# Top

**URL:** https://discuss.elastic.co/top.md?page=182&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 183

---

## [Difference between Meraki dashboard and netflow graph](https://discuss.elastic.co/t/difference-between-meraki-dashboard-and-netflow-graph/205152)

<div class="topic-metadata">

**Author:** [@jquintard](https://discuss.elastic.co/u/jquintard)\
**Replies:** 10\
**Last updated:** [November 8, 2019, 5:54pm UTC](https://discuss.elastic.co/t/difference-between-meraki-dashboard-and-netflow-graph/205152 "2019-11-08T17:54:32Z")

</div>

I need to understand why I have difference between my Meraki dashboard and Kibana graph. This graph, from the Meraki dashboard, is related to one client. The max usage is 1,2Mbit/s : The same graph from Kibana : T…

---

## [Unable to display large text fields in Kibana Markdown visualization](https://discuss.elastic.co/t/unable-to-display-large-text-fields-in-kibana-markdown-visualization/324981)

<div class="topic-metadata">

**Author:** [@Alice\_Ionescu](https://discuss.elastic.co/u/Alice_Ionescu)\
**Replies:** 9\
**Last updated:** [June 14, 2023, 10:22am UTC](https://discuss.elastic.co/t/unable-to-display-large-text-fields-in-kibana-markdown-visualization/324981 "2023-06-14T10:22:33Z")

</div>

Hello, I have one field store in ES that has a big length, around 35.000 - 40.000 characters. They are stored correctly in ES, I can see them in Discover page, but when I want to use them in a markdown visualization (T…

---

## [ELK 6 and Future 7 and single type indexes](https://discuss.elastic.co/t/elk-6-and-future-7-and-single-type-indexes/121341)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 9\
**Last updated:** [February 27, 2018, 2:27pm UTC](https://discuss.elastic.co/t/elk-6-and-future-7-and-single-type-indexes/121341 "2018-02-27T14:27:06Z")

</div>

I am trying to figure out the details on a single type index as I am on Elk 5 and upgrading to ELK6 and will upgrade to elk7 as soon as it is in beta. My question is, since the \_type field is getting removed, but I am …

---

## [APM profiler stopping with https://discuss.elastic.co/c/apm on latest adoptopenjdk/openjdk8-openj9:alpine-slim](https://discuss.elastic.co/t/apm-profiler-stopping-with-https-discuss-elastic-co-c-apm-on-latest-adoptopenjdk-openjdk8-openj9-alpine-slim/273428)

<div class="topic-metadata">

**Author:** [@Kim\_Attree](https://discuss.elastic.co/u/Kim_Attree)\
**Replies:** 13\
**Last updated:** [May 27, 2021, 6:54am UTC](https://discuss.elastic.co/t/apm-profiler-stopping-with-https-discuss-elastic-co-c-apm-on-latest-adoptopenjdk-openjdk8-openj9-alpine-slim/273428 "2021-05-27T06:54:31Z")

</div>

Kibana version: 7.4.1 Elasticsearch version: 7.4.1 APM Server version: 7.4.1 APM Agent language and version: Java 1.20 Browser version: n/a Original install method (e.g. download page, yum, deb, from source, etc.) a…

---

## [Elasticsearch stopped working , it is not extracting contents from documents](https://discuss.elastic.co/t/elasticsearch-stopped-working-it-is-not-extracting-contents-from-documents/345072)

<div class="topic-metadata">

**Author:** [@priyankaa](https://discuss.elastic.co/u/priyankaa)\
**Replies:** 16\
**Last updated:** [October 21, 2023, 10:24pm UTC](https://discuss.elastic.co/t/elasticsearch-stopped-working-it-is-not-extracting-contents-from-documents/345072 "2023-10-21T22:24:26Z")

</div>

due to disk storage got full , Elasticsearch was stopped working , so we have now increased it , still after increasing disk storage Elasticsearch is not working , I performed reindexing as per my senior suggestion , but…

---

## [Newbie: CentOS + Docker + Elastic Stack = Master not discovered yet](https://discuss.elastic.co/t/newbie-centos-docker-elastic-stack-master-not-discovered-yet/255240)

