# Top **URL:** https://discuss.elastic.co/top.md?page=203&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 204 --- ## [String to date time](https://discuss.elastic.co/t/string-to-date-time/57656)
**Author:** [@vandana\_sethi](https://discuss.elastic.co/u/vandana_sethi)\ **Replies:** 9\ **Last updated:** [August 10, 2016, 9:06am UTC](https://discuss.elastic.co/t/string-to-date-time/57656 "2016-08-10T09:06:53Z")
My log pattern is as |other|test|test1|20160808134300 i have chopped these pipe separated value in different fields and have fields like field0 = other field1 = test field2 = test1 field3 = 20160808134300 field… --- ## [Подсветка результатов поиска по полю с фильтром word\_delimiter не правильно работает](https://discuss.elastic.co/t/word-delimiter/170701)
**Author:** [@bio](https://discuss.elastic.co/u/bio)\ **Replies:** 12\ **Last updated:** [March 7, 2019, 2:23pm UTC](https://discuss.elastic.co/t/word-delimiter/170701 "2019-03-07T14:23:12Z")
Добрый день, Есть текст, в котором символы, цифры и буквы смешиваются в одно слово и с помощью фильтра word\_delimiter хотел это разделить, но поломалась подсветка результатов. Настройки индекса и запросы поискаDELETE t… --- ## [Kibana Gone RED from Elastic over indexing or something?](https://discuss.elastic.co/t/kibana-gone-red-from-elastic-over-indexing-or-something/144617)
**Author:** [@Krittapas\_Jewjaitham](https://discuss.elastic.co/u/Krittapas_Jewjaitham)\ **Replies:** 11\ **Last updated:** [August 17, 2018, 7:31am UTC](https://discuss.elastic.co/t/kibana-gone-red-from-elastic-over-indexing-or-something/144617 "2018-08-17T07:31:51Z")
First of all, I'm very new with this kibana and Elastic Search. I'm using it to be search optimization for HPE CM as a search module. And there's a problem that kibana gone RED and freezed. Now the kibana's status is fr… --- ## [Не удается получить информацию о нагрузке на процессор](https://discuss.elastic.co/t/topic/155819)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 12\ **Last updated:** [November 8, 2018, 1:08pm UTC](https://discuss.elastic.co/t/topic/155819 "2018-11-08T13:08:52Z")
Добрый день! Подскажите, пожалуйста, у меня почему-то в версии ES 6.4.3 не корректно отображается информация о текущей нагрузке на CPU, а именно на всех нода данный параметр равен -1. "os": { "timestamp": 1541654835… --- ## [Using serialized doc\_value instead of \_source to improve read latency](https://discuss.elastic.co/t/using-serialized-doc-value-instead-of--source-to-improve-read-latency/23334)
**Author:** [@Itai\_Frenkel](https://discuss.elastic.co/u/Itai_Frenkel)\ **Replies:** 9\ **Last updated:** [April 21, 2015, 9:35am UTC](https://discuss.elastic.co/t/using-serialized-doc-value-instead-of--source-to-improve-read-latency/23334 "2015-04-21T09:35:42Z")
Hi, We are having a performance problem in which for each hit, elasticsearch parses the entire \_source then generates a new Json with only the requested query \_source fields. In order to overcome this issue we wou… --- ## [Kibana did not load properly/Login is currently disabled. Administrators should consult the Kibana logs for more details](https://discuss.elastic.co/t/kibana-did-not-load-properly-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/143043)
**Author:** [@Shree](https://discuss.elastic.co/u/Shree)\ **Replies:** 11\ **Last updated:** [August 7, 2018, 2:22am UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/143043 "2018-08-07T02:22:27Z")
when I opened kibana it's showing like above picture if I reload It shows kibana did not load properly. And my elasticscearch is not running. it showing some error. Please do this needful help. --- ## [Merge\_policy not in settings](https://discuss.elastic.co/t/merge-policy-not-in-settings/5000)
