# Top **URL:** https://discuss.elastic.co/top.md?page=1626&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1627 --- ## [Elastic Search 5.2.2 and X-Pack 5.2.2, xpack.monitoring](https://discuss.elastic.co/t/elastic-search-5-2-2-and-x-pack-5-2-2-xpack-monitoring/99903)
**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\ **Replies:** 4\ **Last updated:** [September 8, 2017, 11:07pm UTC](https://discuss.elastic.co/t/elastic-search-5-2-2-and-x-pack-5-2-2-xpack-monitoring/99903 "2017-09-08T23:07:40Z")
Hi, I am using Elastic Search 5.2.2, Kibana 5.2.2 and X-Pack 5.2.2 (I referred: https://www.elastic.co/guide/en/x-pack/5.2/monitoring-settings.html) I have main Elastic-Search-Cluster and different Monitori… --- ## [Tagging Patterns of data into a field](https://discuss.elastic.co/t/tagging-patterns-of-data-into-a-field/96164)
**Author:** [@Drift](https://discuss.elastic.co/u/Drift)\ **Replies:** 4\ **Last updated:** [August 9, 2017, 2:19am UTC](https://discuss.elastic.co/t/tagging-patterns-of-data-into-a-field/96164 "2017-08-09T02:19:32Z")
Hi, I have a data set which has a field that contain different values like: FieldA : AAAA-REL FieldA : AAAA-DEV FieldA : BBBB-REL FieldA : DDDD-REL FieldA : BBBB-DEV … and so on I want to tag or categorize these … --- ## [Error in sharing kibana 5 dashboard](https://discuss.elastic.co/t/error-in-sharing-kibana-5-dashboard/85326)
**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\ **Replies:** 4\ **Last updated:** [May 21, 2017, 2:39am UTC](https://discuss.elastic.co/t/error-in-sharing-kibana-5-dashboard/85326 "2017-05-21T02:39:41Z")
I am unable to share my kibana 5 dashboard.i generated the short url but that was applicable only for snapshot.So I copied the whole url and I get the error message localhost refuses to connect Can someone help me on t… --- ## [Exist не находит документы с nested полем](https://discuss.elastic.co/t/exist-nested/81323)
**Author:** [@klara\_gogi](https://discuss.elastic.co/u/klara_gogi)\ **Replies:** 4\ **Last updated:** [April 6, 2017, 12:43pm UTC](https://discuss.elastic.co/t/exist-nested/81323 "2017-04-06T12:43:59Z")
Мой маппинг: { "city": { "mappings": { "nms": { "properties": { "post": { "type": "long" }, "area": { "type… --- ## [JVM consumed is too big when compared to actual data](https://discuss.elastic.co/t/jvm-consumed-is-too-big-when-compared-to-actual-data/39641)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 4\ **Last updated:** [January 21, 2016, 10:55am UTC](https://discuss.elastic.co/t/jvm-consumed-is-too-big-when-compared-to-actual-data/39641 "2016-01-21T10:55:27Z")
Hi All, we are doing performance testing and I am facing a peculiar issue. My cluster has around 8M docs and total store size is 2.7G. We performed testing by simulating 50 concurrent virtual users. When i look into … --- ## [Slick ElasticSearch UI](https://discuss.elastic.co/t/slick-elasticsearch-ui/10116)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 4\ **Last updated:** [December 21, 2012, 6:48am UTC](https://discuss.elastic.co/t/slick-elasticsearch-ui/10116 "2012-12-21T06:48:39Z")
Hi, Are there any good lookin' ElasticSearch front ends/UIs available or being worked on? I found a couple, but they were all kind of rough/alpha looking. Jörg, I know you've got something git stashed that you q… --- ## [Facet term vs Facet label](https://discuss.elastic.co/t/facet-term-vs-facet-label/6360)
**Author:** [@David\_Stendardi](https://discuss.elastic.co/u/David_Stendardi)\ **Replies:** 4\ **Last updated:** [August 10, 2012, 1:54pm UTC](https://discuss.elastic.co/t/facet-term-vs-facet-label/6360 "2012-08-10T13:54:42Z")
Hi guys, Would like to know if someone here share the same need : When using terms facets, we need a display field different from the term that is processed. For example with the following document: { categ… --- ## [ElasticSearch array query (multiselect)](https://discuss.elastic.co/t/elasticsearch-array-query-multiselect/8218)
