# Top **URL:** https://discuss.elastic.co/top.md?page=152&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 153 --- ## [Nested aggregation slows query from ~400ms to 10s](https://discuss.elastic.co/t/nested-aggregation-slows-query-from-400ms-to-10s/147539)
**Author:** [@newnewb](https://discuss.elastic.co/u/newnewb)\ **Replies:** 10\ **Last updated:** [September 10, 2018, 2:18pm UTC](https://discuss.elastic.co/t/nested-aggregation-slows-query-from-400ms-to-10s/147539 "2018-09-10T14:18:15Z")
Hello everyone, I created a simple query which looks for specific 5 car ID's and aggregates upon them. It's extremely fast, takes about 300-500ms. But if I add a nested aggregation which looks only for a specific colour… --- ## [Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/319776)
**Author:** [@Dmitriy\_Esin](https://discuss.elastic.co/u/Dmitriy_Esin)\ **Replies:** 9\ **Last updated:** [November 25, 2022, 4:21pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/319776 "2022-11-25T16:21:01Z")
Hi! I trying to install EFK stack into my k8s GCP cluster. I use official helm charts from https://helm.elastic.co: elasticsearch and kibana I use automatically generated certificates and credentials on deployment sta… --- ## [Document found with \_search but not with GET](https://discuss.elastic.co/t/document-found-with--search-but-not-with-get/17719)
**Author:** [@Pir\_Abdul\_Rasool\_Qur](https://discuss.elastic.co/u/Pir_Abdul_Rasool_Qur)\ **Replies:** 21\ **Last updated:** [June 5, 2014, 8:28am UTC](https://discuss.elastic.co/t/document-found-with--search-but-not-with-get/17719 "2014-06-05T08:28:59Z")
Hi We have a single machine elastic search server (8 shards but all hosted at the same machine). Index contains 7 million documents. We do not specify any custom routing when indexing the documents. We are using E… --- ## [KIbana server not ready yet. Update from 7.5.2 to 7.6.2](https://discuss.elastic.co/t/kibana-server-not-ready-yet-update-from-7-5-2-to-7-6-2/228100)
**Author:** [@MichaelA](https://discuss.elastic.co/u/MichaelA)\ **Replies:** 16\ **Last updated:** [April 16, 2020, 3:14pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-yet-update-from-7-5-2-to-7-6-2/228100 "2020-04-16T15:14:36Z")
Hi, dear community! I updated Kibana and Elasticsearch from version 7.5.2 to 7.6.2 and received an error - KIbana server not ready yet. I do not see anything suspicious in the logs except that the Kibana service is rest… --- ## [Logstash going to failed state after restart](https://discuss.elastic.co/t/logstash-going-to-failed-state-after-restart/189373)
**Author:** [@soumya2](https://discuss.elastic.co/u/soumya2)\ **Replies:** 10\ **Last updated:** [July 15, 2019, 11:47am UTC](https://discuss.elastic.co/t/logstash-going-to-failed-state-after-restart/189373 "2019-07-15T11:47:17Z")
Hi Team, i am configured ELK stack for visualizing Squid logs in Kibana. i use filebeat in squid server to send the log to logstash. In logstash i filtered the squid logs using grok . but after restart logstash it goe… --- ## [Percentage shows top of line graph](https://discuss.elastic.co/t/percentage-shows-top-of-line-graph/240096)
**Author:** [@krille.com](https://discuss.elastic.co/u/krille.com)\ **Replies:** 10\ **Last updated:** [July 31, 2020, 12:36pm UTC](https://discuss.elastic.co/t/percentage-shows-top-of-line-graph/240096 "2020-07-31T12:36:59Z")
Is it possible to have the percentage lines showed over the Y-axis instead of the top of the graph? It look likes this now: Is it possible to have them like these lines instead? --- ## [Question: Inconsistent count results](https://discuss.elastic.co/t/question-inconsistent-count-results/2997)
