# Top **URL:** https://discuss.elastic.co/top.md?page=194&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 195 --- ## [Log stash with file-beat log file](https://discuss.elastic.co/t/log-stash-with-file-beat-log-file/172807)
**Author:** [@nagr](https://discuss.elastic.co/u/nagr)\ **Replies:** 12\ **Last updated:** [March 26, 2019, 2:54pm UTC](https://discuss.elastic.co/t/log-stash-with-file-beat-log-file/172807 "2019-03-26T14:54:21Z")
Hi, I am trying to load the log file with some filter condition using filebeat plugin, for example please is the raw log file content entry "2016-01-13 01:39:34, Info DPX Started DPX phase: Invent… --- ## [Term query by \_id very slow (30s+) occasionally](https://discuss.elastic.co/t/term-query-by-id-very-slow-30s-occasionally/343305)
**Author:** [@May\_Zeng](https://discuss.elastic.co/u/May_Zeng)\ **Replies:** 20\ **Last updated:** [September 26, 2023, 8:10pm UTC](https://discuss.elastic.co/t/term-query-by-id-very-slow-30s-occasionally/343305 "2023-09-26T20:10:48Z")
Mapping: { "dynamic": "strict", "\_source": { "enabled": false }, "properties": { "data": { "type": "binary", "doc\_values": false, "store": true } } } Query: {"query":{ "bool" … --- ## [Cannot determine timezone from nil logstash](https://discuss.elastic.co/t/cannot-determine-timezone-from-nil-logstash/347217)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 9\ **Last updated:** [November 16, 2023, 12:27pm UTC](https://discuss.elastic.co/t/cannot-determine-timezone-from-nil-logstash/347217 "2023-11-16T12:27:06Z")
I'm getting an error while running logstash " (ArgumentError) Cannot determine timezone from nil\\n(secs:1700041898.446,utc~:"2023-11-15 09:51:38.4460000991821289",ltz~:nil)" I have tried solutions from other threads (a… --- ## [Create point to point map from Logstash pipeline](https://discuss.elastic.co/t/create-point-to-point-map-from-logstash-pipeline/259722)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 12\ **Last updated:** [January 27, 2021, 12:59pm UTC](https://discuss.elastic.co/t/create-point-to-point-map-from-logstash-pipeline/259722 "2021-01-27T12:59:44Z")
Hello, I am using logstash to parse my firewall logs and enrich them with geo location information geoip { source =\> "source.ip" target =\> "source.geo" } geoip { source =\> "destination.ip" … --- ## [Licence: install Elastic 7.16.2 Free or Platinum on Kubernetes](https://discuss.elastic.co/t/licence-install-elastic-7-16-2-free-or-platinum-on-kubernetes/329576)
**Author:** [@SalvoDM91](https://discuss.elastic.co/u/SalvoDM91)\ **Replies:** 10\ **Last updated:** [April 12, 2023, 2:21pm UTC](https://discuss.elastic.co/t/licence-install-elastic-7-16-2-free-or-platinum-on-kubernetes/329576 "2023-04-12T14:21:31Z")
HI Guys, I would like to install all ELK stack (Elasticsearch, Logstash and Kibana) on Kubernets. I'm undecided if using the Free or Platinum version but before proceeding I would like to know if there are any limits on… --- ## [Getting error while restoring snapshots using curator](https://discuss.elastic.co/t/getting-error-while-restoring-snapshots-using-curator/251849)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 11\ **Last updated:** [October 29, 2020, 1:47pm UTC](https://discuss.elastic.co/t/getting-error-while-restoring-snapshots-using-curator/251849 "2020-10-29T13:47:46Z")
Hi Team, I am taking snapshots using curator through GCS bucket and trying to restore it . But, I am getting error as below: 2020-10-13 06:08:35,293 INFO Preparing Action ID: 1, "restore" 2020-10-13 06:08:35,293 … --- ## [Connect to external instance inside app with embedded node](https://discuss.elastic.co/t/connect-to-external-instance-inside-app-with-embedded-node/9171)
