# Top **URL:** https://discuss.elastic.co/top.md?page=210&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 211 --- ## [After updating Java APM agent from 1.36 to 1.37 context propagation in reactor is no longer working as expected](https://discuss.elastic.co/t/after-updating-java-apm-agent-from-1-36-to-1-37-context-propagation-in-reactor-is-no-longer-working-as-expected/332810)
**Author:** [@svenrienstra](https://discuss.elastic.co/u/svenrienstra)\ **Replies:** 11\ **Last updated:** [June 5, 2023, 9:25am UTC](https://discuss.elastic.co/t/after-updating-java-apm-agent-from-1-36-to-1-37-context-propagation-in-reactor-is-no-longer-working-as-expected/332810 "2023-06-05T09:25:59Z")
I have an issue with the Java APM agent, after updating from 1.36 to 1.37 or 1.38 one of my plugins stopped working. I have a plugin which adds instrumentation for the r2dbc postgres driver. The relevant code of this plu… --- ## [Restore snapshot checksum problem (Troubleshooting corruption)](https://discuss.elastic.co/t/restore-snapshot-checksum-problem-troubleshooting-corruption/369764)
**Author:** [@IgorSim](https://discuss.elastic.co/u/IgorSim)\ **Replies:** 22\ **Last updated:** [April 1, 2025, 5:05pm UTC](https://discuss.elastic.co/t/restore-snapshot-checksum-problem-troubleshooting-corruption/369764 "2025-04-01T17:05:55Z")
Hi, i'm encountering a problem when restoring ES snapshot into an empty cluster, some of the indices can't be restored due to org.apache.lucene.index.CorruptIndexException checksum failed (i'm using ES version 8.10) I'm… --- ## [Need help setting up a second node](https://discuss.elastic.co/t/need-help-setting-up-a-second-node/375785)
**Author:** [@hairless\_mess](https://discuss.elastic.co/u/hairless_mess)\ **Replies:** 25\ **Last updated:** [March 26, 2025, 10:53am UTC](https://discuss.elastic.co/t/need-help-setting-up-a-second-node/375785 "2025-03-26T10:53:13Z")
Hello! I have a server with Elasticsearch, Kibana and a fleet-server agent installed. I use all the default certificates created in the beginning (automatic security configuration I believe it's called?). I would like… --- ## [Duplication Due to rollover policy in kibana,data coming from logstash pipeline](https://discuss.elastic.co/t/duplication-due-to-rollover-policy-in-kibana-data-coming-from-logstash-pipeline/319959)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 9\ **Last updated:** [December 5, 2022, 5:52pm UTC](https://discuss.elastic.co/t/duplication-due-to-rollover-policy-in-kibana-data-coming-from-logstash-pipeline/319959 "2022-12-05T17:52:25Z")
Hello All, I am ingesting data into a rollover index. The data comes from perl scripts running every 15 min,20 min,4hour,12 hour,16 hour etc and gives updates on previously ingested events through doc\_as\_upsert used in … --- ## [I lose entries when using the Watcher Index Action](https://discuss.elastic.co/t/i-lose-entries-when-using-the-watcher-index-action/151184)
**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\ **Replies:** 9\ **Last updated:** [October 11, 2018, 12:43pm UTC](https://discuss.elastic.co/t/i-lose-entries-when-using-the-watcher-index-action/151184 "2018-10-11T12:43:43Z")
Hi, i want to build a warning system if there are too many failed logins. I want to index the entries, which appear in auth.log into a new index. I build an index with input { file { path =\> "/var/log/auth.… --- ## [Error in Creating Elastic Config file - JAVA - Springboot](https://discuss.elastic.co/t/error-in-creating-elastic-config-file-java-springboot/356542)
