# Top **URL:** https://discuss.elastic.co/top.md?page=568&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 569 --- ## [Unable to create template with Analyzer](https://discuss.elastic.co/t/unable-to-create-template-with-analyzer/124708)
**Author:** [@madeti](https://discuss.elastic.co/u/madeti)\ **Replies:** 7\ **Last updated:** [March 23, 2018, 8:52am UTC](https://discuss.elastic.co/t/unable-to-create-template-with-analyzer/124708 "2018-03-23T08:52:28Z")
Hello, I was able to create an analyzer and use it on a single Index. Now, I would like to apply this to an Index template, so that whenever a new index (with Date attached to it) is created, this analyzer can be applie… --- ## [Dec 23rd, 2020: \[ES\] Nuevas incorporaciones a la familia de tipos keyword: constant\_keyword y wildcard](https://discuss.elastic.co/t/dec-23rd-2020-es-nuevas-incorporaciones-a-la-familia-de-tipos-keyword-constant-keyword-y-wildcard/257209)
**Author:** [@Imma](https://discuss.elastic.co/u/Imma)\ **Replies:** 0\ **Last updated:** [December 23, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-23rd-2020-es-nuevas-incorporaciones-a-la-familia-de-tipos-keyword-constant-keyword-y-wildcard/257209 "2020-12-23T08:00:03Z")
Versión en inglés En este post hablaremos de las recientes incorporaciones a la familia de tipos keyword: wildcard y constant\_keyword. Los campos de tipo wildcard estan optimizados para búsquedas con caracteres comodín… --- ## [Index data from firebase db "so called index" for tinder-like app](https://discuss.elastic.co/t/index-data-from-firebase-db-so-called-index-for-tinder-like-app/65100)
**Author:** [@florianbepunkt](https://discuss.elastic.co/u/florianbepunkt)\ **Replies:** 0\ **Last updated:** [November 5, 2016, 2:17pm UTC](https://discuss.elastic.co/t/index-data-from-firebase-db-so-called-index-for-tinder-like-app/65100 "2016-11-05T14:17:48Z")
I'm working on a tinder-like app. We use a firebase database and index user profiles in our firebase db with elasticsearch. This works fine but I struggle on how to exclude already swiped profiles from query. So scenar… --- ## [Grep in logstash](https://discuss.elastic.co/t/grep-in-logstash/24510)
**Author:** [@Lee\_PS](https://discuss.elastic.co/u/Lee_PS)\ **Replies:** 1\ **Last updated:** [June 28, 2015, 5:54pm UTC](https://discuss.elastic.co/t/grep-in-logstash/24510 "2015-06-28T17:54:47Z")
Hi I am using grep in conf . while i am doing the test am getting the following error \[lee@server1 logstash-1.5.0\]$ bin/logstash -f test4.conf --configtest The error reported is: Couldn't find any filter plugin named … --- ## [EBADF: Bad file descriptor](https://discuss.elastic.co/t/ebadf-bad-file-descriptor/148666)
**Author:** [@kilo](https://discuss.elastic.co/u/kilo)\ **Replies:** 4\ **Last updated:** [September 17, 2018, 6:50pm UTC](https://discuss.elastic.co/t/ebadf-bad-file-descriptor/148666 "2018-09-17T18:50:01Z")
Logstash is throwing the following error: \[2018-09-14T13:53:47,371\]\[WARN \]\[logstash.inputs.websocket\] websocket input client threw exception, restarting {:exception=\>#\ **Author:** [@olorasde](https://discuss.elastic.co/u/olorasde)\ **Replies:** 8\ **Last updated:** [February 7, 2017, 7:54am UTC](https://discuss.elastic.co/t/possible-bug-with-redis-output-plugin/73832 "2017-02-07T07:54:14Z") Hi, I'm using redis output plugin in my logstash to extract keys from redis, preprocess it and return it to redis. Logstash version are 5.1.1 and redis is 3.2.6. I confgure my redis output plugin in logstsh as follow… --- ## [elasticsearch.ssl.verificationMode is not working in Kibana 8.3.2](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847)