**Author:** [@Nicholas\_Padilla](https://discuss.elastic.co/u/Nicholas_Padilla)\ **Replies:** 18\ **Last updated:** [December 5, 2012, 4:07pm UTC](https://discuss.elastic.co/t/connect-to-external-instance-inside-app-with-embedded-node/9171 "2012-12-05T16:07:37Z")
Hello, I am attempting to connect to an external elasticsearch cluster inside an application that now embeds elasticsearch and creates its own cluster. I am using the TransportClient but cannot get it to connect … --- ## [Elastic: ilm-history-3-000004 index created with wrong number\_of\_replicas according to template](https://discuss.elastic.co/t/elastic-ilm-history-3-000004-index-created-with-wrong-number-of-replicas-according-to-template/268071)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 12\ **Last updated:** [March 23, 2021, 1:39pm UTC](https://discuss.elastic.co/t/elastic-ilm-history-3-000004-index-created-with-wrong-number-of-replicas-according-to-template/268071 "2021-03-23T13:39:09Z")
Elastic 7.11.1 Today, two of my elastic hosts (where there is 0 replicas), somehow created this index with number\_of\_replicas=1 yellow open ilm-history-3-000004 That is why it is in yellow state. When I look index … --- ## [How to set up security for elasticsearch cluster](https://discuss.elastic.co/t/how-to-set-up-security-for-elasticsearch-cluster/281552)
**Author:** [@0d153a83fd88577dba87](https://discuss.elastic.co/u/0d153a83fd88577dba87)\ **Replies:** 10\ **Last updated:** [August 17, 2021, 6:42am UTC](https://discuss.elastic.co/t/how-to-set-up-security-for-elasticsearch-cluster/281552 "2021-08-17T06:42:34Z")
network.host: ip1 discovery.seed\_hosts: \["ip1", "ip2"\] cluster.initial\_master\_nodes: \["ip1"\] network.host: ip2 discovery.seed\_hosts: \["ip1", "ip2"\] cluster.initial\_master\_nodes: \["ip1"\] these are two yml files o… --- ## [How to Configured ElasticSearch in Windows platform?](https://discuss.elastic.co/t/how-to-configured-elasticsearch-in-windows-platform/99794)
**Author:** [@Ashish\_Christian](https://discuss.elastic.co/u/Ashish_Christian)\ **Replies:** 10\ **Last updated:** [September 8, 2017, 5:57am UTC](https://discuss.elastic.co/t/how-to-configured-elasticsearch-in-windows-platform/99794 "2017-09-08T05:57:11Z")
Can you please guide how to configured latest version of ElasticSearch and Kibana Configured? --- ## [Completion suggester caching](https://discuss.elastic.co/t/completion-suggester-caching/15672)
**Author:** [@Jorge\_Sanchez](https://discuss.elastic.co/u/Jorge_Sanchez)\ **Replies:** 13\ **Last updated:** [October 27, 2014, 2:41pm UTC](https://discuss.elastic.co/t/completion-suggester-caching/15672 "2014-10-27T14:41:15Z")
Hello, I am using completion suggester for user search on my website. I basically followed the howto from elasticsearch webpage. Created the mapping: post /gruppu/user/\_mapping { "user" : { "proper… --- ## [How do I change the File system storage types?](https://discuss.elastic.co/t/how-do-i-change-the-file-system-storage-types/172974)
**Author:** [@azuresky11](https://discuss.elastic.co/u/azuresky11)\ **Replies:** 11\ **Last updated:** [April 17, 2019, 10:53am UTC](https://discuss.elastic.co/t/how-do-i-change-the-file-system-storage-types/172974 "2019-04-17T10:53:29Z")
hi,all When I turn on Es and I don't want to restart，Can I change the File system storage types? --- ## [Terribly long time to load data from MySQL](https://discuss.elastic.co/t/terribly-long-time-to-load-data-from-mysql/148627)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 9\ **Last updated:** [September 18, 2018, 6:33am UTC](https://discuss.elastic.co/t/terribly-long-time-to-load-data-from-mysql/148627 "2018-09-18T06:33:32Z")
