# Top **URL:** https://discuss.elastic.co/top.md?page=722&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 723 --- ## [DataStream vs detection rules](https://discuss.elastic.co/t/datastream-vs-detection-rules/261563)
**Author:** [@Charles100](https://discuss.elastic.co/u/Charles100)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 5:32am UTC](https://discuss.elastic.co/t/datastream-vs-detection-rules/261563 "2021-01-21T05:32:29Z")
Hi, I'm testing datastreams right now and observed that default detection rules are not looking logs from my datastreams indices. Do I have to manually change all default rules (and new ones added by updates) to include… --- ## [High cardinality field term agg results in slow query regardless of hit count](https://discuss.elastic.co/t/high-cardinality-field-term-agg-results-in-slow-query-regardless-of-hit-count/58064)
**Author:** [@mahdouch](https://discuss.elastic.co/u/mahdouch)\ **Replies:** 4\ **Last updated:** [September 27, 2016, 11:56pm UTC](https://discuss.elastic.co/t/high-cardinality-field-term-agg-results-in-slow-query-regardless-of-hit-count/58064 "2016-09-27T23:56:08Z")
Given an index with a field that has high cardinality (1M+ distinct values), the following query has 0 hits and takes a ton of time to return even though the number of hits is 0. If I add "execution\_hint":"map" to the … --- ## [How to create a custom field in metricbeat?](https://discuss.elastic.co/t/how-to-create-a-custom-field-in-metricbeat/55434)
**Author:** [@rajkumar3v](https://discuss.elastic.co/u/rajkumar3v)\ **Replies:** 3\ **Last updated:** [July 20, 2016, 6:34am UTC](https://discuss.elastic.co/t/how-to-create-a-custom-field-in-metricbeat/55434 "2016-07-20T06:34:18Z")
Hello!! I have two queries, 1) I want to collect total count of CPU in a server but it is not available in metricbeat. so how can I collect total number of cpu? 2) Along with metricbeat data I need to send… --- ## [Error 500](https://discuss.elastic.co/t/error-500/46871)
**Author:** [@bobjones](https://discuss.elastic.co/u/bobjones)\ **Replies:** 3\ **Last updated:** [April 10, 2016, 10:00am UTC](https://discuss.elastic.co/t/error-500/46871 "2016-04-10T10:00:15Z")
Continuing the discussion from Error 500 Internal Server Error: I am getting 500 error after installing Graph into existing ELK stack with data. I keep getting: Debug: internal, implementation, error TypeError: Uncau… --- ## [Java Client and Elasticsearch Transport Proxy](https://discuss.elastic.co/t/java-client-and-elasticsearch-transport-proxy/21183)
**Author:** [@Kim\_Baddeley](https://discuss.elastic.co/u/Kim_Baddeley)\ **Replies:** 2\ **Last updated:** [December 10, 2014, 2:27pm UTC](https://discuss.elastic.co/t/java-client-and-elasticsearch-transport-proxy/21183 "2014-12-10T14:27:39Z")
Hi, I have an Elasticsearch cluster running in the cloud and I am trying to connect from a java client locally. Due to firewall restrictions I am not allowed to connect out on port 9300 from my local client. I hav… --- ## [Filebeat dissect line break](https://discuss.elastic.co/t/filebeat-dissect-line-break/272274)
**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\ **Replies:** 6\ **Last updated:** [May 6, 2021, 2:06pm UTC](https://discuss.elastic.co/t/filebeat-dissect-line-break/272274 "2021-05-06T14:06:11Z")
Hello, i am using dissect processor to parse a multiline log. i got the error dissect\_parsing\_error, i think it s because of the \\n. Do you have any idea where i can find any exemple of filebeat dissect for multiline. … --- ## [How to generalize the kibana visualization (bar chart)](https://discuss.elastic.co/t/how-to-generalize-the-kibana-visualization-bar-chart/76480)
