# Top **URL:** https://discuss.elastic.co/top.md?page=615&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 616 --- ## [Groks solution in filebeat](https://discuss.elastic.co/t/groks-solution-in-filebeat/327133)
**Author:** [@ingri.mahecha](https://discuss.elastic.co/u/ingri.mahecha)\ **Replies:** 0\ **Last updated:** [March 7, 2023, 3:22am UTC](https://discuss.elastic.co/t/groks-solution-in-filebeat/327133 "2023-03-07T03:22:29Z")
Hello community, Having encountered the problem of how to apply groks in filebeat, I want to share with you the solution I found with the PROCESSORS section and the Dissect function, I hope it helps you, as well as havi… --- ## [New aggregation based visualisation line percentiles does not show y-axis labels anymore](https://discuss.elastic.co/t/new-aggregation-based-visualisation-line-percentiles-does-not-show-y-axis-labels-anymore/295914)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 3\ **Last updated:** [February 2, 2022, 2:22pm UTC](https://discuss.elastic.co/t/new-aggregation-based-visualisation-line-percentiles-does-not-show-y-axis-labels-anymore/295914 "2022-02-02T14:22:26Z")
Kibana 7.16.3 in latest Firefox and Brave (chromium) browser Steps to reproduce: app/visualize create aggregation based line select a saved search aggregation: percentiles field: any number field bucket: add x-axis ag… --- ## [Load template in kibana](https://discuss.elastic.co/t/load-template-in-kibana/103120)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 8\ **Last updated:** [October 8, 2017, 3:25am UTC](https://discuss.elastic.co/t/load-template-in-kibana/103120 "2017-10-08T03:25:39Z")
Hi Guys, This might sound stupid but would like to know what is the use of tempalate in kibana? and how do I load the template in kibana? E.g. look here and how do I load this template in kibana? Can someone please hel… --- ## [Two ILM errors - does not point to a write index and does not point to index](https://discuss.elastic.co/t/two-ilm-errors-does-not-point-to-a-write-index-and-does-not-point-to-index/275461)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 2:01pm UTC](https://discuss.elastic.co/t/two-ilm-errors-does-not-point-to-a-write-index-and-does-not-point-to-index/275461 "2021-06-24T14:01:39Z")
I am having two ILM errors for different indexes. My primary error was (and is for the indices where I have not carried our steps mentioned below). illegal\_argument\_exception: index.lifecycle.rollover\_alias "indice nam… --- ## [FieldNotFoundError on update to Elasticsearch 7.16.2](https://discuss.elastic.co/t/fieldnotfounderror-on-update-to-elasticsearch-7-16-2/296173)
**Author:** [@JonDoe1234](https://discuss.elastic.co/u/JonDoe1234)\ **Replies:** 3\ **Last updated:** [February 14, 2022, 3:32pm UTC](https://discuss.elastic.co/t/fieldnotfounderror-on-update-to-elasticsearch-7-16-2/296173 "2022-02-14T15:32:58Z")
Hi, since the update to Elasticsearch 7.16. I'm getting a java.lang.NoSuchFieldError: INDEX\_CONTENT\_TYPE when running a Unit Test that executes a save/saveAll() statement with Test containers. On 7.15 everything works … --- ## [Thick memory single node vs thin memory multi node](https://discuss.elastic.co/t/thick-memory-single-node-vs-thin-memory-multi-node/70786)
**Author:** [@avibh](https://discuss.elastic.co/u/avibh)\ **Replies:** 5\ **Last updated:** [January 14, 2017, 12:55pm UTC](https://discuss.elastic.co/t/thick-memory-single-node-vs-thin-memory-multi-node/70786 "2017-01-14T12:55:13Z")
Hi, I have a server with 256G RAM and I use a single node with 30G RAM. my app is indexing heavily, and also is queried a lot by users. question is, what is the preferred deployment for this scenario, having a single n… --- ## [Creating common Kibana dashboard for multiple Elasticsearch indices](https://discuss.elastic.co/t/creating-common-kibana-dashboard-for-multiple-elasticsearch-indices/88263)
