# Top

**URL:** https://discuss.elastic.co/top.md?page=473&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 474

---

## [Kibana user activity log](https://discuss.elastic.co/t/kibana-user-activity-log/247307)

<div class="topic-metadata">

**Author:** [@Dave\_Laurence](https://discuss.elastic.co/u/Dave_Laurence)\
**Replies:** 1\
**Last updated:** [September 3, 2020, 12:53am UTC](https://discuss.elastic.co/t/kibana-user-activity-log/247307 "2020-09-03T00:53:05Z")

</div>

Hello. I'm a new ELK Stack user. And my project requires me to track who is accessing my kibana dashboard, and how long they are using the kibana (kibana utilization). Is there anyway to track those? The closest thing I…

---

## [Painless script - Can't use script params as regex pattern](https://discuss.elastic.co/t/painless-script-cant-use-script-params-as-regex-pattern/105045)

<div class="topic-metadata">

**Author:** [@David\_Jacob](https://discuss.elastic.co/u/David_Jacob)\
**Replies:** 1\
**Last updated:** [October 24, 2017, 5:52pm UTC](https://discuss.elastic.co/t/painless-script-cant-use-script-params-as-regex-pattern/105045 "2017-10-24T17:52:50Z")

</div>

Hi Team, I am trying to use regex patterns in scripts. My problem is the regex patterns are dynamic which I'll be passing it via params for script. In elasticsearch documentation, it is specified that only way to creat…

---

## [How to use pipelines.yml](https://discuss.elastic.co/t/how-to-use-pipelines-yml/122545)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [March 5, 2018, 3:18pm UTC](https://discuss.elastic.co/t/how-to-use-pipelines-yml/122545 "2018-03-05T15:18:09Z")

</div>

Hi, I wanted to try to use multiple pipelines. Starting from plain logstash 6.2.2 out from tar.gz file. Unzipped and chown for all files to logstash:logstash made following changes to pure logstash.yml: node.name: t…

---

## [ES 5.1.1 spending too much time in GC](https://discuss.elastic.co/t/es-5-1-1-spending-too-much-time-in-gc/69296)

<div class="topic-metadata">

**Author:** [@Roland\_L](https://discuss.elastic.co/u/Roland_L)\
**Replies:** 1\
**Last updated:** [December 16, 2016, 3:34pm UTC](https://discuss.elastic.co/t/es-5-1-1-spending-too-much-time-in-gc/69296 "2016-12-16T15:34:00Z")

</div>

I just updated my cluster from 2.4.1. to 5.1.1 and everything went fine except that I'm seeing a lot of WARNings in the log. Basically it says' that garbage collection took too much time: \[2016-12-16T14:45:31,699\]\[WARN…

---

## [How to update the GeoIP Databases for Elastic Ingest Pipelines](https://discuss.elastic.co/t/how-to-update-the-geoip-databases-for-elastic-ingest-pipelines/274259)

<div class="topic-metadata">

**Author:** [@nverrill](https://discuss.elastic.co/u/nverrill)\
**Replies:** 4\
**Last updated:** [June 1, 2021, 2:05pm UTC](https://discuss.elastic.co/t/how-to-update-the-geoip-databases-for-elastic-ingest-pipelines/274259 "2021-06-01T14:05:44Z")

</div>

I've read up on the docs and current topics and haven't found how to properly update the GeoIP Databases that come with Elasticsearch for the Ingest Pipelines. I have downloaded the latest GeoLite2-Country.mmdb from Ma…

---

## [Remove File After Read](https://discuss.elastic.co/t/remove-file-after-read/162809)

<div class="topic-metadata">

**Author:** [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)\
**Replies:** 3\
**Last updated:** [January 3, 2019, 7:26pm UTC](https://discuss.elastic.co/t/remove-file-after-read/162809 "2019-01-03T19:26:23Z")

</div>

Hey I have a quick question. I was wondering if there is anyway to remove a file after it has been read by logstash. I have a feeling mine keeps hanging on the same file over and over but when I check the query there is…

---

## [Not equal condtions in elasticsearch aggregation](https://discuss.elastic.co/t/not-equal-condtions-in-elasticsearch-aggregation/308976)

<div class="topic-metadata">

**Author:** [@hadii](https://discuss.elastic.co/u/hadii)\
**Replies:** 5\
**Last updated:** [July 9, 2022, 5:21am UTC](https://discuss.elastic.co/t/not-equal-condtions-in-elasticsearch-aggregation/308976 "2022-07-09T05:21:23Z")

