# Top **URL:** https://discuss.elastic.co/top.md?page=1559&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1560 --- ## [Data modeling: nested vs parent/child vs two indices](https://discuss.elastic.co/t/data-modeling-nested-vs-parent-child-vs-two-indices/60792)
**Author:** [@dangnhdev](https://discuss.elastic.co/u/dangnhdev)\ **Replies:** 1\ **Last updated:** [September 19, 2016, 8:02am UTC](https://discuss.elastic.co/t/data-modeling-nested-vs-parent-child-vs-two-indices/60792 "2016-09-19T08:02:21Z")
Hi all, I'm facing a problem with "order - product" data Denormalized data may look like: A product: { "\_id" : productId, "name" : name, "price" : price, "desc" : description } An order: { "\_… --- ## [Import data from Teradata using logstash jdbc plugin](https://discuss.elastic.co/t/import-data-from-teradata-using-logstash-jdbc-plugin/39881)
**Author:** [@Himanshu\_Jain1](https://discuss.elastic.co/u/Himanshu_Jain1)\ **Replies:** 1\ **Last updated:** [April 28, 2016, 12:53am UTC](https://discuss.elastic.co/t/import-data-from-teradata-using-logstash-jdbc-plugin/39881 "2016-04-28T00:53:55Z")
Hi, Could some body please tell me how to use logstash jdbc plugin for teradata? The problem with teradat is it requires two java\_driver\_files to be listed. How to specify two files terajdbc4.jar and tdgssconfig.jar --- ## [Inatalling Logstash codes in offline mode](https://discuss.elastic.co/t/inatalling-logstash-codes-in-offline-mode/46043)
**Author:** [@debarun](https://discuss.elastic.co/u/debarun)\ **Replies:** 1\ **Last updated:** [April 3, 2016, 2:12am UTC](https://discuss.elastic.co/t/inatalling-logstash-codes-in-offline-mode/46043 "2016-04-03T02:12:50Z")
Hi, I am trying to install the logstash-codec-nmap, but my server has no internet access. But when i download to a different server ans then try to install locally: bin/plugin install /root/logstash-codec-nmap Vali… --- ## [Can i filter/query by \_version?](https://discuss.elastic.co/t/can-i-filter-query-by--version/14419)
**Author:** [@dosmoney](https://discuss.elastic.co/u/dosmoney)\ **Replies:** 1\ **Last updated:** [November 14, 2013, 8:23pm UTC](https://discuss.elastic.co/t/can-i-filter-query-by--version/14419 "2013-11-14T20:23:21Z")
I'm indexing a lot of records of type "customer" and manually setting "\_id" from an internal data source. Our internal ID should be unique but during testing I see one record having "\_version" : 2. I'm trying to … --- ## [Matching ip address](https://discuss.elastic.co/t/matching-ip-address/325992)
**Author:** [@Lalii](https://discuss.elastic.co/u/Lalii)\ **Replies:** 4\ **Last updated:** [February 20, 2023, 4:55pm UTC](https://discuss.elastic.co/t/matching-ip-address/325992 "2023-02-20T16:55:01Z")
Hello everyone, I'm trying to do a condition on IP regex. Trying to match every IPs if \[destination.XXX\] =~ /^\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/ { mutate { ... } } I tried the solution from that post but doesnt wor… --- ## [Span breakdown metrics and service name auto-discovery (Time spent by span type is empty)](https://discuss.elastic.co/t/span-breakdown-metrics-and-service-name-auto-discovery-time-spent-by-span-type-is-empty/288498)
**Author:** [@Matthias\_W](https://discuss.elastic.co/u/Matthias_W)\ **Replies:** 4\ **Last updated:** [November 5, 2021, 3:56pm UTC](https://discuss.elastic.co/t/span-breakdown-metrics-and-service-name-auto-discovery-time-spent-by-span-type-is-empty/288498 "2021-11-05T15:56:58Z")
Hi, just wanted to confirm if this is expected behavior: If I use the Elastic APM Agent in a servlet environment (e.g. JAX-RS running on a Wildfly) and don't set the service\_name, then the span breakdown metrics won't … --- ## [Using a layer as a filter in a map](https://discuss.elastic.co/t/using-a-layer-as-a-filter-in-a-map/248588)
