# Top

**URL:** https://discuss.elastic.co/top.md?page=1612&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1613

---

## [Prediction.io, Universal Recommender and Elasticsearch](https://discuss.elastic.co/t/prediction-io-universal-recommender-and-elasticsearch/55636)

<div class="topic-metadata">

**Author:** [@michal.trmac](https://discuss.elastic.co/u/michal.trmac)\
**Replies:** 0\
**Last updated:** [July 15, 2016, 3:32pm UTC](https://discuss.elastic.co/t/prediction-io-universal-recommender-and-elasticsearch/55636 "2016-07-15T15:32:37Z")

</div>

Hi, we are trying to build recommendation system with Prediction.io based on Universal Recommender template which using Elasticsearch as storage. We have problem with recommendation training performance. It took abou…

---

## [Elasticsearch server could not be reached](https://discuss.elastic.co/t/elasticsearch-server-could-not-be-reached/257937)

<div class="topic-metadata">

**Author:** [@webapps](https://discuss.elastic.co/u/webapps)\
**Replies:** 5\
**Last updated:** [December 9, 2020, 3:57am UTC](https://discuss.elastic.co/t/elasticsearch-server-could-not-be-reached/257937 "2020-12-09T03:57:31Z")

</div>

I just want to integrate external https Elasticsearch server URI with Drupal 8 version. I got an external https Elasticsearch server URI and got the credentials for it. When I’m accessing the https Elasticsearch server …

---

## [Cluster Deployment elastic+kibana via RESTful API in one step?](https://discuss.elastic.co/t/cluster-deployment-elastic-kibana-via-restful-api-in-one-step/181709)

<div class="topic-metadata">

**Author:** [@apaulsen](https://discuss.elastic.co/u/apaulsen)\
**Replies:** 5\
**Last updated:** [May 20, 2019, 2:02pm UTC](https://discuss.elastic.co/t/cluster-deployment-elastic-kibana-via-restful-api-in-one-step/181709 "2019-05-20T14:02:04Z")

</div>

I've created a cluster deployment with kibana. Making that over UI it is done in saving one configuration, which is than "separated" into to two plans (under advanced configuration) for elastic and kibana. I've created…

---

## [How to pass timestamp value into other log file](https://discuss.elastic.co/t/how-to-pass-timestamp-value-into-other-log-file/139122)

<div class="topic-metadata">

**Author:** [@Gokul\_15](https://discuss.elastic.co/u/Gokul_15)\
**Replies:** 5\
**Last updated:** [July 9, 2018, 10:40am UTC](https://discuss.elastic.co/t/how-to-pass-timestamp-value-into-other-log-file/139122 "2018-07-09T10:40:31Z")

</div>

hi am new to elk,how to pass timestamp value into other log file any body suggestions??

---

## [Key names in bucket listing are truncated](https://discuss.elastic.co/t/key-names-in-bucket-listing-are-truncated/63368)

<div class="topic-metadata">

**Author:** [@frederes](https://discuss.elastic.co/u/frederes)\
**Replies:** 5\
**Last updated:** [October 19, 2016, 2:50pm UTC](https://discuss.elastic.co/t/key-names-in-bucket-listing-are-truncated/63368 "2016-10-19T14:50:43Z")

</div>

I have a problem with my aggregation : key names in bucket listing are truncated Example : my key value is MF-18500 and in my response, the bucket key is "MF" so all my sums are wrong (because i have multiple key valu…

---

## [Analyzer Settings for partial and as-is searches](https://discuss.elastic.co/t/analyzer-settings-for-partial-and-as-is-searches/11664)

<div class="topic-metadata">

**Author:** [@Srivatsa\_Katta](https://discuss.elastic.co/u/Srivatsa_Katta)\
**Replies:** 5\
**Last updated:** [May 3, 2013, 12:31pm UTC](https://discuss.elastic.co/t/analyzer-settings-for-partial-and-as-is-searches/11664 "2013-05-03T12:31:45Z")

</div>

Hi, We have the following search scenarios and to achieve these we are using analyzer settings as given below. But with these settings, the disk space for indexing 1gig of data is almost six fold. As in after inde…

---

## [Shard failures after upgrading from 0.18.7 to 0.19.0](https://discuss.elastic.co/t/shard-failures-after-upgrading-from-0-18-7-to-0-19-0/6929)

