# Top

**URL:** https://discuss.elastic.co/top.md?page=1542&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1543

---

## [Issue with too little memory, running several docker container (including Elasticsearch)](https://discuss.elastic.co/t/issue-with-too-little-memory-running-several-docker-container-including-elasticsearch/259913)

<div class="topic-metadata">

**Author:** [@lochr](https://discuss.elastic.co/u/lochr)\
**Replies:** 4\
**Last updated:** [December 30, 2020, 8:37pm UTC](https://discuss.elastic.co/t/issue-with-too-little-memory-running-several-docker-container-including-elasticsearch/259913 "2020-12-30T20:37:25Z")

</div>

Hello everyone, I have an issue with the environment variable discovery.type=single-node when spinning up an Elasticsearch container via docker-compose: Sample docker-compose file as follows: elasticsearch: …

---

## [Is there a way to rename an ingest pipeline](https://discuss.elastic.co/t/is-there-a-way-to-rename-an-ingest-pipeline/226173)

<div class="topic-metadata">

**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\
**Replies:** 4\
**Last updated:** [April 9, 2020, 2:07pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-rename-an-ingest-pipeline/226173 "2020-04-09T14:07:52Z")

</div>

Hello all, I found nothing on this searching the forum so opening a new topic. I also found nothing suggesting this would be possible in the comprehensive official documentation but I thought I would ask anyway :smiley…

---

## [Tagging of answered questions](https://discuss.elastic.co/t/tagging-of-answered-questions/216450)

<div class="topic-metadata">

**Author:** [@mero](https://discuss.elastic.co/u/mero)\
**Replies:** 4\
**Last updated:** [February 3, 2020, 12:37pm UTC](https://discuss.elastic.co/t/tagging-of-answered-questions/216450 "2020-02-03T12:37:45Z")

</div>

Hello together, while using discuss.elastic.co i see a lot of not answered questions. Sometimes only with a second comment wich points out that no one had an answer to that question. It would be a great feature, if the…

---

## [\[metricbeat\] kafka metric show in discovery but not show in dashboard (detail in description )](https://discuss.elastic.co/t/metricbeat-kafka-metric-show-in-discovery-but-not-show-in-dashboard-detail-in-description/201226)

<div class="topic-metadata">

**Author:** [@Nguy\_n\_T\_t\_Dung](https://discuss.elastic.co/u/Nguy_n_T_t_Dung)\
**Replies:** 4\
**Last updated:** [September 27, 2019, 2:37am UTC](https://discuss.elastic.co/t/metricbeat-kafka-metric-show-in-discovery-but-not-show-in-dashboard-detail-in-description/201226 "2019-09-27T02:37:49Z")

</div>

HI there, i'm stucking in detect problem. Here is my situation : in client vm: metricbeat modules enable kafka output to Elasticsearch . Kibana : create index with : metricbeat-\* successfully with full log and kafka …

---

## [Trouble "reconnecting" APM after upgrade to 6.6.0](https://discuss.elastic.co/t/trouble-reconnecting-apm-after-upgrade-to-6-6-0/167667)

<div class="topic-metadata">

**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\
**Replies:** 4\
**Last updated:** [February 8, 2019, 5:24pm UTC](https://discuss.elastic.co/t/trouble-reconnecting-apm-after-upgrade-to-6-6-0/167667 "2019-02-08T17:24:33Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 6.6.…

---

## [Mlockall: what happens if no memory available?](https://discuss.elastic.co/t/mlockall-what-happens-if-no-memory-available/24241)

<div class="topic-metadata">

**Author:** [@Abid\_Hussain](https://discuss.elastic.co/u/Abid_Hussain)\
**Replies:** 4\
**Last updated:** [June 25, 2015, 10:27am UTC](https://discuss.elastic.co/t/mlockall-what-happens-if-no-memory-available/24241 "2015-06-25T10:27:46Z")

</div>

Hi all, to prevent os from swapping, it's recommended to set bootstrap.mlockall: true. I wonder the following. What happens in situations when no memory is available anymore? Does the jvm chrash in such a case? And i…

---

## [Customizing Directory and IndexWriter behavior via custom ES plug-in](https://discuss.elastic.co/t/customizing-directory-and-indexwriter-behavior-via-custom-es-plug-in/20448)

