# Top **URL:** https://discuss.elastic.co/top.md?page=1576&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1577 --- ## [Wrong log combinations](https://discuss.elastic.co/t/wrong-log-combinations/186906)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 8\ **Last updated:** [June 25, 2019, 11:04pm UTC](https://discuss.elastic.co/t/wrong-log-combinations/186906 "2019-06-25T23:04:00Z")
Initially, I wrote a Logstash configuration file to pull Balena information in JSON data and then parse it with Logstash ruby filter plugin which made the data look like this: { "@version" =\> "1", "values"… --- ## [Central centos 7 logging server](https://discuss.elastic.co/t/central-centos-7-logging-server/148308)
**Author:** [@UnNis](https://discuss.elastic.co/u/UnNis)\ **Replies:** 8\ **Last updated:** [September 17, 2018, 5:43pm UTC](https://discuss.elastic.co/t/central-centos-7-logging-server/148308 "2018-09-17T17:43:16Z")
I have filebeat installed on all clients which send log files to my central logging server. On the central server I have kibanna, logstash and filebeat installed. The other day I ran out of space. This server is a vm … --- ## [Tuning for Elasticsearch highlight performance](https://discuss.elastic.co/t/tuning-for-elasticsearch-highlight-performance/138543)
**Author:** [@ShilpiRachna](https://discuss.elastic.co/u/ShilpiRachna)\ **Replies:** 0\ **Last updated:** [July 4, 2018, 11:08am UTC](https://discuss.elastic.co/t/tuning-for-elasticsearch-highlight-performance/138543 "2018-07-04T11:08:51Z")
Hi, We are currently on Elasticsearch version 5.4.1. We do search across ~30 fields and have highlighting for 12 of those. We are using Unified highlighter (with offsets). We have repeatedly seen that the bulk of query… --- ## [Error : java.lang.IllegalStateException: Request cannot be executed; I/O reactor status: STOPPED](https://discuss.elastic.co/t/error-java-lang-illegalstateexception-request-cannot-be-executed-i-o-reactor-status-stopped/133070)
**Author:** [@krishan](https://discuss.elastic.co/u/krishan)\ **Replies:** 0\ **Last updated:** [May 24, 2018, 3:35am UTC](https://discuss.elastic.co/t/error-java-lang-illegalstateexception-request-cannot-be-executed-i-o-reactor-status-stopped/133070 "2018-05-24T03:35:55Z")
I am currently using 3 data nodes nodes ES 6.1 cluster on PROD env.For the past week we have start getting below error "java.lang.IllegalStateException: Request cannot be executed; I/O reactor status: STOPPED". without… --- ## [Nested Query & Filter Query](https://discuss.elastic.co/t/nested-query-filter-query/18696)
**Author:** [@Dark\_Globe](https://discuss.elastic.co/u/Dark_Globe)\ **Replies:** 8\ **Last updated:** [July 16, 2014, 5:00pm UTC](https://discuss.elastic.co/t/nested-query-filter-query/18696 "2014-07-16T17:00:24Z")
Hi Elastic Searchers, I am completely new to Elasticsearch but have been progressing well this week, I'm just hoping one of you may be able to help nudge me over the final hurdle. I have a complete gist here th… --- ## [Creating App Search with Terraform?](https://discuss.elastic.co/t/creating-app-search-with-terraform/269234)
**Author:** [@Chanonry](https://discuss.elastic.co/u/Chanonry)\ **Replies:** 2\ **Last updated:** [April 17, 2021, 8:53am UTC](https://discuss.elastic.co/t/creating-app-search-with-terraform/269234 "2021-04-17T08:53:41Z")
We are in the early stages of exploring App Search and really like the abstraction on Elasticsearch as it gets up going much faster, the console lets us get a feel for the available parameters and autoscaling promises mu… --- ## [Coordination Node Where I put them?](https://discuss.elastic.co/t/coordination-node-where-i-put-them/249156)
**Author:** [@Samuel\_Amico](https://discuss.elastic.co/u/Samuel_Amico)\ **Replies:** 7\ **Last updated:** [September 19, 2020, 10:42pm UTC](https://discuss.elastic.co/t/coordination-node-where-i-put-them/249156 "2020-09-19T22:42:17Z")
Guys, I have a doubt. The coordination node, I put at the entrance of the cluster (logstash sends it to the coordination node) or I put it behind the kibana (kibana points to the coordination node). I have 2 coordinatio… --- ## [Promoted document max count (Curration)](https://discuss.elastic.co/t/promoted-document-max-count-curration/232111)
