# Top **URL:** https://discuss.elastic.co/top.md?page=230&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 231 --- ## [Elastic upgrade hosted on GCP](https://discuss.elastic.co/t/elastic-upgrade-hosted-on-gcp/231711)
**Author:** [@Atlas](https://discuss.elastic.co/u/Atlas)\ **Replies:** 9\ **Last updated:** [May 14, 2020, 10:52pm UTC](https://discuss.elastic.co/t/elastic-upgrade-hosted-on-gcp/231711 "2020-05-14T22:52:18Z")
Hi there, I am pretty new to Elasticsearch and I ran into an Upgrade task that gave me some doubts. I have a 3-nodes Cluster running Elasticsearch on Google Cloud (as a Google Click to Deploy deployment) ad I must upgr… --- ## [Parse JSON](https://discuss.elastic.co/t/parse-json/207104)
**Author:** [@Buzz](https://discuss.elastic.co/u/Buzz)\ **Replies:** 9\ **Last updated:** [November 9, 2019, 2:13pm UTC](https://discuss.elastic.co/t/parse-json/207104 "2019-11-09T14:13:58Z")
Hi All, I would like to ask you for a help with parsing data from JSON. I have a log file with huge JSON that contains non parsed parts: dataj.AffectedItems { "Attachments": "ATT00001.png (24733b); ATT00002.jpg (24684… --- ## [Elasticsearch 5.0.0-5.6.10 and 6.0.0-6.3.2: Log4j CVE-2021-44228, CVE-2021-45046 remediation](https://discuss.elastic.co/t/elasticsearch-5-0-0-5-6-10-and-6-0-0-6-3-2-log4j-cve-2021-44228-cve-2021-45046-remediation/292054)
**Author:** [@qhoxie](https://discuss.elastic.co/u/qhoxie)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 10:21pm UTC](https://discuss.elastic.co/t/elasticsearch-5-0-0-5-6-10-and-6-0-0-6-3-2-log4j-cve-2021-44228-cve-2021-45046-remediation/292054 "2021-12-15T22:21:00Z")
Note — If you are not running Elasticsearch 5.0.0-5.6.10 or 6.0.0-6.3.2, these instructions do not apply. Please follow the guidance in the main announcement. Instructions for removing JndiLookup from the log4j-core JAR… --- ## [Fortigate 30E not sending any logs to ubuntu/logstash](https://discuss.elastic.co/t/fortigate-30e-not-sending-any-logs-to-ubuntu-logstash/352270)
**Author:** [@dadafaf](https://discuss.elastic.co/u/dadafaf)\ **Replies:** 14\ **Last updated:** [February 7, 2024, 7:49pm UTC](https://discuss.elastic.co/t/fortigate-30e-not-sending-any-logs-to-ubuntu-logstash/352270 "2024-02-07T19:49:14Z")
Hi! I have a problem that I need help with. I am using a Fortigate 30e firewall and a log server on a virtual machine with ELK stack and Logstash installed. The goal is to send logs from the Fortigate 30e to the log ser… --- ## [Disable SSL and HTTP security](https://discuss.elastic.co/t/disable-ssl-and-http-security/373753)
**Author:** [@Oyuka](https://discuss.elastic.co/u/Oyuka)\ **Replies:** 9\ **Last updated:** [January 28, 2025, 11:21am UTC](https://discuss.elastic.co/t/disable-ssl-and-http-security/373753 "2025-01-28T11:21:24Z")
Hello, Why isn't a new index being created? I think this error related HTTP and SSL security in my elasticsearch.yml. The second picture is security configuration in elasticsearch.yml. When i disable them kibana doesn'… --- ## [Kibana has problems connecting to Elasticsearch](https://discuss.elastic.co/t/kibana-has-problems-connecting-to-elasticsearch/16563)
**Author:** [@Dusan\_Dordevic](https://discuss.elastic.co/u/Dusan_Dordevic)\ **Replies:** 9\ **Last updated:** [May 6, 2014, 2:48am UTC](https://discuss.elastic.co/t/kibana-has-problems-connecting-to-elasticsearch/16563 "2014-05-06T02:48:26Z")
Hi, I downloaded elasticsearch-1.0.1.noarch.rpm, logstash-1.4.0-1\_c82dc09.noarch.rpm and kibana-3.0.0.tar.gz from http://www.elasticsearch.org/overview/elkdownloads/ and installed them on RHEL 6 with Apache and … --- ## [Sort tickets by age group](https://discuss.elastic.co/t/sort-tickets-by-age-group/216186)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 11\ **Last updated:** [February 3, 2020, 4:42pm UTC](https://discuss.elastic.co/t/sort-tickets-by-age-group/216186 "2020-02-03T16:42:08Z")
