# Top

**URL:** https://discuss.elastic.co/top.md?page=178&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 179

---

## [Opentracing for java apm agent](https://discuss.elastic.co/t/opentracing-for-java-apm-agent/146638)

<div class="topic-metadata">

**Author:** [@jibsonline](https://discuss.elastic.co/u/jibsonline)\
**Replies:** 9\
**Last updated:** [August 31, 2018, 8:05am UTC](https://discuss.elastic.co/t/opentracing-for-java-apm-agent/146638 "2018-08-31T08:05:20Z")

</div>

I see opentracing code in java apm agent. How do I enable it and see spans and transactions in APM?

---

## [Logstash is Parsing Nginx log only half of it](https://discuss.elastic.co/t/logstash-is-parsing-nginx-log-only-half-of-it/228733)

<div class="topic-metadata">

**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\
**Replies:** 15\
**Last updated:** [April 20, 2020, 7:06pm UTC](https://discuss.elastic.co/t/logstash-is-parsing-nginx-log-only-half-of-it/228733 "2020-04-20T19:06:51Z")

</div>

I have the following log comming from NGINX as reverse proxy set up. Message: 192.168.1.24 - - \[19/Apr/2020:15:39:03 +0200\] "GET /website/static/src/scss/options/colors/website.assets\_wysiwyg/user\_theme\_color\_palette.…

---

## [Ealsticsearch is stop when Xpack setiing enable](https://discuss.elastic.co/t/ealsticsearch-is-stop-when-xpack-setiing-enable/207613)

<div class="topic-metadata">

**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\
**Replies:** 14\
**Last updated:** [November 20, 2019, 12:01pm UTC](https://discuss.elastic.co/t/ealsticsearch-is-stop-when-xpack-setiing-enable/207613 "2019-11-20T12:01:08Z")

</div>

When I configure X-pack setting Enable my elasticsearch services stop. What to do?

---

## [ElasticSearch Starting Issue](https://discuss.elastic.co/t/elasticsearch-starting-issue/321415)

<div class="topic-metadata">

**Author:** [@jrpayne30506](https://discuss.elastic.co/u/jrpayne30506)\
**Replies:** 9\
**Last updated:** [December 19, 2022, 4:19pm UTC](https://discuss.elastic.co/t/elasticsearch-starting-issue/321415 "2022-12-19T16:19:38Z")

</div>

Hell All, First of all, apologies if I am in the wrong place to post this and for any question that may seem trivial as I am not a linux admin and am basically feeling in the dark. Using a guide I found online, I inst…

---

## [Use case of multiple Language Analyzer, Hunspell along with Elasticsearch Langdetect Plugin](https://discuss.elastic.co/t/use-case-of-multiple-language-analyzer-hunspell-along-with-elasticsearch-langdetect-plugin/19938)

<div class="topic-metadata">

**Author:** [@Prashant\_Pal](https://discuss.elastic.co/u/Prashant_Pal)\
**Replies:** 12\
**Last updated:** [September 25, 2014, 10:18am UTC](https://discuss.elastic.co/t/use-case-of-multiple-language-analyzer-hunspell-along-with-elasticsearch-langdetect-plugin/19938 "2014-09-25T10:18:40Z")

</div>

Hi All, We are having an ES cluster which is used to index large amount of data and that too with different languages. So as of now our current settings was pointing to English analyzer, and English hunspell but how…

---

## [Jdbc\_streaming with nested elements](https://discuss.elastic.co/t/jdbc-streaming-with-nested-elements/172208)

<div class="topic-metadata">

**Author:** [@bigster](https://discuss.elastic.co/u/bigster)\
**Replies:** 9\
**Last updated:** [March 21, 2019, 11:47am UTC](https://discuss.elastic.co/t/jdbc-streaming-with-nested-elements/172208 "2019-03-21T11:47:39Z")

</div>

Hi, I have 3 tables that has the described connections: A-\>B-\>C Basically i have FK from A to B and B to C. I'm trying to put all the data into a unique document with a list of B inside A and a list of C inside B. T…

---

## [Index Creation Issues](https://discuss.elastic.co/t/index-creation-issues/82015)

<div class="topic-metadata">

**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\
**Replies:** 11\
**Last updated:** [April 11, 2017, 9:31pm UTC](https://discuss.elastic.co/t/index-creation-issues/82015 "2017-04-11T21:31:24Z")

