# Top **URL:** https://discuss.elastic.co/top.md?page=176&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 177 --- ## [Rollup - Sum Bucket Aggregation results are buggy](https://discuss.elastic.co/t/rollup-sum-bucket-aggregation-results-are-buggy/145639)
**Author:** [@Paul\_Ainslie](https://discuss.elastic.co/u/Paul_Ainslie)\ **Replies:** 12\ **Last updated:** [September 3, 2018, 4:41pm UTC](https://discuss.elastic.co/t/rollup-sum-bucket-aggregation-results-are-buggy/145639 "2018-09-03T16:41:50Z")
This query works fine on a regular index, but when I run it against a rolled up index the resulting values are about 66% of what I'd expect. The rolled up index is also missing the sum\_bucket (not to be confused with th… --- ## [Manips to update the Discover board](https://discuss.elastic.co/t/manips-to-update-the-discover-board/223750)
**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\ **Replies:** 18\ **Last updated:** [March 19, 2020, 2:51pm UTC](https://discuss.elastic.co/t/manips-to-update-the-discover-board/223750 "2020-03-19T14:51:11Z")
Good morning, Actually, I use grok pipeline in Elasticsearch but it doesn't seem that the modifications apply when I change something on my pipeline. What are the manipulations to do to see them ? Regards. --- ## [Dev environment - testsuite failing on filebeat](https://discuss.elastic.co/t/dev-environment-testsuite-failing-on-filebeat/130265)
**Author:** [@mariomechoulam](https://discuss.elastic.co/u/mariomechoulam)\ **Replies:** 9\ **Last updated:** [May 4, 2018, 7:50am UTC](https://discuss.elastic.co/t/dev-environment-testsuite-failing-on-filebeat/130265 "2018-05-04T07:50:38Z")
Hello everyone! I would love to contribute to Beats, but I am having a hard time setting up the dev environment and validating the tests before starting any work. This would be my first Go project, apologies if somethin… --- ## [Faceted search with typeahead, Play! framework, MongoDB & ElasticSearch issues](https://discuss.elastic.co/t/faceted-search-with-typeahead-play-framework-mongodb-elasticsearch-issues/6881)
**Author:** [@Michal\_Kartak](https://discuss.elastic.co/u/Michal_Kartak)\ **Replies:** 9\ **Last updated:** [May 30, 2013, 2:49pm UTC](https://discuss.elastic.co/t/faceted-search-with-typeahead-play-framework-mongodb-elasticsearch-issues/6881 "2013-05-30T14:49:17Z")
Hi, first of all thanks Mr. Banon and all of you, who contributing to ES. It simply rocks ! Since i am new to ES and also to NoSQL world i'd like to ask some questions about ES and integration with other tec… --- ## [What are the requirements?](https://discuss.elastic.co/t/what-are-the-requirements/368279)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 52\ **Last updated:** [October 10, 2024, 7:27am UTC](https://discuss.elastic.co/t/what-are-the-requirements/368279 "2024-10-10T07:27:40Z")
Hi If I have 1500 devices and each device uploads about 3 GB of data per day How much do I need a node? And what are their specifications such as RAM, hard disk and CPU ? --- ## [\_source always zero in cardinality aggregation](https://discuss.elastic.co/t/source-always-zero-in-cardinality-aggregation/250677)
**Author:** [@autogenerated\_id](https://discuss.elastic.co/u/autogenerated_id)\ **Replies:** 11\ **Last updated:** [October 7, 2020, 10:59am UTC](https://discuss.elastic.co/t/source-always-zero-in-cardinality-aggregation/250677 "2020-10-07T10:59:02Z")
Hi! I've come across something that looks like a bug. When \_score is used in a cardinality aggregation, it always returns 0, no matter what the actual document scores are. Here's an example that illustrates it. A funct… --- ## [Connect Metricbeat to Elasticsearch 8.2.0 with password mode](https://discuss.elastic.co/t/connect-metricbeat-to-elasticsearch-8-2-0-with-password-mode/306311)
