# Top

**URL:** https://discuss.elastic.co/top.md?page=1532&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1533

---

## [Unable to select correct Index in map visualisation](https://discuss.elastic.co/t/unable-to-select-correct-index-in-map-visualisation/228466)

<div class="topic-metadata">

**Author:** [@kagashe](https://discuss.elastic.co/u/kagashe)\
**Replies:** 4\
**Last updated:** [April 17, 2020, 10:43am UTC](https://discuss.elastic.co/t/unable-to-select-correct-index-in-map-visualisation/228466 "2020-04-17T10:43:10Z")

</div>

Hi all, I have ingested some log data with logstash, applied the geoip filter and the geoip fileds are populating however when I try to create a map visualisation, the index with the data is not available? What am I mis…

---

## [NameError: uninitialized constant Swiftype::Loops](https://discuss.elastic.co/t/nameerror-uninitialized-constant-swiftype-loops/198253)

<div class="topic-metadata">

**Author:** [@kikil592](https://discuss.elastic.co/u/kikil592)\
**Replies:** 4\
**Last updated:** [September 12, 2019, 6:18pm UTC](https://discuss.elastic.co/t/nameerror-uninitialized-constant-swiftype-loops/198253 "2019-09-12T18:18:34Z")

</div>

Hi there, I'm trying to index some documents with Elastic App Search. It is well connected with Elasticsearch but get the error: worker.1 | \[2019-09-05T12:48:48.076+00:00\]\[12003\]\[2318\]\[active\_job\]\[INFO\]: \[ActiveJob…

---

## [The unknown output information in logstash](https://discuss.elastic.co/t/the-unknown-output-information-in-logstash/109334)

<div class="topic-metadata">

**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\
**Replies:** 4\
**Last updated:** [November 29, 2017, 1:01am UTC](https://discuss.elastic.co/t/the-unknown-output-information-in-logstash/109334 "2017-11-29T01:01:50Z")

</div>

I have used some output plugin in my logstash and conduct the different actions through the condition i've defined. if "cisco" in \[tags\] { elasticsearch { hosts =\> \[ "ph71v-esn01.ae007.com:9200", "ph71v-…

---

## [Java 1.4 : Send data to ElasticSearch](https://discuss.elastic.co/t/java-1-4-send-data-to-elasticsearch/107931)

<div class="topic-metadata">

**Author:** [@oxygenan](https://discuss.elastic.co/u/oxygenan)\
**Replies:** 4\
**Last updated:** [November 17, 2017, 7:58am UTC](https://discuss.elastic.co/t/java-1-4-send-data-to-elasticsearch/107931 "2017-11-17T07:58:00Z")

</div>

Hi, We are using Java 1.4 and we would like to write data to ELK stack. Can you please suggest the API to push data in such a setup? Regards

---

## [Migrate parent/child index from ES 1.7 to 2.3](https://discuss.elastic.co/t/migrate-parent-child-index-from-es-1-7-to-2-3/55200)

<div class="topic-metadata">

**Author:** [@bw99](https://discuss.elastic.co/u/bw99)\
**Replies:** 4\
**Last updated:** [July 11, 2016, 3:52pm UTC](https://discuss.elastic.co/t/migrate-parent-child-index-from-es-1-7-to-2-3/55200 "2016-07-11T15:52:06Z")

</div>

Hi all We rely heavily on the parent-child structure and want to migrate from a 1.7 cluster to a 2.3 cluster. I have researched this a bit - I can see that I need to make sure we reindex our data, in order to take a…

---

## [Reindex Approach with zero downtime but with minimum delay](https://discuss.elastic.co/t/reindex-approach-with-zero-downtime-but-with-minimum-delay/366005)

<div class="topic-metadata">

**Author:** [@shanay\_20](https://discuss.elastic.co/u/shanay_20)\
**Replies:** 3\
**Last updated:** [September 11, 2024, 5:38am UTC](https://discuss.elastic.co/t/reindex-approach-with-zero-downtime-but-with-minimum-delay/366005 "2024-09-11T05:38:49Z")

</div>

Hi Team, I want to reindex the multiple indexes that have a lot of data in them. To reduce CPU usage, I am using the Reindex API POST \_reindex with the parameter request\_per\_second. But during the reindexing, if some ne…