<div class="topic-metadata">

**Author:** [@Nitish\_Sharma](https://discuss.elastic.co/u/Nitish_Sharma)\
**Replies:** 5\
**Last updated:** [March 20, 2012, 10:43am UTC](https://discuss.elastic.co/t/shard-failures-after-upgrading-from-0-18-7-to-0-19-0/6929 "2012-03-20T10:43:56Z")

</div>

Hi, We have cluster of 3 ES nodes and around 200 million documents (number of shards 10 and number of replicas 2). We did an upgrade from version 0.18.7 to 0.19.0 across the cluster. Following are the steps we follo…

---

## [Since we moved 7.15 "Pushing flush onto pipeline." and files are not parsed](https://discuss.elastic.co/t/since-we-moved-7-15-pushing-flush-onto-pipeline-and-files-are-not-parsed/286605)

<div class="topic-metadata">

**Author:** [@fabeau](https://discuss.elastic.co/u/fabeau)\
**Replies:** 2\
**Last updated:** [October 14, 2021, 9:14am UTC](https://discuss.elastic.co/t/since-we-moved-7-15-pushing-flush-onto-pipeline-and-files-are-not-parsed/286605 "2021-10-14T09:14:30Z")

</div>

We deployed logstash config files on a new server running 7.15 from a 7.11 server working perfectly . We validated .conf files in command line and everything is fine. we parse some log files locally on the server and …

---

## [Access elasticsearch query from Kibana Dashboard](https://discuss.elastic.co/t/access-elasticsearch-query-from-kibana-dashboard/204235)

<div class="topic-metadata">

**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\
**Replies:** 2\
**Last updated:** [October 29, 2019, 8:22am UTC](https://discuss.elastic.co/t/access-elasticsearch-query-from-kibana-dashboard/204235 "2019-10-29T08:22:22Z")

</div>

I have created a plugin created for Kibana 7.3.3 and want to access the elasticsearch query that I need in order to get the same set of data that is shown in my dashboard, including the time range. I found in the docume…

---

## [Query\_stringのスコアの計算をコントロールしたい](https://discuss.elastic.co/t/query-string/133728)

<div class="topic-metadata">

**Author:** [@yn2018](https://discuss.elastic.co/u/yn2018)\
**Replies:** 2\
**Last updated:** [June 18, 2018, 6:07am UTC](https://discuss.elastic.co/t/query-string/133728 "2018-06-18T06:07:03Z")

</div>

全文検索のために以下のようなquery\_stringを使ったクエリがあるとします。 このとき、内部的には検索ワード「渋谷区」と指定したフィールドとの類似度から\_scoreが計算されると思いますが、この\_scoreの計算を無効にしたり、\_scoreを0にしたりすることは可能でしょうか？ 具体的にやりたいこととしては例えば、 addressフィールドに検索ワード「渋谷区」が入っていたらスコアを1与える 得られた結果には\_scoreが…

---

## [Does the multiline codec plugin in Logstash include newline characters in the output string?](https://discuss.elastic.co/t/does-the-multiline-codec-plugin-in-logstash-include-newline-characters-in-the-output-string/119278)

<div class="topic-metadata">

**Author:** [@daved](https://discuss.elastic.co/u/daved)\
**Replies:** 2\
**Last updated:** [February 9, 2018, 9:02pm UTC](https://discuss.elastic.co/t/does-the-multiline-codec-plugin-in-logstash-include-newline-characters-in-the-output-string/119278 "2018-02-09T21:02:35Z")

</div>

I'm wondering if the multiline codec plugin in Logstash includes newlines in the output? I want to use regex on the output and this is important to understand in order to design my regex and have it perform well. Lookin…

---

## [ElasticSearch Nodes go HIGH cpu](https://discuss.elastic.co/t/elasticsearch-nodes-go-high-cpu/91417)

<div class="topic-metadata">

**Author:** [@kscarr73](https://discuss.elastic.co/u/kscarr73)\
**Replies:** 2\
**Last updated:** [July 5, 2017, 8:25pm UTC](https://discuss.elastic.co/t/elasticsearch-nodes-go-high-cpu/91417 "2017-07-05T20:25:19Z")

