# Top

**URL:** https://discuss.elastic.co/top.md?page=150&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 151

---

## [Restoring "Stack Monitoring" after 6.8-\>7.2 upgrade](https://discuss.elastic.co/t/restoring-stack-monitoring-after-6-8-7-2-upgrade/189241)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 15\
**Last updated:** [July 15, 2019, 8:37pm UTC](https://discuss.elastic.co/t/restoring-stack-monitoring-after-6-8-7-2-upgrade/189241 "2019-07-15T20:37:17Z")

</div>

So - this functionality used to work. How do I get it back? I've checked and Im collecting all the (seemingly) relevant system indexes: .monitoring-\[kibana|es|logstack\]. When I click on this option in Kibana a panel op…

---

## [Single machine, millions of data, search is very slow](https://discuss.elastic.co/t/single-machine-millions-of-data-search-is-very-slow/135212)

<div class="topic-metadata">

**Author:** [@hubiao](https://discuss.elastic.co/u/hubiao)\
**Replies:** 13\
**Last updated:** [June 11, 2018, 6:16am UTC](https://discuss.elastic.co/t/single-machine-millions-of-data-search-is-very-slow/135212 "2018-06-11T06:16:42Z")

</div>

Environmental Science： Window R2 64 JDK 1.8 ElasticSearch5.5.0 300 million data, 20G index. elasticsearch.yml The configuration is as follows Cluster.name: bropen Node.name: node-1 Transport.tcp.port: 9300 Http.port: …

---

## [Search API error Elasticsearch](https://discuss.elastic.co/t/search-api-error-elasticsearch/274349)

<div class="topic-metadata">

**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\
**Replies:** 11\
**Last updated:** [May 31, 2021, 10:15am UTC](https://discuss.elastic.co/t/search-api-error-elasticsearch/274349 "2021-05-31T10:15:56Z")

</div>

Hello there, When I use python elasticsearch module to query for documents, there seems to be something strange going on: elasticsearch module: version 7.11.2 elasticsearch cluster: version 7.11.2 The following query: …

---

## [Elasticsearch deployment architecture using laptop and a NAS (VM)](https://discuss.elastic.co/t/elasticsearch-deployment-architecture-using-laptop-and-a-nas-vm/223014)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 9\
**Last updated:** [March 12, 2020, 5:04am UTC](https://discuss.elastic.co/t/elasticsearch-deployment-architecture-using-laptop-and-a-nas-vm/223014 "2020-03-12T05:04:11Z")

</div>

Greetings, I want guidance as to following architecture. This is for my studies and is not in enterprise production use. I, however, wish to leverage this as a long term deployment. Hence I am running the architecture t…

---

## [Generate a security token using a admin token?](https://discuss.elastic.co/t/generate-a-security-token-using-a-admin-token/137705)

<div class="topic-metadata">

**Author:** [@BO\_GAO](https://discuss.elastic.co/u/BO_GAO)\
**Replies:** 9\
**Last updated:** [July 2, 2018, 7:52am UTC](https://discuss.elastic.co/t/generate-a-security-token-using-a-admin-token/137705 "2018-07-02T07:52:26Z")

</div>

I am trying to generate a security token when a user is logging in. It has been mentioned in the following documentation that "to generate a token" using a query, we need to include a valid "admin" token in the header. h…

---

## [Watcher migration Invalid Address Error](https://discuss.elastic.co/t/watcher-migration-invalid-address-error/116716)

<div class="topic-metadata">

**Author:** [@AbdulH](https://discuss.elastic.co/u/AbdulH)\
**Replies:** 13\
**Last updated:** [January 25, 2018, 2:00pm UTC](https://discuss.elastic.co/t/watcher-migration-invalid-address-error/116716 "2018-01-25T14:00:50Z")

</div>

I have managed to configure a one node cluster to send out email alerts, with the same configuration on a three node cluster I get the following error: "type": "messaging\_exception", "reason": "failed to send email with…

---

## [Saving ElasticSearch Backups into Google Cloud Storage](https://discuss.elastic.co/t/saving-elasticsearch-backups-into-google-cloud-storage/193535)

