# Top **URL:** https://discuss.elastic.co/top.md?page=1498&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1499 --- ## [Organization scope](https://discuss.elastic.co/t/organization-scope/222680)
**Author:** [@Chen\_Levi](https://discuss.elastic.co/u/Chen_Levi)\ **Replies:** 6\ **Last updated:** [March 27, 2020, 1:27pm UTC](https://discuss.elastic.co/t/organization-scope/222680 "2020-03-27T13:27:17Z")
Hi We were trying to create our first elastic cluster on GCP to be integrates with our gke cluster. The wierd part is that it wasn’t seems like there is an option to create an organization scope and to invite team memb… --- ## [Mutate not converting text to integer](https://discuss.elastic.co/t/mutate-not-converting-text-to-integer/117256)
**Author:** [@mikebw](https://discuss.elastic.co/u/mikebw)\ **Replies:** 6\ **Last updated:** [January 29, 2018, 7:43am UTC](https://discuss.elastic.co/t/mutate-not-converting-text-to-integer/117256 "2018-01-29T07:43:25Z")
I'm trying to grok a field with regexp and convert it to an integer, but it's not converting to an integer. if \[type\] == "server\_log" { grok { match =\> \[ "message", ".\*mediaDurationMs=(?\\\… --- ## [Extra processing during every indexing action](https://discuss.elastic.co/t/extra-processing-during-every-indexing-action/83272)
**Author:** [@Sachin\_Shaju](https://discuss.elastic.co/u/Sachin_Shaju)\ **Replies:** 6\ **Last updated:** [April 25, 2017, 6:05am UTC](https://discuss.elastic.co/t/extra-processing-during-every-indexing-action/83272 "2017-04-25T06:05:21Z")
I would like to have a custom behavior like performing some action/processing on(before/after) every index request to ES and update a field of inserted document after processing. I've done some research on Watcher compon… --- ## [Painless script - variable logging for scoring analysis](https://discuss.elastic.co/t/painless-script-variable-logging-for-scoring-analysis/190167)
**Author:** [@peterkimmy](https://discuss.elastic.co/u/peterkimmy)\ **Replies:** 2\ **Last updated:** [July 20, 2019, 4:04am UTC](https://discuss.elastic.co/t/painless-script-variable-logging-for-scoring-analysis/190167 "2019-07-20T04:04:56Z")
Hello, I am using a painless script to implement a custom scoring function while querying the ES index, that's being used as a basis for our recommendation engine. While calculating the final score in the painless scrip… --- ## [Java Agent Not reporting Data on Tomcat Server](https://discuss.elastic.co/t/java-agent-not-reporting-data-on-tomcat-server/292634)
**Author:** [@Pooja1992](https://discuss.elastic.co/u/Pooja1992)\ **Replies:** 8\ **Last updated:** [January 3, 2022, 6:25am UTC](https://discuss.elastic.co/t/java-agent-not-reporting-data-on-tomcat-server/292634 "2022-01-03T06:25:51Z")
Hi, We have installed Java APM agent for Tomcat Server,but its not reporting data back to the dashboard. Pls suggest possible troubleshooting steps for the same. We r running Kibana on Premise. --- ## [Add An archived Flat File](https://discuss.elastic.co/t/add-an-archived-flat-file/166603)
**Author:** [@macdadi112](https://discuss.elastic.co/u/macdadi112)\ **Replies:** 8\ **Last updated:** [February 1, 2019, 10:43am UTC](https://discuss.elastic.co/t/add-an-archived-flat-file/166603 "2019-02-01T10:43:24Z")
Hi Is there a way in which to view archived files in elastic search from a month ago? Thanks --- ## [Term filter causes memory to spike drastically](https://discuss.elastic.co/t/term-filter-causes-memory-to-spike-drastically/20887)
