# Top **URL:** https://discuss.elastic.co/top.md?page=177&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 178 --- ## [Geo\_shape query accuracy](https://discuss.elastic.co/t/geo-shape-query-accuracy/208244)
**Author:** [@Raven\_Ariola](https://discuss.elastic.co/u/Raven_Ariola)\ **Replies:** 13\ **Last updated:** [November 18, 2019, 9:41am UTC](https://discuss.elastic.co/t/geo-shape-query-accuracy/208244 "2019-11-18T09:41:01Z")
My geo\_shape query filters points based from a region polygon. I'm having results that is out of bounds of the polygon and I'm using within relation. Can someone help me to make the results accurate. Thanks. --- ## [Kibana can not use x-pack feature](https://discuss.elastic.co/t/kibana-can-not-use-x-pack-feature/166849)
**Author:** [@chenjienn](https://discuss.elastic.co/u/chenjienn)\ **Replies:** 13\ **Last updated:** [February 4, 2019, 3:16am UTC](https://discuss.elastic.co/t/kibana-can-not-use-x-pack-feature/166849 "2019-02-04T03:16:30Z")
I have set up elasticsearch cluster and try to use kibana, but it seems the kibana can not obtained the x-pack information here is my kibana and es config server.host: "10.18.1.50" server.name: "mdw\_dev" elasticsea… --- ## [Error in elastic search apm during performance testing](https://discuss.elastic.co/t/error-in-elastic-search-apm-during-performance-testing/143202)
**Author:** [@chandra0651](https://discuss.elastic.co/u/chandra0651)\ **Replies:** 9\ **Last updated:** [August 27, 2018, 11:23am UTC](https://discuss.elastic.co/t/error-in-elastic-search-apm-during-performance-testing/143202 "2018-08-27T11:23:38Z")
Hello i installed an APM in one of my machine and started a spring boot app with apm jar to send the metrics, i am receving the data from the app correctly but when we do performance testing on the app with 1000 requests… --- ## [JSON Parse an already parsed field](https://discuss.elastic.co/t/json-parse-an-already-parsed-field/147006)
**Author:** [@jibsonline](https://discuss.elastic.co/u/jibsonline)\ **Replies:** 10\ **Last updated:** [September 4, 2018, 6:11am UTC](https://discuss.elastic.co/t/json-parse-an-already-parsed-field/147006 "2018-09-04T06:11:05Z")
I have the following field parsed using JSON filter json { source =\> "log" target =\> "request" skip\_on\_invalid\_json =\> true } But there is a field in "request" which still prints as JSON S… --- ## [Cannot start elasticsearch on Centos8](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-centos8/235961)
**Author:** [@uek](https://discuss.elastic.co/u/uek)\ **Replies:** 13\ **Last updated:** [June 6, 2020, 9:07pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-centos8/235961 "2020-06-06T21:07:29Z")
Hi fellows, I installed elasticsearch 7 on my centos 8 machine via yum following this howto: https://www.howtoforge.com/how-to-install-elastic-stack-on-centos-8/ Anything worked fine so far, but wehen I try to start el… --- ## [Replace @timestamp to time from actual log file](https://discuss.elastic.co/t/replace-timestamp-to-time-from-actual-log-file/236330)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 11\ **Last updated:** [June 9, 2020, 2:02pm UTC](https://discuss.elastic.co/t/replace-timestamp-to-time-from-actual-log-file/236330 "2020-06-09T14:02:56Z")
Hello it is possible to Change @timestamp to time from actual log file I use this config filter { date { match =\> \["timestamp", "ISO8601"\] } } But it does not work --- ## [Maps are not showing data if logstash is used](https://discuss.elastic.co/t/maps-are-not-showing-data-if-logstash-is-used/233679)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 12\ **Last updated:** [May 26, 2020, 1:48pm UTC](https://discuss.elastic.co/t/maps-are-not-showing-data-if-logstash-is-used/233679 "2020-05-26T13:48:17Z")
When i directly send data to Elasticsearch i am able to see the maps data in SIEM and Netflow geolocations. But if i send data through the Logstash i am missing data in SIEM maps and Netflow geoip locations. To get dat… --- ## [How backup delete indices](https://discuss.elastic.co/t/how-backup-delete-indices/275080)