**Author:** [@Priyam\_Omer](https://discuss.elastic.co/u/Priyam_Omer)\ **Replies:** 10\ **Last updated:** [April 27, 2024, 10:05pm UTC](https://discuss.elastic.co/t/error-in-creating-elastic-config-file-java-springboot/356542 "2024-04-27T22:05:31Z")
package com.example.springbootelasticseach; import org.springframework.context.annotation.Configuration; import org.springframework.data.elasticsearch.client.ClientConfiguration; import org.springframework.data.elastics… --- ## [Datafeed \[datafeed-packetbeat\_dns\_tunneling\] cannot retrieve data because no index matches datafeed's indices \[packetbeat-\*\]](https://discuss.elastic.co/t/datafeed-datafeed-packetbeat-dns-tunneling-cannot-retrieve-data-because-no-index-matches-datafeeds-indices-packetbeat/334356)
**Author:** [@A113n](https://discuss.elastic.co/u/A113n)\ **Replies:** 15\ **Last updated:** [June 12, 2023, 2:07pm UTC](https://discuss.elastic.co/t/datafeed-datafeed-packetbeat-dns-tunneling-cannot-retrieve-data-because-no-index-matches-datafeeds-indices-packetbeat/334356 "2023-06-12T14:07:10Z")
Hi folks I have been searching high and low regarding this error and I am very new to the ELK stack. ELK 8.7.1, using Elastic Agents on clients. When I try to enable the ML job packetbeat\_dns\_tunneling it fails with t… --- ## [Logstash - grokfilter is successful using grokdebug, but fails in live](https://discuss.elastic.co/t/logstash-grokfilter-is-successful-using-grokdebug-but-fails-in-live/280829)
**Author:** [@One\_Punch](https://discuss.elastic.co/u/One_Punch)\ **Replies:** 13\ **Last updated:** [August 9, 2021, 7:50pm UTC](https://discuss.elastic.co/t/logstash-grokfilter-is-successful-using-grokdebug-but-fails-in-live/280829 "2021-08-09T19:50:05Z")
Hello, im integratin filebeats and logstash, sample grok pattern works in grokdebug but throwing grokfailure in logstash Message: \[2m2021-08-09 15:50:07.850 \[0;39m \[32m INFO \[0;39m \[35m1 \[0;39m \[2m--- \[0;39m \[2m\[ni… --- ## [Reindexing via scan search type](https://discuss.elastic.co/t/reindexing-via-scan-search-type/5164)
**Author:** [@Curtis\_Caravone](https://discuss.elastic.co/u/Curtis_Caravone)\ **Replies:** 13\ **Last updated:** [August 16, 2011, 11:48pm UTC](https://discuss.elastic.co/t/reindexing-via-scan-search-type/5164 "2011-08-16T23:48:44Z")
Hey, Sorry if this has already been answered... When executing a "scan" search type query, what happens to documents which have been indexed since the scroll started? Do they get added to the eventual result set o… --- ## [Reverse geo distance search](https://discuss.elastic.co/t/reverse-geo-distance-search/263524)
**Author:** [@Fatih\_Kurnaz](https://discuss.elastic.co/u/Fatih_Kurnaz)\ **Replies:** 9\ **Last updated:** [February 24, 2021, 10:30am UTC](https://discuss.elastic.co/t/reverse-geo-distance-search/263524 "2021-02-24T10:30:34Z")
Hi everyone; There are 2 indices at my system. One of them is people and another one is houses. There is location criteria for each person at people indice like this. { "locationName": "london", "distance": 1,… --- ## [Advice for implementing a secure graph index with ElasticSearch](https://discuss.elastic.co/t/advice-for-implementing-a-secure-graph-index-with-elasticsearch/16176)
**Author:** [@Jeff\_Kunkle](https://discuss.elastic.co/u/Jeff_Kunkle)\ **Replies:** 9\ **Last updated:** [June 30, 2014, 6:44pm UTC](https://discuss.elastic.co/t/advice-for-implementing-a-secure-graph-index-with-elasticsearch/16176 "2014-06-30T18:44:21Z")
I've been trying to figure out how I can index a graph data structure using ElasticSearch and could really use some advice from someone more knowledgeable than me. First, let me explain the challenge. The graph model… --- ## [Conditional statements in logstash.conf](https://discuss.elastic.co/t/conditional-statements-in-logstash-conf/192108)
**Author:** [@griffer98](https://discuss.elastic.co/u/griffer98)\ **Replies:** 10\ **Last updated:** [August 6, 2019, 6:35pm UTC](https://discuss.elastic.co/t/conditional-statements-in-logstash-conf/192108 "2019-08-06T18:35:22Z")
I am parsing xml documents but there are different types with different names. Each type of document has different tags so each document will require different xpath expressions. What I want to do is write a conditional … --- ## [\[Ann\] Elasticsearch Image Plugin 1.0.0 released](https://discuss.elastic.co/t/ann-elasticsearch-image-plugin-1-0-0-released/16170)
