# Top

**URL:** https://discuss.elastic.co/top.md?page=1585&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1586

---

## [Can't show data on Kibana 4.3](https://discuss.elastic.co/t/cant-show-data-on-kibana-4-3/37239)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 4\
**Last updated:** [December 16, 2015, 10:57am UTC](https://discuss.elastic.co/t/cant-show-data-on-kibana-4-3/37239 "2015-12-16T10:57:53Z")

</div>

Hi all, I try to install ES 2.1, Logstash and Kibana 4.3. I 'm ussing Topbeat and Packetbeat. I install plugin beat for Logstash, and i config for send data to logstash (port 5044) (in Image) \[image\] Logstash Config …

---

## [Mapper Parsing Exception](https://discuss.elastic.co/t/mapper-parsing-exception/19842)

<div class="topic-metadata">

**Author:** [@Maria\_John\_Franklin](https://discuss.elastic.co/u/Maria_John_Franklin)\
**Replies:** 4\
**Last updated:** [September 17, 2014, 1:14pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception/19842 "2014-09-17T13:14:39Z")

</div>

Hi Friends, How to push dynamic data types in same column in elasticsearch. Example json ========== data 1 ====== { "test1":"test", "test2":"test" } data 2 ====== { "test1":"test", "test2"…

---

## [Custom machine learning rule](https://discuss.elastic.co/t/custom-machine-learning-rule/319944)

<div class="topic-metadata">

**Author:** [@sachinmestry](https://discuss.elastic.co/u/sachinmestry)\
**Replies:** 8\
**Last updated:** [December 21, 2022, 6:43pm UTC](https://discuss.elastic.co/t/custom-machine-learning-rule/319944 "2022-12-21T18:43:32Z")

</div>

HI Everyone, I want to create rule where if any change in the user's location is observed i should get an alert for the same. I am using VPN geo location for tracking the same with respect to user. I am trying o achiev…

---

## [Can't view fields In Discovery or via query even though they're available in Kibana visualizations](https://discuss.elastic.co/t/cant-view-fields-in-discovery-or-via-query-even-though-theyre-available-in-kibana-visualizations/234582)

<div class="topic-metadata">

**Author:** [@schoffelman](https://discuss.elastic.co/u/schoffelman)\
**Replies:** 8\
**Last updated:** [May 27, 2020, 4:49pm UTC](https://discuss.elastic.co/t/cant-view-fields-in-discovery-or-via-query-even-though-theyre-available-in-kibana-visualizations/234582 "2020-05-27T16:49:31Z")

</div>

I have a few indexes, defined by a template, and each index is distinguished by year. When querying the current years index (previous years are fine), I get no fields to return any values. When looking at visualizations …

---

## [Error sending message to elastic via logstash (Can't get text on a START\_OBJECT)](https://discuss.elastic.co/t/error-sending-message-to-elastic-via-logstash-cant-get-text-on-a-start-object/147742)

<div class="topic-metadata">

**Author:** [@Michel\_Albert](https://discuss.elastic.co/u/Michel_Albert)\
**Replies:** 0\
**Last updated:** [September 7, 2018, 3:22pm UTC](https://discuss.elastic.co/t/error-sending-message-to-elastic-via-logstash-cant-get-text-on-a-start-object/147742 "2018-09-07T15:22:56Z")

</div>

I'm currently trying to add specific fields (which are defined in internal logging guidelines) to a log message. These fields are namespaced and look (in JSON) something like this: { ... "message": "Hello World!…

---

## [How to prefix $ symbol as part of Metric or Markdown](https://discuss.elastic.co/t/how-to-prefix-symbol-as-part-of-metric-or-markdown/200259)

<div class="topic-metadata">

**Author:** [@rajeev1](https://discuss.elastic.co/u/rajeev1)\
**Replies:** 2\
**Last updated:** [October 8, 2019, 2:44pm UTC](https://discuss.elastic.co/t/how-to-prefix-symbol-as-part-of-metric-or-markdown/200259 "2019-10-08T14:44:56Z")

</div>

I want to display a value prefixed with '$' in Metric as well as Markdown fields in Canvas. I know I can add a separate markdown field with just '$' symbol but the problem is that it is not scalable, if the value goes fr…

