# Top **URL:** https://discuss.elastic.co/top.md?page=213&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 214 --- ## [ES node out of memory: Java heap space](https://discuss.elastic.co/t/es-node-out-of-memory-java-heap-space/262787)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 15\ **Last updated:** [February 2, 2021, 9:56am UTC](https://discuss.elastic.co/t/es-node-out-of-memory-java-heap-space/262787 "2021-02-02T09:56:51Z")
I often find out of memory: Java heap space in some nodes in our ES cluster. I have already allocated half of the total memory of each node to heap size but I still get this error. And except heap size issue, I never fin… --- ## [Need help/suggestion for the massive queries user case](https://discuss.elastic.co/t/need-help-suggestion-for-the-massive-queries-user-case/19567)
**Author:** [@yuheng](https://discuss.elastic.co/u/yuheng)\ **Replies:** 15\ **Last updated:** [September 2, 2014, 8:52pm UTC](https://discuss.elastic.co/t/need-help-suggestion-for-the-massive-queries-user-case/19567 "2014-09-02T20:52:14Z")
Hi guys, I have some streaming sensor data as input to ES. For each incoming data message, I need to do a query on the historic data in ES according to the 'timestamp' and 'messageId' in that message. I need to g… --- ## [Define default index pattern from a yml file](https://discuss.elastic.co/t/define-default-index-pattern-from-a-yml-file/354334)
**Author:** [@Amir\_Dar](https://discuss.elastic.co/u/Amir_Dar)\ **Replies:** 11\ **Last updated:** [March 5, 2024, 12:01pm UTC](https://discuss.elastic.co/t/define-default-index-pattern-from-a-yml-file/354334 "2024-03-05T12:01:32Z")
Hi All we are running ELK (version 8.7.0) over docker containers. Whenever we are doing a restart to those containers (manually or due to some failure) the index pattern we defined in the kibana is getting reset and th… --- ## [How to remove repeting string in message?](https://discuss.elastic.co/t/how-to-remove-repeting-string-in-message/244195)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 11\ **Last updated:** [August 8, 2020, 7:20am UTC](https://discuss.elastic.co/t/how-to-remove-repeting-string-in-message/244195 "2020-08-08T07:20:28Z")
I have a syslog5424\_msg field which gets repeating JSON string, example log {"@t":"2020-08-07T15:32:19.7835920Z","@mt":"{@LogDetail}","ThreadId":32,"EventType":2890355315,"Application":"EsXYZ","Environment":"Development… --- ## [Unable to connect to SQL Server 2008 R2 on Windows 7](https://discuss.elastic.co/t/unable-to-connect-to-sql-server-2008-r2-on-windows-7/179607)
**Author:** [@rudraroy](https://discuss.elastic.co/u/rudraroy)\ **Replies:** 9\ **Last updated:** [May 10, 2019, 9:53am UTC](https://discuss.elastic.co/t/unable-to-connect-to-sql-server-2008-r2-on-windows-7/179607 "2019-05-10T09:53:56Z")
I am running logstash 7.0 on Windows 7 with below configuration SQL Server 2008 R2 (Remote) jdbc verson 6.0. I have also used jdbc 4.0 same error is received. java version "1.8.0\_211" Java(TM) SE Runtime Environment… --- ## [How to dinamically replace - with \_ in nested field names](https://discuss.elastic.co/t/how-to-dinamically-replace-with-in-nested-field-names/321936)
**Author:** [@anubisg1](https://discuss.elastic.co/u/anubisg1)\ **Replies:** 10\ **Last updated:** [December 23, 2022, 9:02pm UTC](https://discuss.elastic.co/t/how-to-dinamically-replace-with-in-nested-field-names/321936 "2022-12-23T21:02:54Z")
i'm try to perform a field name replacement dynamically. I do not know ahead of time how many fields nr what they are. i found this in an elasticsearch pipeline but i need to do the exact same in logstash # Converts a… --- ## [Human Readable Duration - Remove Day Format](https://discuss.elastic.co/t/human-readable-duration-remove-day-format/290108)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 10\ **Last updated:** [November 29, 2021, 4:48am UTC](https://discuss.elastic.co/t/human-readable-duration-remove-day-format/290108 "2021-11-29T04:48:39Z")