**Author:** [@Ardy\_Febriansyah](https://discuss.elastic.co/u/Ardy_Febriansyah)\ **Replies:** 7\ **Last updated:** [May 13, 2020, 11:29am UTC](https://discuss.elastic.co/t/promoted-document-max-count-curration/232111 "2020-05-13T11:29:17Z")
How many document can be promoted on single curration? --- ## [How to parse json messages in elasticstack](https://discuss.elastic.co/t/how-to-parse-json-messages-in-elasticstack/125157)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 7\ **Last updated:** [March 24, 2018, 3:00am UTC](https://discuss.elastic.co/t/how-to-parse-json-messages-in-elasticstack/125157 "2018-03-24T03:00:20Z")
Hi Team, I am receiving messages in JSON format and wanted to know how do I directly send those in elastic? Can I directly store them in elastic without sending them through logstash or has to route it through logstash? … --- ## [Node Replicas suggestion on production environment](https://discuss.elastic.co/t/node-replicas-suggestion-on-production-environment/24195)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 7\ **Last updated:** [June 25, 2015, 5:40am UTC](https://discuss.elastic.co/t/node-replicas-suggestion-on-production-environment/24195 "2015-06-25T05:40:07Z")
Hi All, I have four node cluster established for production i have 5 shards and 1 replica is there for every index. Four nodes are master and data enabled.Now can I increase replica to 2 to increase search performanc… --- ## [Date range values of urltemplate throws rison error](https://discuss.elastic.co/t/date-range-values-of-urltemplate-throws-rison-error/286573)
**Author:** [@Prathibha\_Y](https://discuss.elastic.co/u/Prathibha_Y)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 5:47pm UTC](https://discuss.elastic.co/t/date-range-values-of-urltemplate-throws-rison-error/286573 "2021-10-27T17:47:16Z")
Hi trying to use urltemplate variables for date range but getting rison decode error, am I doing it right ? This is the error rison decoder error: missing ':' version Kibana 7.10.0 - oss This is the url app/dashboa… --- ## [Restrict max number of concurrent logins to kibana](https://discuss.elastic.co/t/restrict-max-number-of-concurrent-logins-to-kibana/234207)
**Author:** [@Velmurugan\_Baskaran](https://discuss.elastic.co/u/Velmurugan_Baskaran)\ **Replies:** 1\ **Last updated:** [May 26, 2020, 7:09pm UTC](https://discuss.elastic.co/t/restrict-max-number-of-concurrent-logins-to-kibana/234207 "2020-05-26T19:09:53Z")
Have multiple Kibana users (around 100), however we would like to restrict the number of concurrent logins limited to 10 to avoid concurrent usage of heavy dashboards. It is an internal requirement. Please advise is th… --- ## [Multiple Level with Parent Child Relation](https://discuss.elastic.co/t/multiple-level-with-parent-child-relation/221237)
**Author:** [@mobeit00](https://discuss.elastic.co/u/mobeit00)\ **Replies:** 1\ **Last updated:** [February 27, 2020, 1:11pm UTC](https://discuss.elastic.co/t/multiple-level-with-parent-child-relation/221237 "2020-02-27T13:11:29Z")
Hi I am new to elasticsearch and I am trying to map a folder structure that I want to search. My folders can have any number of subfolders and any number of files. Later I want to be able to search all children from the… --- ## [Metricbeat 7.2.1 custom index name: missing field accessing 'output.elasticsearch.index'](https://discuss.elastic.co/t/metricbeat-7-2-1-custom-index-name-missing-field-accessing-output-elasticsearch-index/217548)
**Author:** [@brandnull](https://discuss.elastic.co/u/brandnull)\ **Replies:** 1\ **Last updated:** [February 3, 2020, 8:36am UTC](https://discuss.elastic.co/t/metricbeat-7-2-1-custom-index-name-missing-field-accessing-output-elasticsearch-index/217548 "2020-02-03T08:36:34Z")
Hello, I'm trying to set up Metricbeat in different instances, gathering metrics in a single Elasticsearch node. However, I want to set up a custom index pattern per instance. In In /etc/metricbeat/metricbeat.yml I hav… --- ## [Parse json message](https://discuss.elastic.co/t/parse-json-message/136549)