**Author:** [@Kevin\_Wang](https://discuss.elastic.co/u/Kevin_Wang)\ **Replies:** 10\ **Last updated:** [December 12, 2014, 7:26am UTC](https://discuss.elastic.co/t/ann-elasticsearch-image-plugin-1-0-0-released/16170 "2014-12-12T07:26:46Z")
Hi, I've released the first version of Elasticsearch Image Plugin. It's an Content Based Image Retrieval Plugin for Elasticsearch using LIRE (Lucene Image Retrieval). https://github.com/kzwang/elasticsearch-ima… --- ## [How to achieve Query Performance](https://discuss.elastic.co/t/how-to-achieve-query-performance/13784)
**Author:** [@Giri\_M](https://discuss.elastic.co/u/Giri_M)\ **Replies:** 10\ **Last updated:** [October 6, 2013, 8:33am UTC](https://discuss.elastic.co/t/how-to-achieve-query-performance/13784 "2013-10-06T08:33:56Z")
Hi All, We have migrated from solr(3.6) to es(0.20.5). We will create nearly 80 indexes per day with total size as ~300GB. Among the 80 indexes one index size is 30 to 40GB(150 millions records ) , some ind… --- ## [When I add a new node, the shard will rebalance. Will there be a delay in inserting and updating data at this time? What is the approximate time? How does this rebalance work and what is the principle?](https://discuss.elastic.co/t/when-i-add-a-new-node-the-shard-will-rebalance-will-there-be-a-delay-in-inserting-and-updating-data-at-this-time-what-is-the-approximate-time-how-does-this-rebalance-work-and-what-is-the-principle/224100)
**Author:** [@Liyes](https://discuss.elastic.co/u/Liyes)\ **Replies:** 11\ **Last updated:** [March 21, 2020, 8:39am UTC](https://discuss.elastic.co/t/when-i-add-a-new-node-the-shard-will-rebalance-will-there-be-a-delay-in-inserting-and-updating-data-at-this-time-what-is-the-approximate-time-how-does-this-rebalance-work-and-what-is-the-principle/224100 "2020-03-21T08:39:44Z")
When I add a new node, the shard will rebalance. The primary shard may move to the new Node. Will there be a delay in inserting and updating data at this time? What is the approximate time? How does this rebalance work a… --- ## [Need title/name of file for logstash ingestion](https://discuss.elastic.co/t/need-title-name-of-file-for-logstash-ingestion/211308)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 11\ **Last updated:** [January 22, 2020, 9:22pm UTC](https://discuss.elastic.co/t/need-title-name-of-file-for-logstash-ingestion/211308 "2020-01-22T21:22:13Z")
Hello, I am trying to get part of the file names for ingestion for each record, however, I am ingesting multiple files using "cat /filespath/ | /logstashpath/ -f /logstashconfig/" command. The reason i am running it lik… --- ## [Errors with filebeat when trying to integrate any windows integration logs with the agent](https://discuss.elastic.co/t/errors-with-filebeat-when-trying-to-integrate-any-windows-integration-logs-with-the-agent/380768)
**Author:** [@v\_i\_x\_x](https://discuss.elastic.co/u/v_i_x_x)\ **Replies:** 26\ **Last updated:** [August 7, 2025, 1:50pm UTC](https://discuss.elastic.co/t/errors-with-filebeat-when-trying-to-integrate-any-windows-integration-logs-with-the-agent/380768 "2025-08-07T13:50:18Z")
Hello everyone, I need some help regarding what's going on I setup my Elasticsearch + fleet server + kibana with a ubuntu machine. I added a windows machine with elastic agent. (Interation ElasticDefend =\> I can see al… --- ## [Kibana text field in discover but missing in lens table](https://discuss.elastic.co/t/kibana-text-field-in-discover-but-missing-in-lens-table/354393)