Hi, I would like to use the human-readable duration but report seconds, minutes and hours only. For example, I want to see 24 hours instead of 1 day. Is this possible? Thanks in advance, Matt --- ## [I am using elasticsearch 6.5 and i want to have cluster node 6](https://discuss.elastic.co/t/i-am-using-elasticsearch-6-5-and-i-want-to-have-cluster-node-6/190648)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 10\ **Last updated:** [July 17, 2019, 11:16am UTC](https://discuss.elastic.co/t/i-am-using-elasticsearch-6-5-and-i-want-to-have-cluster-node-6/190648 "2019-07-17T11:16:53Z")
I am working on elasticsearch 6.5 and i don't know much about it , so my task is to add cluster node , i guess initially number of node is 1 right? if i am right then please tell me how can i make it up to 6, i already r… --- ## [Manual zip uploads to Github disabled](https://discuss.elastic.co/t/manual-zip-uploads-to-github-disabled/10049)
**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\ **Replies:** 16\ **Last updated:** [December 17, 2012, 8:59am UTC](https://discuss.elastic.co/t/manual-zip-uploads-to-github-disabled/10049 "2012-12-17T08:59:59Z")
Hi, any suggestions how to upload plugin zips and binaries to Github now? https://github.com/blog/1302-goodbye-uploads I would suggest using https://raw.github.com///master/downloads/-.zip instead. Though… --- ## [Logstach automatic logs reader](https://discuss.elastic.co/t/logstach-automatic-logs-reader/132046)
**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\ **Replies:** 12\ **Last updated:** [May 28, 2018, 2:36pm UTC](https://discuss.elastic.co/t/logstach-automatic-logs-reader/132046 "2018-05-28T14:36:54Z")
How can we read automatic log because if the time differs with the machine timestamp it dosen't display with the filters. --- ## [ElasticSearch book published!](https://discuss.elastic.co/t/elasticsearch-book-published/10837)
**Author:** [@Andrew\_Duckworth](https://discuss.elastic.co/u/Andrew_Duckworth)\ **Replies:** 12\ **Last updated:** [February 25, 2013, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearch-book-published/10837 "2013-02-25T14:22:51Z")
Hello Everyone, I'm glad to announce on behalf of Packt and the authors Rafal Kuc (Author of Apache Solr 4 Cookbook) and Marek Rogoziński the publication of the first book on ElasticSearch, It is 325 pages long, … --- ## [Carbon Black Cloud: Failed to Unmarshal JSON Message](https://discuss.elastic.co/t/carbon-black-cloud-failed-to-unmarshal-json-message/361975)
**Author:** [@promenade8894](https://discuss.elastic.co/u/promenade8894)\ **Replies:** 17\ **Last updated:** [June 25, 2024, 1:17pm UTC](https://discuss.elastic.co/t/carbon-black-cloud-failed-to-unmarshal-json-message/361975 "2024-06-25T13:17:00Z")
I've recently added the Carbon Black Cloud integration to one of my agents using the "Collect Carbon Black Cloud logs via API using CEL \[Beta\]" option. However, all the documents that result from it have no useful inform… --- ## [How to create time series bar with site names in y-axis](https://discuss.elastic.co/t/how-to-create-time-series-bar-with-site-names-in-y-axis/267700)
