# Top

**URL:** https://discuss.elastic.co/top.md?page=198&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 199

---

## [Configuring envoyproxy module for collecting stats](https://discuss.elastic.co/t/configuring-envoyproxy-module-for-collecting-stats/198881)

<div class="topic-metadata">

**Author:** [@somi](https://discuss.elastic.co/u/somi)\
**Replies:** 9\
**Last updated:** [November 10, 2019, 1:30am UTC](https://discuss.elastic.co/t/configuring-envoyproxy-module-for-collecting-stats/198881 "2019-11-10T01:30:34Z")

</div>

Hi, I have an envoy, metricbeat and elasticsearch container in my kubernetes cluster. I want to use the envoyproxy module of metricbeat to collect stats and send it to elasticsearch. Configured the module according this…

---

## [How can I convert @timestamp from logstash to encoded format as YYYY-MM-DDThh:mm:ss.sss+/-hh:mm](https://discuss.elastic.co/t/how-can-i-convert-timestamp-from-logstash-to-encoded-format-as-yyyy-mm-ddthhss-sss-hh-mm/317608)

<div class="topic-metadata">

**Author:** [@teja\_tata](https://discuss.elastic.co/u/teja_tata)\
**Replies:** 11\
**Last updated:** [October 28, 2022, 1:50am UTC](https://discuss.elastic.co/t/how-can-i-convert-timestamp-from-logstash-to-encoded-format-as-yyyy-mm-ddthhss-sss-hh-mm/317608 "2022-10-28T01:50:18Z")

</div>

I have tried using date filter match option but didn't work. It would be great if someone can help me here.

---

## [AWS network issue and data loss](https://discuss.elastic.co/t/aws-network-issue-and-data-loss/110741)

<div class="topic-metadata">

**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\
**Replies:** 11\
**Last updated:** [December 8, 2017, 1:10am UTC](https://discuss.elastic.co/t/aws-network-issue-and-data-loss/110741 "2017-12-08T01:10:04Z")

</div>

We are using es 2.4 version. All our nodes uses AWS ephemeral disk. During the network connectivity issue there is a chance that nodes may drop out of the cluster. This may cause data loss. Is there a settings that can b…

---

## [Filebeat is not polling the logs in the order of their time stamp](https://discuss.elastic.co/t/filebeat-is-not-polling-the-logs-in-the-order-of-their-time-stamp/356467)

<div class="topic-metadata">

**Author:** [@Shrimad\_Mishra](https://discuss.elastic.co/u/Shrimad_Mishra)\
**Replies:** 14\
**Last updated:** [March 31, 2024, 4:05pm UTC](https://discuss.elastic.co/t/filebeat-is-not-polling-the-logs-in-the-order-of-their-time-stamp/356467 "2024-03-31T16:05:37Z")

</div>

My usecase is that I am sending the logs from one server to another server and pushing it to logstash. But what is happening is that logs are not getting pushed in the order they are means sometimes the logs at 15:21:17 …

---

## [Kibana returns 404](https://discuss.elastic.co/t/kibana-returns-404/352342)

<div class="topic-metadata">

**Author:** [@Reclocco](https://discuss.elastic.co/u/Reclocco)\
**Replies:** 9\
**Last updated:** [February 20, 2024, 11:49am UTC](https://discuss.elastic.co/t/kibana-returns-404/352342 "2024-02-20T11:49:05Z")

</div>

Hi everyone i have a problem where kibana stopped working at some point without any tinkering with config. I checked the nginx routing etc and that seems to be fine 'security' is not enabled elasticsearch is green \[r…

---

## [TLS/SSL for logstash 5.6](https://discuss.elastic.co/t/tls-ssl-for-logstash-5-6/168783)

<div class="topic-metadata">

**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\
**Replies:** 9\
**Last updated:** [February 26, 2019, 3:45pm UTC](https://discuss.elastic.co/t/tls-ssl-for-logstash-5-6/168783 "2019-02-26T15:45:36Z")

</div>

All, We have tried by adding TLS CA certificate which we already generated for ES cluster. When we add the parameters in logstash configuration file as per below doc https://www.elastic.co/guide/en/x-pack/5.6/logstash…

---

## [Compare the number of indexes](https://discuss.elastic.co/t/compare-the-number-of-indexes/109726)

<div class="topic-metadata">

**Author:** [@EloaCardoso](https://discuss.elastic.co/u/EloaCardoso)\
**Replies:** 9\
**Last updated:** [December 7, 2017, 9:51am UTC](https://discuss.elastic.co/t/compare-the-number-of-indexes/109726 "2017-12-07T09:51:21Z")

</div>

Is there a way to compare the number of indexes created today with the number of indexes that existed already using a search operation with query?