**Author:** [@chowpay](https://discuss.elastic.co/u/chowpay)\ **Replies:** 9\ **Last updated:** [March 2, 2024, 8:39am UTC](https://discuss.elastic.co/t/kibana-text-field-in-discover-but-missing-in-lens-table/354393 "2024-03-02T08:39:44Z")
I'm on Kibana 7.16 When I'm in discover I can see this text field: I want the field inside of a table, but when I go to lens to try and create the table it shows up in an empty field: In discover his is the field… --- ## [Unable to recover my cluster](https://discuss.elastic.co/t/unable-to-recover-my-cluster/333000)
**Author:** [@Ashu\_Mahajan](https://discuss.elastic.co/u/Ashu_Mahajan)\ **Replies:** 12\ **Last updated:** [May 10, 2023, 10:58pm UTC](https://discuss.elastic.co/t/unable-to-recover-my-cluster/333000 "2023-05-10T22:58:56Z")
We moved our data to new version of elasticsearch. The new cluster have 3 master, 3 hot and 3 warm nodes. Everything was working fine till this morning and all of a cluster health went red. After looking at it further, I… --- ## [Add Field In Alter Plugin Not Showing values inside field instead showing field name](https://discuss.elastic.co/t/add-field-in-alter-plugin-not-showing-values-inside-field-instead-showing-field-name/209492)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 14\ **Last updated:** [November 27, 2019, 4:20am UTC](https://discuss.elastic.co/t/add-field-in-alter-plugin-not-showing-values-inside-field-instead-showing-field-name/209492 "2019-11-27T04:20:33Z")
Hi have created the following code using Alter plugin because the mutate plugin won't work in my logstash server. filter { date{match =\> \["REQUEST\_TIMESTAMP","yyyy-MM-dd HH:mm:ss"\]} alter { add\_field =\> { "\[loc… --- ## [No matching index found for arcsight-\*](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280)
**Author:** [@jagan](https://discuss.elastic.co/u/jagan)\ **Replies:** 13\ **Last updated:** [November 27, 2018, 10:22am UTC](https://discuss.elastic.co/t/no-matching-index-found-for-arcsight/158280 "2018-11-27T10:22:00Z")
HI mates, i started arcsight module to pull the data and found the index created in kibana with dashboards but none of the dashboards are accessible.When try to open the dashboard i got the error as: no matching index f… --- ## [Create a field based on the values from future log](https://discuss.elastic.co/t/create-a-field-based-on-the-values-from-future-log/234093)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 16\ **Last updated:** [May 26, 2020, 6:49am UTC](https://discuss.elastic.co/t/create-a-field-based-on-the-values-from-future-log/234093 "2020-05-26T06:49:51Z")
My use case is like this: I have to create a data table from an index. The value of one of the column of the table is based on the data from another field of the same index in the next 5 seconds. Is it possible to do s… --- ## [Logstash output traffic significantly higher than input (minimal transformations) + TCP RST](https://discuss.elastic.co/t/logstash-output-traffic-significantly-higher-than-input-minimal-transformations-tcp-rst/378868)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 23\ **Last updated:** [June 9, 2025, 1:38pm UTC](https://discuss.elastic.co/t/logstash-output-traffic-significantly-higher-than-input-minimal-transformations-tcp-rst/378868 "2025-06-09T13:38:56Z")
Hi, I'm investigating a situation where Logstash receives a certain amount of data, but the traffic sent from Logstash to Elasticsearch is significantly larger, even though I perform minimal transformations. Setup Inp… --- ## [Unnecessary Cache Eviction Explained](https://discuss.elastic.co/t/unnecessary-cache-eviction-explained/19915)
**Author:** [@Philippe\_Laflamme](https://discuss.elastic.co/u/Philippe_Laflamme)\ **Replies:** 9\ **Last updated:** [September 23, 2014, 4:22pm UTC](https://discuss.elastic.co/t/unnecessary-cache-eviction-explained/19915 "2014-09-23T16:22:15Z")
Hi, I've recently posted a question regarding mysterious field data cache eviction\[1\]: ES is evicting field data cache entries even though it's nowhere near the limit I've set. In an unrelated post, someone fou… --- ## [OutOfMemoryError after index throttling](https://discuss.elastic.co/t/outofmemoryerror-after-index-throttling/20157)
