# Top **URL:** https://discuss.elastic.co/top.md?page=215&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 216 --- ## [ML jobs](https://discuss.elastic.co/t/ml-jobs/225697)
**Author:** [@pinguin](https://discuss.elastic.co/u/pinguin)\ **Replies:** 9\ **Last updated:** [October 5, 2020, 4:25pm UTC](https://discuss.elastic.co/t/ml-jobs/225697 "2020-10-05T16:25:11Z")
hello, i have created the built-in machine learning jobs for windows and linux, for linux it s working as expected, for windows some of the jobs are showing 0 Processed data. one of the jobs is "windows\_anomalous\_proc… --- ## [Missing documents](https://discuss.elastic.co/t/missing-documents/380946)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 32\ **Last updated:** [August 21, 2025, 7:34pm UTC](https://discuss.elastic.co/t/missing-documents/380946 "2025-08-21T19:34:27Z")
I have following setup and I am missing documents. it is very hard to pinpoint at this time. that is why posting here to get some idea 1000 machine running metricbeat sending metric every min to HA proxy Ha Proxy then … --- ## [One doc for each array item](https://discuss.elastic.co/t/one-doc-for-each-array-item/235936)
**Author:** [@genehunter29009](https://discuss.elastic.co/u/genehunter29009)\ **Replies:** 9\ **Last updated:** [June 8, 2020, 10:24am UTC](https://discuss.elastic.co/t/one-doc-for-each-array-item/235936 "2020-06-08T10:24:58Z")
I have documents with several arrays. one array I have gotten to work with help here. Thank you very much Badger. I have a 3 arrays I want to be able to visualize , but one is most important. It is useractions array. It… --- ## [Information needed](https://discuss.elastic.co/t/information-needed/90565)
**Author:** [@Kunal2791](https://discuss.elastic.co/u/Kunal2791)\ **Replies:** 9\ **Last updated:** [August 12, 2017, 3:07pm UTC](https://discuss.elastic.co/t/information-needed/90565 "2017-08-12T15:07:54Z")
Hi All, we've set up ELK in our environment and its really a nice tool to check real time logs. Thanks for that. but i really interested to know about. 1. is the server can collect all the logs from client and also store… --- ## [Elk setup for 6 months logs storage](https://discuss.elastic.co/t/elk-setup-for-6-months-logs-storage/350427)
**Author:** [@kriti\_dabas](https://discuss.elastic.co/u/kriti_dabas)\ **Replies:** 16\ **Last updated:** [January 9, 2024, 11:10am UTC](https://discuss.elastic.co/t/elk-setup-for-6-months-logs-storage/350427 "2024-01-09T11:10:59Z")
What should be my setup for elk if I want to keep the logs for 6 months? My flow is syslog-ng -------kafka --------logstash---------elasticsearch --------kibana . My per day data is 120GB. I want to know the number of… --- ## [Elastic Cloud Service search performance](https://discuss.elastic.co/t/elastic-cloud-service-search-performance/236368)
**Author:** [@cr-solutions](https://discuss.elastic.co/u/cr-solutions)\ **Replies:** 11\ **Last updated:** [June 15, 2020, 9:08am UTC](https://discuss.elastic.co/t/elastic-cloud-service-search-performance/236368 "2020-06-15T09:08:32Z")
Hello, we currently evaluating Elasticsearch as replacement of our Sphinxsearch (sphinxsearch.com). As step one we tried the Elasticsearch service from AWS, but it really sucks. Now we are currently trying the Elastic… --- ## [Need help on creating Logstash\_FILTER](https://discuss.elastic.co/t/need-help-on-creating-logstash-filter/277928)