**Author:** [@Vester](https://discuss.elastic.co/u/Vester)\ **Replies:** 4\ **Last updated:** [September 15, 2020, 2:15pm UTC](https://discuss.elastic.co/t/using-a-layer-as-a-filter-in-a-map/248588 "2020-09-15T14:15:48Z")
Hi, Is it possible to use a layer imported from a GeoJSON file as a filter ? Example, in this picture I would like to use the red area layer as a filter, only points inside the area are shown ? How can I do it ? tha… --- ## [Master node на виртутальной машине](https://discuss.elastic.co/t/master-node/213195)
**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\ **Replies:** 4\ **Last updated:** [December 31, 2019, 7:18am UTC](https://discuss.elastic.co/t/master-node/213195 "2019-12-31T07:18:32Z")
Доброго времени суток! Собираюсь поднять один сервер ES с приемлемым для небольших объёмов данных (1-2Tb) железом. Основные задачи, которые планируются - это полнотекстовый поиск и агрегации. Тк сервер один, то он и m… --- ## [All output fail if one of tcp outputs fails](https://discuss.elastic.co/t/all-output-fail-if-one-of-tcp-outputs-fails/193703)
**Author:** [@dickens88](https://discuss.elastic.co/u/dickens88)\ **Replies:** 4\ **Last updated:** [August 5, 2019, 3:05am UTC](https://discuss.elastic.co/t/all-output-fail-if-one-of-tcp-outputs-fails/193703 "2019-08-05T03:05:33Z")
Guys, my logstash configuration has multiply outputs, like this: input{ syslog { port =\> 514 } } output{ tcp { host =\> "192.168.1.1" port =\> 1517 codec =\> line { format =\> "%{mes… --- ## [Elasticsearch 6.2 bulk indexations ends in Bad Gateway](https://discuss.elastic.co/t/elasticsearch-6-2-bulk-indexations-ends-in-bad-gateway/173774)
**Author:** [@SmashingQuasar](https://discuss.elastic.co/u/SmashingQuasar)\ **Replies:** 4\ **Last updated:** [March 28, 2019, 9:18am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-bulk-indexations-ends-in-bad-gateway/173774 "2019-03-28T09:18:50Z")
Hey! So I'm currently running a 6.2 instance of Elasticsearch on a docker container using the official image. (Our CTO did the configuration so I don't have all the info) I'm trying to bulk index documents but it alway… --- ## [Multiline problem with 2 "first" lines](https://discuss.elastic.co/t/multiline-problem-with-2-first-lines/95770)
**Author:** [@Redempter](https://discuss.elastic.co/u/Redempter)\ **Replies:** 4\ **Last updated:** [August 4, 2017, 3:10pm UTC](https://discuss.elastic.co/t/multiline-problem-with-2-first-lines/95770 "2017-08-04T15:10:20Z")
I just implemented a new ELK server to centralise all our servers’ logs so I’m still pretty new to the configuration and I’m having quite a puzzling problem. I am trying to get multilines log to be caught as one event a… --- ## [Read/Match Data](https://discuss.elastic.co/t/read-match-data/56962)
**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Replies:** 4\ **Last updated:** [August 2, 2016, 4:51pm UTC](https://discuss.elastic.co/t/read-match-data/56962 "2016-08-02T16:51:21Z")
Hi Elastic, I want to match IP address from below type of data with field, i tried Translate filter but it is not supporting for .txt format, Kindly help me to fix this. I am downloading this from URL, using http\_po… --- ## [Can't import all information of Models with Rails 4.2.4](https://discuss.elastic.co/t/cant-import-all-information-of-models-with-rails-4-2-4/32018)
