# Top **URL:** https://discuss.elastic.co/top.md?page=482&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 483 --- ## [Issue with Elasticsearch Docker Deployment on Apple Silicon (M4 Processor, macOS 15.2)](https://discuss.elastic.co/t/issue-with-elasticsearch-docker-deployment-on-apple-silicon-m4-processor-macos-15-2/373214)
**Author:** [@deepflyz](https://discuss.elastic.co/u/deepflyz)\ **Replies:** 4\ **Last updated:** [January 22, 2025, 4:47am UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-docker-deployment-on-apple-silicon-m4-processor-macos-15-2/373214 "2025-01-22T04:47:31Z")
There is a current issue with deploying Elasticsearch via Docker on Mac computers equipped with Apple silicon (M4 processor) and running macOS 15.2. Here is the error log: 2025-01-15 11:55:22 # 2025-01-15 11:55:22 # A … --- ## [Illegal\_argument\_exception](https://discuss.elastic.co/t/illegal-argument-exception/253827)
**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 2:43pm UTC](https://discuss.elastic.co/t/illegal-argument-exception/253827 "2020-10-30T14:43:09Z")
Hi, I had created index and constructed Visualization every thing was working perfectly. But today when I search in kibana, I got a popup saying that 1 of 33 shards failed, with below exception Text fields are not opt… --- ## [Kibana docker image fails to run with FATAL "xpack.monitoring.ui.container.elasticsearch.enabled" setting was not applied error](https://discuss.elastic.co/t/kibana-docker-image-fails-to-run-with-fatal-xpack-monitoring-ui-container-elasticsearch-enabled-setting-was-not-applied-error/150309)
**Author:** [@shreyas\_sangai](https://discuss.elastic.co/u/shreyas_sangai)\ **Replies:** 3\ **Last updated:** [October 3, 2018, 12:09pm UTC](https://discuss.elastic.co/t/kibana-docker-image-fails-to-run-with-fatal-xpack-monitoring-ui-container-elasticsearch-enabled-setting-was-not-applied-error/150309 "2018-10-03T12:09:03Z")
I am trying to run the docker image : docker.elastic.co/kibana/kibana:6.2.4 Command used to run : docker run -d -e "xpack.monitoring.enabled=false" -e "xpack.monitoring.ui.container.elasticsearch.enabled=false" --name … --- ## [Modifying values displayed in tooltip in Kibana Visualization](https://discuss.elastic.co/t/modifying-values-displayed-in-tooltip-in-kibana-visualization/41155)
**Author:** [@gupta.yuvraj](https://discuss.elastic.co/u/gupta.yuvraj)\ **Replies:** 3\ **Last updated:** [June 30, 2016, 10:41am UTC](https://discuss.elastic.co/t/modifying-values-displayed-in-tooltip-in-kibana-visualization/41155 "2016-06-30T10:41:06Z")
Problem Statement:- In Bar Chart Visualization, if I have set Y axis as Count. X-Axis is set as @timestamp & Split Bars is set as Top 5 terms of a field. When I hover the mouse it shows me 3 values in tooltip:- Count, Ti… --- ## [Change template and ILM policy from an existing Datastream](https://discuss.elastic.co/t/change-template-and-ilm-policy-from-an-existing-datastream/296608)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 8\ **Last updated:** [February 16, 2022, 9:56am UTC](https://discuss.elastic.co/t/change-template-and-ilm-policy-from-an-existing-datastream/296608 "2022-02-16T09:56:38Z")
Hey! In our Elasticsearch we use Datastreams which split our data to several streams like bellow. So all the Datastreams have the same template and ILM policy. Since one of them has increased a lot I want to apply diff… --- ## [Field type for decimal values such as 20.5, 10,3 etc?](https://discuss.elastic.co/t/field-type-for-decimal-values-such-as-20-5-10-3-etc/182139)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 3\ **Last updated:** [May 28, 2019, 1:41pm UTC](https://discuss.elastic.co/t/field-type-for-decimal-values-such-as-20-5-10-3-etc/182139 "2019-05-28T13:41:22Z")
