# Top **URL:** https://discuss.elastic.co/top.md?page=347&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 348 --- ## [Filebeat monitoring](https://discuss.elastic.co/t/filebeat-monitoring/133852)
**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Replies:** 6\ **Last updated:** [May 31, 2018, 5:09am UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852 "2018-05-31T05:09:24Z")
Hello, below is my filebeat configuration, getting an error Exiting: more than one namespace configured accessing config # filebeat filebeat.prospectors: type: log paths: /opt/id/logs/\* fields: component: idr m… --- ## [Ilm policy on system index](https://discuss.elastic.co/t/ilm-policy-on-system-index/183657)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 2\ **Last updated:** [June 10, 2019, 5:02am UTC](https://discuss.elastic.co/t/ilm-policy-on-system-index/183657 "2019-06-10T05:02:02Z")
I am trying to put a policy on the system generated indices specifically to ".monitoring-es-...." & ".monitoring-kibana-...." i have created a policy which is simply deleting these indices which are having age as 1 d… --- ## [Unable to set Certificate Authority in Elastic APM](https://discuss.elastic.co/t/unable-to-set-certificate-authority-in-elastic-apm/165132)
**Author:** [@aqdaniels](https://discuss.elastic.co/u/aqdaniels)\ **Replies:** 2\ **Last updated:** [January 22, 2019, 9:58pm UTC](https://discuss.elastic.co/t/unable-to-set-certificate-authority-in-elastic-apm/165132 "2019-01-22T21:58:20Z")
Hello, APM error message - UNABLE\_TO\_VERIFY\_LEAF\_SIGNATURE (Certificate Authority) It is important to state that I am not using x-pack security on my elastic cluster. I am running elastic apm 6.5.4 and using elastic-a… --- ## [Filter cef](https://discuss.elastic.co/t/filter-cef/181215)
**Author:** [@ta7643](https://discuss.elastic.co/u/ta7643)\ **Replies:** 6\ **Last updated:** [May 17, 2019, 9:09am UTC](https://discuss.elastic.co/t/filter-cef/181215 "2019-05-17T09:09:09Z")
Hi, in the logstash reference is no cef filter plugin but there is a codec cef which i use for my input. input { stdin { codec =\> cef } } filter {} output { stdout { codec =\> rubydebug } } This is working fine but i w… --- ## [Help! After upgrading to Elasticsearch 6 cluster shard replicas will not allocate](https://discuss.elastic.co/t/help-after-upgrading-to-elasticsearch-6-cluster-shard-replicas-will-not-allocate/108077)
**Author:** [@Warren\_Turner](https://discuss.elastic.co/u/Warren_Turner)\ **Replies:** 8\ **Last updated:** [November 27, 2017, 1:32pm UTC](https://discuss.elastic.co/t/help-after-upgrading-to-elasticsearch-6-cluster-shard-replicas-will-not-allocate/108077 "2017-11-27T13:32:10Z")
I upgraded my cluster to Elasticsearch 6 and while it is working, none of the redundant shards are being allocated :frowning: When I use the explain API I get this: curl -XGET 'localhost:9200/\_cluster/allocation/explai… --- ## [Delete by query not working](https://discuss.elastic.co/t/delete-by-query-not-working/11943)
**Author:** [@Loic\_Bertron](https://discuss.elastic.co/u/Loic_Bertron)\ **Replies:** 8\ **Last updated:** [May 16, 2013, 6:54am UTC](https://discuss.elastic.co/t/delete-by-query-not-working/11943 "2013-05-16T06:54:22Z")
Hey guys, I'm trying to delete some tweets i've been indexing automatically after 1h but even TTL or delete by query is not working. When i set TTL, nothing happen. Same result if i try this command : curl -X… --- ## [Kibana: How to migrate dashboards from DEV/TEST to PROD, and Version control it?](https://discuss.elastic.co/t/kibana-how-to-migrate-dashboards-from-dev-test-to-prod-and-version-control-it/96977)