**Author:** [@ruflin\_2](https://discuss.elastic.co/u/ruflin_2)\ **Replies:** 16\ **Last updated:** [August 15, 2011, 12:20pm UTC](https://discuss.elastic.co/t/merge-policy-not-in-settings/5000 "2011-08-15T12:20:21Z")
Hi If I update my merge\_policy settings and then later try to retrieve the settings with the code below, merge\_policy does not appear in the result array. This is the case since ES 0.17.0. curl -XGET 'http://lo… --- ## [Logs are not reflecting in Kibana](https://discuss.elastic.co/t/logs-are-not-reflecting-in-kibana/265684)
**Author:** [@roh689](https://discuss.elastic.co/u/roh689)\ **Replies:** 9\ **Last updated:** [March 3, 2021, 10:25pm UTC](https://discuss.elastic.co/t/logs-are-not-reflecting-in-kibana/265684 "2021-03-03T22:25:33Z")
In our ELK environment, we are not seeing any issues on elasticsearch and Logstash server. We can also see logs are receiving on Logstash side, but it is not reflecting in index on Kibana side. Can anyone suggest what w… --- ## [Geo\_shape problems](https://discuss.elastic.co/t/geo-shape-problems/11076)
**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\ **Replies:** 9\ **Last updated:** [March 11, 2013, 9:29pm UTC](https://discuss.elastic.co/t/geo-shape-problems/11076 "2013-03-11T21:29:13Z")
I'm currently having major issues with geo\_shape. I have about 120000 geojson objects across the Berlin/Brandenburg area. A mix of points, polygons, and linestrings. I've created a polygon query {"geo\_shape… --- ## [Different hosts for local and remote cluster](https://discuss.elastic.co/t/different-hosts-for-local-and-remote-cluster/226737)
**Author:** [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)\ **Replies:** 11\ **Last updated:** [April 15, 2020, 8:50am UTC](https://discuss.elastic.co/t/different-hosts-for-local-and-remote-cluster/226737 "2020-04-15T08:50:36Z")
Hi everyone! I have two clusters, i would like to connect them using remote cluster. I want to connect 2nd to 1st using front address, but internal communication of 1st cluster should be on backend address. I tried with… --- ## [How to use your default defined layer as input for our simple mapbox GL map?](https://discuss.elastic.co/t/how-to-use-your-default-defined-layer-as-input-for-our-simple-mapbox-gl-map/340382)
**Author:** [@jzarei1996](https://discuss.elastic.co/u/jzarei1996)\ **Replies:** 15\ **Last updated:** [August 27, 2023, 1:26pm UTC](https://discuss.elastic.co/t/how-to-use-your-default-defined-layer-as-input-for-our-simple-mapbox-gl-map/340382 "2023-08-27T13:26:02Z")
Hi everyone. We want to create a sample map from the Mapbox GL JS library in our own plugin according to its documentation. We want a simple mode and during the review we found out that your Maps plugin also uses this li… --- ## [Drop\_event on process (metric beat 5.6.2)](https://discuss.elastic.co/t/drop-event-on-process-metric-beat-5-6-2/103238)
**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\ **Replies:** 9\ **Last updated:** [October 12, 2017, 2:34pm UTC](https://discuss.elastic.co/t/drop-event-on-process-metric-beat-5-6-2/103238 "2017-10-12T14:34:00Z")
Hi, This is my config: - module: system metricsets: - process enabled: true period: 60s processes: \['.\*'\] process.cgroups.enabled: false processors: - drop\_event.when.range: system.process.cpu… --- ## [Nested mapping issues](https://discuss.elastic.co/t/nested-mapping-issues/179166)