---

## [Log4Shell comprehensive fix for Elastic Search](https://discuss.elastic.co/t/log4shell-comprehensive-fix-for-elastic-search/292106)

<div class="topic-metadata">

**Author:** [@rencytl](https://discuss.elastic.co/u/rencytl)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 12:06am UTC](https://discuss.elastic.co/t/log4shell-comprehensive-fix-for-elastic-search/292106 "2021-12-20T00:06:38Z")

</div>

Appreciate the efforts having Log4Shell mitigated in versions 7.16.1 and 6.8.21. Is the team working towards providing a comprehensive fix for this upgrading the Log4j library to 2.16.0 version? If yes, knowing the ETA w…

---

## [CVE-2021-44228 not using XPack, does exposure change?](https://discuss.elastic.co/t/cve-2021-44228-not-using-xpack-does-exposure-change/292022)

<div class="topic-metadata">

**Author:** [@falcon404](https://discuss.elastic.co/u/falcon404)\
**Replies:** 1\
**Last updated:** [December 16, 2021, 1:18am UTC](https://discuss.elastic.co/t/cve-2021-44228-not-using-xpack-does-exposure-change/292022 "2021-12-16T01:18:52Z")

</div>

Hi, We are running Elasticsearch and not enabling / installing X-Pack for reasons. With regard to the log4j2 vulnerability CVE-2021-44228, there has been mention of setting property or upgrading to a later version (I …

---

## [Understanding IndexShardSnapshotFailedException](https://discuss.elastic.co/t/understanding-indexshardsnapshotfailedexception/268783)

<div class="topic-metadata">

**Author:** [@Kambing](https://discuss.elastic.co/u/Kambing)\
**Replies:** 1\
**Last updated:** [March 30, 2021, 11:56am UTC](https://discuss.elastic.co/t/understanding-indexshardsnapshotfailedexception/268783 "2021-03-30T11:56:39Z")

</div>

I have several snapshot policy, most of them were success to execute and create snapshot, but sometimes I got some shard failed with message "INTERNAL\_SERVER\_ERROR: Aborted", when I look at the snapshot policy history, I…

---

## [Unique Field in the watcher action](https://discuss.elastic.co/t/unique-field-in-the-watcher-action/180879)

<div class="topic-metadata">

**Author:** [@Johnnie843](https://discuss.elastic.co/u/Johnnie843)\
**Replies:** 1\
**Last updated:** [May 22, 2019, 8:15am UTC](https://discuss.elastic.co/t/unique-field-in-the-watcher-action/180879 "2019-05-22T08:15:35Z")

</div>

I'm trying to get the unique values of a certain field in my watch. Is this possible? For example I want to get the unique log\_module in the following query and put it in my message: \[quote="Johnnie843, post:1, topic:1…

---

## [How to create a completion suggester index without duplicates?](https://discuss.elastic.co/t/how-to-create-a-completion-suggester-index-without-duplicates/151469)

<div class="topic-metadata">

**Author:** [@thurse](https://discuss.elastic.co/u/thurse)\
**Replies:** 1\
**Last updated:** [October 9, 2018, 9:19am UTC](https://discuss.elastic.co/t/how-to-create-a-completion-suggester-index-without-duplicates/151469 "2018-10-09T09:19:49Z")

</div>

Hi, I want to organize a simple index of various search terms which gets updated frequently by the users of my search api. For this purpose I created the following mapping { "mappings": { "\_doc" : { "pr…

---

## [Unable to parse xml message with logstash](https://discuss.elastic.co/t/unable-to-parse-xml-message-with-logstash/92568)

<div class="topic-metadata">

**Author:** [@Devesh\_Pandey](https://discuss.elastic.co/u/Devesh_Pandey)\
**Replies:** 1\
**Last updated:** [July 11, 2017, 4:15pm UTC](https://discuss.elastic.co/t/unable-to-parse-xml-message-with-logstash/92568 "2017-07-11T16:15:45Z")

</div>

Hi , I am newbie to this technology and trying to set up new infra with Elasticsearch , logstash, and Kibana. I am using logstash-input-jms plugin to get XML message from the MQ queues. I can see the XML message in ki…