**Author:** [@sumit\_n](https://discuss.elastic.co/u/sumit_n)\ **Replies:** 10\ **Last updated:** [August 10, 2021, 12:52pm UTC](https://discuss.elastic.co/t/need-help-on-creating-logstash-filter/277928 "2021-08-10T12:52:28Z")
log:{​​​​​​​​"time\_stamp":"2021-06-11T04:58:32.22154414Z","labels":{​​​​​​​​"vm\_index":0,"session\_docker\_id":"12d333","tenant\_id":"21a64d4","user\_id":"bob","session\_uuid":"2a30"}​​​​​​​​,"event":{​​​​​​​​"kind":"Metric",… --- ## [Insert in to existing index using some condition](https://discuss.elastic.co/t/insert-in-to-existing-index-using-some-condition/235848)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 10\ **Last updated:** [June 8, 2020, 3:28pm UTC](https://discuss.elastic.co/t/insert-in-to-existing-index-using-some-condition/235848 "2020-06-08T15:28:24Z")
Here is what I am trying to do I have a existing index with { index= my\_index id=1 fname= xyz lname = abc emp\_num=123 loction=usa } now i am reading new data from new source A which have fnam… --- ## [Maximum value of an inexed field](https://discuss.elastic.co/t/maximum-value-of-an-inexed-field/13215)
**Author:** [@Thomas\_Bolis](https://discuss.elastic.co/u/Thomas_Bolis)\ **Replies:** 12\ **Last updated:** [August 20, 2013, 6:50am UTC](https://discuss.elastic.co/t/maximum-value-of-an-inexed-field/13215 "2013-08-20T06:50:26Z")
Hi, I was wondering what is the best way to get the maximum value of an indexed field? For example I have a document with a field named "localTime" and i want to take the maximum value of that field. Is the only … --- ## [APM Java agent not creating transactions with Vert.x even with experimental features enabled](https://discuss.elastic.co/t/apm-java-agent-not-creating-transactions-with-vert-x-even-with-experimental-features-enabled/327873)
**Author:** [@missael.denadai](https://discuss.elastic.co/u/missael.denadai)\ **Replies:** 9\ **Last updated:** [March 20, 2023, 1:16pm UTC](https://discuss.elastic.co/t/apm-java-agent-not-creating-transactions-with-vert-x-even-with-experimental-features-enabled/327873 "2023-03-20T13:16:42Z")
Hi! I am not being able to audit the transactions against my Vert.x application using the Java agent for this purpose, even though I have enabled the experimental instrumentations. -Dquarkus.profile=local -javaagent:sr… --- ## [Elastic-Stack7.17 on ubuntu 20.4LTS, still not indexing](https://discuss.elastic.co/t/elastic-stack7-17-on-ubuntu-20-4lts-still-not-indexing/296378)
**Author:** [@Mohammad\_Ramadan\_Abd](https://discuss.elastic.co/u/Mohammad_Ramadan_Abd)\ **Replies:** 10\ **Last updated:** [February 12, 2022, 8:43am UTC](https://discuss.elastic.co/t/elastic-stack7-17-on-ubuntu-20-4lts-still-not-indexing/296378 "2022-02-12T08:43:28Z")
Hello Bro, I have followed up this link How To Install Elasticsearch, Logstash, and Kibana (Elastic Stack) on Ubuntu 20.04 | DigitalOcean to install my elc-stack, and everything went as document explains. But, It stil… --- ## [How does the filebeat elasticsearch module know where the elasticsearch server is?](https://discuss.elastic.co/t/how-does-the-filebeat-elasticsearch-module-know-where-the-elasticsearch-server-is/200066)
**Author:** [@ceastman-ibm](https://discuss.elastic.co/u/ceastman-ibm)\ **Replies:** 13\ **Last updated:** [September 19, 2019, 4:58pm UTC](https://discuss.elastic.co/t/how-does-the-filebeat-elasticsearch-module-know-where-the-elasticsearch-server-is/200066 "2019-09-19T16:58:15Z")
How do I tell the filebeat elasticsearch module where my elasticsearch cluster is? I am running in kubernetes and elasticsearch is installed in a different namespace. --- ## [Changing default mapping](https://discuss.elastic.co/t/changing-default-mapping/4202)