**Author:** [@yuva\_rajan](https://discuss.elastic.co/u/yuva_rajan)\ **Replies:** 10\ **Last updated:** [May 1, 2019, 11:21am UTC](https://discuss.elastic.co/t/nested-mapping-issues/179166 "2019-05-01T11:21:25Z")
Hi , Below are my mappings PUT \_template/prod { "index\_patterns": \["\*"\], "settings":{ "codec": "best\_compression", "number\_of\_shards": 1, "number\_of\_replicas": 1 }, … --- ## [Lack of memory?](https://discuss.elastic.co/t/lack-of-memory/2931)
**Author:** [@Szymon\_Gwozdz](https://discuss.elastic.co/u/Szymon_Gwozdz)\ **Replies:** 10\ **Last updated:** [April 30, 2010, 7:20pm UTC](https://discuss.elastic.co/t/lack-of-memory/2931 "2010-04-30T19:20:43Z")
Hi! I've lauched 5 ElasticSeach nodes (each on different host) - 2 non-data nodes and 3 data nodes. Then I've started pushing to cluster few GB of data. While doing this I've seen on htop that ES processes are using… --- ## [Cluster health issues with 0.9.0-SNAPSHOT](https://discuss.elastic.co/t/cluster-health-issues-with-0-9-0-snapshot/3114)
**Author:** [@Stephen\_2](https://discuss.elastic.co/u/Stephen_2)\ **Replies:** 12\ **Last updated:** [July 22, 2010, 6:06pm UTC](https://discuss.elastic.co/t/cluster-health-issues-with-0-9-0-snapshot/3114 "2010-07-22T18:06:24Z")
Hey guys, I've been doing some fairly ornate integration testing with my app and ES, and have hit an interesting snag. What I'm doing is creating three nodes and shoving a bunch of data into it, but with a twist --… --- ## [Separate Fields Now Displaying As One Object](https://discuss.elastic.co/t/separate-fields-now-displaying-as-one-object/293950)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 11\ **Last updated:** [January 17, 2022, 3:25pm UTC](https://discuss.elastic.co/t/separate-fields-now-displaying-as-one-object/293950 "2022-01-17T15:25:33Z")
I use Logstash to process our logs and organize relevant fields into objects so that they display together in Kibana. log.source log.format log.time However, after upgrading, I THINK to 7.16, they're now displaying as… --- ## [Not able to create index logstash-\* in elasticsearch 6.2.2](https://discuss.elastic.co/t/not-able-to-create-index-logstash-in-elasticsearch-6-2-2/129627)
**Author:** [@Rajshree\_Shome](https://discuss.elastic.co/u/Rajshree_Shome)\ **Replies:** 19\ **Last updated:** [April 26, 2018, 1:54pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-logstash-in-elasticsearch-6-2-2/129627 "2018-04-26T13:54:01Z")
I have re insatlled elasticsearch 6.2.2 and now i am not able to create index for logstash-\*. GET \_cluster/health { "cluster\_name": "Development", "status": "red", "timed\_out": false, "number\_of\_nodes": 3, "number… --- ## [Kibana Vega : Sum of field of latest unique values](https://discuss.elastic.co/t/kibana-vega-sum-of-field-of-latest-unique-values/326047)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 9\ **Last updated:** [February 23, 2023, 1:57pm UTC](https://discuss.elastic.co/t/kibana-vega-sum-of-field-of-latest-unique-values/326047 "2023-02-23T13:57:07Z")
Problem statement : I have written a Kibana Vega script to show sum of latest balanceusd field having a unique orgid. I am getting balance logs frequently and every latest log has the updated balance. There can be a numb… --- ## [Checking log parsing using the Simulate API](https://discuss.elastic.co/t/checking-log-parsing-using-the-simulate-api/302518)
