# Top **URL:** https://discuss.elastic.co/top.md?page=180&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 181 --- ## [Canvas: Dropdown filter not updating elements without page reload](https://discuss.elastic.co/t/canvas-dropdown-filter-not-updating-elements-without-page-reload/186021)
**Author:** [@Yoann\_Toussaint](https://discuss.elastic.co/u/Yoann_Toussaint)\ **Replies:** 9\ **Last updated:** [July 19, 2019, 7:01am UTC](https://discuss.elastic.co/t/canvas-dropdown-filter-not-updating-elements-without-page-reload/186021 "2019-07-19T07:01:10Z")
Hello there, I am using 3 dropdown filters scattered on 4 pages. Selecting one filter updates the elements inside the workpad but sometimes after switching from one page to another selecting one dropdown filter does not… --- ## [Distributed Tracing with Elastic APM](https://discuss.elastic.co/t/distributed-tracing-with-elastic-apm/190642)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 9\ **Last updated:** [July 19, 2019, 5:33am UTC](https://discuss.elastic.co/t/distributed-tracing-with-elastic-apm/190642 "2019-07-19T05:33:00Z")
Hello Team We have a use case of monitoring micro-services(written in java and python) with elastic APM. Can you suggest me few pointers for below questions Is distributed tracing part of X-pack ? To monitor databases… --- ## [A less aggressive stemming token filter that strips only plural](https://discuss.elastic.co/t/a-less-aggressive-stemming-token-filter-that-strips-only-plural/4033)
**Author:** [@Sorostaran](https://discuss.elastic.co/u/Sorostaran)\ **Replies:** 11\ **Last updated:** [May 5, 2011, 9:47pm UTC](https://discuss.elastic.co/t/a-less-aggressive-stemming-token-filter-that-strips-only-plural/4033 "2011-05-05T21:47:22Z")
Does anybody have a token filter (a cut-down Porter stemmer or something) that only does plural stemming in English for ElasticSearch? That seems like a common need for which few databases have out-of-the-box solutions. … --- ## [Need to know ways of controlling the write to storage account for event hub access](https://discuss.elastic.co/t/need-to-know-ways-of-controlling-the-write-to-storage-account-for-event-hub-access/313551)
**Author:** [@karthik\_Ravichandran](https://discuss.elastic.co/u/karthik_Ravichandran)\ **Replies:** 17\ **Last updated:** [September 13, 2022, 6:00pm UTC](https://discuss.elastic.co/t/need-to-know-ways-of-controlling-the-write-to-storage-account-for-event-hub-access/313551 "2022-09-13T18:00:41Z")
I am having azure event hub as input logstash code , please advise how can i controlling events the write to storage account for event Hub Acess , this method will help in cost saving. please advise your thoughts --- ## [Migrate from beats to elastic-agent](https://discuss.elastic.co/t/migrate-from-beats-to-elastic-agent/311538)
**Author:** [@dounia](https://discuss.elastic.co/u/dounia)\ **Replies:** 15\ **Last updated:** [August 10, 2022, 8:00am UTC](https://discuss.elastic.co/t/migrate-from-beats-to-elastic-agent/311538 "2022-08-10T08:00:44Z")
Hello , can we replace Filebeat and Metricbeat in Elastic agent by beats (already exists filebeat and metricbeat) --- ## [Elasticsearch version 5.4.3 .bulk insert with so many disk reads,but there is no merge operation the same time](https://discuss.elastic.co/t/elasticsearch-version-5-4-3-bulk-insert-with-so-many-disk-reads-but-there-is-no-merge-operation-the-same-time/229390)
