# Top **URL:** https://discuss.elastic.co/top.md?page=142&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 143 --- ## [Investigate high GC time when indexing](https://discuss.elastic.co/t/investigate-high-gc-time-when-indexing/341154)
**Author:** [@ktech007](https://discuss.elastic.co/u/ktech007)\ **Replies:** 17\ **Last updated:** [August 28, 2023, 7:42pm UTC](https://discuss.elastic.co/t/investigate-high-gc-time-when-indexing/341154 "2023-08-28T19:42:54Z")
Hello, I am looking for some advice as to why we are seeing a high GC time on our Elasticsearch cluster. On average, we see 5 - 8% of GC time across all the nodes. This is the setup we have: 150 data nodes 1000 primar… --- ## [Multiple filters when creating a Metric Threshold](https://discuss.elastic.co/t/multiple-filters-when-creating-a-metric-threshold/342989)
**Author:** [@vsabado](https://discuss.elastic.co/u/vsabado)\ **Replies:** 22\ **Last updated:** [September 14, 2023, 9:17pm UTC](https://discuss.elastic.co/t/multiple-filters-when-creating-a-metric-threshold/342989 "2023-09-14T21:17:24Z")
I'm trying to create a rule in ES using the metric threshold. If I used a single filter, it works fine. But when I use a group of filters strung together using "and", like filter1 and filter2 and filter3, then it the rul… --- ## [Grok pattern is matching but not working](https://discuss.elastic.co/t/grok-pattern-is-matching-but-not-working/153130)
**Author:** [@Diluka](https://discuss.elastic.co/u/Diluka)\ **Replies:** 9\ **Last updated:** [October 19, 2018, 8:42am UTC](https://discuss.elastic.co/t/grok-pattern-is-matching-but-not-working/153130 "2018-10-19T08:42:54Z")
config in pipeline/logstash.conf: filter { grok { match =\> { "message" =\> \[ "\\\[%{TIMESTAMP\_ISO8601:timestamp}\\\] \\\[%{LOGLEVEL:level}\\\] \\\[%{PATH:path}:%{POSINT:line}\\\] \\\[%{WORD:node}\\\] \\\[%{GREEDYDATA:message}\\\]"… --- ## [Panic: runtime error: index out of range goroutine 1 \[running\]: while running metricbeat setup](https://discuss.elastic.co/t/panic-runtime-error-index-out-of-range-goroutine-1-running-while-running-metricbeat-setup/256220)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 11\ **Last updated:** [November 25, 2020, 8:48am UTC](https://discuss.elastic.co/t/panic-runtime-error-index-out-of-range-goroutine-1-running-while-running-metricbeat-setup/256220 "2020-11-25T08:48:37Z")
running metricbeat setup command through ansible but getting below error. Can someone please sugesst where to check to fix this issue. After 2nd playbook run can see this host is skipped or ignored (may be due to when co… --- ## [Logstash Geohash Question](https://discuss.elastic.co/t/logstash-geohash-question/22567)
**Author:** [@David\_Kleiner](https://discuss.elastic.co/u/David_Kleiner)\ **Replies:** 11\ **Last updated:** [March 18, 2015, 9:01pm UTC](https://discuss.elastic.co/t/logstash-geohash-question/22567 "2015-03-18T21:01:30Z")
Hi, Are there any plans to add calculating geohash to Logstash? Now that Kibana4 is out and won't accept geo coordinates for its map visualization... Thanks, David -- You received this message because… --- ## [Transform doesn't recognize all the documents](https://discuss.elastic.co/t/transform-doesnt-recognize-all-the-documents/237591)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 9\ **Last updated:** [June 28, 2020, 6:51pm UTC](https://discuss.elastic.co/t/transform-doesnt-recognize-all-the-documents/237591 "2020-06-28T18:51:49Z")
