# Top **URL:** https://discuss.elastic.co/top.md?page=515&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 516 --- ## [Is it possible to balance shard with size in consideration?](https://discuss.elastic.co/t/is-it-possible-to-balance-shard-with-size-in-consideration/214296)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 7\ **Last updated:** [January 9, 2020, 10:07pm UTC](https://discuss.elastic.co/t/is-it-possible-to-balance-shard-with-size-in-consideration/214296 "2020-01-09T22:07:46Z")
Is this possible? I know the default is simply shard count, which is important. But not all shards have the same size. Is it possible to configure size as a secondary consideration? Meaning pick a larger (or smaller)… --- ## [Quickstart Example (v0.8) SSL error](https://discuss.elastic.co/t/quickstart-example-v0-8-ssl-error/183992)
**Author:** [@MooseyMersa](https://discuss.elastic.co/u/MooseyMersa)\ **Replies:** 7\ **Last updated:** [October 22, 2019, 8:48am UTC](https://discuss.elastic.co/t/quickstart-example-v0-8-ssl-error/183992 "2019-10-22T08:48:22Z")
Hi, I've followed the guide https://www.elastic.co/guide/en/cloud-on-k8s/current/index.html and deployed the items described, everything seems to have been correctly created. However when the Elasticsearch logs are insp… --- ## [How to customize plugin-security.policy for custom realm](https://discuss.elastic.co/t/how-to-customize-plugin-security-policy-for-custom-realm/71570)
**Author:** [@kldavis4](https://discuss.elastic.co/u/kldavis4)\ **Replies:** 6\ **Last updated:** [January 17, 2017, 4:53pm UTC](https://discuss.elastic.co/t/how-to-customize-plugin-security-policy-for-custom-realm/71570 "2017-01-17T16:53:22Z")
I have a custom realm that uses OkHttpClient. When it is instantiated, it calls ProxySelector.getDefault() which requires 'permission java.net.NetPermission "getProxySelector"'. This is not granted to x-pack, so it break… --- ## [Logstash not receiving server logs](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858)
**Author:** [@karthick](https://discuss.elastic.co/u/karthick)\ **Replies:** 5\ **Last updated:** [August 5, 2015, 9:39am UTC](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858 "2015-08-05T09:39:59Z")
Hi Am trying to config logstash server for my application server. I am not able to see the logs in the logstash. I need some ones help to check this configuration. --- ## [Under what circumstances can log4j be used to exploit Logstash?](https://discuss.elastic.co/t/under-what-circumstances-can-log4j-be-used-to-exploit-logstash/291886)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 8\ **Last updated:** [December 29, 2021, 9:54pm UTC](https://discuss.elastic.co/t/under-what-circumstances-can-log4j-be-used-to-exploit-logstash/291886 "2021-12-29T21:54:13Z")
Hi, Under what circumstances can the log4j bug be exploited in Logstash? Is it as simple as sending the exploit string an open port Logstash is listening on regardless of whatever input is configured in your Logstash co… --- ## [Nested inner\_hits slows query performance](https://discuss.elastic.co/t/nested-inner-hits-slows-query-performance/146024)
**Author:** [@jcornez](https://discuss.elastic.co/u/jcornez)\ **Replies:** 2\ **Last updated:** [September 21, 2018, 1:53pm UTC](https://discuss.elastic.co/t/nested-inner-hits-slows-query-performance/146024 "2018-09-21T13:53:11Z")
I have a query that is very fast (sub-second) without any inner\_hits, but takes 20 - 30 seconds with inner\_hits returned. Here is the query { "from": 0, "size": 2500, "terminate\_after": 2500, "query": { "constant… --- ## [Capturing group inside a custom grok pattern](https://discuss.elastic.co/t/capturing-group-inside-a-custom-grok-pattern/163384)
**Author:** [@agosmaker](https://discuss.elastic.co/u/agosmaker)\ **Replies:** 3\ **Last updated:** [January 17, 2019, 5:56pm UTC](https://discuss.elastic.co/t/capturing-group-inside-a-custom-grok-pattern/163384 "2019-01-17T17:56:02Z")
Hello, Let's imagine we have string some text aaabbbccc another text We want to extract bbb. we can use "embedded" regex (https://www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html Custom Patterns "… --- ## [Kibana doesnt work](https://discuss.elastic.co/t/kibana-doesnt-work/63187)
