# Top **URL:** https://discuss.elastic.co/top.md?page=232&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 233 --- ## [Customize Lens's graphs](https://discuss.elastic.co/t/customize-lenss-graphs/286702)
**Author:** [@Kadhem](https://discuss.elastic.co/u/Kadhem)\ **Replies:** 9\ **Last updated:** [October 15, 2021, 2:36pm UTC](https://discuss.elastic.co/t/customize-lenss-graphs/286702 "2021-10-15T14:36:12Z")
Hi, i'm using Lens charts in Kibana. i want to display a graph where Y axis is the timestamp and X axis is the values of My field . But Lens enable me to use a simple Function "Value" is there any solution? I don't want… --- ## [Lostash and arcsight integration](https://discuss.elastic.co/t/lostash-and-arcsight-integration/247434)
**Author:** [@sidhesh\_kumar](https://discuss.elastic.co/u/sidhesh_kumar)\ **Replies:** 9\ **Last updated:** [October 2, 2020, 10:10am UTC](https://discuss.elastic.co/t/lostash-and-arcsight-integration/247434 "2020-10-02T10:10:50Z")
unable to configure smart connector on logstash content of logstash.yml modules: name: arcsight var.input.eventbroker.bootstrap\_servers: "XXXX.XXXXXX.XXXXX:1515" var.input.eventbroker.topics: "eb\_topic" var.elasti… --- ## [Optimising Elasticsearch Search Queries](https://discuss.elastic.co/t/optimising-elasticsearch-search-queries/139320)
**Author:** [@puneetkhushwani](https://discuss.elastic.co/u/puneetkhushwani)\ **Replies:** 9\ **Last updated:** [July 10, 2018, 5:45pm UTC](https://discuss.elastic.co/t/optimising-elasticsearch-search-queries/139320 "2018-07-10T17:45:30Z")
Hi all, We have an ES cluster setup on AWS with 3 master nodes (c4.xlarge.elasticsearch) & 3 data nodes (c4.xlarge.elasticsearch) with a single index using 5 shards. Our mapping looks like this. { "mappings": { "\_do… --- ## [Consistently high CPU usage on hot nodes](https://discuss.elastic.co/t/consistently-high-cpu-usage-on-hot-nodes/379948)
**Author:** [@maario](https://discuss.elastic.co/u/maario)\ **Replies:** 12\ **Last updated:** [September 4, 2025, 3:47pm UTC](https://discuss.elastic.co/t/consistently-high-cpu-usage-on-hot-nodes/379948 "2025-09-04T15:47:04Z")
Hi all We are encountering a consistently high CPU usage (around 80% on average) on our hot nodes (2 hot, 2 warm, 4 cold) since around 3 weeks. The CPU usage roughly doubled one day and has since not gone down again. So… --- ## [Searhch Request](https://discuss.elastic.co/t/searhch-request/16578)
**Author:** [@Praveenkumar\_Arepall](https://discuss.elastic.co/u/Praveenkumar_Arepall)\ **Replies:** 12\ **Last updated:** [March 28, 2014, 11:42am UTC](https://discuss.elastic.co/t/searhch-request/16578 "2014-03-28T11:42:16Z")
Hi Team, I have little knowledge in elasticsearch but i cannot satisfied with what have know.i want to enhance my knowledge. Here is the question 1.How to know which field is matched in indexed document while fetchi… --- ## [Logstash ERROR: (NameError) cannot initialize Java class org.logstash.plugins.AliasRegistry (java.lang.ExceptionInInitializerError)](https://discuss.elastic.co/t/logstash-error-nameerror-cannot-initialize-java-class-org-logstash-plugins-aliasregistry-java-lang-exceptionininitializererror/355350)
**Author:** [@Abdulberk](https://discuss.elastic.co/u/Abdulberk)\ **Replies:** 14\ **Last updated:** [March 16, 2024, 2:25pm UTC](https://discuss.elastic.co/t/logstash-error-nameerror-cannot-initialize-java-class-org-logstash-plugins-aliasregistry-java-lang-exceptionininitializererror/355350 "2024-03-16T14:25:46Z")
I just got both Kibana and Elasticsearch up and running as a windows service and now i want to build a very basic logstash pipeline to figure how it will perform sending the results to Elasticsearch so that i can make su… --- ## [Understanding the effects of "low memory" (not OOM) on nodes (or: should I just add a new node to my cluster and get on with my life?!)](https://discuss.elastic.co/t/understanding-the-effects-of-low-memory-not-oom-on-nodes-or-should-i-just-add-a-new-node-to-my-cluster-and-get-on-with-my-life/6565)