**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\ **Replies:** 6\ **Last updated:** [March 10, 2017, 5:04am UTC](https://discuss.elastic.co/t/how-to-generalize-the-kibana-visualization-bar-chart/76480 "2017-03-10T05:04:20Z")
In Kibana visualization (bar chart), i have created the bar chart for one of the index pattern (eg: Aircel), I have created the another index pattern (eg: Nationwide), having the similar columns for both index patterns w… --- ## [Boosting specific documents in every search](https://discuss.elastic.co/t/boosting-specific-documents-in-every-search/106183)
**Author:** [@Kemal\_Can\_Kara](https://discuss.elastic.co/u/Kemal_Can_Kara)\ **Replies:** 1\ **Last updated:** [November 3, 2017, 11:53pm UTC](https://discuss.elastic.co/t/boosting-specific-documents-in-every-search/106183 "2017-11-03T23:53:12Z")
I'm very new to Elasticsearch. I'm using it to filtering and also boosting some fields at query time. This is the code part for boosting and filtering: "query": { "bool": { "must": \[ { "bool": { … --- ## [Monitoring tab not displaying (AKA Marvel)](https://discuss.elastic.co/t/monitoring-tab-not-displaying-aka-marvel/72800)
**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\ **Replies:** 2\ **Last updated:** [January 27, 2017, 9:19pm UTC](https://discuss.elastic.co/t/monitoring-tab-not-displaying-aka-marvel/72800 "2017-01-27T21:19:38Z")
Our Marvel monitoring tab in the Kibana UI disappeared today. Our setup is as follows /etc/kibana/kibana.yml xpack.security.enabled: false xpack.monitoring.enabled: true And to collect data from particular indices,… --- ## [OIDC with Elasticsearch](https://discuss.elastic.co/t/oidc-with-elasticsearch/261946)
**Author:** [@oliverlucas](https://discuss.elastic.co/u/oliverlucas)\ **Replies:** 2\ **Last updated:** [January 25, 2021, 11:32am UTC](https://discuss.elastic.co/t/oidc-with-elasticsearch/261946 "2021-01-25T11:32:20Z")
It seems every bit of documentation that I read has conflicting advice, and I'm stumped on this one. First of, I've never worked with OIDC or SAML before so this is my first exploration. I'm trying to configure SSO so i… --- ## [Frequent GC and OOM due to many fields](https://discuss.elastic.co/t/frequent-gc-and-oom-due-to-many-fields/63821)
**Author:** [@muralikpbhat](https://discuss.elastic.co/u/muralikpbhat)\ **Replies:** 8\ **Last updated:** [October 26, 2016, 9:35am UTC](https://discuss.elastic.co/t/frequent-gc-and-oom-due-to-many-fields/63821 "2016-10-26T09:35:26Z")
We have an elastic search installation on a tiny box with 256MB heap space. There are many shards (400+) in a single node and total of 8k+ fields. We see GC running every minute and frequent OutofMemoryErrors. This may b… --- ## [Discover. Field data loading is forbidden on \[timestamp\]](https://discuss.elastic.co/t/discover-field-data-loading-is-forbidden-on-timestamp/50434)
**Author:** [@dr\_rock](https://discuss.elastic.co/u/dr_rock)\ **Replies:** 3\ **Last updated:** [May 20, 2016, 2:32pm UTC](https://discuss.elastic.co/t/discover-field-data-loading-is-forbidden-on-timestamp/50434 "2016-05-20T14:32:17Z")
Hi, I am currently using, E(2.3.2)L(2.3.2)K(4.5.0) to aggregate logs from a syslog source. I am using logstash default template, my output config is : output { elasticsearch { hosts =\> \["host1:port1", "host2:p… --- ## [How can i stop a cluster on ECK](https://discuss.elastic.co/t/how-can-i-stop-a-cluster-on-eck/282974)