---

## [Logging in ES Hadoop Jar](https://discuss.elastic.co/t/logging-in-es-hadoop-jar/49870)

<div class="topic-metadata">

**Author:** [@Bijuv\_V](https://discuss.elastic.co/u/Bijuv_V)\
**Replies:** 1\
**Last updated:** [May 18, 2016, 6:55am UTC](https://discuss.elastic.co/t/logging-in-es-hadoop-jar/49870 "2016-05-18T06:55:12Z")

</div>

We are using ESHadoop2.1.0 jar inside the Hadoop environment to sync the data from the Hadoop to elastic search. We are facing some issues in the data flow and hence wanted to enable the debugging of the ES Hadoop flow. …

---

## [Packetbeat sometimes miss captured packages](https://discuss.elastic.co/t/packetbeat-sometimes-miss-captured-packages/41922)

<div class="topic-metadata">

**Author:** [@Ricardo\_Lopes](https://discuss.elastic.co/u/Ricardo_Lopes)\
**Replies:** 1\
**Last updated:** [February 29, 2016, 2:54am UTC](https://discuss.elastic.co/t/packetbeat-sometimes-miss-captured-packages/41922 "2016-02-29T02:54:53Z")

</div>

Hi!, I'm using packetbeat to collect data about our billing, monitoring the numbers of inserts in a mysql database table, whatever sometimes it have differences between the numbers returned from elasticsearch and the tab…

---

## [Radio-box selector to drive Histogram?](https://discuss.elastic.co/t/radio-box-selector-to-drive-histogram/27773)

<div class="topic-metadata">

**Author:** [@alancam73](https://discuss.elastic.co/u/alancam73)\
**Replies:** 1\
**Last updated:** [August 21, 2015, 5:29am UTC](https://discuss.elastic.co/t/radio-box-selector-to-drive-histogram/27773 "2015-08-21T05:29:32Z")

</div>

hi folks, At present I have a Kibana dashboard with a Terms panel driving a Histogram graph output. However I'd like to be able to select multiple entries (like a radio box) so that multiple lines will show on the Hist…

---

## [Delete index directory](https://discuss.elastic.co/t/delete-index-directory/16762)

<div class="topic-metadata">

**Author:** [@11145](https://discuss.elastic.co/u/11145)\
**Replies:** 1\
**Last updated:** [April 4, 2014, 12:57pm UTC](https://discuss.elastic.co/t/delete-index-directory/16762 "2014-04-04T12:57:36Z")

</div>

I've tried deleting an index by calling '$ curl -XDELETE 'http://localhost:9200/indexName', but in actual file system 'indexName' directory still persists in the path 'repository/elasticsearch/data/228.5.8.6/nodes/0/…

---

## [Cannot setup Filebeat, when enable Imperva module - 7.9](https://discuss.elastic.co/t/cannot-setup-filebeat-when-enable-imperva-module-7-9/245719)

<div class="topic-metadata">

**Author:** [@denis.atanasov](https://discuss.elastic.co/u/denis.atanasov)\
**Replies:** 2\
**Last updated:** [August 31, 2020, 12:37pm UTC](https://discuss.elastic.co/t/cannot-setup-filebeat-when-enable-imperva-module-7-9/245719 "2020-08-31T12:37:47Z")

</div>

Hello guys, Yesterday on my ELK stack I upgraded the Filebeat version from 7.8 to 7.9. The reason is because of new modules included, especialy the Imperva module for receiving Syslog messages. I am successfully enabli…

---

## [How to potentially flatten a nested document design?](https://discuss.elastic.co/t/how-to-potentially-flatten-a-nested-document-design/214650)

<div class="topic-metadata">

**Author:** [@cgremakes](https://discuss.elastic.co/u/cgremakes)\
**Replies:** 2\
**Last updated:** [January 13, 2020, 3:34pm UTC](https://discuss.elastic.co/t/how-to-potentially-flatten-a-nested-document-design/214650 "2020-01-13T15:34:33Z")

</div>

I am probably like many people that have more of a SQL background, and am attempting to branch out into using Elasticsearch. I am attempting to make a design choice that I'm hoping I can get some input on. We have a pr…

---

## [Fieldata](https://discuss.elastic.co/t/fieldata/105555)

<div class="topic-metadata">

**Author:** [@David\_Pizu\_Micallef](https://discuss.elastic.co/u/David_Pizu_Micallef)\
**Replies:** 2\
**Last updated:** [October 28, 2017, 6:36pm UTC](https://discuss.elastic.co/t/fieldata/105555 "2017-10-28T18:36:06Z")