**Author:** [@aleding](https://discuss.elastic.co/u/aleding)\ **Replies:** 10\ **Last updated:** [April 15, 2022, 11:58pm UTC](https://discuss.elastic.co/t/checking-log-parsing-using-the-simulate-api/302518 "2022-04-15T23:58:17Z")
Disclaimer: As with the OP of the linked thread, I too am learning but the Simulate API is a little confusing to me so apologies for my noobiness. Thank you in advance for your insights and feedback. In this thread ES … --- ## [Upgrade from ES 1.2.x to ES 1.4 or 1.3?](https://discuss.elastic.co/t/upgrade-from-es-1-2-x-to-es-1-4-or-1-3/21525)
**Author:** [@Bhumir\_Jhaveri](https://discuss.elastic.co/u/Bhumir_Jhaveri)\ **Replies:** 16\ **Last updated:** [January 8, 2015, 6:27pm UTC](https://discuss.elastic.co/t/upgrade-from-es-1-2-x-to-es-1-4-or-1-3/21525 "2015-01-08T18:27:27Z")
I am planning to upgrade from ES 1.2.2 to ES 1.4.2 or 1.3.9 or whichever is the most latest (stable) in 1.3 series - so should I go for 1.4 or should stay with 1.3? the reason why I am not thinking about absolute up… --- ## [Problem with search wrong result](https://discuss.elastic.co/t/problem-with-search-wrong-result/133904)
**Author:** [@rokadeaks](https://discuss.elastic.co/u/rokadeaks)\ **Replies:** 15\ **Last updated:** [June 19, 2018, 10:02am UTC](https://discuss.elastic.co/t/problem-with-search-wrong-result/133904 "2018-06-19T10:02:20Z")
I have mapping like : "382:FormattedValue": { "type": "string", "analyzer": "ExportRawAnalyzer", "ignore\_above": 10922 }, "382:Value": { "type": "stri… --- ## [To write a custom code for visualization](https://discuss.elastic.co/t/to-write-a-custom-code-for-visualization/309112)
**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\ **Replies:** 10\ **Last updated:** [July 13, 2022, 3:43pm UTC](https://discuss.elastic.co/t/to-write-a-custom-code-for-visualization/309112 "2022-07-13T15:43:52Z")
I'm writing a custom code in kibana (vega). In which I want show the the total working hours of employe by calculating diffrence from two available fields like (out time - Intime). how can I get that in vega by writing … --- ## [Elasticsearch to Oracle Table](https://discuss.elastic.co/t/elasticsearch-to-oracle-table/251998)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 10\ **Last updated:** [October 14, 2020, 8:28am UTC](https://discuss.elastic.co/t/elasticsearch-to-oracle-table/251998 "2020-10-14T08:28:09Z")
Hello Team I have a requirement where in I have to move selected data from Elasticsearch INDEX to oracle Table {RDBMS} , in real-time. Could you please help me in suggesting the method / examples / links / blogs / op… --- ## [Logstash filtr strange behavior](https://discuss.elastic.co/t/logstash-filtr-strange-behavior/244228)
**Author:** [@masech](https://discuss.elastic.co/u/masech)\ **Replies:** 16\ **Last updated:** [August 11, 2020, 9:09pm UTC](https://discuss.elastic.co/t/logstash-filtr-strange-behavior/244228 "2020-08-11T21:09:49Z")
Hi guys. I noticed that the convert\_datatype option of the Dissect filter has a strange result. Pipeline: input { stdin { } } filter { # split IPv4 address into octets dissect { mapping =\> { … --- ## [Invalid data view without timeFieldName](https://discuss.elastic.co/t/invalid-data-view-without-timefieldname/318046)
**Author:** [@breakingcode](https://discuss.elastic.co/u/breakingcode)\ **Replies:** 10\ **Last updated:** [November 4, 2022, 10:48am UTC](https://discuss.elastic.co/t/invalid-data-view-without-timefieldname/318046 "2022-11-04T10:48:58Z")
Hi, I am trying to configure alerts from Kibana console. I using the option from Stack Management -\> Rules and Connector. I want to create the alert for documents in es index. For example: If I index the document where "… --- ## [How to run multiple conf file continusly in backend](https://discuss.elastic.co/t/how-to-run-multiple-conf-file-continusly-in-backend/133079)