It takes two seconds to display data from view in MySQL. But it takes hour (I still wait so I cannot tell it will succeed) logstash starts to load data from this view (since running the command logstash -f config) Konfi… --- ## [My index keep deleting for some reason](https://discuss.elastic.co/t/my-index-keep-deleting-for-some-reason/131527)
**Author:** [@Tzathenah\_Peaneah\_Ha](https://discuss.elastic.co/u/Tzathenah_Peaneah_Ha)\ **Replies:** 9\ **Last updated:** [May 24, 2018, 8:38pm UTC](https://discuss.elastic.co/t/my-index-keep-deleting-for-some-reason/131527 "2018-05-24T20:38:30Z")
I notice that after some time i have to keep create my index template . Seems it is being automatically removed or delete i dont know about. --- ## [It seems that Kibana starts up without problems, but it just can't be accessed](https://discuss.elastic.co/t/it-seems-that-kibana-starts-up-without-problems-but-it-just-cant-be-accessed/224141)
**Author:** [@liu78778](https://discuss.elastic.co/u/liu78778)\ **Replies:** 10\ **Last updated:** [March 20, 2020, 12:27pm UTC](https://discuss.elastic.co/t/it-seems-that-kibana-starts-up-without-problems-but-it-just-cant-be-accessed/224141 "2020-03-20T12:27:16Z")
Kibana version : 7.4.2 Elasticsearch version : 7.4.2 Server OS version : CentOS Linux release 7.4.1708 (Core) Browser version : Chrome 80.0.3987.132 Browser OS version : Windows 10.0.18363 Original install method (e… --- ## [Elastic Search can't been started without execute rights on /tmp](https://discuss.elastic.co/t/elastic-search-cant-been-started-without-execute-rights-on-tmp/369149)
**Author:** [@mscheepers](https://discuss.elastic.co/u/mscheepers)\ **Replies:** 11\ **Last updated:** [October 27, 2024, 6:43pm UTC](https://discuss.elastic.co/t/elastic-search-cant-been-started-without-execute-rights-on-tmp/369149 "2024-10-27T18:43:41Z")
Hi All, I noticed when starting the Elasticsearch services on our RHEL 9 machine is failing when it's been installed with RPM's. The startup is failing as its trying to execute files on the /tmp path. This is by defaul… --- ## [Bigdata storage of data](https://discuss.elastic.co/t/bigdata-storage-of-data/136784)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 11\ **Last updated:** [June 21, 2018, 10:44am UTC](https://discuss.elastic.co/t/bigdata-storage-of-data/136784 "2018-06-21T10:44:48Z")
Hi Team, Do we have any options to store the data in Bigdata platform in the case of large volume of data per day --- ## [Indexing Large Documents in ES](https://discuss.elastic.co/t/indexing-large-documents-in-es/225385)
**Author:** [@Shweta\_Patel](https://discuss.elastic.co/u/Shweta_Patel)\ **Replies:** 9\ **Last updated:** [March 29, 2020, 12:41pm UTC](https://discuss.elastic.co/t/indexing-large-documents-in-es/225385 "2020-03-29T12:41:17Z")
Hello ES Team, I am using elastic search version 6.5.4 . When I crowl 11,000 documents Crawling stops at 555 and I got following exception. Exception :-' \[2020-03-24T23:38:48,325\]\[DEBUG\]\[o.e.a.b.TransportShardBulkActi… --- ## [Relevancy sorting of result returned](https://discuss.elastic.co/t/relevancy-sorting-of-result-returned/16674)
**Author:** [@cyrilforce](https://discuss.elastic.co/u/cyrilforce)\ **Replies:** 19\ **Last updated:** [April 9, 2014, 9:04am UTC](https://discuss.elastic.co/t/relevancy-sorting-of-result-returned/16674 "2014-04-09T09:04:27Z")
Hi All, I am trying to query my ES index with the following queries : https://gist.github.com/cheehoo/9829381#file-relevancysorting It returned result that are not sort in based on relevancy : For instance t… --- ## [Parse/process json array with filebeat](https://discuss.elastic.co/t/parse-process-json-array-with-filebeat/351455)