</div>

We are having a really strange problem with our ElasticSearch cluster. Every couple of days or so, a node in our 4 node cluster goes high cpu, with a ton of reads. We have checked the tasks page, and it doesn't appe…

---

## [Problem with metricbeat and xpack](https://discuss.elastic.co/t/problem-with-metricbeat-and-xpack/77855)

<div class="topic-metadata">

**Author:** [@olorasde](https://discuss.elastic.co/u/olorasde)\
**Replies:** 2\
**Last updated:** [March 16, 2017, 2:23pm UTC](https://discuss.elastic.co/t/problem-with-metricbeat-and-xpack/77855 "2017-03-16T14:23:03Z")

</div>

I have the following problem, after installing X-pack, I would like my metricbeat agents that I have collecting data from other servers can send these to the EL cluster that I have mounted. The installation of X-pack t…

---

## [Reference time picker in timelion query](https://discuss.elastic.co/t/reference-time-picker-in-timelion-query/66750)

<div class="topic-metadata">

**Author:** [@ndev](https://discuss.elastic.co/u/ndev)\
**Replies:** 2\
**Last updated:** [November 22, 2016, 3:25pm UTC](https://discuss.elastic.co/t/reference-time-picker-in-timelion-query/66750 "2016-11-22T15:25:42Z")

</div>

I have a query that shows the cumulative number of items created in a given period of time. It uses the startTime and endTime as the timefields. The problem is, I want to filter out all of the endTimes which do not have …

---

## [Do plugins get upgraded along side Logstash?](https://discuss.elastic.co/t/do-plugins-get-upgraded-along-side-logstash/52924)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 2\
**Last updated:** [August 2, 2016, 11:15pm UTC](https://discuss.elastic.co/t/do-plugins-get-upgraded-along-side-logstash/52924 "2016-08-02T23:15:14Z")

</div>

A couple weeks ago my indexer was going nuts. Eventually I fixed it by manually upgrading the plugins. Which confuses me because I would think Logstash core plugins would get upgraded at the same time as the main progra…

---

## [Map works in k 3 but not on k4](https://discuss.elastic.co/t/map-works-in-k-3-but-not-on-k4/38178)

<div class="topic-metadata">

**Author:** [@tejus](https://discuss.elastic.co/u/tejus)\
**Replies:** 2\
**Last updated:** [January 31, 2016, 5:07pm UTC](https://discuss.elastic.co/t/map-works-in-k-3-but-not-on-k4/38178 "2016-01-31T17:07:06Z")

</div>

We had the data on ES and visualization on Kibana 3 where the map was working. The same data is loaded on ES 2.1 and when we are trying to visualize it on kibana 4 the tile map is not working. Its plotting the coordin…

---

## [Hostname.raw appears twice in split chart](https://discuss.elastic.co/t/hostname-raw-appears-twice-in-split-chart/40481)

<div class="topic-metadata">

**Author:** [@nielsk](https://discuss.elastic.co/u/nielsk)\
**Replies:** 2\
**Last updated:** [January 29, 2016, 4:37pm UTC](https://discuss.elastic.co/t/hostname-raw-appears-twice-in-split-chart/40481 "2016-01-29T16:37:02Z")

</div>

I am creating a couple of bar-charts from Logstash-data and I do a split chart to differentiate a couple of servers. I do that by using a sub aggregation "Terms" and use the field hostname.raw. Now I see for several serv…

---

## [Time lag between Index creation and Index availability](https://discuss.elastic.co/t/time-lag-between-index-creation-and-index-availability/33724)

<div class="topic-metadata">

**Author:** [@srkhanzode](https://discuss.elastic.co/u/srkhanzode)\
**Replies:** 2\
**Last updated:** [November 4, 2015, 1:59pm UTC](https://discuss.elastic.co/t/time-lag-between-index-creation-and-index-availability/33724 "2015-11-04T13:59:21Z")

</div>

Hi, We recently encountered issues for the following scenario: On a standard 3-node cluster, we create a typical index with 4/5 mappings (each mapping with ~10-15 fields and some custom analyzers). Immediately after th…

---

## [Subaggregation from scripted field](https://discuss.elastic.co/t/subaggregation-from-scripted-field/26499)

<div class="topic-metadata">

**Author:** [@carlos](https://discuss.elastic.co/u/carlos)\
**Replies:** 2\
**Last updated:** [August 3, 2015, 8:12am UTC](https://discuss.elastic.co/t/subaggregation-from-scripted-field/26499 "2015-08-03T08:12:32Z")

