# Top

**URL:** https://discuss.elastic.co/top.md?page=664&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 665

---

## [3D/4D Visualization](https://discuss.elastic.co/t/3d-4d-visualization/128200)

<div class="topic-metadata">

**Author:** [@MarkusT](https://discuss.elastic.co/u/MarkusT)\
**Replies:** 4\
**Last updated:** [April 24, 2018, 6:13am UTC](https://discuss.elastic.co/t/3d-4d-visualization/128200 "2018-04-24T06:13:08Z")

</div>

Hey there, I hope you can help me, I've posted this question on github, bun got no answer for 4 weeks or so. My plan is to build my own 3D/4D visualization, 3 dimensions to be choosen as the space koordinates and a fou…

---

## [High-level REST client automatic connection repair](https://discuss.elastic.co/t/high-level-rest-client-automatic-connection-repair/118740)

<div class="topic-metadata">

**Author:** [@elastinoob](https://discuss.elastic.co/u/elastinoob)\
**Replies:** 4\
**Last updated:** [February 12, 2018, 6:18pm UTC](https://discuss.elastic.co/t/high-level-rest-client-automatic-connection-repair/118740 "2018-02-12T18:18:31Z")

</div>

We currently use the JEST 5.2 client. We recently experienced a networking issue where, after recovery, an invalid HTTP route was held by the client connection manager instead of finding a new valid route to the ES clus…

---

## [Kibana upgrade --\> xpack install then 'Optimizing and caching browser bundles...'](https://discuss.elastic.co/t/kibana-upgrade-xpack-install-then-optimizing-and-caching-browser-bundles/96009)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 4\
**Last updated:** [August 10, 2017, 11:39am UTC](https://discuss.elastic.co/t/kibana-upgrade-xpack-install-then-optimizing-and-caching-browser-bundles/96009 "2017-08-10T11:39:48Z")

</div>

Hi. Yesterday I upgraded my lab from 5.5.0 to 5.5.1. Went through the whole upgrade process with no problems. Up to the stage of installing x-pack for Kibana and the process is stuck at the ‘Optimizing and caching brows…

---

## [\[ANNOUNCEMENT\] NagiosCheckBeat 0.6.0 Released](https://discuss.elastic.co/t/announcement-nagioscheckbeat-0-6-0-released/56801)

<div class="topic-metadata">

**Author:** [@PhaedrusTheGreek](https://discuss.elastic.co/u/PhaedrusTheGreek)\
**Replies:** 0\
**Last updated:** [July 30, 2016, 8:14pm UTC](https://discuss.elastic.co/t/announcement-nagioscheckbeat-0-6-0-released/56801 "2016-07-30T20:14:41Z")

</div>

NagiosCheckBeat 0.6.0 Released! Contains updated Libbeat for the Elastic Stack 5.x which includes numerous bug fixes and enhancements

---

## [ENOTFOUND exception in installing shield in kibana in offline mode!](https://discuss.elastic.co/t/enotfound-exception-in-installing-shield-in-kibana-in-offline-mode/55960)

<div class="topic-metadata">

**Author:** [@sukesh](https://discuss.elastic.co/u/sukesh)\
**Replies:** 2\
**Last updated:** [July 20, 2016, 12:04pm UTC](https://discuss.elastic.co/t/enotfound-exception-in-installing-shield-in-kibana-in-offline-mode/55960 "2016-07-20T12:04:22Z")

</div>

this type of exception is throwing ,please help me to find my mistake in this C:\\Users\\483551\\Downloads\\kibana-4.5.0-windows\\kibana-4.5.0-windows\\bin\>kibana p lugin --install shield --url file:///D:\\shield\\shield-2.3.1…

---

## [ECE deployment cannot connect filebeats to kibana](https://discuss.elastic.co/t/ece-deployment-cannot-connect-filebeats-to-kibana/152575)

<div class="topic-metadata">

**Author:** [@JeanD-SYD](https://discuss.elastic.co/u/JeanD-SYD)\
**Replies:** 6\
**Last updated:** [October 17, 2018, 12:13am UTC](https://discuss.elastic.co/t/ece-deployment-cannot-connect-filebeats-to-kibana/152575 "2018-10-17T00:13:05Z")