**Author:** [@Alex\_At\_Ikanow](https://discuss.elastic.co/u/Alex_At_Ikanow)\ **Replies:** 14\ **Last updated:** [February 12, 2012, 11:18am UTC](https://discuss.elastic.co/t/understanding-the-effects-of-low-memory-not-oom-on-nodes-or-should-i-just-add-a-new-node-to-my-cluster-and-get-on-with-my-life/6565 "2012-02-12T11:18:23Z")
Summary: After loading facets, CPU runs high at idle even with a fair bit of memory left - is this expected? And can someone sanity check my field cache sizes? My pseudo-operational cluster consists of 3 nodes, eac… --- ## [I want Message values as feild using logstash](https://discuss.elastic.co/t/i-want-message-values-as-feild-using-logstash/303519)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 9\ **Last updated:** [April 29, 2022, 11:59am UTC](https://discuss.elastic.co/t/i-want-message-values-as-feild-using-logstash/303519 "2022-04-29T11:59:32Z")
Hello Every One Following is my message I want to split message value and add as field for filter and visulize how can I achive that please help any one message url=&type=click&date\_time=2013-01-01+12:00:00&initiated… --- ## [Used heap behaves wired, JVM Heapsize problems](https://discuss.elastic.co/t/used-heap-behaves-wired-jvm-heapsize-problems/241871)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 9\ **Last updated:** [July 23, 2020, 6:30am UTC](https://discuss.elastic.co/t/used-heap-behaves-wired-jvm-heapsize-problems/241871 "2020-07-23T06:30:21Z")
Hi, my used JVM Heap behaves very weird. I didn't change any settings. 2 Nodes work fine, the third has problems. (Orange Line) Settings: -Xms3g -Xmx3g The PC has a lot of free RAM left. What is happening he… --- ## [Can anyone please explain the mapping in Elasticsearch?](https://discuss.elastic.co/t/can-anyone-please-explain-the-mapping-in-elasticsearch/15481)
**Author:** [@dark\_shadow](https://discuss.elastic.co/u/dark_shadow)\ **Replies:** 9\ **Last updated:** [January 30, 2014, 12:51pm UTC](https://discuss.elastic.co/t/can-anyone-please-explain-the-mapping-in-elasticsearch/15481 "2014-01-30T12:51:00Z")
Hi, I have an existing mapping with me but I'm not able to understand it fully. curl -XPUT 'http://localhost:9200/auto\_index/' -d '{ "settings" : { "index" : { "number\_of\_shards" : 1, … --- ## [Getting maximum performance out of top\_children](https://discuss.elastic.co/t/getting-maximum-performance-out-of-top-children/8545)
**Author:** [@George\_Stathis](https://discuss.elastic.co/u/George_Stathis)\ **Replies:** 10\ **Last updated:** [August 17, 2012, 3:56am UTC](https://discuss.elastic.co/t/getting-maximum-performance-out-of-top-children/8545 "2012-08-17T03:56:30Z")
Looking for some pointers on how to optimize our use of top\_children. Scenario: ~800K parent docs, ~40 million child docs, running version 0.19.8 on EC2 In the docs, there is a warning about memory: With the current … --- ## [Date filter plugin issue](https://discuss.elastic.co/t/date-filter-plugin-issue/138208)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 12\ **Last updated:** [July 4, 2018, 1:19pm UTC](https://discuss.elastic.co/t/date-filter-plugin-issue/138208 "2018-07-04T13:19:55Z")