</div>

Good Morning ALL, I need to set the Fielddata, but cannot find where I should add this. Am having the below error when trying to access source. Oct 27 10:50:38 itnetgraylog elasticsearch: \[2017-10-27 10:50:38,700\]\[DEB…

---

## [Multiline example simulation issue](https://discuss.elastic.co/t/multiline-example-simulation-issue/97453)

<div class="topic-metadata">

**Author:** [@Vivek\_Sharma](https://discuss.elastic.co/u/Vivek_Sharma)\
**Replies:** 2\
**Last updated:** [August 18, 2017, 10:28am UTC](https://discuss.elastic.co/t/multiline-example-simulation-issue/97453 "2017-08-18T10:28:52Z")

</div>

Hi I tried simulating the multiline example given at link: Below are my filebeat.yml details. filebeat.prospectors: # Each - is a prospector. Most options can be set at the prospector level, so # you can use differ…

---

## [Transport Client NoNodeAvailableException](https://discuss.elastic.co/t/transport-client-nonodeavailableexception/77287)

<div class="topic-metadata">

**Author:** [@RanjithVenkat](https://discuss.elastic.co/u/RanjithVenkat)\
**Replies:** 2\
**Last updated:** [March 7, 2017, 4:25am UTC](https://discuss.elastic.co/t/transport-client-nonodeavailableexception/77287 "2017-03-07T04:25:35Z")

</div>

We are using ES 1.4.4 in our production setup. For ES DR setup., our main DC indexer will index in parallel threads in main DC ES cluster using Node Client and DR ES cluster using TransportClient. We are facing NoNodeAv…

---

## [Install elasticsearch error in centos](https://discuss.elastic.co/t/install-elasticsearch-error-in-centos/55379)

<div class="topic-metadata">

**Author:** [@gutasaputra](https://discuss.elastic.co/u/gutasaputra)\
**Replies:** 2\
**Last updated:** [January 30, 2017, 4:29am UTC](https://discuss.elastic.co/t/install-elasticsearch-error-in-centos/55379 "2017-01-30T04:29:54Z")

</div>

hi there, last time i install elasticsearch in windows, everything work perfectly fine now after some development on my application modules, now i decided to move to my server. which in running on centos. i have probl…

---

## [Deploy Kibana 4.1.1 in a VPS](https://discuss.elastic.co/t/deploy-kibana-4-1-1-in-a-vps/51836)

<div class="topic-metadata">

**Author:** [@Jemli\_Fathi](https://discuss.elastic.co/u/Jemli_Fathi)\
**Replies:** 2\
**Last updated:** [June 7, 2016, 5:41pm UTC](https://discuss.elastic.co/t/deploy-kibana-4-1-1-in-a-vps/51836 "2016-06-07T17:41:36Z")

</div>

I m using Kibana 4.1.1, i used to run it manually ./bin/kibana Now I want to deploy it in production in a VPS running ubuntu 14.04. How can I send my dashboards to the VPS instance and do not recreate them? How can I…

---

## [Filters Aggregation on Nested Type](https://discuss.elastic.co/t/filters-aggregation-on-nested-type/51206)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 2\
**Last updated:** [May 31, 2016, 7:38am UTC](https://discuss.elastic.co/t/filters-aggregation-on-nested-type/51206 "2016-05-31T07:38:47Z")

</div>

How I can use filters aggregation on nested type data mapping as below { DocumentId: String, not\_analyzed ,Country: String,not\_analyzed ,ContentType: String,not\_analyzed ,KeyNotes:{type:nested, properties {NoteType:Str…

---

## [Howto control log output format](https://discuss.elastic.co/t/howto-control-log-output-format/48670)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 2\
**Last updated:** [April 28, 2016, 10:45pm UTC](https://discuss.elastic.co/t/howto-control-log-output-format/48670 "2016-04-28T22:45:09Z")

</div>

I'm currently getting what appears to be json output on a single line in my logstash log file (-l §LS\_LOG\_FILE), how can I control format for this output so it might be more readable or at least line separated?