**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Replies:** 7\ **Last updated:** [February 7, 2023, 11:40am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-verificationmode-is-not-working-in-kibana-8-3-2/324847 "2023-02-07T11:40:59Z")
Hello everyone. I set the ssl configuration for my cluster using the elasticsearch-certutil, but my Kibana is unable to reach https://epr.elastic.co so I can not install any integration since it depends on loading from … --- ## [Logstash heap size vs. Elasticsearch heap size](https://discuss.elastic.co/t/logstash-heap-size-vs-elasticsearch-heap-size/133662)
**Author:** [@dr01](https://discuss.elastic.co/u/dr01)\ **Replies:** 2\ **Last updated:** [May 29, 2018, 11:19am UTC](https://discuss.elastic.co/t/logstash-heap-size-vs-elasticsearch-heap-size/133662 "2018-05-29T11:19:33Z")
Hello, As a rule of thumb, does it make sense to set a Logstash heap size equal (or proportional) to the Elasticsearch heap size, or there are other factors to take into consideration? For instance, would an ELK stack … --- ## [Regex in conditionals](https://discuss.elastic.co/t/regex-in-conditionals/77090)
**Author:** [@timmy8ken](https://discuss.elastic.co/u/timmy8ken)\ **Replies:** 2\ **Last updated:** [March 3, 2017, 12:20am UTC](https://discuss.elastic.co/t/regex-in-conditionals/77090 "2017-03-03T00:20:45Z")
Hi All, I have log files that I need to parse that have multiple and varying lines, I have managed to write a number of grok queries that are successfully matching all lines in the log, all similar this: if !("p… --- ## [Number of transactions per minute reported by APM is significantly different than Request Count in monitoring. Possible reasons for the discrepancy?](https://discuss.elastic.co/t/number-of-transactions-per-minute-reported-by-apm-is-significantly-different-than-request-count-in-monitoring-possible-reasons-for-the-discrepancy/209367)
**Author:** [@hickeroar](https://discuss.elastic.co/u/hickeroar)\ **Replies:** 5\ **Last updated:** [November 27, 2019, 10:53am UTC](https://discuss.elastic.co/t/number-of-transactions-per-minute-reported-by-apm-is-significantly-different-than-request-count-in-monitoring-possible-reasons-for-the-discrepancy/209367 "2019-11-27T10:53:15Z")
Kibana version: 7.1.1 oss (AWS Elasticsearch Service) Elasticsearch version: 7.1.1 oss (AWS Elasticsearch Service) APM Server version: 7.1.1 oss APM Agent language and version: Ruby/Rails 7.1.1 Our application is a r… --- ## [Difference in num\_docs count and search\_type=count results](https://discuss.elastic.co/t/difference-in-num-docs-count-and-search-type-count-results/8976)
**Author:** [@mr\_t](https://discuss.elastic.co/u/mr_t)\ **Replies:** 3\ **Last updated:** [September 13, 2012, 2:58am UTC](https://discuss.elastic.co/t/difference-in-num-docs-count-and-search-type-count-results/8976 "2012-09-13T02:58:59Z")
I've got an index with a static set of documents, with no upsert or delete operations working on the index, running on a 9 node cluster with 4 master only nodes and 5 data only nodes. When I query any of the master n… --- ## [Filebeat multiline codec not working in my case](https://discuss.elastic.co/t/filebeat-multiline-codec-not-working-in-my-case/85040)
**Author:** [@aarishramesh](https://discuss.elastic.co/u/aarishramesh)\ **Replies:** 2\ **Last updated:** [May 9, 2017, 2:11pm UTC](https://discuss.elastic.co/t/filebeat-multiline-codec-not-working-in-my-case/85040 "2017-05-09T14:11:22Z")
I have defined multiline codec in filebeat.yml like below multiline.pattern: '^%{TIMESTAMP\_ISO8601} ' multiline.negate: true multiline.match: after But it does not seem to be working as multiple lines of log get ap… --- ## [Ensure that watcher does not miss documents (logs)](https://discuss.elastic.co/t/ensure-that-watcher-does-not-miss-documents-logs/127780)