---

## [Sorting, Paginating the aggregated data](https://discuss.elastic.co/t/sorting-paginating-the-aggregated-data/240456)

<div class="topic-metadata">

**Author:** [@ankitagarwal9156](https://discuss.elastic.co/u/ankitagarwal9156)\
**Replies:** 11\
**Last updated:** [July 9, 2020, 2:16pm UTC](https://discuss.elastic.co/t/sorting-paginating-the-aggregated-data/240456 "2020-07-09T14:16:52Z")

</div>

I need to aggregate the data on the basis of two fields (composite aggregation), sort all the data and then perform pagination. Is is possible using elastic search? If Yes, Can you please share an example.

---

## [Auto\_flush\_interval is invalid with Logstash 7.5.1](https://discuss.elastic.co/t/auto-flush-interval-is-invalid-with-logstash-7-5-1/242057)

<div class="topic-metadata">

**Author:** [@thanhlam](https://discuss.elastic.co/u/thanhlam)\
**Replies:** 16\
**Last updated:** [July 22, 2020, 7:09pm UTC](https://discuss.elastic.co/t/auto-flush-interval-is-invalid-with-logstash-7-5-1/242057 "2020-07-22T19:09:53Z")

</div>

Hello, I've been running Logstash 7.5.1 on IBM Power systems for a couple of months. But, the last time I restarted Logstash, it kept shutdown and restarting. So I run it with config.debug = true log.level: trace and …

---

## [Elastic installation](https://discuss.elastic.co/t/elastic-installation/125739)

<div class="topic-metadata">

**Author:** [@Nada\_I](https://discuss.elastic.co/u/Nada_I)\
**Replies:** 12\
**Last updated:** [April 18, 2018, 7:26am UTC](https://discuss.elastic.co/t/elastic-installation/125739 "2018-04-18T07:26:55Z")

</div>

Hello, I want to know what i should write in elastic, kibana and logstash system through elastic installation steps \[image\]

---

## [Elapsed query time?](https://discuss.elastic.co/t/elapsed-query-time/2836)

<div class="topic-metadata">

**Author:** [@Stephen\_Smith](https://discuss.elastic.co/u/Stephen_Smith)\
**Replies:** 11\
**Last updated:** [March 4, 2010, 8:15pm UTC](https://discuss.elastic.co/t/elapsed-query-time/2836 "2010-03-04T20:15:41Z")

</div>

Is it possible to get the search query time from the server to enable Google-style "Searched 45,000 documents in 0.03 seconds"-type reporting for logging or to show to end users?

---

## [Kibana deprecated settings](https://discuss.elastic.co/t/kibana-deprecated-settings/352747)

<div class="topic-metadata">

**Author:** [@miiroslavkardos](https://discuss.elastic.co/u/miiroslavkardos)\
**Replies:** 10\
**Last updated:** [February 13, 2024, 1:31pm UTC](https://discuss.elastic.co/t/kibana-deprecated-settings/352747 "2024-02-13T13:31:19Z")

</div>

Hello, Can you help me, how to get of rid of this deprecated setting in KIbana GUI under Upgrade asistant? I Already removed these settings in my kibana.yml but it is still shwoing. How to fix Remove the "xpack.repor…

---

## [Logstash pipeline error date](https://discuss.elastic.co/t/logstash-pipeline-error-date/164801)

<div class="topic-metadata">

**Author:** [@Jozziej](https://discuss.elastic.co/u/Jozziej)\
**Replies:** 10\
**Last updated:** [January 18, 2019, 4:42pm UTC](https://discuss.elastic.co/t/logstash-pipeline-error-date/164801 "2019-01-18T16:42:24Z")

