# Top **URL:** https://discuss.elastic.co/top.md?page=189&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 190 --- ## [Automatic heap sizing](https://discuss.elastic.co/t/automatic-heap-sizing/293386)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 9\ **Last updated:** [January 28, 2022, 10:03am UTC](https://discuss.elastic.co/t/automatic-heap-sizing/293386 "2022-01-28T10:03:46Z")
I'm testing the automatic heap size feature in 7.16.2. In a 12G VM I was specifying a 4G heap, I removed that setting, restarted Elasticsearch and it used 1G for heap. That seams small to me. Does it grow the heap if … --- ## [Search the http://elasticsearch.org website with elasticsearch itself](https://discuss.elastic.co/t/search-the-http-elasticsearch-org-website-with-elasticsearch-itself/3915)
**Author:** [@karmi](https://discuss.elastic.co/u/karmi)\ **Replies:** 21\ **Last updated:** [April 12, 2011, 10:55am UTC](https://discuss.elastic.co/t/search-the-http-elasticsearch-org-website-with-elasticsearch-itself/3915 "2011-04-12T10:55:29Z")
Hi, I've spent couple of hours during the last days with implementing an ElasticSearch-backed search for the ES website (so it could be “self-hosted”, so to speak), as we have been talking about it on IRC the other da… --- ## [Massive performance degradation when terms filter has over 16 values?](https://discuss.elastic.co/t/massive-performance-degradation-when-terms-filter-has-over-16-values/349106)
**Author:** [@elastic\_dude](https://discuss.elastic.co/u/elastic_dude)\ **Replies:** 9\ **Last updated:** [December 18, 2023, 4:19pm UTC](https://discuss.elastic.co/t/massive-performance-degradation-when-terms-filter-has-over-16-values/349106 "2023-12-18T16:19:50Z")
Came across some odd behavior. We have a query that performs in the tens of milliseconds until we go over 16 values in our terms filter. When 17 or more are included the performance degrades by 15-20 multiples. Here is … --- ## [How to use shared drive location for path.repo between linux and Windows machines in cluster?](https://discuss.elastic.co/t/how-to-use-shared-drive-location-for-path-repo-between-linux-and-windows-machines-in-cluster/173584)
**Author:** [@Prashant\_Rana](https://discuss.elastic.co/u/Prashant_Rana)\ **Replies:** 9\ **Last updated:** [April 5, 2019, 7:39am UTC](https://discuss.elastic.co/t/how-to-use-shared-drive-location-for-path-repo-between-linux-and-windows-machines-in-cluster/173584 "2019-04-05T07:39:33Z")
I am using a cluster of about 3-4 nodes in which Master is always a Windows machine. How can I use linux node in this setup with the shared drive in Windows to take the snapshot? Is there any documentation for this? --- ## [Logstash 8.11 Geoip filter plugin does not enhancing the apache access data](https://discuss.elastic.co/t/logstash-8-11-geoip-filter-plugin-does-not-enhancing-the-apache-access-data/348893)
**Author:** [@husoelasticbe](https://discuss.elastic.co/u/husoelasticbe)\ **Replies:** 13\ **Last updated:** [December 8, 2023, 9:32pm UTC](https://discuss.elastic.co/t/logstash-8-11-geoip-filter-plugin-does-not-enhancing-the-apache-access-data/348893 "2023-12-08T21:32:07Z")
Dear elastic community, I am having issues with enhancing my access log data with Geoip filter plugin. I have very simple pipeline conf file like follow: input { file { path =\> "/etc/logstash/event-data/a… --- ## [Lost data in kibana but show in syslog logstash](https://discuss.elastic.co/t/lost-data-in-kibana-but-show-in-syslog-logstash/278894)
**Author:** [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\ **Replies:** 11\ **Last updated:** [July 17, 2021, 7:49pm UTC](https://discuss.elastic.co/t/lost-data-in-kibana-but-show-in-syslog-logstash/278894 "2021-07-17T19:49:07Z")
I have conf file in logstash like this input { beats { host =\> "0.0.0.0" port =\> 5044 ssl =\> false } } filter { if \[fileset\]\[name\] == "auth" { grok { match =\> { "message" =\> "%{SYSLOGT… --- ## [Knn\_vectors field understanding](https://discuss.elastic.co/t/knn-vectors-field-understanding/374923)
