# Top **URL:** https://discuss.elastic.co/top.md?page=325&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 326 --- ## [Convert seconds (float number) into a more legible datatype](https://discuss.elastic.co/t/convert-seconds-float-number-into-a-more-legible-datatype/27257)
**Author:** [@pjvv1](https://discuss.elastic.co/u/pjvv1)\ **Replies:** 8\ **Last updated:** [August 18, 2015, 7:36am UTC](https://discuss.elastic.co/t/convert-seconds-float-number-into-a-more-legible-datatype/27257 "2015-08-18T07:36:10Z")
Dear friends, We have an ELK to get information about the use of one of our software applications. We have a field for session duration which represent the duration (time) of a session in seconds. That is not very hu… --- ## [Determining why records are missing after Logstash indexing](https://discuss.elastic.co/t/determining-why-records-are-missing-after-logstash-indexing/31848)
**Author:** [@marinoc](https://discuss.elastic.co/u/marinoc)\ **Replies:** 8\ **Last updated:** [October 13, 2015, 7:09pm UTC](https://discuss.elastic.co/t/determining-why-records-are-missing-after-logstash-indexing/31848 "2015-10-13T19:09:26Z")
Hi - I'm attempting to index a single w 19,690 lines, each line will be it's own record in ES. The lines are pretty small, only 4-5 fields per line. After I run logstash using the following command: sudo bin/logstash… --- ## [Configuring a cluster for a large number of indexes](https://discuss.elastic.co/t/configuring-a-cluster-for-a-large-number-of-indexes/115731)
**Author:** [@Aharon\_Levine](https://discuss.elastic.co/u/Aharon_Levine)\ **Replies:** 8\ **Last updated:** [January 18, 2018, 4:32pm UTC](https://discuss.elastic.co/t/configuring-a-cluster-for-a-large-number-of-indexes/115731 "2018-01-18T16:32:15Z")
We're running an ES cluster which keeps daily indexes per customer for a 1 year period. Seeing that we have around 100 customers and replica shards enabled this puts us in the ballpark of 50k shards. The behavior we're … --- ## [Approach: Common Information Model for Elastic Stack](https://discuss.elastic.co/t/approach-common-information-model-for-elastic-stack/138988)
**Author:** [@dss](https://discuss.elastic.co/u/dss)\ **Replies:** 3\ **Last updated:** [July 7, 2018, 11:54pm UTC](https://discuss.elastic.co/t/approach-common-information-model-for-elastic-stack/138988 "2018-07-07T23:54:28Z")
Greetings, I have an environment where I'm collecting a number of disparate logs from the network and hosts and indexing them in Elasticsearch. Logs are being delivered mostly over syslog from network devices, Linux and… --- ## [Guidance on ASP.NET core, Serilog and how to correctly log to an Elastic stack](https://discuss.elastic.co/t/guidance-on-asp-net-core-serilog-and-how-to-correctly-log-to-an-elastic-stack/281673)
**Author:** [@agKaspar](https://discuss.elastic.co/u/agKaspar)\ **Replies:** 3\ **Last updated:** [March 3, 2022, 12:41am UTC](https://discuss.elastic.co/t/guidance-on-asp-net-core-serilog-and-how-to-correctly-log-to-an-elastic-stack/281673 "2022-03-03T00:41:00Z")
We have a microservice architecture running in a kubernetes cluster, and are using the Elastic stack (deployed using EKS providers) for monitoring everything. One of the last aspects I'm struggling with, is how to correc… --- ## [Elasticsearch Healthcheck failure w/ Spring Boot](https://discuss.elastic.co/t/elasticsearch-healthcheck-failure-w-spring-boot/212212)