</div>

I have a rails app that connects to Elasticsearch and the user could define some conditions like (at least),(at most), and ... to compare and find his specific result. everything is fine but now I have to add not equal t…

---

## [Comparison (\<) not supported on datetime fields anymore since upgrade to 6.1](https://discuss.elastic.co/t/comparison-not-supported-on-datetime-fields-anymore-since-upgrade-to-6-1/118008)

<div class="topic-metadata">

**Author:** [@stemps](https://discuss.elastic.co/u/stemps)\
**Replies:** 2\
**Last updated:** [February 5, 2018, 9:47am UTC](https://discuss.elastic.co/t/comparison-not-supported-on-datetime-fields-anymore-since-upgrade-to-6-1/118008 "2018-02-05T09:47:18Z")

</div>

I have a scripted field that looks something like this: (doc\['actual\_time'\].value \< doc\['expected\_time'\].value) ? 1 : 0 Since the upgrade to 6.1 I'm getting the following error: caused\_by":{"type":"class\_cast\_exceptio…

---

## [Can't start ES 7.3.0 with x-pack security enabled](https://discuss.elastic.co/t/cant-start-es-7-3-0-with-x-pack-security-enabled/195742)

<div class="topic-metadata">

**Author:** [@ludaca](https://discuss.elastic.co/u/ludaca)\
**Replies:** 6\
**Last updated:** [August 20, 2019, 5:54am UTC](https://discuss.elastic.co/t/cant-start-es-7-3-0-with-x-pack-security-enabled/195742 "2019-08-20T05:54:03Z")

</div>

Hello, I'm trying to enable xpack.security in ES 7.3.0 fresh install on k8s. X-pack license type: basic My elasticsearch.yml \</\> cluster.name: "es7-sec" network.host: 0.0.0.0 path.logs: /var/log discovery.seed\_hos…

---

## [Bottleneck while inputting data into the elasticsearch](https://discuss.elastic.co/t/bottleneck-while-inputting-data-into-the-elasticsearch/67735)

<div class="topic-metadata">

**Author:** [@Mayank\_Agrawal](https://discuss.elastic.co/u/Mayank_Agrawal)\
**Replies:** 6\
**Last updated:** [December 1, 2016, 10:56am UTC](https://discuss.elastic.co/t/bottleneck-while-inputting-data-into-the-elasticsearch/67735 "2016-12-01T10:56:55Z")

</div>

Hi, I am using elasticsearch 5.0.1 and logstash 5.0.0. For 1GB data, logstash is easily parsing the logs in half an hr (approx) if I am not redirecting the output to ES. With ES in output, the time taken to parse the s…

---

## [How to transform data from sql server to elastic search through beats?](https://discuss.elastic.co/t/how-to-transform-data-from-sql-server-to-elastic-search-through-beats/127487)

<div class="topic-metadata">

**Author:** [@manjur](https://discuss.elastic.co/u/manjur)\
**Replies:** 6\
**Last updated:** [April 12, 2018, 9:15am UTC](https://discuss.elastic.co/t/how-to-transform-data-from-sql-server-to-elastic-search-through-beats/127487 "2018-04-12T09:15:50Z")

</div>

Hi, I need to transform data from sql server to elastic search. I did it through Logstash. Which beat i should use to transform data from sql server without using logstash

---

## [Buffer Overflow when inputing old logs into logstash](https://discuss.elastic.co/t/buffer-overflow-when-inputing-old-logs-into-logstash/31628)

<div class="topic-metadata">

**Author:** [@dlb1001](https://discuss.elastic.co/u/dlb1001)\
**Replies:** 7\
**Last updated:** [October 5, 2015, 4:38pm UTC](https://discuss.elastic.co/t/buffer-overflow-when-inputing-old-logs-into-logstash/31628 "2015-10-05T16:38:54Z")

</div>

Hello, I've been working on inputing all of our old logs into logstash. I've been using this thread to help me implement it: Right now I'm just inputing custom apache logs through a listening port. I've been…

---

## [Can't log into Elastic (self hosted) "Oops! Error. Try again."](https://discuss.elastic.co/t/cant-log-into-elastic-self-hosted-oops-error-try-again/274433)