**Author:** [@Yatir\_Ben\_Shlomo\_3](https://discuss.elastic.co/u/Yatir_Ben_Shlomo_3)\ **Replies:** 9\ **Last updated:** [October 26, 2011, 7:56pm UTC](https://discuss.elastic.co/t/question-inconsistent-count-results/2997 "2011-10-26T19:56:16Z")
Hi, Can someone explain why consecutive calls to the count REST API will give me different results ? Note that the results are swinging constantly between 2 numbers: 11340990 and 11341063 (needless to say I am not i… --- ## [Intermittent timeouts (Doesn't appear to stop service)](https://discuss.elastic.co/t/intermittent-timeouts-doesnt-appear-to-stop-service/218132)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 9\ **Last updated:** [February 12, 2020, 10:59pm UTC](https://discuss.elastic.co/t/intermittent-timeouts-doesnt-appear-to-stop-service/218132 "2020-02-12T22:59:02Z")
Hello, so we are starting a project where we are moving to ELK 7, with the Elasticsearch and Kibana being offered by elastic.co rather than self hosted. In our ELK6 install, I had a Nginx loadbalancer balancing our logs… --- ## [Still getting 'max open shards' error after re-indexing and decreasing shards to 850](https://discuss.elastic.co/t/still-getting-max-open-shards-error-after-re-indexing-and-decreasing-shards-to-850/241369)
**Author:** [@anda](https://discuss.elastic.co/u/anda)\ **Replies:** 9\ **Last updated:** [July 17, 2020, 5:42am UTC](https://discuss.elastic.co/t/still-getting-max-open-shards-error-after-re-indexing-and-decreasing-shards-to-850/241369 "2020-07-17T05:42:49Z")
Hello, I'm running ELK 7.4 and have been getting this error in Logstash logs for basically every event that's being processed: \[2020-07-15T15:24:06,789\]\[WARN \]\[logstash.outputs.elasticsearch\]\[enm\] Could not index event… --- ## [How to get kibana advanced settings from API?](https://discuss.elastic.co/t/how-to-get-kibana-advanced-settings-from-api/236759)
**Author:** [@sudosu](https://discuss.elastic.co/u/sudosu)\ **Replies:** 9\ **Last updated:** [June 18, 2020, 4:53am UTC](https://discuss.elastic.co/t/how-to-get-kibana-advanced-settings-from-api/236759 "2020-06-18T04:53:44Z")
Hi I would like to get the advanced settings in kibana from an API call. I tried GET .kibana/\_search { "query": { "term": { "type": { "value": "config" } } } }\`\`\` but I am gettin… --- ## [Having a hard time parsing artifactory logs using 7.3.0](https://discuss.elastic.co/t/having-a-hard-time-parsing-artifactory-logs-using-7-3-0/195170)
**Author:** [@starrynight](https://discuss.elastic.co/u/starrynight)\ **Replies:** 10\ **Last updated:** [August 26, 2019, 12:58pm UTC](https://discuss.elastic.co/t/having-a-hard-time-parsing-artifactory-logs-using-7-3-0/195170 "2019-08-26T12:58:21Z")
Having a hard time parsing artifactory logs -- I've utilized the grok debugger in kibana as well as referenced jfrog's page regarding parsing logs -- but still it seems to not register. I've inserted greedydata in a lot … --- ## [Issues installing App Search locally using docker](https://discuss.elastic.co/t/issues-installing-app-search-locally-using-docker/192206)
**Author:** [@jubstuff](https://discuss.elastic.co/u/jubstuff)\ **Replies:** 10\ **Last updated:** [July 29, 2019, 11:39am UTC](https://discuss.elastic.co/t/issues-installing-app-search-locally-using-docker/192206 "2019-07-29T11:39:09Z")
Hello, I wanted to give App Search a try and I wanted to install it locally using docker. I followed the instructions located at App Search, Self Managed, Installation | Swiftype Documentation but it seems that no matt… --- ## [I commented some lines but elasticsearch can't work](https://discuss.elastic.co/t/i-commented-some-lines-but-elasticsearch-cant-work/102437)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 11\ **Last updated:** [October 3, 2017, 2:01pm UTC](https://discuss.elastic.co/t/i-commented-some-lines-but-elasticsearch-cant-work/102437 "2017-10-03T14:01:56Z")
Hello. I added some lines in "elasticsearch.yml" and commented them but elasticsearch can't run: # ----------------------------------- Paths ------------------------------------ # # Path to directory where to store the… --- ## [What is Elasticsearch instance?](https://discuss.elastic.co/t/what-is-elasticsearch-instance/37073)
