# Top **URL:** https://discuss.elastic.co/top.md?page=535&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 536 --- ## [Capacity Planning Guidelines? (estimating index size)](https://discuss.elastic.co/t/capacity-planning-guidelines-estimating-index-size/5650)
**Author:** [@Schnyder](https://discuss.elastic.co/u/Schnyder)\ **Replies:** 3\ **Last updated:** [October 21, 2011, 1:17am UTC](https://discuss.elastic.co/t/capacity-planning-guidelines-estimating-index-size/5650 "2011-10-21T01:17:34Z")
We're kicking off a project that will involve indexing terrabytes of data. We're considering using ElasticSearch for the job. However I need to determine the hardware requirements to hold such a large index. Are t… --- ## [Same HTTP health check succeeds for ALB and failes for NLB](https://discuss.elastic.co/t/same-http-health-check-succeeds-for-alb-and-failes-for-nlb/131811)
**Author:** [@wes](https://discuss.elastic.co/u/wes)\ **Replies:** 4\ **Last updated:** [May 25, 2018, 9:55pm UTC](https://discuss.elastic.co/t/same-http-health-check-succeeds-for-alb-and-failes-for-nlb/131811 "2018-05-25T21:55:50Z")
Hi, I am trying to setup logstash behind a load balancer which seems to be something that has been mentioned by plenty of other people and seems trivial. I have no issues with the health check when I use an ALB where th… --- ## [Not yet initialized (you may need to run securityadmin)](https://discuss.elastic.co/t/not-yet-initialized-you-may-need-to-run-securityadmin/314280)
**Author:** [@madurad](https://discuss.elastic.co/u/madurad)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 10:23am UTC](https://discuss.elastic.co/t/not-yet-initialized-you-may-need-to-run-securityadmin/314280 "2022-09-13T10:23:05Z")
I was trying to enable opendistro security by running security admin tools, but getting below error after enabling configs, es version : 7.10.x command : bash /usr/share/elasticsearch/plugins/opendistro\_security/tools… --- ## [How to pass JSON request body data to Elasticsearch query for search opeartion?](https://discuss.elastic.co/t/how-to-pass-json-request-body-data-to-elasticsearch-query-for-search-opeartion/195137)
**Author:** [@Ramesh\_Kanakarajan](https://discuss.elastic.co/u/Ramesh_Kanakarajan)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 8:16am UTC](https://discuss.elastic.co/t/how-to-pass-json-request-body-data-to-elasticsearch-query-for-search-opeartion/195137 "2019-08-15T08:16:33Z")
Initially I do by iterate the JSON object get the key and value out, do concatenation with dot between keys and then pass to the matchquery. --- ## [Logstash RabbitMQ input plugin configuration](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-configuration/166222)
**Author:** [@shimpi](https://discuss.elastic.co/u/shimpi)\ **Replies:** 5\ **Last updated:** [January 29, 2019, 8:57pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-plugin-configuration/166222 "2019-01-29T20:57:45Z")
Hello, My goal is: 1: Configure Logstash (version: 6.2.1) to pull events from RabbitMQ (version: 3.6.1) ( as input) 2: Depending upon the content of the event (message), store them in different files (as output) Righ… --- ## [Logstash Kafka Input plugin : no message read from kafka topic](https://discuss.elastic.co/t/logstash-kafka-input-plugin-no-message-read-from-kafka-topic/83875)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 6\ **Last updated:** [June 5, 2017, 11:05am UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-no-message-read-from-kafka-topic/83875 "2017-06-05T11:05:53Z")