**Author:** [@kinelk](https://discuss.elastic.co/u/kinelk)\ **Replies:** 3\ **Last updated:** [August 14, 2017, 5:10pm UTC](https://discuss.elastic.co/t/kibana-how-to-migrate-dashboards-from-dev-test-to-prod-and-version-control-it/96977 "2017-08-14T17:10:00Z")
After reading the object persistence of Kibana (https://www.elastic.co/blog/kibana-under-the-hood-object-persistence) , I understand the objects are persisted in ES layer. We are planning to have enterprise implementati… --- ## [Get 10 characters before substring in logstash?](https://discuss.elastic.co/t/get-10-characters-before-substring-in-logstash/94439)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 6\ **Last updated:** [July 25, 2017, 10:35am UTC](https://discuss.elastic.co/t/get-10-characters-before-substring-in-logstash/94439 "2017-07-25T10:35:42Z")
Hi, I want to get the first 10 characters from a string that ends with Exception. Example: I have field like this: "ERRORMESSAGE" =\> "local exporter \[default\_local\] - failed to delete indice s\\r\\nRemoteTransportExc… --- ## [Can't find Metricbeat log file](https://discuss.elastic.co/t/cant-find-metricbeat-log-file/226525)
**Author:** [@cylon86](https://discuss.elastic.co/u/cylon86)\ **Replies:** 1\ **Last updated:** [April 14, 2020, 4:52pm UTC](https://discuss.elastic.co/t/cant-find-metricbeat-log-file/226525 "2020-04-14T16:52:15Z")
Hello, I'm trying to setup metricbeat to monitor my cluster but I have some trouble. The first one is that I can't find the metricbeat execution logs to debug the issue... When I run systemctl status metricbeat.servic… --- ## [How to configure apache.yml in filebeat with multiple paths in var.paths](https://discuss.elastic.co/t/how-to-configure-apache-yml-in-filebeat-with-multiple-paths-in-var-paths/268980)
**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\ **Replies:** 6\ **Last updated:** [April 6, 2021, 10:59am UTC](https://discuss.elastic.co/t/how-to-configure-apache-yml-in-filebeat-with-multiple-paths-in-var-paths/268980 "2021-04-06T10:59:59Z")
i am not getting on how i can add multiple paths in var.paths parameter in apache.yml? i have configured one path but i have multiple log files with different names so how can add those paths too? # ====================… --- ## [Update synonym in real time](https://discuss.elastic.co/t/update-synonym-in-real-time/198169)
**Author:** [@zidane28](https://discuss.elastic.co/u/zidane28)\ **Replies:** 5\ **Last updated:** [September 10, 2019, 8:29am UTC](https://discuss.elastic.co/t/update-synonym-in-real-time/198169 "2019-09-10T08:29:35Z")
Background: For all this while, I always thought that, if there is any changes in the synonym file, you will need to reindex the whole index. Sure, if the index size is small, the process is not that slow, but the proce… --- ## [ES doesn't show list of snapshots](https://discuss.elastic.co/t/es-doesnt-show-list-of-snapshots/94113)
**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\ **Replies:** 6\ **Last updated:** [July 21, 2017, 1:29pm UTC](https://discuss.elastic.co/t/es-doesnt-show-list-of-snapshots/94113 "2017-07-21T13:29:43Z")
Hi, I've had a server with ES 5.x. It was configured to make weekly snapshots and it worked fine. One day, the server crashed, but I have all my snapshots available. Today I'm trying to restore my indicies from the… --- ## [Deleting .Kibana results in too many redirects](https://discuss.elastic.co/t/deleting-kibana-results-in-too-many-redirects/163484)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 2\ **Last updated:** [January 21, 2019, 4:49pm UTC](https://discuss.elastic.co/t/deleting-kibana-results-in-too-many-redirects/163484 "2019-01-21T16:49:31Z")
