# Top

**URL:** https://discuss.elastic.co/top.md?page=687&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 688

---

## [How can we restrict to show data on kibana from different users?](https://discuss.elastic.co/t/how-can-we-restrict-to-show-data-on-kibana-from-different-users/291214)

<div class="topic-metadata">

**Author:** [@sajesh\_sb](https://discuss.elastic.co/u/sajesh_sb)\
**Replies:** 5\
**Last updated:** [December 9, 2021, 11:19am UTC](https://discuss.elastic.co/t/how-can-we-restrict-to-show-data-on-kibana-from-different-users/291214 "2021-12-09T11:19:52Z")

</div>

There are two dashboards created which are having independent data. I need to create three users - Admin, user-1, and user-2. Admin can see both the dashboards, user-1 should be able to see dashboard-1 and user-2 should …

---

## [Missing data from logstash to elasticsearch](https://discuss.elastic.co/t/missing-data-from-logstash-to-elasticsearch/124954)

<div class="topic-metadata">

**Author:** [@amine1](https://discuss.elastic.co/u/amine1)\
**Replies:** 5\
**Last updated:** [March 21, 2018, 1:21pm UTC](https://discuss.elastic.co/t/missing-data-from-logstash-to-elasticsearch/124954 "2018-03-21T13:21:53Z")

</div>

\[Capture%20du%202018-03-21%2010-53-23\]\[Capture%20du%202018-03-21%2010-52-36\]\[Capture%20du%202018-03-21%2010-53-52\] Not all of data are passing from logstash to elasticsearch

---

## [Couldnt connect to host ElasticSearch down?](https://discuss.elastic.co/t/couldnt-connect-to-host-elasticsearch-down/55852)

<div class="topic-metadata">

**Author:** [@bharatbhushan](https://discuss.elastic.co/u/bharatbhushan)\
**Replies:** 5\
**Last updated:** [July 20, 2016, 3:10pm UTC](https://discuss.elastic.co/t/couldnt-connect-to-host-elasticsearch-down/55852 "2016-07-20T15:10:33Z")

</div>

Hi All, I face a problem to insert data into ElasticsSearch sometimes and i catch the exception is "Couldnt connect to host\[ip address\] , ElasticSearch down?". I am using ElasticSearch version is "1.7.5". and i am usi…

---

## [Elasticsearch cluster with nodes on different sites - Hints / Problems?](https://discuss.elastic.co/t/elasticsearch-cluster-with-nodes-on-different-sites-hints-problems/31456)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 5\
**Last updated:** [October 6, 2015, 5:44am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-with-nodes-on-different-sites-hints-problems/31456 "2015-10-06T05:44:33Z")

</div>

Hello ELK community, we consider to have an elasticsearch cluster (e.g.3 nodes in a cluster) running in different locations / sites. For example: 2 nodes in one city and the third in another. My questions, since this …

---

## [Keycloak OIDC authentication with basic license](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055)

<div class="topic-metadata">

**Author:** [@trwillis](https://discuss.elastic.co/u/trwillis)\
**Replies:** 8\
**Last updated:** [August 23, 2024, 6:24am UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055 "2024-08-23T06:24:34Z")

</div>

Can I implement OIDC integration via Keycloak with the Elasticsearch basic license or do I need enterprise?

---

## [\[SHIELD\] Kibana to Elasticsearch](https://discuss.elastic.co/t/shield-kibana-to-elasticsearch/67368)

<div class="topic-metadata">

**Author:** [@Del](https://discuss.elastic.co/u/Del)\
**Replies:** 8\
**Last updated:** [December 2, 2016, 10:51am UTC](https://discuss.elastic.co/t/shield-kibana-to-elasticsearch/67368 "2016-12-02T10:51:34Z")

</div>

Hi Everyone, I stuck on an issue connection Kibana and Elasticsearch with Shield. Shield version is 2.4 Kibana version is 4.6.1 Elasticsearch version is 2.4 I have configured an ldap for authentication in elastics…

---

## [SearchError: unknown error](https://discuss.elastic.co/t/searcherror-unknown-error/168389)

<div class="topic-metadata">

**Author:** [@vitodv90](https://discuss.elastic.co/u/vitodv90)\
**Replies:** 3\
**Last updated:** [February 20, 2019, 1:01am UTC](https://discuss.elastic.co/t/searcherror-unknown-error/168389 "2019-02-20T01:01:45Z")

