# Top

**URL:** https://discuss.elastic.co/top.md?page=1518&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1519

---

## [Error: Too many open files](https://discuss.elastic.co/t/error-too-many-open-files/4189)

<div class="topic-metadata">

**Author:** [@Enrique\_Medina\_Monte](https://discuss.elastic.co/u/Enrique_Medina_Monte)\
**Replies:** 5\
**Last updated:** [April 5, 2011, 10:12am UTC](https://discuss.elastic.co/t/error-too-many-open-files/4189 "2011-04-05T10:12:33Z")

</div>

Hi, I know the error message is understandable, but I'd like to understand why and how to fix it. This is ES 0.16.0-SNAPSHOT (from master): \[2011-04-05 00:43:54,320\]\[DEBUG\]\[action.bulk \] \[Magik\] \[cue…

---

## [Elastich search can not start in vps](https://discuss.elastic.co/t/elastich-search-can-not-start-in-vps/298489)

<div class="topic-metadata">

**Author:** [@poozhan](https://discuss.elastic.co/u/poozhan)\
**Replies:** 4\
**Last updated:** [March 1, 2022, 8:20pm UTC](https://discuss.elastic.co/t/elastich-search-can-not-start-in-vps/298489 "2022-03-01T20:20:01Z")

</div>

Hello I installed java and Elasticsearch in vps my vps have 4g ram and 50g ssd when i start Elasticsearch this error display elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticse…

---

## [CCR user permission issue. action \[cluster:admin/settings/update\] is unauthorized for user \[my-certificate-cn\]](https://discuss.elastic.co/t/ccr-user-permission-issue-action-cluster-admin-settings-update-is-unauthorized-for-user-my-certificate-cn/279055)

<div class="topic-metadata">

**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\
**Replies:** 4\
**Last updated:** [July 21, 2021, 7:35am UTC](https://discuss.elastic.co/t/ccr-user-permission-issue-action-cluster-admin-settings-update-is-unauthorized-for-user-my-certificate-cn/279055 "2021-07-21T07:35:49Z")

</div>

I have deployed Elasticsearch 7.7.1. I have created certificate which includes CN=my-certificate-cn and configured transport layer with it. I have created two roles - ccr\_leader and ccr\_follower in accordance with the d…

---

## [Logstash not forwarding messages to elasticsearch but able to write to file locally](https://discuss.elastic.co/t/logstash-not-forwarding-messages-to-elasticsearch-but-able-to-write-to-file-locally/240111)

<div class="topic-metadata">

**Author:** [@satish92](https://discuss.elastic.co/u/satish92)\
**Replies:** 4\
**Last updated:** [July 10, 2020, 7:29am UTC](https://discuss.elastic.co/t/logstash-not-forwarding-messages-to-elasticsearch-but-able-to-write-to-file-locally/240111 "2020-07-10T07:29:51Z")

</div>

Im facing strange issue and im new to elastic stack this is my flow logstash A (input application logs , output kafka topics) =\> kafka (topics , all topics to logstash consumer group) =\> logstash B ( input kafka , outp…

---

## [Object or Nested performance and use?](https://discuss.elastic.co/t/object-or-nested-performance-and-use/214552)

<div class="topic-metadata">

**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\
**Replies:** 4\
**Last updated:** [January 10, 2020, 11:21am UTC](https://discuss.elastic.co/t/object-or-nested-performance-and-use/214552 "2020-01-10T11:21:51Z")

</div>

Hi Support, I have data as below. DELETE test\_nested\_vs\_object PUT test\_nested\_vs\_object { "mappings": { "properties": { "id": { "type":"long" }, "title" : { "type": "text"…

---

## [Meaning dot/ dash at elasticsearch](https://discuss.elastic.co/t/meaning-dot-dash-at-elasticsearch/83657)

<div class="topic-metadata">

**Author:** [@Sharon\_wsf](https://discuss.elastic.co/u/Sharon_wsf)\
**Replies:** 4\
**Last updated:** [April 26, 2017, 8:16am UTC](https://discuss.elastic.co/t/meaning-dot-dash-at-elasticsearch/83657 "2017-04-26T08:16:49Z")

</div>

Hi Team, POST news/bursa/\_search{ "query": { "bool": { "must": \[ { "multi\_match": { "query": "0108.KL" , "fields": \[ "stkno", "tag" ,"content" ,"htext" \] , "operator": "or" } } , { "range": { "CDate": { "gt": "20…