Hi, What is the best field type to use numerical values such as 20.5, 10,3? For some reason I mapped them as half-float long ago but now I sometimes get values such as 20.5123. At the time this was fine as I used Kibana… --- ## [SSL Cert with own CA for Https-Use](https://discuss.elastic.co/t/ssl-cert-with-own-ca-for-https-use/154787)
**Author:** [@dauwitsch](https://discuss.elastic.co/u/dauwitsch)\ **Replies:** 3\ **Last updated:** [October 31, 2018, 12:17pm UTC](https://discuss.elastic.co/t/ssl-cert-with-own-ca-for-https-use/154787 "2018-10-31T12:17:04Z")
Hey there, i try to use ssl for kibana to request it over https via webbrowser. My company wants to use a selfsigned certificate for this and wants also to use its own Certification Authority (CA). I did the following… --- ## [Synonym Problem](https://discuss.elastic.co/t/synonym-problem/74695)
**Author:** [@RobBob](https://discuss.elastic.co/u/RobBob)\ **Replies:** 8\ **Last updated:** [February 14, 2017, 5:20pm UTC](https://discuss.elastic.co/t/synonym-problem/74695 "2017-02-14T17:20:01Z")
Hello, I am running into an issue with a synonym pair I have set up. I have the synonyms, "bar,pub" and while returning results from about 3000 different categories one of the two will not appear given a direct search … --- ## [Can't access Kibana after reload, and enabled & started kibana service. HTTP 302 Error](https://discuss.elastic.co/t/cant-access-kibana-after-reload-and-enabled-started-kibana-service-http-302-error/216462)
**Author:** [@kel](https://discuss.elastic.co/u/kel)\ **Replies:** 4\ **Last updated:** [January 27, 2020, 2:28pm UTC](https://discuss.elastic.co/t/cant-access-kibana-after-reload-and-enabled-started-kibana-service-http-302-error/216462 "2020-01-27T14:28:46Z")
Hi there, I installed elasticSearch (7.4.1) on Ubuntu 18.04.1 server in Virtualbox, and it is working fine. I could create mapping, indexes, and use all the cmds(XPUT, XPOST, XGET ...). After installing Kibana(7.5.2) i… --- ## [How to log only error message from logstash container](https://discuss.elastic.co/t/how-to-log-only-error-message-from-logstash-container/149478)
**Author:** [@netvmdb](https://discuss.elastic.co/u/netvmdb)\ **Replies:** 5\ **Last updated:** [September 23, 2018, 11:14pm UTC](https://discuss.elastic.co/t/how-to-log-only-error-message-from-logstash-container/149478 "2018-09-23T23:14:43Z")
I am running logstash 6.2.4 as docker container. Use default log4j2.properties setting comes with container. But on the host, I am seeing every parsed field in the container log file /var/lib/docker/containers//-json.log… --- ## [Maximum number of disks/storage size per data node](https://discuss.elastic.co/t/maximum-number-of-disks-storage-size-per-data-node/130940)
**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\ **Replies:** 1\ **Last updated:** [May 8, 2018, 6:53am UTC](https://discuss.elastic.co/t/maximum-number-of-disks-storage-size-per-data-node/130940 "2018-05-08T06:53:03Z")
I was wondering what the maximum recommended disk size/number of disks are per each data node. What would be the consequences of using big data nodes (24TB+) on a heavy indexing cluster? --- ## [\[SOLVED\] High Network Traffic on Master Nodes after change from Transport Client to REST Client (ElasticSearch 6.8)](https://discuss.elastic.co/t/solved-high-network-traffic-on-master-nodes-after-change-from-transport-client-to-rest-client-elasticsearch-6-8/247209)