</div>

Hi to all, working in Kibana with a large amount of data, we are getting this error: On our index, we are working with a storage size of 31.7gb and with a count of 58575555 as you can see in the below image: Also …

---

## [The Y axis in kibana offers Min and Max](https://discuss.elastic.co/t/the-y-axis-in-kibana-offers-min-and-max/52368)

<div class="topic-metadata">

**Author:** [@rheng](https://discuss.elastic.co/u/rheng)\
**Replies:** 3\
**Last updated:** [June 9, 2016, 9:09pm UTC](https://discuss.elastic.co/t/the-y-axis-in-kibana-offers-min-and-max/52368 "2016-06-09T21:09:06Z")

</div>

Is there a way to get the absolute? for example: I'm tracking total space consumption. Since there is no cumluative sum, i calculated that outside of elasticsearch before indexing. so now i'm showing day 1 valu…

---

## [Query parameters for operation-type search](https://discuss.elastic.co/t/query-parameters-for-operation-type-search/93478)

<div class="topic-metadata">

**Author:** [@bherring](https://discuss.elastic.co/u/bherring)\
**Replies:** 6\
**Last updated:** [July 19, 2017, 5:45am UTC](https://discuss.elastic.co/t/query-parameters-for-operation-type-search/93478 "2017-07-19T05:45:19Z")

</div>

Is it possible to specify one or more query parameters for search operations within track.json? In my case I'm benchmarking a plug-in that is activated via a query parameter that I defined, e.g.: GET /\_search?my\_cust…

---

## [Is there a docs page that covers all elasticsearch.yml options and defaults?](https://discuss.elastic.co/t/is-there-a-docs-page-that-covers-all-elasticsearch-yml-options-and-defaults/84283)

<div class="topic-metadata">

**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\
**Replies:** 2\
**Last updated:** [May 8, 2017, 1:46pm UTC](https://discuss.elastic.co/t/is-there-a-docs-page-that-covers-all-elasticsearch-yml-options-and-defaults/84283 "2017-05-08T13:46:15Z")

</div>

Just as the title says, is there a docs page for Elasticsearch that lists out all of the settings you could configure in the elasticsearch.yml file, and their defaults? I found it for Kibana (https://www.elastic.co/gui…

---

## [Deploying Kibana indexes, searches, visualization and dashboard in production](https://discuss.elastic.co/t/deploying-kibana-indexes-searches-visualization-and-dashboard-in-production/29902)

<div class="topic-metadata">

**Author:** [@chinmoyd](https://discuss.elastic.co/u/chinmoyd)\
**Replies:** 2\
**Last updated:** [January 6, 2017, 3:33am UTC](https://discuss.elastic.co/t/deploying-kibana-indexes-searches-visualization-and-dashboard-in-production/29902 "2017-01-06T03:33:58Z")

</div>

I have developed some searches, visualization and dashboard in Kibana in development environment. How can I package it, such that the package can be deployed in production. I am looking for something similar to java jar …

---

## [Huge delay in logs to ES from Kafka/Logstash](https://discuss.elastic.co/t/huge-delay-in-logs-to-es-from-kafka-logstash/239948)

<div class="topic-metadata">

**Author:** [@biswajit\_list](https://discuss.elastic.co/u/biswajit_list)\
**Replies:** 4\
**Last updated:** [July 7, 2020, 9:26am UTC](https://discuss.elastic.co/t/huge-delay-in-logs-to-es-from-kafka-logstash/239948 "2020-07-07T09:26:12Z")

</div>

New for ELK Have 2 Kafka , 2 Logstash , 3 master ES and 2 Data nodes my logstash config is input { kafka { bootstrap\_servers =\> "kafka01:9092, kafka02:9092" topics =\> \["filebeat"\] codec =\> json heartbeat\_interval…

---

## [ES-SQL UNION alternative \[Was: Sql query canvas\]](https://discuss.elastic.co/t/es-sql-union-alternative-was-sql-query-canvas/290637)