**Author:** [@Ritesh\_Sharma](https://discuss.elastic.co/u/Ritesh_Sharma)\ **Replies:** 2\ **Last updated:** [June 6, 2017, 7:01am UTC](https://discuss.elastic.co/t/creating-common-kibana-dashboard-for-multiple-elasticsearch-indices/88263 "2017-06-06T07:01:32Z")
Hi Guys , I am trying to create system metric dashboard for my servers , as a part of it i am fetching system data using filebeat and pushing them into isolated ( system specific ) elastic indexes ; I have successful… --- ## [Node stats - Failed to deserialize response of type \[org.elasticsearch.action.admin.cluster.node.stats.NodeStats\]](https://discuss.elastic.co/t/node-stats-failed-to-deserialize-response-of-type-org-elasticsearch-action-admin-cluster-node-stats-nodestats/14306)
**Author:** [@Mark\_Conlin](https://discuss.elastic.co/u/Mark_Conlin)\ **Replies:** 6\ **Last updated:** [November 8, 2013, 8:09pm UTC](https://discuss.elastic.co/t/node-stats-failed-to-deserialize-response-of-type-org-elasticsearch-action-admin-cluster-node-stats-nodestats/14306 "2013-11-08T20:09:32Z")
ES version 90.3 38 nodes cluster running on 6 machines. This problem started after a few days of running normally. Hitting cluster with ES Head and/or BigDesk causes this issue. Is it possible that the node … --- ## [Get data primary key](https://discuss.elastic.co/t/get-data-primary-key/235128)
**Author:** [@freesinger](https://discuss.elastic.co/u/freesinger)\ **Replies:** 1\ **Last updated:** [June 1, 2020, 9:19am UTC](https://discuss.elastic.co/t/get-data-primary-key/235128 "2020-06-01T09:19:52Z")
Hi, I am handling how to find the primary key of data in ES index. I know that ES has \_id to represent each document's unique id, but the problem is that when I handling the data which has been stored in ES, the data ma… --- ## [Rollover issue using logstash](https://discuss.elastic.co/t/rollover-issue-using-logstash/86892)
**Author:** [@kamran.matloob](https://discuss.elastic.co/u/kamran.matloob)\ **Replies:** 2\ **Last updated:** [May 30, 2017, 10:08pm UTC](https://discuss.elastic.co/t/rollover-issue-using-logstash/86892 "2017-05-30T22:08:38Z")
Hi, I am using 5.1 elk stack. My task is to rollover 2 indices. I came to know through below link that we can rollover through curator https://www.elastic.co/guide/en/elasticsearch/client/curator/5.0/ex\_rollover.html Bu… --- ## [How to do scan and scroll using Elastic4s](https://discuss.elastic.co/t/how-to-do-scan-and-scroll-using-elastic4s/25458)
**Author:** [@Ningjun](https://discuss.elastic.co/u/Ningjun)\ **Replies:** 2\ **Last updated:** [February 20, 2017, 6:38am UTC](https://discuss.elastic.co/t/how-to-do-scan-and-scroll-using-elastic4s/25458 "2017-02-20T06:38:35Z")
I am using Elastic4s (SCALA client for elastic search). I need to retrieve all 10 millions documents in an index. I think the right way to do is using scan and scroll. Is there any code snippet or examples showing how … --- ## [Is it mandatory to specify elasticsearch port in logstash output plugin?](https://discuss.elastic.co/t/is-it-mandatory-to-specify-elasticsearch-port-in-logstash-output-plugin/64703)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [November 3, 2016, 4:46am UTC](https://discuss.elastic.co/t/is-it-mandatory-to-specify-elasticsearch-port-in-logstash-output-plugin/64703 "2016-11-03T04:46:07Z")
Hi, I have setup logstash for fetching files from 2 separate input sources and these are output to two elasticsearch indexes. For one output, I have set; hosts =\> \["192.168.1.1:9200"\] and for other, I have set just … --- ## [Converting curl commands to java client api](https://discuss.elastic.co/t/converting-curl-commands-to-java-client-api/9971)