**Author:** [@TomHoenderdos](https://discuss.elastic.co/u/TomHoenderdos)\ **Replies:** 0\ **Last updated:** [October 12, 2015, 3:17pm UTC](https://discuss.elastic.co/t/cant-import-all-information-of-models-with-rails-4-2-4/32018 "2015-10-12T15:17:31Z")
My gem versions are: rails (4.2.4) elasticsearch (1.0.13) elasticsearch-api (1.0.13) elasticsearch-model (0.1.8) elasticsearch-persistence (0.1.8) elasticsearch-rails (0.1.8) In my Idea model: class Idea \< Active… --- ## [Problems indexing events into Elasticsearch](https://discuss.elastic.co/t/problems-indexing-events-into-elasticsearch/359148)
**Author:** [@Compte\_Personnel](https://discuss.elastic.co/u/Compte_Personnel)\ **Replies:** 6\ **Last updated:** [May 12, 2024, 4:16am UTC](https://discuss.elastic.co/t/problems-indexing-events-into-elasticsearch/359148 "2024-05-12T04:16:53Z")
Hello everyone, It seems there are issues with indexing events into Elasticsearch ● logstash.service - logstash Loaded: loaded (/lib/systemd/system/logstash.service; enabled; vendor preset: enabled) Active: a… --- ## [Kibana development server up and running, but not picking up changes](https://discuss.elastic.co/t/kibana-development-server-up-and-running-but-not-picking-up-changes/323253)
**Author:** [@mpjjonker](https://discuss.elastic.co/u/mpjjonker)\ **Replies:** 6\ **Last updated:** [January 16, 2023, 2:17pm UTC](https://discuss.elastic.co/t/kibana-development-server-up-and-running-but-not-picking-up-changes/323253 "2023-01-16T14:17:20Z")
Hi, I have followed the instructions to setup a development environment for plugin development. I also do see the first attempt (created by the create-plugin-script), but when I make a change to any of the files (publi… --- ## [Suggestion on summarizing running total value](https://discuss.elastic.co/t/suggestion-on-summarizing-running-total-value/241339)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 6\ **Last updated:** [July 16, 2020, 7:54am UTC](https://discuss.elastic.co/t/suggestion-on-summarizing-running-total-value/241339 "2020-07-16T07:54:54Z")
ES version 7.6 I am finding difficult to do summarize or transforms on running total values like network traffic metrics. For example i want to get the max bucket on inbound bytes/s. But prior to that, looks like i hav… --- ## [How to merge the two query syntax](https://discuss.elastic.co/t/how-to-merge-the-two-query-syntax/113540)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 6\ **Last updated:** [December 29, 2017, 10:37am UTC](https://discuss.elastic.co/t/how-to-merge-the-two-query-syntax/113540 "2017-12-29T10:37:49Z")
I have two syntax to query, and I want to merge them together, so I need only query one time . How can I do it? this is my restful api: GET \_search { "size" : 0, "query": { "bool": { "must": \[ { "match" … --- ## [How RUM and APM works](https://discuss.elastic.co/t/how-rum-and-apm-works/373846)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 7\ **Last updated:** [February 4, 2025, 10:36pm UTC](https://discuss.elastic.co/t/how-rum-and-apm-works/373846 "2025-02-04T22:36:47Z")
Hi, I need your help to understand how RUM works. I've seen it linked to APM, but I know very little about APM. Can someone describe how RUM works and how to use it? Thank you very much. --- ## [Parse a json file that includes an xml](https://discuss.elastic.co/t/parse-a-json-file-that-includes-an-xml/317312)