</div>

I'm trying to parse an error log, but my date filter keeps failing example log entry: Wed Nov 28 02:16:24.654 \[MCSS:7497:0x7F17018E7700\]: Warning: invalid cid (-1) in Msg::receive for unknown ip, with msg id (0x2b0300…

---

## [After updating logstash, errors started - Failed to perform request](https://discuss.elastic.co/t/after-updating-logstash-errors-started-failed-to-perform-request/357705)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 9\
**Last updated:** [May 3, 2024, 9:42am UTC](https://discuss.elastic.co/t/after-updating-logstash-errors-started-failed-to-perform-request/357705 "2024-05-03T09:42:51Z")

</div>

The problem is in the operation of logstash. In the old version 8.9 there were no problems with pipelines, but as soon as they updated to 8.10 on one node I started getting errors: \[logstash.outputs.elasticsearch\]\[aws-…

---

## [APM java agent ver 1.20.0 - no such method issue](https://discuss.elastic.co/t/apm-java-agent-ver-1-20-0-no-such-method-issue/261275)

<div class="topic-metadata">

**Author:** [@tmihaldinec](https://discuss.elastic.co/u/tmihaldinec)\
**Replies:** 9\
**Last updated:** [January 15, 2021, 5:17pm UTC](https://discuss.elastic.co/t/apm-java-agent-ver-1-20-0-no-such-method-issue/261275 "2021-01-15T17:17:40Z")

</div>

Hi, We have the problem with latest version of APM Java agent ver 1.20.0 which is also registered in ver 1.18 ERROR: INFO | jvm 5 | 2021/01/15 11:51:45 | 11:51:45.428 \[AD Agent init\] ERROR co.elastic.apm.agent.b…

---

## [Offline monitoring or Spooling into a disk](https://discuss.elastic.co/t/offline-monitoring-or-spooling-into-a-disk/199110)

<div class="topic-metadata">

**Author:** [@RayKishev](https://discuss.elastic.co/u/RayKishev)\
**Replies:** 9\
**Last updated:** [September 13, 2019, 4:05pm UTC](https://discuss.elastic.co/t/offline-monitoring-or-spooling-into-a-disk/199110 "2019-09-13T16:05:47Z")

</div>

Hello Elastic team, I really need your help on this. I am trying to setup the internal Queue, so when my system is offline for some time and after connecting it back to the network, i could still receive a metricbeat da…

---

## [\[GitHub Connector\] Help on setting up the sync](https://discuss.elastic.co/t/github-connector-help-on-setting-up-the-sync/351658)

<div class="topic-metadata">

**Author:** [@anna-safonov](https://discuss.elastic.co/u/anna-safonov)\
**Replies:** 12\
**Last updated:** [January 25, 2024, 7:54pm UTC](https://discuss.elastic.co/t/github-connector-help-on-setting-up-the-sync/351658 "2024-01-25T19:54:54Z")

</div>

I am trying to run GitHub Connector (v8.11) on Elastic Search, v8.11.3, and sync data from a GitHub Enterprise Server, specifically one repo under and organization. I am having trouble figuring out how to configure adva…

---

## [Multiple nodes on elasticsearch](https://discuss.elastic.co/t/multiple-nodes-on-elasticsearch/153061)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 10\
**Last updated:** [October 24, 2018, 6:15am UTC](https://discuss.elastic.co/t/multiple-nodes-on-elasticsearch/153061 "2018-10-24T06:15:53Z")

</div>

HI, My requirement is need to run multiple node on elasticsearch cluster, I have 3 server's all the 3 are in cluster form and all the 3 nodes are master. when i create data node on one server its fail to bind with ma…

---

## [Which algorithms are used in grok filter to find exact match?](https://discuss.elastic.co/t/which-algorithms-are-used-in-grok-filter-to-find-exact-match/130090)

<div class="topic-metadata">

**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\
**Replies:** 9\
**Last updated:** [May 1, 2018, 7:27am UTC](https://discuss.elastic.co/t/which-algorithms-are-used-in-grok-filter-to-find-exact-match/130090 "2018-05-01T07:27:29Z")

</div>

Hi all, I am using grok filter to find an exact match in logs. My logs size would be 10 mb. And streaming of logs is continuing going on. I am not getting that every time match is searched in 10 mb of log size Will it be…