---

## [Maintenance of the node/cluster in Elasticsearch](https://discuss.elastic.co/t/maintenance-of-the-node-cluster-in-elasticsearch/305366)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 3\
**Last updated:** [May 23, 2022, 10:01pm UTC](https://discuss.elastic.co/t/maintenance-of-the-node-cluster-in-elasticsearch/305366 "2022-05-23T22:01:17Z")

</div>

Hello everyone, this time isn't much of a problem, is more like a topic for advice so I hope theres no problem posting it here. Up until now I've been using all the settings of Elasticsearch in default by recommendation…

---

## [Need some explanation on Watcher execution](https://discuss.elastic.co/t/need-some-explanation-on-watcher-execution/258399)

<div class="topic-metadata">

**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\
**Replies:** 3\
**Last updated:** [December 15, 2020, 7:11am UTC](https://discuss.elastic.co/t/need-some-explanation-on-watcher-execution/258399 "2020-12-15T07:11:39Z")

</div>

Under watch execution, it is noted that "On each node, that contains one of the .watches shards, a scheduler, that is bound to the watcher lifecycle runs. On each node, that contains one of the .watches shards, a sched…

---

## [Failed to rpm GPG-KEY-elasticsearch](https://discuss.elastic.co/t/failed-to-rpm-gpg-key-elasticsearch/219050)

<div class="topic-metadata">

**Author:** [@saad](https://discuss.elastic.co/u/saad)\
**Replies:** 0\
**Last updated:** [February 12, 2020, 5:24pm UTC](https://discuss.elastic.co/t/failed-to-rpm-gpg-key-elasticsearch/219050 "2020-02-12T17:24:31Z")

</div>

I am using centos 7. java 8 installed and I am trying to get the GPG key but failed rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch how can I solve it please \[root@elk01 ~\]# rpm --import https://artifac…

---

## [Collapse sidebar by default](https://discuss.elastic.co/t/collapse-sidebar-by-default/207868)

<div class="topic-metadata">

**Author:** [@amanciao](https://discuss.elastic.co/u/amanciao)\
**Replies:** 3\
**Last updated:** [November 18, 2019, 11:43pm UTC](https://discuss.elastic.co/t/collapse-sidebar-by-default/207868 "2019-11-18T23:43:38Z")

</div>

Hi, I want to collapse the sidebar by default for kibana. I am able to collapse the side bar, but it is not expanding when I want to. Thanks in advance.

---

## [Spring boot starter for API setup to self-attach](https://discuss.elastic.co/t/spring-boot-starter-for-api-setup-to-self-attach/203333)

<div class="topic-metadata">

**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\
**Replies:** 3\
**Last updated:** [October 15, 2019, 1:05pm UTC](https://discuss.elastic.co/t/spring-boot-starter-for-api-setup-to-self-attach/203333 "2019-10-15T13:05:53Z")

</div>

Elastic Search Version: 7.3.1 APM Server Version: 7.3.1 APM Client Version: APM Java Agent: 1.x (current) APM Agent language and version: Java 1.8 @felixbarny We are going to use Elastic stack for microservices. Our…

---

## [Issue while plotting percentage in Kibana](https://discuss.elastic.co/t/issue-while-plotting-percentage-in-kibana/110855)

<div class="topic-metadata">

**Author:** [@Pratik\_Kagda](https://discuss.elastic.co/u/Pratik_Kagda)\
**Replies:** 3\
**Last updated:** [December 8, 2017, 9:03pm UTC](https://discuss.elastic.co/t/issue-while-plotting-percentage-in-kibana/110855 "2017-12-08T21:03:13Z")

</div>

Hello, I got stucked at one place and need your help to display data into visulizaiton. Here is my sample document: { "@timestamp": 1512606017619, "id": "2odalecgvg9f58vdm8e6vgoc2p", "scenario": "Test scenario", "…

---

## [Not Able To Login In Kibana With Newly Created User](https://discuss.elastic.co/t/not-able-to-login-in-kibana-with-newly-created-user/103232)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 3\
**Last updated:** [October 11, 2017, 11:29am UTC](https://discuss.elastic.co/t/not-able-to-login-in-kibana-with-newly-created-user/103232 "2017-10-11T11:29:55Z")

</div>

I have created one user in kibana management from elastic/changeme account. After logout I am not able to login with new created user. What is the reason I am not able to login into kibana with new user.

