# Top **URL:** https://discuss.elastic.co/top.md?page=72&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 73 --- ## [Struggling to understand the value of ML for my data](https://discuss.elastic.co/t/struggling-to-understand-the-value-of-ml-for-my-data/108816)
**Author:** [@gosha1128](https://discuss.elastic.co/u/gosha1128)\ **Replies:** 11\ **Last updated:** [December 13, 2017, 12:00pm UTC](https://discuss.elastic.co/t/struggling-to-understand-the-value-of-ml-for-my-data/108816 "2017-12-13T12:00:29Z")
OK, so i'm loving elasticsearch 6.0. I'm a data scientist, and so i'm keen to understand how anomaly detection can work for my data. I put in my data and i start playing around with ML, following various tutorials. I … --- ## [Join on ElasticSearch](https://discuss.elastic.co/t/join-on-elasticsearch/28643)
**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\ **Replies:** 10\ **Last updated:** [September 18, 2015, 1:29am UTC](https://discuss.elastic.co/t/join-on-elasticsearch/28643 "2015-09-18T01:29:49Z")
Hello ElasticSearch experts, If I want to do inner join of two query result sets, and wondering if any good examples or documents to refer to? I mean if inner join could be done by ElasticSearch itself of the two sub-q… --- ## [ElasticSearch crashes in single node cluster- Issue #1](https://discuss.elastic.co/t/elasticsearch-crashes-in-single-node-cluster-issue-1/180781)
**Author:** [@HPVRNP](https://discuss.elastic.co/u/HPVRNP)\ **Replies:** 19\ **Last updated:** [May 15, 2019, 9:36am UTC](https://discuss.elastic.co/t/elasticsearch-crashes-in-single-node-cluster-issue-1/180781 "2019-05-15T09:36:36Z")
Hi, Environment: OS : Windows 64-bit ElasticSearch : 6.6.2 Java: 1.8.151 Cluster: Single Node cluster Index strategy: Indices are created daily and programmatically Shard: Single shard per index and no replicatio… --- ## [Cannot start Elasticsearch after upgrade to 2.0](https://discuss.elastic.co/t/cannot-start-elasticsearch-after-upgrade-to-2-0/33359)
**Author:** [@zappe](https://discuss.elastic.co/u/zappe)\ **Replies:** 12\ **Last updated:** [November 26, 2015, 11:57am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-after-upgrade-to-2-0/33359 "2015-11-26T11:57:12Z")
I did a upgrade from 1.7.3 to 2.0 via apt-get and after this I cannot start it via init.d script. \[2015-10-30 11:37:36,442\]\[INFO \]\[bootstrap \] es.default.config is no longer supported. elasticsearch.yml … --- ## [Logstast apache configuration](https://discuss.elastic.co/t/logstast-apache-configuration/33343)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 11\ **Last updated:** [October 30, 2015, 11:26pm UTC](https://discuss.elastic.co/t/logstast-apache-configuration/33343 "2015-10-30T23:26:28Z")
Guysss please help me out...i have created one configuration file with the code input { file { path =\> "/var/log/messages" type =\> "syslog" } file { path =\> "/var/log/apache/access.log" type =\> … --- ## [Remove unnecessary documents Logstash](https://discuss.elastic.co/t/remove-unnecessary-documents-logstash/85768)
**Author:** [@Sam67000](https://discuss.elastic.co/u/Sam67000)\ **Replies:** 9\ **Last updated:** [May 17, 2017, 11:54am UTC](https://discuss.elastic.co/t/remove-unnecessary-documents-logstash/85768 "2017-05-17T11:54:09Z")
Hello everyOne, I work on several log files that I process with logstash. I divide them into several documents (multiline) and then I extract the information I want. The problem is that I find myself in the end with… --- ## [Winlogbeat - no winlog.logon.id](https://discuss.elastic.co/t/winlogbeat-no-winlog-logon-id/236524)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 21\ **Last updated:** [August 17, 2020, 2:29pm UTC](https://discuss.elastic.co/t/winlogbeat-no-winlog-logon-id/236524 "2020-08-17T14:29:41Z")