**Author:** [@Alexandros](https://discuss.elastic.co/u/Alexandros)\ **Replies:** 7\ **Last updated:** [November 18, 2022, 8:40am UTC](https://discuss.elastic.co/t/parse-a-json-file-that-includes-an-xml/317312 "2022-11-18T08:40:06Z")
Hello all, I want to send the following json document to elasticsearch through logstash. "short\_message": "\ \ **Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 1\ **Last updated:** [August 16, 2022, 6:39pm UTC](https://discuss.elastic.co/t/elastic-agent-windows-doesnt-work/312206 "2022-08-16T18:39:04Z") I'm trying to use the elastic Agent on windows 10 and i get this error: fail to execute request to fleet-server: dial tcp 192.168.100.60:8220: connectex: A connection attempt failed because the connected party did not p… --- ## [Org.elsticsearch -- trying to run scripted upserts, written in painless language, from Spark -- {type=null\_pointer\_exception, reason=null}](https://discuss.elastic.co/t/org-elsticsearch-trying-to-run-scripted-upserts-written-in-painless-language-from-spark-type-null-pointer-exception-reason-null/238968)
**Author:** [@Eman\_Mughal](https://discuss.elastic.co/u/Eman_Mughal)\ **Replies:** 1\ **Last updated:** [June 28, 2020, 7:34pm UTC](https://discuss.elastic.co/t/org-elsticsearch-trying-to-run-scripted-upserts-written-in-painless-language-from-spark-type-null-pointer-exception-reason-null/238968 "2020-06-28T19:34:59Z")
Hi There, I am trying to run the following code df.write .format("org.elasticsearch.spark.sql") .option("es.nodes.wan.only","true") // .option("es.nodes.discovery", "false") // .option("es.nodes.client.only", "fa… --- ## [Store.size decreased drastically after reindexing data from 5.6 ES cluster to 7.6 ES cluster](https://discuss.elastic.co/t/store-size-decreased-drastically-after-reindexing-data-from-5-6-es-cluster-to-7-6-es-cluster/223400)
**Author:** [@Bharath\_Italapur](https://discuss.elastic.co/u/Bharath_Italapur)\ **Replies:** 7\ **Last updated:** [March 14, 2020, 9:34am UTC](https://discuss.elastic.co/t/store-size-decreased-drastically-after-reindexing-data-from-5-6-es-cluster-to-7-6-es-cluster/223400 "2020-03-14T09:34:27Z")
Hi, Thank you in advance, I reindexed 5 Gb data from 5.6 ES cluster to 7.6 ES cluster. The data size decreased to 2.7 Gb, But the document count is the same. Can I know why this is happening? The only difference betwe… --- ## [Kibana on spanish](https://discuss.elastic.co/t/kibana-on-spanish/168868)
**Author:** [@He\_Pamela](https://discuss.elastic.co/u/He_Pamela)\ **Replies:** 1\ **Last updated:** [February 18, 2019, 4:09pm UTC](https://discuss.elastic.co/t/kibana-on-spanish/168868 "2019-02-18T16:09:41Z")
Hi, Is there a way to translate manually the English words in Kibana like Dashboard, discover , save, exit.... I would like to translate it to Spanish . thanks. --- ## [Logstash - aggregation\_fields in elasticsearch filter plugin](https://discuss.elastic.co/t/logstash-aggregation-fields-in-elasticsearch-filter-plugin/164672)
**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\ **Replies:** 1\ **Last updated:** [January 17, 2019, 6:14pm UTC](https://discuss.elastic.co/t/logstash-aggregation-fields-in-elasticsearch-filter-plugin/164672 "2019-01-17T18:14:06Z")
Hello, I am trying to use elasticsearch filter plugin in logstash. My logstash file: filter { elasticsearch { hosts =\> "XXX" index =\> "logs\_0" query =\> "query.json" aggregation\_fields =\> { "value\_avg" =\> "AVG"} … --- ## [Multiple non time series](https://discuss.elastic.co/t/multiple-non-time-series/96498)