**Author:** [@Bernhard\_Berger](https://discuss.elastic.co/u/Bernhard_Berger)\ **Replies:** 15\ **Last updated:** [October 13, 2014, 2:59pm UTC](https://discuss.elastic.co/t/outofmemoryerror-after-index-throttling/20157 "2014-10-13T14:59:36Z")
My application write bulk updates the whole time in an Elasticsearch index (index size: ~200,000 docs, 35 MB, shards: 3\*2; segment count ~35). My cluster has 3 nodes with each 32 GB RAM, ES\_HEAP\_SIZE=16g, Elasticsea… --- ## [Sending data to Multiple elasticsearch containers](https://discuss.elastic.co/t/sending-data-to-multiple-elasticsearch-containers/270532)
**Author:** [@safura\_zaheer](https://discuss.elastic.co/u/safura_zaheer)\ **Replies:** 10\ **Last updated:** [April 23, 2021, 7:58am UTC](https://discuss.elastic.co/t/sending-data-to-multiple-elasticsearch-containers/270532 "2021-04-23T07:58:00Z")
Hi all, I am having 3 docker containers of elasticsearch running on a single host on different ports, Now I want to send data to all the 3 containers so that I don't have any single point of failure . What are the diff… --- ## [Request spanning across multiple packages are not consolidated into a single transaction - Java agent](https://discuss.elastic.co/t/request-spanning-across-multiple-packages-are-not-consolidated-into-a-single-transaction-java-agent/166970)
**Author:** [@annrekh](https://discuss.elastic.co/u/annrekh)\ **Replies:** 9\ **Last updated:** [February 15, 2019, 5:42pm UTC](https://discuss.elastic.co/t/request-spanning-across-multiple-packages-are-not-consolidated-into-a-single-transaction-java-agent/166970 "2019-02-15T17:42:32Z")
APM Server version: 6.5.0 APM Agent language and version: Java Agent 1.3.0 Ours is a application with multiple modules residing in different packages ,we use web services where each HTTP request spans across different … --- ## [Need help about starting logstash-8.11.2](https://discuss.elastic.co/t/need-help-about-starting-logstash-8-11-2/349125)
**Author:** [@AlexLWei](https://discuss.elastic.co/u/AlexLWei)\ **Replies:** 13\ **Last updated:** [December 12, 2023, 8:12pm UTC](https://discuss.elastic.co/t/need-help-about-starting-logstash-8-11-2/349125 "2023-12-12T20:12:08Z")
I installed Logstash by downloading and unzipping the zip file from the official website and it occurs an error about JDK , Using bundled JDK: /opt/logstash-8.11.2/jdk Unrecognized VM option 'UseConcMarkSweepGC' Erro… --- ## [How do I setup log correlation when using extension layers?](https://discuss.elastic.co/t/how-do-i-setup-log-correlation-when-using-extension-layers/320309)
**Author:** [@wjensen-godaddy](https://discuss.elastic.co/u/wjensen-godaddy)\ **Replies:** 11\ **Last updated:** [December 2, 2022, 8:38pm UTC](https://discuss.elastic.co/t/how-do-i-setup-log-correlation-when-using-extension-layers/320309 "2022-12-02T20:38:10Z")
Hi! I'm using the following two extension layers: arn:aws:lambda:us-west-2:267093732750:layer:elastic-apm-extension-ver-1-0-2-x86\_64:1, arn:aws:lambda:us-west-2:267093732750:layer:elastic-apm-node-ver-3-38-0:1 The APM … --- ## [Any plans for manual instrumentation (java)?](https://discuss.elastic.co/t/any-plans-for-manual-instrumentation-java/158245)
**Author:** [@JohanRask](https://discuss.elastic.co/u/JohanRask)\ **Replies:** 9\ **Last updated:** [November 27, 2018, 3:13pm UTC](https://discuss.elastic.co/t/any-plans-for-manual-instrumentation-java/158245 "2018-11-27T15:13:32Z")
Hi, I read through the supported technologies page, and for us there is a lot of things missing to even get started, we have a variety of "weird" old and new libs for external communication and lots of different systems… --- ## [Search by distance and getting the actual distance](https://discuss.elastic.co/t/search-by-distance-and-getting-the-actual-distance/5326)
