# Top

**URL:** https://discuss.elastic.co/top.md?page=1514&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1515

---

## [Change elasticsearch.yml and now ES will not run](https://discuss.elastic.co/t/change-elasticsearch-yml-and-now-es-will-not-run/100067)

<div class="topic-metadata">

**Author:** [@dataminer](https://discuss.elastic.co/u/dataminer)\
**Replies:** 5\
**Last updated:** [September 11, 2017, 2:05pm UTC](https://discuss.elastic.co/t/change-elasticsearch-yml-and-now-es-will-not-run/100067 "2017-09-11T14:05:17Z")

</div>

Okay - have had a single node working (ES5.5) for a week or so using network.host as 127.0.0.1, indexing and pushing responses to queries without a problem until today. Today I wanted to allow access from another machin…

---

## [Add nodes or add CPU](https://discuss.elastic.co/t/add-nodes-or-add-cpu/281744)

<div class="topic-metadata">

**Author:** [@terrainc](https://discuss.elastic.co/u/terrainc)\
**Replies:** 1\
**Last updated:** [August 17, 2021, 9:08pm UTC](https://discuss.elastic.co/t/add-nodes-or-add-cpu/281744 "2021-08-17T21:08:46Z")

</div>

Hi! I have 3 nodes cluster (build on virtual machines 24 cores 72Gb mem each). 120k/s messages. Cpu usage about 75-80% so, probably, I need to add more CPU. Also I want to add more disk space (x2 more). So I have two w…

---

## [Useragent plugin - android 9 and 10](https://discuss.elastic.co/t/useragent-plugin-android-9-and-10/239175)

<div class="topic-metadata">

**Author:** [@holiveira](https://discuss.elastic.co/u/holiveira)\
**Replies:** 4\
**Last updated:** [July 9, 2020, 10:49am UTC](https://discuss.elastic.co/t/useragent-plugin-android-9-and-10/239175 "2020-07-09T10:49:32Z")

</div>

The parse of an Android 9 or 10 useragent is partial. For example, the fields user\_agentos\_major, user\_agentos\_minor do not exist. Example useragent: Mozilla/5.0 (Linux; Android 9; Redmi Note 7 Build/PKQ1.180904.001; w…

---

## [Cluster is not running and master is not discovered](https://discuss.elastic.co/t/cluster-is-not-running-and-master-is-not-discovered/199695)

<div class="topic-metadata">

**Author:** [@decibel83](https://discuss.elastic.co/u/decibel83)\
**Replies:** 4\
**Last updated:** [September 17, 2019, 2:53am UTC](https://discuss.elastic.co/t/cluster-is-not-running-and-master-is-not-discovered/199695 "2019-09-17T02:53:04Z")

</div>

I'm running an Elasticsearch 7.3.2 cluster, which was recently bootstrapped with 3 nodes: elastic1.domain.com elastic2.domain.com elastic3.domain.com The cluster was running well until yesterday when I needed to make …

---

## [Add IdentityServer4 for authentication](https://discuss.elastic.co/t/add-identityserver4-for-authentication/168725)

<div class="topic-metadata">

**Author:** [@Behzad\_Rezaie](https://discuss.elastic.co/u/Behzad_Rezaie)\
**Replies:** 4\
**Last updated:** [February 19, 2019, 7:12am UTC](https://discuss.elastic.co/t/add-identityserver4-for-authentication/168725 "2019-02-19T07:12:24Z")

</div>

Hi pals, I am going to add IdentityServer4 to make the authentication for the Kibana (version 6.5.4) server (http://localhost:5601). I did not find any tutorials regarding the issue on the Net. Could you please help me…

---

## [How to add tags to the Document , based on the dictionary](https://discuss.elastic.co/t/how-to-add-tags-to-the-document-based-on-the-dictionary/162225)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 4\
**Last updated:** [December 28, 2018, 6:37am UTC](https://discuss.elastic.co/t/how-to-add-tags-to-the-document-based-on-the-dictionary/162225 "2018-12-28T06:37:40Z")

</div>

Hello Team, I am new to the ELK stack. I have a use case where I need to tag documents based on the dictionary. Where Dictionary key is String and value is list of Strings. So basically if the document field matches w…