**Author:** [@yli](https://discuss.elastic.co/u/yli)\ **Replies:** 23\ **Last updated:** [March 6, 2025, 11:13pm UTC](https://discuss.elastic.co/t/knn-vectors-field-understanding/374923 "2025-03-06T23:13:04Z")
Hi, I have defined one field, named "file\_section\_embedding", in my index mapping to be dense\_vector and enabled index for it. I also tested both including and excluding the dense vector field in/from the "\_source", and… --- ## [How to use machine learning settings=\>( filter section ) to filter out errors in logs which can be used for multiple job ids](https://discuss.elastic.co/t/how-to-use-machine-learning-settings-filter-section-to-filter-out-errors-in-logs-which-can-be-used-for-multiple-job-ids/168371)
**Author:** [@sagarleo](https://discuss.elastic.co/u/sagarleo)\ **Replies:** 9\ **Last updated:** [February 26, 2019, 11:20am UTC](https://discuss.elastic.co/t/how-to-use-machine-learning-settings-filter-section-to-filter-out-errors-in-logs-which-can-be-used-for-multiple-job-ids/168371 "2019-02-26T11:20:12Z")
I wanted to create a filter which can filter errors from logs across all job ids in machine learning section. Kindly, help me in that asap. I'm attaching screenshot of what i was trying to do --- ## [Errors while doing bulk update, Am I doing this wrong?](https://discuss.elastic.co/t/errors-while-doing-bulk-update-am-i-doing-this-wrong/32951)
**Author:** [@heaven00](https://discuss.elastic.co/u/heaven00)\ **Replies:** 9\ **Last updated:** [October 26, 2015, 9:03am UTC](https://discuss.elastic.co/t/errors-while-doing-bulk-update-am-i-doing-this-wrong/32951 "2015-10-26T09:03:00Z")
Hi, I am new to elasticsearch and I am unable to figure out ideal configurations for my setup. I have 2 nodes, 1 master/data node and 1 data node on 2 8GB RAM machines running on core processor 2.6Ghz. I have a mont… --- ## [Node cluster](https://discuss.elastic.co/t/node-cluster/143650)
**Author:** [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\ **Replies:** 17\ **Last updated:** [August 9, 2018, 1:54pm UTC](https://discuss.elastic.co/t/node-cluster/143650 "2018-08-09T13:54:25Z")
Hello everyone, What could happen if in my cluster, all nodes are data nodes? Do we have to have, within the cluster, a master node to manage the other nodes? "nodes" : { "count" : { "total" : 4, "mast… --- ## [How logstash jdbc plugin fetch data from database](https://discuss.elastic.co/t/how-logstash-jdbc-plugin-fetch-data-from-database/333103)
**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\ **Replies:** 14\ **Last updated:** [May 17, 2023, 9:09pm UTC](https://discuss.elastic.co/t/how-logstash-jdbc-plugin-fetch-data-from-database/333103 "2023-05-17T21:09:51Z")
Hi I have informix database that contain tons of tables and records that need to join some of them and send to elasticsearch. Result of this join are 70 columns and 100M records. Here is the requirements: 1-For first … --- ## [Where condition](https://discuss.elastic.co/t/where-condition/269072)
**Author:** [@Wolfram\_P](https://discuss.elastic.co/u/Wolfram_P)\ **Replies:** 13\ **Last updated:** [April 2, 2021, 10:22am UTC](https://discuss.elastic.co/t/where-condition/269072 "2021-04-02T10:22:59Z")
Hi, as a beginner on Kibana this question might be silly, but I cannot get across it: I would like to add a stacked bar graph to my dashboard. Two Y-axis: sum of index abc field1, where field2="1" sum of index abc f… --- ## [Can i use Transforms to collapse data?](https://discuss.elastic.co/t/can-i-use-transforms-to-collapse-data/203694)