Hi, I created a new transform and It doesn't recognize all the documents in source index. The source index name is user\_data. The destination index name is session\_data. The transform is so simple: runs on the last … --- ## [Single large bulk import operations results in high merge size that produces an index size that is relatively small](https://discuss.elastic.co/t/single-large-bulk-import-operations-results-in-high-merge-size-that-produces-an-index-size-that-is-relatively-small/29634)
**Author:** [@austin\_lee](https://discuss.elastic.co/u/austin_lee)\ **Replies:** 9\ **Last updated:** [September 22, 2015, 9:10pm UTC](https://discuss.elastic.co/t/single-large-bulk-import-operations-results-in-high-merge-size-that-produces-an-index-size-that-is-relatively-small/29634 "2015-09-22T21:10:29Z")
I'm trying to understand why I'm seeing high memory usage after importing a large number of documents into my cluster. I'm running on ES 1.4.4 in EC2 m3.xlarge, so my machine has about 8GB of committed memory. Also swa… --- ## [Python Authentication Problem](https://discuss.elastic.co/t/python-authentication-problem/343775)
**Author:** [@Somdev\_Das](https://discuss.elastic.co/u/Somdev_Das)\ **Replies:** 16\ **Last updated:** [September 30, 2023, 4:48pm UTC](https://discuss.elastic.co/t/python-authentication-problem/343775 "2023-09-30T16:48:02Z")
Facing this issue, all my path and passwords are ok but not able to authenticate. Please some one help me. --- ## [About the principle of error.grouping\_key](https://discuss.elastic.co/t/about-the-principle-of-error-grouping-key/283622)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 10\ **Last updated:** [September 20, 2021, 1:08am UTC](https://discuss.elastic.co/t/about-the-principle-of-error-grouping-key/283622 "2021-09-20T01:08:24Z")
When service.name, url\_path, and type are the same, why sometimes the id is the same, sometimes not the same id I want to know the error\_group\_id calculated according to what formula？ Is the same event generated… --- ## [Glusterfs - Index Replication across sites](https://discuss.elastic.co/t/glusterfs-index-replication-across-sites/63815)
**Author:** [@Marcio\_Menezes](https://discuss.elastic.co/u/Marcio_Menezes)\ **Replies:** 10\ **Last updated:** [October 25, 2016, 2:25am UTC](https://discuss.elastic.co/t/glusterfs-index-replication-across-sites/63815 "2016-10-25T02:25:22Z")
In order to have a full active-active cross DC setup, what would be the issues of storing the index in a glusterfs replicated volume. Each DC would read and write to its own local replica and GlusterFS would handle the r… --- ## [Security Analytics Recipes - DNS Data Exfiltration](https://discuss.elastic.co/t/security-analytics-recipes-dns-data-exfiltration/226868)
**Author:** [@cezar996](https://discuss.elastic.co/u/cezar996)\ **Replies:** 10\ **Last updated:** [April 10, 2020, 2:21pm UTC](https://discuss.elastic.co/t/security-analytics-recipes-dns-data-exfiltration/226868 "2020-04-10T14:21:02Z")
Hello everybody! I try to implement the Security Analytics Recipe for DNS Data Exfiltration, posted here: github. In order to do this, I use ELK and Packetbeat v. 7.6.2. I took step by step all the explanations in the a… --- ## [Unable to install the logstash-filter-truncate](https://discuss.elastic.co/t/unable-to-install-the-logstash-filter-truncate/84155)
**Author:** [@ktomu](https://discuss.elastic.co/u/ktomu)\ **Replies:** 9\ **Last updated:** [May 2, 2017, 8:49pm UTC](https://discuss.elastic.co/t/unable-to-install-the-logstash-filter-truncate/84155 "2017-05-02T20:49:58Z")
Hello all when I try to install the filter I get the message: bin/logstash-plugin install --no-verify file:///tmp/logstash-filter-truncate-master.zip Installing file: /tmp/logstash-filter-truncate-master.zip ERROR: Inv… --- ## [\[ES 8.6.1\]Elastic agent not deleting SQS message after processing](https://discuss.elastic.co/t/es-8-6-1-elastic-agent-not-deleting-sqs-message-after-processing/325372)