**Author:** [@divyanshu\_das](https://discuss.elastic.co/u/divyanshu_das)\ **Replies:** 2\ **Last updated:** [December 7, 2012, 8:25am UTC](https://discuss.elastic.co/t/converting-curl-commands-to-java-client-api/9971 "2012-12-07T08:25:18Z")
In elasticsearch, while using "curl", everything works like a charm. But when we try to do it with java api, there is a lack of documentation. java api in elasticsearch has very few examples:- http://www.elasticsear… --- ## [Elasticsearch Query for Exact Substring Matching with Spaces](https://discuss.elastic.co/t/elasticsearch-query-for-exact-substring-matching-with-spaces/361216)
**Author:** [@Umang\_Kamdar](https://discuss.elastic.co/u/Umang_Kamdar)\ **Replies:** 8\ **Last updated:** [June 12, 2024, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-query-for-exact-substring-matching-with-spaces/361216 "2024-06-12T09:09:07Z")
I'm trying to perform an exact substring match in Elasticsearch, including substrings that contain spaces. Here’s what I need: Search for an exact substring within a larger text field. The substring may contain spaces. … --- ## [Logstash twitter 2.2.0 input jruby error NoMethodError](https://discuss.elastic.co/t/logstash-twitter-2-2-0-input-jruby-error-nomethoderror/36814)
**Author:** [@mob](https://discuss.elastic.co/u/mob)\ **Replies:** 8\ **Last updated:** [April 11, 2016, 5:20am UTC](https://discuss.elastic.co/t/logstash-twitter-2-2-0-input-jruby-error-nomethoderror/36814 "2016-04-11T05:20:51Z")
I was able to get my ELK setup to import the samples using the twitter input plugin but when I changed the conf to use my tags, follows I was able to pass the --configtest but logstash.log filled up with these errors D… --- ## [Elasticsearch 2.0 + Kibana 3 issue](https://discuss.elastic.co/t/elasticsearch-2-0-kibana-3-issue/34298)
**Author:** [@Marcello\_A](https://discuss.elastic.co/u/Marcello_A)\ **Replies:** 5\ **Last updated:** [November 21, 2015, 6:12am UTC](https://discuss.elastic.co/t/elasticsearch-2-0-kibana-3-issue/34298 "2015-11-21T06:12:44Z")
Hi All, we have upgrade our environment from Elasticsearch 1.6.0 to Elasticsearch 2.0 and the indexing works fine but our dashboard present on Kibana 3.0 fails to retrieve the data from indexes and we received this error… --- ## [Hide some system fields](https://discuss.elastic.co/t/hide-some-system-fields/17802)
**Author:** [@11152](https://discuss.elastic.co/u/11152)\ **Replies:** 5\ **Last updated:** [May 30, 2014, 1:32pm UTC](https://discuss.elastic.co/t/hide-some-system-fields/17802 "2014-05-30T13:32:59Z")
Hi all! I use elasticsearch in a high-load project where an urgent need to save traffic. I have a some queries like this: curl -XGET 'http://localhost:9200/testindex/testmapping/\_search?pretty&scroll=5m' -d '{"fro… --- ## [Warning savedobjects-service Unable to connect to Elasticsearch Error Request Timeout after 30000ms](https://discuss.elastic.co/t/warning-savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/228029)
**Author:** [@vivek898](https://discuss.elastic.co/u/vivek898)\ **Replies:** 4\ **Last updated:** [April 16, 2020, 3:59am UTC](https://discuss.elastic.co/t/warning-savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/228029 "2020-04-16T03:59:40Z")
New to ELK and setting up in rhel 7.5 OS. Kibana is throwing error while setting up on master. Deleted below indices and tried again, but same error. red open .kibana\_task\_manager\_1 jmlrFCiCT-qOt\_hsevBM1g 1 1 red op… --- ## [While installing Elastic search on Windows 7 , i am getting an error where in the "service install" cmd is not recognized in command prompt](https://discuss.elastic.co/t/while-installing-elastic-search-on-windows-7-i-am-getting-an-error-where-in-the-service-install-cmd-is-not-recognized-in-command-prompt/88657)