</div>

Hi, I have deployment the on-premise ECE, following the guide. Just a simple POC, but it seems the the licence will expire before I can get some real data in the system. Best to then stick with Splunk :slight\_smile: 3…

---

## [7.1 Custom Analyzer \[...\] failed to find filter under name \[english\_morphology\]](https://discuss.elastic.co/t/7-1-custom-analyzer-failed-to-find-filter-under-name-english-morphology/186459)

<div class="topic-metadata">

**Author:** [@clgs](https://discuss.elastic.co/u/clgs)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 10:07am UTC](https://discuss.elastic.co/t/7-1-custom-analyzer-failed-to-find-filter-under-name-english-morphology/186459 "2019-06-20T10:07:08Z")

</div>

In 5.6 was "analysis":{"analyzer":{"fast\_search":{"filter":\["lowercase","english\_morphology"\],"tokenizer":"standard"}}} But in 7.1 there is no english\_morphology plugin. Tell me how to be?

---

## [De-duplicating with MURMUR3 vs SHA256](https://discuss.elastic.co/t/de-duplicating-with-murmur3-vs-sha256/147262)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 3\
**Last updated:** [September 17, 2018, 7:24pm UTC](https://discuss.elastic.co/t/de-duplicating-with-murmur3-vs-sha256/147262 "2018-09-17T19:24:39Z")

</div>

Hi, has anyone used the fingerprint plugin with MURMUR3? So far I find it has quite high collision rate. Even with just a few hundred thousands records managed to get 20 collisions. Testing with sha256 over 2million rec…

---

## [Elasticsearch is not accessible via machine IP Address](https://discuss.elastic.co/t/elasticsearch-is-not-accessible-via-machine-ip-address/206090)

<div class="topic-metadata">

**Author:** [@premkumar](https://discuss.elastic.co/u/premkumar)\
**Replies:** 5\
**Last updated:** [November 1, 2019, 2:51pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-accessible-via-machine-ip-address/206090 "2019-11-01T14:51:48Z")

</div>

Hi All, I have installed Elasticsearch 7.2 on CentOS 7. After installation without making any changes to the yml file, I was able to access Elasticsearch using the curl command curl http://localhost:9200/\_cluster/healt…

---

## [High CPU Usage - Windows](https://discuss.elastic.co/t/high-cpu-usage-windows/53141)

<div class="topic-metadata">

**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\
**Replies:** 5\
**Last updated:** [June 20, 2016, 2:47pm UTC](https://discuss.elastic.co/t/high-cpu-usage-windows/53141 "2016-06-20T14:47:11Z")

</div>

Hi, I am trying to use Filebeat to extract lines which contain a particular string and send those lines to Elasticsearch (or Logstash). I'm now able to use either "include\_lines" or "exclude\_lines" to grab the relev…

---

## [Video files](https://discuss.elastic.co/t/video-files/13625)

<div class="topic-metadata">

**Author:** [@Doug\_Wolfgram](https://discuss.elastic.co/u/Doug_Wolfgram)\
**Replies:** 5\
**Last updated:** [September 16, 2013, 10:53pm UTC](https://discuss.elastic.co/t/video-files/13625 "2013-09-16T22:53:16Z")

</div>

I am new to ES. I have a need to index and search hundreds of millions of video files. (think Youtube). I am assuming that I could create the entire system in ES with one of the keys being the url to to video file it…

---

## [Security information not being output on startup (8.0.0-rc2)](https://discuss.elastic.co/t/security-information-not-being-output-on-startup-8-0-0-rc2/296393)

<div class="topic-metadata">

**Author:** [@Andy0708](https://discuss.elastic.co/u/Andy0708)\
**Replies:** 7\
**Last updated:** [February 11, 2022, 12:53pm UTC](https://discuss.elastic.co/t/security-information-not-being-output-on-startup-8-0-0-rc2/296393 "2022-02-11T12:53:22Z")

</div>

Tried setting up Elasticsearch 8.0.0-rc2 on macOS to test the new security configuration. Despite what the documentation says, no password, enrollment token, etc. is being output on first startup. Instead, the following …

---

## [How can I get the count of all indices?](https://discuss.elastic.co/t/how-can-i-get-the-count-of-all-indices/288047)

<div class="topic-metadata">

**Author:** [@buaaytt](https://discuss.elastic.co/u/buaaytt)\
**Replies:** 7\
**Last updated:** [November 1, 2021, 6:08am UTC](https://discuss.elastic.co/t/how-can-i-get-the-count-of-all-indices/288047 "2021-11-01T06:08:39Z")

</div>

And is there a way to configure whether to include the default system indices, whose names start with a dot?