The winlogbeat 7.7.1 dashboards reference winlog.logon.id.These two threads also mention it and imply it should be in versions \> 7.4. https://discuss.elastic.co/search?q=winlog.logon.id However, I am running 7.6.2 and … --- ## [Client nodes killed by kernel OOM killer](https://discuss.elastic.co/t/client-nodes-killed-by-kernel-oom-killer/177884)
**Author:** [@nishantagarwal1990](https://discuss.elastic.co/u/nishantagarwal1990)\ **Replies:** 15\ **Last updated:** [May 8, 2019, 7:22am UTC](https://discuss.elastic.co/t/client-nodes-killed-by-kernel-oom-killer/177884 "2019-05-08T07:22:54Z")
For a couple of months I have been using ES 6.4.2 and my client nodes get reaped/oom-killed by the linux kernel, due to which I do not get a heap dump. On taking a force heap dump I get the below dominator tree. The h… --- ## [Can't install Logsatash plugin in Centos](https://discuss.elastic.co/t/cant-install-logsatash-plugin-in-centos/74977)
**Author:** [@wolfghost](https://discuss.elastic.co/u/wolfghost)\ **Replies:** 10\ **Last updated:** [February 14, 2017, 10:01am UTC](https://discuss.elastic.co/t/cant-install-logsatash-plugin-in-centos/74977 "2017-02-14T10:01:59Z")
I am new for elk and trying to install logstash plugin for MongoDB in centos 7.1 but it always say command not found, Elasticsearch and kibana are working fine, Can you please help me. --- ## [Can we index .zip file using ingest attachment plugin?](https://discuss.elastic.co/t/can-we-index-zip-file-using-ingest-attachment-plugin/172710)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 12\ **Last updated:** [March 28, 2019, 5:32am UTC](https://discuss.elastic.co/t/can-we-index-zip-file-using-ingest-attachment-plugin/172710 "2019-03-28T05:32:04Z")
Hi, As we can indexed .txt, .xlsx, .pptx , .pdf files using ingest attachment plugin. Can we indexed zip files using same plugin? I tried it but i don’t see attachment content is getting indexed. Can anyone help me wit… --- ## [X-pack breaks ES - several errors such as : java.io.FileNotFoundException: \\\\.\\pipe\\controller\_log\_8340 and Unknown Source errors](https://discuss.elastic.co/t/x-pack-breaks-es-several-errors-such-as-java-io-filenotfoundexception-pipe-controller-log-8340-and-unknown-source-errors/91368)
**Author:** [@E\_K](https://discuss.elastic.co/u/E_K)\ **Replies:** 9\ **Last updated:** [July 3, 2017, 8:30am UTC](https://discuss.elastic.co/t/x-pack-breaks-es-several-errors-such-as-java-io-filenotfoundexception-pipe-controller-log-8340-and-unknown-source-errors/91368 "2017-07-03T08:30:07Z")
Hi, I did a clean install windows elastic 5.4.3 starts just dandy (so did Kibana start ok). Then I installed x-pack and ES wont start. Then I uninstall x-pack and all good again. So many messages but kinda looks like th… --- ## [Not able to download all rows of data in CSV](https://discuss.elastic.co/t/not-able-to-download-all-rows-of-data-in-csv/338638)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 13\ **Last updated:** [July 24, 2023, 10:53pm UTC](https://discuss.elastic.co/t/not-able-to-download-all-rows-of-data-in-csv/338638 "2023-07-24T22:53:12Z")
Hi, I have a query that generated 25 hits, and I have selected a few columns to display in the tabular format. When I tried to export the results by generating a CSV report, I'm only able to export 15 rows, not all 25 r… --- ## [Mongodb query log in logsatsh](https://discuss.elastic.co/t/mongodb-query-log-in-logsatsh/75842)