---

## [Why all fields and indices are visible to specific user while performing Document and Field Level security?](https://discuss.elastic.co/t/why-all-fields-and-indices-are-visible-to-specific-user-while-performing-document-and-field-level-security/99083)

<div class="topic-metadata">

**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\
**Replies:** 4\
**Last updated:** [September 11, 2017, 6:43am UTC](https://discuss.elastic.co/t/why-all-fields-and-indices-are-visible-to-specific-user-while-performing-document-and-field-level-security/99083 "2017-09-11T06:43:29Z")

</div>

Hi I have applied document level security for a particular user but when I login through that user, Firstly all the Indices names are visible in the Discover Screen. Secondly, all the field names are visible to that use…

---

## [How to see all document types for a give index?](https://discuss.elastic.co/t/how-to-see-all-document-types-for-a-give-index/18385)

<div class="topic-metadata">

**Author:** [@Jinyuan\_Zhou](https://discuss.elastic.co/u/Jinyuan_Zhou)\
**Replies:** 4\
**Last updated:** [July 1, 2014, 5:26pm UTC](https://discuss.elastic.co/t/how-to-see-all-document-types-for-a-give-index/18385 "2014-07-01T17:26:23Z")

</div>

Thanks, -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscri…

---

## [Explicit cluster configuration](https://discuss.elastic.co/t/explicit-cluster-configuration/4635)

<div class="topic-metadata">

**Author:** [@tsuraan](https://discuss.elastic.co/u/tsuraan)\
**Replies:** 4\
**Last updated:** [November 15, 2011, 7:24pm UTC](https://discuss.elastic.co/t/explicit-cluster-configuration/4635 "2011-11-15T19:24:11Z")

</div>

I'm looking for docs on how to explicitly define my cluster. What I want is something like zookeeper's config file (a sample is pasted in at the bottom of this email), I don't want elasticsearch doing automatic node …

---

## [Hexadecimal to Decimal](https://discuss.elastic.co/t/hexadecimal-to-decimal/293361)

<div class="topic-metadata">

**Author:** [@dayajamal](https://discuss.elastic.co/u/dayajamal)\
**Replies:** 2\
**Last updated:** [January 4, 2022, 8:16am UTC](https://discuss.elastic.co/t/hexadecimal-to-decimal/293361 "2022-01-04T08:16:42Z")

</div>

Hi, I am trying to convert a field in my log from hexadecimal to decimal. I tried with the following log: 2021-07-26T16:49:02.189807+0200 | DEBUG | 910EAB70 | flyscan/core/server.1 | ScanActorTask::handle\_message Usin…

---

## [How many user are login to kibana](https://discuss.elastic.co/t/how-many-user-are-login-to-kibana/210750)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [December 30, 2019, 3:15pm UTC](https://discuss.elastic.co/t/how-many-user-are-login-to-kibana/210750 "2019-12-30T15:15:06Z")

</div>

How do I know which user is curretntly login to kibana? or how many user daily logging in to kibana? I can't seem to find any way to do at this time I am using version 7.5.0

---

## [Unable to read modules. Modules is looking at different path](https://discuss.elastic.co/t/unable-to-read-modules-modules-is-looking-at-different-path/198118)

<div class="topic-metadata">

**Author:** [@Srisamardh](https://discuss.elastic.co/u/Srisamardh)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 3:21am UTC](https://discuss.elastic.co/t/unable-to-read-modules-modules-is-looking-at-different-path/198118 "2019-09-12T03:21:23Z")

</div>

I am new to filebeat. I am trying to setup the apache module using kubernetes to get the logs from container. I am seeing the following error: "ERROR fileset/modules.go:125 Not loading modules. Module directory not fou…

---

## [Elapsed filter ends in "elapsed\_end\_without\_start"](https://discuss.elastic.co/t/elapsed-filter-ends-in-elapsed-end-without-start/183874)

<div class="topic-metadata">

**Author:** [@ajayraghuraj](https://discuss.elastic.co/u/ajayraghuraj)\
**Replies:** 2\
**Last updated:** [June 3, 2019, 9:45am UTC](https://discuss.elastic.co/t/elapsed-filter-ends-in-elapsed-end-without-start/183874 "2019-06-03T09:45:22Z")

