# Top **URL:** https://discuss.elastic.co/top.md?page=642&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 643 --- ## [Help with Query to Summarize Data](https://discuss.elastic.co/t/help-with-query-to-summarize-data/114991)
**Author:** [@thelonestargeek](https://discuss.elastic.co/u/thelonestargeek)\ **Replies:** 4\ **Last updated:** [February 7, 2018, 3:09am UTC](https://discuss.elastic.co/t/help-with-query-to-summarize-data/114991 "2018-02-07T03:09:00Z")
I'm trying to summarize some data in kibana. If writing in Splunk it would be something like index=network\_data stats count by log\_type and output would like discrete values in the log\_type field. How can I do this in ki… --- ## [Remove raw fields from geoip?](https://discuss.elastic.co/t/remove-raw-fields-from-geoip/44705)
**Author:** [@AlexH](https://discuss.elastic.co/u/AlexH)\ **Replies:** 4\ **Last updated:** [March 22, 2016, 11:29pm UTC](https://discuss.elastic.co/t/remove-raw-fields-from-geoip/44705 "2016-03-22T23:29:56Z")
I am using Elasticsearch for log analysis, and I am trying to increase performance, reduce storage as much as possible. I have turned off dynamic mapping, added the not\_analyzed strings explicitly where needed, as well a… --- ## [Can I use ES for 100 GB of Data?](https://discuss.elastic.co/t/can-i-use-es-for-100-gb-of-data/27510)
**Author:** [@N\_M\_10](https://discuss.elastic.co/u/N_M_10)\ **Replies:** 4\ **Last updated:** [August 18, 2015, 6:59am UTC](https://discuss.elastic.co/t/can-i-use-es-for-100-gb-of-data/27510 "2015-08-18T06:59:44Z")
We have around 100 GB of data, so can i use Elasticsearch for searching in this huge amount of data, will it give response in ms ? If yes than what should be the machine configuration to make it respond within 200ms? --- ## [Logstash monitoring with Metricbeat "logstash-xpack" module - data not collected and not sent to ES](https://discuss.elastic.co/t/logstash-monitoring-with-metricbeat-logstash-xpack-module-data-not-collected-and-not-sent-to-es/258006)
**Author:** [@Ilya\_Geller](https://discuss.elastic.co/u/Ilya_Geller)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 6:18pm UTC](https://discuss.elastic.co/t/logstash-monitoring-with-metricbeat-logstash-xpack-module-data-not-collected-and-not-sent-to-es/258006 "2020-12-08T18:18:03Z")
Hi, I'm running version 7.7 of Logstash and Metricbeat, and I'm trying to setup stack monitoring using the metricbeat xpack modules. So far I've enabled the elasticsearch-xpack module and it works fine, ES and Kibana m… --- ## [Where are the License and Marvel downloadable plugins for ES 2.2.1?](https://discuss.elastic.co/t/where-are-the-license-and-marvel-downloadable-plugins-for-es-2-2-1/44774)
**Author:** [@dparkar](https://discuss.elastic.co/u/dparkar)\ **Replies:** 7\ **Last updated:** [March 18, 2016, 12:49am UTC](https://discuss.elastic.co/t/where-are-the-license-and-marvel-downloadable-plugins-for-es-2-2-1/44774 "2016-03-18T00:49:34Z")
A while back on the Marvel offline installation links there were links for version 2.2.1, but they didn't work. Example : https://download.elastic.co/elasticsearch/release/org/elasticsearch/plugin/license/2.2.1/licens… --- ## [Error in Logstash](https://discuss.elastic.co/t/error-in-logstash/116646)
**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\ **Replies:** 3\ **Last updated:** [January 29, 2018, 6:56am UTC](https://discuss.elastic.co/t/error-in-logstash/116646 "2018-01-29T06:56:59Z")
Hello Everyone, I am trying to integrate ELK Stack 5.6.4 in RHEL 7 with ArcSight smartconnector with this link: https://www.elastic.co/guide/en/logstash/5.6/arcsight-module.html#arcsight-instructions-smartconnector Af… --- ## [Issue with Metricbeat Docker Container](https://discuss.elastic.co/t/issue-with-metricbeat-docker-container/109525)
