# Top

**URL:** https://discuss.elastic.co/top.md?page=1433&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1434

---

## [Scroll search got a no node available exception](https://discuss.elastic.co/t/scroll-search-got-a-no-node-available-exception/13751)

<div class="topic-metadata">

**Author:** [@spancer\_ray](https://discuss.elastic.co/u/spancer_ray)\
**Replies:** 2\
**Last updated:** [September 30, 2013, 3:35am UTC](https://discuss.elastic.co/t/scroll-search-got-a-no-node-available-exception/13751 "2013-09-30T03:35:48Z")

</div>

Hi Guys, I'm using java api to fetching whole index data from one cluster to another, and while using scan, I got the below exception: Exception in thread "main" org.elasticsearch.client.transport.NoNodeAvailab…

---

## [How to count all records in an index/type?](https://discuss.elastic.co/t/how-to-count-all-records-in-an-index-type/5680)

<div class="topic-metadata">

**Author:** [@Frank\_Hsueh](https://discuss.elastic.co/u/Frank_Hsueh)\
**Replies:** 2\
**Last updated:** [October 26, 2011, 3:12am UTC](https://discuss.elastic.co/t/how-to-count-all-records-in-an-index-type/5680 "2011-10-26T03:12:53Z")

</div>

$ curl -XGET 'http://localhost:9200/twitter/tweet/\_count' {"error":"No query to execute, not in body, and not bounded to 'q' parameter"} \<\<\<\< or should I just use a dummy predicate that will always succeed ? -…

---

## [Repository-s3 is not compatible with AWS S3 on OUTPOSTS](https://discuss.elastic.co/t/repository-s3-is-not-compatible-with-aws-s3-on-outposts/340999)

<div class="topic-metadata">

**Author:** [@MatiF99](https://discuss.elastic.co/u/MatiF99)\
**Replies:** 0\
**Last updated:** [August 17, 2023, 10:50am UTC](https://discuss.elastic.co/t/repository-s3-is-not-compatible-with-aws-s3-on-outposts/340999 "2023-08-17T10:50:23Z")

</div>

Hello! I am running Elasticsearch cluster on AWS EC2s in version 7.9.1 on AWS Outposts. I wanted to register snapshot repository on s3 bucket which is in this same Outposts, and I was not able to do it. S3 on outposts …

---

## [One rsyslog port vs multiple syslog ports](https://discuss.elastic.co/t/one-rsyslog-port-vs-multiple-syslog-ports/325668)

<div class="topic-metadata">

**Author:** [@Tiharqa](https://discuss.elastic.co/u/Tiharqa)\
**Replies:** 0\
**Last updated:** [February 16, 2023, 12:24am UTC](https://discuss.elastic.co/t/one-rsyslog-port-vs-multiple-syslog-ports/325668 "2023-02-16T00:24:56Z")

</div>

Trying to decide if I can direct all syslog data from cisco and vmware and f5 to a centralized location running elastic agent as syslog and if elastic supports having multiple integration used would that be ideal set…

---

## [FIlebeat\[8.1.2\] - Juniper module not able to Setup pipeline](https://discuss.elastic.co/t/filebeat-8-1-2-juniper-module-not-able-to-setup-pipeline/302986)

<div class="topic-metadata">

**Author:** [@Azeem\_Ismail](https://discuss.elastic.co/u/Azeem_Ismail)\
**Replies:** 0\
**Last updated:** [April 22, 2022, 6:54am UTC](https://discuss.elastic.co/t/filebeat-8-1-2-juniper-module-not-able-to-setup-pipeline/302986 "2022-04-22T06:54:07Z")

</div>

Hello, After installing filebeat 8.1.3 as an upgrade, Juniper module is not able to setup pipelines. The error received was "Exiting: module juniper is configured but has no enabled filesets" The command ran to setup …

---

## [Migrate from rollover aliases to data streams](https://discuss.elastic.co/t/migrate-from-rollover-aliases-to-data-streams/252161)

<div class="topic-metadata">

**Author:** [@Julien\_HENRY](https://discuss.elastic.co/u/Julien_HENRY)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 9:47am UTC](https://discuss.elastic.co/t/migrate-from-rollover-aliases-to-data-streams/252161 "2020-10-15T09:47:11Z")