**Author:** [@Manuel\_Benavides](https://discuss.elastic.co/u/Manuel_Benavides)\ **Replies:** 13\ **Last updated:** [April 11, 2011, 8:20am UTC](https://discuss.elastic.co/t/changing-default-mapping/4202 "2011-04-11T08:20:31Z")
I have the following default mapping: {"company" : {"item" : {"properties" : { "model" : {"type" : "string"}, "itemID" : {"type" : "string"}, "listingDate" : {"format" : "dateOptionalTime", … --- ## [Logstash 1.5.4 Output to Elasticsearch with https](https://discuss.elastic.co/t/logstash-1-5-4-output-to-elasticsearch-with-https/268065)
**Author:** [@Dan4](https://discuss.elastic.co/u/Dan4)\ **Replies:** 12\ **Last updated:** [March 24, 2021, 9:02am UTC](https://discuss.elastic.co/t/logstash-1-5-4-output-to-elasticsearch-with-https/268065 "2021-03-24T09:02:22Z")
Hello together, I am new to the elastic stack and have no further experience than just google a solution. In my environment I have to use Logstash on a remote server. I can not change it. I have no control over the vers… --- ## [Logstash parse json child element, format and insert into elasticsearch](https://discuss.elastic.co/t/logstash-parse-json-child-element-format-and-insert-into-elasticsearch/312230)
**Author:** [@babuzrb](https://discuss.elastic.co/u/babuzrb)\ **Replies:** 9\ **Last updated:** [August 17, 2022, 2:46pm UTC](https://discuss.elastic.co/t/logstash-parse-json-child-element-format-and-insert-into-elasticsearch/312230 "2022-08-17T14:46:50Z")
I have a json file like this: "fruits": { "fruit": \[ { "id": 1, "label": "test", "tag": "fine", "start": "4", "end": "9" }, { "id": 2, "lab… --- ## [Failed to derive xcontent - status 400 & path.log is empty errors!](https://discuss.elastic.co/t/failed-to-derive-xcontent-status-400-path-log-is-empty-errors/279393)
**Author:** [@Luca\_Desmond](https://discuss.elastic.co/u/Luca_Desmond)\ **Replies:** 9\ **Last updated:** [July 27, 2021, 3:01pm UTC](https://discuss.elastic.co/t/failed-to-derive-xcontent-status-400-path-log-is-empty-errors/279393 "2021-07-27T15:01:30Z")
Fun one for you all : so I'm trying to take a snapshot of a version 1.7 elastic (yes... 1.7) environment using the following command: curl -XPUT 'http://localhost:9200/\_snapshot/elasticrepo' But i keep getting this e… --- ## [Duplication in elasticsearch](https://discuss.elastic.co/t/duplication-in-elasticsearch/130193)
**Author:** [@Dinesh\_Vijay](https://discuss.elastic.co/u/Dinesh_Vijay)\ **Replies:** 9\ **Last updated:** [May 8, 2018, 10:43am UTC](https://discuss.elastic.co/t/duplication-in-elasticsearch/130193 "2018-05-08T10:43:13Z")
Hi, We have a logstash configuration for our logging application to show the logs on kibana dashboard. But we are having duplicate entries in elasticsearch. we did the workaround which is mentioned below blog. Our co… --- ## [Mapping modifications in index template breaks search queries](https://discuss.elastic.co/t/mapping-modifications-in-index-template-breaks-search-queries/12977)
**Author:** [@Simon\_thepiman](https://discuss.elastic.co/u/Simon_thepiman)\ **Replies:** 17\ **Last updated:** [August 1, 2013, 9:28am UTC](https://discuss.elastic.co/t/mapping-modifications-in-index-template-breaks-search-queries/12977 "2013-08-01T09:28:43Z")
I've got an Elasticsearch cluster of two machines both running version 0.20.2. Log data is fed into this cluster from Logstash. This has been running for months without issue. I've recently realised that when I up… --- ## [Create Kibana dashboard has problems](https://discuss.elastic.co/t/create-kibana-dashboard-has-problems/255015)