**Author:** [@wolfghost](https://discuss.elastic.co/u/wolfghost)\ **Replies:** 10\ **Last updated:** [February 28, 2017, 12:38pm UTC](https://discuss.elastic.co/t/mongodb-query-log-in-logsatsh/75842 "2017-02-28T12:38:40Z")
can we only show query logs from mongodb in kibana through logstash filter? how? --- ## [Do filter plugins error if the field doesn't exist or is empty?](https://discuss.elastic.co/t/do-filter-plugins-error-if-the-field-doesnt-exist-or-is-empty/113027)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 10\ **Last updated:** [December 31, 2017, 1:10pm UTC](https://discuss.elastic.co/t/do-filter-plugins-error-if-the-field-doesnt-exist-or-is-empty/113027 "2017-12-31T13:10:28Z")
If I use the date filter plugin to parse a field that usually has a date, but sometimes is empty, does it throw an error? What about the JSON filter? Is there any need for me to have a config setting that says if \[field\]… --- ## [Not forwarding filebeat to logstash and no filebeat-\* index in kibana](https://discuss.elastic.co/t/not-forwarding-filebeat-to-logstash-and-no-filebeat-index-in-kibana/73223)
**Author:** [@felixon](https://discuss.elastic.co/u/felixon)\ **Replies:** 11\ **Last updated:** [February 7, 2017, 3:38pm UTC](https://discuss.elastic.co/t/not-forwarding-filebeat-to-logstash-and-no-filebeat-index-in-kibana/73223 "2017-02-07T15:38:40Z")
Hi everybody, i installed elk stack today and configured everything.. to cut long story short: filebeat not forwarding logs as i see it i have 3 servers: xx.xx.xx.233 - elasticsearch v 5.1.2 - \[elk@elasticsearch ~\]… --- ## [How to use Logstash monitoring API?](https://discuss.elastic.co/t/how-to-use-logstash-monitoring-api/73658)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 10\ **Last updated:** [February 3, 2017, 7:39am UTC](https://discuss.elastic.co/t/how-to-use-logstash-monitoring-api/73658 "2017-02-03T07:39:05Z")
Hi, I have multiple Logstash instances and it will be fine if I can see their status in a Kibana dashboard. I got to know about Logstash monitoring API here https://www.elastic.co/guide/en/logstash/current/monitoring.h… --- ## [Problems with Geo\_point type and doc\_values](https://discuss.elastic.co/t/problems-with-geo-point-type-and-doc-values/28256)
**Author:** [@clement\_tourriere](https://discuss.elastic.co/u/clement_tourriere)\ **Replies:** 11\ **Last updated:** [September 7, 2015, 9:29am UTC](https://discuss.elastic.co/t/problems-with-geo-point-type-and-doc-values/28256 "2015-09-07T09:29:15Z")
Hi all, I have a very strange problem with geo\_point type and "script\_fields" or "fielddata\_fields" search queries. What I want to do is to retrieve latitude and longitude from a geo\_point field created by a custom p… --- ## [Kibana complaining that "metricbeat-\*" is not indexed](https://discuss.elastic.co/t/kibana-complaining-that-metricbeat-is-not-indexed/66783)
**Author:** [@walterfore](https://discuss.elastic.co/u/walterfore)\ **Replies:** 13\ **Last updated:** [November 22, 2016, 10:43pm UTC](https://discuss.elastic.co/t/kibana-complaining-that-metricbeat-is-not-indexed/66783 "2016-11-22T22:43:02Z")
Hi - although I have created an index manually called metricbeat, when I try to bring up any visualizations associated with metricbeat or perform a discovery on metricbeat-\* I received the following error in Kibana (4.4.… --- ## [Elasticsearch service not starting](https://discuss.elastic.co/t/elasticsearch-service-not-starting/214534)