Hi guys, While trying to access Kibana UI, I was getting too many redirects. I check my logs and I get this, {"type":"log","@timestamp":"2019-01-09T08:45:24Z","tags":\["spaces","error"\],"pid":21165,"message":"Unable to… --- ## [Script exception-scripts of type \[inline\], operation \[update\] and lang \[groovy\] are disabled](https://discuss.elastic.co/t/script-exception-scripts-of-type-inline-operation-update-and-lang-groovy-are-disabled/49553)
**Author:** [@sattu531](https://discuss.elastic.co/u/sattu531)\ **Replies:** 3\ **Last updated:** [May 10, 2016, 9:26am UTC](https://discuss.elastic.co/t/script-exception-scripts-of-type-inline-operation-update-and-lang-groovy-are-disabled/49553 "2016-05-10T09:26:04Z")
Hi, I am very much new to elastic search and trying to build a small search application-- when I am trying to update document getting exception- API - curl -XPOST '127.0.0.1:9200/ugc/questions/1/\_update' -d'{"script":"ct… --- ## [Metricbeat Setup not work](https://discuss.elastic.co/t/metricbeat-setup-not-work/142604)
**Author:** [@weyderfs](https://discuss.elastic.co/u/weyderfs)\ **Replies:** 5\ **Last updated:** [August 3, 2018, 5:22pm UTC](https://discuss.elastic.co/t/metricbeat-setup-not-work/142604 "2018-08-03T17:22:03Z")
Hello guys, I need help to fix this: mservice@sentinel:~$ sudo metricbeat setup Exiting: Couldn't connect to any of the configured Elasticsearch hosts. Errors: \[Error connection to Elasticsearch http://localhost:5044: … --- ## [Take the Elasticsearch developer survey](https://discuss.elastic.co/t/take-the-elasticsearch-developer-survey/348664)
**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Replies:** 0\ **Last updated:** [December 5, 2023, 4:28pm UTC](https://discuss.elastic.co/t/take-the-elasticsearch-developer-survey/348664 "2023-12-05T16:28:35Z")
Our developer community is a big part of why Elasticsearch is so popular. To make sure Elastic continues to be a great choice for speed, scale, and relevance, we’d like your help. This survey on your developer experienc… --- ## ["No configuration found in the configured sources": Error when working through LogStash tutorial](https://discuss.elastic.co/t/no-configuration-found-in-the-configured-sources-error-when-working-through-logstash-tutorial/173309)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 3\ **Last updated:** [April 1, 2019, 4:02pm UTC](https://discuss.elastic.co/t/no-configuration-found-in-the-configured-sources-error-when-working-through-logstash-tutorial/173309 "2019-04-01T16:02:06Z")
I downloaded LogStash 6.6.2 today and I am currently going through the tutorial here. On my Windows 10 machine, I followed the instructions here to install/configure/run Filebeat. I followed every single step in the tu… --- ## [Monitoring the memory use of our application](https://discuss.elastic.co/t/monitoring-the-memory-use-of-our-application/121516)
**Author:** [@orfeu65](https://discuss.elastic.co/u/orfeu65)\ **Replies:** 4\ **Last updated:** [March 4, 2018, 2:43am UTC](https://discuss.elastic.co/t/monitoring-the-memory-use-of-our-application/121516 "2018-03-04T02:43:27Z")
Hello! I am testing APM and I see that it measures and analyzes response times and number of requests. It is great. But we are interested in the memory usage of our application. The memory that is used by each request a… --- ## [Timelion aggregation- Possible with terms?](https://discuss.elastic.co/t/timelion-aggregation-possible-with-terms/98271)