<div class="topic-metadata">

**Author:** [@Ab\_Avramidis](https://discuss.elastic.co/u/Ab_Avramidis)\
**Replies:** 12\
**Last updated:** [August 23, 2019, 7:51pm UTC](https://discuss.elastic.co/t/saving-elasticsearch-backups-into-google-cloud-storage/193535 "2019-08-23T19:51:24Z")

</div>

Hello, Currently I am using Elasticsearch "version" : { "number" : "6.8.1" and I am trying to create snapshots to the gce storage But I need your help to explain me something because I am receiving an error when I a…

---

## [Composite aggregation ordered by time over entire data in database](https://discuss.elastic.co/t/composite-aggregation-ordered-by-time-over-entire-data-in-database/227106)

<div class="topic-metadata">

**Author:** [@oridool](https://discuss.elastic.co/u/oridool)\
**Replies:** 9\
**Last updated:** [April 13, 2020, 4:24pm UTC](https://discuss.elastic.co/t/composite-aggregation-ordered-by-time-over-entire-data-in-database/227106 "2020-04-13T16:24:32Z")

</div>

Hello, I have a requirement to return aggregations over multiple fields, and present in UI the returned aggregations order by time descending. I wrote the query below which seems to work. The only problem I noticed is…

---

## [Kibana dashboard sharing with a person who doesn't have kibana](https://discuss.elastic.co/t/kibana-dashboard-sharing-with-a-person-who-doesnt-have-kibana/144033)

<div class="topic-metadata">

**Author:** [@rijoy](https://discuss.elastic.co/u/rijoy)\
**Replies:** 9\
**Last updated:** [August 20, 2018, 9:36pm UTC](https://discuss.elastic.co/t/kibana-dashboard-sharing-with-a-person-who-doesnt-have-kibana/144033 "2018-08-20T21:36:27Z")

</div>

Is it possible to share the kibana dashboard with another person who doesn't have kibana installed in his system ?? If yes, please share the procedure. thank you.

---

## [Signed CLA. Yet PR shows as not signed](https://discuss.elastic.co/t/signed-cla-yet-pr-shows-as-not-signed/221715)

<div class="topic-metadata">

**Author:** [@jibsonline](https://discuss.elastic.co/u/jibsonline)\
**Replies:** 14\
**Last updated:** [March 5, 2020, 5:02pm UTC](https://discuss.elastic.co/t/signed-cla-yet-pr-shows-as-not-signed/221715 "2020-03-05T17:02:06Z")

</div>

Hi, I was trying to raise a PR to fix a documentation issue. The PR didn't pass as I didn't sign the CLA. I signed the CLA and raise the PR again. It still shows the same. I didn't receive the copy also via mail. Is the…

---

## [Kibana URL shows “Not Secure” when HTTPS enabled](https://discuss.elastic.co/t/kibana-url-shows-not-secure-when-https-enabled/342325)

<div class="topic-metadata">

**Author:** [@Nghia\_D\_ng](https://discuss.elastic.co/u/Nghia_D_ng)\
**Replies:** 19\
**Last updated:** [October 2, 2023, 12:59am UTC](https://discuss.elastic.co/t/kibana-url-shows-not-secure-when-https-enabled/342325 "2023-10-02T00:59:10Z")

</div>

Please help me!

---

## [How to get private-key not through UI](https://discuss.elastic.co/t/how-to-get-private-key-not-through-ui/300431)

<div class="topic-metadata">

**Author:** [@ntruongsinh](https://discuss.elastic.co/u/ntruongsinh)\
**Replies:** 13\
**Last updated:** [April 1, 2022, 2:32am UTC](https://discuss.elastic.co/t/how-to-get-private-key-not-through-ui/300431 "2022-04-01T02:32:30Z")

</div>

Hi everyone, Currently, I'm using enterprise-search:7.12.0, I run it through docker. When I want to call some APIs like searching, creating document I have to go to localhost:3002 and copy the private-key from UI to cal…

---

## [Failed to execute progress listener on query failure](https://discuss.elastic.co/t/failed-to-execute-progress-listener-on-query-failure/281852)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 15\
**Last updated:** [August 24, 2021, 2:31pm UTC](https://discuss.elastic.co/t/failed-to-execute-progress-listener-on-query-failure/281852 "2021-08-24T14:31:16Z")