**Author:** [@gotenks82](https://discuss.elastic.co/u/gotenks82)\ **Replies:** 2\ **Last updated:** [September 2, 2020, 10:21pm UTC](https://discuss.elastic.co/t/solved-high-network-traffic-on-master-nodes-after-change-from-transport-client-to-rest-client-elasticsearch-6-8/247209 "2020-09-02T22:21:09Z")
Hi Everyone! We are trying to migrate from the transport client to the high level rest client in our application, but we noticed a strange network load on the master node. Here's our setup: ElasticSearch 6.8 OSS (no x… --- ## [Failed to find metadata for existing index](https://discuss.elastic.co/t/failed-to-find-metadata-for-existing-index/179190)
**Author:** [@sinoohe](https://discuss.elastic.co/u/sinoohe)\ **Replies:** 3\ **Last updated:** [May 2, 2019, 7:52am UTC](https://discuss.elastic.co/t/failed-to-find-metadata-for-existing-index/179190 "2019-05-02T07:52:08Z")
I'm having problem on starting elasticsearch I removed a folder by mistake in elasticsearch data folder(/usr/share/elasticsearch/data/nodes/0) and unfortunately it does not start again!! it throws exception. How can I … --- ## [Script condition and ctx.vars](https://discuss.elastic.co/t/script-condition-and-ctx-vars/37701)
**Author:** [@mcku](https://discuss.elastic.co/u/mcku)\ **Replies:** 5\ **Last updated:** [December 28, 2015, 5:23pm UTC](https://discuss.elastic.co/t/script-condition-and-ctx-vars/37701 "2015-12-28T17:23:45Z")
Hello All, ES 2.1.1. I am keeping some state info in ctx.vars, set in a transform. Then check for some conditions in ctx.vars, apparently can't be accessed within condition script, but can be accessed within actions… --- ## [Splitting greedydata](https://discuss.elastic.co/t/splitting-greedydata/78408)
**Author:** [@Alex\_Mendez](https://discuss.elastic.co/u/Alex_Mendez)\ **Replies:** 6\ **Last updated:** [April 5, 2017, 6:18pm UTC](https://discuss.elastic.co/t/splitting-greedydata/78408 "2017-04-05T18:18:28Z")
Greetings, I'd like to know if its possible to split the message in GREEDYDATA further into searchable data. Example line in log stash grok { match =\> \[ "message", "%{SYSLOGTIMESTAMP:syslog\_timestamp} %{HO… --- ## [JSON technically allows for duplicate keys - do Elasticsearch documents?](https://discuss.elastic.co/t/json-technically-allows-for-duplicate-keys-do-elasticsearch-documents/118526)
**Author:** [@Chris\_Fraschetti](https://discuss.elastic.co/u/Chris_Fraschetti)\ **Replies:** 3\ **Last updated:** [February 5, 2018, 10:35pm UTC](https://discuss.elastic.co/t/json-technically-allows-for-duplicate-keys-do-elasticsearch-documents/118526 "2018-02-05T22:35:35Z")
I'm looking for an official answer with regards to whether or not this is supported functionality as opposed to "well.. it seems to work that way.. for now" A quick example: { "make" : "Ford", "make" : "Totoya", "ma… --- ## [Data table don't display field data when a previous aggregation bucket field is empty](https://discuss.elastic.co/t/data-table-dont-display-field-data-when-a-previous-aggregation-bucket-field-is-empty/105932)
**Author:** [@jpertejo](https://discuss.elastic.co/u/jpertejo)\ **Replies:** 4\ **Last updated:** [November 8, 2017, 4:29pm UTC](https://discuss.elastic.co/t/data-table-dont-display-field-data-when-a-previous-aggregation-bucket-field-is-empty/105932 "2017-11-08T16:29:40Z")
I have created a data table with several fields as aggregation buckets (e.g. "flow", "view" and "event" fields). Some of these fields are not informed in some documents (e.g. "view" event is not always informed), so I ha… --- ## [HIPAA Compliant Elasticsearch](https://discuss.elastic.co/t/hipaa-compliant-elasticsearch/25678)
**Author:** [@James\_Wu](https://discuss.elastic.co/u/James_Wu)\ **Replies:** 4\ **Last updated:** [July 16, 2015, 9:05pm UTC](https://discuss.elastic.co/t/hipaa-compliant-elasticsearch/25678 "2015-07-16T21:05:26Z")
Will using nginx as a reverse proxy be enough to ensure that node to node communication is encrypted? If so, then why would Add SSL support to Netty transport layer for Client/Node-to-Node communication by tlrx · Pull R… --- ## [ECK - Xpack settings - Forbidden: Configuration setting is reserved for internal use](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 6\ **Last updated:** [June 12, 2020, 12:03pm UTC](https://discuss.elastic.co/t/eck-xpack-settings-forbidden-configuration-setting-is-reserved-for-internal-use/236673 "2020-06-12T12:03:21Z")
