# Top

**URL:** https://discuss.elastic.co/top.md?page=1539&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1540

---

## [Metricbeats and Kibana](https://discuss.elastic.co/t/metricbeats-and-kibana/167537)

<div class="topic-metadata">

**Author:** [@lgwapnitsky](https://discuss.elastic.co/u/lgwapnitsky)\
**Replies:** 4\
**Last updated:** [February 11, 2019, 8:28pm UTC](https://discuss.elastic.co/t/metricbeats-and-kibana/167537 "2019-02-11T20:28:43Z")

</div>

Working with a fresh installation of Kibana and metricbeats. The latter feeds through logstash. I've gone through setting up the dashboards multiple times, but keep winding up with errors like the following: The reques…

---

## [Add\_field getting wrong value](https://discuss.elastic.co/t/add-field-getting-wrong-value/166406)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [January 30, 2019, 6:27pm UTC](https://discuss.elastic.co/t/add-field-getting-wrong-value/166406 "2019-01-30T18:27:39Z")

</div>

I am using jdbc to connect to database getting different field trying to make new field but it give me something weired output. what am I doing wrong? filter { mutate { add\_field =\> { "did" =\> "%{serial}%{sid}%{uid}…

---

## [New User - too dumb to create first index - please help](https://discuss.elastic.co/t/new-user-too-dumb-to-create-first-index-please-help/113861)

<div class="topic-metadata">

**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\
**Replies:** 4\
**Last updated:** [January 13, 2018, 4:02pm UTC](https://discuss.elastic.co/t/new-user-too-dumb-to-create-first-index-please-help/113861 "2018-01-13T16:02:16Z")

</div>

I would like to experiment with elastic before using it for a research project I am developing. The project data is contained in unstructured pdf files, but for this exercise I am using Wikipedia. My computer is running…

---

## [Help Needed in improving the data ingestion time](https://discuss.elastic.co/t/help-needed-in-improving-the-data-ingestion-time/107767)

<div class="topic-metadata">

**Author:** [@arun\_s](https://discuss.elastic.co/u/arun_s)\
**Replies:** 4\
**Last updated:** [November 15, 2017, 2:50pm UTC](https://discuss.elastic.co/t/help-needed-in-improving-the-data-ingestion-time/107767 "2017-11-15T14:50:58Z")

</div>

Hi I am having csv file of size 1.6 GB and i used default configuration of logstash and elasticsearch to upload the data via logstash , it took more than 15hrs and when i tried with LS\_HEAP\_SIZE=2gb the data uploaded in…

---

## [Did Logstash 1.5.3 version is compatible with Solaris 11.3 version](https://discuss.elastic.co/t/did-logstash-1-5-3-version-is-compatible-with-solaris-11-3-version/99352)

<div class="topic-metadata">

**Author:** [@yogeswararao](https://discuss.elastic.co/u/yogeswararao)\
**Replies:** 4\
**Last updated:** [September 11, 2017, 6:08am UTC](https://discuss.elastic.co/t/did-logstash-1-5-3-version-is-compatible-with-solaris-11-3-version/99352 "2017-09-11T06:08:47Z")

</div>

The logstash 1.5.3 version is working fine in the Solaris 10.x version. After OS version migrated to 11.3 we are not able to start the logstash service? which version of Logstah can be used on Solaris 11.3 - it has to…

---

## [Integration of Java API Elasticsearch](https://discuss.elastic.co/t/integration-of-java-api-elasticsearch/81780)

<div class="topic-metadata">

**Author:** [@Jeremy\_Cugmas](https://discuss.elastic.co/u/Jeremy_Cugmas)\
**Replies:** 4\
**Last updated:** [April 10, 2017, 12:06pm UTC](https://discuss.elastic.co/t/integration-of-java-api-elasticsearch/81780 "2017-04-10T12:06:05Z")

</div>

Hello everyone, I'm currently integrating the elasticsearch java api in my api-rest project. About it, Im' using the dependency JAX-RS. All is working fine but there is a little problem which bothers me. I will expla…