**Author:** [@rubal033](https://discuss.elastic.co/u/rubal033)\ **Replies:** 9\ **Last updated:** [February 23, 2023, 8:57am UTC](https://discuss.elastic.co/t/es-8-6-1-elastic-agent-not-deleting-sqs-message-after-processing/325372 "2023-02-23T08:57:40Z")
Hi I am using Elastic agent integration to monitor ELB logs (via s3-sqs setup). I am able to see ELB logs in Elasticsearch cluster but my SQS inflight messages are keep on increasing. Looks like agent is not able to del… --- ## [Control Visualization List Filtering on scripted metric field](https://discuss.elastic.co/t/control-visualization-list-filtering-on-scripted-metric-field/226286)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 17\ **Last updated:** [July 8, 2020, 3:56pm UTC](https://discuss.elastic.co/t/control-visualization-list-filtering-on-scripted-metric-field/226286 "2020-07-08T15:56:14Z")
I have several Kibana dashboards that use Option List control filters to allow users to easily filter data. Many of the fields that I filter on for the list are scripted fields in the index. This works great most of the … --- ## [Log stash rabbitmq cluster failing](https://discuss.elastic.co/t/log-stash-rabbitmq-cluster-failing/46611)
**Author:** [@rubiconvale](https://discuss.elastic.co/u/rubiconvale)\ **Replies:** 13\ **Last updated:** [April 11, 2016, 11:50pm UTC](https://discuss.elastic.co/t/log-stash-rabbitmq-cluster-failing/46611 "2016-04-11T23:50:38Z")
I have a 3 node cluster of Rabbitmq behind a HAproxy Load Balancer. When I shut down a node, Rabbitmq successfully switches the queue to the other nodes. However, I notice that Logstash stops pulling messages from the qu… --- ## [Extract all jsons from log to one field](https://discuss.elastic.co/t/extract-all-jsons-from-log-to-one-field/215286)
**Author:** [@dardev](https://discuss.elastic.co/u/dardev)\ **Replies:** 9\ **Last updated:** [January 17, 2020, 9:29am UTC](https://discuss.elastic.co/t/extract-all-jsons-from-log-to-one-field/215286 "2020-01-17T09:29:27Z")
Hello, I'm trying to extract few possible jsons from log and put them to one field into an array. This is the example of log I want to parse: This is one of example logs: \[{"lat":12.33,"lng":55.44}\] that I should corr… --- ## [Identifying the cause of an unresponsive ES Cluster](https://discuss.elastic.co/t/identifying-the-cause-of-an-unresponsive-es-cluster/331050)
**Author:** [@viera120](https://discuss.elastic.co/u/viera120)\ **Replies:** 23\ **Last updated:** [May 15, 2023, 8:38am UTC](https://discuss.elastic.co/t/identifying-the-cause-of-an-unresponsive-es-cluster/331050 "2023-05-15T08:38:58Z")
We are running a 3 node cluster to index logs from a firewall. The nodes are VMs (8 Core CPUs, 8GB RAM). The host runs on Intel i7, and has SSD storage. We have Kibana running on one of the nodes. The interface becomes… --- ## [Memory usage of dedicated master-nodes are too high](https://discuss.elastic.co/t/memory-usage-of-dedicated-master-nodes-are-too-high/228987)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 10\ **Last updated:** [May 5, 2020, 1:04pm UTC](https://discuss.elastic.co/t/memory-usage-of-dedicated-master-nodes-are-too-high/228987 "2020-05-05T13:04:08Z")
We have 3 dedicated master-nodes, 3 data-nodes and 2 ingest-nodes. version: 7.3 shards: 3 replica: 1 master nodes- 2vCPUs, 2 GM RAM (For all 3 nodes), data nodes- 4vCPUs, 16 GB RAM (For all 3 nodes), ingest node… --- ## [ES hangs when deleting objects](https://discuss.elastic.co/t/es-hangs-when-deleting-objects/55298)
