# Top

**URL:** https://discuss.elastic.co/top.md?page=201&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 202

---

## [How to purge old documents or any better options to use rollover for dynamic index](https://discuss.elastic.co/t/how-to-purge-old-documents-or-any-better-options-to-use-rollover-for-dynamic-index/190872)

<div class="topic-metadata">

**Author:** [@Jasper\_B](https://discuss.elastic.co/u/Jasper_B)\
**Replies:** 17\
**Last updated:** [July 19, 2019, 7:47am UTC](https://discuss.elastic.co/t/how-to-purge-old-documents-or-any-better-options-to-use-rollover-for-dynamic-index/190872 "2019-07-19T07:47:01Z")

</div>

Hi guys, we have one request to purge the old data old than 7 days, when we saw this requirement the first choice what we think about is to use the index rollover function with time based index, for example create a new…

---

## [X-pack document level filtering not operating as expected](https://discuss.elastic.co/t/x-pack-document-level-filtering-not-operating-as-expected/134497)

<div class="topic-metadata">

**Author:** [@jennworks40](https://discuss.elastic.co/u/jennworks40)\
**Replies:** 15\
**Last updated:** [June 27, 2018, 6:45pm UTC](https://discuss.elastic.co/t/x-pack-document-level-filtering-not-operating-as-expected/134497 "2018-06-27T18:45:22Z")

</div>

Base version information: this work is being done on an ELK stack running version 5.6.3 of elasticsearch, kibana, logstash, and x-pack. I am trying to define multiple levels of roles that can be combined to allow users …

---

## [Can't ship logs with filebeat to logstash](https://discuss.elastic.co/t/cant-ship-logs-with-filebeat-to-logstash/241608)

<div class="topic-metadata">

**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\
**Replies:** 10\
**Last updated:** [July 17, 2020, 1:43pm UTC](https://discuss.elastic.co/t/cant-ship-logs-with-filebeat-to-logstash/241608 "2020-07-17T13:43:39Z")

</div>

I'm trying to make filebeat send log to logstash on another machine and I just can't get it to work. This is the filebeat.yml configuration: https://pastebin.com/8a2RtGBa (Using pastebin because of character limit) Thi…

---

## [One logstash pipeline listening multiple formats (same input)](https://discuss.elastic.co/t/one-logstash-pipeline-listening-multiple-formats-same-input/293381)

<div class="topic-metadata">

**Author:** [@vee](https://discuss.elastic.co/u/vee)\
**Replies:** 16\
**Last updated:** [January 6, 2022, 7:33pm UTC](https://discuss.elastic.co/t/one-logstash-pipeline-listening-multiple-formats-same-input/293381 "2022-01-06T19:33:16Z")

</div>

Hi - Working on a new requirement to parse through one file containing two different formatted messages and send to different indices on elastic. Filebeat (same file with two different formatted messages) -\> Logstash (…

---

## [\_id and mappings](https://discuss.elastic.co/t/-id-and-mappings/4455)

<div class="topic-metadata">

**Author:** [@Bryan\_Green](https://discuss.elastic.co/u/Bryan_Green)\
**Replies:** 14\
**Last updated:** [May 24, 2011, 3:37pm UTC](https://discuss.elastic.co/t/-id-and-mappings/4455 "2011-05-24T15:37:29Z")

</div>

Hi, I'd like to index the '\_id' field for all types across all indexes. How do I do this? I have a clean index from 0.16.1. Can I place this in the default-mapping.json file:? { "\_default\_" : { "propertie…

---

## [Finding fields with a "-"](https://discuss.elastic.co/t/finding-fields-with-a/106079)

<div class="topic-metadata">

**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\
**Replies:** 10\
**Last updated:** [November 1, 2017, 11:11pm UTC](https://discuss.elastic.co/t/finding-fields-with-a/106079 "2017-11-01T23:11:40Z")

</div>

Running ELK 5.3.1 We are working on trying to track down an issue where our Apache responses sometimes have a content length of 0 bytes. Unfortunately 0 actually gets logged as a "-" by apache. I'm looking at changing…