**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\ **Replies:** 4\ **Last updated:** [April 25, 2018, 1:29pm UTC](https://discuss.elastic.co/t/ensure-that-watcher-does-not-miss-documents-logs/127780 "2018-04-25T13:29:12Z")
Hey When searching for logs in Elastic using Watcher, a range query on the @timestamp field can be used: "range": { "@timestamp": { "gte": "now-1h-5m", "lt": "now-5m" } } Note the -5m which I have not seen… --- ## [Calculate time difference between two dates ( start date and end date of an log file )](https://discuss.elastic.co/t/calculate-time-difference-between-two-dates-start-date-and-end-date-of-an-log-file/178916)
**Author:** [@Badem](https://discuss.elastic.co/u/Badem)\ **Replies:** 3\ **Last updated:** [April 29, 2019, 1:24pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-dates-start-date-and-end-date-of-an-log-file/178916 "2019-04-29T13:24:56Z")
Hello, everyone. I'm trying without success to calculate the difference between the start date and the end date of my log file in order to get the time duration ( in second ) of an script. Here is my input : 17/04/201… --- ## [Logstash input fails listening IPv6](https://discuss.elastic.co/t/logstash-input-fails-listening-ipv6/122114)
**Author:** [@davama](https://discuss.elastic.co/u/davama)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 5:56pm UTC](https://discuss.elastic.co/t/logstash-input-fails-listening-ipv6/122114 "2018-04-24T17:56:29Z")
Trying to test this project: https://github.com/robcowart/elastiflow Issue: When running logstash version 6.2.2, enabling ipv6 fails but when i enable with version 5.6.8 it passes and pumps data to elasticsearch. Not su… --- ## [Bulk Processor api not working](https://discuss.elastic.co/t/bulk-processor-api-not-working/68674)
**Author:** [@nmalinip](https://discuss.elastic.co/u/nmalinip)\ **Replies:** 3\ **Last updated:** [December 13, 2016, 7:44am UTC](https://discuss.elastic.co/t/bulk-processor-api-not-working/68674 "2016-12-13T07:44:08Z")
HI, I am trying to insert data into elasticsearch using java bulkprocessor api (in scala)...below is the code i am using... val bulkProcessor = BulkProcessor.builder(esclient, new BulkProcessor.Listener() { @… --- ## [Some question about soft\_deletes and Reindex API](https://discuss.elastic.co/t/some-question-about-soft-deletes-and-reindex-api/302765)
**Author:** [@zhangzongdong](https://discuss.elastic.co/u/zhangzongdong)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 1:12am UTC](https://discuss.elastic.co/t/some-question-about-soft-deletes-and-reindex-api/302765 "2022-04-26T01:12:31Z")
Two questions How to use reindex API with zero downtime. Could the index setting of index.soft\_deletes\_enabled be non-dynamic and replace reindex API with setting index.soft\_deletes\_enabled to true for a exist index wit… --- ## [How to do sniff data from all connected network in windows packetbeat](https://discuss.elastic.co/t/how-to-do-sniff-data-from-all-connected-network-in-windows-packetbeat/146734)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 5\ **Last updated:** [September 6, 2018, 1:28pm UTC](https://discuss.elastic.co/t/how-to-do-sniff-data-from-all-connected-network-in-windows-packetbeat/146734 "2018-09-06T13:28:13Z")
How to sniff data from all connected network in packetbeat how to do packetbeat.interfaces.device: all in windows ? is there a way for that ? --- ## [Load custom plugin as default](https://discuss.elastic.co/t/load-custom-plugin-as-default/107302)