**Author:** [@Ajay\_Divakaran](https://discuss.elastic.co/u/Ajay_Divakaran)\ **Replies:** 8\ **Last updated:** [November 21, 2014, 6:08pm UTC](https://discuss.elastic.co/t/term-filter-causes-memory-to-spike-drastically/20887 "2014-11-21T18:08:35Z")
The term filter that is used: curl -XGET 'http://localhost:9200/my-index/my-doc-type/\_search' -d '{ "filter": { "term": {"void": false} }, "fields": \[\["user\_id1", "user\_name", "date", "statu… --- ## [\>30s to create an index](https://discuss.elastic.co/t/30s-to-create-an-index/10693)
**Author:** [@Filirom1](https://discuss.elastic.co/u/Filirom1)\ **Replies:** 8\ **Last updated:** [February 13, 2013, 8:38am UTC](https://discuss.elastic.co/t/30s-to-create-an-index/10693 "2013-02-13T08:38:50Z")
Hi guys, On a 4 nodes cluster a new index creation takes more than 30 seconds. Is it something usual ? $ time curl -XPUT http://localhost:9023/test/user/kimchy -d '{ "name" : "Shay Banon" }' {"ok":true,"\_in… --- ## [ES performance issues for 800G data per day](https://discuss.elastic.co/t/es-performance-issues-for-800g-data-per-day/7805)
**Author:** [@Dong\_Aihua](https://discuss.elastic.co/u/Dong_Aihua)\ **Replies:** 8\ **Last updated:** [May 23, 2012, 3:58pm UTC](https://discuss.elastic.co/t/es-performance-issues-for-800g-data-per-day/7805 "2012-05-23T15:58:07Z")
Hi, We plan to use ES to save the logs and search the logs. 800G logs or so will be produced per day. Currently, we are running the performance test for long time. We used 2 machines, 4\*6 cores … --- ## [Update by query performance](https://discuss.elastic.co/t/update-by-query-performance/104599)
**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\ **Replies:** 0\ **Last updated:** [October 19, 2017, 4:49pm UTC](https://discuss.elastic.co/t/update-by-query-performance/104599 "2017-10-19T16:49:12Z")
I have about 100million "parent" documents with about 20 "random" products in a field with an array of these 20 products. These documents includes field values that average and sum values from the 20 products, and these… --- ## [Fleet requires insecure flag to enroll](https://discuss.elastic.co/t/fleet-requires-insecure-flag-to-enroll/277395)
**Author:** [@Jukocross](https://discuss.elastic.co/u/Jukocross)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 3:53pm UTC](https://discuss.elastic.co/t/fleet-requires-insecure-flag-to-enroll/277395 "2021-07-06T15:53:11Z")
I tried setting up TLS with reference to Encrypt traffic in a self-managed cluster | Fleet User Guide \[7.13\] | Elastic. However, I faced Error: fail to enroll: fail to execute request to fleet-server: x509: certificate… --- ## [Bar Chart - Date Range - Display custom date format](https://discuss.elastic.co/t/bar-chart-date-range-display-custom-date-format/251049)
**Author:** [@adahn](https://discuss.elastic.co/u/adahn)\ **Replies:** 1\ **Last updated:** [October 6, 2020, 6:55pm UTC](https://discuss.elastic.co/t/bar-chart-date-range-display-custom-date-format/251049 "2020-10-06T18:55:50Z")
When I set the X axis for the chart by date range, it displays the date/time out to the millisecond. This makes the object very large with lots of whitespace on the dash. Can this be truncated or removed? --- ## [How to send a text file to elasticsearch with rest api](https://discuss.elastic.co/t/how-to-send-a-text-file-to-elasticsearch-with-rest-api/199745)
**Author:** [@atline](https://discuss.elastic.co/u/atline)\ **Replies:** 1\ **Last updated:** [September 17, 2019, 3:26pm UTC](https://discuss.elastic.co/t/how-to-send-a-text-file-to-elasticsearch-with-rest-api/199745 "2019-09-17T15:26:22Z")
I have a log file which I want to send to elasticsearch. log.txt: abc de fg The problem is: If I use filebeat, it will treat every line as a document. Of course, I could set some multiline regular expression, but h… --- ## [Indexの設定変更反映タイミングについて](https://discuss.elastic.co/t/index/135494)