**Author:** [@Lindsey](https://discuss.elastic.co/u/Lindsey)\ **Replies:** 2\ **Last updated:** [August 24, 2017, 9:11pm UTC](https://discuss.elastic.co/t/timelion-aggregation-possible-with-terms/98271 "2017-08-24T21:11:23Z")
Hey Guys! Im trying to graph a formula using add, divide and multiple functions of Timeline. I wanted to know if it was possible, and if so how to add aggregation of terms to my Timeline equation. Right now, what I thi… --- ## [How to convert geo coordinates into continent/country/region/city](https://discuss.elastic.co/t/how-to-convert-geo-coordinates-into-continent-country-region-city/237302)
**Author:** [@rgroleau](https://discuss.elastic.co/u/rgroleau)\ **Replies:** 6\ **Last updated:** [June 25, 2020, 2:19pm UTC](https://discuss.elastic.co/t/how-to-convert-geo-coordinates-into-continent-country-region-city/237302 "2020-06-25T14:19:03Z")
I am currently mapping some of my clients coordinates that are reported on a nice map layer in Kibana. It looks good! But I would also like to be able to visualize these coordinates based on continent, country, regions, … --- ## [Unable to authenticate user for REST request](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/249118)
**Author:** [@bhavikdhoot](https://discuss.elastic.co/u/bhavikdhoot)\ **Replies:** 4\ **Last updated:** [September 24, 2020, 5:56am UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/249118 "2020-09-24T05:56:15Z")
Hi, I'm trying to connect to Elasticsearch through FileBeats using the following config in my filebeat.yml. output.elasticsearch: Array of hosts to connect to. #hosts: \["localhost:9200"\] hosts: \["server1:9600","serve… --- ## [Elasticsearch DSL Query - Field is not null or not empty](https://discuss.elastic.co/t/elasticsearch-dsl-query-field-is-not-null-or-not-empty/323005)
**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\ **Replies:** 8\ **Last updated:** [January 16, 2023, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-query-field-is-not-null-or-not-empty/323005 "2023-01-16T10:49:18Z")
I have an existing DSL query that needs to modify such that the id "12345" should be not null or not empty: { "bool":{ "must":\[ { "bool":{ "should":\[ { … --- ## [StackOverflowError in ES](https://discuss.elastic.co/t/stackoverflowerror-in-es/25278)
**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\ **Replies:** 4\ **Last updated:** [July 12, 2015, 5:47pm UTC](https://discuss.elastic.co/t/stackoverflowerror-in-es/25278 "2015-07-12T17:47:19Z")
On our cluster of ES running 1.3.0 over 6 nodes, we observed a stackoverflow error on one of the nodes. The system has been under moderate bulk indexing operations. The clients were receiving a Node disconnected except… --- ## [HTTP response codes when creating a document](https://discuss.elastic.co/t/http-response-codes-when-creating-a-document/208647)
**Author:** [@kakavoul](https://discuss.elastic.co/u/kakavoul)\ **Replies:** 3\ **Last updated:** [November 20, 2019, 10:14am UTC](https://discuss.elastic.co/t/http-response-codes-when-creating-a-document/208647 "2019-11-20T10:14:45Z")
Hello, Is there somewhere a list of all possible HTTP response codes when creating a new document in ElasticSearch? I only managed to find that in case of a successful creation 201 is responded while in case of a confli… --- ## [About price of Elasticsearch (watcher, shield, marvel - Gold products)](https://discuss.elastic.co/t/about-price-of-elasticsearch-watcher-shield-marvel-gold-products/27116)
**Author:** [@atw\_roro](https://discuss.elastic.co/u/atw_roro)\ **Replies:** 4\ **Last updated:** [August 11, 2015, 8:07am UTC](https://discuss.elastic.co/t/about-price-of-elasticsearch-watcher-shield-marvel-gold-products/27116 "2015-08-11T08:07:15Z")
Dear All, My name is Hoang Anh. I have some the questions, please help me. My company want to setup a system using elasticsearch with watcher, shield, marvel (cluster have about less 10 nodes, after 6-12 month will be … --- ## [Failed to fetch X-Pack information from Elasticsearch](https://discuss.elastic.co/t/failed-to-fetch-x-pack-information-from-elasticsearch/227712)