**Author:** [@rehan](https://discuss.elastic.co/u/rehan)\ **Replies:** 3\ **Last updated:** [December 14, 2017, 10:49am UTC](https://discuss.elastic.co/t/issue-with-metricbeat-docker-container/109525 "2017-12-14T10:49:22Z")
Hi, I am using metricbeat and I want to use metricbeat agent as docker container. I followed the link provided by elastic.co.. https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-docker.html This docum… --- ## [Kibana query string length limitation?](https://discuss.elastic.co/t/kibana-query-string-length-limitation/110562)
**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\ **Replies:** 3\ **Last updated:** [December 6, 2017, 9:15pm UTC](https://discuss.elastic.co/t/kibana-query-string-length-limitation/110562 "2017-12-06T21:15:38Z")
I have a search that returns several tens of thousands of entries. I have one of the fields separated out as userID. In the userID string there exists a user's organization. There are a LOT of these organizations. For pu… --- ## [Logstash is taking more time or hanging](https://discuss.elastic.co/t/logstash-is-taking-more-time-or-hanging/38469)
**Author:** [@amgowda](https://discuss.elastic.co/u/amgowda)\ **Replies:** 8\ **Last updated:** [January 7, 2016, 8:31am UTC](https://discuss.elastic.co/t/logstash-is-taking-more-time-or-hanging/38469 "2016-01-07T08:31:06Z")
Kibana is not showing any drop-down value in 'Time-filed name' RedHat Linux 64 bit, software installed using RPM package java -version java version "1.8.0\_66" Java(TM) SE Runtime Environment (build 1.8.0\_66-b17) Java Hot… --- ## [Fuzzy query scoring based on levenshtein distance](https://discuss.elastic.co/t/fuzzy-query-scoring-based-on-levenshtein-distance/11116)
**Author:** [@the\_blab](https://discuss.elastic.co/u/the_blab)\ **Replies:** 3\ **Last updated:** [October 29, 2014, 3:54pm UTC](https://discuss.elastic.co/t/fuzzy-query-scoring-based-on-levenshtein-distance/11116 "2014-10-29T15:54:22Z")
Hi, I have a question about scoring for fuzzy queries. If I understand correctly, fuzzy queries find any appropriate matches by calculating similarity using the levenshtein distance, but this similarity value is n… --- ## [Failed to install template](https://discuss.elastic.co/t/failed-to-install-template/322210)
**Author:** [@camilovietnam](https://discuss.elastic.co/u/camilovietnam)\ **Replies:** 2\ **Last updated:** [December 30, 2022, 1:15pm UTC](https://discuss.elastic.co/t/failed-to-install-template/322210 "2022-12-30T13:15:43Z")
Trying to demo the Elasticsearch stack, but having trouble figuring out why aren't things working. To start with, I have the following docker-compose file for mongo, logstash and elasticsearch. version: '3' # referenc… --- ## [Python: ES.cluster.health() returns a Failed to establish a new connection: \[Errno 11001\] getaddrinfo failed) everytime I run](https://discuss.elastic.co/t/python-es-cluster-health-returns-a-failed-to-establish-a-new-connection-errno-11001-getaddrinfo-failed-everytime-i-run/211850)
**Author:** [@Paul\_Spedding](https://discuss.elastic.co/u/Paul_Spedding)\ **Replies:** 2\ **Last updated:** [December 30, 2019, 4:36am UTC](https://discuss.elastic.co/t/python-es-cluster-health-returns-a-failed-to-establish-a-new-connection-errno-11001-getaddrinfo-failed-everytime-i-run/211850 "2019-12-30T04:36:42Z")
So I have the following code: self.es.cluster.health(wait\_for\_status='yellow', request\_timeout=1) It was running originally but for some reason it stoped and I can't work out why, but no matter if I restart the server … --- ## [logstash log 관련질문](https://discuss.elastic.co/t/logstash-log/132135)
