure-oci-in-versions-after-8-12-0/375731 "2025-03-12T19:06:33Z")
I’m opening this discussion to address a regression in Metricbeat versions after 8.12.0, particularly 8.12.2 and later, where instance IDs for OCI are no longer retrieved. In version 8.12.0, these were correctly fetched … --- ## [Transaction table breakdown granularity](https://discuss.elastic.co/t/transaction-table-breakdown-granularity/270178)
**Author:** [@Javier\_Aracil](https://discuss.elastic.co/u/Javier_Aracil)\ **Replies:** 8\ **Last updated:** [May 11, 2021, 5:52pm UTC](https://discuss.elastic.co/t/transaction-table-breakdown-granularity/270178 "2021-05-11T17:52:57Z")
Hello everyone, I am a newbie to Elastic APM, I am currently trying to instrument a great banking application (javascript). In the transaction table I get many URLs of the type POST http: //\/method summariz… --- ## [Scripting - How to find functions / methods in documentation of Elasticsearch](https://discuss.elastic.co/t/scripting-how-to-find-functions-methods-in-documentation-of-elasticsearch/249776)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 8\ **Last updated:** [September 24, 2020, 10:52am UTC](https://discuss.elastic.co/t/scripting-how-to-find-functions-methods-in-documentation-of-elasticsearch/249776 "2020-09-24T10:52:24Z")
Hello, can anyone help me where I can find in documentation of Elasticsearch 7.x statements like: "".equals(ctx\['field'\]) or ctx\['field'\].empty or doc.containsKey('field.keyword')) --- ## [Jaro Winkler for fuzzy seach?](https://discuss.elastic.co/t/jaro-winkler-for-fuzzy-seach/221107)
**Author:** [@deslauriersp](https://discuss.elastic.co/u/deslauriersp)\ **Replies:** 0\ **Last updated:** [February 26, 2020, 8:18pm UTC](https://discuss.elastic.co/t/jaro-winkler-for-fuzzy-seach/221107 "2020-02-26T20:18:51Z")
This has been asked mulitple times, but has not been answered It is possible to configure StringDistance for suggester with JaroWrinkler... But how about fuzzy search? Thanks! --- ## [Rollover index creates a concrete index using alias](https://discuss.elastic.co/t/rollover-index-creates-a-concrete-index-using-alias/144191)
**Author:** [@Akshay\_Deshpande](https://discuss.elastic.co/u/Akshay_Deshpande)\ **Replies:** 0\ **Last updated:** [August 13, 2018, 2:54pm UTC](https://discuss.elastic.co/t/rollover-index-creates-a-concrete-index-using-alias/144191 "2018-08-13T14:54:18Z")
I have a job which runs daily to rollover the index when the creation time is greater than a certain period eg. 167hrs. But sometimes when the job runs, it does not rollover but creates concrete indices of alias. API r… --- ## [Elasticsearch Startup issues](https://discuss.elastic.co/t/elasticsearch-startup-issues/16303)
**Author:** [@P\_lva](https://discuss.elastic.co/u/P_lva)\ **Replies:** 8\ **Last updated:** [March 13, 2014, 7:17pm UTC](https://discuss.elastic.co/t/elasticsearch-startup-issues/16303 "2014-03-13T19:17:46Z")
I get this error at elasticsearch startup Exception in thread "main" java.lang.NoClassDefFoundError: org.apache.lucene.util.Version at org.elasticsearch.Version.(Version.java:42) at java.lang.Class.initiali… --- ## [Kibana Clone Rule/Alert](https://discuss.elastic.co/t/kibana-clone-rule-alert/297639)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 8:26pm UTC](https://discuss.elastic.co/t/kibana-clone-rule-alert/297639 "2022-02-22T20:26:31Z")
Hi All, Is it possible to clone a rule under Stack Management -\> Rules? Currently on 7.17.0, but don't seem to see any option for cloning an existing rule. Would be very helpful in reducing the time it takes to build si… --- ## [High availability of logstash using jdbc plugin](https://discuss.elastic.co/t/high-availability-of-logstash-using-jdbc-plugin/216043)
**Author:** [@naveenbangalore](https://discuss.elastic.co/u/naveenbangalore)\ **Replies:** 2\ **Last updated:** [February 10, 2020, 2:52pm UTC](https://discuss.elastic.co/t/high-availability-of-logstash-using-jdbc-plugin/216043 "2020-02-10T14:52:01Z")
I have a 2 node logstash setup populating the elastic cluster. There are few configs that use the jdbc plugin in the input. Is there a way to setup high availability among the logstash nodes when one of them fails? My qu… [Previous page](https://discuss.elastic.co/top.md?page=1401&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1403&per_page=50&period=all)