**Author:** [@Dvir\_Alony](https://discuss.elastic.co/u/Dvir_Alony)\ **Replies:** 12\ **Last updated:** [April 1, 2021, 4:24pm UTC](https://discuss.elastic.co/t/how-to-create-time-series-bar-with-site-names-in-y-axis/267700 "2021-04-01T16:24:41Z")
Hi, I would like to create time series bar with site names in y-axis. For each site there will be a horizontal line representing the validity of the site with colors (green, yellow, red) according to the relevant time. … --- ## [Metricbeat jolokia agent for tomcat application](https://discuss.elastic.co/t/metricbeat-jolokia-agent-for-tomcat-application/221852)
**Author:** [@seddikalaouiismaili](https://discuss.elastic.co/u/seddikalaouiismaili)\ **Replies:** 9\ **Last updated:** [March 5, 2020, 6:23am UTC](https://discuss.elastic.co/t/metricbeat-jolokia-agent-for-tomcat-application/221852 "2020-03-05T06:23:36Z")
Hello I'm contacting you about collecting metrics for a java tomcat application. We want to collect metrics for our application and we need to put it on the ELK stack for graphing !! here below many config : ==\> on m… --- ## [Global Filter Overrides the Hard coded Date Range](https://discuss.elastic.co/t/global-filter-overrides-the-hard-coded-date-range/342090)
**Author:** [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\ **Replies:** 10\ **Last updated:** [September 13, 2023, 2:38pm UTC](https://discuss.elastic.co/t/global-filter-overrides-the-hard-coded-date-range/342090 "2023-09-13T14:38:08Z")
Hello everyone, I've been working on a Kibana dashboard to track item expirations over time. I created a Visualization table that displays the Date Range, Item Name, Item Location, Item Expiry Date, and Quantity. Specif… --- ## [Logstash 6.8.3 not exporting its metrics](https://discuss.elastic.co/t/logstash-6-8-3-not-exporting-its-metrics/209353)
**Author:** [@Mohit\_Kunjir](https://discuss.elastic.co/u/Mohit_Kunjir)\ **Replies:** 10\ **Last updated:** [December 12, 2019, 5:49am UTC](https://discuss.elastic.co/t/logstash-6-8-3-not-exporting-its-metrics/209353 "2019-12-12T05:49:29Z")
I am running the rpm version of Logstash 6.8.3 on full GUI based CentOS 7 running locally on VM Player on my desktop. Downloaded the rpm version from official site. This version does not export its metrics via xpack.m… --- ## [Elasticsearch v5.6.0 working in local not on unix server](https://discuss.elastic.co/t/elasticsearch-v5-6-0-working-in-local-not-on-unix-server/125557)
**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\ **Replies:** 10\ **Last updated:** [March 27, 2018, 11:34am UTC](https://discuss.elastic.co/t/elasticsearch-v5-6-0-working-in-local-not-on-unix-server/125557 "2018-03-27T11:34:06Z")
In class extending public class NodeIndexer extends ElasticSearchIndexer private Client init() { private Client client; try { client = new PreBuiltTransportClient(Settings.EMPTY) .addTransportAddress(new InetSocke… --- ## [AWS S3 Output - Failed to open TCP Connection to](https://discuss.elastic.co/t/aws-s3-output-failed-to-open-tcp-connection-to/358656)
**Author:** [@Alex\_Jamieson](https://discuss.elastic.co/u/Alex_Jamieson)\ **Replies:** 17\ **Last updated:** [May 4, 2024, 3:21am UTC](https://discuss.elastic.co/t/aws-s3-output-failed-to-open-tcp-connection-to/358656 "2024-05-04T03:21:45Z")
Having issues getting the pipeline running \[main\] Pipeline error {:pipeline\_id=\>"main", :exception=\>#\, Failing to understand wh… --- ## [Error Activating Self-Monitoring in ElasticSearch 7.17.3](https://discuss.elastic.co/t/error-activating-self-monitoring-in-elasticsearch-7-17-3/304451)