**Author:** [@apizano](https://discuss.elastic.co/u/apizano)\ **Replies:** 2\ **Last updated:** [December 18, 2019, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-healthcheck-failure-w-spring-boot/212212 "2019-12-18T14:27:22Z")
I posted on an issue on the spring boot GitHub, and was referred here. I will try to make this is simple as possible so I can get some help. Its actually quite simple. TL;DR Used Spring Boot actuator to create custom… --- ## [Invalid NEST response built from a unsuccessful low level call on PUT](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put/118930)
**Author:** [@francisminu](https://discuss.elastic.co/u/francisminu)\ **Replies:** 4\ **Last updated:** [February 9, 2018, 12:53am UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put/118930 "2018-02-09T00:53:37Z")
Hi, I am very new to ElasticSearch and started reading about it only a day back. The main reason as to why we chose this was to Schedule an event whenever the data chosen by the query changes. To do this, I was trying… --- ## [Difference between matchquery and matchphrase query](https://discuss.elastic.co/t/difference-between-matchquery-and-matchphrase-query/220873)
**Author:** [@arvind73156](https://discuss.elastic.co/u/arvind73156)\ **Replies:** 2\ **Last updated:** [February 26, 2020, 7:34am UTC](https://discuss.elastic.co/t/difference-between-matchquery-and-matchphrase-query/220873 "2020-02-26T07:34:11Z")
I need to know the difference between matchquery and match phrase query if i use them to search for text "92%". Would i able to get exact match for this text using match query or match phrase query. --- ## [How to remove indexes from Kibana UI](https://discuss.elastic.co/t/how-to-remove-indexes-from-kibana-ui/87621)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 3\ **Last updated:** [June 3, 2017, 3:29pm UTC](https://discuss.elastic.co/t/how-to-remove-indexes-from-kibana-ui/87621 "2017-06-03T15:29:35Z")
How can I remove unwanted Index Patterns from kibana UI ? I don't need the packetBeat and winLogBeats anymore. --- ## [Unable to verify the first certificate - kibana/elasticsearch](https://discuss.elastic.co/t/unable-to-verify-the-first-certificate-kibana-elasticsearch/289294)
**Author:** [@slashlinux](https://discuss.elastic.co/u/slashlinux)\ **Replies:** 2\ **Last updated:** [November 16, 2021, 3:49pm UTC](https://discuss.elastic.co/t/unable-to-verify-the-first-certificate-kibana-elasticsearch/289294 "2021-11-16T15:49:30Z")
Hi teams, I'm trying to configure xpack for Elasticsearch/kibana, I've activated the trial license for Elasticsearch, configured xpack for kibana/Elasticsearch and also I've generated ca.crt, node1-elk.crt, node1-elk.ke… --- ## [Not able to redirect to login in the below code always coming {"statusCode":404,"error":"Not Found","message":"Not Found"}](https://discuss.elastic.co/t/not-able-to-redirect-to-login-in-the-below-code-always-coming-statuscode-404-error-not-found-message-not-found/121712)
**Author:** [@Sunny\_Sachan](https://discuss.elastic.co/u/Sunny_Sachan)\ **Replies:** 5\ **Last updated:** [March 2, 2018, 4:20pm UTC](https://discuss.elastic.co/t/not-able-to-redirect-to-login-in-the-below-code-always-coming-statuscode-404-error-not-found-message-not-found/121712 "2018-03-02T16:20:56Z")
Hi all below mentioned is my code in the example.js I am using template-kibana-plugin version 7.0.1 and kibana version 6.2.1 also in below code i have installed dependency hapi-auth-cookie version 3.1.0, now each time I … --- ## [Supported field types?](https://discuss.elastic.co/t/supported-field-types/62839)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 4\ **Last updated:** [October 12, 2016, 5:54pm UTC](https://discuss.elastic.co/t/supported-field-types/62839 "2016-10-12T17:54:59Z")