</div>

Hi, I posted the same question at SO but I thought I may have better luck here \[smile\] For simplicity, let's say I have two fields: TRIP\_START\_DATE (in date format) and TRIP\_NIGHTS. I can run a simple aggregation…

---

## [Highlighting is not working](https://discuss.elastic.co/t/highlighting-is-not-working/20955)

<div class="topic-metadata">

**Author:** [@Deepak\_Mehta](https://discuss.elastic.co/u/Deepak_Mehta)\
**Replies:** 2\
**Last updated:** [November 27, 2014, 5:47am UTC](https://discuss.elastic.co/t/highlighting-is-not-working/20955 "2014-11-27T05:47:29Z")

</div>

I am using Elastic Search 1.3.5. I have fields like filename, foldername and content. In query I am trying to highlight matched content. In Query if keyword only matches in content then keyword is highlighted a…

---

## [I dont see apm agent logs in my spring boot application logs](https://discuss.elastic.co/t/i-dont-see-apm-agent-logs-in-my-spring-boot-application-logs/218591)

<div class="topic-metadata">

**Author:** [@kumar\_kung](https://discuss.elastic.co/u/kumar_kung)\
**Replies:** 1\
**Last updated:** [February 10, 2020, 2:09pm UTC](https://discuss.elastic.co/t/i-dont-see-apm-agent-logs-in-my-spring-boot-application-logs/218591 "2020-02-10T14:09:01Z")

</div>

Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: 7.5.2 APM Agent language and version: java Original install method (e.g. download page, yum, deb, from source, etc.) and version: eck operator 1.…

---

## [Создание индекса в logstash](https://discuss.elastic.co/t/logstash/217344)

<div class="topic-metadata">

**Author:** [@es7x](https://discuss.elastic.co/u/es7x)\
**Replies:** 1\
**Last updated:** [January 31, 2020, 2:54pm UTC](https://discuss.elastic.co/t/logstash/217344 "2020-01-31T14:54:58Z")

</div>

Собственно вопрос, при отправке индекса из логстеша в ELK ELK version 7.5.2 При такой записи создается индекс logstash-2020.01.31-000001 index =\> "logstash-%{+YYYY.MM.dd}" а при такой journalbeat-7.5.2-2020.01.31 …

---

## [Filebeat 6.5.X - massive memory usage](https://discuss.elastic.co/t/filebeat-6-5-x-massive-memory-usage/212508)

<div class="topic-metadata">

**Author:** [@urvi](https://discuss.elastic.co/u/urvi)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 5:51pm UTC](https://discuss.elastic.co/t/filebeat-6-5-x-massive-memory-usage/212508 "2019-12-19T17:51:04Z")

</div>

Hi team, I am using filebeat version 6.5.X. I have observed memory used by filebeat keep on increasing. memstat shows memory usage as below : "memstats":{"gc\_next":11992835024,"memory\_alloc":6185623680,"memory\_total":…

---

## [Kibana Searches Using CSV file](https://discuss.elastic.co/t/kibana-searches-using-csv-file/198171)

<div class="topic-metadata">

**Author:** [@HmadQureshi](https://discuss.elastic.co/u/HmadQureshi)\
**Replies:** 1\
**Last updated:** [September 5, 2019, 7:58pm UTC](https://discuss.elastic.co/t/kibana-searches-using-csv-file/198171 "2019-09-05T19:58:17Z")

</div>

I want to search my data populated in ELK(Windows logs) against the contents of a csv file. I have a large data of windows event logs that i want to search for Malware IoCs IPs, exes which are stored in a csv file. How…

---

## [Match multiple searchs in single watcher](https://discuss.elastic.co/t/match-multiple-searchs-in-single-watcher/133931)

<div class="topic-metadata">

**Author:** [@Chaitra\_Ranganna](https://discuss.elastic.co/u/Chaitra_Ranganna)\
**Replies:** 1\
**Last updated:** [May 31, 2018, 1:03am UTC](https://discuss.elastic.co/t/match-multiple-searchs-in-single-watcher/133931 "2018-05-31T01:03:39Z")