**Author:** [@rpoveda](https://discuss.elastic.co/u/rpoveda)\ **Replies:** 8\ **Last updated:** [October 24, 2016, 10:44am UTC](https://discuss.elastic.co/t/kibana-doesnt-work/63187 "2016-10-24T10:44:00Z")
I've installed Logstash, Elasticsearch and kibana on a Ubuntu Server 16.04 I only discomment this parameters in file: /etc/elasticsearch/elasticsearch.yml network.host: localhost http.port: 9200 /opt/kibana/config/ki… --- ## [Does elasticsearch not support nfs as data directory?](https://discuss.elastic.co/t/does-elasticsearch-not-support-nfs-as-data-directory/311692)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 7\ **Last updated:** [August 11, 2022, 6:30am UTC](https://discuss.elastic.co/t/does-elasticsearch-not-support-nfs-as-data-directory/311692 "2022-08-11T06:30:37Z")
es: 7.17.3 I mount the nfs path locally, and then point the es data directory to the location of the nfs, but the es startup fails, if I change the es data directory to a local partition (var/lib/elasticsearch) , then e… --- ## [How to use JSON Input on split series by terms](https://discuss.elastic.co/t/how-to-use-json-input-on-split-series-by-terms/122667)
**Author:** [@slavik57](https://discuss.elastic.co/u/slavik57)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 5:22pm UTC](https://discuss.elastic.co/t/how-to-use-json-input-on-split-series-by-terms/122667 "2018-03-07T17:22:40Z")
I have a bar chart visualization and I split the bars by terms on a string field. Every value of that string field has the same prefix, I would like to remove it using the JSON input. I already use the JSON input on th… --- ## [Сортировка terms по результатам поиска](https://discuss.elastic.co/t/terms/74712)
**Author:** [@Pashkevich\_Aleksandr](https://discuss.elastic.co/u/Pashkevich_Aleksandr)\ **Replies:** 6\ **Last updated:** [February 11, 2017, 6:44am UTC](https://discuss.elastic.co/t/terms/74712 "2017-02-11T06:44:59Z")
Здравствуйте. Я делаю запрос на получение terms, и он сортирует по количеству встречающихся в базе. А мне необходима сортировка по результатам поиска. "query": { "bool" : { "must" : { "query\_string" : { … --- ## [Date Time Issue with Index](https://discuss.elastic.co/t/date-time-issue-with-index/231391)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 5\ **Last updated:** [May 18, 2020, 2:01pm UTC](https://discuss.elastic.co/t/date-time-issue-with-index/231391 "2020-05-18T14:01:24Z")
when I apply a date filter, I get this error, my data is correct (when checked from individual index) Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"parse\_exception","reason":"failed to parse date fie… --- ## [Remove null values from aggregated table visualization](https://discuss.elastic.co/t/remove-null-values-from-aggregated-table-visualization/220190)
**Author:** [@opellulo](https://discuss.elastic.co/u/opellulo)\ **Replies:** 0\ **Last updated:** [February 20, 2020, 12:58pm UTC](https://discuss.elastic.co/t/remove-null-values-from-aggregated-table-visualization/220190 "2020-02-20T12:58:25Z")
Hi all, I have a simple visualization issue in Kibana that i suspect it's harder to fix than i thought, here is my situation: I have an index where the docs have different fields, however one of this field is common fo… --- ## [How to run kibana docker container on port 80](https://discuss.elastic.co/t/how-to-run-kibana-docker-container-on-port-80/110355)
**Author:** [@marouane](https://discuss.elastic.co/u/marouane)\ **Replies:** 2\ **Last updated:** [December 6, 2017, 7:52am UTC](https://discuss.elastic.co/t/how-to-run-kibana-docker-container-on-port-80/110355 "2017-12-06T07:52:17Z")
Hi every one , I'm new in elk and now i'm using kibana with the port 5601 docker run -d --name=kibana --restart=unless-stopped --link elasticsearch:elasticsearch -p 5601:5601 kibana:5.2 What i need is to run the kiba… --- ## [What is the BM 25's way to disable field length norm as in TF/IDF](https://discuss.elastic.co/t/what-is-the-bm-25s-way-to-disable-field-length-norm-as-in-tf-idf/76907)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 2\ **Last updated:** [March 1, 2017, 6:59pm UTC](https://discuss.elastic.co/t/what-is-the-bm-25s-way-to-disable-field-length-norm-as-in-tf-idf/76907 "2017-03-01T18:59:09Z")
