# Top

**URL:** https://discuss.elastic.co/top.md?page=217&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 218

---

## [Automating Rule Creation for Kibana](https://discuss.elastic.co/t/automating-rule-creation-for-kibana/361603)

<div class="topic-metadata">

**Author:** [@Emin](https://discuss.elastic.co/u/Emin)\
**Replies:** 14\
**Last updated:** [August 12, 2024, 12:45pm UTC](https://discuss.elastic.co/t/automating-rule-creation-for-kibana/361603 "2024-08-12T12:45:23Z")

</div>

I am trying to automate rule creation, updating and deletion via a Python script. I have tried both using curl and Python I use curl to create the rule: curl -k -X POST "https://192.168.10.131:5601/api/detection\_engine/…

---

## [Cant create cluster on ec2](https://discuss.elastic.co/t/cant-create-cluster-on-ec2/15434)

<div class="topic-metadata">

**Author:** [@David\_Montgomery](https://discuss.elastic.co/u/David_Montgomery)\
**Replies:** 16\
**Last updated:** [February 4, 2014, 12:26am UTC](https://discuss.elastic.co/t/cant-create-cluster-on-ec2/15434 "2014-02-04T00:26:51Z")

</div>

Hi, I have two nodes runnging on ec2. curl -X GET http://localhost:9200/\_cluster/health?pretty=true { "cluster\_name" : "12345elasticsearch", "status" : "green", "timed\_out" : false, "number\_of\_nodes…

---

## [Should the Beat modules only be installed on client?](https://discuss.elastic.co/t/should-the-beat-modules-only-be-installed-on-client/187483)

<div class="topic-metadata">

**Author:** [@Mhn](https://discuss.elastic.co/u/Mhn)\
**Replies:** 9\
**Last updated:** [June 27, 2019, 10:54am UTC](https://discuss.elastic.co/t/should-the-beat-modules-only-be-installed-on-client/187483 "2019-06-27T10:54:36Z")

</div>

Hi everyone, i'm newbi and i am using elasticsearch , logstash, kibana. I want to send logs from an client to my elastic server (logstash) via FileBeat. Should i install FileBeat modules and activate it only on client o…

---

## [Retaining Historical Data Outside of ElasticStack](https://discuss.elastic.co/t/retaining-historical-data-outside-of-elasticstack/158663)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 9\
**Last updated:** [December 4, 2018, 8:33pm UTC](https://discuss.elastic.co/t/retaining-historical-data-outside-of-elasticstack/158663 "2018-12-04T20:33:31Z")

</div>

We have a small, single node Elastic Stack configuration running. Once we reach about 2 billion documents, our installation starts to have trouble keeping up. For this reason, I've configured Curator to delete indexes …

---

## [Failed on parsing mappings on index creation \[nyc\_taxis\]](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/318539)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 11\
**Last updated:** [November 9, 2022, 3:05pm UTC](https://discuss.elastic.co/t/failed-on-parsing-mappings-on-index-creation-nyc-taxis/318539 "2022-11-09T15:05:40Z")

</div>

Previously raised issue but the issue is still not fixed. ES Version 8.2.0 ESRally Version: 2.7.0 Running on kubernetes. Using official docker image. Getting below error, message":"failed on parsing mappings on i…

---

## [Kibana 6.5.1 Elastic Cloud Kibana Browser 100%](https://discuss.elastic.co/t/kibana-6-5-1-elastic-cloud-kibana-browser-100/158966)

<div class="topic-metadata">

**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\
**Replies:** 10\
**Last updated:** [December 20, 2018, 9:37pm UTC](https://discuss.elastic.co/t/kibana-6-5-1-elastic-cloud-kibana-browser-100/158966 "2018-12-20T21:37:46Z")

</div>

Kibana 6.5.1 Elastic Cloud Tested Chrome Version 70.0.3538.110 (Official Build) (64-bit) Internet Explorer 11.407.17134.0 Browser Hangs on Visualizations With CPU 100% In Chrome TaskManager No performance issues in E…

---

## [ES + Attachment --\> indexed documents incomplete](https://discuss.elastic.co/t/es-attachment-indexed-documents-incomplete/6707)

<div class="topic-metadata">

**Author:** [@bdonnovan](https://discuss.elastic.co/u/bdonnovan)\
**Replies:** 10\
**Last updated:** [March 4, 2012, 5:59am UTC](https://discuss.elastic.co/t/es-attachment-indexed-documents-incomplete/6707 "2012-03-04T05:59:08Z")