**Author:** [@coys](https://discuss.elastic.co/u/coys)\ **Replies:** 4\ **Last updated:** [June 26, 2012, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-array-query-multiselect/8218 "2012-06-26T15:27:06Z")
Hello, I have a multi-select listbox e.g. Region - \["A","B","D"\] (3 selections out of 6) which is populated from an array entry in elasticsearch \["A","B",C","D","E","F"\]. If I do search for e.g. only on A elasticsearc… --- ## [Need a way to check if field is null](https://discuss.elastic.co/t/need-a-way-to-check-if-field-is-null/362636)
**Author:** [@mg77345](https://discuss.elastic.co/u/mg77345)\ **Replies:** 2\ **Last updated:** [August 1, 2024, 9:00pm UTC](https://discuss.elastic.co/t/need-a-way-to-check-if-field-is-null/362636 "2024-08-01T21:00:56Z")
New to elasticsearch. I'm trying to re-index old data into a new index to push it through an updated ingest pipeline. This includes data that's already been through that pipeline, which i want to add to the new index to… --- ## [How do I add a custom dashboard with charts for latency, throughput, and transaction failure rate in APM Service?](https://discuss.elastic.co/t/how-do-i-add-a-custom-dashboard-with-charts-for-latency-throughput-and-transaction-failure-rate-in-apm-service/349635)
**Author:** [@Mang-Joo](https://discuss.elastic.co/u/Mang-Joo)\ **Replies:** 2\ **Last updated:** [December 20, 2023, 6:38am UTC](https://discuss.elastic.co/t/how-do-i-add-a-custom-dashboard-with-charts-for-latency-throughput-and-transaction-failure-rate-in-apm-service/349635 "2023-12-20T06:38:58Z")
Hello People. The version of elk stack is 8.8.0 I want to clone chart in apm service overview (Latency, Throughput, Failed transaction rate and Time spent by span type) Is there a way to add these metrics in a custom … --- ## [Logstash open file descriptors only increases](https://discuss.elastic.co/t/logstash-open-file-descriptors-only-increases/285571)
**Author:** [@N1k-3l](https://discuss.elastic.co/u/N1k-3l)\ **Replies:** 2\ **Last updated:** [October 15, 2021, 5:58pm UTC](https://discuss.elastic.co/t/logstash-open-file-descriptors-only-increases/285571 "2021-10-15T17:58:09Z")
Hello. I have a problem with logstash (logstash 7.12.1) file descriptors only increases. I set limits to 50000, but on another host, with the same config i have: may be somebody knows about this? :blush: --- ## [ML node restart, job recovery](https://discuss.elastic.co/t/ml-node-restart-job-recovery/240441)
**Author:** [@saraKM](https://discuss.elastic.co/u/saraKM)\ **Replies:** 2\ **Last updated:** [July 10, 2020, 1:14am UTC](https://discuss.elastic.co/t/ml-node-restart-job-recovery/240441 "2020-07-10T01:14:00Z")
Hi If all available ML nodes are incidentally restarted and all running jobs go into an open/stopped mode, what would be the recommended way to resume all jobs? I've been able to start the datafeed manually for each sto… --- ## [Harvester doesn't start when filebeat started as windows service](https://discuss.elastic.co/t/harvester-doesnt-start-when-filebeat-started-as-windows-service/222683)
**Author:** [@Gauthier\_Le\_Moulec](https://discuss.elastic.co/u/Gauthier_Le_Moulec)\ **Replies:** 2\ **Last updated:** [March 9, 2020, 10:44am UTC](https://discuss.elastic.co/t/harvester-doesnt-start-when-filebeat-started-as-windows-service/222683 "2020-03-09T10:44:09Z")
Hey, I'm using filebeat to connect to Logstash... (and I work on windows 10) I have no problem running filebeat from the shell launching the single command "filebeat -e" but when I try to launch it as a windows service … --- ## [Running Metricbeat in Docker on ECS, want to monitor the other Docker images also running on the same cluster](https://discuss.elastic.co/t/running-metricbeat-in-docker-on-ecs-want-to-monitor-the-other-docker-images-also-running-on-the-same-cluster/167369)
**Author:** [@ppafford](https://discuss.elastic.co/u/ppafford)\ **Replies:** 2\ **Last updated:** [February 8, 2019, 11:08am UTC](https://discuss.elastic.co/t/running-metricbeat-in-docker-on-ecs-want-to-monitor-the-other-docker-images-also-running-on-the-same-cluster/167369 "2019-02-08T11:08:54Z")
the goal: Try to monitor other docker containers on ECS cluster info: metricbeats is also running in docker on the same ECS cluster metricbeat.config.modules: path: ${path.config}/conf.d/\*.yml reload.period: 10s … --- ## [Create indices which span multiple spaces in Kibana 6.5.1](https://discuss.elastic.co/t/create-indices-which-span-multiple-spaces-in-kibana-6-5-1/159376)