</div>

Although my Elasticsearch SEEMS to be working correctly, Im getting this error in the logs Failed to execute progress listener on query failure Basically I go to Discover, pick any index and this gets logged. I try to …

---

## [Spring Boot + Apache Camel = no transaction](https://discuss.elastic.co/t/spring-boot-apache-camel-no-transaction/283175)

<div class="topic-metadata">

**Author:** [@TidalPoo](https://discuss.elastic.co/u/TidalPoo)\
**Replies:** 14\
**Last updated:** [September 12, 2021, 9:35am UTC](https://discuss.elastic.co/t/spring-boot-apache-camel-no-transaction/283175 "2021-09-12T09:35:02Z")

</div>

Hi! I'am installed elastic+ APM Server in OKD 4.7. All work ok. Added agent to application deployment by manifest containers: - env: - name: JAVA\_TOOL\_OPTIONS value: -javaagent…

---

## [Can't see all fields after importing sample dataset but I can query](https://discuss.elastic.co/t/cant-see-all-fields-after-importing-sample-dataset-but-i-can-query/115752)

<div class="topic-metadata">

**Author:** [@Abdalla\_Sabri](https://discuss.elastic.co/u/Abdalla_Sabri)\
**Replies:** 10\
**Last updated:** [January 16, 2018, 5:10pm UTC](https://discuss.elastic.co/t/cant-see-all-fields-after-importing-sample-dataset-but-i-can-query/115752 "2018-01-16T17:10:13Z")

</div>

Hello, I imported the bank accounts sample dataset (accounts.json) successfully into elastic 5.6.4 then I created my index pattern as ba\* Now in the discover tab, I can do queries like (account\_number:\<100 AND balance:\>…

---

## [Checking if the output.logstash is going to valid host](https://discuss.elastic.co/t/checking-if-the-output-logstash-is-going-to-valid-host/284202)

<div class="topic-metadata">

**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\
**Replies:** 16\
**Last updated:** [September 15, 2021, 1:22pm UTC](https://discuss.elastic.co/t/checking-if-the-output-logstash-is-going-to-valid-host/284202 "2021-09-15T13:22:31Z")

</div>

My goal is to verify that the output.logstash is actually being sent to the proper host. My filebeat configuration is set up like so filebeat.inputs: - input\_type: log paths: - /var/log/\*.log - /var/log/\*/\*.l…

---

## [GeoTile Aggregation](https://discuss.elastic.co/t/geotile-aggregation/225552)

<div class="topic-metadata">

**Author:** [@Nishant\_Gauttam](https://discuss.elastic.co/u/Nishant_Gauttam)\
**Replies:** 9\
**Last updated:** [April 2, 2020, 5:33am UTC](https://discuss.elastic.co/t/geotile-aggregation/225552 "2020-04-02T05:33:27Z")

</div>

I am working on geo data. where I need to show the heatmaps based on aggregation. The data ponts are quite high in volume in any area so looking for some clustering techniques on server side. I came across geotile grid…

---

## [Need help in parsing DMARC report in XML format](https://discuss.elastic.co/t/need-help-in-parsing-dmarc-report-in-xml-format/158446)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 9\
**Last updated:** [December 3, 2018, 5:05pm UTC](https://discuss.elastic.co/t/need-help-in-parsing-dmarc-report-in-xml-format/158446 "2018-12-03T17:05:15Z")

</div>

Hi team, I am receiving XML report for our domain in XML formar and wanted to know if it can parsed using logstash so that data can be visualized in Kibana? Please suggest.

