# Top **URL:** https://discuss.elastic.co/top.md?page=218&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 219 --- ## [Kibana: Data Table and Line Chart have different numbers](https://discuss.elastic.co/t/kibana-data-table-and-line-chart-have-different-numbers/129462)
**Author:** [@mohd.faraaz](https://discuss.elastic.co/u/mohd.faraaz)\ **Replies:** 9\ **Last updated:** [May 22, 2018, 4:47pm UTC](https://discuss.elastic.co/t/kibana-data-table-and-line-chart-have-different-numbers/129462 "2018-05-22T16:47:19Z")
Hi, Reading from the same index, if we plot a line chart or create data table across same dimension, we get different results. The numbers in data table are always less than what is shown in line chart. Any fixes? Th… --- ## [Background Update of Millions of Documenrs Using NEST API](https://discuss.elastic.co/t/background-update-of-millions-of-documenrs-using-nest-api/325196)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 11\ **Last updated:** [February 11, 2023, 6:18pm UTC](https://discuss.elastic.co/t/background-update-of-millions-of-documenrs-using-nest-api/325196 "2023-02-11T18:18:24Z")
What is the most efficient way of updating Millions of documents in the background so that it has little effect on foreground operations such as Autocomplete and user searches. Thanks --- ## [Filtering \*before\* a query](https://discuss.elastic.co/t/filtering-before-a-query/17763)
**Author:** [@Shawn\_O\_Banion](https://discuss.elastic.co/u/Shawn_O_Banion)\ **Replies:** 11\ **Last updated:** [May 30, 2014, 7:52pm UTC](https://discuss.elastic.co/t/filtering-before-a-query/17763 "2014-05-30T19:52:18Z")
Hello, This question relates to the order of execute of filters and queries. I have two types of search criterion: 1. A "terms" query with a few hundred terms. a very expensive query) 2. A "geo\_boundin… --- ## [Probleme dashboard font size in visualization in kibana after migration from 7.10 to 7.17](https://discuss.elastic.co/t/probleme-dashboard-font-size-in-visualization-in-kibana-after-migration-from-7-10-to-7-17/328721)
**Author:** [@elaydi\_elagal](https://discuss.elastic.co/u/elaydi_elagal)\ **Replies:** 9\ **Last updated:** [March 29, 2023, 10:46am UTC](https://discuss.elastic.co/t/probleme-dashboard-font-size-in-visualization-in-kibana-after-migration-from-7-10-to-7-17/328721 "2023-03-29T10:46:23Z")
How can I change font size of labels in visualization in kibana 7.17 for all dashboard or kept my dashboards format in 7.10 without change in 7.17 --- ## [OutOfMemory Exception on client Node](https://discuss.elastic.co/t/outofmemory-exception-on-client-node/17764)
**Author:** [@VB1](https://discuss.elastic.co/u/VB1)\ **Replies:** 9\ **Last updated:** [June 4, 2014, 6:40pm UTC](https://discuss.elastic.co/t/outofmemory-exception-on-client-node/17764 "2014-06-04T18:40:59Z")
Hi all, We are running 90.11 and we have a cluster with client, master and data nodes. Our client nodes are using dedicated 10g memory. But we are seeing these outofmemory exceptions. I tried to correlate … --- ## [Elasticsearch in a .war: where to put the plugins directory?](https://discuss.elastic.co/t/elasticsearch-in-a-war-where-to-put-the-plugins-directory/11027)
**Author:** [@Paul\_Sanwald\_2](https://discuss.elastic.co/u/Paul_Sanwald_2)\ **Replies:** 9\ **Last updated:** [March 6, 2013, 11:09pm UTC](https://discuss.elastic.co/t/elasticsearch-in-a-war-where-to-put-the-plugins-directory/11027 "2013-03-06T23:09:43Z")
Hi Everyone, I'm deploying elasticsearch as part of my web application, packaged as a .war file and using the elasticsearch-transport-wares to start up. In the typical elasticsearch deployment, installing a plug… --- ## [Aggregate a search result?](https://discuss.elastic.co/t/aggregate-a-search-result/165061)