**Author:** [@42de3b6ba3a1c93835b5](https://discuss.elastic.co/u/42de3b6ba3a1c93835b5)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 3:57am UTC](https://discuss.elastic.co/t/logstash-log/132135 "2018-05-23T03:57:25Z")
어느 순간 var/log/logstash 경로에 로그가 안 쌓입니다.. logstash.yml log경로도 수정한적이 없는데도 말이져.. 어디를 확인해 봐야 할까요 --- ## [Headers for the Java REST Client](https://discuss.elastic.co/t/headers-for-the-java-rest-client/107684)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 2\ **Last updated:** [November 15, 2017, 12:48pm UTC](https://discuss.elastic.co/t/headers-for-the-java-rest-client/107684 "2017-11-15T12:48:06Z")
I understand that in elasticsearch 6 the content type header is mandatory. I get a nice exception when omitting it when connecting using the low level rest client. {"error":"Content-Type header \[text/plain; charset=ISO-… --- ## [Problem with ES5 TransportClient](https://discuss.elastic.co/t/problem-with-es5-transportclient/66749)
**Author:** [@cosec](https://discuss.elastic.co/u/cosec)\ **Replies:** 4\ **Last updated:** [November 21, 2016, 4:50pm UTC](https://discuss.elastic.co/t/problem-with-es5-transportclient/66749 "2016-11-21T16:50:09Z")
Hello, I'm trying to do the simplest thing- create a TransportClient for ES5.0. My POM file: \ \ \org.elasticsearch.client\ \transport\ **Author:** [@shahid](https://discuss.elastic.co/u/shahid)\ **Replies:** 2\ **Last updated:** [October 24, 2018, 6:36am UTC](https://discuss.elastic.co/t/apm-agnet-for-php/153714 "2018-10-24T06:36:51Z") Hi Tech team, I wanted to monitor my MY API server which is on PHP, Can i use the APM server and client (ELK+APM) to monitor the api server. Actually i need stats all stats of my API servers on Kibana dashboard as prov… --- ## [Elastic Search nested sets (tree)](https://discuss.elastic.co/t/elastic-search-nested-sets-tree/71965)
**Author:** [@Behemo1h](https://discuss.elastic.co/u/Behemo1h)\ **Replies:** 2\ **Last updated:** [January 18, 2017, 11:46am UTC](https://discuss.elastic.co/t/elastic-search-nested-sets-tree/71965 "2017-01-18T11:46:30Z")
Hello everyone. I'm a little confused because of a lack of experience and noSQL ES. I hope you will help me to understand in more detail the problem of the organization tree in the ES. I have two related objects in my … --- ## [Rally 0.2.0 released](https://discuss.elastic.co/t/rally-0-2-0-released/47784)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [April 19, 2016, 11:53am UTC](https://discuss.elastic.co/t/rally-0-2-0-released/47784 "2016-04-19T11:53:26Z")
Today we are happy to announce the first public release of our internal benchmarking tool for Elasticsearch, called Rally. For more details please see: Release blog post: https://elastic.co/blog/announcing-rally-ben… --- ## [Sort by count of nested objects matching two or more criterias](https://discuss.elastic.co/t/sort-by-count-of-nested-objects-matching-two-or-more-criterias/45594)
**Author:** [@Hendrik\_Dev](https://discuss.elastic.co/u/Hendrik_Dev)\ **Replies:** 0\ **Last updated:** [March 28, 2016, 2:33pm UTC](https://discuss.elastic.co/t/sort-by-count-of-nested-objects-matching-two-or-more-criterias/45594 "2016-03-28T14:33:26Z")
I need to sort by the count of nested objects matching two or more criterias. ncomments is declared as type=nested in the mapping. The query below throws this exception: "reason" : "failed to run inline script \[do… --- ## [Monitoring systemd services using Metricbeat](https://discuss.elastic.co/t/monitoring-systemd-services-using-metricbeat/198284)