**Author:** [@Nithin\_Devang](https://discuss.elastic.co/u/Nithin_Devang)\ **Replies:** 1\ **Last updated:** [August 9, 2017, 11:48pm UTC](https://discuss.elastic.co/t/multiple-non-time-series/96498 "2017-08-09T23:48:52Z")
I have to plot x and y axis which is not time-series data and I am able to do this using min and max. But I want to plot multiple line charts in same graphs, like x1 vs y1, x2 vs y2 and x3 vs y3. How to do this? --- ## [Unable to repository for snapshot](https://discuss.elastic.co/t/unable-to-repository-for-snapshot/81738)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 7\ **Last updated:** [April 11, 2017, 1:01am UTC](https://discuss.elastic.co/t/unable-to-repository-for-snapshot/81738 "2017-04-11T01:01:00Z")
I am using Elasticsearch 2.3.4 PUT http://:9200/\_snapshot/my-repo-1 { "type": "fs", "settings": { "location": "/home/mystorage/mt", "compress": true } } "reason": "\[my-repo-1\] location \[/h… --- ## [Search performance multiple fields vs custom all field](https://discuss.elastic.co/t/search-performance-multiple-fields-vs-custom-all-field/64089)
**Author:** [@Meenakshi.Jindal](https://discuss.elastic.co/u/Meenakshi.Jindal)\ **Replies:** 1\ **Last updated:** [October 31, 2016, 2:41pm UTC](https://discuss.elastic.co/t/search-performance-multiple-fields-vs-custom-all-field/64089 "2016-10-31T14:41:38Z")
We have the requirement to enable the default search on a set of data fields? Which is better approach? "multi\_match": { "query": "Quick brown fox", "fields": \[ "f1", "f2","f3","f4","f5"... \] } … --- ## [Why ES anandon async replication?](https://discuss.elastic.co/t/why-es-anandon-async-replication/52959)
**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Replies:** 1\ **Last updated:** [June 16, 2016, 8:33am UTC](https://discuss.elastic.co/t/why-es-anandon-async-replication/52959 "2016-06-16T08:33:06Z")
can anyone share some info for further read? --- ## [Mixed content error](https://discuss.elastic.co/t/mixed-content-error/47880)
**Author:** [@neethu](https://discuss.elastic.co/u/neethu)\ **Replies:** 1\ **Last updated:** [April 20, 2016, 3:01pm UTC](https://discuss.elastic.co/t/mixed-content-error/47880 "2016-04-20T15:01:58Z")
I have embedded the kibana dashboard in my application running over https.But latest browsers dosent allow mixed content. And i am getting error \*\* Mixed Content: The page at 'https:// ' was loaded over HTTPS, but requ… --- ## [Logstash and http-output plugin](https://discuss.elastic.co/t/logstash-and-http-output-plugin/36203)
**Author:** [@Alvin82](https://discuss.elastic.co/u/Alvin82)\ **Replies:** 1\ **Last updated:** [December 2, 2015, 4:50pm UTC](https://discuss.elastic.co/t/logstash-and-http-output-plugin/36203 "2015-12-02T16:50:37Z")
hi all, i've made a config file like this: input { file { add\_field =\> {"\[@metadata\]\[cl\_cert\]" =\> "cert.crt"} add\_field =\> {"\[@metadata\]\[cl\_key\]" =\> "private-key.pem"} path =\> "/var/log/\*.js… --- ## [RDP from Internet rule triggering on bogon ip address](https://discuss.elastic.co/t/rdp-from-internet-rule-triggering-on-bogon-ip-address/253269)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [October 26, 2020, 10:53am UTC](https://discuss.elastic.co/t/rdp-from-internet-rule-triggering-on-bogon-ip-address/253269 "2020-10-26T10:53:32Z")
Hello, Noticed the SIEM rule" RDP (Remote Desktop Protocol) from the Internet" triggered on source.ip: "169.254.231.41" which is a bogon link-local address. So this should not be considered as "from the Internet" and… --- ## [Multiple inputs for Filebeat](https://discuss.elastic.co/t/multiple-inputs-for-filebeat/247519)