Hi Team, i would like to disable following xpack fields, but when i am applying the CR i can see it is forbidden by my operator, how can i overwrite the permissions of operator to run the elastic search with following s… --- ## [Kibana not showing last logstah](https://discuss.elastic.co/t/kibana-not-showing-last-logstah/31695)
**Author:** [@backend\_bike](https://discuss.elastic.co/u/backend_bike)\ **Replies:** 8\ **Last updated:** [October 8, 2015, 8:11am UTC](https://discuss.elastic.co/t/kibana-not-showing-last-logstah/31695 "2015-10-08T08:11:04Z")
as of 00h00m of today, my kibana installation (4.1.2) is not showing today's logstash logs despite showing all logs of previous ones. I have forced a new index for today logstash but its still not working. From what i h… --- ## [Multi input, multi output and aggregate filter](https://discuss.elastic.co/t/multi-input-multi-output-and-aggregate-filter/98549)
**Author:** [@M4nd76](https://discuss.elastic.co/u/M4nd76)\ **Replies:** 0\ **Last updated:** [August 28, 2017, 11:00am UTC](https://discuss.elastic.co/t/multi-input-multi-output-and-aggregate-filter/98549 "2017-08-28T11:00:06Z")
Hello, I’m trying to configure an instance of Logstash to read into 3 differents databases and to output, for each database, into a specific ElasticSearch index (one database \<-\> one index). For each databases, the str… --- ## [Implementing Suggestion Completion with multiple words](https://discuss.elastic.co/t/implementing-suggestion-completion-with-multiple-words/36681)
**Author:** [@lacollam](https://discuss.elastic.co/u/lacollam)\ **Replies:** 0\ **Last updated:** [December 8, 2015, 11:41pm UTC](https://discuss.elastic.co/t/implementing-suggestion-completion-with-multiple-words/36681 "2015-12-08T23:41:19Z")
I am using the suggestion api within ES with completion. My implementation works (code below) but I would like to search for multiple words within a query. In the example below if I query search "word" it finds "wordpres… --- ## [Generic watch, specific alerts, duplicate alerting?](https://discuss.elastic.co/t/generic-watch-specific-alerts-duplicate-alerting/51610)
**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\ **Replies:** 6\ **Last updated:** [June 7, 2016, 6:55am UTC](https://discuss.elastic.co/t/generic-watch-specific-alerts-duplicate-alerting/51610 "2016-06-07T06:55:39Z")
Imagine that I have 100 machines to monitor and that each machine is named by its number (i.e. the first machine is named ("1"). Imagine that I wish to alert if the disk usage is over 90% on any of the machines. Imagine … --- ## [Elasticsearch VM in VirtualBox Freezes after 15-30 minutes?](https://discuss.elastic.co/t/elasticsearch-vm-in-virtualbox-freezes-after-15-30-minutes/54089)
**Author:** [@blcarlson](https://discuss.elastic.co/u/blcarlson)\ **Replies:** 8\ **Last updated:** [August 4, 2016, 11:22pm UTC](https://discuss.elastic.co/t/elasticsearch-vm-in-virtualbox-freezes-after-15-30-minutes/54089 "2016-08-04T23:22:28Z")
I haven't been able to successfully troubleshoot why after 15-30 minutes one of my three VMs freezes and requires a restart. Eventually, a second VM will freeze if I wait after the first freezes. I haven't noticed anyt… --- ## [REST Endpoint in Kibana for new dashboards](https://discuss.elastic.co/t/rest-endpoint-in-kibana-for-new-dashboards/55233)