**Author:** [@Gourav\_Kumar](https://discuss.elastic.co/u/Gourav_Kumar)\ **Replies:** 4\ **Last updated:** [June 14, 2017, 11:36am UTC](https://discuss.elastic.co/t/while-installing-elastic-search-on-windows-7-i-am-getting-an-error-where-in-the-service-install-cmd-is-not-recognized-in-command-prompt/88657 "2017-06-14T11:36:34Z")
While installing Elastic search on Windows 7 , i am getting an error where in the "service install" cmd is not recognized in command prompt. I have installed JDK , and have created the environment variable as well . … --- ## [Role-based control does not work](https://discuss.elastic.co/t/role-based-control-does-not-work/69806)
**Author:** [@chris2016](https://discuss.elastic.co/u/chris2016)\ **Replies:** 6\ **Last updated:** [December 23, 2016, 4:50am UTC](https://discuss.elastic.co/t/role-based-control-does-not-work/69806 "2016-12-23T04:50:36Z")
Hi, On kibana - manage web interface, I created one new role that give ALL permission to one index and also assigned the new role to one user. When I logged in as this user, all functions do not work. No index was sho… --- ## [Search after in spring](https://discuss.elastic.co/t/search-after-in-spring/201767)
**Author:** [@luongky06](https://discuss.elastic.co/u/luongky06)\ **Replies:** 2\ **Last updated:** [October 2, 2019, 4:44am UTC](https://discuss.elastic.co/t/search-after-in-spring/201767 "2019-10-02T04:44:25Z")
Hi all, I'm try to search in ES via spring boot, and I have a stuck with search after . So I have a search api look like below: GET /domain/\_search { "size": 1000, "query": { "bool": { "must": \[ {"match": { "location"… --- ## [Different filter on multiple indexes](https://discuss.elastic.co/t/different-filter-on-multiple-indexes/195151)
**Author:** [@David\_T](https://discuss.elastic.co/u/David_T)\ **Replies:** 2\ **Last updated:** [August 15, 2019, 5:13am UTC](https://discuss.elastic.co/t/different-filter-on-multiple-indexes/195151 "2019-08-15T05:13:49Z")
Hello everyone, i have a question about multi indexes search. I want search multi indexes and sort by score, now i use \_msearch query, like this get \_msearch {"index" : "user"} {"query" : {"match" : {"global" : "keywo… --- ## [Exact matches have same score as fuzzy matches](https://discuss.elastic.co/t/exact-matches-have-same-score-as-fuzzy-matches/211451)
**Author:** [@duncRed](https://discuss.elastic.co/u/duncRed)\ **Replies:** 3\ **Last updated:** [December 13, 2019, 9:50am UTC](https://discuss.elastic.co/t/exact-matches-have-same-score-as-fuzzy-matches/211451 "2019-12-13T09:50:16Z")
Hi When executing match queries with fuzziness applied we are seeing exact matches have the same score as fuzzy matches. I have come across suggested solutions to promote exact matches by including additional queries w… --- ## [Not able to search documents in custom Content Source in Enterprise Search Beta 2](https://discuss.elastic.co/t/not-able-to-search-documents-in-custom-content-source-in-enterprise-search-beta-2/200828)
**Author:** [@SriAkash](https://discuss.elastic.co/u/SriAkash)\ **Replies:** 0\ **Last updated:** [September 24, 2019, 9:18am UTC](https://discuss.elastic.co/t/not-able-to-search-documents-in-custom-content-source-in-enterprise-search-beta-2/200828 "2019-09-24T09:18:35Z")
I' able to search documents that have been indexed via connectors like Jira and Confluence. But unable to search documents indexed via Custom API. Pasting the content of enterprise-search.log : \[action\_controller\]\[INFO… --- ## [1) How to integrate Elasticsearch-Hadoop with MySQL DB at the backend and User interface developed in dhtmlx, Spring. 2) Also how to integrate Elasticsearch-Hadoop with Services written in Spring MVC](https://discuss.elastic.co/t/1-how-to-integrate-elasticsearch-hadoop-with-mysql-db-at-the-backend-and-user-interface-developed-in-dhtmlx-spring-2-also-how-to-integrate-elasticsearch-hadoop-with-services-written-in-spring-mvc/43223)