</div>

Hey everyone, i am pretty much a brand new user to elasticsearch and i very much like it so far. I am using ES in version 18,7 with the attachment- mapper plugin. It is properly installed and i see it getting picked…

---

## [Elasticsearch 8.15.1 in FIPS mode](https://discuss.elastic.co/t/elasticsearch-8-15-1-in-fips-mode/366983)

<div class="topic-metadata">

**Author:** [@fox9](https://discuss.elastic.co/u/fox9)\
**Replies:** 12\
**Last updated:** [October 11, 2024, 2:25am UTC](https://discuss.elastic.co/t/elasticsearch-8-15-1-in-fips-mode/366983 "2024-10-11T02:25:53Z")

</div>

Heya, I am trying to configure a 3-node cluster in FIPS mode but TLS doesn't seem to work. Here are the system details: Ubuntu 20.04 Elasticsearch 8.15.1 FIPS enabled: bc-fips-2.0.0.jar, bctls-fips-2.0.19.jar, bcpkix-…

---

## [Higher number of active threads with elasticsearch-java dependency](https://discuss.elastic.co/t/higher-number-of-active-threads-with-elasticsearch-java-dependency/364385)

<div class="topic-metadata">

**Author:** [@sibasish.palo](https://discuss.elastic.co/u/sibasish.palo)\
**Replies:** 26\
**Last updated:** [August 27, 2024, 4:42pm UTC](https://discuss.elastic.co/t/higher-number-of-active-threads-with-elasticsearch-java-dependency/364385 "2024-08-27T16:42:00Z")

</div>

Hi we are currently migrating to Elasticsearch v8.12.0 and we have below code to create the Elasticsearch client to make the connections to Elasticsearch. we are using elasticsearch-java: v8.12.0 dependency @Provides …

---

## [Speed of elastic search](https://discuss.elastic.co/t/speed-of-elastic-search/326554)

<div class="topic-metadata">

**Author:** [@smitak](https://discuss.elastic.co/u/smitak)\
**Replies:** 15\
**Last updated:** [March 4, 2023, 8:41pm UTC](https://discuss.elastic.co/t/speed-of-elastic-search/326554 "2023-03-04T20:41:03Z")

</div>

How to increase Elasticsearch speed . I am uploading 75 files at a time and i want to add pdf file content into database.But it is taking 15-20 min. Any suggestions.

---

## [Any other way to cleanly shut down ElasticSearch other than CTRL+C on a console?](https://discuss.elastic.co/t/any-other-way-to-cleanly-shut-down-elasticsearch-other-than-ctrl-c-on-a-console/4092)

<div class="topic-metadata">

**Author:** [@Administrator\_2](https://discuss.elastic.co/u/Administrator_2)\
**Replies:** 12\
**Last updated:** [March 14, 2011, 7:03pm UTC](https://discuss.elastic.co/t/any-other-way-to-cleanly-shut-down-elasticsearch-other-than-ctrl-c-on-a-console/4092 "2011-03-14T19:03:27Z")

</div>

I'm spawning ElasticSearch through a Process in .NET and I want to shut it down gracefully (not just kill the process). However, the Process class in .NET does not create a process group which i…

---

## [Sudden Unexplained CPU Usage](https://discuss.elastic.co/t/sudden-unexplained-cpu-usage/10071)

<div class="topic-metadata">

**Author:** [@Dan\_Lecocq](https://discuss.elastic.co/u/Dan_Lecocq)\
**Replies:** 16\
**Last updated:** [December 21, 2012, 10:30pm UTC](https://discuss.elastic.co/t/sudden-unexplained-cpu-usage/10071 "2012-12-21T22:30:00Z")

</div>

Back with more issues. Periodically, and seemingly inexplicably, the whole cluster becomes essentially unusable for what's sometimes hours. There's nothing in the logs (or slow log) to indicate what's up, and \`hot\_th…

---

## [Rally metrics in a single node cluster](https://discuss.elastic.co/t/rally-metrics-in-a-single-node-cluster/275808)

<div class="topic-metadata">

**Author:** [@Lasse\_Nedergaard](https://discuss.elastic.co/u/Lasse_Nedergaard)\
**Replies:** 9\
**Last updated:** [June 15, 2021, 10:05am UTC](https://discuss.elastic.co/t/rally-metrics-in-a-single-node-cluster/275808 "2021-06-15T10:05:53Z")