---

## [I am unable to use logstash to load csv files to elastic search](https://discuss.elastic.co/t/i-am-unable-to-use-logstash-to-load-csv-files-to-elastic-search/159496)

<div class="topic-metadata">

**Author:** [@lungelo\_zondo](https://discuss.elastic.co/u/lungelo_zondo)\
**Replies:** 16\
**Last updated:** [December 6, 2018, 1:27pm UTC](https://discuss.elastic.co/t/i-am-unable-to-use-logstash-to-load-csv-files-to-elastic-search/159496 "2018-12-06T13:27:03Z")

</div>

I get this on CMD but no data can be seen on elastic search. !image|689x305 C:\\Users\\zondol\\logstash-6.5.1\\bin\>logstash -f /Users/zondol/data/logstash.config Sending Logstash logs to C:/Users/zondol/logstash-6.5.1/log…

---

## [All pipelines shutdown after one is not working](https://discuss.elastic.co/t/all-pipelines-shutdown-after-one-is-not-working/344653)

<div class="topic-metadata">

**Author:** [@Keremcan\_Seker](https://discuss.elastic.co/u/Keremcan_Seker)\
**Replies:** 12\
**Last updated:** [October 10, 2023, 9:48am UTC](https://discuss.elastic.co/t/all-pipelines-shutdown-after-one-is-not-working/344653 "2023-10-10T09:48:35Z")

</div>

i have 2 pipelines one is for kafka and other one is for http when kafka is not working and logstash can not create connection to kafka it terminates http pipeline too i asked to chat gpt it said Run each pipeline as a…

---

## [Logstash ingest and export to elasticsearch files twice](https://discuss.elastic.co/t/logstash-ingest-and-export-to-elasticsearch-files-twice/297247)

<div class="topic-metadata">

**Author:** [@Greninja\_San](https://discuss.elastic.co/u/Greninja_San)\
**Replies:** 15\
**Last updated:** [February 16, 2022, 2:06pm UTC](https://discuss.elastic.co/t/logstash-ingest-and-export-to-elasticsearch-files-twice/297247 "2022-02-16T14:06:26Z")

</div>

Hello! I have a logstash config that gather lines from CSVs and then send them to Elasticsearch. However, for some unknown reason, lines are duplicated in Elasticsearch, taking twice the storage space, and making statis…

---

## [Disk storage not increasing despite indexes being growing](https://discuss.elastic.co/t/disk-storage-not-increasing-despite-indexes-being-growing/211523)

<div class="topic-metadata">

**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\
**Replies:** 13\
**Last updated:** [December 18, 2019, 10:42pm UTC](https://discuss.elastic.co/t/disk-storage-not-increasing-despite-indexes-being-growing/211523 "2019-12-18T22:42:10Z")

</div>

Hi all, Noticed today something very weird, our Logstash workers keep emitting data consistently to two of our ES clusters, rate as expected. Disk storage in one of them gets consumed as expected also, but the other …

---

## [Latitude and Longitude Error in logstash?](https://discuss.elastic.co/t/latitude-and-longitude-error-in-logstash/293855)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 11\
**Last updated:** [January 11, 2022, 4:35am UTC](https://discuss.elastic.co/t/latitude-and-longitude-error-in-logstash/293855 "2022-01-11T04:35:23Z")

</div>

Hello Everyone, I am trying to convert PostalCode to lat and long, I have done this task but Now I am confuse how to convert it into geopoint field I have tried in logstash but no success so for, getting error. My con…

---

## [\[Resolved\]Interger field defined in index template is treated as string, it looks like the interger mapping doesn't take effect](https://discuss.elastic.co/t/resolved-interger-field-defined-in-index-template-is-treated-as-string-it-looks-like-the-interger-mapping-doesnt-take-effect/190990)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 11\
**Last updated:** [July 23, 2019, 7:12am UTC](https://discuss.elastic.co/t/resolved-interger-field-defined-in-index-template-is-treated-as-string-it-looks-like-the-interger-mapping-doesnt-take-effect/190990 "2019-07-23T07:12:07Z")

</div>

Hi Team, I defined 4 integer fields in index template(if1,if2,if3 and if4), and ship serveral events to Elasticsearch by logstash. I found that these 4 interger fields are displayed as 'string' type in Kibana, which is …