Hello all, Im trying to create a graph similar to the below in Kibana. I am using an API to get all the ticketing fields including the created date and closed date. So I need to do the follwing to get to this: che… --- ## [Elaticsearch kibana ml jobs issue](https://discuss.elastic.co/t/elaticsearch-kibana-ml-jobs-issue/252486)
**Author:** [@Akhil\_Mohan](https://discuss.elastic.co/u/Akhil_Mohan)\ **Replies:** 10\ **Last updated:** [October 20, 2020, 3:34pm UTC](https://discuss.elastic.co/t/elaticsearch-kibana-ml-jobs-issue/252486 "2020-10-20T15:34:32Z")
I have created one kibana ml jobs to alert when low event rate and i have ingested data using the audit beat continuously and stop the ingestion but event is not getting triggered.how can i solve this issue. --- ## [No \_timestamp possible](https://discuss.elastic.co/t/no--timestamp-possible/13826)
**Author:** [@Bernd\_Fehling](https://discuss.elastic.co/u/Bernd_Fehling)\ **Replies:** 12\ **Last updated:** [October 11, 2013, 11:25am UTC](https://discuss.elastic.co/t/no--timestamp-possible/13826 "2013-10-11T11:25:29Z")
I tried many different options/combinations to get a \_timestamp of the current time (like "now") set for each document loaded but have no luck to manage this. As far as I understood from the docs it should be possibl… --- ## [\[java api\] Trying to use groovy instead of mvel](https://discuss.elastic.co/t/java-api-trying-to-use-groovy-instead-of-mvel/18952)
**Author:** [@Laurent\_T](https://discuss.elastic.co/u/Laurent_T)\ **Replies:** 9\ **Last updated:** [July 30, 2014, 6:23pm UTC](https://discuss.elastic.co/t/java-api-trying-to-use-groovy-instead-of-mvel/18952 "2014-07-30T18:23:25Z")
Hi, I'm upgrading my plugin to 1.3.0 from 0.90.3 and i'm having some troubles with my customScoreQuery that has become a functionScoreQuery. Here's what i did: I changed the ES version to 1.3.0 in my pom.xml, adapted … --- ## [JVM Exception when searching on huge data](https://discuss.elastic.co/t/jvm-exception-when-searching-on-huge-data/7579)
**Author:** [@manoj\_2](https://discuss.elastic.co/u/manoj_2)\ **Replies:** 11\ **Last updated:** [May 17, 2012, 8:27pm UTC](https://discuss.elastic.co/t/jvm-exception-when-searching-on-huge-data/7579 "2012-05-17T20:27:42Z")
Hi Shay, We were running an App on Elasticsearch, which didn't have Nested or Array Types. As an addition of data, we introduced Nested and Array Types in to the existing index. This new fields carry even an arr… --- ## [Only one record gets created in the Elastic search](https://discuss.elastic.co/t/only-one-record-gets-created-in-the-elastic-search/342603)
**Author:** [@almostepic](https://discuss.elastic.co/u/almostepic)\ **Replies:** 10\ **Last updated:** [September 11, 2023, 12:16pm UTC](https://discuss.elastic.co/t/only-one-record-gets-created-in-the-elastic-search/342603 "2023-09-11T12:16:26Z")
I am using Logstash and created a conf file which allows me to input data into Elasticsearch. The data is related to git statistics from azure as I am creating a dashboard which will help to see information such as tota… --- ## [Unable to split the data in message field](https://discuss.elastic.co/t/unable-to-split-the-data-in-message-field/325987)