**Author:** [@Sid](https://discuss.elastic.co/u/Sid)\ **Replies:** 2\ **Last updated:** [September 8, 2020, 8:33am UTC](https://discuss.elastic.co/t/multiple-inputs-for-filebeat/247519 "2020-09-08T08:33:47Z")
Is it possible in Filebeat to have multiple log sources as inputs and indexed into different Elasticsearch indices? Suppose I have apache access logs & mysql logs. How to enable filebeat modules for apache and mysql ava… --- ## [Esrally failed to show result (Cannot race. Load generator \[14\] has exited prematurely.)](https://discuss.elastic.co/t/esrally-failed-to-show-result-cannot-race-load-generator-14-has-exited-prematurely/208415)
**Author:** [@Jinlian\_Chen](https://discuss.elastic.co/u/Jinlian_Chen)\ **Replies:** 2\ **Last updated:** [November 22, 2019, 1:24am UTC](https://discuss.elastic.co/t/esrally-failed-to-show-result-cannot-race-load-generator-14-has-exited-prematurely/208415 "2019-11-22T01:24:40Z")
All tasks shows done 100%, but failed to show the result. Is it the memory problem? It happens when run large number of iterations to build index. Parameters: bulk\_indexing\_clients:32,iterations:250000 The rally log sh… --- ## [Filebeatのレジストリファイルについて](https://discuss.elastic.co/t/filebeat/200806)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [October 4, 2019, 4:12am UTC](https://discuss.elastic.co/t/filebeat/200806 "2019-10-04T04:12:26Z")
filebeatを2台構成とし、片方のfilebeatがダウンした場合、もう片方のfilebeatに、処理途中のファイルを転送し、続きから読み込ませたいと考えているのですが、仕様として実現可能でしょうか？ レシストリファイルを利用することで実現可能かと思ったんですが、期待と異なる結果になってしまいました。 検証内容： ① filebeat#1にて、試験用のログを用意し、filebeatを起動させて読み込ませる ② filebea… --- ## [Error at java.time.chrono.JapaneseEra](https://discuss.elastic.co/t/error-at-java-time-chrono-japaneseera/182599)
**Author:** [@Silvio\_Di\_gregorio](https://discuss.elastic.co/u/Silvio_Di_gregorio)\ **Replies:** 2\ **Last updated:** [June 4, 2019, 8:49am UTC](https://discuss.elastic.co/t/error-at-java-time-chrono-japaneseera/182599 "2019-06-04T08:49:16Z")
Hi, i'm using elasticsearch 6.5.4 (community edition) on Debian. Whenever I start it up, it runs for 5/10 seconds and then immediately fails. My cluster have 2 nodes and basic configuration, one normally runs one goes … --- ## [Different index name for different filebeat instances](https://discuss.elastic.co/t/different-index-name-for-different-filebeat-instances/172874)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 2\ **Last updated:** [March 21, 2019, 1:27am UTC](https://discuss.elastic.co/t/different-index-name-for-different-filebeat-instances/172874 "2019-03-21T01:27:33Z")
Hi Elastic stack version 6.6.1 Setup: filebeat -- Elastic Search -- Kibana I have different environments windows and Linux. I want to forward logs from multiple servers to elastic search . EX:- server1, 2, 3 to elast… --- ## [Why the input-jdbc plugin automatically converts the MySQL database tinyint data type to boolean type?](https://discuss.elastic.co/t/why-the-input-jdbc-plugin-automatically-converts-the-mysql-database-tinyint-data-type-to-boolean-type/141100)
**Author:** [@Scopy](https://discuss.elastic.co/u/Scopy)\ **Replies:** 2\ **Last updated:** [July 24, 2018, 5:46am UTC](https://discuss.elastic.co/t/why-the-input-jdbc-plugin-automatically-converts-the-mysql-database-tinyint-data-type-to-boolean-type/141100 "2018-07-24T05:46:34Z")
Hi,everyone! I‘m a green hand to logstash.’This is the first attempt to synchronize MySQL data with logstash today.However, when I used the JDBC plugin, it encountered some problems. MySQL data is set to tinyint, it tur… --- ## [分散化システムの必要になる規模の目安](https://discuss.elastic.co/t/topic/105162)