---

## [@timestamp error on syslog logs](https://discuss.elastic.co/t/timestamp-error-on-syslog-logs/40487)

<div class="topic-metadata">

**Author:** [@zokratez](https://discuss.elastic.co/u/zokratez)\
**Replies:** 4\
**Last updated:** [January 30, 2016, 3:02pm UTC](https://discuss.elastic.co/t/timestamp-error-on-syslog-logs/40487 "2016-01-30T15:02:22Z")

</div>

I'm monitoring different logs such Squid, Apache, Nginx, Secure and Message syslogs, Postfix and Dovecot. When the Squid, Apache and Nginx logs arrive the @timestamp time is the same of my PC and Servers times. Otherw…

---

## [Using Metricbeat to send Filebeat logs to ES](https://discuss.elastic.co/t/using-metricbeat-to-send-filebeat-logs-to-es/333850)

<div class="topic-metadata">

**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\
**Replies:** 6\
**Last updated:** [May 29, 2023, 5:43am UTC](https://discuss.elastic.co/t/using-metricbeat-to-send-filebeat-logs-to-es/333850 "2023-05-29T05:43:19Z")

</div>

Hi, I'm running both Filebeat 8.3.3 and Metricbeat 8.3.3 on my RHEL 7.9 server, and sending the logs to another server which is hosting Elasticsearch and Kibana. My filebeat is sending syslog to the ES (I'm simply usin…

---

## [ElasticSearch restart problem (Lucene Version mismatch)](https://discuss.elastic.co/t/elasticsearch-restart-problem-lucene-version-mismatch/310944)

<div class="topic-metadata">

**Author:** [@JUN\_HO\_CHOI\_KR\_SEL](https://discuss.elastic.co/u/JUN_HO_CHOI_KR_SEL)\
**Replies:** 6\
**Last updated:** [August 2, 2022, 11:55pm UTC](https://discuss.elastic.co/t/elasticsearch-restart-problem-lucene-version-mismatch/310944 "2022-08-02T23:55:50Z")

</div>

Hi I using Azure Vm and Elastic & Kibana I restart the vm and i Encounterd the error when i restart the Elasticsearch the error message is Job for elasticsearch.service failed because the control process exited with …

---

## [APM agents storing performance data when wifi is off](https://discuss.elastic.co/t/apm-agents-storing-performance-data-when-wifi-is-off/184483)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 6\
**Last updated:** [June 10, 2019, 3:50pm UTC](https://discuss.elastic.co/t/apm-agents-storing-performance-data-when-wifi-is-off/184483 "2019-06-10T15:50:52Z")

</div>

Hi everyone, Question: Is there any way for APM agents to collect performance information while the machine doesn't have access to wifi connection? Would APM remember the performance logs based on their timestamp …

---

## [Redis - Logstash - Elasticsearch is not as fast as I expected](https://discuss.elastic.co/t/redis-logstash-elasticsearch-is-not-as-fast-as-i-expected/183924)

<div class="topic-metadata">

**Author:** [@crowtit](https://discuss.elastic.co/u/crowtit)\
**Replies:** 6\
**Last updated:** [June 4, 2019, 9:45am UTC](https://discuss.elastic.co/t/redis-logstash-elasticsearch-is-not-as-fast-as-i-expected/183924 "2019-06-04T09:45:57Z")

</div>

Hi, I'm building an almost real-time data pipeline with redis, logstash and elasticsearch. I need to store 2 million documents every minute, but it is not easy for me. So I want to get some advice on my structure. Th…

---

## [Field munging](https://discuss.elastic.co/t/field-munging/63128)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 6\
**Last updated:** [October 18, 2016, 10:58am UTC](https://discuss.elastic.co/t/field-munging/63128 "2016-10-18T10:58:58Z")

</div>

So here's what I got. I am monitoring two files via logstash, each has a field "service". Now, I have the below combinations of results in Kibana, the dashes show no result: ntp,- -,ntp ntp,ntp\_google -,- I'd like t…

---

## [WinLogBeat as Daemonset](https://discuss.elastic.co/t/winlogbeat-as-daemonset/255199)

<div class="topic-metadata">

**Author:** [@geek876](https://discuss.elastic.co/u/geek876)\
**Replies:** 0\
**Last updated:** [November 12, 2020, 10:49am UTC](https://discuss.elastic.co/t/winlogbeat-as-daemonset/255199 "2020-11-12T10:49:39Z")