**Author:** [@andrejcoliveira](https://discuss.elastic.co/u/andrejcoliveira)\ **Replies:** 10\ **Last updated:** [January 23, 2024, 4:48pm UTC](https://discuss.elastic.co/t/parse-process-json-array-with-filebeat/351455 "2024-01-23T16:48:44Z")
Hi everyone, at my company we're trying to load our Cucumber logs to Elastic. Currently i want to check if it is possible to do it just using filebeat. The main problem to execute this task is that our logs are single li… --- ## [Metricbeat fail safe/over function on output](https://discuss.elastic.co/t/metricbeat-fail-safe-over-function-on-output/142466)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 13\ **Last updated:** [August 6, 2018, 5:23am UTC](https://discuss.elastic.co/t/metricbeat-fail-safe-over-function-on-output/142466 "2018-08-06T05:23:31Z")
Is there a way in which i can save the data from metric beat even though the output destination is not available? Like for example elasticsearch host can't be reach, it will save first the data then continue once the c… --- ## [Date histogram with different Timezones with Elasticsearch v.7.13.3](https://discuss.elastic.co/t/date-histogram-with-different-timezones-with-elasticsearch-v-7-13-3/280639)
**Author:** [@scorona85](https://discuss.elastic.co/u/scorona85)\ **Replies:** 9\ **Last updated:** [September 22, 2021, 5:09am UTC](https://discuss.elastic.co/t/date-histogram-with-different-timezones-with-elasticsearch-v-7-13-3/280639 "2021-09-22T05:09:33Z")
I have to acquire datas from different part of Timezones (example New York -6.00 and Rome +2.00). In the document I have a field 'timestamp' defined as "data" and I have for example create a "date\_histogram" for example … --- ## [Blocked threads on read index calls](https://discuss.elastic.co/t/blocked-threads-on-read-index-calls/293241)
**Author:** [@Madhu\_Yadav](https://discuss.elastic.co/u/Madhu_Yadav)\ **Replies:** 10\ **Last updated:** [January 6, 2022, 8:56am UTC](https://discuss.elastic.co/t/blocked-threads-on-read-index-calls/293241 "2022-01-06T08:56:25Z")
Hi, A portal built using Liferay is using Elasticsearch as a search engine with below config: Elasticsearch 7.16.2 Single Node, Around 250MB sized indices Windows Server 2019 64Bit 8 vcpu, 32GB RAM, SSD Disk 100GB Op… --- ## [Show \*all\* metrics as Netdata does](https://discuss.elastic.co/t/show-all-metrics-as-netdata-does/246410)
**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\ **Replies:** 10\ **Last updated:** [September 4, 2020, 2:14pm UTC](https://discuss.elastic.co/t/show-all-metrics-as-netdata-does/246410 "2020-09-04T14:14:25Z")
Hi how can I display all metrics, one by one, each as a row? Just like: https://london.my-netdata.io/ this example. Thanks very much! --- ## [Show most recent documents by entity](https://discuss.elastic.co/t/show-most-recent-documents-by-entity/195929)
**Author:** [@dominikw](https://discuss.elastic.co/u/dominikw)\ **Replies:** 10\ **Last updated:** [August 23, 2019, 3:17pm UTC](https://discuss.elastic.co/t/show-most-recent-documents-by-entity/195929 "2019-08-23T15:17:11Z")
Hi, I'm trying to use one of the features introduced in Kibana 7.3 for Maps. I'm tracking vehicles, and because of that I have a lot of documents with Geo-points and indices of object. When I'm adding a new layer I wa… --- ## [How to calculate the elapsed time of a flag status per day?](https://discuss.elastic.co/t/how-to-calculate-the-elapsed-time-of-a-flag-status-per-day/279494)
