# Top **URL:** https://discuss.elastic.co/top.md?page=225&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 226 --- ## [Query problem](https://discuss.elastic.co/t/query-problem/19253)
**Author:** [@Luc\_Evers](https://discuss.elastic.co/u/Luc_Evers)\ **Replies:** 12\ **Last updated:** [August 20, 2014, 6:09pm UTC](https://discuss.elastic.co/t/query-problem/19253 "2014-08-20T18:09:03Z")
I like to use elasticsearch as Nosql database + search engine for data coming from text files (router configs) and databases . First I moved a routerconfig to a json file which I indexed . Mapping: { "… --- ## [Need count of terms using facets, taking space into account](https://discuss.elastic.co/t/need-count-of-terms-using-facets-taking-space-into-account/7540)
**Author:** [@anjesh](https://discuss.elastic.co/u/anjesh)\ **Replies:** 12\ **Last updated:** [May 5, 2012, 6:07pm UTC](https://discuss.elastic.co/t/need-count-of-terms-using-facets-taking-space-into-account/7540 "2012-05-05T18:07:06Z")
Hi, I have a following data in ES. { "title": "title1 of project", "organization": "XYZ company" }, { "title": "title2 of project", "organization": "XYZ company" }, { "title": "title3 of project", "organiza… --- ## [Where are these TermInfo instances coming from?](https://discuss.elastic.co/t/where-are-these-terminfo-instances-coming-from/6452)
**Author:** [@lukeforehand\_2](https://discuss.elastic.co/u/lukeforehand_2)\ **Replies:** 12\ **Last updated:** [February 1, 2012, 6:16pm UTC](https://discuss.elastic.co/t/where-are-these-terminfo-instances-coming-from/6452 "2012-02-01T18:16:01Z")
My caches are relatively small in size, so I'm wondering what is chewing up all my old gen space? Here is some more information. From BigDesk: Number of documents: 390519818, Store size: 1221.1gb (1311185373569 B) … --- ## [Azure Monitor Metrics Integration Reporting interval](https://discuss.elastic.co/t/azure-monitor-metrics-integration-reporting-interval/347363)
**Author:** [@s.buksa](https://discuss.elastic.co/u/s.buksa)\ **Replies:** 9\ **Last updated:** [December 14, 2023, 7:07am UTC](https://discuss.elastic.co/t/azure-monitor-metrics-integration-reporting-interval/347363 "2023-12-14T07:07:09Z")
Hello, In Azure Monitor Metrics integration official documentation under "Data stream specific configuration notes" mentioned that "Period (reporting interval) for Metrics will have a timegrain of 5 minutes, so the 'Pe… --- ## [Cascading cluster failure](https://discuss.elastic.co/t/cascading-cluster-failure/21383)
**Author:** [@Abhishek\_Andhavarapu](https://discuss.elastic.co/u/Abhishek_Andhavarapu)\ **Replies:** 12\ **Last updated:** [December 29, 2014, 9:09pm UTC](https://discuss.elastic.co/t/cascading-cluster-failure/21383 "2014-12-29T21:09:05Z")
Hi all, We recently had a cascading cluster failure. From 16:35 to 16:42 the cluster went red and recovered it self. I can't seem to find any obvious logs around this time. The cluster has about 19 nodes. 9… --- ## [Kibana advanced settings does not exist](https://discuss.elastic.co/t/kibana-advanced-settings-does-not-exist/324237)
**Author:** [@furkano](https://discuss.elastic.co/u/furkano)\ **Replies:** 11\ **Last updated:** [January 30, 2023, 5:33pm UTC](https://discuss.elastic.co/t/kibana-advanced-settings-does-not-exist/324237 "2023-01-30T17:33:05Z")
Hi, i want to edit my default size of rows for discover page, default is 500 and i need to increase that, But i can't access to advanced settings page event with my superuser, and i couldn't find any documentary for how… --- ## [Geo\_shape & 30M pois](https://discuss.elastic.co/t/geo-shape-30m-pois/11221)