</div>

Hi For simplicity I want to store reporting metrics in a single node cluster. I can see the index is created with 1 replicas. Are there any way to set replicas to 0? Or is my only option to create a cluster with more n…

---

## [Elasticsearch clusterstate data](https://discuss.elastic.co/t/elasticsearch-clusterstate-data/292392)

<div class="topic-metadata">

**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\
**Replies:** 11\
**Last updated:** [December 22, 2021, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-clusterstate-data/292392 "2021-12-22T08:22:03Z")

</div>

hello,I have a question need to have a answer，which is if my master es nodes have multi datapaths,the clusterstate data will be saved Multiple and which is Exactly the same

---

## [Cannot Register Snapshot Repository for S3 compliant (backblaze) service](https://discuss.elastic.co/t/cannot-register-snapshot-repository-for-s3-compliant-backblaze-service/365581)

<div class="topic-metadata">

**Author:** [@ivanlawrence](https://discuss.elastic.co/u/ivanlawrence)\
**Replies:** 20\
**Last updated:** [August 28, 2024, 8:56pm UTC](https://discuss.elastic.co/t/cannot-register-snapshot-repository-for-s3-compliant-backblaze-service/365581 "2024-08-28T20:56:13Z")

</div>

I've looked at the other tickets for similar issues and have not yet found a solution or even suggestion for a next step. On ElasticCloud 7.15 I have a repo setup to backblaze and it's working well enough (a little slow…

---

## [Cannot open data from 5.x in 6.x : Mappings](https://discuss.elastic.co/t/cannot-open-data-from-5-x-in-6-x-mappings/250346)

<div class="topic-metadata">

**Author:** [@yBother](https://discuss.elastic.co/u/yBother)\
**Replies:** 12\
**Last updated:** [October 3, 2020, 3:40pm UTC](https://discuss.elastic.co/t/cannot-open-data-from-5-x-in-6-x-mappings/250346 "2020-10-03T15:40:51Z")

</div>

I've created a routine that updates ES clients from 5.x to 6.x and finally 7.x Somehow some clients cannot be updated. Loading existing data in 6.8 fails. Appearently some mappings are causing this. But there are not…

---

## [Gateway snapshots and thinking of a DR site](https://discuss.elastic.co/t/gateway-snapshots-and-thinking-of-a-dr-site/4331)

<div class="topic-metadata">

**Author:** [@Paul\_Smith](https://discuss.elastic.co/u/Paul_Smith)\
**Replies:** 13\
**Last updated:** [May 6, 2011, 3:44pm UTC](https://discuss.elastic.co/t/gateway-snapshots-and-thinking-of-a-dr-site/4331 "2011-05-06T15:44:14Z")

</div>

Is there a way to have \_2\_ Gateways in ElasticSearch? Say, a local FS Gateway for normal operations standard redundancy, plus, say, an S3 Gateway for DR-style purposes.. ? I'm guessing many people use ES to index d…

---

## [CPU usage metric via CAT API misbehaving after upgrading to 7.16.3 (running in LXD)](https://discuss.elastic.co/t/cpu-usage-metric-via-cat-api-misbehaving-after-upgrading-to-7-16-3-running-in-lxd/294620)

<div class="topic-metadata">

**Author:** [@juan.domenech](https://discuss.elastic.co/u/juan.domenech)\
**Replies:** 9\
**Last updated:** [January 25, 2022, 8:43pm UTC](https://discuss.elastic.co/t/cpu-usage-metric-via-cat-api-misbehaving-after-upgrading-to-7-16-3-running-in-lxd/294620 "2022-01-25T20:43:01Z")

</div>

Problem: In a 10 core CPU, 64GB RAM system, Centos 7.9 under LXD container virtualisation Elasticsearch reports wrong CPU usage after upgrading to 7.16.3 This issue wasn't present on 7.15.1 We use this metric to track …

---

## [High cpu load elasticsearch on logstash output](https://discuss.elastic.co/t/high-cpu-load-elasticsearch-on-logstash-output/161009)

<div class="topic-metadata">

**Author:** [@tim.van.rooijen](https://discuss.elastic.co/u/tim.van.rooijen)\
**Replies:** 9\
**Last updated:** [December 18, 2018, 9:33am UTC](https://discuss.elastic.co/t/high-cpu-load-elasticsearch-on-logstash-output/161009 "2018-12-18T09:33:36Z")