**Author:** [@nqioweryuadfge](https://discuss.elastic.co/u/nqioweryuadfge)\ **Replies:** 9\ **Last updated:** [December 14, 2015, 9:23am UTC](https://discuss.elastic.co/t/what-is-elasticsearch-instance/37073 "2015-12-14T09:23:00Z")
I want to know what this Elasticsearch instance is! there is no proper documentation for beginners in Windows, and that is why we are asking so many questions! https://www.elastic.co/guide/en/kibana/current/setup.html … --- ## [My lifecycle policy is not working](https://discuss.elastic.co/t/my-lifecycle-policy-is-not-working/332856)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 10\ **Last updated:** [May 11, 2023, 2:09am UTC](https://discuss.elastic.co/t/my-lifecycle-policy-is-not-working/332856 "2023-05-11T02:09:47Z")
I want to automatically delete indexes that are 60 days old and have set up the following lifecycle policy. # curl -XGET '\_ilm/policy/its\_index-policy?pretty' { "its\_index-policy" : { "version" : 1, "modified\_… --- ## [Why is it not possible to set min\_score within app search?](https://discuss.elastic.co/t/why-is-it-not-possible-to-set-min-score-within-app-search/258419)
**Author:** [@mrregex](https://discuss.elastic.co/u/mrregex)\ **Replies:** 15\ **Last updated:** [August 12, 2024, 1:05pm UTC](https://discuss.elastic.co/t/why-is-it-not-possible-to-set-min-score-within-app-search/258419 "2024-08-12T13:05:09Z")
As the title, i would like to know how it is not possible to filter on the search score? I think this should be a really easy and useful feature, its even standard on the base elastic engine. I do not understand this, im… --- ## [Jolokia module not displaying threadcount in kibana](https://discuss.elastic.co/t/jolokia-module-not-displaying-threadcount-in-kibana/191041)
**Author:** [@cjb312](https://discuss.elastic.co/u/cjb312)\ **Replies:** 15\ **Last updated:** [July 19, 2019, 5:42am UTC](https://discuss.elastic.co/t/jolokia-module-not-displaying-threadcount-in-kibana/191041 "2019-07-19T05:42:35Z")
Like the title says I cannot see the amount of threads in kibana here is my current jolokia.yml file: # Module: jolokia # Docs: https://www.elastic.co/guide/en/beats/metricbeat/7.1/metricbeat-module-jolokia.html - modu… --- ## [Mapping Netflow Data (NSEL)](https://discuss.elastic.co/t/mapping-netflow-data-nsel/97316)
**Author:** [@cdomansky](https://discuss.elastic.co/u/cdomansky)\ **Replies:** 10\ **Last updated:** [August 30, 2017, 2:14pm UTC](https://discuss.elastic.co/t/mapping-netflow-data-nsel/97316 "2017-08-30T14:14:20Z")
Am new to the Elastic Stack and my 1st project with it is to analyze Netflow data from a Cisco ASA which actually pushes out NSEL as opposed to regular Netflow \[v5,9\] packets. The problem that I am running into is that … --- ## [Clustering with Elasticsearch issues](https://discuss.elastic.co/t/clustering-with-elasticsearch-issues/48327)
**Author:** [@ProjAlpha](https://discuss.elastic.co/u/ProjAlpha)\ **Replies:** 12\ **Last updated:** [April 30, 2016, 7:26pm UTC](https://discuss.elastic.co/t/clustering-with-elasticsearch-issues/48327 "2016-04-30T19:26:37Z")
Hi, Think I'm going crazy with this, Using the latest stable release of Elasticsearch and testing the cluster-function on ubuntu 14.04. They only joins if using: network.host discovery.zen.ping.unicast.hosts With 3… --- ## [Running benchmarking on existing index](https://discuss.elastic.co/t/running-benchmarking-on-existing-index/114322)
**Author:** [@Alp1](https://discuss.elastic.co/u/Alp1)\ **Replies:** 9\ **Last updated:** [January 15, 2018, 1:59pm UTC](https://discuss.elastic.co/t/running-benchmarking-on-existing-index/114322 "2018-01-15T13:59:37Z")
Hi We have few already created indexes(with data) on elastic and i want to get search performance on existing indexes. As i understand from docs, we can use "auto-managed":false to stop rally creating new index. I hav… --- ## [Logstash installation on windows](https://discuss.elastic.co/t/logstash-installation-on-windows/52609)
**Author:** [@Surya](https://discuss.elastic.co/u/Surya)\ **Replies:** 10\ **Last updated:** [June 14, 2016, 7:40am UTC](https://discuss.elastic.co/t/logstash-installation-on-windows/52609 "2016-06-14T07:40:08Z")
steps to install logstash in windows. --- ## [Grok failure and Failed to parse query](https://discuss.elastic.co/t/grok-failure-and-failed-to-parse-query/137742)