<div class="topic-metadata">

**Author:** [@kittaakos](https://discuss.elastic.co/u/kittaakos)\
**Replies:** 4\
**Last updated:** [October 28, 2014, 8:17am UTC](https://discuss.elastic.co/t/customizing-directory-and-indexwriter-behavior-via-custom-es-plug-in/20448 "2014-10-28T08:17:34Z")

</div>

Hi there, in the last couple of years we managed to customize Apache Lucene (through its public API) to support branching, tagging and compare in a concurrent fashion for our server application. We managed to achi…

---

## [Error connecting to running ES server - Message not fully read](https://discuss.elastic.co/t/error-connecting-to-running-es-server-message-not-fully-read/8801)

<div class="topic-metadata">

**Author:** [@Warner\_Onstine](https://discuss.elastic.co/u/Warner_Onstine)\
**Replies:** 4\
**Last updated:** [August 22, 2012, 4:38pm UTC](https://discuss.elastic.co/t/error-connecting-to-running-es-server-message-not-fully-read/8801 "2012-08-22T16:38:09Z")

</div>

Both java client and server are 0.19.8 This was running just before the latest deployment. Some other jar dependencies were updated and I see this error just before the stacktrace below: log4j:ERROR Error occur…

---

## [Export rules into excel or CSV or PDF format](https://discuss.elastic.co/t/export-rules-into-excel-or-csv-or-pdf-format/311180)

<div class="topic-metadata">

**Author:** [@sunith](https://discuss.elastic.co/u/sunith)\
**Replies:** 2\
**Last updated:** [August 3, 2022, 6:29am UTC](https://discuss.elastic.co/t/export-rules-into-excel-or-csv-or-pdf-format/311180 "2022-08-03T06:29:54Z")

</div>

Hi, Kindly let me know is there a way to export all rules into readable CSV or excel or PDF format? Or is there a way to convert .ndjson export format to CSV or excel? Thanks in advance.

---

## [7.11: Expected two arguments specifying path to ES\_PATH\_CONF and plugins directory](https://discuss.elastic.co/t/7-11-expected-two-arguments-specifying-path-to-es-path-conf-and-plugins-directory/263986)

<div class="topic-metadata">

**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\
**Replies:** 2\
**Last updated:** [February 12, 2021, 8:26am UTC](https://discuss.elastic.co/t/7-11-expected-two-arguments-specifying-path-to-es-path-conf-and-plugins-directory/263986 "2021-02-12T08:26:10Z")

</div>

Вчера вечером решил обновить 7.10.2(windows 2016) на свежий 7.11 Прощёлкал как всегда далее и на этапе запуска сервиса облом. В ивентах: Service cannot be started. Elastic.ProcessHosts.Process.StartupException: Could n…

---

## [Problem with heap size](https://discuss.elastic.co/t/problem-with-heap-size/233739)

<div class="topic-metadata">

**Author:** [@Intissar\_Ayadi](https://discuss.elastic.co/u/Intissar_Ayadi)\
**Replies:** 2\
**Last updated:** [May 22, 2020, 10:47am UTC](https://discuss.elastic.co/t/problem-with-heap-size/233739 "2020-05-22T10:47:12Z")

</div>

I have a machine running elasticsearch 7.X as a service, wich have 64GO of RAM available, When setting the heap size of elasticsearch( Xmx and Xms 50% of my physical RAM) , it cannot accept and elasticsearch failed to s…

---

## [How to use 'precision\_threshold' in TSVB?](https://discuss.elastic.co/t/how-to-use-precision-threshold-in-tsvb/229904)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 2\
**Last updated:** [April 28, 2020, 1:19am UTC](https://discuss.elastic.co/t/how-to-use-precision-threshold-in-tsvb/229904 "2020-04-28T01:19:16Z")

</div>

I am using cardinality aggregation in TSVB. In metric graph, 'precision threshold' was used in 'json input'. like this... { "precision\_threshold":40000 } How to use it in TSVB?