**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\ **Replies:** 5\ **Last updated:** [November 16, 2017, 5:27am UTC](https://discuss.elastic.co/t/load-custom-plugin-as-default/107302 "2017-11-16T05:27:00Z")
hello guys, i need some advice, how can i make own plugin load as default plugin in kibana? --- ## [How can I stop using X-Pack? (official ES 5 Docker image)](https://discuss.elastic.co/t/how-can-i-stop-using-x-pack-official-es-5-docker-image/103108)
**Author:** [@KajMagnus](https://discuss.elastic.co/u/KajMagnus)\ **Replies:** 2\ **Last updated:** [October 9, 2017, 2:17am UTC](https://discuss.elastic.co/t/how-can-i-stop-using-x-pack-official-es-5-docker-image/103108 "2017-10-09T02:17:13Z")
Hi, I use Elasticsearch via the Docker image ( FROM docker.elastic.co/elasticsearch/elasticsearch:5.5.2) and I've attempted to disable all X-Pack stuff. However, E.S. logs warnings every 10 minutes it seems: LICENSE \[… --- ## [Dev tools autocomplete not working](https://discuss.elastic.co/t/dev-tools-autocomplete-not-working/70730)
**Author:** [@RobG](https://discuss.elastic.co/u/RobG)\ **Replies:** 2\ **Last updated:** [January 5, 2017, 10:12pm UTC](https://discuss.elastic.co/t/dev-tools-autocomplete-not-working/70730 "2017-01-05T22:12:18Z")
When using the dev tools console, the very useful autocomplete of fields and indices does not work. Commands do autocomplete as expected. The setting is turned on. Any suggestions? --- ## [Can you create a standard log entry that logstash will automatically parse](https://discuss.elastic.co/t/can-you-create-a-standard-log-entry-that-logstash-will-automatically-parse/111952)
**Author:** [@Sniipe](https://discuss.elastic.co/u/Sniipe)\ **Replies:** 8\ **Last updated:** [December 15, 2017, 4:13pm UTC](https://discuss.elastic.co/t/can-you-create-a-standard-log-entry-that-logstash-will-automatically-parse/111952 "2017-12-15T16:13:04Z")
I'm creating new logs (using log4net) and I was wondering if there is a standard where you can create an entry that Kibana will be able to come up with the available fields automatically? I just spotted this in another … --- ## [\[1.7\] mapping erased](https://discuss.elastic.co/t/1-7-mapping-erased/71733)
**Author:** [@Ugo\_Bourdon](https://discuss.elastic.co/u/Ugo_Bourdon)\ **Replies:** 5\ **Last updated:** [January 16, 2017, 2:00pm UTC](https://discuss.elastic.co/t/1-7-mapping-erased/71733 "2017-01-16T14:00:52Z")
Hi, I use epxlicit mapping in my elastyicsearch but sometimes, this mapping was erased and data are indexed with default mapping. Have any tips on the cause of that ? --- ## ['Lock' in Persistent Volumes on Openshift when deploys blue-green ELK Stack](https://discuss.elastic.co/t/lock-in-persistent-volumes-on-openshift-when-deploys-blue-green-elk-stack/262377)
**Author:** [@jonhmb](https://discuss.elastic.co/u/jonhmb)\ **Replies:** 4\ **Last updated:** [January 28, 2021, 1:17pm UTC](https://discuss.elastic.co/t/lock-in-persistent-volumes-on-openshift-when-deploys-blue-green-elk-stack/262377 "2021-01-28T13:17:57Z")
I have an ELK Stack running in a Openshift POD as 'Blue' using Persistent Volumes to storage data. When I try to deploy a second ELK Stack in a second POD using the same Persistent Volumes, i get an error because ELK Vo… --- ## [How to add new column in the datatable](https://discuss.elastic.co/t/how-to-add-new-column-in-the-datatable/310172)
