# Top **URL:** https://discuss.elastic.co/top.md?page=1511&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1512 --- ## [Logstash Multiple Grok Add Field](https://discuss.elastic.co/t/logstash-multiple-grok-add-field/141683)
**Author:** [@insomniac](https://discuss.elastic.co/u/insomniac)\ **Replies:** 2\ **Last updated:** [July 27, 2018, 2:19am UTC](https://discuss.elastic.co/t/logstash-multiple-grok-add-field/141683 "2018-07-27T02:19:41Z")
I'm trying to have a single message parse through a hash array of match, and then check the message type after to add a field. grok { match =\> { "message" =\> \[ "%{NOTSPACE:syslogversion}%{SYSLOGTIMESTAMP:timest… --- ## [Visualization directive for a histogram](https://discuss.elastic.co/t/visualization-directive-for-a-histogram/125040)
**Author:** [@jordyd](https://discuss.elastic.co/u/jordyd)\ **Replies:** 2\ **Last updated:** [March 22, 2018, 9:09am UTC](https://discuss.elastic.co/t/visualization-directive-for-a-histogram/125040 "2018-03-22T09:09:15Z")
I'm making my own plugin for Kibana. In my plugin I want to use a visualization to display some data in a histogram. I followed the tutorial on https://www.elastic.co/blog/developing-new-kibana-visualizations, where it s… --- ## [Kibana with Nginx](https://discuss.elastic.co/t/kibana-with-nginx/121019)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 2\ **Last updated:** [February 22, 2018, 12:31pm UTC](https://discuss.elastic.co/t/kibana-with-nginx/121019 "2018-02-22T12:31:22Z")
Hi Kibana Experts, I am using Nginx as reverse proxy + load balancer for Kibana . I am also using simple authentication to restrict the user to their web page . Now, I want to restrict the user so that user cannot open … --- ## [Compare two document in Kibana by string array field](https://discuss.elastic.co/t/compare-two-document-in-kibana-by-string-array-field/96810)
**Author:** [@olegb](https://discuss.elastic.co/u/olegb)\ **Replies:** 2\ **Last updated:** [August 16, 2017, 6:09am UTC](https://discuss.elastic.co/t/compare-two-document-in-kibana-by-string-array-field/96810 "2017-08-16T06:09:43Z")
Hi All please hell me to Compare two document in Kibana by some string array field, that contains a string unique values, No order required. this array string may contain till to 3000 strings thank you in avance --- ## [Why does logstash consume CPU time in idle state?](https://discuss.elastic.co/t/why-does-logstash-consume-cpu-time-in-idle-state/89872)
**Author:** [@ka4ok85](https://discuss.elastic.co/u/ka4ok85)\ **Replies:** 2\ **Last updated:** [June 19, 2017, 3:25am UTC](https://discuss.elastic.co/t/why-does-logstash-consume-cpu-time-in-idle-state/89872 "2017-06-19T03:25:43Z")
I push data to Logstash through Filebeat plugin on hourly basis, nothing else is transferred. My understanding is that during these idle periods Logstash should not consume CPU time. But it does although it is only 1%. I… --- ## [High disk watermark Error while Running Elasticsearch](https://discuss.elastic.co/t/high-disk-watermark-error-while-running-elasticsearch/58262)
**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\ **Replies:** 2\ **Last updated:** [August 18, 2016, 10:57pm UTC](https://discuss.elastic.co/t/high-disk-watermark-error-while-running-elasticsearch/58262 "2016-08-18T22:57:01Z")
Getting the following error while running elastic search. ussjvlx1128 \[6:43\] \[/home/xvivech\] -\> \[2016-08-17 06:44:26,762\]\[WARN \]\[cluster.routing.allocation.decider\] \[Clea\] high disk watermark \[90%\] exceeded on \[ZlnSBDYcQ… --- ## [Filebeat config file error](https://discuss.elastic.co/t/filebeat-config-file-error/56573)