**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\ **Replies:** 3\ **Last updated:** [September 6, 2019, 3:57pm UTC](https://discuss.elastic.co/t/monitoring-systemd-services-using-metricbeat/198284 "2019-09-06T15:57:40Z")
I was wondering if there is a way to monitor Centos services like kubelet, keepalived, even a custom service that I wrote, using Metricbeat or any other Elastic service. i.e. is there a way to have metricbeat run a comma… --- ## [How to concatenate fields inside an array using Logstash?](https://discuss.elastic.co/t/how-to-concatenate-fields-inside-an-array-using-logstash/100148)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 3\ **Last updated:** [September 13, 2017, 11:31am UTC](https://discuss.elastic.co/t/how-to-concatenate-fields-inside-an-array-using-logstash/100148 "2017-09-13T11:31:23Z")
Hi, I am trying to concatenate fields inside an array. For example, event\_data =\> { param1 =\> "request", param2 =\> "is signing off" } And fields inside event\_data may vary. For example it may be param1… --- ## [Grok filter cannot parse log lines that are AFTER a multiline event](https://discuss.elastic.co/t/grok-filter-cannot-parse-log-lines-that-are-after-a-multiline-event/46255)
**Author:** [@pantheo](https://discuss.elastic.co/u/pantheo)\ **Replies:** 7\ **Last updated:** [April 5, 2016, 5:43am UTC](https://discuss.elastic.co/t/grok-filter-cannot-parse-log-lines-that-are-after-a-multiline-event/46255 "2016-04-05T05:43:03Z")
Hello everyone, I have a really annoying problem. As I mention in the title if I have an single-line event after a multiline event Logstash just freezes and cannot parse the rest of the file. However, If that same sin… --- ## [Bucket selector Kibana Data table visualization](https://discuss.elastic.co/t/bucket-selector-kibana-data-table-visualization/275573)
**Author:** [@theDor](https://discuss.elastic.co/u/theDor)\ **Replies:** 1\ **Last updated:** [June 11, 2021, 8:53pm UTC](https://discuss.elastic.co/t/bucket-selector-kibana-data-table-visualization/275573 "2021-06-11T20:53:05Z")
Hello to every one, I have a simple data table visualization that using the sum metric on a field and displaying the results in a data table. Now my goal is to display only results that the sum is greater than X value.… --- ## [X-pack overview show N/A but indices .monitoring-es\* was green](https://discuss.elastic.co/t/x-pack-overview-show-n-a-but-indices-monitoring-es-was-green/94887)
**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\ **Replies:** 5\ **Last updated:** [August 2, 2017, 9:30am UTC](https://discuss.elastic.co/t/x-pack-overview-show-n-a-but-indices-monitoring-es-was-green/94887 "2017-08-02T09:30:04Z")
Kibana Version: 5.5 Elasticsearch Version: 5.5 Plugins installed: \[X-PACK\] java version “1.8.0\_74” the load was a little high, before 2017.07.27 00:00:00 all the charts were normal, and after 00:00:00(the new indices… --- ## [\[7\] Visualize: Request Timeout after 30000ms](https://discuss.elastic.co/t/7-visualize-request-timeout-after-30000ms/96746)
**Author:** [@leoponton](https://discuss.elastic.co/u/leoponton)\ **Replies:** 8\ **Last updated:** [August 11, 2017, 11:09am UTC](https://discuss.elastic.co/t/7-visualize-request-timeout-after-30000ms/96746 "2017-08-11T11:09:04Z")
I’ve seen a few topics referring to this problem, but no answers that solved my issue. I have two Windows 10 machines sitting next to each other. They are both covered by the same firewall rule. Both are showing the sam… --- ## [Can't get IP as index pattern](https://discuss.elastic.co/t/cant-get-ip-as-index-pattern/60223)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 8\ **Last updated:** [September 12, 2016, 12:22pm UTC](https://discuss.elastic.co/t/cant-get-ip-as-index-pattern/60223 "2016-09-12T12:22:12Z")