---

## [Elasticsearch Mappings from version 5 to version 7](https://discuss.elastic.co/t/elasticsearch-mappings-from-version-5-to-version-7/280802)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 9\
**Last updated:** [August 10, 2021, 4:12am UTC](https://discuss.elastic.co/t/elasticsearch-mappings-from-version-5-to-version-7/280802 "2021-08-10T04:12:18Z")

</div>

Hello Team I am using Elasticsearch version 5.6.3 , cluster (A). I am planning to move to Elasticsearch version 7.8.0 using separate cluster (B) for it. I am using \_reindex api to move my index data from A to B clust…

---

## [Poor write performance](https://discuss.elastic.co/t/poor-write-performance/153278)

<div class="topic-metadata">

**Author:** [@kluvi](https://discuss.elastic.co/u/kluvi)\
**Replies:** 11\
**Last updated:** [October 29, 2018, 2:10pm UTC](https://discuss.elastic.co/t/poor-write-performance/153278 "2018-10-29T14:10:24Z")

</div>

Hi. Last few weeks i have performance troubles with write queries (there is bigger load than earlier). I think, that from app side, there is nothing to optimize - all queries ar sent to \_bulk with about 300 operations p…

---

## [Logstash kv plugin is not working](https://discuss.elastic.co/t/logstash-kv-plugin-is-not-working/300548)

<div class="topic-metadata">

**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\
**Replies:** 10\
**Last updated:** [April 4, 2022, 3:36pm UTC](https://discuss.elastic.co/t/logstash-kv-plugin-is-not-working/300548 "2022-04-04T15:36:42Z")

</div>

I am using ELK 7.6.2 The problem is when I remove the kv plugin, there is log loaded to Elasticsearch, when I add kv plugin, there is zero data can be loaded to Elasticsearch. Moreover, there is no error is logged in t…

---

## [Elastic Search 2.2 Occupying a lot of ram which leads to GC Memory Pressure](https://discuss.elastic.co/t/elastic-search-2-2-occupying-a-lot-of-ram-which-leads-to-gc-memory-pressure/175528)

<div class="topic-metadata">

**Author:** [@iaskdoubt](https://discuss.elastic.co/u/iaskdoubt)\
**Replies:** 11\
**Last updated:** [April 9, 2019, 6:59am UTC](https://discuss.elastic.co/t/elastic-search-2-2-occupying-a-lot-of-ram-which-leads-to-gc-memory-pressure/175528 "2019-04-09T06:59:28Z")

</div>

Hi, We are indexing around 1000 logs per second with the elasticsearch in Client mode. But as soon as we start the product the elasticsearch occupies around 1 GB of the total heap. This however grows \> 4 gb in a few mi…

---

## [Wildfly 8 transactions/traces not catched](https://discuss.elastic.co/t/wildfly-8-transactions-traces-not-catched/184138)

<div class="topic-metadata">

**Author:** [@Frintrop](https://discuss.elastic.co/u/Frintrop)\
**Replies:** 10\
**Last updated:** [June 10, 2019, 9:14am UTC](https://discuss.elastic.co/t/wildfly-8-transactions-traces-not-catched/184138 "2019-06-10T09:14:31Z")

</div>

Kibana version: 6.8 Elasticsearch version: 6.8 APM Server version: 6.8 APM Agent language and version: 1.6.1 Fresh install or upgraded from other version? fresh Hi, i have setup java apm agent in our wildfly 8 ejb a…

---

## [QueryString](https://discuss.elastic.co/t/querystring/6978)

<div class="topic-metadata">

**Author:** [@k4Rla](https://discuss.elastic.co/u/k4Rla)\
**Replies:** 10\
**Last updated:** [August 15, 2012, 1:56pm UTC](https://discuss.elastic.co/t/querystring/6978 "2012-08-15T13:56:31Z")

</div>

Hi, here is problem with QueryString search in cyrillic using Snowball. When i'm search some word using \*, Elastic returns no results, where this word matches, it returns me only results with length, longer than quer…

---

## [Logstash not creating index in secure(https) kibana](https://discuss.elastic.co/t/logstash-not-creating-index-in-secure-https-kibana/282444)

<div class="topic-metadata">

**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\
**Replies:** 9\
**Last updated:** [August 31, 2021, 4:57am UTC](https://discuss.elastic.co/t/logstash-not-creating-index-in-secure-https-kibana/282444 "2021-08-31T04:57:45Z")