</div>

Dear Members, Has anyone successfully configured 'WinLogBeat' as DaemonSet on 'Windows Docker Host' for Kubernetes ? Or is that possible at all ? If not, what are alternative approaches ? Ours is a hybrid K8s Cluster ( …

---

## [Anomaly detection - partitioning data](https://discuss.elastic.co/t/anomaly-detection-partitioning-data/250957)

<div class="topic-metadata">

**Author:** [@mduzy](https://discuss.elastic.co/u/mduzy)\
**Replies:** 5\
**Last updated:** [October 6, 2020, 11:54am UTC](https://discuss.elastic.co/t/anomaly-detection-partitioning-data/250957 "2020-10-06T11:54:49Z")

</div>

Hi, I've been working with the anomaly detection functionality in Kibana. I've got about 500 records processed, all of them have a transaction.name and a custom id that works as an tenant indicator (I'll call it tenantI…

---

## [Any plans for aggregation queries (SUM)?](https://discuss.elastic.co/t/any-plans-for-aggregation-queries-sum/224182)

<div class="topic-metadata">

**Author:** [@Alexandre\_Boucher](https://discuss.elastic.co/u/Alexandre_Boucher)\
**Replies:** 5\
**Last updated:** [March 20, 2020, 1:38pm UTC](https://discuss.elastic.co/t/any-plans-for-aggregation-queries-sum/224182 "2020-03-20T13:38:40Z")

</div>

I am currently using Algolia and am interested in App Search. However, one important feature from Algolia that my team need is the aggregation feature done on facets (especially the sum feature). My use case is I search…

---

## [Access Field in Ingest-Pipeline](https://discuss.elastic.co/t/access-field-in-ingest-pipeline/179367)

<div class="topic-metadata">

**Author:** [@nimda](https://discuss.elastic.co/u/nimda)\
**Replies:** 5\
**Last updated:** [May 6, 2019, 8:43am UTC](https://discuss.elastic.co/t/access-field-in-ingest-pipeline/179367 "2019-05-06T08:43:34Z")

</div>

Hello Everyone, I'm currently trying out Ingest-Pipelines, but I'm stuck because of some "field access" issues. My Pipeline is the following. POST \_ingest/pipeline/\_simulate { "pipeline" : { "description" : "pipeli…

---

## [IIS Module for Filebeat](https://discuss.elastic.co/t/iis-module-for-filebeat/127224)

<div class="topic-metadata">

**Author:** [@Pruthvi\_Lokasani](https://discuss.elastic.co/u/Pruthvi_Lokasani)\
**Replies:** 5\
**Last updated:** [April 9, 2018, 11:32am UTC](https://discuss.elastic.co/t/iis-module-for-filebeat/127224 "2018-04-09T11:32:24Z")

</div>

In which version of filebeat I can find IIS Module? This Document Showed IIS Module in 6.X version i am using 6.2.3 version now but there is no IIS Module in it https://www.elastic.co/guide/en/beats/filebeat/master/fil…

---

## [Query HDFS](https://discuss.elastic.co/t/query-hdfs/78996)

<div class="topic-metadata">

**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\
**Replies:** 5\
**Last updated:** [March 20, 2017, 2:34am UTC](https://discuss.elastic.co/t/query-hdfs/78996 "2017-03-20T02:34:35Z")

</div>

Hi Gurus, Does anybody know if Elasticsearch can directory query HDFS where the target data stored? In other words, is it possible for Elasticsearch without having any data to make a query? I'm not familiar with Hadoop…

---

## [Elastic Search Setup Requirements?](https://discuss.elastic.co/t/elastic-search-setup-requirements/76051)

<div class="topic-metadata">

**Author:** [@esanchez](https://discuss.elastic.co/u/esanchez)\
**Replies:** 5\
**Last updated:** [March 1, 2017, 11:10pm UTC](https://discuss.elastic.co/t/elastic-search-setup-requirements/76051 "2017-03-01T23:10:58Z")

</div>

Hello everyone, I have been trying to search around here for whats needed in order to run Elastic search properly. I wanted to use windows server 2012 r2 64 bit with 2 disks with 100 GB. For those of you who have this …