**Author:** [@yomesky20000](https://discuss.elastic.co/u/yomesky20000)\ **Replies:** 2\ **Last updated:** [July 28, 2016, 12:09pm UTC](https://discuss.elastic.co/t/filebeat-config-file-error/56573 "2016-07-28T12:09:34Z")
I am trying to start Filebeats on a clients server to ship log to my ELK server and im getting the below error service filebeat start Starting filebeat: Loading config file error: YAML config parsing failed on /etc/f… --- ## [Logstash error when starting "logstash: no such user"](https://discuss.elastic.co/t/logstash-error-when-starting-logstash-no-such-user/51200)
**Author:** [@yeaiforgot](https://discuss.elastic.co/u/yeaiforgot)\ **Replies:** 2\ **Last updated:** [June 4, 2016, 7:09pm UTC](https://discuss.elastic.co/t/logstash-error-when-starting-logstash-no-such-user/51200 "2016-06-04T19:09:06Z")
Hi all! I'm running ELK on a CentOS 7 server and running into an issue when trying to start Logstash. Belos is some output from Logstash status. May 27 14:06:29 x.x.x.com logstash\[3896\]: id: logstash: no such user T… --- ## [Sample custom plugin fails to recognize "custom" type during load](https://discuss.elastic.co/t/sample-custom-plugin-fails-to-recognize-custom-type-during-load/40660)
**Author:** [@vrodrigo](https://discuss.elastic.co/u/vrodrigo)\ **Replies:** 2\ **Last updated:** [February 1, 2016, 11:19pm UTC](https://discuss.elastic.co/t/sample-custom-plugin-fails-to-recognize-custom-type-during-load/40660 "2016-02-01T23:19:36Z")
Hello, We are trying to implement shield to authenticate user access to elastic. Since the currently supported realms require user/pwd to be passed in the header and we dont have access to the logged in users pwd, we are… --- ## [Watcher Version for Dev/QA Environments](https://discuss.elastic.co/t/watcher-version-for-dev-qa-environments/23875)
**Author:** [@prashant\_sharma](https://discuss.elastic.co/u/prashant_sharma)\ **Replies:** 2\ **Last updated:** [June 18, 2015, 11:55am UTC](https://discuss.elastic.co/t/watcher-version-for-dev-qa-environments/23875 "2015-06-18T11:55:14Z")
Is there a way to get a Dev Version of Watcher which does not require license. Needed for Development and testing purposes for multiple teams. --- ## [How to change mapping name?](https://discuss.elastic.co/t/how-to-change-mapping-name/14986)
**Author:** [@sada](https://discuss.elastic.co/u/sada)\ **Replies:** 2\ **Last updated:** [December 28, 2013, 1:32pm UTC](https://discuss.elastic.co/t/how-to-change-mapping-name/14986 "2013-12-28T13:32:55Z")
Hi! After reindex I have a new name index and mapping (type). To use the old name of the index, i can add aliases. Is it possible to easily change the mapping name (type)? --- ## [Identify similar/related keywords](https://discuss.elastic.co/t/identify-similar-related-keywords/8504)
**Author:** [@Leandro\_Boscariol](https://discuss.elastic.co/u/Leandro_Boscariol)\ **Replies:** 2\ **Last updated:** [July 25, 2012, 12:23pm UTC](https://discuss.elastic.co/t/identify-similar-related-keywords/8504 "2012-07-25T12:23:29Z")
Hello everyone. First of all, ElasticSearch is amazing, thanks for that! Getting down to business, I'm trying to use ElasticSearch for identifying similar and related keywords. The objective is be able to tell wi… --- ## [Logstash MongoDB Output Plugin - command insert requires authentication](https://discuss.elastic.co/t/logstash-mongodb-output-plugin-command-insert-requires-authentication/268265)