**Author:** [@bogdan.oproescu](https://discuss.elastic.co/u/bogdan.oproescu)\ **Replies:** 11\ **Last updated:** [November 19, 2020, 8:50am UTC](https://discuss.elastic.co/t/create-kibana-dashboard-has-problems/255015 "2020-11-19T08:50:29Z")
Hello discuss.elastic.co, My name is Bogdan Oproescu, and I am senior data architect for EasyDO Technologies in Bucharest. I am leading our Elastic projects and technology at EasyDO, and we currently have the following … --- ## [Incices are created with replicashards on single node cluster](https://discuss.elastic.co/t/incices-are-created-with-replicashards-on-single-node-cluster/212286)
**Author:** [@peoh](https://discuss.elastic.co/u/peoh)\ **Replies:** 11\ **Last updated:** [December 19, 2019, 7:37am UTC](https://discuss.elastic.co/t/incices-are-created-with-replicashards-on-single-node-cluster/212286 "2019-12-19T07:37:36Z")
Hi! I have found myself with a problem that I don't know how to fix, and I don't know exactly why this happens. What I have right now Elasticsearch 6.4.1 Single node cluster Indices: ~1000 Documents: ~500 000 000. … --- ## [Docs.deleted value not changing](https://discuss.elastic.co/t/docs-deleted-value-not-changing/261023)
**Author:** [@munasia](https://discuss.elastic.co/u/munasia)\ **Replies:** 10\ **Last updated:** [January 21, 2021, 3:19pm UTC](https://discuss.elastic.co/t/docs-deleted-value-not-changing/261023 "2021-01-21T15:19:13Z")
I have a non-prod cluster that I use to run tests. I took a snapshot of my prod cluster data and restored it into this non-prod cluster which created the two indices that I have in production. However when I GET \_cat/ind… --- ## [Compile error with 0.20.2](https://discuss.elastic.co/t/compile-error-with-0-20-2/10498)
**Author:** [@sulemanmubarik](https://discuss.elastic.co/u/sulemanmubarik)\ **Replies:** 10\ **Last updated:** [February 8, 2013, 6:15pm UTC](https://discuss.elastic.co/t/compile-error-with-0-20-2/10498 "2013-02-08T18:15:02Z")
Hi I have upgraded the ES from 0.19.12 to 0.20.2 And I am unable to compile the code with maven I am getting this error error: value andFilter is not a member of object org.elasticsearch.index.query.Filte… --- ## [How can I host elastic search(5.3.3) on https?](https://discuss.elastic.co/t/how-can-i-host-elastic-search-5-3-3-on-https/108105)
**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 9\ **Last updated:** [November 17, 2017, 3:35pm UTC](https://discuss.elastic.co/t/how-can-i-host-elastic-search-5-3-3-on-https/108105 "2017-11-17T15:35:53Z")
Not able to find an proper solution on this can anyone help me stepwise how to do it? --- ## [\[HADOOP\] Elasticsearch and hive](https://discuss.elastic.co/t/hadoop-elasticsearch-and-hive/17622)
**Author:** [@hanine](https://discuss.elastic.co/u/hanine)\ **Replies:** 9\ **Last updated:** [May 27, 2014, 9:04pm UTC](https://discuss.elastic.co/t/hadoop-elasticsearch-and-hive/17622 "2014-05-27T21:04:35Z")
Hello everybody I m trying to take data from Hive and put it in elasticsearch here is the script and the error hive\> ADD JAR /home/hduser/hadoop/hive-0.11.0/lib/hive-serdes-1.0-SNAPSHOT.jar; Added /home/hdu… --- ## [Different ways to add documents?](https://discuss.elastic.co/t/different-ways-to-add-documents/191361)
**Author:** [@gork](https://discuss.elastic.co/u/gork)\ **Replies:** 10\ **Last updated:** [July 19, 2019, 2:22pm UTC](https://discuss.elastic.co/t/different-ways-to-add-documents/191361 "2019-07-19T14:22:28Z")
Heya I've been playing around with App Search the last couple of days and so far I am really enjoying it! I would like to move the search functionality of my PHP-based forum to AS and have played around with adding som… --- ## [Monitoring / Management App: Advice Req](https://discuss.elastic.co/t/monitoring-management-app-advice-req/11780)