Planned to upgrade my ELK setup to 5.x along with that I tried to add kafka message queue between forwarder and logstash server on the new environment. There is no issues on forwarders sent message to kafka. I verified … --- ## [How to use Max Aggregation value in Filter Aggregation](https://discuss.elastic.co/t/how-to-use-max-aggregation-value-in-filter-aggregation/80952)
**Author:** [@prashant.bajpai](https://discuss.elastic.co/u/prashant.bajpai)\ **Replies:** 6\ **Last updated:** [April 4, 2017, 4:18am UTC](https://discuss.elastic.co/t/how-to-use-max-aggregation-value-in-filter-aggregation/80952 "2017-04-04T04:18:12Z")
I need to use the Max aggregation value, See below query. "aggregations":{ "maxValue": { "max": { "field": "value" … --- ## [ES 6.4.2 - Synonym Filter Working Out Of Order](https://discuss.elastic.co/t/es-6-4-2-synonym-filter-working-out-of-order/190216)
**Author:** [@abhinav2](https://discuss.elastic.co/u/abhinav2)\ **Replies:** 3\ **Last updated:** [July 13, 2019, 7:07pm UTC](https://discuss.elastic.co/t/es-6-4-2-synonym-filter-working-out-of-order/190216 "2019-07-13T19:07:32Z")
Version 6.4.2. Issue - When you have 2 synonym filters defined, synonyms defined in second filter are working before the first set of synonyms. Expected - Synonyms in the second file should work after the first set of … --- ## [複数のlogをKibanaで同じグラフに表示する方法](https://discuss.elastic.co/t/log-kibana/111911)
**Author:** [@Xuan\_Hoang](https://discuss.elastic.co/u/Xuan_Hoang)\ **Replies:** 3\ **Last updated:** [December 18, 2017, 5:34am UTC](https://discuss.elastic.co/t/log-kibana/111911 "2017-12-18T05:34:45Z")
こんにちは、ホアンです。 現在、特定の過去のプロキシのログとファイアウォールのログをelasticsearchに蓄積しています。 これらはlogの形式は異なりますが 同一時刻の各フィールドをkibanaで表示したいのですが この蓄積されたlogから Kibana上で１つのグラフに 積み重ねたように表示できないでしょうか？ 下の図のようなものを表示したいです。 現在logstashのconfファイルは別々に実行しています。 ・… --- ## [Memory Mapped files using full RAM leaving very less room for other processes](https://discuss.elastic.co/t/memory-mapped-files-using-full-ram-leaving-very-less-room-for-other-processes/265617)
**Author:** [@abhinavtk97](https://discuss.elastic.co/u/abhinavtk97)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 1:59pm UTC](https://discuss.elastic.co/t/memory-mapped-files-using-full-ram-leaving-very-less-room-for-other-processes/265617 "2021-02-26T13:59:52Z")
We were testing out Elasticsearch with almost 1.5 TB index size and there is a different java process running on the same machine which does lots of data processing, which gives batch index jobs to Elasticsearch. The mac… --- ## [Indices in delete phase are actually not being deleted](https://discuss.elastic.co/t/indices-in-delete-phase-are-actually-not-being-deleted/256462)
**Author:** [@Dabo\_Sata](https://discuss.elastic.co/u/Dabo_Sata)\ **Replies:** 4\ **Last updated:** [November 24, 2020, 8:30am UTC](https://discuss.elastic.co/t/indices-in-delete-phase-are-actually-not-being-deleted/256462 "2020-11-24T08:30:51Z")
Hi, I have some metricbeat indices that are in delete phase but the actual deletion does not occur. If I run \_ilm/explain on one of those indices I get: { "indices" : { "metricbeat-7.10.0-2020.11.19-0… --- ## [Kibana4 の検索クエリでの2桁の数字について](https://discuss.elastic.co/t/kibana4-2/35636)
**Author:** [@ishizaki](https://discuss.elastic.co/u/ishizaki)\ **Replies:** 4\ **Last updated:** [November 30, 2015, 5:53am UTC](https://discuss.elastic.co/t/kibana4-2/35636 "2015-11-30T05:53:46Z")
こんにちは OSSECのアラート出力をlogstash で受け、elasticsearch,kibana4 で 可視化しようと試みておりますが、kibana4 の検索クエリについて質問させてください。 OSSECの Alert\_Level 5以下は表示しないクエリを書きたいのですが、 Alert\_Level:\>5 では 6～9の範囲しか検索されません。(15まであります。) Alert\_Level:10 と検索すると、 Al… --- ## [Index problem with Kibana Spaces](https://discuss.elastic.co/t/index-problem-with-kibana-spaces/161332)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 8\ **Last updated:** [January 4, 2019, 2:49pm UTC](https://discuss.elastic.co/t/index-problem-with-kibana-spaces/161332 "2019-01-04T14:49:31Z")