---

## [NoClassDefFoundError for the classes of another plugin](https://discuss.elastic.co/t/noclassdeffounderror-for-the-classes-of-another-plugin/64103)

<div class="topic-metadata">

**Author:** [@chenjinyuan87](https://discuss.elastic.co/u/chenjinyuan87)\
**Replies:** 4\
**Last updated:** [October 28, 2016, 2:28am UTC](https://discuss.elastic.co/t/noclassdeffounderror-for-the-classes-of-another-plugin/64103 "2016-10-28T02:28:38Z")

</div>

I'm developing a plugin which holds a synonym dic and a custom Query. The custom query make advantage of the synonym dic to search synonyms at the same time. And since synonyms are always acceptable words, i need to ad…

---

## [Select external table failed](https://discuss.elastic.co/t/select-external-table-failed/45308)

<div class="topic-metadata">

**Author:** [@Joe\_Yang](https://discuss.elastic.co/u/Joe_Yang)\
**Replies:** 4\
**Last updated:** [March 24, 2016, 9:58am UTC](https://discuss.elastic.co/t/select-external-table-failed/45308 "2016-03-24T09:58:25Z")

</div>

hive\> select \* from user01 limit 5; OK Failed with exception java.io.IOException:org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes failed; tried…

---

## [Wildcards in exact phrase in query\_string search](https://discuss.elastic.co/t/wildcards-in-exact-phrase-in-query-string-search/8515)

<div class="topic-metadata">

**Author:** [@Dara](https://discuss.elastic.co/u/Dara)\
**Replies:** 4\
**Last updated:** [October 23, 2014, 7:33am UTC](https://discuss.elastic.co/t/wildcards-in-exact-phrase-in-query-string-search/8515 "2014-10-23T07:33:38Z")

</div>

Hi, Is it possible to include wildcards in a query\_string query when looking for a phrase? When I search with the following query : { "query":{ "query\_string":{ "default\_operator" : "AND" "analyz…

---

## [Multiple \_id for same document or document alias](https://discuss.elastic.co/t/multiple-id-for-same-document-or-document-alias/307296)

<div class="topic-metadata">

**Author:** [@nerd2000](https://discuss.elastic.co/u/nerd2000)\
**Replies:** 2\
**Last updated:** [June 16, 2022, 7:00am UTC](https://discuss.elastic.co/t/multiple-id-for-same-document-or-document-alias/307296 "2022-06-16T07:00:23Z")

</div>

Is it possible to have multiple ids for the same document or have a alias to a document? Already found this topic but a long time ago, checking if it was implemented meanwhile. The use case: I have a sql database with…

---

## [How to find sum of unique counts when creating a table using discover?](https://discuss.elastic.co/t/how-to-find-sum-of-unique-counts-when-creating-a-table-using-discover/260545)

<div class="topic-metadata">

**Author:** [@learnkibana](https://discuss.elastic.co/u/learnkibana)\
**Replies:** 2\
**Last updated:** [January 11, 2021, 3:04pm UTC](https://discuss.elastic.co/t/how-to-find-sum-of-unique-counts-when-creating-a-table-using-discover/260545 "2021-01-11T15:04:25Z")

</div>

So I created a table using the visualisation console and I managed to get the unique values of the patent IDs. However, I am unable to find the total amount of unique patentIDs. Is there a way I can sum all the 'Unique…

---

## [Cannot run APM Server with fresh installation on Windows 10](https://discuss.elastic.co/t/cannot-run-apm-server-with-fresh-installation-on-windows-10/228081)

<div class="topic-metadata">

**Author:** [@oneoneonepig](https://discuss.elastic.co/u/oneoneonepig)\
**Replies:** 2\
**Last updated:** [May 3, 2020, 1:23pm UTC](https://discuss.elastic.co/t/cannot-run-apm-server-with-fresh-installation-on-windows-10/228081 "2020-05-03T13:23:23Z")

</div>

All configuration is left by default. Port 8200 is not occupied. Elasticsearch is at localhost:9200 without security configured. PS C:\\apm-server-7.6.2-windows-x86\> .\\apm-server.bat setup PS C:\\apm-server-7.6.2-window…