**Author:** [@Roy\_Russo](https://discuss.elastic.co/u/Roy_Russo)\ **Replies:** 10\ **Last updated:** [May 2, 2013, 9:59pm UTC](https://discuss.elastic.co/t/monitoring-management-app-advice-req/11780 "2013-05-02T21:59:54Z")
Hello All, I have recently embarked on building a Management and Monitoring app for ElasticSearch. I do have a few questions on what is most feasible, however: 1. I have decided to use the JAVA API. It is what ES… --- ## [Pipeline aggregation to compute histogram of average values of a field, bucketed by term?](https://discuss.elastic.co/t/pipeline-aggregation-to-compute-histogram-of-average-values-of-a-field-bucketed-by-term/202273)
**Author:** [@Jonathan\_Rice](https://discuss.elastic.co/u/Jonathan_Rice)\ **Replies:** 11\ **Last updated:** [October 16, 2019, 10:25pm UTC](https://discuss.elastic.co/t/pipeline-aggregation-to-compute-histogram-of-average-values-of-a-field-bucketed-by-term/202273 "2019-10-16T22:25:24Z")
I'm trying to figure out how to compute a histogram of the average values of fields within "term" buckets. I think this is probably a case for a sibling aggregation, but I can't figure out the approach. For example, cons… --- ## [How to check Working of the Shield?](https://discuss.elastic.co/t/how-to-check-working-of-the-shield/55726)
**Author:** [@sukesh](https://discuss.elastic.co/u/sukesh)\ **Replies:** 11\ **Last updated:** [July 18, 2016, 10:26am UTC](https://discuss.elastic.co/t/how-to-check-working-of-the-shield/55726 "2016-07-18T10:26:49Z")
i tried to get the information from this link https://www.elastic.co/guide/en/shield/current/how-shield-works.html. but i did not get anything from that.please suggest me usefull things --- ## [Date matching](https://discuss.elastic.co/t/date-matching/205333)
**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\ **Replies:** 12\ **Last updated:** [November 3, 2019, 11:05pm UTC](https://discuss.elastic.co/t/date-matching/205333 "2019-11-03T23:05:39Z")
I have a CSV and I have got it indexed in ELASTICSEARCH. The issue is that I have the following set up and how can I verify that the dates are timestamps? # Sample Logstash configuration for creating a simple # Beats -\> … --- ## [Number of returned results and search time](https://discuss.elastic.co/t/number-of-returned-results-and-search-time/11849)
**Author:** [@Ophir\_Michaeli](https://discuss.elastic.co/u/Ophir_Michaeli)\ **Replies:** 11\ **Last updated:** [May 12, 2013, 7:20am UTC](https://discuss.elastic.co/t/number-of-returned-results-and-search-time/11849 "2013-05-12T07:20:24Z")
Hi, I need to return 100,000 results and it really slows down the search time. Compared to straight lucene search, it takes 4 times more. Is there a way to improve search time with such big amounts of ret… --- ## [Elastic Agent install rosetta error](https://discuss.elastic.co/t/elastic-agent-install-rosetta-error/371211)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 17\ **Last updated:** [December 2, 2024, 8:10pm UTC](https://discuss.elastic.co/t/elastic-agent-install-rosetta-error/371211 "2024-12-02T20:10:32Z")
hey there, I have to be honest and admit that I have several doubt about Elastic Agent and Fleet so I was trying to monitor a production-fake Elasticsearch cluster using Elastic Agent enrolled by Fleet Server. I follow… --- ## [Génération de PDF](https://discuss.elastic.co/t/generation-de-pdf/191247)