Hey, I try to parse a duration field thanks to "date" filter plugin but i'm unable to do this correctly \>\< My log : 0h 41' 47" 175ms I tried : H'h' MM\\' ss'"' SSS'ms' But it doesn't work..I am a little confused with… --- ## [Timing of Backup and composition shards and indices](https://discuss.elastic.co/t/timing-of-backup-and-composition-shards-and-indices/237223)
**Author:** [@jact](https://discuss.elastic.co/u/jact)\ **Replies:** 11\ **Last updated:** [June 17, 2020, 9:48am UTC](https://discuss.elastic.co/t/timing-of-backup-and-composition-shards-and-indices/237223 "2020-06-17T09:48:57Z")
Hi , Please provide an explanation: If I want to focus on data log security, I currently do a daily backup to avoid any problems with the server. Can monthly backups cover data before server problems? or is there ano… --- ## [Using Bulk API with Update in elasticsearch 0.19.3](https://discuss.elastic.co/t/using-bulk-api-with-update-in-elasticsearch-0-19-3/7884)
**Author:** [@sujoysett](https://discuss.elastic.co/u/sujoysett)\ **Replies:** 11\ **Last updated:** [June 4, 2012, 6:30am UTC](https://discuss.elastic.co/t/using-bulk-api-with-update-in-elasticsearch-0-19-3/7884 "2012-06-04T06:30:48Z")
Hi, Does the update API works with the bulk endpoint in ES? I am not being able to make it work. The update thing works separately as follows : REQUEST curl -XPOST 'http://localhost:9200/lp/6/66207/\_update' -d… --- ## [Errors: MasterNotDiscoveredException, IndexMissingException](https://discuss.elastic.co/t/errors-masternotdiscoveredexception-indexmissingexception/4135)
**Author:** [@aditya\_kulkarni](https://discuss.elastic.co/u/aditya_kulkarni)\ **Replies:** 11\ **Last updated:** [March 22, 2011, 10:16am UTC](https://discuss.elastic.co/t/errors-masternotdiscoveredexception-indexmissingexception/4135 "2011-03-22T10:16:58Z")
Hi, Documents stored previously (worked smoothly for last few days) Json document is of following format: "user": "123", "file\_name": "gftgf", "file\_extension": "xls", "path":"temp" In… --- ## [Optimize bulk insertion](https://discuss.elastic.co/t/optimize-bulk-insertion/9646)
**Author:** [@kayngee](https://discuss.elastic.co/u/kayngee)\ **Replies:** 10\ **Last updated:** [November 12, 2012, 8:21am UTC](https://discuss.elastic.co/t/optimize-bulk-insertion/9646 "2012-11-12T08:21:48Z")
Hi guys i'm trying to import my data source using the \_bulk api. I predefined mappers (has 5 dfferent type of analysers and using edgeNGram filters) turned of refresh\_interval set the max\_num\_segments to 5 and b… --- ## [Elasticsearch-reset-password on linux can't accept special characters](https://discuss.elastic.co/t/elasticsearch-reset-password-on-linux-cant-accept-special-characters/383050)
**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\ **Replies:** 20\ **Last updated:** [December 11, 2025, 4:50pm UTC](https://discuss.elastic.co/t/elasticsearch-reset-password-on-linux-cant-accept-special-characters/383050 "2025-12-11T16:50:32Z")
When using the elasticsearch password reset tool (elasticsearch-reset-password) in Linux, using a special character will pick up the shell interpretation and not the character itself. In particular, I’m having issues usi… --- ## [Memory utilization - predicting 'out of heap space' errors](https://discuss.elastic.co/t/memory-utilization-predicting-out-of-heap-space-errors/5546)
**Author:** [@Yooz](https://discuss.elastic.co/u/Yooz)\ **Replies:** 12\ **Last updated:** [October 14, 2011, 6:17pm UTC](https://discuss.elastic.co/t/memory-utilization-predicting-out-of-heap-space-errors/5546 "2011-10-14T18:17:21Z")
Hello, We are running ES 0.17.7 on 4 16GB boxes. 14GB of memory is locked (dedicated) for ES. There are several indices, the largest ones range from 50GB to 200GB of data @ 50 - 125 million documents. Currently… --- ## [Case insensitive regex query with character range](https://discuss.elastic.co/t/case-insensitive-regex-query-with-character-range/376136)