**Author:** [@christiancj](https://discuss.elastic.co/u/christiancj)\ **Replies:** 1\ **Last updated:** [March 24, 2021, 9:29pm UTC](https://discuss.elastic.co/t/logstash-mongodb-output-plugin-command-insert-requires-authentication/268265 "2021-03-24T21:29:32Z")
I'm using logstash 7.10.2 with MongoDB logstash-output plugin (tested 2 diff versions), I'm trying to write documents from elastic to mongodb, however I'm getting the following errors for each version, plugin version l… --- ## [Unable to Remove Plugin standard / custom](https://discuss.elastic.co/t/unable-to-remove-plugin-standard-custom/211027)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 1\ **Last updated:** [December 9, 2019, 3:30pm UTC](https://discuss.elastic.co/t/unable-to-remove-plugin-standard-custom/211027 "2019-12-09T15:30:05Z")
Hi All I am not able to remove the plugin with any 6.x version. I have installed the custom plugin \` bin/logstash-plugin remove logstash-output-xxx \` ERROR: Operation aborted, cannot remove plugin, message: The pa… --- ## [Disk usage missing from kibana dashboard](https://discuss.elastic.co/t/disk-usage-missing-from-kibana-dashboard/124360)
**Author:** [@Alex\_Mendez](https://discuss.elastic.co/u/Alex_Mendez)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 9:15am UTC](https://discuss.elastic.co/t/disk-usage-missing-from-kibana-dashboard/124360 "2018-03-20T09:15:00Z")
The disk usage is empty for all clients on kibana, below is the metric beat config. If someone could explain how to troubleshoot this, where to begin to even look. I would appreciate it and a fix would be awesome too. … --- ## [Terms Aggregation on billions of documents](https://discuss.elastic.co/t/terms-aggregation-on-billions-of-documents/103326)
**Author:** [@bevans88](https://discuss.elastic.co/u/bevans88)\ **Replies:** 1\ **Last updated:** [October 11, 2017, 8:02am UTC](https://discuss.elastic.co/t/terms-aggregation-on-billions-of-documents/103326 "2017-10-11T08:02:07Z")
Hi, I'm wondering if anyone has any experience with running terms aggregations, with a sub sum aggregation, on a very large index (~100 billion documents). The documents themselves are relatively small (~20 fields). Som… --- ## [/internal/bsearch returned 405 - not allowed in Kibana Discover screen](https://discuss.elastic.co/t/internal-bsearch-returned-405-not-allowed-in-kibana-discover-screen/319366)
**Author:** [@david-n](https://discuss.elastic.co/u/david-n)\ **Replies:** 3\ **Last updated:** [December 1, 2022, 3:09pm UTC](https://discuss.elastic.co/t/internal-bsearch-returned-405-not-allowed-in-kibana-discover-screen/319366 "2022-12-01T15:09:03Z")
Hello everyone, I'm working on an application to analyze my spending. The idea is to store all bank account transactions in Elasticsearch and analyze them using Kibana. For now I have a local development environment bas… --- ## [Kibana Dashboard align all visualiazations to left](https://discuss.elastic.co/t/kibana-dashboard-align-all-visualiazations-to-left/278659)
**Author:** [@sandy13sharma2006](https://discuss.elastic.co/u/sandy13sharma2006)\ **Replies:** 3\ **Last updated:** [July 15, 2021, 2:34pm UTC](https://discuss.elastic.co/t/kibana-dashboard-align-all-visualiazations-to-left/278659 "2021-07-15T14:34:05Z")
Hi Team, I'm using Elasticsearch 7.11.2 and Kibana 7.11.2 docker image when I trying to access the Dashboard, all visualizations are getting align to left side as per image. All respective visualizations and index-patte… --- ## [Does Elasticsearch 7.11 not supported by ECK operator](https://discuss.elastic.co/t/does-elasticsearch-7-11-not-supported-by-eck-operator/268984)