**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\ **Replies:** 10\ **Last updated:** [March 21, 2013, 10:35am UTC](https://discuss.elastic.co/t/geo-shape-30m-pois/11221 "2013-03-21T10:35:39Z")
After weeks of prototyping, I finally got around to giving es a more serious workout then my simplistic tests. Since I have been posting and commenting a lot on the geo\_shape functionality here, I thought I'd share … --- ## [Logstash 8.10.4 breaking changes](https://discuss.elastic.co/t/logstash-8-10-4-breaking-changes/346312)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 9\ **Last updated:** [November 3, 2023, 4:55am UTC](https://discuss.elastic.co/t/logstash-8-10-4-breaking-changes/346312 "2023-11-03T04:55:19Z")
"status"=\>400, "error"=\>{"type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse field \[host\] of type \[text\] in document with id 'xxxxxxx'. added this to resolve the above mutate { rename =\> { "\[host\]" =\> … --- ## [Cannot create visulization on Kibana](https://discuss.elastic.co/t/cannot-create-visulization-on-kibana/303972)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 11\ **Last updated:** [May 19, 2022, 8:01am UTC](https://discuss.elastic.co/t/cannot-create-visulization-on-kibana/303972 "2022-05-19T08:01:10Z")
Hi, I'm using elk v:7.5.0, i uploaded my indexes correctly, but when i want to create a visualization all the indexs are in the list but i can't select any of them. I don't know what's the problem, i can see the hint on… --- ## [Delete from read indexes](https://discuss.elastic.co/t/delete-from-read-indexes/275919)
**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\ **Replies:** 11\ **Last updated:** [June 16, 2021, 3:45am UTC](https://discuss.elastic.co/t/delete-from-read-indexes/275919 "2021-06-16T03:45:30Z")
Hello, I have a current write index and multiple read indexes .Is it possible to delete the documents from only the read indexes? Document with same ID will be present in both read and write index but I want the documen… --- ## [How to update all docs with query that looks for a regex and update it incase found](https://discuss.elastic.co/t/how-to-update-all-docs-with-query-that-looks-for-a-regex-and-update-it-incase-found/299894)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 12\ **Last updated:** [March 25, 2022, 1:52pm UTC](https://discuss.elastic.co/t/how-to-update-all-docs-with-query-that-looks-for-a-regex-and-update-it-incase-found/299894 "2022-03-25T13:52:07Z")
Hi, I'm using 7.16.2. I have a lot of records looks like this { "\_index" : "testcases", "\_type" : "\_doc", "\_id" : "Cv6z8HoBF-BJEaLQYGtU", "\_score" : 1.0, "\_source" : { … --- ## [Es readtimeout occurs](https://discuss.elastic.co/t/es-readtimeout-occurs/299085)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 12\ **Last updated:** [March 10, 2022, 3:18am UTC](https://discuss.elastic.co/t/es-readtimeout-occurs/299085 "2022-03-10T03:18:00Z")
At 5:11, search readtimeout occurred a lot. When we execute batch execution, if the primary shard is indexed, we are increasing the replica shard at that time, But at that time, the search engine creates replica … --- ## [How to invoke processors with BulkIngester with Java APIs](https://discuss.elastic.co/t/how-to-invoke-processors-with-bulkingester-with-java-apis/356878)