---

## [Query complex field](https://discuss.elastic.co/t/query-complex-field/6797)

<div class="topic-metadata">

**Author:** [@Wes\_Plunk](https://discuss.elastic.co/u/Wes_Plunk)\
**Replies:** 11\
**Last updated:** [September 18, 2012, 5:01pm UTC](https://discuss.elastic.co/t/query-complex-field/6797 "2012-09-18T17:01:04Z")

</div>

Here's my records: https://gist.github.com/1894742 I need to be able to find this record where there is a relationship with an entityId = 5678 and a type = billTo It seems that the fields path is being flattened …

---

## [Kibana Dashboard is not getting updated with latest data](https://discuss.elastic.co/t/kibana-dashboard-is-not-getting-updated-with-latest-data/323303)

<div class="topic-metadata">

**Author:** [@vidvar](https://discuss.elastic.co/u/vidvar)\
**Replies:** 19\
**Last updated:** [January 24, 2023, 12:38pm UTC](https://discuss.elastic.co/t/kibana-dashboard-is-not-getting-updated-with-latest-data/323303 "2023-01-24T12:38:09Z")

</div>

In our Kibana, dashboards are not getting displayed the latest data from Nov 04, 2022 and we could see below logs snippets at kibana.log. Could someone please assist what is missing here. {"type":"log","@timestamp":"20…

---

## [Elasticsearch Request Circuit Breaker](https://discuss.elastic.co/t/elasticsearch-request-circuit-breaker/275893)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 12\
**Last updated:** [June 19, 2021, 5:55am UTC](https://discuss.elastic.co/t/elasticsearch-request-circuit-breaker/275893 "2021-06-19T05:55:00Z")

</div>

I am looking at indices.breaker.request.limit circuit breaker. Based on the description, my understanding is that it would break if an aggregation consumes the heap configured in the breaker. The default is 60% for versi…

---

## [ElasticSearch 5.6 Using ingest processors to modify GET response](https://discuss.elastic.co/t/elasticsearch-5-6-using-ingest-processors-to-modify-get-response/124548)

<div class="topic-metadata">

**Author:** [@AlgoRhymes](https://discuss.elastic.co/u/AlgoRhymes)\
**Replies:** 12\
**Last updated:** [March 26, 2018, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-using-ingest-processors-to-modify-get-response/124548 "2018-03-26T13:01:24Z")

</div>

Hello all! I want to implement an ElasticSearch plugin to pseudonymize data (or use something that already exists, but I didn't find anything that fits). I can use ingest nodes and pseudonymize fields via pipeline befor…

---

## [Logstash config for nested log](https://discuss.elastic.co/t/logstash-config-for-nested-log/277680)

<div class="topic-metadata">

**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\
**Replies:** 10\
**Last updated:** [July 4, 2021, 1:55pm UTC](https://discuss.elastic.co/t/logstash-config-for-nested-log/277680 "2021-07-04T13:55:45Z")

</div>

Hello everyone... I have multiple event logs from windows. Converted them to csv using EvtxEcmd.exe. I combined lots of event logs into one csv file. I need to upload it to ELK. below are the column names- RecordNumb…

---

## [Can't set up a cluster in Centos7](https://discuss.elastic.co/t/cant-set-up-a-cluster-in-centos7/115492)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 9\
**Last updated:** [January 15, 2018, 10:35am UTC](https://discuss.elastic.co/t/cant-set-up-a-cluster-in-centos7/115492 "2018-01-15T10:35:59Z")

</div>

Hi everyone, I want to set up a cluster on my Centos7. and this is my elasticsearch.yml. ---------------------------------- Cluster ----------------------------------- Use a descriptive name for your cluster: cluster.n…

---

## [ML Job hard limit error on Linux](https://discuss.elastic.co/t/ml-job-hard-limit-error-on-linux/150865)

<div class="topic-metadata">

**Author:** [@TamasK](https://discuss.elastic.co/u/TamasK)\
**Replies:** 10\
**Last updated:** [October 17, 2018, 10:42am UTC](https://discuss.elastic.co/t/ml-job-hard-limit-error-on-linux/150865 "2018-10-17T10:42:43Z")