**Author:** [@wfeng888](https://discuss.elastic.co/u/wfeng888)\ **Replies:** 20\ **Last updated:** [April 29, 2020, 1:04am UTC](https://discuss.elastic.co/t/elasticsearch-version-5-4-3-bulk-insert-with-so-many-disk-reads-but-there-is-no-merge-operation-the-same-time/229390 "2020-04-29T01:04:40Z")
my cluster has one node，16 core cpu，64G total ram，28G jvm heap，index settings is: { "testshardread": { "settings": { "index": { "refresh\_interval": "-1", "indexing": { "slowlog": { "level": "info", "threshold": … --- ## [Accessing/comparing fields from two different input plugins in filter, simultaneously](https://discuss.elastic.co/t/accessing-comparing-fields-from-two-different-input-plugins-in-filter-simultaneously/233917)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 10\ **Last updated:** [May 25, 2020, 8:21am UTC](https://discuss.elastic.co/t/accessing-comparing-fields-from-two-different-input-plugins-in-filter-simultaneously/233917 "2020-05-25T08:21:37Z")
I want to use file input along with Elasticsearch query input and then in filter I want to drop the Elasticsearch query results that don't quite match my file input. Now here is my problem: I can't seem to access and c… --- ## [Metricbeat elasticsearch module not showing index fields](https://discuss.elastic.co/t/metricbeat-elasticsearch-module-not-showing-index-fields/170780)
**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\ **Replies:** 14\ **Last updated:** [March 15, 2019, 1:26pm UTC](https://discuss.elastic.co/t/metricbeat-elasticsearch-module-not-showing-index-fields/170780 "2019-03-15T13:26:46Z")
node and node\_stats are working but not seeing index fileds coming into metricbeat. module: elasticsearch metricsets: node - node\_stats index index\_summary - shard period: 10s hosts: \["http://...:9200"\] --- ## [When Watcher HTTP action fails, it reports it fails forever without ever actually retrying](https://discuss.elastic.co/t/when-watcher-http-action-fails-it-reports-it-fails-forever-without-ever-actually-retrying/224395)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 9\ **Last updated:** [March 24, 2020, 11:18am UTC](https://discuss.elastic.co/t/when-watcher-http-action-fails-it-reports-it-fails-forever-without-ever-actually-retrying/224395 "2020-03-24T11:18:34Z")
Hello, so I got a watcher action that posts to an API for freshdesk (Ticket system) this works 99.9% of the time, but every now and then we receive a 502 back from Freshdesk. If this happens, every consequtive alert, wi… --- ## [Filebeat 6.4.3 config issue](https://discuss.elastic.co/t/filebeat-6-4-3-config-issue/156366)
**Author:** [@sunny1](https://discuss.elastic.co/u/sunny1)\ **Replies:** 9\ **Last updated:** [November 21, 2018, 12:51am UTC](https://discuss.elastic.co/t/filebeat-6-4-3-config-issue/156366 "2018-11-21T00:51:09Z")
I am installing filebeat 6.4.3. For yml file i have custom index name. When i start filebeat it says setup.template.name and setup.template.patter have to be set if index name is modified. I am not sure how to pass thes… --- ## [First time user - Unable to get Filebeat \> logstash](https://discuss.elastic.co/t/first-time-user-unable-to-get-filebeat-logstash/352451)
**Author:** [@eezeetee](https://discuss.elastic.co/u/eezeetee)\ **Replies:** 18\ **Last updated:** [February 17, 2024, 5:24am UTC](https://discuss.elastic.co/t/first-time-user-unable-to-get-filebeat-logstash/352451 "2024-02-17T05:24:46Z")
I've been trying to get a home monitoring system up and running and i've fallen flat. My goal was to get MQTT and other messages into filebeat, thru logstash and into Kibana to build a dashboard. I've followed a few gu… --- ## [Document level Security](https://discuss.elastic.co/t/document-level-security/79876)
**Author:** [@tausif786](https://discuss.elastic.co/u/tausif786)\ **Replies:** 10\ **Last updated:** [March 28, 2017, 7:34am UTC](https://discuss.elastic.co/t/document-level-security/79876 "2017-03-28T07:34:39Z")
Hi Everyone, Active Directory Authentication is enabled in my ELK stack. Now i want a AD user for eg user= 'John' to see only data for country='US' how can i achieve that please help. Regards, Tausif Khan. --- ## [Shard rebalancing on single-node cluster scaling](https://discuss.elastic.co/t/shard-rebalancing-on-single-node-cluster-scaling/47584)