**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\ **Replies:** 17\ **Last updated:** [June 8, 2021, 12:59am UTC](https://discuss.elastic.co/t/how-backup-delete-indices/275080 "2021-06-08T00:59:06Z")
Hi! System indexes were accidentally deleted, name: .kibana, .kibana\_1, .kibana\_task\_manager, .security, .security-7 Log text on Elasticsearch: \[2021-06-02T17:44:32,369\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[AGILEVLG… --- ## [High cpu usage after ES update to 7.17.7](https://discuss.elastic.co/t/high-cpu-usage-after-es-update-to-7-17-7/321143)
**Author:** [@anon90868141](https://discuss.elastic.co/u/anon90868141)\ **Replies:** 14\ **Last updated:** [December 15, 2022, 2:40pm UTC](https://discuss.elastic.co/t/high-cpu-usage-after-es-update-to-7-17-7/321143 "2022-12-15T14:40:59Z")
Hello, after an update from 7.16.2 to 7.17.7, we're experiencing about double the CPU usage without changing anything else. This happens during all time and the usage basically never dropped below the new baseline. When… --- ## [Log\_file\_path](https://discuss.elastic.co/t/log-file-path/267727)
**Author:** [@christos\_zivlas](https://discuss.elastic.co/u/christos_zivlas)\ **Replies:** 9\ **Last updated:** [April 12, 2021, 12:29am UTC](https://discuss.elastic.co/t/log-file-path/267727 "2021-04-12T00:29:09Z")
Hi i am using filebeat on windows to get some application logs. Messages are harvest using a wildcard path. messages coming in do not contain the path of the log, is there a way to place such a field in the log message? --- ## [Autodiscover drop default filebeat index](https://discuss.elastic.co/t/autodiscover-drop-default-filebeat-index/237237)
**Author:** [@Shiny\_Hou](https://discuss.elastic.co/u/Shiny_Hou)\ **Replies:** 9\ **Last updated:** [June 19, 2020, 6:05am UTC](https://discuss.elastic.co/t/autodiscover-drop-default-filebeat-index/237237 "2020-06-19T06:05:14Z")
I don't want need filbeat-version-%{+yyyy.MM.dd} Index, my config don't have the config ， but the container log still input to filbeat-version-%{+yyyy.MM.dd} --- filebeat.autodiscover: providers: - type… --- ## [Logstash: convert lambert to latitude and logitude](https://discuss.elastic.co/t/logstash-convert-lambert-to-latitude-and-logitude/58915)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 9\ **Last updated:** [October 3, 2016, 10:37am UTC](https://discuss.elastic.co/t/logstash-convert-lambert-to-latitude-and-logitude/58915 "2016-10-03T10:37:50Z")
Hello folks, I am working on a project where I have in my input data some coordinates in lambert. i would like to convert these coordinates in latitude and longitude. I found on internet a function in ruby to do it: ht… --- ## [Help with Logstash Conf file](https://discuss.elastic.co/t/help-with-logstash-conf-file/46857)
**Author:** [@suneel](https://discuss.elastic.co/u/suneel)\ **Replies:** 9\ **Last updated:** [April 9, 2016, 9:35am UTC](https://discuss.elastic.co/t/help-with-logstash-conf-file/46857 "2016-04-09T09:35:13Z")
HI I need assistance in getting logstash config for reading json format file into logstash. I need to be able to extract 1460157360000 as timestamp and 0.6706035137176514 as metric value within the message. At this sta… --- ## [How to input CSV files into Logstash from a front end UI?](https://discuss.elastic.co/t/how-to-input-csv-files-into-logstash-from-a-front-end-ui/145246)
**Author:** [@APJ](https://discuss.elastic.co/u/APJ)\ **Replies:** 11\ **Last updated:** [August 27, 2018, 8:06pm UTC](https://discuss.elastic.co/t/how-to-input-csv-files-into-logstash-from-a-front-end-ui/145246 "2018-08-27T20:06:42Z")
Hi all, I am developing a JavaScript application (Backend in Node.js and Frontend in Vue.js), wherein I want to send CSV data into logstash from the front end or UI, i.e, the user can choose any CSV file from local syst… --- ## [Field is of the wrong type](https://discuss.elastic.co/t/field-is-of-the-wrong-type/348762)