**Author:** [@mamta](https://discuss.elastic.co/u/mamta)\ **Replies:** 10\ **Last updated:** [May 25, 2018, 6:03am UTC](https://discuss.elastic.co/t/how-to-run-multiple-conf-file-continusly-in-backend/133079 "2018-05-25T06:03:02Z")
Hey, I have installed ELK 5.6.8 version on Linux machine in a production environment. I have multiple conf files for each log.Currently I am running conf file from bin# ./logstash -f . I also tried to run from /etc/logs… --- ## [Not able to remove tag from xml](https://discuss.elastic.co/t/not-able-to-remove-tag-from-xml/326771)
**Author:** [@Navya\_04](https://discuss.elastic.co/u/Navya_04)\ **Replies:** 14\ **Last updated:** [March 8, 2023, 8:32am UTC](https://discuss.elastic.co/t/not-able-to-remove-tag-from-xml/326771 "2023-03-08T08:32:22Z")
I am trying to load xml through logstash. I have an unwnated tag which needs to be removed from xml while parsing. Used remove\_tag but not able to remove the tag while indexing to Elasticsearch xml File \ **Author:** [@1506299760](https://discuss.elastic.co/u/1506299760)\ **Replies:** 19\ **Last updated:** [March 3, 2022, 3:15am UTC](https://discuss.elastic.co/t/the-active-thread-always-in-one-datanode-other-datanodes-have-very-few-active-thread-or-no-active-thread/298686 "2022-03-03T03:15:33Z") I have 3 master nodes,6 data nodes and every dataNode has almost same quantity and size data，I export data to dataNode evenly。 when I send requests to do pressure test(my requests is also random) ，I user the command 'GE… --- ## [Setting total shard per node](https://discuss.elastic.co/t/setting-total-shard-per-node/156120)
**Author:** [@Rizal\_Trenggono](https://discuss.elastic.co/u/Rizal_Trenggono)\ **Replies:** 11\ **Last updated:** [November 10, 2018, 9:10am UTC](https://discuss.elastic.co/t/setting-total-shard-per-node/156120 "2018-11-10T09:10:13Z")
Hi, i have 30 data node,3 master node and 1 coordinator node, i want to create 1 index with 30k shard (each node gets 1k shard). i try put mapping shard on coordinator node, response from node is error "Failed to parse… --- ## [Filebeat setup reports missing module/suricata](https://discuss.elastic.co/t/filebeat-setup-reports-missing-module-suricata/356661)
**Author:** [@Jamo](https://discuss.elastic.co/u/Jamo)\ **Replies:** 9\ **Last updated:** [May 1, 2024, 11:41am UTC](https://discuss.elastic.co/t/filebeat-setup-reports-missing-module-suricata/356661 "2024-05-01T11:41:42Z")
Hey folks! :wave: It's my first post here, so please excuse any mistakes I might make. I've started to set up Filebeat, Elastic and Kibana to connect Suricata to Grafana two days ago. Yesterday night at 3am I finally t… --- ## [Indices size and # of shard](https://discuss.elastic.co/t/indices-size-and-of-shard/163278)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 9\ **Last updated:** [January 17, 2019, 9:35pm UTC](https://discuss.elastic.co/t/indices-size-and-of-shard/163278 "2019-01-17T21:35:23Z")
After lot of testing I am going to move to production. Is it ok to have default 5 shard and large indices size 50gig with 150Million documents? cluster I have setup is pretty big 8 node with three master and all 8 node… --- ## [Why does every log use a different format for the Timestamp?](https://discuss.elastic.co/t/why-does-every-log-use-a-different-format-for-the-timestamp/283346)