<div class="topic-metadata">

**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\
**Replies:** 16\
**Last updated:** [November 14, 2020, 6:10pm UTC](https://discuss.elastic.co/t/newbie-centos-docker-elastic-stack-master-not-discovered-yet/255240 "2020-11-14T18:10:18Z")

</div>

I'm trying to start learning Elastic Stack, but I can't get it to even start. I have: Installed CentOS 8 Minimal Installed Docker, following this: https://docs.docker.com/engine/install/centos/ Managing non-root and …

---

## [How to gather logs from a router](https://discuss.elastic.co/t/how-to-gather-logs-from-a-router/228660)

<div class="topic-metadata">

**Author:** [@Hari\_Krishna](https://discuss.elastic.co/u/Hari_Krishna)\
**Replies:** 12\
**Last updated:** [April 20, 2020, 7:45am UTC](https://discuss.elastic.co/t/how-to-gather-logs-from-a-router/228660 "2020-04-20T07:45:54Z")

</div>

I have a Juniper router from which i have to send logs to logstash. What should i do in this case

---

## [Accident deletion of kibana index but visualization is still intact](https://discuss.elastic.co/t/accident-deletion-of-kibana-index-but-visualization-is-still-intact/205766)

<div class="topic-metadata">

**Author:** [@ark516](https://discuss.elastic.co/u/ark516)\
**Replies:** 12\
**Last updated:** [November 27, 2019, 6:54pm UTC](https://discuss.elastic.co/t/accident-deletion-of-kibana-index-but-visualization-is-still-intact/205766 "2019-11-27T18:54:17Z")

</div>

Hello We accidently applied ILM policy to system indexes and it deleted (?) kibana index we are still able to see saved spaces in visualization but can not create new index pattern and can not make any new changes to …

---

## [Parsing data from multiple application servers through logstash](https://discuss.elastic.co/t/parsing-data-from-multiple-application-servers-through-logstash/285069)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 10\
**Last updated:** [October 4, 2021, 3:27pm UTC](https://discuss.elastic.co/t/parsing-data-from-multiple-application-servers-through-logstash/285069 "2021-10-04T15:27:56Z")

</div>

Hi Team, I have application running on 2 servers and application logs are getting logged on both the servers, so i want to parse logs from both servers. filebeat is installed on two application servers, logstash is in…

---

## [Multiline Pattern - Filebeat](https://discuss.elastic.co/t/multiline-pattern-filebeat/199409)

<div class="topic-metadata">

**Author:** [@gerard.ramos](https://discuss.elastic.co/u/gerard.ramos)\
**Replies:** 9\
**Last updated:** [September 16, 2019, 11:05am UTC](https://discuss.elastic.co/t/multiline-pattern-filebeat/199409 "2019-09-16T11:05:52Z")

</div>

Hello, I am having problems making a multiline match. The logs come from a file saved on the client machine. I send to the logstash server with filebeat. In the filebeat configuration I have the following: multiline.pat…

---

## [Elasticsearch sort query](https://discuss.elastic.co/t/elasticsearch-sort-query/189790)

<div class="topic-metadata">

**Author:** [@Ahmet\_Kartal](https://discuss.elastic.co/u/Ahmet_Kartal)\
**Replies:** 9\
**Last updated:** [July 11, 2019, 8:51am UTC](https://discuss.elastic.co/t/elasticsearch-sort-query/189790 "2019-07-11T08:51:36Z")

</div>

I have some data that I want to sort but when I sort them sort query didn't work very well. So, here what I got after making my query: "Group3": { "buckets": \[ { …

---

## [How to upgrade Elasticsearch 5.4.1 to ES 5.4.3](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-5-4-1-to-es-5-4-3/91595)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 9\
**Last updated:** [July 3, 2017, 7:17am UTC](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-5-4-1-to-es-5-4-3/91595 "2017-07-03T07:17:27Z")

</div>

how to upgrade Elasticsearch 5.4.1 to ES 5.4.3 in ubuntu 16.04 , can anyone guide me with step by step,