**Author:** [@soad20000](https://discuss.elastic.co/u/soad20000)\ **Replies:** 10\ **Last updated:** [December 7, 2023, 10:57pm UTC](https://discuss.elastic.co/t/field-is-of-the-wrong-type/348762 "2023-12-07T22:57:50Z")
Hello, I am getting an error when trying to use some fields that apparently aren't being mapped correctly. The fields are source.ip, source.port, destination.ip, and destination.port I have checked the mapping of th… --- ## [Java Heap dump consuming disk space](https://discuss.elastic.co/t/java-heap-dump-consuming-disk-space/283068)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 11\ **Last updated:** [September 9, 2021, 11:35am UTC](https://discuss.elastic.co/t/java-heap-dump-consuming-disk-space/283068 "2021-09-09T11:35:41Z")
We have been getting java heap out of memory errors quite regularly, so this time we decided to take the heap dump and analyze it. But, unfortunately its tough for us to make anything out of it. So we are seeking for … --- ## [Docker network at kubernetes](https://discuss.elastic.co/t/docker-network-at-kubernetes/165203)
**Author:** [@hohooss](https://discuss.elastic.co/u/hohooss)\ **Replies:** 19\ **Last updated:** [March 9, 2020, 2:45pm UTC](https://discuss.elastic.co/t/docker-network-at-kubernetes/165203 "2020-03-09T14:45:30Z")
Hello, I would like to have the network traffic of each container that runs on the Kubernetes cluster retrieved by the metricbeat. I have embed the following configuration (check bold) at the configmap yaml, but metricb… --- ## [Filebeat sophos module error: Provided Grok expressions do not match field value](https://discuss.elastic.co/t/filebeat-sophos-module-error-provided-grok-expressions-do-not-match-field-value/304675)
**Author:** [@Joshua\_H](https://discuss.elastic.co/u/Joshua_H)\ **Replies:** 16\ **Last updated:** [May 18, 2022, 1:56pm UTC](https://discuss.elastic.co/t/filebeat-sophos-module-error-provided-grok-expressions-do-not-match-field-value/304675 "2022-05-18T13:56:11Z")
Hello Everyone, I am trying to setup the Filebeat Sophos Module for a Sophos-XG Firewall. Filebeat Output is send directly to Elasticsearch. I enabled the sophos module and the initialized it sucessfully with filebeat… --- ## [Packetbeat is not monitoring any network traffic!](https://discuss.elastic.co/t/packetbeat-is-not-monitoring-any-network-traffic/96403)
**Author:** [@DharaniKumar](https://discuss.elastic.co/u/DharaniKumar)\ **Replies:** 9\ **Last updated:** [August 12, 2017, 4:08am UTC](https://discuss.elastic.co/t/packetbeat-is-not-monitoring-any-network-traffic/96403 "2017-08-12T04:08:22Z")
Hi, i’m using packetbeat 5.5.0 in my ubuntu machine. For test sake i commented out all the protocols except mysql(in my old app server), as i wanted to monitor mysql traffic in kibana. But i don’t know whats the issue a… --- ## [Kibana dashboard filter doesn't work](https://discuss.elastic.co/t/kibana-dashboard-filter-doesnt-work/330675)
**Author:** [@tonyaw](https://discuss.elastic.co/u/tonyaw)\ **Replies:** 10\ **Last updated:** [April 26, 2023, 5:44am UTC](https://discuss.elastic.co/t/kibana-dashboard-filter-doesnt-work/330675 "2023-04-26T05:44:25Z")
I created a Kibana dashboard contains a Lens visualization. I'm trying to use filter to get data for "cluster\_id == 77" OR "cluster\_id==80", But what Lens shows is cluster\_id == from 77 to 80. Could you please help to … --- ## [TLS issue with Filebeat 8.10 an higher](https://discuss.elastic.co/t/tls-issue-with-filebeat-8-10-an-higher/345606)
**Author:** [@Somecallmesteve](https://discuss.elastic.co/u/Somecallmesteve)\ **Replies:** 20\ **Last updated:** [October 30, 2023, 9:54pm UTC](https://discuss.elastic.co/t/tls-issue-with-filebeat-8-10-an-higher/345606 "2023-10-30T21:54:40Z")
I started trying to upgrade some clients to Filebeat 8.10.3 and found that if I install 8.10.x I get the following error when connecting to a Logstash output using tsl : "...x509: cannot validate certificate for X.X.X.X… --- ## [How to download platinum and enterprise version of elasticsearch for free trail](https://discuss.elastic.co/t/how-to-download-platinum-and-enterprise-version-of-elasticsearch-for-free-trail/339256)