**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\ **Replies:** 10\ **Last updated:** [July 14, 2016, 9:26am UTC](https://discuss.elastic.co/t/es-hangs-when-deleting-objects/55298 "2016-07-14T09:26:13Z")
Hi, When i try to delete a dashboard, or a visualization ES crashed. It shows me (after several minutes) the status page. head size 1.09 and used 988 MB I search logs from today, but it shows me old logs, starting ye… --- ## [Connection problem with shield plug-in for kibana](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778)
**Author:** [@maximeb](https://discuss.elastic.co/u/maximeb)\ **Replies:** 11\ **Last updated:** [April 19, 2016, 2:40pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778 "2016-04-19T14:40:26Z")
Hello, I have a strange problem, in fact I have configured shield with Kibana and after creating many users I can not connect with any of these users. Thank you for your help. Max --- ## [Kibana throws errors after SSl configuration in configmap kibana.yml](https://discuss.elastic.co/t/kibana-throws-errors-after-ssl-configuration-in-configmap-kibana-yml/224639)
**Author:** [@Abu84](https://discuss.elastic.co/u/Abu84)\ **Replies:** 16\ **Last updated:** [April 10, 2020, 8:57am UTC](https://discuss.elastic.co/t/kibana-throws-errors-after-ssl-configuration-in-configmap-kibana-yml/224639 "2020-04-10T08:57:43Z")
Continuing the discussion from Kibana logging errors after SSl configuration: here is my configuration. This is my complete kibana.yml configuration. server.host: "0.0.0.0" elasticsearch.hosts: \["http://localhost:9200"… --- ## [Delete data by beat.name](https://discuss.elastic.co/t/delete-data-by-beat-name/151860)
**Author:** [@faulander](https://discuss.elastic.co/u/faulander)\ **Replies:** 12\ **Last updated:** [October 11, 2018, 12:03pm UTC](https://discuss.elastic.co/t/delete-data-by-beat-name/151860 "2018-10-11T12:03:49Z")
Hi Guys, Can you point me in the right direction when i want to delete data from a given hostname or beatname? i tried: POST metricbeat-6.4.0-2018.10.10/\_delete\_by\_query { "query": { "match": { "term" : {… --- ## [Nest and a cluster without a master node](https://discuss.elastic.co/t/nest-and-a-cluster-without-a-master-node/128897)
**Author:** [@aslamy1](https://discuss.elastic.co/u/aslamy1)\ **Replies:** 9\ **Last updated:** [April 23, 2018, 11:18am UTC](https://discuss.elastic.co/t/nest-and-a-cluster-without-a-master-node/128897 "2018-04-23T11:18:43Z")
I have a cluster with two nodes. I use discovery.zen.minimum\_master\_nodes : 2 to avoid the splitt brain. When I stop one of this nodes. Nest stops working. {" Invalid NEST response built from a unsuccessful low level … --- ## [Guice creation errors](https://discuss.elastic.co/t/guice-creation-errors/67183)
**Author:** [@jagan](https://discuss.elastic.co/u/jagan)\ **Replies:** 9\ **Last updated:** [November 26, 2016, 9:44am UTC](https://discuss.elastic.co/t/guice-creation-errors/67183 "2016-11-26T09:44:46Z")
Hi All, As per requiements i have to send the data from elasticsearch to cassandra but when everything goes right i.e tables creations,integrations with river plugin,but the issue is (my versions are elasticsearch-1.4.5… --- ## [Logstash-output-elasticsearch for netflow](https://discuss.elastic.co/t/logstash-output-elasticsearch-for-netflow/126505)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 12\ **Last updated:** [April 9, 2018, 12:02am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-for-netflow/126505 "2018-04-09T00:02:45Z")
I've been having this issue fora while now, I've posted on github but the problem is not the netflow codec jorritfolmer has explained why and given me some insight but I thought I ask here for a bit more help Blockq… --- ## [PostgreSQL grok problem](https://discuss.elastic.co/t/postgresql-grok-problem/273284)