<div class="topic-metadata">

**Author:** [@asmaalqasem4](https://discuss.elastic.co/u/asmaalqasem4)\
**Replies:** 7\
**Last updated:** [December 1, 2021, 4:44pm UTC](https://discuss.elastic.co/t/es-sql-union-alternative-was-sql-query-canvas/290637 "2021-12-01T16:44:04Z")

</div>

Hello,, I need to implement this query in the canvas but it is not working. is there another way to get the same result? SELECT SUM(amount) \*\* \*FROM (SELECT AMOUNT as amount FROM "payment-index "\* UNION \*\* \*SELECT P…

---

## [ElasticsearchRestTemplate After not using it for a period of time: Java.io.ioException: The remote host forced closure of an existing connection](https://discuss.elastic.co/t/elasticsearchresttemplate-after-not-using-it-for-a-period-of-time-java-io-ioexception-the-remote-host-forced-closure-of-an-existing-connection/271172)

<div class="topic-metadata">

**Author:** [@canye666](https://discuss.elastic.co/u/canye666)\
**Replies:** 7\
**Last updated:** [April 28, 2021, 1:57pm UTC](https://discuss.elastic.co/t/elasticsearchresttemplate-after-not-using-it-for-a-period-of-time-java-io-ioexception-the-remote-host-forced-closure-of-an-existing-connection/271172 "2021-04-28T13:57:23Z")

</div>

远程主机强迫关闭了一个现有的连接。; nested exception is java.lang.RuntimeException: 远程主机强迫关闭了一个现有的连接。 org.springframework.dao.DataAccessResourceFailureException: 远程主机强迫关闭了一个现有的连接。 at org.springframework.data.elasticsearch.cor…

---

## [Elastic search and kibana as service on windows](https://discuss.elastic.co/t/elastic-search-and-kibana-as-service-on-windows/1616)

<div class="topic-metadata">

**Author:** [@rajeshchinnam1985](https://discuss.elastic.co/u/rajeshchinnam1985)\
**Replies:** 1\
**Last updated:** [June 1, 2015, 6:57am UTC](https://discuss.elastic.co/t/elastic-search-and-kibana-as-service-on-windows/1616 "2015-06-01T06:57:05Z")

</div>

How to run elastic search and kibana as service on windows

---

## [Filebeat does not create daily indices into elasticsearch automatically](https://discuss.elastic.co/t/filebeat-does-not-create-daily-indices-into-elasticsearch-automatically/83351)

<div class="topic-metadata">

**Author:** [@XiaozhongLiu](https://discuss.elastic.co/u/XiaozhongLiu)\
**Replies:** 3\
**Last updated:** [April 24, 2017, 4:22am UTC](https://discuss.elastic.co/t/filebeat-does-not-create-daily-indices-into-elasticsearch-automatically/83351 "2017-04-24T04:22:18Z")

</div>

filebeat does not create daily indices into elasticsearch automatically. for example I have to manually create a indice like filebeat-2017.04.24, with this, filebeat can then auto harvest and dump logs. if no indice is…

---

## [Calculate success count in Visualization using JSON Input](https://discuss.elastic.co/t/calculate-success-count-in-visualization-using-json-input/227752)

<div class="topic-metadata">

**Author:** [@rohitarora275](https://discuss.elastic.co/u/rohitarora275)\
**Replies:** 5\
**Last updated:** [April 16, 2020, 10:59pm UTC](https://discuss.elastic.co/t/calculate-success-count-in-visualization-using-json-input/227752 "2020-04-16T22:59:58Z")

</div>

Hi All, I am new to ELK stack, I want to implement a logic to find the count of daily success transactions on the basis of a field status(if status = "S" it is success). I have implemented this logic by creating an scr…

---

## [Transport Client issue with ES cloud](https://discuss.elastic.co/t/transport-client-issue-with-es-cloud/123210)

<div class="topic-metadata">

**Author:** [@chhavi\_bahekar](https://discuss.elastic.co/u/chhavi_bahekar)\
**Replies:** 5\
**Last updated:** [March 12, 2018, 6:22am UTC](https://discuss.elastic.co/t/transport-client-issue-with-es-cloud/123210 "2018-03-12T06:22:17Z")

</div>

Hi All, I am unable to connect ES cloud with transport client version(5.6.8).Its showing error as None of the configured nodes are available. Here is the my java Example which I have taken from github(https://github.co…

