# Top

**URL:** https://discuss.elastic.co/top.md?page=175&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 176

---

## [Snow API to avoid duplicates](https://discuss.elastic.co/t/snow-api-to-avoid-duplicates/213074)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 13\
**Last updated:** [December 31, 2019, 9:31am UTC](https://discuss.elastic.co/t/snow-api-to-avoid-duplicates/213074 "2019-12-31T09:31:28Z")

</div>

Hi Team, im working with a Snow API on my ELK setup (7.2.0), and below is the configuration of my logsatsh config file. input { http\_poller { urls =\> { snowinc =\> { url =\> "https://service-now.com/api/n…

---

## [Elastic cluster slow down afre a few weeks of uptime(cluster recommendations)](https://discuss.elastic.co/t/elastic-cluster-slow-down-afre-a-few-weeks-of-uptime-cluster-recommendations/211678)

<div class="topic-metadata">

**Author:** [@Toma\_Popov](https://discuss.elastic.co/u/Toma_Popov)\
**Replies:** 16\
**Last updated:** [December 20, 2019, 4:19pm UTC](https://discuss.elastic.co/t/elastic-cluster-slow-down-afre-a-few-weeks-of-uptime-cluster-recommendations/211678 "2019-12-20T16:19:12Z")

</div>

Hello everyone. I am new to the ELK world and this is my first post so I hope you will go easy on me. I am currently working on a reporting system for one of our inhouse projects. The problem is that we have a lots and …

---

## [Using multiline codec for python stacktrace](https://discuss.elastic.co/t/using-multiline-codec-for-python-stacktrace/198346)

<div class="topic-metadata">

**Author:** [@rajdeep101](https://discuss.elastic.co/u/rajdeep101)\
**Replies:** 10\
**Last updated:** [September 7, 2019, 5:22am UTC](https://discuss.elastic.co/t/using-multiline-codec-for-python-stacktrace/198346 "2019-09-07T05:22:19Z")

</div>

Basically i have three types of lines in my log file. Syntax error Error timestamp internal server error url blah blah traceback For the traceback part i am just checking if line begins with a space and appending it i…

---

## [Using Filebeat with Logstash breaks Metricbeat](https://discuss.elastic.co/t/using-filebeat-with-logstash-breaks-metricbeat/195363)

<div class="topic-metadata">

**Author:** [@carson](https://discuss.elastic.co/u/carson)\
**Replies:** 10\
**Last updated:** [August 26, 2019, 7:24pm UTC](https://discuss.elastic.co/t/using-filebeat-with-logstash-breaks-metricbeat/195363 "2019-08-26T19:24:38Z")

</div>

I'm using a default configuration for Filebeat, and a standard configuration for logstash to input from beats and output to elasticsearch. Metricbeat works fine, but once I start an instance of Filebeat, the metricbeat …

---

## [Not able to index the logs coming from Shipper through redis into the ELK](https://discuss.elastic.co/t/not-able-to-index-the-logs-coming-from-shipper-through-redis-into-the-elk/60367)

<div class="topic-metadata">

**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\
**Replies:** 11\
**Last updated:** [September 15, 2016, 7:19am UTC](https://discuss.elastic.co/t/not-able-to-index-the-logs-coming-from-shipper-through-redis-into-the-elk/60367 "2016-09-15T07:19:38Z")

</div>

Hi, I am deploying ELK for POC. In that, I have pushed the logs into the logstash shipper(I am able to see that using tcpdump). But then I am not able to see them in Elasticsearch and kibana. I am able to see them at R…

---

## [How to extract index name from the uri field in logstash](https://discuss.elastic.co/t/how-to-extract-index-name-from-the-uri-field-in-logstash/135475)

<div class="topic-metadata">

**Author:** [@Santu](https://discuss.elastic.co/u/Santu)\
**Replies:** 16\
**Last updated:** [June 13, 2018, 6:00pm UTC](https://discuss.elastic.co/t/how-to-extract-index-name-from-the-uri-field-in-logstash/135475 "2018-06-13T18:00:14Z")

</div>

Hi, the api and index fields are not being populated in the request logs. for this i am using the custom pattern grok rules to extract the index and api values from the uri field like below. some how it doesn't works…