**Author:** [@yuji\_kumada](https://discuss.elastic.co/u/yuji_kumada)\ **Replies:** 1\ **Last updated:** [June 14, 2018, 8:18am UTC](https://discuss.elastic.co/t/index/135494 "2018-06-14T08:18:51Z")
Elasticserach ver1.4.1を使用しています。 Indexの設定変更について refresh\_intervalの設定を変更したいと思っています。 動作が変わる（設定反映される） のはどのタイミングになるでしょうか コマンド実行完了後即時反映でしょうか。 設定反映にクラスタの再起動が必要でしょうか。 ・実行コマンド curl -XPUT 'http://localhost:9200/index名/\_sett… --- ## [Logstash not sending data to elastic search](https://discuss.elastic.co/t/logstash-not-sending-data-to-elastic-search/105515)
**Author:** [@Navinder](https://discuss.elastic.co/u/Navinder)\ **Replies:** 1\ **Last updated:** [October 27, 2017, 6:55am UTC](https://discuss.elastic.co/t/logstash-not-sending-data-to-elastic-search/105515 "2017-10-27T06:55:23Z")
Hi my config file is executed without any error. It's below input { file { type =\> "jetorders" path =\> "/home/app/jetorders\*.csv" start\_position =\> "beginning" sincedb\_path =\> "/home/app/inputorders.log" } file { ty… --- ## [Python DSL vs node.js DSL](https://discuss.elastic.co/t/python-dsl-vs-node-js-dsl/64029)
**Author:** [@NativAt](https://discuss.elastic.co/u/NativAt)\ **Replies:** 1\ **Last updated:** [October 27, 2016, 5:11am UTC](https://discuss.elastic.co/t/python-dsl-vs-node-js-dsl/64029 "2016-10-27T05:11:02Z")
I don't understand why node.js don't have a DSL library like Python does. https://elasticsearch-dsl.readthedocs.io/en/latest/ I'm having an hard time to create a dynamic query on node.js using the js client. Also, Is th… --- ## [How to deal with log archivation?](https://discuss.elastic.co/t/how-to-deal-with-log-archivation/61631)
**Author:** [@budm](https://discuss.elastic.co/u/budm)\ **Replies:** 1\ **Last updated:** [October 3, 2016, 7:20am UTC](https://discuss.elastic.co/t/how-to-deal-with-log-archivation/61631 "2016-10-03T07:20:27Z")
In our project we scheduled archiving of log-files so they do not get too large. But the problem is filebeat harvests files periodically depending on backoff and max\_backoff parameters. But what if some log entry is wr… --- ## [Logstash 2.0 and Zabbix plugin](https://discuss.elastic.co/t/logstash-2-0-and-zabbix-plugin/34392)
**Author:** [@MrAV](https://discuss.elastic.co/u/MrAV)\ **Replies:** 1\ **Last updated:** [November 12, 2015, 5:04pm UTC](https://discuss.elastic.co/t/logstash-2-0-and-zabbix-plugin/34392 "2015-11-12T17:04:38Z")
Hi, I'm trying to run Logstash 2.0.0 with Zabbix output plugin but, unfortunately, receiving an error: ←\[33mField referenced by \[@metadata\]\[zabbix\_key\_quikserv\] is missing {:level=\>:w arn}←\[0m ←\[33mField… --- ## [Kibana data view containing runtime composite fields](https://discuss.elastic.co/t/kibana-data-view-containing-runtime-composite-fields/341586)
**Author:** [@i.raisr](https://discuss.elastic.co/u/i.raisr)\ **Replies:** 2\ **Last updated:** [September 12, 2023, 6:23am UTC](https://discuss.elastic.co/t/kibana-data-view-containing-runtime-composite-fields/341586 "2023-09-12T06:23:13Z")
Kibana data views. Cool stuff and thank you for them! For some stupid reason I cannot figure out how to use "composite" fields in the runtime mapping. Consider the following simple example: { "data\_view": { "id"… --- ## [What happened to the "Gold" subscription?](https://discuss.elastic.co/t/what-happened-to-the-gold-subscription/311506)