</div>

elapsed filter ends in "elapsed\_end\_without\_start". I am running on a VM with 1 vCPU . How do I get over this problem ? cpu cores : 1 /usr/share/logstash/bin/logstash --path.settings /etc/logstash --path.config …

---

## [Index a substring](https://discuss.elastic.co/t/index-a-substring/183760)

<div class="topic-metadata">

**Author:** [@msalesb](https://discuss.elastic.co/u/msalesb)\
**Replies:** 2\
**Last updated:** [June 1, 2019, 11:56am UTC](https://discuss.elastic.co/t/index-a-substring/183760 "2019-06-01T11:56:33Z")

</div>

I am indexing bibliographic data with Kibana and I want to index just a substring of a field. The field has the following type of data and I would like to index just the data in bold, which is always in the same positio…

---

## [Looking for ideas to mask part of a creditcard](https://discuss.elastic.co/t/looking-for-ideas-to-mask-part-of-a-creditcard/166333)

<div class="topic-metadata">

**Author:** [@Saurav\_Sen](https://discuss.elastic.co/u/Saurav_Sen)\
**Replies:** 2\
**Last updated:** [January 31, 2019, 3:35am UTC](https://discuss.elastic.co/t/looking-for-ideas-to-mask-part-of-a-creditcard/166333 "2019-01-31T03:35:28Z")

</div>

Trying to mask out a part (6-10th digit) of the 16 digit credit card. 1234567898763456 to 1234######3456 I can think of using gsub filter, but I can't find a way to match the exact section of numbers. The option would…

---

## [ELK 6.5.4](https://discuss.elastic.co/t/elk-6-5-4/163920)

<div class="topic-metadata">

**Author:** [@Denisboud](https://discuss.elastic.co/u/Denisboud)\
**Replies:** 2\
**Last updated:** [January 16, 2019, 6:48pm UTC](https://discuss.elastic.co/t/elk-6-5-4/163920 "2019-01-16T18:48:28Z")

</div>

Hello everybody, My objective is to facilitate and customize the display of alerts (format date, recover the real PID of the log before transformation, etc...) Early January 2019, installation Docker ELK 6.5.4 (Wazuh, …

---

## [Char\_filter how to replace backslashes with slashes](https://discuss.elastic.co/t/char-filter-how-to-replace-backslashes-with-slashes/153785)

<div class="topic-metadata">

**Author:** [@16318a22907f3cbfa04b](https://discuss.elastic.co/u/16318a22907f3cbfa04b)\
**Replies:** 2\
**Last updated:** [October 24, 2018, 3:10pm UTC](https://discuss.elastic.co/t/char-filter-how-to-replace-backslashes-with-slashes/153785 "2018-10-24T15:10:41Z")

</div>

"analysis": { "char\_filter": { "replace\_bad\_slash": { "type": "mapping", "mappings": \[ "\\\\ =\> /" \] } }, "normalizer": { "my\_normalizer":…

---

## [Build Kibana in Windows 7 (git-bash)](https://discuss.elastic.co/t/build-kibana-in-windows-7-git-bash/140590)

<div class="topic-metadata">

**Author:** [@singrahu](https://discuss.elastic.co/u/singrahu)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 7:06pm UTC](https://discuss.elastic.co/t/build-kibana-in-windows-7-git-bash/140590 "2018-07-18T19:06:55Z")

</div>

Hi, I am trying to build the Kibana for plug-in development on my Windows machine, but unable to do so. I followed the steps mentioned in CONTRIBUTING.md file in respective branches. Details are: OS: Windows 10 Shell…

---

## [Docker autodiscover feature: losing tail of logs when container gets stopped](https://discuss.elastic.co/t/docker-autodiscover-feature-losing-tail-of-logs-when-container-gets-stopped/137060)

<div class="topic-metadata">

**Author:** [@smamontov](https://discuss.elastic.co/u/smamontov)\
**Replies:** 2\
**Last updated:** [June 26, 2018, 12:58pm UTC](https://discuss.elastic.co/t/docker-autodiscover-feature-losing-tail-of-logs-when-container-gets-stopped/137060 "2018-06-26T12:58:43Z")

</div>

I'm running docker container without --rm option to make sure this is not because log file is removed by docker. The problem is that not all events are getting sent to elasticsearch: messages are ignored since the point …