**Author:** [@Dreinale](https://discuss.elastic.co/u/Dreinale)\ **Replies:** 13\ **Last updated:** [June 8, 2022, 3:23pm UTC](https://discuss.elastic.co/t/connect-metricbeat-to-elasticsearch-8-2-0-with-password-mode/306311 "2022-06-08T15:23:49Z")
HI, I'm trying to connect metricbeat to my elasticsearch which I have configured yesterday with a password mode. (https://www.youtube.com/watch?v=kkrLanotz1I&t=461s). I have 2 users one is for elasticsearch (elastic) … --- ## [Help to increase number of shards on active index running close to 2B records](https://discuss.elastic.co/t/help-to-increase-number-of-shards-on-active-index-running-close-to-2b-records/239560)
**Author:** [@saiguru](https://discuss.elastic.co/u/saiguru)\ **Replies:** 9\ **Last updated:** [July 2, 2020, 2:53pm UTC](https://discuss.elastic.co/t/help-to-increase-number-of-shards-on-active-index-running-close-to-2b-records/239560 "2020-07-02T14:53:54Z")
I have 3 master and 2 data node with each 1TB cluster. I build a production index and it is reaching limit of 2B, how to increase # of shards to 10 on running index. ip heap.percent ram.percent cpu load\_1m load… --- ## [Making Docker container logs go through the right beats module for processing?](https://discuss.elastic.co/t/making-docker-container-logs-go-through-the-right-beats-module-for-processing/312126)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 10\ **Last updated:** [August 30, 2022, 5:15pm UTC](https://discuss.elastic.co/t/making-docker-container-logs-go-through-the-right-beats-module-for-processing/312126 "2022-08-30T17:15:29Z")
I've successfully configured Elastic Agent to grab my Docker container logs and send them to an ingest pipeline for processing. I'm using the JSON parser to get my fields and timestamp set up. But now I'm stuck on how t… --- ## [Problem with logstash passing files to ES](https://discuss.elastic.co/t/problem-with-logstash-passing-files-to-es/109399)
**Author:** [@Rodolphe\_Redoute](https://discuss.elastic.co/u/Rodolphe_Redoute)\ **Replies:** 11\ **Last updated:** [November 28, 2017, 4:18pm UTC](https://discuss.elastic.co/t/problem-with-logstash-passing-files-to-es/109399 "2017-11-28T16:18:06Z")
Hi, i'm having an issue with logstash. I'm getting logs files from a Filebeat and doing some grok pattern for every line of the log (tested on http://grokconstructor.appspot.com and working well for the grok part). But … --- ## [I am getting below error while setting elastic search](https://discuss.elastic.co/t/i-am-getting-below-error-while-setting-elastic-search/323019)
**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\ **Replies:** 9\ **Last updated:** [January 20, 2023, 1:50pm UTC](https://discuss.elastic.co/t/i-am-getting-below-error-while-setting-elastic-search/323019 "2023-01-20T13:50:20Z")
I am installing 8.5.3 elastic. after yml file change I am double clicking elasticsearch.bat file and service is not starting looks like. \[2023-01-12T14:38:25,268\]\[INFO \]\[o.e.n.Node \] \[node-1\] node name \[… --- ## [Error while indexing -java heap space](https://discuss.elastic.co/t/error-while-indexing-java-heap-space/9146)
**Author:** [@anuj](https://discuss.elastic.co/u/anuj)\ **Replies:** 16\ **Last updated:** [September 27, 2012, 2:06pm UTC](https://discuss.elastic.co/t/error-while-indexing-java-heap-space/9146 "2012-09-27T14:06:54Z")
Hi , I am creating index using ES on a server (16GB RAM, 8core). I have allocated 8GB RAM to ES. It has only one node with 4 Shards. I am using bulk api to index my data. So I send 200 docs in one batch , my total … --- ## [Getting error when try to install kibana plugin](https://discuss.elastic.co/t/getting-error-when-try-to-install-kibana-plugin/240110)
