# Top

**URL:** https://discuss.elastic.co/top.md?page=1557&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1558

---

## [Multiple clients for Kibana visualization](https://discuss.elastic.co/t/multiple-clients-for-kibana-visualization/202874)

<div class="topic-metadata">

**Author:** [@HubertBonisseur](https://discuss.elastic.co/u/HubertBonisseur)\
**Replies:** 3\
**Last updated:** [October 11, 2019, 11:10am UTC](https://discuss.elastic.co/t/multiple-clients-for-kibana-visualization/202874 "2019-10-11T11:10:21Z")

</div>

Hello, We've got a webpage in which you can search for data in our elastic database. According to the result of that search we edit a viz to show the results. Currently this is done by creating an index with the search…

---

## [Bypass shield password for Kibana shared Dashboard](https://discuss.elastic.co/t/bypass-shield-password-for-kibana-shared-dashboard/57794)

<div class="topic-metadata">

**Author:** [@sruthi](https://discuss.elastic.co/u/sruthi)\
**Replies:** 1\
**Last updated:** [August 12, 2016, 6:28am UTC](https://discuss.elastic.co/t/bypass-shield-password-for-kibana-shared-dashboard/57794 "2016-08-12T06:28:52Z")

</div>

How to bypass the shield password for the kibana dashboards that is embedded in another html? All the time it is prompted for the credentials. Would like to remove that and the user should be able to see our dashboard wi…

---

## [Dec 13th, 2023: \[FR\] 10 raisons pour demander elasticsearch-py 8.x au père Noël](https://discuss.elastic.co/t/dec-13th-2023-fr-10-raisons-pour-demander-elasticsearch-py-8-x-au-pere-noel/347293)

<div class="topic-metadata">

**Author:** [@Quentin\_Pradet](https://discuss.elastic.co/u/Quentin_Pradet)\
**Replies:** 0\
**Last updated:** [December 13, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-13th-2023-fr-10-raisons-pour-demander-elasticsearch-py-8-x-au-pere-noel/347293 "2023-12-13T08:00:29Z")

</div>

This post is available in english. En février 2022, lors de la sortie d'Elasticsearch 8.0, le client Python a également été mis à jour en version 8.0. Il s'agissait d'une réécriture partielle du client 7.x, accompagn…

---

## [Logbeat PanOS module not working](https://discuss.elastic.co/t/logbeat-panos-module-not-working/317915)

<div class="topic-metadata">

**Author:** [@ithamster](https://discuss.elastic.co/u/ithamster)\
**Replies:** 0\
**Last updated:** [November 1, 2022, 5:54pm UTC](https://discuss.elastic.co/t/logbeat-panos-module-not-working/317915 "2022-11-01T17:54:08Z")

</div>

I am new to Elasticsearch, Kibana and Filebeats. We have setup logbeat module for panos and panw.yml has following information: - module: panw panos: enabled: true var.syslog\_host: 0.0.0.0 var.syslog\_port: 514 We …

---

## [Using formula section on the vertical axis](https://discuss.elastic.co/t/using-formula-section-on-the-vertical-axis/305410)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 3\
**Last updated:** [May 24, 2022, 5:09am UTC](https://discuss.elastic.co/t/using-formula-section-on-the-vertical-axis/305410 "2022-05-24T05:09:30Z")

</div>

Hi, I want to show the count as a percentage. Currently it is displaying the count of files. How do I show the count as a percentage of the total number of files in the formula section of the vertical axis. attached scr…

---

## [Parsing nested json with logstash](https://discuss.elastic.co/t/parsing-nested-json-with-logstash/286287)

<div class="topic-metadata">

**Author:** [@diaztech](https://discuss.elastic.co/u/diaztech)\
**Replies:** 3\
**Last updated:** [October 10, 2021, 12:44am UTC](https://discuss.elastic.co/t/parsing-nested-json-with-logstash/286287 "2021-10-10T00:44:57Z")

</div>

I'm trying to import a collection from mongo with the following input input { mongodb { uri =\> "uripath" placeholder\_db\_dir =\> "../opt/logstash-mongodb/" placeholder\_db\_name =\> "logstash\_sqli…