Topic says it...specifically looking at mutate -\> convert: Convert a field’s value to a different type, like turning a string to an integer. I'm suspecting that my config with converting to type "ip" is no longer supp… --- ## [Logstash - CSV to JSON](https://discuss.elastic.co/t/logstash-csv-to-json/31826)
**Author:** [@schilwan](https://discuss.elastic.co/u/schilwan)\ **Replies:** 7\ **Last updated:** [October 9, 2015, 11:27am UTC](https://discuss.elastic.co/t/logstash-csv-to-json/31826 "2015-10-09T11:27:44Z")
Hopefully this is the right place, I am currently fairly new to the ELK stack so not sure if what I am trying to do in logstash is feasible. I am consuming a CSV file and want to convert it into a JSON format as followe… --- ## [Disable automatic index creation in elasticsearch](https://discuss.elastic.co/t/disable-automatic-index-creation-in-elasticsearch/260276)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 2\ **Last updated:** [January 7, 2021, 4:42am UTC](https://discuss.elastic.co/t/disable-automatic-index-creation-in-elasticsearch/260276 "2021-01-07T04:42:09Z")
Hi, I have a setup of ELK 7.10v . I want to know is there a way to configure elasticsearch not to automatically create indexes. I tried adding this to my "elasticsearch.yml" action.auto\_create\_index: 0 also tried … --- ## [Why is my query slow?](https://discuss.elastic.co/t/why-is-my-query-slow/52752)
**Author:** [@TroyAndAbed](https://discuss.elastic.co/u/TroyAndAbed)\ **Replies:** 8\ **Last updated:** [June 21, 2016, 4:43am UTC](https://discuss.elastic.co/t/why-is-my-query-slow/52752 "2016-06-21T04:43:14Z")
Hi, The following query is taking around 2s to complete. It seems very slow knowing that I will need to search for far more documents. The query: POST /mail\_logs/\_search { "fields": \[ "MAIL\_ID", … --- ## [Elasticsearch index not visible](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548)
**Author:** [@rrs](https://discuss.elastic.co/u/rrs)\ **Replies:** 6\ **Last updated:** [January 8, 2018, 4:52pm UTC](https://discuss.elastic.co/t/elasticsearch-index-not-visible/114548 "2018-01-08T16:52:37Z")
Hi All, I setup ELK stack 5.6.3. The issue is that Elastic nodes in my cluster are creating indexes with defined name, but when we query /\_cat/indices, created indexes are not showing and Kibana dashboard as well. Can y… --- ## [Question Mark search in Elasticsearch](https://discuss.elastic.co/t/question-mark-search-in-elasticsearch/7175)
**Author:** [@vijuitech](https://discuss.elastic.co/u/vijuitech)\ **Replies:** 4\ **Last updated:** [March 30, 2012, 12:40pm UTC](https://discuss.elastic.co/t/question-mark-search-in-elasticsearch/7175 "2012-03-30T12:40:53Z")
Hi, I have a following set of text in the Index, Eg: " abc def ???????????? ghi klm ?????" While I was searching the ???????(question mark" it is not gets searched. Is there any method in el… --- ## [How to group by multiple fields in kibana](https://discuss.elastic.co/t/how-to-group-by-multiple-fields-in-kibana/279003)
**Author:** [@advaitha001](https://discuss.elastic.co/u/advaitha001)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 1:16pm UTC](https://discuss.elastic.co/t/how-to-group-by-multiple-fields-in-kibana/279003 "2021-07-19T13:16:15Z")
Hello, We are new to Kibana, trying to achieve sum(max(column) group by field1(date),field2(string). We tried doing sum bucket, but we were able to only pick one of the fields. Please help us if there is any way to do… --- ## [Security Exception against elastic user](https://discuss.elastic.co/t/security-exception-against-elastic-user/114252)