**Author:** [@petrsimon](https://discuss.elastic.co/u/petrsimon)\ **Replies:** 10\ **Last updated:** [March 21, 2025, 3:07pm UTC](https://discuss.elastic.co/t/case-insensitive-regex-query-with-character-range/376136 "2025-03-21T15:07:26Z")
Hi, I'm implementing regex search on ES 8.16 (using java client) against fields of type keyword and I came across strange issue when sending the case\_insensitive: true option. "\[abc\]+" -\> "abc", "ABC" "\[ABC\]+" -\> "ab… --- ## [Expose error.type and error.message](https://discuss.elastic.co/t/expose-error-type-and-error-message/189565)
**Author:** [@suikast42](https://discuss.elastic.co/u/suikast42)\ **Replies:** 10\ **Last updated:** [July 11, 2019, 5:10am UTC](https://discuss.elastic.co/t/expose-error-type-and-error-message/189565 "2019-07-11T05:10:29Z")
The apm captureException writes the hole stack to error.exception in json format. But error.message ( from ecs ) is not filled. It can be very helpful to have exception.type and exception.message for dashboarding issue… --- ## [Issues when running curator 8.0.17](https://discuss.elastic.co/t/issues-when-running-curator-8-0-17/372996)
**Author:** [@padmavathi](https://discuss.elastic.co/u/padmavathi)\ **Replies:** 17\ **Last updated:** [February 7, 2025, 1:53pm UTC](https://discuss.elastic.co/t/issues-when-running-curator-8-0-17/372996 "2025-02-07T13:53:23Z")
I have recently upgraded curator v8.0.17 from curator v.5.8.3. curator is not running. PFB: root@logsdev:~/curator# ./run.sh Traceback (most recent call last): File "/usr/local/bin/curator", line 8, in sys.exit(cl… --- ## [Restore Snapshot while writing to indexes/data streams?](https://discuss.elastic.co/t/restore-snapshot-while-writing-to-indexes-data-streams/371407)
**Author:** [@Dave\_Houser](https://discuss.elastic.co/u/Dave_Houser)\ **Replies:** 12\ **Last updated:** [December 16, 2024, 8:51pm UTC](https://discuss.elastic.co/t/restore-snapshot-while-writing-to-indexes-data-streams/371407 "2024-12-16T20:51:50Z")
I need to put together a DR plan for our elastic system. I have already tested the snapshot restore process, and it works. However, my process is the following: Adjust cluster settings to allow action.destructive\_requi… --- ## [Elastisearch don't start with marvel plugin](https://discuss.elastic.co/t/elastisearch-dont-start-with-marvel-plugin/15920)
**Author:** [@Xwilly\_Azel](https://discuss.elastic.co/u/Xwilly_Azel)\ **Replies:** 12\ **Last updated:** [February 20, 2014, 1:25pm UTC](https://discuss.elastic.co/t/elastisearch-dont-start-with-marvel-plugin/15920 "2014-02-20T13:25:13Z")
Hi, I have installed the last version of elasticsearch on redhat5 with the official rmp everything look fine (clean install). After installation of the plugin marvel, my elasticsearch instance don't start : \[2014-02… --- ## [Apm Logging Configure Problem](https://discuss.elastic.co/t/apm-logging-configure-problem/182175)
**Author:** [@brandonbai](https://discuss.elastic.co/u/brandonbai)\ **Replies:** 9\ **Last updated:** [May 23, 2019, 2:52am UTC](https://discuss.elastic.co/t/apm-logging-configure-problem/182175 "2019-05-23T02:52:16Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: APM Agent language a… --- ## [Issue with conditional in output definition](https://discuss.elastic.co/t/issue-with-conditional-in-output-definition/166612)
**Author:** [@wanexa](https://discuss.elastic.co/u/wanexa)\ **Replies:** 9\ **Last updated:** [January 31, 2019, 6:37pm UTC](https://discuss.elastic.co/t/issue-with-conditional-in-output-definition/166612 "2019-01-31T18:37:29Z")
trying to put two conditions on my output for grok or geopip failure I tried : if ("\_grokparsefailure" not in \[tags\] or "\_geoip\_lookup\_failure" not in \[tags\]) if "\_grokparsefailure" not in \[tags\] or "\_geoip\_lookup\_fai… --- ## [When server A is turned off, then servers B and C are not available. This is normal?](https://discuss.elastic.co/t/when-server-a-is-turned-off-then-servers-b-and-c-are-not-available-this-is-normal/131709)