---

## [Logstash output file](https://discuss.elastic.co/t/logstash-output-file/31817)

<div class="topic-metadata">

**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\
**Replies:** 5\
**Last updated:** [October 8, 2015, 9:40am UTC](https://discuss.elastic.co/t/logstash-output-file/31817 "2015-10-08T09:40:56Z")

</div>

Hi , I have a problem where I am getting some logs along with ID , I have two es Index (archive\_index , and latest\_logs) . so each time I have to check whether the current ID is same as previous ID if yes I will send…

---

## [Scoring is lower after adding new field to a document](https://discuss.elastic.co/t/scoring-is-lower-after-adding-new-field-to-a-document/8283)

<div class="topic-metadata">

**Author:** [@philipDS](https://discuss.elastic.co/u/philipDS)\
**Replies:** 5\
**Last updated:** [July 5, 2012, 10:04pm UTC](https://discuss.elastic.co/t/scoring-is-lower-after-adding-new-field-to-a-document/8283 "2012-07-05T22:04:51Z")

</div>

Hey, We're building an application that allows people to save the Twitter handle of a person and an associated tweet. The user has to select the handle and then it fetches the tweet using the Twitter API. This inf…

---

## [How to prevent logging at logstash for /var/log/messages](https://discuss.elastic.co/t/how-to-prevent-logging-at-logstash-for-var-log-messages/117950)

<div class="topic-metadata">

**Author:** [@david\_k](https://discuss.elastic.co/u/david_k)\
**Replies:** 1\
**Last updated:** [February 16, 2018, 8:48am UTC](https://discuss.elastic.co/t/how-to-prevent-logging-at-logstash-for-var-log-messages/117950 "2018-02-16T08:48:59Z")

</div>

Hi all logstash data is written to / var / log / messages. This causes the server capacity to continue to grow. Is there a way to prevent this data from being written to / var / log / messages? Thank you

---

## [Fleet - selfhosted production mode 7.16.3](https://discuss.elastic.co/t/fleet-selfhosted-production-mode-7-16-3/294381)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 3\
**Last updated:** [January 26, 2022, 12:11am UTC](https://discuss.elastic.co/t/fleet-selfhosted-production-mode-7-16-3/294381 "2022-01-26T00:11:27Z")

</div>

Hello wonderful people, I'm looking into setting up fleet. So far I have a test server ready and I have generated the certificates using elasticsearch-certutil elasticsearch CA /etc/elasticsearch/certs/elastic-stack-c…

---

## [S3 bucket size holding the snapshots is 2-2.5x of the total disk used of the cluster](https://discuss.elastic.co/t/s3-bucket-size-holding-the-snapshots-is-2-2-5x-of-the-total-disk-used-of-the-cluster/278944)

<div class="topic-metadata">

**Author:** [@MitParekh](https://discuss.elastic.co/u/MitParekh)\
**Replies:** 3\
**Last updated:** [July 17, 2021, 8:01pm UTC](https://discuss.elastic.co/t/s3-bucket-size-holding-the-snapshots-is-2-2-5x-of-the-total-disk-used-of-the-cluster/278944 "2021-07-17T20:01:49Z")

</div>

Hi, I have a cluster (ES 7.11.1) with 6 nodes and the total disk used is roughly ~4.5TB. I store logging data in it using data streams. My data stream patterns are like abc-lmn-xyz. The data retention period is 14 days. …

---

## [Logstash and Ingest Nodes](https://discuss.elastic.co/t/logstash-and-ingest-nodes/260350)

<div class="topic-metadata">

**Author:** [@jalaine](https://discuss.elastic.co/u/jalaine)\
**Replies:** 8\
**Last updated:** [January 11, 2021, 9:43pm UTC](https://discuss.elastic.co/t/logstash-and-ingest-nodes/260350 "2021-01-11T21:43:23Z")

</div>

Good Morning, My team and I are trying to improve a cluster that we inherited. I apologize for the following vagueness, but due to the location of the cluster I will give as much detail as possible. We currently are wor…

---

## [Only access to Management Kibana: Spaces, Users and Roles](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615)

<div class="topic-metadata">

**Author:** [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\
**Replies:** 8\
**Last updated:** [September 9, 2020, 12:47pm UTC](https://discuss.elastic.co/t/only-access-to-management-kibana-spaces-users-and-roles/246615 "2020-09-09T12:47:28Z")