This is using straight ntopng to elasticsearch: No Compatible Fields: The "ntopng-\*" index pattern does not contain any of the following field types: ip yet the field IPV4\_SRC\_ADDR is clearly an IP address. Why are m… --- ## [Successfullystarted logstash but it cant read my file even configuration is done without error msg](https://discuss.elastic.co/t/successfullystarted-logstash-but-it-cant-read-my-file-even-configuration-is-done-without-error-msg/214731)
**Author:** [@saravana\_hariharan](https://discuss.elastic.co/u/saravana_hariharan)\ **Replies:** 3\ **Last updated:** [January 13, 2020, 12:51pm UTC](https://discuss.elastic.co/t/successfullystarted-logstash-but-it-cant-read-my-file-even-configuration-is-done-without-error-msg/214731 "2020-01-13T12:51:22Z")
My config file input { file { path =\>"C:\\Users\\pgt0005\\Desktop\\data\\100-contacts.csv" start\_position =\> "beginning" } } filter { csv{ separator=\>"," columns=\>\["first\_name","last\_name","company\_name","address","… --- ## [Kibana.bat shows nothing on Windows 10](https://discuss.elastic.co/t/kibana-bat-shows-nothing-on-windows-10/163611)
**Author:** [@Garrett\_Bodily](https://discuss.elastic.co/u/Garrett_Bodily)\ **Replies:** 1\ **Last updated:** [January 10, 2019, 2:26pm UTC](https://discuss.elastic.co/t/kibana-bat-shows-nothing-on-windows-10/163611 "2019-01-10T14:26:06Z")
I am running on windows 10. I have downloaded and unzipped both OSS versions of Elasticsearch 6.5.4 and Kibana 6.5.4. Elasticsearch has started up as expected and can be accessed in my browser at localhost:9200. Now, … --- ## [Create a view from multiple index as kibana source](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 7\ **Last updated:** [October 12, 2020, 11:02am UTC](https://discuss.elastic.co/t/create-a-view-from-multiple-index-as-kibana-source/251529 "2020-10-12T11:02:58Z")
Im planning to create a summary view of my filebeat and metricbeat indices with few selected field from each and use it as my visualization source in kibana. Is this possible? --- ## [Defines one mapping type for a set of of subfields](https://discuss.elastic.co/t/defines-one-mapping-type-for-a-set-of-of-subfields/117187)
**Author:** [@anon24174512](https://discuss.elastic.co/u/anon24174512)\ **Replies:** 7\ **Last updated:** [January 27, 2018, 10:00pm UTC](https://discuss.elastic.co/t/defines-one-mapping-type-for-a-set-of-of-subfields/117187 "2018-01-27T22:00:42Z")
Hello, Is there a way to define a type for a set of sub fields ? Let say I have: myfield.mysubfield1 myfield.mysubfield2 Is it possible to define the mapping like that : "myfield": { "type": "float", }, So … --- ## [Find and show values of a field, which is also in another field](https://discuss.elastic.co/t/find-and-show-values-of-a-field-which-is-also-in-another-field/201077)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 4\ **Last updated:** [September 27, 2019, 3:03pm UTC](https://discuss.elastic.co/t/find-and-show-values-of-a-field-which-is-also-in-another-field/201077 "2019-09-27T15:03:31Z")
Hi all, I try to explain my problem as best as I can. Please ask if it is still not clear: So, I am sending me logfiles of two different systems via filebeat and parse them via logstash. The documents of "ServerA" con… --- ## [Logstash Support for EXCEL](https://discuss.elastic.co/t/logstash-support-for-excel/131454)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 4\ **Last updated:** [May 14, 2018, 6:07am UTC](https://discuss.elastic.co/t/logstash-support-for-excel/131454 "2018-05-14T06:07:46Z")