**Author:** [@akassss](https://discuss.elastic.co/u/akassss)\ **Replies:** 10\ **Last updated:** [October 23, 2019, 3:00pm UTC](https://discuss.elastic.co/t/can-i-use-transforms-to-collapse-data/203694 "2019-10-23T15:00:05Z")
I need continuously collapse data by hour (by custom field). And aggregated index must have equal source index mapping. At first I wanted to use rollup, but it does not support scrolling and much more. --- ## [Elastic Search on Windows XP](https://discuss.elastic.co/t/elastic-search-on-windows-xp/5265)
**Author:** [@Satish\_Talim](https://discuss.elastic.co/u/Satish_Talim)\ **Replies:** 10\ **Last updated:** [August 30, 2011, 12:49pm UTC](https://discuss.elastic.co/t/elastic-search-on-windows-xp/5265 "2011-08-30T12:49:10Z")
Wanted to give Elastic Search a spin. I have downloaded elasticsearch-0.17.6 as a zip file. From the site's main page it was not obvious that Elastic Search works on Windows. After installing and reading the file READ… --- ## [Fill placeholder on messages with partial field value of different field in Logstash](https://discuss.elastic.co/t/fill-placeholder-on-messages-with-partial-field-value-of-different-field-in-logstash/141126)
**Author:** [@sbienert](https://discuss.elastic.co/u/sbienert)\ **Replies:** 9\ **Last updated:** [July 24, 2018, 1:21pm UTC](https://discuss.elastic.co/t/fill-placeholder-on-messages-with-partial-field-value-of-different-field-in-logstash/141126 "2018-07-24T13:21:16Z")
Hello, I have placeholders in a log message. The message gets sent with a message extension which should replace these. The placeholders are numbers in brackets. The numbers inside should represent the line number of th… --- ## [Performance weird stuff](https://discuss.elastic.co/t/performance-weird-stuff/246117)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 12\ **Last updated:** [August 28, 2020, 9:57pm UTC](https://discuss.elastic.co/t/performance-weird-stuff/246117 "2020-08-28T21:57:51Z")
Hello, I have this cluster with 6 ES nodes, 3 logstashes and numbers of servers shippings logs with filebeat. Versions are 6.8.1 for filebeat, 6.6.1for logstash and 6.7.1for ES . Clusterstate is green. The load on … --- ## [Overriding built-in analyzer and set it as default](https://discuss.elastic.co/t/overriding-built-in-analyzer-and-set-it-as-default/19338)
**Author:** [@phoenix](https://discuss.elastic.co/u/phoenix)\ **Replies:** 9\ **Last updated:** [August 26, 2014, 1:11pm UTC](https://discuss.elastic.co/t/overriding-built-in-analyzer-and-set-it-as-default/19338 "2014-08-26T13:11:24Z")
Hi everyone, I'm trying to override the french analyser in my index. What i want is that this custom 'french' analyzer becomes the default analyzer for all searches and indexing, if none is given explicitly. Th… --- ## [Set limits on Elasticsearch & Kibana](https://discuss.elastic.co/t/set-limits-on-elasticsearch-kibana/167070)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 10\ **Last updated:** [February 12, 2019, 2:59pm UTC](https://discuss.elastic.co/t/set-limits-on-elasticsearch-kibana/167070 "2019-02-12T14:59:47Z")
Hi, everyone :slight\_smile: I would like to know if it is possible to set a limit on Elasticsearch or Kibana to avoid a service down. I have seen that Kibana has the parameter elasticsearch.requestTimeout: 30000. For … --- ## [\[Announce\] BigDesk - Live charts and statistics for ElasticSearch cluster](https://discuss.elastic.co/t/announce-bigdesk-live-charts-and-statistics-for-elasticsearch-cluster/4557)