**Author:** [@enricobachiorrini](https://discuss.elastic.co/u/enricobachiorrini)\ **Replies:** 4\ **Last updated:** [April 17, 2020, 1:27am UTC](https://discuss.elastic.co/t/failed-to-fetch-x-pack-information-from-elasticsearch/227712 "2020-04-17T01:27:12Z")
Hello, I'm setting up elasticsearch and centralized pipeline management. Elasticsearch crashes with these errors: \[2020-04-13T00:41:44,943\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license info… --- ## [Replica shard stuck in UNASSIGNED state](https://discuss.elastic.co/t/replica-shard-stuck-in-unassigned-state/93640)
**Author:** [@dipathak](https://discuss.elastic.co/u/dipathak)\ **Replies:** 1\ **Last updated:** [July 21, 2017, 6:33am UTC](https://discuss.elastic.co/t/replica-shard-stuck-in-unassigned-state/93640 "2017-07-21T06:33:10Z")
Hi, We are using ES 5.2 on a 4 node cluster. Some replica shards are stuck in UNASSIGNED state since last couple of hours. Below is the information about these shards from \_cluster/state API. Also, a lot of bulk write op… --- ## [Logstash not logging](https://discuss.elastic.co/t/logstash-not-logging/75254)
**Author:** [@timmy8ken](https://discuss.elastic.co/u/timmy8ken)\ **Replies:** 4\ **Last updated:** [February 16, 2017, 3:37am UTC](https://discuss.elastic.co/t/logstash-not-logging/75254 "2017-02-16T03:37:51Z")
Hello, I have Logstash 5.2.0 running on a Server 2016 server and I am trying to enable internal logging and I can't get it to write to a log file. I have tried the following: Edited logstash.yml with the following … --- ## [How to restart Kibana 5.4.0](https://discuss.elastic.co/t/how-to-restart-kibana-5-4-0/92193)
**Author:** [@nikhil\_ahir](https://discuss.elastic.co/u/nikhil_ahir)\ **Replies:** 4\ **Last updated:** [July 10, 2017, 9:16am UTC](https://discuss.elastic.co/t/how-to-restart-kibana-5-4-0/92193 "2017-07-10T09:16:23Z")
I am exploring Kibana 5.4.0, so after updating the Elasticsearch url path in kiaban.yml file how can i restart Kibana? Currently i am restarting the complete docker container but i think there should be another way to re… --- ## [Less than operator not working](https://discuss.elastic.co/t/less-than-operator-not-working/106397)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 3\ **Last updated:** [November 19, 2017, 11:23am UTC](https://discuss.elastic.co/t/less-than-operator-not-working/106397 "2017-11-19T11:23:40Z")
Hi, I am trying to use a “\<“ operator to filter all the records with field “value” less than 0.5. After applying the filter in the query I still get the records which are greater than 0.5 Here is the snapshot \[37659… --- ## [Scripted Fields (String Length) Not So Painless](https://discuss.elastic.co/t/scripted-fields-string-length-not-so-painless/198315)
**Author:** [@jchivian](https://discuss.elastic.co/u/jchivian)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 9:04pm UTC](https://discuss.elastic.co/t/scripted-fields-string-length-not-so-painless/198315 "2019-09-05T21:04:25Z")
I'm trying to generate a scripted field to be the string length of an event field. I've tried more variants of... if (doc.containsKey('msg')) { def msg\_length = doc\['msg'\].value.size(); \* or value.length() return m… --- ## [Displaying sparse data in Timelion using fit()](https://discuss.elastic.co/t/displaying-sparse-data-in-timelion-using-fit/118386)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 8\ **Last updated:** [February 8, 2018, 12:51pm UTC](https://discuss.elastic.co/t/displaying-sparse-data-in-timelion-using-fit/118386 "2018-02-08T12:51:06Z")