</div>

This is my logstash log using journalctl -b 0 -r Aug 25 11:33:18 elastic.sys systemd\[1\]: Started logstash. Aug 25 11:33:18 elastic.sys systemd\[1\]: Stopped logstash. Aug 25 11:33:18 elastic.sys systemd\[1\]: logstash.serv…

---

## [Getting error while mapping](https://discuss.elastic.co/t/getting-error-while-mapping/125369)

<div class="topic-metadata">

**Author:** [@palash7563](https://discuss.elastic.co/u/palash7563)\
**Replies:** 9\
**Last updated:** [March 24, 2018, 11:55am UTC](https://discuss.elastic.co/t/getting-error-while-mapping/125369 "2018-03-24T11:55:19Z")

</div>

PUT /product/default/\_mapping { "properties": { "created":{ "type": "date", "format": "yyyy/MM/dd HH:mm:ss||yyyy/MM/dd" } } } response is like { "error": { "root\_cause": \[ { "type": "cluster\_blo…

---

## [Metricbeat](https://discuss.elastic.co/t/metricbeat/313660)

<div class="topic-metadata">

**Author:** [@Shashi\_Prakash](https://discuss.elastic.co/u/Shashi_Prakash)\
**Replies:** 15\
**Last updated:** [September 7, 2022, 6:49am UTC](https://discuss.elastic.co/t/metricbeat/313660 "2022-09-07T06:49:59Z")

</div>

i am geting error in connecting metricbeat to kibana as it shows in logs ERROR \[kibana.stats\] stats/stats.go:82 error making http request: Get http://localhost:5601/api/status: dial tcp 127.0.0.1:5601: connection refuse…

---

## [Subheadings in Elasticsearch/clean up system logs](https://discuss.elastic.co/t/subheadings-in-elasticsearch-clean-up-system-logs/289943)

<div class="topic-metadata">

**Author:** [@eprop-marc](https://discuss.elastic.co/u/eprop-marc)\
**Replies:** 12\
**Last updated:** [December 1, 2021, 2:39pm UTC](https://discuss.elastic.co/t/subheadings-in-elasticsearch-clean-up-system-logs/289943 "2021-12-01T14:39:57Z")

</div>

Hi, I'm brand new to the whole ELK stack, I've setup one in my company. I just wanted to know how best to clean up the logs, I'm getting a lot of system logs from the server and I don't want them. I just want the logs fr…

---

## [How can show the shards of per nodes in elasticsearch 5.4.2 cluster with api search(curl)?](https://discuss.elastic.co/t/how-can-show-the-shards-of-per-nodes-in-elasticsearch-5-4-2-cluster-with-api-search-curl/100005)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 9\
**Last updated:** [September 11, 2017, 8:06am UTC](https://discuss.elastic.co/t/how-can-show-the-shards-of-per-nodes-in-elasticsearch-5-4-2-cluster-with-api-search-curl/100005 "2017-09-11T08:06:26Z")

</div>

how can show the shards of per nodes in elasticsearch 5.4.2 cluster with api search(curl)?

---

## [Kibana showing wrong histogram interval in output](https://discuss.elastic.co/t/kibana-showing-wrong-histogram-interval-in-output/131614)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 13\
**Last updated:** [May 25, 2018, 2:37pm UTC](https://discuss.elastic.co/t/kibana-showing-wrong-histogram-interval-in-output/131614 "2018-05-25T14:37:56Z")

</div>

I am creating query for histogram output of metricbeat cpu log. i tried this query as below. post metricbeat/\_search { "size": 0, "query" : { "bool": { "must": \[ { "range": { "@timestamp": { …

---

## [Elasticsearch Saved Search with Group By](https://discuss.elastic.co/t/elasticsearch-saved-search-with-group-by/257823)

<div class="topic-metadata">

**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\
**Replies:** 15\
**Last updated:** [December 14, 2020, 11:47am UTC](https://discuss.elastic.co/t/elasticsearch-saved-search-with-group-by/257823 "2020-12-14T11:47:36Z")