**Author:** [@EVOTYS](https://discuss.elastic.co/u/EVOTYS)\ **Replies:** 9\ **Last updated:** [August 14, 2019, 8:52am UTC](https://discuss.elastic.co/t/generation-de-pdf/191247 "2019-08-14T08:52:06Z")
Bonjour, Je me permet un message en Français ce qui sera beaucoup plus simple pour moi. Nous avons une config en P.O.C avec 2 serveurs elastic 7.2.0 (64Go de RAM - 1T de disque) 1 serveur Kibana (64G RAM - 120 Go disq… --- ## [New warm nodes are getting filled fast](https://discuss.elastic.co/t/new-warm-nodes-are-getting-filled-fast/269417)
**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\ **Replies:** 12\ **Last updated:** [April 27, 2021, 9:35am UTC](https://discuss.elastic.co/t/new-warm-nodes-are-getting-filled-fast/269417 "2021-04-27T09:35:28Z")
Hi All, In the beginning, we had 4 data nodes. Two were ilm designated hot nodes and the other two were warm nodes. Newly created indices would be in the hot nodes under the hot phase and after 4 weeks of retention, wou… --- ## [Include conf files](https://discuss.elastic.co/t/include-conf-files/135480)
**Author:** [@saramali](https://discuss.elastic.co/u/saramali)\ **Replies:** 9\ **Last updated:** [June 20, 2018, 7:18am UTC](https://discuss.elastic.co/t/include-conf-files/135480 "2018-06-20T07:18:06Z")
filter { .... # do stuff A } B.conf : filter { .... # do stuff B } Can this be achieved somehow? run.conf : input { ... } include('B') include('C') output { ... } --- ## [Sudden high "OS Load", then ES VM disappears](https://discuss.elastic.co/t/sudden-high-os-load-then-es-vm-disappears/18823)
**Author:** [@michael\_4](https://discuss.elastic.co/u/michael_4)\ **Replies:** 9\ **Last updated:** [July 23, 2014, 5:42pm UTC](https://discuss.elastic.co/t/sudden-high-os-load-then-es-vm-disappears/18823 "2014-07-23T17:42:36Z")
Hey all! I'm having some a serious problem with my ES cluster. Every now and then, when writing to the cluster, a machine (or two) will suddenly spike up on OS Load, writing will come to a screeching halt (\>5s for… --- ## [Nodes not joining after 1.4.0 upgrade](https://discuss.elastic.co/t/nodes-not-joining-after-1-4-0-upgrade/20651)
**Author:** [@Janet](https://discuss.elastic.co/u/Janet)\ **Replies:** 13\ **Last updated:** [November 11, 2014, 8:48am UTC](https://discuss.elastic.co/t/nodes-not-joining-after-1-4-0-upgrade/20651 "2014-11-11T08:48:07Z")
I've upgraded a couple of clusters to 1.4.0 from 1.3.4. On both of them, I had nodes that spewed the following, and were slow to join, if they joined at all: \[2014-11-09 04:33:45,995\]\[INFO \]\[discovery.zen … --- ## [Yet another memory usage issue - ES 0.90.5](https://discuss.elastic.co/t/yet-another-memory-usage-issue-es-0-90-5/13922)
**Author:** [@subin](https://discuss.elastic.co/u/subin)\ **Replies:** 17\ **Last updated:** [November 11, 2013, 2:56pm UTC](https://discuss.elastic.co/t/yet-another-memory-usage-issue-es-0-90-5/13922 "2013-11-11T14:56:40Z")
I have ES 0.90.5 in my Logstash setup (Debian 6). I have indices which are rotated daily and each day's index would amount to 12G. I'm planning to retain 20 days of indexes, therefore at any time ES would maintain an… --- ## [\[User error, please ignore\] Can't upgrade from 7.17.19 to ES8. Docs indicate that you should be able to](https://discuss.elastic.co/t/user-error-please-ignore-cant-upgrade-from-7-17-19-to-es8-docs-indicate-that-you-should-be-able-to/362229)