**Author:** [@prashanthrd](https://discuss.elastic.co/u/prashanthrd)\ **Replies:** 7\ **Last updated:** [March 4, 2016, 9:05pm UTC](https://discuss.elastic.co/t/1-how-to-integrate-elasticsearch-hadoop-with-mysql-db-at-the-backend-and-user-interface-developed-in-dhtmlx-spring-2-also-how-to-integrate-elasticsearch-hadoop-with-services-written-in-spring-mvc/43223 "2016-03-04T21:05:42Z")
1) How to integrate Elasticsearch with MySQL DB at the backend and User interface developed in dhtmlx, Spring. 2) Also how to integrate Elasticsearch with Services written in Spring MVC. Please consider latest version… --- ## [Connect Filebeat to logstash](https://discuss.elastic.co/t/connect-filebeat-to-logstash/240040)
**Author:** [@Revathy](https://discuss.elastic.co/u/Revathy)\ **Replies:** 8\ **Last updated:** [July 13, 2020, 6:15am UTC](https://discuss.elastic.co/t/connect-filebeat-to-logstash/240040 "2020-07-13T06:15:30Z")
Hi, I am trying to setup filebeat to logstash and get below errors at filebeat and logstash end: filebeat; Version: 7.7.0 logstash "number" : "7.8.0" Modified /etc/filebeat/filebeat.yml: enabled: true paths: co… --- ## [Authentication fails on a new node in a secure cluster](https://discuss.elastic.co/t/authentication-fails-on-a-new-node-in-a-secure-cluster/252517)
**Author:** [@aryon](https://discuss.elastic.co/u/aryon)\ **Replies:** 1\ **Last updated:** [October 19, 2020, 10:47am UTC](https://discuss.elastic.co/t/authentication-fails-on-a-new-node-in-a-secure-cluster/252517 "2020-10-19T10:47:47Z")
Hello, I have an Elasticsearch cluster with 2 nodes, on which I enabled xpack security a while ago (TLS on both transport and HTTP + local authentication). I want to add a new node to the cluster, I configured the node… --- ## [Java transport client doing chinese match query hit nothing](https://discuss.elastic.co/t/java-transport-client-doing-chinese-match-query-hit-nothing/96571)
**Author:** [@douxf](https://discuss.elastic.co/u/douxf)\ **Replies:** 6\ **Last updated:** [August 10, 2017, 10:47am UTC](https://discuss.elastic.co/t/java-transport-client-doing-chinese-match-query-hit-nothing/96571 "2017-08-10T10:47:50Z")
Elasticsearch version (bin/elasticsearch --version): Version: 2.4.4, Build: fcbb46d/2017-01-03T11:33:16Z, JVM: 1.8.0\_112 Plugins installed: \[\] ik, head JVM version (java -version): JVM: 1.8.0\_112 OS version (uname … --- ## [How to push large excel data to elasticsearch using bulk API](https://discuss.elastic.co/t/how-to-push-large-excel-data-to-elasticsearch-using-bulk-api/101266)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 1\ **Last updated:** [September 21, 2017, 7:16am UTC](https://discuss.elastic.co/t/how-to-push-large-excel-data-to-elasticsearch-using-bulk-api/101266 "2017-09-21T07:16:50Z")
I am reading excel sheet using java and aspose and I am using bulk API to push data to elasticsearch but it is taking more time to create index in elasticsearch and pushing data to ES. My Excel file contains 50000 record… --- ## [How does one setup a clustered elasticsearch?](https://discuss.elastic.co/t/how-does-one-setup-a-clustered-elasticsearch/190017)
**Author:** [@maasid](https://discuss.elastic.co/u/maasid)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 2:34pm UTC](https://discuss.elastic.co/t/how-does-one-setup-a-clustered-elasticsearch/190017 "2019-07-11T14:34:44Z")
Hello, I'm on the verge of raging and flipping my desk. I have tried to setup a elasticsearch cluster version 7.2.0 and this is just not working. Here's my problem: Each master node is creating their own single node clu… --- ## [Nagios event/log to Logstash](https://discuss.elastic.co/t/nagios-event-log-to-logstash/563)