</div>

While looking through my ES indexes, I see these: DATANODE-03:~$ health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open .kibana …

---

## [Syslog input plugin from Logstash, how to configure in Elastic agent?](https://discuss.elastic.co/t/syslog-input-plugin-from-logstash-how-to-configure-in-elastic-agent/341300)

<div class="topic-metadata">

**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\
**Replies:** 10\
**Last updated:** [August 25, 2023, 1:31pm UTC](https://discuss.elastic.co/t/syslog-input-plugin-from-logstash-how-to-configure-in-elastic-agent/341300 "2023-08-25T13:31:29Z")

</div>

I have about 2000 Elastic agents (version 8.9.0) connected to a system with 3 Fleet servers (version 8.9.0). We have about 20 different agent policies, because the various Elastic agents are sending slightly different …

---

## [Problem with shards when upgrading to 2.3.3](https://discuss.elastic.co/t/problem-with-shards-when-upgrading-to-2-3-3/54639)

<div class="topic-metadata">

**Author:** [@misomij](https://discuss.elastic.co/u/misomij)\
**Replies:** 12\
**Last updated:** [July 5, 2016, 9:52am UTC](https://discuss.elastic.co/t/problem-with-shards-when-upgrading-to-2-3-3/54639 "2016-07-05T09:52:12Z")

</div>

Hi, I have upgraded a cluster of 3 nodes from 2.1 to 2.3.3, now i have problems with shards replicas not being allocated on all my nodes: I have upgraded the nodes this way: 1 turn off es 2 upgraded es with yum rep…

---

## [Please help me with how to search Elastic](https://discuss.elastic.co/t/please-help-me-with-how-to-search-elastic/239732)

<div class="topic-metadata">

**Author:** [@111349](https://discuss.elastic.co/u/111349)\
**Replies:** 9\
**Last updated:** [July 8, 2020, 4:25am UTC](https://discuss.elastic.co/t/please-help-me-with-how-to-search-elastic/239732 "2020-07-08T04:25:24Z")

</div>

I am requesting a search on Elastic through the Java Elastic API. Among them, I use queryStringQueryBuilder. Let's say the field name I have in elastic is fruit. Each field has a value of a-apple, b-apple, and c-apple…

---

## [Indexing Xml subfields as a new field](https://discuss.elastic.co/t/indexing-xml-subfields-as-a-new-field/277215)

<div class="topic-metadata">

**Author:** [@anon33720113](https://discuss.elastic.co/u/anon33720113)\
**Replies:** 11\
**Last updated:** [June 30, 2021, 5:01pm UTC](https://discuss.elastic.co/t/indexing-xml-subfields-as-a-new-field/277215 "2021-06-30T17:01:18Z")

</div>

Hi all, I have a xml-File with windows eventlogs that is structured like this: \<Events\> \<Event\> \<Computer\>...\</Computer\> ... \<EventData\> \<Data Name = "Error…

---

## [How to use filters in a query](https://discuss.elastic.co/t/how-to-use-filters-in-a-query/296990)

<div class="topic-metadata">

**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\
**Replies:** 10\
**Last updated:** [February 14, 2022, 11:01pm UTC](https://discuss.elastic.co/t/how-to-use-filters-in-a-query/296990 "2022-02-14T23:01:38Z")

</div>

Hello. I am working with Elasticsearch 6.8.0 and am trying to follow the example on this page filter but cannot get the filter clause to produce the results I want. I am working with the sample dataset in the bank inde…

---

## [In elasticsearch 5.4.3 can't go to green the x-pack monitoring Shard Activity error Phase\[1\] phase1 failed](https://discuss.elastic.co/t/in-elasticsearch-5-4-3-cant-go-to-green-the-x-pack-monitoring-shard-activity-error-phase-1-phase1-failed/99138)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 10\
**Last updated:** [September 25, 2017, 2:58am UTC](https://discuss.elastic.co/t/in-elasticsearch-5-4-3-cant-go-to-green-the-x-pack-monitoring-shard-activity-error-phase-1-phase1-failed/99138 "2017-09-25T02:58:33Z")