**Author:** [@Mahathir\_Mohammad](https://discuss.elastic.co/u/Mahathir_Mohammad)\ **Replies:** 9\ **Last updated:** [July 7, 2020, 8:44am UTC](https://discuss.elastic.co/t/getting-error-when-try-to-install-kibana-plugin/240110 "2020-07-07T08:44:15Z")
I'm trying to install "opendistro\_security\_kibana\_plugin-1.8.0.0.zip" package for kibana. I tried to install with sudo : sudo bin/kibana-plugin install https://d3g5vo6xdbdb9a.cloudfront.net/downloads/kibana-plugins/ope… --- ## [Problem with CrowdStrike](https://discuss.elastic.co/t/problem-with-crowdstrike/365146)
**Author:** [@sbeaudoin](https://discuss.elastic.co/u/sbeaudoin)\ **Replies:** 13\ **Last updated:** [September 17, 2024, 12:40pm UTC](https://discuss.elastic.co/t/problem-with-crowdstrike/365146 "2024-09-17T12:40:44Z")
Hello everyone, I want to integrate crowdstrike on my siem, the kibana interface. I have already preconfigured the following: Generation id and secret: https://api.eu-1.crowdstrike.com. Integration and preconfigu… --- ## [HTTPS config for Elasticsearch](https://discuss.elastic.co/t/https-config-for-elasticsearch/365073)
**Author:** [@BrainFried](https://discuss.elastic.co/u/BrainFried)\ **Replies:** 13\ **Last updated:** [August 18, 2024, 6:51pm UTC](https://discuss.elastic.co/t/https-config-for-elasticsearch/365073 "2024-08-18T18:51:15Z")
I've been stuck for a few days tying to enable HTTPS for public access from my elasticsearch javascript client. My elasticsearch server is running on the host machine. The server is only reachable using HTTP: curl -k -… --- ## [Stack Monitoring - Elasticsearch - Elastic](https://discuss.elastic.co/t/stack-monitoring-elasticsearch-elastic/312485)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 14\ **Last updated:** [September 5, 2022, 7:53am UTC](https://discuss.elastic.co/t/stack-monitoring-elasticsearch-elastic/312485 "2022-09-05T07:53:25Z")
Hello World! Via Kibana -\> Stack Monitoring Any ideas what causing so many spaces in between, why the line isn't solid? Thanks in advance! --- ## [Elasticsearch Query optimization](https://discuss.elastic.co/t/elasticsearch-query-optimization/222650)
**Author:** [@shikjind](https://discuss.elastic.co/u/shikjind)\ **Replies:** 12\ **Last updated:** [March 31, 2020, 7:07pm UTC](https://discuss.elastic.co/t/elasticsearch-query-optimization/222650 "2020-03-31T19:07:43Z")
We have the 780 GB of data at the elastic index, when triggering the below query :- { "query": { "function\_score": { "query": { "bool": { "must": \[ { "query\_string… --- ## [FileBeat Propector issue](https://discuss.elastic.co/t/filebeat-propector-issue/145494)
**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\ **Replies:** 10\ **Last updated:** [August 28, 2018, 1:02pm UTC](https://discuss.elastic.co/t/filebeat-propector-issue/145494 "2018-08-28T13:02:31Z")
Hi All, i am sending events of tomee via filebeat to kafka but getting below exceptions , can someone help me understanding it , looks like some configuration needs to be updated . ticker time , crawler , prospector o… --- ## [Using Fingerprint on metricbeat](https://discuss.elastic.co/t/using-fingerprint-on-metricbeat/339584)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 16\ **Last updated:** [August 9, 2023, 12:16am UTC](https://discuss.elastic.co/t/using-fingerprint-on-metricbeat/339584 "2023-08-09T00:16:12Z")
Hi there i'm trying to send data using metricbeat here v8.8.2 and i'm trying to use fingerprint as replacement of certificate\_authorities but i got an error like this {"log.level":"warn","@timestamp":"2023-07-29T07:26:… --- ## [Filebeat no connection could be made because the target machine actively refused it](https://discuss.elastic.co/t/filebeat-no-connection-could-be-made-because-the-target-machine-actively-refused-it/272302)