**Author:** [@MaximeG](https://discuss.elastic.co/u/MaximeG)\ **Replies:** 11\ **Last updated:** [July 30, 2021, 6:35am UTC](https://discuss.elastic.co/t/how-to-calculate-the-elapsed-time-of-a-flag-status-per-day/279494 "2021-07-30T06:35:11Z")
I'd like to figure out the elapsed time between flag status changes. Simplified example : a person can only be sad or happy. I'd like to know how long each mood was active until it changed. I'm looking for a general be… --- ## [Unable to run logstash on windows 8.1](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787)
**Author:** [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Replies:** 15\ **Last updated:** [July 23, 2018, 6:49am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787 "2018-07-23T06:49:08Z")
Hi I am unable to run logstash on windows 8.1 After running the command inside bin of logstash, logstash -f "filename.config" on the command prompt, I get a java.langException where it states that logstash stopped pr… --- ## [this.uiSettings is undefined](https://discuss.elastic.co/t/this-uisettings-is-undefined/251689)
**Author:** [@Kenneth\_M\_Kolano](https://discuss.elastic.co/u/Kenneth_M_Kolano)\ **Replies:** 9\ **Last updated:** [November 15, 2020, 10:10pm UTC](https://discuss.elastic.co/t/this-uisettings-is-undefined/251689 "2020-11-15T22:10:12Z")
After updating to a recent release of ELK and importing my old discover pane and visualizations, besides one using Timelion, all fail to display showing only the error... "this.uiSettings is undefined"? --- ## [Deploying ElasticSearch 1.3 to Wildfly 8.1](https://discuss.elastic.co/t/deploying-elasticsearch-1-3-to-wildfly-8-1/18886)
**Author:** [@John\_D\_Ament](https://discuss.elastic.co/u/John_D_Ament)\ **Replies:** 11\ **Last updated:** [July 26, 2014, 4:09pm UTC](https://discuss.elastic.co/t/deploying-elasticsearch-1-3-to-wildfly-8-1/18886 "2014-07-26T16:09:06Z")
Hi all I was tinkering a bit with ElasticSearch. I think my target runtime may end up being embedded, just based on our deployment model. Probably not a big deal to get multiple nodes talking to each other and n… --- ## [Problem depicting Stacked bar graph - not working](https://discuss.elastic.co/t/problem-depicting-stacked-bar-graph-not-working/225663)
**Author:** [@nb03briceno](https://discuss.elastic.co/u/nb03briceno)\ **Replies:** 18\ **Last updated:** [March 31, 2020, 10:54am UTC](https://discuss.elastic.co/t/problem-depicting-stacked-bar-graph-not-working/225663 "2020-03-31T10:54:41Z")
4h Hello everyone, I hope somebody could help me. I'm trying to make an stacked plot in vega-lite. Everything appears to be fine but for some reason the graph does not allow one bar or (area) to be over the other. Inst… --- ## [Import CSV data to Elastic search but \_source missing](https://discuss.elastic.co/t/import-csv-data-to-elastic-search-but-source-missing/279233)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 10\ **Last updated:** [July 21, 2021, 4:53pm UTC](https://discuss.elastic.co/t/import-csv-data-to-elastic-search-but-source-missing/279233 "2021-07-21T16:53:35Z")
Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [Courier fetch: response is null](https://discuss.elastic.co/t/courier-fetch-response-is-null/235566)
**Author:** [@DanielVZ96](https://discuss.elastic.co/u/DanielVZ96)\ **Replies:** 10\ **Last updated:** [June 23, 2020, 7:13am UTC](https://discuss.elastic.co/t/courier-fetch-response-is-null/235566 "2020-06-23T07:13:06Z")
Hi, Whenever I try to use a visualization, dashboard or the discovery tab I get the following error: Courier fetch: response is null Version: 7.5.1 Build: 27610 Error: response is null No one else in my team is getti… --- ## [Graph shows no data and i don't know how to do a good request](https://discuss.elastic.co/t/graph-shows-no-data-and-i-dont-know-how-to-do-a-good-request/159340)