</div>

index\_name: my\_data-2020-12-01 ticket\_number: T123 ticket\_status: OPEN ticket\_updated\_time: 2020-12-01 12:22:12 index\_name: my\_data-2020-12-01 ticket\_number: T124 ticket\_status: OPEN ticket\_updated\_time: 2020-12…

---

## [Update record if present otherwise insert](https://discuss.elastic.co/t/update-record-if-present-otherwise-insert/206310)

<div class="topic-metadata">

**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\
**Replies:** 11\
**Last updated:** [November 6, 2019, 2:14am UTC](https://discuss.elastic.co/t/update-record-if-present-otherwise-insert/206310 "2019-11-06T02:14:07Z")

</div>

Here is my logstash configuration input { file { path =\> "/etc/logstash/fish/10gFresh.csv" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { csv { …

---

## [Restricting kibana access - iframe](https://discuss.elastic.co/t/restricting-kibana-access-iframe/315455)

<div class="topic-metadata">

**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\
**Replies:** 12\
**Last updated:** [November 9, 2022, 9:32pm UTC](https://discuss.elastic.co/t/restricting-kibana-access-iframe/315455 "2022-11-09T21:32:02Z")

</div>

Hi, We have a kibana instance and we are using kibana iframe embedding into our application page. This is working fine, the problem that we are facing is that we have different clients and for every client we have creat…

---

## [Unable to create apikey in APMServer after installing 7.9](https://discuss.elastic.co/t/unable-to-create-apikey-in-apmserver-after-installing-7-9/246659)

<div class="topic-metadata">

**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\
**Replies:** 12\
**Last updated:** [September 2, 2020, 9:48am UTC](https://discuss.elastic.co/t/unable-to-create-apikey-in-apmserver-after-installing-7-9/246659 "2020-09-02T09:48:56Z")

</div>

I created a new 7.9 installation on my lab environment. I tried to create apikeys on APM Server, using documented command, but I got a couple of problems: apm-server now runs under apm-server user, and launch apikey c…

---

## [GC issues](https://discuss.elastic.co/t/gc-issues/11424)

<div class="topic-metadata">

**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\
**Replies:** 10\
**Last updated:** [April 9, 2013, 1:01pm UTC](https://discuss.elastic.co/t/gc-issues/11424 "2013-04-09T13:01:58Z")

</div>

Hi , I created a plugin to read feeds from a file (185 GB , 19L feeds) and write it to ES via Internal Client object. I am using bulk insertion (1000 feeds at a time) Here after pushing 7.7 L feeds , the plugin sto…

---

## [Metric won't setup because of bad certificates](https://discuss.elastic.co/t/metric-wont-setup-because-of-bad-certificates/353891)

<div class="topic-metadata">

**Author:** [@Klheik](https://discuss.elastic.co/u/Klheik)\
**Replies:** 14\
**Last updated:** [February 23, 2024, 2:01pm UTC](https://discuss.elastic.co/t/metric-wont-setup-because-of-bad-certificates/353891 "2024-02-23T14:01:43Z")

</div>

Hi, I have a debian 11 install on a server, i am using the ELK satck with the 7.17 version and Elasticsearch, Logstash, Filebeat and kibana are installa and configure and works perfectly when it's about monitoring log f…

---

## [Trouble with aggregate filter?](https://discuss.elastic.co/t/trouble-with-aggregate-filter/230679)

<div class="topic-metadata">

**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\
**Replies:** 16\
**Last updated:** [May 2, 2020, 8:31pm UTC](https://discuss.elastic.co/t/trouble-with-aggregate-filter/230679 "2020-05-02T20:31:57Z")

</div>

Hi,I have a csv file contain 1000 rows ,it looks like this Blockquote ent\_sort , Date , vehicle enter, 2020-04-28 05:04:02 , c1 sortie , 2020-04-28 10:04:02 , c1 enter , 2020-04-28 05:04:02 , c3 sortie , 2020-04-2…

---

## [Kibana Fleet high CPU Load on Elasticsearch when adding Integrations](https://discuss.elastic.co/t/kibana-fleet-high-cpu-load-on-elasticsearch-when-adding-integrations/336729)