**Author:** [@Rashmika\_Gamage](https://discuss.elastic.co/u/Rashmika_Gamage)\ **Replies:** 9\ **Last updated:** [May 7, 2021, 8:55am UTC](https://discuss.elastic.co/t/filebeat-no-connection-could-be-made-because-the-target-machine-actively-refused-it/272302 "2021-05-07T08:55:23Z")
Hi all, I am trying to read logs from beats to logstash in the same machine. I am getting an error no connection could be made because the target machine actively refused it My logstash conf file input { beats … --- ## [Unable to install plugin because of proxy](https://discuss.elastic.co/t/unable-to-install-plugin-because-of-proxy/14371)
**Author:** [@Amit\_Soni](https://discuss.elastic.co/u/Amit_Soni)\ **Replies:** 9\ **Last updated:** [November 13, 2013, 4:22am UTC](https://discuss.elastic.co/t/unable-to-install-plugin-because-of-proxy/14371 "2013-11-13T04:22:02Z")
Hi all - My servers use a proxy for outbound internet traffic and hence I have exported http\_proxy. I am able to curl to external websites (http as well as https) but I am unable to install the head plugin. … --- ## [Seamingly sporadic increases in indexing latency](https://discuss.elastic.co/t/seamingly-sporadic-increases-in-indexing-latency/261166)
**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\ **Replies:** 21\ **Last updated:** [January 17, 2021, 10:29pm UTC](https://discuss.elastic.co/t/seamingly-sporadic-increases-in-indexing-latency/261166 "2021-01-17T22:29:30Z")
We have a setup where Flink is writing to Elasticsearch, and at sporadic moments latency increases due to volume of IOPS. Looking for suggestions. Attached are some graphs, when IOPS are high, indexing latency is high, … --- ## [JSON structure & querying object hierarchies](https://discuss.elastic.co/t/json-structure-querying-object-hierarchies/3019)
**Author:** [@MJ\_Suhonos](https://discuss.elastic.co/u/MJ_Suhonos)\ **Replies:** 10\ **Last updated:** [June 15, 2010, 8:54pm UTC](https://discuss.elastic.co/t/json-structure-querying-object-hierarchies/3019 "2010-06-15T20:54:31Z")
Hi all, Apologies if this is a silly question, but I'm still learning the commonalities of JSON. I'm able to make a JSON structure which is being indexed, but not queryable using object-dot-notation. eg. a docume… --- ## [Forcemerge failed ( java.lang.ArrayIndexOutOfBoundsException )](https://discuss.elastic.co/t/forcemerge-failed-java-lang-arrayindexoutofboundsexception/136317)
**Author:** [@pfseth](https://discuss.elastic.co/u/pfseth)\ **Replies:** 12\ **Last updated:** [June 21, 2018, 4:21pm UTC](https://discuss.elastic.co/t/forcemerge-failed-java-lang-arrayindexoutofboundsexception/136317 "2018-06-21T16:21:28Z")
Hi, I run curator ( forcemerge ) on previous day's indices to reduce the segment sizes, however of late i have observed the merge operation failing and in turn brings down the cluster. Appreciate any feedback ( Image a… --- ## [Vega radio input don't show defaul](https://discuss.elastic.co/t/vega-radio-input-dont-show-defaul/243182)
**Author:** [@Michaela\_Krkosova](https://discuss.elastic.co/u/Michaela_Krkosova)\ **Replies:** 11\ **Last updated:** [August 12, 2020, 12:40am UTC](https://discuss.elastic.co/t/vega-radio-input-dont-show-defaul/243182 "2020-08-12T00:40:24Z")
Hi to all I have Vega visualization with radio input signal. "signals": \[ {"name": "Zobrazení", "value": "Celkově", "bind": {"input": "radio", "options": \["Celkově", "Po zaměstnancích"\]}}, {"name": "Období", "value":… --- ## [Connector with postgresql not connect](https://discuss.elastic.co/t/connector-with-postgresql-not-connect/344196)