</div>

Hi, I'm just discovering the new data stream concept in Elastic Cloud 7.9.2. We are ingesting time based documents, so this seems the perfect fit. Previously, we were using rollover\_alias. I have created the data str…

---

## [Redis : Failed to fetch redis info for keyspaces: read tcp xxx-\>xxx i/o timeout](https://discuss.elastic.co/t/redis-failed-to-fetch-redis-info-for-keyspaces-read-tcp-xxx-xxx-i-o-timeout/299161)

<div class="topic-metadata">

**Author:** [@masyutka](https://discuss.elastic.co/u/masyutka)\
**Replies:** 1\
**Last updated:** [March 15, 2022, 1:28pm UTC](https://discuss.elastic.co/t/redis-failed-to-fetch-redis-info-for-keyspaces-read-tcp-xxx-xxx-i-o-timeout/299161 "2022-03-15T13:28:02Z")

</div>

Hi , I am trying to use metricbeat (version 7.12.1) module for Redis. Redis cluster is managed AWS ElastiCache. Here is config: module: redis metricsets: \["info", "keyspace"\] enabled: true period: 2m Redis host…

---

## [Analyzer not working as expected](https://discuss.elastic.co/t/analyzer-not-working-as-expected/31705)

<div class="topic-metadata">

**Author:** [@Ben\_M](https://discuss.elastic.co/u/Ben_M)\
**Replies:** 5\
**Last updated:** [October 6, 2015, 10:37pm UTC](https://discuss.elastic.co/t/analyzer-not-working-as-expected/31705 "2015-10-06T22:37:50Z")

</div>

I'm trying to run a query for the word "italy" (in a document which contains the word "italian") however it return no results. "italian" does return the result. I've setup an analyzer and have confirmed that it's worki…

---

## [Please keep the old expand document, the new "pop-out" makes everything slow](https://discuss.elastic.co/t/please-keep-the-old-expand-document-the-new-pop-out-makes-everything-slow/322941)

<div class="topic-metadata">

**Author:** [@blommis](https://discuss.elastic.co/u/blommis)\
**Replies:** 6\
**Last updated:** [January 16, 2023, 10:54am UTC](https://discuss.elastic.co/t/please-keep-the-old-expand-document-the-new-pop-out-makes-everything-slow/322941 "2023-01-16T10:54:30Z")

</div>

We just upgraded version and expanding a document in the table is now in a popup covering halv the screen. Before this change it was shown as more details below every row, making it possible to view details on multiple …

---

## [ILM Performance in search](https://discuss.elastic.co/t/ilm-performance-in-search/307951)

<div class="topic-metadata">

**Author:** [@Yariv\_Moshe](https://discuss.elastic.co/u/Yariv_Moshe)\
**Replies:** 6\
**Last updated:** [June 26, 2022, 7:48am UTC](https://discuss.elastic.co/t/ilm-performance-in-search/307951 "2022-06-26T07:48:55Z")

</div>

Hi, I want to use ILM to create a new index per day or month. my question is how it going to affect search performance if old indexes will move to the warm | cold stage with pure HW. let's say that I have a query rang…

---

## [Create temp metadata field using regex in message field and parse json](https://discuss.elastic.co/t/create-temp-metadata-field-using-regex-in-message-field-and-parse-json/244594)

<div class="topic-metadata">

**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\
**Replies:** 6\
**Last updated:** [August 11, 2020, 6:15pm UTC](https://discuss.elastic.co/t/create-temp-metadata-field-using-regex-in-message-field-and-parse-json/244594 "2020-08-11T18:15:12Z")

</div>

I need to extract the JSON object from the message field filter { grok { match =\> { "message" =\> "(?\<\[@metadata\]\[tempjson\]\>{.+})" } } json { source =\> "\[@metadata\]\[tempjson\]" } } Above…

---

## [Alias for Type](https://discuss.elastic.co/t/alias-for-type/12040)

<div class="topic-metadata">

**Author:** [@Benjamin\_Sanders](https://discuss.elastic.co/u/Benjamin_Sanders)\
**Replies:** 6\
**Last updated:** [May 23, 2013, 7:17am UTC](https://discuss.elastic.co/t/alias-for-type/12040 "2013-05-23T07:17:04Z")