---

## [Logstash crashes in dns filter](https://discuss.elastic.co/t/logstash-crashes-in-dns-filter/94810)

<div class="topic-metadata">

**Author:** [@Tom\_Mortimer](https://discuss.elastic.co/u/Tom_Mortimer)\
**Replies:** 3\
**Last updated:** [July 27, 2017, 6:00pm UTC](https://discuss.elastic.co/t/logstash-crashes-in-dns-filter/94810 "2017-07-27T18:00:38Z")

</div>

Hi all, Trying the dns filter in Logstash for the first time, and I'm getting this error in the log: \[2017-07-27T14:54:43,886\]\[ERROR\]\[logstash.pipeline \] Exception in pipelineworker, the pipeline stopped proce…

---

## [\_type field filter vs. field filter performance](https://discuss.elastic.co/t/-type-field-filter-vs-field-filter-performance/73568)

<div class="topic-metadata">

**Author:** [@Yee-Ning\_Cheng](https://discuss.elastic.co/u/Yee-Ning_Cheng)\
**Replies:** 3\
**Last updated:** [February 2, 2017, 1:52am UTC](https://discuss.elastic.co/t/-type-field-filter-vs-field-filter-performance/73568 "2017-02-02T01:52:31Z")

</div>

I am trying to figure out how to setup my index mapping. I currently have all my documents in one index and under one type. However, there is one field (~2000+ unique terms) in my document that could be used as a \_typ…

---

## [Choosing between client nodes and data nodes](https://discuss.elastic.co/t/choosing-between-client-nodes-and-data-nodes/50250)

<div class="topic-metadata">

**Author:** [@altaf](https://discuss.elastic.co/u/altaf)\
**Replies:** 3\
**Last updated:** [May 18, 2016, 3:38pm UTC](https://discuss.elastic.co/t/choosing-between-client-nodes-and-data-nodes/50250 "2016-05-18T15:38:52Z")

</div>

Hi. We have a 3 node Elasticsearch 1.7.5 cluster that has been staying at 85-89% JVM heap usage. Each node is has 16GB of RAM allocated to Elasticsearch. Due to the high JVM heap usage, we’re planning on expanding our…

---

## [Sous-filtrage possible?](https://discuss.elastic.co/t/sous-filtrage-possible/31332)

<div class="topic-metadata">

**Author:** [@Karel\_SUEDILE](https://discuss.elastic.co/u/Karel_SUEDILE)\
**Replies:** 3\
**Last updated:** [September 30, 2015, 2:41pm UTC](https://discuss.elastic.co/t/sous-filtrage-possible/31332 "2015-09-30T14:41:36Z")

</div>

Bonjour, j'ai des documents du type : { group: "G1", products: \[ { name: "P1", price": 10 }, { name: "P2", price": 20 } \] }, { group: "G2", products: \[ { name: "P3", price"…

---

## [Growing old-gen size](https://discuss.elastic.co/t/growing-old-gen-size/22785)

<div class="topic-metadata">

**Author:** [@mjdude5](https://discuss.elastic.co/u/mjdude5)\
**Replies:** 3\
**Last updated:** [March 24, 2015, 12:03am UTC](https://discuss.elastic.co/t/growing-old-gen-size/22785 "2015-03-24T00:03:32Z")

</div>

Hello, I'm trying to better understand our ES memory usage with relation to our workload. Right now 2 of our nodes have above-average heap usage. Looking at \_stats their old-gen is large, ~6gb. Here's the \_cat usa…

---

## [How to calculate a percentage value on column](https://discuss.elastic.co/t/how-to-calculate-a-percentage-value-on-column/306765)

<div class="topic-metadata">

**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 11:33am UTC](https://discuss.elastic.co/t/how-to-calculate-a-percentage-value-on-column/306765 "2022-06-28T11:33:27Z")

</div>

Hi all, I need an help in order to calculate a percentage value inside a column. I'm using Kibana 7.16.2 and I have a table with Lens: 1st column: item name ("Alpha", "Beta", "Gamma"....) from 2nd column to N column …