**Author:** [@4b3l](https://discuss.elastic.co/u/4b3l)\ **Replies:** 7\ **Last updated:** [January 16, 2018, 7:49pm UTC](https://discuss.elastic.co/t/security-exception-against-elastic-user/114252 "2018-01-16T19:49:18Z")
I have an 3 node ES Cluster (version 5.6.3). I have deleted the data from each Node and tried to bring up the cluster (as I am still experimenting with the cluster, the data is not important). I get the below error: \[… --- ## [How to resolve "Failed to poll for work. Work has timed out" error](https://discuss.elastic.co/t/how-to-resolve-failed-to-poll-for-work-work-has-timed-out-error/291538)
**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\ **Replies:** 3\ **Last updated:** [December 21, 2021, 12:02pm UTC](https://discuss.elastic.co/t/how-to-resolve-failed-to-poll-for-work-work-has-timed-out-error/291538 "2021-12-21T12:02:27Z")
Hello, dear elastic community, We recently upgraded our ELK stack to 7.15.2 from 7.7.0. All my nodes are on the same version (7.15.2) After the upgrade, our Kibana's status goes yellow repeatedly. When it goes yellow … --- ## [Kibana - TypeError: Failed to fetch](https://discuss.elastic.co/t/kibana-typeerror-failed-to-fetch/246960)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 5\ **Last updated:** [September 3, 2020, 5:07pm UTC](https://discuss.elastic.co/t/kibana-typeerror-failed-to-fetch/246960 "2020-09-03T17:07:43Z")
Hi, After upgrading to kibana 7.9, I begun getting an error that I cannot find referenced anywhere. I was wondering if anyone has come across this? TypeError: Failed to fetch at Fetch.\_callee3$ (https://10.23.45.78… --- ## [Update mapping of not\_analyzed field](https://discuss.elastic.co/t/update-mapping-of-not-analyzed-field/59173)
**Author:** [@butsjoh](https://discuss.elastic.co/u/butsjoh)\ **Replies:** 3\ **Last updated:** [August 30, 2016, 10:08am UTC](https://discuss.elastic.co/t/update-mapping-of-not-analyzed-field/59173 "2016-08-30T10:08:53Z")
I would like to have some clarity on why it is not possible to update a not\_analyzed field to a multi field. The documentation is not exactly clear on that (https://www.elastic.co/guide/en/elasticsearch/reference/current… --- ## [How to insert Data to Elasticsearch using Logstash?](https://discuss.elastic.co/t/how-to-insert-data-to-elasticsearch-using-logstash/89130)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 5\ **Last updated:** [June 14, 2017, 5:46pm UTC](https://discuss.elastic.co/t/how-to-insert-data-to-elasticsearch-using-logstash/89130 "2017-06-14T17:46:05Z")
Hi, I am trying to insert data to Elasticsearch using Logstash. I created an index 'twitter' and my config file is as follows, input{ file{ path=\>"C:/Users/Sample.log" codec=\>json } } output{ stdout{ codec=\>ru… --- ## [Handling exception: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 71](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-71/238604)
**Author:** [@Magesh](https://discuss.elastic.co/u/Magesh)\ **Replies:** 2\ **Last updated:** [June 26, 2020, 7:08am UTC](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-71/238604 "2020-06-26T07:08:27Z")
Hi, I'm Using Filebeat 8.0/Logstash8.0/Elasticsearch8.0 version in windows 10 environment and i'm trying to send the logs from filebeat--\>logstash--\>elasticsearch. post start of filebeat / logstash/elasticsearch, i'm g… --- ## [How to fix guava version conflicts with Hadoop YARN classpath?](https://discuss.elastic.co/t/how-to-fix-guava-version-conflicts-with-hadoop-yarn-classpath/45384)
**Author:** [@royce-pandora](https://discuss.elastic.co/u/royce-pandora)\ **Replies:** 8\ **Last updated:** [September 3, 2016, 5:43am UTC](https://discuss.elastic.co/t/how-to-fix-guava-version-conflicts-with-hadoop-yarn-classpath/45384 "2016-09-03T05:43:36Z")
Hi, I've spent several hours trying to fix a problem with Elastic Search v2.2 Java lib and Cloudera Hadoop Cluster v5.5.1. The problem: Guava-18.0.jar is not being recognized by elastic search v2.2 when used by a … --- ## [Excluding Duplicate Values in Kibana Filter](https://discuss.elastic.co/t/excluding-duplicate-values-in-kibana-filter/195108)