**Author:** [@vgondil](https://discuss.elastic.co/u/vgondil)\ **Replies:** 10\ **Last updated:** [April 18, 2016, 5:57am UTC](https://discuss.elastic.co/t/shard-rebalancing-on-single-node-cluster-scaling/47584 "2016-04-18T05:57:30Z")
I started out with a single Elasticsearch node (Node1). Version:2.1.0 5 primary shards, 1 replica I have 30+ days of logs in here, the total size of my data on node1 is 340+G. I now intend to add two more nodes to th… --- ## [Pause between events ingested in elasticsearch](https://discuss.elastic.co/t/pause-between-events-ingested-in-elasticsearch/314025)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 13\ **Last updated:** [September 13, 2022, 5:22pm UTC](https://discuss.elastic.co/t/pause-between-events-ingested-in-elasticsearch/314025 "2022-09-13T17:22:54Z")
hello, I would like to know if it is possible, and if there is any filter that can put a time between events before sending them to elastic, for example: I have logs in elastic that are being ingested in the same second,… --- ## [HELP WITH LOGSTASH PLUGIN](https://discuss.elastic.co/t/help-with-logstash-plugin/229438)
**Author:** [@J-JENNY](https://discuss.elastic.co/u/J-JENNY)\ **Replies:** 12\ **Last updated:** [April 23, 2020, 4:22pm UTC](https://discuss.elastic.co/t/help-with-logstash-plugin/229438 "2020-04-23T16:22:49Z")
I am trying to analyze whatsapp chats on elastic, but my logstash config file seem to be the problem this is my config file input { beats { type =\> "whatsapp-alerts" port =\> 5012 } } filter { if \[type\]=="whatsa… --- ## [Canvas build for Kibana 6.4.3?](https://discuss.elastic.co/t/canvas-build-for-kibana-6-4-3/155757)
**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\ **Replies:** 10\ **Last updated:** [November 9, 2018, 4:36pm UTC](https://discuss.elastic.co/t/canvas-build-for-kibana-6-4-3/155757 "2018-11-09T16:36:55Z")
Hi, I'm updating Kibana due to the security advisory posted yesterday. After updating Canvas disappeared (maybe there can somehow be better feedback for when this will happen), and after removing / attempting to install… --- ## [Unable to form cluster in GCP with discovery-gce plugin](https://discuss.elastic.co/t/unable-to-form-cluster-in-gcp-with-discovery-gce-plugin/218293)
**Author:** [@Kumar\_Pratyush](https://discuss.elastic.co/u/Kumar_Pratyush)\ **Replies:** 16\ **Last updated:** [February 10, 2020, 9:50am UTC](https://discuss.elastic.co/t/unable-to-form-cluster-in-gcp-with-discovery-gce-plugin/218293 "2020-02-10T09:50:12Z")
I am trying to setup an 3-node ES cluster in GCP over 3 VM instances. I have created the 3 VMs and am trying to setup ES in each using docker-compose referring to the original ES documentation. Yet, I am unable to form c… --- ## [Performance issue with Elastic](https://discuss.elastic.co/t/performance-issue-with-elastic/100780)
**Author:** [@manikesh](https://discuss.elastic.co/u/manikesh)\ **Replies:** 10\ **Last updated:** [September 20, 2017, 10:50am UTC](https://discuss.elastic.co/t/performance-issue-with-elastic/100780 "2017-09-20T10:50:07Z")
we are using elastic for very efficient search but it seems to be taking ~800ms for one simple search.. this is when we hit directly using elastic API.. we have our own cluster with 3 nodes where one is as master and ot… --- ## [Challenges with date/time range selection when combining snapshot and timeseries data](https://discuss.elastic.co/t/challenges-with-date-time-range-selection-when-combining-snapshot-and-timeseries-data/304997)