**Author:** [@Dave061](https://discuss.elastic.co/u/Dave061)\ **Replies:** 16\ **Last updated:** [June 29, 2018, 6:20am UTC](https://discuss.elastic.co/t/grok-failure-and-failed-to-parse-query/137742 "2018-06-29T06:20:52Z")
Hello, Guys I'am trying couple of days to setup logstash 6.3.0 on Windows Server 2012 r2.I want to parse IIS logs version on IIS is (8.5.9600) to ElasticSearch.Here is my logstash config ---\> input { file { type =\> … --- ## [Timezone problem when output to Elasticsearch](https://discuss.elastic.co/t/timezone-problem-when-output-to-elasticsearch/312252)
**Author:** [@kent010341](https://discuss.elastic.co/u/kent010341)\ **Replies:** 10\ **Last updated:** [August 18, 2022, 4:36am UTC](https://discuss.elastic.co/t/timezone-problem-when-output-to-elasticsearch/312252 "2022-08-18T04:36:14Z")
I have multiple log files with the date on their file name, and I want to read them with the file input plugin and send them to an Elasticsearch index (the index name contains the date). However, I have some logs being … --- ## [Logstash if condition regex not working](https://discuss.elastic.co/t/logstash-if-condition-regex-not-working/310737)
**Author:** [@Gosia96](https://discuss.elastic.co/u/Gosia96)\ **Replies:** 10\ **Last updated:** [August 1, 2022, 1:56pm UTC](https://discuss.elastic.co/t/logstash-if-condition-regex-not-working/310737 "2022-08-01T13:56:53Z")
Hi, I'm trying to use regex in the if condition in logstash. My goal is to send the output into 2 different indexes basing on what the field "tags" contains. So far I had no luck with it. Logstash simply ignores my co… --- ## [putMapping is very slow](https://discuss.elastic.co/t/putmapping-is-very-slow/63977)
**Author:** [@111138](https://discuss.elastic.co/u/111138)\ **Replies:** 10\ **Last updated:** [November 3, 2016, 8:11am UTC](https://discuss.elastic.co/t/putmapping-is-very-slow/63977 "2016-11-03T08:11:46Z")
i have a exists index and more type( greater than 10000+)。 i trying put mapping to a type. its work,but is very slow(greater than 10s+). its problem ? how to fix it ? --- ## [How to reindex part of the data?](https://discuss.elastic.co/t/how-to-reindex-part-of-the-data/57753)
**Author:** [@WangXiangUSTC](https://discuss.elastic.co/u/WangXiangUSTC)\ **Replies:** 9\ **Last updated:** [August 12, 2016, 1:48am UTC](https://discuss.elastic.co/t/how-to-reindex-part-of-the-data/57753 "2016-08-12T01:48:00Z")
I want to reindex a old index's data to a new index, but only part of the old index is useful, I don't need to reindex all of the old index's data. So, is there any way to do this? --- ## [Failed to start Kibana with HTTPS](https://discuss.elastic.co/t/failed-to-start-kibana-with-https/271943)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 12\ **Last updated:** [May 3, 2021, 10:48pm UTC](https://discuss.elastic.co/t/failed-to-start-kibana-with-https/271943 "2021-05-03T22:48:30Z")
Hi I have a cluster with two nodes and two nginx I configured ssl tls and https between 2nodes and kibana, but unfortunately my kibana does not open :frowning\_face: I followed step by step with the bellow link: This… --- ## [Need help with ES (SearchPhaseExecutionException)](https://discuss.elastic.co/t/need-help-with-es-searchphaseexecutionexception/10217)
**Author:** [@muzakcube64](https://discuss.elastic.co/u/muzakcube64)\ **Replies:** 18\ **Last updated:** [February 19, 2013, 10:50am UTC](https://discuss.elastic.co/t/need-help-with-es-searchphaseexecutionexception/10217 "2013-02-19T10:50:10Z")
I'm having issues and I don't know where to turn. Long story short, my web designer left me high and dry and I have no idea what he did and he refuses to answer his phone. I have access to the main page but after th… --- ## [Elastic Stack Mapping Error](https://discuss.elastic.co/t/elastic-stack-mapping-error/284871)