**Author:** [@Roque\_Moyano](https://discuss.elastic.co/u/Roque_Moyano)\ **Replies:** 1\ **Last updated:** [June 19, 2018, 6:45pm UTC](https://discuss.elastic.co/t/parse-json-message/136549 "2018-06-19T18:45:28Z")
Hi , I have a json message log like: { 'date': "xx" , 'env': "xx" } I want to create those fields in elasticsearch just if those fields are present and anything else , my filter is: filter { json { source =\>"message" … --- ## [Help with a grok filter for Docker](https://discuss.elastic.co/t/help-with-a-grok-filter-for-docker/103932)
**Author:** [@DannielWhatever](https://discuss.elastic.co/u/DannielWhatever)\ **Replies:** 1\ **Last updated:** [October 17, 2017, 5:34am UTC](https://discuss.elastic.co/t/help-with-a-grok-filter-for-docker/103932 "2017-10-17T05:34:07Z")
Hello guys, I pretty noob in Elastic, and I trying to implement a filter, for the messages of a SpringBoot application running on docker, that is sending the logs to Logstash using the syslog driver. The messages seems… --- ## [Howto Benchmark Search Performance?](https://discuss.elastic.co/t/howto-benchmark-search-performance/75304)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 1\ **Last updated:** [February 16, 2017, 9:42am UTC](https://discuss.elastic.co/t/howto-benchmark-search-performance/75304 "2017-02-16T09:42:01Z")
Hey... we are using Elasticsearch for our central logging and currently I'm testing differnet setups for our Elasticsearch Cluster to find out which one is delivering the best performance. I have found this script to t… --- ## [ES 1.7.1 bulk inserts problems](https://discuss.elastic.co/t/es-1-7-1-bulk-inserts-problems/26658)
**Author:** [@Vinicius\_Carvalho](https://discuss.elastic.co/u/Vinicius_Carvalho)\ **Replies:** 1\ **Last updated:** [July 31, 2015, 9:18pm UTC](https://discuss.elastic.co/t/es-1-7-1-bulk-inserts-problems/26658 "2015-07-31T21:18:17Z")
Hi there, this seems really odd to me. I'm using JDK 1.8 on a mac with 16GB of RAM ES is running with ES\_HEAP = 4GB The client application has 3GB of HEAP I'm loading a small CSV file : 470k records into ES. T… --- ## [Can i use ELSER and OpenAI Embeddings together in Elasticsearch?](https://discuss.elastic.co/t/can-i-use-elser-and-openai-embeddings-together-in-elasticsearch/356512)
**Author:** [@shakunvohra](https://discuss.elastic.co/u/shakunvohra)\ **Replies:** 1\ **Last updated:** [April 1, 2024, 1:17pm UTC](https://discuss.elastic.co/t/can-i-use-elser-and-openai-embeddings-together-in-elasticsearch/356512 "2024-04-01T13:17:40Z")
I was wondering if I can use ELSER Vectors and OpenAI Embeddings together in same mapping for a better RAG results. The thought behind this is - take top 3 results from ELSER and take top 3 from OpenAI embeddings and co… --- ## [Button URL when ELK server IP is changed](https://discuss.elastic.co/t/button-url-when-elk-server-ip-is-changed/270959)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 1\ **Last updated:** [April 27, 2021, 2:52pm UTC](https://discuss.elastic.co/t/button-url-when-elk-server-ip-is-changed/270959 "2021-04-27T14:52:12Z")
Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your setup… --- ## [\[Ingest Management\] - Multiple configs per agent?](https://discuss.elastic.co/t/ingest-management-multiple-configs-per-agent/245922)
**Author:** [@tjfred](https://discuss.elastic.co/u/tjfred)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 7:53pm UTC](https://discuss.elastic.co/t/ingest-management-multiple-configs-per-agent/245922 "2020-08-21T19:53:30Z")
Hello, I'm trying out the new Ingest Manager on 7.9.1, all looks great! I was wondering if anyone could clarify how best to design configurations and integrations. Consider this setup: All hosts require "System" and … --- ## [Unable to connect local filebeat to distant logstash](https://discuss.elastic.co/t/unable-to-connect-local-filebeat-to-distant-logstash/233498)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 4\ **Last updated:** [June 15, 2020, 7:36pm UTC](https://discuss.elastic.co/t/unable-to-connect-local-filebeat-to-distant-logstash/233498 "2020-06-15T19:36:54Z")