**Author:** [@Sivakumar\_Sivaraman](https://discuss.elastic.co/u/Sivakumar_Sivaraman)\ **Replies:** 1\ **Last updated:** [July 11, 2016, 9:07pm UTC](https://discuss.elastic.co/t/rest-endpoint-in-kibana-for-new-dashboards/55233 "2016-07-11T21:07:36Z")
Hi, I am new to kibana and ELS. I have been working on migrating graphs from production env to many other env. I can create visualizations on the fly using GET and POST calls using the rest api - http://server:port/ela… --- ## [Query and Index use question](https://discuss.elastic.co/t/query-and-index-use-question/379963)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [July 10, 2025, 2:08pm UTC](https://discuss.elastic.co/t/query-and-index-use-question/379963 "2025-07-10T14:08:15Z")
If I have a index like below index-2022 index-2023 index-2024 index-2025 dataview is "index-\*" ( @timestamp is date field) if I run a query with index-\* and @timestamp \> now() - interval 30 day will it hit all the… --- ## [Локализация Кибаны](https://discuss.elastic.co/t/topic/228160)
**Author:** [@Vlad\_Piratov](https://discuss.elastic.co/u/Vlad_Piratov)\ **Replies:** 7\ **Last updated:** [April 24, 2020, 12:18pm UTC](https://discuss.elastic.co/t/topic/228160 "2020-04-24T12:18:21Z")
Друзья, кто-нибудь сталкивался с локализацией этой системы? Хотя бы частично.. Очень нужны какие-нибудь мануалы. А то мне индусы пишут, что только под китайский есть частичный перевод. Ответ индусов --- ## [Issue with Shingles and Stopwords](https://discuss.elastic.co/t/issue-with-shingles-and-stopwords/155525)
**Author:** [@khmcnally](https://discuss.elastic.co/u/khmcnally)\ **Replies:** 1\ **Last updated:** [November 21, 2018, 8:58am UTC](https://discuss.elastic.co/t/issue-with-shingles-and-stopwords/155525 "2018-11-21T08:58:51Z")
Hi there, I have an issue with getting shingles and stopwords to play nicely. I seem to duplicate tokens all over the place. Here's my analyzer: "analysis": { "filter": { "filter\_shingle": { … --- ## [How to reset elasticsearch security back to the original state](https://discuss.elastic.co/t/how-to-reset-elasticsearch-security-back-to-the-original-state/182970)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 1:26am UTC](https://discuss.elastic.co/t/how-to-reset-elasticsearch-security-back-to-the-original-state/182970 "2019-05-28T01:26:06Z")
Hello, I was playing around with xpack security feature and now nothing seam to work. Is there a way that I can revert back to the original state and start it over? Regards, Peter --- ## [Graph query across multiple documents](https://discuss.elastic.co/t/graph-query-across-multiple-documents/49185)
**Author:** [@Alessandro\_Negro](https://discuss.elastic.co/u/Alessandro_Negro)\ **Replies:** 8\ **Last updated:** [August 24, 2016, 7:27pm UTC](https://discuss.elastic.co/t/graph-query-across-multiple-documents/49185 "2016-08-24T19:27:44Z")
Hi, I'm trying to figure out how I can perform the following case study: I have the Movielens databaset where I have an entry for each rating and in the same way I'm storing data into the elasticsearch. I have a docume… --- ## [Change default installation path](https://discuss.elastic.co/t/change-default-installation-path/133685)
**Author:** [@keeshqs](https://discuss.elastic.co/u/keeshqs)\ **Replies:** 1\ **Last updated:** [May 30, 2018, 1:34am UTC](https://discuss.elastic.co/t/change-default-installation-path/133685 "2018-05-30T01:34:45Z")
Hi All, I have installed ELK application using the .rpm installer - by default, the home directory goes to /usr/share (which is a directory under our /root filesystem). We have allocated a separate filesystem for elasti… --- ## [Bulk insert to Elastic from Logstash "bulk\_path"](https://discuss.elastic.co/t/bulk-insert-to-elastic-from-logstash-bulk-path/196352)