**Author:** [@Wietse](https://discuss.elastic.co/u/Wietse)\ **Replies:** 2\ **Last updated:** [December 4, 2018, 5:04pm UTC](https://discuss.elastic.co/t/create-indices-which-span-multiple-spaces-in-kibana-6-5-1/159376 "2018-12-04T17:04:24Z")
Hi, Is it possible to have the indices in Elasticsearch 6.5.1 be available in all spaces in Kibana 6.5.1 by default? I want a master space where all users except admins can create dashboards with core KPI graphs, but I… --- ## [Importing CSV data via metricbeat](https://discuss.elastic.co/t/importing-csv-data-via-metricbeat/147913)
**Author:** [@sribalaji\_dac](https://discuss.elastic.co/u/sribalaji_dac)\ **Replies:** 2\ **Last updated:** [September 10, 2018, 10:05am UTC](https://discuss.elastic.co/t/importing-csv-data-via-metricbeat/147913 "2018-09-10T10:05:47Z")
Is there a way to import CSV output from an api(http) call using metricbeat ? --- ## [Java 9 Dependency](https://discuss.elastic.co/t/java-9-dependency/135214)
**Author:** [@albendz](https://discuss.elastic.co/u/albendz)\ **Replies:** 2\ **Last updated:** [June 12, 2018, 6:30am UTC](https://discuss.elastic.co/t/java-9-dependency/135214 "2018-06-12T06:30:19Z")
I am trying to set up my development environment to contribute to Elasticsearch. I have forked the repo, cloned it to my machine, and have run the 'idea' target with gradle. When I run './gradlew clean build' I see this … --- ## [IF with Mutate Filter](https://discuss.elastic.co/t/if-with-mutate-filter/124386)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [March 17, 2018, 5:51am UTC](https://discuss.elastic.co/t/if-with-mutate-filter/124386 "2018-03-17T05:51:44Z")
I have a couple fields that will come in one of two values, r or s. I'd like to convert them to Relaxed or Strict as they come, but there may be instances where the field has no value. Is there a more efficient way tha… --- ## [Winlogbeat SSL Server auth only](https://discuss.elastic.co/t/winlogbeat-ssl-server-auth-only/120066)
**Author:** [@albbapm](https://discuss.elastic.co/u/albbapm)\ **Replies:** 2\ **Last updated:** [February 15, 2018, 9:00pm UTC](https://discuss.elastic.co/t/winlogbeat-ssl-server-auth-only/120066 "2018-02-15T21:00:33Z")
I have successfully implemented mutual authentication between winlogbeat and logstash. However, due to the logistics of exporting certificates to all windows machines that will be sending logs, I would like to set up s… --- ## [Can filebeat alert if the log file is not updated or no fresh logs?](https://discuss.elastic.co/t/can-filebeat-alert-if-the-log-file-is-not-updated-or-no-fresh-logs/117928)
**Author:** [@Vedi](https://discuss.elastic.co/u/Vedi)\ **Replies:** 2\ **Last updated:** [February 1, 2018, 3:18pm UTC](https://discuss.elastic.co/t/can-filebeat-alert-if-the-log-file-is-not-updated-or-no-fresh-logs/117928 "2018-02-01T15:18:11Z")
If there are no fresh logs, does filebeat alert logstash or send some warnings? if not, Is there a way to alert logstash when the logs are not loading in my server because the application is hung or failed.? Any help w… --- ## [DateRange Query in NEST](https://discuss.elastic.co/t/daterange-query-in-nest/66266)
**Author:** [@Lars2](https://discuss.elastic.co/u/Lars2)\ **Replies:** 2\ **Last updated:** [November 21, 2016, 8:59am UTC](https://discuss.elastic.co/t/daterange-query-in-nest/66266 "2016-11-21T08:59:06Z")
I am trying to do a DateRangeQuery with NEST. This is my code: qbb.Bool( qbm =\> qbm.Must( qbms =\> qbms.DateRange(t =\> t.Field("DateField").GreaterThanOrEquals(DateMath.Now.Add(TimeSpan.FromDays(… --- ## [Wrong time(zone)?](https://discuss.elastic.co/t/wrong-time-zone/47491)