**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\ **Replies:** 12\ **Last updated:** [July 1, 2024, 6:06am UTC](https://discuss.elastic.co/t/user-error-please-ignore-cant-upgrade-from-7-17-19-to-es8-docs-indicate-that-you-should-be-able-to/362229 "2024-07-01T06:06:13Z")
I am upgrading from 7.17.19 to 8.11.3 specifically and got the following message: Upgrading to \[8.11.3\] is only supported from version \[7.17.0\] (full error below) \[2024-06-28T19:16:18,650\]\[ERROR\]\[org.elasticsearch.boot… --- ## [Preconfigured Dashboards for ELB and Billing in ElasticSearch](https://discuss.elastic.co/t/preconfigured-dashboards-for-elb-and-billing-in-elasticsearch/227217)
**Author:** [@vennemp](https://discuss.elastic.co/u/vennemp)\ **Replies:** 9\ **Last updated:** [April 13, 2020, 9:13pm UTC](https://discuss.elastic.co/t/preconfigured-dashboards-for-elb-and-billing-in-elasticsearch/227217 "2020-04-13T21:13:38Z")
Hey guys, I just started using your product to get AWS metrics in to ELK and love the preconfigured EC2 dashboard. However, I was having some problems with getting the ELB and Billing dashboards to appear. I am using AWS… --- ## [Aggregate return all data](https://discuss.elastic.co/t/aggregate-return-all-data/226053)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 9\ **Last updated:** [April 1, 2020, 4:37pm UTC](https://discuss.elastic.co/t/aggregate-return-all-data/226053 "2020-04-01T16:37:27Z")
Hi, Following is my query GET product\_detail\_info/\_search { "query": { "multi\_match": { "query": "a", "fields": \["item\_name", "description","cat\_name","item\_details"\] } }, "aggs": { "search\_result": { "terms"… --- ## [Issue with select \* from indexname in tableau connected to elasticsearch using JDBC](https://discuss.elastic.co/t/issue-with-select-from-indexname-in-tableau-connected-to-elasticsearch-using-jdbc/187692)
**Author:** [@ivar](https://discuss.elastic.co/u/ivar)\ **Replies:** 9\ **Last updated:** [July 8, 2019, 4:10pm UTC](https://discuss.elastic.co/t/issue-with-select-from-indexname-in-tableau-connected-to-elasticsearch-using-jdbc/187692 "2019-07-08T16:10:11Z")
I'm using elasticsearch 6.8 and JDBC client for 6.8 when connecting to elasticsearch from tableau, and executing select \* from indexname it is failing with following error An error occurred while communicating with t… --- ## [How to read logs in subfolder of main folder filebeat](https://discuss.elastic.co/t/how-to-read-logs-in-subfolder-of-main-folder-filebeat/323888)
**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\ **Replies:** 13\ **Last updated:** [January 29, 2023, 4:27am UTC](https://discuss.elastic.co/t/how-to-read-logs-in-subfolder-of-main-folder-filebeat/323888 "2023-01-29T04:27:12Z")
HI, I have one main folder inside this I have 2 folder I am able to read the data of both folder in filebeat but how can be show which log is belong to which subfolder. --- ## [How many nodes are required for 10 TB of data?](https://discuss.elastic.co/t/how-many-nodes-are-required-for-10-tb-of-data/365133)
**Author:** [@AnushreeRaikar](https://discuss.elastic.co/u/AnushreeRaikar)\ **Replies:** 14\ **Last updated:** [August 20, 2024, 9:48am UTC](https://discuss.elastic.co/t/how-many-nodes-are-required-for-10-tb-of-data/365133 "2024-08-20T09:48:59Z")
Data Size: 6.8 TB Monthly Increase: 150 GB Time Period: 18 months Calculation: Total Increase in Data: Total Increase=150GB/month×18months=2700GB=2.7TB Total Data Size After 18 Months: Final Data Size=6.8TB+2.7TB=… --- ## [Enterprise App Search UI Configuration](https://discuss.elastic.co/t/enterprise-app-search-ui-configuration/329384)