**Author:** [@anik-27](https://discuss.elastic.co/u/anik-27)\ **Replies:** 10\ **Last updated:** [February 28, 2023, 7:45am UTC](https://discuss.elastic.co/t/unable-to-split-the-data-in-message-field/325987 "2023-02-28T07:45:19Z")
Hello I am running a python file using exec input plugin, the python file is making multiple api calls and collecting the data in a list(array). I am printing the list and getting the data in message field, but I am un… --- ## [Transmitting Kibana data through watchers](https://discuss.elastic.co/t/transmitting-kibana-data-through-watchers/314199)
**Author:** [@Nalin](https://discuss.elastic.co/u/Nalin)\ **Replies:** 10\ **Last updated:** [October 25, 2022, 8:19am UTC](https://discuss.elastic.co/t/transmitting-kibana-data-through-watchers/314199 "2022-10-25T08:19:23Z")
Hi All, We are trying to run the API call for "GET /\_cat/indices" through a watcher , but we are not able to receive the data . Could anyone please help us with the correct script for running the above GET command thro… --- ## [Scalability](https://discuss.elastic.co/t/scalability/148939)
**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\ **Replies:** 10\ **Last updated:** [September 19, 2018, 5:15am UTC](https://discuss.elastic.co/t/scalability/148939 "2018-09-19T05:15:13Z")
W hy is the graph as shown below in the attachment. Explain --- ## [Can we enable stack trace for all the calls in the Custom Python Tracing](https://discuss.elastic.co/t/can-we-enable-stack-trace-for-all-the-calls-in-the-custom-python-tracing/324540)
**Author:** [@Dixit](https://discuss.elastic.co/u/Dixit)\ **Replies:** 9\ **Last updated:** [February 11, 2023, 12:29am UTC](https://discuss.elastic.co/t/can-we-enable-stack-trace-for-all-the-calls-in-the-custom-python-tracing/324540 "2023-02-11T00:29:10Z")
hi @basepi & @lwintergerst , How can we enable stack trace for all the calls in the waterfall model. Right now errors /exceptions has the stack trace. Want to track all the calls which are greater than 5 seconds with… --- ## [Kibana UI Dashboard Access Issue](https://discuss.elastic.co/t/kibana-ui-dashboard-access-issue/348971)
**Author:** [@Mani\_Manikanta](https://discuss.elastic.co/u/Mani_Manikanta)\ **Replies:** 11\ **Last updated:** [December 10, 2023, 8:55am UTC](https://discuss.elastic.co/t/kibana-ui-dashboard-access-issue/348971 "2023-12-10T08:55:27Z")
Unable to Access Kibana UI Dashboard Getting Below Error, Getting Please upgrade browser in Google Chrome/Edge/Firefox Kibana - 8.3.3 Elasticsearch - 8.3.3 No Domain Mapped Trying to Access using kibana-ip:5601 --- ## [Limit large number of threads](https://discuss.elastic.co/t/limit-large-number-of-threads/22775)
**Author:** [@Abid\_Hussain](https://discuss.elastic.co/u/Abid_Hussain)\ **Replies:** 9\ **Last updated:** [March 23, 2015, 8:27am UTC](https://discuss.elastic.co/t/limit-large-number-of-threads/22775 "2015-03-23T08:27:11Z")
Hi all, I know I'm not the first one wondering about the number of threads but I didn't find anything really appropriate to my question. We use ES with the default values for the thread pool sizes, that is actu… --- ## [Dense\_vector slow in ES 9.1.3](https://discuss.elastic.co/t/dense-vector-slow-in-es-9-1-3/381855)
**Author:** [@glund0](https://discuss.elastic.co/u/glund0)\ **Replies:** 16\ **Last updated:** [October 13, 2025, 10:42am UTC](https://discuss.elastic.co/t/dense-vector-slow-in-es-9-1-3/381855 "2025-10-13T10:42:49Z")
We’ve been using ES 8.9.0 and are looking to upgrade, so I started testing performance with 9.1.3 and found it to be very slow. So, I went back to 8.19.3 and found that it’s performance is fine. But we’d like to not be… --- ## [Document indexed asynchronously](https://discuss.elastic.co/t/document-indexed-asynchronously/287090)