**Author:** [@IMagalashvili](https://discuss.elastic.co/u/IMagalashvili)\ **Replies:** 9\ **Last updated:** [May 19, 2022, 10:28am UTC](https://discuss.elastic.co/t/error-activating-self-monitoring-in-elasticsearch-7-17-3/304451 "2022-05-19T10:28:23Z")
Hi, I have problem with Self-Monitoring in Elasticsearch 7.17.3. It worked correctly, but I changed Stting parameters with PUT 'http: // server:9200 /\_settings { "index": { "final\_pipeline": "geoip-info" } } My f… --- ## [Error loading Vsphere Dashboards](https://discuss.elastic.co/t/error-loading-vsphere-dashboards/211925)
**Author:** [@richard\_N](https://discuss.elastic.co/u/richard_N)\ **Replies:** 9\ **Last updated:** [December 17, 2019, 10:18am UTC](https://discuss.elastic.co/t/error-loading-vsphere-dashboards/211925 "2019-12-17T10:18:40Z")
It won't let me load the vsphere dashboards in 7.5. The plugin works fine but get unsupported media type using API and UI just says sorry there was an error. Has anyone else been able to get this to load? --- ## [Bettering response time by using lesser number of bigger-sized shards](https://discuss.elastic.co/t/bettering-response-time-by-using-lesser-number-of-bigger-sized-shards/254475)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 10\ **Last updated:** [November 16, 2020, 4:34pm UTC](https://discuss.elastic.co/t/bettering-response-time-by-using-lesser-number-of-bigger-sized-shards/254475 "2020-11-16T16:34:23Z")
I have an ES 6.8.6 cluster containing about 1200 day-wise indices. Today indexing happens only on today's day-wise index. There are no updates. This cluster contains about 45 TB data including preserving historical data … --- ## [Kibana visualizations 7.1.1 no data found](https://discuss.elastic.co/t/kibana-visualizations-7-1-1-no-data-found/183414)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 10\ **Last updated:** [May 30, 2019, 10:58pm UTC](https://discuss.elastic.co/t/kibana-visualizations-7-1-1-no-data-found/183414 "2019-05-30T22:58:27Z")
I have upgraded from 6.x to 7.1.1 and my visualizations stopped working. I can see the data but when trying to query on it through discoverer. Through kibana visualizations it does not seem to have access to different … --- ## [Date filter dosen't work](https://discuss.elastic.co/t/date-filter-dosent-work/121870)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 10\ **Last updated:** [March 1, 2018, 7:48am UTC](https://discuss.elastic.co/t/date-filter-dosent-work/121870 "2018-03-01T07:48:08Z")
hello why my date filter dosen't work, i've seen a lot of question here and they helped me to optimise my configuration, but date filter still dosen't work : my column1 still of type String and i still got a @timestamp … --- ## [ES Memory consuption](https://discuss.elastic.co/t/es-memory-consuption/11228)
**Author:** [@Delmar](https://discuss.elastic.co/u/Delmar)\ **Replies:** 12\ **Last updated:** [March 21, 2013, 4:31pm UTC](https://discuss.elastic.co/t/es-memory-consuption/11228 "2013-03-21T16:31:18Z")
Hi, I'm having troubles managing the memory on my ES server. I have 3 nodes with heap size 4GB each. However, when i start indexing my memory start growing proportionally to the size of my index. In detail, if I r… --- ## [Support for case insensitive sorts with doc values](https://discuss.elastic.co/t/support-for-case-insensitive-sorts-with-doc-values/20102)
**Author:** [@Hugues\_Malphettes](https://discuss.elastic.co/u/Hugues_Malphettes)\ **Replies:** 9\ **Last updated:** [February 11, 2015, 3:27am UTC](https://discuss.elastic.co/t/support-for-case-insensitive-sorts-with-doc-values/20102 "2015-02-11T03:27:38Z")
Hi everyone, Case insensitive sort is elegantly supported by using a custom analyzer \[1\]. \`doc values\` are documented as a great fit for sorting \[2\] to save heap memory. However doc values are not support for an… --- ## [Indexing flattened field with unique keys is very slow](https://discuss.elastic.co/t/indexing-flattened-field-with-unique-keys-is-very-slow/294833)