**Author:** [@CoaxVex](https://discuss.elastic.co/u/CoaxVex)\ **Replies:** 2\ **Last updated:** [August 15, 2022, 10:36pm UTC](https://discuss.elastic.co/t/what-happened-to-the-gold-subscription/311506 "2022-08-15T22:36:57Z")
I was just made aware that the "Gold" subscription has been discontinued. When did this happen, and what is the reasoning behind it? Is this part of a strategy to push users to the cloud service? Many "Elastic stack" u… --- ## [COMBINEDAPACHELOG grok definition not creating the expected fields](https://discuss.elastic.co/t/combinedapachelog-grok-definition-not-creating-the-expected-fields/300576)
**Author:** [@Patrick\_Lepage](https://discuss.elastic.co/u/Patrick_Lepage)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 5:04pm UTC](https://discuss.elastic.co/t/combinedapachelog-grok-definition-not-creating-the-expected-fields/300576 "2022-03-24T17:04:46Z")
Complete beginner to logstash here... I'm following the "Parsing Logs with Logstash" tutorial. Input comes from filebeat reading a static log file provided with the tutorial; see example of a sample line below. 83.149.… --- ## [Update mapping fails for the elastic (superuser)](https://discuss.elastic.co/t/update-mapping-fails-for-the-elastic-superuser/288450)
**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\ **Replies:** 2\ **Last updated:** [November 5, 2021, 12:31am UTC](https://discuss.elastic.co/t/update-mapping-fails-for-the-elastic-superuser/288450 "2021-11-05T00:31:11Z")
Dear All, We tried to update mapping of an existing field Request: PUT index-name\* { "mappings": { "properties": { "index\_field": { "type": "text", "fields": { "keyword": { … --- ## [Kibana loses visualization edits?](https://discuss.elastic.co/t/kibana-loses-visualization-edits/251548)
**Author:** [@jreusch](https://discuss.elastic.co/u/jreusch)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 1:46pm UTC](https://discuss.elastic.co/t/kibana-loses-visualization-edits/251548 "2020-10-09T13:46:17Z")
Hi folks! I was experimenting with Elasticsearch/Kibana to replace our existing Prometheus/InfluxDB/Grafana setup for monitoring Kubernetes and collecting system logs. I used the Kubernetes Operator to deploy an instan… --- ## [Error parsing xml with XmlSimple: Bad encoding name](https://discuss.elastic.co/t/error-parsing-xml-with-xmlsimple-bad-encoding-name/245147)
**Author:** [@insaneboiz](https://discuss.elastic.co/u/insaneboiz)\ **Replies:** 2\ **Last updated:** [August 17, 2020, 3:58am UTC](https://discuss.elastic.co/t/error-parsing-xml-with-xmlsimple-bad-encoding-name/245147 "2020-08-17T03:58:56Z")
Hi guys, I've been having this trouble with Logstash v7.8.1 and v6.5.4 with EPO Syslog. It's a straight simple XML data, but the XML plugin could not parse it somehow. Sending Logstash logs to /home/XXX/Desktop/logstash… --- ## [Displaying exported Kibana dashboards with JavaScript?](https://discuss.elastic.co/t/displaying-exported-kibana-dashboards-with-javascript/220730)
**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\ **Replies:** 2\ **Last updated:** [February 25, 2020, 5:06pm UTC](https://discuss.elastic.co/t/displaying-exported-kibana-dashboards-with-javascript/220730 "2020-02-25T17:06:29Z")
Hi We are using the Enterprise Elasticsearch and Kibana to do a variety of tasks behind firewalls in client production environments. Primarily we are doing various monitoring tasks and running machine learning models I… --- ## [X-axis and other elements not shown in PhantomJS PNG screenshots](https://discuss.elastic.co/t/x-axis-and-other-elements-not-shown-in-phantomjs-png-screenshots/96237)