---

## [error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>"Elasticsearch Unreachable](https://discuss.elastic.co/t/error-type-logstash-hostunreachableerror-error-elasticsearch-unreachable/213702)

<div class="topic-metadata">

**Author:** [@Punithraya](https://discuss.elastic.co/u/Punithraya)\
**Replies:** 1\
**Last updated:** [January 4, 2020, 1:37am UTC](https://discuss.elastic.co/t/error-type-logstash-hostunreachableerror-error-elasticsearch-unreachable/213702 "2020-01-04T01:37:55Z")

</div>

Hello Team, We are getting error in logstash file as below, Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"http://xx.xx.xx.xx:9200/", :error\_type=\>LogStash::Outputs::ElasticSearch::Htt…

---

## [Metricbeat is unable to send data to elastic search](https://discuss.elastic.co/t/metricbeat-is-unable-to-send-data-to-elastic-search/165787)

<div class="topic-metadata">

**Author:** [@chethan\_sarathy](https://discuss.elastic.co/u/chethan_sarathy)\
**Replies:** 3\
**Last updated:** [January 25, 2019, 5:22pm UTC](https://discuss.elastic.co/t/metricbeat-is-unable-to-send-data-to-elastic-search/165787 "2019-01-25T17:22:29Z")

</div>

Hello, I have setup Elasticsearch and Kibana in a VM and then started setting up metricbeat. Elasticsearch & Kibana is working fine. But I am unable to send metricbeat data to elastic search. Once I start running metri…

---

## [File Path Directory name extract Regex](https://discuss.elastic.co/t/file-path-directory-name-extract-regex/126455)

<div class="topic-metadata">

**Author:** [@vimal\_P](https://discuss.elastic.co/u/vimal_P)\
**Replies:** 3\
**Last updated:** [April 2, 2018, 8:39pm UTC](https://discuss.elastic.co/t/file-path-directory-name-extract-regex/126455 "2018-04-02T20:39:02Z")

</div>

Hi Everyone, I need to extract directory name from the "path" field and assign it to "arcot" field. I require "arcot" value for filtering purpose. Below is the code i am using. path variable is storing "D:\\Program File…

---

## [Restarting one of the nodes resulted in unassigned shards](https://discuss.elastic.co/t/restarting-one-of-the-nodes-resulted-in-unassigned-shards/10692)

<div class="topic-metadata">

**Author:** [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\
**Replies:** 3\
**Last updated:** [February 11, 2013, 11:08pm UTC](https://discuss.elastic.co/t/restarting-one-of-the-nodes-resulted-in-unassigned-shards/10692 "2013-02-11T23:08:15Z")

</div>

Hi all, I've a 2 node cluster of ES having configuration. http://sprunge.us/gOIa If I restart one of the nodes, I get too many uninitialized shards which takes around 1 hour to recover (Right now, I have 4 indice…

---

## [ILM rollover for "Logstash Elasticsearch output plugin"](https://discuss.elastic.co/t/ilm-rollover-for-logstash-elasticsearch-output-plugin/281176)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 6\
**Last updated:** [August 12, 2021, 12:00pm UTC](https://discuss.elastic.co/t/ilm-rollover-for-logstash-elasticsearch-output-plugin/281176 "2021-08-12T12:00:13Z")

</div>

Hello My logstash code uses the elasticsearch output plugin to ingest docs into elasticsearch . However the index size tends to get larger in size , i came across ILM concepts in the elasticsearch documents, that says t…

---

## [Elasticsearch ERROR: Failed to verify bootstrap password ---](https://discuss.elastic.co/t/elasticsearch-error-failed-to-verify-bootstrap-password/181732)