Hey everyone, I've got an issue when i try to send some logs from A server filebeat to B server ELK. Telnet test : \[root@A:/etc/ansible\]# telnet B 5044 Trying B... Connected to B. Escape character is '^\]'. (same netw… --- ## [Deploying a new filebeat module](https://discuss.elastic.co/t/deploying-a-new-filebeat-module/217085)
**Author:** [@Jim\_Ivey](https://discuss.elastic.co/u/Jim_Ivey)\ **Replies:** 4\ **Last updated:** [February 6, 2020, 9:41pm UTC](https://discuss.elastic.co/t/deploying-a-new-filebeat-module/217085 "2020-02-06T21:41:31Z")
Sorry for peppering the boards here with countless questions. You guys have been extremely helpful and I successfully created my module and it passed all tests. Thanks so much! Now, I'm trying to deploy my module to a… --- ## [Config/Tuning advice :)](https://discuss.elastic.co/t/config-tuning-advice/93945)
**Author:** [@PaulieMac](https://discuss.elastic.co/u/PaulieMac)\ **Replies:** 4\ **Last updated:** [July 28, 2017, 2:34pm UTC](https://discuss.elastic.co/t/config-tuning-advice/93945 "2017-07-28T14:34:57Z")
Hi All, I have an analytic app in development, and I was hoping to get a little advice around configuring elastic for query performance... Here is the scenario: In all, there are around 42 million docs, in a single i… --- ## [Remote cluster version for cross-cluster search?](https://discuss.elastic.co/t/remote-cluster-version-for-cross-cluster-search/84779)
**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\ **Replies:** 4\ **Last updated:** [May 6, 2017, 4:33pm UTC](https://discuss.elastic.co/t/remote-cluster-version-for-cross-cluster-search/84779 "2017-05-06T16:33:28Z")
I didn't find a definitive statement about which version of Elasticsearch is required for remote clusters when implementing cross-cluster search on a 5.3.0+ cluster. Is it possible to query a remote cluster with a sig… --- ## [Operators NEARx, BEFOR, AFTER, FIRSTx, LASTx](https://discuss.elastic.co/t/operators-nearx-befor-after-firstx-lastx/21607)
**Author:** [@Petr\_Jansky](https://discuss.elastic.co/u/Petr_Jansky)\ **Replies:** 4\ **Last updated:** [March 17, 2015, 1:59pm UTC](https://discuss.elastic.co/t/operators-nearx-befor-after-firstx-lastx/21607 "2015-03-17T13:59:57Z")
Hi there, I'm looking for a way how to access span\_near and span\_first functionality to users via search box in gui that uses query string query. 1. Is there any easy way how to do it? 2. Will ElasticSeach… --- ## [Logstash date timezone](https://discuss.elastic.co/t/logstash-date-timezone/336803)
**Author:** [@Mahdi\_Davoodi](https://discuss.elastic.co/u/Mahdi_Davoodi)\ **Replies:** 6\ **Last updated:** [June 24, 2023, 3:00pm UTC](https://discuss.elastic.co/t/logstash-date-timezone/336803 "2023-06-24T15:00:14Z")
I want to parse date-time records with logstash date filter. My records have Asia/Tehran time zone. After the recent changes in the time zone in Iran and the removal of DST from it, apparently my date of records does no… --- ## [Strange High CPU usage related to licensing](https://discuss.elastic.co/t/strange-high-cpu-usage-related-to-licensing/276676)
**Author:** [@elnapo](https://discuss.elastic.co/u/elnapo)\ **Replies:** 6\ **Last updated:** [June 24, 2021, 12:44pm UTC](https://discuss.elastic.co/t/strange-high-cpu-usage-related-to-licensing/276676 "2021-06-24T12:44:04Z")
Encountered a strange Cluster behavior on a central logging cluster where about 50 filebeats are ingesting data. It seems that most of the CPU is used for security operations. Here is what GET \_nodes/hot\_threads is say… --- ## [Enabling TTL & RBAC on an existing cluster with Indexes](https://discuss.elastic.co/t/enabling-ttl-rbac-on-an-existing-cluster-with-indexes/215414)