**Author:** [@irianvillalba](https://discuss.elastic.co/u/irianvillalba)\ **Replies:** 9\ **Last updated:** [October 4, 2023, 7:21pm UTC](https://discuss.elastic.co/t/connector-with-postgresql-not-connect/344196 "2023-10-04T19:21:08Z")
I'm having a problem with the postgresql connector, it's the first time I've tried to use it. I installed the entire elk suite in a container, I uploaded elastic, kibana, apm-server and enterprise-search, all properly in… --- ## [3 node ES cluster on single vm](https://discuss.elastic.co/t/3-node-es-cluster-on-single-vm/180266)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 9\ **Last updated:** [June 4, 2019, 7:39pm UTC](https://discuss.elastic.co/t/3-node-es-cluster-on-single-vm/180266 "2019-06-04T19:39:15Z")
HI I want to setup a 3 node ES cluster on one VM. I tried to install and configure but seeing issues. I installed ES to two different directories and configured it . But I am seeing error. My elasticsearch.yml file .… --- ## [Tableau Connector for Elasticsearch connecting string details](https://discuss.elastic.co/t/tableau-connector-for-elasticsearch-connecting-string-details/251907)
**Author:** [@Prabhu.292](https://discuss.elastic.co/u/Prabhu.292)\ **Replies:** 10\ **Last updated:** [November 8, 2020, 12:34pm UTC](https://discuss.elastic.co/t/tableau-connector-for-elasticsearch-connecting-string-details/251907 "2020-11-08T12:34:33Z")
Hi Team, By using this link : https://extensiongallery.tableau.com/connectors/180?version=2019.4&per-page=50&loginRedirected Using this above link from the Tableau gallery I have installed the JDBC driver and it is suc… --- ## [Jmxri and jmxtools Maven artefacts](https://discuss.elastic.co/t/jmxri-and-jmxtools-maven-artefacts/2938)
**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\ **Replies:** 10\ **Last updated:** [May 3, 2010, 9:12pm UTC](https://discuss.elastic.co/t/jmxri-and-jmxtools-maven-artefacts/2938 "2010-05-03T21:12:47Z")
Hi, I am trying to use elasticsearch in maven project. I built 0.7.0-snapshot locally and installed into local maven repo. But when added this dependency into my maven project then it requires transitive dependencie… --- ## [Apparent infinite loop in node recovery](https://discuss.elastic.co/t/apparent-infinite-loop-in-node-recovery/3209)
**Author:** [@Grant\_Rodgers](https://discuss.elastic.co/u/Grant_Rodgers)\ **Replies:** 15\ **Last updated:** [August 13, 2010, 10:08pm UTC](https://discuss.elastic.co/t/apparent-infinite-loop-in-node-recovery/3209 "2010-08-13T22:08:16Z")
We had an incident yesterday where a node ran out of memory while indexing and the elasticsearch process was killed. Now i'm trying to recover today and noticing what seems to be an infinite loop in the recovery proce… --- ## [How to get data from large JDBC quires?](https://discuss.elastic.co/t/how-to-get-data-from-large-jdbc-quires/254647)
**Author:** [@I\_Hathout](https://discuss.elastic.co/u/I_Hathout)\ **Replies:** 12\ **Last updated:** [November 30, 2020, 6:04pm UTC](https://discuss.elastic.co/t/how-to-get-data-from-large-jdbc-quires/254647 "2020-11-30T18:04:05Z")
Hello, I am trying to get data from a postgres database using JDBC. I managed to get data to stdout by using only 3 fields, but it fails because of the large number of fields in the query. here is the output from runni… --- ## [Access Elasticsearch 2.2 outside not work on iPad/iPhone](https://discuss.elastic.co/t/access-elasticsearch-2-2-outside-not-work-on-ipad-iphone/45354)