<div class="topic-metadata">

**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\
**Replies:** 4\
**Last updated:** [May 31, 2021, 2:40pm UTC](https://discuss.elastic.co/t/cant-log-into-elastic-self-hosted-oops-error-try-again/274433 "2021-05-31T14:40:57Z")

</div>

If I want to log in it just says "Oops! Error. Try again.". The credentials are definitely right (if I change the password to random it says that the login/password is wrong and doesn't give this error). I can't find a…

---

## [Update items in a rolled-over index](https://discuss.elastic.co/t/update-items-in-a-rolled-over-index/265087)

<div class="topic-metadata">

**Author:** [@Jorge\_Ruiz](https://discuss.elastic.co/u/Jorge_Ruiz)\
**Replies:** 6\
**Last updated:** [February 23, 2021, 8:37am UTC](https://discuss.elastic.co/t/update-items-in-a-rolled-over-index/265087 "2021-02-23T08:37:51Z")

</div>

Hi there! A quick and simple question related to rolled-over indexes. Is it a good approach to have a rollover index if, eventually, we want to update items that belong to an already completed index (rolled-over)? As f…

---

## [Kibana automatically adjusting time](https://discuss.elastic.co/t/kibana-automatically-adjusting-time/205428)

<div class="topic-metadata">

**Author:** [@Budi\_H](https://discuss.elastic.co/u/Budi_H)\
**Replies:** 2\
**Last updated:** [October 29, 2019, 10:07am UTC](https://discuss.elastic.co/t/kibana-automatically-adjusting-time/205428 "2019-10-29T10:07:17Z")

</div>

I have field named datetime and the type is date. Here's my mapping { "mappings" : { "properties" : { "datetime" : { "type" : "date", "format": "dd-MM-yyyy HH:mm:ss.SSS"} } } } I'm in GMT+7, and Kibana always adds 7…

---

## [Filebeat not excluding lines?](https://discuss.elastic.co/t/filebeat-not-excluding-lines/69238)

<div class="topic-metadata">

**Author:** [@hybrid](https://discuss.elastic.co/u/hybrid)\
**Replies:** 6\
**Last updated:** [December 21, 2016, 9:33am UTC](https://discuss.elastic.co/t/filebeat-not-excluding-lines/69238 "2016-12-21T09:33:48Z")

</div>

Running FileBeat 5.1 filebeat.prospectors: - input\_type: log paths: - c:\\\\DNSLogging\\\\trace.log include\_lines: \['^\[0-9\]{1,2}\\/\[0-9\]{1,2}\\/\[0-9\]{4}\\s{1,2}\[0-9\]{1,2}:\[0-9\]{1,2}:\[0-9\]{1,2}\\s{1,2}', '^\\\\s{2}Msg\\\\…

---

## [ElasticSearch and geo-redundancy](https://discuss.elastic.co/t/elasticsearch-and-geo-redundancy/42766)

<div class="topic-metadata">

**Author:** [@yeppers](https://discuss.elastic.co/u/yeppers)\
**Replies:** 6\
**Last updated:** [February 25, 2016, 8:27pm UTC](https://discuss.elastic.co/t/elasticsearch-and-geo-redundancy/42766 "2016-02-25T20:27:02Z")

</div>

We have a requirement from our operations team that all solutions have to geo-redundant with automatic failover. We have been forbidden from using ElasticSearch because of this (even though it is the best technical solut…

---

## [How to index my website](https://discuss.elastic.co/t/how-to-index-my-website/4560)

<div class="topic-metadata">

**Author:** [@venkatnehatha](https://discuss.elastic.co/u/venkatnehatha)\
**Replies:** 6\
**Last updated:** [June 13, 2011, 6:09pm UTC](https://discuss.elastic.co/t/how-to-index-my-website/4560 "2011-06-13T18:09:55Z")

</div>

Hi All, I am a newbie to (Elastic)Search engines. I want to use ElasticSearch for my website. I am done with the installation and done given twitter example indexing, it's working fine. Now to integrate with my we…

---

## [Inifinite-loop-encountered-a-retryable-error 400 error from Elasticsearch](https://discuss.elastic.co/t/inifinite-loop-encountered-a-retryable-error-400-error-from-elasticsearch/119290)

<div class="topic-metadata">

**Author:** [@Christopher\_Hodges](https://discuss.elastic.co/u/Christopher_Hodges)\
**Replies:** 1\
**Last updated:** [February 14, 2018, 5:00pm UTC](https://discuss.elastic.co/t/inifinite-loop-encountered-a-retryable-error-400-error-from-elasticsearch/119290 "2018-02-14T17:00:29Z")