---

## [How to get MappingMetadata per type using Rest High Level Client?](https://discuss.elastic.co/t/how-to-get-mappingmetadata-per-type-using-rest-high-level-client/257082)

<div class="topic-metadata">

**Author:** [@amishar](https://discuss.elastic.co/u/amishar)\
**Replies:** 3\
**Last updated:** [November 30, 2020, 3:31pm UTC](https://discuss.elastic.co/t/how-to-get-mappingmetadata-per-type-using-rest-high-level-client/257082 "2020-11-30T15:31:47Z")

</div>

We are migrating from Transport Client to High Level Rest Client. We have a piece of code that get indices, mappings and settings using GetIndex call. For transport client, we use this code to obtain the index informati…

---

## [Logstash-output-http in batch](https://discuss.elastic.co/t/logstash-output-http-in-batch/110098)

<div class="topic-metadata">

**Author:** [@bijay](https://discuss.elastic.co/u/bijay)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 8:44am UTC](https://discuss.elastic.co/t/logstash-output-http-in-batch/110098 "2017-12-05T08:44:38Z")

</div>

Hi, Is there any work around for the http-output in batched format? It seems the below githib repo is too old and not in working state. Tried with logstash version 2.4.0 and 5.6.4 Any kind of help will be appreciat…

---

## [X-Pack and CRL](https://discuss.elastic.co/t/x-pack-and-crl/82675)

<div class="topic-metadata">

**Author:** [@ricou](https://discuss.elastic.co/u/ricou)\
**Replies:** 3\
**Last updated:** [April 24, 2017, 12:07am UTC](https://discuss.elastic.co/t/x-pack-and-crl/82675 "2017-04-24T00:07:02Z")

</div>

Hello all, is it possible to configure a CRL with the X-Pack ? Or should I validate the certificates before the request is sent to elasticsearch ?

---

## [Restrict the Kibana controls using Shield](https://discuss.elastic.co/t/restrict-the-kibana-controls-using-shield/60220)

<div class="topic-metadata">

**Author:** [@balubollam](https://discuss.elastic.co/u/balubollam)\
**Replies:** 3\
**Last updated:** [September 21, 2016, 5:08pm UTC](https://discuss.elastic.co/t/restrict-the-kibana-controls-using-shield/60220 "2016-09-21T17:08:18Z")

</div>

Hi Every0ne, We have Configured Shield with kibana ...It is working... But is it possible my shield to restrict the Controls of kibana like creating the dashboard,creating visualizations by only particular user only…

---

## [Elastic 5 Alpha: Why do Sniffer and HostsSniffer have their own RestClient](https://discuss.elastic.co/t/elastic-5-alpha-why-do-sniffer-and-hostssniffer-have-their-own-restclient/54998)

<div class="topic-metadata">

**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\
**Replies:** 3\
**Last updated:** [July 26, 2016, 3:38pm UTC](https://discuss.elastic.co/t/elastic-5-alpha-why-do-sniffer-and-hostssniffer-have-their-own-restclient/54998 "2016-07-26T15:38:54Z")

</div>

When creating a sniffer for the new rest client you need to provider two instances of the RestClient. Should these be different instances with a different configuration? In the next line of code I create a sniffer using …

---

## [Searching while indexing](https://discuss.elastic.co/t/searching-while-indexing/15654)

<div class="topic-metadata">

**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\
**Replies:** 3\
**Last updated:** [February 11, 2014, 12:06am UTC](https://discuss.elastic.co/t/searching-while-indexing/15654 "2014-02-11T00:06:47Z")

</div>

I am unclear on how does searching work while indexing. lets say I already have a document indexed (version 1), and I updated the document, so I will index it again (version 2), what happens when the user is searchin…

---

## [Log files are not cleared from the registry when harvested Kubernetes container is restarted](https://discuss.elastic.co/t/log-files-are-not-cleared-from-the-registry-when-harvested-kubernetes-container-is-restarted/322827)