---

## [Kibana is not starting up](https://discuss.elastic.co/t/kibana-is-not-starting-up/134459)

<div class="topic-metadata">

**Author:** [@Shwetha\_Naranapura](https://discuss.elastic.co/u/Shwetha_Naranapura)\
**Replies:** 2\
**Last updated:** [June 5, 2018, 5:33am UTC](https://discuss.elastic.co/t/kibana-is-not-starting-up/134459 "2018-06-05T05:33:30Z")

</div>

Hi, After adding logging.dest in kibana.yml kibana does not start. I have given the windows location like following logging.dest: D:\\file.txt logging.verbose: true Please help

---

## [Error while creating repository](https://discuss.elastic.co/t/error-while-creating-repository/40800)

<div class="topic-metadata">

**Author:** [@vinod\_rao](https://discuss.elastic.co/u/vinod_rao)\
**Replies:** 2\
**Last updated:** [February 3, 2016, 1:00pm UTC](https://discuss.elastic.co/t/error-while-creating-repository/40800 "2016-02-03T13:00:50Z")

</div>

Hi Team, I getting below error while registering repository. {"error":"RemoteTransportException\[\[goemtdbpgqa04\]\[inet\[/x.x.x.x:9401\]\]\[cluster:admin/repository/put\]\]; nested: RepositoryException\[\[director-services\] f…

---

## [Elasticsearch output plugin: frequent Connection Reset errors](https://discuss.elastic.co/t/elasticsearch-output-plugin-frequent-connection-reset-errors/43755)

<div class="topic-metadata">

**Author:** [@mguiwin](https://discuss.elastic.co/u/mguiwin)\
**Replies:** 0\
**Last updated:** [March 8, 2016, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-output-plugin-frequent-connection-reset-errors/43755 "2016-03-08T10:30:18Z")

</div>

Hello, I often get this in Logstash logs (every 5-10 minutes): {:timestamp=\>"2016-03-08T10:53:34.880000+0100", :message=\>"Attempted to send a bulk request to Elasticsearch configured at '\[\\"http://xxx.xxx.xxx.xxx:9200/…

---

## [How to get documents in Elasticsearch based on aggregation output values?](https://discuss.elastic.co/t/how-to-get-documents-in-elasticsearch-based-on-aggregation-output-values/182109)

<div class="topic-metadata">

**Author:** [@Thomas\_Lee](https://discuss.elastic.co/u/Thomas_Lee)\
**Replies:** 1\
**Last updated:** [May 23, 2019, 10:29pm UTC](https://discuss.elastic.co/t/how-to-get-documents-in-elasticsearch-based-on-aggregation-output-values/182109 "2019-05-23T22:29:08Z")

</div>

I'd like to use aggregation outputs as an input to filtering for documents in one query. For example, I'd like to get sales documents in the last 24 hours where sale amount is greater than the average of sale amounts in…

---

## [How does Timelion process buckets?](https://discuss.elastic.co/t/how-does-timelion-process-buckets/117946)

<div class="topic-metadata">

**Author:** [@varunlpai](https://discuss.elastic.co/u/varunlpai)\
**Replies:** 1\
**Last updated:** [February 1, 2018, 5:27pm UTC](https://discuss.elastic.co/t/how-does-timelion-process-buckets/117946 "2018-02-01T17:27:41Z")

</div>

Hi, When using the Timelion plugin on Kibana, there is an option to select the aggregation bucket. When you add this formula to the dashboard, does Timelion aggregate and create buckets as data comes into elastic search…

---

## [Kibana instance offline](https://discuss.elastic.co/t/kibana-instance-offline/112059)

<div class="topic-metadata">

**Author:** [@Woolis\_Xiibil\_Peek](https://discuss.elastic.co/u/Woolis_Xiibil_Peek)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 5:53pm UTC](https://discuss.elastic.co/t/kibana-instance-offline/112059 "2018-01-05T17:53:03Z")

</div>

Hi. I'm preety new with elastic search. I finishing of installing elasticsearch, kibana, and logstash. Reviewing the monitoring option I see that the health of Kibana is green, but when I enter to see the instance it sa…