**Author:** [@Matthias\_Nothhaft](https://discuss.elastic.co/u/Matthias_Nothhaft)\ **Replies:** 12\ **Last updated:** [April 27, 2012, 9:13am UTC](https://discuss.elastic.co/t/search-by-distance-and-getting-the-actual-distance/5326 "2012-04-27T09:13:34Z")
Hi, I'm trying to use elasticsearch for geo location search. It works fine so using a filtered query and the geo\_distance filter. What I miss in the search result is the distance between "my location" and each of … --- ## [ELK Architecture Distribution for Hardware to Achieve high availability](https://discuss.elastic.co/t/elk-architecture-distribution-for-hardware-to-achieve-high-availability/384936)
**Author:** [@Ammar\_Mostafa](https://discuss.elastic.co/u/Ammar_Mostafa)\ **Replies:** 16\ **Last updated:** [February 11, 2026, 9:22am UTC](https://discuss.elastic.co/t/elk-architecture-distribution-for-hardware-to-achieve-high-availability/384936 "2026-02-11T09:22:20Z")
I want to know how to distribute the nodes VMs across the physical servers to achieve HA my cluster will be contain of these specs below and I want to make something like this --- ## [Logstash is sending variables to elasticsearch](https://discuss.elastic.co/t/logstash-is-sending-variables-to-elasticsearch/244082)
**Author:** [@shreddoctor](https://discuss.elastic.co/u/shreddoctor)\ **Replies:** 10\ **Last updated:** [August 7, 2020, 3:19pm UTC](https://discuss.elastic.co/t/logstash-is-sending-variables-to-elasticsearch/244082 "2020-08-07T15:19:49Z")
I have an issue where logstash is sending the variables to elasticsearch instead of enumerating the contents of the variable. The variables in question are coming from filebeat and I'm using these variables to create 2 d… --- ## [View Query in PostgreSQL agent in dashboard](https://discuss.elastic.co/t/view-query-in-postgresql-agent-in-dashboard/358854)
**Author:** [@Fernandoc4d](https://discuss.elastic.co/u/Fernandoc4d)\ **Replies:** 13\ **Last updated:** [May 7, 2024, 3:08pm UTC](https://discuss.elastic.co/t/view-query-in-postgresql-agent-in-dashboard/358854 "2024-05-07T15:08:48Z")
Hi community I need to obtain in a dashboard, two specific queries to the databases of all the agents from which I receive data (for this purpose it is this entire project among other things for which I have gotten invo… --- ## [Registry HTTP Endpoint?](https://discuss.elastic.co/t/registry-http-endpoint/128602)
**Author:** [@frioux](https://discuss.elastic.co/u/frioux)\ **Replies:** 13\ **Last updated:** [May 3, 2018, 11:30am UTC](https://discuss.elastic.co/t/registry-http-endpoint/128602 "2018-05-03T11:30:58Z")
We have some fairly involved monitoring built on top of reading the registry and then inspecting the files at the offset. It's pretty great, but it means that we could be up to registry\_flush behind. This isn't a huge … --- ## [Elasticsearch / nested values (Kibana behind)](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522)
**Author:** [@tmanta7](https://discuss.elastic.co/u/tmanta7)\ **Replies:** 11\ **Last updated:** [December 4, 2013, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522 "2013-12-04T10:23:00Z")
Hello guys, I'm working to integrate nested values in Kibana but I'm facing an issue with the data selected. To detail my issue, here is my structure: { "mappings" : { "fkv" : { "… --- ## [Field merge](https://discuss.elastic.co/t/field-merge/221165)
**Author:** [@111291](https://discuss.elastic.co/u/111291)\ **Replies:** 9\ **Last updated:** [February 28, 2020, 7:24am UTC](https://discuss.elastic.co/t/field-merge/221165 "2020-02-28T07:24:24Z")
Hello, Please tell me what is my mistake? grok { match =\> { "message" =\> \["%{INT:Min}:%{BASE10NUM:Sec}-%{INT:Duration},(%{WORD:Event}|%{SPACE:Event}),%{INT:Level}"\] } match =\> { "log.file.path" =\> \["%{INT:T… --- ## [Duplicate Y-Axis value on number](https://discuss.elastic.co/t/duplicate-y-axis-value-on-number/281790)