**Author:** [@aisyaharifin](https://discuss.elastic.co/u/aisyaharifin)\ **Replies:** 10\ **Last updated:** [April 19, 2023, 1:30pm UTC](https://discuss.elastic.co/t/enterprise-app-search-ui-configuration/329384 "2023-04-19T13:30:25Z")
Hello, I want to ask, how do I configure my Search UI in tabular format? Thank you. --- ## [Template par défaut](https://discuss.elastic.co/t/template-par-defaut/183961)
**Author:** [@GedeoN](https://discuss.elastic.co/u/GedeoN)\ **Replies:** 9\ **Last updated:** [June 20, 2019, 12:53pm UTC](https://discuss.elastic.co/t/template-par-defaut/183961 "2019-06-20T12:53:39Z")
Bonjour Messieurs Dames, Je me posais une question aujourd'hui, je travaille sur la future mutualisation des plateformes ELK de mon client. (Une plateforme en 6.4.2 et une en 5.4.2) L'idée sera de passer notamment de l… --- ## [Logstash failing to convert from csv to json and to forward to opensearch](https://discuss.elastic.co/t/logstash-failing-to-convert-from-csv-to-json-and-to-forward-to-opensearch/317264)
**Author:** [@D\_Go](https://discuss.elastic.co/u/D_Go)\ **Replies:** 12\ **Last updated:** [October 27, 2022, 5:35am UTC](https://discuss.elastic.co/t/logstash-failing-to-convert-from-csv-to-json-and-to-forward-to-opensearch/317264 "2022-10-27T05:35:54Z")
Hi, I've been at this for a while and cant seem to load a csv file to AWS opensearch from logstash. Any help will be appreciated. """ \[ERROR\] 2022-10-23 04:09:20.063 \[Converge PipelineAction::Create\] agent - Failed to… --- ## [Logstash to elasticsearch service](https://discuss.elastic.co/t/logstash-to-elasticsearch-service/268626)
**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\ **Replies:** 12\ **Last updated:** [March 30, 2021, 2:50am UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-service/268626 "2021-03-30T02:50:50Z")
Hi everyone, I'm on my trial to test elasticcloud. But now I got problem to create pipeline from logstash to elasticcloud. Here is my logstash.conf output output { stdout{codec=\>rubydebug} elasticsearch… --- ## [Index creation performance](https://discuss.elastic.co/t/index-creation-performance/9112)
**Author:** [@Vahid](https://discuss.elastic.co/u/Vahid)\ **Replies:** 12\ **Last updated:** [September 26, 2012, 7:53am UTC](https://discuss.elastic.co/t/index-creation-performance/9112 "2012-09-26T07:53:59Z")
Hi all, I'm doing some benchmarks to measure the performance of ES. 1: After storing about 1,200,000 docs(~25GB) the performance of indexing is decreasing, so I tried to create a new index after indexing each 1.200… --- ## [ILM rollsover the index but it stays in hot phase](https://discuss.elastic.co/t/ilm-rollsover-the-index-but-it-stays-in-hot-phase/219378)
**Author:** [@TomaszKlosinski](https://discuss.elastic.co/u/TomaszKlosinski)\ **Replies:** 9\ **Last updated:** [March 3, 2020, 5:04pm UTC](https://discuss.elastic.co/t/ilm-rollsover-the-index-but-it-stays-in-hot-phase/219378 "2020-03-03T17:04:22Z")
I have ILM like this: PUT \_ilm/policy/logs { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { "max\_size"… --- ## [Logstash 7.2 takes about atleast 5 mins to update ES 7.2](https://discuss.elastic.co/t/logstash-7-2-takes-about-atleast-5-mins-to-update-es-7-2/208812)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 9\ **Last updated:** [December 2, 2019, 11:16am UTC](https://discuss.elastic.co/t/logstash-7-2-takes-about-atleast-5-mins-to-update-es-7-2/208812 "2019-12-02T11:16:49Z")
Hi, I have implemented a ELK setup of 7.2 version. Below is my logstash conf input { file { path =\> "/etc/logstash/conf.d/mytest.txt" start\_position =\> "beginning" sincedb\_path =\> "/d… [Previous page](https://discuss.elastic.co/top.md?page=214&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=216&per_page=50&period=all)