---

## [Build-in users' passwords gone after service restart](https://discuss.elastic.co/t/build-in-users-passwords-gone-after-service-restart/277870)

<div class="topic-metadata">

**Author:** [@manfred](https://discuss.elastic.co/u/manfred)\
**Replies:** 9\
**Last updated:** [July 6, 2021, 8:46am UTC](https://discuss.elastic.co/t/build-in-users-passwords-gone-after-service-restart/277870 "2021-07-06T08:46:26Z")

</div>

Hi, ELK 7.13.2, ./elasticsearch-setup-passwords interactive curl -u elastic 'https://localhost:9200/\_xpack/security/\_authenticate?pretty' // here authentication as elastic works systemctl restart elasticsearch // af…

---

## [Docker single container vs multiple containers](https://discuss.elastic.co/t/docker-single-container-vs-multiple-containers/225079)

<div class="topic-metadata">

**Author:** [@LenaSikirin](https://discuss.elastic.co/u/LenaSikirin)\
**Replies:** 9\
**Last updated:** [March 26, 2020, 8:49am UTC](https://discuss.elastic.co/t/docker-single-container-vs-multiple-containers/225079 "2020-03-26T08:49:14Z")

</div>

I'm going to setup ELK solution on single server with 16GB RAM and 2TB space. (I'm limited only to single server). After reading this article - i'm very confused.... Should I: run multiple docker containers on the si…

---

## [Exclude by other field](https://discuss.elastic.co/t/exclude-by-other-field/158494)

<div class="topic-metadata">

**Author:** [@ilanas](https://discuss.elastic.co/u/ilanas)\
**Replies:** 9\
**Last updated:** [November 28, 2018, 3:27pm UTC](https://discuss.elastic.co/t/exclude-by-other-field/158494 "2018-11-28T15:27:17Z")

</div>

Hello, i have one question. I have a register for example like this: DEPARTMENT YEAR RECORDABLE PEOPLE AAAA 2015 YES 7 BBBB 2016 …

---

## [Elasticsearch can't active](https://discuss.elastic.co/t/elasticsearch-cant-active/124686)

<div class="topic-metadata">

**Author:** [@fitmren\_lamhr](https://discuss.elastic.co/u/fitmren_lamhr)\
**Replies:** 13\
**Last updated:** [March 20, 2018, 6:49am UTC](https://discuss.elastic.co/t/elasticsearch-cant-active/124686 "2018-03-20T06:49:22Z")

</div>

hello, i got some issues in elasticsearch. when i curl -xget ‘http://localhost:9200/\_cluster/health?pretty=true’ i got error: curl: (7) Failed to connect to localhost port 9200: Connection refused then i check my ela…

---

## [Effective separation of tenant data in latest release of ElasticSearch](https://discuss.elastic.co/t/effective-separation-of-tenant-data-in-latest-release-of-elasticsearch/156573)

<div class="topic-metadata">

**Author:** [@Rajesh\_Kishore](https://discuss.elastic.co/u/Rajesh_Kishore)\
**Replies:** 9\
**Last updated:** [November 14, 2018, 7:02am UTC](https://discuss.elastic.co/t/effective-separation-of-tenant-data-in-latest-release-of-elasticsearch/156573 "2018-11-14T07:02:58Z")

</div>

Hi All, We want to use ElasticSearch as a multi-tenant store , each tenant would have different requirement for document type/schema. What is the best way to store data wrt cost, manageability in this regard ? 1\> Eac…

---

## [Range value type int or float,result different](https://discuss.elastic.co/t/range-value-type-int-or-float-result-different/116175)

<div class="topic-metadata">

**Author:** [@githubyyf](https://discuss.elastic.co/u/githubyyf)\
**Replies:** 9\
**Last updated:** [January 19, 2018, 8:35am UTC](https://discuss.elastic.co/t/range-value-type-int-or-float-result-different/116175 "2018-01-19T08:35:50Z")

</div>

1.range value type float code: GET /shops/baseShops/\_search?\_source=true&size=10 {"query":{"match\_all":{}},"post\_filter":{"bool":{"must":\[\[{"term":{"company\_id":75}}\],\[{"term":{"manager\_id":"3685"}}\],\[{"range":{"out\_d…