**Author:** [@ashishshukla](https://discuss.elastic.co/u/ashishshukla)\ **Replies:** 19\ **Last updated:** [July 27, 2023, 10:23am UTC](https://discuss.elastic.co/t/how-to-download-platinum-and-enterprise-version-of-elasticsearch-for-free-trail/339256 "2023-07-27T10:23:59Z")
Please provide the link for download platinum or enterprise version of elasticsearch for free trail in Linux and rpm system. --- ## [Howto retry from begining the today log file into es](https://discuss.elastic.co/t/howto-retry-from-begining-the-today-log-file-into-es/82842)
**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\ **Replies:** 9\ **Last updated:** [April 21, 2017, 11:21am UTC](https://discuss.elastic.co/t/howto-retry-from-begining-the-today-log-file-into-es/82842 "2017-04-21T11:21:23Z")
howto retry from begining the today log file into es when i run follow command rm -rf filebeat/data/registry restart filebeat service the result: ES display curent time not today log file begining line --- ## [Support for getting API mapping in parameterized URLs](https://discuss.elastic.co/t/support-for-getting-api-mapping-in-parameterized-urls/232445)
**Author:** [@krishnavk](https://discuss.elastic.co/u/krishnavk)\ **Replies:** 10\ **Last updated:** [May 26, 2020, 2:13pm UTC](https://discuss.elastic.co/t/support-for-getting-api-mapping-in-parameterized-urls/232445 "2020-05-26T14:13:48Z")
Elasticsearch version: 6.8.4 APM Server version: 7.6.0 APM Agent language and version: Java - 1.16.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Download page Fresh inst… --- ## [Not getting any ouput](https://discuss.elastic.co/t/not-getting-any-ouput/34172)
**Author:** [@Jackal9301](https://discuss.elastic.co/u/Jackal9301)\ **Replies:** 11\ **Last updated:** [November 10, 2015, 2:33pm UTC](https://discuss.elastic.co/t/not-getting-any-ouput/34172 "2015-11-10T14:33:12Z")
I'm trying to see the output of an if statement with grok filters. Logstash says it's starting however there is no file ever created in my output. Shouldn't I be seeing something even if there arent any matches? Test i… --- ## [Unable to find scripts file on disk exception](https://discuss.elastic.co/t/unable-to-find-scripts-file-on-disk-exception/125365)
**Author:** [@saii](https://discuss.elastic.co/u/saii)\ **Replies:** 14\ **Last updated:** [March 28, 2018, 1:41pm UTC](https://discuss.elastic.co/t/unable-to-find-scripts-file-on-disk-exception/125365 "2018-03-28T13:41:46Z")
I have found a script on the following link https://www.elastic.co/blog/implementing-a-statistical-anomaly-deetector-part-3 The data collection watch in this link contains a script, which when it runs on rest api gives… --- ## [Rollup job unable to start](https://discuss.elastic.co/t/rollup-job-unable-to-start/254266)
**Author:** [@kaijun](https://discuss.elastic.co/u/kaijun)\ **Replies:** 9\ **Last updated:** [November 10, 2020, 10:46pm UTC](https://discuss.elastic.co/t/rollup-job-unable-to-start/254266 "2020-11-10T22:46:29Z")
I've created a new rollup job using the PUT \_rollup/job/\ api. I received an acknowledged response and the new rollup index is created. However, when I try to start the job using POST \_rollup/job/\/\_start, … --- ## [Elastic Search High CPU 100%](https://discuss.elastic.co/t/elastic-search-high-cpu-100/13195)
**Author:** [@anasjaghoub](https://discuss.elastic.co/u/anasjaghoub)\ **Replies:** 9\ **Last updated:** [August 13, 2013, 3:42pm UTC](https://discuss.elastic.co/t/elastic-search-high-cpu-100/13195 "2013-08-13T15:42:19Z")
I've a problem with elastic search that it consumes 100% of cpu when I do search with faceting for a huge index around 5g its size and have more that 1Million docs inside. Attached is file for hot thread dump whe… --- ## [How to set elasticsearch jvm heap size?](https://discuss.elastic.co/t/how-to-set-elasticsearch-jvm-heap-size/261611)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 10\ **Last updated:** [January 20, 2021, 11:54am UTC](https://discuss.elastic.co/t/how-to-set-elasticsearch-jvm-heap-size/261611 "2021-01-20T11:54:57Z")