<div class="topic-metadata">

**Author:** [@matled](https://discuss.elastic.co/u/matled)\
**Replies:** 10\
**Last updated:** [June 30, 2023, 11:29am UTC](https://discuss.elastic.co/t/kibana-fleet-high-cpu-load-on-elasticsearch-when-adding-integrations/336729 "2023-06-30T11:29:55Z")

</div>

Since Elastic-Stack 8.8.0 we observe an issue that is reproducible when navigating fleet and especially modifying integrations where the Elastic-Stack Cluster stalls out due to high CPU. In the following screenshot I've …

---

## [Logstash + Fortinet + Kibana](https://discuss.elastic.co/t/logstash-fortinet-kibana/323508)

<div class="topic-metadata">

**Author:** [@Cezary](https://discuss.elastic.co/u/Cezary)\
**Replies:** 10\
**Last updated:** [February 10, 2023, 12:57pm UTC](https://discuss.elastic.co/t/logstash-fortinet-kibana/323508 "2023-02-10T12:57:21Z")

</div>

Hello to All, I'm trying to create Kibana map using data from Fortinet syslog and Logstash. I was able to load geoip data to kibana, however geo.location field had to be created from Logstash because it was not created…

---

## [How to make embeded visualizations uneditable](https://discuss.elastic.co/t/how-to-make-embeded-visualizations-uneditable/139998)

<div class="topic-metadata">

**Author:** [@RajiReddy](https://discuss.elastic.co/u/RajiReddy)\
**Replies:** 10\
**Last updated:** [July 24, 2018, 11:18pm UTC](https://discuss.elastic.co/t/how-to-make-embeded-visualizations-uneditable/139998 "2018-07-24T23:18:43Z")

</div>

Hi, I have embed my visualization iframe into web page. But it is allowing users to edit it which in turn giving error as I am using scripted field. Is there any way to disable the interactivity with the visualization? …

---

## [Circular reference problem while creating React plugin for Kibana](https://discuss.elastic.co/t/circular-reference-problem-while-creating-react-plugin-for-kibana/156229)

<div class="topic-metadata">

**Author:** [@MishMick](https://discuss.elastic.co/u/MishMick)\
**Replies:** 9\
**Last updated:** [November 16, 2018, 1:18pm UTC](https://discuss.elastic.co/t/circular-reference-problem-while-creating-react-plugin-for-kibana/156229 "2018-11-16T13:18:40Z")

</div>

Circular reference to "VisProvider" found while resolving private deps: registry -\> function(savedVisualizations){return savedVisualizations} -\> VisProvider -\> registry -\> MynewVisType Is there something I might be miss…

---

## [Full Index Rebuild with 5M documents on Elastic search 7.6 takes 1 week to complete](https://discuss.elastic.co/t/full-index-rebuild-with-5m-documents-on-elastic-search-7-6-takes-1-week-to-complete/255624)

<div class="topic-metadata">

**Author:** [@nimohara](https://discuss.elastic.co/u/nimohara)\
**Replies:** 14\
**Last updated:** [November 17, 2020, 2:46pm UTC](https://discuss.elastic.co/t/full-index-rebuild-with-5m-documents-on-elastic-search-7-6-takes-1-week-to-complete/255624 "2020-11-17T14:46:50Z")

</div>

Hey There Hope all are doing well Please have a look in to the below issue and provide your valuable suggestion on this. Currently Elastic 7.6 is running on cluster with 3 nodes and it's having 5M records in it. Whil…

---

## [The grok part from logstash didn't take effect in elasticsearch](https://discuss.elastic.co/t/the-grok-part-from-logstash-didnt-take-effect-in-elasticsearch/140867)

<div class="topic-metadata">

**Author:** [@Acacia1986](https://discuss.elastic.co/u/Acacia1986)\
**Replies:** 15\
**Last updated:** [July 27, 2018, 4:04pm UTC](https://discuss.elastic.co/t/the-grok-part-from-logstash-didnt-take-effect-in-elasticsearch/140867 "2018-07-27T16:04:09Z")

</div>

Below is my logstash config: And I find only the document\_type is effect after I start the logstash. I go to elasticsearch: hostname:9200/indexName and find as below: So I find the grok part didn't take effect. Is …