Hi, I have a problem with Kibana Spaces. Whenever I log in the space selector appears, but if I click on any of the buttons I get an error. From kibana.stdout log: {"type":"response","@timestamp":"2018-12-18T13:08:08… --- ## [Parsing a mix of String and JSON fields with the kv() filter](https://discuss.elastic.co/t/parsing-a-mix-of-string-and-json-fields-with-the-kv-filter/92093)
**Author:** [@olivier1](https://discuss.elastic.co/u/olivier1)\ **Replies:** 2\ **Last updated:** [July 11, 2017, 5:29pm UTC](https://discuss.elastic.co/t/parsing-a-mix-of-string-and-json-fields-with-the-kv-filter/92093 "2017-07-11T17:29:05Z")
Hi, I'm trying to do something that looks fairly simple according to the doc: trimming start and end double quotes from a field using the kv{} filter. I've tried a whole bunch of combinations like '"', "\\"", '\\"' but… --- ## [Primary on SSD, replica on HDD](https://discuss.elastic.co/t/primary-on-ssd-replica-on-hdd/110797)
**Author:** [@ov7a](https://discuss.elastic.co/u/ov7a)\ **Replies:** 5\ **Last updated:** [December 8, 2017, 12:21pm UTC](https://discuss.elastic.co/t/primary-on-ssd-replica-on-hdd/110797 "2017-12-08T12:21:29Z")
How to configure elasticsearch to store replica on HDD, while primary data is on SSD? I can launch two nodes, one on hdd, other on ssd, give each them tag ('hdd\_node' and 'ssd\_node')... What next? --- ## [Login kibana without UI (using token)](https://discuss.elastic.co/t/login-kibana-without-ui-using-token/203763)
**Author:** [@frankShih](https://discuss.elastic.co/u/frankShih)\ **Replies:** 6\ **Last updated:** [October 24, 2019, 12:21pm UTC](https://discuss.elastic.co/t/login-kibana-without-ui-using-token/203763 "2019-10-24T12:21:47Z")
Hi, I am new in the elastic stack. My requirement is: after users login to our website, they do not need to key in account/password again in order to access kibana. So, I find this https://www.elastic.co/guide/en/ki… --- ## [Elapsed Time Filter for calculating session Duration (elapsed\_time is very big)](https://discuss.elastic.co/t/elapsed-time-filter-for-calculating-session-duration-elapsed-time-is-very-big/32882)
**Author:** [@inderjeet26](https://discuss.elastic.co/u/inderjeet26)\ **Replies:** 6\ **Last updated:** [February 29, 2016, 3:22pm UTC](https://discuss.elastic.co/t/elapsed-time-filter-for-calculating-session-duration-elapsed-time-is-very-big/32882 "2016-02-29T15:22:33Z")
Hello folks, I am using Elapsed Filter Plugin for calculating the time between start\_session and session\_timeout events in my logs. Here are some events with Timestamps \[27/Apr/2015:10:41:45 -0500\] 1 ENG NORMAL TOU… --- ## [Kibana:Unable to check for Kibana Index .kibana](https://discuss.elastic.co/t/kibana-unable-to-check-for-kibana-index-kibana/39730)
**Author:** [@kkomv](https://discuss.elastic.co/u/kkomv)\ **Replies:** 1\ **Last updated:** [January 21, 2016, 9:15pm UTC](https://discuss.elastic.co/t/kibana-unable-to-check-for-kibana-index-kibana/39730 "2016-01-21T21:15:34Z")
Hi, I am trying to configure apache reverse proxy for Kibana. However, it shows the below error on launch of kibana. I am able to successfully launch kibana on 5601 port of the actual server, but it fails when access… --- ## [ECK Filebeat Association backend for kibana is not configured](https://discuss.elastic.co/t/eck-filebeat-association-backend-for-kibana-is-not-configured/292249)