If I have a 16C64G machine and install CentOS7.6 on it, There is 62gb available memory. total used free shared buff/cache available Mem: 62 34 0 … --- ## [Kibana X-pack Machine Learning Jobs list could not be retrieved](https://discuss.elastic.co/t/kibana-x-pack-machine-learning-jobs-list-could-not-be-retrieved/117501)
**Author:** [@thirusama](https://discuss.elastic.co/u/thirusama)\ **Replies:** 10\ **Last updated:** [January 30, 2018, 4:38pm UTC](https://discuss.elastic.co/t/kibana-x-pack-machine-learning-jobs-list-could-not-be-retrieved/117501 "2018-01-30T16:38:52Z")
Versions being used ( all are installed on a single node). logstash-6.0.1 elasticsearch-6.1.1 kibana-6.1.1-linux-x86\_64 I am getting the error in Machine learning -\> Job Management Page. Error: Job list could not be… --- ## [Monitoring data not same with curl count why?](https://discuss.elastic.co/t/monitoring-data-not-same-with-curl-count-why/112532)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 12\ **Last updated:** [December 28, 2017, 4:54am UTC](https://discuss.elastic.co/t/monitoring-data-not-same-with-curl-count-why/112532 "2017-12-28T04:54:36Z")
\[root@xx.xx.xx config\]# curl -XGET http://xx.xx.xx:9200/xx-20171212-1224/\_count?pretty { "count" : \*\*467110397\*\*, "\_shards" : { "total" : 36, "successful" : 36, "skipped" : 0, "failed" : 0 use kibana… --- ## [Logstash send data to php](https://discuss.elastic.co/t/logstash-send-data-to-php/232916)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 9\ **Last updated:** [May 18, 2020, 3:10pm UTC](https://discuss.elastic.co/t/logstash-send-data-to-php/232916 "2020-05-18T15:10:38Z")
Hi, Im trying to send my data to a php input, but i have a few questions: Here's my config: \> input { \> tcp { \> port =\> 8443 \> codec =\> json\_lines { charset =\> CP1252 } \> … --- ## [Performance issues that make no sense](https://discuss.elastic.co/t/performance-issues-that-make-no-sense/85597)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 9\ **Last updated:** [June 30, 2017, 2:16pm UTC](https://discuss.elastic.co/t/performance-issues-that-make-no-sense/85597 "2017-06-30T14:16:24Z")
Hi, I've been working with ES 5.2.2 for the past few months and I can't seem to make searches run fast enough. They even timeout quite a bit. My set up: I have a 1 dedicated Logstash node 3 master eligible ES nodes … --- ## [Setup elastic in production environment](https://discuss.elastic.co/t/setup-elastic-in-production-environment/2790)
**Author:** [@tariqkhatri\_gaditek](https://discuss.elastic.co/u/tariqkhatri_gaditek)\ **Replies:** 9\ **Last updated:** [June 18, 2015, 2:04am UTC](https://discuss.elastic.co/t/setup-elastic-in-production-environment/2790 "2015-06-18T02:04:03Z")
I want to know what configuration setup would be ideal for my case. I have 4 servers (nodes) each with 128 GB RAM. I'll have all 4 nodes under one cluster. Total number number of indexes would be 10, each getting dat… --- ## [Unable to add APM Integration](https://discuss.elastic.co/t/unable-to-add-apm-integration/344255)
**Author:** [@jwalker](https://discuss.elastic.co/u/jwalker)\ **Replies:** 10\ **Last updated:** [October 3, 2023, 12:29am UTC](https://discuss.elastic.co/t/unable-to-add-apm-integration/344255 "2023-10-03T00:29:12Z")
Hello, I am following the quick start guide for Elastic APM for version 7.17. Everything went well until I got to Step 3: 'Add the APM integration'. The first instruction is "In Kibana, select Add integrations \> Elastic … --- ## [GeoIP lat,lon fields are numbers instead of float](https://discuss.elastic.co/t/geoip-lat-lon-fields-are-numbers-instead-of-float/158132)
**Author:** [@prakas](https://discuss.elastic.co/u/prakas)\ **Replies:** 19\ **Last updated:** [November 26, 2018, 1:43pm UTC](https://discuss.elastic.co/t/geoip-lat-lon-fields-are-numbers-instead-of-float/158132 "2018-11-26T13:43:53Z")
Hello Team, I see that the geoip.latitude, geoip.longitude are numbers and does not take decimal values, so a wrong position is plotted on the Tile Map. For example an ip of 14.143.35.10 results in lat:20, lon:77 where… --- ## [Partial batch updates - indexed in order? - (0.90.5)](https://discuss.elastic.co/t/partial-batch-updates-indexed-in-order-0-90-5/14098)