**Author:** [@Celiken](https://discuss.elastic.co/u/Celiken)\ **Replies:** 12\ **Last updated:** [August 19, 2021, 11:51am UTC](https://discuss.elastic.co/t/duplicate-y-axis-value-on-number/281790 "2021-08-19T11:51:18Z")
Hi, I'm trying to create a vertical bar visualizations, but since the Y-axis range isn't big, it creates some weird things. I want to visualize the max value of invalidBatteryCount over time, this value can be in the r… --- ## [Python client APM very slow when local list variable is very large](https://discuss.elastic.co/t/python-client-apm-very-slow-when-local-list-variable-is-very-large/309935)
**Author:** [@Kohlman](https://discuss.elastic.co/u/Kohlman)\ **Replies:** 9\ **Last updated:** [July 21, 2022, 8:16pm UTC](https://discuss.elastic.co/t/python-client-apm-very-slow-when-local-list-variable-is-very-large/309935 "2022-07-21T20:16:13Z")
I've deleted only the relevant portions of your template. APM Agent language and version: Python 6.7.2 Steps to reproduce: Create a very large list. In our case, we had a list of objects. One of the property's was a… --- ## [Deprecated setting, where is it?](https://discuss.elastic.co/t/deprecated-setting-where-is-it/171336)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 13\ **Last updated:** [March 8, 2019, 11:16am UTC](https://discuss.elastic.co/t/deprecated-setting-where-is-it/171336 "2019-03-08T11:16:35Z")
I never had 5.x version. started from 6.2. now I am on 6.6.1 I still get following in my log "deprecation.log" Deprecated field \[template\] used, replaced by \[index\_patterns\] Where do I fix this? --- ## [Regarding Bulk Indexing Requests](https://discuss.elastic.co/t/regarding-bulk-indexing-requests/357034)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 17\ **Last updated:** [April 10, 2024, 1:55pm UTC](https://discuss.elastic.co/t/regarding-bulk-indexing-requests/357034 "2024-04-10T13:55:42Z")
Hi, Is there a way I can view the size (number of documents) of a bulk index request once it hits the elasticsearch queue? I want to estimate how efficiently logstash is batching requests that it pushes to elasticsearch… --- ## [Logstash parsing in JSON](https://discuss.elastic.co/t/logstash-parsing-in-json/249659)
**Author:** [@Sivajanani](https://discuss.elastic.co/u/Sivajanani)\ **Replies:** 11\ **Last updated:** [September 30, 2020, 3:14pm UTC](https://discuss.elastic.co/t/logstash-parsing-in-json/249659 "2020-09-30T15:14:56Z")
Hello, I have a json in the following format. {"group" : \[{"name":"group1","tag":\[{"name":"tag1"},{"name":"tag2"},{"name":"tag3"},{"name":"tag4"}\]}\],"association" : } Using Logstash config I have to parse tag field an… --- ## [How to bucket aggregate on document without any numeric field](https://discuss.elastic.co/t/how-to-bucket-aggregate-on-document-without-any-numeric-field/297375)
**Author:** [@pandu](https://discuss.elastic.co/u/pandu)\ **Replies:** 15\ **Last updated:** [February 20, 2022, 5:11pm UTC](https://discuss.elastic.co/t/how-to-bucket-aggregate-on-document-without-any-numeric-field/297375 "2022-02-20T17:11:47Z")
I have an index that has documents representing calls. Every document is a call. I want to report average calls per day from every customer. The information needs to be bucketed by week. How do I do that? There is no num… --- ## [Metricbeat AWS Module - billing metricset](https://discuss.elastic.co/t/metricbeat-aws-module-billing-metricset/263223)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 10\ **Last updated:** [February 11, 2021, 12:27pm UTC](https://discuss.elastic.co/t/metricbeat-aws-module-billing-metricset/263223 "2021-02-11T12:27:42Z")