</div>

Apologies if this is not the way to continue the discussion on a closed topic. But has Logstash 5.6.1 inifinite loop? Encountered a retryable error been resolved? We are seeing the same issue running Logstash 5.6.5. We …

---

## [Authentication using apikey failed - unable to find apikey with id](https://discuss.elastic.co/t/authentication-using-apikey-failed-unable-to-find-apikey-with-id/337217)

<div class="topic-metadata">

**Author:** [@p\_vimal](https://discuss.elastic.co/u/p_vimal)\
**Replies:** 3\
**Last updated:** [June 29, 2023, 9:58pm UTC](https://discuss.elastic.co/t/authentication-using-apikey-failed-unable-to-find-apikey-with-id/337217 "2023-06-29T21:58:01Z")

</div>

Hello, We are running Elasticsearch 7.17.8 and have many error entries like this on in the elastic logs: \[WARN \]\[o.e.x.s.a.ApiKeyAuthenticator\] \[NODENAMEE\] Authentication using apikey failed - unable to find apikey wi…

---

## [Dec 22th, 2022: \[EN\] How to run the official OpenTelemetry Demo with Elastic](https://discuss.elastic.co/t/dec-22th-2022-en-how-to-run-the-official-opentelemetry-demo-with-elastic/321229)

<div class="topic-metadata">

**Author:** [@Huage\_Chen](https://discuss.elastic.co/u/Huage_Chen)\
**Replies:** 0\
**Last updated:** [December 22, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-22th-2022-en-how-to-run-the-official-opentelemetry-demo-with-elastic/321229 "2022-12-22T08:00:26Z")

</div>

During the past 2 years, OpenTelemetry has emerged as the new open source observability standard and has become the 2nd most popular project in CNCF. While more and more companies are adopting OpenTelemetry for their…

---

## [Logstash server read data from resturl](https://discuss.elastic.co/t/logstash-server-read-data-from-resturl/38976)

<div class="topic-metadata">

**Author:** [@mayank\_verma](https://discuss.elastic.co/u/mayank_verma)\
**Replies:** 7\
**Last updated:** [January 19, 2016, 9:09pm UTC](https://discuss.elastic.co/t/logstash-server-read-data-from-resturl/38976 "2016-01-19T21:09:07Z")

</div>

I want to read data from resturl and feed that in logstash server. i did google and found \[a link\] https://github.com/logstash-plugins/logstash-input-http\_poller Logstash version - logstash-1.4.5-1\_a2bacae.noarch plugi…

---

## [Pipeline does not exist](https://discuss.elastic.co/t/pipeline-does-not-exist/239478)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 4\
**Last updated:** [July 2, 2020, 5:27pm UTC](https://discuss.elastic.co/t/pipeline-does-not-exist/239478 "2020-07-02T17:27:58Z")

</div>

Hi, I'm sending logs from filebeat to logstash but it I'm getting this error from logstash connecting to elastisearch: Jul 01 14:26:49 elk logstash\[5445\]: \[2020-07-01T14:26:49,288\]\[WARN \]\[logstash.outputs.elasticsearch…

---

## [Standalone vs embedded instances](https://discuss.elastic.co/t/standalone-vs-embedded-instances/4711)

<div class="topic-metadata">

**Author:** [@Remy\_Gendron](https://discuss.elastic.co/u/Remy_Gendron)\
**Replies:** 3\
**Last updated:** [June 28, 2011, 2:18am UTC](https://discuss.elastic.co/t/standalone-vs-embedded-instances/4711 "2011-06-28T02:18:29Z")

</div>

Hi all, We are using ES for all our reads, including resolving relations between entities. Updates go into MySQL first and if the transaction commits, we replicate the data to ES. Assuming 90% reads and 10% write…

---

## [Can't start ElasticSearch service (unknwon setting script.inline)](https://discuss.elastic.co/t/cant-start-elasticsearch-service-unknwon-setting-script-inline/167886)

<div class="topic-metadata">

**Author:** [@Lyro1](https://discuss.elastic.co/u/Lyro1)\
**Replies:** 3\
**Last updated:** [February 12, 2019, 8:29am UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-service-unknwon-setting-script-inline/167886 "2019-02-12T08:29:57Z")