<div class="topic-metadata">

**Author:** [@hari.v](https://discuss.elastic.co/u/hari.v)\
**Replies:** 1\
**Last updated:** [May 20, 2019, 4:22am UTC](https://discuss.elastic.co/t/elasticsearch-error-failed-to-verify-bootstrap-password/181732 "2019-05-20T04:22:15Z")

</div>

Hi after ii upgraded to platinum license and then reset the password in elasticsearch 7.0 (bin/elasticsearch-setup-passwords interactive). i could able to login in elastic user. but i couldnt able to login using kiban…

---

## [Secure way of setting username/password in logstash config file](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126)

<div class="topic-metadata">

**Author:** [@imad](https://discuss.elastic.co/u/imad)\
**Replies:** 5\
**Last updated:** [January 31, 2017, 5:18pm UTC](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126 "2017-01-31T17:18:45Z")

</div>

Is there a more secure way of setting username/password of couchdb in logstash config file. Setting a plain password in config file wouldn't be a very likable option. Thanks, Imad.

---

## [Elasticsearch 5.0 Php ingest attachment](https://discuss.elastic.co/t/elasticsearch-5-0-php-ingest-attachment/64876)

<div class="topic-metadata">

**Author:** [@svarup](https://discuss.elastic.co/u/svarup)\
**Replies:** 5\
**Last updated:** [November 8, 2016, 12:51pm UTC](https://discuss.elastic.co/t/elasticsearch-5-0-php-ingest-attachment/64876 "2016-11-08T12:51:36Z")

</div>

How to force(override) ingest attachment properties. What if I want to specify my own tittle, name, author, etc... of a document. In mapper attachment plugin we use: "my\_attachment" : { "\_language" : "en", …

---

## [Json format and types](https://discuss.elastic.co/t/json-format-and-types/139540)

<div class="topic-metadata">

**Author:** [@dmccuk](https://discuss.elastic.co/u/dmccuk)\
**Replies:** 2\
**Last updated:** [July 12, 2018, 8:56am UTC](https://discuss.elastic.co/t/json-format-and-types/139540 "2018-07-12T08:56:26Z")

</div>

Hi, I've been setting up filebeat to send json formatted logs over to logstash before storing in ES. I'm not sure if my issue is related to filebeat or logstash. ISSUE: Once the JSON formated files have made there was…

---

## [Install sense plugin on kibana 5 alpha4](https://discuss.elastic.co/t/install-sense-plugin-on-kibana-5-alpha4/56404)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 2\
**Last updated:** [July 26, 2016, 7:29pm UTC](https://discuss.elastic.co/t/install-sense-plugin-on-kibana-5-alpha4/56404 "2016-07-26T19:29:06Z")

</div>

Hello, Is there any any way to install the kibana sense plugin to 5.0\_alpha4? Regards, Peter

---

## [Visualization return no results found, though discover successfully displays results](https://discuss.elastic.co/t/visualization-return-no-results-found-though-discover-successfully-displays-results/33626)

<div class="topic-metadata">

**Author:** [@Vamsi](https://discuss.elastic.co/u/Vamsi)\
**Replies:** 2\
**Last updated:** [November 5, 2015, 1:54am UTC](https://discuss.elastic.co/t/visualization-return-no-results-found-though-discover-successfully-displays-results/33626 "2015-11-05T01:54:39Z")

</div>

I have created a dashboard using kibana 4.1.2. When I set data to display as last 15 mins kibana returns No results found but when I use same search query in discover I see valid data returned. Kibana returns No resu…

---

## [Using tokens with the endpoint /internal/security/login for logging instead of basic authentication](https://discuss.elastic.co/t/using-tokens-with-the-endpoint-internal-security-login-for-logging-instead-of-basic-authentication/259909)

<div class="topic-metadata">

**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\
**Replies:** 4\
**Last updated:** [January 4, 2021, 5:29pm UTC](https://discuss.elastic.co/t/using-tokens-with-the-endpoint-internal-security-login-for-logging-instead-of-basic-authentication/259909 "2021-01-04T17:29:28Z")

</div>

In this post, Kibana 7.10 login issues, there is an example of using basic authentication to log through the /internal/security/login API endpoint by using: --data-raw '{"providerType":"basic","providerName":"basic","cu…

---

## [Kibana start as a service using another user other than root](https://discuss.elastic.co/t/kibana-start-as-a-service-using-another-user-other-than-root/189637)