</div>

I have seen several requests for the ability to alias types as opposed to only aliasing the indexes. I too would love to see this feature. Is this a feature that is supported and I somehow missed it? Is it in the pla…

---

## [Kafka input slow stop consuming](https://discuss.elastic.co/t/kafka-input-slow-stop-consuming/80867)

<div class="topic-metadata">

**Author:** [@danielmotaleite](https://discuss.elastic.co/u/danielmotaleite)\
**Replies:** 0\
**Last updated:** [March 31, 2017, 7:26pm UTC](https://discuss.elastic.co/t/kafka-input-slow-stop-consuming/80867 "2017-03-31T19:26:49Z")

</div>

Since a few weeks ago, my yellow topic is having problems being consumed, the logstash consumers seem to stop. If i restart logstash, it starts consuming again, but slowly decrease the speed until it stops. I setup a sin…

---

## [Evaluation Cluster - Unable to Scale to Second Zone](https://discuss.elastic.co/t/evaluation-cluster-unable-to-scale-to-second-zone/222967)

<div class="topic-metadata">

**Author:** [@gfidler](https://discuss.elastic.co/u/gfidler)\
**Replies:** 4\
**Last updated:** [March 11, 2020, 12:23pm UTC](https://discuss.elastic.co/t/evaluation-cluster-unable-to-scale-to-second-zone/222967 "2020-03-11T12:23:35Z")

</div>

Summary I am deploying a baseline cluster in AWS for evaluation. The software configuration and deployment on both nodes seems correct, according to the documentation. VM memory settings are default. (I had issues set…

---

## [Prometheus module doesn't work with WildFly 18](https://discuss.elastic.co/t/prometheus-module-doesnt-work-with-wildfly-18/207559)

<div class="topic-metadata">

**Author:** [@rcd](https://discuss.elastic.co/u/rcd)\
**Replies:** 4\
**Last updated:** [November 18, 2019, 10:45pm UTC](https://discuss.elastic.co/t/prometheus-module-doesnt-work-with-wildfly-18/207559 "2019-11-18T22:45:04Z")

</div>

I'm trying to configure Metricbeat to pull statistics from WildFly 18's MicroProfile Metrics subsystem. Internally, that subsystem is implemented using smallrye-metrics. When Metricbeat polls WildFly, the Prometheus modu…

---

## [Elasticsearch did not passed bootstrap](https://discuss.elastic.co/t/elasticsearch-did-not-passed-bootstrap/178791)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 4\
**Last updated:** [April 28, 2019, 3:15pm UTC](https://discuss.elastic.co/t/elasticsearch-did-not-passed-bootstrap/178791 "2019-04-28T15:15:48Z")

</div>

Hello, I am trying to install new elasticsearch using version 7 for log storage. FIrst I have tried to configure it with locked memory I have configured all the requirements that are in the documentation but it did not …

---

## [Failed to fit into the window for new Kibana dashboard after upgrade](https://discuss.elastic.co/t/failed-to-fit-into-the-window-for-new-kibana-dashboard-after-upgrade/105286)

<div class="topic-metadata">

**Author:** [@raj.meka](https://discuss.elastic.co/u/raj.meka)\
**Replies:** 4\
**Last updated:** [November 1, 2017, 9:15pm UTC](https://discuss.elastic.co/t/failed-to-fit-into-the-window-for-new-kibana-dashboard-after-upgrade/105286 "2017-11-01T21:15:33Z")

</div>

\[elk\] We see this issue in new kibana Dashboard, I saved this dashboard as full screen and for some reason it's not fitting into screen. We need to click on to the expand arrow every time to fit into the screen, not s…

---

## [Logstash -- \>kafka --\> logstash](https://discuss.elastic.co/t/logstash-kafka-logstash/92361)

<div class="topic-metadata">

**Author:** [@rsthakur83](https://discuss.elastic.co/u/rsthakur83)\
**Replies:** 4\
**Last updated:** [July 10, 2017, 7:45am UTC](https://discuss.elastic.co/t/logstash-kafka-logstash/92361 "2017-07-10T07:45:01Z")