</div>

Hello everyone, I wanted to use a service called TheHive, which rely on ElasticSearch. So I installed it on a Centos 7 computer, and it seems to be working well. But to use it with TheHive, the following settings are r…

---

## [How to concatenate contents of two string arrays with same number of elements](https://discuss.elastic.co/t/how-to-concatenate-contents-of-two-string-arrays-with-same-number-of-elements/256)

<div class="topic-metadata">

**Author:** [@markus](https://discuss.elastic.co/u/markus)\
**Replies:** 3\
**Last updated:** [May 6, 2015, 5:34pm UTC](https://discuss.elastic.co/t/how-to-concatenate-contents-of-two-string-arrays-with-same-number-of-elements/256 "2015-05-06T17:34:00Z")

</div>

Hi, I have to string arrays with the same number of elements. Is it possible to create a new string array (or overwrite one of the existing ones) containing the string concatentation of the elements from both arrays at t…

---

## [Disable geoip](https://discuss.elastic.co/t/disable-geoip/301297)

<div class="topic-metadata">

**Author:** [@Foggie](https://discuss.elastic.co/u/Foggie)\
**Replies:** 2\
**Last updated:** [April 1, 2022, 1:44pm UTC](https://discuss.elastic.co/t/disable-geoip/301297 "2022-04-01T13:44:37Z")

</div>

I am trying to deploy Elasticsearch 7.17.1 on a server behind a very strict firewall (basically no Internet access is allowed. The deployment is via a bat file (not Docker). The Elasticsearch.yml is virtually all comme…

---

## [Rollover alias \[xxxx\] can point to multiple indices, found duplicated alias \[\[xxxx\]\] in index template](https://discuss.elastic.co/t/rollover-alias-xxxx-can-point-to-multiple-indices-found-duplicated-alias-xxxx-in-index-template/324802)

<div class="topic-metadata">

**Author:** [@Eran\_Hadad](https://discuss.elastic.co/u/Eran_Hadad)\
**Replies:** 3\
**Last updated:** [February 12, 2023, 10:54am UTC](https://discuss.elastic.co/t/rollover-alias-xxxx-can-point-to-multiple-indices-found-duplicated-alias-xxxx-in-index-template/324802 "2023-02-12T10:54:14Z")

</div>

Hi everyone, I have a problem with rollover. I'm getting an error as described in the title: Rollover alias \[xxxx\] can point to multiple indices, found duplicated alias \[\[xxxx\]\] in index template The indice, for si…

---

## [Kibana dashboard URL with time filter](https://discuss.elastic.co/t/kibana-dashboard-url-with-time-filter/223541)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 4\
**Last updated:** [March 13, 2020, 6:27pm UTC](https://discuss.elastic.co/t/kibana-dashboard-url-with-time-filter/223541 "2020-03-13T18:27:16Z")

</div>

Hi, I want to generate a URL for a kibana dashboard that pre-loads a specific time range, I have the time in time format when event occured and i want to display 2h less and 2h plus that time Is there some way to gener…

---

## [Append new information to a field and turn it an array](https://discuss.elastic.co/t/append-new-information-to-a-field-and-turn-it-an-array/87856)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 2\
**Last updated:** [June 12, 2017, 3:00am UTC](https://discuss.elastic.co/t/append-new-information-to-a-field-and-turn-it-an-array/87856 "2017-06-12T03:00:09Z")

</div>

Is it possible to use logstash to send a list of information into a document's fields and turn it into an array? Example Index name: People Type: Eastern Document: Country1 Field: BadPeople Values: scammer can I use …

---

## [Siebel log monitoring through ELK stack](https://discuss.elastic.co/t/siebel-log-monitoring-through-elk-stack/49612)

<div class="topic-metadata">

**Author:** [@Bharath\_Paruchuri](https://discuss.elastic.co/u/Bharath_Paruchuri)\
**Replies:** 6\
**Last updated:** [May 31, 2016, 4:27pm UTC](https://discuss.elastic.co/t/siebel-log-monitoring-through-elk-stack/49612 "2016-05-31T16:27:11Z")

</div>

Hi All, Using ELK stack, we are monitoring all our Weblogic & SOA logs. Now we are planning to monitor SIEBEL logs using ELK stack. For every 5 mins, logs with format " /tmp/htimObjMgr\_enu\_0299\_\*.log " are generating…