</div>

Hi, Beginner with the elk stack. Have an api thats sends messages to rabbit mq. Logstash reads the messages and adds them to elasticsearch. When the api is under peak load the cpu load on elasticsearch is really high. …

---

## [Logstash 8.2.2 on windows 10](https://discuss.elastic.co/t/logstash-8-2-2-on-windows-10/307116)

<div class="topic-metadata">

**Author:** [@Airborn](https://discuss.elastic.co/u/Airborn)\
**Replies:** 15\
**Last updated:** [June 14, 2022, 12:15pm UTC](https://discuss.elastic.co/t/logstash-8-2-2-on-windows-10/307116 "2022-06-14T12:15:11Z")

</div>

Hello, logstash 8.2.2Preformatted text for windows failed to run, i have the following output. Could someone please help Regards C:\\WINDOWS\\system32\>logstash -f logstash.conf "Using bundled JDK: D:\\Technical-Docs\\Audi…

---

## [GC can't decrease heap memory usage and Elastic fails #44312](https://discuss.elastic.co/t/gc-cant-decrease-heap-memory-usage-and-elastic-fails-44312/190350)

<div class="topic-metadata">

**Author:** [@Arman\_Ajdani](https://discuss.elastic.co/u/Arman_Ajdani)\
**Replies:** 11\
**Last updated:** [July 15, 2019, 9:34am UTC](https://discuss.elastic.co/t/gc-cant-decrease-heap-memory-usage-and-elastic-fails-44312/190350 "2019-07-15T09:34:32Z")

</div>

I use elastic 6.2.4 with a 2 node cluster. when elastic index rate increases at specific time at day heap memory exceed th 70 % and GC starts but heap memory usage won't decrease untill goes up to 97-98% and elastic won…

---

## [Prebuilt ML jobs fail](https://discuss.elastic.co/t/prebuilt-ml-jobs-fail/227309)

<div class="topic-metadata">

**Author:** [@kfs](https://discuss.elastic.co/u/kfs)\
**Replies:** 9\
**Last updated:** [April 20, 2020, 1:02pm UTC](https://discuss.elastic.co/t/prebuilt-ml-jobs-fail/227309 "2020-04-20T13:02:44Z")

</div>

Hi, I have an issue with starting prebuilt ML jobs that use winlogbeat\* data. The job logs show that lookback returned no data but actually I am pretty sure that it is as SIEM dashboard shows winlogbeat events coming fr…

---

## [Temporary performance degradation when adding new node](https://discuss.elastic.co/t/temporary-performance-degradation-when-adding-new-node/3287)

<div class="topic-metadata">

**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\
**Replies:** 14\
**Last updated:** [September 2, 2010, 8:15am UTC](https://discuss.elastic.co/t/temporary-performance-degradation-when-adding-new-node/3287 "2010-09-02T08:15:19Z")

</div>

Hey, Was curious if there were any thoughts on a performance issue I have observed. Running two nodes mirrored (ie, replicas=1 for all indexes) w/ 40 indexes, 75 shards, ~30gb of data, fs storage, with no indexin…

---

## [Is there an output plugin that can be used to update logfile index output?](https://discuss.elastic.co/t/is-there-an-output-plugin-that-can-be-used-to-update-logfile-index-output/176098)

<div class="topic-metadata">

**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\
**Replies:** 13\
**Last updated:** [April 11, 2019, 8:24pm UTC](https://discuss.elastic.co/t/is-there-an-output-plugin-that-can-be-used-to-update-logfile-index-output/176098 "2019-04-11T20:24:50Z")

</div>

I am processing log files. Each line of the log files being processed contain an integer field called 'flag'. One of the lines of each log contains a value 'JobID' that is extracted in the filter section of the pipeli…

---

## [Attachment Plugin Questions on Storing](https://discuss.elastic.co/t/attachment-plugin-questions-on-storing/5480)

<div class="topic-metadata">

**Author:** [@Mike\_Gaffney](https://discuss.elastic.co/u/Mike_Gaffney)\
**Replies:** 13\
**Last updated:** [October 13, 2011, 1:24am UTC](https://discuss.elastic.co/t/attachment-plugin-questions-on-storing/5480 "2011-10-13T01:24:14Z")