**Author:** [@baselai](https://discuss.elastic.co/u/baselai)\ **Replies:** 5\ **Last updated:** [August 22, 2019, 7:42pm UTC](https://discuss.elastic.co/t/bulk-insert-to-elastic-from-logstash-bulk-path/196352 "2019-08-22T19:42:12Z")
I have a huge csv file, like 500k rows, that I'm processing and want to push to elastic This output: elasticsearch { index =\> "%{pipelineId}" hosts =\> \["${domain:port}/"\] } outputs one document at … --- ## [Best way to create time-series index in Elasticsearch?](https://discuss.elastic.co/t/best-way-to-create-time-series-index-in-elasticsearch/60031)
**Author:** [@mithril](https://discuss.elastic.co/u/mithril)\ **Replies:** 2\ **Last updated:** [September 8, 2016, 7:24am UTC](https://discuss.elastic.co/t/best-way-to-create-time-series-index-in-elasticsearch/60031 "2016-09-08T07:24:03Z")
I have a news gather system(time base searching), which could fit time series index very well. But I wonder what is the best way to create time-series index. Offcial doc only suggest to using it without how. There … --- ## [Understanding cross\_fields and "AND" operator](https://discuss.elastic.co/t/understanding-cross-fields-and-and-operator/53917)
**Author:** [@midget2000x](https://discuss.elastic.co/u/midget2000x)\ **Replies:** 2\ **Last updated:** [June 28, 2017, 2:39pm UTC](https://discuss.elastic.co/t/understanding-cross-fields-and-and-operator/53917 "2017-06-28T14:39:00Z")
I'm honing on a default search query for a client's commerce site. It's looking like a cross\_fields multi\_match with "AND" operator is producing the most relevant results (at least to me, in testing). However, I am tr… --- ## [Validation\_exception: Validation Failed: 1: this action would add \[2\] total shards, but this cluster currently has \[2000\]/\[2000\] maximum shards open;](https://discuss.elastic.co/t/validation-exception-validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2000-2000-maximum-shards-open/283462)
**Author:** [@Danilo\_Camargo](https://discuss.elastic.co/u/Danilo_Camargo)\ **Replies:** 7\ **Last updated:** [September 7, 2021, 11:53pm UTC](https://discuss.elastic.co/t/validation-exception-validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2000-2000-maximum-shards-open/283462 "2021-09-07T23:53:23Z")
Hi everyone. I know this is a similar topic to others, but so far it seems odd to me still. I have the message above on my instance, however when I query for \_cluster/stats I have this: "cluster\_name" : "docker-cluster"… --- ## [SSL error when writing output of mapeduce to elasticsearch](https://discuss.elastic.co/t/ssl-error-when-writing-output-of-mapeduce-to-elasticsearch/34570)
**Author:** [@srikrishna.alla](https://discuss.elastic.co/u/srikrishna.alla)\ **Replies:** 5\ **Last updated:** [June 27, 2017, 9:50am UTC](https://discuss.elastic.co/t/ssl-error-when-writing-output-of-mapeduce-to-elasticsearch/34570 "2017-06-27T09:50:23Z")
I am getting below mentioned error when running Mapreduce with output written to Elasticsearch. Please let me know what I am doing wrong. Elasticsearch version: 2.0.0 elasticsearch-hadoop-mr: 2.2.0-beta1 Shield & marve… --- ## [Visualization for Automation Test Reporting](https://discuss.elastic.co/t/visualization-for-automation-test-reporting/181074)
**Author:** [@drunningen](https://discuss.elastic.co/u/drunningen)\ **Replies:** 8\ **Last updated:** [May 17, 2019, 3:09pm UTC](https://discuss.elastic.co/t/visualization-for-automation-test-reporting/181074 "2019-05-17T15:09:51Z")
Hello, My team and I are very new to Kibana and elasticsearch, but we started using them for error reporting as well as automated test reporting. What I'm having trouble with is getting a chart that accurately represen… --- ## [CPU Core binding on Elastissearch](https://discuss.elastic.co/t/cpu-core-binding-on-elastissearch/144308)