**Author:** [@malik123](https://discuss.elastic.co/u/malik123)\ **Replies:** 5\ **Last updated:** [July 21, 2022, 4:13pm UTC](https://discuss.elastic.co/t/how-to-add-new-column-in-the-datatable/310172 "2022-07-21T16:13:03Z")
Hi all, Currently I am working on the sample data that is provided by the kibana. I want to display a new column in the datatable named "total\_Hours". I want to add "Unique Visits (Total)" and "Unique Visits (Last Hour… --- ## [Best Web Crawler For Elastisearch](https://discuss.elastic.co/t/best-web-crawler-for-elastisearch/140881)
**Author:** [@katiyar](https://discuss.elastic.co/u/katiyar)\ **Replies:** 1\ **Last updated:** [July 20, 2018, 5:29pm UTC](https://discuss.elastic.co/t/best-web-crawler-for-elastisearch/140881 "2018-07-20T17:29:37Z")
Hi, I want to create search functionality using Elastisearch for my on-premises website. Could you please suggest me best web Crawler for Elastisearch ? --- ## [Why kafka event key must be unique?](https://discuss.elastic.co/t/why-kafka-event-key-must-be-unique/205330)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 2\ **Last updated:** [October 30, 2019, 4:05pm UTC](https://discuss.elastic.co/t/why-kafka-event-key-must-be-unique/205330 "2019-10-30T16:05:34Z")
I read the following from the manual. However, i could not seem to find this requirement from apache kafka documentation? We would like to use hostname + source filename to be kafka event key, which is definitely not u… --- ## [Three bigger data nodes or six smaller?](https://discuss.elastic.co/t/three-bigger-data-nodes-or-six-smaller/78694)
**Author:** [@ivten](https://discuss.elastic.co/u/ivten)\ **Replies:** 6\ **Last updated:** [March 27, 2017, 7:55am UTC](https://discuss.elastic.co/t/three-bigger-data-nodes-or-six-smaller/78694 "2017-03-27T07:55:22Z")
Hi, I have the following dilemma. I've been provided with 3 hosts on which to run a virtualized Elasticsearch cluster. The problems is that if I want to run 3 masters and 6 datanodes each of the elasticsearch nodes en… --- ## [Cluster getting deleted automatically](https://discuss.elastic.co/t/cluster-getting-deleted-automatically/72184)
**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\ **Replies:** 6\ **Last updated:** [January 19, 2017, 3:59pm UTC](https://discuss.elastic.co/t/cluster-getting-deleted-automatically/72184 "2017-01-19T15:59:43Z")
I am facing a very strange problem. I am crawling some data and saving it form time to time but my nodes in the cluster are deleted automatically as i am saving. I checked log files it only had two lines in it \[… --- ## [Which certificate should I prepare when enabling mutual tls authentication?](https://discuss.elastic.co/t/which-certificate-should-i-prepare-when-enabling-mutual-tls-authentication/227593)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 3\ **Last updated:** [April 13, 2020, 7:29am UTC](https://discuss.elastic.co/t/which-certificate-should-i-prepare-when-enabling-mutual-tls-authentication/227593 "2020-04-13T07:29:28Z")
Hello . I am trying to setup mutual authenticatation by setting xpack.security.http.ssl.client\_authentication to true . However, I am getting below error on elasticsearch (v7.6.2) side . Caused by: javax.net.ssl.… --- ## [OOM error in Filebeat](https://discuss.elastic.co/t/oom-error-in-filebeat/101820)
**Author:** [@Rohit\_Singh](https://discuss.elastic.co/u/Rohit_Singh)\ **Replies:** 3\ **Last updated:** [September 27, 2017, 12:54pm UTC](https://discuss.elastic.co/t/oom-error-in-filebeat/101820 "2017-09-27T12:54:24Z")
We are running filebeat in an docker container with basic configuration and only one logstash output. Filebeat was running continously for past few days, yesterday it started to comeup and go down continuously. the fil… --- ## [Event messages are splitted in event\_data.param xy? How to fix that?](https://discuss.elastic.co/t/event-messages-are-splitted-in-event-data-param-xy-how-to-fix-that/61087)