**Author:** [@e5da94b0de01a92c429f](https://discuss.elastic.co/u/e5da94b0de01a92c429f)\ **Replies:** 2\ **Last updated:** [October 30, 2017, 7:14am UTC](https://discuss.elastic.co/t/topic/105162 "2017-10-30T07:14:54Z")
お世話になっております。 サイト機能としての全文検索機能にElasticsearchを利用しようと考えています。 一旦、分散化まわりの知識はなくて大丈夫だろうという想定でいるのですが、 どのような規模や条件で分散化について検討し始めたらいいか不安があります。 そのあたりの目安（負荷の指標、判定ツール、機能的な限界など。。）のようなものがあれば教えていただきたいです。 宜しくお願いいたします。 --- ## [Java heap space error when running Logstash](https://discuss.elastic.co/t/java-heap-space-error-when-running-logstash/71978)
**Author:** [@refai2017](https://discuss.elastic.co/u/refai2017)\ **Replies:** 2\ **Last updated:** [January 18, 2017, 12:10pm UTC](https://discuss.elastic.co/t/java-heap-space-error-when-running-logstash/71978 "2017-01-18T12:10:46Z")
Hi Everyone ,, I am very new to the Elastic Stack and I hope to get your help in the following problem: I am facing the error "Java heap space" when running the Logstash, the config file contains 2 indices (one selec… --- ## [Search visuallize throw "out of memory"](https://discuss.elastic.co/t/search-visuallize-throw-out-of-memory/66474)
**Author:** [@winlee](https://discuss.elastic.co/u/winlee)\ **Replies:** 2\ **Last updated:** [November 19, 2016, 4:03am UTC](https://discuss.elastic.co/t/search-visuallize-throw-out-of-memory/66474 "2016-11-19T04:03:18Z")
can anyone help me ? the server memory what i look: --- ## [Facetting by first letter](https://discuss.elastic.co/t/facetting-by-first-letter/17152)
**Author:** [@Stefan\_Kruse](https://discuss.elastic.co/u/Stefan_Kruse)\ **Replies:** 2\ **Last updated:** [April 23, 2014, 4:53pm UTC](https://discuss.elastic.co/t/facetting-by-first-letter/17152 "2014-04-23T16:53:15Z")
Hi, i would like to facett by the first letter of search results. By Solar i need to make a field with the first letter inside. Is there by elasticseach maybe a cool function for this? I would to make a alphabetical … --- ## [How to fix vulnerability(CVE-2001-1199)](https://discuss.elastic.co/t/how-to-fix-vulnerability-cve-2001-1199/312441)
**Author:** [@wilsonyy](https://discuss.elastic.co/u/wilsonyy)\ **Replies:** 5\ **Last updated:** [August 22, 2022, 12:26am UTC](https://discuss.elastic.co/t/how-to-fix-vulnerability-cve-2001-1199/312441 "2022-08-22T00:26:50Z")
A cross-site scripting vulnerability（ CVE-2001-1199） was found in Elasticsearch:9200，I've never seen it before，so how to fix it, anybody helps? --- ## [Logstash to logstash communication - beat.hostname](https://discuss.elastic.co/t/logstash-to-logstash-communication-beat-hostname/227168)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 5\ **Last updated:** [April 8, 2020, 10:44pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-beat-hostname/227168 "2020-04-08T22:44:36Z")
Hi, I'm actually have a configuration with Filebeat sending logs to logstash, then logstash parsing information and sending it to differente pipelines, one of the to elasticsearch. In the parsing i use the field beat.hos… --- ## [Is Logstash useful for structured data?](https://discuss.elastic.co/t/is-logstash-useful-for-structured-data/226883)
**Author:** [@Robert\_Ga](https://discuss.elastic.co/u/Robert_Ga)\ **Replies:** 5\ **Last updated:** [April 7, 2020, 10:05pm UTC](https://discuss.elastic.co/t/is-logstash-useful-for-structured-data/226883 "2020-04-07T22:05:35Z")
Hello everyone, Recently I started to migrate some data into Elasticsearch using the Python client. The data is already structured in json files and needs some processing like: lowercase all the values handle value i… --- ## [Return date as UTC+0](https://discuss.elastic.co/t/return-date-as-utc-0/153974)