<div class="topic-metadata">

**Author:** [@melkamar](https://discuss.elastic.co/u/melkamar)\
**Replies:** 4\
**Last updated:** [January 26, 2023, 10:00am UTC](https://discuss.elastic.co/t/log-files-are-not-cleared-from-the-registry-when-harvested-kubernetes-container-is-restarted/322827 "2023-01-26T10:00:13Z")

</div>

Background: we are running Filebeat as a DaemonSet in a self-managed Microk8s Kubernetes cluster. I noticed extreme CPU usage and failures/delays with delivering logs after a while. More details in this Slack thread but …

---

## [Cpu utilization 100 percent - Elasticsearch](https://discuss.elastic.co/t/cpu-utilization-100-percent-elasticsearch/273291)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 4\
**Last updated:** [May 20, 2021, 7:23am UTC](https://discuss.elastic.co/t/cpu-utilization-100-percent-elasticsearch/273291 "2021-05-20T07:23:10Z")

</div>

My monitoring cluster is showing 99 percent Cpu usage during writes. Is it normal? If it's a 4 cpu node, does it mean that max is 400 percent?

---

## [Parentid on frontend end and backend agent is not associated](https://discuss.elastic.co/t/parentid-on-frontend-end-and-backend-agent-is-not-associated/222284)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 4\
**Last updated:** [March 7, 2020, 1:55am UTC](https://discuss.elastic.co/t/parentid-on-frontend-end-and-backend-agent-is-not-associated/222284 "2020-03-07T01:55:58Z")

</div>

Kibana version: 7.4 Elasticsearch version: 7.4 APM Server version: 7.6 APM Agent language and version: ASP.NET CORE and javascripts Browser version: chrome 79 I want to use a parent.id to query the link map from t…

---

## [Significance of the property ignore\_above\>256 in ElasticSearch](https://discuss.elastic.co/t/significance-of-the-property-ignore-above-256-in-elasticsearch/204487)

<div class="topic-metadata">

**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\
**Replies:** 4\
**Last updated:** [October 22, 2019, 2:28pm UTC](https://discuss.elastic.co/t/significance-of-the-property-ignore-above-256-in-elasticsearch/204487 "2019-10-22T14:28:15Z")

</div>

Hi, I have created index with default configuration . Ex:- 1 shard and ignore\_above\>256. But when i am pushing string which has more than 300 characters, Elaticsearch is indexing the data and also all 300 characters ar…

---

## [Out of memory happens in elasticsearch node when Kibana connected](https://discuss.elastic.co/t/out-of-memory-happens-in-elasticsearch-node-when-kibana-connected/190432)

<div class="topic-metadata">

**Author:** [@Hugo\_Ning](https://discuss.elastic.co/u/Hugo_Ning)\
**Replies:** 4\
**Last updated:** [July 19, 2019, 4:11pm UTC](https://discuss.elastic.co/t/out-of-memory-happens-in-elasticsearch-node-when-kibana-connected/190432 "2019-07-19T16:11:57Z")

</div>

Hi I'm using Kibana+ES. ES cluster contains 1 master and 2 clients. And OOM happens in ES node when I connect kibana to one of them. Heap dump shows that most of the memory is consumed by hundreds of byte(16.7M for eac…

---

## [Need some n00b help: how do I install and set up synonyms file?](https://discuss.elastic.co/t/need-some-n00b-help-how-do-i-install-and-set-up-synonyms-file/21785)

<div class="topic-metadata">

**Author:** [@james\_rubinstein](https://discuss.elastic.co/u/james_rubinstein)\
**Replies:** 4\
**Last updated:** [January 23, 2015, 11:02am UTC](https://discuss.elastic.co/t/need-some-n00b-help-how-do-i-install-and-set-up-synonyms-file/21785 "2015-01-23T11:02:57Z")

</div>

Hi all, I'm new to using ES, but have so far found the process quite intuitive. I've installed ES, set up an index, indexed a bunch of JSON documents, and I can search them. Hooray! However, I want to start using …

---

## [Point In Time creation failure after upgrade](https://discuss.elastic.co/t/point-in-time-creation-failure-after-upgrade/295172)

<div class="topic-metadata">

**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\
**Replies:** 2\
**Last updated:** [January 25, 2022, 12:50pm UTC](https://discuss.elastic.co/t/point-in-time-creation-failure-after-upgrade/295172 "2022-01-25T12:50:38Z")