**Author:** [@Cihan\_Tunali](https://discuss.elastic.co/u/Cihan_Tunali)\ **Replies:** 11\ **Last updated:** [June 4, 2021, 12:54pm UTC](https://discuss.elastic.co/t/postgresql-grok-problem/273284 "2021-06-04T12:54:15Z")
Hello, I am using PostgreSQL 12 with Filebeat 7.12. I followed (PostgreSQL module | Filebeat Reference \[8.11\] | Elastic) to configure filebeat. Right now Filebeat is sending the logs but I can see, there is a GROK failu… --- ## [Cluster\_name\[elasticsearch\]} with no matching id](https://discuss.elastic.co/t/cluster-name-elasticsearch-with-no-matching-id/12607)
**Author:** [@Henri\_van\_den\_Bulk](https://discuss.elastic.co/u/Henri_van_den_Bulk)\ **Replies:** 12\ **Last updated:** [July 5, 2013, 1:53pm UTC](https://discuss.elastic.co/t/cluster-name-elasticsearch-with-no-matching-id/12607 "2013-07-05T13:53:15Z")
I'm building a simple Java Client same as mentioned posted under Java client can't start a node. But I did not see a resolution there. Both the elastic search node instance and the client are running on my local… --- ## [Kibana Custom visualisation plugin resize issue](https://discuss.elastic.co/t/kibana-custom-visualisation-plugin-resize-issue/101926)
**Author:** [@PRANSHU\_MIDHA](https://discuss.elastic.co/u/PRANSHU_MIDHA)\ **Replies:** 11\ **Last updated:** [October 9, 2017, 3:53am UTC](https://discuss.elastic.co/t/kibana-custom-visualisation-plugin-resize-issue/101926 "2017-10-09T03:53:08Z")
Hi I am developing a custom plugin for visualisation, but the issue is that in the dashboard when I resize the plugin, the size of my visualisation doesn't change with the container. As an alternative I've set a watcher… --- ## [Add operation on log messages](https://discuss.elastic.co/t/add-operation-on-log-messages/289466)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 17\ **Last updated:** [December 3, 2021, 12:27pm UTC](https://discuss.elastic.co/t/add-operation-on-log-messages/289466 "2021-12-03T12:27:59Z")
Hi Team, I have logs, where when bank account is opened i am getting below messages. for APAC - bank account is opened in APAC for EMEA - bank account is opened in EMEA Say for a day, if there was 4 accounts opened… --- ## [Shards just stay in UNASIGNED state after upgrade to 6.6](https://discuss.elastic.co/t/shards-just-stay-in-unasigned-state-after-upgrade-to-6-6/175828)
**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\ **Replies:** 10\ **Last updated:** [April 10, 2019, 2:47pm UTC](https://discuss.elastic.co/t/shards-just-stay-in-unasigned-state-after-upgrade-to-6-6/175828 "2019-04-10T14:47:04Z")
I am preparing to upgrade from elastic 5.6 to 6.6 and before production I did the test upgrade on small 3 cluster environemnt with 48 shards with no replicas. The upgrade seems to went well, no errors. But the status o… --- ## [Intermittent exception using high-level-rest-client. Unable to load a DateTransformer](https://discuss.elastic.co/t/intermittent-exception-using-high-level-rest-client-unable-to-load-a-datetransformer/262375)
**Author:** [@Srikar\_Yekollu](https://discuss.elastic.co/u/Srikar_Yekollu)\ **Replies:** 10\ **Last updated:** [February 5, 2021, 9:29pm UTC](https://discuss.elastic.co/t/intermittent-exception-using-high-level-rest-client-unable-to-load-a-datetransformer/262375 "2021-02-05T21:29:42Z")
Elastic Search Version: 7.9.2 Client: Java: elasticsearch-rest-high-level-client We use elastic search on Kubernetes in AWS. We are noticing these errors sporadically in our server logs. When this happens, all searche… --- ## [Tune Elasticsearch to process thousands of simultaneous searches](https://discuss.elastic.co/t/tune-elasticsearch-to-process-thousands-of-simultaneous-searches/324438)