---

## [Filebeat multiline problem with logs containing backticks](https://discuss.elastic.co/t/filebeat-multiline-problem-with-logs-containing-backticks/73357)

<div class="topic-metadata">

**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\
**Replies:** 9\
**Last updated:** [February 6, 2017, 3:51pm UTC](https://discuss.elastic.co/t/filebeat-multiline-problem-with-logs-containing-backticks/73357 "2017-02-06T15:51:05Z")

</div>

I am trying to get multline logs into filebeat from an ASP.Net MVC solution. I noticed a problem when testing out the multiline pattern due to the logs contain backtick\` characters, but hoped it was just due to the multi…

---

## [Création de cluster sous docker](https://discuss.elastic.co/t/creation-de-cluster-sous-docker/238707)

<div class="topic-metadata">

**Author:** [@BenjaminO](https://discuss.elastic.co/u/BenjaminO)\
**Replies:** 10\
**Last updated:** [August 10, 2020, 2:59pm UTC](https://discuss.elastic.co/t/creation-de-cluster-sous-docker/238707 "2020-08-10T14:59:55Z")

</div>

Bonjour, je rencontre un problème pour créer un cluster (3 noeuds) avec elasticsearch. Je précise que j'utilise docker et je n'utilise pas les images officielles elastic pour réaliser cela. Quand je lance ma pile de co…

---

## [Stacked bar graph](https://discuss.elastic.co/t/stacked-bar-graph/341203)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 11\
**Last updated:** [August 23, 2023, 4:24am UTC](https://discuss.elastic.co/t/stacked-bar-graph/341203 "2023-08-23T04:24:48Z")

</div>

Hi i am working on a stacked bar graph, As shown in the image, on x axis i have time on y i have sum of bytes and breakdown by service name. so basically in logs in every entry there is a service name, bytes and time…

---

## [One ES container with n search threads is slower than two containers with n/2 search threads](https://discuss.elastic.co/t/one-es-container-with-n-search-threads-is-slower-than-two-containers-with-n-2-search-threads/256965)

<div class="topic-metadata">

**Author:** [@alexklibisz](https://discuss.elastic.co/u/alexklibisz)\
**Replies:** 18\
**Last updated:** [December 4, 2020, 12:42am UTC](https://discuss.elastic.co/t/one-es-container-with-n-search-threads-is-slower-than-two-containers-with-n-2-search-threads/256965 "2020-12-04T00:42:46Z")

</div>

I'm running a benchmark to optimize for search throughput (i.e. queries/second). The query I'm profiling is a custom query in an Elasticsearch plugin. The query is very similar to the Terms Set Query. I tried one setup …

---

## [Embed visualizations in app plugin](https://discuss.elastic.co/t/embed-visualizations-in-app-plugin/103771)

<div class="topic-metadata">

**Author:** [@havidarou](https://discuss.elastic.co/u/havidarou)\
**Replies:** 11\
**Last updated:** [November 13, 2017, 9:50am UTC](https://discuss.elastic.co/t/embed-visualizations-in-app-plugin/103771 "2017-11-13T09:50:36Z")

</div>

Hi everyone! I saw this PR in Kibana: add API to embed visualizations by ppisljar · Pull Request #14292 · elastic/kibana · GitHub In the sample code, the test\_vis\_app.js controller fills the data for the visualization. …

---

## [Help Needed with Logstash 1.5 OOM error](https://discuss.elastic.co/t/help-needed-with-logstash-1-5-oom-error/2540)

<div class="topic-metadata">

**Author:** [@Rahul\_Durrani](https://discuss.elastic.co/u/Rahul_Durrani)\
**Replies:** 11\
**Last updated:** [June 24, 2015, 6:15am UTC](https://discuss.elastic.co/t/help-needed-with-logstash-1-5-oom-error/2540 "2015-06-24T06:15:49Z")

</div>

I am a newbie at logstash and I am working on setting it up for my environment, but after a few hours of running it logstash crashes with the flowing error Error: Your application used more memory than the safety cap …

---

## [Vega: Access nested fields of a JSON file](https://discuss.elastic.co/t/vega-access-nested-fields-of-a-json-file/258277)

<div class="topic-metadata">

**Author:** [@ege](https://discuss.elastic.co/u/ege)\
**Replies:** 9\
**Last updated:** [December 10, 2020, 4:19pm UTC](https://discuss.elastic.co/t/vega-access-nested-fields-of-a-json-file/258277 "2020-12-10T16:19:49Z")

</div>

Consider the below response for an Elasticsearch query. "aggregations" : { "terms" : { "doc\_count\_error\_upper\_bound" : 0, "sum\_other\_doc\_count" : 0, "buckets" : \[ { "key" : "1", …