**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\ **Replies:** 11\ **Last updated:** [January 21, 2022, 1:38pm UTC](https://discuss.elastic.co/t/indexing-flattened-field-with-unique-keys-is-very-slow/294833 "2022-01-21T13:38:20Z")
I have a logstash ingest process that ingests records at 4k events per second. Recently we added field that is an object consisting of unique keys. I save it as a flattened data type. But ingest processing time starts at… --- ## [Elastic Search and Kibana is not working](https://discuss.elastic.co/t/elastic-search-and-kibana-is-not-working/305606)
**Author:** [@John\_Mari](https://discuss.elastic.co/u/John_Mari)\ **Replies:** 13\ **Last updated:** [May 27, 2022, 11:53am UTC](https://discuss.elastic.co/t/elastic-search-and-kibana-is-not-working/305606 "2022-05-27T11:53:08Z")
Hi Everyone, We installed Elasticsearch and Kibana in our Machine. Previously it was working fine. But, when we tried to access Elasticsearch and Kibana. Its showing following error. Can anyone guide us to solve the… --- ## [Elastic search docker image - Jar hell error](https://discuss.elastic.co/t/elastic-search-docker-image-jar-hell-error/329767)
**Author:** [@priya\_dhana](https://discuss.elastic.co/u/priya_dhana)\ **Replies:** 11\ **Last updated:** [April 17, 2023, 12:55am UTC](https://discuss.elastic.co/t/elastic-search-docker-image-jar-hell-error/329767 "2023-04-17T00:55:27Z")
I am using docker.elastic.co/elasticsearch/elasticsearch:5.6.16 as base image and trying to upgrade the jackson packages to resolve Critical CVE. Dockerfile: # https://github.com/elastic/elasticsearch-docker FROM dock… --- ## [Logstash problem with images](https://discuss.elastic.co/t/logstash-problem-with-images/276011)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 11\ **Last updated:** [June 24, 2021, 7:29am UTC](https://discuss.elastic.co/t/logstash-problem-with-images/276011 "2021-06-24T07:29:30Z")
Hi evrey one, I'am new with elasticsearch and logstash. The problem: I want to use logstash to obtain all image of a file system structure, (I don't need the immage i only need the informetion (Like: path, name)) but w… --- ## [Filebeat support required](https://discuss.elastic.co/t/filebeat-support-required/323181)
**Author:** [@Sagar\_Naik](https://discuss.elastic.co/u/Sagar_Naik)\ **Replies:** 13\ **Last updated:** [January 15, 2023, 4:35am UTC](https://discuss.elastic.co/t/filebeat-support-required/323181 "2023-01-15T04:35:53Z")
getting error : Jan 14 21:30:07 ndc3vmappelk05 filebeat\[2374\]: 2023-01-14T21:30:07.888+0530 ERROR pipeline/output.go:100 Failed to connect to backoff(async(tcp://10.94.241.145:5043)): dial tcp 10.94… --- ## [Attempting to enable TLS](https://discuss.elastic.co/t/attempting-to-enable-tls/255453)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 9\ **Last updated:** [November 16, 2020, 7:55pm UTC](https://discuss.elastic.co/t/attempting-to-enable-tls/255453 "2020-11-16T19:55:15Z")
Elasticsearch 6.8.12 I have an existing cluster which was set up before x-pack was free. I now want to setup the security "properly". I have used Letsencrypt to install certificates on each of the cluster members and … --- ## [Elasticsearch-java query slowly](https://discuss.elastic.co/t/elasticsearch-java-query-slowly/339382)