---

## [Filebeat config for log group with wildcard for aws-cloudwatch?](https://discuss.elastic.co/t/filebeat-config-for-log-group-with-wildcard-for-aws-cloudwatch/306835)

<div class="topic-metadata">

**Author:** [@jrykowski-huron](https://discuss.elastic.co/u/jrykowski-huron)\
**Replies:** 2\
**Last updated:** [June 11, 2022, 4:29pm UTC](https://discuss.elastic.co/t/filebeat-config-for-log-group-with-wildcard-for-aws-cloudwatch/306835 "2022-06-11T16:29:37Z")

</div>

If set of CloudWatch log groups... example1.{guid} example2.{guid} example3.{guid} Is it possible to configure filebeat.inputs for aws-cloudwatch with a single entry using wildcard? Like for example set above with …

---

## [Is it safe to delete SLM history indexes](https://discuss.elastic.co/t/is-it-safe-to-delete-slm-history-indexes/261965)

<div class="topic-metadata">

**Author:** [@robbyku](https://discuss.elastic.co/u/robbyku)\
**Replies:** 2\
**Last updated:** [January 25, 2021, 4:10am UTC](https://discuss.elastic.co/t/is-it-safe-to-delete-slm-history-indexes/261965 "2021-01-25T04:10:29Z")

</div>

Hi, I have added a new master-eligible node (say node04) and was decommissioning another master-eligible node (say node03), due to a different es version, from the cluster of 3 nodes. So I used the cluster allocation fi…

---

## [How to get the last nested object of all documents then perform sub-aggregations](https://discuss.elastic.co/t/how-to-get-the-last-nested-object-of-all-documents-then-perform-sub-aggregations/207306)

<div class="topic-metadata">

**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 9:32am UTC](https://discuss.elastic.co/t/how-to-get-the-last-nested-object-of-all-documents-then-perform-sub-aggregations/207306 "2019-11-13T09:32:04Z")

</div>

I have an index called socialmedia and trying to create queries with this field called eng (omitted some unnecessary fields) "id" : "1", "eng": \[ { "soc\_mm\_score" : "3", "date\_updated" : "1520969306", }, { "s…

---

## [Can I fire multiple queries together and get results as different data sets for particular query?](https://discuss.elastic.co/t/can-i-fire-multiple-queries-together-and-get-results-as-different-data-sets-for-particular-query/203061)

<div class="topic-metadata">

**Author:** [@Vijay\_Gupta](https://discuss.elastic.co/u/Vijay_Gupta)\
**Replies:** 2\
**Last updated:** [October 15, 2019, 10:14am UTC](https://discuss.elastic.co/t/can-i-fire-multiple-queries-together-and-get-results-as-different-data-sets-for-particular-query/203061 "2019-10-15T10:14:12Z")

</div>

Is there a way to fire multiple queries together and get results for each query differently? Means, suppose I have 3 mobile numbers, and I want to query each mobile number and store its data against that mobile number a…

---

## [Logstash with CSV input](https://discuss.elastic.co/t/logstash-with-csv-input/142044)

<div class="topic-metadata">

**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\
**Replies:** 2\
**Last updated:** [July 30, 2018, 3:24pm UTC](https://discuss.elastic.co/t/logstash-with-csv-input/142044 "2018-07-30T15:24:10Z")

</div>

Hi, I'm trying to read a CSV file and insert in ES, all in 6.3.2. Should be easy right? I created an index template: PUT \_template/mytemplate { "index\_patterns": \["test\*"\], "settings": { "index.mapping.total\_f…

---

## [Wrong Mapping Syntax after upgrade, help needed](https://discuss.elastic.co/t/wrong-mapping-syntax-after-upgrade-help-needed/121059)

<div class="topic-metadata">

**Author:** [@LethalMaus](https://discuss.elastic.co/u/LethalMaus)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 2:15pm UTC](https://discuss.elastic.co/t/wrong-mapping-syntax-after-upgrade-help-needed/121059 "2018-02-22T14:15:20Z")