**Author:** [@Antoine\_Charron](https://discuss.elastic.co/u/Antoine_Charron)\ **Replies:** 12\ **Last updated:** [December 4, 2018, 6:57pm UTC](https://discuss.elastic.co/t/graph-shows-no-data-and-i-dont-know-how-to-do-a-good-request/159340 "2018-12-04T18:57:39Z")
Hi, I wanted to try out x-pack graph. So I created an index, and filled it with data. I can do bar like that : But my problem is that I can't do a simple graph :disappointed\_relieved::disappointed\_relieved: I us… --- ## [Get documents starting at a high from](https://discuss.elastic.co/t/get-documents-starting-at-a-high-from/298714)
**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\ **Replies:** 9\ **Last updated:** [March 5, 2022, 6:21pm UTC](https://discuss.elastic.co/t/get-documents-starting-at-a-high-from/298714 "2022-03-05T18:21:26Z")
Hi, I have an with ~ 1.500.000 (million) documents or so. I only want to get 1.000 results from it, but I want to start counting backwards. So, I want to retrieve documents 1.499.000 (- 1.000) through 1.500.000. I've se… --- ## [Working with changing sets of synonyms](https://discuss.elastic.co/t/working-with-changing-sets-of-synonyms/215334)
**Author:** [@ivanibash](https://discuss.elastic.co/u/ivanibash)\ **Replies:** 9\ **Last updated:** [January 20, 2020, 11:37am UTC](https://discuss.elastic.co/t/working-with-changing-sets-of-synonyms/215334 "2020-01-20T11:37:36Z")
Hi, in our search case we have several sets of synonyms that we want to apply in different combinations dynamically (at query time). I read this article that talks about search\_analyzer, but I believe for out use case we… --- ## [Query all fields in an embedded document?](https://discuss.elastic.co/t/query-all-fields-in-an-embedded-document/5784)
**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\ **Replies:** 9\ **Last updated:** [March 22, 2012, 12:40pm UTC](https://discuss.elastic.co/t/query-all-fields-in-an-embedded-document/5784 "2012-03-22T12:40:37Z")
Is there a way to query all of the fields in an embedded document? For example, if you have documents that're structured like this: { first\_name: "Bob", interests: \[ {name: "dogs", level: 5}, {topic: "dogs", degree… --- ## [Upgrading elastic search & kibana from 6.6.1 to 7.x or 8.x](https://discuss.elastic.co/t/upgrading-elastic-search-kibana-from-6-6-1-to-7-x-or-8-x/365100)
**Author:** [@Mariajosephina](https://discuss.elastic.co/u/Mariajosephina)\ **Replies:** 10\ **Last updated:** [August 22, 2024, 10:37am UTC](https://discuss.elastic.co/t/upgrading-elastic-search-kibana-from-6-6-1-to-7-x-or-8-x/365100 "2024-08-22T10:37:16Z")
Hi @all This is regarding a query on upgrading Elasticsearch & kibana. The current version of Elastic search & Kibana in our organization is 6.6.1 used to storing RPA logs. I am planning to upgrade to 7.x or 8.x Cou… --- ## [ES searching and indexing speed reduced after processing 600milion records](https://discuss.elastic.co/t/es-searching-and-indexing-speed-reduced-after-processing-600milion-records/11035)
**Author:** [@Vahid](https://discuss.elastic.co/u/Vahid)\ **Replies:** 9\ **Last updated:** [March 8, 2013, 3:05pm UTC](https://discuss.elastic.co/t/es-searching-and-indexing-speed-reduced-after-processing-600milion-records/11035 "2013-03-08T15:05:06Z")
Hi all, We have a cluster with 16 nodes. Total memory is 32g for each server. On each node, ES and 3 other java process are running. Assigned memory to ES is 12g(xms and xmx are equal), set 7g for other java proc… --- ## [How to keep Shards geographically bound](https://discuss.elastic.co/t/how-to-keep-shards-geographically-bound/84209)