**Author:** [@dayajamal](https://discuss.elastic.co/u/dayajamal)\ **Replies:** 9\ **Last updated:** [September 27, 2021, 2:15pm UTC](https://discuss.elastic.co/t/elastic-stack-mapping-error/284871 "2021-09-27T14:15:13Z")
Hello, this my second time posting here with a hope to find a solution this time. I'm working on the Elastic Stack. I'm sending logs from Filebeat through Logstash to Elasticsearch. My logs get structured in Logstash, no… --- ## [Identifying/fixing latency (95th percentile between 1-4.5 seconds)](https://discuss.elastic.co/t/identifying-fixing-latency-95th-percentile-between-1-4-5-seconds/190866)
**Author:** [@jader201](https://discuss.elastic.co/u/jader201)\ **Replies:** 9\ **Last updated:** [July 26, 2019, 3:47pm UTC](https://discuss.elastic.co/t/identifying-fixing-latency-95th-percentile-between-1-4-5-seconds/190866 "2019-07-26T15:47:14Z")
We have had Elasticsearch \[1\] running in a production environment for a while, and started doing some analysis on performance. Unfortunately, our performance seems to be very hit or miss. Our 50th percentile is usually … --- ## [CPU usage increase after running for a while (CacheRecycler?)](https://discuss.elastic.co/t/cpu-usage-increase-after-running-for-a-while-cacherecycler/10843)
**Author:** [@Jerome\_Gagnon](https://discuss.elastic.co/u/Jerome_Gagnon)\ **Replies:** 21\ **Last updated:** [February 27, 2013, 3:19pm UTC](https://discuss.elastic.co/t/cpu-usage-increase-after-running-for-a-while-cacherecycler/10843 "2013-02-27T15:19:25Z")
Hi everyone, We are actually trying to put in prod our ES cluster, and we are having some cpu usage issues after some uptime. When we start, everything is running fine, but after a while we are experiencing an inc… --- ## [No transaction data sent to APM Server](https://discuss.elastic.co/t/no-transaction-data-sent-to-apm-server/266779)
**Author:** [@georgepopovici](https://discuss.elastic.co/u/georgepopovici)\ **Replies:** 11\ **Last updated:** [March 11, 2021, 7:34am UTC](https://discuss.elastic.co/t/no-transaction-data-sent-to-apm-server/266779 "2021-03-11T07:34:01Z")
Kibana version: 7.11.1 Elasticsearch version: 7.11.1 APM Server version: { "build\_date": "2021-02-15T12:37:48Z", "build\_sha": "e77061bb3aaedae5ae8dd0ca193eb662513aedde", "version": "7.11.0" } APM Agent language… --- ## [Смена состояние кластера после запроса](https://discuss.elastic.co/t/topic/170306)
**Author:** [@nessero](https://discuss.elastic.co/u/nessero)\ **Replies:** 17\ **Last updated:** [March 13, 2019, 2:04pm UTC](https://discuss.elastic.co/t/topic/170306 "2019-03-13T14:04:07Z")
Добрый день ! Пожалуйста помогите разобраться, сегодня 2 ноды моего кластера потеряли друг друга и кластер стал не операбелен. Ниже часть лога до и во время события: \[2019-02-28T09:43:52,747\]\[DEBUG\]\[o.e.a.s.TransportSea… --- ## [Data Table adding certain field causes strange behavior](https://discuss.elastic.co/t/data-table-adding-certain-field-causes-strange-behavior/113656)
**Author:** [@davidv](https://discuss.elastic.co/u/davidv)\ **Replies:** 14\ **Last updated:** [January 21, 2018, 12:29pm UTC](https://discuss.elastic.co/t/data-table-adding-certain-field-causes-strange-behavior/113656 "2018-01-21T12:29:12Z")
Hi, I have this table: \[image\] When I split the rows again with layers.elem.bandwidth all layers receive all bandwidths (instead of just adding a column) also, all rows are being multiplied by the amount of layers. Se… --- ## [Running installer script from URL in CentOS 7 does not respect parameters](https://discuss.elastic.co/t/running-installer-script-from-url-in-centos-7-does-not-respect-parameters/73830)
**Author:** [@Loek](https://discuss.elastic.co/u/Loek)\ **Replies:** 10\ **Last updated:** [February 5, 2017, 10:55am UTC](https://discuss.elastic.co/t/running-installer-script-from-url-in-centos-7-does-not-respect-parameters/73830 "2017-02-05T10:55:58Z")
The documentation for installing ECE on a second machine, mentions: bash -c "$(curl -fsSL https://download.elasticsearch.org/cloud/elastic-cloud-enterprise-installer.sh) --coordinator-host HOST\_IP" However, I can't g… --- ## [Kibana unable to locate packetbeat index](https://discuss.elastic.co/t/kibana-unable-to-locate-packetbeat-index/32956)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 9\ **Last updated:** [December 10, 2015, 12:53pm UTC](https://discuss.elastic.co/t/kibana-unable-to-locate-packetbeat-index/32956 "2015-12-10T12:53:04Z")