**Author:** [@aldoorozco](https://discuss.elastic.co/u/aldoorozco)\ **Replies:** 15\ **Last updated:** [February 7, 2023, 6:17pm UTC](https://discuss.elastic.co/t/tune-elasticsearch-to-process-thousands-of-simultaneous-searches/324438 "2023-02-07T18:17:28Z")
I have a question about Elastic Cloud deployments. I created a 3-zone 32 CPU compute-optimized deployment on GCP with just Elasticsearch (hot data nodes and coordinating nodes only) and Kibana enabled, and loaded, using … --- ## [ES and MongoDB integration](https://discuss.elastic.co/t/es-and-mongodb-integration/3230)
**Author:** [@Diptamay](https://discuss.elastic.co/u/Diptamay)\ **Replies:** 16\ **Last updated:** [May 31, 2011, 4:45pm UTC](https://discuss.elastic.co/t/es-and-mongodb-integration/3230 "2011-05-31T16:45:59Z")
Hi All We are pretty much sure that we are going to move our whole CMS backend from Oracle+Memcache to ES+MongoDB. We have already started implementing ES in this regard. The current plan is that the application is… --- ## [How to make unstructured data available in Hadoop for analysis with Elasticsearch?](https://discuss.elastic.co/t/how-to-make-unstructured-data-available-in-hadoop-for-analysis-with-elasticsearch/23032)
**Author:** [@omar\_ben\_salem](https://discuss.elastic.co/u/omar_ben_salem)\ **Replies:** 9\ **Last updated:** [April 1, 2015, 6:05pm UTC](https://discuss.elastic.co/t/how-to-make-unstructured-data-available-in-hadoop-for-analysis-with-elasticsearch/23032 "2015-04-01T18:05:38Z")
Hi everyone, I'm wondering, it possible to make analytics on unstructured data with Elasticsearch? If so? how? Thanks, Omar, -- You received this message because you are subscribed to the Google Groups "elast… --- ## [Creating an OAuth2 Plugin?](https://discuss.elastic.co/t/creating-an-oauth2-plugin/11537)
**Author:** [@Chris\_Berry\_2](https://discuss.elastic.co/u/Chris_Berry_2)\ **Replies:** 9\ **Last updated:** [November 20, 2013, 9:17am UTC](https://discuss.elastic.co/t/creating-an-oauth2-plugin/11537 "2013-11-20T09:17:55Z")
Greetings, We are in the process of building out an Elasticsearch cluster, and we need security. (it's too easy to do scary things to the cluster) Currently we use OAuth2 for Service-to-service security in our SOA … --- ## [Logstash Not Creating new ES indices](https://discuss.elastic.co/t/logstash-not-creating-new-es-indices/39799)
**Author:** [@ToddL](https://discuss.elastic.co/u/ToddL)\ **Replies:** 10\ **Last updated:** [January 26, 2016, 6:59am UTC](https://discuss.elastic.co/t/logstash-not-creating-new-es-indices/39799 "2016-01-26T06:59:45Z")
I am a novice, if that, at ELK. A former co-worker setup our ELK environment to receive data from several McAfee Firewalls, and it was working until the disk ran out of space. I have at least temporarily resolved the … --- ## [Running logstash properly](https://discuss.elastic.co/t/running-logstash-properly/124020)
**Author:** [@retxedue](https://discuss.elastic.co/u/retxedue)\ **Replies:** 15\ **Last updated:** [March 20, 2018, 3:32am UTC](https://discuss.elastic.co/t/running-logstash-properly/124020 "2018-03-20T03:32:36Z")
I have installed my logstash using rpm and enabled it using systemctl. I have to stash a csv file and create table in grafana daily. Do i have to run bin/logstash -f /etc/logstash/conf.d/logstash.config via cron if i wa… --- ## [What happens if data folder is wiped out on individual nodes](https://discuss.elastic.co/t/what-happens-if-data-folder-is-wiped-out-on-individual-nodes/158053)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 11\ **Last updated:** [November 27, 2018, 11:03am UTC](https://discuss.elastic.co/t/what-happens-if-data-folder-is-wiped-out-on-individual-nodes/158053 "2018-11-27T11:03:37Z")