---

## [Continous transforms accumulating delay, can be tweak for speed up?](https://discuss.elastic.co/t/continous-transforms-accumulating-delay-can-be-tweak-for-speed-up/239807)

<div class="topic-metadata">

**Author:** [@Germain\_Pavot](https://discuss.elastic.co/u/Germain_Pavot)\
**Replies:** 11\
**Last updated:** [July 6, 2020, 11:34am UTC](https://discuss.elastic.co/t/continous-transforms-accumulating-delay-can-be-tweak-for-speed-up/239807 "2020-07-06T11:34:45Z")

</div>

Hi guys, I use tranforms to create an aggregated index. The setup are : 1 live index with live datas injections. Currently this index receive between 5 and 10 Millions of documents per hour and this will be growth in …

---

## [Warm indices is not compressed](https://discuss.elastic.co/t/warm-indices-is-not-compressed/288288)

<div class="topic-metadata">

**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\
**Replies:** 18\
**Last updated:** [November 4, 2021, 4:59am UTC](https://discuss.elastic.co/t/warm-indices-is-not-compressed/288288 "2021-11-04T04:59:44Z")

</div>

I read on elastic documentation that warm phase could reduce index size, but it didn't state clearly how much index will be compressed on warm phase. It is stated that warm phase also have shrink and force merge featur…

---

## [Can't hit API on non-loopback IP](https://discuss.elastic.co/t/cant-hit-api-on-non-loopback-ip/229048)

<div class="topic-metadata">

**Author:** [@hmcguire](https://discuss.elastic.co/u/hmcguire)\
**Replies:** 20\
**Last updated:** [April 22, 2020, 2:59pm UTC](https://discuss.elastic.co/t/cant-hit-api-on-non-loopback-ip/229048 "2020-04-22T14:59:55Z")

</div>

I have just setup a new dev 7.6.2 single-node cluster via rpm on centos 7 and am unable to curl the API on the non-loopback address. Curl to localhost works fine and I can also telnet to the default port of 9200 of the n…

---

## [DNS Filter Lookup Failures since 6.7 upgrade](https://discuss.elastic.co/t/dns-filter-lookup-failures-since-6-7-upgrade/174577)

<div class="topic-metadata">

**Author:** [@millap](https://discuss.elastic.co/u/millap)\
**Replies:** 13\
**Last updated:** [May 2, 2019, 5:57am UTC](https://discuss.elastic.co/t/dns-filter-lookup-failures-since-6-7-upgrade/174577 "2019-05-02T05:57:44Z")

</div>

Hi Guys, Hoping someone can offer some guidance. Since our LS upgraded to 6.7.0, we've consistently seen issues with LS resolving DNS entries which appears to build over time. E.g - \[logstash.filters.dns \] DNS: timeout…

---

## [Bulk Indexing Problems](https://discuss.elastic.co/t/bulk-indexing-problems/19684)

<div class="topic-metadata">

**Author:** [@Joshua\_P](https://discuss.elastic.co/u/Joshua_P)\
**Replies:** 13\
**Last updated:** [September 10, 2014, 1:32am UTC](https://discuss.elastic.co/t/bulk-indexing-problems/19684 "2014-09-10T01:32:29Z")

</div>

Hi there! I'm trying to do a one-time index of about 800,000 records into an instance of elasticsearch. But I'm having a bit of trouble. It continually fails around 200,000 records. Looking at in the Elasticsearc…

---

## [Cluster state yellow](https://discuss.elastic.co/t/cluster-state-yellow/15226)

<div class="topic-metadata">

**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Replies:** 42\
**Last updated:** [February 10, 2014, 12:40pm UTC](https://discuss.elastic.co/t/cluster-state-yellow/15226 "2014-02-10T12:40:35Z")

</div>

Cluster state is showing yellow. What's the best way to find why it's in yellow state? It has been up and stable so far except when I looked today it shows state turned into yellow. -- You received this message…

---

## [Elastic Search Similarity Not working](https://discuss.elastic.co/t/elastic-search-similarity-not-working/55179)

<div class="topic-metadata">

**Author:** [@Nisar\_Adappadathil](https://discuss.elastic.co/u/Nisar_Adappadathil)\
**Replies:** 11\
**Last updated:** [July 20, 2016, 1:55pm UTC](https://discuss.elastic.co/t/elastic-search-similarity-not-working/55179 "2016-07-20T13:55:06Z")