**Author:** [@ntruongsinh](https://discuss.elastic.co/u/ntruongsinh)\ **Replies:** 9\ **Last updated:** [October 25, 2021, 4:59am UTC](https://discuss.elastic.co/t/document-indexed-asynchronously/287090 "2021-10-25T04:59:18Z")
Hi everyone, As I know that when we create a document, this document will be indexed asynchronously as mentioned here Documents API | Elastic App Search Documentation \[7.15\] | Elastic. So when I create the document, it… --- ## [Enlarge Cluster with new nodes](https://discuss.elastic.co/t/enlarge-cluster-with-new-nodes/263974)
**Author:** [@cadirol](https://discuss.elastic.co/u/cadirol)\ **Replies:** 9\ **Last updated:** [February 19, 2021, 8:57am UTC](https://discuss.elastic.co/t/enlarge-cluster-with-new-nodes/263974 "2021-02-19T08:57:32Z")
Hi all We are planing to enlarge our cluster with 16 nodes in the end. the first 16 nodes are 4 years old, but still healthy and good enough! But as you can imagine, 4 years ago, we added 4TB Disk space in each node. … --- ## [Cluster.routing.allocation.awareness.attributes doesn't seem to work](https://discuss.elastic.co/t/cluster-routing-allocation-awareness-attributes-doesnt-seem-to-work/238548)
**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\ **Replies:** 9\ **Last updated:** [July 3, 2020, 8:20am UTC](https://discuss.elastic.co/t/cluster-routing-allocation-awareness-attributes-doesnt-seem-to-work/238548 "2020-07-03T08:20:23Z")
Hi Team, cluster.routing.allocation.awareness.attributes: 34 And I have 2 VMs with this same value. prd-es107.com and prd-es108.com. Both has 34. I have almost 86 nodes in my cluster. Below is the shard allocation … --- ## [Timestamp](https://discuss.elastic.co/t/timestamp/274734)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 12\ **Last updated:** [June 7, 2021, 7:25am UTC](https://discuss.elastic.co/t/timestamp/274734 "2021-06-07T07:25:33Z")
Hello Expert, If i would like to insert old data for example last year data in ES, could I change the timestamp as date of last year? If No, then what is the solution to insert the data which correspondence the time? T… --- ## [Unable to index nested xml rest api data](https://discuss.elastic.co/t/unable-to-index-nested-xml-rest-api-data/175173)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 10\ **Last updated:** [April 3, 2019, 6:18pm UTC](https://discuss.elastic.co/t/unable-to-index-nested-xml-rest-api-data/175173 "2019-04-03T18:18:35Z")
Hi All, WE are trying to integrate sciencelogic performance data into elasticsearch, for which we are trying through logstash below is my config input { http\_poller { urls =\> { url =\> "https://poc.sciencelo… --- ## [\[ANN\] ElasticHQ v0.95 Monitoring/Management Released!](https://discuss.elastic.co/t/ann-elastichq-v0-95-monitoring-management-released/12756)
**Author:** [@Roy\_Russo](https://discuss.elastic.co/u/Roy_Russo)\ **Replies:** 11\ **Last updated:** [July 18, 2013, 11:42pm UTC](https://discuss.elastic.co/t/ann-elastichq-v0-95-monitoring-management-released/12756 "2013-07-18T23:42:09Z")
Hello fellow Elastickers, A short post on the new features found in 0.95 of Elastic HQ Monitoring and Management for ES. \*New Features:\* - \*Manage Aliases:\* Create, Delete Index Aliases - \*Live Polling… --- ## [Cluster stalls when nodes are removed (or the true meaning of expected\_nodes)](https://discuss.elastic.co/t/cluster-stalls-when-nodes-are-removed-or-the-true-meaning-of-expected-nodes/10307)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 9\ **Last updated:** [January 16, 2013, 6:20pm UTC](https://discuss.elastic.co/t/cluster-stalls-when-nodes-are-removed-or-the-true-meaning-of-expected-nodes/10307 "2013-01-16T18:20:34Z")