</div>

Hi, Maybe somebody can help me to solve the following problem Problem description: If I create and start new multimetric job, then memory status always changes to hard limit. (This job worked on Windows without any p…

---

## [What will be the equivalent query of the following java api?](https://discuss.elastic.co/t/what-will-be-the-equivalent-query-of-the-following-java-api/15536)

<div class="topic-metadata">

**Author:** [@dark\_shadow](https://discuss.elastic.co/u/dark_shadow)\
**Replies:** 10\
**Last updated:** [January 31, 2014, 10:05pm UTC](https://discuss.elastic.co/t/what-will-be-the-equivalent-query-of-the-following-java-api/15536 "2014-01-31T22:05:07Z")

</div>

Hi, I have following java code which query for search results. String script = "\_score \* (doc\['po'\].empty ? 1 : doc\['po'\].value == 0.0 ? 1 : doc\['po'\].value)"; QueryBuilder queryBuilder = QueryBuilders.c…

---

## [A ruined shard caused ES node down](https://discuss.elastic.co/t/a-ruined-shard-caused-es-node-down/108810)

<div class="topic-metadata">

**Author:** [@HelloUniverse](https://discuss.elastic.co/u/HelloUniverse)\
**Replies:** 9\
**Last updated:** [November 24, 2017, 2:46am UTC](https://discuss.elastic.co/t/a-ruined-shard-caused-es-node-down/108810 "2017-11-24T02:46:17Z")

</div>

Does anyone encounter this kind of problem? A ruined but appeared as healthy shard caused the ES node shut down, and a memory dump is created. The ES we used is 5.4.1. We have an index with more than 200GB data, and 12 …

---

## [Deploy in Jboss](https://discuss.elastic.co/t/deploy-in-jboss/16286)

<div class="topic-metadata">

**Author:** [@Craig\_Graham](https://discuss.elastic.co/u/Craig_Graham)\
**Replies:** 9\
**Last updated:** [March 11, 2014, 12:50pm UTC](https://discuss.elastic.co/t/deploy-in-jboss/16286 "2014-03-11T12:50:00Z")

</div>

I have just started working with ElasticSearch while creating a POC search application at work. I was wondering if anyone had experimented with running ElasticSearch in JBoss and could provide some direction as to h…

---

## [Server crashed with status code 1](https://discuss.elastic.co/t/server-crashed-with-status-code-1/303206)

<div class="topic-metadata">

**Author:** [@HarryX](https://discuss.elastic.co/u/HarryX)\
**Replies:** 11\
**Last updated:** [April 26, 2022, 7:34am UTC](https://discuss.elastic.co/t/server-crashed-with-status-code-1/303206 "2022-04-26T07:34:14Z")

</div>

I'm running kibana 7.14.2 on Linux from my localhost and with wazuh installed, however the server keep crashing after some time functioning properly. I have tried different approaches including limit the memory use from …

---

## [Why Kibana alerts are not consistent?](https://discuss.elastic.co/t/why-kibana-alerts-are-not-consistent/223553)

<div class="topic-metadata">

**Author:** [@gunjan\_prmr](https://discuss.elastic.co/u/gunjan_prmr)\
**Replies:** 10\
**Last updated:** [April 7, 2020, 3:18pm UTC](https://discuss.elastic.co/t/why-kibana-alerts-are-not-consistent/223553 "2020-04-07T15:18:11Z")

</div>

I have Kibana alert where I am NOT getting all alerts. This is inconsistent behavior where it works some times and sometimes not. I am not sure why. Based on my condition I am checking certain status every minute (now -…

---

## [Polygon Self-Intersecting when there is minimal wrapping at -180/180 failing](https://discuss.elastic.co/t/polygon-self-intersecting-when-there-is-minimal-wrapping-at-180-180-failing/334065)

<div class="topic-metadata">

**Author:** [@Craig\_Roush](https://discuss.elastic.co/u/Craig_Roush)\
**Replies:** 13\
**Last updated:** [May 25, 2023, 10:05am UTC](https://discuss.elastic.co/t/polygon-self-intersecting-when-there-is-minimal-wrapping-at-180-180-failing/334065 "2023-05-25T10:05:31Z")