**Author:** [@wnmills3](https://discuss.elastic.co/u/wnmills3)\ **Replies:** 10\ **Last updated:** [April 10, 2024, 2:57pm UTC](https://discuss.elastic.co/t/how-to-invoke-processors-with-bulkingester-with-java-apis/356878 "2024-04-10T14:57:59Z")
I'm trying to use the Java API's to invoke a processor while doing bulk indexing. I've set up the processor on my index to use the intfloat\_\_multilingual-e5-base (see below) to map the value of the passage field to a pas… --- ## [Filebeat apache2 no visualization is showing](https://discuss.elastic.co/t/filebeat-apache2-no-visualization-is-showing/124280)
**Author:** [@Pankaj\_Sakhare](https://discuss.elastic.co/u/Pankaj_Sakhare)\ **Replies:** 9\ **Last updated:** [March 21, 2018, 2:50pm UTC](https://discuss.elastic.co/t/filebeat-apache2-no-visualization-is-showing/124280 "2018-03-21T14:50:56Z")
Can any one help me out to get filebeat apache2 visualization . --- ## [HA-Cluster: Simple design on prem, self managed](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 12\ **Last updated:** [September 9, 2026, 5:33pm UTC](https://discuss.elastic.co/t/ha-cluster-simple-design-on-prem-self-managed/390177 "2026-09-09T17:33:34Z")
Hi there, I am looking for a simple HA-design for a logging use case, on prem & self managed. Would this be a good design? NODE-1 master, data, ingest, kibana, logstash, redis NODE-2 master, data, ingest, kibana, log… --- ## [Automatic report generation using watcher not able to parse auth](https://discuss.elastic.co/t/automatic-report-generation-using-watcher-not-able-to-parse-auth/364658)
**Author:** [@surya\_dadi\_dhamarake](https://discuss.elastic.co/u/surya_dadi_dhamarake)\ **Replies:** 17\ **Last updated:** [September 6, 2024, 11:09am UTC](https://discuss.elastic.co/t/automatic-report-generation-using-watcher-not-able-to-parse-auth/364658 "2024-09-06T11:09:36Z")
Hi Team, I am trying to generate the automatic report and send an email using the default email service provided by elastic cloud (8.9.0) I have followed all the steps created the user and give all privileges copying… --- ## [Sizing for ElasticStack in on-Prem environment](https://discuss.elastic.co/t/sizing-for-elasticstack-in-on-prem-environment/381269)
**Author:** [@Eshwar\_K](https://discuss.elastic.co/u/Eshwar_K)\ **Replies:** 13\ **Last updated:** [August 25, 2025, 5:14am UTC](https://discuss.elastic.co/t/sizing-for-elasticstack-in-on-prem-environment/381269 "2025-08-25T05:14:23Z")
Hi Elastic Community, I am in a preparation of hardware sizing for one of my customer for log analysis for below requirement: Current Data size: 400GB Daily data ingestion: 20GB Retention Period: 30days So, as per t… --- ## [World Map not displaying geodata](https://discuss.elastic.co/t/world-map-not-displaying-geodata/311610)
**Author:** [@Raj\_test](https://discuss.elastic.co/u/Raj_test)\ **Replies:** 9\ **Last updated:** [August 9, 2022, 5:27am UTC](https://discuss.elastic.co/t/world-map-not-displaying-geodata/311610 "2022-08-09T05:27:29Z")
Hello Team, I am using kibana 8.3.3 and the world map is not displaying geo data via packetbeat I am getting this err. can anyone please help. { "error": { "root\_cause": \[ { "type": "index\_not\_found\_exception", … --- ## [Problem Compiling an Internal Gradle Release](https://discuss.elastic.co/t/problem-compiling-an-internal-gradle-release/4104)
**Author:** [@Wolf](https://discuss.elastic.co/u/Wolf)\ **Replies:** 10\ **Last updated:** [March 18, 2011, 8:48am UTC](https://discuss.elastic.co/t/problem-compiling-an-internal-gradle-release/4104 "2011-03-18T08:48:06Z")
Hi, I am using a Japanese language analyzer with jar files that I have imported to compile a new Analyzer provider with new type in the AnalysisModule processAnalyzers method and the constructor of the IndicesAnalys… --- ## [Configure 2 log paths for filebeat and output 2 kafka topics and 2 indexes to display on kibana](https://discuss.elastic.co/t/configure-2-log-paths-for-filebeat-and-output-2-kafka-topics-and-2-indexes-to-display-on-kibana/346941)