</div>

Hi , Can someone suggest the step to achieve the below requirement. 1) Logstash collect the logs from apache, application server and pushing to kafka 2) kafka accepting the logs from logstash as input stream and for…

---

## [Distinguish update and create dashboard permission in security](https://discuss.elastic.co/t/distinguish-update-and-create-dashboard-permission-in-security/72457)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 4\
**Last updated:** [February 3, 2017, 1:03am UTC](https://discuss.elastic.co/t/distinguish-update-and-create-dashboard-permission-in-security/72457 "2017-02-03T01:03:19Z")

</div>

Is it possible to distinguish create and update permission for indice priviledge? I have a requirement for this an I am considering to distinguish permission in dashboard for update and creating. I understand that el…

---

## [Date section of filter generating a \_grokparsefailure](https://discuss.elastic.co/t/date-section-of-filter-generating-a--grokparsefailure/73055)

<div class="topic-metadata">

**Author:** [@lexnn](https://discuss.elastic.co/u/lexnn)\
**Replies:** 4\
**Last updated:** [January 31, 2017, 12:56pm UTC](https://discuss.elastic.co/t/date-section-of-filter-generating-a--grokparsefailure/73055 "2017-01-31T12:56:14Z")

</div>

Hi, I'm new to Logstash and I was wondering if someone could point me in the right direction. I'm using Logstash version 2.4 and setup this filter to parse out IIS logs from Azure. If I comment out the data section…

---

## [Parent Child queries running slow](https://discuss.elastic.co/t/parent-child-queries-running-slow/56850)

<div class="topic-metadata">

**Author:** [@bhaskerreddyb](https://discuss.elastic.co/u/bhaskerreddyb)\
**Replies:** 4\
**Last updated:** [August 4, 2016, 8:07am UTC](https://discuss.elastic.co/t/parent-child-queries-running-slow/56850 "2016-08-04T08:07:50Z")

</div>

Here is my current elsticsearch dataset layout. We are using parent child type mapping for our data. We have around 100 million parents and 3 billion childs for this parents. My Index mapping: { geneticsdb\_v4: { mapping…

---

## [Enforcing best\_compression on already optimized indices](https://discuss.elastic.co/t/enforcing-best-compression-on-already-optimized-indices/56140)

<div class="topic-metadata">

**Author:** [@gerry](https://discuss.elastic.co/u/gerry)\
**Replies:** 4\
**Last updated:** [July 22, 2016, 5:44pm UTC](https://discuss.elastic.co/t/enforcing-best-compression-on-already-optimized-indices/56140 "2016-07-22T17:44:29Z")

</div>

As per the topic, is that possible, or do I have to re-index? Thanks!

---

## [Sizing question](https://discuss.elastic.co/t/sizing-question/43536)

<div class="topic-metadata">

**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Replies:** 4\
**Last updated:** [March 4, 2016, 9:25pm UTC](https://discuss.elastic.co/t/sizing-question/43536 "2016-03-04T21:25:07Z")

</div>

Hello, We are storing firewall logs from our networking infrastructure. The biggest user is the fortigate one with this biggest seen daily usage: - 135 GB - 173 332 370 documents But the average is around 60 GB …

---

## [Disabling Field Cache](https://discuss.elastic.co/t/disabling-field-cache/5681)

<div class="topic-metadata">

**Author:** [@phobos182](https://discuss.elastic.co/u/phobos182)\
**Replies:** 4\
**Last updated:** [November 5, 2012, 10:36pm UTC](https://discuss.elastic.co/t/disabling-field-cache/5681 "2012-11-05T22:36:14Z")

</div>

With my current setup of ElasticSearch, I cannot support the memory requirements for the field cache. I was wondering if there has been any thought to turning it off completely. I have a lot of users perform various…

---

## [Bulk API item error types](https://discuss.elastic.co/t/bulk-api-item-error-types/242639)

<div class="topic-metadata">

**Author:** [@Munawwar1](https://discuss.elastic.co/u/Munawwar1)\
**Replies:** 1\
**Last updated:** [July 26, 2020, 12:11pm UTC](https://discuss.elastic.co/t/bulk-api-item-error-types/242639 "2020-07-26T12:11:02Z")