</div>

Hello, I need some help in an issue, I recently upgraded my Elasticsearch on local setup ( i.e downloaded 7.16.2 ). Now when I try to run a Point in Time API to retrieve the PIT id, on the Elasticsearch logs it gives me …

---

## [Portainer - how can I create multi-app container?](https://discuss.elastic.co/t/portainer-how-can-i-create-multi-app-container/287335)

<div class="topic-metadata">

**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\
**Replies:** 2\
**Last updated:** [October 21, 2021, 4:37pm UTC](https://discuss.elastic.co/t/portainer-how-can-i-create-multi-app-container/287335 "2021-10-21T16:37:37Z")

</div>

I have installed Docker on my Synology NAS so that I may install and experiment with elastic enterprise search. Docker was installed via the Synology Package Centre, and I've also installed docker-compose and Portainer …

---

## [Migrating Beats to Fleet and Elastic Agent via Puppet](https://discuss.elastic.co/t/migrating-beats-to-fleet-and-elastic-agent-via-puppet/284732)

<div class="topic-metadata">

**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\
**Replies:** 2\
**Last updated:** [September 22, 2021, 12:42pm UTC](https://discuss.elastic.co/t/migrating-beats-to-fleet-and-elastic-agent-via-puppet/284732 "2021-09-22T12:42:49Z")

</div>

Hello We manage everything Elastic via Puppet. That means Beats, Kibana, etc. How do we migrate from Beats to Fleet, with Puppet? Is there even a way to Configure Fleet via Puppet yet? All I can find, are guides that…

---

## [Alias update](https://discuss.elastic.co/t/alias-update/204481)

<div class="topic-metadata">

**Author:** [@QwerFact](https://discuss.elastic.co/u/QwerFact)\
**Replies:** 2\
**Last updated:** [October 22, 2019, 8:45am UTC](https://discuss.elastic.co/t/alias-update/204481 "2019-10-22T08:45:20Z")

</div>

Dear community, I'm looking for a solution to update alias based on time indices. Especially to clear old indices. I have created an indice template: PUT \_template/data { "index\_patterns": \["logs-data-\*"\], "setting…

---

## [Compute Ratio using Visual Builder](https://discuss.elastic.co/t/compute-ratio-using-visual-builder/176150)

<div class="topic-metadata">

**Author:** [@bguerout](https://discuss.elastic.co/u/bguerout)\
**Replies:** 2\
**Last updated:** [May 17, 2019, 8:29am UTC](https://discuss.elastic.co/t/compute-ratio-using-visual-builder/176150 "2019-05-17T08:29:04Z")

</div>

Hello, I'm trying to compute a ratio with Visual Builder. According to this topic https://discuss.elastic.co/t/visual-builder-compute-and-display-a-ratio/128836, I've created a Filter Ratio with a moving average pipeli…

---

## [Elastic Stack Lab 5](https://discuss.elastic.co/t/elastic-stack-lab-5/132377)

<div class="topic-metadata">

**Author:** [@tidww01](https://discuss.elastic.co/u/tidww01)\
**Replies:** 2\
**Last updated:** [May 17, 2018, 8:08pm UTC](https://discuss.elastic.co/t/elastic-stack-lab-5/132377 "2018-05-17T20:08:57Z")

</div>

One of the initial tasks is to create a Pie Chart on the response field. But the response field cannot be aggregated. So normally I'd use the response.raw field, but it seems response.keyword replaced that. But I'm ge…

---

## [Kibana 4.1. accidentaly delete index](https://discuss.elastic.co/t/kibana-4-1-accidentaly-delete-index/63493)

<div class="topic-metadata">

**Author:** [@kinomakino](https://discuss.elastic.co/u/kinomakino)\
**Replies:** 2\
**Last updated:** [October 20, 2016, 7:05pm UTC](https://discuss.elastic.co/t/kibana-4-1-accidentaly-delete-index/63493 "2016-10-20T19:05:37Z")