---

## [Curl for current node write consistency setting](https://discuss.elastic.co/t/curl-for-current-node-write-consistency-setting/36426)

<div class="topic-metadata">

**Author:** [@rmacdonnell](https://discuss.elastic.co/u/rmacdonnell)\
**Replies:** 2\
**Last updated:** [December 4, 2015, 11:19pm UTC](https://discuss.elastic.co/t/curl-for-current-node-write-consistency-setting/36426 "2015-12-04T23:19:55Z")

</div>

return current write.consistency setting on a data node Question 1 i have a 1 shard and 1 replica setting per index which from my reasearch means my write consistency using no setting in the .yml file is a write.consis…

---

## [Kibana graphing issue](https://discuss.elastic.co/t/kibana-graphing-issue/27651)

<div class="topic-metadata">

**Author:** [@Sar82](https://discuss.elastic.co/u/Sar82)\
**Replies:** 2\
**Last updated:** [August 20, 2015, 10:03am UTC](https://discuss.elastic.co/t/kibana-graphing-issue/27651 "2015-08-20T10:03:30Z")

</div>

I have network related statistical data. Using which I am calculating network load. Say for example (packet ip + packet op) per time unit. When I plot the graph in Kibana, on Y axis I see all aggregation functions like…

---

## [Unasigned shards](https://discuss.elastic.co/t/unasigned-shards/26627)

<div class="topic-metadata">

**Author:** [@Juan\_Diaz\_Gonzalez](https://discuss.elastic.co/u/Juan_Diaz_Gonzalez)\
**Replies:** 2\
**Last updated:** [August 5, 2015, 6:41am UTC](https://discuss.elastic.co/t/unasigned-shards/26627 "2015-08-05T06:41:11Z")

</div>

If for example I add a new node I have unasigned shards although in the elasticsearch configuration (elasticsearch.yml) I have this wrote paremeter: index.routing.allocation.disable\_allocation: false It does not works…

---

## [Graylog2 recent is not working. cluster state is red](https://discuss.elastic.co/t/graylog2-recent-is-not-working-cluster-state-is-red/17056)

<div class="topic-metadata">

**Author:** [@Sachin\_Kumar\_Chauhan](https://discuss.elastic.co/u/Sachin_Kumar_Chauhan)\
**Replies:** 2\
**Last updated:** [April 17, 2014, 12:47pm UTC](https://discuss.elastic.co/t/graylog2-recent-is-not-working-cluster-state-is-red/17056 "2014-04-17T12:47:28Z")

</div>

Hi Experts, From past few days there is a problem in our graylog2. \*Need your help to resolve the issue\* \*Problem: while we are able to see the all messages, the recent is not working.\* - On the …

---

## [Write a regular expression to match on any IP address. How many dns answers contain an IP address?](https://discuss.elastic.co/t/write-a-regular-expression-to-match-on-any-ip-address-how-many-dns-answers-contain-an-ip-address/381084)

<div class="topic-metadata">

**Author:** [@Mayad\_Koujah](https://discuss.elastic.co/u/Mayad_Koujah)\
**Replies:** 3\
**Last updated:** [August 23, 2025, 3:24am UTC](https://discuss.elastic.co/t/write-a-regular-expression-to-match-on-any-ip-address-how-many-dns-answers-contain-an-ip-address/381084 "2025-08-23T03:24:13Z")

</div>

Hey all — I’m trying to answer this prompt: “Write a regular expression to match on any IP address. How many DNS answers contain an IP address?” It is my last question on “3.2 - Discover - Searching with KQL and Lucene” …

---

## [Elasticsearch 7 and JVM 21](https://discuss.elastic.co/t/elasticsearch-7-and-jvm-21/351238)

<div class="topic-metadata">

**Author:** [@ondrokrc](https://discuss.elastic.co/u/ondrokrc)\
**Replies:** 3\
**Last updated:** [January 31, 2024, 9:43am UTC](https://discuss.elastic.co/t/elasticsearch-7-and-jvm-21/351238 "2024-01-31T09:43:09Z")

</div>

I noticed that elasticsearch 7.17.15 comes with bundled JDK 21.0.1. But in Support Matrix | Elastic in documentation, JDK 21 is not listed as supported. Is it an inaccuracy in the Support Matrix and should I consider J…

---

## [Reindexing all data or Reindexing only changes](https://discuss.elastic.co/t/reindexing-all-data-or-reindexing-only-changes/343617)