**Author:** [@Nghia\_D\_ng](https://discuss.elastic.co/u/Nghia_D_ng)\ **Replies:** 9\ **Last updated:** [November 15, 2023, 7:38am UTC](https://discuss.elastic.co/t/configure-2-log-paths-for-filebeat-and-output-2-kafka-topics-and-2-indexes-to-display-on-kibana/346941 "2023-11-15T07:38:52Z")
Hi team Elastic, I am configuring ELK according to the following flow: Filebeat\> kafka\>Logstash\>ES\>Kibana I need to monitor 2 logs paths on the server on kibana I want to configure those 2 paths as 2 separate kafka t… --- ## [Elasicsearch is not creating an index even there are no errors](https://discuss.elastic.co/t/elasicsearch-is-not-creating-an-index-even-there-are-no-errors/158180)
**Author:** [@frasmd](https://discuss.elastic.co/u/frasmd)\ **Replies:** 12\ **Last updated:** [November 26, 2018, 9:14pm UTC](https://discuss.elastic.co/t/elasicsearch-is-not-creating-an-index-even-there-are-no-errors/158180 "2018-11-26T21:14:52Z")
I have installed Elasticstash 6.2.4 with one filebeat node and a node with elasticsearch, kibana and logstash on the same node. Now i am trying to send logs of the a server using filebeat to logstash using the below conf… --- ## [Painless Scripting](https://discuss.elastic.co/t/painless-scripting/301043)
**Author:** [@chivas](https://discuss.elastic.co/u/chivas)\ **Replies:** 9\ **Last updated:** [April 4, 2022, 9:51am UTC](https://discuss.elastic.co/t/painless-scripting/301043 "2022-04-04T09:51:58Z")
Hi, I am trying to get a count of the requests hitting my server by time range, and have come up with below query: GET /logs-prod\*/\_search?pretty=true { "query": { "bool": { "filter": \[ { … --- ## [Create Custom Visualization for Kibana](https://discuss.elastic.co/t/create-custom-visualization-for-kibana/267837)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 10\ **Last updated:** [March 21, 2021, 9:51am UTC](https://discuss.elastic.co/t/create-custom-visualization-for-kibana/267837 "2021-03-21T09:51:29Z")
I have a requirement to create a visualisation that replicates one of the legacy system. In the below screenshot it shows the expected and what i have so far... I could create a frontend, but was hoping if there is a w… --- ## [Http browser is not creating any monitors](https://discuss.elastic.co/t/http-browser-is-not-creating-any-monitors/360301)
**Author:** [@Sandy\_K](https://discuss.elastic.co/u/Sandy_K)\ **Replies:** 13\ **Last updated:** [May 31, 2024, 12:30pm UTC](https://discuss.elastic.co/t/http-browser-is-not-creating-any-monitors/360301 "2024-05-31T12:30:57Z")
Hello, I was trying to create http browser monitor and when I push it using GitHub Actions, it's not creating any monitors in the ELK synthetics. We are using ELK version 8.10.3. Does this version support creating brows… --- ## [Kibana graph now showing on a selected Index](https://discuss.elastic.co/t/kibana-graph-now-showing-on-a-selected-index/240155)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 12\ **Last updated:** [July 7, 2020, 2:49pm UTC](https://discuss.elastic.co/t/kibana-graph-now-showing-on-a-selected-index/240155 "2020-07-07T14:49:37Z")
Hi All, I have got an issue where a particular index is not showing the graph like other indexes do within discovery. This index I am referring to is for the ingestion of Cloudtrail logs not showing the bar graph as it … --- ## [When using logstash output sends only limited information. Any other output, no problem](https://discuss.elastic.co/t/when-using-logstash-output-sends-only-limited-information-any-other-output-no-problem/283692)