</div>

in elasticsearch 5.4.3 the x-pack monitoring Shard Activity error, the Files and Bytes zero, Translog is n/a as so, the elasticsearch is yellow,and much time can’t go to green. the recovery is very slow,about two hours…

---

## [Auto importing dangled indices](https://discuss.elastic.co/t/auto-importing-dangled-indices/203684)

<div class="topic-metadata">

**Author:** [@J\_Warner](https://discuss.elastic.co/u/J_Warner)\
**Replies:** 9\
**Last updated:** [October 15, 2019, 8:43pm UTC](https://discuss.elastic.co/t/auto-importing-dangled-indices/203684 "2019-10-15T20:43:33Z")

</div>

Hey hoping I could get some more insight on the issue. I'm currently running ELK stack inside GKE client/master/data I've recently updated the cluster from version 1.13.X.X to 1.14.X.X during the upgrade my process ELK c…

---

## [Logstash vs rivers for reading data from SQL Server](https://discuss.elastic.co/t/logstash-vs-rivers-for-reading-data-from-sql-server/15146)

<div class="topic-metadata">

**Author:** [@jsp](https://discuss.elastic.co/u/jsp)\
**Replies:** 9\
**Last updated:** [February 1, 2014, 5:21am UTC](https://discuss.elastic.co/t/logstash-vs-rivers-for-reading-data-from-sql-server/15146 "2014-02-01T05:21:26Z")

</div>

Hi, I am looking at implementing ES to index & query data that I get from my SQL Server databases/tables. I was initially using river to read data from Sql server tables but one of the developers in my team recomme…

---

## [Explanation of research method between ES 5.X and 6.X](https://discuss.elastic.co/t/explanation-of-research-method-between-es-5-x-and-6-x/162768)

<div class="topic-metadata">

**Author:** [@TomasDSD](https://discuss.elastic.co/u/TomasDSD)\
**Replies:** 9\
**Last updated:** [January 3, 2019, 10:45am UTC](https://discuss.elastic.co/t/explanation-of-research-method-between-es-5-x-and-6-x/162768 "2019-01-03T10:45:10Z")

</div>

Hello everyone, I have updated my ElasticSearch 5.x to 6.x, and the discovery Search have not the same result. In 5.x, i have 500 results when searching in my index, and 9 results in 6.x. Can someone explain me the new…

---

## [Filebeat and packetbeat not sending \_source data](https://discuss.elastic.co/t/filebeat-and-packetbeat-not-sending-source-data/135300)

<div class="topic-metadata">

**Author:** [@shivang\_patel](https://discuss.elastic.co/u/shivang_patel)\
**Replies:** 10\
**Last updated:** [June 14, 2018, 9:50am UTC](https://discuss.elastic.co/t/filebeat-and-packetbeat-not-sending-source-data/135300 "2018-06-14T09:50:51Z")

</div>

Hi, Before 3 days, all beats are sending data properly on my elastic instance. I was noticed new version is available. So, I upgraded all beats including elastic and kiban from 6.2.3 to 6.2.4. (i am using all beats acc…

---

## [Enable modules & Could not locate that index-pattern-field](https://discuss.elastic.co/t/enable-modules-could-not-locate-that-index-pattern-field/132986)

<div class="topic-metadata">

**Author:** [@przemolb](https://discuss.elastic.co/u/przemolb)\
**Replies:** 9\
**Last updated:** [June 19, 2018, 6:19am UTC](https://discuss.elastic.co/t/enable-modules-could-not-locate-that-index-pattern-field/132986 "2018-06-19T06:19:04Z")

</div>

Hello, I am trying to enable system module in Elasticsearch (6.2.\*). I have used CLI (on kibana): filebeat modules enable system But when I go to kibana I get the following message: Could not locate that index-patter…

---

## [Cannot get indexes made by logstash](https://discuss.elastic.co/t/cannot-get-indexes-made-by-logstash/83163)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 9\
**Last updated:** [April 21, 2017, 10:11am UTC](https://discuss.elastic.co/t/cannot-get-indexes-made-by-logstash/83163 "2017-04-21T10:11:12Z")

</div>

I think my logstash is not working, Here is the configuration of logstash, input { file { type =\> nginx path =\> "/var/log/nginx/kibana\_access.log" } } output { elasticsearch { hosts =\> \["localh…