**Author:** [@Wassim\_Ben\_Amor](https://discuss.elastic.co/u/Wassim_Ben_Amor)\ **Replies:** 12\ **Last updated:** [January 22, 2019, 9:52am UTC](https://discuss.elastic.co/t/aggregate-a-search-result/165061 "2019-01-22T09:52:47Z")
Hello, I have documents with fields: session\_id user\_id Every document represent a user request in a conversation. Example : when I execute a simple aggregation to show for each user how much dialogs he has: { … --- ## [Kibana Histogram unexpected line curve with cumulative value](https://discuss.elastic.co/t/kibana-histogram-unexpected-line-curve-with-cumulative-value/16269)
**Author:** [@Isaac\_Hazan](https://discuss.elastic.co/u/Isaac_Hazan)\ **Replies:** 13\ **Last updated:** [March 25, 2014, 3:49pm UTC](https://discuss.elastic.co/t/kibana-histogram-unexpected-line-curve-with-cumulative-value/16269 "2014-03-25T15:49:30Z")
Kibana cannot do a the Histogram of the cumulative value of a field as describe at:https://github.com/elasticsearch/kibana/issues/740 To overcome that I created a separate index where I calculate myself the tot… --- ## [Multi Search Elastic](https://discuss.elastic.co/t/multi-search-elastic/257196)
**Author:** [@daviddavid](https://discuss.elastic.co/u/daviddavid)\ **Replies:** 10\ **Last updated:** [December 11, 2020, 6:45pm UTC](https://discuss.elastic.co/t/multi-search-elastic/257196 "2020-12-11T18:45:29Z")
Hi, Is there any way to bring common result from two different indices with search on different fields distributed on these two indices and the fields are different and not linked to each other. --- ## [Winlogbeat - Not enough storage is available to complete this operation](https://discuss.elastic.co/t/winlogbeat-not-enough-storage-is-available-to-complete-this-operation/275060)
**Author:** [@ELK7](https://discuss.elastic.co/u/ELK7)\ **Replies:** 9\ **Last updated:** [June 24, 2021, 1:01pm UTC](https://discuss.elastic.co/t/winlogbeat-not-enough-storage-is-available-to-complete-this-operation/275060 "2021-06-24T13:01:06Z")
Hi, I'm running Winlogbeat to send out windows enent-logs to elastic. version 7.12.1 windows 2012R2, 138GB memory, and 300GB free space on C. for some reason , i see we're missing event logs from the security sectio… --- ## [Logstash not stashing logs even after starting successfully](https://discuss.elastic.co/t/logstash-not-stashing-logs-even-after-starting-successfully/140010)
**Author:** [@APJ](https://discuss.elastic.co/u/APJ)\ **Replies:** 9\ **Last updated:** [July 16, 2018, 3:59pm UTC](https://discuss.elastic.co/t/logstash-not-stashing-logs-even-after-starting-successfully/140010 "2018-07-16T15:59:04Z")
Hi all, I have an apache log file that I want to ingest into logstash and then send the stashed data to elasticsearch. I run the logstash command like this: .\\logstash -f logtstash.conf After running the command th… --- ## [Logstash email hyperlink length limit](https://discuss.elastic.co/t/logstash-email-hyperlink-length-limit/74271)
**Author:** [@bo9354](https://discuss.elastic.co/u/bo9354)\ **Replies:** 9\ **Last updated:** [February 7, 2017, 11:18pm UTC](https://discuss.elastic.co/t/logstash-email-hyperlink-length-limit/74271 "2017-02-07T23:18:30Z")
The email plug is working fine. I would like to add a hyperlink to Kibana to allow the user to display a Visualization. All of that works, except the hyperlink is truncated in the Outlook email. I have investigated diffe… --- ## [Configuring the new logstash version - issues on the output Elasticsearch template for the mapping of my logs](https://discuss.elastic.co/t/configuring-the-new-logstash-version-issues-on-the-output-elasticsearch-template-for-the-mapping-of-my-logs/184358)