**Author:** [@RG089](https://discuss.elastic.co/u/RG089)\ **Replies:** 2\ **Last updated:** [August 9, 2017, 8:33pm UTC](https://discuss.elastic.co/t/x-axis-and-other-elements-not-shown-in-phantomjs-png-screenshots/96237 "2017-08-09T20:33:40Z")
When I'm taking a PNG screenshot with PhantomJS (2.1.1) of a Kibana (5.5.0) dashboard (using MacOS or Ubuntu) it fails to display the graphs correctly. It looks like a CSS issue but I'm not sure where it comes from. The … --- ## [Significant overhead of concurrency control for small docs](https://discuss.elastic.co/t/significant-overhead-of-concurrency-control-for-small-docs/60276)
**Author:** [@Zline](https://discuss.elastic.co/u/Zline)\ **Replies:** 2\ **Last updated:** [September 12, 2016, 12:53pm UTC](https://discuss.elastic.co/t/significant-overhead-of-concurrency-control-for-small-docs/60276 "2016-09-12T12:53:45Z")
Hello, I'm batch-indexing lots of small documents (200-250 bytes each, basically its DB rows) and I see a significant overhead of concurrency control (2-3 times greater than (quite simple) indexing itself): Indexing … --- ## [Not all data return in aggs](https://discuss.elastic.co/t/not-all-data-return-in-aggs/25430)
**Author:** [@Max\_Just](https://discuss.elastic.co/u/Max_Just)\ **Replies:** 2\ **Last updated:** [July 13, 2015, 12:12pm UTC](https://discuss.elastic.co/t/not-all-data-return-in-aggs/25430 "2015-07-13T12:12:09Z")
Hi, I have a query with aggs by name. In the index I have about a 26800 unique names, but in aggs I have returned less then 20 000 of items. Why other items are missed? --- ## [Grok ingest pipeline](https://discuss.elastic.co/t/grok-ingest-pipeline/317708)
**Author:** [@Walter\_Hiranpat1](https://discuss.elastic.co/u/Walter_Hiranpat1)\ **Replies:** 5\ **Last updated:** [November 1, 2022, 2:07am UTC](https://discuss.elastic.co/t/grok-ingest-pipeline/317708 "2022-11-01T02:07:25Z")
I was wondering if there a way to accept all patterns excluding a specific regular expression? --- ## [Can we have different apm service name for subset of microservices](https://discuss.elastic.co/t/can-we-have-different-apm-service-name-for-subset-of-microservices/261095)
**Author:** [@NikeshN](https://discuss.elastic.co/u/NikeshN)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 3:48pm UTC](https://discuss.elastic.co/t/can-we-have-different-apm-service-name-for-subset-of-microservices/261095 "2021-01-21T15:48:16Z")
Hey hi, Can we create a new APM service from a subset of APIs which represent a common business logic, as check logs in one big APM service doesn't make sense Service 1 has multiple child services. Services 5 to 10 are… --- ## [Kibana kubernetes dashboard not found](https://discuss.elastic.co/t/kibana-kubernetes-dashboard-not-found/230616)
**Author:** [@111326](https://discuss.elastic.co/u/111326)\ **Replies:** 5\ **Last updated:** [April 30, 2020, 7:10pm UTC](https://discuss.elastic.co/t/kibana-kubernetes-dashboard-not-found/230616 "2020-04-30T19:10:45Z")
i want use kubernetes dashboard metrics - but get error kibana 7.6.2 --- ## [Geo ip in tile map](https://discuss.elastic.co/t/geo-ip-in-tile-map/103261)
**Author:** [@bm1391](https://discuss.elastic.co/u/bm1391)\ **Replies:** 5\ **Last updated:** [October 9, 2017, 9:40pm UTC](https://discuss.elastic.co/t/geo-ip-in-tile-map/103261 "2017-10-09T21:40:10Z")
Good afternoon, I continue to receive the error " index pattern does not contain any of the following field types: geo\_point " when trying to map via tile map. Here is what my data looks like: { "\_index": "combine-in… --- ## [How to update 5.2.0 to 5.4.0 in elasticsearch,kibana,logstash](https://discuss.elastic.co/t/how-to-update-5-2-0-to-5-4-0-in-elasticsearch-kibana-logstash/88354)