**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\ **Replies:** 18\ **Last updated:** [June 20, 2011, 3:14pm UTC](https://discuss.elastic.co/t/announce-bigdesk-live-charts-and-statistics-for-elasticsearch-cluster/4557 "2011-06-20T15:14:19Z")
Hi, I have just released BigDesk. It is simple JavaScript based monitoring tool for ElasticSearch cluster. You can checkout it here https://github.com/lukas-vlcek/bigdesk and give it a go (it is pretty simple to us… --- ## [Filebeat MISP module refresh](https://discuss.elastic.co/t/filebeat-misp-module-refresh/256281)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 11\ **Last updated:** [December 9, 2020, 1:33am UTC](https://discuss.elastic.co/t/filebeat-misp-module-refresh/256281 "2020-12-09T01:33:26Z")
Is there a way to get the filebeat misp module to delete & re-create the index that stores the misp data in? I'm wanting to refresh this data hourly? --- ## [Upgrade to 8.1.2 failing with unexpected folder encountered during data folder upgrade](https://discuss.elastic.co/t/upgrade-to-8-1-2-failing-with-unexpected-folder-encountered-during-data-folder-upgrade/302767)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 9\ **Last updated:** [April 21, 2022, 12:36pm UTC](https://discuss.elastic.co/t/upgrade-to-8-1-2-failing-with-unexpected-folder-encountered-during-data-folder-upgrade/302767 "2022-04-21T12:36:10Z")
Hello, I upgraded 1 of the 2 data nodes in my 3 node cluster (3rd node is voting only and does not store any data) from 7.17.2 to 8.1.2. Post the upgrade, Elasticsearch service is crashing with the following error: Exc… --- ## [Можно ли размещать на одном физическом сервере два Elasticsearch в роли data?](https://discuss.elastic.co/t/elasticsearch-data/251916)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 9\ **Last updated:** [October 14, 2020, 2:21pm UTC](https://discuss.elastic.co/t/elasticsearch-data/251916 "2020-10-14T14:21:51Z")
Добрый день! Скажите, можно ли размещать на одном физическом сервере два Elasticsearch в роли data? Чем это чревато? Аллоцировав под heap и кэш память, не начнут ли они вытеснять друг-друга? И еще скажите, какой преде… --- ## [ElasticSearch standard Analyzer - exceptional case](https://discuss.elastic.co/t/elasticsearch-standard-analyzer-exceptional-case/111534)
**Author:** [@sanjaykanani](https://discuss.elastic.co/u/sanjaykanani)\ **Replies:** 9\ **Last updated:** [December 13, 2017, 11:40am UTC](https://discuss.elastic.co/t/elasticsearch-standard-analyzer-exceptional-case/111534 "2017-12-13T11:40:05Z")
Continuing the discussion from ElasticSearch standard Analyzer - problematic case: \[quote="Igor\_Romanov, post:1, topic:16782"\] Hi I have read this article but no one has replied on it. I am facing same issue.please p… --- ## [Kibana lens visualization is very slow](https://discuss.elastic.co/t/kibana-lens-visualization-is-very-slow/299198)
**Author:** [@notgurev](https://discuss.elastic.co/u/notgurev)\ **Replies:** 10\ **Last updated:** [March 16, 2022, 9:45am UTC](https://discuss.elastic.co/t/kibana-lens-visualization-is-very-slow/299198 "2022-03-16T09:45:25Z")
I have a cluster consisting of 1 hot (40 cores, 2 SSDs) and 2 cold nodes. I use a data stream to index a lot of data into 50gb one-shard indices with rollover, ILM, etc. Data is also sorted by @timestamp (asc) -- so I be… --- ## [Shard allocation logic not taking disk size into account - why?](https://discuss.elastic.co/t/shard-allocation-logic-not-taking-disk-size-into-account-why/12743)
**Author:** [@Itamar\_Syn\_Hershko](https://discuss.elastic.co/u/Itamar_Syn_Hershko)\ **Replies:** 11\ **Last updated:** [August 10, 2013, 11:22pm UTC](https://discuss.elastic.co/t/shard-allocation-logic-not-taking-disk-size-into-account-why/12743 "2013-08-10T23:22:40Z")
Hi, I'm aware of https://github.com/sonian/elasticsearch-equilibrium But is there a reason why similar functionality isn't implemented in ElasticSearch itself? In particular, ES will try and allocate shards on … --- ## [Issue with allocation filtering on snapshot restore](https://discuss.elastic.co/t/issue-with-allocation-filtering-on-snapshot-restore/299032)