**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\ **Replies:** 3\ **Last updated:** [April 1, 2021, 2:44pm UTC](https://discuss.elastic.co/t/does-elasticsearch-7-11-not-supported-by-eck-operator/268984 "2021-04-01T14:44:07Z")
Hi, I trying to deploy the Elasticsearch 7.11.0 version cluster using eck operator 1.3 version, it fails in init container elastic-internal-init-filesystem . It says unsupported\_distribution Is 7.11 version not suppor… --- ## [Elasticsearch installation failed for some reason](https://discuss.elastic.co/t/elasticsearch-installation-failed-for-some-reason/240612)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 3\ **Last updated:** [July 10, 2020, 5:47pm UTC](https://discuss.elastic.co/t/elasticsearch-installation-failed-for-some-reason/240612 "2020-07-10T17:47:20Z")
Hi Guys, this is the issue I am facing while I'm trying to install ES on my EC2 instance. OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 OpenJDK 64-Bit Server VM warning: INF… --- ## [Elastic Endpoint Security Fundamentals - Lab 1 cannot install Sensor](https://discuss.elastic.co/t/elastic-endpoint-security-fundamentals-lab-1-cannot-install-sensor/227693)
**Author:** [@benoitdupont](https://discuss.elastic.co/u/benoitdupont)\ **Replies:** 3\ **Last updated:** [April 15, 2020, 11:31am UTC](https://discuss.elastic.co/t/elastic-endpoint-security-fundamentals-lab-1-cannot-install-sensor/227693 "2020-04-15T11:31:31Z")
Hello, in the first lab of Elastic Endpoint Security Fundamentals, I run the following command as requested, from an admin prompt: SensorWindowsInstaller-windows.exe -c SensorWindowsInstaller-windows.cfg -k myAPIKey -d… --- ## [Logstash, split field and remove field](https://discuss.elastic.co/t/logstash-split-field-and-remove-field/225410)
**Author:** [@SBH](https://discuss.elastic.co/u/SBH)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 3:09pm UTC](https://discuss.elastic.co/t/logstash-split-field-and-remove-field/225410 "2020-03-30T15:09:10Z")
Hi, working on my logstash conf file. I have a remove field like this: remove\_field =\> \["\[data\]\[tasks\]\[data\]"\] And then i have a split field like this: split {field =\> "\[data\]\[tasks\]"} But when i see it in Discover… --- ## [Performance and Sizing Help and Insights](https://discuss.elastic.co/t/performance-and-sizing-help-and-insights/203846)
**Author:** [@cwade](https://discuss.elastic.co/u/cwade)\ **Replies:** 3\ **Last updated:** [October 16, 2019, 7:39pm UTC](https://discuss.elastic.co/t/performance-and-sizing-help-and-insights/203846 "2019-10-16T19:39:33Z")
Question: We are looking for some guidance or some commentary on our OpenDistro cluster which is deployed onto our Kubernetes infrastructure via Helm. I have noted the current configuration for the cluster below. While… --- ## [Filebeat adds a host.name field to JSON messages even when already set](https://discuss.elastic.co/t/filebeat-adds-a-host-name-field-to-json-messages-even-when-already-set/190780)
**Author:** [@fgabolde](https://discuss.elastic.co/u/fgabolde)\ **Replies:** 0\ **Last updated:** [July 16, 2019, 3:43pm UTC](https://discuss.elastic.co/t/filebeat-adds-a-host-name-field-to-json-messages-even-when-already-set/190780 "2019-07-16T15:43:30Z")
I'm using an UDP input to gather logs from Java applications with Filebeat. The Java apps send JSON objects over UDP through https://github.com/logstash/logstash-logback-encoder. I had some issues since it seems that th… --- ## [Set the cookie in elasticsearch](https://discuss.elastic.co/t/set-the-cookie-in-elasticsearch/177800)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 3\ **Last updated:** [April 23, 2019, 6:12am UTC](https://discuss.elastic.co/t/set-the-cookie-in-elasticsearch/177800 "2019-04-23T06:12:16Z")
Hi, I modified restController.java to provide token based Oauth authentication,How do i set the cookie here . Is it Xpack specific? --- ## [Alert by influencer on ML](https://discuss.elastic.co/t/alert-by-influencer-on-ml/170492)