---

## [I want to add a field with filename](https://discuss.elastic.co/t/i-want-to-add-a-field-with-filename/114049)

<div class="topic-metadata">

**Author:** [@Asier\_Saluena](https://discuss.elastic.co/u/Asier_Saluena)\
**Replies:** 7\
**Last updated:** [January 24, 2018, 7:53am UTC](https://discuss.elastic.co/t/i-want-to-add-a-field-with-filename/114049 "2018-01-24T07:53:06Z")

</div>

Hi you all, i'm starting a project with elk stack and we have few domains working on the same machine, which sends his apache logs to elk. I want to extract the filename to filter by this field on kibana. I'm trying so…

---

## [How can I safely move Elasticsearch indices to another mount in Linux?](https://discuss.elastic.co/t/how-can-i-safely-move-elasticsearch-indices-to-another-mount-in-linux/72979)

<div class="topic-metadata">

**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\
**Replies:** 7\
**Last updated:** [January 28, 2017, 3:56am UTC](https://discuss.elastic.co/t/how-can-i-safely-move-elasticsearch-indices-to-another-mount-in-linux/72979 "2017-01-28T03:56:36Z")

</div>

I'm having a number of indices which are actually causing some space issues at the moment in my Ubuntu machine. The indices keep growing on a daily basis. So I thought of moving it to another mount directory which has …

---

## [How can I make elastic search as light weight as possible?](https://discuss.elastic.co/t/how-can-i-make-elastic-search-as-light-weight-as-possible/189554)

<div class="topic-metadata">

**Author:** [@surlysmiles](https://discuss.elastic.co/u/surlysmiles)\
**Replies:** 3\
**Last updated:** [July 12, 2019, 12:57am UTC](https://discuss.elastic.co/t/how-can-i-make-elastic-search-as-light-weight-as-possible/189554 "2019-07-12T00:57:38Z")

</div>

I am trying to use elastic search in an electron desktop app that needs to index maybe 15mb of documents and search them. However since this would be running on a local user's computer I was wondering how can I make el…

---

## [Allocators lost connection to ZooKeeper](https://discuss.elastic.co/t/allocators-lost-connection-to-zookeeper/108535)

<div class="topic-metadata">

**Author:** [@Lafunamor](https://discuss.elastic.co/u/Lafunamor)\
**Replies:** 6\
**Last updated:** [November 23, 2017, 8:07am UTC](https://discuss.elastic.co/t/allocators-lost-connection-to-zookeeper/108535 "2017-11-23T08:07:48Z")

</div>

Hi Guys After increasing the RAM of all allocator nodes (this caused a sequential restart) they are no longer able to connect to ZooKeeper. Here are a couple of logs I found: services-forwarder.log \[2017-11-21 09:02:…

---

## [What Hardware do I need for 100 GB Per day data volume?](https://discuss.elastic.co/t/what-hardware-do-i-need-for-100-gb-per-day-data-volume/138397)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [July 5, 2018, 9:53am UTC](https://discuss.elastic.co/t/what-hardware-do-i-need-for-100-gb-per-day-data-volume/138397 "2018-07-05T09:53:42Z")

</div>

I am setting up a cluster and i have following scenario Data Volume 100GB per day (with 3 month retention ) Search scenarios (dashboards only mix, of analyze and not analyzed fields max 10 users) I am going to use 8 se…

---

## [Logstash 6.2.4 with x-pack tries to connect to ES on localhost when it's not configured to and ignores credentials for the real cluster](https://discuss.elastic.co/t/logstash-6-2-4-with-x-pack-tries-to-connect-to-es-on-localhost-when-its-not-configured-to-and-ignores-credentials-for-the-real-cluster/132850)

<div class="topic-metadata">

**Author:** [@Emily1](https://discuss.elastic.co/u/Emily1)\
**Replies:** 2\
**Last updated:** [June 1, 2018, 10:04pm UTC](https://discuss.elastic.co/t/logstash-6-2-4-with-x-pack-tries-to-connect-to-es-on-localhost-when-its-not-configured-to-and-ignores-credentials-for-the-real-cluster/132850 "2018-06-01T22:04:51Z")

</div>

Hi, I have been running an Elastic stack for over a year and was recently trying out X-Pack. When I added X-Pack, Logstash started trying to connect to ES on localhost even though my logstash instance is not configured…