</div>

I'm trying to make use of the attachments plugin. I've got the following Mapping: { "docs":{ "properties" : { "contents" : { "type" : "a…

---

## [New version of Kibana in the works?](https://discuss.elastic.co/t/new-version-of-kibana-in-the-works/19237)

<div class="topic-metadata">

**Author:** [@Antonio\_Augusto\_Sant](https://discuss.elastic.co/u/Antonio_Augusto_Sant)\
**Replies:** 16\
**Last updated:** [October 6, 2014, 4:40pm UTC](https://discuss.elastic.co/t/new-version-of-kibana-in-the-works/19237 "2014-10-06T16:40:13Z")

</div>

This one is for the devs, and Rashid in special: there is any new version of Kibana in the works? I'm asking this because I'm about to start a project in my company for log management, and there are some requisites …

---

## [Cannot make hunspell to work](https://discuss.elastic.co/t/cannot-make-hunspell-to-work/10082)

<div class="topic-metadata">

**Author:** [@muhamed\_alibegovic](https://discuss.elastic.co/u/muhamed_alibegovic)\
**Replies:** 11\
**Last updated:** [November 24, 2013, 3:51pm UTC](https://discuss.elastic.co/t/cannot-make-hunspell-to-work/10082 "2013-11-24T15:51:03Z")

</div>

Hello, I'm new to ES and also search engines. I would like to use hunspell for stemming the croatian language. This is my test setup and how I search curl -XPUT 'http://localhost:9200/test50k' -d '{"settings": {"…

---

## [Installing ElasticSearch-8.14.3 on Windows 11](https://discuss.elastic.co/t/installing-elasticsearch-8-14-3-on-windows-11/363905)

<div class="topic-metadata">

**Author:** [@sky442146311](https://discuss.elastic.co/u/sky442146311)\
**Replies:** 14\
**Last updated:** [July 31, 2024, 12:25am UTC](https://discuss.elastic.co/t/installing-elasticsearch-8-14-3-on-windows-11/363905 "2024-07-31T00:25:55Z")

</div>

I have set the ES\_JAVA\_COME environment variable, but I am unable to start elasticsearch

---

## [Theme settings for the forum are being ignored](https://discuss.elastic.co/t/theme-settings-for-the-forum-are-being-ignored/335540)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 9\
**Last updated:** [June 12, 2023, 10:21pm UTC](https://discuss.elastic.co/t/theme-settings-for-the-forum-are-being-ignored/335540 "2023-06-12T22:21:42Z")

</div>

Hello, Is there any way to force a theme for the forum? I want to use the Light theme, but it is forcing the dark theme to me. Is it a bug on Discuss? The Light (Main) theme is already selected on the settings and the…

---

## [How to split data into spaces](https://discuss.elastic.co/t/how-to-split-data-into-spaces/330229)

<div class="topic-metadata">

**Author:** [@Joelgoncalves3000](https://discuss.elastic.co/u/Joelgoncalves3000)\
**Replies:** 9\
**Last updated:** [April 19, 2023, 5:15pm UTC](https://discuss.elastic.co/t/how-to-split-data-into-spaces/330229 "2023-04-19T17:15:50Z")

</div>

Hello, let's imagine that I have a cluster with 5 nodes and each node is a client, I want these 5 to divide the data from these clients into spaces, I would also like to install packebeat and filebeat on each node and se…

---

## [Shard count and plugin questions](https://discuss.elastic.co/t/shard-count-and-plugin-questions/17911)

<div class="topic-metadata">

**Author:** [@Todd\_Nine](https://discuss.elastic.co/u/Todd_Nine)\
**Replies:** 13\
**Last updated:** [June 10, 2014, 11:00pm UTC](https://discuss.elastic.co/t/shard-count-and-plugin-questions/17911 "2014-06-10T23:00:00Z")

</div>

Hi All, We've been using elastic search as our search index for our new persistence implementation. https://usergrid.incubator.apache.org/ I have a few questions I could use a hand with. 1) Is there any g…

---

## [Using Many Indexes](https://discuss.elastic.co/t/using-many-indexes/3439)

<div class="topic-metadata">

**Author:** [@hartzler\_2](https://discuss.elastic.co/u/hartzler_2)\
**Replies:** 13\
**Last updated:** [October 13, 2010, 9:27pm UTC](https://discuss.elastic.co/t/using-many-indexes/3439 "2010-10-13T21:27:06Z")