</div>

Hi, I'm in need of some help with my Mapping template. I previously had Elasticsearch 1.7.3 which was accidentally upgraded to 5.4.3 within one of our work projects (its a complicated story). We could downgrade it back…

---

## [Avoiding mapping explosion and structuring JSON](https://discuss.elastic.co/t/avoiding-mapping-explosion-and-structuring-json/87060)

<div class="topic-metadata">

**Author:** [@XOR](https://discuss.elastic.co/u/XOR)\
**Replies:** 2\
**Last updated:** [May 25, 2017, 4:06am UTC](https://discuss.elastic.co/t/avoiding-mapping-explosion-and-structuring-json/87060 "2017-05-25T04:06:05Z")

</div>

Hello, I've been looking for an answer for a couple days and hopefully someone here can help. I am new to Elasticsearch and love the concept and function. I am going to use it for a project that will be collecting so…

---

## [Creating users/roles through Kibana](https://discuss.elastic.co/t/creating-users-roles-through-kibana/82955)

<div class="topic-metadata">

**Author:** [@Chris\_Curvey](https://discuss.elastic.co/u/Chris_Curvey)\
**Replies:** 2\
**Last updated:** [May 8, 2017, 1:33pm UTC](https://discuss.elastic.co/t/creating-users-roles-through-kibana/82955 "2017-05-08T13:33:50Z")

</div>

I have a production cluster running in Elastic Cloud. It works great. If I go into Kibana and click on the "management" tab on the left-hand side, I have two sections: "Elasticsearch" (which lets me create users and r…

---

## [Quickly populating indexes with mock values](https://discuss.elastic.co/t/quickly-populating-indexes-with-mock-values/70541)

<div class="topic-metadata">

**Author:** [@iotify](https://discuss.elastic.co/u/iotify)\
**Replies:** 2\
**Last updated:** [January 5, 2017, 3:37pm UTC](https://discuss.elastic.co/t/quickly-populating-indexes-with-mock-values/70541 "2017-01-05T15:37:46Z")

</div>

Hello everyone, While doing some sensor analytics demo in Kibana, we often felt the need to fill the indexes with a large amount of sensor data. Doing this via Logstash was a little bit cumbersome, so we integrated Ela…

---

## [Nested JSON for hostname with packetbeat & logstash](https://discuss.elastic.co/t/nested-json-for-hostname-with-packetbeat-logstash/66761)

<div class="topic-metadata">

**Author:** [@tetsuto](https://discuss.elastic.co/u/tetsuto)\
**Replies:** 2\
**Last updated:** [November 27, 2016, 8:45pm UTC](https://discuss.elastic.co/t/nested-json-for-hostname-with-packetbeat-logstash/66761 "2016-11-27T20:45:53Z")

</div>

I've been trying for quite some time to get this to work with no luck - I'm using the Packetbeat plugin to record http data (and headers). At present it's getting them currently - however the host is nested within the J…

---

## [Issue with changing the name of the cluster and the java API](https://discuss.elastic.co/t/issue-with-changing-the-name-of-the-cluster-and-the-java-api/51515)

<div class="topic-metadata">

**Author:** [@porous999](https://discuss.elastic.co/u/porous999)\
**Replies:** 2\
**Last updated:** [June 1, 2016, 6:50am UTC](https://discuss.elastic.co/t/issue-with-changing-the-name-of-the-cluster-and-the-java-api/51515 "2016-06-01T06:50:15Z")

</div>

So, I have successfully set up ElasticSearch on my local system. And following is the code which I am trying to implement, based on ES trasnport client client and index example. String myClusterName = "mycluster"; …

---

## [Index Twitter Stream with Logstash](https://discuss.elastic.co/t/index-twitter-stream-with-logstash/35905)

<div class="topic-metadata">

**Author:** [@adellarocca](https://discuss.elastic.co/u/adellarocca)\
**Replies:** 2\
**Last updated:** [December 2, 2015, 11:14am UTC](https://discuss.elastic.co/t/index-twitter-stream-with-logstash/35905 "2015-12-02T11:14:22Z")

</div>

Hi! I'm trying to index a Twitter stream using twitter plugin of Logstash. This is my configuration file input { twitter { consumer\_key =\> "omitted" consumer\_secret =\> "omitted" oauth\_token =\> "omitted" oauth\_tok…