**Author:** [@jervdv](https://discuss.elastic.co/u/jervdv)\ **Replies:** 2\ **Last updated:** [April 16, 2016, 8:27pm UTC](https://discuss.elastic.co/t/wrong-time-zone/47491 "2016-04-16T20:27:05Z")
When i check in kibana my time is 1 hour off but only on one field. In Elasticsearch it says 2016/03/01 00:26:40.615 but i kibana it says March 1st 2016, 01:26:40. This is my config: date { match =\> \[ … --- ## [Elasticsearch python async client multiple requests](https://discuss.elastic.co/t/elasticsearch-python-async-client-multiple-requests/262460)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 0\ **Last updated:** [January 28, 2021, 7:07am UTC](https://discuss.elastic.co/t/elasticsearch-python-async-client-multiple-requests/262460 "2021-01-28T07:07:18Z")
Hi, I was trying to use the Elasticsearch python client to make async queries to Elasticsearch. I'm trying to run aggs, and have a few partitions that I want to fetch results from. Here is my query: { 'query': { 'bo… --- ## [InfluxDB output plugin - configuration for collectd metrics](https://discuss.elastic.co/t/influxdb-output-plugin-configuration-for-collectd-metrics/28589)
**Author:** [@asphaltsurfer](https://discuss.elastic.co/u/asphaltsurfer)\ **Replies:** 0\ **Last updated:** [September 3, 2015, 9:20am UTC](https://discuss.elastic.co/t/influxdb-output-plugin-configuration-for-collectd-metrics/28589 "2015-09-03T09:20:58Z")
Hi guys, I'm using standard input collecd plugin for logstash to collect CPU, memory and network interface bandwidth usage and I'm trying to understand how to properly put these metrics in InfluxDB and how to configure c… --- ## [Return other fields in highlight](https://discuss.elastic.co/t/return-other-fields-in-highlight/300898)
**Author:** [@matty\_r](https://discuss.elastic.co/u/matty_r)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 10:28pm UTC](https://discuss.elastic.co/t/return-other-fields-in-highlight/300898 "2022-03-29T22:28:07Z")
Hi all, When highlighting a field, i'd like to also return both fields that are associated. I have the setup below. I want to highlight comment.message, but return both comment.message and comment.id: PUT temp-test { … --- ## [Logstash plugin is installed and not listed and found by logstash](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595)
**Author:** [@SAMY-ELK](https://discuss.elastic.co/u/SAMY-ELK)\ **Replies:** 5\ **Last updated:** [May 23, 2023, 9:24pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595 "2023-05-23T21:24:34Z")
Hi Team, Microsoft-sentinel-logstash-output-plugin is installed on logstash (7.15.1) server Linux but is not listed and found by logstash : /usr/share/logstash/bin #./logstash-plugin list Plugin successfully install… --- ## [Restricting kibana watchers across spaces](https://discuss.elastic.co/t/restricting-kibana-watchers-across-spaces/304496)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 5\ **Last updated:** [May 25, 2022, 3:48pm UTC](https://discuss.elastic.co/t/restricting-kibana-watchers-across-spaces/304496 "2022-05-25T15:48:34Z")
Hi Team, We are using Elastic cloud 7.16.2 version and we are using spaces to restrict users to access only the data related to them. Now we want to provide access to them to create and manage kibana watchers by themsel… --- ## [How to change an agent name](https://discuss.elastic.co/t/how-to-change-an-agent-name/305091)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 5\ **Last updated:** [May 23, 2022, 1:01am UTC](https://discuss.elastic.co/t/how-to-change-an-agent-name/305091 "2022-05-23T01:01:45Z")
So, I've been looking for a way to change the Java agent name. Silly thing but still would help a lot in situations like "group by agent.name". While is not on topic it would be awsome to see how this is made with Django… --- ## [My ELK Cluster is slow indexing Why? Please Help](https://discuss.elastic.co/t/my-elk-cluster-is-slow-indexing-why-please-help/260542)