---

## [Logstash as SNMP Trap to GELF Converter, how to split message into seperate fields?](https://discuss.elastic.co/t/logstash-as-snmp-trap-to-gelf-converter-how-to-split-message-into-seperate-fields/214988)

<div class="topic-metadata">

**Author:** [@Salve](https://discuss.elastic.co/u/Salve)\
**Replies:** 2\
**Last updated:** [January 16, 2020, 5:37am UTC](https://discuss.elastic.co/t/logstash-as-snmp-trap-to-gelf-converter-how-to-split-message-into-seperate-fields/214988 "2020-01-16T05:37:25Z")

</div>

Hello, I am new to logstash and I want to use it to convert SNMP Traps to GELF. This is my very first (simple) pipeline. input { snmptrap { id =\> "snmptrap" type =\> "snmptrap" port =\> 1162 } } output {…

---

## [Heartbeat check against websocket URL](https://discuss.elastic.co/t/heartbeat-check-against-websocket-url/160033)

<div class="topic-metadata">

**Author:** [@Franz\_Allan\_Valencia](https://discuss.elastic.co/u/Franz_Allan_Valencia)\
**Replies:** 2\
**Last updated:** [January 4, 2019, 9:57pm UTC](https://discuss.elastic.co/t/heartbeat-check-against-websocket-url/160033 "2019-01-04T21:57:01Z")

</div>

Hi, Is there a way I can check my webservice's websocket's "heartbeat"? I just want heartbeat to be able to connect to a websocket URL and verify a JSON response. I'm currently trying this but its failing - type: http…

---

## [Adding additional geo\_point fields](https://discuss.elastic.co/t/adding-additional-geo-point-fields/162184)

<div class="topic-metadata">

**Author:** [@Kenneth\_M\_Kolano](https://discuss.elastic.co/u/Kenneth_M_Kolano)\
**Replies:** 2\
**Last updated:** [December 27, 2018, 6:40pm UTC](https://discuss.elastic.co/t/adding-additional-geo-point-fields/162184 "2018-12-27T18:40:35Z")

</div>

Hoping someone can assist with where I'm going wrong with adding two additional geoip/geo\_point fields. I've updated each of the default templates on Ubuntu to include the additional points, duplicating the pre-existing …

---

## [Not seeing data in Kibana (suddenly)](https://discuss.elastic.co/t/not-seeing-data-in-kibana-suddenly/152906)

<div class="topic-metadata">

**Author:** [@kprojects](https://discuss.elastic.co/u/kprojects)\
**Replies:** 2\
**Last updated:** [October 18, 2018, 4:58pm UTC](https://discuss.elastic.co/t/not-seeing-data-in-kibana-suddenly/152906 "2018-10-18T16:58:56Z")

</div>

This will be a bit long, but hopefully have enough information to get sorted out.. Yesterday, I set up Elasticsearch, Logstash and Kibana on a clean CentOS 7 VM (hostname kp3). I have two other servers (Both CentOS 6..…

---

## [Help with Grok patterns to parse date and name index from path](https://discuss.elastic.co/t/help-with-grok-patterns-to-parse-date-and-name-index-from-path/141721)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 2\
**Last updated:** [July 26, 2018, 1:35pm UTC](https://discuss.elastic.co/t/help-with-grok-patterns-to-parse-date-and-name-index-from-path/141721 "2018-07-26T13:35:04Z")

</div>

Hi, I kindly ask you some help with these Grok patterns. I have two requirements: the first is to extract the date from path and use it to name the Elasticsearch index. The second is to parse a date with a strange forma…

---

## [Would replacing millisecond with seconds still help query faster?](https://discuss.elastic.co/t/would-replacing-millisecond-with-seconds-still-help-query-faster/136115)

<div class="topic-metadata">

**Author:** [@kennethnanwu](https://discuss.elastic.co/u/kennethnanwu)\
**Replies:** 2\
**Last updated:** [June 18, 2018, 3:50pm UTC](https://discuss.elastic.co/t/would-replacing-millisecond-with-seconds-still-help-query-faster/136115 "2018-06-18T15:50:11Z")

</div>

I was getting lots of timeout errors so I was trying to improve query speed and came across this thread: Query much faster against timestamp in seconds than milliseconds I tried using seconds for timestamp in my environ…

---

## [Filebeat not able to read multiple log files](https://discuss.elastic.co/t/filebeat-not-able-to-read-multiple-log-files/102817)