**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\ **Replies:** 10\ **Last updated:** [September 13, 2021, 2:17pm UTC](https://discuss.elastic.co/t/when-using-logstash-output-sends-only-limited-information-any-other-output-no-problem/283692 "2021-09-13T14:17:12Z")
If I use auditbeat (I guess is the same with other beats) and configure elasticsearch or file output I see all information I need. In this example I modify /etc/sudoers' attributes, then I modify it, and then I modify i… --- ## [Observability Overview - Logs not shown as log source](https://discuss.elastic.co/t/observability-overview-logs-not-shown-as-log-source/368183)
**Author:** [@chouben](https://discuss.elastic.co/u/chouben)\ **Replies:** 23\ **Last updated:** [October 17, 2024, 12:18pm UTC](https://discuss.elastic.co/t/observability-overview-logs-not-shown-as-log-source/368183 "2024-10-17T12:18:55Z")
Hi Running Kibana version: 8.14.3 I'm trying to show my "log sources" via the Observability Overview screen. It contains a via view: Log Events \> Logs rate per minute I assume this is the required config: Although I… --- ## [Assistance with ELK](https://discuss.elastic.co/t/assistance-with-elk/179297)
**Author:** [@Eva](https://discuss.elastic.co/u/Eva)\ **Replies:** 13\ **Last updated:** [May 6, 2019, 8:06am UTC](https://discuss.elastic.co/t/assistance-with-elk/179297 "2019-05-06T08:06:35Z")
Hello I have been using ELK for quite some time now and currently facing issues with memory utilization and timeouts on Kibana when running long search queries. My elk is a single node cluster and running htop i see lot… --- ## [Dockerize Custom Beat](https://discuss.elastic.co/t/dockerize-custom-beat/237021)
**Author:** [@Dev-Flo](https://discuss.elastic.co/u/Dev-Flo)\ **Replies:** 9\ **Last updated:** [June 23, 2020, 7:32am UTC](https://discuss.elastic.co/t/dockerize-custom-beat/237021 "2020-06-23T07:32:27Z")
Hi :smiley: I created a custom beat thanks to your Developer Guide , and would like to package it into a Docker Image. However, I did not find any information regarding that. Are there any instructions on how to do th… --- ## [Working with elasticsearch cluster](https://discuss.elastic.co/t/working-with-elasticsearch-cluster/145520)
**Author:** [@rgaduput](https://discuss.elastic.co/u/rgaduput)\ **Replies:** 12\ **Last updated:** [August 22, 2018, 10:39am UTC](https://discuss.elastic.co/t/working-with-elasticsearch-cluster/145520 "2018-08-22T10:39:47Z")
Hi, we use elasticsearch for storing some metadata of CI, we have automation's to collect metadata and push to elasticsearch. Our elasticsearch cluster has below configuration, 2 - master nodes 3 - data nodes all no… --- ## [Cluster resource usage](https://discuss.elastic.co/t/cluster-resource-usage/10479)
**Author:** [@shift](https://discuss.elastic.co/u/shift)\ **Replies:** 13\ **Last updated:** [January 26, 2013, 10:21am UTC](https://discuss.elastic.co/t/cluster-resource-usage/10479 "2013-01-26T10:21:03Z")
I am indexing about 520GB of log files to elasticsearch a day. At this phase I am only keeping 24 hours of data (eventually the goal is 7 days). The incoming data is not being processed real-time, it is falling beh… --- ## [Compare message if it's similar to others](https://discuss.elastic.co/t/compare-message-if-its-similar-to-others/296826)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 9\ **Last updated:** [February 11, 2022, 4:08pm UTC](https://discuss.elastic.co/t/compare-message-if-its-similar-to-others/296826 "2022-02-11T16:08:42Z")