**Author:** [@w\_Aaron](https://discuss.elastic.co/u/w_Aaron)\ **Replies:** 4\ **Last updated:** [September 8, 2021, 10:12am UTC](https://discuss.elastic.co/t/how-can-i-stop-a-cluster-on-eck/282974 "2021-09-08T10:12:02Z")
I changed the cluster yaml file nodeSet.config.count value to 0 In my cluster,When i kubectl describe es xxxx\_es\_id ,the logs info is:"es26f861-fa5d-410a-acb1-b9281f6814ae" is invalid: spec.nodeSets: Required value: Elas… --- ## [Build Kibana : repeating “restarting server due to changes in](https://discuss.elastic.co/t/build-kibana-repeating-restarting-server-due-to-changes-in/84353)
**Author:** [@a\_satt](https://discuss.elastic.co/u/a_satt)\ **Replies:** 3\ **Last updated:** [May 23, 2017, 11:51am UTC](https://discuss.elastic.co/t/build-kibana-repeating-restarting-server-due-to-changes-in/84353 "2017-05-23T11:51:49Z")
I am building kibana plugin with tag of v5.1.3 and when I do 'npm start' , kibana server cannot start and it repeatedly restart with the message "Restarting server due to changes in {filename}". As shown in image attachm… --- ## [Elasticsearch auto delete my data](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980)
**Author:** [@Quang\_Quy](https://discuss.elastic.co/u/Quang_Quy)\ **Replies:** 6\ **Last updated:** [November 30, 2020, 4:39am UTC](https://discuss.elastic.co/t/elasticsearch-auto-delete-my-data/256980 "2020-11-30T04:39:52Z")
Hi everyone! I'm having a problem that after a while, the elastic automatically deletes all the data even though I didn't configure anything to automatically delete, this is the log. Is there a way to disable the elasti… --- ## [Timeout in Elastic cluster:monitor/nodes/stats](https://discuss.elastic.co/t/timeout-in-elastic-cluster-monitor-nodes-stats/133043)
**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\ **Replies:** 6\ **Last updated:** [May 23, 2018, 7:48pm UTC](https://discuss.elastic.co/t/timeout-in-elastic-cluster-monitor-nodes-stats/133043 "2018-05-23T19:48:01Z")
Hello - we are getting a Timeout calling the /\_cat/indexes API - though we're able to call all other APIs ok. The exception we're getting is a cluster:monitor/nodes/stats Timeout in the logs. How do we debug this to see … --- ## [Cluster not formed](https://discuss.elastic.co/t/cluster-not-formed/112585)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 6\ **Last updated:** [December 20, 2017, 9:40am UTC](https://discuss.elastic.co/t/cluster-not-formed/112585 "2017-12-20T09:40:47Z")
Usually, all works well. The hosts IPs and ports are configured properly and were not changed. Why didn't the cluster form this time? Elastic-1 \[2017-12-19T13:03:18,058\]\[INFO \]\[o.e.d.DiscoveryModule \] \[node-1\] u… --- ## [Bypass kibana iframe authentication](https://discuss.elastic.co/t/bypass-kibana-iframe-authentication/234324)
**Author:** [@Sergio\_Navarrete](https://discuss.elastic.co/u/Sergio_Navarrete)\ **Replies:** 2\ **Last updated:** [May 26, 2020, 8:07pm UTC](https://discuss.elastic.co/t/bypass-kibana-iframe-authentication/234324 "2020-05-26T20:07:06Z")
Hi, I have a multitenant web application in which each user will have its own Kibana dashboard embeded in an iframe. I have set up users and roles in elasticsearch with the required priviledges for each user to only acc… --- ## [ES query performance when searching on filed with wildcard in field name](https://discuss.elastic.co/t/es-query-performance-when-searching-on-filed-with-wildcard-in-field-name/75658)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 2\ **Last updated:** [February 24, 2017, 10:32am UTC](https://discuss.elastic.co/t/es-query-performance-when-searching-on-filed-with-wildcard-in-field-name/75658 "2017-02-24T10:32:06Z")