Hi, I am trying to plot two charts to show correlation between them. My first plot shows the phase error, the events for which are coming at regular interval (every second, except when there is some problem at which ti… --- ## [Machine learning (what are free features)](https://discuss.elastic.co/t/machine-learning-what-are-free-features/149566)
**Author:** [@clickstream](https://discuss.elastic.co/u/clickstream)\ **Replies:** 5\ **Last updated:** [September 23, 2018, 8:26am UTC](https://discuss.elastic.co/t/machine-learning-what-are-free-features/149566 "2018-09-23T08:26:46Z")
Hi guys i wanted to ask if i install free versions of Elasticsearch and Kibana, will the machine learning functions be available on my Kibana dashboard under job creating. Thanks! --- ## [Mapping a JSON fields](https://discuss.elastic.co/t/mapping-a-json-fields/67927)
**Author:** [@Guillaume\_Ayad](https://discuss.elastic.co/u/Guillaume_Ayad)\ **Replies:** 1\ **Last updated:** [December 5, 2016, 4:09pm UTC](https://discuss.elastic.co/t/mapping-a-json-fields/67927 "2016-12-05T16:09:59Z")
Hello, I found a JSON file and as I want to load its data in Kibana, I first need to set up a mapping for the fields in Elasticsearch, am I right ? { "number": 123, "contract\_name" : "Paris", "name": "nom station… --- ## [Best practice with Logstash output and ES](https://discuss.elastic.co/t/best-practice-with-logstash-output-and-es/95189)
**Author:** [@lendoly](https://discuss.elastic.co/u/lendoly)\ **Replies:** 3\ **Last updated:** [August 2, 2017, 1:39pm UTC](https://discuss.elastic.co/t/best-practice-with-logstash-output-and-es/95189 "2017-08-02T13:39:39Z")
Hello, My question is related to the correct way to configure the output, for Elasticsearch. Right now my Elasticsearch cluster is one master node, 2 ingest nodes and 1 data node. My Logstash output configuration is l… --- ## [Error trying to connect to APM Server](https://discuss.elastic.co/t/error-trying-to-connect-to-apm-server/304145)
**Author:** [@kama99](https://discuss.elastic.co/u/kama99)\ **Replies:** 5\ **Last updated:** [May 9, 2022, 11:49am UTC](https://discuss.elastic.co/t/error-trying-to-connect-to-apm-server/304145 "2022-05-09T11:49:51Z")
Kibana version: 7.16.3 Elasticsearch version: 7.16.3 APM Server version: 7.16.3 APM Agent language and version: Java, 1.30.1 Fresh install or upgraded from other version? Fresh Description of the problem includ… --- ## [Filebeat Autodiscovery: Filtering by container labels](https://discuss.elastic.co/t/filebeat-autodiscovery-filtering-by-container-labels/120201)
**Author:** [@ppik](https://discuss.elastic.co/u/ppik)\ **Replies:** 5\ **Last updated:** [February 19, 2018, 3:15pm UTC](https://discuss.elastic.co/t/filebeat-autodiscovery-filtering-by-container-labels/120201 "2018-02-19T15:15:32Z")
Hi, I would like to set up Filebeat configuration with docker autodiscovery provider to create prospectors only for docker containers with certain label, e.g., filebeat.enable: "true". However I find it difficult to fin… --- ## [How to join two index in kibana](https://discuss.elastic.co/t/how-to-join-two-index-in-kibana/153116)
**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\ **Replies:** 6\ **Last updated:** [October 22, 2018, 4:26pm UTC](https://discuss.elastic.co/t/how-to-join-two-index-in-kibana/153116 "2018-10-22T16:26:07Z")
Hi, i tried to join two index in kibana, but in visualization part it shows no data found. can u please explain how to do this? is there any other available or not? --- ## [Exclude fields from being indexed via dynamic templates mapping](https://discuss.elastic.co/t/exclude-fields-from-being-indexed-via-dynamic-templates-mapping/142998)