---

## [BigQuery to Elasticsearch Self-Managed configuration](https://discuss.elastic.co/t/bigquery-to-elasticsearch-self-managed-configuration/287228)

<div class="topic-metadata">

**Author:** [@Mandark1990](https://discuss.elastic.co/u/Mandark1990)\
**Replies:** 10\
**Last updated:** [October 25, 2021, 8:52am UTC](https://discuss.elastic.co/t/bigquery-to-elasticsearch-self-managed-configuration/287228 "2021-10-25T08:52:41Z")

</div>

Hi All, Am trying to test out the steps given here: https://www.elastic.co/blog/ingest-data-directly-from-google-bigquery-into-elastic-using-google-dataflow As per the documentation it says the implementation flow rem…

---

## [Could not running Yaml IT in my own repository plugin project](https://discuss.elastic.co/t/could-not-running-yaml-it-in-my-own-repository-plugin-project/209782)

<div class="topic-metadata">

**Author:** [@Ethan-Zhang](https://discuss.elastic.co/u/Ethan-Zhang)\
**Replies:** 9\
**Last updated:** [November 29, 2019, 10:52am UTC](https://discuss.elastic.co/t/could-not-running-yaml-it-in-my-own-repository-plugin-project/209782 "2019-11-29T10:52:12Z")

</div>

org.elasticsearch.repositories.cos.RepositoryCosClientYamlTestSuiteIT \> initializationError FAILED java.lang.NullPointerException at org.elasticsearch.test.rest.yaml.ESClientYamlSuiteTestCase.loadSuites(ESClientYamlS…

---

## [Help needed to create VISUALIZATION](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934)

<div class="topic-metadata">

**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\
**Replies:** 9\
**Last updated:** [March 21, 2018, 8:09pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934 "2018-03-21T20:09:53Z")

</div>

Hello Experts, I am trying to create Visualization for my Elasticsearch data using Kibana. My Grok Pattern: JAVALOGBACKTIMESTAMP %{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND},%{INT:msec} CASS\_BASE ^%{LO…

---

## [Default codec](https://discuss.elastic.co/t/default-codec/14135)

<div class="topic-metadata">

**Author:** [@aphalke](https://discuss.elastic.co/u/aphalke)\
**Replies:** 9\
**Last updated:** [November 29, 2013, 9:47pm UTC](https://discuss.elastic.co/t/default-codec/14135 "2013-11-29T21:47:08Z")

</div>

Hello Team, I am using elastic search 0.90.3. As per the documentation if I don't specify any codec mapping then default is taken. But what I have observed from yourkit memory snapshot is presence of objects of …

---

## [Index logic documentation?](https://discuss.elastic.co/t/index-logic-documentation/134481)

<div class="topic-metadata">

**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\
**Replies:** 11\
**Last updated:** [June 4, 2018, 10:16pm UTC](https://discuss.elastic.co/t/index-logic-documentation/134481 "2018-06-04T22:16:15Z")

</div>

I am looking for a writeup on when/how Elasticsearch decides to create new indices. I went to list all indexes on my single node ELK stack server expecting to find exactly two: the one being fed by Logstash and the one …

---

## [Metricbeat and kibana synchronisation!](https://discuss.elastic.co/t/metricbeat-and-kibana-synchronisation/216436)

<div class="topic-metadata">

**Author:** [@Annonyme1](https://discuss.elastic.co/u/Annonyme1)\
**Replies:** 16\
**Last updated:** [January 28, 2020, 9:47am UTC](https://discuss.elastic.co/t/metricbeat-and-kibana-synchronisation/216436 "2020-01-28T09:47:20Z")

</div>

I'am new in ELK tools ! i'am starting to minitor my own server with @172.16.0.179 ! my elasticsearch @172.16.0.179:9200 my kibana @172.16.0.179:5601 i' already installed metricbeat to collect metrics from my system an…

---

## [Grok-Filter not working](https://discuss.elastic.co/t/grok-filter-not-working/131009)

<div class="topic-metadata">

**Author:** [@Dante91](https://discuss.elastic.co/u/Dante91)\
**Replies:** 10\
**Last updated:** [May 16, 2018, 5:33am UTC](https://discuss.elastic.co/t/grok-filter-not-working/131009 "2018-05-16T05:33:22Z")