**Author:** [@misiakj](https://discuss.elastic.co/u/misiakj)\ **Replies:** 2\ **Last updated:** [August 14, 2019, 4:58pm UTC](https://discuss.elastic.co/t/excluding-duplicate-values-in-kibana-filter/195108 "2019-08-14T16:58:09Z")
I have an index that looks similar to the below (it really has a number of additional fields that aren't relevant for this post) case\_id: int group: string unique\_id: case\_id + group value: int for any one case\_id v… --- ## [Histogram (bars) with counts as bins](https://discuss.elastic.co/t/histogram-bars-with-counts-as-bins/149405)
**Author:** [@EnzoL](https://discuss.elastic.co/u/EnzoL)\ **Replies:** 8\ **Last updated:** [September 25, 2018, 4:33pm UTC](https://discuss.elastic.co/t/histogram-bars-with-counts-as-bins/149405 "2018-09-25T16:33:41Z")
Hi, we are logging meetings and their participants; let's say, we log pairs (A,B) where A is the meeting ID and B is the participant ID. Abstractly, this gives us a mapping c: Meeting -\> Number of participants, A -\> #{B… --- ## [Set geo location from coodinates](https://discuss.elastic.co/t/set-geo-location-from-coodinates/2762)
**Author:** [@roygolan1981](https://discuss.elastic.co/u/roygolan1981)\ **Replies:** 5\ **Last updated:** [November 6, 2015, 1:33pm UTC](https://discuss.elastic.co/t/set-geo-location-from-coodinates/2762 "2015-11-06T13:33:35Z")
Hi i have latitude+latitude on logstash and i want to set geo point i tried add\_field =\>{ "geoip.location" =\> 13.55 } add\_field =\> { "geoip.location" =\> 5.69 } and many more permutation of assigning the geoip.locati… --- ## [Heartbeat HTTP "use of closed network connection"](https://discuss.elastic.co/t/heartbeat-http-use-of-closed-network-connection/147876)
**Author:** [@Simon\_Hardman](https://discuss.elastic.co/u/Simon_Hardman)\ **Replies:** 6\ **Last updated:** [October 26, 2018, 5:01pm UTC](https://discuss.elastic.co/t/heartbeat-http-use-of-closed-network-connection/147876 "2018-10-26T17:01:31Z")
When using a HTTP Heartbeat (6.4.0 on Centos 7.5) I'm finding it works fine if I only check the response status, but if I include a check on the response body I always get an error about "use of closed network connection… --- ## [Convert Date to String using Painless](https://discuss.elastic.co/t/convert-date-to-string-using-painless/125703)
**Author:** [@sahadevgd](https://discuss.elastic.co/u/sahadevgd)\ **Replies:** 2\ **Last updated:** [March 28, 2018, 10:11am UTC](https://discuss.elastic.co/t/convert-date-to-string-using-painless/125703 "2018-03-28T10:11:59Z")
HI Team, We are on ELK 6.2.3. We have a field "ETime" which is in UTC format (2018-03-27 06:38:08.496Z). We would like to convert this time to HH:mm:ss and convert that to string using Painless language to use it in so… --- ## [Cause and how to avoid "Data too large \" exception](https://discuss.elastic.co/t/cause-and-how-to-avoid-data-too-large-http-request-exception/156279)
**Author:** [@klimapet](https://discuss.elastic.co/u/klimapet)\ **Replies:** 4\ **Last updated:** [November 13, 2018, 10:31am UTC](https://discuss.elastic.co/t/cause-and-how-to-avoid-data-too-large-http-request-exception/156279 "2018-11-13T10:31:41Z")
Hi, I've run into troubles with following exception org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[\\] would be \[32136353583/29.9gb\], which is larger than … --- ## [🎉 Elastic Stack 7.13 released](https://discuss.elastic.co/t/elastic-stack-7-13-released/274899)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 4:23pm UTC](https://discuss.elastic.co/t/elastic-stack-7-13-released/274899 "2021-06-03T16:23:09Z")