**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\ **Replies:** 10\ **Last updated:** [March 10, 2022, 7:27am UTC](https://discuss.elastic.co/t/issue-with-allocation-filtering-on-snapshot-restore/299032 "2022-03-10T07:27:59Z")
Hi, I have just encountered a strange issue when attempting a test restore of my production Elasticsearch cluster to a test server. It appears I have several indices that have somehow ended up with a node level routing … --- ## [Sum of duration field of max per group in Elasticsearch](https://discuss.elastic.co/t/sum-of-duration-field-of-max-per-group-in-elasticsearch/342285)
**Author:** [@carollyl](https://discuss.elastic.co/u/carollyl)\ **Replies:** 22\ **Last updated:** [September 16, 2023, 6:31am UTC](https://discuss.elastic.co/t/sum-of-duration-field-of-max-per-group-in-elasticsearch/342285 "2023-09-16T06:31:01Z")
I would like to create a visualizer by summing up duration field after retrieving max id per group in Elasticsearch. For example: Data is: id workflow sid duration 1 A x1 1m 1 A x2 2m 2 A x1 2m 2 A x2 3m … --- ## [Error while installing jdbc static logstash plug-in](https://discuss.elastic.co/t/error-while-installing-jdbc-static-logstash-plug-in/177094)
**Author:** [@rohitjejurikar](https://discuss.elastic.co/u/rohitjejurikar)\ **Replies:** 11\ **Last updated:** [May 10, 2019, 10:27am UTC](https://discuss.elastic.co/t/error-while-installing-jdbc-static-logstash-plug-in/177094 "2019-05-10T10:27:21Z")
Hi, I'm not able to install logstash jdbc static plug-in... While installing it gives message.. fetching specs from http://rubygems.org does 10 attempts and then fails. I even downloaded the plug-in,built it and then tri… --- ## [Jump from trace-id in discovery mode to apm trace view](https://discuss.elastic.co/t/jump-from-trace-id-in-discovery-mode-to-apm-trace-view/235694)
**Author:** [@elk51211](https://discuss.elastic.co/u/elk51211)\ **Replies:** 9\ **Last updated:** [June 12, 2020, 7:05am UTC](https://discuss.elastic.co/t/jump-from-trace-id-in-discovery-mode-to-apm-trace-view/235694 "2020-06-12T07:05:14Z")
I can use the Trace Overview to view the logs of a specific trace. Is it vice versa possible to use the trace ID in the discovery overview to display the corresponding trace in the APM App? In other words, with a respec… --- ## [How to run specific subprojects of elasticsearch source code](https://discuss.elastic.co/t/how-to-run-specific-subprojects-of-elasticsearch-source-code/172243)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 16\ **Last updated:** [April 17, 2019, 6:02am UTC](https://discuss.elastic.co/t/how-to-run-specific-subprojects-of-elasticsearch-source-code/172243 "2019-04-17T06:02:59Z")
Is there a way to rebuild only the file or sub-projects which i modify.So that i need not build the whole project again. Also every time i make a change in file,i had to restart my windows to delete .lock file,there has… --- ## [APM index logs default to epoch](https://discuss.elastic.co/t/apm-index-logs-default-to-epoch/148868)
**Author:** [@ioannism](https://discuss.elastic.co/u/ioannism)\ **Replies:** 15\ **Last updated:** [September 19, 2018, 1:43pm UTC](https://discuss.elastic.co/t/apm-index-logs-default-to-epoch/148868 "2018-09-19T13:43:46Z")
I'm having this difficult to replicate issue. Sometimes, seemingly at random, an apm index will be created with the index date set to epoch i.e. apm-6.3.0-transaction-1970.01.01 I've turned on debugging in the logs but … --- ## [Older versions of parent document returned in has\_child query for Parent/Child setup](https://discuss.elastic.co/t/older-versions-of-parent-document-returned-in-has-child-query-for-parent-child-setup/10342)