Hi, filebeat.yml configuration: multiline.pattern: \\d\\d/\\d\\d/\\d\\d\\d\\d\\s\\d\\d:\\d\\d:\\d\\d\\s\\d\\d\\d-\\sMAIN\\sEXCEPTION\\b multiline.negate: true multiline.match: after multiline.max\_lines: 7 Logstash configuration: input { … --- ## [Request for elastic search configuration](https://discuss.elastic.co/t/request-for-elastic-search-configuration/14943)
**Author:** [@srikanth\_ramineni](https://discuss.elastic.co/u/srikanth_ramineni)\ **Replies:** 9\ **Last updated:** [December 19, 2013, 6:47pm UTC](https://discuss.elastic.co/t/request-for-elastic-search-configuration/14943 "2013-12-19T18:47:32Z")
Hi Team, We have below server configurations. We are trying to load more than 500 million data into elastic. When data reaches 40 millions, shards are going down and data is deleting . Can you please help us wi… --- ## [Elastic cluster metrics](https://discuss.elastic.co/t/elastic-cluster-metrics/241259)
**Author:** [@ash2](https://discuss.elastic.co/u/ash2)\ **Replies:** 10\ **Last updated:** [August 5, 2020, 4:43am UTC](https://discuss.elastic.co/t/elastic-cluster-metrics/241259 "2020-08-05T04:43:00Z")
I want to create the dashboards in my application showing the elastic cluster data and metrics as it is shown in Kibana app monitoring. For getting most of the data I can use cluster health apis. But I not getting much o… --- ## [Starting ES-7.8.0 hung up CLI](https://discuss.elastic.co/t/starting-es-7-8-0-hung-up-cli/241768)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 10\ **Last updated:** [August 4, 2020, 3:37pm UTC](https://discuss.elastic.co/t/starting-es-7-8-0-hung-up-cli/241768 "2020-08-04T15:37:43Z")
Hello, I setup ES-7.8.0 cluster on 2 hosts (Linux), 2 master and 2 data nodes on each host. I'm able to start all 4 nodes, the cluster health=GREEN and I can see all nodes joined the cluster. Environment: ES-7.8.0 (el… --- ## [Apm-agent-go v0.5.2 panic with mu.Unlock](https://discuss.elastic.co/t/apm-agent-go-v0-5-2-panic-with-mu-unlock/156614)
**Author:** [@Barry\_Zhong](https://discuss.elastic.co/u/Barry_Zhong)\ **Replies:** 10\ **Last updated:** [November 19, 2018, 9:45am UTC](https://discuss.elastic.co/t/apm-agent-go-v0-5-2-panic-with-mu-unlock/156614 "2018-11-19T09:45:36Z")
I am using apm-agent-go inside my project, currently I got a crash when loading my application. I am not sure if it is the application's issue or apm-agent-go's issue. Any clue? fatal error: sync: unlock of unlocked mut… --- ## [Приоритет обновления cluster state](https://discuss.elastic.co/t/cluster-state/243815)
**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\ **Replies:** 12\ **Last updated:** [August 6, 2020, 3:35pm UTC](https://discuss.elastic.co/t/cluster-state/243815 "2020-08-06T15:35:44Z")
Добрый день! Заметил, что если остановить запись в кластер и начать удалять большое количество больших индексов(через wildcard), то это так напрягает дисковую подсистему, что cluster state обновляется с timeout и из-за … --- ## [Installing elastic agent using K8S is not normal](https://discuss.elastic.co/t/installing-elastic-agent-using-k8s-is-not-normal/337064)
**Author:** [@L1NG](https://discuss.elastic.co/u/L1NG)\ **Replies:** 9\ **Last updated:** [July 13, 2023, 2:11am UTC](https://discuss.elastic.co/t/installing-elastic-agent-using-k8s-is-not-normal/337064 "2023-07-13T02:11:26Z")
1.Install the elastic agent using K8S and check if the pod is running. The result is that it is running 2.But it's not normal to see it in Kibana 3.View detailed proxy information, which shows that there is an issue wi… --- ## [Anyone has experiences doing 'load-balanced' write's(and read's)?](https://discuss.elastic.co/t/anyone-has-experiences-doing-load-balanced-writes-and-reads/9402)