---

## [How to setting ECS（Elastic Common Schema） true in Elasticsearch 6.7](https://discuss.elastic.co/t/how-to-setting-ecs-elastic-common-schema-true-in-elasticsearch-6-7/175315)

<div class="topic-metadata">

**Author:** [@taku333](https://discuss.elastic.co/u/taku333)\
**Replies:** 2\
**Last updated:** [April 8, 2019, 1:29am UTC](https://discuss.elastic.co/t/how-to-setting-ecs-elastic-common-schema-true-in-elasticsearch-6-7/175315 "2019-04-08T01:29:24Z")

</div>

Hi ! When I did the following, a warning occurred. In Elasticsearch 6.7, is there a way to configure using ECS ​​(Elastic Common Schema)? Is it impossible to wait until Elasticsearch 7.0? ◆POST POST \_ingest/pipeline…

---

## [Logstash kafka rename topic name](https://discuss.elastic.co/t/logstash-kafka-rename-topic-name/124334)

<div class="topic-metadata">

**Author:** [@rajkrishmoorthy](https://discuss.elastic.co/u/rajkrishmoorthy)\
**Replies:** 2\
**Last updated:** [March 17, 2018, 5:39pm UTC](https://discuss.elastic.co/t/logstash-kafka-rename-topic-name/124334 "2018-03-17T17:39:25Z")

</div>

below is my logstash config, i need to rename topic to new topicname, how can i achieve that ?, i tried following config it seems not working input { kafka { bootstrap\_servers =\> "boostrap1:9092" topics =\> \["global-h…

---

## [ELK issue](https://discuss.elastic.co/t/elk-issue/105102)

<div class="topic-metadata">

**Author:** [@Rehan\_Ch](https://discuss.elastic.co/u/Rehan_Ch)\
**Replies:** 2\
**Last updated:** [October 25, 2017, 11:54am UTC](https://discuss.elastic.co/t/elk-issue/105102 "2017-10-25T11:54:59Z")

</div>

Hi, I am new to ELK and configured ELK by following some online doc. I got the dashboard but my syslog or nginx access logs are not appearing in kibana. Here I am posting my config files.Please help SSl certificate: …

---

## [Pipe Plugin Not Working on Windows](https://discuss.elastic.co/t/pipe-plugin-not-working-on-windows/89975)

<div class="topic-metadata">

**Author:** [@lynchnf](https://discuss.elastic.co/u/lynchnf)\
**Replies:** 2\
**Last updated:** [June 26, 2017, 6:20pm UTC](https://discuss.elastic.co/t/pipe-plugin-not-working-on-windows/89975 "2017-06-26T18:20:24Z")

</div>

I'm trying to execute the Logstash-output-pipe plugin, but I can't get it to work with even simplest configuration. I'm executing this command: bin\\logstash.bat --path.settings /I:/logstash-5.2.2/config -l logs -f pipe…

---

## [Multiple Scroll requests concurrently on the same index drastically increase time for each scroll request compared to running individually](https://discuss.elastic.co/t/multiple-scroll-requests-concurrently-on-the-same-index-drastically-increase-time-for-each-scroll-request-compared-to-running-individually/59704)

<div class="topic-metadata">

**Author:** [@ptaladayuw](https://discuss.elastic.co/u/ptaladayuw)\
**Replies:** 2\
**Last updated:** [September 6, 2016, 6:51pm UTC](https://discuss.elastic.co/t/multiple-scroll-requests-concurrently-on-the-same-index-drastically-increase-time-for-each-scroll-request-compared-to-running-individually/59704 "2016-09-06T18:51:03Z")

</div>

We have a series of automated tasks that update different ES indexes with data. One piece of data is the people information that we also store in ES. What we are doing currently is using a scroll request to read in all t…

---

## [Can't install Logstash-codec-nmap](https://discuss.elastic.co/t/cant-install-logstash-codec-nmap/56280)

<div class="topic-metadata">

**Author:** [@timogoosen](https://discuss.elastic.co/u/timogoosen)\
**Replies:** 2\
**Last updated:** [August 19, 2016, 5:30pm UTC](https://discuss.elastic.co/t/cant-install-logstash-codec-nmap/56280 "2016-08-19T17:30:22Z")

</div>

I tried installing logstash-codec nmap see link: https://github.com/logstash-plugins/logstash-codec-nmap I've tried installing using bin/plugin and I've also tried installing it using gem and also tried installing it f…

---

## [Logstash-filter-elasticsearch-2.1.0 Argument error](https://discuss.elastic.co/t/logstash-filter-elasticsearch-2-1-0-argument-error/54406)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 2\
**Last updated:** [June 30, 2016, 2:23pm UTC](https://discuss.elastic.co/t/logstash-filter-elasticsearch-2-1-0-argument-error/54406 "2016-06-30T14:23:58Z")