**Author:** [@soufian.eldouqe](https://discuss.elastic.co/u/soufian.eldouqe)\ **Replies:** 9\ **Last updated:** [June 6, 2019, 7:40am UTC](https://discuss.elastic.co/t/configuring-the-new-logstash-version-issues-on-the-output-elasticsearch-template-for-the-mapping-of-my-logs/184358 "2019-06-06T07:40:17Z")
Hi Guys I'm trying to configure the new version logstash (7.x) Everything is working as prefect, logstash is running and I can see my logs on kibana :slight\_smile: . BUT the mapping/parsing elasticsearch isn't working :… --- ## [Elasticsearch restoration of a huge dump fails with client connection timeout errors](https://discuss.elastic.co/t/elasticsearch-restoration-of-a-huge-dump-fails-with-client-connection-timeout-errors/336622)
**Author:** [@bhavaniprasad\_reddy](https://discuss.elastic.co/u/bhavaniprasad_reddy)\ **Replies:** 9\ **Last updated:** [June 22, 2023, 7:21am UTC](https://discuss.elastic.co/t/elasticsearch-restoration-of-a-huge-dump-fails-with-client-connection-timeout-errors/336622 "2023-06-22T07:21:32Z")
Hi Team, I am trying to restore a 50GB elastic dump file into a new elasticsearch cluster running with 3 elasticsearch replicas on a kubernetes cluster. The elasticsearch is running with a 7.10.2 oss version image and … --- ## [Using \_exlpain on parent / child](https://discuss.elastic.co/t/using--exlpain-on-parent-child/12702)
**Author:** [@rore](https://discuss.elastic.co/u/rore)\ **Replies:** 9\ **Last updated:** [July 11, 2013, 9:46pm UTC](https://discuss.elastic.co/t/using--exlpain-on-parent-child/12702 "2013-07-11T21:46:19Z")
Should it be possible to use explain API with a has\_child query? I have a parent document that has child documents. I'm trying to run an explain on a query like this: { "query": { "has\_child": { "t… --- ## [Set processor isn't working after another Set processor - Injest Pipeline](https://discuss.elastic.co/t/set-processor-isnt-working-after-another-set-processor-injest-pipeline/298478)
**Author:** [@shivani\_singh](https://discuss.elastic.co/u/shivani_singh)\ **Replies:** 10\ **Last updated:** [March 1, 2022, 10:22am UTC](https://discuss.elastic.co/t/set-processor-isnt-working-after-another-set-processor-injest-pipeline/298478 "2022-03-01T10:22:11Z")
Hi, I'm copying value of responseBody.results into embedded\_original\_value\_obj both are object type fields. This is my defined pipeline - PUT \_ingest/pipeline/apiproxy-embedded-copy { "processors": \[ { "se… --- ## [How to use ingest pipelines and processors](https://discuss.elastic.co/t/how-to-use-ingest-pipelines-and-processors/279576)
**Author:** [@ailengcon](https://discuss.elastic.co/u/ailengcon)\ **Replies:** 10\ **Last updated:** [August 4, 2021, 5:48am UTC](https://discuss.elastic.co/t/how-to-use-ingest-pipelines-and-processors/279576 "2021-08-04T05:48:07Z")
So thankful if someone could help me out. I have synced data from a mongodb to elastic with Monstache. Some of the data is mapped so when I make searches, the presentation of the data is rather messy and unstructured, n… --- ## [Mapping es.mapping.id](https://discuss.elastic.co/t/mapping-es-mapping-id/272755)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 10\ **Last updated:** [May 12, 2021, 3:10am UTC](https://discuss.elastic.co/t/mapping-es-mapping-id/272755 "2021-05-12T03:10:42Z")
i am reading the data from an elasticsearch index, processing it using spark and finally loading it into a new elasticsearch index. while processing the data i am grouping the data using date(day wise) and driverPkid co… --- ## [ElasticSearch on Yellow status && "unassigned\_shards" : 985](https://discuss.elastic.co/t/elasticsearch-on-yellow-status-unassigned-shards-985/177252)