**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\ **Replies:** 3\ **Last updated:** [March 4, 2019, 1:35pm UTC](https://discuss.elastic.co/t/alert-by-influencer-on-ml/170492 "2019-03-04T13:35:14Z")
I have a monitor that tracks 6 message queues that come into my system. I record the stats in an index capturing if the queue has been idle at all and what volume of data has been going through it. If I make a ML job wi… --- ## [ES long field has string value indexed](https://discuss.elastic.co/t/es-long-field-has-string-value-indexed/161744)
**Author:** [@shrridevi\_sreedharan](https://discuss.elastic.co/u/shrridevi_sreedharan)\ **Replies:** 3\ **Last updated:** [December 21, 2018, 2:55pm UTC](https://discuss.elastic.co/t/es-long-field-has-string-value-indexed/161744 "2018-12-21T14:55:16Z")
I am using ES 1.7 version and have a field mapped as long. But I see the data for that field however is stored as string. How can i query the data for such mismatched types. I need to search for that field with a specifi… --- ## [Require suggestion for the processing multi-line logs: filebeat or logstash](https://discuss.elastic.co/t/require-suggestion-for-the-processing-multi-line-logs-filebeat-or-logstash/152976)
**Author:** [@ajb](https://discuss.elastic.co/u/ajb)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 12:35pm UTC](https://discuss.elastic.co/t/require-suggestion-for-the-processing-multi-line-logs-filebeat-or-logstash/152976 "2018-10-19T12:35:56Z")
Hi Elastic team, Im trying to process logs from liferay (a CMS application) liferay logs daily single file contains above 1000 lines Sample log lines inside log file 13:56:59,178 INFO \[ContainerBackgroundProcesso… --- ## [Kibana 5.2.0 not recognizing any Index Patterns](https://discuss.elastic.co/t/kibana-5-2-0-not-recognizing-any-index-patterns/74819)
**Author:** [@robertd](https://discuss.elastic.co/u/robertd)\ **Replies:** 3\ **Last updated:** [February 19, 2017, 5:46am UTC](https://discuss.elastic.co/t/kibana-5-2-0-not-recognizing-any-index-patterns/74819 "2017-02-19T05:46:12Z")
Hello, I've freshly installed ELK & Metricbeat on Ubuntu 16.04.2 LTS, but I'm having some issues. Kibana won't recognize any index patterns from Elasticsearch. Data is being pushed from Metricbeat into Elasticsearch (se… --- ## [At Rest Encryption in Elastic Search](https://discuss.elastic.co/t/at-rest-encryption-in-elastic-search/68144)
**Author:** [@sampathkore4444](https://discuss.elastic.co/u/sampathkore4444)\ **Replies:** 3\ **Last updated:** [December 6, 2016, 9:50am UTC](https://discuss.elastic.co/t/at-rest-encryption-in-elastic-search/68144 "2016-12-06T09:50:22Z")
How to encrypt the data inside Elastic search index files? --- ## [Filebeat missing events because of Detected rename of a previously harvested file](https://discuss.elastic.co/t/filebeat-missing-events-because-of-detected-rename-of-a-previously-harvested-file/59519)
**Author:** [@vin](https://discuss.elastic.co/u/vin)\ **Replies:** 3\ **Last updated:** [September 2, 2016, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-missing-events-because-of-detected-rename-of-a-previously-harvested-file/59519 "2016-09-02T13:14:33Z")
Filebeat version : 1.2.3 OS : CentOS 7 (Docker) I have two type of log in path /cudetect/, and they are rotated to /cudetect/old/ at the same time. In /var/log/filebeat/filebeat : 2016-08-30T09:20:08Z INFO Old fi… --- ## [Multiline Codec Issues](https://discuss.elastic.co/t/multiline-codec-issues/47170)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 3\ **Last updated:** [April 13, 2016, 5:49am UTC](https://discuss.elastic.co/t/multiline-codec-issues/47170 "2016-04-13T05:49:42Z")