<div class="topic-metadata">

**Author:** [@Julien\_Hac](https://discuss.elastic.co/u/Julien_Hac)\
**Replies:** 3\
**Last updated:** [September 22, 2023, 3:53pm UTC](https://discuss.elastic.co/t/reindexing-all-data-or-reindexing-only-changes/343617 "2023-09-22T15:53:33Z")

</div>

Hello, I have a question about indexing strategy for my project. Iam a novice and elasticsearch and i need advice and help about my case. In the project, im using primary database postgres, and i have about 10 000 obje…

---

## [Best Practice for Deploying Custom Metricset for Metricbeat](https://discuss.elastic.co/t/best-practice-for-deploying-custom-metricset-for-metricbeat/263811)

<div class="topic-metadata">

**Author:** [@traw1234](https://discuss.elastic.co/u/traw1234)\
**Replies:** 3\
**Last updated:** [February 16, 2021, 11:35pm UTC](https://discuss.elastic.co/t/best-practice-for-deploying-custom-metricset-for-metricbeat/263811 "2021-02-16T23:35:14Z")

</div>

I've created my own custom module to run in Metricbeat. My process locally (following this guide) was: clone https://github.com/elastic/beats run make create-metricset write the code in the metricset run mage update …

---

## [ES/Spark RDD Partitioning Strangeness](https://discuss.elastic.co/t/es-spark-rdd-partitioning-strangeness/238312)

<div class="topic-metadata">

**Author:** [@ikiril01](https://discuss.elastic.co/u/ikiril01)\
**Replies:** 3\
**Last updated:** [June 24, 2020, 4:33pm UTC](https://discuss.elastic.co/t/es-spark-rdd-partitioning-strangeness/238312 "2020-06-24T16:33:13Z")

</div>

We're using the es-hadoop connector to dump data from an ES index to spark (w/ pyspark, newAPIHadoopRDD). The issue we're seeing is that the RDD that is returned is skewed in terms of partitions - it always returns 9 par…

---

## [How to enable stemmer feature](https://discuss.elastic.co/t/how-to-enable-stemmer-feature/186358)

<div class="topic-metadata">

**Author:** [@ieiayaobb](https://discuss.elastic.co/u/ieiayaobb)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 5:43am UTC](https://discuss.elastic.co/t/how-to-enable-stemmer-feature/186358 "2019-06-20T05:43:54Z")

</div>

Hi all, I'm new to Elastic Search. I'm working on applying stemmer feature on all my indexes, so I used the following code: settingMap.put("index.analysis.filter.english\_stemmer.type", "stemmer"); settingMap.put("index…

---

## [Geoip Ingest with Elastic Cloud](https://discuss.elastic.co/t/geoip-ingest-with-elastic-cloud/165521)

<div class="topic-metadata">

**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\
**Replies:** 3\
**Last updated:** [January 24, 2019, 4:17am UTC](https://discuss.elastic.co/t/geoip-ingest-with-elastic-cloud/165521 "2019-01-24T04:17:22Z")

</div>

According to https://www.elastic.co/guide/en/beats/packetbeat/master/packetbeat-geoip.html It is trivial to configure the Geo-IP ingestion for an Elasticsearch output, however from the document it is not clear how this …

---

## [Зафильтровать многократно повторяющиеся данные](https://discuss.elastic.co/t/topic/124512)

<div class="topic-metadata">

**Author:** [@11116](https://discuss.elastic.co/u/11116)\
**Replies:** 3\
**Last updated:** [March 20, 2018, 2:58pm UTC](https://discuss.elastic.co/t/topic/124512 "2018-03-20T14:58:07Z")

</div>

Добрый день! У нас в статистике ошибок иногда бывает много запросов с одного IP адреса на один и тот же URL. По сути, записи отличаются только таймстампом. Временами, 99% ошибок это такой запрос, что очень замыливает …

---

## [7 seconds to index document once i get close to 2million documents](https://discuss.elastic.co/t/7-seconds-to-index-document-once-i-get-close-to-2million-documents/122415)

<div class="topic-metadata">

**Author:** [@skydiver](https://discuss.elastic.co/u/skydiver)\
**Replies:** 3\
**Last updated:** [March 4, 2018, 10:47pm UTC](https://discuss.elastic.co/t/7-seconds-to-index-document-once-i-get-close-to-2million-documents/122415 "2018-03-04T22:47:09Z")