**Author:** [@gsahu25](https://discuss.elastic.co/u/gsahu25)\ **Replies:** 6\ **Last updated:** [January 20, 2020, 12:30pm UTC](https://discuss.elastic.co/t/enabling-ttl-rbac-on-an-existing-cluster-with-indexes/215414 "2020-01-20T12:30:10Z")
Hi, Below is the scenario. I have a multi-node Elasticsearch cluster with indices. I want to enable the TTL,RBAC security on it. If I follow the steps given in the documentation, would that work? As there are indices… --- ## [Elasticsearch facet count problem in subdocuments](https://discuss.elastic.co/t/elasticsearch-facet-count-problem-in-subdocuments/9556)
**Author:** [@cubuzoa](https://discuss.elastic.co/u/cubuzoa)\ **Replies:** 6\ **Last updated:** [November 7, 2012, 11:05am UTC](https://discuss.elastic.co/t/elasticsearch-facet-count-problem-in-subdocuments/9556 "2012-11-07T11:05:32Z")
Hi, I have a faceted search for sub document but it returns wrong count. I have 2 match subdocuments but it counts as 1. You can see an example gist here https://gist.github.com/4015950 . Thanks in advance -… --- ## [My bucket-script-based Transform is not showing the aggregation fields in the destination index](https://discuss.elastic.co/t/my-bucket-script-based-transform-is-not-showing-the-aggregation-fields-in-the-destination-index/284992)
**Author:** [@nsouth](https://discuss.elastic.co/u/nsouth)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 10:33am UTC](https://discuss.elastic.co/t/my-bucket-script-based-transform-is-not-showing-the-aggregation-fields-in-the-destination-index/284992 "2021-09-24T10:33:12Z")
Hi, I'm trying to make my first transform and I'm not getting the results I expect. My source has multiple events correlated by a command\_unique\_id and I want to find the duration of these events by getting the timestam… --- ## [Logstash Configuration Error](https://discuss.elastic.co/t/logstash-configuration-error/247211)
**Author:** [@Chandana\_Koppal](https://discuss.elastic.co/u/Chandana_Koppal)\ **Replies:** 2\ **Last updated:** [September 3, 2020, 6:28am UTC](https://discuss.elastic.co/t/logstash-configuration-error/247211 "2020-09-03T06:28:32Z")
\[2020-09-02T16:11:38,526\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of \[ \\… --- ## [Getting 401 Unauthorized with Elasticsearch module](https://discuss.elastic.co/t/getting-401-unauthorized-with-elasticsearch-module/243737)
**Author:** [@scriptdb](https://discuss.elastic.co/u/scriptdb)\ **Replies:** 2\ **Last updated:** [August 10, 2020, 3:31pm UTC](https://discuss.elastic.co/t/getting-401-unauthorized-with-elasticsearch-module/243737 "2020-08-10T15:31:25Z")
Hi, I'm using metricbeat 7.6.2 and trying to get elasticsearch metrics (with module). - module: elasticsearch metricsets: - node period: 10s enabled: true hosts: \["http://internal:8081"\] basepath: "/es/" … --- ## [Unable to connect to azure sql database](https://discuss.elastic.co/t/unable-to-connect-to-azure-sql-database/208565)
**Author:** [@WalterLeff](https://discuss.elastic.co/u/WalterLeff)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 8:19pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-azure-sql-database/208565 "2019-11-19T20:19:41Z")
Hi i'm new to logstash and trying to import data from azure sql db. However i'm getting an error when trying to connect with the database: ELK stack : 7.4.2 Conf file: input { jdbc { jdbc\_connection\_string =\> "jdb… --- ## [Filebeat ignore harvest JSON file](https://discuss.elastic.co/t/filebeat-ignore-harvest-json-file/165163)
**Author:** [@Marek\_Pastier](https://discuss.elastic.co/u/Marek_Pastier)\ **Replies:** 2\ **Last updated:** [January 23, 2019, 7:26am UTC](https://discuss.elastic.co/t/filebeat-ignore-harvest-json-file/165163 "2019-01-23T07:26:36Z")
Hi guys My configuration for Filebeat ver 6.5 ignore harvesting json log file. My actual configuration /etc/filebeat/filebeat.yml filebeat.inputs: type: log json.keys\_under\_root: true json.add\_error\_key: true pat… --- ## [AWS S3 plugin for ElasticSearch 2.1](https://discuss.elastic.co/t/aws-s3-plugin-for-elasticsearch-2-1/38040)