---

## [\_geoip\_database\_unavailable\_GeoLite2-City.mmdb Error](https://discuss.elastic.co/t/geoip-database-unavailable-geolite2-city-mmdb-error/359439)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 11\
**Last updated:** [May 20, 2024, 12:13pm UTC](https://discuss.elastic.co/t/geoip-database-unavailable-geolite2-city-mmdb-error/359439 "2024-05-20T12:13:33Z")

</div>

Dear Members, can someone please guide i am facing the below issues don't know unable to lookup my field with geo ip details \[2024-05-14T12:21:49,461\]\[ERROR\]\[o.e.i.g.GeoIpDownloader \] \[node1\] exception during geoip da…

---

## [Concurrency problem when automatically creating an index](https://discuss.elastic.co/t/concurrency-problem-when-automatically-creating-an-index/21544)

<div class="topic-metadata">

**Author:** [@Tom\_6](https://discuss.elastic.co/u/Tom_6)\
**Replies:** 10\
**Last updated:** [January 12, 2015, 2:16pm UTC](https://discuss.elastic.co/t/concurrency-problem-when-automatically-creating-an-index/21544 "2015-01-12T14:16:20Z")

</div>

Hi, we'd been using ES for a while now. Specifically version 0.90.3. A couple of months ago we decided to migrate to the latest version which was finally frozen to be 1.4.1. No data migration was necessary because we…

---

## [Calculate response time for alerts](https://discuss.elastic.co/t/calculate-response-time-for-alerts/362141)

<div class="topic-metadata">

**Author:** [@abubacker](https://discuss.elastic.co/u/abubacker)\
**Replies:** 9\
**Last updated:** [July 23, 2024, 8:44am UTC](https://discuss.elastic.co/t/calculate-response-time-for-alerts/362141 "2024-07-23T08:44:36Z")

</div>

Dear All I need to calculate response time from security alerts open to ack to closed currently, from Kibana alerts logs, I'm able to get alert start time but when we ack or close time is not logged in alerts only work…

---

## [Structure elasticsearch for 50 million fields](https://discuss.elastic.co/t/structure-elasticsearch-for-50-million-fields/184134)

<div class="topic-metadata">

**Author:** [@Niels\_van\_Rijn](https://discuss.elastic.co/u/Niels_van_Rijn)\
**Replies:** 12\
**Last updated:** [June 7, 2019, 10:41am UTC](https://discuss.elastic.co/t/structure-elasticsearch-for-50-million-fields/184134 "2019-06-07T10:41:49Z")

</div>

Hi! I have a dataset of 43536000 fields (I can't make it smaller, I already removed fields). With normal Elasticsearch settings (1000 shards per node and 1000 fields per index) I would have to make 44 nodes in my Elast…

---

## [Index Lifecycle Rollover failing with NullPtrException](https://discuss.elastic.co/t/index-lifecycle-rollover-failing-with-nullptrexception/196580)

<div class="topic-metadata">

**Author:** [@tami](https://discuss.elastic.co/u/tami)\
**Replies:** 9\
**Last updated:** [September 5, 2019, 8:08pm UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-failing-with-nullptrexception/196580 "2019-09-05T20:08:55Z")

</div>

We are running ElasticSearch 6.7.2 in a 3.2.2 (master/client/data) node setup on kubernetes. I have an ILM policy running to rollover a new index every 7 days, move to a warm stage, and then delete after 1 year. Here i…

---

## [Cannot create pipeline for send bro logs to elk](https://discuss.elastic.co/t/cannot-create-pipeline-for-send-bro-logs-to-elk/130342)

<div class="topic-metadata">

**Author:** [@bz\_Os](https://discuss.elastic.co/u/bz_Os)\
**Replies:** 10\
**Last updated:** [May 3, 2018, 2:08am UTC](https://discuss.elastic.co/t/cannot-create-pipeline-for-send-bro-logs-to-elk/130342 "2018-05-03T02:08:22Z")

</div>

i attempt to send logs from bro ids to elk i am using filebeat.yml for input configuration when i specifie the path of the logs and the bro-con\_log.conf for the configuration of logstash so when i open /var/log/logstash…