</div>

Hi All, I have installed logstash-filter-elasticsearch-2.1.0 and after configuring this filter plugin I end up with: "exception" =\> ArgumentError: Cabin::Channel#warn(message, data={}) takes at most 2 arguments I am…

---

## [Kibana Visualization Basics](https://discuss.elastic.co/t/kibana-visualization-basics/45474)

<div class="topic-metadata">

**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\
**Replies:** 2\
**Last updated:** [March 25, 2016, 11:12pm UTC](https://discuss.elastic.co/t/kibana-visualization-basics/45474 "2016-03-25T23:12:10Z")

</div>

Hi Team, Please help understand Kibana visualizations, ES queries are also new to me. Here is what i am trying to do, i uploaded below sample data (filebeat-\>ES) 192.0.1.111|"Company-1"|SEA|\[25/Mar/2016:13:00:01 -070…

---

## [What are marvel.exporters in hot threads?](https://discuss.elastic.co/t/what-are-marvel-exporters-in-hot-threads/32718)

<div class="topic-metadata">

**Author:** [@bbailey1024](https://discuss.elastic.co/u/bbailey1024)\
**Replies:** 2\
**Last updated:** [October 23, 2015, 6:43pm UTC](https://discuss.elastic.co/t/what-are-marvel-exporters-in-hot-threads/32718 "2015-10-23T18:43:36Z")

</div>

We're troubleshooting an issue in our cluster and came across the following in nodes/hotthreads. 87.3% (436.2ms out of 500ms) cpu usage by thread 'elasticsearch\[host1.domain.com\]\[marvel.exporters\]' The above is showin…

---

## [Watcher Automated Email Reports](https://discuss.elastic.co/t/watcher-automated-email-reports/321586)

<div class="topic-metadata">

**Author:** [@lmoore2210](https://discuss.elastic.co/u/lmoore2210)\
**Replies:** 3\
**Last updated:** [December 20, 2022, 7:01pm UTC](https://discuss.elastic.co/t/watcher-automated-email-reports/321586 "2022-12-20T19:01:14Z")

</div>

Version 7.17: I'm trying to set up a Watcher to send report emails following this guide: I set up the email account in the elasticsearch.yml with a pretty basic setup since our SMTP server does not require authentica…

---

## [Alert index is not getting generated](https://discuss.elastic.co/t/alert-index-is-not-getting-generated/318240)

<div class="topic-metadata">

**Author:** [@breakingcode](https://discuss.elastic.co/u/breakingcode)\
**Replies:** 3\
**Last updated:** [November 6, 2022, 3:37pm UTC](https://discuss.elastic.co/t/alert-index-is-not-getting-generated/318240 "2022-11-06T15:37:02Z")

</div>

Hii, I am creating alerts for my data view. I configured the rule as if salary property in data view extends some value an document with alert info will be saved in alert index. But when I enable my rule no alert index i…

---

## [Change default Page size of 50 in dashboard form saved search](https://discuss.elastic.co/t/change-default-page-size-of-50-in-dashboard-form-saved-search/294555)

<div class="topic-metadata">

**Author:** [@Moni](https://discuss.elastic.co/u/Moni)\
**Replies:** 3\
**Last updated:** [January 31, 2022, 8:27am UTC](https://discuss.elastic.co/t/change-default-page-size-of-50-in-dashboard-form-saved-search/294555 "2022-01-31T08:27:40Z")

</div>

When I try to create a dashboard from an existing saved search result (from discover) the default page size is 50 and there is no option to change this in the dashboard/panel. Atleast I could not locate. Do let me know i…

---

## [Reindex order](https://discuss.elastic.co/t/reindex-order/273114)

<div class="topic-metadata">

**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\
**Replies:** 3\
**Last updated:** [May 17, 2021, 12:36am UTC](https://discuss.elastic.co/t/reindex-order/273114 "2021-05-17T00:36:34Z")

</div>

Hello, Does the reindex save the original order of the documents? Does the answer the same when using slice? Thank you!