**Author:** [@bvnages](https://discuss.elastic.co/u/bvnages)\ **Replies:** 5\ **Last updated:** [June 6, 2017, 8:25am UTC](https://discuss.elastic.co/t/how-to-update-5-2-0-to-5-4-0-in-elasticsearch-kibana-logstash/88354 "2017-06-06T08:25:58Z")
How to update elasticsearch 5.2.0 to 5.4.0 --- ## [5.x Percolator memory/cache issue](https://discuss.elastic.co/t/5-x-percolator-memory-cache-issue/83892)
**Author:** [@ymetelkin](https://discuss.elastic.co/u/ymetelkin)\ **Replies:** 5\ **Last updated:** [April 28, 2017, 10:48pm UTC](https://discuss.elastic.co/t/5-x-percolator-memory-cache-issue/83892 "2017-04-28T22:48:25Z")
Hi, While testing 5.x percolator we ran into serious performance problems when percolating of a single document could take up to 30 seconds instead of usual 200 ms. Our test is sending documents to percolate in infinit… --- ## [Default path of Geodb in logstash](https://discuss.elastic.co/t/default-path-of-geodb-in-logstash/47210)
**Author:** [@shan](https://discuss.elastic.co/u/shan)\ **Replies:** 5\ **Last updated:** [April 13, 2016, 8:44am UTC](https://discuss.elastic.co/t/default-path-of-geodb-in-logstash/47210 "2016-04-13T08:44:48Z")
Hi, I need to know where Geodb files are referring in logstash ? I have to place the new GeoIP.dat file. Can anyone help on this Thanks --- ## [ELK 6.7.0: Search query match on inexisting fields](https://discuss.elastic.co/t/elk-6-7-0-search-query-match-on-inexisting-fields/175231)
**Author:** [@obuez](https://discuss.elastic.co/u/obuez)\ **Replies:** 3\ **Last updated:** [April 3, 2019, 4:32pm UTC](https://discuss.elastic.co/t/elk-6-7-0-search-query-match-on-inexisting-fields/175231 "2019-04-03T16:32:51Z")
Hi all, I just upgrade elasticsearch and kibana from version 6.5.0 to version 6.7.0 There is an impact on my application as a specific query in kibana is not interpreted the same way as before. ex: field1: "test" AND… --- ## [Is it possible to forward logs from elasticsearch to qradar](https://discuss.elastic.co/t/is-it-possible-to-forward-logs-from-elasticsearch-to-qradar/362769)
**Author:** [@yar](https://discuss.elastic.co/u/yar)\ **Replies:** 3\ **Last updated:** [July 19, 2024, 7:51am UTC](https://discuss.elastic.co/t/is-it-possible-to-forward-logs-from-elasticsearch-to-qradar/362769 "2024-07-19T07:51:40Z")
Hi, I have deployed ELK stack into a couple of VMs. The logs are gathered using fleet agents, and they're being sent into elastic. Is there a way to forward the logs from Elasticsearch to Qradar on-prem deployment? Or s… --- ## [Install Fleet server](https://discuss.elastic.co/t/install-fleet-server/310074)
**Author:** [@Hani\_Atalla](https://discuss.elastic.co/u/Hani_Atalla)\ **Replies:** 3\ **Last updated:** [July 21, 2022, 6:19pm UTC](https://discuss.elastic.co/t/install-fleet-server/310074 "2022-07-21T18:19:44Z")
I am trying to install a Fleet server v 8.3.3 but not having much luck. I tried both the "quick" and "advanced" setups and same error related to certificate. Some notes: Elasticsearch 8.3. 3 is running on host X and o… --- ## [Trying to import a stock price file into Elastic](https://discuss.elastic.co/t/trying-to-import-a-stock-price-file-into-elastic/108716)
**Author:** [@sharon1](https://discuss.elastic.co/u/sharon1)\ **Replies:** 3\ **Last updated:** [November 25, 2017, 10:04am UTC](https://discuss.elastic.co/t/trying-to-import-a-stock-price-file-into-elastic/108716 "2017-11-25T10:04:27Z")
Goodday, I am a newbie and still learning. Am trying to import a stock price file into Elastic. Spent some time to setup a Logstash config file, but didn't succeed. This is the format of the stock price file: 01/08/… --- ## [Detect logstash conf files inside a subdirectory](https://discuss.elastic.co/t/detect-logstash-conf-files-inside-a-subdirectory/105009)