**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\ **Replies:** 10\ **Last updated:** [September 4, 2021, 9:19pm UTC](https://discuss.elastic.co/t/why-does-every-log-use-a-different-format-for-the-timestamp/283346 "2021-09-04T21:19:40Z")
I am using Stack and Filebeat version 7.13.4 on Windows 10 I have a new log to process and it has a new way to represent the timestamp. As soon as I figure one out, they throw me another This one is starts as: 2021/0… --- ## [How do I write parsers for multiple lines like this?](https://discuss.elastic.co/t/how-do-i-write-parsers-for-multiple-lines-like-this/141887)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 14\ **Last updated:** [August 5, 2018, 7:28am UTC](https://discuss.elastic.co/t/how-do-i-write-parsers-for-multiple-lines-like-this/141887 "2018-08-05T07:28:24Z")
Hi Team, Can someone please help me here for creating parsers? Well my main confusion is and just need a hint how do I parse those multiple lines? ######################## \[2018-07-27 12:52:33\] \[3307\] \[http\_80\_tcp 336… --- ## [Elasticsearch Cluster Status is RED](https://discuss.elastic.co/t/elasticsearch-cluster-status-is-red/274129)
**Author:** [@lls](https://discuss.elastic.co/u/lls)\ **Replies:** 11\ **Last updated:** [June 1, 2021, 12:28am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-status-is-red/274129 "2021-06-01T00:28:34Z")
Hi guys: I need advise to fix the following error after issuing \_cluster/allocation/explain. I did try to fix it by running this \_cluster/reroute?retry\_failed=true but no luck. Appreciate your advise, thanks so much. {… --- ## [Elasticsearch works slow on Azure](https://discuss.elastic.co/t/elasticsearch-works-slow-on-azure/129362)
**Author:** [@Abhinaw](https://discuss.elastic.co/u/Abhinaw)\ **Replies:** 12\ **Last updated:** [April 25, 2018, 6:51am UTC](https://discuss.elastic.co/t/elasticsearch-works-slow-on-azure/129362 "2018-04-25T06:51:51Z")
Hi i have deployed elasticsearch on Azure VM with 28GB RAM size. My database size is 100GB . A query which returns 30K result takes more than 3 minutes. many thanks --- ## [Elasticsearch 7.7 , cpu usage is very high](https://discuss.elastic.co/t/elasticsearch-7-7-cpu-usage-is-very-high/322726)
**Author:** [@gilsagiv](https://discuss.elastic.co/u/gilsagiv)\ **Replies:** 10\ **Last updated:** [January 11, 2023, 1:00pm UTC](https://discuss.elastic.co/t/elasticsearch-7-7-cpu-usage-is-very-high/322726 "2023-01-11T13:00:36Z")
Hi, My server is working on Elasticsearch 7.7, Recently the CPU usage is reaching 100% when Kibana is running. Elasticsearch process CPU usage is very high. GET \_cat/nodes?v=true&s=cpu:desc GET /\_cluster/setti… --- ## [Why are these rollup documents missing an ID?](https://discuss.elastic.co/t/why-are-these-rollup-documents-missing-an-id/194536)
**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\ **Replies:** 10\ **Last updated:** [August 13, 2019, 3:15pm UTC](https://discuss.elastic.co/t/why-are-these-rollup-documents-missing-an-id/194536 "2019-08-13T15:15:29Z")
Hello - I've run into a major problem and would really appreciate an explanation. Thank you for your input. We are using rollups to process metricbeat data for analysis. We have three servers, say A, B and C. Having … --- ## [The stack cannot be started according to the instructions](https://discuss.elastic.co/t/the-stack-cannot-be-started-according-to-the-instructions/327431)