</div>

I am receiving a polygon-self intersecting error when I have a polygon that barely wraps across 180 to -180: I have a simple mapping for a index setup as: index\_mapping = { "time": { "type": "da…

---

## [Failed to retieve translog exception](https://discuss.elastic.co/t/failed-to-retieve-translog-exception/3195)

<div class="topic-metadata">

**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\
**Replies:** 13\
**Last updated:** [August 13, 2010, 3:22am UTC](https://discuss.elastic.co/t/failed-to-retieve-translog-exception/3195 "2010-08-13T03:22:50Z")

</div>

Hello, I've been semi-frequently getting the error below after stopping and starting my single machine cluster. I started paying attention to doc counts and saw that I lost ~250 out of ~300,000 after the restart wh…

---

## [Kibana deprecation issues: Source configuration field "host name" is deprecated](https://discuss.elastic.co/t/kibana-deprecation-issues-source-configuration-field-host-name-is-deprecated/299997)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 9\
**Last updated:** [March 24, 2022, 10:44am UTC](https://discuss.elastic.co/t/kibana-deprecation-issues-source-configuration-field-host-name-is-deprecated/299997 "2022-03-24T10:44:03Z")

</div>

Hi all, I am trying to prepare to upgrade my elastic cluster to 8.1. On the Upgrade Assistant tab i've fixed most of the issue but then there is an issue that said: Source configuration field "host name" is deprecated.…

---

## [ES health](https://discuss.elastic.co/t/es-health/81823)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 9\
**Last updated:** [April 12, 2017, 1:33pm UTC](https://discuss.elastic.co/t/es-health/81823 "2017-04-12T13:33:50Z")

</div>

Hi, I am using below query to check health of ES cluster. http://localhost:9200/\_cat/nodes?v&h=name,version,ip,port,load,ram.max,ram.current,ram.percent,heap.max,heap.current,heap.percent,load\_1m,load\_5m,uptime,file\_de…

---

## [\_forcemerge on ES 7.3 issue](https://discuss.elastic.co/t/forcemerge-on-es-7-3-issue/197571)

<div class="topic-metadata">

**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\
**Replies:** 12\
**Last updated:** [September 3, 2019, 8:46pm UTC](https://discuss.elastic.co/t/forcemerge-on-es-7-3-issue/197571 "2019-09-03T20:46:57Z")

</div>

I've upgraded hardware. Clean install of ES 7.3. Importing the same static dataset I was using on my old ES 6 box. Importing on 7 is faster BUT... after completing the import I'm running a \_forcemerge on the ~1.1TB datas…

---

## [Rollovr dosen't work](https://discuss.elastic.co/t/rollovr-dosent-work/58216)

<div class="topic-metadata">

**Author:** [@bastianhoss](https://discuss.elastic.co/u/bastianhoss)\
**Replies:** 12\
**Last updated:** [August 18, 2016, 8:26am UTC](https://discuss.elastic.co/t/rollovr-dosent-work/58216 "2016-08-18T08:26:02Z")

</div>

Hi Community, I've tried to setup a rollover into a new index: curl -XPUT http://HOST/rollover- -d' { "mappings": { "syslog": { "\_all": { "enabled": true, "omit\_norms": tru…

---

## [Machine Learning Bucket Span Millisecond Precision](https://discuss.elastic.co/t/machine-learning-bucket-span-millisecond-precision/197908)

<div class="topic-metadata">

**Author:** [@matteo.casaro](https://discuss.elastic.co/u/matteo.casaro)\
**Replies:** 10\
**Last updated:** [September 5, 2019, 5:25am UTC](https://discuss.elastic.co/t/machine-learning-bucket-span-millisecond-precision/197908 "2019-09-05T05:25:37Z")

</div>

Hello, when configuring a new Single Metric Job I tried to set a bucket span of 1 millisecond like in the picture below. When I try to save the job I get this error I tried looking for some documentation about tim…

---

## [.JSON Conf File for Logstash](https://discuss.elastic.co/t/json-conf-file-for-logstash/343638)

<div class="topic-metadata">

**Author:** [@Google-Cloud-DFIR](https://discuss.elastic.co/u/Google-Cloud-DFIR)\
**Replies:** 19\
**Last updated:** [September 25, 2023, 4:17pm UTC](https://discuss.elastic.co/t/json-conf-file-for-logstash/343638 "2023-09-25T16:17:01Z")