---

## [New 1.7.5 docker-based image, 1000 documents causing OOM?](https://discuss.elastic.co/t/new-1-7-5-docker-based-image-1000-documents-causing-oom/51245)

<div class="topic-metadata">

**Author:** [@wflanagan](https://discuss.elastic.co/u/wflanagan)\
**Replies:** 9\
**Last updated:** [May 30, 2016, 11:26am UTC](https://discuss.elastic.co/t/new-1-7-5-docker-based-image-1000-documents-causing-oom/51245 "2016-05-30T11:26:05Z")

</div>

I'm using the elasticsearch:1.7.5 docker image, and setting up a new development environment. In importing data from production, I'm using bulk writes, retrieving 1000 documents at a time. The problem is this. I can g…

---

## [Strange problem with curator](https://discuss.elastic.co/t/strange-problem-with-curator/100319)

<div class="topic-metadata">

**Author:** [@sbampa](https://discuss.elastic.co/u/sbampa)\
**Replies:** 13\
**Last updated:** [September 15, 2017, 10:36am UTC](https://discuss.elastic.co/t/strange-problem-with-curator/100319 "2017-09-15T10:36:36Z")

</div>

I all, i have a problem with the index deletion in ES made by curator. I'm indexing my AS logs with the timestamp of the logs through logstash: Logstash config: input { beats { port =\> "5043" } } filter { grok …

---

## [APM And User Experience Links not working in Kibana , giving Unauthorized](https://discuss.elastic.co/t/apm-and-user-experience-links-not-working-in-kibana-giving-unauthorized/281926)

<div class="topic-metadata">

**Author:** [@AnilWadnapwar](https://discuss.elastic.co/u/AnilWadnapwar)\
**Replies:** 16\
**Last updated:** [August 31, 2021, 6:24pm UTC](https://discuss.elastic.co/t/apm-and-user-experience-links-not-working-in-kibana-giving-unauthorized/281926 "2021-08-31T18:24:21Z")

</div>

I using ELK stack of version 7.11.0. I have Basic License enabled. I am using RUM agentsfrom React to send telemetry. But while coming to Kibana getting unauthorized error.

---

## [Error in elk](https://discuss.elastic.co/t/error-in-elk/240956)

<div class="topic-metadata">

**Author:** [@Deepika\_Rawat](https://discuss.elastic.co/u/Deepika_Rawat)\
**Replies:** 11\
**Last updated:** [July 15, 2020, 6:34am UTC](https://discuss.elastic.co/t/error-in-elk/240956 "2020-07-15T06:34:45Z")

</div>

I tried to import using kv filter my logs started importing like this.. indent preformatted text by 4 spaces "authserver" =\> "a\_India RADIUS", "proto" =\> "6", "devname" =\> "FW\_1", "10:56:12\\tdate" =\> "2020-06-22\\tl…

---

## [Indexing in Kibana](https://discuss.elastic.co/t/indexing-in-kibana/96236)

<div class="topic-metadata">

**Author:** [@mwood](https://discuss.elastic.co/u/mwood)\
**Replies:** 11\
**Last updated:** [August 9, 2017, 9:04am UTC](https://discuss.elastic.co/t/indexing-in-kibana/96236 "2017-08-09T09:04:49Z")

</div>

Hi, I am new to ELK and have just installed the ELK stack v5.5.1. the ELK stack seems to be working fine and I am able to access the Kibana interface however I am having a problem in trying to create an index in Kibana…

---

## [After filebeat upgrades & preserving registry it sending duplicate events](https://discuss.elastic.co/t/after-filebeat-upgrades-preserving-registry-it-sending-duplicate-events/313701)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 14\
**Last updated:** [September 16, 2022, 4:15pm UTC](https://discuss.elastic.co/t/after-filebeat-upgrades-preserving-registry-it-sending-duplicate-events/313701 "2022-09-16T16:15:01Z")

</div>

I am having a trouble with duplicate events in elasticsearch after updating it to 7.17.3 from 5.6.5. In case of Linux its working as expected but in windows its sending duplicate events. Below are my configurations: ===…

---

## [Curl -X GET 'https://localhost:9200'](https://discuss.elastic.co/t/curl-x-get-https-localhost-9200/336624)

<div class="topic-metadata">

**Author:** [@codepan](https://discuss.elastic.co/u/codepan)\
**Replies:** 16\
**Last updated:** [June 26, 2023, 1:07pm UTC](https://discuss.elastic.co/t/curl-x-get-https-localhost-9200/336624 "2023-06-26T13:07:25Z")