Hello Team I've an excel sheet having data of tickets. Now I'm converting the Excel to CSV and feeding to logstash as input. But to convert to csv, it requires a manual intervention which we don't want. Is there anyw… --- ## [Logstash Plugin error: When I use double as datatype in mutate filter](https://discuss.elastic.co/t/logstash-plugin-error-when-i-use-double-as-datatype-in-mutate-filter/138703)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 5\ **Last updated:** [July 6, 2018, 9:42am UTC](https://discuss.elastic.co/t/logstash-plugin-error-when-i-use-double-as-datatype-in-mutate-filter/138703 "2018-07-06T09:42:39Z")
Hello Below are the series of values i'm indexing with logstash. 0.00483871, 0.003225806, 0.006451613, 0.008064516 I'm converting it to float using mutate filter. But in kibana I see values as 0.004, 0.003, 0.006 etc. … --- ## [One fragment per occurrence](https://discuss.elastic.co/t/one-fragment-per-occurrence/7560)
**Author:** [@Danny\_O\_Cuiv](https://discuss.elastic.co/u/Danny_O_Cuiv)\ **Replies:** 5\ **Last updated:** [August 12, 2016, 11:34am UTC](https://discuss.elastic.co/t/one-fragment-per-occurrence/7560 "2016-08-12T11:34:26Z")
Hi, I'm trying to do something that I thought would have been a common enough use case, but I can't find a way. I've played around with parameters like number\_of\_fragments and fragment\_size, but they don't seem to … --- ## [How to add other \_types to the /etc/fields.yml in beats](https://discuss.elastic.co/t/how-to-add-other--types-to-the-etc-fields-yml-in-beats/70241)
**Author:** [@blacktop](https://discuss.elastic.co/u/blacktop)\ **Replies:** 8\ **Last updated:** [January 4, 2017, 7:10pm UTC](https://discuss.elastic.co/t/how-to-add-other--types-to-the-etc-fields-yml-in-beats/70241 "2017-01-04T19:10:56Z")
I have a beat that will have MANY different \_types. beats/libbeat/scripts/generate\_template.py doesn't seem to support that? Any help greatly appreciated. It looks like you can add more \_types with filebeat modle… --- ## [Is it possible to set default number of replicas in elasticsearch](https://discuss.elastic.co/t/is-it-possible-to-set-default-number-of-replicas-in-elasticsearch/281215)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [August 12, 2021, 8:44pm UTC](https://discuss.elastic.co/t/is-it-possible-to-set-default-number-of-replicas-in-elasticsearch/281215 "2021-08-12T20:44:19Z")
hello, Mine is a single node set up , and hence no replicas are assigned (i think ?) . Is it possible to set default replica number as 0 in elasticsearch.yml ? GET /\_cat/allocation?v shards disk.indices disk.used d… --- ## [In ECK - Verify that a coordinating-only node is doing its job](https://discuss.elastic.co/t/in-eck-verify-that-a-coordinating-only-node-is-doing-its-job/261859)
**Author:** [@sbonami](https://discuss.elastic.co/u/sbonami)\ **Replies:** 6\ **Last updated:** [February 3, 2021, 11:04am UTC](https://discuss.elastic.co/t/in-eck-verify-that-a-coordinating-only-node-is-doing-its-job/261859 "2021-02-03T11:04:33Z")
Hi, I'm using Elastic Cloud on Kubernetes (version 1.1.2 according to the operator). I want to have a coordinating-only node in my cluster. For the config, I have set node.master, node.data, node.ingest, node.ml, node.tr… --- ## [Elastic cluster capacity planning](https://discuss.elastic.co/t/elastic-cluster-capacity-planning/164880)
**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\ **Replies:** 2\ **Last updated:** [January 20, 2019, 7:39am UTC](https://discuss.elastic.co/t/elastic-cluster-capacity-planning/164880 "2019-01-20T07:39:24Z")
Hi, We have requirement to index around 8TB data per day including replica( 4TB per day) We are planning for 12 nodes cluster each with 8 core, 30TB Hdd,64gb ram out of 5 will be master nodes with SSD. Do we need to … --- ## [Visualize value change over time in table](https://discuss.elastic.co/t/visualize-value-change-over-time-in-table/133555)