**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\ **Replies:** 5\ **Last updated:** [January 11, 2021, 1:39pm UTC](https://discuss.elastic.co/t/my-elk-cluster-is-slow-indexing-why-please-help/260542 "2021-01-11T13:39:34Z")
I am trying to send data to Elasticsearch, but elasticsearch indexing is soo slow. Some usefull outputs on below. GET \_/nodes/hot\_threads?pretty is the output; GET \_cluster/stats is the output; --- ## [Bulk import does nothing](https://discuss.elastic.co/t/bulk-import-does-nothing/176893)
**Author:** [@thebuleon29](https://discuss.elastic.co/u/thebuleon29)\ **Replies:** 5\ **Last updated:** [April 16, 2019, 6:56am UTC](https://discuss.elastic.co/t/bulk-import-does-nothing/176893 "2019-04-16T06:56:28Z")
Hi, I am trying to import a NDJSON file in ElasticSearch but it does absolutly nothing. Here is an sample of the file : { "create" : { "\_index" : "benchmark", "\_type" : "doc", "\_id" : "1" }} { "timestamp" : 15163671926… --- ## [Rollover API and upserts](https://discuss.elastic.co/t/rollover-api-and-upserts/124943)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 5\ **Last updated:** [March 21, 2018, 9:42am UTC](https://discuss.elastic.co/t/rollover-api-and-upserts/124943 "2018-03-21T09:42:59Z")
Hello, Do you confirm that doc\_as\_upsert is supported by the rollover API? I mean if I follow https://www.elastic.co/guide/en/elasticsearch/reference/master/indices-rollover-index.html: I have a document A in logs-000… --- ## [Kibana Static Dashboard?](https://discuss.elastic.co/t/kibana-static-dashboard/15153)
**Author:** [@Jay\_Wilson](https://discuss.elastic.co/u/Jay_Wilson)\ **Replies:** 5\ **Last updated:** [January 9, 2014, 8:33am UTC](https://discuss.elastic.co/t/kibana-static-dashboard/15153 "2014-01-09T08:33:51Z")
I am modifying the guided.json dashboard. Down in Events panel I would like to tell kibana to statically filter out specific records. I tried adding this to the file. "query": { "filtered"… --- ## [Beats upgrade from 7.10 to 8.x](https://discuss.elastic.co/t/beats-upgrade-from-7-10-to-8-x/325370)
**Author:** [@ShubhamKumarJena](https://discuss.elastic.co/u/ShubhamKumarJena)\ **Replies:** 1\ **Last updated:** [February 13, 2023, 4:49pm UTC](https://discuss.elastic.co/t/beats-upgrade-from-7-10-to-8-x/325370 "2023-02-13T16:49:23Z")
Hello Guys, We are planning to upgrade our BEATS from 7.10(already EOL) to 8.x soon. Can some body share their experience while they upgrdaed from 7.x to 8.x and give me some of their learnings. I am aware about the fil… --- ## [Fighting with ingest pipeline create](https://discuss.elastic.co/t/fighting-with-ingest-pipeline-create/283353)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 7\ **Last updated:** [September 5, 2021, 9:40pm UTC](https://discuss.elastic.co/t/fighting-with-ingest-pipeline-create/283353 "2021-09-05T21:40:43Z")
Version 7.14 I am trying to create a simple ingest pipeline in Kibana but can not figure out what syntax the condition will accept and there is no documentation that I can find. I know how to specify what I want in the… --- ## [Update using "join" with other index](https://discuss.elastic.co/t/update-using-join-with-other-index/217010)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 1\ **Last updated:** [January 29, 2020, 2:09pm UTC](https://discuss.elastic.co/t/update-using-join-with-other-index/217010 "2020-01-29T14:09:09Z")
I am using Elasticsearch 6.5. Let's say that I have index\_trg, that has fields: id, value, and some additional fields. I also have index\_src with fields id and new\_value, that is subset id ids from index\_trg. What I w… --- ## [System.cpu.total.norm.pct missing](https://discuss.elastic.co/t/system-cpu-total-norm-pct-missing/199840)
**Author:** [@Ron.Janssen](https://discuss.elastic.co/u/Ron.Janssen)\ **Replies:** 1\ **Last updated:** [September 24, 2019, 2:44pm UTC](https://discuss.elastic.co/t/system-cpu-total-norm-pct-missing/199840 "2019-09-24T14:44:11Z")
I'm creating my first dashboard to report on resource utilization of some VM's. One of the VMs has multiple cores, and system.cpu.total.pct is reporting percentages \> 100%. According to the documentation I can use the no… --- ## [Elasticsearch Cluster turns Red - Is JVM Heap main culprit?](https://discuss.elastic.co/t/elasticsearch-cluster-turns-red-is-jvm-heap-main-culprit/168865)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 7\ **Last updated:** [February 28, 2019, 12:23pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-turns-red-is-jvm-heap-main-culprit/168865 "2019-02-28T12:23:35Z")