<div class="topic-metadata">

**Author:** [@atosguest](https://discuss.elastic.co/u/atosguest)\
**Replies:** 2\
**Last updated:** [October 6, 2017, 6:11am UTC](https://discuss.elastic.co/t/filebeat-not-able-to-read-multiple-log-files/102817 "2017-10-06T06:11:18Z")

</div>

Hi All, I am using Filebeat 5.5 with ELK stack 5.5. I configured filebeat.yml file to sent all logs to logstash. it is working fine when I am giving single log file but when I am trying to configure it for multiple log…

---

## [X-pack license](https://discuss.elastic.co/t/x-pack-license/72578)

<div class="topic-metadata">

**Author:** [@redrise](https://discuss.elastic.co/u/redrise)\
**Replies:** 2\
**Last updated:** [January 24, 2017, 7:55am UTC](https://discuss.elastic.co/t/x-pack-license/72578 "2017-01-24T07:55:58Z")

</div>

Hi, Do you have to pay to license non data holding elasticsearch nodes? e.g. Coordinating only nodes Regards, Tom

---

## [Does anyone know why logstash is only inserting a few fields and no data into Elasticsearch?](https://discuss.elastic.co/t/does-anyone-know-why-logstash-is-only-inserting-a-few-fields-and-no-data-into-elasticsearch/24749)

<div class="topic-metadata">

**Author:** [@adepteo](https://discuss.elastic.co/u/adepteo)\
**Replies:** 2\
**Last updated:** [July 1, 2015, 7:40pm UTC](https://discuss.elastic.co/t/does-anyone-know-why-logstash-is-only-inserting-a-few-fields-and-no-data-into-elasticsearch/24749 "2015-07-01T19:40:26Z")

</div>

Hi, I am using the latest versions of Logstash and a 4 node Elasticsearch cluster. I recently attended the ELK training in Manchester and my new Logstash setup happily puts data into my test single node Elasticsearch th…

---

## ["Could not find the data view" error](https://discuss.elastic.co/t/could-not-find-the-data-view-error/364143)

<div class="topic-metadata">

**Author:** [@MeandraX](https://discuss.elastic.co/u/MeandraX)\
**Replies:** 3\
**Last updated:** [August 1, 2024, 2:35pm UTC](https://discuss.elastic.co/t/could-not-find-the-data-view-error/364143 "2024-08-01T14:35:51Z")

</div>

hello everyone, I was working on the test environment of the “Data Analysis with Kibana (On-Demand)” course creating dashboards. Coming to a certain point in the course, restarting the lab with Kibana, I can no longer s…

---

## [Node.js vulnerabilities](https://discuss.elastic.co/t/node-js-vulnerabilities/359102)

<div class="topic-metadata">

**Author:** [@jloas](https://discuss.elastic.co/u/jloas)\
**Replies:** 3\
**Last updated:** [May 10, 2024, 2:30pm UTC](https://discuss.elastic.co/t/node-js-vulnerabilities/359102 "2024-05-10T14:30:24Z")

</div>

We use Elasticsearch/Kibana and we continually have our scanners flagging node.js vulnerabilities b/c the version of node.js is present in our applications/on our nodes. The issue is Elastic has not called out any of the…

---

## [Secure Setting gcs.client.default.credentials\_file does not get updated](https://discuss.elastic.co/t/secure-setting-gcs-client-default-credentials-file-does-not-get-updated/261280)

<div class="topic-metadata">

**Author:** [@jonathan.y.lee](https://discuss.elastic.co/u/jonathan.y.lee)\
**Replies:** 3\
**Last updated:** [January 21, 2021, 4:19pm UTC](https://discuss.elastic.co/t/secure-setting-gcs-client-default-credentials-file-does-not-get-updated/261280 "2021-01-21T16:19:12Z")

</div>

Hi, I am experiencing an issue with a deployment of ECK. I have updated our k8s Secret which contains gcs.client.default.credentials\_file however this does not have any effect. When I try to create a new Snapshot Repos…

---

## [DevTools menu is not shown in the menu panel of Kibana 5.6.16](https://discuss.elastic.co/t/devtools-menu-is-not-shown-in-the-menu-panel-of-kibana-5-6-16/246701)

<div class="topic-metadata">

**Author:** [@girlie.tan](https://discuss.elastic.co/u/girlie.tan)\
**Replies:** 3\
**Last updated:** [September 4, 2020, 10:43am UTC](https://discuss.elastic.co/t/devtools-menu-is-not-shown-in-the-menu-panel-of-kibana-5-6-16/246701 "2020-09-04T10:43:22Z")

</div>

DevTools menu is not shown in the menu panel of Kibana 5.6.16 Please share the step by step to troubleshoot. Thank you.