**Author:** [@gsumilhig](https://discuss.elastic.co/u/gsumilhig)\ **Replies:** 14\ **Last updated:** [January 13, 2020, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-service-not-starting/214534 "2020-01-13T07:43:02Z")
Caused by: java.lang.IllegalStateException: jar hell! class: org.elasticsearch.plugins.ExtendedPluginsClassLoader jar1: /usr/share/elasticsearch/lib/plugin-classloader-6.8.0.jar jar2: /usr/share/elasticsearch/lib/plug… --- ## [Geoip creates everything but the geoip.location](https://discuss.elastic.co/t/geoip-creates-everything-but-the-geoip-location/126272)
**Author:** [@Robert\_Bardo](https://discuss.elastic.co/u/Robert_Bardo)\ **Replies:** 9\ **Last updated:** [April 2, 2018, 5:19pm UTC](https://discuss.elastic.co/t/geoip-creates-everything-but-the-geoip-location/126272 "2018-04-02T17:19:02Z")
Hello, I have been just banging my head on the keyboard trying to figure out why all fields are created in my event but the ".location" field I understand that with the correct index mapping: - like so? { "template": … --- ## [Beats input: unhandled exception](https://discuss.elastic.co/t/beats-input-unhandled-exception/39101)
**Author:** [@axil\_76](https://discuss.elastic.co/u/axil_76)\ **Replies:** 13\ **Last updated:** [January 14, 2016, 1:39pm UTC](https://discuss.elastic.co/t/beats-input-unhandled-exception/39101 "2016-01-14T13:39:10Z")
Hello I just migrate to filebeat logstash-forwarder, and I end up with the following error message {:timestamp=\>"2016-01-13T13:46:10.478000+0100", :message=\>"Beats input: unhandled exception", :exception=\>#\ **Author:** [@prakharjain17](https://discuss.elastic.co/u/prakharjain17)\ **Replies:** 11\ **Last updated:** [January 14, 2018, 2:24pm UTC](https://discuss.elastic.co/t/getting-jar-hell/115423 "2018-01-14T14:24:53Z") Caused by: java.lang.IllegalStateException: jar hell! class: org.mockito.AdditionalAnswers jar1: /Users/gns9/.gradle/caches/modules-2/files-2.1/org.mockito/mockito-core/1.10.19/e8546f5bef4e061d8dd73895b4e8f40e3fe6effe/mo… --- ## [Canvas dropdown filter](https://discuss.elastic.co/t/canvas-dropdown-filter/185006)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 10\ **Last updated:** [June 20, 2019, 3:35pm UTC](https://discuss.elastic.co/t/canvas-dropdown-filter/185006 "2019-06-20T15:35:57Z")
Hello, how can I exploit the "dropdown column" : for example i am showing a metric (costs), and I want to display the "costs" of different "categories". When it's on 'any' it gives me a correct value which is the sum o… --- ## [Exclamation point breaks field queries](https://discuss.elastic.co/t/exclamation-point-breaks-field-queries/6460)
**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\ **Replies:** 9\ **Last updated:** [November 21, 2013, 11:20am UTC](https://discuss.elastic.co/t/exclamation-point-breaks-field-queries/6460 "2013-11-21T11:20:03Z")
Hey guys. I just noticed that a field query that includes an exclamation point ("!") results in a failed query. Eg: curl 'localhost:9200/development\_products/product/\_search?pretty=true' -d ' { "query" : { … --- ## [Unable to start elasticsearch after encryption?](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-encryption/24690)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 14\ **Last updated:** [July 7, 2015, 11:06am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-encryption/24690 "2015-07-07T11:06:42Z")
For encryption i followed each and every step. I added the lines into .yml file as show in https://www.elastic.co/guide/en/shield/current/\_configure\_the\_keystores\_and\_enable\_ssl.html after adding.. im unable to start … --- ## [Wildcards in logstash remove\_field](https://discuss.elastic.co/t/wildcards-in-logstash-remove-field/241644)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 11\ **Last updated:** [July 17, 2020, 8:40pm UTC](https://discuss.elastic.co/t/wildcards-in-logstash-remove-field/241644 "2020-07-17T20:40:27Z")