</div>

(Sorry if this is a double post, had some trouble with Nabble/Groups and my google apps for domains email address). Interested in having an index per user which would result in many indexes with the same configurati…

---

## [Logstash Gone Wrong After force shutdown](https://discuss.elastic.co/t/logstash-gone-wrong-after-force-shutdown/351867)

<div class="topic-metadata">

**Author:** [@akrog79](https://discuss.elastic.co/u/akrog79)\
**Replies:** 12\
**Last updated:** [January 31, 2024, 8:37am UTC](https://discuss.elastic.co/t/logstash-gone-wrong-after-force-shutdown/351867 "2024-01-31T08:37:15Z")

</div>

I have logstash installed as a service on a machine with Logstash+Kibana+Elastic. My logstash was updated, so its seems that doesn't shutdown properly and now show an error with a pipeline: Jan 26 10:19:56 esearch logs…

---

## [Mismatch between dotted lines and the default dark lines in Time Series of TSVB visualization](https://discuss.elastic.co/t/mismatch-between-dotted-lines-and-the-default-dark-lines-in-time-series-of-tsvb-visualization/319540)

<div class="topic-metadata">

**Author:** [@Abj\_Ins](https://discuss.elastic.co/u/Abj_Ins)\
**Replies:** 12\
**Last updated:** [December 13, 2022, 5:20am UTC](https://discuss.elastic.co/t/mismatch-between-dotted-lines-and-the-default-dark-lines-in-time-series-of-tsvb-visualization/319540 "2022-12-13T05:20:34Z")

</div>

Hi Team, In the Timeseries visualization, we can see dotted lines in the middle of the visualization which is matching exactly on top of the default dark lines. However, when we hover the mouse either on the left or …

---

## [Lotstash is not picking Apache Logs config](https://discuss.elastic.co/t/lotstash-is-not-picking-apache-logs-config/202747)

<div class="topic-metadata">

**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\
**Replies:** 10\
**Last updated:** [October 9, 2019, 11:21pm UTC](https://discuss.elastic.co/t/lotstash-is-not-picking-apache-logs-config/202747 "2019-10-09T23:21:17Z")

</div>

I have two Apache webservers (1x uat and 1x prod). I am sending the logs to my ELK setup for both of them. For the UAT one, it is working fine. For the PROD one, the logs are now shown in Kibana. I need some help to d…

---

## [Unable to create a Kibana Index pattern](https://discuss.elastic.co/t/unable-to-create-a-kibana-index-pattern/262005)

<div class="topic-metadata">

**Author:** [@Maria\_Elle](https://discuss.elastic.co/u/Maria_Elle)\
**Replies:** 9\
**Last updated:** [January 25, 2021, 2:38pm UTC](https://discuss.elastic.co/t/unable-to-create-a-kibana-index-pattern/262005 "2021-01-25T14:38:50Z")

</div>

I am using an Ubuntu machine, and I have just finished downloading all of ELK onto it, I now want to create a Kibana Index pattern with Filebeat but it is not allowing me to do so. How can I fix this issue or find out wh…

---

## [Multiple monitoring cycles after recreating docker image](https://discuss.elastic.co/t/multiple-monitoring-cycles-after-recreating-docker-image/231565)

<div class="topic-metadata">

**Author:** [@MichaelM](https://discuss.elastic.co/u/MichaelM)\
**Replies:** 9\
**Last updated:** [May 15, 2020, 9:26am UTC](https://discuss.elastic.co/t/multiple-monitoring-cycles-after-recreating-docker-image/231565 "2020-05-15T09:26:36Z")

</div>

Hi, I am currently monitoring a dockerized service with metricbeat using autodiscover, which works fine so far. The problem: when I deploy a newer version of the service, metricbeat starts an additional monitoring cycl…

---

## [Elasticsearch 1.0.1 on AWS](https://discuss.elastic.co/t/elasticsearch-1-0-1-on-aws/16469)

<div class="topic-metadata">

**Author:** [@Daniel\_F](https://discuss.elastic.co/u/Daniel_F)\
**Replies:** 15\
**Last updated:** [March 21, 2014, 10:07am UTC](https://discuss.elastic.co/t/elasticsearch-1-0-1-on-aws/16469 "2014-03-21T10:07:46Z")