</div>

Hi. I am trying to differentiate validation errors from intermittent errors from bulk index API. So let's say I tried to index 3 documents, and one failed.. I want to retry the indexing only if it was an intermittent er…

---

## [Create a watch with multiple actions each with a different query](https://discuss.elastic.co/t/create-a-watch-with-multiple-actions-each-with-a-different-query/215067)

<div class="topic-metadata">

**Author:** [@Karrie\_Koo](https://discuss.elastic.co/u/Karrie_Koo)\
**Replies:** 1\
**Last updated:** [January 15, 2020, 10:22am UTC](https://discuss.elastic.co/t/create-a-watch-with-multiple-actions-each-with-a-different-query/215067 "2020-01-15T10:22:14Z")

</div>

"input": { "chain": { "inputs": \[ { "first": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "indices\*" \], "types": , "body": { "size": 10, "query": { "bool": { "must": \[ { "s…

---

## [Multiple Field as mapping iD](https://discuss.elastic.co/t/multiple-field-as-mapping-id/135103)

<div class="topic-metadata">

**Author:** [@padhu1989](https://discuss.elastic.co/u/padhu1989)\
**Replies:** 1\
**Last updated:** [June 21, 2018, 3:20pm UTC](https://discuss.elastic.co/t/multiple-field-as-mapping-id/135103 "2018-06-21T15:20:42Z")

</div>

I am pretty new to elastic search. I am using elasticsearch-hadoop 6.2.4 version and I am reading the files from HDFS, converting to bean object and writing to elastic search. I am using Spark Structured streaming. …

---

## [How I can add my custom graph visualization in kibana](https://discuss.elastic.co/t/how-i-can-add-my-custom-graph-visualization-in-kibana/112223)

<div class="topic-metadata">

**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 11:35am UTC](https://discuss.elastic.co/t/how-i-can-add-my-custom-graph-visualization-in-kibana/112223 "2017-12-19T11:35:14Z")

</div>

I have created some graphs and visualization. I want to install it as an kibana plugin. Is someone can help me to configure those visuals into kibana as an plugin. which things i have to remember when I am writing a pl…

---

## [How can i color a field based on other field in kibana table?](https://discuss.elastic.co/t/how-can-i-color-a-field-based-on-other-field-in-kibana-table/66680)

<div class="topic-metadata">

**Author:** [@sabyasachi\_mallick](https://discuss.elastic.co/u/sabyasachi_mallick)\
**Replies:** 1\
**Last updated:** [November 22, 2016, 10:41pm UTC](https://discuss.elastic.co/t/how-can-i-color-a-field-based-on-other-field-in-kibana-table/66680 "2016-11-22T22:41:34Z")

</div>

i am showing a table in kibana dashboard based on data stored on elastic.i want to show different colors which is dependent on value of another column. i.e i have a delta\_time column and a Goal column (both are numeric) …

---

## [CPU spikes to more than 150% on running logstash instance](https://discuss.elastic.co/t/cpu-spikes-to-more-than-150-on-running-logstash-instance/25040)

<div class="topic-metadata">

**Author:** [@Bhavani\_Ananth](https://discuss.elastic.co/u/Bhavani_Ananth)\
**Replies:** 1\
**Last updated:** [July 7, 2015, 1:43pm UTC](https://discuss.elastic.co/t/cpu-spikes-to-more-than-150-on-running-logstash-instance/25040 "2015-07-07T13:43:45Z")

</div>

Hello, I have two ubuntu instances in Amazon with the following configuration. Memory - 62.9 Hard Disk - 197G Hard Disk Available - 184G ard Disk Type: SSD CPU - 8 Core The first instance has logstash setup. It rea…

---

## [Cant monitor windows perfmon counter](https://discuss.elastic.co/t/cant-monitor-windows-perfmon-counter/210726)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 2\
**Last updated:** [December 16, 2019, 2:28pm UTC](https://discuss.elastic.co/t/cant-monitor-windows-perfmon-counter/210726 "2019-12-16T14:28:38Z")

</div>

Hello, I have the following perfmon counter names (Bytes IN) and (Bytes IN/sec) that i want to monitor as the following image show: My modules configuration in my windows.yml file is the following: Module: windows D…