**Author:** [@george\_monroe](https://discuss.elastic.co/u/george_monroe)\ **Replies:** 14\ **Last updated:** [October 28, 2013, 5:46am UTC](https://discuss.elastic.co/t/partial-batch-updates-indexed-in-order-0-90-5/14098 "2013-10-28T05:46:36Z")
We are trying to index/update and refresh in batches using BulkRequestBuilder to improve performance. It is very important for us to execute our statements on the ES server in the same order as we build up the Bul… --- ## [Add a field to json body when indexing](https://discuss.elastic.co/t/add-a-field-to-json-body-when-indexing/180339)
**Author:** [@davidbien](https://discuss.elastic.co/u/davidbien)\ **Replies:** 10\ **Last updated:** [May 12, 2019, 6:28am UTC](https://discuss.elastic.co/t/add-a-field-to-json-body-when-indexing/180339 "2019-05-12T06:28:36Z")
I have a lambda function which sends cloudtrail logs to elasticsearch whenever new data arrives in a bucket. This works fine, however I would like to add one extra field that is not found in standard cloudtrail logs. Thi… --- ## [Rejecting mapping update](https://discuss.elastic.co/t/rejecting-mapping-update/150556)
**Author:** [@rohan89](https://discuss.elastic.co/u/rohan89)\ **Replies:** 13\ **Last updated:** [October 5, 2018, 5:17pm UTC](https://discuss.elastic.co/t/rejecting-mapping-update/150556 "2018-10-05T17:17:42Z")
Hi, I have upgraded my elasticsearch to 6.3.2. After an upgrade i am trying to reindex my data. But i am getting below error. "cause": { "type": "illegal\_argument\_exception", "reason": "Rejecting mapping upd… --- ## [Query to get servers that have increased storage usage by X% during last X months?](https://discuss.elastic.co/t/query-to-get-servers-that-have-increased-storage-usage-by-x-during-last-x-months/80140)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 17\ **Last updated:** [April 25, 2017, 4:44pm UTC](https://discuss.elastic.co/t/query-to-get-servers-that-have-increased-storage-usage-by-x-during-last-x-months/80140 "2017-04-25T16:44:46Z")
Is there any way to get a list of servers that have increased storage usage by 20% or X% in last 3 months or X months? I am indexing daily server storage usage as numeric percentage\_used (ej. 80.55) and want to get a l… --- ## [What causes the count function to return an empty result](https://discuss.elastic.co/t/what-causes-the-count-function-to-return-an-empty-result/276613)
**Author:** [@RhodesOfficial](https://discuss.elastic.co/u/RhodesOfficial)\ **Replies:** 9\ **Last updated:** [June 23, 2021, 12:33pm UTC](https://discuss.elastic.co/t/what-causes-the-count-function-to-return-an-empty-result/276613 "2021-06-23T12:33:08Z")
I have a complex query statement（some data were desensitized）, but count (1) returns an empty result. NPE occurs in my code. So what causes this result？ Thank you for answering my question！ --- ## [Java APM agent sends no timeline spans](https://discuss.elastic.co/t/java-apm-agent-sends-no-timeline-spans/141150)
**Author:** [@albert1625](https://discuss.elastic.co/u/albert1625)\ **Replies:** 9\ **Last updated:** [July 27, 2018, 1:03pm UTC](https://discuss.elastic.co/t/java-apm-agent-sends-no-timeline-spans/141150 "2018-07-27T13:03:33Z")
Hi everyone. I am using ELK stack with running APM server and I have Spring Boot application which I used to run APM agent. There is no much logic behind application, but the main thing is that it has HTTP endpoints whi… --- ## [Could I remove \_type field?](https://discuss.elastic.co/t/could-i-remove-type-field/124934)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 10\ **Last updated:** [March 21, 2018, 9:34am UTC](https://discuss.elastic.co/t/could-i-remove-type-field/124934 "2018-03-21T09:34:23Z")
Hi, due to the high loading, I want to remove the default field \_type, \_score, \_id. is it possible ? if can, how to do it? thanks a lot. --- ## [Build filebeat x-pack modules from source fails](https://discuss.elastic.co/t/build-filebeat-x-pack-modules-from-source-fails/226128)