**Author:** [@Thomas\_Schneider](https://discuss.elastic.co/u/Thomas_Schneider)\ **Replies:** 2\ **Last updated:** [June 13, 2018, 5:44am UTC](https://discuss.elastic.co/t/visualize-value-change-over-time-in-table/133555 "2018-06-13T05:44:07Z")
Hi, I am trying to visualize the change of a field over time. (stupid beginner, sorry) I am currently sending each hour a message from ~1000 devices with y unipue ID in each message { "DIAG": { "Name": "Dev… --- ## [Output data in multiple indices based on fields](https://discuss.elastic.co/t/output-data-in-multiple-indices-based-on-fields/112303)
**Author:** [@Harsh\_Verma](https://discuss.elastic.co/u/Harsh_Verma)\ **Replies:** 2\ **Last updated:** [December 18, 2017, 9:37pm UTC](https://discuss.elastic.co/t/output-data-in-multiple-indices-based-on-fields/112303 "2017-12-18T21:37:18Z")
I have a logfile with some special logs and some general logs.I want the general logs to go in a general index and the special logs(logs which match any of my grok patterns) to go in a separate index and in the general i… --- ## [org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: returned \[400|Bad Request:\]](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopinvalidrequest-returned-400-bad-request/95803)
**Author:** [@m-kiuchi](https://discuss.elastic.co/u/m-kiuchi)\ **Replies:** 2\ **Last updated:** [August 5, 2017, 11:35pm UTC](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopinvalidrequest-returned-400-bad-request/95803 "2017-08-05T23:35:27Z")
Hi, there When I tried read index from Spark, found error. py4j.protocol.Py4JJavaError: An error occurred while calling o35.load. : org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: \[HEAD\] on \[projects/project\] fai… --- ## [Following just regular installer instructions: Error: Could not find or load main class org.jruby.Main](https://discuss.elastic.co/t/following-just-regular-installer-instructions-error-could-not-find-or-load-main-class-org-jruby-main/114426)
**Author:** [@Kieren\_Johnstone](https://discuss.elastic.co/u/Kieren_Johnstone)\ **Replies:** 4\ **Last updated:** [January 7, 2018, 9:13pm UTC](https://discuss.elastic.co/t/following-just-regular-installer-instructions-error-could-not-find-or-load-main-class-org-jruby-main/114426 "2018-01-07T21:13:58Z")
Kierens-MBP:bin kieren$ ./logstash --? Java HotSpot(TM) 64-Bit Server VM warning: Option UseParNewGC was deprecated in version 9.0 and will likely be removed in a future release. Java HotSpot(TM) 64-Bit Server VM warni… --- ## [Bootstrap.mlockall: true in elastisearch not take effect?](https://discuss.elastic.co/t/bootstrap-mlockall-true-in-elastisearch-not-take-effect/57570)
**Author:** [@figo10203](https://discuss.elastic.co/u/figo10203)\ **Replies:** 4\ **Last updated:** [August 10, 2016, 6:34am UTC](https://discuss.elastic.co/t/bootstrap-mlockall-true-in-elastisearch-not-take-effect/57570 "2016-08-10T06:34:53Z")
Hi, as es official web site stated, it is strongly recommend that bootstrap.mlockall: true should be set in elasticsearch.yaml file. but after restart es, I find that the setting is not effective as below graph es is … --- ## [A JSON array consists of objects - how to deal with?](https://discuss.elastic.co/t/a-json-array-consists-of-objects-how-to-deal-with/264464)