**Author:** [@Nos2016](https://discuss.elastic.co/u/Nos2016)\ **Replies:** 9\ **Last updated:** [March 29, 2016, 10:58am UTC](https://discuss.elastic.co/t/access-elasticsearch-2-2-outside-not-work-on-ipad-iphone/45354 "2016-03-29T10:58:33Z")
Hi, I installed Elasticsearch 2.2 on VPS Debian. I configured network.host to 0.0.0.0 in elasticsearch.yml file. I created a web site where I connect to elasticsearch to get data. It works on Desktop but I received thi… --- ## [Max Window Size is Set to 10000 but the Terms aggregations is giving single filter value larger than max window size.](https://discuss.elastic.co/t/max-window-size-is-set-to-10000-but-the-terms-aggregations-is-giving-single-filter-value-larger-than-max-window-size/348924)
**Author:** [@santhosh.linga](https://discuss.elastic.co/u/santhosh.linga)\ **Replies:** 11\ **Last updated:** [December 19, 2023, 10:30pm UTC](https://discuss.elastic.co/t/max-window-size-is-set-to-10000-but-the-terms-aggregations-is-giving-single-filter-value-larger-than-max-window-size/348924 "2023-12-19T22:30:18Z")
We have created an index and are querying the index to display the complete dataset. However, we have encountered performance issues, as we are dealing with 1 million records in response to user search queries. To addres… --- ## [Are there Filebeats Default Kibana Dashboards for 5.0 like there were for previous versions?](https://discuss.elastic.co/t/are-there-filebeats-default-kibana-dashboards-for-5-0-like-there-were-for-previous-versions/55580)
**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\ **Replies:** 9\ **Last updated:** [July 17, 2016, 10:30pm UTC](https://discuss.elastic.co/t/are-there-filebeats-default-kibana-dashboards-for-5-0-like-there-were-for-previous-versions/55580 "2016-07-17T22:30:07Z")
Simply the question in the title. In Filebeats 1.x and Kibana 4.x, there was a set of 'default' or demo dashboards that you could download and install from a repo that is now Deprecated and has a link to the new repo… --- ## [Getting LAST record in aggr in ES|QL](https://discuss.elastic.co/t/getting-last-record-in-aggr-in-es-ql/372903)
**Author:** [@jfsardon](https://discuss.elastic.co/u/jfsardon)\ **Replies:** 11\ **Last updated:** [April 16, 2026, 6:33pm UTC](https://discuss.elastic.co/t/getting-last-record-in-aggr-in-es-ql/372903 "2026-04-16T18:33:40Z")
Is there an simple way to get the last value of a field (@timestamp sorted) for each customer, hostname, etc.. For example : select logs-myindex-xxx | SORT (@timestamp) | STATS LAST (maxsize) BY customer, hostname... b… --- ## [CSV conf ig does not parse properly](https://discuss.elastic.co/t/csv-conf-ig-does-not-parse-properly/107847)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 9\ **Last updated:** [November 16, 2017, 8:10pm UTC](https://discuss.elastic.co/t/csv-conf-ig-does-not-parse-properly/107847 "2017-11-16T20:10:38Z")
I use a simple csv config file as shown below. A input { file { path =\> "/Users/pgervais/Elk/mach.csv” start\_position =\> “beginning” sincedb\_path =\> “/dev/null” } } filter { csv { convert =\> { "ObsDate" =\> “d… --- ## [Issue with thread\_pool.write.queue\_size](https://discuss.elastic.co/t/issue-with-thread-pool-write-queue-size/354951)
**Author:** [@cesar.hernandez.a3se](https://discuss.elastic.co/u/cesar.hernandez.a3se)\ **Replies:** 12\ **Last updated:** [March 12, 2024, 2:39pm UTC](https://discuss.elastic.co/t/issue-with-thread-pool-write-queue-size/354951 "2024-03-12T14:39:43Z")
Hi He have been experiencing issues the last days on all nodes of our ES cluster, we see lots of these messages: \[2024-03-05T01:07:37,648\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[elastic-loggerpro05\] unexpected error while … --- ## [Add elasticsearch node multiple machine](https://discuss.elastic.co/t/add-elasticsearch-node-multiple-machine/223443)