---

## [Heterogeneous clusters](https://discuss.elastic.co/t/heterogeneous-clusters/9044)

<div class="topic-metadata">

**Author:** [@Robin\_Verlangen](https://discuss.elastic.co/u/Robin_Verlangen)\
**Replies:** 9\
**Last updated:** [September 18, 2012, 10:13am UTC](https://discuss.elastic.co/t/heterogeneous-clusters/9044 "2012-09-18T10:13:17Z")

</div>

Hi there, We're working on a project that is going to use ES on a pretty large scale. However we're thinking about deploying it on a lot of small boxes that also run other tasks. The idea is to keep the overhead per…

---

## [JSON KIBANA mapeo de campos](https://discuss.elastic.co/t/json-kibana-mapeo-de-campos/328525)

<div class="topic-metadata">

**Author:** [@Whazaza](https://discuss.elastic.co/u/Whazaza)\
**Replies:** 10\
**Last updated:** [March 27, 2023, 5:32pm UTC](https://discuss.elastic.co/t/json-kibana-mapeo-de-campos/328525 "2023-03-27T17:32:37Z")

</div>

Hola buenas tengo un inconveniente con logstash y kibana. Estoy intentado tomar campos de un JSON que lo tomo de un input TCP y lo mando a kibana ahora mi inconveniente es a la hora de generar un filtro en “logstash.con…

---

## [\_remote/info?pretty cannot get the accurate/latest information](https://discuss.elastic.co/t/remote-info-pretty-cannot-get-the-accurate-latest-information/193418)

<div class="topic-metadata">

**Author:** [@iShiBin](https://discuss.elastic.co/u/iShiBin)\
**Replies:** 10\
**Last updated:** [August 16, 2019, 8:45pm UTC](https://discuss.elastic.co/t/remote-info-pretty-cannot-get-the-accurate-latest-information/193418 "2019-08-16T20:45:29Z")

</div>

After I set up the cross-cluster search and restarted the ES node, this API doesn't return empty seeds node until I make a cross-cluster search request. Is it a bug? And how to address it? Here is the empty feedback. {…

---

## [Filebeeat sending log, but logstash not running, connection refused!](https://discuss.elastic.co/t/filebeeat-sending-log-but-logstash-not-running-connection-refused/116665)

<div class="topic-metadata">

**Author:** [@omid](https://discuss.elastic.co/u/omid)\
**Replies:** 10\
**Last updated:** [January 24, 2018, 2:10pm UTC](https://discuss.elastic.co/t/filebeeat-sending-log-but-logstash-not-running-connection-refused/116665 "2018-01-24T14:10:20Z")

</div>

hi im used filebeat to many server, shipped nginx log to logstash in this time and months my elk server is very good worked but, my 1 line added grok pattern to syslog-filter.conf, and restart logstash ,,, my elk and…

---

## [Doing bounding box filtering using a geohash prefix](https://discuss.elastic.co/t/doing-bounding-box-filtering-using-a-geohash-prefix/11030)

<div class="topic-metadata">

**Author:** [@Gian\_Luca\_Ortelli](https://discuss.elastic.co/u/Gian_Luca_Ortelli)\
**Replies:** 9\
**Last updated:** [March 13, 2013, 9:51am UTC](https://discuss.elastic.co/t/doing-bounding-box-filtering-using-a-geohash-prefix/11030 "2013-03-13T09:51:27Z")

</div>

Hi, I read on the docs that you can define the bounding box using 2 geohash values for the top left and bottom right corners. Is there a way to specify the bounding box using a single geohash value? Typically, it …

---

## [Error: failed to publish events: write tcp XX.XX.XX.XX:50882-\>XX.XX.XX.XX:5044: write: broken pipe](https://discuss.elastic.co/t/error-failed-to-publish-events-write-tcp-xx-xx-xx-xx-50882-xx-xx-xx-xx-write-broken-pipe/346852)

<div class="topic-metadata">

**Author:** [@charown](https://discuss.elastic.co/u/charown)\
**Replies:** 12\
**Last updated:** [November 13, 2023, 9:15am UTC](https://discuss.elastic.co/t/error-failed-to-publish-events-write-tcp-xx-xx-xx-xx-50882-xx-xx-xx-xx-write-broken-pipe/346852 "2023-11-13T09:15:26Z")