**Author:** [@Sadia\_Mukhtar](https://discuss.elastic.co/u/Sadia_Mukhtar)\ **Replies:** 17\ **Last updated:** [June 21, 2022, 9:17pm UTC](https://discuss.elastic.co/t/challenges-with-date-time-range-selection-when-combining-snapshot-and-timeseries-data/304997 "2022-06-21T21:17:48Z")
Hi there, My organization is very new to Elasticsearch and Kibana. Historically we were using sql server for our analytics. We are doing a PoC to determine if Elastic and Kibana will with our scenario. We have 12 months… --- ## [Kibana 6.3 - 502 Response for saving any search](https://discuss.elastic.co/t/kibana-6-3-502-response-for-saving-any-search/140509)
**Author:** [@Harshad\_Velapure](https://discuss.elastic.co/u/Harshad_Velapure)\ **Replies:** 18\ **Last updated:** [July 24, 2018, 3:57pm UTC](https://discuss.elastic.co/t/kibana-6-3-502-response-for-saving-any-search/140509 "2018-07-24T15:57:41Z")
While saving/editing any visualisation or dashboard, getting below error Dashboard: 502 Response Less Info OK Error: 502 Response at https:///bundles/commons.bundle.js:3:428829 at processQueue (https:///bundles/ven… --- ## [Email alert for message in tag](https://discuss.elastic.co/t/email-alert-for-message-in-tag/145162)
**Author:** [@WarrenG](https://discuss.elastic.co/u/WarrenG)\ **Replies:** 13\ **Last updated:** [August 21, 2018, 7:30am UTC](https://discuss.elastic.co/t/email-alert-for-message-in-tag/145162 "2018-08-21T07:30:37Z")
Hi All First try with emailing logs, I found this bit of information but im having issues working out how this would work for me. if "FOUND" in \[message\] { email { from =\> "logstash\_alert@compa… --- ## [Encrypt Communication b/w kibana and elasticsearch](https://discuss.elastic.co/t/encrypt-communication-b-w-kibana-and-elasticsearch/265527)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 13\ **Last updated:** [March 2, 2021, 7:55am UTC](https://discuss.elastic.co/t/encrypt-communication-b-w-kibana-and-elasticsearch/265527 "2021-03-02T07:55:59Z")
I have 8 node of elasticsearch cluster 3 master 3 hot node and 2 warm node.All these node is running on https://ip:9200 i have set following parameter in elasticsearch.yml xpack.security.enabled: true #xpack.security.a… --- ## [Service stop each 15 or 20 minutes](https://discuss.elastic.co/t/service-stop-each-15-or-20-minutes/765)
**Author:** [@john\_felipe\_urrego\_m](https://discuss.elastic.co/u/john_felipe_urrego_m)\ **Replies:** 9\ **Last updated:** [May 26, 2015, 4:49pm UTC](https://discuss.elastic.co/t/service-stop-each-15-or-20-minutes/765 "2015-05-26T16:49:03Z")
274.9 MB of 2 GB Used / 1.73 GB Free And each 20 minutes i need do this: sudo /etc/init.d/elasticsearch start curl -XGET 'localhost:9200' Please give me instructions Tnks --- ## [ES consistently giving not able to parse \_ttl exception](https://discuss.elastic.co/t/es-consistently-giving-not-able-to-parse--ttl-exception/13158)
**Author:** [@Arjit\_Gupta](https://discuss.elastic.co/u/Arjit_Gupta)\ **Replies:** 11\ **Last updated:** [August 27, 2013, 10:08am UTC](https://discuss.elastic.co/t/es-consistently-giving-not-able-to-parse--ttl-exception/13158 "2013-08-27T10:08:22Z")
Hi, We are consistently getting exception - I dont know why is it not able to parse \_ttl. \[2013-08-09 01:18:22,929\]\[DEBUG\]\[action.index \] \[search5\] \[internal\_index\_hor\]\[1\], node\[MwQNQpm8Q7GqPBS… --- ## [ECK: Added nodes and now queries are unable to find stored scripts](https://discuss.elastic.co/t/eck-added-nodes-and-now-queries-are-unable-to-find-stored-scripts/279301)