</div>

curl -X GET 'https://localhost:9200' curl: (60) Peer's certificate issuer has been marked as not trusted by the user. More details here: http://curl.haxx.se/docs/sslcerts.html curl performs SSL certificate verification…

---

## [Filebeat 6.6 Hangs While Loading Log Data](https://discuss.elastic.co/t/filebeat-6-6-hangs-while-loading-log-data/202155)

<div class="topic-metadata">

**Author:** [@divdiff](https://discuss.elastic.co/u/divdiff)\
**Replies:** 11\
**Last updated:** [October 4, 2019, 9:20am UTC](https://discuss.elastic.co/t/filebeat-6-6-hangs-while-loading-log-data/202155 "2019-10-04T09:20:46Z")

</div>

I am prepping for the elasticsearch certification exam, and am trying to load the server logs data provided in ES Engineer 1 and 2 to my local cluster. I have three 6.6.1 nodes running on my laptop, with the following en…

---

## [\[5.0.1\]\[Geolocation\] Wrong sorting of elements with search\_after clause](https://discuss.elastic.co/t/5-0-1-geolocation-wrong-sorting-of-elements-with-search-after-clause/66885)

<div class="topic-metadata">

**Author:** [@keyball](https://discuss.elastic.co/u/keyball)\
**Replies:** 11\
**Last updated:** [December 5, 2016, 7:37am UTC](https://discuss.elastic.co/t/5-0-1-geolocation-wrong-sorting-of-elements-with-search-after-clause/66885 "2016-12-05T07:37:31Z")

</div>

Hi together, Background: I'm building a list of paginated entries according to the distance to a lat-lon geo point. Problem: I have a problem with search\_after functionality and the geo location. First my query: …

---

## [Only netflow v5 is shown although both v9 and v5 are collected](https://discuss.elastic.co/t/only-netflow-v5-is-shown-although-both-v9-and-v5-are-collected/86929)

<div class="topic-metadata">

**Author:** [@massimo](https://discuss.elastic.co/u/massimo)\
**Replies:** 13\
**Last updated:** [June 7, 2017, 7:04am UTC](https://discuss.elastic.co/t/only-netflow-v5-is-shown-although-both-v9-and-v5-are-collected/86929 "2017-06-07T07:04:29Z")

</div>

Hello, as the topic says netflow information (v5 and v9) is sent to logstash. Both are processed and stored in elasticsearch as expected. When opening the index in Kibana only v5 logs are shown although there are much …

---

## [OTEL - Prometheus receiver and missing metrics](https://discuss.elastic.co/t/otel-prometheus-receiver-and-missing-metrics/376563)

<div class="topic-metadata">

**Author:** [@Steve\_Foster](https://discuss.elastic.co/u/Steve_Foster)\
**Replies:** 11\
**Last updated:** [April 15, 2025, 10:06pm UTC](https://discuss.elastic.co/t/otel-prometheus-receiver-and-missing-metrics/376563 "2025-04-15T22:06:06Z")

</div>

Hi folks, i'm using the prometheusreceiver in a Deployment to scrape our pods every 60s, the metrics are then sent via OTLP to another instance of the collector running as a DaemonSet, which then sends them onto elastic…

---

## [Lang (czech) analyzer with asciifolding tokenizer or icu\_tokenizer](https://discuss.elastic.co/t/lang-czech-analyzer-with-asciifolding-tokenizer-or-icu-tokenizer/11631)

<div class="topic-metadata">

**Author:** [@gondo\_2](https://discuss.elastic.co/u/gondo_2)\
**Replies:** 9\
**Last updated:** [April 27, 2013, 11:17am UTC](https://discuss.elastic.co/t/lang-czech-analyzer-with-asciifolding-tokenizer-or-icu-tokenizer/11631 "2013-04-27T11:17:53Z")

</div>

hi is it possible to use lang analyzer together with asciifolding tokenizer or icu\_tokenizer? i've tried icu, but they do not support Czech. i found some attempt to make it work http://snowball.tartarus.org/other…