</div>

Hi I have requirement where I need to match multiple patterns from the same the index and raise a alert for each pattern. For example Index "test\*" contains below data for field text text: cluster is unavailable or mi…

---

## [Filtered index alias not working](https://discuss.elastic.co/t/filtered-index-alias-not-working/116244)

<div class="topic-metadata">

**Author:** [@mheck](https://discuss.elastic.co/u/mheck)\
**Replies:** 1\
**Last updated:** [January 19, 2018, 3:17pm UTC](https://discuss.elastic.co/t/filtered-index-alias-not-working/116244 "2018-01-19T15:17:07Z")

</div>

I want to use an Index alias with a filter to have an index which only contains documents with a certain property set to a specific value. I added the following filter: { "filebeat-2018.01": { "aliases": { …

---

## [Metricbeat setup dashboards fails](https://discuss.elastic.co/t/metricbeat-setup-dashboards-fails/115864)

<div class="topic-metadata">

**Author:** [@jamesliu\_london](https://discuss.elastic.co/u/jamesliu_london)\
**Replies:** 1\
**Last updated:** [January 17, 2018, 11:37am UTC](https://discuss.elastic.co/t/metricbeat-setup-dashboards-fails/115864 "2018-01-17T11:37:34Z")

</div>

kibana 5.0.3 metricbeat6.0.1 metricbeat setup --dashboards INFO Kibana url: http://:5601 2018-01-17T10:27:56Z CRIT Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana c…

---

## [Exported fields in filebeat processors](https://discuss.elastic.co/t/exported-fields-in-filebeat-processors/74815)

<div class="topic-metadata">

**Author:** [@John16](https://discuss.elastic.co/u/John16)\
**Replies:** 1\
**Last updated:** [February 13, 2017, 10:41am UTC](https://discuss.elastic.co/t/exported-fields-in-filebeat-processors/74815 "2017-02-13T10:41:29Z")

</div>

Hello, Documentation about filebeat's processors https://www.elastic.co/guide/en/beats/filebeat/current/configuration-processors.html references fields like http.response.code, etc: equals: http.response.code:…

---

## [Rally report - what does "Totally Written" mean?](https://discuss.elastic.co/t/rally-report-what-does-totally-written-mean/54308)

<div class="topic-metadata">

**Author:** [@eugene\_miretsky](https://discuss.elastic.co/u/eugene_miretsky)\
**Replies:** 1\
**Last updated:** [July 5, 2016, 6:20am UTC](https://discuss.elastic.co/t/rally-report-what-does-totally-written-mean/54308 "2016-07-05T06:20:36Z")

</div>

Rally outputs Index Size, and Totally Writen. For the Geonames benchmark it gives Index size \[GB\] | 3.31185 Totally written \[GB\] | 21.1952 What exactly is Totally written?

---

## [Apache.log example](https://discuss.elastic.co/t/apache-log-example/41960)

<div class="topic-metadata">

**Author:** [@w0lverine](https://discuss.elastic.co/u/w0lverine)\
**Replies:** 1\
**Last updated:** [February 17, 2016, 4:45am UTC](https://discuss.elastic.co/t/apache-log-example/41960 "2016-02-17T04:45:55Z")

</div>

I am trying to have logstash parse through the apache log example. I have randomly succeeded in creating a logstash-$DATE stamp with the example "here and there" and when I do get the logstash-$DATE index it says “no su…

---

## [Twitter river proxy settings?](https://discuss.elastic.co/t/twitter-river-proxy-settings/7163)

<div class="topic-metadata">

**Author:** [@kodo65](https://discuss.elastic.co/u/kodo65)\
**Replies:** 7\
**Last updated:** [October 1, 2014, 2:03pm UTC](https://discuss.elastic.co/t/twitter-river-proxy-settings/7163 "2014-10-01T14:03:51Z")

</div>

Hi! I've setup a twitter river in my v0.19 of elasticsearch but I believe I'm experiencing problems with our corporate proxy. I need to be able to specify the proxy host/port settings. Where/how do I do that? Che…