---

## [Convert Different timezones syslog time to datetime format](https://discuss.elastic.co/t/convert-different-timezones-syslog-time-to-datetime-format/246352)

<div class="topic-metadata">

**Author:** [@Pavani\_Reddy](https://discuss.elastic.co/u/Pavani_Reddy)\
**Replies:** 3\
**Last updated:** [August 26, 2020, 4:17pm UTC](https://discuss.elastic.co/t/convert-different-timezones-syslog-time-to-datetime-format/246352 "2020-08-26T16:17:41Z")

</div>

I have following timestamp with different timezones in the log messages. Aug 11 03:31:12.942 UTC Aug 11 04:31:12.819 GMT Aug 10 22:31:51.207 CST Aug 10 04:31:38.897 PAC Aug 10 22:31:13.210 CDT Aug 11 03:31:13.048 P…

---

## [I deleted the elasticsearch folder in /etc/elasticsearch/ , not sure how to restore back?](https://discuss.elastic.co/t/i-deleted-the-elasticsearch-folder-in-etc-elasticsearch-not-sure-how-to-restore-back/243585)

<div class="topic-metadata">

**Author:** [@Athiq\_Ahmed](https://discuss.elastic.co/u/Athiq_Ahmed)\
**Replies:** 3\
**Last updated:** [August 4, 2020, 5:33am UTC](https://discuss.elastic.co/t/i-deleted-the-elasticsearch-folder-in-etc-elasticsearch-not-sure-how-to-restore-back/243585 "2020-08-04T05:33:21Z")

</div>

I have built the Flask application(Python) which is linked to Elasticsearch(port:9200), Now I need to deploy this application within AWS EC2, however while performing I deleted the Elasticsearch folder within /etc and no…

---

## [Received response for a request that has timed out](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out/214377)

<div class="topic-metadata">

**Author:** [@Lawrence](https://discuss.elastic.co/u/Lawrence)\
**Replies:** 0\
**Last updated:** [January 9, 2020, 9:09am UTC](https://discuss.elastic.co/t/received-response-for-a-request-that-has-timed-out/214377 "2020-01-09T09:09:42Z")

</div>

Hello, In recent weeks, the cluster goes back many errors of "Timeout" while there was no change over. The cluster is currently composed of 7 nodes (3 master / data / ingest and 4 datas) and is running on version 5.6.7…

---

## [Conversion of OData Queries to Elastic Queries](https://discuss.elastic.co/t/conversion-of-odata-queries-to-elastic-queries/189741)

<div class="topic-metadata">

**Author:** [@Sai\_Teja\_Singamsetty](https://discuss.elastic.co/u/Sai_Teja_Singamsetty)\
**Replies:** 0\
**Last updated:** [July 10, 2019, 11:33am UTC](https://discuss.elastic.co/t/conversion-of-odata-queries-to-elastic-queries/189741 "2019-07-10T11:33:59Z")

</div>

Is there any support to convert the OData queries requested from the Front end to Elastic DSL Queries to fetch data from my ElasticDB in .Net Core?

---

## [How to create a built\_assets from Kibana Source Code in Kibana\_7.2.0](https://discuss.elastic.co/t/how-to-create-a-built-assets-from-kibana-source-code-in-kibana-7-2-0/188302)

<div class="topic-metadata">

**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\
**Replies:** 3\
**Last updated:** [July 1, 2019, 4:40pm UTC](https://discuss.elastic.co/t/how-to-create-a-built-assets-from-kibana-source-code-in-kibana-7-2-0/188302 "2019-07-01T16:40:31Z")

</div>

Hi Team, How can we create or build the built\_assets folder with files from kibana source code. I can able to see many things loading from built\_assets. I think it was newly introduced in Kibana 7.2.0 While running t…

---

## [Delete lines in Elasticsearch previous deleted in SQL DB](https://discuss.elastic.co/t/delete-lines-in-elasticsearch-previous-deleted-in-sql-db/183281)

<div class="topic-metadata">

**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\
**Replies:** 3\
**Last updated:** [May 30, 2019, 7:54pm UTC](https://discuss.elastic.co/t/delete-lines-in-elasticsearch-previous-deleted-in-sql-db/183281 "2019-05-30T19:54:23Z")

</div>

Hello, In my logstash file, I input my data from a mysql database and then do some transformations and insert in elasticsearch. I used the action update to always have the most updated information. However, if I delete …

---

## [Metricbeat with namespace secrets in Kubernetes](https://discuss.elastic.co/t/metricbeat-with-namespace-secrets-in-kubernetes/177159)