**Author:** [@amit.patra](https://discuss.elastic.co/u/amit.patra)\ **Replies:** 4\ **Last updated:** [August 14, 2018, 11:43am UTC](https://discuss.elastic.co/t/cpu-core-binding-on-elastissearch/144308 "2018-08-14T11:43:31Z")
We have single node server with 256 GB RAM and 32 core processor. We are running elasticsearch , logstash and kibana. We want to bind the no of cores (example 8) for elasticsearch process only. Is there any configurati… --- ## [Metricbeat Windows fails to start on reboot - timeout](https://discuss.elastic.co/t/metricbeat-windows-fails-to-start-on-reboot-timeout/84973)
**Author:** [@locguero](https://discuss.elastic.co/u/locguero)\ **Replies:** 7\ **Last updated:** [May 16, 2017, 4:32pm UTC](https://discuss.elastic.co/t/metricbeat-windows-fails-to-start-on-reboot-timeout/84973 "2017-05-16T16:32:38Z")
We are running Windows Server 2012 R2 running Metricbeat 5.3.1 and have even tried 5.4.0. I am able to start up the service manually via services manager (services.msc). I have the service set to automatic start but fo… --- ## [Elasticsearch logs are getting piled up in /var/log/elasticsearch path. How to cater to this problem?](https://discuss.elastic.co/t/elasticsearch-logs-are-getting-piled-up-in-var-log-elasticsearch-path-how-to-cater-to-this-problem/186039)
**Author:** [@Sujata\_Yadav](https://discuss.elastic.co/u/Sujata_Yadav)\ **Replies:** 3\ **Last updated:** [June 17, 2019, 12:11pm UTC](https://discuss.elastic.co/t/elasticsearch-logs-are-getting-piled-up-in-var-log-elasticsearch-path-how-to-cater-to-this-problem/186039 "2019-06-17T12:11:42Z")
Hi, I am using elasticsearch to analyze my jenkins console data. I have observed that the /var/log/elasticsearch directory is piled up with elasticsearch-2019-XX-YY-1.log.gz logs. Where XX-month, YY-Day. Can you pleas… --- ## [Global field gsub filter?](https://discuss.elastic.co/t/global-field-gsub-filter/83243)
**Author:** [@\_Ian](https://discuss.elastic.co/u/_Ian)\ **Replies:** 6\ **Last updated:** [April 24, 2017, 6:52pm UTC](https://discuss.elastic.co/t/global-field-gsub-filter/83243 "2017-04-24T18:52:58Z")
Is there a way to apply a gsub action to every field during filtering? I'm currently using dissect to split apart a message and want to do a more global replace of a null character to an actual null ES is happy with. C… --- ## [Elastic search, multiple indexes vs one index](https://discuss.elastic.co/t/elastic-search-multiple-indexes-vs-one-index/26080)
**Author:** [@Aditya\_Patel](https://discuss.elastic.co/u/Aditya_Patel)\ **Replies:** 6\ **Last updated:** [July 23, 2015, 11:17am UTC](https://discuss.elastic.co/t/elastic-search-multiple-indexes-vs-one-index/26080 "2015-07-23T11:17:15Z")
Hi Everybody, I am trying to use Elasticsearch to store objects which all have similar fields and some field values are same in various objects. I have location specific data with me. For ex. For a lot of objects a lo… --- ## [Es crashes with "Native controller process has stopped - no new native processes can be started"](https://discuss.elastic.co/t/es-crashes-with-native-controller-process-has-stopped-no-new-native-processes-can-be-started/143870)
**Author:** [@Andrea\_Boccaforno](https://discuss.elastic.co/u/Andrea_Boccaforno)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 3:38pm UTC](https://discuss.elastic.co/t/es-crashes-with-native-controller-process-has-stopped-no-new-native-processes-can-be-started/143870 "2018-08-13T15:38:05Z")
Hello everyone, when I run the ./bin/elasticsearch command I get the following logs: \[...........\] \[2018-08-10T08:14:57,579\]\[INFO \]\[o.e.p.PluginsService \] \[ZGgC7Hb\] loaded module \[aggs-matrix-stats\] \[2018-08-10T0… --- ## [How to run filebeat without Kibana?](https://discuss.elastic.co/t/how-to-run-filebeat-without-kibana/139087)