One of my clusters has 8 nodes running 0.20.0.RC1. Most settings are the default except for: bootstrap.mlockall: true transport.tcp.connect\_timeout: 5s gateway.expected\_nodes: 8 discovery.zen.minimum\_master\_nodes: … --- ## [Is the below sizing fits for mentioned use case?](https://discuss.elastic.co/t/is-the-below-sizing-fits-for-mentioned-use-case/266855)
**Author:** [@Jax\_dev](https://discuss.elastic.co/u/Jax_dev)\ **Replies:** 12\ **Last updated:** [March 19, 2021, 9:01am UTC](https://discuss.elastic.co/t/is-the-below-sizing-fits-for-mentioned-use-case/266855 "2021-03-19T09:01:39Z")
I have been reading many documents to understand about sizing about elastic search... Data load: 9k transactions per second Each transaction contains around 1kb of data. Per second, 9k inserts and 50k search queries w… --- ## [How to increase queue capacity from 200 to 400?](https://discuss.elastic.co/t/how-to-increase-queue-capacity-from-200-to-400/333947)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 11\ **Last updated:** [May 23, 2023, 5:40pm UTC](https://discuss.elastic.co/t/how-to-increase-queue-capacity-from-200-to-400/333947 "2023-05-23T17:40:44Z")
How to increase queue capacity from 200 to 400? --- ## [Elasticsearch speed comparison issue with sql](https://discuss.elastic.co/t/elasticsearch-speed-comparison-issue-with-sql/267947)
**Author:** [@Celal\_Poyraz](https://discuss.elastic.co/u/Celal_Poyraz)\ **Replies:** 9\ **Last updated:** [March 22, 2021, 8:29pm UTC](https://discuss.elastic.co/t/elasticsearch-speed-comparison-issue-with-sql/267947 "2021-03-22T20:29:57Z")
I compare the speed of Sql with ElasticSearch. I have 1.5 million data. But sql query runs faster than elastic search. I don't understand the problem. Why is the word like query coming faster in sql? My code for Sql \< … --- ## [What does Coordinate Map Visualization read?](https://discuss.elastic.co/t/what-does-coordinate-map-visualization-read/149198)
**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\ **Replies:** 9\ **Last updated:** [October 1, 2018, 1:38pm UTC](https://discuss.elastic.co/t/what-does-coordinate-map-visualization-read/149198 "2018-10-01T13:38:17Z")
Hi, So I have mapped some ID to \[geoip\]\[location\]\[lon\] and \[geoip\]\[location\]\[lat\] and the data is showing up well, but the Coordinate Map Visualization is still not showing any data. Is the visualization reading more d… --- ## [Issue with query using named filter](https://discuss.elastic.co/t/issue-with-query-using-named-filter/3399)
**Author:** [@Andrei](https://discuss.elastic.co/u/Andrei)\ **Replies:** 9\ **Last updated:** [October 4, 2010, 10:18am UTC](https://discuss.elastic.co/t/issue-with-query-using-named-filter/3399 "2010-10-04T10:18:35Z")
I'm trying to use the new named filters feature in 0.11 and getting a QueryParsingException on this query: { "size": 10, "query": { "filtered": { "query": { "match\_all… --- ## [Can't connect to elasticsearch with kibana](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-with-kibana/233623)