In ES 2.x/1.x, we can disable field length norm for a field as follows: "MyField" : { "type" : "text", "norms" : { "enabled" : false } } Since ES 5.x use BM25 by default, is above set… --- ## [Hyphen in alias name does not work](https://discuss.elastic.co/t/hyphen-in-alias-name-does-not-work/42368)
**Author:** [@MoD](https://discuss.elastic.co/u/MoD)\ **Replies:** 8\ **Last updated:** [February 22, 2016, 4:28pm UTC](https://discuss.elastic.co/t/hyphen-in-alias-name-does-not-work/42368 "2016-02-22T16:28:26Z")
Hi, If i create an alias with a hyphen in it (ie. a-b), elastic search does not find any documents. Is there a workaround? http://example.com/a-b/ \_search GET { "query": { "queryString": { "query": "so… --- ## [Curator delete indices shield permissions](https://discuss.elastic.co/t/curator-delete-indices-shield-permissions/29354)
**Author:** [@Doug\_Nelson](https://discuss.elastic.co/u/Doug_Nelson)\ **Replies:** 4\ **Last updated:** [September 17, 2015, 2:54am UTC](https://discuss.elastic.co/t/curator-delete-indices-shield-permissions/29354 "2015-09-17T02:54:51Z")
I have a working curator delete script that works when I run it from my very privileged admin account. I am trying to get it to work with a curator role and I want to limit the actions to exactly what is required. thi… --- ## [Is it possible to index only the matched log lines of grok in Logstash?](https://discuss.elastic.co/t/is-it-possible-to-index-only-the-matched-log-lines-of-grok-in-logstash/73624)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 5\ **Last updated:** [February 5, 2017, 10:00am UTC](https://discuss.elastic.co/t/is-it-possible-to-index-only-the-matched-log-lines-of-grok-in-logstash/73624 "2017-02-05T10:00:33Z")
I'm having a log file, which actually has INFOs' and ERRORs. So I tried to match only the needful INFOs by using the grok filter. So this is how my log lines look like. Few of them from the file. And this is how my gro… --- ## [\[RESOLVED\] API to list all watchers](https://discuss.elastic.co/t/resolved-api-to-list-all-watchers/169167)
**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\ **Replies:** 2\ **Last updated:** [February 25, 2019, 7:20pm UTC](https://discuss.elastic.co/t/resolved-api-to-list-all-watchers/169167 "2019-02-25T19:20:55Z")
I am a bit puzzled about this one. While checking the documentation for X-Pack Watcher APIs, I cannot see a basic API that would return the list of existing watchers. I can see that Kibana is using the GET https://kiban… --- ## [Cannot evaluate org.elasticsearch.common.inject.InjectorImpl.toString()](https://discuss.elastic.co/t/cannot-evaluate-org-elasticsearch-common-inject-injectorimpl-tostring/156014)
**Author:** [@sevenfirezzz](https://discuss.elastic.co/u/sevenfirezzz)\ **Replies:** 4\ **Last updated:** [November 20, 2018, 1:15am UTC](https://discuss.elastic.co/t/cannot-evaluate-org-elasticsearch-common-inject-injectorimpl-tostring/156014 "2018-11-20T01:15:49Z")
I want to create a es client but I got a error like this: Method threw 'java.lang.StackOverflowError' exception. Cannot evaluate org.elasticsearch.common.inject.InjectorImpl.toString() This is my code: Settings se… --- ## [Performance impact of returning large result sets](https://discuss.elastic.co/t/performance-impact-of-returning-large-result-sets/31512)
**Author:** [@nikouni](https://discuss.elastic.co/u/nikouni)\ **Replies:** 2\ **Last updated:** [October 2, 2015, 4:04am UTC](https://discuss.elastic.co/t/performance-impact-of-returning-large-result-sets/31512 "2015-10-02T04:04:57Z")
Hello. I would like to use Elasticsearch as a way to retrieve the top 1000-10000 documents for a query and then applying some post-processing to those documents. The problem is that performance seems to drop a lot wh… --- ## [Sorting in nested lists?](https://discuss.elastic.co/t/sorting-in-nested-lists/137434)