</div>

I have docker-compose.yml version: "2.4" services: …

---

## [Need help to parse xml file with logstash](https://discuss.elastic.co/t/need-help-to-parse-xml-file-with-logstash/196464)

<div class="topic-metadata">

**Author:** [@ROok](https://discuss.elastic.co/u/ROok)\
**Replies:** 11\
**Last updated:** [August 26, 2019, 2:30pm UTC](https://discuss.elastic.co/t/need-help-to-parse-xml-file-with-logstash/196464 "2019-08-26T14:30:10Z")

</div>

Hi All, I need help for parsing my xml file My xml file look like this: \<UserList\> \<User statefile='10'\> \<UserAt atName='NUMBER'\>3312348555\</UserAt\> \<UserAt atName='ID'\>308014204145695\</UserAt\> …

---

## [Significant text visualize in kibana](https://discuss.elastic.co/t/significant-text-visualize-in-kibana/188396)

<div class="topic-metadata">

**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\
**Replies:** 11\
**Last updated:** [July 30, 2019, 5:51pm UTC](https://discuss.elastic.co/t/significant-text-visualize-in-kibana/188396 "2019-07-30T17:51:26Z")

</div>

aggreations significant text visualize kibana ?

---

## [Elastic cluster issue!](https://discuss.elastic.co/t/elastic-cluster-issue/314953)

<div class="topic-metadata">

**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\
**Replies:** 19\
**Last updated:** [October 2, 2022, 5:38pm UTC](https://discuss.elastic.co/t/elastic-cluster-issue/314953 "2022-10-02T17:38:41Z")

</div>

We are seeing CPU spikes for our Elastic cluster and in logs we see this error continuously. We also get a circuit breaker exception in kibana when CPU spikes up. What could be wrong with our cluster \[2022-09-22T13:40:3…

---

## [Winlogbeat dashboard incomplete/missing fields](https://discuss.elastic.co/t/winlogbeat-dashboard-incomplete-missing-fields/256375)

<div class="topic-metadata">

**Author:** [@bohm](https://discuss.elastic.co/u/bohm)\
**Replies:** 9\
**Last updated:** [November 25, 2020, 11:25am UTC](https://discuss.elastic.co/t/winlogbeat-dashboard-incomplete-missing-fields/256375 "2020-11-25T11:25:01Z")

</div>

Hello, Winlogbeat and ELK 7.10.0 Trying to show a college of mine that visualisation is much easier with Kibana then Splunk, I'm trying to build a use case with Active Directory security logging. But is looks like some…

---

## [Kibana not accessible after 8.11.1 update](https://discuss.elastic.co/t/kibana-not-accessible-after-8-11-1-update/347438)

<div class="topic-metadata">

**Author:** [@Cara410](https://discuss.elastic.co/u/Cara410)\
**Replies:** 12\
**Last updated:** [November 22, 2023, 2:10pm UTC](https://discuss.elastic.co/t/kibana-not-accessible-after-8-11-1-update/347438 "2023-11-22T14:10:19Z")

</div>

Hello All, We updated our stak to 8.11.1 and now the Kibana website is inaccessible. I receive a this page cannot be reached error. I have verified that Kibana is up and running and we updated our nodes and Logstash but…

---

## [Syntax error message in elasticsearch.yml](https://discuss.elastic.co/t/syntax-error-message-in-elasticsearch-yml/177052)

<div class="topic-metadata">

**Author:** [@yasin](https://discuss.elastic.co/u/yasin)\
**Replies:** 12\
**Last updated:** [April 16, 2019, 12:29pm UTC](https://discuss.elastic.co/t/syntax-error-message-in-elasticsearch-yml/177052 "2019-04-16T12:29:24Z")

</div>

Dear Team, I'm trying to configure the slack notification but i'm always getting the following error message: The YAML settings are invalid, please check your syntax This error message is created after adding the mess…

---

## [Logstash parsing two days behind](https://discuss.elastic.co/t/logstash-parsing-two-days-behind/31879)

<div class="topic-metadata">

**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\
**Replies:** 13\
**Last updated:** [October 9, 2015, 3:41pm UTC](https://discuss.elastic.co/t/logstash-parsing-two-days-behind/31879 "2015-10-09T15:41:45Z")