**Author:** [@Ramky](https://discuss.elastic.co/u/Ramky)\ **Replies:** 2\ **Last updated:** [December 29, 2015, 4:54am UTC](https://discuss.elastic.co/t/aws-s3-plugin-for-elasticsearch-2-1/38040 "2015-12-29T04:54:28Z")
I need to create snapshot repository on AWS S3 using ElasticSearch 2.1. Unable to find the plugin/command to install. Please help. Regards Ramky --- ## [Return a different field than the aggregated field](https://discuss.elastic.co/t/return-a-different-field-than-the-aggregated-field/28271)
**Author:** [@clofresh](https://discuss.elastic.co/u/clofresh)\ **Replies:** 2\ **Last updated:** [August 29, 2015, 1:59pm UTC](https://discuss.elastic.co/t/return-a-different-field-than-the-aggregated-field/28271 "2015-08-29T13:59:08Z")
Hi, Given documents that look like this: \[ { id: 10, aggregation\_key: "foo", timestamp: "2015-08-28" }, { id: 20, aggregation\_key: "foo", timestamp: "2015-08-27" }, { id: 30, … --- ## [Returning a subset of nested objects](https://discuss.elastic.co/t/returning-a-subset-of-nested-objects/26916)
**Author:** [@jdh2550](https://discuss.elastic.co/u/jdh2550)\ **Replies:** 2\ **Last updated:** [August 7, 2015, 7:09pm UTC](https://discuss.elastic.co/t/returning-a-subset-of-nested-objects/26916 "2015-08-07T19:09:12Z")
I can use the \_source object to return a subset of fields in the root and in the nested objects. However, is there a way to return a subset of the nested objects rather than all of them? I have a nested set of nested… --- ## [Suricata integration parsing issues](https://discuss.elastic.co/t/suricata-integration-parsing-issues/284954)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 3\ **Last updated:** [October 27, 2021, 2:02am UTC](https://discuss.elastic.co/t/suricata-integration-parsing-issues/284954 "2021-10-27T02:02:07Z")
I'm running 7.14.1 with an Elastic agent trying to pick up eve.json files using the suricata integration. Somewhere along the line it is not able to correctly parse the events. Here is the error I'm getting : {\\"type\\… --- ## [Rolling pipelines.separate\_logs](https://discuss.elastic.co/t/rolling-pipelines-separate-logs/277925)
**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\ **Replies:** 3\ **Last updated:** [July 12, 2021, 7:20am UTC](https://discuss.elastic.co/t/rolling-pipelines-separate-logs/277925 "2021-07-12T07:20:06Z")
Logstash v.7.13.2 Hi all, I'm successfully running 3 logstash instances via the following pipelines.yml file: - pipeline.id: upsert queue.type: persisted queue.checkpoint.writes: 1 path.config: "\ **Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\ **Replies:** 3\ **Last updated:** [April 10, 2021, 4:56am UTC](https://discuss.elastic.co/t/zero-like-result-in-canvas/269694 "2021-04-10T04:56:05Z") I have a question, on Metric, I can have the "0" like result because I have this symbol: and i want to have "0" instead of this symbol. Could anyone help me ? I can not it solve. filters | essql query="SELECT SUM… --- ## [Restore de cluster](https://discuss.elastic.co/t/restore-de-cluster/253599)
**Author:** [@ormenese](https://discuss.elastic.co/u/ormenese)\ **Replies:** 3\ **Last updated:** [November 11, 2020, 1:15pm UTC](https://discuss.elastic.co/t/restore-de-cluster/253599 "2020-11-11T13:15:49Z")
Boa tarde pessoal. Estou migrando meu cluster de ambiente. Já fiz todas as instalações necessárias e a cópia dos arquivos físicos dos snapshots do cluster a ser migrado, para dentro do cluster novo. Preciso que o rest… --- ## [Elasticsearch Ports apart from 9200 and 9300](https://discuss.elastic.co/t/elasticsearch-ports-apart-from-9200-and-9300/248312)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 3\ **Last updated:** [September 12, 2020, 4:11am UTC](https://discuss.elastic.co/t/elasticsearch-ports-apart-from-9200-and-9300/248312 "2020-09-12T04:11:15Z")
Which other ports do elasticsearch uses apart from 9200 and 9300? Can I use 9201 for kibana assuming that Elasticsearch won't use other port in 920\* ranges? What issues it could create? --- ## [ILM with custom index names](https://discuss.elastic.co/t/ilm-with-custom-index-names/232570)