**Author:** [@es\_learner](https://discuss.elastic.co/u/es_learner)\ **Replies:** 9\ **Last updated:** [October 22, 2012, 4:57am UTC](https://discuss.elastic.co/t/anyone-has-experiences-doing-load-balanced-writes-and-reads/9402 "2012-10-22T04:57:06Z")
I am planning on load-balancing my read's and write's across a 2 replicas, 5 shards cluster. Here's an example of my python code: from pyes import ES conn=ES(\['primary.1:9200', 'replica.1:9200', 'replica.2:92… --- ## [Get message content without message tag in logstash](https://discuss.elastic.co/t/get-message-content-without-message-tag-in-logstash/165714)
**Author:** [@manasapp](https://discuss.elastic.co/u/manasapp)\ **Replies:** 10\ **Last updated:** [January 30, 2019, 9:35am UTC](https://discuss.elastic.co/t/get-message-content-without-message-tag-in-logstash/165714 "2019-01-30T09:35:00Z")
Hello everyone, This is the config file i used. input { syslog { port =\> 514 } } filter{ mutate { remove\_field =\> \["facility\_label","facility","@version","priority","tags","host","timestamp","severity\_label"… --- ## [Heavy indexing cause severe delay for searching](https://discuss.elastic.co/t/heavy-indexing-cause-severe-delay-for-searching/21741)
**Author:** [@Hajime\_Takase](https://discuss.elastic.co/u/Hajime_Takase)\ **Replies:** 11\ **Last updated:** [January 23, 2015, 9:13am UTC](https://discuss.elastic.co/t/heavy-indexing-cause-severe-delay-for-searching/21741 "2015-01-23T09:13:35Z")
Hi, I have a 10 indexes with 100 shards using 10 nodes which have 40 cores each. I have a problem when indexing 1000~2000/doc or 2M~4M per sec in new index, searching to the other old indexes happen to be very slo… --- ## [Can't get host.name from filebeat input by journad mode](https://discuss.elastic.co/t/cant-get-host-name-from-filebeat-input-by-journad-mode/370296)
**Author:** [@huanghaiqing1](https://discuss.elastic.co/u/huanghaiqing1)\ **Replies:** 9\ **Last updated:** [November 15, 2024, 7:41am UTC](https://discuss.elastic.co/t/cant-get-host-name-from-filebeat-input-by-journad-mode/370296 "2024-11-15T07:41:28Z")
Here we have a journald remote server, which holds all uploaded jourand logs from different host. And it's fed to filebeat as input. And in kibana, I only see all the logs with host.name as this log server's hostname. It… --- ## [Scripted fields versus scripts in discovery objects](https://discuss.elastic.co/t/scripted-fields-versus-scripts-in-discovery-objects/326802)
**Author:** [@gyannea](https://discuss.elastic.co/u/gyannea)\ **Replies:** 9\ **Last updated:** [March 8, 2023, 7:02pm UTC](https://discuss.elastic.co/t/scripted-fields-versus-scripts-in-discovery-objects/326802 "2023-03-08T19:02:42Z")
In Kibana I have found two ways to create an additional field based upon what is in the documents. Use scripted fields in the index patterns. Since I want to convert a parameter that is in seconds to hours the script i… --- ## [Limit JVM heap](https://discuss.elastic.co/t/limit-jvm-heap/305920)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 13\ **Last updated:** [June 3, 2022, 6:12am UTC](https://discuss.elastic.co/t/limit-jvm-heap/305920 "2022-06-03T06:12:26Z")