**Author:** [@Zanruin](https://discuss.elastic.co/u/Zanruin)\ **Replies:** 15\ **Last updated:** [April 21, 2019, 10:21am UTC](https://discuss.elastic.co/t/elasticsearch-on-yellow-status-unassigned-shards-985/177252 "2019-04-21T10:21:08Z")
Hey guys, I configured an ELK stack server (CentOS), I configured winlogbeat in one windows with the default parameter. After I started streaming the logs to the ELK server, the server got stuck. I guess the reason its … --- ## [Odd Pie chart filters behavior](https://discuss.elastic.co/t/odd-pie-chart-filters-behavior/212521)
**Author:** [@Devopsio](https://discuss.elastic.co/u/Devopsio)\ **Replies:** 12\ **Last updated:** [December 20, 2019, 1:43pm UTC](https://discuss.elastic.co/t/odd-pie-chart-filters-behavior/212521 "2019-12-20T13:43:43Z")
Hello. I'm trying to create a Pie chart to display values with filters. However, only the first 3 filters are working, while in the Discovery tab all of the filters work. How filters are really working? The official docu… --- ## [Field spilt](https://discuss.elastic.co/t/field-spilt/189694)
**Author:** [@galtryn](https://discuss.elastic.co/u/galtryn)\ **Replies:** 12\ **Last updated:** [July 11, 2019, 1:24pm UTC](https://discuss.elastic.co/t/field-spilt/189694 "2019-07-11T13:24:10Z")
Hi Guys, I am ingesting some IoT sensor data into Elasticsearch via logstash, the payload of the message is a HEX string which currently looks something like this; 129, 91, 0, 0, 28, 28, 29, 0, 4, 0, 0, 0, 11, 38, 0, 2… --- ## [How to multiplie two columuns in table?](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122)
**Author:** [@med\_amine](https://discuss.elastic.co/u/med_amine)\ **Replies:** 12\ **Last updated:** [August 13, 2018, 10:57am UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122 "2018-08-13T10:57:28Z")
hello evreyone , i have a table contains three columuns "clientip" , "bytes\_sent" & "count" , so my goal is to measure "bytes\_sent" \* "count" for example ; for this clientip the result is 166\*2 = 332. thanks . --- ## [ES Ate My Shards/Indexes](https://discuss.elastic.co/t/es-ate-my-shards-indexes/6738)
**Author:** [@Kenneth\_Loafman](https://discuss.elastic.co/u/Kenneth_Loafman)\ **Replies:** 12\ **Last updated:** [February 21, 2012, 4:03pm UTC](https://discuss.elastic.co/t/es-ate-my-shards-indexes/6738 "2012-02-21T16:03:37Z")
Hi, We're on ES 18.6 driving a 4-node cluster on RackSpace. Last night we had a nework outage on two of the nodes and our 4-node cluster morphed into 2 2-node clusters. I think that's what happened anyway. We s… --- ## [Grok Debugger - hard to find identification string for my difficult example](https://discuss.elastic.co/t/grok-debugger-hard-to-find-identification-string-for-my-difficult-example/182016)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 10\ **Last updated:** [May 23, 2019, 3:38pm UTC](https://discuss.elastic.co/t/grok-debugger-hard-to-find-identification-string-for-my-difficult-example/182016 "2019-05-23T15:38:32Z")
{Result=\[{Index=1, PropertyName=, ResourceA1=here, ResourceA2=heretoo, ResourceA3=hereagain, ResourceA4=herewego, ResourceKey=transactions.ui.rfc.messages.label.defaultMessage, ServiceKey='6457A5674GF01ED98EAC1Z99349097… --- ## [APM upgrade 6.5.0 to 6.5.1](https://discuss.elastic.co/t/apm-upgrade-6-5-0-to-6-5-1/157985)