New in Elastic 7.13 Search massive amounts of data cost-effectively with searchable snapshots and the new frozen tier. Plus, find and deploy Elastic directly from the Microsoft Azure console and natively integrate data f… --- ## [Filebeat to parse modsecurity json logs](https://discuss.elastic.co/t/filebeat-to-parse-modsecurity-json-logs/134662)
**Author:** [@angeL](https://discuss.elastic.co/u/angeL)\ **Replies:** 8\ **Last updated:** [June 21, 2018, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-to-parse-modsecurity-json-logs/134662 "2018-06-21T15:24:34Z")
Hi team, I'm using filebeat 6.2.4 to parse ModSecurity logs in Json format, so far so good using the following config: filebeat.prospectors: - type: log paths: - /var/log/httpd/modsec\_audit.log … --- ## [Pipelines YAML file is empty](https://discuss.elastic.co/t/pipelines-yaml-file-is-empty/128858)
**Author:** [@Nfekih](https://discuss.elastic.co/u/Nfekih)\ **Replies:** 2\ **Last updated:** [April 20, 2018, 11:25am UTC](https://discuss.elastic.co/t/pipelines-yaml-file-is-empty/128858 "2018-04-20T11:25:50Z")
Hi, I am trying to load a csv file to Elasticsearch using Logstash. I ran this command: bin/logstash --path.data file\_name.conf I get this error: ERROR: Pipelines YAML file is empty. Location: /home/nerifkh/Downl… --- ## [Frequent GC in elasticsearch](https://discuss.elastic.co/t/frequent-gc-in-elasticsearch/57681)
**Author:** [@dipathak](https://discuss.elastic.co/u/dipathak)\ **Replies:** 8\ **Last updated:** [August 23, 2016, 10:53am UTC](https://discuss.elastic.co/t/frequent-gc-in-elasticsearch/57681 "2016-08-23T10:53:48Z")
Hi, we are running a 4 node ES cluster. Sometimes there are frequent GC in elasticsearch nodes and it starts crash looping for some time. It seems it is crash looping because of OOM. It happens randomly and very less fre… --- ## [Painless scripted field with regex syntax](https://discuss.elastic.co/t/painless-scripted-field-with-regex-syntax/143572)
**Author:** [@SonJ](https://discuss.elastic.co/u/SonJ)\ **Replies:** 4\ **Last updated:** [August 9, 2018, 4:23pm UTC](https://discuss.elastic.co/t/painless-scripted-field-with-regex-syntax/143572 "2018-08-09T16:23:34Z")
Hi, Here is how my massage column (under available fields) looks like: \[2018-07-12 19:02:09.050\]\[\]\[\]\[\] TRANS | app | TRANS | \[ud.queue.name=UDReplyQueue\_\]\[req=HDRA2||MSN| NP\*\*||\]\[exec.time=435\]\[usw.time=435\]\[resp=HDRA2… --- ## [Removing field from mapping](https://discuss.elastic.co/t/removing-field-from-mapping/50928)
**Author:** [@Alex\_6](https://discuss.elastic.co/u/Alex_6)\ **Replies:** 3\ **Last updated:** [January 23, 2017, 2:13pm UTC](https://discuss.elastic.co/t/removing-field-from-mapping/50928 "2017-01-23T14:13:19Z")
We are using ES 1.5 and plan to upgrade to ES 2.x. We store server log files. In a particular type there is a dynamically-created field (field name extracted from the source logs) with dots in it. Since ES 2.0 cannot hav… --- ## [Best method - Importing 50x10gb CSV files into Elasticsearch on GCE](https://discuss.elastic.co/t/best-method-importing-50x10gb-csv-files-into-elasticsearch-on-gce/1758)
**Author:** [@Jordan\_Schwartz](https://discuss.elastic.co/u/Jordan_Schwartz)\ **Replies:** 5\ **Last updated:** [June 5, 2015, 8:43pm UTC](https://discuss.elastic.co/t/best-method-importing-50x10gb-csv-files-into-elasticsearch-on-gce/1758 "2015-06-05T20:43:29Z")
I am looking to use ES to index about 400 million records broken into 50 files with about 360 columns in each file. Once indexed, the data will remain static. I am just looking for the best approach to load up this data… --- ## [Creating aggregate "top 10 IPs" table with geoip data](https://discuss.elastic.co/t/creating-aggregate-top-10-ips-table-with-geoip-data/162548)