</div>

Hi community, for certain Users I would like to know how to configure Kibana management in such a manner that these Users only have acces in Kibana Management to: Spaces: to create and modify Users: to create and modif…

---

## [Search froma a pdf file content](https://discuss.elastic.co/t/search-froma-a-pdf-file-content/238254)

<div class="topic-metadata">

**Author:** [@Romy\_Bobby](https://discuss.elastic.co/u/Romy_Bobby)\
**Replies:** 8\
**Last updated:** [June 25, 2020, 8:28am UTC](https://discuss.elastic.co/t/search-froma-a-pdf-file-content/238254 "2020-06-25T08:28:54Z")

</div>

Hi, I have created a trail account in ES ,installed the elastic search package and configured it. to Insert the file i have converted it to base64 format and indexed and created a type . the file can be retrieved fro…

---

## [Scripted fields in kibana to elastic?](https://discuss.elastic.co/t/scripted-fields-in-kibana-to-elastic/218110)

<div class="topic-metadata">

**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\
**Replies:** 3\
**Last updated:** [February 6, 2020, 10:16am UTC](https://discuss.elastic.co/t/scripted-fields-in-kibana-to-elastic/218110 "2020-02-06T10:16:26Z")

</div>

i had question, can i add a scripted field that we insert in kibana index pattern to index elastic? and how to do that? Thanks before...

---

## [Mutiple filebeat servers to Single logstash server](https://discuss.elastic.co/t/mutiple-filebeat-servers-to-single-logstash-server/214725)

<div class="topic-metadata">

**Author:** [@pathfinder225](https://discuss.elastic.co/u/pathfinder225)\
**Replies:** 3\
**Last updated:** [January 13, 2020, 12:51pm UTC](https://discuss.elastic.co/t/mutiple-filebeat-servers-to-single-logstash-server/214725 "2020-01-13T12:51:58Z")

</div>

Hi, New to ELK and I am doing a production setup . I have 3 servers and installed filebeat on each of them. now i am sending these 3 filebeat inputs to single logstash using below config. In all 3 servers Filebeat ou…

---

## [Can we use yarn kbn bootstrap in offline mode](https://discuss.elastic.co/t/can-we-use-yarn-kbn-bootstrap-in-offline-mode/175168)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 3\
**Last updated:** [April 8, 2019, 5:26pm UTC](https://discuss.elastic.co/t/can-we-use-yarn-kbn-bootstrap-in-offline-mode/175168 "2019-04-08T17:26:24Z")

</div>

Hello Team, I am facing network issues, while running yarn kbn bootstrap. Can we download and set depedencies and run yarn kbn bootstrapvin offline mode . Kibana version : 6.3 Thank you, Aditya

---

## [Replacing @timestamp correctly](https://discuss.elastic.co/t/replacing-timestamp-correctly/166771)

<div class="topic-metadata">

**Author:** [@kelevra89](https://discuss.elastic.co/u/kelevra89)\
**Replies:** 8\
**Last updated:** [February 13, 2019, 10:52am UTC](https://discuss.elastic.co/t/replacing-timestamp-correctly/166771 "2019-02-13T10:52:09Z")

</div>

Hi there! I have a problem and hope that someone could help me with it: I try to import a file via Filebeat to Logstash to be handled there and afterwards to be indexed in Elasticsearch. So far this has worked fine! F…

---

## [Reindex from 5.5 to 6.2 with different mapping](https://discuss.elastic.co/t/reindex-from-5-5-to-6-2-with-different-mapping/152708)

<div class="topic-metadata">

**Author:** [@mmbtenorio](https://discuss.elastic.co/u/mmbtenorio)\
**Replies:** 3\
**Last updated:** [October 17, 2018, 10:02am UTC](https://discuss.elastic.co/t/reindex-from-5-5-to-6-2-with-different-mapping/152708 "2018-10-17T10:02:29Z")

</div>

Hello, we're in the middle of upgrading our Elastic Stack from 5.5 to 6.2.4. I know the multi-type is already deprecated in version 6, so when we created the indices, we specify that the type of each index is "doc". The …