---

## [Logstash http\_poller json parsing error](https://discuss.elastic.co/t/logstash-http-poller-json-parsing-error/245990)

<div class="topic-metadata">

**Author:** [@jerin](https://discuss.elastic.co/u/jerin)\
**Replies:** 19\
**Last updated:** [August 24, 2020, 4:27pm UTC](https://discuss.elastic.co/t/logstash-http-poller-json-parsing-error/245990 "2020-08-24T16:27:26Z")

</div>

Hello , I am using http\_poller logstash input plugin to poll rest API ( JIRA ) . When i poll it , these are the sample fields maxresults startAt tags issues Fields under issues issues { fields …

---

## [Gcs-repository-creation-issue for elasticsearch on gke](https://discuss.elastic.co/t/gcs-repository-creation-issue-for-elasticsearch-on-gke/201519)

<div class="topic-metadata">

**Author:** [@Kumar\_Saurabh\_Srivas](https://discuss.elastic.co/u/Kumar_Saurabh_Srivas)\
**Replies:** 12\
**Last updated:** [October 1, 2019, 4:14am UTC](https://discuss.elastic.co/t/gcs-repository-creation-issue-for-elasticsearch-on-gke/201519 "2019-10-01T04:14:09Z")

</div>

We are setting up an elasticsearch cluster on GKE with the following format: Master nodes as kubernetes deployments Client nodes as kubernetes deployments with HPA Data nodes as stateful sets with PVs We are …

---

## [Very slow filter query](https://discuss.elastic.co/t/very-slow-filter-query/11683)

<div class="topic-metadata">

**Author:** [@Tom\_Mortimer](https://discuss.elastic.co/u/Tom_Mortimer)\
**Replies:** 12\
**Last updated:** [April 30, 2013, 3:25pm UTC](https://discuss.elastic.co/t/very-slow-filter-query/11683 "2013-04-30T15:25:39Z")

</div>

Hi everyone, I'm new to Elasticsearch, so please be forgiving if I'm missing something obvious. ;) I'm comparing it with Solr for performance in a job which will require large Boolean filters. However, my initial…

---

## [How can i compare the fields between index OR compare fields between the result hit?](https://discuss.elastic.co/t/how-can-i-compare-the-fields-between-index-or-compare-fields-between-the-result-hit/161953)

<div class="topic-metadata">

**Author:** [@Sky\_Iprd](https://discuss.elastic.co/u/Sky_Iprd)\
**Replies:** 18\
**Last updated:** [January 10, 2019, 3:44am UTC](https://discuss.elastic.co/t/how-can-i-compare-the-fields-between-index-or-compare-fields-between-the-result-hit/161953 "2019-01-10T03:44:02Z")

</div>

Hi, is anyone can point me a right direction for the subject ? I've try long time ( i.e scripted\_metric , bucket\_path ) and didn't find anything can help. Can someone know how can I able to do such thing in elasticsearch…

---

## [Beat and Logstash](https://discuss.elastic.co/t/beat-and-logstash/118200)

<div class="topic-metadata">

**Author:** [@sid.sh](https://discuss.elastic.co/u/sid.sh)\
**Replies:** 13\
**Last updated:** [March 15, 2018, 9:06am UTC](https://discuss.elastic.co/t/beat-and-logstash/118200 "2018-03-15T09:06:29Z")

</div>

I am new to coding and logstash. I am receiving many files through filebeat on single port in my logstash.conf. How can I differentiate the files basis on their naming conventions and then write a filter for them. Any…

---

## [Transforms: do I need to filter source for time-series data?](https://discuss.elastic.co/t/transforms-do-i-need-to-filter-source-for-time-series-data/276057)

<div class="topic-metadata">

**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\
**Replies:** 9\
**Last updated:** [June 18, 2021, 8:18am UTC](https://discuss.elastic.co/t/transforms-do-i-need-to-filter-source-for-time-series-data/276057 "2021-06-18T08:18:42Z")

</div>

I'm doing a transformation of time-series/events data that does not change for the past. I've talked to an Elastic engineer Ben on Slack and it seems like I might have stumbled upon a bug. I'm using this index config a…

---

## [QUESTION ABOUT ELK SIEM](https://discuss.elastic.co/t/question-about-elk-siem/301633)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 25\
**Last updated:** [April 13, 2022, 10:24am UTC](https://discuss.elastic.co/t/question-about-elk-siem/301633 "2022-04-13T10:24:44Z")