</div>

First, thanks for everything. I have an installation of ES + Kibana 4.1.0 Accidentally, we have deleted ALL INDEX. Now "Give me a moment here I'm loading a whole bunch of code. Do not worry Kibana is loading.., All…

---

## [Retry handler JBOSS server on TCP port remote hos](https://discuss.elastic.co/t/retry-handler-jboss-server-on-tcp-port-remote-hos/57312)

<div class="topic-metadata">

**Author:** [@fdlprod](https://discuss.elastic.co/u/fdlprod)\
**Replies:** 2\
**Last updated:** [August 9, 2016, 9:35am UTC](https://discuss.elastic.co/t/retry-handler-jboss-server-on-tcp-port-remote-hos/57312 "2016-08-09T09:35:09Z")

</div>

HI, i have one big issue, indeed, i have one ELK on 1 standalone host (A).... Then i have 2 jboss (wildfly) cluster different hosts (B,C) and for each one one logstash handler which send on remote host logstash liste…

---

## [Packetbeat: monitoring elasticsearch](https://discuss.elastic.co/t/packetbeat-monitoring-elasticsearch/43521)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 2\
**Last updated:** [March 8, 2016, 3:50pm UTC](https://discuss.elastic.co/t/packetbeat-monitoring-elasticsearch/43521 "2016-03-08T15:50:15Z")

</div>

Hi, Can I ask, is packetbeat able to monitor inter-node communications in an elasticsearch cluster? Regards, David

---

## [Installing elasticsearch kibana and logsstash on a linux machine](https://discuss.elastic.co/t/installing-elasticsearch-kibana-and-logsstash-on-a-linux-machine/42932)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 2\
**Last updated:** [February 29, 2016, 1:08am UTC](https://discuss.elastic.co/t/installing-elasticsearch-kibana-and-logsstash-on-a-linux-machine/42932 "2016-02-29T01:08:46Z")

</div>

Hi, Can you guys give me some helpful resources on Installing elasticsearch kibana and logsstash on a linux machine? I can't find anything online. Thanks!

---

## [Beats 1.0.0-beta4 release with first version of Filebeat included](https://discuss.elastic.co/t/beats-1-0-0-beta4-release-with-first-version-of-filebeat-included/32792)

<div class="topic-metadata">

**Author:** [@tudor](https://discuss.elastic.co/u/tudor)\
**Replies:** 2\
**Last updated:** [October 28, 2015, 5:49pm UTC](https://discuss.elastic.co/t/beats-1-0-0-beta4-release-with-first-version-of-filebeat-included/32792 "2015-10-28T17:49:38Z")

</div>

Today we've released Beats 1.0.0-beta4. It includes improvements for Packetbeat and Topbeat and something new: Filebeat, the successor of the Logstash-Forwarder. We have a blog post going into detail about Filebeat. Th…

---

## [Renaming a nodes in a cluster](https://discuss.elastic.co/t/renaming-a-nodes-in-a-cluster/22050)

<div class="topic-metadata">

**Author:** [@Crista\_Shawler](https://discuss.elastic.co/u/Crista_Shawler)\
**Replies:** 2\
**Last updated:** [February 9, 2015, 8:36pm UTC](https://discuss.elastic.co/t/renaming-a-nodes-in-a-cluster/22050 "2015-02-09T20:36:53Z")

</div>

I would like to rename a couple of the nodes in my cluster. Are there any issues with doing this? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscrib…

---

## [Questions relating to elastic search](https://discuss.elastic.co/t/questions-relating-to-elastic-search/10667)

<div class="topic-metadata">

**Author:** [@Karthik\_Shyamsunder](https://discuss.elastic.co/u/Karthik_Shyamsunder)\
**Replies:** 2\
**Last updated:** [February 8, 2013, 4:32pm UTC](https://discuss.elastic.co/t/questions-relating-to-elastic-search/10667 "2013-02-08T16:32:22Z")

</div>

1) \*Can I use elastic search as a data store? \* I keep hearing I can. I definitely understand the classic issues like lack of transactions etc compared to database. But that is not of a concern for me. I would pre…

---

## [Profile file cannot be null Logstash error](https://discuss.elastic.co/t/profile-file-cannot-be-null-logstash-error/348224)