---

## [Dangling\_index\_imported](https://discuss.elastic.co/t/dangling-index-imported/96046)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 1\
**Last updated:** [August 11, 2017, 9:23am UTC](https://discuss.elastic.co/t/dangling-index-imported/96046 "2017-08-11T09:23:51Z")

</div>

How can i wipe of my entire elasticsearch. I am trying to delete all the data from my test elasticsearch. I can use the rest api to delete all of them and it says it worked. But after couple of minutes the shards seem to…

---

## [Cannot build elasticsearch-net from source, missing references](https://discuss.elastic.co/t/cannot-build-elasticsearch-net-from-source-missing-references/86208)

<div class="topic-metadata">

**Author:** [@christofur](https://discuss.elastic.co/u/christofur)\
**Replies:** 1\
**Last updated:** [May 21, 2017, 7:58pm UTC](https://discuss.elastic.co/t/cannot-build-elasticsearch-net-from-source-missing-references/86208 "2017-05-21T19:58:30Z")

</div>

Hi! I'm trying to build the master branch of elasticsearch-net from scratch, using Visual Studio 2017 Community. The solution opens fine, and NuGet dependencies are restored. When I try to build the solution, the…

---

## [Topbeat on Windows has high CPU usage](https://discuss.elastic.co/t/topbeat-on-windows-has-high-cpu-usage/63495)

<div class="topic-metadata">

**Author:** [@parw](https://discuss.elastic.co/u/parw)\
**Replies:** 1\
**Last updated:** [October 21, 2016, 11:15am UTC](https://discuss.elastic.co/t/topbeat-on-windows-has-high-cpu-usage/63495 "2016-10-21T11:15:46Z")

</div>

I am evaluating TopBeat and have installed it (version 1.3.1) on a Windows Server 2012 and the TopBeat process consumes 20-25% of the CPU according to the windows recource monitor. Is this expected? Am I missing some co…

---

## [Timeout in Bulk operation when deleting documents](https://discuss.elastic.co/t/timeout-in-bulk-operation-when-deleting-documents/51222)

<div class="topic-metadata">

**Author:** [@ThomasD3](https://discuss.elastic.co/u/ThomasD3)\
**Replies:** 1\
**Last updated:** [May 28, 2016, 2:18pm UTC](https://discuss.elastic.co/t/timeout-in-bulk-operation-when-deleting-documents/51222 "2016-05-28T14:18:11Z")

</div>

I have a list of document IDs I want to delete. The naive way works well: foreach (var Id in IDs) { EC.Delete(Id); } but it is insanely slow. So I tried this: EC.DeleteMany(IDs); which doesn't seem to do any…

---

## [Logstash only uploading SOME files to s3](https://discuss.elastic.co/t/logstash-only-uploading-some-files-to-s3/50992)

<div class="topic-metadata">

**Author:** [@jstmatt](https://discuss.elastic.co/u/jstmatt)\
**Replies:** 1\
**Last updated:** [May 25, 2016, 9:34pm UTC](https://discuss.elastic.co/t/logstash-only-uploading-some-files-to-s3/50992 "2016-05-25T21:34:59Z")

</div>

So we have a setup that works pretty well: Data comes in through the beats plugin, and gets shipped to s3. I have it setup so that it outputs the local files to different directories, so that they stay within their li…

---

## [Connect to ElasticServer from Behind Proxy](https://discuss.elastic.co/t/connect-to-elasticserver-from-behind-proxy/49301)

<div class="topic-metadata">

**Author:** [@pravinrane32](https://discuss.elastic.co/u/pravinrane32)\
**Replies:** 1\
**Last updated:** [May 14, 2016, 3:45pm UTC](https://discuss.elastic.co/t/connect-to-elasticserver-from-behind-proxy/49301 "2016-05-14T15:45:27Z")

</div>

Hi, I have elastic instance sitting in the cloud. I need to connect to elastic instance from the application which is sitting behind the proxy. I am using the Java Client to connect to elastic. Going through Transp…

---

## [Matching threat indicators to content in ELK](https://discuss.elastic.co/t/matching-threat-indicators-to-content-in-elk/23473)