</div>

Hello, I've been trying to configure this .conf file to help parse out .json files correctly. This script is able to ingest Google Cloud Audit Logs (in .json), but fails to parse it correctly: input { # stdin {} …

---

## [Facet plugin coding tutorial](https://discuss.elastic.co/t/facet-plugin-coding-tutorial/9778)

<div class="topic-metadata">

**Author:** [@Valentin\_Pletzer](https://discuss.elastic.co/u/Valentin_Pletzer)\
**Replies:** 19\
**Last updated:** [December 6, 2012, 7:35am UTC](https://discuss.elastic.co/t/facet-plugin-coding-tutorial/9778 "2012-12-06T07:35:24Z")

</div>

Are there any tutorials where facet plugins are explained? I would like to write one myself and wondered where to start looking. --

---

## [Decreased logstash/elasticsearch performance with load-balanced logstash nodes](https://discuss.elastic.co/t/decreased-logstash-elasticsearch-performance-with-load-balanced-logstash-nodes/138794)

<div class="topic-metadata">

**Author:** [@Kamen\_MacKay](https://discuss.elastic.co/u/Kamen_MacKay)\
**Replies:** 12\
**Last updated:** [July 17, 2018, 8:54pm UTC](https://discuss.elastic.co/t/decreased-logstash-elasticsearch-performance-with-load-balanced-logstash-nodes/138794 "2018-07-17T20:54:45Z")

</div>

I've been running an ELK stack on a single node for the past year to ingest our application server logs. The load is consistently quite high on this bare-metal box. I was recently given a smaller baremetal server to inst…

---

## [Ultra-slow indexing](https://discuss.elastic.co/t/ultra-slow-indexing/6441)

<div class="topic-metadata">

**Author:** [@Alberto\_Tostado](https://discuss.elastic.co/u/Alberto_Tostado)\
**Replies:** 11\
**Last updated:** [November 14, 2012, 11:54am UTC](https://discuss.elastic.co/t/ultra-slow-indexing/6441 "2012-11-14T11:54:53Z")

</div>

\*Good morning.\* I'm a ElasticSearch newbie user and we're trying to use it as a search engine for a CouchDB database in a large information system for clinical laboratories. We are blocked because we need index a l…

---

## [Index creation from very large data set](https://discuss.elastic.co/t/index-creation-from-very-large-data-set/2868)

<div class="topic-metadata">

**Author:** [@colinsurprenant](https://discuss.elastic.co/u/colinsurprenant)\
**Replies:** 11\
**Last updated:** [April 16, 2010, 2:46pm UTC](https://discuss.elastic.co/t/index-creation-from-very-large-data-set/2868 "2010-04-16T14:46:50Z")

</div>

Hi, What are the options for creating a new index form an existing very large data set? do we need to linearly walk the data and insert each document one-by-one? Otherwise, given a distributed datastore with mapr…

---

## [{"statusCode":429,"message":"circuit\_breaking\_exception: \[circuit\_breaking\_exception\] Reason: \[parent\] Data too large, data for \[\<http\_request\>\] would be \[1052991986/1004.2mb\], which is larger than the limit of \[805306368/768mb\], real usage: \[1052991848/1](https://discuss.elastic.co/t/statuscode-429-message-circuit-breaking-exception-circuit-breaking-exception-reason-parent-data-too-large-data-for-http-request-would-be-1052991986-1004-2mb-which-is-larger-than-the-limit-of-805306368-768mb-real-usage-1052991848-1/334343)

<div class="topic-metadata">

**Author:** [@purna](https://discuss.elastic.co/u/purna)\
**Replies:** 10\
**Last updated:** [May 30, 2023, 6:05am UTC](https://discuss.elastic.co/t/statuscode-429-message-circuit-breaking-exception-circuit-breaking-exception-reason-parent-data-too-large-data-for-http-request-would-be-1052991986-1004-2mb-which-is-larger-than-the-limit-of-805306368-768mb-real-usage-1052991848-1/334343 "2023-05-30T06:05:12Z")

</div>

please help me , How to resloved this issue

[Previous page](https://discuss.elastic.co/top.md?page=197&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=199&per_page=50&period=all)