**Author:** [@Jesus\_Domingo](https://discuss.elastic.co/u/Jesus_Domingo)\ **Replies:** 15\ **Last updated:** [June 6, 2013, 4:59pm UTC](https://discuss.elastic.co/t/older-versions-of-parent-document-returned-in-has-child-query-for-parent-child-setup/10342 "2013-06-06T16:59:19Z")
I have a parent/child mapping for topics and comments. Whenever a comment is added to the topic, i index the comment, then update the topic index (increment comment count and update last post date). Then when I us… --- ## [Logstash verify output availability](https://discuss.elastic.co/t/logstash-verify-output-availability/61396)
**Author:** [@Joao\_Paulo\_Karol\_Nun](https://discuss.elastic.co/u/Joao_Paulo_Karol_Nun)\ **Replies:** 9\ **Last updated:** [June 9, 2017, 6:28am UTC](https://discuss.elastic.co/t/logstash-verify-output-availability/61396 "2017-06-09T06:28:38Z")
Hi all, I wonder if there is a way to verify if a tool (elasticSearch etc) defined in the output filter is available before sending messages. The reason is because logstash is hanging when an output is not available and… --- ## [Is java elasticsearch a joke?](https://discuss.elastic.co/t/is-java-elasticsearch-a-joke/22878)
**Author:** [@saipa](https://discuss.elastic.co/u/saipa)\ **Replies:** 9\ **Last updated:** [March 26, 2015, 3:05am UTC](https://discuss.elastic.co/t/is-java-elasticsearch-a-joke/22878 "2015-03-26T03:05:35Z")
I am using elasticsearch java client, indexing a document "looks" simple. I know 100% my cluster is running, and my name is create. Node node = nodeBuilder().clusterName("mycluster").node(); Client client… --- ## [Remove Latitude and Longitude from a cell in a CSV for geo\_point visualization](https://discuss.elastic.co/t/remove-latitude-and-longitude-from-a-cell-in-a-csv-for-geo-point-visualization/174838)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 11\ **Last updated:** [April 11, 2019, 3:31pm UTC](https://discuss.elastic.co/t/remove-latitude-and-longitude-from-a-cell-in-a-csv-for-geo-point-visualization/174838 "2019-04-11T15:31:42Z")
I'm trying to parse data from a CSV cell so that I can use the latitude and longitude present in the cell for a geo\_point visualization. As of right now, the column is titled Location and the cells after that have the l… --- ## [Event.remove method not working inside aggregate section in code block](https://discuss.elastic.co/t/event-remove-method-not-working-inside-aggregate-section-in-code-block/336201)
**Author:** [@J\_S](https://discuss.elastic.co/u/J_S)\ **Replies:** 20\ **Last updated:** [June 18, 2023, 3:37am UTC](https://discuss.elastic.co/t/event-remove-method-not-working-inside-aggregate-section-in-code-block/336201 "2023-06-18T03:37:16Z")
Hi All, I am newbie to ELK stack, I am trying to remove the field called "attributes" while aggregate the data inside code block. But it is not removing the already existing "attributes" in the corresponding "id" but on… --- ## [Stop Words in Quoted vs Unquoted Search](https://discuss.elastic.co/t/stop-words-in-quoted-vs-unquoted-search/7276)
**Author:** [@Kenneth\_Loafman](https://discuss.elastic.co/u/Kenneth_Loafman)\ **Replies:** 17\ **Last updated:** [April 13, 2012, 9:45pm UTC](https://discuss.elastic.co/t/stop-words-in-quoted-vs-unquoted-search/7276 "2012-04-13T21:45:41Z")
Hi, We're seeing an odd problem in search that revolves around stop words. If I use the query (no quotes): worst way to travel ES returns nothing. If I use the query (with quotes): "worst way to trave… --- ## [Anomaly Detection Kibana skipping data](https://discuss.elastic.co/t/anomaly-detection-kibana-skipping-data/235200)