**Author:** [@vscheuber](https://discuss.elastic.co/u/vscheuber)\ **Replies:** 1\ **Last updated:** [January 1, 2019, 6:15am UTC](https://discuss.elastic.co/t/creating-aggregate-top-10-ips-table-with-geoip-data/162548 "2019-01-01T06:15:13Z")
Hello there! I am migrating from Sumo Logic to ELK and I am struggling creating the same or similar panels for a dashboard I am working on. I am analyzing firewall logs and would like to create a table of the top ten b… --- ## [Create Kibana visulaization on the fly using python script](https://discuss.elastic.co/t/create-kibana-visulaization-on-the-fly-using-python-script/124779)
**Author:** [@Bhairavi](https://discuss.elastic.co/u/Bhairavi)\ **Replies:** 7\ **Last updated:** [March 22, 2018, 11:35am UTC](https://discuss.elastic.co/t/create-kibana-visulaization-on-the-fly-using-python-script/124779 "2018-03-22T11:35:02Z")
I have a requirement of creating kibana visualization when a user writes a query like "apache logs for March". I want it to happen dynamically using Python script. I've tried submitting Kibana JSON request through Elast… --- ## [Apply condition on value (count) greater than some value in aggregation](https://discuss.elastic.co/t/apply-condition-on-value-count-greater-than-some-value-in-aggregation/259750)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 6:54pm UTC](https://discuss.elastic.co/t/apply-condition-on-value-count-greater-than-some-value-in-aggregation/259750 "2020-12-28T18:54:05Z")
I am looking a way where I can apply condition on value return in result. Here is my query. { "size": 0, "aggs": { "by\_brand": { "terms": { "field": "brand\_name.keyword", "size": 10… --- ## [Elasticsearch.service failed after restart](https://discuss.elastic.co/t/elasticsearch-service-failed-after-restart/341056)
**Author:** [@dirtdart666](https://discuss.elastic.co/u/dirtdart666)\ **Replies:** 2\ **Last updated:** [August 19, 2023, 3:01am UTC](https://discuss.elastic.co/t/elasticsearch-service-failed-after-restart/341056 "2023-08-19T03:01:55Z")
Hi everyone, I am attempitng to install Elasticsearch on an Ubuntu server 22.04. LTS VM but I am running into a few issues. After configuring /etc/elasticsearch/elasticsearch.yml saving and then running sudo systemctl … --- ## ["This Elastic installation has strict security requirements enabled that your current browser does not meet](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/259006)
**Author:** [@J\_Stan](https://discuss.elastic.co/u/J_Stan)\ **Replies:** 2\ **Last updated:** [December 17, 2020, 5:03pm UTC](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/259006 "2020-12-17T17:03:30Z")
Hi All I am not able to access the Kibana UI . I am using Google Chrome (ver 87). The error I am getting is "This Elastic installation has strict security requirements enabled that your current browser does not meet.… --- ## [How to use the Bucket Selector to emulate min\_doc\_count?](https://discuss.elastic.co/t/how-to-use-the-bucket-selector-to-emulate-min-doc-count/37049)
**Author:** [@AndreKR](https://discuss.elastic.co/u/AndreKR)\ **Replies:** 1\ **Last updated:** [December 14, 2015, 9:56am UTC](https://discuss.elastic.co/t/how-to-use-the-bucket-selector-to-emulate-min-doc-count/37049 "2015-12-14T09:56:16Z")
I want to eliminate all empty buckets from a range aggregation. According to https://github.com/elastic/elasticsearch/issues/10027 the Bucket Selector Pipeline Aggregation is the way to go, but I'm struggling with its … --- ## [Elastic search is failing to perform bulk index](https://discuss.elastic.co/t/elastic-search-is-failing-to-perform-bulk-index/70306)