**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 2:51am UTC](https://discuss.elastic.co/t/eck-filebeat-association-backend-for-kibana-is-not-configured/292249 "2021-12-17T02:51:34Z")
When I start my filebeat, an error occurs Association backend for kibana is not configured Association backend for Elasticsearch is not configured kibana yaml file apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana met… --- ## [Parsing PFSense Proxy logs in Syslog](https://discuss.elastic.co/t/parsing-pfsense-proxy-logs-in-syslog/250818)
**Author:** [@Lee\_Archinal](https://discuss.elastic.co/u/Lee_Archinal)\ **Replies:** 8\ **Last updated:** [October 2, 2020, 7:49pm UTC](https://discuss.elastic.co/t/parsing-pfsense-proxy-logs-in-syslog/250818 "2020-10-02T19:49:12Z")
Good morning everyone, I recently deployed a PFSense box and enabled a Squid Proxy. I am shipping those logs to my ELK server to process and display in Kibana. I currently have filebeat running on my stack and have the … --- ## [APM Server logs not being generated](https://discuss.elastic.co/t/apm-server-logs-not-being-generated/195776)
**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\ **Replies:** 8\ **Last updated:** [August 23, 2019, 2:37pm UTC](https://discuss.elastic.co/t/apm-server-logs-not-being-generated/195776 "2019-08-23T14:37:34Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: NA E… --- ## [How to update existing graphs of kibana with updated data automatically](https://discuss.elastic.co/t/how-to-update-existing-graphs-of-kibana-with-updated-data-automatically/178019)
**Author:** [@Kalyan\_MB](https://discuss.elastic.co/u/Kalyan_MB)\ **Replies:** 8\ **Last updated:** [April 30, 2019, 4:05am UTC](https://discuss.elastic.co/t/how-to-update-existing-graphs-of-kibana-with-updated-data-automatically/178019 "2019-04-30T04:05:19Z")
hello, Setup: Server - installed ELK(elastic, Logstash and Kibana version-6.2.4) Client- filebeat-6.2.4 log server configured file beat such a way that, it will read log files from a specified directory and ship it to… --- ## [How to debug filebeat issues](https://discuss.elastic.co/t/how-to-debug-filebeat-issues/207062)
**Author:** [@Jeremy\_Gachet](https://discuss.elastic.co/u/Jeremy_Gachet)\ **Replies:** 3\ **Last updated:** [November 13, 2019, 3:43pm UTC](https://discuss.elastic.co/t/how-to-debug-filebeat-issues/207062 "2019-11-13T15:43:09Z")
Hello, I installed filebeat, used with apache module a few month ago. Everything was ok since I try to add the response time to my apache logs using this tutorial : https://www.partiallydisassembled.net/posts/filebeat-… --- ## [Difference in two timestamp fields](https://discuss.elastic.co/t/difference-in-two-timestamp-fields/232151)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 6:31am UTC](https://discuss.elastic.co/t/difference-in-two-timestamp-fields/232151 "2020-05-14T06:31:41Z")
Hello I have two fields closed\_date and open\_date which are in date format and are aggregatable. i want to create a new scripted field using scripting to calculate the difference between them. We are using ELK 7.3.0 ve… --- ## [How to parse jason in logstash](https://discuss.elastic.co/t/how-to-parse-jason-in-logstash/28691)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 7\ **Last updated:** [September 8, 2015, 6:39am UTC](https://discuss.elastic.co/t/how-to-parse-jason-in-logstash/28691 "2015-09-08T06:39:53Z")
Hi All, I am able to parse simple json file which is having one doc in one line ex: {"name":"name1",address1:"address1"} {"name2":"name2", "address2" : "address2"} but If I am having json format like below how can… --- ## [Filter by histogram bucket key](https://discuss.elastic.co/t/filter-by-histogram-bucket-key/101344)