**Author:** [@gaorui](https://discuss.elastic.co/u/gaorui)\ **Replies:** 12\ **Last updated:** [August 1, 2023, 8:19am UTC](https://discuss.elastic.co/t/elasticsearch-java-query-slowly/339382 "2023-08-01T08:19:58Z")
We have an es cluster, a single node, the version is 8.5.3, and then the java program is linked to do the query. The problem now is that the response speed is within 10ms when we directly curl the query on the host where… --- ## [How elasticsearch query should be written for the following SQL statement?](https://discuss.elastic.co/t/how-elasticsearch-query-should-be-written-for-the-following-sql-statement/196288)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 12\ **Last updated:** [August 23, 2019, 3:27am UTC](https://discuss.elastic.co/t/how-elasticsearch-query-should-be-written-for-the-following-sql-statement/196288 "2019-08-23T03:27:02Z")
Hello all, I have a SQL statement as below: select min(a.datetime),accname,year from CWLC\_PC a group by accname,year; I have tried many times using agg and max but I cannot get the result as the SQL statement. Please… --- ## [Like query in nested type without using wildcard](https://discuss.elastic.co/t/like-query-in-nested-type-without-using-wildcard/131305)
**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\ **Replies:** 10\ **Last updated:** [May 11, 2018, 8:46am UTC](https://discuss.elastic.co/t/like-query-in-nested-type-without-using-wildcard/131305 "2018-05-11T08:46:52Z")
Hi, Am using nested data type for to create index POST \_my\_index1 { "mappings": { "\_doc": { "properties": { "user": { "type": "nested" … --- ## [Marvel 1.2.0 java.lang.IllegalStateException](https://discuss.elastic.co/t/marvel-1-2-0-java-lang-illegalstateexception/17921)
**Author:** [@Pawel\_Krzaczkowski](https://discuss.elastic.co/u/Pawel_Krzaczkowski)\ **Replies:** 10\ **Last updated:** [June 13, 2014, 2:11pm UTC](https://discuss.elastic.co/t/marvel-1-2-0-java-lang-illegalstateexception/17921 "2014-06-13T14:11:27Z")
Hi. After upgrading Marvel to 1.2.0 (running on Elasticsearch 1.2.1) i'm getting errors like \[2014-06-05 10:47:25,346\]\[INFO \]\[node \] \[es-m-3\] version\[1.2.1\], pid\[68924\], build\[6c95b75/2014-0… --- ## [Slow performance on big unstructured file](https://discuss.elastic.co/t/slow-performance-on-big-unstructured-file/284567)
**Author:** [@nestor1](https://discuss.elastic.co/u/nestor1)\ **Replies:** 9\ **Last updated:** [September 22, 2021, 5:31pm UTC](https://discuss.elastic.co/t/slow-performance-on-big-unstructured-file/284567 "2021-09-22T17:31:39Z")
I have couple of millions small files, but few of them are extremely big (comparing to small ones), around 200-400 GB. Pipeline is set to fetch data from each file (1 file -\> 1 event in Elasticsearch). It's working ok, b… --- ## [Using the ElasticSeach API json error](https://discuss.elastic.co/t/using-the-elasticseach-api-json-error/178808)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 9\ **Last updated:** [May 7, 2019, 1:53am UTC](https://discuss.elastic.co/t/using-the-elasticseach-api-json-error/178808 "2019-05-07T01:53:43Z")
Hello, I am trying to use the elastic Search API to just get a quick JSON object out of ElasticSearch. using the VScode extension listed below https://marketplace.visualstudio.com/items?itemName=ria.elastic using quer… --- ## [Centralised logging for Apache](https://discuss.elastic.co/t/centralised-logging-for-apache/73825)
**Author:** [@vineets928](https://discuss.elastic.co/u/vineets928)\ **Replies:** 9\ **Last updated:** [February 9, 2017, 2:36pm UTC](https://discuss.elastic.co/t/centralised-logging-for-apache/73825 "2017-02-09T14:36:52Z")
Hi, I am new in elk stack. Please someone help me. We have 4 application running on apache server. Client don't want to use filebeat to push log individually to logstash as this will affect the performance of the appli… --- ## [Facet on non-existent field throws error](https://discuss.elastic.co/t/facet-on-non-existent-field-throws-error/12501)