<div class="topic-metadata">

**Author:** [@laale1](https://discuss.elastic.co/u/laale1)\
**Replies:** 6\
**Last updated:** [November 30, 2023, 10:50am UTC](https://discuss.elastic.co/t/profile-file-cannot-be-null-logstash-error/348224 "2023-11-30T10:50:20Z")

</div>

Hello Community I have an issue in Logstash kinesis input plugin, when I run /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/kinesis.conf I can see logs are coming from AWS and ingested into my Elasticsear…

---

## [Logs including emojis](https://discuss.elastic.co/t/logs-including-emojis/258946)

<div class="topic-metadata">

**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\
**Replies:** 6\
**Last updated:** [December 20, 2020, 9:29am UTC](https://discuss.elastic.co/t/logs-including-emojis/258946 "2020-12-20T09:29:07Z")

</div>

Hello everyone! is there a way to parse this log with emojis? Could it be shown in kibana or logstash output? I do not have a clue how to parse the emojis in logstash pipeline. "emoji\_code":"🌸" Can someone please help …

---

## [Issues with geoip data logstash and filebeat using iis logs](https://discuss.elastic.co/t/issues-with-geoip-data-logstash-and-filebeat-using-iis-logs/236933)

<div class="topic-metadata">

**Author:** [@genehunter29009](https://discuss.elastic.co/u/genehunter29009)\
**Replies:** 6\
**Last updated:** [June 16, 2020, 11:57am UTC](https://discuss.elastic.co/t/issues-with-geoip-data-logstash-and-filebeat-using-iis-logs/236933 "2020-06-16T11:57:56Z")

</div>

Having a hard time getting geoip to work. I have the latest current verion of filebeat and logstash. filebeat 7.7.7 template is loaded. one strange thing also I get like 6 ip addresses when I use geoip but nothing els…

---

## [Essql LIMIT selecting at random](https://discuss.elastic.co/t/essql-limit-selecting-at-random/202316)

<div class="topic-metadata">

**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\
**Replies:** 6\
**Last updated:** [October 21, 2019, 1:13pm UTC](https://discuss.elastic.co/t/essql-limit-selecting-at-random/202316 "2019-10-21T13:13:06Z")

</div>

I am making a horisontal bar chart, and I only need the top 10 results of my data set. My code is as follows: SELECT role\_, COUNT(role\_) as role\_count FROM "\*canvas" GROUP BY role\_ ORDER BY role\_count DESC If I previ…

---

## [Нужна помощь с http body в heartbeat/metricbeat](https://discuss.elastic.co/t/http-body-heartbeat-metricbeat/154684)

<div class="topic-metadata">

**Author:** [@Luq](https://discuss.elastic.co/u/Luq)\
**Replies:** 6\
**Last updated:** [November 1, 2018, 2:03pm UTC](https://discuss.elastic.co/t/http-body-heartbeat-metricbeat/154684 "2018-11-01T14:03:23Z")

</div>

У меня есть несколько сайтов, которые я хочу мониторить. Просто код 200 мне не подходит. Я бы хотел получить слово/линию из сайта. Извиняюсь за наивность вопроса и спасибо за помощь!

---

## [Poor Query Performance Results](https://discuss.elastic.co/t/poor-query-performance-results/129954)

<div class="topic-metadata">

**Author:** [@groot](https://discuss.elastic.co/u/groot)\
**Replies:** 6\
**Last updated:** [May 1, 2018, 11:40am UTC](https://discuss.elastic.co/t/poor-query-performance-results/129954 "2018-05-01T11:40:20Z")

</div>

Hi , I need advice , I have build in my company a new ELK environment with 5 nodes (vm machines) which one is Coordinator node with kibana And the other nodes are data nodes with 6 shards per index . Between our coord…

---

## [Elastic Agent Heartbeat Folder filled with Core Dumps](https://discuss.elastic.co/t/elastic-agent-heartbeat-folder-filled-with-core-dumps/301262)