Hi All, I have a data source with almost 692 fields, out of which only 200 fields are valid, i want to remove those fields , i tried using below one, but no luck mutate { remove\_field =\> \[ ".value" \] } all the unwant… --- ## [Having issues installing ElasticSearch](https://discuss.elastic.co/t/having-issues-installing-elasticsearch/184061)
**Author:** [@Amazing](https://discuss.elastic.co/u/Amazing)\ **Replies:** 20\ **Last updated:** [June 4, 2019, 5:21am UTC](https://discuss.elastic.co/t/having-issues-installing-elasticsearch/184061 "2019-06-04T05:21:40Z")
I had 6x installed and something went wrong and it stopped working after it had been fine for months so I decided to go ahead and remove the 6x version and do a fresh install of 7.1.1. But so far I have not been able to … --- ## [How to parse particular text string from logs and send to index?](https://discuss.elastic.co/t/how-to-parse-particular-text-string-from-logs-and-send-to-index/83842)
**Author:** [@virendra\_oswal](https://discuss.elastic.co/u/virendra_oswal)\ **Replies:** 11\ **Last updated:** [April 28, 2017, 9:52am UTC](https://discuss.elastic.co/t/how-to-parse-particular-text-string-from-logs-and-send-to-index/83842 "2017-04-28T09:52:12Z")
This is my current configuration in logstash configuration: Logstash Configuration: input { beats { port =\> 5044 } } output { elasticsearch { hosts =\> \["http://localhost:9200/"\] } stdout { codec =\> rubydeb… --- ## [Remove a field that starts with an integer](https://discuss.elastic.co/t/remove-a-field-that-starts-with-an-integer/26370)
**Author:** [@Gabriel\_Rosca](https://discuss.elastic.co/u/Gabriel_Rosca)\ **Replies:** 11\ **Last updated:** [July 28, 2015, 8:43pm UTC](https://discuss.elastic.co/t/remove-a-field-that-starts-with-an-integer/26370 "2015-07-28T20:43:16Z")
Hi Guys, I want to remove a field that starts with an integer. How can I do that using logstash. EX: of the field. "1. 2015.07.27 17": "25:35 message sent" Regards, Gabriel --- ## [No x-pack: Login is currently disabled. Administrators should consult the Kibana logs for more details](https://discuss.elastic.co/t/no-x-pack-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/143648)
**Author:** [@Shree](https://discuss.elastic.co/u/Shree)\ **Replies:** 17\ **Last updated:** [October 11, 2018, 10:30pm UTC](https://discuss.elastic.co/t/no-x-pack-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/143648 "2018-10-11T22:30:40Z")
Hi, I have installed 6.3.2 elasticsearch and kibana on my vm when I tried to open kibana it's showing the below error. Since I referred with the same error in this forum people say it's because of x-pack but I didn't i… --- ## [Logstash pipeline systax errors after 7.6.0](https://discuss.elastic.co/t/logstash-pipeline-systax-errors-after-7-6-0/220903)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 13\ **Last updated:** [February 27, 2020, 1:09am UTC](https://discuss.elastic.co/t/logstash-pipeline-systax-errors-after-7-6-0/220903 "2020-02-27T01:09:21Z")
Working logstash 7.5.2 upgraded to 7.6.0 causes 3 of my pipelines to fail with syntax error messages. Or course, since they were working, I can't really find any syntax errors. Has anyone else seen this? Thanks --- ## [Send sensor data to ElasticSearch/Kibana on Raspberry Pi LAN?](https://discuss.elastic.co/t/send-sensor-data-to-elasticsearch-kibana-on-raspberry-pi-lan/130336)