---

## [24:1 ratio](https://discuss.elastic.co/t/24-1-ratio/140081)

<div class="topic-metadata">

**Author:** [@safhw91](https://discuss.elastic.co/u/safhw91)\
**Replies:** 2\
**Last updated:** [July 16, 2018, 6:20am UTC](https://discuss.elastic.co/t/24-1-ratio/140081 "2018-07-16T06:20:01Z")

</div>

Hi! Simple question: is the recommended 24:1 disk:memory ratio using the entire machine's memory or just the memory allocated to Elastic's JVM? E.g. I have a 64GB machine and 30GB is for Elastic (rest for Lucene), does…

---

## [Unable to find watch in the watch store](https://discuss.elastic.co/t/unable-to-find-watch-in-the-watch-store/96854)

<div class="topic-metadata">

**Author:** [@BlackEcho](https://discuss.elastic.co/u/BlackEcho)\
**Replies:** 2\
**Last updated:** [August 15, 2017, 1:25am UTC](https://discuss.elastic.co/t/unable-to-find-watch-in-the-watch-store/96854 "2017-08-15T01:25:03Z")

</div>

I just got my ELK stack with X-Pack setup. For the most part it seems to be working great. I am seeing a lot of warnings in my logs, about unable to find a watch in the watch store, but I haven’t tried to set any watches…

---

## [How to connect the remote MYSQL database](https://discuss.elastic.co/t/how-to-connect-the-remote-mysql-database/96243)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 2\
**Last updated:** [August 8, 2017, 1:20pm UTC](https://discuss.elastic.co/t/how-to-connect-the-remote-mysql-database/96243 "2017-08-08T13:20:35Z")

</div>

I have a Ubuntu server and MySQL Cloud server.i have packetbeat installed in Ubuntu server, and i need to monitor MySQL Cloud server (3306-port). In kibana i cant see any data. 1- Where should i use the (MySQL-host / i…

---

## [Curator 4.2.6 showing Concurrent Snapshot Execution Exception?](https://discuss.elastic.co/t/curator-4-2-6-showing-concurrent-snapshot-execution-exception/88981)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 2\
**Last updated:** [June 15, 2017, 2:38am UTC](https://discuss.elastic.co/t/curator-4-2-6-showing-concurrent-snapshot-execution-exception/88981 "2017-06-15T02:38:53Z")

</div>

Hi, Elasticsearch 2.4.1 My environment has 3 VM's that is hosted on azure and in all the VM's i had installed curator and they are master enabled and in every week i am running 3 snapshots at particular time (9.00AM) …

---

## [ECE Beta1 Setup on CentOS 7](https://discuss.elastic.co/t/ece-beta1-setup-on-centos-7/81523)

<div class="topic-metadata">

**Author:** [@m-kiuchi](https://discuss.elastic.co/u/m-kiuchi)\
**Replies:** 2\
**Last updated:** [April 7, 2017, 2:06pm UTC](https://discuss.elastic.co/t/ece-beta1-setup-on-centos-7/81523 "2017-04-07T14:06:25Z")

</div>

Hi all. I've tried to setup ECE Beta 1 with CentOS 7.3 and stucked.. $ sudo ./elastic-cloud-enterprise-installer.sh --capacity 8192 --debug \[sudo\] password for elastic: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~…

---

## [Non-matched tokens not filtered: pattern\_capture with preserve\_original: false](https://discuss.elastic.co/t/non-matched-tokens-not-filtered-pattern-capture-with-preserve-original-false/40793)

<div class="topic-metadata">

**Author:** [@haight6716](https://discuss.elastic.co/u/haight6716)\
**Replies:** 2\
**Last updated:** [March 6, 2017, 5:47pm UTC](https://discuss.elastic.co/t/non-matched-tokens-not-filtered-pattern-capture-with-preserve-original-false/40793 "2017-03-06T17:47:09Z")

</div>

I have a custom pattern tokenizer that creates tokens which include colon (:). I also have a custom pattern\_capture token filter. I have preserve\_original set to false. The problem is that tokens which don't match an…

---

## [Multiple Elasticsearch documents in Logstash output](https://discuss.elastic.co/t/multiple-elasticsearch-documents-in-logstash-output/57638)