hi, This is a theoretical question at this time. But would like to understand how ES will handle it. Lets say, I have a multi node cluster with sufficient replicas of the indexes. Lets also assume that my installation f… --- ## [No index created - Question from a total noob](https://discuss.elastic.co/t/no-index-created-question-from-a-total-noob/95487)
**Author:** [@Cristian](https://discuss.elastic.co/u/Cristian)\ **Replies:** 11\ **Last updated:** [August 2, 2017, 4:18pm UTC](https://discuss.elastic.co/t/no-index-created-question-from-a-total-noob/95487 "2017-08-02T16:18:00Z")
Hi all! Im trying to create my index from forex-data that I get through an API. Logstash seems to pick up the data but no index is created. Since I never use ES I don’t really know what to look for to understand why the… --- ## [Elasticsearch: Understanding Match query](https://discuss.elastic.co/t/elasticsearch-understanding-match-query/160479)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 15\ **Last updated:** [December 19, 2018, 11:45am UTC](https://discuss.elastic.co/t/elasticsearch-understanding-match-query/160479 "2018-12-19T11:45:53Z")
Hi Team Can you please tell the difference between below two queries? GET /\_search { "query": { "match" : { "message" : "this is a test" } } } GET /\_search { "query": { "match" : { "message" : { "query… --- ## [Indexing performance using transport client](https://discuss.elastic.co/t/indexing-performance-using-transport-client/90959)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 15\ **Last updated:** [July 3, 2017, 9:42am UTC](https://discuss.elastic.co/t/indexing-performance-using-transport-client/90959 "2017-07-03T09:42:19Z")
I am using transport client in my JAVA application. I noticed that indexing operation (indexRequestBuilder.execute().get()) takes up to ~200 ms!!! What can I do in order to check where is the bottleneck? --- ## [How do I assign a second analyzer to my mapping](https://discuss.elastic.co/t/how-do-i-assign-a-second-analyzer-to-my-mapping/109728)
**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\ **Replies:** 17\ **Last updated:** [December 1, 2017, 5:58pm UTC](https://discuss.elastic.co/t/how-do-i-assign-a-second-analyzer-to-my-mapping/109728 "2017-12-01T17:58:31Z")
HI All, Here is my index so far: put fullsiteindex { "settings" : { "number\_of\_shards":3, "number\_of\_replicas":2, "analysis": { "filter": { "my\_stop": { … --- ## [Universal search](https://discuss.elastic.co/t/universal-search/162159)
**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\ **Replies:** 12\ **Last updated:** [December 31, 2018, 9:25pm UTC](https://discuss.elastic.co/t/universal-search/162159 "2018-12-31T21:25:30Z")
Hello to everyone. I have a string "Jhon Abraham 18". I want to create search query that will search by divided by spaces words from the string in an index. This search have to be set to all fields of the index and you… --- ## [X-Pack Error generating PDF report](https://discuss.elastic.co/t/x-pack-error-generating-pdf-report/73556)
**Author:** [@lmalossi](https://discuss.elastic.co/u/lmalossi)\ **Replies:** 12\ **Last updated:** [February 15, 2017, 3:33pm UTC](https://discuss.elastic.co/t/x-pack-error-generating-pdf-report/73556 "2017-02-15T15:33:29Z")
I get the following error where trying to generate report. I'm on Kibana and ES 5.1.2 with X-Pack Trial thanks --- ## [System/socket module stops auditbeat 7.4 from starting (ipv6 detection)](https://discuss.elastic.co/t/system-socket-module-stops-auditbeat-7-4-from-starting-ipv6-detection/201852)