---

## [Top\_hits and post\_filter](https://discuss.elastic.co/t/top-hits-and-post-filter/21828)

<div class="topic-metadata">

**Author:** [@Radim\_Novotny](https://discuss.elastic.co/u/Radim_Novotny)\
**Replies:** 2\
**Last updated:** [January 30, 2015, 7:31am UTC](https://discuss.elastic.co/t/top-hits-and-post-filter/21828 "2015-01-30T07:31:25Z")

</div>

Hi, I'm using ES 1.4.2 to search across 4 slightly different types in a single index. The following example is simplified version with only two types "profile" and "publication". Profiles can have related publicat…

---

## [Clarification needed on stats](https://discuss.elastic.co/t/clarification-needed-on-stats/9708)

<div class="topic-metadata">

**Author:** [@Ashutosh\_Sharma](https://discuss.elastic.co/u/Ashutosh_Sharma)\
**Replies:** 2\
**Last updated:** [November 14, 2012, 1:22pm UTC](https://discuss.elastic.co/t/clarification-needed-on-stats/9708 "2012-11-14T13:22:06Z")

</div>

Hi, I am using elasticsearch to index the documents. I created a cluster of ES with 2 node work as master and node both. Below is the result of the \_cluster/health api: { "cluster\_name" : "es-cluster", "sta…

---

## [Deadlock in Bulk Ingester using Elastic 8.15.3 in Java](https://discuss.elastic.co/t/deadlock-in-bulk-ingester-using-elastic-8-15-3-in-java/370398)

<div class="topic-metadata">

**Author:** [@Daniel\_Abadi](https://discuss.elastic.co/u/Daniel_Abadi)\
**Replies:** 3\
**Last updated:** [November 12, 2024, 3:22pm UTC](https://discuss.elastic.co/t/deadlock-in-bulk-ingester-using-elastic-8-15-3-in-java/370398 "2024-11-12T15:22:57Z")

</div>

Hello, I'm experiencing a deadlock while using the bulk ingester, specifically during the flush operation. Several threads are blocked, each waiting with the following stack trace: java.base/jdk.internal.misc.Unsafe.pa…

---

## [HTTP filter - failover host](https://discuss.elastic.co/t/http-filter-failover-host/205433)

<div class="topic-metadata">

**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\
**Replies:** 0\
**Last updated:** [October 28, 2019, 9:18am UTC](https://discuss.elastic.co/t/http-filter-failover-host/205433 "2019-10-28T09:18:27Z")

</div>

In my Logstash pipeline, I am using HTTP filter. The desired solution should be robust to HTTP host failure and if HTTP request fail try to send this request to another host (can be listed in code or as a parameter). I…

---

## [Question on ingesting multiple csv files with repeated data](https://discuss.elastic.co/t/question-on-ingesting-multiple-csv-files-with-repeated-data/234679)

<div class="topic-metadata">

**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\
**Replies:** 6\
**Last updated:** [June 8, 2020, 3:46am UTC](https://discuss.elastic.co/t/question-on-ingesting-multiple-csv-files-with-repeated-data/234679 "2020-06-08T03:46:17Z")

</div>

Hi, does elastic auto remove duplicated data when i ingest multiple csv files with repeated data in them. or is there a way to enable the removal?

---

## [Cross Cluster hangs frequently](https://discuss.elastic.co/t/cross-cluster-hangs-frequently/117680)

<div class="topic-metadata">

**Author:** [@trevan](https://discuss.elastic.co/u/trevan)\
**Replies:** 6\
**Last updated:** [February 1, 2018, 2:38pm UTC](https://discuss.elastic.co/t/cross-cluster-hangs-frequently/117680 "2018-02-01T14:38:55Z")

</div>

I've been trying to get cross cluster to work between two geographically remote clusters. I've gotten it to work but frequently, it just stops working. Querying \_remote/info and remote indices hang indefinitely. But a…

---

## [Possible optimisations for large \_source documents](https://discuss.elastic.co/t/possible-optimisations-for-large--source-documents/38987)