</div>

Hey, I want to log my MikroTik-Router. Thatfor I get for example the following log: May/03/2018 17:37:01 system,info,account user admin logged out from 192.168.88.1 via telnet With help from the grok debugger at gro…

---

## [Faq](https://discuss.elastic.co/t/faq/6573)

<div class="topic-metadata">

**Author:** [@David\_Stendardi](https://discuss.elastic.co/u/David_Stendardi)\
**Replies:** 9\
**Last updated:** [February 3, 2012, 7:04pm UTC](https://discuss.elastic.co/t/faq/6573 "2012-02-03T19:04:19Z")

</div>

Hi folks, What do you think about contributing a FAQ on the elasticsearch.github.com ? I'm reading this mailing list for 2 months now and i noticed that the same questions are asked over and over. (ex : advantages o…

---

## [Probleme de limite temporelle / Kibana](https://discuss.elastic.co/t/probleme-de-limite-temporelle-kibana/313560)

<div class="topic-metadata">

**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\
**Replies:** 13\
**Last updated:** [September 6, 2022, 3:47pm UTC](https://discuss.elastic.co/t/probleme-de-limite-temporelle-kibana/313560 "2022-09-06T15:47:12Z")

</div>

Bonjour, Je me tourne vers vous car j'ai un pb avec l'affichage de données. J'ai un corpus de données injectées correctement qui vont de 1997 à 2022 (le doc count indique 289000). Lorsque je souhaite faire un graphique …

---

## [Adding EC2 settings to elasticsearch.yml stops listening to port 9200](https://discuss.elastic.co/t/adding-ec2-settings-to-elasticsearch-yml-stops-listening-to-port-9200/14979)

<div class="topic-metadata">

**Author:** [@Steinar\_Bang](https://discuss.elastic.co/u/Steinar_Bang)\
**Replies:** 14\
**Last updated:** [December 24, 2013, 8:44am UTC](https://discuss.elastic.co/t/adding-ec2-settings-to-elasticsearch-yml-stops-listening-to-port-9200/14979 "2013-12-24T08:44:07Z")

</div>

I am running ES 0.90.4 on an Ubuntu 12.04 LTS EC2 instance. Starting this instance, it starts listening to port 9200: ubuntu@ip-172-31-31-127:/var/lib/elasticsearch$ sudo lsof -i TCP | grep 9200 java 1982 elast…

---

## [Heartbeat showing application as down even when its up](https://discuss.elastic.co/t/heartbeat-showing-application-as-down-even-when-its-up/185402)

<div class="topic-metadata">

**Author:** [@sjabiulla](https://discuss.elastic.co/u/sjabiulla)\
**Replies:** 9\
**Last updated:** [June 20, 2019, 6:45am UTC](https://discuss.elastic.co/t/heartbeat-showing-application-as-down-even-when-its-up/185402 "2019-06-20T06:45:14Z")

</div>

Hi, I have an application URL 1 that redirects to a different URL 2. From browser when I hit URL 1 , it redirects me to URL 2 and in network I can see that URL 1 returns response code as 302 as its redirecting to URL 2.…

---

## [My cluster frequently has shards on initializing\_shards](https://discuss.elastic.co/t/my-cluster-frequently-has-shards-on-initializing-shards/323446)

<div class="topic-metadata">

**Author:** [@Lohanna\_Sarah](https://discuss.elastic.co/u/Lohanna_Sarah)\
**Replies:** 12\
**Last updated:** [January 19, 2023, 9:57pm UTC](https://discuss.elastic.co/t/my-cluster-frequently-has-shards-on-initializing-shards/323446 "2023-01-19T21:57:03Z")

</div>

My cluster frequently has shards in the initializing\_shards state. The cluster is running on ks8. Exists any fix that I could do to fix it? The data nodes are restarted at least once a day

---

## [Elastic nodes goes down Out of Memory as gc kicks in](https://discuss.elastic.co/t/elastic-nodes-goes-down-out-of-memory-as-gc-kicks-in/189060)