---

## [Error for /bin/elasticsearch -f](https://discuss.elastic.co/t/error-for-bin-elasticsearch-f/3217)

<div class="topic-metadata">

**Author:** [@Ted\_Karmel](https://discuss.elastic.co/u/Ted_Karmel)\
**Replies:** 7\
**Last updated:** [August 16, 2010, 6:49am UTC](https://discuss.elastic.co/t/error-for-bin-elasticsearch-f/3217 "2010-08-16T06:49:00Z")

</div>

Hello, I've downloaded and unzipped the source for elastic search onto Ubuntu Karmic 9.10. But, when I try to run : bin/elasticsearch -f I get the following error: Exception in thread "main" java.lang.NoCla…

---

## [How to deal with duplicate data](https://discuss.elastic.co/t/how-to-deal-with-duplicate-data/375229)

<div class="topic-metadata">

**Author:** [@ksobon](https://discuss.elastic.co/u/ksobon)\
**Replies:** 6\
**Last updated:** [March 31, 2025, 2:24pm UTC](https://discuss.elastic.co/t/how-to-deal-with-duplicate-data/375229 "2025-03-31T14:24:17Z")

</div>

I have a Filebeat pipeline that is ingesting data from an end-user machine that might be stored there for 30 days. My Logstash pipeline has the following settings: document\_id =\> "%{\[@metadata\]\[newId\]}" action =\> "creat…

---

## [Synthetic monitor data to specific indices](https://discuss.elastic.co/t/synthetic-monitor-data-to-specific-indices/299055)

<div class="topic-metadata">

**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\
**Replies:** 6\
**Last updated:** [March 10, 2022, 11:37am UTC](https://discuss.elastic.co/t/synthetic-monitor-data-to-specific-indices/299055 "2022-03-10T11:37:38Z")

</div>

Hi, Is it possible to redirect data of synthetic monitoring agent to a specific index? elk 8 thanks

---

## [Map not showing correctly in Uptime UI](https://discuss.elastic.co/t/map-not-showing-correctly-in-uptime-ui/273332)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 6\
**Last updated:** [May 19, 2021, 4:07pm UTC](https://discuss.elastic.co/t/map-not-showing-correctly-in-uptime-ui/273332 "2021-05-19T16:07:21Z")

</div>

Hey I successfully configured heartbeat 7.12.0 with my elastic stack 7.12.0, I have 2 nodes to monitor, I configured the geo processor to be able to visualize my VMs on a map, the problem is that the map isn't shown prop…

---

## [Deleting index after a period but keeping part of it](https://discuss.elastic.co/t/deleting-index-after-a-period-but-keeping-part-of-it/188183)

<div class="topic-metadata">

**Author:** [@kmohd](https://discuss.elastic.co/u/kmohd)\
**Replies:** 6\
**Last updated:** [July 1, 2019, 3:19pm UTC](https://discuss.elastic.co/t/deleting-index-after-a-period-but-keeping-part-of-it/188183 "2019-07-01T15:19:56Z")

</div>

Hello everyone, is there a way to delete the whole index to clear space after 10 days, however, i would like to keep a part of the index like for example in an allow/deny field from FW logs, is there a way to keep those …

---

## [Kibana - dashboard only mode - new space](https://discuss.elastic.co/t/kibana-dashboard-only-mode-new-space/163706)

<div class="topic-metadata">

**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\
**Replies:** 6\
**Last updated:** [January 10, 2019, 3:05pm UTC](https://discuss.elastic.co/t/kibana-dashboard-only-mode-new-space/163706 "2019-01-10T15:05:21Z")

</div>

Hello, I created some spaces and I want to define privileges for all users. I follow these steps (https://github.com/elastic/kibana/issues/25701), however, when I access my user with permission to only see the "Dashboar…

---

## [Performance degrading after a couple of weeks](https://discuss.elastic.co/t/performance-degrading-after-a-couple-of-weeks/150241)

<div class="topic-metadata">

**Author:** [@S\_Chase](https://discuss.elastic.co/u/S_Chase)\
**Replies:** 6\
**Last updated:** [October 2, 2018, 4:43pm UTC](https://discuss.elastic.co/t/performance-degrading-after-a-couple-of-weeks/150241 "2018-10-02T16:43:58Z")

</div>

on ES 6.4: I'm finding that over the course of 20 days Elastic Stack grinds to a very slow crawl. JVM heap gets to 99.9% and nearly everything times out. if I close indexes over the previous couple of weeks JVM moves …