I saw significant performance difference between searching on field with exact field name and searching on field with wildcard suffix i name. Following is my mapping: PUT /myindex { "mappings": { "docs":… --- ## [Lots of ArrayIndexOutOfBoundsException in my logs](https://discuss.elastic.co/t/lots-of-arrayindexoutofboundsexception-in-my-logs/58893)
**Author:** [@Rodrigo\_Rezende](https://discuss.elastic.co/u/Rodrigo_Rezende)\ **Replies:** 1\ **Last updated:** [August 25, 2016, 8:58am UTC](https://discuss.elastic.co/t/lots-of-arrayindexoutofboundsexception-in-my-logs/58893 "2016-08-25T08:58:25Z")
I see my logs growing very fast with the following message: \[2016-08-25 06:21:57,714\]\[DEBUG\]\[action.search.type \] \[\*\*node\_name\*\*\] \[\*\*indice\_name\_would\_be\_here\*\*\]\[2\], node\[oHyyob8ySNOtfwjKrFkgUQ\], \[R\], v\[9\], s\[STA… --- ## [If Statement in Painless Script for Kibana's Bucket Script](https://discuss.elastic.co/t/if-statement-in-painless-script-for-kibanas-bucket-script/266418)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 3\ **Last updated:** [March 7, 2021, 7:10pm UTC](https://discuss.elastic.co/t/if-statement-in-painless-script-for-kibanas-bucket-script/266418 "2021-03-07T19:10:04Z")
Hello, Is there a good tutorial for using Painless Script in the Kibana's TSVB Bucket Script aggregation? I'm trying to do a "if" condition, as follow: If the value is less than 0, add 2^32. How to do that? --- ## [How to use Vega visulization in Kibana](https://discuss.elastic.co/t/how-to-use-vega-visulization-in-kibana/103023)
**Author:** [@mounika](https://discuss.elastic.co/u/mounika)\ **Replies:** 3\ **Last updated:** [October 18, 2017, 6:49am UTC](https://discuss.elastic.co/t/how-to-use-vega-visulization-in-kibana/103023 "2017-10-18T06:49:49Z")
Hi, I am trying the query in the below screen shot for vega visulization in kibana, but I am getting the below error. can someone please help me? \[image\] Thanks --- ## [Comparison between Elasticsearch version](https://discuss.elastic.co/t/comparison-between-elasticsearch-version/307212)
**Author:** [@Wan\_Nur\_Athirah\_Wan](https://discuss.elastic.co/u/Wan_Nur_Athirah_Wan)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 1:42pm UTC](https://discuss.elastic.co/t/comparison-between-elasticsearch-version/307212 "2022-06-16T13:42:25Z")
Hai there. Do anyone knows how to do comparison or is there any document that shows or list all the changes between this version and other version. example for Elasticsearch version 7.3.1, what is the changes or what has… --- ## [Store the data more than 1TB per day](https://discuss.elastic.co/t/store-the-data-more-than-1tb-per-day/104511)
**Author:** [@Sharon\_wsf](https://discuss.elastic.co/u/Sharon_wsf)\ **Replies:** 7\ **Last updated:** [October 20, 2017, 6:16am UTC](https://discuss.elastic.co/t/store-the-data-more-than-1tb-per-day/104511 "2017-10-20T06:16:16Z")
Hi Team, Can elasticsearch store big data more than 1TB per day? When the data corrupt, this corrupted data have backup?? Thanks and best regards Sharon --- ## [Cannot view logs in Observability log app](https://discuss.elastic.co/t/cannot-view-logs-in-observability-log-app/274257)
**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\ **Replies:** 5\ **Last updated:** [June 3, 2021, 12:15pm UTC](https://discuss.elastic.co/t/cannot-view-logs-in-observability-log-app/274257 "2021-06-03T12:15:55Z")
I have a asp.net core web app (mvc) project that will write the logs using Serilog to Elasticsearch. I created the index pattern in Kibana and I can view the logs that was written to elasticsearch under Discover. But whe… --- ## [Graph relation extraction on lastfm data](https://discuss.elastic.co/t/graph-relation-extraction-on-lastfm-data/65212)