**Author:** [@Lo\_Tel](https://discuss.elastic.co/u/Lo_Tel)\ **Replies:** 10\ **Last updated:** [November 27, 2018, 2:50pm UTC](https://discuss.elastic.co/t/apm-upgrade-6-5-0-to-6-5-1/157985 "2018-11-27T14:50:16Z")
just got the error after yum upgrade 2018-11-23T11:13:35.493+0100 ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch(https://xxxxxxxxxx:9200/var/log/apm-server)): 404 Not Found: {"error":{"root\_… --- ## [Upgrading to 0.16.2 from 0.15.2 - EC2 discovery problem appears (previously worked)](https://discuss.elastic.co/t/upgrading-to-0-16-2-from-0-15-2-ec2-discovery-problem-appears-previously-worked/4568)
**Author:** [@Alex\_At\_Ikanow](https://discuss.elastic.co/u/Alex_At_Ikanow)\ **Replies:** 10\ **Last updated:** [June 12, 2011, 7:18am UTC](https://discuss.elastic.co/t/upgrading-to-0-16-2-from-0-15-2-ec2-discovery-problem-appears-previously-worked/4568 "2011-06-12T07:18:36Z")
I run a 2-node test/reference cluster on EC2, with the 2 nodes in different availability zones (east 1a and east 1b). Under 0.15.2, this worked fine. I am currently upgrading to 0.16.2 (no other changes), and the d… --- ## [Get data view api returns 404 even if the data view exists](https://discuss.elastic.co/t/get-data-view-api-returns-404-even-if-the-data-view-exists/335822)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 13\ **Last updated:** [June 13, 2023, 6:08am UTC](https://discuss.elastic.co/t/get-data-view-api-returns-404-even-if-the-data-view-exists/335822 "2023-06-13T06:08:38Z")
Hi i am using the following command to check if the data view exists curl -X GET "http://demo.icebreaker.minutuscloud.com/kibana/api/data\_views/data\_view/3dxp\_servicetrace" -H 'kbn-xsrf: true' -u elastic:minutus -k E… --- ## [Wrong paging with embedded es instance](https://discuss.elastic.co/t/wrong-paging-with-embedded-es-instance/17955)
**Author:** [@dkiselev](https://discuss.elastic.co/u/dkiselev)\ **Replies:** 12\ **Last updated:** [June 6, 2014, 9:34pm UTC](https://discuss.elastic.co/t/wrong-paging-with-embedded-es-instance/17955 "2014-06-06T21:34:53Z")
Hi everyone. I use embedded ES node as part of java application. Node node = nodeBuilder().clusterName("OSM-Gazetteer").node(); Client client = node.client(); I try to fetch some data paged. SearchRequestBui… --- ## [Lucene queries](https://discuss.elastic.co/t/lucene-queries/10726)
**Author:** [@elastray](https://discuss.elastic.co/u/elastray)\ **Replies:** 12\ **Last updated:** [February 15, 2013, 7:50pm UTC](https://discuss.elastic.co/t/lucene-queries/10726 "2013-02-15T19:50:43Z")
Hi, I have been reading the documentation and doing a lot of tests but I can not get an answer to this. I need to integrate an application that uses Lucene as search engine with Elastic Search. I already can w… --- ## [Observability Engineer Lab 6.1: No Influencers or data displayed](https://discuss.elastic.co/t/observability-engineer-lab-6-1-no-influencers-or-data-displayed/279542)
**Author:** [@StashLogs](https://discuss.elastic.co/u/StashLogs)\ **Replies:** 9\ **Last updated:** [August 13, 2021, 7:19pm UTC](https://discuss.elastic.co/t/observability-engineer-lab-6-1-no-influencers-or-data-displayed/279542 "2021-08-13T19:19:55Z")
Hello, I am having some trouble following lab 6.1 for Observability Engineer course. Creating the Uptime heartbeat job or the 3 jobs for the apm-\* index results in nothing but blank screens. Screenshots below. Any… --- ## [Help setting up filebeat? (Selfhosted)](https://discuss.elastic.co/t/help-setting-up-filebeat-selfhosted/223044)