**Author:** [@stephan13360](https://discuss.elastic.co/u/stephan13360)\ **Replies:** 9\ **Last updated:** [October 9, 2019, 3:01pm UTC](https://discuss.elastic.co/t/system-socket-module-stops-auditbeat-7-4-from-starting-ipv6-detection/201852 "2019-10-09T15:01:51Z")
With the update to 7.4 some of my auditbeats now longer start. (for me the ones running on digitalocean). The error is: ERROR instance/beat.go:878 Exiting: 1 error: 1 error: system/socket dataset setup failed: unable t… --- ## [Recommended way to delete an index](https://discuss.elastic.co/t/recommended-way-to-delete-an-index/90769)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 13\ **Last updated:** [July 18, 2017, 12:37am UTC](https://discuss.elastic.co/t/recommended-way-to-delete-an-index/90769 "2017-07-18T00:37:34Z")
If you delete the index using DELETE API, does it clear the fielddata / cache? Or is it suggested that we stop the index before deleting it? I want to make sure that we don't keep increasing memory footprint (JVM/ OS M… --- ## [Filebeat irregularly restarts and crashes](https://discuss.elastic.co/t/filebeat-irregularly-restarts-and-crashes/311819)
**Author:** [@aleaesaest](https://discuss.elastic.co/u/aleaesaest)\ **Replies:** 18\ **Last updated:** [August 12, 2022, 9:32am UTC](https://discuss.elastic.co/t/filebeat-irregularly-restarts-and-crashes/311819 "2022-08-12T09:32:28Z")
Hello, we are using wazuh installed on a VM. Unfortunately, the filebeat service crashes at irregular intervals - after running for a while. I reviewed all the logs I could, but was unable to find the cause of the iss… --- ## [Master node disconnected from a cluster and not connecting back](https://discuss.elastic.co/t/master-node-disconnected-from-a-cluster-and-not-connecting-back/162524)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 15\ **Last updated:** [January 1, 2019, 5:41am UTC](https://discuss.elastic.co/t/master-node-disconnected-from-a-cluster-and-not-connecting-back/162524 "2019-01-01T05:41:25Z")
my elastic cluster was working fine. Then suddenly 1 master node disconnected from cluster and it couldn't connect back. other nodes form a healthy cluster i check the network and firewall and i didn't find anything w… --- ## [Unable to exclude\_lines in filebeat](https://discuss.elastic.co/t/unable-to-exclude-lines-in-filebeat/165215)
**Author:** [@balamelangi](https://discuss.elastic.co/u/balamelangi)\ **Replies:** 21\ **Last updated:** [January 23, 2019, 1:20pm UTC](https://discuss.elastic.co/t/unable-to-exclude-lines-in-filebeat/165215 "2019-01-23T13:20:51Z")
@warkolm Hi. My log line is 2019-01-22 10:25:01,401 ERROR stderr org.jboss.stdio.AbstractLoggingWriter.write(AbstractLoggingWriter.java:71) - URI: urn:pronto.ver600 2019-01-22 10:25:01,401 ERROR stderr org.jboss.stdi… --- ## [Create and alert based on a GROUP BY](https://discuss.elastic.co/t/create-and-alert-based-on-a-group-by/360706)
**Author:** [@Matteo\_Mariotti](https://discuss.elastic.co/u/Matteo_Mariotti)\ **Replies:** 9\ **Last updated:** [September 11, 2024, 8:39pm UTC](https://discuss.elastic.co/t/create-and-alert-based-on-a-group-by/360706 "2024-09-11T20:39:51Z")
Hi Community, I have a system that logs a JSON object containing a user\_id field into a document, and I need to create an alert that notifies me if a user makes more than a certain number of accesses within a certain ti… [Previous page](https://discuss.elastic.co/top.md?page=141&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=143&per_page=50&period=all)