<div class="topic-metadata">

**Author:** [@Prashant\_Rana](https://discuss.elastic.co/u/Prashant_Rana)\
**Replies:** 10\
**Last updated:** [July 8, 2019, 7:36am UTC](https://discuss.elastic.co/t/elastic-nodes-goes-down-out-of-memory-as-gc-kicks-in/189060 "2019-07-08T07:36:42Z")

</div>

I am facing the same problem as described in this discussion ES version 5.6.4. With ES 2.2.0 everything was working fine. The bulk index queue is full and the index requests are spread across many indices. We are gett…

---

## [\_source 50% bigger after reindex](https://discuss.elastic.co/t/source-50-bigger-after-reindex/303805)

<div class="topic-metadata">

**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\
**Replies:** 17\
**Last updated:** [May 12, 2022, 9:36am UTC](https://discuss.elastic.co/t/source-50-bigger-after-reindex/303805 "2022-05-12T09:36:30Z")

</div>

Hello. Context: I reindexed a 7.15 index into 7.16 one and suddenly it is taking about +50% space. By Analyze index disk usage API | Elasticsearch Guide \[7.16\] | Elastic I found that \_source field alone is now taking …

---

## [Elasticsearch snapshot query](https://discuss.elastic.co/t/elasticsearch-snapshot-query/235820)

<div class="topic-metadata">

**Author:** [@Dev\_Chakraborty](https://discuss.elastic.co/u/Dev_Chakraborty)\
**Replies:** 12\
**Last updated:** [June 5, 2020, 7:39pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-query/235820 "2020-06-05T19:39:26Z")

</div>

Hi Team, I was running the below command to get all the snapshots which was taken by me: curl -username:password -X GET "ES Server IP:9200/\_snapshot/reponame?v&s=id&pretty" -k { "error" : { "root\_cause" : \[ …

---

## [How to find maximum number query executed in sql server](https://discuss.elastic.co/t/how-to-find-maximum-number-query-executed-in-sql-server/186636)

<div class="topic-metadata">

**Author:** [@Pramod\_Thakur](https://discuss.elastic.co/u/Pramod_Thakur)\
**Replies:** 12\
**Last updated:** [June 24, 2019, 7:28am UTC](https://discuss.elastic.co/t/how-to-find-maximum-number-query-executed-in-sql-server/186636 "2019-06-24T07:28:40Z")

</div>

I am logging all my SQL inline query in elastic search. Now I have the requirement to improve performance of my SQL query. How I will find which query I am executing most. So that I can improve my SQL query. Maybe my whe…

---

## [Coordinating nodes in a cluster](https://discuss.elastic.co/t/coordinating-nodes-in-a-cluster/237001)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 9\
**Last updated:** [June 21, 2020, 12:19pm UTC](https://discuss.elastic.co/t/coordinating-nodes-in-a-cluster/237001 "2020-06-21T12:19:34Z")

</div>

We don’t currently use a balancing node / coordinating nodes, and I have seen that sometimes if a particular node is under load, it slows down the entire server. This is very mysterious to me, as the indices that need to…

---

## [Grok filter in LOGSTASH](https://discuss.elastic.co/t/grok-filter-in-logstash/122245)

<div class="topic-metadata">

**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\
**Replies:** 9\
**Last updated:** [March 3, 2018, 4:55pm UTC](https://discuss.elastic.co/t/grok-filter-in-logstash/122245 "2018-03-03T16:55:15Z")

</div>

Hi, I have trouble with parsing a Tomcat LOG like : 2018-03-02 11:39:06,309| INFO|http-40074-7|com.capgemini.mvne.var.manager.simplicime.ecare.CoordonneesClientManager|Construction des données envoyées en sortie du WS:…

---

## [Set data view format in index template](https://discuss.elastic.co/t/set-data-view-format-in-index-template/307445)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 10\
**Last updated:** [June 25, 2022, 1:40am UTC](https://discuss.elastic.co/t/set-data-view-format-in-index-template/307445 "2022-06-25T01:40:06Z")

</div>

Hi, I have multiple spaces that all reference the same index with an index pattern - metricbeat-\*./ Metricbeat comes with MANY \*.pct fields and I'd like to display them all as percentages rather than numbers. It would …

[Previous page](https://discuss.elastic.co/top.md?page=200&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=202&per_page=50&period=all)