---

## [Filter decode from Base64](https://discuss.elastic.co/t/filter-decode-from-base64/89282)

<div class="topic-metadata">

**Author:** [@Xavier\_Clavien](https://discuss.elastic.co/u/Xavier_Clavien)\
**Replies:** 3\
**Last updated:** [June 15, 2017, 5:28am UTC](https://discuss.elastic.co/t/filter-decode-from-base64/89282 "2017-06-15T05:28:39Z")

</div>

Hi I'm running Docker image sebp/elk with : -logstash: 5.4.0 -elasticsearch: Version: 5.4.0, Build: 780f8c4/2017-04-28T17:43:27.229Z, JVM: 1.8.0\_121 -kibana: 5.4.0 -ruby: jruby 1.7.25 (1.9.3p551) 2016-04-13 867cb8…

---

## [Search\_after but with paging](https://discuss.elastic.co/t/search-after-but-with-paging/319886)

<div class="topic-metadata">

**Author:** [@daniel77](https://discuss.elastic.co/u/daniel77)\
**Replies:** 5\
**Last updated:** [December 5, 2022, 10:55am UTC](https://discuss.elastic.co/t/search-after-but-with-paging/319886 "2022-12-05T10:55:04Z")

</div>

We know the from + size parameters in a search query are limited to 10000. In a search which returns 20k hits, and assuming each page is 1k results, it's impossible to retrieve any page beyond #10 (like page 11, from set…

---

## [Custom date histogram interval](https://discuss.elastic.co/t/custom-date-histogram-interval/18536)

<div class="topic-metadata">

**Author:** [@Gabe\_Gorelick\_Feldma](https://discuss.elastic.co/u/Gabe_Gorelick_Feldma)\
**Replies:** 6\
**Last updated:** [July 8, 2014, 9:57pm UTC](https://discuss.elastic.co/t/custom-date-histogram-interval/18536 "2014-07-08T21:57:10Z")

</div>

Is there any way to use a custom interval with date histograms (either facets or aggregations)? For example, something like { "date\_histogram": { "field": "date", "interval": "fiscalYear…

---

## [Html stripped highlighted text from html Content field](https://discuss.elastic.co/t/html-stripped-highlighted-text-from-html-content-field/7340)

<div class="topic-metadata">

**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\
**Replies:** 8\
**Last updated:** [December 20, 2013, 11:19am UTC](https://discuss.elastic.co/t/html-stripped-highlighted-text-from-html-content-field/7340 "2013-12-20T11:19:49Z")

</div>

Hi , I have a content field which is html. Is is possible to obtain the html stripped highlighted content ? Thanks Vineeth

---

## [Add Analyzer to existing fields in index](https://discuss.elastic.co/t/add-analyzer-to-existing-fields-in-index/78290)

<div class="topic-metadata">

**Author:** [@Adrian\_Abbassian](https://discuss.elastic.co/u/Adrian_Abbassian)\
**Replies:** 1\
**Last updated:** [March 12, 2017, 6:24pm UTC](https://discuss.elastic.co/t/add-analyzer-to-existing-fields-in-index/78290 "2017-03-12T18:24:17Z")

</div>

Im working with Meteor and MongoDB The index with all properties are set. Now i wanna add to every Property field the Analyzer example with one field (doesnt work, because the field "title" already exist) PUT easys…

---

## [Parsing csv file with dynamic headers/columns](https://discuss.elastic.co/t/parsing-csv-file-with-dynamic-headers-columns/85354)

<div class="topic-metadata">

**Author:** [@sirsyedian](https://discuss.elastic.co/u/sirsyedian)\
**Replies:** 6\
**Last updated:** [May 16, 2017, 9:23am UTC](https://discuss.elastic.co/t/parsing-csv-file-with-dynamic-headers-columns/85354 "2017-05-16T09:23:09Z")

</div>

Hi, I need to parse a csv file which contains some dynamic headers/Columns. (lets say) Header format-1: Column-1, Column-2, Collumn-3, X Header format-2: Column-1, Column-2, Collumn-3, Y These files are generated eve…

---

## [Case Insensitive Sort](https://discuss.elastic.co/t/case-insensitive-sort/8647)

<div class="topic-metadata">

**Author:** [@Michael\_Caplan](https://discuss.elastic.co/u/Michael_Caplan)\
**Replies:** 6\
**Last updated:** [April 1, 2015, 4:05pm UTC](https://discuss.elastic.co/t/case-insensitive-sort/8647 "2015-04-01T16:05:25Z")

</div>

Hello, I've been working through implementing a case insensitive sort on a string field. My initial problem was the inability to sort on an analysed field as discussed here: http://blog.wiercinski.net/2011/unc…