<div class="topic-metadata">

**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\
**Replies:** 3\
**Last updated:** [July 23, 2019, 11:03pm UTC](https://discuss.elastic.co/t/kibana-start-as-a-service-using-another-user-other-than-root/189637 "2019-07-23T23:03:42Z")

</div>

Hi, I have kibana 5.4.2 installed on a server. I can start the service with no problem when I am logged as a root user using "systemctl start kibana" or "service kibana start". I have the kibana.service file at /etc/sy…

---

## [Curl a webservice using ruby filter](https://discuss.elastic.co/t/curl-a-webservice-using-ruby-filter/166734)

<div class="topic-metadata">

**Author:** [@ruby.gem](https://discuss.elastic.co/u/ruby.gem)\
**Replies:** 3\
**Last updated:** [February 1, 2019, 10:39pm UTC](https://discuss.elastic.co/t/curl-a-webservice-using-ruby-filter/166734 "2019-02-01T22:39:50Z")

</div>

Hello, Im trying to consume some events from a webservice with curl using ruby code in logstash filter. The service requires an ip address to be supplied with -d switch. curl -s -XPOST -d 'ip=151.101.0.81' 'http://api…

---

## [Azure Functions support](https://discuss.elastic.co/t/azure-functions-support/157766)

<div class="topic-metadata">

**Author:** [@alastairs](https://discuss.elastic.co/u/alastairs)\
**Replies:** 3\
**Last updated:** [November 26, 2018, 1:11pm UTC](https://discuss.elastic.co/t/azure-functions-support/157766 "2018-11-26T13:11:41Z")

</div>

Hi there What's the timeframe for support for Azure Functions in Functionbeat? We're using a custom solution at the moment and would love to give Functionbeat a spin when there's something available. Alastair

---

## [Conseils architecture ElasticSearch](https://discuss.elastic.co/t/conseils-architecture-elasticsearch/57619)

<div class="topic-metadata">

**Author:** [@lorisbc](https://discuss.elastic.co/u/lorisbc)\
**Replies:** 3\
**Last updated:** [August 10, 2016, 2:28pm UTC](https://discuss.elastic.co/t/conseils-architecture-elasticsearch/57619 "2016-08-10T14:28:31Z")

</div>

Bonjour, Je suis étudiant et je travaille sur les performances d' ElasticSearch. Je cherche à dimensionner une infrastructure qui serait capable de recevoir des milliers de transactions en parallèle venant de différents…

---

## [Convert @timestamp to string](https://discuss.elastic.co/t/convert-timestamp-to-string/33002)

<div class="topic-metadata">

**Author:** [@paltryeffort](https://discuss.elastic.co/u/paltryeffort)\
**Replies:** 2\
**Last updated:** [October 28, 2015, 3:04pm UTC](https://discuss.elastic.co/t/convert-timestamp-to-string/33002 "2015-10-28T15:04:29Z")

</div>

I'd like to upgrade logstash 1.4 to 1.5. Before my logstash server processes the actual message I copy the @timestamp to a new field in order to know when the server received the message: mutate { add\_field =\> …

---

## [Reindexing Elasticsearch 2.x to 5.x](https://discuss.elastic.co/t/reindexing-elasticsearch-2-x-to-5-x/117425)

<div class="topic-metadata">

**Author:** [@atom](https://discuss.elastic.co/u/atom)\
**Replies:** 6\
**Last updated:** [February 6, 2018, 9:36am UTC](https://discuss.elastic.co/t/reindexing-elasticsearch-2-x-to-5-x/117425 "2018-02-06T09:36:48Z")

</div>

Hi there, i am upgrading our elasticsearch instance from 2.x to 5.6. The upgrade itself with full cluster restart went fine. Now i need to reindex all indices in order to upgrade to version 6.x. I do not understand wha…

---

## [EsHadoopInvalidRequest: Malformed scrollId caused by es.scroll.limit](https://discuss.elastic.co/t/eshadoopinvalidrequest-malformed-scrollid-caused-by-es-scroll-limit/85990)