---

## [Pipeline/output.go:121 Failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure/176223)

<div class="topic-metadata">

**Author:** [@setiseta](https://discuss.elastic.co/u/setiseta)\
**Replies:** 0\
**Last updated:** [April 10, 2019, 1:07pm UTC](https://discuss.elastic.co/t/pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure/176223 "2019-04-10T13:07:50Z")

</div>

Hi, im stuck at getting the obove error. don't know what went wrong. maybe someone here has some hints? Here is a log snippet: DEBUG \[elasticsearch\] elasticsearch/client.go:338 PublishEvents: 2 events have been…

---

## [How can I create the kibana index via environment variables](https://discuss.elastic.co/t/how-can-i-create-the-kibana-index-via-environment-variables/144520)

<div class="topic-metadata">

**Author:** [@asallemi](https://discuss.elastic.co/u/asallemi)\
**Replies:** 3\
**Last updated:** [August 16, 2018, 12:07am UTC](https://discuss.elastic.co/t/how-can-i-create-the-kibana-index-via-environment-variables/144520 "2018-08-16T00:07:10Z")

</div>

Hi guys, I am using Kibana and Elasticsearch with Docker. I need to run the Docker container of Kibana with index which begin for example with extract\_logs\*. Is that possible ? if yes, how can I do that ?

---

## [Mapping dynamique?](https://discuss.elastic.co/t/mapping-dynamique/108133)

<div class="topic-metadata">

**Author:** [@mat.bst](https://discuss.elastic.co/u/mat.bst)\
**Replies:** 3\
**Last updated:** [November 20, 2017, 8:31am UTC](https://discuss.elastic.co/t/mapping-dynamique/108133 "2017-11-20T08:31:54Z")

</div>

Bonjour à tous, Il y a une petite question (bête) que je me pose... Nous allons dire qu'a ce jour, j'indexe des documents ayant tous les même champs champsA champsB champsC Vais-je rencontrer un problème le jour ou…

---

## [Docker ELK Stack, changed compose, now shards missing](https://discuss.elastic.co/t/docker-elk-stack-changed-compose-now-shards-missing/103429)

<div class="topic-metadata">

**Author:** [@Brandon\_Martin](https://discuss.elastic.co/u/Brandon_Martin)\
**Replies:** 3\
**Last updated:** [October 12, 2017, 5:26pm UTC](https://discuss.elastic.co/t/docker-elk-stack-changed-compose-now-shards-missing/103429 "2017-10-12T17:26:20Z")

</div>

I'm using elasticsearch docker containers for my nodes. I began experimenting with Scripts, and needed to add a volume. Here's what my docker-compose now contains elasticsearch: build: elasticsearch/ container\_…

---

## [Elastic setup (slow queries)](https://discuss.elastic.co/t/elastic-setup-slow-queries/88237)

<div class="topic-metadata">

**Author:** [@alex19](https://discuss.elastic.co/u/alex19)\
**Replies:** 3\
**Last updated:** [June 5, 2017, 2:01pm UTC](https://discuss.elastic.co/t/elastic-setup-slow-queries/88237 "2017-06-05T14:01:12Z")

</div>

Hi all! We are using Elasticsearch 2.4 to index and search web pages, and recently it started to get slow. Currently we have 5 nodes (4 data nodes) with: - 16 GB of RAM allocated to elastic (out of 32) - 8 cores - 300 …

---

## [Error during installing Kibana](https://discuss.elastic.co/t/error-during-installing-kibana/69326)

<div class="topic-metadata">

**Author:** [@Nikolai](https://discuss.elastic.co/u/Nikolai)\
**Replies:** 3\
**Last updated:** [December 21, 2016, 12:53pm UTC](https://discuss.elastic.co/t/error-during-installing-kibana/69326 "2016-12-21T12:53:48Z")

</div>

I get error during while installing kibana: Error: 'Internal Server Error' {"type":"log","@timestamp":"2016-12-16T21:45:37Z","tags":\["info","optimize"\],"pid":14052,"message":"Optimizing and caching bundles for graph, …