So for example, if I have a BASIC stack trace like this: Caused by: java.lang.IllegalArgumentException: field \[@timestamp\] doesn't exist at org.elasticsearch.action.fieldstats.TransportFieldStatsTransportAction.shardO… --- ## [ElasticSeach java client ocasionally throws NoClassDefFoundError](https://discuss.elastic.co/t/elasticseach-java-client-ocasionally-throws-noclassdeffounderror/26148)
**Author:** [@Andreano24](https://discuss.elastic.co/u/Andreano24)\ **Replies:** 0\ **Last updated:** [July 23, 2015, 11:05am UTC](https://discuss.elastic.co/t/elasticseach-java-client-ocasionally-throws-noclassdeffounderror/26148 "2015-07-23T11:05:55Z")
We're using ES java client 1.5.2 to communicate with our ES cluster(cluster obviously has the same version). Several times in week we observe following errors: Exception in thread "elasticsearch\[waElasticSearchNode\]\[ma… --- ## [Elasticsearch OSS](https://discuss.elastic.co/t/elasticsearch-oss/292501)
**Author:** [@kfull6\_nike](https://discuss.elastic.co/u/kfull6_nike)\ **Replies:** 4\ **Last updated:** [December 20, 2021, 10:03pm UTC](https://discuss.elastic.co/t/elasticsearch-oss/292501 "2021-12-20T22:03:42Z")
I noticed that for the latest log4j2 vulnerabilities ES was updated. Any idea if and when Elasticsearch-oss will be updated? --- ## [Heartbeat : Panic error using SSL Verification\_mode None](https://discuss.elastic.co/t/heartbeat-panic-error-using-ssl-verification-mode-none/276396)
**Author:** [@tjussey](https://discuss.elastic.co/u/tjussey)\ **Replies:** 4\ **Last updated:** [July 20, 2021, 5:30pm UTC](https://discuss.elastic.co/t/heartbeat-panic-error-using-ssl-verification-mode-none/276396 "2021-07-20T17:30:31Z")
Hi everyone, I'm using Heartbeat 7.13.1 on Debian 9.13. I setup monitors like this one : heartbeat.monitors: - type: http enabled: true id: anId name: aName urls: \["https//private.fr:59862"\] schedule: '@ever… --- ## [\[Heartbeat\]: add retry logic into http/tcp check](https://discuss.elastic.co/t/heartbeat-add-retry-logic-into-http-tcp-check/264328)
**Author:** [@lowry](https://discuss.elastic.co/u/lowry)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 6:25am UTC](https://discuss.elastic.co/t/heartbeat-add-retry-logic-into-http-tcp-check/264328 "2021-02-22T06:25:51Z")
Hello Beats friends, Wondering if current heartbeat supports retry in http/tcp check? Current Heartbeat ails me since looks like there's no retry logic in http/tcp check. As far as I can find, only icmp support retry … --- ## [How to run logstash config file automatically after system restarts?](https://discuss.elastic.co/t/how-to-run-logstash-config-file-automatically-after-system-restarts/257177)
**Author:** [@Rahul\_Chougule](https://discuss.elastic.co/u/Rahul_Chougule)\ **Replies:** 4\ **Last updated:** [December 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/how-to-run-logstash-config-file-automatically-after-system-restarts/257177 "2020-12-02T07:26:37Z")
I want to load/run my logstash config file automatically after system restarts everytime (after updates). How to do that? Thanks in advance. --- ## [Empty variable vs. non-existent one](https://discuss.elastic.co/t/empty-variable-vs-non-existent-one/203095)
**Author:** [@pgf](https://discuss.elastic.co/u/pgf)\ **Replies:** 4\ **Last updated:** [October 11, 2019, 6:18pm UTC](https://discuss.elastic.co/t/empty-variable-vs-non-existent-one/203095 "2019-10-11T18:18:02Z")
Is there any way to tell the difference between an empty variable and a non-existent one? The code if \[v1\] == "" { do something } acts exactly the same whether the variable exists and is empty or does not exist at al… --- ## [Merge not starting automatically](https://discuss.elastic.co/t/merge-not-starting-automatically/163408)