**Author:** [@Phoenix\_Flame](https://discuss.elastic.co/u/Phoenix_Flame)\ **Replies:** 10\ **Last updated:** [May 26, 2020, 12:23pm UTC](https://discuss.elastic.co/t/cant-connect-to-elasticsearch-with-kibana/233623 "2020-05-26T12:23:48Z")
I just installed elasticsearch and kibana but when i try to start kibana i get this error "Error: \[mapper\_parsing\_exception\] No handler for type \[flattened\] declared on field \[state\]". How do i fix this? --- ## [Elasticsearch input plugin](https://discuss.elastic.co/t/elasticsearch-input-plugin/158891)
**Author:** [@imaad](https://discuss.elastic.co/u/imaad)\ **Replies:** 10\ **Last updated:** [November 30, 2018, 3:25pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin/158891 "2018-11-30T15:25:33Z")
Hello, I am running a simple logstash configuration : input { elasticsearch { hosts =\> "http://:9200/" index =\> "A" query =\> '{ "query": {"bool": {"must": \[ {"term": { "name": { "value": "X" } }} \]}} }' s… --- ## [How to ensure that rivers are equally distributed across nodes in the cluster](https://discuss.elastic.co/t/how-to-ensure-that-rivers-are-equally-distributed-across-nodes-in-the-cluster/14987)
**Author:** [@Karol\_Gwaj](https://discuss.elastic.co/u/Karol_Gwaj)\ **Replies:** 11\ **Last updated:** [March 31, 2014, 2:16pm UTC](https://discuss.elastic.co/t/how-to-ensure-that-rivers-are-equally-distributed-across-nodes-in-the-cluster/14987 "2014-03-31T14:16:18Z")
Hi, is there any build-in way to ensure that rivers are equally distributed across nodes in the elasticsearch cluster ? (i have like 100 rivers pulling data from different sources and i will like to avoid situati… --- ## [Multisplit](https://discuss.elastic.co/t/multisplit/129793)
**Author:** [@laurentbillon](https://discuss.elastic.co/u/laurentbillon)\ **Replies:** 15\ **Last updated:** [April 30, 2018, 12:19pm UTC](https://discuss.elastic.co/t/multisplit/129793 "2018-04-30T12:19:31Z")
Good afternoon, I have log with : and - for separate information. I want to select information between : and - I try with ruby ruby { code =\> "event.set('source', event.get('origine').split(':')\[1\])"; event.set('I… --- ## [Split logs per customers](https://discuss.elastic.co/t/split-logs-per-customers/311658)
**Author:** [@YannKistenmacker](https://discuss.elastic.co/u/YannKistenmacker)\ **Replies:** 9\ **Last updated:** [August 11, 2022, 12:46pm UTC](https://discuss.elastic.co/t/split-logs-per-customers/311658 "2022-08-11T12:46:34Z")
Hello everyone, I'm new elasticsearch user and i'm in charge to develop a system to monitoring our customers logs. So starting by this point i have to monitoring Fortinet Firewall Logs and i've already did with filebeat… --- ## [Slow response from elastic search](https://discuss.elastic.co/t/slow-response-from-elastic-search/134613)
**Author:** [@Akib\_Ali](https://discuss.elastic.co/u/Akib_Ali)\ **Replies:** 9\ **Last updated:** [June 9, 2018, 9:56am UTC](https://discuss.elastic.co/t/slow-response-from-elastic-search/134613 "2018-06-09T09:56:48Z")
We are installing the elastic search on docker machine. After creating near about 300 indexes where each index has near about 20-50 documents which sums to a total of 12000 documents, we are not able to fetch the data in… --- ## [TransportClient failures with 0.90.3 cluster, but NodeClient works without failures](https://discuss.elastic.co/t/transportclient-failures-with-0-90-3-cluster-but-nodeclient-works-without-failures/14920)