**Author:** [@vinh](https://discuss.elastic.co/u/vinh)\ **Replies:** 9\ **Last updated:** [June 24, 2013, 11:47pm UTC](https://discuss.elastic.co/t/facet-on-non-existent-field-throws-error/12501 "2013-06-24T23:47:09Z")
Normally, my index has documents with a particular field, so facet requests on that field succeeds. But this time, if the index is empty, the facet request fails and complains that the field doesn't exist. Is there a… --- ## [Elasticsearch Snapshot](https://discuss.elastic.co/t/elasticsearch-snapshot/379323)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 26\ **Last updated:** [July 2, 2025, 12:43pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot/379323 "2025-07-02T12:43:36Z")
Hi Team, We are using Elasticsearch for the first time and are preparing to back up a cluster that is approximately 600 GB in size. Before we proceed with configuring the backup, we need to perform some calculations to … --- ## [Parameters for use in Lightweight and Journey/Browser Monitors](https://discuss.elastic.co/t/parameters-for-use-in-lightweight-and-journey-browser-monitors/336716)
**Author:** [@Ben\_Berg1](https://discuss.elastic.co/u/Ben_Berg1)\ **Replies:** 12\ **Last updated:** [June 26, 2023, 3:46pm UTC](https://discuss.elastic.co/t/parameters-for-use-in-lightweight-and-journey-browser-monitors/336716 "2023-06-26T15:46:05Z")
I am using the new synthetics approach using a Typescript project. All docs indicate that parameters/secrets can be used in both lightweight and journey/browser code. I am not able to do so can do either or. Docs indica… --- ## [Lucene vs Elastic Search Document Count difference and its impact on term aggregation buckets](https://discuss.elastic.co/t/lucene-vs-elastic-search-document-count-difference-and-its-impact-on-term-aggregation-buckets/338827)
**Author:** [@S\_Star](https://discuss.elastic.co/u/S_Star)\ **Replies:** 9\ **Last updated:** [July 23, 2023, 8:10pm UTC](https://discuss.elastic.co/t/lucene-vs-elastic-search-document-count-difference-and-its-impact-on-term-aggregation-buckets/338827 "2023-07-23T20:10:39Z")
We have an index with lot of auto generated data for load testing and we noticed that there is significant difference in Elasticsearch doc count (using the \_count API) vs /indices API e.g ES documents : ~80 million Luc… --- ## [APM - Not showing Aggregation](https://discuss.elastic.co/t/apm-not-showing-aggregation/250762)
**Author:** [@hogbinj](https://discuss.elastic.co/u/hogbinj)\ **Replies:** 9\ **Last updated:** [October 5, 2020, 3:55pm UTC](https://discuss.elastic.co/t/apm-not-showing-aggregation/250762 "2020-10-05T15:55:32Z")
Highlighting a search in the APM gives me this: however the action is an aggregation as shown below. So where do I find the Aggregation details in the APM console? GET IndexAlias\*/\_search {"query": { "bool": { … --- ## [Experiencing Error trying to Launch Logstash](https://discuss.elastic.co/t/experiencing-error-trying-to-launch-logstash/375227)
**Author:** [@abbyode](https://discuss.elastic.co/u/abbyode)\ **Replies:** 26\ **Last updated:** [March 11, 2025, 7:20pm UTC](https://discuss.elastic.co/t/experiencing-error-trying-to-launch-logstash/375227 "2025-03-11T19:20:18Z")
I am experiencing some errors trying to launch logstash. I am using logstash plug-in to send json data to Sentinel Log Analytics Workspace. Below is the error i'm getting. \[ERROR\] 2025-02-28 15:45:10.466 \[Agent thread\] … --- ## [Heartbeat Browser Monitor Zip URL: not a valid zip file](https://discuss.elastic.co/t/heartbeat-browser-monitor-zip-url-not-a-valid-zip-file/292222)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 9\ **Last updated:** [December 18, 2021, 12:23am UTC](https://discuss.elastic.co/t/heartbeat-browser-monitor-zip-url-not-a-valid-zip-file/292222 "2021-12-18T00:23:42Z")