**Author:** [@tomisu](https://discuss.elastic.co/u/tomisu)\ **Replies:** 4\ **Last updated:** [September 26, 2017, 9:43am UTC](https://discuss.elastic.co/t/filter-by-histogram-bucket-key/101344 "2017-09-26T09:43:54Z")
Hello, everyone! Setup ElasticSearch 5.4 I have 2 types of document: Contact, and Message. Both with a created\_on field. Message's parent is Contact. Goal I'm trying to make a date histogram with 2 values nested in e… --- ## [Failed to initialize SSL TrustManager](https://discuss.elastic.co/t/failed-to-initialize-ssl-trustmanager/287667)
**Author:** [@porscheme](https://discuss.elastic.co/u/porscheme)\ **Replies:** 2\ **Last updated:** [October 29, 2021, 9:52am UTC](https://discuss.elastic.co/t/failed-to-initialize-ssl-trustmanager/287667 "2021-10-29T09:52:48Z")
ES Version 7.12 AKS: 1:20.7 Certificate passwords added elastic keystore and value verified xpack.security.transport.ssl.keystore.secure\_password xpack.security.transport.ssl.truststore.secure\_password xpack settings … --- ## [SearchParseException: no mapping found](https://discuss.elastic.co/t/searchparseexception-no-mapping-found/48590)
**Author:** [@vchav73](https://discuss.elastic.co/u/vchav73)\ **Replies:** 2\ **Last updated:** [April 27, 2016, 8:33pm UTC](https://discuss.elastic.co/t/searchparseexception-no-mapping-found/48590 "2016-04-27T20:33:26Z")
I have a script which indexes a document using the the following mapping: { "mappings": { "rule-check-result": { "properties": { "date": { "type": "date", … --- ## [Date Formatting of](https://discuss.elastic.co/t/date-formatting-of/53087)
**Author:** [@kunalp](https://discuss.elastic.co/u/kunalp)\ **Replies:** 5\ **Last updated:** [June 17, 2016, 10:39am UTC](https://discuss.elastic.co/t/date-formatting-of/53087 "2016-06-17T10:39:02Z")
I need parse date in logstash of format \[03/Apr/2016:10:35:57 +0530\] . This is from Weblogic Access logs. How to do it. Regards, Kunal --- ## [Adding data in the ctx](https://discuss.elastic.co/t/adding-data-in-the-ctx/24680)
**Author:** [@gphadke](https://discuss.elastic.co/u/gphadke)\ **Replies:** 5\ **Last updated:** [July 2, 2015, 4:45am UTC](https://discuss.elastic.co/t/adding-data-in-the-ctx/24680 "2015-07-02T04:45:15Z")
Hello It appears that we can store the data in the ctx.vars for the particular execution context, how do I add it? ( groovy novice). Also, will the information be stored in the watch\_history? Please help, any pointe… --- ## [Filebeat logfile property expansion json](https://discuss.elastic.co/t/filebeat-logfile-property-expansion-json/121088)
**Author:** [@tom.stark](https://discuss.elastic.co/u/tom.stark)\ **Replies:** 8\ **Last updated:** [March 15, 2018, 2:09pm UTC](https://discuss.elastic.co/t/filebeat-logfile-property-expansion-json/121088 "2018-03-15T14:09:33Z")
Did replace fluentd/logstash with filebeat. Use filebeat on 6.2 version and works well, filebeat-prospector with following config. Explaining: type docker did not work, because json in json problem, error messages with p… --- ## [Kibana Client side headers and not getting forwarded to Elasticsearch!](https://discuss.elastic.co/t/kibana-client-side-headers-and-not-getting-forwarded-to-elasticsearch/106165)
**Author:** [@Vivek\_Unni](https://discuss.elastic.co/u/Vivek_Unni)\ **Replies:** 8\ **Last updated:** [November 9, 2017, 7:22am UTC](https://discuss.elastic.co/t/kibana-client-side-headers-and-not-getting-forwarded-to-elasticsearch/106165 "2017-11-09T07:22:28Z")
We are implementing Custom Realm in Kibana 5.6 and we are using a Siteminder login page and bypassing the Kibana login page. We are seeing the Kibana client side headers in Kibana logs. However, the ThreadContext in Elas… --- ## [Getting java.security.AccessControlException error on service startup](https://discuss.elastic.co/t/getting-java-security-accesscontrolexception-error-on-service-startup/191884)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 6\ **Last updated:** [July 27, 2019, 2:12pm UTC](https://discuss.elastic.co/t/getting-java-security-accesscontrolexception-error-on-service-startup/191884 "2019-07-27T14:12:34Z")