<div class="topic-metadata">

**Author:** [@soandosnc](https://discuss.elastic.co/u/soandosnc)\
**Replies:** 3\
**Last updated:** [April 24, 2019, 8:14am UTC](https://discuss.elastic.co/t/metricbeat-with-namespace-secrets-in-kubernetes/177159 "2019-04-24T08:14:38Z")

</div>

I have metricbeat up and running on kubernetes collecting k8s metrics, as well as node metrics, forwarding to ES, deployed as a deamonset via helm chart. I want to use some of the other modules (rabbitmq, redis, etc), b…

---

## [Logstash clone filter relies on deprecated \_type field](https://discuss.elastic.co/t/logstash-clone-filter-relies-on-deprecated-type-field/156553)

<div class="topic-metadata">

**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\
**Replies:** 3\
**Last updated:** [November 15, 2018, 10:37am UTC](https://discuss.elastic.co/t/logstash-clone-filter-relies-on-deprecated-type-field/156553 "2018-11-15T10:37:06Z")

</div>

I just went through what appears to be a rite of passage for Logstash users and discovering that the "clone" filter won't actually do anything unless the "clones" array has at least one element. The result is a cloned e…

---

## [Extract fields from json file in Logstash using json filter](https://discuss.elastic.co/t/extract-fields-from-json-file-in-logstash-using-json-filter/153948)

<div class="topic-metadata">

**Author:** [@abhi\_latpate](https://discuss.elastic.co/u/abhi_latpate)\
**Replies:** 0\
**Last updated:** [October 25, 2018, 8:34am UTC](https://discuss.elastic.co/t/extract-fields-from-json-file-in-logstash-using-json-filter/153948 "2018-10-25T08:34:30Z")

</div>

I want to extract fields from json file and want to create graphs in kibana My input.json file consists of similar json elements (Pasting small portion since file is huge): "tags": \[ "jdkinstall", "clas…

---

## [How to get count of document with its range using DSL query](https://discuss.elastic.co/t/how-to-get-count-of-document-with-its-range-using-dsl-query/121609)

<div class="topic-metadata">

**Author:** [@saineshwar\_bageri](https://discuss.elastic.co/u/saineshwar_bageri)\
**Replies:** 3\
**Last updated:** [February 27, 2018, 10:56am UTC](https://discuss.elastic.co/t/how-to-get-count-of-document-with-its-range-using-dsl-query/121609 "2018-02-27T10:56:46Z")

</div>

I want count of document between particular range. if i take appstatusid from range 1 to 500 then count of document will be 500. Document Sample "Indexname" :applicationstatus and unique id which i am inserting is "ap…

---

## [3 node cluster all master eligible questions](https://discuss.elastic.co/t/3-node-cluster-all-master-eligible-questions/87375)

<div class="topic-metadata">

**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\
**Replies:** 3\
**Last updated:** [May 28, 2017, 11:51pm UTC](https://discuss.elastic.co/t/3-node-cluster-all-master-eligible-questions/87375 "2017-05-28T23:51:36Z")

</div>

I have following setup for 3 node cluster , all being master eligible as recommended by few folks in this discussion. node.name : node1 \[ node2, node3 \] node.master: true node.data: true My questions, don't i need a…

---

## [How to set the analyzer for a field when i usespark-elasticsearch saveToEsWithMeta save to es](https://discuss.elastic.co/t/how-to-set-the-analyzer-for-a-field-when-i-usespark-elasticsearch-savetoeswithmeta-save-to-es/84405)

<div class="topic-metadata">

**Author:** [@tonychan](https://discuss.elastic.co/u/tonychan)\
**Replies:** 3\
**Last updated:** [May 8, 2017, 1:35am UTC](https://discuss.elastic.co/t/how-to-set-the-analyzer-for-a-field-when-i-usespark-elasticsearch-savetoeswithmeta-save-to-es/84405 "2017-05-08T01:35:21Z")

</div>

my question is how to set the analyzer for a field which's name is changed , my code like as below: val test ="性别" val lbs: Map\[String, String\] = Map("create\_time" -\> "1491990010000", "name" -\> "年龄", "values" -\> "70后,8…

---

## [Topbeat not showing process data](https://discuss.elastic.co/t/topbeat-not-showing-process-data/40759)

<div class="topic-metadata">

**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\
**Replies:** 3\
**Last updated:** [February 2, 2016, 9:18pm UTC](https://discuss.elastic.co/t/topbeat-not-showing-process-data/40759 "2016-02-02T21:18:41Z")

</div>

Top beat is running fine except my process data is showing as this Any idea what is causing this? Thanks!!