**Author:** [@inancarin](https://discuss.elastic.co/u/inancarin)\ **Replies:** 5\ **Last updated:** [November 9, 2016, 2:44pm UTC](https://discuss.elastic.co/t/graph-relation-extraction-on-lastfm-data/65212 "2016-11-09T14:44:14Z")
Hi guys, I am using elasticsearch for a while, but I am newbie on Graph API. I just indexed lastfm data into ES and one sample document in my index as follows: { "\_index": "lastfm", "\_type": "so… --- ## [No Living Connections - Kibana](https://discuss.elastic.co/t/no-living-connections-kibana/234200)
**Author:** [@Oleh\_Smahliuk](https://discuss.elastic.co/u/Oleh_Smahliuk)\ **Replies:** 2\ **Last updated:** [May 27, 2020, 9:41am UTC](https://discuss.elastic.co/t/no-living-connections-kibana/234200 "2020-05-27T09:41:15Z")
Hi! I have an error when trying to create kibana. I am using stable elastic helm charts for creating elasticsearch and kibana (v7.4.0). I have created single-node elasticserach cluster with security enabled (x-pack). I… --- ## [Request to Elasticsearch failed: "Bad Request" apres mise a jour 5.5](https://discuss.elastic.co/t/request-to-elasticsearch-failed-bad-request-apres-mise-a-jour-5-5/96615)
**Author:** [@Jean-Claude](https://discuss.elastic.co/u/Jean-Claude)\ **Replies:** 6\ **Last updated:** [August 16, 2017, 1:01pm UTC](https://discuss.elastic.co/t/request-to-elasticsearch-failed-bad-request-apres-mise-a-jour-5-5/96615 "2017-08-16T13:01:07Z")
Bonjour à tous, Je viens de passer ELK de 5.2 en 5.5. Tout à l’air bon sauf kibana. Lorsque je le lance au lieu de m’afficher Discover il me met : Error: Request to Elasticsearch failed: “Bad Request” Quelqu’un a u… --- ## [Topbeat / top command line discrepancies](https://discuss.elastic.co/t/topbeat-top-command-line-discrepancies/52241)
**Author:** [@vchav73](https://discuss.elastic.co/u/vchav73)\ **Replies:** 6\ **Last updated:** [June 13, 2016, 3:12pm UTC](https://discuss.elastic.co/t/topbeat-top-command-line-discrepancies/52241 "2016-06-13T15:12:07Z")
I am using Topbeat with ELK to monitor CentOS 6.8 server performance. I am trying to recreate the % idle value reported from the top command: Cpu(s): 2.7%us, 1.0%sy, 2.8%ni, 90.5%id, 2.5%wa, 0.0%hi, 0.2%si, 0.3%… --- ## [Unauthenticated HTTP GET request for load balancing](https://discuss.elastic.co/t/unauthenticated-http-get-request-for-load-balancing/199487)
**Author:** [@DaveyDevOps](https://discuss.elastic.co/u/DaveyDevOps)\ **Replies:** 3\ **Last updated:** [September 23, 2019, 5:17pm UTC](https://discuss.elastic.co/t/unauthenticated-http-get-request-for-load-balancing/199487 "2019-09-23T17:17:05Z")
We have Elasticsearch behind a load balancer that only supports HTTP GET health checks. Security is enabled Are there any existing (7.3.0+) API/paths that will respond to an unauthenticated HTTP GET request (while secu… --- ## [Script result caching/reusing](https://discuss.elastic.co/t/script-result-caching-reusing/60042)
**Author:** [@gm42](https://discuss.elastic.co/u/gm42)\ **Replies:** 3\ **Last updated:** [September 29, 2016, 1:04pm UTC](https://discuss.elastic.co/t/script-result-caching-reusing/60042 "2016-09-29T13:04:26Z")
Hi there, I have a similar use-case as in https://github.com/elastic/elasticsearch/issues/10767 price calculation data is stored in a children index (I know that this makes things more complex) one of the aggregatio… --- ## [\[Solved\] Logstash - Pipeline to Pipeline Config](https://discuss.elastic.co/t/solved-logstash-pipeline-to-pipeline-config/201212)