**Author:** [@fullmetal7777](https://discuss.elastic.co/u/fullmetal7777)\ **Replies:** 13\ **Last updated:** [May 3, 2018, 12:07am UTC](https://discuss.elastic.co/t/send-sensor-data-to-elasticsearch-kibana-on-raspberry-pi-lan/130336 "2018-05-03T00:07:09Z")
Is it possible to send sensor data from an ESP32 to a Raspberry Pi running ELK, all on a LAN? I'm also wondering if we can then send data from the ELK interface back to that ESP32. I've seen videos where were sensor data… --- ## [Filebeat NOT sending all matched log entries](https://discuss.elastic.co/t/filebeat-not-sending-all-matched-log-entries/169103)
**Author:** [@sundiv](https://discuss.elastic.co/u/sundiv)\ **Replies:** 11\ **Last updated:** [March 14, 2019, 1:41pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-all-matched-log-entries/169103 "2019-03-14T13:41:01Z")
Hello I'm using FileBeats version 6.6.0 on both Windows and RHEL 7 (also tried on previous versions) and having some issues parsing a log file greater than 12MB (our application log file sizes are 65MB and 150MB). We ar… --- ## [Filebeat is still sending logs to logstash, even curl ssl is failing](https://discuss.elastic.co/t/filebeat-is-still-sending-logs-to-logstash-even-curl-ssl-is-failing/56709)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 13\ **Last updated:** [August 9, 2016, 3:28am UTC](https://discuss.elastic.co/t/filebeat-is-still-sending-logs-to-logstash-even-curl-ssl-is-failing/56709 "2016-08-09T03:28:55Z")
Hi, I ran into a strange problem with filebeat. I have filebeat monitoring logs in mulitple instances shipping them to central logstash. After few days, some of those filebeat dropped connection to logstash and i couldnt… --- ## [Graph based on a Value within a String](https://discuss.elastic.co/t/graph-based-on-a-value-within-a-string/56794)
**Author:** [@rider\_nf](https://discuss.elastic.co/u/rider_nf)\ **Replies:** 10\ **Last updated:** [September 19, 2016, 11:22am UTC](https://discuss.elastic.co/t/graph-based-on-a-value-within-a-string/56794 "2016-09-19T11:22:35Z")
Hello Community. I am fairly new to Kibana but reading the manuals I got it to a good state so far. I am having a problem which is as follows: I have ELK working and in Kibana I can go to discover and find the follow… --- ## [Write throughput test on elasticsearch 9 high configuration nodes cluster,](https://discuss.elastic.co/t/write-throughput-test-on-elasticsearch-9-high-configuration-nodes-cluster/11704)
**Author:** [@Ryan\_Qian](https://discuss.elastic.co/u/Ryan_Qian)\ **Replies:** 12\ **Last updated:** [April 28, 2013, 1:34pm UTC](https://discuss.elastic.co/t/write-throughput-test-on-elasticsearch-9-high-configuration-nodes-cluster/11704 "2013-04-28T13:34:09Z")
with logstash and elasticsearch we want to continue write 20k Msg/s, the write performance is\* not as expected. story as bellow:\* \*HW: \* 9 nodes cluster, each one with: 2 socked , 32 threads cpu 128G mem 1T D… --- ## [Access es-hadoop stats from Spark](https://discuss.elastic.co/t/access-es-hadoop-stats-from-spark/44913)
**Author:** [@msukmanowsky](https://discuss.elastic.co/u/msukmanowsky)\ **Replies:** 9\ **Last updated:** [April 3, 2017, 2:50pm UTC](https://discuss.elastic.co/t/access-es-hadoop-stats-from-spark/44913 "2017-04-03T14:50:39Z")
Hi there, Realize this is maybe a question better suited for the Spark user group, but figured I'd try here first. It's awesome that elasticsearch-hadoop collects so many metrics in the process or reading/writing fro… --- ## [APM Consuming lot of HEAP Memory](https://discuss.elastic.co/t/apm-consuming-lot-of-heap-memory/259571)