**Author:** [@Matteo\_Grolla](https://discuss.elastic.co/u/Matteo_Grolla)\ **Replies:** 4\ **Last updated:** [January 9, 2019, 9:44am UTC](https://discuss.elastic.co/t/merge-not-starting-automatically/163408 "2019-01-09T09:44:23Z")
Hi all! I'm using ES 5.3 and I have an index with 800k docs ~16GB of data I deleted ~500k docs and refreshed the index cpus and disks are not under load I expected a merge to happen but after several minutes (20 mi… --- ## [What is causing refreshes?](https://discuss.elastic.co/t/what-is-causing-refreshes/119289)
**Author:** [@apechimp](https://discuss.elastic.co/u/apechimp)\ **Replies:** 4\ **Last updated:** [February 9, 2018, 9:28pm UTC](https://discuss.elastic.co/t/what-is-causing-refreshes/119289 "2018-02-09T21:28:28Z")
I am using elasticsearch 5.6.4 and I have a very update heavy workload. I have my refresh\_interval set to 10s. However, I'm seeing hundreds of concurrent refreshes going on (with a max refresh time of ~5s). Is there a wa… --- ## [Lumberjack with JDBC configuration](https://discuss.elastic.co/t/lumberjack-with-jdbc-configuration/96485)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 4\ **Last updated:** [August 10, 2017, 7:26am UTC](https://discuss.elastic.co/t/lumberjack-with-jdbc-configuration/96485 "2017-08-10T07:26:28Z")
Hi, Need help with a very typical scenario of getting data using JDBC input plugin and sending it using Logstash - Lumberjack(s) plugins to ES Version Details: ES/LS/Kibana - 5.4.1 I have a database with 2 tables that… --- ## [Elasticsearch fails to get installed when Elasticsearch Puppet module is upgraded to 0.13.2](https://discuss.elastic.co/t/elasticsearch-fails-to-get-installed-when-elasticsearch-puppet-module-is-upgraded-to-0-13-2/61304)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 4\ **Last updated:** [September 23, 2016, 5:02pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-get-installed-when-elasticsearch-puppet-module-is-upgraded-to-0-13-2/61304 "2016-09-23T17:02:52Z")
@tylerjl I upgraded elasticsearch puppet module from 0.10.3 to 0.13.2. When I run puppet apply using the below command, elasticsearch fails to get installed. puppet apply /etc/puppet/environments/dbe\_metrics/manifests/… --- ## [What components to track for performance monitoring?](https://discuss.elastic.co/t/what-components-to-track-for-performance-monitoring/8571)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 4\ **Last updated:** [January 26, 2014, 4:34am UTC](https://discuss.elastic.co/t/what-components-to-track-for-performance-monitoring/8571 "2014-01-26T04:34:10Z")
Hi, In our SPM for Solr service we have a graph that shows performance of different Solr search components (see attachment for a stacked version of this graph). I know ES doesn't have the equivalent of SearchCo… --- ## [Is Vega performance good on large dataset?](https://discuss.elastic.co/t/is-vega-performance-good-on-large-dataset/348713)
**Author:** [@Fiza](https://discuss.elastic.co/u/Fiza)\ **Replies:** 6\ **Last updated:** [December 12, 2023, 2:15pm UTC](https://discuss.elastic.co/t/is-vega-performance-good-on-large-dataset/348713 "2023-12-12T14:15:37Z")
I am working on a large timeseries dataset, around 120000 document approx. I want to know how the performance is of Vega on such large database. Does it take a lot of time to load to show charts and graphs. Or it works a… --- ## [Get the aggregation that measures unique users from different cities using elasticsearch event log index](https://discuss.elastic.co/t/get-the-aggregation-that-measures-unique-users-from-different-cities-using-elasticsearch-event-log-index/232237)