</div>

Hi Elastic Search version : 1.7.2 I tried giving the custom similarity in both setting and mappings.First I copied the plugin in the ES\_HOME/plugin diredtory (the jar file). Then I unzipped it in the same folder. Then …

---

## [Sending jenkins metrics to elastic APM](https://discuss.elastic.co/t/sending-jenkins-metrics-to-elastic-apm/316727)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 9\
**Last updated:** [October 31, 2022, 7:14am UTC](https://discuss.elastic.co/t/sending-jenkins-metrics-to-elastic-apm/316727 "2022-10-31T07:14:58Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Query on fields of owning document inside nested query](https://discuss.elastic.co/t/query-on-fields-of-owning-document-inside-nested-query/58369)

<div class="topic-metadata">

**Author:** [@rainbowalex](https://discuss.elastic.co/u/rainbowalex)\
**Replies:** 10\
**Last updated:** [August 22, 2016, 10:47am UTC](https://discuss.elastic.co/t/query-on-fields-of-owning-document-inside-nested-query/58369 "2016-08-22T10:47:45Z")

</div>

Is it not possible to query on fields of the owning documents inside a nested query? All I can find is 'reverse nested aggregation', I guess I need a 'reversed nested query' but that doesn't seem to exist. Can someone pr…

---

## [Edge-Ngram returns irrelevant result](https://discuss.elastic.co/t/edge-ngram-returns-irrelevant-result/17226)

<div class="topic-metadata">

**Author:** [@cyrilforce](https://discuss.elastic.co/u/cyrilforce)\
**Replies:** 10\
**Last updated:** [April 30, 2014, 2:21am UTC](https://discuss.elastic.co/t/edge-ngram-returns-irrelevant-result/17226 "2014-04-30T02:21:40Z")

</div>

Hi All, I am trying to use \*edge-ngram filter \*to achieve auto-completion behaviour. However when i run the following query : { "from" : "0", "size" : "20", "explain" : true, "query" : …

---

## [Kibana Server is Not Yet Ready](https://discuss.elastic.co/t/kibana-server-is-not-yet-ready/314156)

<div class="topic-metadata">

**Author:** [@justinepaulpadayao](https://discuss.elastic.co/u/justinepaulpadayao)\
**Replies:** 15\
**Last updated:** [September 13, 2022, 6:54am UTC](https://discuss.elastic.co/t/kibana-server-is-not-yet-ready/314156 "2022-09-13T06:54:19Z")

</div>

Hello! I have trouble setting up my ELK stack as I have faced an issue regarding Kibana. Btw, I have 3 different servers where I will install Elasticsearch, Kibana, and Logstash, separately. Here are some details: In…

---

## [Cluster "green" - but shards not in sync !? 😯](https://discuss.elastic.co/t/cluster-green-but-shards-not-in-sync/268344)

<div class="topic-metadata">

**Author:** [@some\_one](https://discuss.elastic.co/u/some_one)\
**Replies:** 9\
**Last updated:** [March 26, 2021, 11:40am UTC](https://discuss.elastic.co/t/cluster-green-but-shards-not-in-sync/268344 "2021-03-26T11:40:50Z")

</div>

Hello all, we have been using ES productively for quite some time now but today we came across a new problem that we have never seen before: We found two indices in our ES 6.8.14 cluster, each with one shard where prim…

---

## [Separate Monitoring Cluster with Basic License](https://discuss.elastic.co/t/separate-monitoring-cluster-with-basic-license/178101)

<div class="topic-metadata">

**Author:** [@snorris](https://discuss.elastic.co/u/snorris)\
**Replies:** 9\
**Last updated:** [May 2, 2019, 2:24pm UTC](https://discuss.elastic.co/t/separate-monitoring-cluster-with-basic-license/178101 "2019-05-02T14:24:48Z")

</div>

I have established a separate monitoring cluster based on recommended best practices (current ES version 6.5.3). Initially, I followed the instructions listed at https://www.elastic.co/guide/en/kibana/7.0/monitoring-metr…

---

## [Help needed for certificate configuration](https://discuss.elastic.co/t/help-needed-for-certificate-configuration/349194)