The specific error is: Getting java.security.AccessControlException: access denied ("java.io.FilePermission" "D:\\ELK\\appdynamics\\conf\\SAPPLOG01\\processPersistenceFile.ser" "read") error I've installed an APM agent in m… --- ## [NEST V5 How to use FunctionScoreQuery/FunctionScoreFunction to always boost a particular field](https://discuss.elastic.co/t/nest-v5-how-to-use-functionscorequery-functionscorefunction-to-always-boost-a-particular-field/84994)
**Author:** [@davey1990](https://discuss.elastic.co/u/davey1990)\ **Replies:** 6\ **Last updated:** [May 15, 2017, 9:43am UTC](https://discuss.elastic.co/t/nest-v5-how-to-use-functionscorequery-functionscorefunction-to-always-boost-a-particular-field/84994 "2017-05-15T09:43:04Z")
Hi All, I am really new to Elastic Search so please bear with me. I can see lots of examples in the Elasticsearch Reference guide for using the Elasticsearch.NET low level client but not many examples on how to use the… --- ## [Mutate only matching](https://discuss.elastic.co/t/mutate-only-matching/63320)
**Author:** [@emanuelef](https://discuss.elastic.co/u/emanuelef)\ **Replies:** 5\ **Last updated:** [October 19, 2016, 11:09am UTC](https://discuss.elastic.co/t/mutate-only-matching/63320 "2016-10-19T11:09:51Z")
Hi, I'd like to "extract" some fields from a specific kind of log and convert them to the right type. I can do that when all logs pass the match but in this case the logs I'm getting have different formats. So I would li… --- ## [Log full of "encountered retryable error" and logstash stopped listening](https://discuss.elastic.co/t/log-full-of-encountered-retryable-error-and-logstash-stopped-listening/108193)
**Author:** [@Jose\_Ramierez](https://discuss.elastic.co/u/Jose_Ramierez)\ **Replies:** 4\ **Last updated:** [November 27, 2017, 9:32pm UTC](https://discuss.elastic.co/t/log-full-of-encountered-retryable-error-and-logstash-stopped-listening/108193 "2017-11-27T21:32:45Z")
Hmmm. We were running logstash 5.6.1, and we noticed it stopped listening on IP. So we upgraded it to logstash 5.6.4 And here I am , a few days later, and logstash stopped listening, again, on IP. Clients cannot conne… --- ## [Timeout on deleting a snapshot repository](https://discuss.elastic.co/t/timeout-on-deleting-a-snapshot-repository/69936)
**Author:** [@darinhoward](https://discuss.elastic.co/u/darinhoward)\ **Replies:** 3\ **Last updated:** [December 27, 2016, 4:01pm UTC](https://discuss.elastic.co/t/timeout-on-deleting-a-snapshot-repository/69936 "2016-12-27T16:01:23Z")
I'm running elasticsearch 1.7.5 w/ 19 nodes (12 data nodes). Attempting to setup snapshots for backup and recovery - but am getting a 503 on creation and deletion of a snapshot repository. curl -XDELETE 'localhost:… --- ## [Reducing GC time and other cluster performance issues](https://discuss.elastic.co/t/reducing-gc-time-and-other-cluster-performance-issues/33094)
**Author:** [@bstascavage](https://discuss.elastic.co/u/bstascavage)\ **Replies:** 7\ **Last updated:** [October 27, 2015, 9:50pm UTC](https://discuss.elastic.co/t/reducing-gc-time-and-other-cluster-performance-issues/33094 "2015-10-27T21:50:13Z")
I currently run an 11 node (5 of which are data nodes) cluster, consisting of about 58,000 shards consisting of 5TBs. We are running Elasticsearch 1.7.1 ATM. We are experiencing a long amount of Garbage Collecting times … --- ## [Importing Kibana JSON files using Kibana API call](https://discuss.elastic.co/t/importing-kibana-json-files-using-kibana-api-call/155344)