**Author:** [@cherry-wave](https://discuss.elastic.co/u/cherry-wave)\ **Replies:** 5\ **Last updated:** [June 28, 2018, 3:37pm UTC](https://discuss.elastic.co/t/sorting-in-nested-lists/137434 "2018-06-28T15:37:22Z")
Hey guys! (I am using ES version 5.6.4 if this is relevant) I have entries that can have different "variations" from different sources. They are merged in a specific order before shown to the user. I already had quite a… --- ## [Unbalanced cluster - one node running out of space](https://discuss.elastic.co/t/unbalanced-cluster-one-node-running-out-of-space/53890)
**Author:** [@elssar](https://discuss.elastic.co/u/elssar)\ **Replies:** 6\ **Last updated:** [June 25, 2016, 5:31am UTC](https://discuss.elastic.co/t/unbalanced-cluster-one-node-running-out-of-space/53890 "2016-06-25T05:31:04Z")
I have a cluster with 1 dedicated master node, 1 client node, and 5 data nodes.. While running a particularly heavy aggregation, the cluster turned yellow and a few replica shards got stuck in Initializing state. After… --- ## [Help with mapping update](https://discuss.elastic.co/t/help-with-mapping-update/22875)
**Author:** [@David\_Kleiner](https://discuss.elastic.co/u/David_Kleiner)\ **Replies:** 6\ **Last updated:** [March 25, 2015, 12:52am UTC](https://discuss.elastic.co/t/help-with-mapping-update/22875 "2015-03-25T00:52:36Z")
Greetings, I am trying to update mapping to make certain fields not\_analyzed. The index gets created from default template, now I'm trying to add the following mapping to it (long) and get an error. The index is… --- ## [Multiple aliases for an index with the same filter](https://discuss.elastic.co/t/multiple-aliases-for-an-index-with-the-same-filter/167024)
**Author:** [@eliw00d](https://discuss.elastic.co/u/eliw00d)\ **Replies:** 7\ **Last updated:** [February 5, 2019, 8:37pm UTC](https://discuss.elastic.co/t/multiple-aliases-for-an-index-with-the-same-filter/167024 "2019-02-05T20:37:47Z")
Is it not possible to have multiple aliases for a single index where some might have the same filter criteria? I had an alias that needed to be renamed, but I wanted to keep the old one for backwards compatibility. Howev… --- ## [Date field Sorting in ElasticSearch](https://discuss.elastic.co/t/date-field-sorting-in-elasticsearch/103604)
**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\ **Replies:** 1\ **Last updated:** [October 12, 2017, 1:11pm UTC](https://discuss.elastic.co/t/date-field-sorting-in-elasticsearch/103604 "2017-10-12T13:11:30Z")
Hi, I have an index & type in elasticsearch which has a field mapping , "data\_received\_on": { "type": "date", "format": "YYYY-MM-DD" }, I need to get the newest 10 records and i have about 5000 records that is sp… --- ## [APM Server 8.12.1 Security Update (ESA-2024-03)](https://discuss.elastic.co/t/apm-server-8-12-1-security-update-esa-2024-03/352688)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [February 6, 2024, 10:35pm UTC](https://discuss.elastic.co/t/apm-server-8-12-1-security-update-esa-2024-03/352688 "2024-02-06T22:35:37Z")
APM Server Insertion of Sensitive Information into Log File (ESA-2024-03) An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed a… --- ## [Serialize/Deserialize SearchResponse in Java](https://discuss.elastic.co/t/serialize-deserialize-searchresponse-in-java/80010)
**Author:** [@chris-dickson](https://discuss.elastic.co/u/chris-dickson)\ **Replies:** 2\ **Last updated:** [March 29, 2017, 1:57am UTC](https://discuss.elastic.co/t/serialize-deserialize-searchresponse-in-java/80010 "2017-03-29T01:57:31Z")
We're trying to take some load off our shared Elasticsearch cluster by caching our SearchResponse instances in a Redis cache. I'm aware that Elasticsearch provides a caching abstraction, but we'd like to keep resources … --- ## [Getting Error in kibana while using xpach](https://discuss.elastic.co/t/getting-error-in-kibana-while-using-xpach/278245)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 4\ **Last updated:** [July 9, 2021, 12:14pm UTC](https://discuss.elastic.co/t/getting-error-in-kibana-while-using-xpach/278245 "2021-07-09T12:14:57Z")