---

## [How can I calculate a metric ratio in Kibana?](https://discuss.elastic.co/t/how-can-i-calculate-a-metric-ratio-in-kibana/213371)

<div class="topic-metadata">

**Author:** [@talsantos](https://discuss.elastic.co/u/talsantos)\
**Replies:** 2\
**Last updated:** [December 31, 2019, 11:24am UTC](https://discuss.elastic.co/t/how-can-i-calculate-a-metric-ratio-in-kibana/213371 "2019-12-31T11:24:30Z")

</div>

I need to show a metric based on a ratio of other two metrics. Is there any way?

---

## [Netty4TcpChannel Negative longs unsupported - repeated in logs](https://discuss.elastic.co/t/netty4tcpchannel-negative-longs-unsupported-repeated-in-logs/219235)

<div class="topic-metadata">

**Author:** [@Fangy](https://discuss.elastic.co/u/Fangy)\
**Replies:** 7\
**Last updated:** [February 21, 2020, 2:05pm UTC](https://discuss.elastic.co/t/netty4tcpchannel-negative-longs-unsupported-repeated-in-logs/219235 "2020-02-21T14:05:42Z")

</div>

Hello, after cluster update to 7.6.0 I have these messages repeated in plain.log. \[2020-02-13T15:56:52,878\]\[WARN \]\[o.e.t.OutboundHandler \] \[ela3\] send message failed \[channel: Netty4TcpChannel{localAddress=/A.B.C.95:…

---

## [How to create hyperlink in Kibana Canvas data table](https://discuss.elastic.co/t/how-to-create-hyperlink-in-kibana-canvas-data-table/267583)

<div class="topic-metadata">

**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\
**Replies:** 8\
**Last updated:** [March 25, 2021, 7:45pm UTC](https://discuss.elastic.co/t/how-to-create-hyperlink-in-kibana-canvas-data-table/267583 "2021-03-25T19:45:16Z")

</div>

Hi, all. I am trying to create hyperlinks in Kibana's Canvas data table. I have already defined the fields with Url format in the Index Patterns page(some users suggested that the keyword version of the fields be define…

---

## [Date型のNULLが設定されたフィールドの検索方法について](https://discuss.elastic.co/t/date-null/93030)

<div class="topic-metadata">

**Author:** [@Skane](https://discuss.elastic.co/u/Skane)\
**Replies:** 2\
**Last updated:** [July 14, 2017, 2:16am UTC](https://discuss.elastic.co/t/date-null/93030 "2017-07-14T02:16:40Z")

</div>

お世話になっております "mappings" : { "default" : { "properties" : { "create\_date" : { "type" : "date", "format" : "yyyy-MM-dd HH:mm:ss" }, .... ↑の定義でmappingされたフィールドに、下記のようにnullが設定された場合、 "create\_date" : null この値が設定され…

---

## [FIlter by array? sort by number of items in array](https://discuss.elastic.co/t/filter-by-array-sort-by-number-of-items-in-array/97073)

<div class="topic-metadata">

**Author:** [@Andrey\_Kaprov](https://discuss.elastic.co/u/Andrey_Kaprov)\
**Replies:** 3\
**Last updated:** [August 18, 2017, 8:37pm UTC](https://discuss.elastic.co/t/filter-by-array-sort-by-number-of-items-in-array/97073 "2017-08-18T20:37:09Z")

</div>

HI all! There is one problem that I have met: When I use filters when querying the elasticsearch I need to sort result documents by count of querried filters. I.e. I have some documents with array field “category”: \[…

---

## [Invalid stemmer class specified: Cjk](https://discuss.elastic.co/t/invalid-stemmer-class-specified-cjk/118173)

<div class="topic-metadata">

**Author:** [@Palanikumark](https://discuss.elastic.co/u/Palanikumark)\
**Replies:** 7\
**Last updated:** [February 7, 2018, 4:44pm UTC](https://discuss.elastic.co/t/invalid-stemmer-class-specified-cjk/118173 "2018-02-07T16:44:35Z")

</div>

Describe the Bug: I configured Chinese store view in website using magento 2.1.7 EE and for catalog search im using Elastic search v 2.4.5. When triggering reindex documents are not getting generated in elastic search a…

[Previous page](https://discuss.elastic.co/top.md?page=472&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=474&per_page=50&period=all)