<div class="topic-metadata">

**Author:** [@litronics](https://discuss.elastic.co/u/litronics)\
**Replies:** 13\
**Last updated:** [December 18, 2023, 2:14pm UTC](https://discuss.elastic.co/t/help-needed-for-certificate-configuration/349194 "2023-12-18T14:14:11Z")

</div>

Elasticsearch drives me nuts when it comes to certificates and how they are used / configured. This is my current configuration: ## Cluster Settings cluster.name: "elk-tls-cluster" node.name: node-1 network.host: "0.0.…

---

## [No response from server while PUT](https://discuss.elastic.co/t/no-response-from-server-while-put/2906)

<div class="topic-metadata">

**Author:** [@Szymon\_Gwozdz](https://discuss.elastic.co/u/Szymon_Gwozdz)\
**Replies:** 10\
**Last updated:** [April 13, 2010, 3:01pm UTC](https://discuss.elastic.co/t/no-response-from-server-while-put/2906 "2010-04-13T15:01:43Z")

</div>

Hi I've launched elasticsearch server on Linux. I've put some data to server (19 indexes, 176 messages per each index, work directory is about 39 MB). While attempting to put some new data (on 20th index) the serve…

---

## [Create a kibana dashboard for user account lockouts](https://discuss.elastic.co/t/create-a-kibana-dashboard-for-user-account-lockouts/339463)

<div class="topic-metadata">

**Author:** [@kibana\_user17](https://discuss.elastic.co/u/kibana_user17)\
**Replies:** 9\
**Last updated:** [July 31, 2023, 11:07am UTC](https://discuss.elastic.co/t/create-a-kibana-dashboard-for-user-account-lockouts/339463 "2023-07-31T11:07:15Z")

</div>

Hi everyone. i'm very new to elasticsearch. Is it possible to create a dashboard in Kibana showing user account lockouts? If so, how? We used winlogbeat and elasticsearch. Appreciate the help..

---

## [Regexps with lots of punctuation](https://discuss.elastic.co/t/regexps-with-lots-of-punctuation/172819)

<div class="topic-metadata">

**Author:** [@goochjs](https://discuss.elastic.co/u/goochjs)\
**Replies:** 14\
**Last updated:** [March 19, 2019, 4:41pm UTC](https://discuss.elastic.co/t/regexps-with-lots-of-punctuation/172819 "2019-03-19T16:41:00Z")

</div>

Hi, We've got a text field in Elasticsearch into which is being written a JSON document, which has been escaped. We're trying to find instances with a particular pattern of fields in, but cannot formulate the regexp re…

---

## [Изменение родителей в индексе](https://discuss.elastic.co/t/topic/208941)

<div class="topic-metadata">

**Author:** [@Ekaterina\_Nekrasova](https://discuss.elastic.co/u/Ekaterina_Nekrasova)\
**Replies:** 20\
**Last updated:** [November 28, 2019, 9:51am UTC](https://discuss.elastic.co/t/topic/208941 "2019-11-28T09:51:45Z")

</div>

Привет ! я хочу сделать индекс в котором будет два типа Group и Person. Group - Parent, Person - child. в каждую группу может входить несколько людей. проблема в томь что состав групп может менияться, так что мне нужно …

---

## [Packetbeat not sending logs to Logstash](https://discuss.elastic.co/t/packetbeat-not-sending-logs-to-logstash/308607)

<div class="topic-metadata">

**Author:** [@Nightshade](https://discuss.elastic.co/u/Nightshade)\
**Replies:** 16\
**Last updated:** [July 3, 2022, 1:32am UTC](https://discuss.elastic.co/t/packetbeat-not-sending-logs-to-logstash/308607 "2022-07-03T01:32:39Z")

</div>

Alright, the most basic potential problem. I have packetbeat on an Arch Linux system, the beats package for Arch is currently 8.1.3. my ELK stack server is running 8.2x I don't believe this is the problem because the …