---

## [Logstash don't create index](https://discuss.elastic.co/t/logstash-dont-create-index/107441)

<div class="topic-metadata">

**Author:** [@ahmedcharef](https://discuss.elastic.co/u/ahmedcharef)\
**Replies:** 5\
**Last updated:** [November 14, 2017, 8:15am UTC](https://discuss.elastic.co/t/logstash-dont-create-index/107441 "2017-11-14T08:15:55Z")

</div>

Hi, I run ELK services on ubuntu 16.04. I have a csv file and I want to add it to elasticsearch, I use logstash for that: First this is my conf file: input { file { path =\> "/home/ahmed/Desktop/PopulationGenre.csv…

---

## [Kibana Alpha 4: Cannot find module JSONStream](https://discuss.elastic.co/t/kibana-alpha-4-cannot-find-module-jsonstream/54560)

<div class="topic-metadata">

**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\
**Replies:** 5\
**Last updated:** [July 7, 2016, 7:06am UTC](https://discuss.elastic.co/t/kibana-alpha-4-cannot-find-module-jsonstream/54560 "2016-07-07T07:06:08Z")

</div>

Hi, I am trying to run Kibana Alpha 4 together with elasticsearch alpha 4, when starting Kibana I get the following error: ➜ kibana-5.0.0-alpha4-darwin-x64 bin/kibana log \[21:38:39.894\] \[fatal\] Error: Cannot find …

---

## [How to hide filter from showing in the filter bar?](https://discuss.elastic.co/t/how-to-hide-filter-from-showing-in-the-filter-bar/110246)

<div class="topic-metadata">

**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 4:31pm UTC](https://discuss.elastic.co/t/how-to-hide-filter-from-showing-in-the-filter-bar/110246 "2017-12-05T16:31:43Z")

</div>

We have created multiple dashboards with one index and multiple document types which belongs to that index. Each document type have two common columns namely org\_id (organization id) and workflow\_id. We have to filter da…

---

## [Logstash-output-kinesis](https://discuss.elastic.co/t/logstash-output-kinesis/107655)

<div class="topic-metadata">

**Author:** [@abdalians](https://discuss.elastic.co/u/abdalians)\
**Replies:** 2\
**Last updated:** [November 27, 2017, 6:34am UTC](https://discuss.elastic.co/t/logstash-output-kinesis/107655 "2017-11-27T06:34:23Z")

</div>

Continuing the discussion from Missing logstash-output-kinesis for Logstash 5.2?: Repeating the question from @NirReuveny, why is there no logstash-output-kinesis plugin?

---

## [org.elasticsearch.transport.ReceiveTimeoutTransportException...timed out after \[5002ms\]  without any hints and exceptions in cluster](https://discuss.elastic.co/t/org-elasticsearch-transport-receivetimeouttransportexception-timed-out-after-5002ms-without-any-hints-and-exceptions-in-cluster/21165)

<div class="topic-metadata">

**Author:** [@deer](https://discuss.elastic.co/u/deer)\
**Replies:** 2\
**Last updated:** [December 10, 2014, 12:52am UTC](https://discuss.elastic.co/t/org-elasticsearch-transport-receivetimeouttransportexception-timed-out-after-5002ms-without-any-hints-and-exceptions-in-cluster/21165 "2014-12-10T00:52:08Z")

</div>

---

## [How can I handle duplicate data in Elasticsearch?](https://discuss.elastic.co/t/how-can-i-handle-duplicate-data-in-elasticsearch/10185)

<div class="topic-metadata">

**Author:** [@Burak\_Emre\_Kabakci](https://discuss.elastic.co/u/Burak_Emre_Kabakci)\
**Replies:** 2\
**Last updated:** [December 28, 2012, 3:18pm UTC](https://discuss.elastic.co/t/how-can-i-handle-duplicate-data-in-elasticsearch/10185 "2012-12-28T15:18:26Z")

</div>

I have used parent & child mapping to normalize data but as far as I understand there is no way to get any fields from \_parent document. Here is the mapping of my index: { "mappings": { "building": { …

---

## [Elasticsearch terms aggregations performance of many unique values](https://discuss.elastic.co/t/elasticsearch-terms-aggregations-performance-of-many-unique-values/236661)