---

## [APM server not getting events from Django](https://discuss.elastic.co/t/apm-server-not-getting-events-from-django/139709)

<div class="topic-metadata">

**Author:** [@kmcdeogracias](https://discuss.elastic.co/u/kmcdeogracias)\
**Replies:** 3\
**Last updated:** [July 13, 2018, 7:58am UTC](https://discuss.elastic.co/t/apm-server-not-getting-events-from-django/139709 "2018-07-13T07:58:01Z")

</div>

I setup the apm agent in my django app,verified that the configs are working but I'm not getting any transactions saved in elastic. I created a script that calls a GET endpoint 100x but no transaction is captured. I onl…

---

## [Custom configuration for new Beat](https://discuss.elastic.co/t/custom-configuration-for-new-beat/112470)

<div class="topic-metadata">

**Author:** [@Michael\_Albers](https://discuss.elastic.co/u/Michael_Albers)\
**Replies:** 3\
**Last updated:** [December 19, 2017, 10:46pm UTC](https://discuss.elastic.co/t/custom-configuration-for-new-beat/112470 "2017-12-19T22:46:51Z")

</div>

I'm creating a new Beat from the Developer Guide (https://www.elastic.co/guide/en/beats/devguide/master/index.html). The Beat is functioning well, but I would like to do some final configuration. I've looked all over and…

---

## [Error when importing DATETIME field using sqlite plugin](https://discuss.elastic.co/t/error-when-importing-datetime-field-using-sqlite-plugin/90676)

<div class="topic-metadata">

**Author:** [@abham1](https://discuss.elastic.co/u/abham1)\
**Replies:** 3\
**Last updated:** [July 8, 2017, 12:54pm UTC](https://discuss.elastic.co/t/error-when-importing-datetime-field-using-sqlite-plugin/90676 "2017-07-08T12:54:27Z")

</div>

I'm unable to import an SQLite db containing a DATETIME field (eg. 2017-03-22 16:04:22) into Logstash using the SQLite plugin (it worked after I modified the db and changed this field to a string). My Configuration file …

---

## [Upstream Response Time](https://discuss.elastic.co/t/upstream-response-time/75711)

<div class="topic-metadata">

**Author:** [@usher00690](https://discuss.elastic.co/u/usher00690)\
**Replies:** 3\
**Last updated:** [February 23, 2017, 2:02pm UTC](https://discuss.elastic.co/t/upstream-response-time/75711 "2017-02-23T14:02:07Z")

</div>

Hi, I want to monitor The upstream response time, Request time on ELK. Currently the packetbeat 1.3.1 can't capture and visualize it. What need to do and how? Thanks

---

## [Server suitability for ELK install](https://discuss.elastic.co/t/server-suitability-for-elk-install/52459)

<div class="topic-metadata">

**Author:** [@smilin\_stan](https://discuss.elastic.co/u/smilin_stan)\
**Replies:** 3\
**Last updated:** [June 16, 2016, 6:35am UTC](https://discuss.elastic.co/t/server-suitability-for-elk-install/52459 "2016-06-16T06:35:01Z")

</div>

I have a single ELK server with the following hardware configuration: Dual core Xeon 3.2Ghz 20GB RAM 500GB Hard disk space (RAID 1) I have 10 remote hosts, generating a combined total of: 16 GB of logs per day (N…

---

## [JDBC river query results collapsing to JSON issue](https://discuss.elastic.co/t/jdbc-river-query-results-collapsing-to-json-issue/17126)

<div class="topic-metadata">

**Author:** [@jrizzi1](https://discuss.elastic.co/u/jrizzi1)\
**Replies:** 8\
**Last updated:** [April 23, 2014, 4:41pm UTC](https://discuss.elastic.co/t/jdbc-river-query-results-collapsing-to-json-issue/17126 "2014-04-23T16:41:07Z")

</div>

I am having an issue with the jdbc river collapsing during the bulk insert i have records that have some single value properties, and can have multiple value properties (names, addresses and emails) there ar…

---

## [Setting up elasticsearch to scale: shards per index](https://discuss.elastic.co/t/setting-up-elasticsearch-to-scale-shards-per-index/15704)