**Author:** [@Ayush\_Agrahari](https://discuss.elastic.co/u/Ayush_Agrahari)\ **Replies:** 16\ **Last updated:** [January 28, 2021, 7:29am UTC](https://discuss.elastic.co/t/apm-consuming-lot-of-heap-memory/259571 "2021-01-28T07:29:35Z")
Hello , We have deployed one java service into kubernetes with Heap Size around 4GB. We also run APM along with it using below command . java -javaagent:/home/user/elastic-apm-agent-1.18.0.RC1.jar -jar -Delastic.apm.s… --- ## [Primary and Replica Shard Sync](https://discuss.elastic.co/t/primary-and-replica-shard-sync/40721)
**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\ **Replies:** 11\ **Last updated:** [February 4, 2016, 3:36am UTC](https://discuss.elastic.co/t/primary-and-replica-shard-sync/40721 "2016-02-04T03:36:20Z")
Let us take a sample scenario in Azure Elasticsearch setup where we have below shard, node, index allocation mapping something like below – During planned Azure update, here is the list of things which will happen – … --- ## [Only show higher values than X](https://discuss.elastic.co/t/only-show-higher-values-than-x/170044)
**Author:** [@jtebbens](https://discuss.elastic.co/u/jtebbens)\ **Replies:** 10\ **Last updated:** [February 28, 2019, 6:12pm UTC](https://discuss.elastic.co/t/only-show-higher-values-than-x/170044 "2019-02-28T18:12:32Z")
Hi all, Show example I have some aggregation result of X but need to only show anything above 98, how can I do this? --- ## [Count Indices, Snap and delete with curator](https://discuss.elastic.co/t/count-indices-snap-and-delete-with-curator/89658)
**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\ **Replies:** 16\ **Last updated:** [June 21, 2017, 11:23am UTC](https://discuss.elastic.co/t/count-indices-snap-and-delete-with-curator/89658 "2017-06-21T11:23:13Z")
To write a python script to snapshot old indices, I need to get total count of indices in the Elasticsearch. Tried following command and they gave list of indices not the count GET /\_cluster/state/\_all/ GET graylog\*/… --- ## [ServiceNow Incident Table data in ELK](https://discuss.elastic.co/t/servicenow-incident-table-data-in-elk/130216)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 13\ **Last updated:** [May 9, 2018, 1:55pm UTC](https://discuss.elastic.co/t/servicenow-incident-table-data-in-elk/130216 "2018-05-09T13:55:35Z")
Hey Guys, I have been trying to get servicenow incident data into ELK through http\_poller method using logstash, i'm getting the data but all the incident records are sitting under a single field. Because of this i'm n… --- ## [RefreshRequest with WAIT\_UNTIL mode](https://discuss.elastic.co/t/refreshrequest-with-wait-until-mode/186176)
**Author:** [@shayantabrizi](https://discuss.elastic.co/u/shayantabrizi)\ **Replies:** 12\ **Last updated:** [July 2, 2019, 6:01am UTC](https://discuss.elastic.co/t/refreshrequest-with-wait-until-mode/186176 "2019-07-02T06:01:48Z")
Assume that I do several updates/inserts/deletes to the elasticsearch in response to a user request in different parts of my code and I want to make sure they are visible to the user before I return a success status to t… --- ## [Elastic Synthetics Journey: Receiving \`permission denied\`](https://discuss.elastic.co/t/elastic-synthetics-journey-receiving-permission-denied/330032)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 27\ **Last updated:** [May 31, 2023, 6:41pm UTC](https://discuss.elastic.co/t/elastic-synthetics-journey-receiving-permission-denied/330032 "2023-05-31T18:41:25Z")