**Author:** [@shriharsha](https://discuss.elastic.co/u/shriharsha)\ **Replies:** 2\ **Last updated:** [November 6, 2018, 10:30am UTC](https://discuss.elastic.co/t/importing-kibana-json-files-using-kibana-api-call/155344 "2018-11-06T10:30:02Z")
I have JSON file which has an Index and its corresponding Searches, Visualizations and Dashbords. Now I want to import that JSON file in to the kibana using the Import API call. I used the following api call to import a… --- ## [Script Field in Kibana with Time Passed Since Timestamp](https://discuss.elastic.co/t/script-field-in-kibana-with-time-passed-since-timestamp/36393)
**Author:** [@Ralph\_Vigne](https://discuss.elastic.co/u/Ralph_Vigne)\ **Replies:** 2\ **Last updated:** [December 9, 2015, 3:44pm UTC](https://discuss.elastic.co/t/script-field-in-kibana-with-time-passed-since-timestamp/36393 "2015-12-09T15:44:14Z")
Hi Experts, I did quite an extensive search (Google and this forum) but to my surprise couldn't find anything. If I just asked the question the wring way please point me to the right thread or something. What I wante… --- ## [Logstash healthcheck](https://discuss.elastic.co/t/logstash-healthcheck/271088)
**Author:** [@sulsulatoff](https://discuss.elastic.co/u/sulsulatoff)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 1:43pm UTC](https://discuss.elastic.co/t/logstash-healthcheck/271088 "2021-04-26T13:43:42Z")
Our Logstash runs in a pod every 30 mins. Once in a while, it stops working and we need to restart the pod. Is there a way logstash can notify an external server that it's up and running (an http endpoint) --- ## [Help using Logstash XML Filter to Parse Offline Windows Event Logs](https://discuss.elastic.co/t/help-using-logstash-xml-filter-to-parse-offline-windows-event-logs/133360)
**Author:** [@f951298b](https://discuss.elastic.co/u/f951298b)\ **Replies:** 4\ **Last updated:** [May 26, 2018, 5:14am UTC](https://discuss.elastic.co/t/help-using-logstash-xml-filter-to-parse-offline-windows-event-logs/133360 "2018-05-26T05:14:20Z")
I am trying to ingest Windows Event (Application, Security, System) logs into Logstash that were pulled from an offline Windows system; ELK is running on a separate offline system. The logs were saved in XML format (sni… --- ## [Using list environment variables in filebeat config](https://discuss.elastic.co/t/using-list-environment-variables-in-filebeat-config/70124)
**Author:** [@ApsOps](https://discuss.elastic.co/u/ApsOps)\ **Replies:** 4\ **Last updated:** [December 29, 2016, 7:04pm UTC](https://discuss.elastic.co/t/using-list-environment-variables-in-filebeat-config/70124 "2016-12-29T19:04:39Z")
Previous discussion at https://discuss.elastic.co/t/interpolate-list-from-environment-variable-in-filebeats/65517 and https://github.com/elastic/beats/pull/3045 I built from master, so this^ PR is included. I'm using… --- ## [How to test a service which uses RestHighLevelClient?](https://discuss.elastic.co/t/how-to-test-a-service-which-uses-resthighlevelclient/151674)
**Author:** [@Inna\_Korobikhina](https://discuss.elastic.co/u/Inna_Korobikhina)\ **Replies:** 0\ **Last updated:** [October 9, 2018, 3:34pm UTC](https://discuss.elastic.co/t/how-to-test-a-service-which-uses-resthighlevelclient/151674 "2018-10-09T15:34:23Z")
Hi, I have a service which uses RestHighLevelClient and which I want to unit test. I have a method that has the following lines: .... IndexRequest request = new IndexRequest(index, type).source(getContentBuilder(up… --- ## [Count unique combination of fields](https://discuss.elastic.co/t/count-unique-combination-of-fields/177602)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 3\ **Last updated:** [April 23, 2019, 2:39pm UTC](https://discuss.elastic.co/t/count-unique-combination-of-fields/177602 "2019-04-23T14:39:10Z")