**Author:** [@jo3rg](https://discuss.elastic.co/u/jo3rg)\ **Replies:** 3\ **Last updated:** [September 27, 2019, 10:34am UTC](https://discuss.elastic.co/t/solved-logstash-pipeline-to-pipeline-config/201212 "2019-09-27T10:34:54Z")
Hi, I'm trying to make our huge logstash configuration easier readable and flexible and therefore thought of splitting it into several pipelines. I came across the pipeline to pipeline communication feature: and al… --- ## [How to output filter results before applying next filter](https://discuss.elastic.co/t/how-to-output-filter-results-before-applying-next-filter/98862)
**Author:** [@Leluke](https://discuss.elastic.co/u/Leluke)\ **Replies:** 3\ **Last updated:** [August 30, 2017, 5:11pm UTC](https://discuss.elastic.co/t/how-to-output-filter-results-before-applying-next-filter/98862 "2017-08-30T17:11:24Z")
Hi there, I would like to be able to debug my pipeline configuration. I apply a series of filters, and at the end I output to a json file. It works as it should, and a skeleton of the code would be this: filter { whate… --- ## [How to integrate knnsearch In java application](https://discuss.elastic.co/t/how-to-integrate-knnsearch-in-java-application/298897)
**Author:** [@dileepkotte4529](https://discuss.elastic.co/u/dileepkotte4529)\ **Replies:** 4\ **Last updated:** [March 10, 2022, 2:33pm UTC](https://discuss.elastic.co/t/how-to-integrate-knnsearch-in-java-application/298897 "2022-03-10T14:33:11Z")
Hi Folks , I was tried knnsearch for vector similarity search in python it worked .But Now i need to integrate that with my spring application , I don't see much resource on it. But i tried with below code Elastic Sea… --- ## [Kibana not communicating with Elasticsearch](https://discuss.elastic.co/t/kibana-not-communicating-with-elasticsearch/140656)
**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\ **Replies:** 4\ **Last updated:** [July 20, 2018, 8:22pm UTC](https://discuss.elastic.co/t/kibana-not-communicating-with-elasticsearch/140656 "2018-07-20T20:22:53Z")
Hello Community, I am getting an error \`kibana | {"type":"log","@timestamp":"2018-07-19T05:54:47Z","tags":\["warning","elasticsearch","admin"\],"pid":1,"message":"Unable to revive connection: https://172… --- ## [ECE startup after a server restart](https://discuss.elastic.co/t/ece-startup-after-a-server-restart/99511)
**Author:** [@sayeedch](https://discuss.elastic.co/u/sayeedch)\ **Replies:** 4\ **Last updated:** [September 7, 2017, 4:14pm UTC](https://discuss.elastic.co/t/ece-startup-after-a-server-restart/99511 "2017-09-07T16:14:24Z")
If servers are restarted after a temporary shutdown, how do I check if has ECE started up again? I can’t access the Cloud UI, so I assume are there any command line checks that’s i can do? --- ## [\[ElasticSearch Query\] Select all not null fields](https://discuss.elastic.co/t/elasticsearch-query-select-all-not-null-fields/193340)
**Author:** [@amoussoubaruch](https://discuss.elastic.co/u/amoussoubaruch)\ **Replies:** 2\ **Last updated:** [August 1, 2019, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-query-select-all-not-null-fields/193340 "2019-08-01T15:44:18Z")
Hi evryone, I face some issue and i don't really know how i can solve that. I have one index with more than 600 fields. Sometimes i can have arround 500 fields with null values. I want to make a select query and have a… --- ## [Data might be incomplete because your request timed out](https://discuss.elastic.co/t/data-might-be-incomplete-because-your-request-timed-out/189912)