<div class="topic-metadata">

**Author:** [@RichiCoder](https://discuss.elastic.co/u/RichiCoder)\
**Replies:** 7\
**Last updated:** [April 1, 2022, 2:50am UTC](https://discuss.elastic.co/t/elastic-agent-heartbeat-folder-filled-with-core-dumps/301262 "2022-04-01T02:50:57Z")

</div>

Howdy! We're using the Elastic Agent's synthetic agent running in docker to monitor some web properties. There's no visible issues or errors, but after some time the agent "dies" for lack of a better term. After some inv…

---

## [Filebeat on windows not reading log file](https://discuss.elastic.co/t/filebeat-on-windows-not-reading-log-file/204663)

<div class="topic-metadata">

**Author:** [@computer\_engineer](https://discuss.elastic.co/u/computer_engineer)\
**Replies:** 1\
**Last updated:** [October 25, 2019, 11:38am UTC](https://discuss.elastic.co/t/filebeat-on-windows-not-reading-log-file/204663 "2019-10-25T11:38:31Z")

</div>

I am attempting to have filebeat read json packets from log files in a specific directory and send to elasticsearch directly, without using logstash. I got the filebeat service to start up but keeping the following messa…

---

## [Facing Error in Painless script in Kibana Version 7.3, But same script is working in 6.5.3](https://discuss.elastic.co/t/facing-error-in-painless-script-in-kibana-version-7-3-but-same-script-is-working-in-6-5-3/197345)

<div class="topic-metadata">

**Author:** [@vinay.rao](https://discuss.elastic.co/u/vinay.rao)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 4:17pm UTC](https://discuss.elastic.co/t/facing-error-in-painless-script-in-kibana-version-7-3-but-same-script-is-working-in-6-5-3/197345 "2019-08-29T16:17:11Z")

</div>

Dear Team, Am facing error in Painless script in version 7.3. Same script is working fine in the version 6.5.3. Please help to identify the issue. Error message : Script is invalid. View script preview for details(Atta…

---

## [Set Default Selection for Control visualization](https://discuss.elastic.co/t/set-default-selection-for-control-visualization/184418)

<div class="topic-metadata">

**Author:** [@nareshnakka](https://discuss.elastic.co/u/nareshnakka)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 2:21pm UTC](https://discuss.elastic.co/t/set-default-selection-for-control-visualization/184418 "2019-06-27T14:21:26Z")

</div>

Guys, Help me to know, how to set default value selected for Controls visualization filter on a dashboard Please find below screen shot.. By default when I open dashboard, it is showing values for all the time. But I w…

---

## [Rolling over the index automatically](https://discuss.elastic.co/t/rolling-over-the-index-automatically/165019)

<div class="topic-metadata">

**Author:** [@akhilsai1499](https://discuss.elastic.co/u/akhilsai1499)\
**Replies:** 7\
**Last updated:** [January 24, 2019, 11:15am UTC](https://discuss.elastic.co/t/rolling-over-the-index-automatically/165019 "2019-01-24T11:15:18Z")

</div>

Rolling over the index automatically when the conditions wont satisfy. As of now i am explicitly using the conditions whenever i want to insert a document. Is there any way where we can automatically roll over the inde…

---

## [Speed up reindex](https://discuss.elastic.co/t/speed-up-reindex/158252)

<div class="topic-metadata">

**Author:** [@nayun\_oh](https://discuss.elastic.co/u/nayun_oh)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 11:32pm UTC](https://discuss.elastic.co/t/speed-up-reindex/158252 "2018-11-26T23:32:59Z")

</div>

I need to reindex a large index as a backup. But It takes a lot of time. one minute per 2 giga bytes. I have set indices.index buffer size to 70% in elasticsearch.yml and refresh interval to -1. Can you give me some adv…

---

## [NEST: Why all my text fields in the index have keyword type?](https://discuss.elastic.co/t/nest-why-all-my-text-fields-in-the-index-have-keyword-type/159084)

<div class="topic-metadata">

**Author:** [@Neu](https://discuss.elastic.co/u/Neu)\
**Replies:** 1\
**Last updated:** [December 3, 2018, 4:39am UTC](https://discuss.elastic.co/t/nest-why-all-my-text-fields-in-the-index-have-keyword-type/159084 "2018-12-03T04:39:28Z")