</div>

how i can fix this error permanently when i fix it it shows for me again

---

## [Logstash plugin for Azure storage](https://discuss.elastic.co/t/logstash-plugin-for-azure-storage/297733)

<div class="topic-metadata">

**Author:** [@akpratiek](https://discuss.elastic.co/u/akpratiek)\
**Replies:** 10\
**Last updated:** [February 23, 2022, 12:17pm UTC](https://discuss.elastic.co/t/logstash-plugin-for-azure-storage/297733 "2022-02-23T12:17:12Z")

</div>

Hi Team , I am trying to access and retrieve files from Azure storage. I am getting the following error when I run the config file. Any help is appreciated. \< \[2022-02-21T12:07:37,177\]\[ERROR\]\[logstash.inputs.azureblobst…

---

## [After installing logstash-filter-jdbc\_streaming,im facing the follwing error when i check logstash configtest](https://discuss.elastic.co/t/after-installing-logstash-filter-jdbc-streaming-im-facing-the-follwing-error-when-i-check-logstash-configtest/83020)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 10\
**Last updated:** [April 21, 2017, 8:40am UTC](https://discuss.elastic.co/t/after-installing-logstash-filter-jdbc-streaming-im-facing-the-follwing-error-when-i-check-logstash-configtest/83020 "2017-04-21T08:40:15Z")

</div>

jones@logserver:~$ sudo service logstash configtest Bundler::GemNotFound: Could not find gem 'logstash-filter-jdbc\_streaming (\>= 0) java' in any of the gem sources listed in your Gemfile or installed on this machine. v…

---

## [Does anyone use connection pooling in ElasticSearch8.5? How to use it?](https://discuss.elastic.co/t/does-anyone-use-connection-pooling-in-elasticsearch8-5-how-to-use-it/346974)

<div class="topic-metadata">

**Author:** [@maoqingjue](https://discuss.elastic.co/u/maoqingjue)\
**Replies:** 16\
**Last updated:** [November 14, 2023, 11:09am UTC](https://discuss.elastic.co/t/does-anyone-use-connection-pooling-in-elasticsearch8-5-how-to-use-it/346974 "2023-11-14T11:09:13Z")

</div>

Does anyone use connection pooling in Elasticsearch8.5? How to use it?

---

## [Processors \> convert not working when the string includes whitespace](https://discuss.elastic.co/t/processors-convert-not-working-when-the-string-includes-whitespace/269201)

<div class="topic-metadata">

**Author:** [@makeajourney](https://discuss.elastic.co/u/makeajourney)\
**Replies:** 17\
**Last updated:** [April 5, 2021, 4:59am UTC](https://discuss.elastic.co/t/processors-convert-not-working-when-the-string-includes-whitespace/269201 "2021-04-05T04:59:07Z")

</div>

Hello. I am setting up the filebeat. I want to convert the string to double and it has whitespace. I was trying it with dissect. but it's not fit my situation. because that string has not only have numbers. so I've th…

---

## [Upper limits on indexes/shards in a cluster](https://discuss.elastic.co/t/upper-limits-on-indexes-shards-in-a-cluster/20346)

<div class="topic-metadata">

**Author:** [@David\_Ashby](https://discuss.elastic.co/u/David_Ashby)\
**Replies:** 10\
**Last updated:** [October 21, 2014, 9:46pm UTC](https://discuss.elastic.co/t/upper-limits-on-indexes-shards-in-a-cluster/20346 "2014-10-21T21:46:40Z")

</div>

Hi, We've been using elasticsearch on AWS for our application for two purposes: as a search engine for user-created documents, and as a cache for activity feeds in our application. We made a decision early-on to t…

---

## [App Search - API logs and Analytics are empty](https://discuss.elastic.co/t/app-search-api-logs-and-analytics-are-empty/256141)

<div class="topic-metadata">

**Author:** [@aq1652](https://discuss.elastic.co/u/aq1652)\
**Replies:** 9\
**Last updated:** [December 12, 2020, 10:11pm UTC](https://discuss.elastic.co/t/app-search-api-logs-and-analytics-are-empty/256141 "2020-12-12T22:11:46Z")