**Author:** [@alexanderzhirov](https://discuss.elastic.co/u/alexanderzhirov)\ **Replies:** 13\ **Last updated:** [March 10, 2023, 4:00pm UTC](https://discuss.elastic.co/t/the-stack-cannot-be-started-according-to-the-instructions/327431 "2023-03-10T16:00:14Z")
I'm trying to run the stack in docker according to this instruction. My .env: # Password for the 'elastic' user (at least 6 characters) ELASTIC\_PASSWORD=elastic # Password for the 'kibana\_system' user (at least 6 char… --- ## [Index size increased in Data Stream, in ES 8.x version](https://discuss.elastic.co/t/index-size-increased-in-data-stream-in-es-8-x-version/320986)
**Author:** [@da-head0](https://discuss.elastic.co/u/da-head0)\ **Replies:** 12\ **Last updated:** [December 12, 2022, 11:52am UTC](https://discuss.elastic.co/t/index-size-increased-in-data-stream-in-es-8-x-version/320986 "2022-12-12T11:52:10Z")
Hello, I have a ES 7.10 version Cluster with normal index, and recently I make a ECK cluster with 8.4.2 version with same data but with data stream. But I figured out in new cluster with data stream, the same data woul… --- ## [Primary balancing](https://discuss.elastic.co/t/primary-balancing/5536)
**Author:** [@jjasinek](https://discuss.elastic.co/u/jjasinek)\ **Replies:** 16\ **Last updated:** [October 18, 2011, 10:45pm UTC](https://discuss.elastic.co/t/primary-balancing/5536 "2011-10-18T22:45:24Z")
shay, I know that shards are usually balanced amongst the nodes in an elasticsearch cluster, but is there a way to balance the primaries. We have a three node cluster with 3 shards and 1 replica. We have observed … --- ## [Log level highlighting in Discover](https://discuss.elastic.co/t/log-level-highlighting-in-discover/376732)
**Author:** [@Matt\_Janda](https://discuss.elastic.co/u/Matt_Janda)\ **Replies:** 17\ **Last updated:** [April 21, 2025, 2:22pm UTC](https://discuss.elastic.co/t/log-level-highlighting-in-discover/376732 "2025-04-21T14:22:17Z")
I’d like to start this topic to understand how Kibana automatically highlights log\_level fields with different background colors. In my case, when I set up Discover, the field in the index is called log\_level. Kibana… --- ## [Different purposes MASTER/DATA/COORDINATING](https://discuss.elastic.co/t/different-purposes-master-data-coordinating/153411)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 11\ **Last updated:** [October 24, 2018, 2:12pm UTC](https://discuss.elastic.co/t/different-purposes-master-data-coordinating/153411 "2018-10-24T14:12:43Z")
hi all, currently I have a cluster configured in this way: SCENARIO 1: 3 MASTER 6 DATA My Filebeat clients send messages directly to DATA nodes. is it correct or not? Is it correct to think that MASTER nodes should… --- ## [FSCrawler and frozen indicies](https://discuss.elastic.co/t/fscrawler-and-frozen-indicies/314997)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 13\ **Last updated:** [October 5, 2022, 8:27am UTC](https://discuss.elastic.co/t/fscrawler-and-frozen-indicies/314997 "2022-10-05T08:27:21Z")
Hello There! I have downloaded ans successfully started FSCrawler for my Elasticsearch cluster. This is how I start an instance: 08:11:23,753 INFO \[f.p.e.c.f.c.BootstrapChecks\] Memory \[Free/Total=Percent\]: HEAP \[83.3… --- ## [I can´t add a second node to my cluster](https://discuss.elastic.co/t/i-can-t-add-a-second-node-to-my-cluster/142223)
**Author:** [@Diego\_Moreno](https://discuss.elastic.co/u/Diego_Moreno)\ **Replies:** 10\ **Last updated:** [August 2, 2018, 12:37am UTC](https://discuss.elastic.co/t/i-can-t-add-a-second-node-to-my-cluster/142223 "2018-08-02T00:37:39Z")
Node 1: cluster.name: my-application node.name: node-1 node.master: true node.data: true network.host: 192.168.x.xxx network.publish\_host: 192.168.x.xxx network.blind\_host: 192.168.x.xxx discovery.zen.ping.unicas… --- ## [Elasticsearch Zen discovery](https://discuss.elastic.co/t/elasticsearch-zen-discovery/132638)