**Author:** [@alexisdrnt](https://discuss.elastic.co/u/alexisdrnt)\ **Replies:** 11\ **Last updated:** [June 17, 2020, 7:17pm UTC](https://discuss.elastic.co/t/anomaly-detection-kibana-skipping-data/235200 "2020-06-17T19:17:52Z")
I'm running a ML job with a simple low\_count detector, with a daily bucket, and I have an hourly frequency for my datafeed. Everything seem to work correctly, however sometimes for a certain reason some data get skipped… --- ## [Error in Dashboard/ \[filebeat System\]](https://discuss.elastic.co/t/error-in-dashboard-filebeat-system/257731)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 10\ **Last updated:** [December 7, 2020, 6:14pm UTC](https://discuss.elastic.co/t/error-in-dashboard-filebeat-system/257731 "2020-12-07T18:14:35Z")
Hi Team, I am getting error (as attached) when clicked in Dashboard and selected file-beat, here I am getting error for tabs Sudo commands | SSH logins | New users and groups. How can I see all this information. … --- ## [Modeling data that is shared among clients](https://discuss.elastic.co/t/modeling-data-that-is-shared-among-clients/105562)
**Author:** [@buinauskas\_evaldas](https://discuss.elastic.co/u/buinauskas_evaldas)\ **Replies:** 10\ **Last updated:** [October 29, 2017, 7:57am UTC](https://discuss.elastic.co/t/modeling-data-that-is-shared-among-clients/105562 "2017-10-29T07:57:40Z")
I've got document as follows: { "CountryeId":213, "CountryName":"Malta", "IndustryName":"Fresh Food", "ProductId":12351, "ProductName":"Pork", "MeasureTypeId":561, "MeasureType":"Market Sizes", "Descript… --- ## [Invalid malformaed date](https://discuss.elastic.co/t/invalid-malformaed-date/78459)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 10\ **Last updated:** [March 15, 2017, 9:38am UTC](https://discuss.elastic.co/t/invalid-malformaed-date/78459 "2017-03-15T09:38:50Z")
Hi, Im facing below error while processing log kindly help me to resolve the issue, Error: Failed parsing date from field {:field=\>"iis\_eventDate", :value=\>"2017-03-12 02:01:43", :exception=\>"Cannot parse \\"2017-03-1… --- ## [Using Parent-Child Rleatioshio with Join](https://discuss.elastic.co/t/using-parent-child-rleatioshio-with-join/154135)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 13\ **Last updated:** [December 10, 2018, 1:26pm UTC](https://discuss.elastic.co/t/using-parent-child-rleatioshio-with-join/154135 "2018-12-10T13:26:32Z")
Hi Team I've indexed pdf's page by page. Now to maintain book(parent)-page(child) relationship what is the advantage of using joins? Now, url of the book stored in file system is also one of the field in my mappings. … --- ## [How to enable authentication with logstash email output](https://discuss.elastic.co/t/how-to-enable-authentication-with-logstash-email-output/318473)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 11\ **Last updated:** [November 10, 2022, 5:28pm UTC](https://discuss.elastic.co/t/how-to-enable-authentication-with-logstash-email-output/318473 "2022-11-10T17:28:44Z")
I want to learn how to use logstash with mailtrap smtp for development purposes. I installed logstash then ran this command: /usr/share/logstash/bin/logstash -e 'input { stdin { } } output { email { to =\> "user@examp… --- ## [Getting a discover/dashboard error of: "Unexpected token \< in JSON at position 0"](https://discuss.elastic.co/t/getting-a-discover-dashboard-error-of-unexpected-token-in-json-at-position-0/303785)
**Author:** [@jonezy7173](https://discuss.elastic.co/u/jonezy7173)\ **Replies:** 11\ **Last updated:** [May 7, 2022, 12:26am UTC](https://discuss.elastic.co/t/getting-a-discover-dashboard-error-of-unexpected-token-in-json-at-position-0/303785 "2022-05-07T00:26:44Z")
I'm not able to find much information about this online except for this post. However, their issue was caused by a proxy. I'm simply setup on a single node in my homelab off of a span port on my switch (and I have a mana… --- ## [Date timestamp not matching](https://discuss.elastic.co/t/date-timestamp-not-matching/236277)