</div>

Hi, I've been struggling with this for a few days and no luck. As the title suggests, my self-hsoted app search is not displaying any API logs and the analytics are empty! The data is definitely being stored somewhere, …

---

## [Path not loading in logstash 7.3](https://discuss.elastic.co/t/path-not-loading-in-logstash-7-3/196353)

<div class="topic-metadata">

**Author:** [@SachinRaj](https://discuss.elastic.co/u/SachinRaj)\
**Replies:** 9\
**Last updated:** [August 24, 2019, 5:27pm UTC](https://discuss.elastic.co/t/path-not-loading-in-logstash-7-3/196353 "2019-08-24T17:27:03Z")

</div>

hello, Good Day !! Please help me on this installed ELK 7.3 in Windows 10 Laptop below mentioned data is the conf file i am trying to execute in Logslatsh and no error. but the file (path) is not loading except that …

---

## [Need advice on shards for my index](https://discuss.elastic.co/t/need-advice-on-shards-for-my-index/247143)

<div class="topic-metadata">

**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Replies:** 14\
**Last updated:** [September 2, 2020, 1:29pm UTC](https://discuss.elastic.co/t/need-advice-on-shards-for-my-index/247143 "2020-09-02T13:29:27Z")

</div>

Hello all, Setting up an elasticsearch cluster for the first time here. I need some advice on creating my index. This index will store information about emails. The plan is to retain about 10 years worth of message dat…

---

## [ElasticSearch Performance tuning with 3 nodes](https://discuss.elastic.co/t/elasticsearch-performance-tuning-with-3-nodes/234229)

<div class="topic-metadata">

**Author:** [@Roshan\_Jha](https://discuss.elastic.co/u/Roshan_Jha)\
**Replies:** 17\
**Last updated:** [May 26, 2020, 12:12pm UTC](https://discuss.elastic.co/t/elasticsearch-performance-tuning-with-3-nodes/234229 "2020-05-26T12:12:11Z")

</div>

Hi below is the configuration of my elasticstack. total of 3 nodes with all the nodes eligible for master as well as master node. each node system configuration RAM :- 8GB on each node CORE:- 4 core i have provided…

---

## [Possible networking problem?](https://discuss.elastic.co/t/possible-networking-problem/23453)

<div class="topic-metadata">

**Author:** [@Sitkawoof](https://discuss.elastic.co/u/Sitkawoof)\
**Replies:** 11\
**Last updated:** [April 30, 2015, 6:01pm UTC](https://discuss.elastic.co/t/possible-networking-problem/23453 "2015-04-30T18:01:32Z")

</div>

I have installed elasticsearch and kibana. I started elasticsearch and did a GET to test it out. Everything worked. I installed kibana next. When I test it doing "http://localhost:5061" it fails. I inserted a TC…

---

## [Error: system/socket dataset setup failed](https://discuss.elastic.co/t/error-system-socket-dataset-setup-failed/222603)

<div class="topic-metadata">

**Author:** [@rowe](https://discuss.elastic.co/u/rowe)\
**Replies:** 10\
**Last updated:** [March 26, 2020, 5:30pm UTC](https://discuss.elastic.co/t/error-system-socket-dataset-setup-failed/222603 "2020-03-26T17:30:38Z")

</div>

Hi! I'm new at this and trying to get Auditbeat running on my Synology NAS (DS918+, x86\_64) but there are errors when I try to start it (with ./auditbeat -e). Can anyone tell me if there is something I can do to fix …

---

## [Consultaton Services](https://discuss.elastic.co/t/consultaton-services/74257)

<div class="topic-metadata">

**Author:** [@BrianAnderson](https://discuss.elastic.co/u/BrianAnderson)\
**Replies:** 9\
**Last updated:** [February 21, 2017, 9:13pm UTC](https://discuss.elastic.co/t/consultaton-services/74257 "2017-02-21T21:13:14Z")

</div>

Interested in ElasticSearch Consultation Services links. Contact form on Elasticsearch website would not submit.