**Author:** [@clgs](https://discuss.elastic.co/u/clgs)\ **Replies:** 11\ **Last updated:** [May 14, 2018, 4:37pm UTC](https://discuss.elastic.co/t/when-server-a-is-turned-off-then-servers-b-and-c-are-not-available-this-is-normal/131709 "2018-05-14T16:37:45Z")
Hi. We have three servers (A, B and C). Server A must be made a master. Servers B and C with slaves. Server A: node.master: true node.data: true node.ingest: false discovery.zen.ping.unicast.hosts: \["A", "B", "C"… --- ## [Cannot run curator from cron in docker container as the elasticsearch user](https://discuss.elastic.co/t/cannot-run-curator-from-cron-in-docker-container-as-the-elasticsearch-user/352039)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 10\ **Last updated:** [February 2, 2024, 4:08pm UTC](https://discuss.elastic.co/t/cannot-run-curator-from-cron-in-docker-container-as-the-elasticsearch-user/352039 "2024-02-02T16:08:46Z")
In my 8.8.2 Elasticsearch container, I have this cron job in the cron table: \* 1 \* \* \* su elasticsearch /bin/bash -c "export ES\_CURATOR\_USERNAME=curator ES\_CURATOR\_PASSWORD=xxxxx; /usr/local/bin/curator --config /config… --- ## [Feedback request: Configuration of ES on a single host](https://discuss.elastic.co/t/feedback-request-configuration-of-es-on-a-single-host/9002)
**Author:** [@Sebastien\_Lavoie1](https://discuss.elastic.co/u/Sebastien_Lavoie1)\ **Replies:** 10\ **Last updated:** [September 14, 2012, 4:05am UTC](https://discuss.elastic.co/t/feedback-request-configuration-of-es-on-a-single-host/9002 "2012-09-14T04:05:16Z")
Hello everyone, I wrote a blog post about configuring ElasticSearch on a single shared host by deactivating replication and limiting memory usage and I would very much appreciate your feedback because I had a very ha… --- ## [Logstash "block in start\_workers" on shutdown](https://discuss.elastic.co/t/logstash-block-in-start-workers-on-shutdown/370015)
**Author:** [@nilsen](https://discuss.elastic.co/u/nilsen)\ **Replies:** 15\ **Last updated:** [November 5, 2024, 3:55pm UTC](https://discuss.elastic.co/t/logstash-block-in-start-workers-on-shutdown/370015 "2024-11-05T15:55:05Z")
~All of our Logstash instances gets tons of warnings on shutdown. Warning seems to tell us that something is blocked: "block in start\_workers" Our Logstash applications run with pipeline.yml: pipeline.yml example- pip… --- ## [Why should we not use Metricbeat with scope: node for clusters with dedicated master nodes](https://discuss.elastic.co/t/why-should-we-not-use-metricbeat-with-scope-node-for-clusters-with-dedicated-master-nodes/346715)
**Author:** [@bunste](https://discuss.elastic.co/u/bunste)\ **Replies:** 9\ **Last updated:** [November 9, 2023, 1:35pm UTC](https://discuss.elastic.co/t/why-should-we-not-use-metricbeat-with-scope-node-for-clusters-with-dedicated-master-nodes/346715 "2023-11-09T13:35:36Z")
I am currently reading the documentation on collecting Elasticsearch monitoring data with Metricbeat. I had already posted something about this here in the forum, which led to this issue. The documentation has improved s… --- ## [Paginate elastic results on specific field](https://discuss.elastic.co/t/paginate-elastic-results-on-specific-field/133724)