---

## [Filebeat processor syntax 7.12.1](https://discuss.elastic.co/t/filebeat-processor-syntax-7-12-1/271768)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 12\
**Last updated:** [May 9, 2021, 9:51pm UTC](https://discuss.elastic.co/t/filebeat-processor-syntax-7-12-1/271768 "2021-05-09T21:51:40Z")

</div>

Hello, I want to add some fields explanation because names that are provided via logs are not self-explaining enough. I guess It's best to do this operation on filebeat level to not use resources during the pipeline pro…

---

## [Data and time in Kibana / ES](https://discuss.elastic.co/t/data-and-time-in-kibana-es/149139)

<div class="topic-metadata">

**Author:** [@Carlos\_Magalhaes](https://discuss.elastic.co/u/Carlos_Magalhaes)\
**Replies:** 12\
**Last updated:** [September 22, 2018, 11:24am UTC](https://discuss.elastic.co/t/data-and-time-in-kibana-es/149139 "2018-09-22T11:24:02Z")

</div>

Hi all Maybe I am being really stupid but the logs showing up seem to be stored / passed with the wrong timestamp. Let me explain: How I noticed this - When building a search filter etc I noticed there were no records…

---

## [Null pointer exeption while creating a scripted metric](https://discuss.elastic.co/t/null-pointer-exeption-while-creating-a-scripted-metric/220646)

<div class="topic-metadata">

**Author:** [@Jorge\_Herrera](https://discuss.elastic.co/u/Jorge_Herrera)\
**Replies:** 9\
**Last updated:** [March 24, 2020, 4:53pm UTC](https://discuss.elastic.co/t/null-pointer-exeption-while-creating-a-scripted-metric/220646 "2020-03-24T16:53:11Z")

</div>

Hi, I am creating a scripted metric to use it later for a transfrom. I am trying to get the count of the fields with a specific value, but i receive the next error: { "error": { "root\_cause": \[ { "ty…

---

## [Slowness in Elasticsearch DELETE and UNLOAD operation](https://discuss.elastic.co/t/slowness-in-elasticsearch-delete-and-unload-operation/70602)

<div class="topic-metadata">

**Author:** [@Neuron\_Ring](https://discuss.elastic.co/u/Neuron_Ring)\
**Replies:** 9\
**Last updated:** [January 5, 2017, 11:07pm UTC](https://discuss.elastic.co/t/slowness-in-elasticsearch-delete-and-unload-operation/70602 "2017-01-05T23:07:00Z")

</div>

Hi,, I have an Elastic cluster with two nodes and about 53 indices. There are two large indices one with 1.5M \[ size: 93.93MB\] documents and the other one has 2.3M \[Size 354.61MB\] documents in it. Not really huge siz…

---

## [To multiple index or not to multiple index...that is the question](https://discuss.elastic.co/t/to-multiple-index-or-not-to-multiple-index-that-is-the-question/72912)

<div class="topic-metadata">

**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\
**Replies:** 10\
**Last updated:** [January 31, 2017, 4:31pm UTC](https://discuss.elastic.co/t/to-multiple-index-or-not-to-multiple-index-that-is-the-question/72912 "2017-01-31T16:31:29Z")

</div>

I currently have the following: syslog data coming in from network devices. syslog data coming from applications syslog data coming in from unix servers syslog data coming in from ESX hosts winlogbeat data from window…

---

## [What is '/api/metrics/vis/data' in kibana?](https://discuss.elastic.co/t/what-is-api-metrics-vis-data-in-kibana/229391)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 9\
**Last updated:** [April 23, 2020, 3:38pm UTC](https://discuss.elastic.co/t/what-is-api-metrics-vis-data-in-kibana/229391 "2020-04-23T15:38:54Z")

</div>

I have a proxy server in front of Kibana and I am connecting to Kibana. However, there are many '502 Bad gateway error' on the TSVB page. When an error occurs, the request to send is '/api/metrics/vis /data', which api…

---

## [How to reindex an ES index](https://discuss.elastic.co/t/how-to-reindex-an-es-index/4669)

<div class="topic-metadata">

**Author:** [@dpilato](https://discuss.elastic.co/u/dpilato)\
**Replies:** 10\
**Last updated:** [June 30, 2011, 8:46am UTC](https://discuss.elastic.co/t/how-to-reindex-an-es-index/4669 "2011-06-30T08:46:20Z")