</div>

Hi I'm very new to elasticsearch and running as 3 node cluster using docker. I have a large amount of data around 250 million records which is currently stored between xml files and a mysql database and found that elast…

---

## [Quelle architecture pour ElasticSearch](https://discuss.elastic.co/t/quelle-architecture-pour-elasticsearch/109823)

<div class="topic-metadata">

**Author:** [@lfourny](https://discuss.elastic.co/u/lfourny)\
**Replies:** 3\
**Last updated:** [December 12, 2017, 3:29pm UTC](https://discuss.elastic.co/t/quelle-architecture-pour-elasticsearch/109823 "2017-12-12T15:29:53Z")

</div>

Bonjour, Dans le cadre d'un projet Je vais devoir prochainement installer ES. Je suis débutant avec Es bien qu'ayant déja travaillé avec SOLR. ce projet disposera d'une interface web d'interrogation d'ES Ma question c…

---

## [Adding new nodes](https://discuss.elastic.co/t/adding-new-nodes/5155)

<div class="topic-metadata">

**Author:** [@optimusprime](https://discuss.elastic.co/u/optimusprime)\
**Replies:** 3\
**Last updated:** [August 19, 2011, 4:33am UTC](https://discuss.elastic.co/t/adding-new-nodes/5155 "2011-08-19T04:33:40Z")

</div>

I'm not entirely sure how discovery in ES works. Are there resources out there that detail it? How can I dynamically add a new node (on a different physical machine) to an existing cluster. I tried looking at some previo…

---

## [\_node/stats/pipelines API only returns one pipeline stats](https://discuss.elastic.co/t/node-stats-pipelines-api-only-returns-one-pipeline-stats/195283)

<div class="topic-metadata">

**Author:** [@BSsc](https://discuss.elastic.co/u/BSsc)\
**Replies:** 3\
**Last updated:** [August 27, 2019, 4:40am UTC](https://discuss.elastic.co/t/node-stats-pipelines-api-only-returns-one-pipeline-stats/195283 "2019-08-27T04:40:29Z")

</div>

Hi, We've been using this API to monitor the persistent queue health of our multiple pipelines.. we ran through a couple of upgrades from 6.X to 7.3.0, and now this API call only returns stats on one pipeline.. when pre…

---

## [Disable Tutorial pages](https://discuss.elastic.co/t/disable-tutorial-pages/206504)

<div class="topic-metadata">

**Author:** [@ecarmona](https://discuss.elastic.co/u/ecarmona)\
**Replies:** 4\
**Last updated:** [November 11, 2019, 10:20pm UTC](https://discuss.elastic.co/t/disable-tutorial-pages/206504 "2019-11-11T22:20:44Z")

</div>

Dear Kibana Team, Is there a way to disable or hide the tutorial pages? Regards, Erik

---

## [Winlogbeat run as service issues](https://discuss.elastic.co/t/winlogbeat-run-as-service-issues/338029)

<div class="topic-metadata">

**Author:** [@Emorta](https://discuss.elastic.co/u/Emorta)\
**Replies:** 4\
**Last updated:** [July 11, 2023, 10:18am UTC](https://discuss.elastic.co/t/winlogbeat-run-as-service-issues/338029 "2023-07-11T10:18:53Z")

</div>

Hey there, I'm facing a challenge while trying to centralize logging for three servers in Elastic Cloud, and I could really use some help from the community. Here's the issue I'm encountering: When I try to install it …

---

## [Kibana TSVB - Percentage of Samples crossing Threshold Filter Ratio Always Returning 0 for one Index](https://discuss.elastic.co/t/kibana-tsvb-percentage-of-samples-crossing-threshold-filter-ratio-always-returning-0-for-one-index/334988)

<div class="topic-metadata">

**Author:** [@shgpde](https://discuss.elastic.co/u/shgpde)\
**Replies:** 4\
**Last updated:** [June 6, 2023, 10:55am UTC](https://discuss.elastic.co/t/kibana-tsvb-percentage-of-samples-crossing-threshold-filter-ratio-always-returning-0-for-one-index/334988 "2023-06-06T10:55:38Z")