**Author:** [@pedroph](https://discuss.elastic.co/u/pedroph)\ **Replies:** 5\ **Last updated:** [October 30, 2018, 4:44pm UTC](https://discuss.elastic.co/t/return-date-as-utc-0/153974 "2018-10-30T16:44:03Z")
Hello, I have a field containing seconds which I wish to convert to HH:mm:ss format in my visualization; I'm performing this using a scripted field of type date. This works fine, however if I specify a value of xx my co… --- ## [Average in heat map visualization is 0](https://discuss.elastic.co/t/average-in-heat-map-visualization-is-0/145449)
**Author:** [@masyutka](https://discuss.elastic.co/u/masyutka)\ **Replies:** 5\ **Last updated:** [August 22, 2018, 3:46pm UTC](https://discuss.elastic.co/t/average-in-heat-map-visualization-is-0/145449 "2018-08-22T15:46:36Z")
Hi experts! I have the following 3 values in the index in discover Time serverDelay\_median scenarioName July 8th 2018, 00:00:00.000 0.707 OPEN\_WOC\_PEOPLE July 8th 2018, 00:00:00.000 0.743 OPEN\_WOC\_PEOPLE July… --- ## [ELK 6 Dashboards and Customizations](https://discuss.elastic.co/t/elk-6-dashboards-and-customizations/128532)
**Author:** [@mmethe](https://discuss.elastic.co/u/mmethe)\ **Replies:** 5\ **Last updated:** [April 18, 2018, 5:37pm UTC](https://discuss.elastic.co/t/elk-6-dashboards-and-customizations/128532 "2018-04-18T17:37:09Z")
Hello All, I am strugling to load visualizations and dashboards in ELK 6.x. This is running on Centos 7. It seems from the docs that the load of winlogbeat dashboards come from the windows beat client. I cant get thi… --- ## [Is there any limit on no. of indexes? or any performance issues doing it?](https://discuss.elastic.co/t/is-there-any-limit-on-no-of-indexes-or-any-performance-issues-doing-it/96300)
**Author:** [@HDB](https://discuss.elastic.co/u/HDB)\ **Replies:** 5\ **Last updated:** [August 16, 2017, 12:37pm UTC](https://discuss.elastic.co/t/is-there-any-limit-on-no-of-indexes-or-any-performance-issues-doing-it/96300 "2017-08-16T12:37:23Z")
Hi Team, I am planning to move my application on ElasticSearch where I will be creating multiple indexes and indexes might also contain N no. of documents with different size. Is there any issues in creating large no. … --- ## [Filebeat Setup error: Couldn't load template](https://discuss.elastic.co/t/filebeat-setup-error-couldnt-load-template/342268)
**Author:** [@JNWL](https://discuss.elastic.co/u/JNWL)\ **Replies:** 3\ **Last updated:** [September 8, 2023, 11:02am UTC](https://discuss.elastic.co/t/filebeat-setup-error-couldnt-load-template/342268 "2023-09-08T11:02:43Z")
Hi All Years ago I set up a Zeek host with filebeat shipping logs to ELK, this worked fine... Trying to replicate it on a new host years later, and a lot has changed! I'm getting the below error: sudo filebeat setup … --- ## [Logstash: Elasticsearch input plugin doesn't work](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-doesnt-work/247145)
**Author:** [@Igor\_Olikh](https://discuss.elastic.co/u/Igor_Olikh)\ **Replies:** 3\ **Last updated:** [September 2, 2020, 4:51pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-doesnt-work/247145 "2020-09-02T16:51:25Z")
It sounds strange (at least for me) that the output plugin works: elasticsearch { hosts =\> \["https://elastict:9200"\] user =\> "elastic" password =\> "PASSWORD" ssl =\> true ssl\_certificate\_verification =\> true cacer… [Previous page](https://discuss.elastic.co/top.md?page=1558&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1560&per_page=50&period=all)