<div class="topic-metadata">

**Author:** [@ming1997](https://discuss.elastic.co/u/ming1997)\
**Replies:** 6\
**Last updated:** [June 15, 2020, 8:40am UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregations-performance-of-many-unique-values/236661 "2020-06-15T08:40:38Z")

</div>

I use terms aggregations to aggregate my data . But there is a problem. For example , If i have 300 million data in my ES cluster. I use terms aggregation to aggregate the bytes of ip. If the ip field has 1000 unique ip…

---

## [Custom average for unique records](https://discuss.elastic.co/t/custom-average-for-unique-records/82988)

<div class="topic-metadata">

**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\
**Replies:** 6\
**Last updated:** [April 25, 2017, 8:43am UTC](https://discuss.elastic.co/t/custom-average-for-unique-records/82988 "2017-04-25T08:43:29Z")

</div>

HI guys, I'm trying to figure out if there's a way to customize the average of my visualizes I.e, I want the average for the unique records and not the average for all records 1,2,3,4,5,6,7,8,8,9 The average will re…

---

## [How to correctly parse and index dates into timestamp that have no offset? (Post title renamed)](https://discuss.elastic.co/t/how-to-correctly-parse-and-index-dates-into-timestamp-that-have-no-offset-post-title-renamed/52535)

<div class="topic-metadata">

**Author:** [@niceguybob](https://discuss.elastic.co/u/niceguybob)\
**Replies:** 6\
**Last updated:** [June 15, 2016, 11:49am UTC](https://discuss.elastic.co/t/how-to-correctly-parse-and-index-dates-into-timestamp-that-have-no-offset-post-title-renamed/52535 "2016-06-15T11:49:49Z")

</div>

Hi, Hopefully this is a simple one. I have a rather basic Logstash config to read nginx apache and error logs and push them to an index. It's all working OK except the date is incorrect for my error log file. access …

---

## [Measure network jitter and packet retransmits/drops](https://discuss.elastic.co/t/measure-network-jitter-and-packet-retransmits-drops/272946)

<div class="topic-metadata">

**Author:** [@Tydorius](https://discuss.elastic.co/u/Tydorius)\
**Replies:** 8\
**Last updated:** [May 17, 2021, 5:08pm UTC](https://discuss.elastic.co/t/measure-network-jitter-and-packet-retransmits-drops/272946 "2021-05-17T17:08:28Z")

</div>

I am working on an Elastic Stack that will be used to measure network activity in a testbed for various pieces of equipment. My current hurdle is around measuring jitter and packet retransmits and drops. Has anyone use…

---

## [Need help with creating Kibana Alert](https://discuss.elastic.co/t/need-help-with-creating-kibana-alert/270508)

<div class="topic-metadata">

**Author:** [@Long\_Nguyen](https://discuss.elastic.co/u/Long_Nguyen)\
**Replies:** 8\
**Last updated:** [April 19, 2021, 6:19pm UTC](https://discuss.elastic.co/t/need-help-with-creating-kibana-alert/270508 "2021-04-19T18:19:50Z")

</div>

Hello everyone, I am new to the Elasticstack in general and I have encountered a problem with creating an Alert using the Elasticsearch Query. I am using the index from metricbeat that indexes various processes of a hos…

---

## [Elasticsearch 7.17.25 and 8.16.0 Security Update (ESA-2024-40)](https://discuss.elastic.co/t/elasticsearch-7-17-25-and-8-16-0-security-update-esa-2024-40/377709)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [May 1, 2025, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-25-and-8-16-0-security-update-esa-2024-40/377709 "2025-05-01T10:13:22Z")

</div>

Elasticsearch Uncontrolled Resource Consumption vulnerability(ESA-2024-40) Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to De…

---

## [Filter bitsets](https://discuss.elastic.co/t/filter-bitsets/22753)

<div class="topic-metadata">

**Author:** [@Ashish\_Mishra](https://discuss.elastic.co/u/Ashish_Mishra)\
**Replies:** 4\
**Last updated:** [March 25, 2015, 4:40am UTC](https://discuss.elastic.co/t/filter-bitsets/22753 "2015-03-25T04:40:42Z")

</div>

I'm trying to optimize filter queries for performance and am slightly confused by the online docs. Looking at: 1) https://www.elastic.co/blog/all-about-elasticsearch-filter-bitsets 2) http://www.elastic.co/guide…