---

## [Most efficient way to model data in Elasticsearch](https://discuss.elastic.co/t/most-efficient-way-to-model-data-in-elasticsearch/51061)

<div class="topic-metadata">

**Author:** [@psilos](https://discuss.elastic.co/u/psilos)\
**Replies:** 3\
**Last updated:** [June 14, 2016, 5:08pm UTC](https://discuss.elastic.co/t/most-efficient-way-to-model-data-in-elasticsearch/51061 "2016-06-14T17:08:40Z")

</div>

I have an example of modelling an commence site. Say that the site has few hundreds shops and few millions products. The products per shop range: 1000-100.000 products/shop. I need to be able to aggregate the products an…

---

## [Merge Pull](https://discuss.elastic.co/t/merge-pull/48987)

<div class="topic-metadata">

**Author:** [@jchoinski](https://discuss.elastic.co/u/jchoinski)\
**Replies:** 3\
**Last updated:** [May 3, 2016, 9:45pm UTC](https://discuss.elastic.co/t/merge-pull/48987 "2016-05-03T21:45:41Z")

</div>

Hello! I ran into a problem where I need to specify an index in the elasticsearch filter plugin. There is a pull request that let's the user specify which index they want to search, but it hasn't been merged. Will this…

---

## [String and Float for a multi\_field?](https://discuss.elastic.co/t/string-and-float-for-a-multi-field/15435)

<div class="topic-metadata">

**Author:** [@Arthur\_Denning](https://discuss.elastic.co/u/Arthur_Denning)\
**Replies:** 3\
**Last updated:** [January 28, 2014, 2:30pm UTC](https://discuss.elastic.co/t/string-and-float-for-a-multi-field/15435 "2014-01-28T14:30:28Z")

</div>

I have a field that might take string or numeric value, naturally I would want to order it numerically if the values turn out to be number. I tried to map a multi\_field with both string and float, but it would not w…

---

## [Delete by query deletes only 1000 documents, then quits](https://discuss.elastic.co/t/delete-by-query-deletes-only-1000-documents-then-quits/350529)

<div class="topic-metadata">

**Author:** [@d8d4a522fb1d394d9705](https://discuss.elastic.co/u/d8d4a522fb1d394d9705)\
**Replies:** 7\
**Last updated:** [January 8, 2024, 9:14am UTC](https://discuss.elastic.co/t/delete-by-query-deletes-only-1000-documents-then-quits/350529 "2024-01-08T09:14:41Z")

</div>

I am using the following the api to delete documents older than 60 days: POST /index\_name/\_delete\_by\_query?conflicts=proceed { "query": { "range": { "@timestamp": {"lte": "now-60d/d"} } } } My inde…

---

## [Sum of document fields with same timestamp](https://discuss.elastic.co/t/sum-of-document-fields-with-same-timestamp/213717)

<div class="topic-metadata">

**Author:** [@irfancnk](https://discuss.elastic.co/u/irfancnk)\
**Replies:** 1\
**Last updated:** [January 3, 2020, 5:16pm UTC](https://discuss.elastic.co/t/sum-of-document-fields-with-same-timestamp/213717 "2020-01-03T17:16:53Z")

</div>

Hi, I have a bunch of network throughput document looking exactly like the following. {timestamp: 1578038384.011689, ip1: 192.168.56.1, port1: 5353, ip2: 224.0.0.251, port2: 5353, recv: 14.0, sent: 0.2, total: 14.2} {…

---

## [How to update max\_snapshot\_bytes\_per\_sec setting for an existing repository?](https://discuss.elastic.co/t/how-to-update-max-snapshot-bytes-per-sec-setting-for-an-existing-repository/204797)

<div class="topic-metadata">

**Author:** [@Rajiv](https://discuss.elastic.co/u/Rajiv)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 4:05pm UTC](https://discuss.elastic.co/t/how-to-update-max-snapshot-bytes-per-sec-setting-for-an-existing-repository/204797 "2019-10-24T16:05:17Z")

</div>

Hello: Is there a way to update the max\_snapshot\_bytes\_per\_sec setting on a repository without deleting and recreating it? We have an S3 repo configured with a bunch of snapshots. As the daily data volume has grown the…