**Author:** [@varunharidas](https://discuss.elastic.co/u/varunharidas)\ **Replies:** 9\ **Last updated:** [March 30, 2020, 3:38am UTC](https://discuss.elastic.co/t/help-setting-up-filebeat-selfhosted/223044 "2020-03-30T03:38:43Z")
Everything else is working fine however can't find any guide to configuring filebeat for app search, I found a filebeat.yml file inside the app search folder, but no idea in setting it up. Already have file beat up and r… --- ## [GROUP BY query in ElasticSearch](https://discuss.elastic.co/t/group-by-query-in-elasticsearch/16483)
**Author:** [@tiennm](https://discuss.elastic.co/u/tiennm)\ **Replies:** 9\ **Last updated:** [September 11, 2015, 9:58am UTC](https://discuss.elastic.co/t/group-by-query-in-elasticsearch/16483 "2015-09-11T09:58:51Z")
Hello, In SQL i can use GROUP BY to limit number of rows in each group like bellow. Is there any way to do that in ElasticSearch? Thanks. 1. \*Find the first 10 groups of cars, with 2 hits in each g… --- ## [Elastic Node failure observations](https://discuss.elastic.co/t/elastic-node-failure-observations/199874)
**Author:** [@Parvez](https://discuss.elastic.co/u/Parvez)\ **Replies:** 10\ **Last updated:** [September 19, 2019, 4:19pm UTC](https://discuss.elastic.co/t/elastic-node-failure-observations/199874 "2019-09-19T16:19:42Z")
We recently conducted a Node failure test in our test environment. we have , Nodes: 3 Indices: 14 Total Shards: 94 Unassigned Shards:0 Questions: When one of the node which is a master node was brought down we st… --- ## [Elasticsearch fscrawler](https://discuss.elastic.co/t/elasticsearch-fscrawler/362731)
**Author:** [@Yemboaro](https://discuss.elastic.co/u/Yemboaro)\ **Replies:** 18\ **Last updated:** [July 30, 2024, 1:00pm UTC](https://discuss.elastic.co/t/elasticsearch-fscrawler/362731 "2024-07-30T13:00:17Z")
hello elastic community I use elasticsearch and fscrawler for the track of file but my problem is that large file upload is not processed by ocr however small files are processed well so I ask for your help on how to co… --- ## [Meaning of Red in health status](https://discuss.elastic.co/t/meaning-of-red-in-health-status/14473)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 12\ **Last updated:** [November 19, 2013, 9:28pm UTC](https://discuss.elastic.co/t/meaning-of-red-in-health-status/14473 "2013-11-19T21:28:54Z")
I am using head and BigDesk and after my load testing yesterday I see the health turned into Red but both of them don't tell me why it's Red. Is the log best place to look? -- You received this message because you… --- ## [How to fetch time series messages](https://discuss.elastic.co/t/how-to-fetch-time-series-messages/11944)
**Author:** [@vinod\_eligeti](https://discuss.elastic.co/u/vinod_eligeti)\ **Replies:** 14\ **Last updated:** [May 18, 2013, 11:36am UTC](https://discuss.elastic.co/t/how-to-fetch-time-series-messages/11944 "2013-05-18T11:36:33Z")
Hi, I have general question as how to go through time series data. What I am trying to do is to store logs which are stamped by time. The doc type looks like log { machine : String timestamp : date message … --- ## [Service names are split by -, which isn't documented](https://discuss.elastic.co/t/service-names-are-split-by-which-isnt-documented/165317)
**Author:** [@krainboltgreene](https://discuss.elastic.co/u/krainboltgreene)\ **Replies:** 9\ **Last updated:** [January 29, 2019, 1:02am UTC](https://discuss.elastic.co/t/service-names-are-split-by-which-isnt-documented/165317 "2019-01-29T01:02:22Z")
I have a service called second-reef-api, and amusingly this showed up: Is there a way to correct this post-hoc or do I have to rename my service to SecondReefAPI? --- ## [Unable to send email using watcher on Xpack 6.2.1](https://discuss.elastic.co/t/unable-to-send-email-using-watcher-on-xpack-6-2-1/129764)