Good day, I'm currently trying to collect billing information from AWS by using the billing metricset of the Metricbeat AWS module, but the received data does not contain any billing information. my metricbeat.yml: me… --- ## [Error in structuring log file](https://discuss.elastic.co/t/error-in-structuring-log-file/158120)
**Author:** [@Sripal](https://discuss.elastic.co/u/Sripal)\ **Replies:** 10\ **Last updated:** [December 4, 2018, 1:58pm UTC](https://discuss.elastic.co/t/error-in-structuring-log-file/158120 "2018-12-04T13:58:32Z")
Hi all, I'm new to ELK stack. I'm trying to read the system error log, but i am unable to achieve. Here are my exploration. SysErr Lof file sample: \[9/3/18 12:19:34:644 IST\] 00000ff6 SystemErr R at org.apache.cx… --- ## [Elastic\_Log\_Kibana\_v7.17.15](https://discuss.elastic.co/t/elastic-log-kibana-v7-17-15/349732)
**Author:** [@sossoulokoariel](https://discuss.elastic.co/u/sossoulokoariel)\ **Replies:** 18\ **Last updated:** [December 21, 2023, 6:17pm UTC](https://discuss.elastic.co/t/elastic-log-kibana-v7-17-15/349732 "2023-12-21T18:17:30Z")
Welcome to Elastic's Discussion Forums! I find myself confronted with this error in my log kibana. When I connect to the interface I get the message: "Kibana is not yet". Even though all my services are active. Please he… --- ## [Does Workplace search 7.12 confluence server supports only these versions of confluence server?](https://discuss.elastic.co/t/does-workplace-search-7-12-confluence-server-supports-only-these-versions-of-confluence-server/273146)
**Author:** [@vjerts](https://discuss.elastic.co/u/vjerts)\ **Replies:** 9\ **Last updated:** [May 24, 2021, 10:02am UTC](https://discuss.elastic.co/t/does-workplace-search-7-12-confluence-server-supports-only-these-versions-of-confluence-server/273146 "2021-05-24T10:02:23Z")
As documentation for Elastic workplace search states: Workplace Search supports Confluence Server versions: 7.2.1 , 6.15.x So basically if i have confluence server version 7.11.1 i should use Custom API source instead … --- ## [How to find problematic search which contributes to high load and CPU usages?](https://discuss.elastic.co/t/how-to-find-problematic-search-which-contributes-to-high-load-and-cpu-usages/254091)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 10\ **Last updated:** [November 20, 2020, 3:21pm UTC](https://discuss.elastic.co/t/how-to-find-problematic-search-which-contributes-to-high-load-and-cpu-usages/254091 "2020-11-20T15:21:51Z")
Recently our cluster has seen spikes of high load on some nodes. My hunch is that it has to do with some specific searches, but how do you determine which searches are causing it? I have seen some posts here saying that… --- ## [How to approach Indexing for a newbie?](https://discuss.elastic.co/t/how-to-approach-indexing-for-a-newbie/15237)
**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\ **Replies:** 10\ **Last updated:** [January 15, 2014, 3:47pm UTC](https://discuss.elastic.co/t/how-to-approach-indexing-for-a-newbie/15237 "2014-01-15T15:47:37Z")
I have a project that used an old search engine and I would like to move things to ElasticSearch. I have been doing some reading, and I wanted some perspective on how to approach the problem. - I have bundles(folder… --- ## [Xml filter does not work](https://discuss.elastic.co/t/xml-filter-does-not-work/166047)
**Author:** [@Necus](https://discuss.elastic.co/u/Necus)\ **Replies:** 12\ **Last updated:** [January 31, 2019, 8:45pm UTC](https://discuss.elastic.co/t/xml-filter-does-not-work/166047 "2019-01-31T20:45:54Z")
Hi, Do you have any idea why this xml filter does not work? :slight\_smile: filter{ if \[type\] == "abc" { dissect { mapping =\> { message =\> '\<%{abc}\>%{syslog\_timestamp} %{+syslog\_timestamp} %{+syslog\_timestamp} %{lo… [Previous page](https://discuss.elastic.co/top.md?page=209&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=211&per_page=50&period=all)