</div>

Hi, Here is my usecase : I have an ES index (myindex) In this index, I have one document type (myindex/mydoc) I have defined a mapping for this type (myindex/mydoc/\_mapping) I put many documents in thi…

---

## [Normal for node to be RED after reboot; standalone environment](https://discuss.elastic.co/t/normal-for-node-to-be-red-after-reboot-standalone-environment/300630)

<div class="topic-metadata">

**Author:** [@aleding](https://discuss.elastic.co/u/aleding)\
**Replies:** 9\
**Last updated:** [April 12, 2022, 7:18am UTC](https://discuss.elastic.co/t/normal-for-node-to-be-red-after-reboot-standalone-environment/300630 "2022-04-12T07:18:39Z")

</div>

Hello - first time poster here and new ES user. Been troubleshooting for a couple days now and after reading numerous posts and ES docs, I must say this is pretty amazing stuff and the ES team + community seem quite ama…

---

## [Filebeat 6.3.1 update caused multiple entries in the registry for the same file, logs re-shipped](https://discuss.elastic.co/t/filebeat-6-3-1-update-caused-multiple-entries-in-the-registry-for-the-same-file-logs-re-shipped/140210)

<div class="topic-metadata">

**Author:** [@jdonahue](https://discuss.elastic.co/u/jdonahue)\
**Replies:** 11\
**Last updated:** [July 19, 2018, 7:47am UTC](https://discuss.elastic.co/t/filebeat-6-3-1-update-caused-multiple-entries-in-the-registry-for-the-same-file-logs-re-shipped/140210 "2018-07-19T07:47:59Z")

</div>

Hi there, We've discovered an issue where Filebeat 6.3.1 causes multiple entries of the same file in the registry when starting for the first time after updating from 6.3.0. It also seems to re-ship the logs from the af…

---

## [Parsing Collectd logstash file and pushing metrics to graphite](https://discuss.elastic.co/t/parsing-collectd-logstash-file-and-pushing-metrics-to-graphite/223737)

<div class="topic-metadata">

**Author:** [@Narayana](https://discuss.elastic.co/u/Narayana)\
**Replies:** 13\
**Last updated:** [March 20, 2020, 1:28pm UTC](https://discuss.elastic.co/t/parsing-collectd-logstash-file-and-pushing-metrics-to-graphite/223737 "2020-03-20T13:28:20Z")

</div>

Hi All, Can you please help me with the query. My requirement is : i have to collect the metrics using Collectd .Metrics like (cpu,memory and process) After getting this metrics in collectd.json.log (collected genera…

---

## [Transforming logs into geo\_point to draw them in kibana](https://discuss.elastic.co/t/transforming-logs-into-geo-point-to-draw-them-in-kibana/323053)

<div class="topic-metadata">

**Author:** [@grillo](https://discuss.elastic.co/u/grillo)\
**Replies:** 10\
**Last updated:** [February 28, 2023, 8:29am UTC](https://discuss.elastic.co/t/transforming-logs-into-geo-point-to-draw-them-in-kibana/323053 "2023-02-28T08:29:41Z")

</div>

My goal is to be able to geolocate on a kibana map the connections that interest me. The problem is that the generated indices do not create the correct type of data for kibana to draw. It would be Geopoints. The data …

---

## [Insert old MongoDB data for ES](https://discuss.elastic.co/t/insert-old-mongodb-data-for-es/235626)

<div class="topic-metadata">

**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\
**Replies:** 12\
**Last updated:** [June 4, 2020, 8:26pm UTC](https://discuss.elastic.co/t/insert-old-mongodb-data-for-es/235626 "2020-06-04T20:26:03Z")

</div>

My logstash configuration for inserting data in Elasticsearch inserts only new data, it does not insert the old DB documents. My .conf file is as follows: input { mongodb { uri =\> 'mongodb://localhost:27017…

---

## [How to exploit rules](https://discuss.elastic.co/t/how-to-exploit-rules/328174)

<div class="topic-metadata">

**Author:** [@Iroshu](https://discuss.elastic.co/u/Iroshu)\
**Replies:** 10\
**Last updated:** [April 11, 2023, 8:58am UTC](https://discuss.elastic.co/t/how-to-exploit-rules/328174 "2023-04-11T08:58:30Z")