---

## [Using Elastic Search With Java](https://discuss.elastic.co/t/using-elastic-search-with-java/14700)

<div class="topic-metadata">

**Author:** [@Anurag\_Dhiman](https://discuss.elastic.co/u/Anurag_Dhiman)\
**Replies:** 4\
**Last updated:** [December 4, 2013, 12:20pm UTC](https://discuss.elastic.co/t/using-elastic-search-with-java/14700 "2013-12-04T12:20:09Z")

</div>

Hello Everyone! I am trying to lean Elasticsearch with java. Because I am very new to elastisearch I have some doubts. Please help me out to clear the queries given below. Is it possible to use elasticsearch with J…

---

## [Is it possible to ingest data from external web service in Kibana?](https://discuss.elastic.co/t/is-it-possible-to-ingest-data-from-external-web-service-in-kibana/140776)

<div class="topic-metadata">

**Author:** [@heenaI](https://discuss.elastic.co/u/heenaI)\
**Replies:** 3\
**Last updated:** [July 20, 2018, 8:46pm UTC](https://discuss.elastic.co/t/is-it-possible-to-ingest-data-from-external-web-service-in-kibana/140776 "2018-07-20T20:46:57Z")

</div>

I would like to visualize data coming from an Api of an external web service reachable via http call. I wonder if it is possible to populate kibana with this data? Do I have to setup an elasticsearch index first for some…

---

## [Unable to log into Kibana after first time setup of xpack.security.enabled](https://discuss.elastic.co/t/unable-to-log-into-kibana-after-first-time-setup-of-xpack-security-enabled/255759)

<div class="topic-metadata">

**Author:** [@dmaclennan](https://discuss.elastic.co/u/dmaclennan)\
**Replies:** 7\
**Last updated:** [November 18, 2020, 4:43pm UTC](https://discuss.elastic.co/t/unable-to-log-into-kibana-after-first-time-setup-of-xpack-security-enabled/255759 "2020-11-18T16:43:44Z")

</div>

Finding myself at a bit of a hault on my ELK stack setup. I've setup kibana, elasticsearch and logstash on a Centos VM and have everything working great prior to introducing xpack.security.enabled for user authenticatio…

---

## [READs in Insert VS update](https://discuss.elastic.co/t/reads-in-insert-vs-update/86997)

<div class="topic-metadata">

**Author:** [@Deepak\_Mehta1](https://discuss.elastic.co/u/Deepak_Mehta1)\
**Replies:** 6\
**Last updated:** [May 24, 2017, 5:07pm UTC](https://discuss.elastic.co/t/reads-in-insert-vs-update/86997 "2017-05-24T17:07:28Z")

</div>

We have requirement where we first need to add the document and then update the document. We are for now, using update api to do add and update. I see many reads in disk and if we disable the indexing then reads decreas…

---

## [Can i install in elasticsearch and kibana both on same machine](https://discuss.elastic.co/t/can-i-install-in-elasticsearch-and-kibana-both-on-same-machine/198351)

<div class="topic-metadata">

**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\
**Replies:** 4\
**Last updated:** [September 6, 2019, 6:32am UTC](https://discuss.elastic.co/t/can-i-install-in-elasticsearch-and-kibana-both-on-same-machine/198351 "2019-09-06T06:32:12Z")

</div>

I have 4 nodes cluster in elasticsearch ie. 2 master only nodes and 2 data only nodes and all nodes are installed in google cloud instance machine type is g1-small (1 vCPU, 1.7 GB memory) for all four nodes, now i have s…

---

## [Number of primary shards](https://discuss.elastic.co/t/number-of-primary-shards/157471)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 4\
**Last updated:** [November 21, 2018, 6:57am UTC](https://discuss.elastic.co/t/number-of-primary-shards/157471 "2018-11-21T06:57:04Z")

</div>

hi, I am using filebeat to ship logs into elasticsearch, in the filebeat.yml, we can define number of primary shards of created index. I am creating a weekly index as following: index: "myn-%{+yyyy.ww}" and the size…

---

## [Too many field in metricbeat](https://discuss.elastic.co/t/too-many-field-in-metricbeat/242572)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 8\
**Last updated:** [August 11, 2020, 12:55pm UTC](https://discuss.elastic.co/t/too-many-field-in-metricbeat/242572 "2020-08-11T12:55:03Z")

</div>

When I start the metricbeat it loads about 3000 field. I know it is loading default template. even when I have only one module.d/system.yml file. how do I only load system template?