**Author:** [@daganm](https://discuss.elastic.co/u/daganm)\ **Replies:** 10\ **Last updated:** [May 31, 2018, 2:05pm UTC](https://discuss.elastic.co/t/paginate-elastic-results-on-specific-field/133724 "2018-05-31T14:05:18Z")
Hello ! I have data like this in my elasticsearch : { doc\_name : 'Name 1', member\_id: 'id1' } { doc\_name : 'Name 2', member\_id: 'id1' }, { doc\_name : 'Name 3', member\_id: 'id2' } I have my own … --- ## [Bulk Uploading](https://discuss.elastic.co/t/bulk-uploading/6521)
**Author:** [@prashant5375](https://discuss.elastic.co/u/prashant5375)\ **Replies:** 10\ **Last updated:** [January 28, 2012, 12:01pm UTC](https://discuss.elastic.co/t/bulk-uploading/6521 "2012-01-28T12:01:08Z")
Hi , there I have just started using Elastic Search , my problem is i have to insert 50 million of data rows in the Elastic Search . While doing this i have used such code in the loop. public static void main(String\[… --- ## [Logstash cannot upload to https Elasticsearch](https://discuss.elastic.co/t/logstash-cannot-upload-to-https-elasticsearch/351601)
**Author:** [@cisupport-zkb](https://discuss.elastic.co/u/cisupport-zkb)\ **Replies:** 13\ **Last updated:** [January 24, 2024, 7:13am UTC](https://discuss.elastic.co/t/logstash-cannot-upload-to-https-elasticsearch/351601 "2024-01-24T07:13:11Z")
Hi everyone, I'm having troubles on uploading data from a csv file to https Elasticsearch, using Logstash. This is the logstash.conf configured: input { file { path =\> "${pwd}/some-metrics.csv" fil… --- ## [Workplace Search Reference Custom Index](https://discuss.elastic.co/t/workplace-search-reference-custom-index/351191)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 13\ **Last updated:** [January 18, 2024, 8:52pm UTC](https://discuss.elastic.co/t/workplace-search-reference-custom-index/351191 "2024-01-18T20:52:07Z")
Hi All, I was wondering if anyone knows if there is a way to get a custom index as an Organizational Source within Workplace Search? Background, I have an Enterprise Search web crawler setup to index a website into an … --- ## [Calculate Percentage of utilization](https://discuss.elastic.co/t/calculate-percentage-of-utilization/283689)
**Author:** [@mericaforrestgumpsun](https://discuss.elastic.co/u/mericaforrestgumpsun)\ **Replies:** 9\ **Last updated:** [September 20, 2021, 6:25pm UTC](https://discuss.elastic.co/t/calculate-percentage-of-utilization/283689 "2021-09-20T18:25:28Z")
Hello, I am wanting to make a Kibana visualization that will give me the percentage of time that a task is running. I have a field called totalExecuationTimeInSeconds, that I would like to divide into the amount of time… --- ## [Is there an API to get the read and write performance data?](https://discuss.elastic.co/t/is-there-an-api-to-get-the-read-and-write-performance-data/267642)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 9\ **Last updated:** [March 24, 2021, 8:43am UTC](https://discuss.elastic.co/t/is-there-an-api-to-get-the-read-and-write-performance-data/267642 "2021-03-24T08:43:45Z")
ES version: 6.3.0 My ES cluster block sometimes when perform search and bulk operations, but the cluster status is green, it is strange. The cat.thread\_pool api can output some related info, but i do not know how to de… --- ## [Master up but cluster down](https://discuss.elastic.co/t/master-up-but-cluster-down/244078)
**Author:** [@Musfiqur\_Siddique](https://discuss.elastic.co/u/Musfiqur_Siddique)\ **Replies:** 9\ **Last updated:** [August 7, 2020, 2:15am UTC](https://discuss.elastic.co/t/master-up-but-cluster-down/244078 "2020-08-07T02:15:57Z")
Is it possible that master node is up but ES cluster is down? --- ## [Marvel license file/order number baked into a container](https://discuss.elastic.co/t/marvel-license-file-order-number-baked-into-a-container/20130)