**Author:** [@Penny\_Lee](https://discuss.elastic.co/u/Penny_Lee)\ **Replies:** 2\ **Last updated:** [May 12, 2015, 5:56pm UTC](https://discuss.elastic.co/t/nagios-event-log-to-logstash/563 "2015-05-12T17:56:33Z")
Hi, Is it possible to send the Nagios event/log (not local log) to logstash for index and store to elasticsearch? I found some plugin but I am not sure are they work. I found the followings: http://logstash.net/docs/1… --- ## [Issue with upgrading from 5.5.1 to 6.2.3](https://discuss.elastic.co/t/issue-with-upgrading-from-5-5-1-to-6-2-3/126156)
**Author:** [@pavocristatus](https://discuss.elastic.co/u/pavocristatus)\ **Replies:** 5\ **Last updated:** [April 30, 2018, 10:11pm UTC](https://discuss.elastic.co/t/issue-with-upgrading-from-5-5-1-to-6-2-3/126156 "2018-04-30T22:11:13Z")
I recently upgraded the Elasticsearch from 5.5.1 to using ElasticSearch 6.2.3 I get the following error during execution in apache-spark 2.2.1 Exception in thread "main" java.lang.NoClassDefFoundError: org/elasticsearc… --- ## [Grok Pattern for multiple word with hyphens and dots](https://discuss.elastic.co/t/grok-pattern-for-multiple-word-with-hyphens-and-dots/145493)
**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\ **Replies:** 1\ **Last updated:** [August 22, 2018, 7:23am UTC](https://discuss.elastic.co/t/grok-pattern-for-multiple-word-with-hyphens-and-dots/145493 "2018-08-22T07:23:32Z")
What will be the GROK pattern for the following word which includes hyphens and dots ABC-DEF-GHI.ae90.tomcat-boot-server-logging Regards --- ## [Little bit confused on min\_age parameter in ilm](https://discuss.elastic.co/t/little-bit-confused-on-min-age-parameter-in-ilm/299049)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 4\ **Last updated:** [October 3, 2023, 4:12am UTC](https://discuss.elastic.co/t/little-bit-confused-on-min-age-parameter-in-ilm/299049 "2023-10-03T04:12:36Z")
Greetings...! Im currently using below ilm policy for my project. I just want to know the life span of an index. PUT \_ilm/policy/hot\_warm\_delete { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "… --- ## [Kibana Discover not Returning Data but Dev Tools Console is](https://discuss.elastic.co/t/kibana-discover-not-returning-data-but-dev-tools-console-is/187137)
**Author:** [@thadc](https://discuss.elastic.co/u/thadc)\ **Replies:** 4\ **Last updated:** [June 25, 2019, 2:45pm UTC](https://discuss.elastic.co/t/kibana-discover-not-returning-data-but-dev-tools-console-is/187137 "2019-06-25T14:45:16Z")
Hi, I have created new indices in the past week that have data based upon my basic searches from kibana (6.4) Dev Tools console. For instance, a basic search: GET /foo-index-2019.06.22/\_search?q=&pretty$size=100 bring… --- ## [How to create multiple nodes in elasticsearch](https://discuss.elastic.co/t/how-to-create-multiple-nodes-in-elasticsearch/96291)
**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\ **Replies:** 5\ **Last updated:** [August 18, 2017, 10:01am UTC](https://discuss.elastic.co/t/how-to-create-multiple-nodes-in-elasticsearch/96291 "2017-08-18T10:01:45Z")
Hi All, We are trying to create multiple nodes (2 nodes) in a single elastic search instance. Is it need two different machine for each node, can we do it via elastic search config file and how we can increase the elas… --- ## [Why is my Logstash using huge CPU and how to fix it?](https://discuss.elastic.co/t/why-is-my-logstash-using-huge-cpu-and-how-to-fix-it/85710)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 5\ **Last updated:** [May 15, 2017, 9:25am UTC](https://discuss.elastic.co/t/why-is-my-logstash-using-huge-cpu-and-how-to-fix-it/85710 "2017-05-15T09:25:36Z")
Hi, I am using ELK GA 5.0.0 in my Linux box. I am using 2 logstash instances to pull from Kafka, and it is having high CPU utilization. I tried /\_node/hot\_threads?human=true and below are the results; node 1 ::: {}… --- ## [Sending syslog to FileBeat from Cisco Asa](https://discuss.elastic.co/t/sending-syslog-to-filebeat-from-cisco-asa/185147)