---

## [Issue with filebeat sending data to logstash](https://discuss.elastic.co/t/issue-with-filebeat-sending-data-to-logstash/93295)

<div class="topic-metadata">

**Author:** [@Raghunandan\_Sk](https://discuss.elastic.co/u/Raghunandan_Sk)\
**Replies:** 1\
**Last updated:** [July 16, 2017, 12:30pm UTC](https://discuss.elastic.co/t/issue-with-filebeat-sending-data-to-logstash/93295 "2017-07-16T12:30:05Z")

</div>

I have setup the filebeat to send logs to logstash . When I first started the filebeat it sent the data which I could see in kibana. (Data from filebeat to logstash to elasticsearch then to kibana) . But when when I stop…

---

## [Unable to install logstash plugin offline](https://discuss.elastic.co/t/unable-to-install-logstash-plugin-offline/75676)

<div class="topic-metadata">

**Author:** [@TinTin](https://discuss.elastic.co/u/TinTin)\
**Replies:** 1\
**Last updated:** [February 21, 2017, 7:08pm UTC](https://discuss.elastic.co/t/unable-to-install-logstash-plugin-offline/75676 "2017-02-21T19:08:41Z")

</div>

Hi, I have built a logstash-output-custom plugin, which I can install offline in my local logstash setup. But, if I try to install the same when trying to create a docker image, it fails with the following error: t-m…

---

## [How to install graph into ES 2.0.0?](https://discuss.elastic.co/t/how-to-install-graph-into-es-2-0-0/60410)

<div class="topic-metadata">

**Author:** [@abasu](https://discuss.elastic.co/u/abasu)\
**Replies:** 1\
**Last updated:** [September 13, 2016, 5:04pm UTC](https://discuss.elastic.co/t/how-to-install-graph-into-es-2-0-0/60410 "2016-09-13T17:04:18Z")

</div>

Tried: plugin install license plugin install graph See errors: root@vagrant-ubuntu-trusty-64:/usr/share/elasticsearch/bin# ./plugin install graph --verbose -\> Installing graph... Trying https://download.elastic.co/…

---

## [What happens when I stop the Winlogbeat service?](https://discuss.elastic.co/t/what-happens-when-i-stop-the-winlogbeat-service/45389)

<div class="topic-metadata">

**Author:** [@Kevin-Valle](https://discuss.elastic.co/u/Kevin-Valle)\
**Replies:** 1\
**Last updated:** [March 24, 2016, 10:57pm UTC](https://discuss.elastic.co/t/what-happens-when-i-stop-the-winlogbeat-service/45389 "2016-03-24T22:57:27Z")

</div>

Hi, just a quick question regarding what happens when the Winlogbeat service is stopped: Is there a possibility of losing unsent events? Or does the service wait until all unsent messages are sent before shutting down? W…

---

## [Indexing PDF documents with ElasticSearch](https://discuss.elastic.co/t/indexing-pdf-documents-with-elasticsearch/13909)

<div class="topic-metadata">

**Author:** [@cs\_irfan](https://discuss.elastic.co/u/cs_irfan)\
**Replies:** 1\
**Last updated:** [October 10, 2013, 4:02pm UTC](https://discuss.elastic.co/t/indexing-pdf-documents-with-elasticsearch/13909 "2013-10-10T16:02:28Z")

</div>

Hello Dear All, I am beginner to ElasticSearch and very much interested in ElasticSearch. I am using ElasticSearch 0.90.5 binary on Windows. I have copied Apache Tika 1.4 jar file (tika-app-1.4.jar) and elasticsea…

---

## [Multi-level facet](https://discuss.elastic.co/t/multi-level-facet/4667)

<div class="topic-metadata">

**Author:** [@Raul\_Jr\_Martinez](https://discuss.elastic.co/u/Raul_Jr_Martinez)\
**Replies:** 7\
**Last updated:** [July 25, 2011, 1:07pm UTC](https://discuss.elastic.co/t/multi-level-facet/4667 "2011-07-25T13:07:30Z")

</div>

Hi, I'm mostly working with Endeca related projects and I see ElasticSearch as an interesting open source project especially when dealing with massive data -- through auto-autosharding. Endeca provides multi-leve…

---

## [Search across index](https://discuss.elastic.co/t/search-across-index/182593)

<div class="topic-metadata">

**Author:** [@kent120103](https://discuss.elastic.co/u/kent120103)\
**Replies:** 8\
**Last updated:** [May 28, 2019, 8:56am UTC](https://discuss.elastic.co/t/search-across-index/182593 "2019-05-28T08:56:15Z")