---

## [Can't dup NilClass event.get()](https://discuss.elastic.co/t/cant-dup-nilclass-event-get/132276)

<div class="topic-metadata">

**Author:** [@vicennt](https://discuss.elastic.co/u/vicennt)\
**Replies:** 8\
**Last updated:** [May 29, 2018, 6:38am UTC](https://discuss.elastic.co/t/cant-dup-nilclass-event-get/132276 "2018-05-29T06:38:18Z")

</div>

Hi there! First sorry for my English. I have a problem when I try to get the value from grok field. I'm using the event.get but when I try to pass this value to a Time.parse() I always get \`Can't dup NilClass error'. E…

---

## [Transportclient not closing properly with tomcat/spring](https://discuss.elastic.co/t/transportclient-not-closing-properly-with-tomcat-spring/67686)

<div class="topic-metadata">

**Author:** [@djaswal](https://discuss.elastic.co/u/djaswal)\
**Replies:** 2\
**Last updated:** [December 1, 2016, 3:10pm UTC](https://discuss.elastic.co/t/transportclient-not-closing-properly-with-tomcat-spring/67686 "2016-12-01T15:10:36Z")

</div>

Hello, I am currently running Elasticsearch 5.0.0 and using Java the same java transport client. I have created a dao bean which connects to Elasticsearch such as: \<bean id="searchDAO" class="search.SearchDAO" init-m…

---

## [How to create new index with old index mapping and settings](https://discuss.elastic.co/t/how-to-create-new-index-with-old-index-mapping-and-settings/303895)

<div class="topic-metadata">

**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\
**Replies:** 5\
**Last updated:** [May 10, 2022, 6:34am UTC](https://discuss.elastic.co/t/how-to-create-new-index-with-old-index-mapping-and-settings/303895 "2022-05-10T06:34:32Z")

</div>

Hello Team, I am new to Elasticsearch, after reading upgrade documents I came to know that we need to reindex old data, from below command I can get list of existing index , curl 'localhost:9200/\_cat/indices?v' I can…

---

## [Cluster topology consideration](https://discuss.elastic.co/t/cluster-topology-consideration/83564)

<div class="topic-metadata">

**Author:** [@ogauchard](https://discuss.elastic.co/u/ogauchard)\
**Replies:** 5\
**Last updated:** [April 26, 2017, 7:00am UTC](https://discuss.elastic.co/t/cluster-topology-consideration/83564 "2017-04-26T07:00:29Z")

</div>

Hi all, I have questions about cluster topology definition : I have read that the best configuration is one shard per index per node. So how do you deal with this recommendation when having indices per day or per mo…

---

## [Java API and range queries](https://discuss.elastic.co/t/java-api-and-range-queries/71859)

<div class="topic-metadata">

**Author:** [@Stefano\_Violetta](https://discuss.elastic.co/u/Stefano_Violetta)\
**Replies:** 5\
**Last updated:** [January 19, 2017, 9:14am UTC](https://discuss.elastic.co/t/java-api-and-range-queries/71859 "2017-01-19T09:14:00Z")

</div>

Hello, I'd like to perform a range query containing: { "range": { "a": { "lte": 1 }, "b": { "gte": 1 }, "c": { "gte": 1 }, "d": { "lte": 2 } } } (a, b, c and d are sub-fi…

---

## [Response time issue on packetbeat](https://discuss.elastic.co/t/response-time-issue-on-packetbeat/53025)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 5\
**Last updated:** [June 17, 2016, 2:44pm UTC](https://discuss.elastic.co/t/response-time-issue-on-packetbeat/53025 "2016-06-17T14:44:36Z")

</div>

Does response time equals to latency or there is calculation for latency? Because when I use the sample dashboard for topbeat, I saw that there is a latency diagram showing response time as X-axis in Kibana and does it c…

---

## [Health check of \[/usr/share/elasticsearch/data/nodes/0\] took \[10146ms\] which is above the warn threshold of \[5s\]](https://discuss.elastic.co/t/health-check-of-usr-share-elasticsearch-data-nodes-0-took-10146ms-which-is-above-the-warn-threshold-of-5s/287255)