**Author:** [@toasti](https://discuss.elastic.co/u/toasti)\ **Replies:** 4\ **Last updated:** [October 7, 2016, 4:21pm UTC](https://discuss.elastic.co/t/event-messages-are-splitted-in-event-data-param-xy-how-to-fix-that/61087 "2016-10-07T16:21:30Z")
Hello there, I have installed ELKwin from https://www.itefix.net/elkwin - very nice solution to get the ELK-Stack running in seconds. If I'm honest, I am very new to the ELK-Stack and it is not so easy to start... On… --- ## [New protocol: FTP](https://discuss.elastic.co/t/new-protocol-ftp/27057)
**Author:** [@Aymeric\_Caroff](https://discuss.elastic.co/u/Aymeric_Caroff)\ **Replies:** 5\ **Last updated:** [September 25, 2015, 9:20am UTC](https://discuss.elastic.co/t/new-protocol-ftp/27057 "2015-09-25T09:20:26Z")
Hi, is there any plan to support FTP protocol in a not too distant future? Best regards --- ## [Grok multiple pattern definitions](https://discuss.elastic.co/t/grok-multiple-pattern-definitions/254797)
**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\ **Replies:** 2\ **Last updated:** [November 9, 2020, 5:24pm UTC](https://discuss.elastic.co/t/grok-multiple-pattern-definitions/254797 "2020-11-09T17:24:57Z")
Hello, I am trying to define several patterns to use on logstash.conf. So far I have tried this: grok{ tag\_on\_failure =\> \[\] pattern\_definitions =\> {"text1" =\> "((?\<=responses=)\[a-zA-z \]+(?=,))"} patt… --- ## [CultureNotFoundException: Only the invariant culture is supported in globalization-invariant mode](https://discuss.elastic.co/t/culturenotfoundexception-only-the-invariant-culture-is-supported-in-globalization-invariant-mode/323665)
**Author:** [@jimmie](https://discuss.elastic.co/u/jimmie)\ **Replies:** 2\ **Last updated:** [January 23, 2023, 9:21am UTC](https://discuss.elastic.co/t/culturenotfoundexception-only-the-invariant-culture-is-supported-in-globalization-invariant-mode/323665 "2023-01-23T09:21:29Z")
Hello, I'm trying to make my app culture invariant by adding the InvariantGlobalization = true property in the project file \ \ \net6.0\ **Author:** [@andrea\_patricelli](https://discuss.elastic.co/u/andrea_patricelli)\ **Replies:** 2\ **Last updated:** [August 16, 2016, 3:16pm UTC](https://discuss.elastic.co/t/case-insensitive-search-on-not-analyzed-fields/58128 "2016-08-16T15:16:59Z") Hi, I googled about case sensitivity of ES searches and got this: "You'll need to analyze a field to search case-insensitive." "If you want to make a case insensitive search you should use match query" Are 1 and 2… --- ## [Index Lifecycle dilemma](https://discuss.elastic.co/t/index-lifecycle-dilemma/177598)
**Author:** [@Mesmer](https://discuss.elastic.co/u/Mesmer)\ **Replies:** 1\ **Last updated:** [April 26, 2019, 2:03pm UTC](https://discuss.elastic.co/t/index-lifecycle-dilemma/177598 "2019-04-26T14:03:41Z")
Hello, Trying to get my head around how ILM works. I have logstash creating these daily indices: and want to implement a simple ILM. output { elasticsearch { hosts =\> \["http://localhost:9200"\] index =\> "depo… --- ## [Problem with keeping in sync Elasticsearch across two data centers](https://discuss.elastic.co/t/problem-with-keeping-in-sync-elasticsearch-across-two-data-centers/15955)
**Author:** [@Dario\_Rossi](https://discuss.elastic.co/u/Dario_Rossi)\ **Replies:** 8\ **Last updated:** [February 25, 2014, 1:06pm UTC](https://discuss.elastic.co/t/problem-with-keeping-in-sync-elasticsearch-across-two-data-centers/15955 "2014-02-25T13:06:14Z")
Hi, I've the following problem: our application publishes content to an Elasticsearch cluster. We use local data less node for querying elasticsearch then, so we don't use HTTP REST and the local nodes are the lo… --- ## [Merge or combine two indexes to one based on common field (id)](https://discuss.elastic.co/t/merge-or-combine-two-indexes-to-one-based-on-common-field-id/178678)