</div>

Dear Eleasticsearch team, My team is facing an interesting situation. There are two web services - "Account" and "Membership". "Account" service stores customers' names, gender, date\_of\_birth, etc. "Membership" service …

---

## [Make a field "less specific"](https://discuss.elastic.co/t/make-a-field-less-specific/72473)

<div class="topic-metadata">

**Author:** [@migou](https://discuss.elastic.co/u/migou)\
**Replies:** 8\
**Last updated:** [January 24, 2017, 1:53pm UTC](https://discuss.elastic.co/t/make-a-field-less-specific/72473 "2017-01-24T13:53:33Z")

</div>

Hi, I am new in Logstash, I could perform my first log analysis without any problem but I'm facing a situation I have not find a solution for. So in my logs I have a path that I manage to isolate easily, but here is …

---

## [Error Flushing Buffer at interval on Output plugin Elasticsearch](https://discuss.elastic.co/t/error-flushing-buffer-at-interval-on-output-plugin-elasticsearch/39373)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 0\
**Last updated:** [January 16, 2016, 9:00am UTC](https://discuss.elastic.co/t/error-flushing-buffer-at-interval-on-output-plugin-elasticsearch/39373 "2016-01-16T09:00:11Z")

</div>

I using message queue RabbitMQ, i have 3 LS Indexer. (LS version 2.1.1 (8GB + 8Core), ES version 2.1.1 run with 3 Node (32GB RAM+16Core / node) ) I start 2 LS Indexer normal and LS-Indexer-3, run with --debug adn i got …

---

## [Distributing Dashboards](https://discuss.elastic.co/t/distributing-dashboards/120388)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 3\
**Last updated:** [February 19, 2018, 3:07am UTC](https://discuss.elastic.co/t/distributing-dashboards/120388 "2018-02-19T03:07:20Z")

</div>

I've developed a process for ingesting DMARC aggregate reports and made some sample visualizations/dashboards. Is there a way to export them for others to readily import?

---

## [Definition of plugin "urlForwarding" not found and may have failed to load](https://discuss.elastic.co/t/definition-of-plugin-urlforwarding-not-found-and-may-have-failed-to-load/357810)

<div class="topic-metadata">

**Author:** [@ZhenyaPav](https://discuss.elastic.co/u/ZhenyaPav)\
**Replies:** 2\
**Last updated:** [April 27, 2024, 9:49pm UTC](https://discuss.elastic.co/t/definition-of-plugin-urlforwarding-not-found-and-may-have-failed-to-load/357810 "2024-04-27T21:49:27Z")

</div>

When trying to access Kibana from a reverse proxy with Cloudflare DNS, I get this error: Version: 8.13.2 Build: 72154 Error: Definition of plugin "urlForwarding" not found and may have failed to load. createPluginInstan…

---

## [Does Kibana dashboard inherits filters from visualization?](https://discuss.elastic.co/t/does-kibana-dashboard-inherits-filters-from-visualization/224751)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [March 24, 2020, 12:40pm UTC](https://discuss.elastic.co/t/does-kibana-dashboard-inherits-filters-from-visualization/224751 "2020-03-24T12:40:11Z")

</div>

I have filter by hostgroup in my visualization, and seems that dashboard inherits this filter, but when I press filters in dahboard, Im still habe the posibility to change the hostgroup. this will override my previous f…

---

## [Taking snapshots concurrently of each index in Elasticsearch](https://discuss.elastic.co/t/taking-snapshots-concurrently-of-each-index-in-elasticsearch/212339)

<div class="topic-metadata">

**Author:** [@ishanjain](https://discuss.elastic.co/u/ishanjain)\
**Replies:** 2\
**Last updated:** [December 19, 2019, 2:00pm UTC](https://discuss.elastic.co/t/taking-snapshots-concurrently-of-each-index-in-elasticsearch/212339 "2019-12-19T14:00:06Z")

</div>

Hi! I have written a module which issues snapshot creation requests for an index and sends it off to a ES cluster. This module is deployed on ECS and can run issue snapshot creation requests concurrently. Right now, Th…

[Previous page](https://discuss.elastic.co/top.md?page=1517&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1519&per_page=50&period=all)