</div>

Hello, I'm forwarding logs from a remote server to my docker container containing the elk stack and after looking at the logs, it seems they are two days behind. Any reason why this is? Is there a way to fix this? Thank…

---

## [Need to create multiple logstash into the same server to monitor apache and nginx together](https://discuss.elastic.co/t/need-to-create-multiple-logstash-into-the-same-server-to-monitor-apache-and-nginx-together/137290)

<div class="topic-metadata">

**Author:** [@m\_5amy](https://discuss.elastic.co/u/m_5amy)\
**Replies:** 9\
**Last updated:** [June 26, 2018, 4:23pm UTC](https://discuss.elastic.co/t/need-to-create-multiple-logstash-into-the-same-server-to-monitor-apache-and-nginx-together/137290 "2018-06-26T16:23:33Z")

</div>

i'm trying to use ELK "Elasticsearch , logstash and kibana" to monitor apache and nginx logs and centralize logs into kibana. now I have got logs of apache into logstash and kibana so, what should i do to get ngnix lo…

---

## [Mappings types](https://discuss.elastic.co/t/mappings-types/304477)

<div class="topic-metadata">

**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\
**Replies:** 10\
**Last updated:** [May 12, 2022, 3:30pm UTC](https://discuss.elastic.co/t/mappings-types/304477 "2022-05-12T15:30:56Z")

</div>

Hi Elastic community, I'm having a hard time figuring out what is wrong with my index template configuration, but Kibana shows me a message of "mapping types for this template uses types, which have been removed". I don…

---

## [Is key values in a JSON doc indexed?](https://discuss.elastic.co/t/is-key-values-in-a-json-doc-indexed/171413)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 14\
**Last updated:** [March 9, 2019, 4:56am UTC](https://discuss.elastic.co/t/is-key-values-in-a-json-doc-indexed/171413 "2019-03-09T04:56:28Z")

</div>

I have very basic question, when I index a document, for example POST /customer/\_doc/1/\_update?pretty { "doc": { "name": "Jane Doe" } } is the key also indexed?. To be specific the string "name" in the above example…

---

## [Elastic searh not running after server restarted](https://discuss.elastic.co/t/elastic-searh-not-running-after-server-restarted/235909)

<div class="topic-metadata">

**Author:** [@justaniceguy](https://discuss.elastic.co/u/justaniceguy)\
**Replies:** 11\
**Last updated:** [June 7, 2020, 7:58pm UTC](https://discuss.elastic.co/t/elastic-searh-not-running-after-server-restarted/235909 "2020-06-07T19:58:32Z")

</div>

Hi, I am new to Elastic search. I just installed made my first installation on a CentOS 7 and it was working, then I tried to config the tried to configure Elasticsearch to start automatically when the system boots up as…

---

## [Recover file from quarantine](https://discuss.elastic.co/t/recover-file-from-quarantine/346973)

<div class="topic-metadata">

**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\
**Replies:** 9\
**Last updated:** [November 21, 2023, 8:32am UTC](https://discuss.elastic.co/t/recover-file-from-quarantine/346973 "2023-11-21T08:32:22Z")

</div>

well - Security quarantined nnotes.dll that is part of "HCL Notes" Installation. Now i am trying to find out how to get back the file without the need to reinstall the application. I created a rule exception and i can …

---

## [Beat/Module for build metrics](https://discuss.elastic.co/t/beat-module-for-build-metrics/145444)

<div class="topic-metadata">

**Author:** [@nimDevOps](https://discuss.elastic.co/u/nimDevOps)\
**Replies:** 9\
**Last updated:** [September 3, 2018, 5:31pm UTC](https://discuss.elastic.co/t/beat-module-for-build-metrics/145444 "2018-09-03T17:31:31Z")

</div>

I'm trying to figure out what would be the approach to collect build metrics on build agent. Imagine we have VM or docker image which is created per build and destroyed after build is completed. During the build ( compi…

---

## [Watch for child elements like router interfaces](https://discuss.elastic.co/t/watch-for-child-elements-like-router-interfaces/125217)