**Author:** [@swb](https://discuss.elastic.co/u/swb)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 9:13am UTC](https://discuss.elastic.co/t/data-might-be-incomplete-because-your-request-timed-out/189912 "2019-07-11T09:13:17Z")
Hi! We have the cluster - 1 master nodes and 3 data nodes. Every Data nodes have cpu - 12 cores, RAM - 48 GB (Xms Xmx 16 GB), Disk - 450 GB SSD . Three Indices are created every day – logstash, elasticflow and elastaler… --- ## [Thread dump - where does it get logged?](https://discuss.elastic.co/t/thread-dump-where-does-it-get-logged/7814)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 2\ **Last updated:** [May 23, 2012, 8:47pm UTC](https://discuss.elastic.co/t/thread-dump-where-does-it-get-logged/7814 "2012-05-23T20:47:08Z")
Hi, I'm trying to do a thread dump using "sudo /etc/init.d/elasticsearch dump", but all I get is this in /wrapper.log file: STATUS | wrapper | 2012/05/22 16:26:40 | Dumping JVM state. I also tried directly ki… --- ## [Cannot start elasticsearch 5.x](https://discuss.elastic.co/t/cannot-start-elasticsearch-5-x/55699)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 5\ **Last updated:** [February 12, 2017, 9:33am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-5-x/55699 "2017-02-12T09:33:51Z")
Hello, I am running elk stack in docker environment running on coreos but I cannot stat the elasticsearch because vm.max\_map\_count needs value 2147483648 but the default is 65530. I have tried creating a config file … --- ## [Index.routing.allocation.require realloc not working](https://discuss.elastic.co/t/index-routing-allocation-require-realloc-not-working/39802)
**Author:** [@Alexandre\_Derumier](https://discuss.elastic.co/u/Alexandre_Derumier)\ **Replies:** 5\ **Last updated:** [January 23, 2016, 11:38am UTC](https://discuss.elastic.co/t/index-routing-allocation-require-realloc-not-working/39802 "2016-01-23T11:38:36Z")
Hi, I'm trying to implement an hot-warm architecture like this blog: https://www.elastic.co/blog/hot-warm-architecture I have a 3 nodes cluster, all nodes are master and datas nodes. with 1 replica and 6 shards 2 … --- ## [Visualization Sort](https://discuss.elastic.co/t/visualization-sort/79282)
**Author:** [@Rbethke](https://discuss.elastic.co/u/Rbethke)\ **Replies:** 1\ **Last updated:** [March 21, 2017, 8:26pm UTC](https://discuss.elastic.co/t/visualization-sort/79282 "2017-03-21T20:26:21Z")
This seems like a very simple thing but I'm stumped. I have a simple Kibana visualization with a count and an average and I can't get it to sort by the average. I am aware of the arrows at the tops of the columns which… --- ## [Index Mapping Template Not Honoring Multiple Date Formats on Field](https://discuss.elastic.co/t/index-mapping-template-not-honoring-multiple-date-formats-on-field/199109)
**Author:** [@ruhrohshingo](https://discuss.elastic.co/u/ruhrohshingo)\ **Replies:** 8\ **Last updated:** [September 11, 2019, 8:36pm UTC](https://discuss.elastic.co/t/index-mapping-template-not-honoring-multiple-date-formats-on-field/199109 "2019-09-11T20:36:15Z")
I'm working with ES 6.8.1 (and ditto for the rest of the Elastic Stack) that's using an index template that Logstash sends to for indexing. There are some date fields in the index template where I'm seeing the declaratio… --- ## [Logging events to Logstash via REST with custom request and responses](https://discuss.elastic.co/t/logging-events-to-logstash-via-rest-with-custom-request-and-responses/86031)
**Author:** [@dml](https://discuss.elastic.co/u/dml)\ **Replies:** 3\ **Last updated:** [May 24, 2017, 9:17am UTC](https://discuss.elastic.co/t/logging-events-to-logstash-via-rest-with-custom-request-and-responses/86031 "2017-05-24T09:17:47Z")
I would like an application to log events to Logstash using a REST API. The request is JSON-encoded event data, some of which are required, some optional, and some would default to default values. The request would nee… --- ## [🎉 Elastic Stack 8.4 released](https://discuss.elastic.co/t/elastic-stack-8-4-released/312834)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [August 24, 2022, 6:02pm UTC](https://discuss.elastic.co/t/elastic-stack-8-4-released/312834 "2022-08-24T18:02:50Z")