Good morning, We have a issue with the limit of JVM heap. Our Elasticsearch data nodes have a data, ingest and master role, and the node that allow it have 32gb of memory and 8 cpu. Our configuration of resources on dat… --- ## [Data mapping is not correct in Kibana data table](https://discuss.elastic.co/t/data-mapping-is-not-correct-in-kibana-data-table/329244)
**Author:** [@Tanzeela](https://discuss.elastic.co/u/Tanzeela)\ **Replies:** 10\ **Last updated:** [April 12, 2023, 4:46pm UTC](https://discuss.elastic.co/t/data-mapping-is-not-correct-in-kibana-data-table/329244 "2023-04-12T16:46:10Z")
Hi Elastic community, I am newbie . I have written code that provide this information, In Discover you can see the data received correct as code Incorrect Data mapping as shown in kibana data table: Data is… --- ## [Sampler aggregration overhead](https://discuss.elastic.co/t/sampler-aggregration-overhead/216324)
**Author:** [@Bruno\_Lage\_Aguiar](https://discuss.elastic.co/u/Bruno_Lage_Aguiar)\ **Replies:** 10\ **Last updated:** [January 28, 2020, 5:05pm UTC](https://discuss.elastic.co/t/sampler-aggregration-overhead/216324 "2020-01-28T17:05:35Z")
Hi, I have a search use case with a catalog over 20M products. If the search being made matches a lot of products the aggregations takes quite a lot of time, since they have to analyze millions of products. Being so we… --- ## [Replace @timestamp with timestamp in my message - logstash](https://discuss.elastic.co/t/replace-timestamp-with-timestamp-in-my-message-logstash/166000)
**Author:** [@manasapp](https://discuss.elastic.co/u/manasapp)\ **Replies:** 11\ **Last updated:** [January 30, 2019, 9:39am UTC](https://discuss.elastic.co/t/replace-timestamp-with-timestamp-in-my-message-logstash/166000 "2019-01-30T09:39:02Z")
Hi Everyone i need to replace @timestamp with the timestamp from log file(message). still i can't mention complete message format. i can use like starts with timestamp. i tried below code grok { match =\> { "message"… --- ## [How to use 'AND' in Logstash?](https://discuss.elastic.co/t/how-to-use-and-in-logstash/132695)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 11\ **Last updated:** [May 24, 2018, 7:12pm UTC](https://discuss.elastic.co/t/how-to-use-and-in-logstash/132695 "2018-05-24T19:12:31Z")
Hi, Can someone please say if it's correct to use the following, if \[message\] =~ /department=technology&space=dev/{ ... } Basically I am looking in \[message\] for the fields department and space. I am using operator &,… --- ## [Advice on cluster configuration](https://discuss.elastic.co/t/advice-on-cluster-configuration/159813)
**Author:** [@rpm1984](https://discuss.elastic.co/u/rpm1984)\ **Replies:** 9\ **Last updated:** [December 11, 2018, 6:18am UTC](https://discuss.elastic.co/t/advice-on-cluster-configuration/159813 "2018-12-11T06:18:36Z")
Hi there. I'm sure you've heard this question a million times, so apologies :slight\_smile: I've been reading day and night about indexes, shards, nodes, custom routing, ES metrics to monitor, etc. I'm still a bit stumpe… --- ## [Grok Pattern for logstash](https://discuss.elastic.co/t/grok-pattern-for-logstash/149783)
**Author:** [@muthu\_kumar1](https://discuss.elastic.co/u/muthu_kumar1)\ **Replies:** 13\ **Last updated:** [October 8, 2018, 10:32am UTC](https://discuss.elastic.co/t/grok-pattern-for-logstash/149783 "2018-10-08T10:32:28Z")
Hi , Can someone help on grok pattern for the below logs message#IE-7.0||trident/4.0#message tried with below pattern %{WORD:THREADNAME}#%{HOSTNAME:IE}||trident/%{JAVACLASS}#{%WORD:MESSAGE} but not worked..please he… [Previous page](https://discuss.elastic.co/top.md?page=224&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=226&per_page=50&period=all)