**Author:** [@Wahyu](https://discuss.elastic.co/u/Wahyu)\ **Replies:** 6\ **Last updated:** [July 11, 2018, 2:45am UTC](https://discuss.elastic.co/t/how-to-run-filebeat-without-kibana/139087 "2018-07-11T02:45:36Z")
Hello Dear, I would like to run filebeat. But it always asks Kibana. Could i run filebeat setup without Kibana ? This is the error. --- ## [Filebeat encryption error](https://discuss.elastic.co/t/filebeat-encryption-error/243227)
**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\ **Replies:** 4\ **Last updated:** [July 30, 2020, 4:32pm UTC](https://discuss.elastic.co/t/filebeat-encryption-error/243227 "2020-07-30T16:32:32Z")
I'm trying to get filebeat to send encrypted data to logstash. In filebeat.yml, this is my output.logstash: output.logstash: hosts: \["91.242.11.220:5044"\] # Not the real IP ssl.enabled: true ssl.certificate\_autho… --- ## [java.lang.IllegalArgumentException: Invalid format - date problem](https://discuss.elastic.co/t/java-lang-illegalargumentexception-invalid-format-date-problem/110833)
**Author:** [@rromanovic](https://discuss.elastic.co/u/rromanovic)\ **Replies:** 1\ **Last updated:** [December 12, 2017, 4:07pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-invalid-format-date-problem/110833 "2017-12-12T16:07:09Z")
Hi, I'm having problems with storing date in "yyyy-MM-dd HH:mm:ss,SSS" format in index. The format I'm reading from log file is "yyyy-MM-dd HH:mm:ss.SSSS", for example "2017-10-31 05:00:00.4216". First, I'm creating f… --- ## [Unable to find analyzers](https://discuss.elastic.co/t/unable-to-find-analyzers/31649)
**Author:** [@Ben\_M](https://discuss.elastic.co/u/Ben_M)\ **Replies:** 5\ **Last updated:** [October 6, 2015, 8:37am UTC](https://discuss.elastic.co/t/unable-to-find-analyzers/31649 "2015-10-06T08:37:24Z")
I don't appear to have the ability to add analyzers. I'm attempting the Spanish analyzer example from the ES website. My settings are as follows: "settings" : { "index" : { "creation\_date" : "14… --- ## [Couldn't create report for search](https://discuss.elastic.co/t/couldnt-create-report-for-search/164486)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [January 16, 2019, 6:34pm UTC](https://discuss.elastic.co/t/couldnt-create-report-for-search/164486 "2019-01-16T18:34:55Z")
Hello, I followed X-Pack reporting settings in Kibana | Kibana User Guide \[6.5\] | Elastic, yet while trying to generate report, I get following message: "Couldn't create report for search 'test'" Error: Failed to dec… --- ## [5.6.8 java.lang.OutOfMemoryError after 6-10 days](https://discuss.elastic.co/t/5-6-8-java-lang-outofmemoryerror-after-6-10-days/124265)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 7\ **Last updated:** [March 23, 2018, 10:37am UTC](https://discuss.elastic.co/t/5-6-8-java-lang-outofmemoryerror-after-6-10-days/124265 "2018-03-23T10:37:48Z")
Since we patched from 5.6.5 to 5.6.8 we're seeing logstash memory leakage so it'll now run out of memory after 6-10 days, nothing changed in our filters etc. So assuming there's a leak somewhere maybe. Before memory usag… --- ## [Default Mapping + Ignore malformed](https://discuss.elastic.co/t/default-mapping-ignore-malformed/59013)
**Author:** [@Daniel\_Tebernum](https://discuss.elastic.co/u/Daniel_Tebernum)\ **Replies:** 3\ **Last updated:** [August 26, 2016, 3:30pm UTC](https://discuss.elastic.co/t/default-mapping-ignore-malformed/59013 "2016-08-26T15:30:58Z")
Hello! I have a problem with my mapping. I get a lot of JSON log files and I can not tell what data type the fields will have. So if my first log has a field content: \<\\> and my next log has maybe this content: \<\