Hi experts, I am using ELK version 7.12.0. I have secure my Elasticsearch With Xpack. so that i created http.p12 and elasticsearch-ca.pem certificates . And I configured it. In that Elasticsearch is working fine. But … --- ## [High CPU usage caused by Lucene merge thread](https://discuss.elastic.co/t/high-cpu-usage-caused-by-lucene-merge-thread/314664)
**Author:** [@kent010341](https://discuss.elastic.co/u/kent010341)\ **Replies:** 5\ **Last updated:** [September 19, 2022, 9:07am UTC](https://discuss.elastic.co/t/high-cpu-usage-caused-by-lucene-merge-thread/314664 "2022-09-19T09:07:20Z")
I run ELK stack, APM server, and Metricbeat (Docker and System module) with Docker. The Logstash is used for reading log files, and both the APM server and Metricbeat are for monitoring with a period of 10 seconds. Som… --- ## [Logstash and multiple pipelines. Why are my pipelines merging?](https://discuss.elastic.co/t/logstash-and-multiple-pipelines-why-are-my-pipelines-merging/68920)
**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\ **Replies:** 5\ **Last updated:** [December 14, 2016, 6:41pm UTC](https://discuss.elastic.co/t/logstash-and-multiple-pipelines-why-are-my-pipelines-merging/68920 "2016-12-14T18:41:16Z")
Hi stashers, I have two pipelines, A & B, both configured to process separate CSV files of different formats into separate indexes on the same Elastic Cloud cluster. Something very peculiar (to me...) is happening when t… --- ## [NEST Suggester errors](https://discuss.elastic.co/t/nest-suggester-errors/179634)
**Author:** [@jgomes](https://discuss.elastic.co/u/jgomes)\ **Replies:** 6\ **Last updated:** [May 23, 2019, 12:27am UTC](https://discuss.elastic.co/t/nest-suggester-errors/179634 "2019-05-23T00:27:41Z")
Hi all, I'm trying to get Suggesters up and running. Using Phrase, Term, or Completion I always get the following error variation. unable to parse SuggestionBuilder with name \[COMPLETION\]: parser not found" unable to … --- ## [Data lost after full cluster restart](https://discuss.elastic.co/t/data-lost-after-full-cluster-restart/4906)
**Author:** [@vpunski](https://discuss.elastic.co/u/vpunski)\ **Replies:** 7\ **Last updated:** [July 26, 2011, 8:43am UTC](https://discuss.elastic.co/t/data-lost-after-full-cluster-restart/4906 "2011-07-26T08:43:33Z")
10 nodes, replication factor 3, local storage, 10 data nodes, 10 super clients. Please let me know if you need more info. Health status: { "cluster\_name" : "CMWELL\_INDEX\_PRODUCTION\_CLUSTER", "status" : "red",… --- ## [Error with the split function in painless script](https://discuss.elastic.co/t/error-with-the-split-function-in-painless-script/79021)
**Author:** [@florentmair](https://discuss.elastic.co/u/florentmair)\ **Replies:** 5\ **Last updated:** [March 17, 2017, 5:43pm UTC](https://discuss.elastic.co/t/error-with-the-split-function-in-painless-script/79021 "2017-03-17T17:43:08Z")
Hi everyone, i have this field with values : c:\\Users\\username\\AppData\\Local\\Microsoft\\Windows.... Sometimes the username is "john" and sometimes it is "john.000". I want just to catch john , so i use this scrip… --- ## [Legal character set for field names](https://discuss.elastic.co/t/legal-character-set-for-field-names/190796)
**Author:** [@iamredlus](https://discuss.elastic.co/u/iamredlus)\ **Replies:** 2\ **Last updated:** [August 1, 2019, 12:31pm UTC](https://discuss.elastic.co/t/legal-character-set-for-field-names/190796 "2019-08-01T12:31:40Z")
Hey, I'd like to add some validation on my side for field names before indexing documents into elsaticsearch. However, I cannot find any documentation describing what is an invalid field name. The only thing I found was… --- ## [Making filters OR or AND in a visualization](https://discuss.elastic.co/t/making-filters-or-or-and-in-a-visualization/41583)
**Author:** [@isaacpm](https://discuss.elastic.co/u/isaacpm)\ **Replies:** 2\ **Last updated:** [February 12, 2016, 3:18pm UTC](https://discuss.elastic.co/t/making-filters-or-or-and-in-a-visualization/41583 "2016-02-12T15:18:30Z")
Hi, it seems that in a visualization when you create more than one filter there is an OR working between them. I've got three filters I want to apply and this seems to be the behavior: filter1 OR filter2 OR filter3 I… --- ## [ElasticSearch 7 start up error - the default discovery settings are unsuitable for production use](https://discuss.elastic.co/t/elasticsearch-7-start-up-error-the-default-discovery-settings-are-unsuitable-for-production-use/249222)