---

## [How to get all docs in a family?](https://discuss.elastic.co/t/how-to-get-all-docs-in-a-family/21625)

<div class="topic-metadata">

**Author:** [@bvnagaraju](https://discuss.elastic.co/u/bvnagaraju)\
**Replies:** 9\
**Last updated:** [January 14, 2015, 8:15pm UTC](https://discuss.elastic.co/t/how-to-get-all-docs-in-a-family/21625 "2015-01-14T20:15:35Z")

</div>

Hi, I have question on document relations one document can have multiple child's. and now I have to address below searches and achieve the mentioned expected results . 1) search on any child documents(meanin…

---

## [How to increase the speed of response?](https://discuss.elastic.co/t/how-to-increase-the-speed-of-response/366190)

<div class="topic-metadata">

**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\
**Replies:** 31\
**Last updated:** [September 24, 2024, 7:25am UTC](https://discuss.elastic.co/t/how-to-increase-the-speed-of-response/366190 "2024-09-24T07:25:13Z")

</div>

Hi I have a lot of data up to 10 billion and in order to be quick I made 7 contracts and it was still very slow What is the best practice in order to be a quick response?

---

## [INTERNAL\_SERVER\_ERROR null\_pointer\_exception while percolating a document](https://discuss.elastic.co/t/internal-server-error-null-pointer-exception-while-percolating-a-document/99311)

<div class="topic-metadata">

**Author:** [@jazz](https://discuss.elastic.co/u/jazz)\
**Replies:** 12\
**Last updated:** [September 5, 2017, 11:31am UTC](https://discuss.elastic.co/t/internal-server-error-null-pointer-exception-while-percolating-a-document/99311 "2017-09-05T11:31:01Z")

</div>

We have an index with 10 shards on 10 nodes, and sometimes when a document is percolated, some nodes fail with a null\_pointer\_exception. A second try does not reproduce the exception. status: 'INTERNAL\_SERVER\_ERROR', re…

---

## [Auto suggest with elasticsearch](https://discuss.elastic.co/t/auto-suggest-with-elasticsearch/4763)

<div class="topic-metadata">

**Author:** [@Alexander\_Reelsen](https://discuss.elastic.co/u/Alexander_Reelsen)\
**Replies:** 12\
**Last updated:** [July 6, 2011, 7:08pm UTC](https://discuss.elastic.co/t/auto-suggest-with-elasticsearch/4763 "2011-07-06T19:08:21Z")

</div>

Hi there, I am currently trying to find the most elegant way to implement auto suggest feature for my elasticsearch instance. Currently there is only an index with products, which includes product name, descripti…

---

## [Logstash Error : Expected one of #, ", ', -, \[, {, \] at line 4, column 14 (byte 33) after input { file { path =\> \[](https://discuss.elastic.co/t/logstash-error-expected-one-of-at-line-4-column-14-byte-33-after-input-file-path/79532)

<div class="topic-metadata">

**Author:** [@manopmk](https://discuss.elastic.co/u/manopmk)\
**Replies:** 13\
**Last updated:** [March 23, 2017, 7:00am UTC](https://discuss.elastic.co/t/logstash-error-expected-one-of-at-line-4-column-14-byte-33-after-input-file-path/79532 "2017-03-23T07:00:39Z")

</div>

Im Using mac im unable to load apache log to logstash. Im getting error " Error: Expected one of #, ", ', -, \[, {, \] at line 4, column 14 (byte 33) after input { file { path =\> \[ I tried path =\> "/Users/tcstsb3/Down…

---

## [Orphaned agent is healthy in 9.0.1](https://discuss.elastic.co/t/orphaned-agent-is-healthy-in-9-0-1/378424)

<div class="topic-metadata">

**Author:** [@syk](https://discuss.elastic.co/u/syk)\
**Replies:** 11\
**Last updated:** [October 10, 2025, 7:02am UTC](https://discuss.elastic.co/t/orphaned-agent-is-healthy-in-9-0-1/378424 "2025-10-10T07:02:44Z")

</div>

Self hosted installation of ELK 9.0.1 with ~30 agents running: On a Windows Server 2022 we deployed an elastic-agent which reports that everything is fine (elastic-agent status: fleet connected and agent healthy). In K…

---

## [Rules API Key](https://discuss.elastic.co/t/rules-api-key/309999)

<div class="topic-metadata">

**Author:** [@robdiluca](https://discuss.elastic.co/u/robdiluca)\
**Replies:** 9\
**Last updated:** [July 19, 2022, 7:20pm UTC](https://discuss.elastic.co/t/rules-api-key/309999 "2022-07-19T19:20:02Z")