</div>

I pushing new documents using NEST in pair with class with attributes. Here is how I define a class: public class PatientNestModel { \[Text\] public string FirstName { get; set; } \[Text\] …

---

## [What is logstash, Kibana in simple term?](https://discuss.elastic.co/t/what-is-logstash-kibana-in-simple-term/154191)

<div class="topic-metadata">

**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\
**Replies:** 7\
**Last updated:** [October 29, 2018, 8:10am UTC](https://discuss.elastic.co/t/what-is-logstash-kibana-in-simple-term/154191 "2018-10-29T08:10:08Z")

</div>

I am learning to use logstash to connect ES with MySQL, JSON file. I am a bit confused. what Logstash really is. some sort of connector or something else. PS: I know its very immature question, but I want to learn the d…

---

## [Using Painless Script with Lucene Query in ElasticSearch](https://discuss.elastic.co/t/using-painless-script-with-lucene-query-in-elasticsearch/150571)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 1\
**Last updated:** [October 3, 2018, 11:39pm UTC](https://discuss.elastic.co/t/using-painless-script-with-lucene-query-in-elasticsearch/150571 "2018-10-03T23:39:41Z")

</div>

I needed to create a function in Painless to perform multiple field checks of a document and return if a value is in a range of 0 to 2. This Painless script uses parameters with names, such as 'current\_timestamp', which …

---

## [How to get document ids alongs with aggregation result](https://discuss.elastic.co/t/how-to-get-document-ids-alongs-with-aggregation-result/141450)

<div class="topic-metadata">

**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\
**Replies:** 1\
**Last updated:** [July 24, 2018, 10:08pm UTC](https://discuss.elastic.co/t/how-to-get-document-ids-alongs-with-aggregation-result/141450 "2018-07-24T22:08:21Z")

</div>

I perfom term aggregation on elasticsearch documents that gives me the keyword and its doc count, but i also want all the id of those document that keyword belongs to. How to get that. For example Key: "ice cream", …

---

## [Timezone issue in Timelion](https://discuss.elastic.co/t/timezone-issue-in-timelion/121217)

<div class="topic-metadata">

**Author:** [@gustavomahlow](https://discuss.elastic.co/u/gustavomahlow)\
**Replies:** 1\
**Last updated:** [February 23, 2018, 3:35pm UTC](https://discuss.elastic.co/t/timezone-issue-in-timelion/121217 "2018-02-23T15:35:32Z")

</div>

When using the "Today So Far" or "Today" interval picker in timelion, the day starts at 21:00 and not 00:00 as it is in the other panels of kibana created in visualize. The 21:00 comes from my time zone (-03:00 'America/…

---

## [File template overriding not working](https://discuss.elastic.co/t/file-template-overriding-not-working/66957)

<div class="topic-metadata">

**Author:** [@kozdincer](https://discuss.elastic.co/u/kozdincer)\
**Replies:** 1\
**Last updated:** [November 23, 2016, 9:15am UTC](https://discuss.elastic.co/t/file-template-overriding-not-working/66957 "2016-11-23T09:15:21Z")

</div>

Hi, I 've change default filebeat-template to make "message" property type as "object". But not shown as "object" in index. Shown as default "string". Log says; "2016/11/21 15:43:30.532659 output.go:164: INFO Loading…

---

## [NGram Partial Match & limiting nGram results in multiple field query](https://discuss.elastic.co/t/ngram-partial-match-limiting-ngram-results-in-multiple-field-query/62526)

<div class="topic-metadata">

**Author:** [@jordancardwell](https://discuss.elastic.co/u/jordancardwell)\
**Replies:** 1\
**Last updated:** [November 14, 2016, 8:06pm UTC](https://discuss.elastic.co/t/ngram-partial-match-limiting-ngram-results-in-multiple-field-query/62526 "2016-11-14T20:06:58Z")

</div>

Problem: I've implemented a partial search on a name field by indexing the tokenized name (name field) as well as a trigram analyzed name (ngram field). I've boosted the name field to have exact token matches bubble …

[Previous page](https://discuss.elastic.co/top.md?page=1556&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1558&per_page=50&period=all)