**Author:** [@jsandri](https://discuss.elastic.co/u/jsandri)\ **Replies:** 3\ **Last updated:** [June 19, 2019, 2:52am UTC](https://discuss.elastic.co/t/sending-syslog-to-filebeat-from-cisco-asa/185147 "2019-06-19T02:52:43Z")
Hi everyone! I am a new user of elk and beats and I am trying to send logs from a Cisco Asa to a virtual machine with filebeat 7.1.1 using UDP. Logs are received but I encountered the following error message: 2019-06-… --- ## [Dashboards sorting](https://discuss.elastic.co/t/dashboards-sorting/355285)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 8:19am UTC](https://discuss.elastic.co/t/dashboards-sorting/355285 "2024-03-19T08:19:42Z")
In Kibana 8.12 when I go to the dashboards page, the default sorting is by the "Last updated" field. How to set sorting by "Name" field by default? --- ## [Creating custom kibana plugin](https://discuss.elastic.co/t/creating-custom-kibana-plugin/56699)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [August 1, 2016, 1:43am UTC](https://discuss.elastic.co/t/creating-custom-kibana-plugin/56699 "2016-08-01T01:43:38Z")
Hi ! I need to create custom Kibana plugin in Vidualization for ver 5.0.0 alpha 4. In order to code , I would like to read if any tutorials exist. Is there a recommended tutorial that you could read to understand ho… --- ## [How to use "op\_type" with logstash to prevent duplicate entries?](https://discuss.elastic.co/t/how-to-use-op-type-with-logstash-to-prevent-duplicate-entries/43101)
**Author:** [@gunay](https://discuss.elastic.co/u/gunay)\ **Replies:** 2\ **Last updated:** [March 3, 2016, 8:49am UTC](https://discuss.elastic.co/t/how-to-use-op-type-with-logstash-to-prevent-duplicate-entries/43101 "2016-03-03T08:49:02Z")
Hi, I would like to prevent the same data log indexed twice. I found out from the documentation that it can be achieved using "op\_type" parameter. $ curl -XPUT 'http://localhost:9200/twitter/tweet/1?op\_type=cre… --- ## [Timestamp replacing with format MMM dd HH:mm:ss yyyy](https://discuss.elastic.co/t/timestamp-replacing-with-format-mmm-dd-hhss-yyyy/151368)
**Author:** [@calebereis](https://discuss.elastic.co/u/calebereis)\ **Replies:** 6\ **Last updated:** [October 9, 2018, 11:12am UTC](https://discuss.elastic.co/t/timestamp-replacing-with-format-mmm-dd-hhss-yyyy/151368 "2018-10-09T11:12:26Z")
Hi, I'm Calebe and I'm trying to replace the timestamp with the timestamp from the log file. I tried so many things and nothing works. I have this kind of timestamp in my log file: Jun 24 19:34:54 2016 The problem is… --- ## [What should be structure of document for Clickstream data based on IP addresses](https://discuss.elastic.co/t/what-should-be-structure-of-document-for-clickstream-data-based-on-ip-addresses/121856)
**Author:** [@ikarthikb](https://discuss.elastic.co/u/ikarthikb)\ **Replies:** 6\ **Last updated:** [March 8, 2018, 10:54pm UTC](https://discuss.elastic.co/t/what-should-be-structure-of-document-for-clickstream-data-based-on-ip-addresses/121856 "2018-03-08T22:54:07Z")
I have clickstream data about my website. The events come in as the user clicks/interacts with the website. For example a sampling of the data looks like this. I have millions of data points like this coming from million… --- ## [Cluster\_block\_exception - SERVICE\_UNAVAILABLE/2/no master](https://discuss.elastic.co/t/cluster-block-exception-service-unavailable-2-no-master/93190)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 0\ **Last updated:** [July 14, 2017, 12:48pm UTC](https://discuss.elastic.co/t/cluster-block-exception-service-unavailable-2-no-master/93190 "2017-07-14T12:48:37Z")