<div class="topic-metadata">

**Author:** [@rpazhyannur](https://discuss.elastic.co/u/rpazhyannur)\
**Replies:** 2\
**Last updated:** [August 10, 2016, 3:37pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-documents-in-logstash-output/57638 "2016-08-10T15:37:22Z")

</div>

I am receiving a JSON object via HTTP Poller and I need to split it up and write into the multiple documents in Elasticsearch. For example, what I get from HTTP poller is something like this { bank:\[ { id: 100, …

---

## [Filtrer selon un intervalle de 2 dates ne me ramène aucun resultat](https://discuss.elastic.co/t/filtrer-selon-un-intervalle-de-2-dates-ne-me-ramene-aucun-resultat/24721)

<div class="topic-metadata">

**Author:** [@Karim\_KOLLI](https://discuss.elastic.co/u/Karim_KOLLI)\
**Replies:** 2\
**Last updated:** [July 1, 2015, 1:49pm UTC](https://discuss.elastic.co/t/filtrer-selon-un-intervalle-de-2-dates-ne-me-ramene-aucun-resultat/24721 "2015-07-01T13:49:13Z")

</div>

Bonjour, Je souhaite realiser une recherche en filtrant un champs (stocké en millisecondes) selon un intervalle de temps. J'utilise un RangeFilter mais la requete ne me ramene rien. Voici mon Code : RangeQueryBuilde…

---

## [Monitor incoming data rates](https://discuss.elastic.co/t/monitor-incoming-data-rates/23164)

<div class="topic-metadata">

**Author:** [@gromit](https://discuss.elastic.co/u/gromit)\
**Replies:** 2\
**Last updated:** [April 9, 2015, 6:12am UTC](https://discuss.elastic.co/t/monitor-incoming-data-rates/23164 "2015-04-09T06:12:49Z")

</div>

I have alerts configured on my Logstash - Elasticsearch setup which perform regular queries to see what state the cluster is in etc. Recently I had a situation where Logstash was running OK and ES cluster was in G…

---

## [Difference between APM Server and APM Integration](https://discuss.elastic.co/t/difference-between-apm-server-and-apm-integration/340985)

<div class="topic-metadata">

**Author:** [@musialny](https://discuss.elastic.co/u/musialny)\
**Replies:** 3\
**Last updated:** [August 20, 2023, 7:15pm UTC](https://discuss.elastic.co/t/difference-between-apm-server-and-apm-integration/340985 "2023-08-20T19:15:46Z")

</div>

What is the difference between APM Server and APM Integration?

---

## [If statement within logstash](https://discuss.elastic.co/t/if-statement-within-logstash/234881)

<div class="topic-metadata">

**Author:** [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\
**Replies:** 3\
**Last updated:** [June 1, 2020, 4:45am UTC](https://discuss.elastic.co/t/if-statement-within-logstash/234881 "2020-06-01T04:45:45Z")

</div>

Hi all, I am trying to create an if-statement within my logstash filter. If follow the documentation on https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html But somehow I am unable to get…

---

## [Records created by elasticsearch api can not show up in Kibana](https://discuss.elastic.co/t/records-created-by-elasticsearch-api-can-not-show-up-in-kibana/108265)

<div class="topic-metadata">

**Author:** [@Harim\_Tong](https://discuss.elastic.co/u/Harim_Tong)\
**Replies:** 3\
**Last updated:** [November 20, 2017, 5:17am UTC](https://discuss.elastic.co/t/records-created-by-elasticsearch-api-can-not-show-up-in-kibana/108265 "2017-11-20T05:17:03Z")

</div>

step1: use API to create the record: POST http://localhost:9200/twitter/tweet/34/\_update { "scripted\_upsert":true, "script" : { "source": "ctx.\_source.name = params.name;", "lang": "painless", …

---

## [Jdbc\_streaming filter - unable to map netflow fields?](https://discuss.elastic.co/t/jdbc-streaming-filter-unable-to-map-netflow-fields/102369)

<div class="topic-metadata">

**Author:** [@djluko](https://discuss.elastic.co/u/djluko)\
**Replies:** 3\
**Last updated:** [October 2, 2017, 7:33am UTC](https://discuss.elastic.co/t/jdbc-streaming-filter-unable-to-map-netflow-fields/102369 "2017-10-02T07:33:41Z")