Hi, I am indexing at a decent rate. 20 indices each with 10000 fields and 50000 documents continuously indexing through 9 threads. I have a cluster with a dedicated master node and two data nodes. Each node has 16GB … --- ## [Logstash not accepting Filebeat data - possible java issue?](https://discuss.elastic.co/t/logstash-not-accepting-filebeat-data-possible-java-issue/102594)
**Author:** [@h3llocomputer](https://discuss.elastic.co/u/h3llocomputer)\ **Replies:** 1\ **Last updated:** [October 3, 2017, 4:50pm UTC](https://discuss.elastic.co/t/logstash-not-accepting-filebeat-data-possible-java-issue/102594 "2017-10-03T16:50:24Z")
Hey guys. I am a newbie and I'm testing out ELK. I am running Filebeat 5.6 on a server and attempting to forward some json files to Logstash (5.6). On the Filebeat server, I see the following errors: 2017/10/03 16:0… --- ## [Create graph for a specific parameter from message against time stamp](https://discuss.elastic.co/t/create-graph-for-a-specific-parameter-from-message-against-time-stamp/100415)
**Author:** [@SKR](https://discuss.elastic.co/u/SKR)\ **Replies:** 1\ **Last updated:** [September 14, 2017, 3:58pm UTC](https://discuss.elastic.co/t/create-graph-for-a-specific-parameter-from-message-against-time-stamp/100415 "2017-09-14T15:58:50Z")
In the message field, i have lot of info - one is "responsetime" I want to do how to create a graph of responsetime value against timestamp . cna somebody shed some light on this "statusCode":200,"pid":16,"responseTime… --- ## [Pattern not defined even though the first matches](https://discuss.elastic.co/t/pattern-not-defined-even-though-the-first-matches/94929)
**Author:** [@Hisushi](https://discuss.elastic.co/u/Hisushi)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 7:32am UTC](https://discuss.elastic.co/t/pattern-not-defined-even-though-the-first-matches/94929 "2017-08-07T07:32:03Z")
Hi everybody, I’m pretty new to the ELK stack but I think I understand the basics. So far, I’ve been able to define a pattern to match my log file and an additional grok pattern. I also checked if it works as expected … --- ## [Metrics for scaling elasticsearch nodes horizontally or vertically](https://discuss.elastic.co/t/metrics-for-scaling-elasticsearch-nodes-horizontally-or-vertically/92255)
**Author:** [@Rohit\_Singh](https://discuss.elastic.co/u/Rohit_Singh)\ **Replies:** 1\ **Last updated:** [July 10, 2017, 6:53am UTC](https://discuss.elastic.co/t/metrics-for-scaling-elasticsearch-nodes-horizontally-or-vertically/92255 "2017-07-10T06:53:58Z")
We are using Elasticsearch cluster of 3 data nodes 3 master nodes 1 client node. configuration 4GB RAM and 1.5 TB disk for each node and replication is 1 and 6 partition for data nodes. We currently delete indices wh… --- ## [Unable to order by top hits results](https://discuss.elastic.co/t/unable-to-order-by-top-hits-results/216530)
**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 10:54am UTC](https://discuss.elastic.co/t/unable-to-order-by-top-hits-results/216530 "2020-01-29T10:54:15Z")
Hi guys, I'm trying to create a pie chart that will show the most recent docs using the Top Hit aggregation, then aggregate them by some field and sort them by the results of the Top Hit. Here's what I did: As yo… --- ## [React Search UI is remounting its children on state or prop update](https://discuss.elastic.co/t/react-search-ui-is-remounting-its-children-on-state-or-prop-update/254501)
**Author:** [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)\ **Replies:** 3\ **Last updated:** [December 1, 2020, 2:06pm UTC](https://discuss.elastic.co/t/react-search-ui-is-remounting-its-children-on-state-or-prop-update/254501 "2020-12-01T14:06:38Z")
We are experiencing an issue with the search UI, whenever we perform any action on search ui, it unmount and remount its children. Basically it is remounting its children again n again on any state changes. Sample code… --- ## [Ingest only nodes](https://discuss.elastic.co/t/ingest-only-nodes/235854)