<div class="topic-metadata">

**Author:** [@geantbrun](https://discuss.elastic.co/u/geantbrun)\
**Replies:** 8\
**Last updated:** [May 19, 2017, 2:02pm UTC](https://discuss.elastic.co/t/eshadoopinvalidrequest-malformed-scrollid-caused-by-es-scroll-limit/85990 "2017-05-19T14:02:35Z")

</div>

Hi, The following simple command in Spark 2.2.0 works well: df = spark.read.format("org.elasticsearch.spark.sql") .option("es.nodes", "{my es nodes}") .option("es.port", "9200") .option("es.net.http.auth.user", "") .…

---

## [Wildcard with drop\_fields](https://discuss.elastic.co/t/wildcard-with-drop-fields/123237)

<div class="topic-metadata">

**Author:** [@CeeDee](https://discuss.elastic.co/u/CeeDee)\
**Replies:** 2\
**Last updated:** [March 12, 2018, 2:07pm UTC](https://discuss.elastic.co/t/wildcard-with-drop-fields/123237 "2018-03-12T14:07:02Z")

</div>

Hi, I wish to drop multiple fields starting with the same pattern (e.g. postgresql.database.rows.\*) from my metricbeat config. I've tried the following syntax but it does not seem to work: processors: - drop\_field…

---

## [Accessing the value of a dynamic key in an object](https://discuss.elastic.co/t/accessing-the-value-of-a-dynamic-key-in-an-object/136012)

<div class="topic-metadata">

**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\
**Replies:** 5\
**Last updated:** [June 18, 2018, 5:56pm UTC](https://discuss.elastic.co/t/accessing-the-value-of-a-dynamic-key-in-an-object/136012 "2018-06-18T17:56:13Z")

</div>

Partial mapping of one of my index is as follows: "schools": { "type": "object", "dynamic": true, "properties": {} } A sample schools object of an existing document is: "schools": { "8291": { "max": 11, …

---

## [Take/calculate value from dashboard](https://discuss.elastic.co/t/take-calculate-value-from-dashboard/259093)

<div class="topic-metadata">

**Author:** [@blukit](https://discuss.elastic.co/u/blukit)\
**Replies:** 4\
**Last updated:** [January 8, 2021, 5:07am UTC](https://discuss.elastic.co/t/take-calculate-value-from-dashboard/259093 "2021-01-08T05:07:21Z")

</div>

Hi guys... Is it possible to calculate value directly from a dashboard? The underlying logic of existing metrics kinda complex, so i think it would be more simple if I could take the output for other calculation. ex…

---

## [Docker compose how to enable read only mode?](https://discuss.elastic.co/t/docker-compose-how-to-enable-read-only-mode/257348)

<div class="topic-metadata">

**Author:** [@Christophvh](https://discuss.elastic.co/u/Christophvh)\
**Replies:** 4\
**Last updated:** [December 2, 2020, 2:00pm UTC](https://discuss.elastic.co/t/docker-compose-how-to-enable-read-only-mode/257348 "2020-12-02T14:00:12Z")

</div>

Hi, I had a local working docker setup for version 7.9.3 I want want to upgrade to 7.10 I don't care for lost data I just want to upgrade on my local machine. The production setup is on cloud and is already updated. I …

---

## [How is sharding implemented?](https://discuss.elastic.co/t/how-is-sharding-implemented/154716)

<div class="topic-metadata">

**Author:** [@sm6405](https://discuss.elastic.co/u/sm6405)\
**Replies:** 1\
**Last updated:** [October 30, 2018, 7:27pm UTC](https://discuss.elastic.co/t/how-is-sharding-implemented/154716 "2018-10-30T19:27:04Z")

</div>

I was wondering about the specific implementation of sharding within elasticsearch. I read many of the blog posts that state that the default value for sharding is 5 shards per index, however I was wondering about the pr…

---

## [How can we mount NFS mount on elastic operator based pods (Elasticsearch on Kubernetes)](https://discuss.elastic.co/t/how-can-we-mount-nfs-mount-on-elastic-operator-based-pods-elasticsearch-on-kubernetes/236077)

<div class="topic-metadata">

**Author:** [@nethisandeep](https://discuss.elastic.co/u/nethisandeep)\
**Replies:** 3\
**Last updated:** [June 7, 2020, 11:47am UTC](https://discuss.elastic.co/t/how-can-we-mount-nfs-mount-on-elastic-operator-based-pods-elasticsearch-on-kubernetes/236077 "2020-06-07T11:47:29Z")