**Author:** [@michielM](https://discuss.elastic.co/u/michielM)\ **Replies:** 3\ **Last updated:** [May 26, 2020, 8:02am UTC](https://discuss.elastic.co/t/ilm-with-custom-index-names/232570 "2020-05-26T08:02:12Z")
Hi, I have set-up my stack to use custom index names like filebeat-department-01/01/2000 To do this I had to disable ILM, but this means Elasticsearch creates daily indexes. Is it possible to have these custom index nam… --- ## [Unable to create an update script](https://discuss.elastic.co/t/unable-to-create-an-update-script/158146)
**Author:** [@markmevans](https://discuss.elastic.co/u/markmevans)\ **Replies:** 3\ **Last updated:** [November 27, 2018, 4:26pm UTC](https://discuss.elastic.co/t/unable-to-create-an-update-script/158146 "2018-11-27T16:26:38Z")
We are running 2 instances of ElasticCloud version 5.6 - One for production and another for dev/test. I have run the following simple script successfully in in Kibana for the non-production instance POST \_scripts/updat… --- ## [Scripted filed is not working](https://discuss.elastic.co/t/scripted-filed-is-not-working/85243)
**Author:** [@udaykirankona](https://discuss.elastic.co/u/udaykirankona)\ **Replies:** 3\ **Last updated:** [May 10, 2017, 9:55pm UTC](https://discuss.elastic.co/t/scripted-filed-is-not-working/85243 "2017-05-10T21:55:30Z")
HI, I created scripted field on numeric field with following expression and painless script, doc\['field'\].sum() but its not working. I am using ELK - 5.4.0 version its not giving any error, but values always ar… --- ## [Scan query that returns document values only is heavily accessing the \*.FDT file](https://discuss.elastic.co/t/scan-query-that-returns-document-values-only-is-heavily-accessing-the-fdt-file/20907)
**Author:** [@Tzahi](https://discuss.elastic.co/u/Tzahi)\ **Replies:** 3\ **Last updated:** [November 24, 2014, 9:13am UTC](https://discuss.elastic.co/t/scan-query-that-returns-document-values-only-is-heavily-accessing-the-fdt-file/20907 "2014-11-24T09:13:17Z")
Hi all, I have a tests index with 43 million documenst. there is a string document value for each document. (about 5-10 character value for each document) Mapping is: { "myindex" : { "mappings" … --- ## [Store results in temporary DB](https://discuss.elastic.co/t/store-results-in-temporary-db/8119)
**Author:** [@Serikozz](https://discuss.elastic.co/u/Serikozz)\ **Replies:** 3\ **Last updated:** [June 20, 2012, 7:20am UTC](https://discuss.elastic.co/t/store-results-in-temporary-db/8119 "2012-06-20T07:20:21Z")
Good day everyone! I am new to Elasticseacrh. Can you guide me of how can I store retrieved results in database(Es or MongoDB)? Need to store results somewhere to further operations... --- ## [Getting MasterNotDiscoveredException: null in client nodes](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-null-in-client-nodes/258699)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 1\ **Last updated:** [December 21, 2020, 3:23am UTC](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-null-in-client-nodes/258699 "2020-12-21T03:23:43Z")
We have 3 master nodes, 2 client nodes, and 8 data nodes. And client nodes ES logs show below mentioned error even though resource usage(JVM and CPU ) looks fine at that time. And cluster went unresponsive mode. ALL node… --- ## [Filebeat Pod restarting continuously due to OOM](https://discuss.elastic.co/t/filebeat-pod-restarting-continuously-due-to-oom/258704)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [December 15, 2020, 12:44pm UTC](https://discuss.elastic.co/t/filebeat-pod-restarting-continuously-due-to-oom/258704 "2020-12-15T12:44:45Z")
Hi All, We have deployed Filebeat as a pod in our environment. We have set memory limit of 2GB in the deployment resources. We still see the pods getting restarted almost every day. Attaching the configmap and deploym… [Previous page](https://discuss.elastic.co/top.md?page=1575&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1577&per_page=50&period=all)