**Author:** [@Daniel\_Schonfeld](https://discuss.elastic.co/u/Daniel_Schonfeld)\ **Replies:** 9\ **Last updated:** [May 2, 2015, 1:40pm UTC](https://discuss.elastic.co/t/marvel-license-file-order-number-baked-into-a-container/20130 "2015-05-02T13:40:57Z")
Hello, We have recently purchase our Marvel license, but everytime we restart our cluster it asks us for the order number again. We use docker and so our containers are immutable. Is there a file or somethin… --- ## [EC2 Configuration](https://discuss.elastic.co/t/ec2-configuration/4446)
**Author:** [@James\_Cook](https://discuss.elastic.co/u/James_Cook)\ **Replies:** 11\ **Last updated:** [May 26, 2011, 9:03am UTC](https://discuss.elastic.co/t/ec2-configuration/4446 "2011-05-26T09:03:14Z")
Can someone share a working EC2 configuration? I haven't been able to get discovery to work, although the S3 gateway seems to be working. Thanks, jim --- ## [Do not know how to call it but probably it is a new (and cool!) feature request?](https://discuss.elastic.co/t/do-not-know-how-to-call-it-but-probably-it-is-a-new-and-cool-feature-request/6098)
**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\ **Replies:** 11\ **Last updated:** [December 9, 2011, 11:59am UTC](https://discuss.elastic.co/t/do-not-know-how-to-call-it-but-probably-it-is-a-new-and-cool-feature-request/6098 "2011-12-09T11:59:34Z")
Hi, I am wondering if elasticsearch can support me in the following scenario out of the box and if not then whether a new feature can be implemented to support it. In my case I have various document types (mails,… --- ## [Problems manually copying a set of indices from a 3-node cluster to a 1-node cluster](https://discuss.elastic.co/t/problems-manually-copying-a-set-of-indices-from-a-3-node-cluster-to-a-1-node-cluster/4628)
**Author:** [@Alex\_At\_Ikanow](https://discuss.elastic.co/u/Alex_At_Ikanow)\ **Replies:** 10\ **Last updated:** [June 15, 2011, 4:12pm UTC](https://discuss.elastic.co/t/problems-manually-copying-a-set-of-indices-from-a-3-node-cluster-to-a-1-node-cluster/4628 "2011-06-15T16:12:44Z")
Previous posts have suggested that it's possible to backup/migrate/ restore indexes from one cluster to another via manual copy. I tested this yesterday and ran into some problems. Setup: My test/reference cluster… --- ## [How to listen events from logstash without beats](https://discuss.elastic.co/t/how-to-listen-events-from-logstash-without-beats/233438)
**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\ **Replies:** 9\ **Last updated:** [June 3, 2020, 3:33am UTC](https://discuss.elastic.co/t/how-to-listen-events-from-logstash-without-beats/233438 "2020-06-03T03:33:31Z")
I am receiving input from postgres using jdbc plugin. I wonder if there is a real-time change in postgres data, can't it be reflected with the jdbc input plugin? Is another plugin necessary? For example beats. --- ## [OT: Formal description documentation](https://discuss.elastic.co/t/ot-formal-description-documentation/4452)
**Author:** [@plaflamme](https://discuss.elastic.co/u/plaflamme)\ **Replies:** 9\ **Last updated:** [May 23, 2011, 2:44am UTC](https://discuss.elastic.co/t/ot-formal-description-documentation/4452 "2011-05-23T02:44:30Z")
Hi, I've forked the es.org site to start the formal description of the Query DSL mentioned here\[1\]. I'm trying to make blocks similar to the normal code blocks but with the ability to have links inside. The norma… --- ## [Alerting kibana](https://discuss.elastic.co/t/alerting-kibana/277800)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 13\ **Last updated:** [July 6, 2021, 3:47am UTC](https://discuss.elastic.co/t/alerting-kibana/277800 "2021-07-06T03:47:04Z")