</div>

Hi Team, I'm trying to use elasticsearch operator on our Kuberenetes cluster and found some limitations around volume mounts. Looks like with the current version it's only possible to attach storage volume and cloud plu…

---

## [Proxy pass for security always redirects to kibana port?](https://discuss.elastic.co/t/proxy-pass-for-security-always-redirects-to-kibana-port/73411)

<div class="topic-metadata">

**Author:** [@jtnix](https://discuss.elastic.co/u/jtnix)\
**Replies:** 3\
**Last updated:** [February 3, 2017, 4:50pm UTC](https://discuss.elastic.co/t/proxy-pass-for-security-always-redirects-to-kibana-port/73411 "2017-02-03T16:50:02Z")

</div>

Hello! I am attempting to set up proxypass of Kibana 5.1 through a same-server Apache service using the standard procedure. While I have this working, it seems that after the initial authentication approval by Apache, k…

---

## [Challenges embedding Kibana visualizations in elasticsearch \_site plugin](https://discuss.elastic.co/t/challenges-embedding-kibana-visualizations-in-elasticsearch--site-plugin/24900)

<div class="topic-metadata">

**Author:** [@Mark\_Harwood](https://discuss.elastic.co/u/Mark_Harwood)\
**Replies:** 3\
**Last updated:** [July 6, 2015, 8:54am UTC](https://discuss.elastic.co/t/challenges-embedding-kibana-visualizations-in-elasticsearch--site-plugin/24900 "2015-07-06T08:54:44Z")

</div>

I'm developing an elasticsearch \_site plugin that lets me create new indexes and upload content. I can embed Kibana visualizations in an iFrame to good effect but came across 2 issues: 1) Chrome is happy embedding Ki…

---

## [How can I delete a closed index with curator?](https://discuss.elastic.co/t/how-can-i-delete-a-closed-index-with-curator/56773)

<div class="topic-metadata">

**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\
**Replies:** 2\
**Last updated:** [July 29, 2016, 9:36pm UTC](https://discuss.elastic.co/t/how-can-i-delete-a-closed-index-with-curator/56773 "2016-07-29T21:36:54Z")

</div>

Not sure I need to add any more than the topic sentence? My intention is to close indexes \> x days old then delete them at some later date. This is log data...

---

## [Differnt shards giving different results](https://discuss.elastic.co/t/differnt-shards-giving-different-results/188285)

<div class="topic-metadata">

**Author:** [@sangam0707](https://discuss.elastic.co/u/sangam0707)\
**Replies:** 6\
**Last updated:** [July 1, 2019, 1:25pm UTC](https://discuss.elastic.co/t/differnt-shards-giving-different-results/188285 "2019-07-01T13:25:45Z")

</div>

Hi, I am using Elasticsearch version 7.1.1. My index and cluster settings are as follows. Index Settings: number\_of\_shards: 1 number\_of\_replicas: 2 Cluster structure: Master nodes: 3 Data nodes:3 Coordinating no…

---

## [Indexing through logstash - varying columns in the input](https://discuss.elastic.co/t/indexing-through-logstash-varying-columns-in-the-input/66154)

<div class="topic-metadata">

**Author:** [@deepu.sundar](https://discuss.elastic.co/u/deepu.sundar)\
**Replies:** 6\
**Last updated:** [November 18, 2016, 8:59pm UTC](https://discuss.elastic.co/t/indexing-through-logstash-varying-columns-in-the-input/66154 "2016-11-18T20:59:46Z")

</div>

Hi Team, We built a solution leveraging the ELK to parse and generate reports out of AWS billing files. Currently we are indexing all the columns available in the log file as it is. But we found that the number of c…

---

## [Logstash-filebeat error](https://discuss.elastic.co/t/logstash-filebeat-error/46315)

<div class="topic-metadata">

**Author:** [@Farouk\_Samu](https://discuss.elastic.co/u/Farouk_Samu)\
**Replies:** 5\
**Last updated:** [April 5, 2016, 6:48am UTC](https://discuss.elastic.co/t/logstash-filebeat-error/46315 "2016-04-05T06:48:45Z")