**Author:** [@barracuda-charles](https://discuss.elastic.co/u/barracuda-charles)\ **Replies:** 3\ **Last updated:** [June 6, 2020, 4:28pm UTC](https://discuss.elastic.co/t/ingest-only-nodes/235854 "2020-06-06T16:28:47Z")
I have an ingest-heavy workload (many more writes than reads). I am curious about the need / benefits of having ingest-only nodes vs having the ingest done on the data nodes. I don't think I actually have a specific ing… --- ## [Use script to select from non-numeric buckets -- possible?](https://discuss.elastic.co/t/use-script-to-select-from-non-numeric-buckets-possible/196415)
**Author:** [@anelson-edge](https://discuss.elastic.co/u/anelson-edge)\ **Replies:** 3\ **Last updated:** [August 23, 2019, 9:44pm UTC](https://discuss.elastic.co/t/use-script-to-select-from-non-numeric-buckets-possible/196415 "2019-08-23T21:44:07Z")
To solve my problem, I think what I want is to use scripting to select buckets, but I can't figure out how to do it. All my attempts run into complaints that I must point to a numeric aggregation In the data below, I w… --- ## [Trying to create a scripted field in Kibana](https://discuss.elastic.co/t/trying-to-create-a-scripted-field-in-kibana/182471)
**Author:** [@nicks1993](https://discuss.elastic.co/u/nicks1993)\ **Replies:** 3\ **Last updated:** [May 23, 2019, 4:26pm UTC](https://discuss.elastic.co/t/trying-to-create-a-scripted-field-in-kibana/182471 "2019-05-23T16:26:12Z")
I have a log with a message field that I want to parse a "time" field out of. for example: message: words::words::words (time=517, words) is an example of my message field. I want to create a field called time contain… --- ## [Authorization per alias problem](https://discuss.elastic.co/t/authorization-per-alias-problem/83418)
**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\ **Replies:** 3\ **Last updated:** [April 25, 2017, 3:45pm UTC](https://discuss.elastic.co/t/authorization-per-alias-problem/83418 "2017-04-25T15:45:57Z")
Hello there, I'm using elastic-search, kibana and x-pack version 5.1.2, I'm using the native user-store. I have two different aliases and templates: $ cat irldf-campaign\_manager\_stats\_template.json { "aliases": {… --- ## [UNABLE TO LOAD HIVE DATA into ELASTIC SEARCH](https://discuss.elastic.co/t/unable-to-load-hive-data-into-elastic-search/71084)
**Author:** [@Gangadhar\_dantusetty](https://discuss.elastic.co/u/Gangadhar_dantusetty)\ **Replies:** 3\ **Last updated:** [January 19, 2017, 12:55pm UTC](https://discuss.elastic.co/t/unable-to-load-hive-data-into-elastic-search/71084 "2017-01-19T12:55:07Z")
Unable to load DATE field from Hive to Elastic search. It is Displaying as NULL. We are using ES-Hadoop Connector --- ## [Unable to install logstash-output-zabbix](https://discuss.elastic.co/t/unable-to-install-logstash-output-zabbix/58195)
**Author:** [@vardhasu](https://discuss.elastic.co/u/vardhasu)\ **Replies:** 3\ **Last updated:** [August 17, 2016, 2:38pm UTC](https://discuss.elastic.co/t/unable-to-install-logstash-output-zabbix/58195 "2016-08-17T14:38:06Z")
Hi All Downloaded logstash-output-zabix-master as a zip file. Used unpack to unpack this. When trying to install I keep getting the below error bin/logstash-plugin install --local logstash-output-zabbix-master Inst… --- ## [Approach on Big Data](https://discuss.elastic.co/t/approach-on-big-data/52536)
**Author:** [@ckayay](https://discuss.elastic.co/u/ckayay)\ **Replies:** 3\ **Last updated:** [June 12, 2016, 8:46pm UTC](https://discuss.elastic.co/t/approach-on-big-data/52536 "2016-06-12T20:46:13Z")
Hi All, We are looking into using ELK to log 35 TB of business events generated. The data can even go bigger and come to sizes around 70-80 TB in the future. The use-case is to allow real-time searches through Kibana… [Previous page](https://discuss.elastic.co/top.md?page=1625&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1627&per_page=50&period=all)