**Author:** [@uLan](https://discuss.elastic.co/u/uLan)\ **Replies:** 3\ **Last updated:** [October 25, 2017, 4:12am UTC](https://discuss.elastic.co/t/detect-logstash-conf-files-inside-a-subdirectory/105009 "2017-10-25T04:12:30Z")
Is it possible for logstash to detect conf files in a subdirectory? For example it's configure right now to look in /etc/logstash/conf.d but my conf files are separated into sub directories e.g. /etc/logstash/conf.d/foo … --- ## [When I run the elasticsearch source, theconsole is print version \[6.0.0-alpha1-SNAPSHOT\] is a pre-release version ofElasticsearch and is not suitable for production](https://discuss.elastic.co/t/when-i-run-the-elasticsearch-source-theconsole-is-print-version-6-0-0-alpha1-snapshot-is-a-pre-release-version-ofelasticsearch-and-is-not-suitable-for-production/83140)
**Author:** [@liuguangmin](https://discuss.elastic.co/u/liuguangmin)\ **Replies:** 3\ **Last updated:** [April 22, 2017, 7:14am UTC](https://discuss.elastic.co/t/when-i-run-the-elasticsearch-source-theconsole-is-print-version-6-0-0-alpha1-snapshot-is-a-pre-release-version-ofelasticsearch-and-is-not-suitable-for-production/83140 "2017-04-22T07:14:24Z")
hi Team , I have ask your a question about run the elasticsearch source code in my local eclipse, my elasticsearch : 5.3.0 jdk:1.8 system:win7 I do allow this step: (1) import elasticsearch 5.3.0 source code into eclipse … --- ## [\[CLOSED / USER ERROR\] Filebeat -\> Logstash multi-line](https://discuss.elastic.co/t/closed-user-error-filebeat-logstash-multi-line/82941)
**Author:** [@gtorrance](https://discuss.elastic.co/u/gtorrance)\ **Replies:** 3\ **Last updated:** [April 20, 2017, 12:58pm UTC](https://discuss.elastic.co/t/closed-user-error-filebeat-logstash-multi-line/82941 "2017-04-20T12:58:40Z")
Hi all, I've searched high and low to get an answer to this, but no success so far. Hope someone can help. I'm trying to get multi-line processing of Java Exceptions to work correctly. My Filebeat configuration conta… --- ## [Upgrade to Kibana and Elasticsearch 5](https://discuss.elastic.co/t/upgrade-to-kibana-and-elasticsearch-5/70726)
**Author:** [@vitgou](https://discuss.elastic.co/u/vitgou)\ **Replies:** 3\ **Last updated:** [January 16, 2017, 11:06am UTC](https://discuss.elastic.co/t/upgrade-to-kibana-and-elasticsearch-5/70726 "2017-01-16T11:06:33Z")
Hi there, I'm trying to upgrade to Kibana and Elasticsearch 5. I followed all the guides and when I check the health of the cluster I get: { "cluster\_name" : "ELK", "status" : "green", "timed\_out" : false, "… --- ## [Using the filter on the visualization page](https://discuss.elastic.co/t/using-the-filter-on-the-visualization-page/42281)
**Author:** [@rheng](https://discuss.elastic.co/u/rheng)\ **Replies:** 3\ **Last updated:** [February 20, 2016, 6:10pm UTC](https://discuss.elastic.co/t/using-the-filter-on-the-visualization-page/42281 "2016-02-20T18:10:30Z")
I'm trying to break down information by months. I'd like to group things that occurred between 1 month and now, 3months to 1 month, etc. I could use the Date Range, but i'd like to use the filter since i could customi… --- ## [Using ElasticSearch for exploratory data analysis](https://discuss.elastic.co/t/using-elasticsearch-for-exploratory-data-analysis/15769)