</div>

Hi, I am testing Elasticsearch version 1.0.1 on AWS. I have followed documentation of Elasticsearch (http://www.elasticsearch.org/tutorials/elasticsearch-on-ec2/) and installed latest EC2 plugin. In the log I ha…

---

## [Re: what's happening when I delete elasticsearch/data/elasticsearch/nodes](https://discuss.elastic.co/t/re-whats-happening-when-i-delete-elasticsearch-data-elasticsearch-nodes/12754)

<div class="topic-metadata">

**Author:** [@jxarms3](https://discuss.elastic.co/u/jxarms3)\
**Replies:** 15\
**Last updated:** [July 11, 2013, 7:58pm UTC](https://discuss.elastic.co/t/re-whats-happening-when-i-delete-elasticsearch-data-elasticsearch-nodes/12754 "2013-07-11T19:58:15Z")

</div>

I stop the elasticsearch server, then I delete the nodes, then start the server back up. I get rheems of logging and exceptions. What's happening? I thought when i deleted ./nodes, that deleted all data? James -…

---

## [Elassandra 6.2.3 to Elasticsearch 7.7.1 data migration process](https://discuss.elastic.co/t/elassandra-6-2-3-to-elasticsearch-7-7-1-data-migration-process/275100)

<div class="topic-metadata">

**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\
**Replies:** 14\
**Last updated:** [June 7, 2021, 8:10am UTC](https://discuss.elastic.co/t/elassandra-6-2-3-to-elasticsearch-7-7-1-data-migration-process/275100 "2021-06-07T08:10:23Z")

</div>

I want to migrate the data from Elassandra 6.2.3 cluster to Elasticsearch 7.7.1 cluster. Let's suppose that Elasticsearch 7.7.1 has the same index schemas, templates and aliases. (Except maybe changes related to breakin…

---

## [Elasticsearch query performance](https://discuss.elastic.co/t/elasticsearch-query-performance/13235)

<div class="topic-metadata">

**Author:** [@VB1](https://discuss.elastic.co/u/VB1)\
**Replies:** 14\
**Last updated:** [August 21, 2013, 5:13pm UTC](https://discuss.elastic.co/t/elasticsearch-query-performance/13235 "2013-08-21T17:13:14Z")

</div>

I'm using elasticsearch to index two types of objects - Data details - Contract object ~ 60 properties (Object size - 120 bytes) Risk Item Object ~ 125 properties (Object size - 250 bytes) Contract is parent of…

---

## [Geo\_point index create in Elasticsearch](https://discuss.elastic.co/t/geo-point-index-create-in-elasticsearch/199029)

<div class="topic-metadata">

**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\
**Replies:** 10\
**Last updated:** [September 17, 2019, 9:37am UTC](https://discuss.elastic.co/t/geo-point-index-create-in-elasticsearch/199029 "2019-09-17T09:37:59Z")

</div>

Hi All, Below it the my logstash output conf file, as per the conf new Index will create on daily basis. how can I create these all indexes with geo\_type ? output { elasticsearch { hosts =\> \["localhost"\] user =\> 'e…

---

## [A question about search threadpool size](https://discuss.elastic.co/t/a-question-about-search-threadpool-size/197745)

<div class="topic-metadata">

**Author:** [@rpgmakervx](https://discuss.elastic.co/u/rpgmakervx)\
**Replies:** 10\
**Last updated:** [September 16, 2019, 9:52am UTC](https://discuss.elastic.co/t/a-question-about-search-threadpool-size/197745 "2019-09-16T09:52:12Z")

</div>

As org.elasticsearch.threadpool. ExecutorBuilder#applyHardSizeLimit method shown that write threadpool holds a controllable core thread count, default could not over 32. but search will return an unlimit max size …

---

## [Major Bug in 0.17.x and 0.18.x (up to 0.18.2)](https://discuss.elastic.co/t/major-bug-in-0-17-x-and-0-18-x-up-to-0-18-2/5874)

<div class="topic-metadata">

**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\
**Replies:** 16\
**Last updated:** [November 16, 2011, 5:46pm UTC](https://discuss.elastic.co/t/major-bug-in-0-17-x-and-0-18-x-up-to-0-18-2/5874 "2011-11-16T17:46:27Z")

</div>

Hey, I posted before as a reply to a thread, but it should be on its own thread and notice. A major bug was found in 0.17.x versions and 0.18.x (up to and including 0.18.2): https://github.com/elasticsearch/ela…