Hi, I have uploaded the custom dashboard and visualization using the beats dashboard. But when i go to view my dashboard , kibana is unable to find the index. Can anyone help me to triage the issue. I have verified t… --- ## [Logstash not connecting to Elasticsearch - using Docker-Compose](https://discuss.elastic.co/t/logstash-not-connecting-to-elasticsearch-using-docker-compose/349461)
**Author:** [@zewcro](https://discuss.elastic.co/u/zewcro)\ **Replies:** 12\ **Last updated:** [December 18, 2023, 6:19pm UTC](https://discuss.elastic.co/t/logstash-not-connecting-to-elasticsearch-using-docker-compose/349461 "2023-12-18T18:19:57Z")
Hello, I'm trying to create indexes in elasticsearch from a postgresql database. So I set up docker compose: version: '3.8' services: postgres: image: postgres:latest volumes: - C:\\Users\\theor\\desktop… --- ## [Elastic machine learning code source](https://discuss.elastic.co/t/elastic-machine-learning-code-source/242847)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 14\ **Last updated:** [July 29, 2020, 1:50pm UTC](https://discuss.elastic.co/t/elastic-machine-learning-code-source/242847 "2020-07-29T13:50:00Z")
Hello everybody, I started using elastic and kibana from code source, could someone please tell me how can I integrate machine learning "https://github.com/elastic/ml-cpp" with elasticsearch "https://github.com/elastic/… --- ## [LDAP/AD auth for ECE](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498)
**Author:** [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Replies:** 13\ **Last updated:** [December 5, 2018, 12:37pm UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498 "2018-12-05T12:37:11Z")
Hi Is there any docs regarding setting up LDAP or AD for elasticsearch cloud enterprise. Regards Chad --- ## [Add\_field doesn't work](https://discuss.elastic.co/t/add-field-doesnt-work/149612)
**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\ **Replies:** 12\ **Last updated:** [September 26, 2018, 7:39am UTC](https://discuss.elastic.co/t/add-field-doesnt-work/149612 "2018-09-26T07:39:07Z")
Dear all, I install metric beat on a window server to receive log. I tried to combine some of the field using add\_field but it cannot capture the old field value. Any idea? if "metricbeat" in \[tags\]{ mutate { add\_fi… --- ## [Index roll over every 30 minutes](https://discuss.elastic.co/t/index-roll-over-every-30-minutes/290788)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 10\ **Last updated:** [December 11, 2021, 5:35pm UTC](https://discuss.elastic.co/t/index-roll-over-every-30-minutes/290788 "2021-12-11T17:35:24Z")
Hello All, We have a logstash set up where input is based on a file. Logstash parses the file and an index is created. A new file ends up for processing every 30 minutes. We want a new index to be created every time a… --- ## [Logstash shut down](https://discuss.elastic.co/t/logstash-shut-down/245261)
**Author:** [@sukumar.koganti](https://discuss.elastic.co/u/sukumar.koganti)\ **Replies:** 10\ **Last updated:** [August 18, 2020, 8:01pm UTC](https://discuss.elastic.co/t/logstash-shut-down/245261 "2020-08-18T20:01:37Z")
Hi I have successfully installed/configured the elasticsearh and kibana both along with the logstash. i am trying to process the simple .csv file through logstash.conf file but i am facing the below error. C:\\elastic\_… --- ## [Thread Pool max Size and Number of Processor](https://discuss.elastic.co/t/thread-pool-max-size-and-number-of-processor/271971)