---

## [Guidance on filtering in the logstash.conf file](https://discuss.elastic.co/t/guidance-on-filtering-in-the-logstash-conf-file/121250)

<div class="topic-metadata">

**Author:** [@nlh](https://discuss.elastic.co/u/nlh)\
**Replies:** 6\
**Last updated:** [March 2, 2018, 2:36pm UTC](https://discuss.elastic.co/t/guidance-on-filtering-in-the-logstash-conf-file/121250 "2018-03-02T14:36:19Z")

</div>

Hi, I've spent a couple of days looking at filtering and probably just cannot get the basic nuances for what I want to do to make it work. Basic set up. I have an auditbeat running on a linux server sending over to logs…

---

## [Parent/Child: Find children based on parent properties](https://discuss.elastic.co/t/parent-child-find-children-based-on-parent-properties/8257)

<div class="topic-metadata">

**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\
**Replies:** 6\
**Last updated:** [July 4, 2012, 6:38pm UTC](https://discuss.elastic.co/t/parent-child-find-children-based-on-parent-properties/8257 "2012-07-04T18:38:22Z")

</div>

Hi guys. With a parent/child mapping, is there a way to search for children whose parents have certain property values? For example, in the curl test in this gist, messages belong to users. How can I find all mess…

---

## [Docker.network\_summary does not take hostfs into account](https://discuss.elastic.co/t/docker-network-summary-does-not-take-hostfs-into-account/290677)

<div class="topic-metadata">

**Author:** [@Julero](https://discuss.elastic.co/u/Julero)\
**Replies:** 3\
**Last updated:** [December 7, 2021, 9:22am UTC](https://discuss.elastic.co/t/docker-network-summary-does-not-take-hostfs-into-account/290677 "2021-12-07T09:22:32Z")

</div>

When using docker.network\_summary, I have the following error: 2021-12-01T13:56:00.159Z INFO module/wrapper.go:266 Error fetching data for metricset docker.network\_summary: error fetching namespace for PID 4…

---

## [Active Directory user authentication](https://discuss.elastic.co/t/active-directory-user-authentication/265053)

<div class="topic-metadata">

**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\
**Replies:** 3\
**Last updated:** [February 22, 2021, 11:31pm UTC](https://discuss.elastic.co/t/active-directory-user-authentication/265053 "2021-02-22T23:31:21Z")

</div>

Hi, we need to use Elasticsearch authentication for our users in DC (Active Directory). Due to the instructs in link below: https://www.elastic.co/guide/en/elasticsearch/reference/7.11/active-directory-realm.html I a…

---

## [Kibana Error: Cannot throw non-error object](https://discuss.elastic.co/t/kibana-error-cannot-throw-non-error-object/220700)

<div class="topic-metadata">

**Author:** [@4mich](https://discuss.elastic.co/u/4mich)\
**Replies:** 3\
**Last updated:** [February 26, 2020, 3:35pm UTC](https://discuss.elastic.co/t/kibana-error-cannot-throw-non-error-object/220700 "2020-02-26T15:35:56Z")

</div>

The same issue. Installed Elastic and KIbana 7.5.1 Ubuntu 16.04 Often receive error messag in dev tools: { "statusCode": 500, "error": "Internal Server Error", "message": "An internal server error occurred" } It can b…

---

## [How to exhibit last record for each different possibility in a field?](https://discuss.elastic.co/t/how-to-exhibit-last-record-for-each-different-possibility-in-a-field/213987)

<div class="topic-metadata">

**Author:** [@b3owu1f](https://discuss.elastic.co/u/b3owu1f)\
**Replies:** 3\
**Last updated:** [January 10, 2020, 4:42pm UTC](https://discuss.elastic.co/t/how-to-exhibit-last-record-for-each-different-possibility-in-a-field/213987 "2020-01-10T16:42:23Z")

</div>

Greetings, I need help to find a way to exhibit the following type of data, filtering Locomotive id field to not repeat, showing only the last available record for each different Locomotive id in a given period of time. …

---

## [How to read log files using Logstash , where my logs are generated using bunyan/winston in node in the following format ? I am getting this error](https://discuss.elastic.co/t/how-to-read-log-files-using-logstash-where-my-logs-are-generated-using-bunyan-winston-in-node-in-the-following-format-i-am-getting-this-error/187996)