**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\ **Replies:** 6\ **Last updated:** [January 3, 2017, 5:50pm UTC](https://discuss.elastic.co/t/elastic-search-is-failing-to-perform-bulk-index/70306 "2017-01-03T17:50:12Z")
I'm using filebeat to ship the logs to elastic search. I have noticed that its failing to index the logs from 2 weeks. File beat error: ERR Failed to perform any bulk index operations: Post http://dt1es01p02:9200/\_bul… --- ## [How to do incremental indexing in ElasticSearch?](https://discuss.elastic.co/t/how-to-do-incremental-indexing-in-elasticsearch/15937)
**Author:** [@Daniel\_Guo](https://discuss.elastic.co/u/Daniel_Guo)\ **Replies:** 4\ **Last updated:** [February 21, 2014, 10:32am UTC](https://discuss.elastic.co/t/how-to-do-incremental-indexing-in-elasticsearch/15937 "2014-02-21T10:32:23Z")
Here is my problem: I query some data from MySql, and then index those data to ElasticSearch. While the data in MySql is updating (update and insert) all the time, so I have to update ElasticSearch index accord… --- ## [Recreating an index from LogStash and swapping it via alias](https://discuss.elastic.co/t/recreating-an-index-from-logstash-and-swapping-it-via-alias/86652)
**Author:** [@Xavi\_Ametller](https://discuss.elastic.co/u/Xavi_Ametller)\ **Replies:** 5\ **Last updated:** [May 24, 2017, 10:57am UTC](https://discuss.elastic.co/t/recreating-an-index-from-logstash-and-swapping-it-via-alias/86652 "2017-05-24T10:57:34Z")
Hi there, I would like to periodically generate an index whose data will come from the outcome of a SQL query. Even though I'm aware it is not the traditional use case as the data are not logs nor accumulative, LogStash … --- ## [Filebeat: Reading the log files remotely](https://discuss.elastic.co/t/filebeat-reading-the-log-files-remotely/79577)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 7\ **Last updated:** [March 24, 2017, 7:06am UTC](https://discuss.elastic.co/t/filebeat-reading-the-log-files-remotely/79577 "2017-03-24T07:06:36Z")
Whether filebeat can be used to read the log files (Webserver, Application,.etc) remotely, instead of installing it on the server where the logs reside? --- ## [JVM -Xss tuning, isn't the default JVM value good enough?](https://discuss.elastic.co/t/jvm-xss-tuning-isnt-the-default-jvm-value-good-enough/9840)
**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\ **Replies:** 2\ **Last updated:** [November 27, 2012, 11:24pm UTC](https://discuss.elastic.co/t/jvm-xss-tuning-isnt-the-default-jvm-value-good-enough/9840 "2012-11-27T23:24:42Z")
Hi, What is the motivation to specifically setup Xss JVM parameter in elasticsearch startup script? It seems that during the time the Xss went from 128k \[1\] up to 256k \[2\]. Is it that the default JVM value was ca… --- ## [Logstash not outputting logs to elasticsearch](https://discuss.elastic.co/t/logstash-not-outputting-logs-to-elasticsearch/41225)
**Author:** [@Gen\_Ohta](https://discuss.elastic.co/u/Gen_Ohta)\ **Replies:** 8\ **Last updated:** [February 9, 2016, 5:47pm UTC](https://discuss.elastic.co/t/logstash-not-outputting-logs-to-elasticsearch/41225 "2016-02-09T17:47:30Z")
Hello, When I set up Elasticsearch, Logstash, Kibana and Filebeat, I used this tutorial. Unfortunately, Logstash is not attempting to output to Elasticsearch at the correct IP address. This is shown in the log messa… [Previous page](https://discuss.elastic.co/top.md?page=324&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=326&per_page=50&period=all)