</div>

Dear team, We are actually playing with the detection of elastic and something seems weird for us. We have created a Rule and we add an action in order to populate an index using our collector : We choose all fied…

---

## [Настройка кластера под высокую нагрузку](https://discuss.elastic.co/t/topic/199615)

<div class="topic-metadata">

**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\
**Replies:** 10\
**Last updated:** [September 17, 2019, 7:26am UTC](https://discuss.elastic.co/t/topic/199615 "2019-09-17T07:26:46Z")

</div>

Здравствуйте! Последнее время на моем кластере возникает ряд проблем с отвалами нод и индексов. Кластер состоит из 4 нод, все на SSD, под кучу выделено по 32Гб из 64. По данным мониторинга я понимаю, что это происходит …

---

## [Aggregations within aggregations](https://discuss.elastic.co/t/aggregations-within-aggregations/108399)

<div class="topic-metadata">

**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\
**Replies:** 9\
**Last updated:** [November 20, 2017, 2:55pm UTC](https://discuss.elastic.co/t/aggregations-within-aggregations/108399 "2017-11-20T14:55:19Z")

</div>

I have an index that contains documents about movies and the movies are tagged with their genre and main actors. Like this: { "title": "The fast and the furious", "tags": \[ { "groupName": "Genre", "tags": \[ "A…

---

## [Documents \_version changes](https://discuss.elastic.co/t/documents-version-changes/287684)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 13\
**Last updated:** [November 3, 2021, 9:45am UTC](https://discuss.elastic.co/t/documents-version-changes/287684 "2021-11-03T09:45:51Z")

</div>

Dears, Does the system problems like missing space on disks or exceeded heap space or network problems can have influence on change documents \_version? What is your experience with that? Why I'm asking about it? Becaus…

---

## [Significant terms aggregation custom score with more than one background](https://discuss.elastic.co/t/significant-terms-aggregation-custom-score-with-more-than-one-background/208910)

<div class="topic-metadata">

**Author:** [@dbuijs](https://discuss.elastic.co/u/dbuijs)\
**Replies:** 13\
**Last updated:** [November 22, 2019, 4:06pm UTC](https://discuss.elastic.co/t/significant-terms-aggregation-custom-score-with-more-than-one-background/208910 "2019-11-22T16:06:57Z")

</div>

I'm trying to implement different types of disproportionality metrics for pharmacovigilance reports in Elasticsearch. These are basically different flavours of significant terms aggregations, and I'm pretty sure I can us…

---

## [Multi line logs Javastack trace not showing up correctly](https://discuss.elastic.co/t/multi-line-logs-javastack-trace-not-showing-up-correctly/242903)

<div class="topic-metadata">

**Author:** [@Archie\_Crawford](https://discuss.elastic.co/u/Archie_Crawford)\
**Replies:** 11\
**Last updated:** [July 29, 2020, 1:51pm UTC](https://discuss.elastic.co/t/multi-line-logs-javastack-trace-not-showing-up-correctly/242903 "2020-07-29T13:51:16Z")

</div>

The java stack trace logs are not coming in as multi-lines they are still coming in as separate lines Filebeat Config - /var/\*\*\*/catalina\* - /var/\*\*\*/\*.log multiline.pattern: '^\[\[:space:\]\]' multiline.negate:…

---

## [Elasticsearch Aproximate KNN search using custom score calculation using a custom priority field](https://discuss.elastic.co/t/elasticsearch-aproximate-knn-search-using-custom-score-calculation-using-a-custom-priority-field/355524)

<div class="topic-metadata">

**Author:** [@ravi\_kumar\_mvs](https://discuss.elastic.co/u/ravi_kumar_mvs)\
**Replies:** 12\
**Last updated:** [March 21, 2024, 2:33pm UTC](https://discuss.elastic.co/t/elasticsearch-aproximate-knn-search-using-custom-score-calculation-using-a-custom-priority-field/355524 "2024-03-21T14:33:44Z")

</div>

Hi, I use Enterprise elasticsearch and ingest documents using web crawler. The data is pre-processed using an Inference pipeline which creates vectors for title, meta\_description fields before ingesting the docs to the i…

[Previous page](https://discuss.elastic.co/top.md?page=177&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=179&per_page=50&period=all)