**Author:** [@Mike\_Ware](https://discuss.elastic.co/u/Mike_Ware)\ **Replies:** 11\ **Last updated:** [April 3, 2020, 7:58pm UTC](https://discuss.elastic.co/t/build-filebeat-x-pack-modules-from-source-fails/226128 "2020-04-03T19:58:00Z")
I have managed to build file beat and base modules from source found at https://github.com/elastic/beats . When I try to build the modules in beats/x-pack/filebeat I receive the following error with build launched at src… --- ## [Unable to create an Index Pattern, pattern creation hanging up or failing](https://discuss.elastic.co/t/unable-to-create-an-index-pattern-pattern-creation-hanging-up-or-failing/178687)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 11\ **Last updated:** [May 22, 2019, 6:25pm UTC](https://discuss.elastic.co/t/unable-to-create-an-index-pattern-pattern-creation-hanging-up-or-failing/178687 "2019-05-22T18:25:37Z")
ES 6.5.4 Kibana 6.5.4 I've been using the Machine Learning - Data Visualizer feature in Kibana the last few weeks and just recently it started failing when creating an Index Pattern. I go through the steps of importin… --- ## [Elasticsearch Group set to undef while creating instance dirs](https://discuss.elastic.co/t/elasticsearch-group-set-to-undef-while-creating-instance-dirs/87364)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 11\ **Last updated:** [May 31, 2017, 5:15pm UTC](https://discuss.elastic.co/t/elasticsearch-group-set-to-undef-while-creating-instance-dirs/87364 "2017-05-31T17:15:59Z")
In instance.pp, when creating instance data\_dir, log\_dir and config\_dir, while the user is set to elasticsearch, the group is set to undef. This creates the directories as elasticsearch:root. Is there any reason why the … --- ## [TLS config issues?](https://discuss.elastic.co/t/tls-config-issues/253602)
**Author:** [@jcor](https://discuss.elastic.co/u/jcor)\ **Replies:** 10\ **Last updated:** [October 30, 2020, 5:41pm UTC](https://discuss.elastic.co/t/tls-config-issues/253602 "2020-10-30T17:41:03Z")
I'm trying to setup tls on ELK. I have tls and https working between elastic and kibana but no luck with logstash. Below are the logstash configs. I've followed this guide almost to the T till step 7 besides swapping dns… --- ## [Utf8Generator source code](https://discuss.elastic.co/t/utf8generator-source-code/4034)
**Author:** [@dpilato](https://discuss.elastic.co/u/dpilato)\ **Replies:** 9\ **Last updated:** [March 30, 2016, 5:47am UTC](https://discuss.elastic.co/t/utf8generator-source-code/4034 "2016-03-30T05:47:08Z")
Hi there, I'm getting a NullPointerException while playing with Json Converter. I would try to find out what's going on but I can not find the source code of the involved class. Could you please tell me… --- ## [Elasicsearch cluster is not created](https://discuss.elastic.co/t/elasicsearch-cluster-is-not-created/220415)
**Author:** [@dg\_hivebrite](https://discuss.elastic.co/u/dg_hivebrite)\ **Replies:** 11\ **Last updated:** [February 25, 2020, 5:48pm UTC](https://discuss.elastic.co/t/elasicsearch-cluster-is-not-created/220415 "2020-02-25T17:48:25Z")
Hi, I'm trying the GA version, but my cluster doesn't start and I don't understand what I'm missing. Previously I started cluster with the beta version. I share with you my elasticsearch manifests, events I found abou… --- ## [Elasticsearch 8: new OOM kills in comparison with ES7](https://discuss.elastic.co/t/elasticsearch-8-new-oom-kills-in-comparison-with-es7/330016)
**Author:** [@Tomas\_Bartek](https://discuss.elastic.co/u/Tomas_Bartek)\ **Replies:** 9\ **Last updated:** [April 18, 2023, 12:31pm UTC](https://discuss.elastic.co/t/elasticsearch-8-new-oom-kills-in-comparison-with-es7/330016 "2023-04-18T12:31:28Z")
We test Elasticsearch 8.7.0 cluster setup (to migrate from ES 7.17.9) and we face the problem that the voting-only node in the testing cluster is sometimes killed by OOM. We use almost identical setup like in our curr… [Previous page](https://discuss.elastic.co/top.md?page=176&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=178&per_page=50&period=all)