:tada: New in Elastic 8.4 Elastic 8.4 introduces a broad set of new capabilities to the Elastic Search Platform and its three built-in solutions. Elastic Enterprise Search delivers increasingly flexible data ingestion… --- ## [Run Logstash-input-jdbc SQL query on-demand](https://discuss.elastic.co/t/run-logstash-input-jdbc-sql-query-on-demand/96991)
**Author:** [@Apolitosz](https://discuss.elastic.co/u/Apolitosz)\ **Replies:** 0\ **Last updated:** [August 14, 2017, 3:03pm UTC](https://discuss.elastic.co/t/run-logstash-input-jdbc-sql-query-on-demand/96991 "2017-08-14T15:03:32Z")
Hi, I know that with a cron-like syntax we can schedule a jdbc input to run regularly, however our underlying database tables (postgres) are refreshing irregularly, therefore we are looking for a way to only run the SQL… --- ## [TransportClient and creating an S3 snapshot repository](https://discuss.elastic.co/t/transportclient-and-creating-an-s3-snapshot-repository/55088)
**Author:** [@martiansnoop](https://discuss.elastic.co/u/martiansnoop)\ **Replies:** 6\ **Last updated:** [July 25, 2016, 8:39am UTC](https://discuss.elastic.co/t/transportclient-and-creating-an-s3-snapshot-repository/55088 "2016-07-25T08:39:25Z")
es version: 2.3.3 I'm currently attempting to create an s3 snapshot repository using the java TransportClient. I'm getting the following error: RepositoryException\[\[028181cde20d44a8bb3009f71daf8524\_backup\] failed to… --- ## [Split message field into multiple fields in kibana](https://discuss.elastic.co/t/split-message-field-into-multiple-fields-in-kibana/249262)
**Author:** [@chand](https://discuss.elastic.co/u/chand)\ **Replies:** 4\ **Last updated:** [September 21, 2020, 5:39am UTC](https://discuss.elastic.co/t/split-message-field-into-multiple-fields-in-kibana/249262 "2020-09-21T05:39:05Z")
I've the following data for the message field which is being shipped by filebeat to elasticseatch. I am not using Logstash here 2020-09-20 15:44:23 ::1 get / - 80 - ::1 mozilla/5.0+(windows+nt+10.0;+win64;+x64)+window… --- ## [Docker.container.name is always empty](https://discuss.elastic.co/t/docker-container-name-is-always-empty/171022)
**Author:** [@tonyskulk](https://discuss.elastic.co/u/tonyskulk)\ **Replies:** 4\ **Last updated:** [March 27, 2019, 3:09am UTC](https://discuss.elastic.co/t/docker-container-name-is-always-empty/171022 "2019-03-27T03:09:33Z")
Hi, I have a docker setup with filebeat and other containers producing logs that are fetched by the filebeat container. That works well so far, everything gets imported to elasticsearch indices and I can discover them in… --- ## [Combiner deux résultats d'aggregations et les diviser](https://discuss.elastic.co/t/combiner-deux-resultats-daggregations-et-les-diviser/1634)
**Author:** [@jhercule](https://discuss.elastic.co/u/jhercule)\ **Replies:** 4\ **Last updated:** [June 2, 2015, 10:15am UTC](https://discuss.elastic.co/t/combiner-deux-resultats-daggregations-et-les-diviser/1634 "2015-06-02T10:15:35Z")
Bonjour, j'essaie depuis quelques temps de faire une moyenne. En gros sum(element1) / count(element2). Ceci via kibana. Je suis tombé sur un article (https://github.com/elastic/kibana/issues/2504) qui semble dire (mon … [Previous page](https://discuss.elastic.co/top.md?page=721&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=723&per_page=50&period=all)