**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\ **Replies:** 12\ **Last updated:** [August 2, 2021, 11:28pm UTC](https://discuss.elastic.co/t/eck-added-nodes-and-now-queries-are-unable-to-find-stored-scripts/279301 "2021-08-02T23:28:18Z")
ES: 6.8.13 We're in the process of moving from manually maintained ES clusters to Elastic Cloud on Kubernetes (ECK). In our first test environment (a single node cluster), we added 3 ECK nodes. Afterward, all our sear… --- ## [Json filter problème de brackets](https://discuss.elastic.co/t/json-filter-probleme-de-brackets/271024)
**Author:** [@Yahya\_Bouzoubaa](https://discuss.elastic.co/u/Yahya_Bouzoubaa)\ **Replies:** 12\ **Last updated:** [April 26, 2021, 8:27pm UTC](https://discuss.elastic.co/t/json-filter-probleme-de-brackets/271024 "2021-04-26T20:27:10Z")
Bonjour, J'ai une question en lien avec le parsing d'un JSON à l'aide du filtre JSON. J'ai appliqué le filter JSON pour parser un bout de message de type JSON. Le JSON en question est de ce format : { " ResponseHead… --- ## [Grand children aggregation is returning the zero result in elasticsearch 2.2.0 version](https://discuss.elastic.co/t/grand-children-aggregation-is-returning-the-zero-result-in-elasticsearch-2-2-0-version/53770)
**Author:** [@Shashi-GS](https://discuss.elastic.co/u/Shashi-GS)\ **Replies:** 9\ **Last updated:** [July 11, 2016, 5:36pm UTC](https://discuss.elastic.co/t/grand-children-aggregation-is-returning-the-zero-result-in-elasticsearch-2-2-0-version/53770 "2016-07-11T17:36:10Z")
Hi, I am not able to fetch the data for the for the grand child aggregation. for example : I have used the parent and child relationship to create the index and types. index name is "employeedetails", which is … --- ## [After creating scripted field everything in kibana dashboard disappears?](https://discuss.elastic.co/t/after-creating-scripted-field-everything-in-kibana-dashboard-disappears/149776)
**Author:** [@pramodchoudhari](https://discuss.elastic.co/u/pramodchoudhari)\ **Replies:** 9\ **Last updated:** [September 26, 2018, 5:27am UTC](https://discuss.elastic.co/t/after-creating-scripted-field-everything-in-kibana-dashboard-disappears/149776 "2018-09-26T05:27:55Z")
there is a field named st2 in all the documents as shown below, the type of st2 field is string, i want to manipulate the field and perform some calculations, so i create a scripted field named RX as shown below b… --- ## [Dynamic Root Field](https://discuss.elastic.co/t/dynamic-root-field/105595)
**Author:** [@jcatana](https://discuss.elastic.co/u/jcatana)\ **Replies:** 9\ **Last updated:** [November 3, 2017, 9:54pm UTC](https://discuss.elastic.co/t/dynamic-root-field/105595 "2017-11-03T21:54:30Z")
How could I modify a beat to apply a dynamic root field to all events? For instance, I want to modify metricbeat and apply a set of tags for changing ongoing events to every metric that is collected so I can correlate o… --- ## [Unable to fetch mapping while configuring an index pattern](https://discuss.elastic.co/t/unable-to-fetch-mapping-while-configuring-an-index-pattern/92284)
**Author:** [@amakarenkov](https://discuss.elastic.co/u/amakarenkov)\ **Replies:** 9\ **Last updated:** [July 11, 2017, 9:58am UTC](https://discuss.elastic.co/t/unable-to-fetch-mapping-while-configuring-an-index-pattern/92284 "2017-07-11T09:58:42Z")
Greetings, guys! Recently installed Elastic stack on CentOS and faced the problem that a cannot get data pattern in Kibana. Basically I have kibana elastic logstash and filebeat that is installed locally. netstat -pl… --- ## [Aggregate secure/sshd syslog event based on selected events](https://discuss.elastic.co/t/aggregate-secure-sshd-syslog-event-based-on-selected-events/328249)