</div>

Hi all, the Kibana Alerting doc (Alerting set up | Kibana Guide \[8.3\] | Elastic) says rules are authorized using an API Key created internally with the same privileges as the user creating/updating the rule. I wonder if…

---

## [How to filter a list of word with kibana](https://discuss.elastic.co/t/how-to-filter-a-list-of-word-with-kibana/255515)

<div class="topic-metadata">

**Author:** [@slim-hmidi](https://discuss.elastic.co/u/slim-hmidi)\
**Replies:** 9\
**Last updated:** [November 17, 2020, 10:32am UTC](https://discuss.elastic.co/t/how-to-filter-a-list-of-word-with-kibana/255515 "2020-11-17T10:32:23Z")

</div>

I tried to fetch some word using regexp in the filter but does not work: { "query": { "regexp": { "message": { "value": "\*.word1.word2.word3.\*" } } } } I want to fetch messages that contai…

---

## [Disabling dynamic mapping](https://discuss.elastic.co/t/disabling-dynamic-mapping/10659)

<div class="topic-metadata">

**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\
**Replies:** 9\
**Last updated:** [February 22, 2013, 5:49pm UTC](https://discuss.elastic.co/t/disabling-dynamic-mapping/10659 "2013-02-22T17:49:19Z")

</div>

i wanted to disable dynamic mapping for my indices.. but it is somehow not working for me.. i looked at the documentation and im still getting confused.. tried couple of things and it didnt work. does anyone have a …

---

## [Logstash GeoIp in Packetbeat pattern](https://discuss.elastic.co/t/logstash-geoip-in-packetbeat-pattern/165100)

<div class="topic-metadata">

**Author:** [@Miguel\_Plazas](https://discuss.elastic.co/u/Miguel_Plazas)\
**Replies:** 12\
**Last updated:** [January 22, 2019, 6:41pm UTC](https://discuss.elastic.co/t/logstash-geoip-in-packetbeat-pattern/165100 "2019-01-22T18:41:35Z")

</div>

hi, currently i'm trying to show GeoIp points using LogStash with Packetbeat and the best solution that I find is using this logstash-packtebeat.conf file: input { beats { type =\> beats port =\> 5044 …

---

## [Can I pass data between 2 input plugin of logstash](https://discuss.elastic.co/t/can-i-pass-data-between-2-input-plugin-of-logstash/154851)

<div class="topic-metadata">

**Author:** [@patrick007](https://discuss.elastic.co/u/patrick007)\
**Replies:** 11\
**Last updated:** [November 2, 2018, 5:18am UTC](https://discuss.elastic.co/t/can-i-pass-data-between-2-input-plugin-of-logstash/154851 "2018-11-02T05:18:34Z")

</div>

input { kafka { // Pass a value from kafka to jdbc input plugin } jdbc { } }

---

## [Strategy For Limiting Search To "Folder Path"](https://discuss.elastic.co/t/strategy-for-limiting-search-to-folder-path/3653)

<div class="topic-metadata">

**Author:** [@timscott](https://discuss.elastic.co/u/timscott)\
**Replies:** 11\
**Last updated:** [December 7, 2012, 6:06am UTC](https://discuss.elastic.co/t/strategy-for-limiting-search-to-folder-path/3653 "2012-12-07T06:06:55Z")

</div>

Noob here, just getting started with elasticsearch and search in general. In the system I am building, users can organize documents for browsing within a folder tree. This will be maintained in a relational databas…

---

## [How to decrease ES backup duration?](https://discuss.elastic.co/t/how-to-decrease-es-backup-duration/64118)

<div class="topic-metadata">

**Author:** [@Faye](https://discuss.elastic.co/u/Faye)\
**Replies:** 10\
**Last updated:** [November 14, 2016, 11:22am UTC](https://discuss.elastic.co/t/how-to-decrease-es-backup-duration/64118 "2016-11-14T11:22:43Z")

</div>

Our index design : The alias "my\_alias" is created for the two indexes "myindex\_a\_2016\_0106" and "myindex\_a\_2016\_0712" Insert data : Only insert data into the index "myindex\_a\_2016\_0106" in the first half year in 2016, …