---

## [Hybrid RAID 0 and Mutliple Data Paths](https://discuss.elastic.co/t/hybrid-raid-0-and-mutliple-data-paths/60421)

<div class="topic-metadata">

**Author:** [@Transient](https://discuss.elastic.co/u/Transient)\
**Replies:** 9\
**Last updated:** [September 13, 2016, 11:51pm UTC](https://discuss.elastic.co/t/hybrid-raid-0-and-mutliple-data-paths/60421 "2016-09-13T23:51:13Z")

</div>

I'm in the process of designing a cluster and would like to get as much capacity (using SSDs) that I can squeeze out of my budget. I've been reading documentation and various posts regarding the changes to multiple data …

---

## [ML Kibana: problem with an advanced job using partitionfield](https://discuss.elastic.co/t/ml-kibana-problem-with-an-advanced-job-using-partitionfield/187682)

<div class="topic-metadata">

**Author:** [@rnd](https://discuss.elastic.co/u/rnd)\
**Replies:** 17\
**Last updated:** [August 6, 2019, 2:17pm UTC](https://discuss.elastic.co/t/ml-kibana-problem-with-an-advanced-job-using-partitionfield/187682 "2019-08-06T14:17:16Z")

</div>

I used the same dataset to train 2 ML Kibana jobs: count(field\_1) over field\_2 + detector on field\_2 count(field\_1) over field\_2 partitionfield field\_3 + detectors on field\_2 and field\_3 The dataset has a severe anoma…

---

## [Metricbeat cluster sizing](https://discuss.elastic.co/t/metricbeat-cluster-sizing/276872)

<div class="topic-metadata">

**Author:** [@premierpsp](https://discuss.elastic.co/u/premierpsp)\
**Replies:** 16\
**Last updated:** [July 11, 2021, 7:12am UTC](https://discuss.elastic.co/t/metricbeat-cluster-sizing/276872 "2021-07-11T07:12:29Z")

</div>

Hello, I need your help. I’m deploying metricbeat on 3000 servers. The problem is that from 1000 agents loaded, kibana has problems to display the metrics. In fact, there are metrics that kibana cannot display. I think …

---

## [Logstash filter ruby](https://discuss.elastic.co/t/logstash-filter-ruby/235677)

<div class="topic-metadata">

**Author:** [@ajayraghuraj](https://discuss.elastic.co/u/ajayraghuraj)\
**Replies:** 9\
**Last updated:** [June 9, 2020, 1:05pm UTC](https://discuss.elastic.co/t/logstash-filter-ruby/235677 "2020-06-09T13:05:06Z")

</div>

Hi How do I add a new field which is a percentage calculation using ruby filter ? new field called 'MemValuePct' should contain the value of 'type\_instance' in percentage example MemValuePct \[ free / (free +cached …

---

## [ML X-Pack inconsistency in records\_output vs Kibana UI](https://discuss.elastic.co/t/ml-x-pack-inconsistency-in-records-output-vs-kibana-ui/101520)

<div class="topic-metadata">

**Author:** [@Rohithnama](https://discuss.elastic.co/u/Rohithnama)\
**Replies:** 13\
**Last updated:** [October 4, 2017, 3:46pm UTC](https://discuss.elastic.co/t/ml-x-pack-inconsistency-in-records-output-vs-kibana-ui/101520 "2017-10-04T15:46:35Z")

</div>

Hello Again! I encountered an uncertainity in the number of records processed through the ML X-pack API for the following job. \[56 PM\] I have the following questions: What is the difference between last\_date\_time and…

---

## [Fetching Cisco , Firewall logs from syslog-ng server](https://discuss.elastic.co/t/fetching-cisco-firewall-logs-from-syslog-ng-server/233951)

<div class="topic-metadata">

**Author:** [@Ajay\_Singh2](https://discuss.elastic.co/u/Ajay_Singh2)\
**Replies:** 10\
**Last updated:** [June 8, 2020, 1:18pm UTC](https://discuss.elastic.co/t/fetching-cisco-firewall-logs-from-syslog-ng-server/233951 "2020-06-08T13:18:31Z")

</div>

I have a syslog-ng server which gathers data from Cisco Router, switches, netflow data and firewall related data . The data is stored as flat files. Now, i am looking to send those to ELK SIEM . I see that i can use fi…

[Previous page](https://discuss.elastic.co/top.md?page=149&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=151&per_page=50&period=all)