<div class="topic-metadata">

**Author:** [@Chris\_Adams1](https://discuss.elastic.co/u/Chris_Adams1)\
**Replies:** 1\
**Last updated:** [April 29, 2015, 9:17pm UTC](https://discuss.elastic.co/t/matching-threat-indicators-to-content-in-elk/23473 "2015-04-29T21:17:50Z")

</div>

Folks... Looking for suggestions here on approach for a simple use case. I have ELK up and running monitoring SSH connections to a server. I also use ThreatConnect which provides IP addresses (IPs of hosts that …

---

## [Kv Filter - allow\_duplicate\_values different behavior](https://discuss.elastic.co/t/kv-filter-allow-duplicate-values-different-behavior/225736)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 6\
**Last updated:** [March 31, 2020, 3:49pm UTC](https://discuss.elastic.co/t/kv-filter-allow-duplicate-values-different-behavior/225736 "2020-03-31T15:49:47Z")

</div>

Hi guys, Thanks for taking the time to read these lines, I've got a question regarding kv filter and its allow\_duplicate\_values attribute Assuming I have a log that looks like : key1=value1|key2=value2|key3=value3|ke…

---

## [Error "Panic in job" - Unable to monitor my service](https://discuss.elastic.co/t/error-panic-in-job-unable-to-monitor-my-service/225498)

<div class="topic-metadata">

**Author:** [@luok0](https://discuss.elastic.co/u/luok0)\
**Replies:** 6\
**Last updated:** [March 31, 2020, 3:30pm UTC](https://discuss.elastic.co/t/error-panic-in-job-unable-to-monitor-my-service/225498 "2020-03-31T15:30:15Z")

</div>

Got below error in heartbeat's debug log when tried to monitor one service while it works fine for other services: hearbeat.yml: // # Configure monitors heartbeat.monitors: - type: http # List or urls to query urls…

---

## [Kibana still fails to locate filebeat-\* even if it exists](https://discuss.elastic.co/t/kibana-still-fails-to-locate-filebeat-even-if-it-exists/207036)

<div class="topic-metadata">

**Author:** [@rgrg](https://discuss.elastic.co/u/rgrg)\
**Replies:** 6\
**Last updated:** [November 13, 2019, 2:50am UTC](https://discuss.elastic.co/t/kibana-still-fails-to-locate-filebeat-even-if-it-exists/207036 "2019-11-13T02:50:43Z")

</div>

Deleting all Filebeat dashboards, visualizations, indices and index patterns - then rerunning 'filebeat setup -e', setup loads the dashboards, I can see them newly added to kibana, but then it still fails to find the fil…

---

## [Include One Identifier for each log entry](https://discuss.elastic.co/t/include-one-identifier-for-each-log-entry/163919)

<div class="topic-metadata">

**Author:** [@mrashid](https://discuss.elastic.co/u/mrashid)\
**Replies:** 6\
**Last updated:** [January 14, 2019, 8:00am UTC](https://discuss.elastic.co/t/include-one-identifier-for-each-log-entry/163919 "2019-01-14T08:00:12Z")

</div>

My aim is to include an identifier for logs of a few Jenkins Jobs that run in sequence. Kindly give your opinion on the following -- Is there any way to append an ID such as '1234' to each document entry i.e each lin…

---

## [Dangling Indices in Ingest nodes after running Currator](https://discuss.elastic.co/t/dangling-indices-in-ingest-nodes-after-running-currator/120856)

<div class="topic-metadata">

**Author:** [@hadi](https://discuss.elastic.co/u/hadi)\
**Replies:** 6\
**Last updated:** [February 28, 2018, 2:11pm UTC](https://discuss.elastic.co/t/dangling-indices-in-ingest-nodes-after-running-currator/120856 "2018-02-28T14:11:41Z")

</div>

Hi, After running curator for deleting indicies older than two weeks, I see following error in Ingest nodes elasticsearch logs! tailf /var/log/elasticsearch/dbus.log \[2018-02-19T10:26:09,264\]\[WARN \]\[o.e.g.DanglingInd…

---

## [Kibana 5.3.1 Tilemap issue](https://discuss.elastic.co/t/kibana-5-3-1-tilemap-issue/84841)

<div class="topic-metadata">

**Author:** [@mmdallal](https://discuss.elastic.co/u/mmdallal)\
**Replies:** 6\
**Last updated:** [May 11, 2017, 4:42am UTC](https://discuss.elastic.co/t/kibana-5-3-1-tilemap-issue/84841 "2017-05-11T04:42:29Z")