---

## [Transformation d'une matchPhraseQuery en filter](https://discuss.elastic.co/t/transformation-dune-matchphrasequery-en-filter/36183)

<div class="topic-metadata">

**Author:** [@Blured\_Derulb](https://discuss.elastic.co/u/Blured_Derulb)\
**Replies:** 3\
**Last updated:** [December 2, 2015, 3:31pm UTC](https://discuss.elastic.co/t/transformation-dune-matchphrasequery-en-filter/36183 "2015-12-02T15:31:57Z")

</div>

Bonjour, Afin d'accélérer mes traitement je cherche à transformer le maximum de requêtes en filtres. Je me demande si il est possible de transformer ce matchPhraseQuery en filtre : QueryBuilder allTerms = matchPhr…

---

## [Request help with a grok filter pattern for date](https://discuss.elastic.co/t/request-help-with-a-grok-filter-pattern-for-date/60997)

<div class="topic-metadata">

**Author:** [@RaviSidhu](https://discuss.elastic.co/u/RaviSidhu)\
**Replies:** 2\
**Last updated:** [September 26, 2016, 10:55am UTC](https://discuss.elastic.co/t/request-help-with-a-grok-filter-pattern-for-date/60997 "2016-09-26T10:55:51Z")

</div>

Hi All, I have a csv log file with column names and a sample record as access\_date,clientIP,Col1, Col2, Col3, Col4\_uri\_path, col5\_referrer,col6\_response, col7\_hit\_count,col8\_referrer '13/Jan/2016:22:57:38','111.22…

---

## [Disk size and performance optimization for Elasticsearch cluster](https://discuss.elastic.co/t/disk-size-and-performance-optimization-for-elasticsearch-cluster/327071)

<div class="topic-metadata">

**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\
**Replies:** 1\
**Last updated:** [March 7, 2023, 9:20pm UTC](https://discuss.elastic.co/t/disk-size-and-performance-optimization-for-elasticsearch-cluster/327071 "2023-03-07T21:20:48Z")

</div>

Hi everyone, I'm currently running an Elasticsearch cluster with 6 nodes, and (for every node) the disk usage is around 5.5 TB out of a total disk size of 20 TB. I don't anticipate a significant increase in data storag…

---

## [Linux / OSX zip missing simlinks](https://discuss.elastic.co/t/linux-osx-zip-missing-simlinks/180411)

<div class="topic-metadata">

**Author:** [@sgwillett](https://discuss.elastic.co/u/sgwillett)\
**Replies:** 1\
**Last updated:** [May 9, 2019, 8:11pm UTC](https://discuss.elastic.co/t/linux-osx-zip-missing-simlinks/180411 "2019-05-09T20:11:43Z")

</div>

When running enterprise search the config doesn't seen right BIN\_DIR=$(dirname "$0") BIN\_DIR=$(realpath "$BIN\_DIR") export APP\_ROOT="$(cd "$(dirname "$BIN\_DIR")"; pwd)" CONFIG\_DIR="$APP\_ROOT/config" LIB\_DIR="$APP\_RO…

---

## [Re-mapping field type from date to text](https://discuss.elastic.co/t/re-mapping-field-type-from-date-to-text/136837)

<div class="topic-metadata">

**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\
**Replies:** 1\
**Last updated:** [June 21, 2018, 11:56am UTC](https://discuss.elastic.co/t/re-mapping-field-type-from-date-to-text/136837 "2018-06-21T11:56:43Z")

</div>

Hi, Due to the changes in our application logging, one of the JSON fieldslevel1.level2.level3.version has changed its format from date-like "2018-05-23" to URL+date format like "https://CDN.server.com/template#2018-06-2…

---

## [How to know if file beat finished processing a set of log file?](https://discuss.elastic.co/t/how-to-know-if-file-beat-finished-processing-a-set-of-log-file/70207)

<div class="topic-metadata">

**Author:** [@Rahul\_Pradhan](https://discuss.elastic.co/u/Rahul_Pradhan)\
**Replies:** 1\
**Last updated:** [January 3, 2017, 9:08am UTC](https://discuss.elastic.co/t/how-to-know-if-file-beat-finished-processing-a-set-of-log-file/70207 "2017-01-03T09:08:02Z")

</div>

How to know if file beat finished processing a set of log file? Is there a way to push this information to elastic search index?