<div class="topic-metadata">

**Author:** [@aurimas](https://discuss.elastic.co/u/aurimas)\
**Replies:** 15\
**Last updated:** [March 29, 2018, 11:51am UTC](https://discuss.elastic.co/t/watch-for-child-elements-like-router-interfaces/125217 "2018-03-29T11:51:36Z")

</div>

Hi, We are monitoring hundreds of network devices (routers and switches) and each device has various number of interfaces (ports). I am trying to setup watch that would show on which network device which port is hitting…

---

## [Late response on elasticsearch hit](https://discuss.elastic.co/t/late-response-on-elasticsearch-hit/73586)

<div class="topic-metadata">

**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Replies:** 10\
**Last updated:** [February 2, 2017, 4:01pm UTC](https://discuss.elastic.co/t/late-response-on-elasticsearch-hit/73586 "2017-02-02T16:01:13Z")

</div>

I have an index named "akhil". I'm trying to search as GET localhost:9200/akhil/\_search It's taking a 20.4sec time to get the response. I want to know why this is happening. How can I debug this?

---

## [DataType Changes after rollover of Index](https://discuss.elastic.co/t/datatype-changes-after-rollover-of-index/247619)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 9\
**Last updated:** [September 6, 2020, 9:19am UTC](https://discuss.elastic.co/t/datatype-changes-after-rollover-of-index/247619 "2020-09-06T09:19:56Z")

</div>

Hi Team I am using Elasticsearch Version 7.5.2. I have one index with grows in size and documents. Once it has reached 1000 documents , we are performing rollover. Command : curl -XPOST '10.10.10.1:9200/myevents/\_rol…

---

## [How to set up Filebeat to send geoip-info to our hosted instance?](https://discuss.elastic.co/t/how-to-set-up-filebeat-to-send-geoip-info-to-our-hosted-instance/260117)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 9\
**Last updated:** [January 14, 2021, 8:39pm UTC](https://discuss.elastic.co/t/how-to-set-up-filebeat-to-send-geoip-info-to-our-hosted-instance/260117 "2021-01-14T20:39:14Z")

</div>

I am in the process of creating a POC presentation for my management team hoping to show the benefits and advantages of this approach as compared to what we are currently using which is a combination of AppDynamics, the …

---

## [How to remove part of name in multiple fields with Ruby in logstash?](https://discuss.elastic.co/t/how-to-remove-part-of-name-in-multiple-fields-with-ruby-in-logstash/254263)

<div class="topic-metadata">

**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\
**Replies:** 9\
**Last updated:** [November 5, 2020, 1:57pm UTC](https://discuss.elastic.co/t/how-to-remove-part-of-name-in-multiple-fields-with-ruby-in-logstash/254263 "2020-11-05T13:57:47Z")

</div>

I have a source of metrics, which are received by logstash and sent out to Elastic later. There are multiple fields starting with "prometheus.metrics.ems". Can someone help with the ruby code or some other method to cut…

---

## [Query from a date (\> than date)](https://discuss.elastic.co/t/query-from-a-date-than-date/4269)

<div class="topic-metadata">

**Author:** [@electic](https://discuss.elastic.co/u/electic)\
**Replies:** 15\
**Last updated:** [April 23, 2011, 6:08pm UTC](https://discuss.elastic.co/t/query-from-a-date-than-date/4269 "2011-04-23T18:08:19Z")

</div>

Hi, I am a bit new to this and I could not find anything in the documentation but I would like to use the URL Get API to query documents from a certain date. For example, everything above 2011-04-22 12:00AM. I have…

---

## [Перепарсинг существующих индексов Logstash](https://discuss.elastic.co/t/logstash/269025)

<div class="topic-metadata">

**Author:** [@frostwar](https://discuss.elastic.co/u/frostwar)\
**Replies:** 11\
**Last updated:** [April 12, 2021, 2:58pm UTC](https://discuss.elastic.co/t/logstash/269025 "2021-04-12T14:58:48Z")

</div>

Как перепарсить через Logstash существующие индексы? У меня в Logstash приходили FileBeat какое-то время. Потом появилась задача выделять отдельные поля. Изменил конфиг, но применяется только ко вновь поступившим данным…