**Author:** [@Nisrein\_Sada](https://discuss.elastic.co/u/Nisrein_Sada)\ **Replies:** 6\ **Last updated:** [May 14, 2020, 10:23am UTC](https://discuss.elastic.co/t/get-the-aggregation-that-measures-unique-users-from-different-cities-using-elasticsearch-event-log-index/232237 "2020-05-14T10:23:38Z")
I am trying to measure the number of users from different countries by reading the events\_log\_index ES, this index has all the user interactions from a mobile. Therefore the user might have several records in the event i… --- ## [Nest Custom analyser](https://discuss.elastic.co/t/nest-custom-analyser/17349)
**Author:** [@Marcio\_Rodrigues](https://discuss.elastic.co/u/Marcio_Rodrigues)\ **Replies:** 6\ **Last updated:** [May 6, 2014, 9:17am UTC](https://discuss.elastic.co/t/nest-custom-analyser/17349 "2014-05-06T09:17:49Z")
Hi Hoping there are some nest users here who could help me out. I am trying to figure out how to specify cutom field analyzers on a Poco class , so that when it get's indexed automatically via Nest the fields w… --- ## [How to describe multiple users in ECS](https://discuss.elastic.co/t/how-to-describe-multiple-users-in-ecs/335448)
**Author:** [@srilumpa](https://discuss.elastic.co/u/srilumpa)\ **Replies:** 4\ **Last updated:** [June 13, 2023, 7:29am UTC](https://discuss.elastic.co/t/how-to-describe-multiple-users-in-ecs/335448 "2023-06-13T07:29:52Z")
Hello, I have a use case that is not described in the Elastic ECS documentation and I am looking for best practices on how to handle this. So, basically, I have an application where an app admin can change multiple use… --- ## [Problem with APM after upgrade to 7.10](https://discuss.elastic.co/t/problem-with-apm-after-upgrade-to-7-10/274277)
**Author:** [@Luis\_Garavatti](https://discuss.elastic.co/u/Luis_Garavatti)\ **Replies:** 8\ **Last updated:** [May 28, 2021, 2:56pm UTC](https://discuss.elastic.co/t/problem-with-apm-after-upgrade-to-7-10/274277 "2021-05-28T14:56:16Z")
Guys, today my APM is not working on the turn to create a new index. The error is: "log": "2021-05-28T00:00:02.816Z\\tWARN\\t\[elasticsearch\]\\telasticsearch/client.go:408\\tCannot index event publisher.Event{Content:beat.E… --- ## [Adding search bar for my web application](https://discuss.elastic.co/t/adding-search-bar-for-my-web-application/192841)
**Author:** [@saurabhbora](https://discuss.elastic.co/u/saurabhbora)\ **Replies:** 8\ **Last updated:** [August 8, 2019, 6:23am UTC](https://discuss.elastic.co/t/adding-search-bar-for-my-web-application/192841 "2019-08-08T06:23:57Z")
My web application has all the data stored in the MySQL database. I want to develop a search bar using elastic search for retrieving results faster. How should I go about this? --- ## [NoNodeAvailableException when indexing from Hadoop](https://discuss.elastic.co/t/nonodeavailableexception-when-indexing-from-hadoop/4346)
**Author:** [@phobos182](https://discuss.elastic.co/u/phobos182)\ **Replies:** 8\ **Last updated:** [May 15, 2011, 2:55pm UTC](https://discuss.elastic.co/t/nonodeavailableexception-when-indexing-from-hadoop/4346 "2011-05-15T14:55:39Z")
I'm wondering what is the best way to set the TransportClient when indexing en masse from Hadoop. Right now I have set the client to sniff the cluster, and set just one hostname of a server in the ElasticSearch cluster. … [Previous page](https://discuss.elastic.co/top.md?page=1510&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1512&per_page=50&period=all)