<div class="topic-metadata">

**Author:** [@Matt\_7](https://discuss.elastic.co/u/Matt_7)\
**Replies:** 8\
**Last updated:** [February 12, 2014, 2:45pm UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-to-scale-shards-per-index/15704 "2014-02-12T14:45:36Z")

</div>

Hey all! Background: I am using elasticsearch with logstash to do some log analysis. My use-case is write-heavy, and I have configured ES accordingly. After experimenting with different setups, I am considering th…

---

## [How to get elastic logs in a binded docker volume?](https://discuss.elastic.co/t/how-to-get-elastic-logs-in-a-binded-docker-volume/193686)

<div class="topic-metadata">

**Author:** [@key](https://discuss.elastic.co/u/key)\
**Replies:** 0\
**Last updated:** [August 4, 2019, 2:45pm UTC](https://discuss.elastic.co/t/how-to-get-elastic-logs-in-a-binded-docker-volume/193686 "2019-08-04T14:45:55Z")

</div>

I want to access the logs of elasticsearch while it's running in a docker container. The goal is to keep track of possible errors while indexing documents. I'm using the following docker-compose and I run it with sudo d…

---

## [Recommended RAM ratios for ELK with docker-compose](https://discuss.elastic.co/t/recommended-ram-ratios-for-elk-with-docker-compose/141403)

<div class="topic-metadata">

**Author:** [@Rob\_Davidson](https://discuss.elastic.co/u/Rob_Davidson)\
**Replies:** 0\
**Last updated:** [July 24, 2018, 2:35pm UTC](https://discuss.elastic.co/t/recommended-ram-ratios-for-elk-with-docker-compose/141403 "2018-07-24T14:35:00Z")

</div>

I have a production server with 8GB RAM. Im looking to host elastic,logstash and kibana on the server. Using documer compose. What would be the recommended java sizes memory sizes for each of the containers. How might…

---

## [Autocomplete with case sensitive aggregation and case insensitive ordering - help needed](https://discuss.elastic.co/t/autocomplete-with-case-sensitive-aggregation-and-case-insensitive-ordering-help-needed/87430)

<div class="topic-metadata">

**Author:** [@tibor](https://discuss.elastic.co/u/tibor)\
**Replies:** 0\
**Last updated:** [May 29, 2017, 10:42am UTC](https://discuss.elastic.co/t/autocomplete-with-case-sensitive-aggregation-and-case-insensitive-ordering-help-needed/87430 "2017-05-29T10:42:29Z")

</div>

I've built an autocomplete functionality that works great if I don't care about correct ordering. If ordering matters I have a problem. I need to fill the AC field with authors name ordered ascending in case insensitive …

---

## [Data visulization Elasticsearch and d3.js](https://discuss.elastic.co/t/data-visulization-elasticsearch-and-d3-js/34395)

<div class="topic-metadata">

**Author:** [@RAJAUG](https://discuss.elastic.co/u/RAJAUG)\
**Replies:** 0\
**Last updated:** [November 12, 2015, 9:58am UTC](https://discuss.elastic.co/t/data-visulization-elasticsearch-and-d3-js/34395 "2015-11-12T09:58:16Z")

</div>

I would like to make different kinds of graph using elasticsearch , AngularJS and D3.js . i have elaticsearch server in my local machine http://localhost:9200 , index name is nfl. i want to make graph based on data …

---

## [Providing Socket tineout exception not working in elastic java api](https://discuss.elastic.co/t/providing-socket-tineout-exception-not-working-in-elastic-java-api/350923)

<div class="topic-metadata">

**Author:** [@Divy\_Garg](https://discuss.elastic.co/u/Divy_Garg)\
**Replies:** 7\
**Last updated:** [January 15, 2024, 3:56pm UTC](https://discuss.elastic.co/t/providing-socket-tineout-exception-not-working-in-elastic-java-api/350923 "2024-01-15T15:56:29Z")

</div>

Hi I am using below libraries to connect to elasticsearch from java implementation group: 'co.elastic.clients', name: 'elasticsearch-java', version: '8.11.4' implementation group: 'org.elasticsearch.client', name: 'el…