**Author:** [@Charles\_Yuliansen](https://discuss.elastic.co/u/Charles_Yuliansen)\ **Replies:** 16\ **Last updated:** [March 17, 2020, 8:40am UTC](https://discuss.elastic.co/t/add-elasticsearch-node-multiple-machine/223443 "2020-03-17T08:40:39Z")
Hi, im currently doing some poc about add node to elasticsearch cluster with multiple machine. The master node should be x.x.x.246 and the data node that i want to add is x.x.x.99. Running the latest elasticsearch 7.6. I… --- ## [Configuring elasticsearch 6.X cluster on aws instances](https://discuss.elastic.co/t/configuring-elasticsearch-6-x-cluster-on-aws-instances/168014)
**Author:** [@amitnegi6190](https://discuss.elastic.co/u/amitnegi6190)\ **Replies:** 14\ **Last updated:** [February 15, 2019, 9:27am UTC](https://discuss.elastic.co/t/configuring-elasticsearch-6-x-cluster-on-aws-instances/168014 "2019-02-15T09:27:27Z")
Hi, I am trying to set up elasticsearch on my aws instance. I have installed elasticsearch 6.6 on the instance and elasticsearch is running locally. What configuration changes should I make in the elasticsearch.yml file… --- ## [Unable to ship logs from beats to logstash](https://discuss.elastic.co/t/unable-to-ship-logs-from-beats-to-logstash/316048)
**Author:** [@charlot\_Attard](https://discuss.elastic.co/u/charlot_Attard)\ **Replies:** 24\ **Last updated:** [October 19, 2022, 1:29pm UTC](https://discuss.elastic.co/t/unable-to-ship-logs-from-beats-to-logstash/316048 "2022-10-19T13:29:48Z")
I have configured beats to ouput logs to logstash via 2 servers. The problem is that for some reason logs are not being shipped to Logstash, I even ran a tcpdump on logstash servers and can't find anything relevant. What… --- ## [How to move breadcrumbs of plugin to top header](https://discuss.elastic.co/t/how-to-move-breadcrumbs-of-plugin-to-top-header/248697)
**Author:** [@praveer](https://discuss.elastic.co/u/praveer)\ **Replies:** 10\ **Last updated:** [October 12, 2020, 1:48pm UTC](https://discuss.elastic.co/t/how-to-move-breadcrumbs-of-plugin-to-top-header/248697 "2020-10-12T13:48:32Z")
Hi Team, I am trying to create a plugin in kibana. I need to move my breadcrumbs to the top nav bar where kibana breadcrumbs are being displayed. I have attached screenshot explaining the same. Please help me out in th… --- ## [ES loses the data being collected when deleting the index](https://discuss.elastic.co/t/es-loses-the-data-being-collected-when-deleting-the-index/160377)
**Author:** [@horaceli](https://discuss.elastic.co/u/horaceli)\ **Replies:** 13\ **Last updated:** [December 21, 2018, 9:10am UTC](https://discuss.elastic.co/t/es-loses-the-data-being-collected-when-deleting-the-index/160377 "2018-12-21T09:10:19Z")
es lose data when the cluster is deleting index.As shown below how to fix the problem? I mean, when I delete the index, the amount of data being collected is also reduced.The picture shows the amount of data collected … --- ## [Filebeat netflow module reject document with status 400](https://discuss.elastic.co/t/filebeat-netflow-module-reject-document-with-status-400/356561)
**Author:** [@metie](https://discuss.elastic.co/u/metie)\ **Replies:** 16\ **Last updated:** [April 13, 2024, 10:53am UTC](https://discuss.elastic.co/t/filebeat-netflow-module-reject-document-with-status-400/356561 "2024-04-13T10:53:34Z")
Hello, I've updated filebeat, elasticsearch and kibana from the version 8.12.2 to 8.13.0 on ubuntu. After that i get an error when the stack is trying to ingest netflow. filebeat\[2101\]: {"log.level":"debug","@timestamp… --- ## [Getting logs in other index](https://discuss.elastic.co/t/getting-logs-in-other-index/110016)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 9\ **Last updated:** [December 11, 2017, 3:03pm UTC](https://discuss.elastic.co/t/getting-logs-in-other-index/110016 "2017-12-11T15:03:49Z")
Hi Guys, I am kinda facing weird issue! I have configured two config file and have created two different indices which are indexing my bind and Apache logs. However my bind logs are getting successfully parsed and even… --- ## [100% processor usage](https://discuss.elastic.co/t/100-processor-usage/8749)