</div>

Hi all, having trouble mapping fields from netflow records, onto an SQL statement exected by the jdbc\_streaming driver against a MySQL database. Scenario: logstash is configured to read netflow data from UDP port 2055. …

---

## [Logstash-5.0.0 not creating ES index on Windows 10](https://discuss.elastic.co/t/logstash-5-0-0-not-creating-es-index-on-windows-10/65260)

<div class="topic-metadata">

**Author:** [@Aerologic](https://discuss.elastic.co/u/Aerologic)\
**Replies:** 3\
**Last updated:** [November 8, 2016, 12:09am UTC](https://discuss.elastic.co/t/logstash-5-0-0-not-creating-es-index-on-windows-10/65260 "2016-11-08T00:09:58Z")

</div>

Hey all, I've been playing around with Logstash-5.0.0 on Windows 10 for awhile, trying to get it to index some data into Elasticsearch. I currently have Elasticsearch-5.0.0 and Kibana-5.0.0 running and working, but wh…

---

## [Shards and Documents](https://discuss.elastic.co/t/shards-and-documents/50194)

<div class="topic-metadata">

**Author:** [@usahitya](https://discuss.elastic.co/u/usahitya)\
**Replies:** 3\
**Last updated:** [May 18, 2016, 9:54am UTC](https://discuss.elastic.co/t/shards-and-documents/50194 "2016-05-18T09:54:42Z")

</div>

Hi Community, My Linux Box have 16GB RAM, and 500GB Hard disk. Here my doubt is, 1. How many maximum shards I can allocate for my Index? 2. How much Data can A shard accommodate ? As per Documentation, Default sh…

---

## [Can we use elasticsearch do analysis work?](https://discuss.elastic.co/t/can-we-use-elasticsearch-do-analysis-work/43611)

<div class="topic-metadata">

**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\
**Replies:** 3\
**Last updated:** [March 7, 2016, 8:52pm UTC](https://discuss.elastic.co/t/can-we-use-elasticsearch-do-analysis-work/43611 "2016-03-07T20:52:32Z")

</div>

Hi All, Thanks for your interest. I know that elasticsearch announce that some company build cluster including hundreds of computers to do analysis works. I\`m not sure what kind of analysis jobs those company is doing.…

---

## [Beats and Topology Maps](https://discuss.elastic.co/t/beats-and-topology-maps/43259)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [March 2, 2016, 6:23pm UTC](https://discuss.elastic.co/t/beats-and-topology-maps/43259 "2016-03-02T18:23:55Z")

</div>

Hi, In the docs it says that for topology mapping to work elasticsearch must be enabled as an output. In most circumstances users will need to send logs via logstash for sanitisation. So, will it not be that enabling …

---

## [Report Scheduler Solution for ELK - Skedler v1.3 is here](https://discuss.elastic.co/t/report-scheduler-solution-for-elk-skedler-v1-3-is-here/41351)

<div class="topic-metadata">

**Author:** [@Shankar](https://discuss.elastic.co/u/Shankar)\
**Replies:** 0\
**Last updated:** [February 10, 2016, 5:50am UTC](https://discuss.elastic.co/t/report-scheduler-solution-for-elk-skedler-v1-3-is-here/41351 "2016-02-10T05:50:12Z")

</div>

If you are looking for a report scheduler for your ELK application, take a look at Skedler. It is designed to save you significant time, effort, and development cost not to mention the opportunity cost of spending valu…

---

## [How to identify unallocated shards](https://discuss.elastic.co/t/how-to-identify-unallocated-shards/9558)

<div class="topic-metadata">

**Author:** [@Rahul\_Sharma](https://discuss.elastic.co/u/Rahul_Sharma)\
**Replies:** 3\
**Last updated:** [November 6, 2012, 12:03am UTC](https://discuss.elastic.co/t/how-to-identify-unallocated-shards/9558 "2012-11-06T00:03:50Z")

</div>

Hi, I have a production ES (1.9.4) deployed on AWS. Running with 2 nodes 0 replica. It has the default setting of 5 shards while creation of new index. For some reason the master node went down and the other got …

[Previous page](https://discuss.elastic.co/top.md?page=1432&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1434&per_page=50&period=all)