---

## [ElasticSearch Recovery](https://discuss.elastic.co/t/elasticsearch-recovery/72919)

<div class="topic-metadata">

**Author:** [@prasad7](https://discuss.elastic.co/u/prasad7)\
**Replies:** 11\
**Last updated:** [January 27, 2017, 9:19pm UTC](https://discuss.elastic.co/t/elasticsearch-recovery/72919 "2017-01-27T21:19:33Z")

</div>

Hi ES Team, I had a problem with lot of my Shards being Unassigned and the health is always showing around 60-70% and in RED state. I plan to copy/restore data from backup, and it will restore the data but will it fix t…

---

## [Elastic Search Deployment](https://discuss.elastic.co/t/elastic-search-deployment/351967)

<div class="topic-metadata">

**Author:** [@Karthikeyan\_K](https://discuss.elastic.co/u/Karthikeyan_K)\
**Replies:** 22\
**Last updated:** [February 20, 2024, 8:43am UTC](https://discuss.elastic.co/t/elastic-search-deployment/351967 "2024-02-20T08:43:50Z")

</div>

Hi, I am trying to install Elastic Stack in my local machine. I downloaded elasticsearch-8.11.3-windows-x86\_64. When I try to run the batch file I get the following error message. " fatal exception while booting Elastic…

---

## [When is the Analyzing Process executed?](https://discuss.elastic.co/t/when-is-the-analyzing-process-executed/70185)

<div class="topic-metadata">

**Author:** [@TWalter](https://discuss.elastic.co/u/TWalter)\
**Replies:** 9\
**Last updated:** [January 1, 2017, 3:08pm UTC](https://discuss.elastic.co/t/when-is-the-analyzing-process-executed/70185 "2017-01-01T15:08:27Z")

</div>

Hello there, i have two questions. When is the Anaylzing of a String Field executed. Is it executed during the Lucene Commit, or before the documents are stored in the In-Memory-Buffer of the Lucene Index? Does th…

---

## [Synthetic browser tests are failing in Version 7.x](https://discuss.elastic.co/t/synthetic-browser-tests-are-failing-in-version-7-x/324440)

<div class="topic-metadata">

**Author:** [@lawrance.ruban](https://discuss.elastic.co/u/lawrance.ruban)\
**Replies:** 14\
**Last updated:** [February 2, 2023, 11:55pm UTC](https://discuss.elastic.co/t/synthetic-browser-tests-are-failing-in-version-7-x/324440 "2023-02-02T23:55:44Z")

</div>

We are using 7.16.x ELK version in production and Dev environment and we are running heartbeat docker container v7.17.x for uptime monitoring. The http tests are working but the browser tests are failing with below error…

---

## [Remove/Prevent duplicates with rollover](https://discuss.elastic.co/t/remove-prevent-duplicates-with-rollover/310717)

<div class="topic-metadata">

**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\
**Replies:** 14\
**Last updated:** [July 27, 2022, 9:49am UTC](https://discuss.elastic.co/t/remove-prevent-duplicates-with-rollover/310717 "2022-07-27T09:49:19Z")

</div>

Hi, One of my index has an ILM (index lifecycle management) with rollovers. The problem is, when the index receive data and rollover at the same time, the latest data are duplicated (present in both the new and old ind…

---

## [Differences in PUT requests in ES versions](https://discuss.elastic.co/t/differences-in-put-requests-in-es-versions/295171)

<div class="topic-metadata">

**Author:** [@EnJay](https://discuss.elastic.co/u/EnJay)\
**Replies:** 10\
**Last updated:** [January 25, 2022, 9:53pm UTC](https://discuss.elastic.co/t/differences-in-put-requests-in-es-versions/295171 "2022-01-25T21:53:50Z")

</div>

Hello everyone :hatched\_chick: I actively study Elasticsearch. I had to update my version ES to the latest from 5. But here I ran into a problem, the answer to which I could not find in the documentation. I used ES 5 …

[Previous page](https://discuss.elastic.co/top.md?page=181&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=183&per_page=50&period=all)