Mine is a three node ES cluster running 2.3.2. I am using REST API's and carrying out bulk indexing. I see this response {"error":{"root\_cause":\[{"type":"cluster\_block\_exception","reason":"blocked by: \[SERVICE\_UNAVAIL… --- ## [How to test analyzer properly to debug mapping issues?](https://discuss.elastic.co/t/how-to-test-analyzer-properly-to-debug-mapping-issues/43800)
**Author:** [@cpattonj](https://discuss.elastic.co/u/cpattonj)\ **Replies:** 4\ **Last updated:** [March 11, 2016, 4:24pm UTC](https://discuss.elastic.co/t/how-to-test-analyzer-properly-to-debug-mapping-issues/43800 "2016-03-11T16:24:13Z")
I have some very simple settings for an index that I'm trying to use to test my analyzer with: { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0 }, "mappings": { "applog": { "properties": { … --- ## [Static build](https://discuss.elastic.co/t/static-build/34354)
**Author:** [@mterron](https://discuss.elastic.co/u/mterron)\ **Replies:** 1\ **Last updated:** [November 12, 2015, 1:38am UTC](https://discuss.elastic.co/t/static-build/34354 "2015-11-12T01:38:54Z")
Can we get a statically compiled binary instead of the current dynamic linked one? I'd like to use Filebeat on a non glibc based system. This is what the current x86-64 binary looks like: ELF 64-bit LSB executable, x86… --- ## [Multiple sub aggregation in java api](https://discuss.elastic.co/t/multiple-sub-aggregation-in-java-api/23055)
**Author:** [@Grigory\_Rubstein](https://discuss.elastic.co/u/Grigory_Rubstein)\ **Replies:** 1\ **Last updated:** [April 2, 2015, 9:15am UTC](https://discuss.elastic.co/t/multiple-sub-aggregation-in-java-api/23055 "2015-04-02T09:15:52Z")
Hi I wondering if the java client support multiple sub aggregation on same level : for example how to translate this to java api : by\_city and by\_language is count aggregation on same level. { "aggs": { … --- ## [Unable to update index settings](https://discuss.elastic.co/t/unable-to-update-index-settings/205781)
**Author:** [@luok0](https://discuss.elastic.co/u/luok0)\ **Replies:** 5\ **Last updated:** [October 31, 2019, 2:42am UTC](https://discuss.elastic.co/t/unable-to-update-index-settings/205781 "2019-10-31T02:42:14Z")
Try to update "read\_only\_allow\_delete" to False, but not working, it always turns out to be True no matter how many attempts have been made. bash-4.1$ date Tue Oct 29 23:07:01 EDT 2019 bash-4.1$ curl -X PUT "localhost:9… --- ## [Kibana Vega - Drawing the line with dynamic StrokeWidth is not working for me](https://discuss.elastic.co/t/kibana-vega-drawing-the-line-with-dynamic-strokewidth-is-not-working-for-me/150228)
**Author:** [@deuskars](https://discuss.elastic.co/u/deuskars)\ **Replies:** 7\ **Last updated:** [October 1, 2018, 4:23am UTC](https://discuss.elastic.co/t/kibana-vega-drawing-the-line-with-dynamic-strokewidth-is-not-working-for-me/150228 "2018-10-01T04:23:03Z")
Hi, Quick summary of what I want the visualization to be like ... I have multiple IHS proxys which route requests to a bunch of servers. I want to draw a parallel coordinates graph that would show the number of request… --- ## [How to use apm agent for hybris application?](https://discuss.elastic.co/t/how-to-use-apm-agent-for-hybris-application/164921)
**Author:** [@iamashutosh](https://discuss.elastic.co/u/iamashutosh)\ **Replies:** 7\ **Last updated:** [February 13, 2019, 12:50pm UTC](https://discuss.elastic.co/t/how-to-use-apm-agent-for-hybris-application/164921 "2019-02-13T12:50:02Z")
As we know hybris is a complex application, it is difficult to implement apm agent on it. You should update your documentation for hybris application too. Setting up newrelic is very easy, we just have to download the… [Previous page](https://discuss.elastic.co/top.md?page=614&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=616&per_page=50&period=all)