**Author:** [@maheshm](https://discuss.elastic.co/u/maheshm)\ **Replies:** 9\ **Last updated:** [May 8, 2018, 7:58am UTC](https://discuss.elastic.co/t/unable-to-send-email-using-watcher-on-xpack-6-2-1/129764 "2018-05-08T07:58:37Z")
Hi, we are seeing an error through the essential SMTP configuration and other email action settings are enabled using X-Pack 6.2.1. Below is the facing error message, \[image\] \[image\] Can someone please assist here? R… --- ## [Rolling restart triggers primary-replica resync leading to write unavailability](https://discuss.elastic.co/t/rolling-restart-triggers-primary-replica-resync-leading-to-write-unavailability/339301)
**Author:** [@devoxel](https://discuss.elastic.co/u/devoxel)\ **Replies:** 10\ **Last updated:** [September 12, 2023, 10:54am UTC](https://discuss.elastic.co/t/rolling-restart-triggers-primary-replica-resync-leading-to-write-unavailability/339301 "2023-09-12T10:54:13Z")
When a node is shutdown during a normal rolling restart, we end up in a loss of write availability for a period of 10 mins. We're using ECK operator to manage the cluster. It's 7.17 and the operator is the latest versio… --- ## [How tell metricbeat to create custom indices?](https://discuss.elastic.co/t/how-tell-metricbeat-to-create-custom-indices/250297)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 11\ **Last updated:** [September 30, 2020, 12:35pm UTC](https://discuss.elastic.co/t/how-tell-metricbeat-to-create-custom-indices/250297 "2020-09-30T12:35:27Z")
Hi there, how can I tell metricbeat to direct the ingested data into a custom index? What I tried so far did not work. cheers Ste --- ## [Facets have got me down](https://discuss.elastic.co/t/facets-have-got-me-down/10646)
**Author:** [@Justin\_Treher](https://discuss.elastic.co/u/Justin_Treher)\ **Replies:** 10\ **Last updated:** [March 20, 2013, 2:36pm UTC](https://discuss.elastic.co/t/facets-have-got-me-down/10646 "2013-03-20T14:36:13Z")
It might be because I'm low on energy, but I'm having a real tough time reconciling facet structure in my head right now. Does anyone know of a good gist/blog example reference with some real world examples? I've bee… --- ## [Date Not Recognized](https://discuss.elastic.co/t/date-not-recognized/193796)
**Author:** [@Jim\_Palazzolo](https://discuss.elastic.co/u/Jim_Palazzolo)\ **Replies:** 11\ **Last updated:** [August 6, 2019, 3:56pm UTC](https://discuss.elastic.co/t/date-not-recognized/193796 "2019-08-06T15:56:27Z")
I have json documents that are going into ES just fine, but Kibana doesn't seem to recognize this field; but it records it... "fields": { "Event.date": \[ "2016-03-14T00:00:00.000Z" I'm sure it's just a config… --- ## [Elasticserch service providers](https://discuss.elastic.co/t/elasticserch-service-providers/8488)
**Author:** [@lgs](https://discuss.elastic.co/u/lgs)\ **Replies:** 11\ **Last updated:** [August 4, 2014, 4:55pm UTC](https://discuss.elastic.co/t/elasticserch-service-providers/8488 "2014-08-04T16:55:21Z")
I'm looking for advice about low cost service/cloud providers. Which one would you recommend ? Are there some free plans ? Beter stay on iaas or paas cloud services ? Are there any saas or should be better stayin… --- ## [Index data conflict with another](https://discuss.elastic.co/t/index-data-conflict-with-another/254271)
**Author:** [@mustafa.husny](https://discuss.elastic.co/u/mustafa.husny)\ **Replies:** 12\ **Last updated:** [November 5, 2020, 11:55pm UTC](https://discuss.elastic.co/t/index-data-conflict-with-another/254271 "2020-11-05T23:55:18Z")
Hi All, I installed Heartbeat and changed the pipeline to be (Heartbeat ==\> Logstash ===\> Elasticsearch) and I loaded the heartbeat dashboards, Also I have its logs, and logs forwarded from (IBM Qradar), My issue is t… --- ## [APM Server reported 400: decode error: data read error](https://discuss.elastic.co/t/apm-server-reported-400-decode-error-data-read-error/375767)