---

## [We are seeing the issue on SonarQube with elasticsearch. Elastic search is not coming up preventing the sonarqube to be up and running](https://discuss.elastic.co/t/we-are-seeing-the-issue-on-sonarqube-with-elasticsearch-elastic-search-is-not-coming-up-preventing-the-sonarqube-to-be-up-and-running/339229)

<div class="topic-metadata">

**Author:** [@bipin23](https://discuss.elastic.co/u/bipin23)\
**Replies:** 1\
**Last updated:** [July 25, 2023, 9:56pm UTC](https://discuss.elastic.co/t/we-are-seeing-the-issue-on-sonarqube-with-elasticsearch-elastic-search-is-not-coming-up-preventing-the-sonarqube-to-be-up-and-running/339229 "2023-07-25T21:56:47Z")

</div>

Sonarqube version - 10.0.0 OS : RHEL 8 Java - opendfk 17 Here are the logs: 2023.07.25 21:03:47 ERROR es\[o.e.b.Elasticsearch\] fatal exception while booting Elasticsearch java.lang.ExceptionInInitializerError: null …

---

## [Send logs from filebeat to elasticsearch](https://discuss.elastic.co/t/send-logs-from-filebeat-to-elasticsearch/330628)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 7\
**Last updated:** [April 25, 2023, 5:39am UTC](https://discuss.elastic.co/t/send-logs-from-filebeat-to-elasticsearch/330628 "2023-04-25T05:39:27Z")

</div>

I am trying to send logs from filebeat to elasticsearch. Here is the filbeat.yml filebeat.inputs: - type: filestream id: my-filestream-id enabled: true paths: - C:\\ProgramData\\sample\_logs\\sample.log - type: lo…

---

## [Trace id and Transaction id getting inserted but Nothing shown in Stream tab](https://discuss.elastic.co/t/trace-id-and-transaction-id-getting-inserted-but-nothing-shown-in-stream-tab/273739)

<div class="topic-metadata">

**Author:** [@gaurav9620](https://discuss.elastic.co/u/gaurav9620)\
**Replies:** 1\
**Last updated:** [May 23, 2021, 3:38pm UTC](https://discuss.elastic.co/t/trace-id-and-transaction-id-getting-inserted-but-nothing-shown-in-stream-tab/273739 "2021-05-23T15:38:15Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Question about Security Module + ECS + Sparcity Question](https://discuss.elastic.co/t/question-about-security-module-ecs-sparcity-question/190957)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 7\
**Last updated:** [July 30, 2019, 1:47am UTC](https://discuss.elastic.co/t/question-about-security-module-ecs-sparcity-question/190957 "2019-07-30T01:47:16Z")

</div>

Hi, I have some questions regarding the security module. Using the processor.Convert() the mapping between windows event data into ECS is done by renaming fields. I have some doubts regarding to the behavior When th…

---

## [ES 5.4 synonyms and shingles don't seem to work together](https://discuss.elastic.co/t/es-5-4-synonyms-and-shingles-dont-seem-to-work-together/127552)

<div class="topic-metadata">

**Author:** [@Brett\_Anderson](https://discuss.elastic.co/u/Brett_Anderson)\
**Replies:** 1\
**Last updated:** [April 15, 2018, 9:50pm UTC](https://discuss.elastic.co/t/es-5-4-synonyms-and-shingles-dont-seem-to-work-together/127552 "2018-04-15T21:50:31Z")

</div>

I've applied the following synonym filter to an analyzer just on the search side (i.e. applied at search time, not index time): "synonym":{ "type":"synonym", "expand":true, "synonyms": \[ "ubergroun…

---

## [Elasticsearch Indices in Red](https://discuss.elastic.co/t/elasticsearch-indices-in-red/27653)

<div class="topic-metadata">

**Author:** [@Aditya\_Patel](https://discuss.elastic.co/u/Aditya_Patel)\
**Replies:** 1\
**Last updated:** [March 15, 2017, 4:37pm UTC](https://discuss.elastic.co/t/elasticsearch-indices-in-red/27653 "2017-03-15T16:37:43Z")

</div>

Hi I had initially set up elasticsearch to run in background as service. But while restarting the superviosr, it stopped working. I still am not able to run it in background now. But while restarting it manually. I …

[Previous page](https://discuss.elastic.co/top.md?page=1538&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1540&per_page=50&period=all)