<div class="topic-metadata">

**Author:** [@yanns](https://discuss.elastic.co/u/yanns)\
**Replies:** 6\
**Last updated:** [April 12, 2017, 7:50pm UTC](https://discuss.elastic.co/t/possible-optimisations-for-large--source-documents/38987 "2017-04-12T19:50:26Z")

</div>

Hi! For a query, I observe a performance difference if I include or not the \_source. With: "\_source": true, the query needs about 250 ms to complete. With: "\_source": false, the query needs about 50 ms to complete. I…

---

## [Hard to stash a log file with different occurrence of order for a field using Logstash](https://discuss.elastic.co/t/hard-to-stash-a-log-file-with-different-occurrence-of-order-for-a-field-using-logstash/69641)

<div class="topic-metadata">

**Author:** [@VijayKarthikeyan](https://discuss.elastic.co/u/VijayKarthikeyan)\
**Replies:** 6\
**Last updated:** [December 22, 2016, 7:07am UTC](https://discuss.elastic.co/t/hard-to-stash-a-log-file-with-different-occurrence-of-order-for-a-field-using-logstash/69641 "2016-12-22T07:07:21Z")

</div>

I am trying to stash a log file to elasticsearch using Logstash. I am facing a problem while doing this. If the log file has same kind of log lines like the below, \[12/Sep/2016:18:23:07\] VendorID=5037 Code=C AcctID=53…

---

## [Copy\_to and nested field type](https://discuss.elastic.co/t/copy-to-and-nested-field-type/83215)

<div class="topic-metadata">

**Author:** [@nejra](https://discuss.elastic.co/u/nejra)\
**Replies:** 0\
**Last updated:** [April 21, 2017, 1:34pm UTC](https://discuss.elastic.co/t/copy-to-and-nested-field-type/83215 "2017-04-21T13:34:01Z")

</div>

Hi, I have difficulty with copy\_to and nested field. I'm trying to copy some field value from original document to nested document, and as I can see from stored\_fields, it has been copied successfully. The problem appe…

---

## [Metricbeat modules list is empty](https://discuss.elastic.co/t/metricbeat-modules-list-is-empty/314020)

<div class="topic-metadata">

**Author:** [@Technolust](https://discuss.elastic.co/u/Technolust)\
**Replies:** 7\
**Last updated:** [September 13, 2022, 1:06am UTC](https://discuss.elastic.co/t/metricbeat-modules-list-is-empty/314020 "2022-09-13T01:06:37Z")

</div>

\[root@rbdcelastic01 metricbeat\]# metricbeat modules list Enabled: Disabled: \[root@rbdcelastic01 metricbeat\]# vim metricbeat.yml # =========================== Modules configuration ============================ metric…

---

## [Suricata Redis\>ELK Stack Mapping help please](https://discuss.elastic.co/t/suricata-redis-elk-stack-mapping-help-please/250860)

<div class="topic-metadata">

**Author:** [@bn1980](https://discuss.elastic.co/u/bn1980)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 12:26am UTC](https://discuss.elastic.co/t/suricata-redis-elk-stack-mapping-help-please/250860 "2020-10-06T00:26:34Z")

</div>

I am running Suricata on PFSense and my goal is to create a Network Security Monitoring Dashboard with world map. Likely in Grafana. I use FreeNAS with ELK setup in a FreeBSD jail. My elasticsearch is 7.7.1 and did not…

---

## [Chrome Distributed Trace Issue](https://discuss.elastic.co/t/chrome-distributed-trace-issue/186892)

<div class="topic-metadata">

**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\
**Replies:** 7\
**Last updated:** [June 26, 2019, 7:33am UTC](https://discuss.elastic.co/t/chrome-distributed-trace-issue/186892 "2019-06-26T07:33:49Z")

</div>

I'd like to refer to a previous issue I raised in Distributed Trace doesn't seem to work in Chrome above version 71.x The problem as defined in that thread is that Chrome doesn't seem to allow distributed traces to prop…

---

## [Logstash 2.3 CSV import Error](https://discuss.elastic.co/t/logstash-2-3-csv-import-error/186142)

<div class="topic-metadata">

**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\
**Replies:** 7\
**Last updated:** [June 17, 2019, 11:56pm UTC](https://discuss.elastic.co/t/logstash-2-3-csv-import-error/186142 "2019-06-17T23:56:20Z")