**Author:** [@jun.7.6](https://discuss.elastic.co/u/jun.7.6)\ **Replies:** 24\ **Last updated:** [April 12, 2023, 1:19pm UTC](https://discuss.elastic.co/t/aggregate-secure-sshd-syslog-event-based-on-selected-events/328249 "2023-04-12T13:19:55Z")
Hi I'm trying to filter out the login & logout events from linux ssh events send as syslog to Logstash and forward it to my firewall via syslog again. This setup is to allow my firewall to map the user-id to IP address i… --- ## [Find-master-node-timeout needed](https://discuss.elastic.co/t/find-master-node-timeout-needed/196827)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 12\ **Last updated:** [August 27, 2019, 10:28pm UTC](https://discuss.elastic.co/t/find-master-node-timeout-needed/196827 "2019-08-27T22:28:39Z")
Cluster has 3 master nodes: I typically bring up 1 as the 'seed' node and then add two others to point to it. Once the nodes have all agreed on who is the boss I kill the 'seed' node and scale up the others to 3. This m… --- ## [Data is not proper post transformation](https://discuss.elastic.co/t/data-is-not-proper-post-transformation/144716)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 17\ **Last updated:** [August 27, 2018, 10:02am UTC](https://discuss.elastic.co/t/data-is-not-proper-post-transformation/144716 "2018-08-27T10:02:35Z")
Hi All, I'm pulling data from service now through logstash, i have converted few fields like created on, resolved at and closed at, to convert into date values using filter option. Lets say there are a total of 100 tic… --- ## [Scale to Y-Axis Data Bounds not working in Kibana 7.8.1 Visualization](https://discuss.elastic.co/t/scale-to-y-axis-data-bounds-not-working-in-kibana-7-8-1-visualization/246305)
**Author:** [@Gil\_Levi](https://discuss.elastic.co/u/Gil_Levi)\ **Replies:** 9\ **Last updated:** [September 14, 2020, 6:54am UTC](https://discuss.elastic.co/t/scale-to-y-axis-data-bounds-not-working-in-kibana-7-8-1-visualization/246305 "2020-09-14T06:54:32Z")
Hi I'm trying to create a split Line chart and, where Y-axis has different rangest the "Scale to Data Bounds" under Y-Axis settings is turned on but it seemed like it's not working --- ## [Minimum nodes for elasticsearch 7.11.2 cluster?](https://discuss.elastic.co/t/minimum-nodes-for-elasticsearch-7-11-2-cluster/271023)
**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\ **Replies:** 15\ **Last updated:** [April 27, 2021, 9:31pm UTC](https://discuss.elastic.co/t/minimum-nodes-for-elasticsearch-7-11-2-cluster/271023 "2021-04-27T21:31:33Z")
Hello, I'm using standalone ES node at the moment. I would like to add another node in another datacenter to increase data resilience and use cluster functions. Is it possible with just another node? Any documentation … --- ## [Creating Watcher and Trigger alert from outlook 365](https://discuss.elastic.co/t/creating-watcher-and-trigger-alert-from-outlook-365/216510)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 11\ **Last updated:** [January 28, 2020, 2:14pm UTC](https://discuss.elastic.co/t/creating-watcher-and-trigger-alert-from-outlook-365/216510 "2020-01-28T14:14:41Z")
Hello, I am trying to trigger an alert but I am getting an error \[2020-01-25T06:26:06,821\]\[ERROR\]\[o.e.x.w.a.e.ExecutableEmailAction\] \[CGAUH-PDLXS03\] failed to execute action \[inlined/email\_1\] org.elasticsearch.common.… --- ## [Increasing Throughput Until My Servers Catch Fire](https://discuss.elastic.co/t/increasing-throughput-until-my-servers-catch-fire/244900)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 19\ **Last updated:** [August 14, 2020, 4:19pm UTC](https://discuss.elastic.co/t/increasing-throughput-until-my-servers-catch-fire/244900 "2020-08-14T16:19:08Z")
I'm curious about settings that will increase my index rate, at the risk of losing data in the event of hardware corruption or similar. My datanodes are heavily CPU-constrained, so anything I can do to reduce the CPU loa… --- ## [ElasticSearch number of shards queried](https://discuss.elastic.co/t/elasticsearch-number-of-shards-queried/177011)