Hi, For some time I am searching now, but cannot find if what I need is possible. I have this index with several fields that are aggregatable. I want to fill a table with these fields, one row per unique combination of … --- ## [Newbie question: Visualize number of log entries per device](https://discuss.elastic.co/t/newbie-question-visualize-number-of-log-entries-per-device/79771)
**Author:** [@jmbrown](https://discuss.elastic.co/u/jmbrown)\ **Replies:** 3\ **Last updated:** [March 23, 2017, 9:35pm UTC](https://discuss.elastic.co/t/newbie-question-visualize-number-of-log-entries-per-device/79771 "2017-03-23T21:35:57Z")
HI, I just setup a ELK stack and I'm using Logstash to ingest syslog entries from our routers. What I would like to do is create a visualization that shows a pie chart: The data would be Number of log entries per dev… --- ## [Import JSON into ElasticSearch](https://discuss.elastic.co/t/import-json-into-elasticsearch/97725)
**Author:** [@adityosn](https://discuss.elastic.co/u/adityosn)\ **Replies:** 8\ **Last updated:** [September 5, 2017, 8:11am UTC](https://discuss.elastic.co/t/import-json-into-elasticsearch/97725 "2017-09-05T08:11:00Z")
I would like to know how to import JSON data into ElasticSearch. I have used this command but it won’t work: curl -XPOST 'http://myipaddress:9200/demo-shop/items/' -H 'Content-Type: application/json' --data-binary @data… --- ## [FreeIPA Log Configuration for Logstash (Grok Filter)](https://discuss.elastic.co/t/freeipa-log-configuration-for-logstash-grok-filter/89876)
**Author:** [@mvelez83](https://discuss.elastic.co/u/mvelez83)\ **Replies:** 5\ **Last updated:** [June 20, 2017, 1:11am UTC](https://discuss.elastic.co/t/freeipa-log-configuration-for-logstash-grok-filter/89876 "2017-06-20T01:11:03Z")
Hello, I was trying to follow https://www.freeipa.org/page/Centralized\_Logging to configure the following logs from FreeIPA in logstash: /var/log/httpd/error\_log: FreeIPA API call logs (and Apache errors) /var/log/kr… --- ## [Not getting the filebeat updated in real-time on the kibana dashboard](https://discuss.elastic.co/t/not-getting-the-filebeat-updated-in-real-time-on-the-kibana-dashboard/58748)
**Author:** [@vardhasu](https://discuss.elastic.co/u/vardhasu)\ **Replies:** 5\ **Last updated:** [August 26, 2016, 4:39pm UTC](https://discuss.elastic.co/t/not-getting-the-filebeat-updated-in-real-time-on-the-kibana-dashboard/58748 "2016-08-26T16:39:44Z")
Hi I have installed filebeat on different nodes to send /var/log/messages to logstash which is in turn sends to elasticsearch and then to Kibana for display. What I do not see is that on the Kibana Discover and Dashbo… --- ## [How to do highlight on percolation](https://discuss.elastic.co/t/how-to-do-highlight-on-percolation/56518)
**Author:** [@Nisar\_Adappadathil](https://discuss.elastic.co/u/Nisar_Adappadathil)\ **Replies:** 5\ **Last updated:** [July 29, 2016, 9:26am UTC](https://discuss.elastic.co/t/how-to-do-highlight-on-percolation/56518 "2016-07-29T09:26:40Z")
How to do a highlight on percolation of existing document. I have indexed a document. In this index,type and Id --\>\> POST http://127.0.0.1:9200/sp/res/12 Now i have to do percolation on this GET http://127.0.0.1:… [Previous page](https://discuss.elastic.co/top.md?page=534&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=536&per_page=50&period=all)