</div>

Importing CSV file to index my\_index-\[0-9\] (0-9 is the last number from "owner\_id", i have 10 indices, it's just based on the last digit so..) input{ file{ path =\> "/data/logstash-2.3.1/conf/export.csv" …

---

## [Lag in logs appearing](https://discuss.elastic.co/t/lag-in-logs-appearing/175098)

<div class="topic-metadata">

**Author:** [@naman\_kharbanda](https://discuss.elastic.co/u/naman_kharbanda)\
**Replies:** 1\
**Last updated:** [April 3, 2019, 8:08am UTC](https://discuss.elastic.co/t/lag-in-logs-appearing/175098 "2019-04-03T08:08:35Z")

</div>

Hi Team Been stuck in an issue for quite some time with no luck. Currently, we are running elasticsearch, logstash, and kibana in production environment. 3 master, 1 client, 6 data node cluster. All the nodes are 4 c…

---

## [Percentage Calculation in Ruby](https://discuss.elastic.co/t/percentage-calculation-in-ruby/168700)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 1\
**Last updated:** [February 16, 2019, 5:28pm UTC](https://discuss.elastic.co/t/percentage-calculation-in-ruby/168700 "2019-02-16T17:28:07Z")

</div>

I am doing calculation in Ruby but the fields are empty in Kibana. The ruby code: event.set('BusinessTimeUnavailabilityinSeconds', ((event.get('BusinessUnavailabilityHours').to\_i \* 3600 ) + (event.get…

---

## [Configuration of elasticsearch in production environment](https://discuss.elastic.co/t/configuration-of-elasticsearch-in-production-environment/67054)

<div class="topic-metadata">

**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\
**Replies:** 1\
**Last updated:** [November 24, 2016, 7:25am UTC](https://discuss.elastic.co/t/configuration-of-elasticsearch-in-production-environment/67054 "2016-11-24T07:25:49Z")

</div>

Hi, I have created a elasticsearch cluster with 4 data nodes (each 32 GB ram, 8 core CPU, 500 GB hard-disk) , 3 master nodes (each 32 GB ram, 8 core CPU, 50 GB hard-disk) and 2 load balancer (each 32 GB ram, 8 core …

---

## [Unable to capture traffic in Solaris 11](https://discuss.elastic.co/t/unable-to-capture-traffic-in-solaris-11/35575)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 1\
**Last updated:** [November 25, 2015, 8:18pm UTC](https://discuss.elastic.co/t/unable-to-capture-traffic-in-solaris-11/35575 "2015-11-25T20:18:02Z")

</div>

Hi, first, sorry about my English. We need to use packetbeat on Solaris 11 servers. Using go 1.5 builds OK: ldd ./packetbeat-1.0.0-rc1 libsocket.so.1 =\> /lib/64/libsocket.so.1 libnsl.so.1 =\> /lib/64/libnsl…

---

## [Searching email](https://discuss.elastic.co/t/searching-email/19107)

<div class="topic-metadata">

**Author:** [@Mark\_Fletcher](https://discuss.elastic.co/u/Mark_Fletcher)\
**Replies:** 7\
**Last updated:** [August 6, 2014, 2:37pm UTC](https://discuss.elastic.co/t/searching-email/19107 "2014-08-06T14:37:56Z")

</div>

Hi, We're using ES to index email, specifically mailing list messages. We'd like search to work similar to Gmail in that we'd like to match on either the subject or body of the email, and if it matches on the subj…

---

## [Cascading in elasticsearch](https://discuss.elastic.co/t/cascading-in-elasticsearch/16491)

<div class="topic-metadata">

**Author:** [@Komal\_Parekh](https://discuss.elastic.co/u/Komal_Parekh)\
**Replies:** 1\
**Last updated:** [March 20, 2014, 9:50am UTC](https://discuss.elastic.co/t/cascading-in-elasticsearch/16491 "2014-03-20T09:50:29Z")

</div>

Hello, Like we have cascade on update and cascade on delete in SQL , do we have any such functionality in ElasticSearch? -- You received this message because you are subscribed to the Google Groups "elasticse…

[Previous page](https://discuss.elastic.co/top.md?page=1531&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1533&per_page=50&period=all)