Hi, I'm trying to use the Heartbeat Browser monitor with the Zip URL source, but am running into a weird issue. Has anyone gotten Zip URL to work with GitLab zip urls? I get the following error when Heartbeat tries to… --- ## [Logstash 7.1 configuration file throws error](https://discuss.elastic.co/t/logstash-7-1-configuration-file-throws-error/183694)
**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\ **Replies:** 9\ **Last updated:** [June 3, 2019, 10:16am UTC](https://discuss.elastic.co/t/logstash-7-1-configuration-file-throws-error/183694 "2019-06-03T10:16:45Z")
Hi, I have successfully configured elastic and kibana using SSL/TLS but when it comes to logstash it is throwing me below errrhosts =\> \["https://\*.\*.\*.\*:9200", "https://\*.\*.\*.\*:9200"\] index =\> "logstash-bindlive\_logs" s… --- ## [Static MySQL Data](https://discuss.elastic.co/t/static-mysql-data/7391)
**Author:** [@banderon1](https://discuss.elastic.co/u/banderon1)\ **Replies:** 10\ **Last updated:** [April 25, 2012, 12:40pm UTC](https://discuss.elastic.co/t/static-mysql-data/7391 "2012-04-25T12:40:30Z")
I have two tables (each with millions of records) in a mysql database that I want to be able to index and search. I love the features of elasticsearch, but I'm not sure of how to approach this. The tables are pretty s… --- ## [Error in executing Groovy script in Watcher (Elasticsearch 6.3.1)](https://discuss.elastic.co/t/error-in-executing-groovy-script-in-watcher-elasticsearch-6-3-1/140924)
**Author:** [@ayush219](https://discuss.elastic.co/u/ayush219)\ **Replies:** 10\ **Last updated:** [July 27, 2018, 2:02pm UTC](https://discuss.elastic.co/t/error-in-executing-groovy-script-in-watcher-elasticsearch-6-3-1/140924 "2018-07-27T14:02:24Z")
Hi, I am getting below error when trying to execute Groovy script from Watcher. (Working on ElasticSearch 6.3.1 version): { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "unable to … --- ## [8 hours difference in time zone](https://discuss.elastic.co/t/8-hours-difference-in-time-zone/126536)
**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\ **Replies:** 9\ **Last updated:** [April 3, 2018, 11:29am UTC](https://discuss.elastic.co/t/8-hours-difference-in-time-zone/126536 "2018-04-03T11:29:09Z")
elasticsearch { hosts =\> localhost index =\> "logstash(%{+YYYY.MM.dd})" document\_type =\>"logstash" flush\_size=\>1000 idle\_flush\_time=\>15 } i didn‘’t set date in logstash @timestamp … --- ## [Killing swap once and for all, file descriptors too, linux and windows](https://discuss.elastic.co/t/killing-swap-once-and-for-all-file-descriptors-too-linux-and-windows/14745)
**Author:** [@Josh\_Harrison](https://discuss.elastic.co/u/Josh_Harrison)\ **Replies:** 11\ **Last updated:** [December 9, 2013, 8:10am UTC](https://discuss.elastic.co/t/killing-swap-once-and-for-all-file-descriptors-too-linux-and-windows/14745 "2013-12-09T08:10:25Z")
So, for ES, swap is a bad thing, right? I'm running, currently, a mixed Windows and Linux environment. All running 0.90.5. On linux (RHEL): Locked memory has been set to unlimited. mlockall is (supposed to be) on. … [Previous page](https://discuss.elastic.co/top.md?page=212&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=214&per_page=50&period=all)