</div>

Hi, First time poster, I'm having difficulty getting the data I want from a Kibana visualisation and I'm hoping for some insight. I'm using Kibana v7.6.1 and have been running into an issue trying to use a Filter Ratio…

---

## [Logstash to output syslog in Snare format](https://discuss.elastic.co/t/logstash-to-output-syslog-in-snare-format/271405)

<div class="topic-metadata">

**Author:** [@Ravi342883](https://discuss.elastic.co/u/Ravi342883)\
**Replies:** 4\
**Last updated:** [May 11, 2021, 5:10pm UTC](https://discuss.elastic.co/t/logstash-to-output-syslog-in-snare-format/271405 "2021-05-11T17:10:58Z")

</div>

Hi All, For a PoC portion, I would like to know whether logstash can output the syslogs in Snare format. Any reference? If anyone has got insights around this, please shed some light here. Thanks, Ravi

---

## [Elastic logging plugin doesn’t work with self-signed certificate](https://discuss.elastic.co/t/elastic-logging-plugin-doesn-t-work-with-self-signed-certificate/268406)

<div class="topic-metadata">

**Author:** [@nvb97](https://discuss.elastic.co/u/nvb97)\
**Replies:** 4\
**Last updated:** [April 13, 2021, 10:05am UTC](https://discuss.elastic.co/t/elastic-logging-plugin-doesn-t-work-with-self-signed-certificate/268406 "2021-04-13T10:05:41Z")

</div>

Hi all, I have installed Elastic Logging Plugin for Docker (v.7.11.1) which should send the data to Elasticsearch where the security is enabled, but the log events from the docker container don’t arrive in elastic index…

---

## [Many extra fields displaying after upgrading to 7.8.0](https://discuss.elastic.co/t/many-extra-fields-displaying-after-upgrading-to-7-8-0/237971)

<div class="topic-metadata">

**Author:** [@Ronin](https://discuss.elastic.co/u/Ronin)\
**Replies:** 4\
**Last updated:** [July 23, 2020, 7:17am UTC](https://discuss.elastic.co/t/many-extra-fields-displaying-after-upgrading-to-7-8-0/237971 "2020-07-23T07:17:22Z")

</div>

After upgrading the full stack to 7.8.0, Kibana now shows numerous fields in a document that it did not before. These are for the filebeat index and all the extra fields are empty. Looking at the json document inside …

---

## [Shard recovery thread count](https://discuss.elastic.co/t/shard-recovery-thread-count/217283)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 4\
**Last updated:** [January 31, 2020, 7:32pm UTC](https://discuss.elastic.co/t/shard-recovery-thread-count/217283 "2020-01-31T19:32:59Z")

</div>

I have noticed in my cluster that there are maximum of 2 recovery tasks running whenever shard relocation happens. Is this a configurable setting? I would like to experiment with more threads moving shards to speed up …

---

## [Multiple Root Element in single line](https://discuss.elastic.co/t/multiple-root-element-in-single-line/212809)

<div class="topic-metadata">

**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\
**Replies:** 4\
**Last updated:** [December 23, 2019, 8:42am UTC](https://discuss.elastic.co/t/multiple-root-element-in-single-line/212809 "2019-12-23T08:42:33Z")

</div>

I need help with splitting multiple root element in single line. My data format like this, b\_rooms\_available\_and\_soldout:\[{"b\_id":123, "b\_blocks":\[{...}\]},{"b\_id":456, "b\_blocks":\[{...}\]}\] My logstash config is, …

---

## [Cannot delete documents with "!" in the \_id](https://discuss.elastic.co/t/cannot-delete-documents-with-in-the-id/201446)

<div class="topic-metadata">

**Author:** [@milleka2](https://discuss.elastic.co/u/milleka2)\
**Replies:** 4\
**Last updated:** [October 4, 2019, 6:09pm UTC](https://discuss.elastic.co/t/cannot-delete-documents-with-in-the-id/201446 "2019-10-04T18:09:49Z")

</div>

I have some records that I'm trying to either update or delete. All of them have an "!" in the \_id field, something I'd have never done if I were here when it was created :slight\_smile: The \_id looks like this: category…

[Previous page](https://discuss.elastic.co/top.md?page=1584&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1586&per_page=50&period=all)