</div>

Hello, I'm collecting Netflow data from Palo Alto NGFW, using Logstash and Elasticsearch, but Kibana unable to show Tilemap or graphs for Locations and giving numbers but (-) instead of city or location. I'm using 5.…

---

## [ElasticSearch version 5.0.1 changes](https://discuss.elastic.co/t/elasticsearch-version-5-0-1-changes/69788)

<div class="topic-metadata">

**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\
**Replies:** 6\
**Last updated:** [December 29, 2016, 5:51am UTC](https://discuss.elastic.co/t/elasticsearch-version-5-0-1-changes/69788 "2016-12-29T05:51:32Z")

</div>

I was previously using ElasticSearch v2.4.0. When I use ElasticSearch v5.0.1 for the same number of records, the size of index increases by around 30-40%, when viewed in cat/indices. Is there any specific upgrade in t…

---

## [How to determine how much volume is needed in an Elasticsearch cluster?](https://discuss.elastic.co/t/how-to-determine-how-much-volume-is-needed-in-an-elasticsearch-cluster/275054)

<div class="topic-metadata">

**Author:** [@Barani\_A](https://discuss.elastic.co/u/Barani_A)\
**Replies:** 3\
**Last updated:** [June 6, 2021, 2:43pm UTC](https://discuss.elastic.co/t/how-to-determine-how-much-volume-is-needed-in-an-elasticsearch-cluster/275054 "2021-06-06T14:43:36Z")

</div>

Hi All, I have to procure an elasticsearch cluster, part of it is to specify how much volume we would require in GB and how much the size can grow everyday. Is there any way I can calculate the volume needed? My use ca…

---

## [Errors io.netty.handler.codec.DecoderException: java.lang.IllegalArgumentException: newPosition \> limit](https://discuss.elastic.co/t/errors-io-netty-handler-codec-decoderexception-java-lang-illegalargumentexception-newposition-limit/254711)

<div class="topic-metadata">

**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 7:33am UTC](https://discuss.elastic.co/t/errors-io-netty-handler-codec-decoderexception-java-lang-illegalargumentexception-newposition-limit/254711 "2020-11-09T07:33:45Z")

</div>

ES Version: 6.8.6 Lucene Version: 7.7.2 We have a 3 nodes cluster where all 3 nodes are marked as "mdi". When we loop on /\_cat/nodes, we saw one of the node randomly go out of cluster and entire cluster is in unstable…

---

## [Using single certificate which contains multiple SANs](https://discuss.elastic.co/t/using-single-certificate-which-contains-multiple-sans/148469)

<div class="topic-metadata">

**Author:** [@pprasad](https://discuss.elastic.co/u/pprasad)\
**Replies:** 3\
**Last updated:** [September 17, 2018, 8:42pm UTC](https://discuss.elastic.co/t/using-single-certificate-which-contains-multiple-sans/148469 "2018-09-17T20:42:32Z")

</div>

Is it possible to use a single certificate (which contains multiple SANs) in all the nodes in 6.3 Elasticsearch cluster? (I want to use xpack.ssl.verification\_mode=full) For example, I have a 5 node cluster and my cert…

---

## [Timestamp with different date format](https://discuss.elastic.co/t/timestamp-with-different-date-format/94802)

<div class="topic-metadata">

**Author:** [@alainc](https://discuss.elastic.co/u/alainc)\
**Replies:** 3\
**Last updated:** [July 27, 2017, 4:58pm UTC](https://discuss.elastic.co/t/timestamp-with-different-date-format/94802 "2017-07-27T16:58:55Z")

</div>

Hi is is possible to insert on the same index datas with distinct date format thinking of that for indexing historical facts as an example Sometime you know the precise date of an event so you can enter DD/MM/YYYY …

---

## [Multiple draphs into front dashboard](https://discuss.elastic.co/t/multiple-draphs-into-front-dashboard/91370)

<div class="topic-metadata">

**Author:** [@vijjun123](https://discuss.elastic.co/u/vijjun123)\
**Replies:** 3\
**Last updated:** [June 30, 2017, 3:08pm UTC](https://discuss.elastic.co/t/multiple-draphs-into-front-dashboard/91370 "2017-06-30T15:08:35Z")