**Author:** [@arvinds94](https://discuss.elastic.co/u/arvinds94)\ **Replies:** 13\ **Last updated:** [April 16, 2019, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-number-of-shards-queried/177011 "2019-04-16T18:27:19Z")
I have 2 different indices within an ElasticSearch cluster with 6 nodes. One index (index A) has 2 primary shards and 2 replicas per giving us 6 total shards. The other index (index B) has 5 primary shards and 1 replic… --- ## [Fields are not visible in machine learning job](https://discuss.elastic.co/t/fields-are-not-visible-in-machine-learning-job/161079)
**Author:** [@Sripal](https://discuss.elastic.co/u/Sripal)\ **Replies:** 13\ **Last updated:** [December 20, 2018, 8:57am UTC](https://discuss.elastic.co/t/fields-are-not-visible-in-machine-learning-job/161079 "2018-12-20T08:57:02Z")
Hi All, I am new to Machine learning jobs in kibana. I've tried to create a single metric job using my data available in elasticsearch. But my field are not visible in filters Aggregation. Except for the aggregatio… --- ## [ES High cpu issues](https://discuss.elastic.co/t/es-high-cpu-issues/143563)
**Author:** [@naresh\_career399](https://discuss.elastic.co/u/naresh_career399)\ **Replies:** 10\ **Last updated:** [August 9, 2018, 3:28pm UTC](https://discuss.elastic.co/t/es-high-cpu-issues/143563 "2018-08-09T15:28:40Z")
We are getting high cpu alerts on ES nodes every day first I though like beacause of heap size, I changed it to 31g coz my machines are 64g but it does not resolved the cpu issues. --- ## [Enrich Processor is slow on multi nodes](https://discuss.elastic.co/t/enrich-processor-is-slow-on-multi-nodes/260245)
**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\ **Replies:** 9\ **Last updated:** [January 6, 2021, 2:21am UTC](https://discuss.elastic.co/t/enrich-processor-is-slow-on-multi-nodes/260245 "2021-01-06T02:21:57Z")
Hello, I am helping with a project that is using an ingest pipeline, specifically the enrich processor. The enrich processor is pulling from a source index that is fairly small (300k records, ~25MB). The documents that … --- ## [Es\_bulk unique uid creates multiple duplicates](https://discuss.elastic.co/t/es-bulk-unique-uid-creates-multiple-duplicates/75351)
**Author:** [@ISMAELMARTINEZ](https://discuss.elastic.co/u/ISMAELMARTINEZ)\ **Replies:** 9\ **Last updated:** [February 20, 2017, 9:11am UTC](https://discuss.elastic.co/t/es-bulk-unique-uid-creates-multiple-duplicates/75351 "2017-02-20T09:11:43Z")
Hi, I have run the following logstash and found out it creates duplicates. input { jdbc { jdbc\_connection\_string =\> "jdbc:postgresql://myURLToTheDB" jdbc\_user =\> "myuser" jdbc\_password =\> "mypassw… --- ## [Logstash.conf filter doesn't work](https://discuss.elastic.co/t/logstash-conf-filter-doesnt-work/250091)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 14\ **Last updated:** [September 30, 2020, 9:58am UTC](https://discuss.elastic.co/t/logstash-conf-filter-doesnt-work/250091 "2020-09-30T09:58:03Z")
Hello, I want to send events from my .log file with filebeat. I have created such filter but it doesn't work. input { beats { port =\> "5044" } } filter { grok { match =\> { "message" =\> "(%{TIMESTA… --- ## [Elastic search Tuning Performance](https://discuss.elastic.co/t/elastic-search-tuning-performance/166528)