**Author:** [@Marcin\_Dojwa](https://discuss.elastic.co/u/Marcin_Dojwa)\ **Replies:** 24\ **Last updated:** [October 4, 2012, 11:18am UTC](https://discuss.elastic.co/t/100-processor-usage/8749 "2012-10-04T11:18:22Z")
Hi, I have the following problem. I have 2 nodes. I started importing data into one of them (node A). After few hours of importing process the node B started using 100% processor and hardly answered other search and… --- ## [Querying only logs coming from source x](https://discuss.elastic.co/t/querying-only-logs-coming-from-source-x/89849)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 11\ **Last updated:** [June 27, 2017, 10:10am UTC](https://discuss.elastic.co/t/querying-only-logs-coming-from-source-x/89849 "2017-06-27T10:10:45Z")
Hi, I am trying to search only logs that come from a certain source. Here is what I tried to do: GET filebeat-\*/log/\_search { "query": { "bool":{ "must": \[ { "match": { "source": "\\/opt\\/modulo… --- ## [Filebeat issue in configuration file](https://discuss.elastic.co/t/filebeat-issue-in-configuration-file/147062)
**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\ **Replies:** 13\ **Last updated:** [September 5, 2018, 12:12pm UTC](https://discuss.elastic.co/t/filebeat-issue-in-configuration-file/147062 "2018-09-05T12:12:15Z")
We have created this config file but file beat is sending only one file at a time it is not sending the second path file which i have put in the filebeat config file. this is the config filebeat: prospectors: paths:… --- ## [Merge did not occur automatically](https://discuss.elastic.co/t/merge-did-not-occur-automatically/8526)
**Author:** [@arta](https://discuss.elastic.co/u/arta)\ **Replies:** 9\ **Last updated:** [July 30, 2012, 8:24pm UTC](https://discuss.elastic.co/t/merge-did-not-occur-automatically/8526 "2012-07-30T20:24:14Z")
Hi, I encountered 'Too many open files' after indexing a little more than 1 billion docs. I use ES 1.19.3, 6 nodes in the cluster, 67 indices, 32 shards / index, 1 replica / index. My /etc/security/limits.conf allo… --- ## [ES 6.8 Force primary shards of the same index to be allocated to different physical hosts](https://discuss.elastic.co/t/es-6-8-force-primary-shards-of-the-same-index-to-be-allocated-to-different-physical-hosts/217434)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 13\ **Last updated:** [February 5, 2020, 9:42am UTC](https://discuss.elastic.co/t/es-6-8-force-primary-shards-of-the-same-index-to-be-allocated-to-different-physical-hosts/217434 "2020-02-05T09:42:32Z")
Hi Team, Is there a way to force primary shards in the same index to be allocated to different physical hosts? (I mean a physical server and not an elasticsearch node.) I know we can do this for replicas of the same sh… --- ## [Logstash write to kafka's nonexistent topic, but no errors/warns in debug log](https://discuss.elastic.co/t/logstash-write-to-kafkas-nonexistent-topic-but-no-errors-warns-in-debug-log/286193)
**Author:** [@silbertmonaphia](https://discuss.elastic.co/u/silbertmonaphia)\ **Replies:** 12\ **Last updated:** [October 12, 2021, 3:50am UTC](https://discuss.elastic.co/t/logstash-write-to-kafkas-nonexistent-topic-but-no-errors-warns-in-debug-log/286193 "2021-10-12T03:50:11Z")
Description: Logstash writes event to kafka, but I forgot to create topic on kafka. And then I check logstash logs, but I can't find any error or warn messages in logs. Is this a bug of logstash 5.5 that logstash isn't … [Previous page](https://discuss.elastic.co/top.md?page=175&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=177&per_page=50&period=all)