**Author:** [@awer1967](https://discuss.elastic.co/u/awer1967)\ **Replies:** 5\ **Last updated:** [February 16, 2021, 9:33pm UTC](https://discuss.elastic.co/t/a-json-array-consists-of-objects-how-to-deal-with/264464 "2021-02-16T21:33:42Z")
Hi ! I strongly apologize for a possibly stupid, kinda "it-has-been-asked-a-lot-of-time", question. Nevertheless I have to ask for help because I have completely stuck with . So that I have a JSON array consist of ob… --- ## [Possible bug with deep pagination](https://discuss.elastic.co/t/possible-bug-with-deep-pagination/84577)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 5\ **Last updated:** [May 11, 2017, 8:41am UTC](https://discuss.elastic.co/t/possible-bug-with-deep-pagination/84577 "2017-05-11T08:41:39Z")
We observed the following issue in production. QUERY: Deep pagination with date filter and sorting on a particular field for an index. Index has two replicas (3 copies total) and 1 primary shard. Total shards = 3. ES… --- ## [Parsing an xml file](https://discuss.elastic.co/t/parsing-an-xml-file/76971)
**Author:** [@Mohamed](https://discuss.elastic.co/u/Mohamed)\ **Replies:** 3\ **Last updated:** [March 1, 2017, 2:04pm UTC](https://discuss.elastic.co/t/parsing-an-xml-file/76971 "2017-03-01T14:04:09Z")
Hello, I am having a sample xml log file like below: \ \XX\ \YY\ \ I want to parse the above code and want to display the data in an output file like… --- ## [Keyword filter requires either \`keywords\` or \`keywords\_path\` to be configured](https://discuss.elastic.co/t/keyword-filter-requires-either-keywords-or-keywords-path-to-be-configured/80332)
**Author:** [@dpmika](https://discuss.elastic.co/u/dpmika)\ **Replies:** 6\ **Last updated:** [March 29, 2017, 9:42am UTC](https://discuss.elastic.co/t/keyword-filter-requires-either-keywords-or-keywords-path-to-be-configured/80332 "2017-03-29T09:42:04Z")
Hello to all, I just implemented elastics on my ecommerce and after creating all the documents, I sent through the settings that I found to this page of the documentation. https://www.elastic.co/guide/en/elasticsearch/re… --- ## [ElasticsearchParseException using Ingest Attachment Processor Plugin in Elasticsearch 6.4.2](https://discuss.elastic.co/t/elasticsearchparseexception-using-ingest-attachment-processor-plugin-in-elasticsearch-6-4-2/172943)
**Author:** [@thbaan](https://discuss.elastic.co/u/thbaan)\ **Replies:** 8\ **Last updated:** [March 20, 2019, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearchparseexception-using-ingest-attachment-processor-plugin-in-elasticsearch-6-4-2/172943 "2019-03-20T14:31:38Z")
Hi there We use the Ingest Attachment Processor Plugin in Elasticsearch 6.4.2 for indexing content from OCR-processed PDF files. Today a user reported an error regarding to a specific document which is provided here. St… --- ## [How to customize kibana appearance?](https://discuss.elastic.co/t/how-to-customize-kibana-appearance/156680)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [November 15, 2018, 8:09am UTC](https://discuss.elastic.co/t/how-to-customize-kibana-appearance/156680 "2018-11-15T08:09:19Z")
Hi, is it possible to customize kibana? I would like to change the appearance a bit which means I want to change the following: font text foreground color background color maybe changing / replacing the kibana logo. I… --- ## [Alias with multiple index or One Index](https://discuss.elastic.co/t/alias-with-multiple-index-or-one-index/84206)
**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\ **Replies:** 4\ **Last updated:** [May 2, 2017, 7:21am UTC](https://discuss.elastic.co/t/alias-with-multiple-index-or-one-index/84206 "2017-05-02T07:21:12Z")
Hi Elasticsearch: I have a use case. That I have a time-based log store in ES. There are two plans to store it. \[Store in one index\] Plan A I will only create one index to store the log. \[Store in daily index and… [Previous page](https://discuss.elastic.co/top.md?page=641&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=643&per_page=50&period=all)