**Author:** [@mani1](https://discuss.elastic.co/u/mani1)\ **Replies:** 10\ **Last updated:** [May 4, 2021, 7:25am UTC](https://discuss.elastic.co/t/thread-pool-max-size-and-number-of-processor/271971 "2021-05-04T07:25:03Z")
Hi, In latest elasticSearch Version 7 series, How to decide the maximum Search Thread Pool Size, will it depends on number of vCPUs , and decided by the formula (vCPU\*3/2)+1 OR the max size still is based on 32 vCPUs a… --- ## [Elasticsearch ec2 plugin configuration fail](https://discuss.elastic.co/t/elasticsearch-ec2-plugin-configuration-fail/219432)
**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Replies:** 12\ **Last updated:** [February 23, 2020, 4:09pm UTC](https://discuss.elastic.co/t/elasticsearch-ec2-plugin-configuration-fail/219432 "2020-02-23T16:09:30Z")
I am trying to configure an elasticsearch cluster in aws using the ec2 discovery plugin. I am running on Elasticsearch 7.6 . I have attached an instance-profile that has all the access for ec2. The logs are saying \*\* mas… --- ## [How to split ".security-7"](https://discuss.elastic.co/t/how-to-split-security-7/317807)
**Author:** [@MuFeng](https://discuss.elastic.co/u/MuFeng)\ **Replies:** 18\ **Last updated:** [November 14, 2022, 1:58am UTC](https://discuss.elastic.co/t/how-to-split-security-7/317807 "2022-11-14T01:58:29Z")
Why can't I add multiple copies of. security-7 in the ES8 cluster? How to modify the number of replicas of the system index? --- ## [Tile Map disappears](https://discuss.elastic.co/t/tile-map-disappears/82664)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 11\ **Last updated:** [April 21, 2017, 8:50pm UTC](https://discuss.elastic.co/t/tile-map-disappears/82664 "2017-04-21T20:50:42Z")
Hi, I have a dashboard where i want to show consumption of devices in different areas within the city Version of ES/Kibana/logstash - 5.3.0 I have uploaded single index with different type of data from various csv fi… --- ## [Jvm.options with 7.15.0](https://discuss.elastic.co/t/jvm-options-with-7-15-0/287254)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 9\ **Last updated:** [October 22, 2021, 7:29pm UTC](https://discuss.elastic.co/t/jvm-options-with-7-15-0/287254 "2021-10-22T19:29:33Z")
I know the newer version handles ram automatically and that's great. But I'm seeing the java option sets Xms and Xmx both to 1024m even though I have 96GB of ram on my machine. Should I just ignore this? 51108 ? SLsl … --- ## [Index creation slows down over time](https://discuss.elastic.co/t/index-creation-slows-down-over-time/230775)
**Author:** [@astevenson](https://discuss.elastic.co/u/astevenson)\ **Replies:** 15\ **Last updated:** [May 5, 2020, 10:42pm UTC](https://discuss.elastic.co/t/index-creation-slows-down-over-time/230775 "2020-05-05T22:42:02Z")
We have a ruby test suite that creates and deletes our indices between tests. Under elasticsearch 5.6 this runs consistently very fast. Under 6.8 it degrades over time. And under 7.6 it is slow off the bat. I made a gene… --- ## [Loading IDS logs via Elasticsearch and Filebeats issues](https://discuss.elastic.co/t/loading-ids-logs-via-elasticsearch-and-filebeats-issues/222194)
**Author:** [@gorgymorg](https://discuss.elastic.co/u/gorgymorg)\ **Replies:** 15\ **Last updated:** [March 22, 2020, 3:51pm UTC](https://discuss.elastic.co/t/loading-ids-logs-via-elasticsearch-and-filebeats-issues/222194 "2020-03-22T15:51:14Z")
I currently have Suricata running on an Ubuntu VM on computer 1 and am attempting to ship logs to an ELK stack on a VM on computer 2. My goal is to have Suricata logs in /var/logs on computer 1 VM shipped via filebeat ve… --- ## [Combining the logs in logstash](https://discuss.elastic.co/t/combining-the-logs-in-logstash/190682)
**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\ **Replies:** 9\ **Last updated:** [July 19, 2019, 4:34am UTC](https://discuss.elastic.co/t/combining-the-logs-in-logstash/190682 "2019-07-19T04:34:01Z")
Hi, I need to combine the two log lines using the message id i tried aggregate filter plugin but i cant achieve it.Please guide Jun 5 19:24:18 gpigw11 postfix/qmgr\[37531\]: 3077F92E45: from=\<\*\*\*\*\*\*\>, size=2801, nrcpt=1… [Previous page](https://discuss.elastic.co/top.md?page=151&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=153&per_page=50&period=all)