---

## [Hive to Elastic Data Load](https://discuss.elastic.co/t/hive-to-elastic-data-load/228066)

<div class="topic-metadata">

**Author:** [@Sarath\_Pullabhotla](https://discuss.elastic.co/u/Sarath_Pullabhotla)\
**Replies:** 13\
**Last updated:** [April 27, 2020, 11:23am UTC](https://discuss.elastic.co/t/hive-to-elastic-data-load/228066 "2020-04-27T11:23:08Z")

</div>

Hi, I have loaded a data containing 536965213 rows from hive to elastic. But when I check the data loaded in elastic via Kibana it displays " 548,889,213 hits which is more than the number of records present in my hive…

---

## [Adding new node to cluster](https://discuss.elastic.co/t/adding-new-node-to-cluster/242223)

<div class="topic-metadata">

**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\
**Replies:** 11\
**Last updated:** [July 29, 2020, 1:21pm UTC](https://discuss.elastic.co/t/adding-new-node-to-cluster/242223 "2020-07-29T13:21:53Z")

</div>

Hi, I want to add new node to running cluster. I have two servers on which elastic search 7.8 is setup. Server # 1 IP address x.x.x.x port 9200 hostname: es1.example.com Server # 2 IP Address x.x.x.x port 9200 hostna…

---

## [No access to APM API](https://discuss.elastic.co/t/no-access-to-apm-api/302307)

<div class="topic-metadata">

**Author:** [@dthapostle](https://discuss.elastic.co/u/dthapostle)\
**Replies:** 15\
**Last updated:** [May 2, 2022, 11:06am UTC](https://discuss.elastic.co/t/no-access-to-apm-api/302307 "2022-05-02T11:06:06Z")

</div>

IKibana version: 7.17.2 Elasticsearch version: 7.17.2 APM Server version: APM integration 7.17.1 APM Agent language and version: ASP.Net 7.17.2 Browser version: Safari 15.3 Original install method (e.g. download p…

---

## [Elasticsearch-5.1.1 Fails on Adding Network.Host](https://discuss.elastic.co/t/elasticsearch-5-1-1-fails-on-adding-network-host/69187)

<div class="topic-metadata">

**Author:** [@Yusto\_Omondi](https://discuss.elastic.co/u/Yusto_Omondi)\
**Replies:** 9\
**Last updated:** [December 17, 2016, 1:36pm UTC](https://discuss.elastic.co/t/elasticsearch-5-1-1-fails-on-adding-network-host/69187 "2016-12-17T13:36:26Z")

</div>

Why is my elasticsearch-5.1.1 node failing when I add my vm public ip as network.host value? @pickypg @uri1803

---

## [Chart data disappears or shows up very differently when setting smaller timeframe](https://discuss.elastic.co/t/chart-data-disappears-or-shows-up-very-differently-when-setting-smaller-timeframe/296412)

<div class="topic-metadata">

**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\
**Replies:** 22\
**Last updated:** [February 8, 2022, 3:12pm UTC](https://discuss.elastic.co/t/chart-data-disappears-or-shows-up-very-differently-when-setting-smaller-timeframe/296412 "2022-02-08T15:12:09Z")

</div>

Hi, I'm using Kibana 7.17.0. it seems like the chart area in Kibana disappears when setting timeframe around 5 minutes (2nd screenshot). When I set it slightly longer than that (3rd screenshot), it doesn't seem to show t…

---

## [Fleet server goes offline right after successfull install](https://discuss.elastic.co/t/fleet-server-goes-offline-right-after-successfull-install/355944)

<div class="topic-metadata">

**Author:** [@MheniMerz](https://discuss.elastic.co/u/MheniMerz)\
**Replies:** 12\
**Last updated:** [April 10, 2024, 6:44am UTC](https://discuss.elastic.co/t/fleet-server-goes-offline-right-after-successfull-install/355944 "2024-04-10T06:44:56Z")

</div>

Hi, i followed the steps in kibana and the docs to install a fleet server on premise (generated certificates from the elasticsearch CA), curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-age…

[Previous page](https://discuss.elastic.co/top.md?page=174&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=176&per_page=50&period=all)