**Author:** [@Simon\_Oxwell](https://discuss.elastic.co/u/Simon_Oxwell)\ **Replies:** 11\ **Last updated:** [May 5, 2017, 3:13pm UTC](https://discuss.elastic.co/t/how-to-keep-shards-geographically-bound/84209 "2017-05-05T15:13:59Z")
Hi, I've got an Elasticsearch 5.3 cluster that I essentially want to store logs in for archival and search purposes, made up of two nodes, each in a different data centre. I would like to be able to search both nodes f… --- ## [Unable to upgrade elasticsearch from 6.8.1 to 7.16.3](https://discuss.elastic.co/t/unable-to-upgrade-elasticsearch-from-6-8-1-to-7-16-3/299697)
**Author:** [@karthik\_s4](https://discuss.elastic.co/u/karthik_s4)\ **Replies:** 13\ **Last updated:** [March 16, 2022, 9:54am UTC](https://discuss.elastic.co/t/unable-to-upgrade-elasticsearch-from-6-8-1-to-7-16-3/299697 "2022-03-16T09:54:18Z")
Hi, Unable to upgrade Elasticsearch to 7.16.3 from 6.81 in our elastic cluster with 4 nodes. getting below messages in log file with this. please help. \[2022-03-12T17:04:36,236\]\[INFO \]\[o.e.x.m.e.l.LocalExporter\] \[10.4.… --- ## [Watcher X-Pack Monitoring: Nodes Changed](https://discuss.elastic.co/t/watcher-x-pack-monitoring-nodes-changed/272473)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 14\ **Last updated:** [May 17, 2021, 4:24am UTC](https://discuss.elastic.co/t/watcher-x-pack-monitoring-nodes-changed/272473 "2021-05-17T04:24:06Z")
Hi I have a cluster with 4nodes of data and 1node for kibana. about 5 days ago one of the built-in watcher (Nodes Changed) run most of the times. { "watch\_id": "kVfChQJ8TWWjr5Mrbw\_nEg\_elasticsearch\_nodes", "node": … --- ## [Add pluguin with existing visualization to add modification kibana 5.4.x](https://discuss.elastic.co/t/add-pluguin-with-existing-visualization-to-add-modification-kibana-5-4-x/116458)
**Author:** [@radi](https://discuss.elastic.co/u/radi)\ **Replies:** 12\ **Last updated:** [January 23, 2018, 4:39pm UTC](https://discuss.elastic.co/t/add-pluguin-with-existing-visualization-to-add-modification-kibana-5-4-x/116458 "2018-01-23T16:39:20Z")
Hi, I am using kibana 5.4.0 I find that's its possible to add pluguin using existing visualization and add modification in kibana 6.x. what i need it's for kibana 5.4.x, change to add in basic chart ( pie and vert… --- ## [Change grpc port to 6788 on fleet controled agent](https://discuss.elastic.co/t/change-grpc-port-to-6788-on-fleet-controled-agent/388416)
**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\ **Replies:** 12\ **Last updated:** [August 8, 2026, 4:44am UTC](https://discuss.elastic.co/t/change-grpc-port-to-6788-on-fleet-controled-agent/388416 "2026-08-08T04:44:56Z")
Hello, i want to install UniFi OS Server on my windows server. Unfortunately the elastic agent is using port 6789. I wonder if i can change this with a dedicated policy for this server? seems like agent.grpc.port: 67… --- ## [Referencing field name from datafeed aggregation to use as a detector in an ML job](https://discuss.elastic.co/t/referencing-field-name-from-datafeed-aggregation-to-use-as-a-detector-in-an-ml-job/160638)
**Author:** [@elasticitous](https://discuss.elastic.co/u/elasticitous)\ **Replies:** 9\ **Last updated:** [December 19, 2018, 4:01pm UTC](https://discuss.elastic.co/t/referencing-field-name-from-datafeed-aggregation-to-use-as-a-detector-in-an-ml-job/160638 "2018-12-19T16:01:04Z")
I created a machine learning job which uses two metrics as detectors defined as aggregations of fields in my index and everything was working great (Job\_0, Datafeed\_0 code below). What I'd really like to do though is de… --- ## [Login page for Kibana 7.6 Basic license](https://discuss.elastic.co/t/login-page-for-kibana-7-6-basic-license/231537)