how to make alerting kibana? and then where do i find xpack.encryptedSavedObjects.encryptionKey ? --- ## [Problem on kibana](https://discuss.elastic.co/t/problem-on-kibana/260905)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 12\ **Last updated:** [January 12, 2021, 9:46pm UTC](https://discuss.elastic.co/t/problem-on-kibana/260905 "2021-01-12T21:46:59Z")
Kibana is having trouble loading. I have the following capture: Do I have to delete any indexes? Are there other solutions? --- ## [How to enhance results on timelion](https://discuss.elastic.co/t/how-to-enhance-results-on-timelion/134076)
**Author:** [@sahotay](https://discuss.elastic.co/u/sahotay)\ **Replies:** 10\ **Last updated:** [June 11, 2018, 8:01pm UTC](https://discuss.elastic.co/t/how-to-enhance-results-on-timelion/134076 "2018-06-11T20:01:54Z")
Hello There! I'm using es query in Timelion to showcase vulnerability report. In my case, we have vulnerabilities in the following manner Medium \> High \> Critical But I want to enlarge Critical so that everyone will f… --- ## [Aggregation Filter 2 logs same index](https://discuss.elastic.co/t/aggregation-filter-2-logs-same-index/243624)
**Author:** [@rcavezzale](https://discuss.elastic.co/u/rcavezzale)\ **Replies:** 11\ **Last updated:** [August 4, 2020, 1:38am UTC](https://discuss.elastic.co/t/aggregation-filter-2-logs-same-index/243624 "2020-08-04T01:38:18Z")
Dear Comminuty I need your help to fix my issue. i have 2 logs in same index that should be aggregate to view all information on the Data Table visualize input { udp { port =\> 1514 type =\> "alcatel" } } filter { if \[… --- ## [Grok pattern does not work in logstash however it works in kibana](https://discuss.elastic.co/t/grok-pattern-does-not-work-in-logstash-however-it-works-in-kibana/200148)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 11\ **Last updated:** [September 23, 2019, 7:12pm UTC](https://discuss.elastic.co/t/grok-pattern-does-not-work-in-logstash-however-it-works-in-kibana/200148 "2019-09-23T19:12:56Z")
Hello, I have a long used grok pattern match that stopped working since upgraded to ELK 7.3.0. grok { match =\> { "message" =\> \["%{MONTH:month} %{MONTHDAY:day}, %{YEAR:year} %{TIME:time} %{WORD:day\_period} %{NOTSPACE… --- ## [Considering the last selection log](https://discuss.elastic.co/t/considering-the-last-selection-log/175096)
**Author:** [@satyajeet\_dutt](https://discuss.elastic.co/u/satyajeet_dutt)\ **Replies:** 11\ **Last updated:** [April 25, 2019, 10:31am UTC](https://discuss.elastic.co/t/considering-the-last-selection-log/175096 "2019-04-25T10:31:55Z")
hi there, I am stuck with a specific issue related to clickstream log. It's based on the selection made by the user.If a user selects something then the request gets added up in the request parameter. I am posting a sam… --- ## [Multiple conf files handling issue in logstash](https://discuss.elastic.co/t/multiple-conf-files-handling-issue-in-logstash/131278)
**Author:** [@Dazith\_Kj](https://discuss.elastic.co/u/Dazith_Kj)\ **Replies:** 11\ **Last updated:** [May 17, 2018, 7:16pm UTC](https://discuss.elastic.co/t/multiple-conf-files-handling-issue-in-logstash/131278 "2018-05-17T19:16:24Z")
Hi All, I have the below setup on my logstash config. File name : custom.conf input { beats { port =\> "5044" ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/logstash-forwarder.crt" … [Previous page](https://discuss.elastic.co/top.md?page=231&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=233&per_page=50&period=all)