---

## [Match complete line after some regex pattern](https://discuss.elastic.co/t/match-complete-line-after-some-regex-pattern/284385)

<div class="topic-metadata">

**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\
**Replies:** 9\
**Last updated:** [September 17, 2021, 9:57pm UTC](https://discuss.elastic.co/t/match-complete-line-after-some-regex-pattern/284385 "2021-09-17T21:57:55Z")

</div>

I have lines in document like this. \*\*\* Begin time: Sat Jun 26 21:11:14 AEST 2019 Want to assign new field begin\_time = Sat Jun 26 21:11:14 AEST 2019 This is what I tried: if x =~ /(\\bBegin time:\\s+(.\*))/ …

---

## [Kibana stuck in a crash loop](https://discuss.elastic.co/t/kibana-stuck-in-a-crash-loop/364834)

<div class="topic-metadata">

**Author:** [@Glorified\_SysAdmin](https://discuss.elastic.co/u/Glorified_SysAdmin)\
**Replies:** 19\
**Last updated:** [August 21, 2024, 1:28pm UTC](https://discuss.elastic.co/t/kibana-stuck-in-a-crash-loop/364834 "2024-08-21T13:28:40Z")

</div>

Hello, I have a EFK stack deployed in EKS via helm. I have 6 nodes assigned to my ES cluster - 3 master, 2 ingest and 1 primary. All of my ES nodes are up and running. However, my Kibana pod is stuck on restart loop, ke…

---

## [How can I mark root object as null](https://discuss.elastic.co/t/how-can-i-mark-root-object-as-null/327719)

<div class="topic-metadata">

**Author:** [@Vivek\_Burman](https://discuss.elastic.co/u/Vivek_Burman)\
**Replies:** 11\
**Last updated:** [March 15, 2023, 9:02am UTC](https://discuss.elastic.co/t/how-can-i-mark-root-object-as-null/327719 "2023-03-15T09:02:34Z")

</div>

So my mapping looks like this. My query is I would like to mark the custom\_field property as null as a root \[NULL\_VALUES IN ELASTIC SEARCH\] (null\_value | Elasticsearch Guide \[8.6\] | Elastic) "custom\_field":{ …

---

## [How to execute multi search on Elasticsearch](https://discuss.elastic.co/t/how-to-execute-multi-search-on-elasticsearch/191033)

<div class="topic-metadata">

**Author:** [@FeizNouri](https://discuss.elastic.co/u/FeizNouri)\
**Replies:** 11\
**Last updated:** [July 19, 2019, 1:30pm UTC](https://discuss.elastic.co/t/how-to-execute-multi-search-on-elasticsearch/191033 "2019-07-19T13:30:37Z")

</div>

Hi, I have indexed metadata from documents with FSCrawler, so in ES I have an index that looks like this : { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : …

---

## [How to parse irregular xml logs](https://discuss.elastic.co/t/how-to-parse-irregular-xml-logs/144646)

<div class="topic-metadata">

**Author:** [@dinesh1](https://discuss.elastic.co/u/dinesh1)\
**Replies:** 10\
**Last updated:** [August 20, 2018, 12:45pm UTC](https://discuss.elastic.co/t/how-to-parse-irregular-xml-logs/144646 "2018-08-20T12:45:03Z")

</div>

Hi How to parse irregular xml logs sample log is shown below. DEBUG 2018/08/16 13:01:17.307842 Response XML:- \<Header version="1.0"msg\_type="SERVICE\_REQUEST"\>GR\_IFA\_IN\_B2C\_127\_0\_0\_1\_01\<Operator\_details operator\_w\_nam…

---

## [Elasticsearch Filter: Facing issue when using elasticsearch filter with logstash](https://discuss.elastic.co/t/elasticsearch-filter-facing-issue-when-using-elasticsearch-filter-with-logstash/255227)

<div class="topic-metadata">

**Author:** [@rainman](https://discuss.elastic.co/u/rainman)\
**Replies:** 9\
**Last updated:** [November 12, 2020, 5:15pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-facing-issue-when-using-elasticsearch-filter-with-logstash/255227 "2020-11-12T17:15:43Z")

</div>

I am using Logstash to pull data from the Oracle database and process some validation and index into Elasticsearch. I have to update the existing document in the index if the "ID" exists. For that, I am using Elasticsea…

[Previous page](https://discuss.elastic.co/top.md?page=216&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=218&per_page=50&period=all)