<div class="topic-metadata">

**Author:** [@akshatBais](https://discuss.elastic.co/u/akshatBais)\
**Replies:** 3\
**Last updated:** [July 1, 2019, 12:40pm UTC](https://discuss.elastic.co/t/how-to-read-log-files-using-logstash-where-my-logs-are-generated-using-bunyan-winston-in-node-in-the-following-format-i-am-getting-this-error/187996 "2019-07-01T12:40:22Z")

</div>

LOGS TO BE READ BY LOGSTASH IN THE FOLLOWING FORMAT in a log file: {"name":"portal-api","hostname":"vid","pid":10348,"level":30,"msg":"Start fetching","time":"2019-06-28T07:19:49.364Z","v":0} {"name":"portal-api","host…

---

## [Unable to Load Kibana objects (Failed to parse)](https://discuss.elastic.co/t/unable-to-load-kibana-objects-failed-to-parse/161520)

<div class="topic-metadata">

**Author:** [@jcalonso](https://discuss.elastic.co/u/jcalonso)\
**Replies:** 3\
**Last updated:** [December 19, 2018, 5:10pm UTC](https://discuss.elastic.co/t/unable-to-load-kibana-objects-failed-to-parse/161520 "2018-12-19T17:10:17Z")

</div>

Hello, I'm trying to setup APN from Kibana. I have the APN server communicating with Elastic and My app sending metrics. In the last step "Load Kibana Objects" I get the following error: Unable to add 1 of 16 kibana obj…

---

## [How to remove fields from response](https://discuss.elastic.co/t/how-to-remove-fields-from-response/122518)

<div class="topic-metadata">

**Author:** [@pazikkamil](https://discuss.elastic.co/u/pazikkamil)\
**Replies:** 3\
**Last updated:** [March 5, 2018, 4:31pm UTC](https://discuss.elastic.co/t/how-to-remove-fields-from-response/122518 "2018-03-05T16:31:46Z")

</div>

search\_month = model.search().query(q\_objects) search\_month.aggs.bucket( source\_month, 'date\_histogram', field='date', interval=date\_ranges\[source\_month\].interval, ) response\_month = search\_month.exec…

---

## [Bug on date when a response is added](https://discuss.elastic.co/t/bug-on-date-when-a-response-is-added/80782)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [March 31, 2017, 7:51am UTC](https://discuss.elastic.co/t/bug-on-date-when-a-response-is-added/80782 "2017-03-31T07:51:22Z")

</div>

I just answered to https://discuss.elastic.co/t/how-to-get-s3-repository-working-with-aws-instance-profile/80380 and I saw that: If I refresh the page, everything is correct: It's a really non significant bug IMO b…

---

## [New logstash 5.x does not support \`-server\` flag for JVM?](https://discuss.elastic.co/t/new-logstash-5-x-does-not-support-server-flag-for-jvm/74432)

<div class="topic-metadata">

**Author:** [@DravenJohnson](https://discuss.elastic.co/u/DravenJohnson)\
**Replies:** 3\
**Last updated:** [February 8, 2017, 9:48pm UTC](https://discuss.elastic.co/t/new-logstash-5-x-does-not-support-server-flag-for-jvm/74432 "2017-02-08T21:48:45Z")

</div>

We used to use -server flag to get better performance to logstash JVM server. Seem like this option no longer valid? We tried to set -server flag in jvm.option or startup.option, or both. None of those setting trigger…

---

## [On using EMC Isilon](https://discuss.elastic.co/t/on-using-emc-isilon/59676)

<div class="topic-metadata">

**Author:** [@Gautam\_S\_Thakur](https://discuss.elastic.co/u/Gautam_S_Thakur)\
**Replies:** 0\
**Last updated:** [September 2, 2016, 3:03pm UTC](https://discuss.elastic.co/t/on-using-emc-isilon/59676 "2016-09-02T15:03:39Z")

</div>

Currently, we have a cluster of Dell R730x servers and DAS SSDs to each server. We are considering to buy EMC Isilon 4-6 node cluster to satisfy our storage needs. However, we are debating whether to add more SSDs, buy …

[Previous page](https://discuss.elastic.co/top.md?page=1611&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1613&per_page=50&period=all)