**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\ **Replies:** 16\ **Last updated:** [January 31, 2019, 2:55pm UTC](https://discuss.elastic.co/t/elastic-search-tuning-performance/166528 "2019-01-31T14:55:50Z")
I have 2 servers with same hardware on both: 16gb Ram Virtual Storage 500gb Unix System I tried to index a 250mb file on one of them using logstash, it took 30 mins to index which is a really poor performance. Note… --- ## [I am tired of continuously trying to override the default analyzer and tokanizer settings](https://discuss.elastic.co/t/i-am-tired-of-continuously-trying-to-override-the-default-analyzer-and-tokanizer-settings/5409)
**Author:** [@noor](https://discuss.elastic.co/u/noor)\ **Replies:** 16\ **Last updated:** [August 23, 2012, 10:09pm UTC](https://discuss.elastic.co/t/i-am-tired-of-continuously-trying-to-override-the-default-analyzer-and-tokanizer-settings/5409 "2012-08-23T22:09:50Z")
I Know I must be doing something wrong but frankly speaking due to inadequate documentation I had to quit with my idea of using elasticsearch. I am unable to find even a single consolidated document describing the te… --- ## [Field's name](https://discuss.elastic.co/t/fields-name/265313)
**Author:** [@NourBM](https://discuss.elastic.co/u/NourBM)\ **Replies:** 10\ **Last updated:** [February 25, 2021, 11:47pm UTC](https://discuss.elastic.co/t/fields-name/265313 "2021-02-25T23:47:55Z")
Hi, i'm new with Kibana and Vega, I visualizated data that i entered manually and i noticed that when i enter a field name containing a dot (.) the visualization doesn't show up but when i remove the dot it works fine. … --- ## [The problem with a custom translation file](https://discuss.elastic.co/t/the-problem-with-a-custom-translation-file/230370)
**Author:** [@Vlad\_Piratov](https://discuss.elastic.co/u/Vlad_Piratov)\ **Replies:** 11\ **Last updated:** [April 30, 2020, 12:49pm UTC](https://discuss.elastic.co/t/the-problem-with-a-custom-translation-file/230370 "2020-04-30T12:49:31Z")
Sources Kibana 7.6.2 Kibana 7.6.2 Hi there! I started localization for RU. I did everything according to the instructions. On the develop server: generated the en translation file, imported it. On the working server: … --- ## [Logstash Node & Pipeline Stack-Monitoring 404 on Kibana](https://discuss.elastic.co/t/logstash-node-pipeline-stack-monitoring-404-on-kibana/240453)
**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\ **Replies:** 9\ **Last updated:** [July 10, 2020, 6:23pm UTC](https://discuss.elastic.co/t/logstash-node-pipeline-stack-monitoring-404-on-kibana/240453 "2020-07-10T18:23:00Z")
I'm trying to access Logstash Node and Pipeline from Stack-Monitoring but receiving 404 Not Found Below is the Kibana-Log when accessing logstash node-pipeline on kibana { "type": "response", "@timestamp": "2020-07… --- ## [Unassigned\_shards problam](https://discuss.elastic.co/t/unassigned-shards-problam/14544)
**Author:** [@danielr](https://discuss.elastic.co/u/danielr)\ **Replies:** 20\ **Last updated:** [November 27, 2013, 1:08pm UTC](https://discuss.elastic.co/t/unassigned-shards-problam/14544 "2013-11-27T13:08:19Z")
so.. I decided to create a three nodes cluster (two data nodes and one arbiter) All three nodes are using ec2 discovery but when i'm calling /\_cluster/health on the \*master node\* I get the following response: {… --- ## [Elastic Date field Retrieval Issue](https://discuss.elastic.co/t/elastic-date-field-retrieval-issue/92360)
**Author:** [@Hoffin\_Ag](https://discuss.elastic.co/u/Hoffin_Ag)\ **Replies:** 13\ **Last updated:** [July 12, 2017, 12:51pm UTC](https://discuss.elastic.co/t/elastic-date-field-retrieval-issue/92360 "2017-07-12T12:51:00Z")
Hi, Is it possible to have custom format for date field store and retrieval so that both the way elastic and java api level will be uniform date. Now we are facing date field binding to application object date property… [Previous page](https://discuss.elastic.co/top.md?page=179&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=181&per_page=50&period=all)