</div>

Can some one help me resolve this error root@logstash:/opt/logstash/bin# ./logstash -f logstash.conf Apr 04, 2016 7:53:07 PM org.elasticsearch.node.internal.InternalNode INFO: \[logstash-logstash-3557-12128\] version\[1.…

---

## [Unable to start apm-server](https://discuss.elastic.co/t/unable-to-start-apm-server/192570)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 3\
**Last updated:** [July 29, 2019, 6:57am UTC](https://discuss.elastic.co/t/unable-to-start-apm-server/192570 "2019-07-29T06:57:21Z")

</div>

Hello Team Installed apm-server 7.2.0 on RHEL(Amazon EC2). Unable to start the service. When I checked with apm-server test config the output is Also, I don't find any log file inside log/apm-server/

---

## [How to skip grok filter match if one of the grok is matched](https://discuss.elastic.co/t/how-to-skip-grok-filter-match-if-one-of-the-grok-is-matched/130094)

<div class="topic-metadata">

**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\
**Replies:** 3\
**Last updated:** [May 1, 2018, 8:51am UTC](https://discuss.elastic.co/t/how-to-skip-grok-filter-match-if-one-of-the-grok-is-matched/130094 "2018-05-01T08:51:06Z")

</div>

Hi, I am having 1000 of grok in one filter. I want to skip to check if one of the grok is matched. Here is my config if\[type\] == 'kmsg' { grok { match =\> { logs =\> ".\*Unable to handle kernel paging request at vir…

---

## [Creating separate documents from log](https://discuss.elastic.co/t/creating-separate-documents-from-log/94521)

<div class="topic-metadata">

**Author:** [@jukeboxhero85](https://discuss.elastic.co/u/jukeboxhero85)\
**Replies:** 3\
**Last updated:** [July 26, 2017, 11:03pm UTC](https://discuss.elastic.co/t/creating-separate-documents-from-log/94521 "2017-07-26T23:03:43Z")

</div>

Hi, is it possible to create separate documents from logstash? what I mean is, I have this log that's one single string, I want to get the first part of the string since that's where the identifier is and the rest are pa…

---

## [Logstash and the famous flushing of pipelines](https://discuss.elastic.co/t/logstash-and-the-famous-flushing-of-pipelines/151626)

<div class="topic-metadata">

**Author:** [@Carlos\_Magalhaes](https://discuss.elastic.co/u/Carlos_Magalhaes)\
**Replies:** 4\
**Last updated:** [October 10, 2018, 7:32pm UTC](https://discuss.elastic.co/t/logstash-and-the-famous-flushing-of-pipelines/151626 "2018-10-10T19:32:06Z")

</div>

Hi all, I have got almost every module working on ELK and really enjoying ELK. There is one caveat which I just can't get around and its been keeping me up till early hours of the morning :slight\_smile: I have filebeat…

---

## [Filebeat refuses to log to file (7.0.1)](https://discuss.elastic.co/t/filebeat-refuses-to-log-to-file-7-0-1/181846)

<div class="topic-metadata">

**Author:** [@buzzlightyear](https://discuss.elastic.co/u/buzzlightyear)\
**Replies:** 2\
**Last updated:** [May 21, 2019, 7:41am UTC](https://discuss.elastic.co/t/filebeat-refuses-to-log-to-file-7-0-1/181846 "2019-05-21T07:41:22Z")

</div>

Filebeat is configured to log to /var/log/filebeat, but it only logs to syslog. /var/log/filebeat directory does exist, and filebeat logs no error or warning to syslog to indicate any issues with logging to files. I've …

---

## [Too many aggregation buckets](https://discuss.elastic.co/t/too-many-aggregation-buckets/56631)

<div class="topic-metadata">

**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\
**Replies:** 2\
**Last updated:** [August 1, 2016, 10:01am UTC](https://discuss.elastic.co/t/too-many-aggregation-buckets/56631 "2016-08-01T10:01:07Z")

</div>

I have a query with an aggregation of a date histogram that creates buckets per 10 seconds for a full day, on that aggregation I perform a sum of a field and at the end I use the max\_bucket aggregation to extract the hig…

[Previous page](https://discuss.elastic.co/top.md?page=663&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=665&per_page=50&period=all)