**Author:** [@linfordwoode](https://discuss.elastic.co/u/linfordwoode)\ **Replies:** 3\ **Last updated:** [September 23, 2020, 1:07am UTC](https://discuss.elastic.co/t/elasticsearch-7-start-up-error-the-default-discovery-settings-are-unsuitable-for-production-use/249222 "2020-09-23T01:07:40Z")
I am having this issue( the default discovery settings are unsuitable for production use: at least one of \[discovery.seed\_hosts, discovery.seed\_providers, cluster.initial\_master\_nodes\] must be configured) with my Elastic… --- ## [Postfix parsing -](https://discuss.elastic.co/t/postfix-parsing/165193)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 7\ **Last updated:** [January 25, 2019, 10:47am UTC](https://discuss.elastic.co/t/postfix-parsing/165193 "2019-01-25T10:47:56Z")
I found Tin Le's setup on Linked In, and I think it looked really nice, so I wanted to add those logfiles to our ELK as well. I've created the patterns file, and modified my logstash.con, I'll be getting the logfiles wi… --- ## [Upgraded to 7.2 "Kibana server is not ready yet"](https://discuss.elastic.co/t/upgraded-to-7-2-kibana-server-is-not-ready-yet/188072)
**Author:** [@SCL\_ADMIN](https://discuss.elastic.co/u/SCL_ADMIN)\ **Replies:** 4\ **Last updated:** [July 16, 2019, 1:29pm UTC](https://discuss.elastic.co/t/upgraded-to-7-2-kibana-server-is-not-ready-yet/188072 "2019-07-16T13:29:53Z")
I'm working in Ubuntu 18.04 and upgraded ELK stack to 7.2. All services are running (Elasticsearch, Logstash , Kibana and Filebeat), but Kibana displays "Kibana server is not ready yet" and the kibana status shows: Ju… --- ## [ContentTooLongException when using Reindex API](https://discuss.elastic.co/t/contenttoolongexception-when-using-reindex-api/64471)
**Author:** [@hariso](https://discuss.elastic.co/u/hariso)\ **Replies:** 2\ **Last updated:** [October 31, 2016, 8:03pm UTC](https://discuss.elastic.co/t/contenttoolongexception-when-using-reindex-api/64471 "2016-10-31T20:03:40Z")
Hi there! Lately, I'm busy with finding an efficient way of reindexing a lot of data from a 1.x cluster to a 5.x cluster, and I'm evaluating some options. Right now, I'm using the Reindex API, generally it looks like a… --- ## [What is the price of Elasticsearch licence](https://discuss.elastic.co/t/what-is-the-price-of-elasticsearch-licence/275636)
**Author:** [@sudo-ranjith](https://discuss.elastic.co/u/sudo-ranjith)\ **Replies:** 5\ **Last updated:** [June 11, 2021, 7:01am UTC](https://discuss.elastic.co/t/what-is-the-price-of-elasticsearch-licence/275636 "2021-06-11T07:01:51Z")
Hello Folks, I have planned to setup ELK stack on-premise, I checked Subscriptions | Elastic Stack Products & Support | Elastic, they have mentioned Basic - free and open 2. I would like to know is really Elasticsearc… --- ## [Default index pattern not being "saved"](https://discuss.elastic.co/t/default-index-pattern-not-being-saved/121739)
**Author:** [@rhugga](https://discuss.elastic.co/u/rhugga)\ **Replies:** 2\ **Last updated:** [March 5, 2018, 11:23pm UTC](https://discuss.elastic.co/t/default-index-pattern-not-being-saved/121739 "2018-03-05T23:23:39Z")
I create an index pattern. I see my fields. I click the star to make it my default. The "No default index pattern. You must select or create one to continue." warning goes away. I click discover and it's back to giving m… --- ## [Dec 7th, 2023: \[EN\] Find book about Christmas without searching for Christmas](https://discuss.elastic.co/t/dec-7th-2023-en-find-book-about-christmas-without-searching-for-christmas/348129)
**Author:** [@lio](https://discuss.elastic.co/u/lio)\ **Replies:** 0\ **Last updated:** [November 28, 2023, 11:12am UTC](https://discuss.elastic.co/t/dec-7th-2023-en-find-book-about-christmas-without-searching-for-christmas/348129 "2023-11-28T11:12:58Z")
As we’re getting closer to the holiday season, I’m looking forward to getting cozy, picking up a new book and having a relaxing time. But book discovery online using a search bar is not as easy as it seems.... Most reta… --- ## [Allow user only certain documents from certain indices](https://discuss.elastic.co/t/allow-user-only-certain-documents-from-certain-indices/111381)