<div class="topic-metadata">

**Author:** [@Farzad\_Ebrahimi](https://discuss.elastic.co/u/Farzad_Ebrahimi)\
**Replies:** 1\
**Last updated:** [October 21, 2021, 7:23am UTC](https://discuss.elastic.co/t/health-check-of-usr-share-elasticsearch-data-nodes-0-took-10146ms-which-is-above-the-warn-threshold-of-5s/287255 "2021-10-21T07:23:11Z")

</div>

Hi everyone, every day we faced to this log with level WARN: {"type": "server", "timestamp": "2021-10-20T03:13:18,747Z", "level": "WARN", "component": "o.e.m.f.FsHealthService", "cluster.name": "elasticsearch\_cluster",…

---

## [Error while restoring](https://discuss.elastic.co/t/error-while-restoring/43020)

<div class="topic-metadata">

**Author:** [@vinod\_rao](https://discuss.elastic.co/u/vinod_rao)\
**Replies:** 7\
**Last updated:** [March 1, 2016, 8:41pm UTC](https://discuss.elastic.co/t/error-while-restoring/43020 "2016-03-01T20:41:44Z")

</div>

Hi Team, I can see below error while restoring, I took the backup from 2 node cluster and trying to restore in 3 node cluster , i can that restore process hunged and got below errors in logs. Can anyone help me to g…

---

## [Date in script field](https://discuss.elastic.co/t/date-in-script-field/101951)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 2\
**Last updated:** [September 28, 2017, 8:05pm UTC](https://discuss.elastic.co/t/date-in-script-field/101951 "2017-09-28T20:05:37Z")

</div>

Good morning, I'm doing examples of script fields and I have read the documentation but I don't understand how I can use date fields. My idea is get the age using scripts: GET /prova/\_search { "\_source": {}, "script…

---

## [Grouping postfix queueid](https://discuss.elastic.co/t/grouping-postfix-queueid/73096)

<div class="topic-metadata">

**Author:** [@toger](https://discuss.elastic.co/u/toger)\
**Replies:** 2\
**Last updated:** [January 29, 2017, 11:09am UTC](https://discuss.elastic.co/t/grouping-postfix-queueid/73096 "2017-01-29T11:09:21Z")

</div>

My system is logging postfix logs (via Filebeat -\> Logstash -\> ElasticSearch 5.X) I configured postfix patterns in logstash, so every fields are usable and searchable in kibana. My logs file looks like below : line 1…

---

## [Logstash 5.4 docker image can't find configuration files](https://discuss.elastic.co/t/logstash-5-4-docker-image-cant-find-configuration-files/85630)

<div class="topic-metadata">

**Author:** [@endersonmaia](https://discuss.elastic.co/u/endersonmaia)\
**Replies:** 3\
**Last updated:** [May 23, 2017, 7:27pm UTC](https://discuss.elastic.co/t/logstash-5-4-docker-image-cant-find-configuration-files/85630 "2017-05-23T19:27:00Z")

</div>

I was using docker.elastic.io/logstash:5.3.0 and everything was working fine, I just changed from 5.3.0 to 5.4.0 for the Dockerfile, and now when start it can't find the configuraiton file ? Did anything change in thi…

---

## [Grokparse failure - custom tomcat access.log - newbee failure](https://discuss.elastic.co/t/grokparse-failure-custom-tomcat-access-log-newbee-failure/387)

<div class="topic-metadata">

**Author:** [@Martin\_Smevik](https://discuss.elastic.co/u/Martin_Smevik)\
**Replies:** 3\
**Last updated:** [May 11, 2015, 11:40am UTC](https://discuss.elastic.co/t/grokparse-failure-custom-tomcat-access-log-newbee-failure/387 "2015-05-11T11:40:31Z")

</div>

Hi, I have the following log line from tomcat access log: \[21/Apr/2015:00:00:02 +0200\] - 66.249.78.123 www.mydomain.no A7CEE20E7E0A5F1C5727E0036B868422.agap67 - GET /myuri/foobar/search-result.action?richList=false&pro…

[Previous page](https://discuss.elastic.co/top.md?page=686&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=688&per_page=50&period=all)