---

## [cURL function for multiple Filter PHP](https://discuss.elastic.co/t/curl-function-for-multiple-filter-php/34627)

<div class="topic-metadata">

**Author:** [@Howzit](https://discuss.elastic.co/u/Howzit)\
**Replies:** 1\
**Last updated:** [November 15, 2015, 10:18pm UTC](https://discuss.elastic.co/t/curl-function-for-multiple-filter-php/34627 "2015-11-15T22:18:30Z")

</div>

I am using ElasticSearch in the Codeigniter Framework. My hosting Company do not allow Elasticsearch as service on my managed server. I am new to Elastic search and am testing it using a remote server at facetflow. I…

---

## [\[ANNOUNCE\] YCSB 0.2.0 Release](https://discuss.elastic.co/t/announce-ycsb-0-2-0-release/25106)

<div class="topic-metadata">

**Author:** [@busbey](https://discuss.elastic.co/u/busbey)\
**Replies:** 1\
**Last updated:** [July 8, 2015, 3:50am UTC](https://discuss.elastic.co/t/announce-ycsb-0-2-0-release/25106 "2015-07-08T03:50:51Z")

</div>

On behalf of the development community, I am pleased to announce the release of YCSB version 0.2.0. Highlights: Apache Cassandra 2.0 CQL support Apache HBase 1.0 support Apache Accumulo 1.6 support MongoDB - support…

---

## [Elasticsearch 2021 License](https://discuss.elastic.co/t/elasticsearch-2021-license/274133)

<div class="topic-metadata">

**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\
**Replies:** 6\
**Last updated:** [June 1, 2021, 5:13am UTC](https://discuss.elastic.co/t/elasticsearch-2021-license/274133 "2021-06-01T05:13:20Z")

</div>

Hi. I am asking a question because the elasticsearch license changed in 2021 is not well understood. I have the phrase below, People who take our products and sell them directly as services, like Amazon Elasticsearch …

---

## [Issue with auditbeat 7.6.2 Dashboards](https://discuss.elastic.co/t/issue-with-auditbeat-7-6-2-dashboards/231377)

<div class="topic-metadata">

**Author:** [@karthiknpy](https://discuss.elastic.co/u/karthiknpy)\
**Replies:** 6\
**Last updated:** [May 14, 2020, 12:56pm UTC](https://discuss.elastic.co/t/issue-with-auditbeat-7-6-2-dashboards/231377 "2020-05-14T12:56:15Z")

</div>

I have an elastic cloud instance, I'm trying to setup auditbeat for some threat hunting purposes I have installed auditbeat on a Linux server Enabled the below datasets hosts login package process socket user s…

---

## [Geo-point field not getting picked up during Visualization](https://discuss.elastic.co/t/geo-point-field-not-getting-picked-up-during-visualization/123794)

<div class="topic-metadata">

**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\
**Replies:** 6\
**Last updated:** [March 14, 2018, 11:01pm UTC](https://discuss.elastic.co/t/geo-point-field-not-getting-picked-up-during-visualization/123794 "2018-03-14T23:01:17Z")

</div>

Hello folks, New to to ELK stack. I am using latest ELK version on windows 8 with chrome browser. I have ingested UFO sightings documents into Elastic search. First I created the structure in ES and then using logstash…

---

## [Increase in size of refresh queue size, increasing the write thread pool and queue on multiple data nodes](https://discuss.elastic.co/t/increase-in-size-of-refresh-queue-size-increasing-the-write-thread-pool-and-queue-on-multiple-data-nodes/320696)

<div class="topic-metadata">

**Author:** [@Divye](https://discuss.elastic.co/u/Divye)\
**Replies:** 5\
**Last updated:** [December 19, 2022, 10:57am UTC](https://discuss.elastic.co/t/increase-in-size-of-refresh-queue-size-increasing-the-write-thread-pool-and-queue-on-multiple-data-nodes/320696 "2022-12-19T10:57:44Z")

</div>

I am having multiple data nodes handling a large logging application elasticsearch running on 7.15.0 version. We are experiencing a massive increase in refresh thread pool and I am still unaware on why the same is happen…

[Previous page](https://discuss.elastic.co/top.md?page=1541&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1543&per_page=50&period=all)