</div>

Hi All, I have multiple excel sheet data and want to prepare a graphs for all those and present in dashboard. I want to see multiple graphs in one dashboard. could you please guide me

---

## [Seperate ES indexes or Add a new field in logstash](https://discuss.elastic.co/t/seperate-es-indexes-or-add-a-new-field-in-logstash/40476)

<div class="topic-metadata">

**Author:** [@elastic-fan](https://discuss.elastic.co/u/elastic-fan)\
**Replies:** 3\
**Last updated:** [January 29, 2016, 6:32pm UTC](https://discuss.elastic.co/t/seperate-es-indexes-or-add-a-new-field-in-logstash/40476 "2016-01-29T18:32:55Z")

</div>

Hi, i am trying to collect logs from 2 different servers which are located far away, should i be creating 2 seperate indexes for each of them in ES or is there a way i can filter the logs coming out of those and add a…

---

## [Synthetics / Heartbeat 8.4.0 Release - New Workflow Video Walkthrough](https://discuss.elastic.co/t/synthetics-heartbeat-8-4-0-release-new-workflow-video-walkthrough/314713)

<div class="topic-metadata">

**Author:** [@Andrew\_Cholakian1](https://discuss.elastic.co/u/Andrew_Cholakian1)\
**Replies:** 0\
**Last updated:** [September 19, 2022, 4:28pm UTC](https://discuss.elastic.co/t/synthetics-heartbeat-8-4-0-release-new-workflow-video-walkthrough/314713 "2022-09-19T16:28:18Z")

</div>

Hey all, it's a little late in coming seeing as 8.4.0 was released almost a month ago, but we wanted to give you a walkthrough of what's new with the Elastic Uptime / Synthetics workflow in 8.4.0. We're trying something …

---

## [Filebeat not exposing the name](https://discuss.elastic.co/t/filebeat-not-exposing-the-name/261854)

<div class="topic-metadata">

**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\
**Replies:** 0\
**Last updated:** [January 21, 2021, 8:48pm UTC](https://discuss.elastic.co/t/filebeat-not-exposing-the-name/261854 "2021-01-21T20:48:23Z")

</div>

Hi All, I'm running Filebeat (7.10.2) in a Docker-Container and wanted to switch from Internal Monitoring to Metricbeat using the Beat module. It works fine so far, but the name configured in filebeat.yml is not used. …

---

## [Percolation against same non-changed docs?](https://discuss.elastic.co/t/percolation-against-same-non-changed-docs/19766)

<div class="topic-metadata">

**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\
**Replies:** 0\
**Last updated:** [September 12, 2014, 8:26pm UTC](https://discuss.elastic.co/t/percolation-against-same-non-changed-docs/19766 "2014-09-12T20:26:42Z")

</div>

I understand the concept of how docs are checked against existing percolators. One thing I am not clear on, does elasticSearch run against percolators again for same un-changed documents? eg. I just indexed 5 mi…

---

## [Elasticsearch is not starting](https://discuss.elastic.co/t/elasticsearch-is-not-starting/287276)

<div class="topic-metadata">

**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\
**Replies:** 5\
**Last updated:** [October 21, 2021, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting/287276 "2021-10-21T13:42:32Z")

</div>

I want to start Elasticsearch on linux system and give command like below at bin path ./elasticsearch OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed…

---

## [How to use logstash keystore values in ruby script](https://discuss.elastic.co/t/how-to-use-logstash-keystore-values-in-ruby-script/208329)

<div class="topic-metadata">

**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\
**Replies:** 5\
**Last updated:** [November 18, 2019, 11:39pm UTC](https://discuss.elastic.co/t/how-to-use-logstash-keystore-values-in-ruby-script/208329 "2019-11-18T23:39:26Z")

</div>

Hi, When using an external ruby script parameters can be used with path =\> "script.rb" script\_params =\> { "url\_host\_port" =\> "http://localhost:9200" "url\_username" =\> "{es\_user}" "url\_pass…

[Previous page](https://discuss.elastic.co/top.md?page=1513&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1515&per_page=50&period=all)