**Author:** [@mrubin](https://discuss.elastic.co/u/mrubin)\ **Replies:** 8\ **Last updated:** [August 10, 2018, 3:44am UTC](https://discuss.elastic.co/t/exclude-fields-from-being-indexed-via-dynamic-templates-mapping/142998 "2018-08-10T03:44:02Z")
I have the following kind of json being indexed into ElasticSearch via Logstash: "gameUpdate" : { "someField" : "something interesting", "otherStuff" : "...", "gameScores" : { "playerID1" : { ... }, "playe… --- ## [Why default number\_of\_shards is 1 in future release](https://discuss.elastic.co/t/why-default-number-of-shards-is-1-in-future-release/155814)
**Author:** [@narasimhasv](https://discuss.elastic.co/u/narasimhasv)\ **Replies:** 2\ **Last updated:** [November 8, 2018, 3:58am UTC](https://discuss.elastic.co/t/why-default-number-of-shards-is-1-in-future-release/155814 "2018-11-08T03:58:15Z")
older and current version of elasticsearch default number\_of\_shards is 5 so that it distribute and parallelize operations across shards thus increasing performance/throughput but why in the future releases default value… --- ## [How to change Kibana 4.1.1 Legend and Axis labels](https://discuss.elastic.co/t/how-to-change-kibana-4-1-1-legend-and-axis-labels/27744)
**Author:** [@Sar82](https://discuss.elastic.co/u/Sar82)\ **Replies:** 2\ **Last updated:** [August 21, 2015, 7:48am UTC](https://discuss.elastic.co/t/how-to-change-kibana-4-1-1-legend-and-axis-labels/27744 "2015-08-21T07:48:17Z")
Hi, can anyone help me changing Kibana graph Legends. I want to change color and name of the Legend. Also I want to change names of X and Y axis labels. I am using Kibana 4.1.1. --- ## [Max file descriptors \[4096\] for elasticsearch process is too low - Running as a service](https://discuss.elastic.co/t/max-file-descriptors-4096-for-elasticsearch-process-is-too-low-running-as-a-service/208238)
**Author:** [@mauriciothomsen](https://discuss.elastic.co/u/mauriciothomsen)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 6:30pm UTC](https://discuss.elastic.co/t/max-file-descriptors-4096-for-elasticsearch-process-is-too-low-running-as-a-service/208238 "2019-11-19T18:30:49Z")
Hello All, Instead of run elasticsearch as a command everytime I start the machine, I decided to switch as a service. An old issue related to the max file descriptors came back but this time I could not make work when t… --- ## [Filebeat not starting](https://discuss.elastic.co/t/filebeat-not-starting/92474)
**Author:** [@John\_Clarke](https://discuss.elastic.co/u/John_Clarke)\ **Replies:** 5\ **Last updated:** [July 12, 2017, 8:51am UTC](https://discuss.elastic.co/t/filebeat-not-starting/92474 "2017-07-12T08:51:50Z")
Hi, Having some issues with filebeat on Ubuntu 16.04. I followed this tutorial https://www.howtoforge.com/tutorial/how-to-install-elastic-stack-on-ubuntu-16-04/ I cannot figure out why filbeat is not starting. Any he… --- ## [How to specified the target location to store the log file](https://discuss.elastic.co/t/how-to-specified-the-target-location-to-store-the-log-file/42831)
**Author:** [@wangxiangbill](https://discuss.elastic.co/u/wangxiangbill)\ **Replies:** 6\ **Last updated:** [March 7, 2016, 7:09am UTC](https://discuss.elastic.co/t/how-to-specified-the-target-location-to-store-the-log-file/42831 "2016-03-07T07:09:37Z")
Hi I installed the ELK with filebeat few days ago. I follow up with the blog https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04#set-up-filebea… --- ## [Struggling with Kibana to Elasticsearch cluster encryption](https://discuss.elastic.co/t/struggling-with-kibana-to-elasticsearch-cluster-encryption/157140)