**Author:** [@brian\_yoder](https://discuss.elastic.co/u/brian_yoder)\ **Replies:** 9\ **Last updated:** [December 20, 2013, 4:15pm UTC](https://discuss.elastic.co/t/transportclient-failures-with-0-90-3-cluster-but-nodeclient-works-without-failures/14920 "2013-12-20T16:15:29Z")
I reported this a while ago, but have new information that may help. I have a cluster of 3 Linux VMs with ES 0.90.3 running and an older Oracle Java 6. My driver creates a TransportClient,. Then a writer thread pool … --- ## [Elastic Shards are Not Balanced Across Nodes](https://discuss.elastic.co/t/elastic-shards-are-not-balanced-across-nodes/359504)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 10\ **Last updated:** [May 16, 2024, 5:51am UTC](https://discuss.elastic.co/t/elastic-shards-are-not-balanced-across-nodes/359504 "2024-05-16T05:51:48Z")
Hi Team, Initially we had made a cluster of two nodes having six shards. Later we decided to add one more node to cluster, after adding node we can see that the cluster is in green state but the shards are not distribut… --- ## [More facet memory reduction questions](https://discuss.elastic.co/t/more-facet-memory-reduction-questions/7544)
**Author:** [@Andy\_Wick](https://discuss.elastic.co/u/Andy_Wick)\ **Replies:** 11\ **Last updated:** [May 13, 2012, 9:33am UTC](https://discuss.elastic.co/t/more-facet-memory-reduction-questions/7544 "2012-05-13T09:33:31Z")
I'm trying to get over 1 billion documents loaded on 10 16G machines with a faceted "tags" array field with about 8000 unique values. Looking at elastichead, each document is around 800 bytes after compression. S… --- ## [Mirror Kibanas on separate clusters](https://discuss.elastic.co/t/mirror-kibanas-on-separate-clusters/319814)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 9\ **Last updated:** [November 29, 2022, 9:50am UTC](https://discuss.elastic.co/t/mirror-kibanas-on-separate-clusters/319814 "2022-11-29T09:50:59Z")
Hey Everyone, Is there any way to sync Kibanas across multiple clusters? Essentially, a way to sync all visualizations, dashboards, queries, etc. from one Kibana to another. I'm aware that you can use remote reindex, an… --- ## [Elastic-agent-complete-\>x509: certificate signed by unknown authority](https://discuss.elastic.co/t/elastic-agent-complete-x509-certificate-signed-by-unknown-authority/375081)
**Author:** [@Amol\_Nagotkar](https://discuss.elastic.co/u/Amol_Nagotkar)\ **Replies:** 10\ **Last updated:** [March 1, 2025, 3:25am UTC](https://discuss.elastic.co/t/elastic-agent-complete-x509-certificate-signed-by-unknown-authority/375081 "2025-03-01T03:25:47Z")
Hi all, i am following this -\> Monitor resources on private networks | Elastic Observability \[8.16\] | Elastic sudo docker run \\ --env FLEET\_ENROLL=1 \\ --env FLEET\_URL=https://elastic:8220 \\ --env FLEET\_ENROLLMENT… --- ## [Reindex after mapping](https://discuss.elastic.co/t/reindex-after-mapping/32669)
**Author:** [@kodermax](https://discuss.elastic.co/u/kodermax)\ **Replies:** 10\ **Last updated:** [October 22, 2015, 2:49pm UTC](https://discuss.elastic.co/t/reindex-after-mapping/32669 "2015-10-22T14:49:54Z")
When i do mapping for field then i need do reindex? PUT /contact { "properties": { "perms": { "type": "multi\_field", "fields": { "perms": {"type": "string"}, … --- ## ["index":"no" does not work](https://discuss.elastic.co/t/index-no-does-not-work/5183)
**Author:** [@hamazasp\_avetisyan](https://discuss.elastic.co/u/hamazasp_avetisyan)\ **Replies:** 10\ **Last updated:** [August 22, 2011, 8:44am UTC](https://discuss.elastic.co/t/index-no-does-not-work/5183 "2011-08-22T08:44:57Z")
Hi, I'm using dynamic mapping for indexing. Above you can see PHP structure of data. array("mailing\_index" =\> array("properties" =\> array( … --- ## [LogStash 403 error to Elastic](https://discuss.elastic.co/t/logstash-403-error-to-elastic/362897)