**Author:** [@arT1](https://discuss.elastic.co/u/arT1)\ **Replies:** 9\ **Last updated:** [March 25, 2025, 2:24am UTC](https://discuss.elastic.co/t/apm-server-reported-400-decode-error-data-read-error/375767 "2025-03-25T02:24:12Z")
Kibana version: v8.13.3 Elasticsearch version: v8.13.3 APM Server version: v8.13.3 APM Agent language and version: elastic-apm-agent-1.52.1.jar Original install method (e.g. download page, yum, deb, from source, etc.… --- ## [Filebeat doesn't sent the logs to elastic cloud (circuit\_breaking\_exception)](https://discuss.elastic.co/t/filebeat-doesnt-sent-the-logs-to-elastic-cloud-circuit-breaking-exception/243204)
**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\ **Replies:** 9\ **Last updated:** [July 31, 2020, 8:50am UTC](https://discuss.elastic.co/t/filebeat-doesnt-sent-the-logs-to-elastic-cloud-circuit-breaking-exception/243204 "2020-07-31T08:50:10Z")
Hi! I don't know why I get this error (agents filebeat in kubernetes cluster), if we increased the size of the cluster so that it had more performance and changed the indexes so that instead of 1 shard and 1 replica th… --- ## [Good place to locate Kibana\\Watcher expert?](https://discuss.elastic.co/t/good-place-to-locate-kibana-watcher-expert/223800)
**Author:** [@Karn\_Griffen](https://discuss.elastic.co/u/Karn_Griffen)\ **Replies:** 9\ **Last updated:** [March 19, 2020, 2:25pm UTC](https://discuss.elastic.co/t/good-place-to-locate-kibana-watcher-expert/223800 "2020-03-19T14:25:58Z")
I'm looking for someone to help us understand and create Watcher alerts for Metricbeat data coming in. Basic alerting such as netowrk, disk, cpu, memory. Is there a place in the community for this? Or does anyone have… --- ## [Question about multi\_field and edge ngram](https://discuss.elastic.co/t/question-about-multi-field-and-edge-ngram/6885)
**Author:** [@quain](https://discuss.elastic.co/u/quain)\ **Replies:** 10\ **Last updated:** [April 13, 2012, 12:14pm UTC](https://discuss.elastic.co/t/question-about-multi-field-and-edge-ngram/6885 "2012-04-13T12:14:47Z")
I'm having some trouble with multi\_field, perhaps some of you guys could shed some light on what I'm doing wrong. After I inserted some documents, I get 0 hits for any searches of the field name.untouched or name.ngr… --- ## [Grokparsefailure randomly](https://discuss.elastic.co/t/grokparsefailure-randomly/166203)
**Author:** [@fry2k](https://discuss.elastic.co/u/fry2k)\ **Replies:** 9\ **Last updated:** [February 5, 2019, 10:12am UTC](https://discuss.elastic.co/t/grokparsefailure-randomly/166203 "2019-02-05T10:12:40Z")
Hello, I have a strange problem with my ELK setup. I'm using this docker container https://hub.docker.com/r/sebp/elk/ with the current version 651. So I'm using logstash version 6.5.1 I wrote a small script which copi… --- ## [Logstash getstarted](https://discuss.elastic.co/t/logstash-getstarted/84264)
**Author:** [@Chemse](https://discuss.elastic.co/u/Chemse)\ **Replies:** 9\ **Last updated:** [May 3, 2017, 1:59pm UTC](https://discuss.elastic.co/t/logstash-getstarted/84264 "2017-05-03T13:59:48Z")
Hello !! I just install Logstach succesfully, and I want to test it with this command bin/logstash -e 'input { stdin { } } output { stdout {} }' My problem is I don't know where can I find this folder bin/logs… [Previous page](https://discuss.elastic.co/top.md?page=217&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=219&per_page=50&period=all)