**Author:** [@Nick\_C](https://discuss.elastic.co/u/Nick_C)\ **Replies:** 3\ **Last updated:** [May 20, 2015, 12:07pm UTC](https://discuss.elastic.co/t/using-elasticsearch-for-exploratory-data-analysis/15769 "2015-05-20T12:07:57Z")
We are building an app to help us keep track of user behaviour on site, similar to Google Analytics. We are logging the data currently, but are looking for a good way to enable exploratory data analysis, i.e. dynam… --- ## [Any support for updateDocValues?](https://discuss.elastic.co/t/any-support-for-updatedocvalues/106752)
**Author:** [@danielcoconnor](https://discuss.elastic.co/u/danielcoconnor)\ **Replies:** 1\ **Last updated:** [November 8, 2017, 10:30am UTC](https://discuss.elastic.co/t/any-support-for-updatedocvalues/106752 "2017-11-08T10:30:36Z")
I've been hunting through the latest documentation and I cannot find any reference to the use of: updateDocValues() -- https://lucene.apache.org/core/6\_0\_1/core/org/apache/lucene/index/IndexWriter.html#updateDocValues-o… --- ## [shard allocated for local recovery (post api), should exists, but doesn't (org.elasticsearch.index.gateway.IndexShardGatewayRecoveryException)](https://discuss.elastic.co/t/shard-allocated-for-local-recovery-post-api-should-exists-but-doesnt-org-elasticsearch-index-gateway-indexshardgatewayrecoveryexception/19627)
**Author:** [@Mathias\_Gawlista](https://discuss.elastic.co/u/Mathias_Gawlista)\ **Replies:** 1\ **Last updated:** [September 5, 2014, 8:32am UTC](https://discuss.elastic.co/t/shard-allocated-for-local-recovery-post-api-should-exists-but-doesnt-org-elasticsearch-index-gateway-indexshardgatewayrecoveryexception/19627 "2014-09-05T08:32:35Z")
--- ## [Adding Documents via REST API in ElasticSearch](https://discuss.elastic.co/t/adding-documents-via-rest-api-in-elasticsearch/343102)
**Author:** [@sanyam](https://discuss.elastic.co/u/sanyam)\ **Replies:** 4\ **Last updated:** [September 15, 2023, 6:45am UTC](https://discuss.elastic.co/t/adding-documents-via-rest-api-in-elasticsearch/343102 "2023-09-15T06:45:18Z")
I am getting this error while trying to run this code to add data/document In Elasticsearch version 6.4.1 in windows curl -X POST "localhost:9200/clusters/\_doc" -H "Content-Type" : application/json -d "{ "field1":"valu… --- ## [Excessive RAM usage, gets OOM killed in logstash](https://discuss.elastic.co/t/excessive-ram-usage-gets-oom-killed-in-logstash/340716)
**Author:** [@tanveer14](https://discuss.elastic.co/u/tanveer14)\ **Replies:** 4\ **Last updated:** [August 16, 2023, 9:05am UTC](https://discuss.elastic.co/t/excessive-ram-usage-gets-oom-killed-in-logstash/340716 "2023-08-16T09:05:30Z")
Hi! I'm running pipelines on logstash. Everything ran smoothly, but the POD went down for a certain amount of time. In values.yml ll set JVM option as "logstashJavaOpts: "-Xmx5g -Xms3g" still end up getting killed by… --- ## [Is there a node limit on the Basic licence? of 7.7](https://discuss.elastic.co/t/is-there-a-node-limit-on-the-basic-licence-of-7-7/236885)
**Author:** [@Anthony\_Whitehead](https://discuss.elastic.co/u/Anthony_Whitehead)\ **Replies:** 4\ **Last updated:** [June 12, 2020, 2:31pm UTC](https://discuss.elastic.co/t/is-there-a-node-limit-on-the-basic-licence-of-7-7/236885 "2020-06-12T14:31:28Z")
A colleague told me that when moving from Elastic 5.6 to 6.8 that the basic licence didn't work as we had more than 100 nodes (on premise). I don't have access to the actual message. Is this correct as I'm investigating… [Previous page](https://discuss.elastic.co/top.md?page=1497&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1499&per_page=50&period=all)