**Author:** [@NikoCosmico01](https://discuss.elastic.co/u/NikoCosmico01)\ **Replies:** 9\ **Last updated:** [July 21, 2024, 7:13am UTC](https://discuss.elastic.co/t/logstash-403-error-to-elastic/362897 "2024-07-21T07:13:34Z")
I am trying to ingest data from wazuh to elastic using this .config file inside logstash input { opensearch { hosts =\> \["\[IP:PORT\]"\] user =\> "\[USER\]" password =\> "\[PW\]" index =\> "wazuh-alerts-\*" s… --- ## [How to match 2 key value pairs in unstructured string that looks like column](https://discuss.elastic.co/t/how-to-match-2-key-value-pairs-in-unstructured-string-that-looks-like-column/284541)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 10\ **Last updated:** [September 18, 2021, 7:15pm UTC](https://discuss.elastic.co/t/how-to-match-2-key-value-pairs-in-unstructured-string-that-looks-like-column/284541 "2021-09-18T19:15:51Z")
I have a document with some lines like: Example requested: 24:00:00 Example Used: 01:14:11 What I want is to have is: { "example\_requested": "24:00:00", "example\_used": 01:14:11 } What I tried (t… --- ## [Salvage data from a single node that once belonged to a cluster](https://discuss.elastic.co/t/salvage-data-from-a-single-node-that-once-belonged-to-a-cluster/241738)
**Author:** [@yk928](https://discuss.elastic.co/u/yk928)\ **Replies:** 9\ **Last updated:** [July 18, 2020, 1:19pm UTC](https://discuss.elastic.co/t/salvage-data-from-a-single-node-that-once-belonged-to-a-cluster/241738 "2020-07-18T13:19:35Z")
I had an ES cluster of several nodes (let's say es1, es2, ...), and I have a disk snapshot from a certain point in the past, of the disk of a single ES node (i.e. es1). I'd like to dump all the data from this es1's back… --- ## [Can't get geoip working](https://discuss.elastic.co/t/cant-get-geoip-working/238574)
**Author:** [@danona45](https://discuss.elastic.co/u/danona45)\ **Replies:** 9\ **Last updated:** [July 8, 2020, 2:28am UTC](https://discuss.elastic.co/t/cant-get-geoip-working/238574 "2020-07-08T02:28:00Z")
I know there are gazillion other posts but I have tried pretty much anything at this point. Background: I am using AWS Opendistro and send events using Logstash both versions 7.4.0 Indexing template: { "pano… --- ## [При reindex не получается преобразовать поле в nested](https://discuss.elastic.co/t/reindex-nested/174771)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 9\ **Last updated:** [April 4, 2019, 4:59am UTC](https://discuss.elastic.co/t/reindex-nested/174771 "2019-04-04T04:59:49Z")
Хочу чтобы одно поле стало вместо простого текста nested объектом с этим же текстом. Маппинг нового поля: { "nested-2017-13" : { "mappings" : { "searchtype" : { "properties" : { "body2" : {… --- ## [Erro ao executar o logstash](https://discuss.elastic.co/t/erro-ao-executar-o-logstash/340664)
**Author:** [@Gustavo](https://discuss.elastic.co/u/Gustavo)\ **Replies:** 14\ **Last updated:** [August 14, 2023, 6:24pm UTC](https://discuss.elastic.co/t/erro-ao-executar-o-logstash/340664 "2023-08-14T18:24:15Z")
This error persists and I don't know how to solve it anymore. Can someone help me. Follow my .conf files input { file { path =\> "C:/Elastic/logstash-8.9.0/config/logs.log" start\_position =\> "beginning" } } filter … [Previous page](https://discuss.elastic.co/top.md?page=229&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=231&per_page=50&period=all)