**Author:** [@sancroth](https://discuss.elastic.co/u/sancroth)\ **Replies:** 1\ **Last updated:** [December 13, 2017, 1:00pm UTC](https://discuss.elastic.co/t/allow-user-only-certain-documents-from-certain-indices/111381 "2017-12-13T13:00:51Z")
I'd like some help with this scenario. I want to allow User A to have access to Indices i1 and i2. To achieve this i used the Management GUI, created a new role that has read writes to the 2 indices. Then assigned use… --- ## [License in a cluster](https://discuss.elastic.co/t/license-in-a-cluster/329502)
**Author:** [@Joel\_Goncalves](https://discuss.elastic.co/u/Joel_Goncalves)\ **Replies:** 6\ **Last updated:** [April 11, 2023, 12:33pm UTC](https://discuss.elastic.co/t/license-in-a-cluster/329502 "2023-04-11T12:33:05Z")
Hello I have a cluster with 5 nodes, one of them (master) is installed on-premises and I have 4 nodes connected to it if I put a license on elasticsearch which is installed on-premises will this license be passed to the… --- ## [Logstash binding problems](https://discuss.elastic.co/t/logstash-binding-problems/146410)
**Author:** [@temp44](https://discuss.elastic.co/u/temp44)\ **Replies:** 2\ **Last updated:** [August 29, 2018, 8:20am UTC](https://discuss.elastic.co/t/logstash-binding-problems/146410 "2018-08-29T08:20:18Z")
I am having an issue when running Logstash. When I run it with systemctl, it does not bind on port 5044 at all but logstash is not failing to run. When I run "logstash -f /etc/logstash/conf.d/" it binds to port 5044, but… --- ## [How to set no of replicas to 0](https://discuss.elastic.co/t/how-to-set-no-of-replicas-to-0/195725)
**Author:** [@Shubham\_Yadav1](https://discuss.elastic.co/u/Shubham_Yadav1)\ **Replies:** 1\ **Last updated:** [August 19, 2019, 12:43pm UTC](https://discuss.elastic.co/t/how-to-set-no-of-replicas-to-0/195725 "2019-08-19T12:43:20Z")
I have setup aws elasticsearch where a new index is created everyday, when i see the index using \_cat api i see two different size of index that are store.size(7.8) pri.store.size(3.8), I think this is happening because… --- ## [SIEM feature request](https://discuss.elastic.co/t/siem-feature-request/250340)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 4\ **Last updated:** [October 1, 2020, 11:22pm UTC](https://discuss.elastic.co/t/siem-feature-request/250340 "2020-10-01T23:22:36Z")
Hi, As i was scrolling down the huge pile of log and then i come up with this ideal for SIEM that i really want What i want is the ability to detect multiple event subsequently, what i mean is that for example i have a… --- ## [What OIDs should I use when monitoring routers and switches?](https://discuss.elastic.co/t/what-oids-should-i-use-when-monitoring-routers-and-switches/203293)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 5\ **Last updated:** [November 16, 2019, 3:11am UTC](https://discuss.elastic.co/t/what-oids-should-i-use-when-monitoring-routers-and-switches/203293 "2019-11-16T03:11:14Z")
I'm in the middle of testing to see if we can monitor everything we need to monitor via Elastic Stack. Linux servers have been easy enough to deal with due to Beats, but our networking infrastructure has proven a bit mor… --- ## [Remote Reindex Performance](https://discuss.elastic.co/t/remote-reindex-performance/134401)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 5\ **Last updated:** [June 6, 2018, 1:23pm UTC](https://discuss.elastic.co/t/remote-reindex-performance/134401 "2018-06-06T13:23:38Z")
Hi, I need to migrate data between clusters and am looking to do via remindex from remote using curator. However, I'm seeing that the rate of reindexing is very slow. So, how can I up the reindexing rate? The curator c… [Previous page](https://discuss.elastic.co/top.md?page=514&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=516&per_page=50&period=all)