**Author:** [@jbrowe](https://discuss.elastic.co/u/jbrowe)\ **Replies:** 7\ **Last updated:** [November 21, 2018, 1:16am UTC](https://discuss.elastic.co/t/struggling-with-kibana-to-elasticsearch-cluster-encryption/157140 "2018-11-21T01:16:12Z")
I've been struggling to get encryption between Kibana and my Elasticsearch cluster working for past two days. My platform is CentOS 7 and I'm using ES version 6.4.0. Here's where I am: Encryption between ES nodes is wor… --- ## [Filebeat custom index name without logstash](https://discuss.elastic.co/t/filebeat-custom-index-name-without-logstash/161885)
**Author:** [@pranay\_sankpal](https://discuss.elastic.co/u/pranay_sankpal)\ **Replies:** 7\ **Last updated:** [December 27, 2018, 2:37pm UTC](https://discuss.elastic.co/t/filebeat-custom-index-name-without-logstash/161885 "2018-12-27T14:37:19Z")
I want to change name of the index. https://www.elastic.co/guide/en/beats/filebeat/current/elasticsearch-output.html#index-option-es I'm referring above link. following is the filebeat.yml file. I'm not seeing any inde… --- ## [Accessing Subbuckets in Vega](https://discuss.elastic.co/t/accessing-subbuckets-in-vega/137700)
**Author:** [@tadgh](https://discuss.elastic.co/u/tadgh)\ **Replies:** 4\ **Last updated:** [July 25, 2018, 4:21pm UTC](https://discuss.elastic.co/t/accessing-subbuckets-in-vega/137700 "2018-07-25T16:21:36Z")
Hello. I am just here to mirror this question (Format for multi-level aggregation in Vega) which is: How do you access an array of subbuckets in Vega/Vegalite via Kibana? I have a query which is aggregated over a given … --- ## [ELK Stack on AWS multi-region?](https://discuss.elastic.co/t/elk-stack-on-aws-multi-region/79898)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 5\ **Last updated:** [March 28, 2017, 5:33pm UTC](https://discuss.elastic.co/t/elk-stack-on-aws-multi-region/79898 "2017-03-28T17:33:33Z")
My App servers are deployed across 2 AWS regions, and I want to analyze their logs. I am planning architecture with high availability (1 region failure). So, planning to have: Filbeat on each app server, 2 Redis (1 in… --- ## [Help understanding keyword vs not\_analyzed](https://discuss.elastic.co/t/help-understanding-keyword-vs-not-analyzed/10374)
**Author:** [@Ariel\_Valentin](https://discuss.elastic.co/u/Ariel_Valentin)\ **Replies:** 3\ **Last updated:** [January 16, 2013, 3:20pm UTC](https://discuss.elastic.co/t/help-understanding-keyword-vs-not-analyzed/10374 "2013-01-16T15:20:31Z")
My team is in the process of migrating an application from a custom Lucene based solution to elasticsearch and we have some questions about the keyword analyzer. In our "legacy" system we are indexing a field using or… --- ## [Ruby Filter - Event.Remove Inconsistent Results](https://discuss.elastic.co/t/ruby-filter-event-remove-inconsistent-results/138268)
**Author:** [@kazul33](https://discuss.elastic.co/u/kazul33)\ **Replies:** 8\ **Last updated:** [July 10, 2018, 5:35pm UTC](https://discuss.elastic.co/t/ruby-filter-event-remove-inconsistent-results/138268 "2018-07-10T17:35:29Z")
Problem Statement I believe there is a bug in the ruby filter plugin when using event.remove Expected Output: ... event\_data.sql\_text =\> "some sql text" event\_data.logType =\> "Oracle" ... With no root fields (e.g., sql\_… [Previous page](https://discuss.elastic.co/top.md?page=346&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=348&per_page=50&period=all)