**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\ **Replies:** 11\ **Last updated:** [June 9, 2020, 12:02pm UTC](https://discuss.elastic.co/t/date-timestamp-not-matching/236277 "2020-06-09T12:02:36Z")
I am having trouble trying to get this timestamp to match, any ideas? \[20200609 084347\] --- ## [Copy content from one field of another record if certain condition matches](https://discuss.elastic.co/t/copy-content-from-one-field-of-another-record-if-certain-condition-matches/298605)
**Author:** [@Ashutosh\_Vaidya](https://discuss.elastic.co/u/Ashutosh_Vaidya)\ **Replies:** 12\ **Last updated:** [March 9, 2022, 1:08pm UTC](https://discuss.elastic.co/t/copy-content-from-one-field-of-another-record-if-certain-condition-matches/298605 "2022-03-09T13:08:12Z")
Hi I need to copy contents of :path field from No. 15256 into the :path field of No.15257 if Stream\_Identifier of both lines in 15256 and 15257 are matching. Kindly suggest how to get this done in the conf file of logs… --- ## [What's the difference between es's match search and luence search](https://discuss.elastic.co/t/whats-the-difference-between-ess-match-search-and-luence-search/256095)
**Author:** [@ocean\_shi](https://discuss.elastic.co/u/ocean_shi)\ **Replies:** 12\ **Last updated:** [November 24, 2020, 8:25am UTC](https://discuss.elastic.co/t/whats-the-difference-between-ess-match-search-and-luence-search/256095 "2020-11-24T08:25:17Z")
it's can get when i search use es match query.the match query is like {"query": { "bool": { "must": \[ { "match": { "message": "too long"} }\], "… --- ## [Logstash Filter creating Duplicate documents](https://discuss.elastic.co/t/logstash-filter-creating-duplicate-documents/183584)
**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\ **Replies:** 9\ **Last updated:** [May 31, 2019, 7:28am UTC](https://discuss.elastic.co/t/logstash-filter-creating-duplicate-documents/183584 "2019-05-31T07:28:26Z")
I have below logstash filter which i am using to filter the raw data provided below, i works while tested with debugger but the problem is its creating duplicate documents for the same entry ie for the data sample pro… --- ## [Custom plugin for java agent](https://discuss.elastic.co/t/custom-plugin-for-java-agent/171249)
**Author:** [@D1le](https://discuss.elastic.co/u/D1le)\ **Replies:** 9\ **Last updated:** [March 14, 2019, 9:53am UTC](https://discuss.elastic.co/t/custom-plugin-for-java-agent/171249 "2019-03-14T09:53:02Z")
Hello! I'm playing with apm java agent v1.4.0 and I'm very excited of it! Great work! I chose attach artifact as most appropriate for my setup. I use some very specific framework in enterprise env. So, I would like to… --- ## [Kibana configuration to automatically add visualization and add it into the dashboard for a microservice](https://discuss.elastic.co/t/kibana-configuration-to-automatically-add-visualization-and-add-it-into-the-dashboard-for-a-microservice/296928)
**Author:** [@thujitha\_p](https://discuss.elastic.co/u/thujitha_p)\ **Replies:** 11\ **Last updated:** [February 11, 2022, 6:16am UTC](https://discuss.elastic.co/t/kibana-configuration-to-automatically-add-visualization-and-add-it-into-the-dashboard-for-a-microservice/296928 "2022-02-11T06:16:38Z")
Hi there, I'm using kibana version 7.17.0. I have created couple of microservices and set up them to send logs to kibana using logstash and Elasticsearch. Then I have created visualization for each microservice to vie… [Previous page](https://discuss.elastic.co/top.md?page=188&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=190&per_page=50&period=all)