**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\ **Replies:** 9\ **Last updated:** [May 10, 2020, 4:25pm UTC](https://discuss.elastic.co/t/login-page-for-kibana-7-6-basic-license/231537 "2020-05-10T16:25:13Z")
Hi, I have been looking at options to add a login page in the Kibana 7.6 basic license. I have tried it using x-pack but it seems like it is not possible with basic license. Followed these links - https://www.elastic.… --- ## [Elasticseach 9.4.0 Won't Start on Nehalem CPU "does not support all the following CPU features"](https://discuss.elastic.co/t/elasticseach-9-4-0-wont-start-on-nehalem-cpu-does-not-support-all-the-following-cpu-features/386216)
**Author:** [@amorrow](https://discuss.elastic.co/u/amorrow)\ **Replies:** 12\ **Last updated:** [July 8, 2026, 3:08pm UTC](https://discuss.elastic.co/t/elasticseach-9-4-0-wont-start-on-nehalem-cpu-does-not-support-all-the-following-cpu-features/386216 "2026-07-08T15:08:12Z")
I got an unexpected surprise today when I tried to upgrade my Elasticsearch cluster from 9.3.4 to 9.4.0 on Ubuntu 24.04 LTS using deb packages. The service won't start. May 07 08:33:52 elk3 systemd\[1\]: Starting elastics… --- ## [How to add certs to hearbeat](https://discuss.elastic.co/t/how-to-add-certs-to-hearbeat/303554)
**Author:** [@Francisco\_Yanez](https://discuss.elastic.co/u/Francisco_Yanez)\ **Replies:** 9\ **Last updated:** [May 9, 2022, 8:48am UTC](https://discuss.elastic.co/t/how-to-add-certs-to-hearbeat/303554 "2022-05-09T08:48:45Z")
Hello Community, I am trying to add to heartbeat (all our infra is running in kubernetes) all our pods that have certs so we can monitor those via https and alert when is time to renew them. To access those via http I n… --- ## [Migration of elk on docker](https://discuss.elastic.co/t/migration-of-elk-on-docker/120402)
**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Replies:** 9\ **Last updated:** [February 19, 2018, 10:00am UTC](https://discuss.elastic.co/t/migration-of-elk-on-docker/120402 "2018-02-19T10:00:52Z")
Hello I am new to docker also kind of a beginner for elk. Till now I was using windows for elk now was willing to migrate to docker can some one guide me how can I migrate and run my config file of logstash from my loc… --- ## [Scaling out Elasticsearch Cluster to improve slow Empty Search query (520ms)](https://discuss.elastic.co/t/scaling-out-elasticsearch-cluster-to-improve-slow-empty-search-query-520ms/18024)
**Author:** [@sairam\_2](https://discuss.elastic.co/u/sairam_2)\ **Replies:** 15\ **Last updated:** [June 17, 2014, 2:00am UTC](https://discuss.elastic.co/t/scaling-out-elasticsearch-cluster-to-improve-slow-empty-search-query-520ms/18024 "2014-06-17T02:00:06Z")
We currently run our Elasticsearch (\*v1.0.2\*) cluster on \*3 Nodes\* with \*5 Shards and 1 Replication\* Scheme. The total index size is about 70GB (~140GB with replication). The Empty Search (/\_search) query takes 5… --- ## [Filebeat running as a container not displaying logs in Kibana](https://discuss.elastic.co/t/filebeat-running-as-a-container-not-displaying-logs-in-kibana/320626)
**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\ **Replies:** 11\ **Last updated:** [December 7, 2022, 9:55pm UTC](https://discuss.elastic.co/t/filebeat-running-as-a-container-not-displaying-logs-in-kibana/320626 "2022-12-07T21:55:39Z")
We are running filebeat:8.1.3 as a docker container using docker-compose file in Linux RHEL machine. We have provided the input type as filestream and provided the path for log files , but still it is not injecting any … [Previous page](https://discuss.elastic.co/top.md?page=193&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=195&per_page=50&period=all)