**Author:** [@dudidu](https://discuss.elastic.co/u/dudidu)\ **Replies:** 10\ **Last updated:** [May 22, 2018, 8:00am UTC](https://discuss.elastic.co/t/elasticsearch-zen-discovery/132638 "2018-05-22T08:00:08Z")
We are having an issue with an issue with Ubuntu kernel causing the machine running elasticsearch to hung. While the machine in this state (it only solve after restart) no API call to elasticsearch (or even SSH to the s… --- ## [ELK data note index creating taking to much time](https://discuss.elastic.co/t/elk-data-note-index-creating-taking-to-much-time/118781)
**Author:** [@sateesh](https://discuss.elastic.co/u/sateesh)\ **Replies:** 9\ **Last updated:** [February 8, 2018, 6:47am UTC](https://discuss.elastic.co/t/elk-data-note-index-creating-taking-to-much-time/118781 "2018-02-08T06:47:35Z")
Hi, After restarting elastic search data node, it is taking to much time for creating index, in kibana dash board getting request time out. almost 28hr over still shows red. { "cluster\_name" : "elk-stack", "status" … --- ## [Kibana Dashboard display no content without filtering](https://discuss.elastic.co/t/kibana-dashboard-display-no-content-without-filtering/296256)
**Author:** [@fionachan](https://discuss.elastic.co/u/fionachan)\ **Replies:** 17\ **Last updated:** [February 7, 2022, 11:28am UTC](https://discuss.elastic.co/t/kibana-dashboard-display-no-content-without-filtering/296256 "2022-02-07T11:28:46Z")
Hi, is there a way to make the table in the dashboard shows a sentence like "please select", after filtering show the data? --- ## [Universal Profiling is not working after Upgrade 8.9.0 to 8.10.3](https://discuss.elastic.co/t/universal-profiling-is-not-working-after-upgrade-8-9-0-to-8-10-3/344928)
**Author:** [@Nabeel\_Ahmed\_NAK](https://discuss.elastic.co/u/Nabeel_Ahmed_NAK)\ **Replies:** 11\ **Last updated:** [October 26, 2023, 9:24am UTC](https://discuss.elastic.co/t/universal-profiling-is-not-working-after-upgrade-8-9-0-to-8-10-3/344928 "2023-10-26T09:24:35Z")
Hi All I have upgraded Elastic Search from 8.9.0 to 8.10.3. It was working fine previously. After upgrade, Universal Profiling is not working. I have also followed this guide Upgrade Universal Profiling | Elastic Obse… --- ## [Help with error -](https://discuss.elastic.co/t/help-with-error/78962)
**Author:** [@Sharat\_Jagannath](https://discuss.elastic.co/u/Sharat_Jagannath)\ **Replies:** 10\ **Last updated:** [March 18, 2017, 2:46am UTC](https://discuss.elastic.co/t/help-with-error/78962 "2017-03-18T02:46:37Z")
getting this error when i query in elasticsearch 5.2.0 failed to parse date field \[afas\] with format \[strict\_date\_optional\_time||epoch\_millis\] Query- { "from": "0", "size": "10", "query": { "bool": { "filter"… --- ## [ES failed to connect to master node](https://discuss.elastic.co/t/es-failed-to-connect-to-master-node/344986)
**Author:** [@Genesys\_Bagus](https://discuss.elastic.co/u/Genesys_Bagus)\ **Replies:** 9\ **Last updated:** [October 18, 2023, 6:42am UTC](https://discuss.elastic.co/t/es-failed-to-connect-to-master-node/344986 "2023-10-18T06:42:08Z")
hi team, i have 3 nodes elasticsearch cluster, but at one time elasticsearch couldn't function properly because the master node left (reason = shutdown) \ \[2023-09-13T01:14:28,394\]\[INFO \]\[o.e.n.Node \] … [Previous page](https://discuss.elastic.co/top.md?page=202&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=204&per_page=50&period=all)