I am deploying a journey to Elastic Synthetics using the following command: npm run push. I'm using Elastic Cloud 8.7.0 and my agent is an elastic-agent-complete:8.7.0 container. The test is pushing to Elastic Cloud as… --- ## [Logstash not able to connect secured (ssl) Elastic search cluster](https://discuss.elastic.co/t/logstash-not-able-to-connect-secured-ssl-elastic-search-cluster/132035)
**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Replies:** 10\ **Last updated:** [May 22, 2018, 1:04am UTC](https://discuss.elastic.co/t/logstash-not-able-to-connect-secured-ssl-elastic-search-cluster/132035 "2018-05-22T01:04:40Z")
I have installed Logstash,elasticsearch and kibana in single instance and installed X-pack also for TLS communication. enabled ssl communication in elasticsearch and kibana working good but logstash unable to connect ela… --- ## [Creating a MDM](https://discuss.elastic.co/t/creating-a-mdm/53929)
**Author:** [@David\_she](https://discuss.elastic.co/u/David_she)\ **Replies:** 11\ **Last updated:** [February 6, 2017, 8:58am UTC](https://discuss.elastic.co/t/creating-a-mdm/53929 "2017-02-06T08:58:40Z")
Hi, We are using elasticsearch and have around 500,000,000 person records. I'm looking a creating a MDM on persons. I'm thinking Java but worried about performance. I'm happy to get my head around Spark or use Mapreduce.… --- ## [Compress ELK data node](https://discuss.elastic.co/t/compress-elk-data-node/60230)
**Author:** [@asafi31](https://discuss.elastic.co/u/asafi31)\ **Replies:** 13\ **Last updated:** [October 16, 2016, 6:52am UTC](https://discuss.elastic.co/t/compress-elk-data-node/60230 "2016-10-16T06:52:16Z")
hello all there is option in node level or index level to configure elasticsearch data compress thx asaf --- ## [Docker Curator is not working](https://discuss.elastic.co/t/docker-curator-is-not-working/191341)
**Author:** [@pred](https://discuss.elastic.co/u/pred)\ **Replies:** 11\ **Last updated:** [July 24, 2019, 12:26pm UTC](https://discuss.elastic.co/t/docker-curator-is-not-working/191341 "2019-07-24T12:26:25Z")
Hello, I got the exact same issue of this post : Which is : Traceback (most recent call last): File "/usr/bin/curator", line 11, in load\_entry\_point('elasticsearch-curator==5.7.3', 'console\_scripts', 'curator')() … --- ## [Failed to create index](https://discuss.elastic.co/t/failed-to-create-index/159662)
**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\ **Replies:** 11\ **Last updated:** [December 6, 2018, 12:39pm UTC](https://discuss.elastic.co/t/failed-to-create-index/159662 "2018-12-06T12:39:58Z")
using Ubuntu 16.04 rev1.conf file input { file { path =\> "/home/skills34/es/templetes/test1.txt" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" codec =\> "json" } }… --- ## [Convert string in strict\_date\_time (yyyy-MM-dd'T'HH:mm:ss.SSSZZ) to @timestamp](https://discuss.elastic.co/t/convert-string-in-strict-date-time-yyyy-mm-ddthhss-ssszz-to-timestamp/265150)
**Author:** [@manulearns](https://discuss.elastic.co/u/manulearns)\ **Replies:** 10\ **Last updated:** [February 24, 2021, 4:02pm UTC](https://discuss.elastic.co/t/convert-string-in-strict-date-time-yyyy-mm-ddthhss-ssszz-to-timestamp/265150 "2021-02-24T16:02:12Z")
Hi, I'am trying to convert a string in strict\_date\_time format 2021-02-19T23:02:57.277+05:30 to @timestamp. date { match =\> \[ "timeStampString" , "yyyy-MM-dd'T'HH:mm:ss.SSSZZ" \] target =\> "logTimestamp3" } Throwin… [Previous page](https://discuss.elastic.co/top.md?page=71&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=73&per_page=50&period=all)