**Author:** [@aldol](https://discuss.elastic.co/u/aldol)\ **Replies:** 6\ **Last updated:** [May 20, 2019, 7:08pm UTC](https://discuss.elastic.co/t/merge-or-combine-two-indexes-to-one-based-on-common-field-id/178678 "2019-05-20T19:08:36Z")
I have one index (index1) with columns "name" and "id" and the other index (index2) with columns "resume" and "id". "id" is the common field between two indexes. How can I merge or combine them together so I get one in… --- ## [Machine learning algorithm in Elastic?](https://discuss.elastic.co/t/machine-learning-algorithm-in-elastic/98482)
**Author:** [@LeKhoa](https://discuss.elastic.co/u/LeKhoa)\ **Replies:** 6\ **Last updated:** [August 30, 2017, 12:54pm UTC](https://discuss.elastic.co/t/machine-learning-algorithm-in-elastic/98482 "2017-08-30T12:54:51Z")
Dear Sir/Madam, I'm learning about elastic. But I do not know what elastic use machine learning algorithm?? Do I read some documents that mentions it using classification algorithms from log data? So to classify we need… --- ## [Elasticsearch pods stuck in pending: nodes are available: 3 node(s) had volume node affinity conflict,](https://discuss.elastic.co/t/elasticsearch-pods-stuck-in-pending-nodes-are-available-3-node-s-had-volume-node-affinity-conflict/302935)
**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\ **Replies:** 1\ **Last updated:** [April 21, 2022, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-pods-stuck-in-pending-nodes-are-available-3-node-s-had-volume-node-affinity-conflict/302935 "2022-04-21T16:21:07Z")
I am using AKS. (Azure) I had an elasticsearch cluster provisioned via ECK 1.8.0 with 3 nodes accross 3 VMs in a nodepool. (AKS) I wanted to bump up the configuration, so i provisioned a new nodepool with 3 VMs and the… --- ## [Send filebeat 6.0 dashboard template to Kibana using logstash](https://discuss.elastic.co/t/send-filebeat-6-0-dashboard-template-to-kibana-using-logstash/108690)
**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\ **Replies:** 2\ **Last updated:** [December 6, 2017, 9:43am UTC](https://discuss.elastic.co/t/send-filebeat-6-0-dashboard-template-to-kibana-using-logstash/108690 "2017-12-06T09:43:07Z")
Hi I am new to the ELK stack Previously I was using 5.6.3 and had connected fileBeat and metricBeat to Logstash where a geoip lookup was done in /etc/logstash/conf.d/beats.conf and this was then forwarded to Elasticsea… --- ## [ElasticSearch failure: Environment is not locked](https://discuss.elastic.co/t/elasticsearch-failure-environment-is-not-locked/182559)
**Author:** [@HPVRNP](https://discuss.elastic.co/u/HPVRNP)\ **Replies:** 3\ **Last updated:** [May 24, 2019, 8:46am UTC](https://discuss.elastic.co/t/elasticsearch-failure-environment-is-not-locked/182559 "2019-05-24T08:46:57Z")
Hi, Environment: OS : Windows 64-bit ElasticSearch : 6.6.2 Java: 1.8.151 Cluster: Single Node cluster Index strategy: Indices are created daily and programmatically Shard: Single shard per index and no replicatio… --- ## [Dynamic dashboard](https://discuss.elastic.co/t/dynamic-dashboard/1714)
**Author:** [@tom](https://discuss.elastic.co/u/tom)\ **Replies:** 3\ **Last updated:** [August 11, 2015, 11:49pm UTC](https://discuss.elastic.co/t/dynamic-dashboard/1714 "2015-08-11T23:49:29Z")
Hi, Is it possible to dynamically create a dashboard. I want to display the same dashboard for different users whose data is present in the same index as different types like indexname/{userId}. Now for every logged in… --- ## [Query string query: match string beginning with pattern?](https://discuss.elastic.co/t/query-string-query-match-string-beginning-with-pattern/57716)
**Author:** [@twigbranch](https://discuss.elastic.co/u/twigbranch)\ **Replies:** 4\ **Last updated:** [August 12, 2016, 8:39am UTC](https://discuss.elastic.co/t/query-string-query-match-string-beginning-with-pattern/57716 "2016-08-12T08:39:46Z")
I have an analyzed filed containing various phrases. I'm running query\_string queries against that field and would like to find records where the string begins with a certain pattern. I was attempting to do this via re… --- ## [Filebeat connections stuck in CLOSE\_WAIT](https://discuss.elastic.co/t/filebeat-connections-stuck-in-close-wait/113747)
**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\ **Replies:** 7\ **Last updated:** [January 24, 2018, 8:14am UTC](https://discuss.elastic.co/t/filebeat-connections-stuck-in-close-wait/113747 "2018-01-24T08:14:35Z")
I have multiple servers running filebeat sending logs to two logstash servers (all in AWS), after a couple of days the logstash servers stop ingesting and report "Too many files open". An lsof shows thousands of connecti… --- ## [mongodb to elasticsearch by using logstash](https://discuss.elastic.co/t/mongodb-to-elasticsearch-by-using-logstash/151572)
**Author:** [@Okay\_SK](https://discuss.elastic.co/u/Okay_SK)\ **Replies:** 6\ **Last updated:** [November 23, 2018, 5:43am UTC](https://discuss.elastic.co/t/mongodb-to-elasticsearch-by-using-logstash/151572 "2018-11-23T05:43:08Z")
최근에 나온 한글 분석기 nori를 사용하기 위해서는 ES 6.4.1이상의 버전을 사용해야 하는건가요? 추가로 nori vs. arirang vs. seunjeon 중 (속도말고) 형태소 분석의 정확성에는 큰 차이가 없을까요? mongodb에서 elasticsearch로 data를 이전하기 위해, logstash를 사용하려는데 어떤 플러그인을 추가로 설치해야할까요? logstas… --- ## [Monthly indexes](https://discuss.elastic.co/t/monthly-indexes/246585)
**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\ **Replies:** 3\ **Last updated:** [August 28, 2020, 4:18pm UTC](https://discuss.elastic.co/t/monthly-indexes/246585 "2020-08-28T16:18:50Z")
I am using Logstash to create monthly indexes using the following format in the .conf file: output{ elasticsearch{ index =\> "index\_name-%{+YYYY.MM}" ... } } This format places most events in the correct month. Yet… --- ## [Sample Data bank does not work](https://discuss.elastic.co/t/sample-data-bank-does-not-work/71631)
**Author:** [@lielar](https://discuss.elastic.co/u/lielar)\ **Replies:** 3\ **Last updated:** [January 15, 2017, 8:15am UTC](https://discuss.elastic.co/t/sample-data-bank-does-not-work/71631 "2017-01-15T08:15:55Z")
Hi First time user of elasticsearch - I have attempted to download the sample data from Sample Data, in particular, the bank sample data. The syntax to add the mapping for the bank data (which is missing) is as follows… --- ## [Logstash is processing logs too slow](https://discuss.elastic.co/t/logstash-is-processing-logs-too-slow/25477)
**Author:** [@scukonick](https://discuss.elastic.co/u/scukonick)\ **Replies:** 3\ **Last updated:** [August 12, 2015, 3:12am UTC](https://discuss.elastic.co/t/logstash-is-processing-logs-too-slow/25477 "2015-08-12T03:12:31Z")
Hello, I have the next configuration. ES cluster with 5 servers, each with Intel Xeon 192.99.19.55 and 64GB RAM (3 of the with 128GB). Nginx which is load balancing http requests to ES is on one of them. And I have 3… [Previous page](https://discuss.elastic.co/top.md?page=567&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=569&per_page=50&period=all)