# Top

**URL:** https://discuss.elastic.co/top.md?page=723&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 724

---

## [Workflow view](https://discuss.elastic.co/t/workflow-view/144524)

<div class="topic-metadata">

**Author:** [@myaychi](https://discuss.elastic.co/u/myaychi)\
**Replies:** 2\
**Last updated:** [August 16, 2018, 3:33am UTC](https://discuss.elastic.co/t/workflow-view/144524 "2018-08-16T03:33:35Z")

</div>

I'm thinking about a solution maybe in Kibana to have a kind of flowchart, activity diagram or businessProcess flow . kind of activity diagram that i can create from a special part of data i have some transactional dat…

---

## [Monitoring Veeam Backup Jobs](https://discuss.elastic.co/t/monitoring-veeam-backup-jobs/284401)

<div class="topic-metadata">

**Author:** [@Xabi](https://discuss.elastic.co/u/Xabi)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 9:38pm UTC](https://discuss.elastic.co/t/monitoring-veeam-backup-jobs/284401 "2021-09-29T21:38:52Z")

</div>

Hi guys, I'm interested in monitoring our veem backup jobs. Especially the events related to the execution of jobs. any suggestions?

---

## [Create new field in ES and backfill it with data](https://discuss.elastic.co/t/create-new-field-in-es-and-backfill-it-with-data/104314)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 3\
**Last updated:** [October 18, 2017, 6:19am UTC](https://discuss.elastic.co/t/create-new-field-in-es-and-backfill-it-with-data/104314 "2017-10-18T06:19:50Z")

</div>

We have ElasticSearch index that stores large dataset. I need to add two new fields to ES index and backfill values for these fields from Redshift. My question is how can I achieve this? What is the best approach: change…

---

## [Kibana response time is too slow, need help identifying why](https://discuss.elastic.co/t/kibana-response-time-is-too-slow-need-help-identifying-why/19082)

<div class="topic-metadata">

**Author:** [@Tony\_Chong](https://discuss.elastic.co/u/Tony_Chong)\
**Replies:** 3\
**Last updated:** [August 5, 2014, 4:32pm UTC](https://discuss.elastic.co/t/kibana-response-time-is-too-slow-need-help-identifying-why/19082 "2014-08-05T16:32:32Z")

</div>

Hello, Like many others, I have the ELK stack. With very little data in elastic search, kibana 3 is super fast, but in my production environment, kibana sometimes even fails to show any data. Here are my hardw…

---

## [Filter aggregation and nested documents](https://discuss.elastic.co/t/filter-aggregation-and-nested-documents/17224)

<div class="topic-metadata">

**Author:** [@Olivier\_B](https://discuss.elastic.co/u/Olivier_B)\
**Replies:** 3\
**Last updated:** [July 14, 2014, 5:25pm UTC](https://discuss.elastic.co/t/filter-aggregation-and-nested-documents/17224 "2014-07-14T17:25:54Z")

</div>

Hi all, I'm working with nested documents (like millions of documents) and I do aggregation on nested documents. And of course, I need to use filter aggregation (http://www.elasticsearch.org/guide/en/elasticsear…

---

## [Remote reindex with wildcard to multiple indices](https://discuss.elastic.co/t/remote-reindex-with-wildcard-to-multiple-indices/318552)

<div class="topic-metadata">

**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\
**Replies:** 6\
**Last updated:** [November 10, 2022, 7:22am UTC](https://discuss.elastic.co/t/remote-reindex-with-wildcard-to-multiple-indices/318552 "2022-11-10T07:22:25Z")

</div>

Hey Everyone, I'm having some issues with running a remote reindex from cluster a to cluster b. The end goal I'm trying to achieve is having some index pattern that the user can provide, and the remote reindex will get …

---

## [Elasticsearch not reachable](https://discuss.elastic.co/t/elasticsearch-not-reachable/195419)

<div class="topic-metadata">

**Author:** [@muzamil47](https://discuss.elastic.co/u/muzamil47)\
**Replies:** 8\
**Last updated:** [August 18, 2019, 11:29am UTC](https://discuss.elastic.co/t/elasticsearch-not-reachable/195419 "2019-08-18T11:29:20Z")

</div>

I am trying to load CSV data into Elasticsearch using Logstash and visualize the data in Kibana, but when I run logstash config file, I am getting Elasticseach not reachable error, though my elasticsearch server is runni…

---

## [How to set shards based on size instead of date?](https://discuss.elastic.co/t/how-to-set-shards-based-on-size-instead-of-date/146250)

<div class="topic-metadata">

**Author:** [@robhep](https://discuss.elastic.co/u/robhep)\
**Replies:** 4\
**Last updated:** [August 28, 2018, 8:39pm UTC](https://discuss.elastic.co/t/how-to-set-shards-based-on-size-instead-of-date/146250 "2018-08-28T20:39:45Z")

</div>

Hi, I have a 5 node cluster in a lab environment. 2 data nodes, 3 master eligible nodes, 3 kibana, and 2 logstash. It's a low volume setup with about a half a dozen systems feed data to it. It has the default setup wi…

---

## [Logstash http output plugin throws "HTTP Output Failure"](https://discuss.elastic.co/t/logstash-http-output-plugin-throws-http-output-failure/112304)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 4\
**Last updated:** [January 3, 2018, 8:05pm UTC](https://discuss.elastic.co/t/logstash-http-output-plugin-throws-http-output-failure/112304 "2018-01-03T20:05:28Z")

</div>

Hi, I am using Logstash Output Plugin to send data to another Logstash instance. Some events are successfully processed but for some events it is throwing the following error, {:timestamp=\>"2017-12-18T15:13:40.243000-0…

---

## [Sql\_last\_start error](https://discuss.elastic.co/t/sql-last-start-error/45048)

<div class="topic-metadata">

**Author:** [@jkdenton](https://discuss.elastic.co/u/jkdenton)\
**Replies:** 4\
**Last updated:** [March 28, 2016, 2:31pm UTC](https://discuss.elastic.co/t/sql-last-start-error/45048 "2016-03-28T14:31:40Z")

</div>

I get the following error when attempting to use a column value or when using the default timestamp: Java::ComMicrosoftSqlserverJdbc::SQLServerException: Incorrect syntax near ':'.: SELECT \* from table where id \> :sql\_…

---

## [Sparse index](https://discuss.elastic.co/t/sparse-index/95333)

<div class="topic-metadata">

**Author:** [@Spacefish](https://discuss.elastic.co/u/Spacefish)\
**Replies:** 2\
**Last updated:** [August 1, 2017, 12:51pm UTC](https://discuss.elastic.co/t/sparse-index/95333 "2017-08-01T12:51:01Z")

</div>

Hello, i have a ES Index with aprox. 10 Million documents. It is running on a three node cluster, with 6gb Java Heap per node… when i use this index in kibana i see considerate slowdown, it takes up to 20 seconds for a…

---

## [What privileges/roles does a user need to be able to export CSV files from Kibana 7.1?](https://discuss.elastic.co/t/what-privileges-roles-does-a-user-need-to-be-able-to-export-csv-files-from-kibana-7-1/190086)

<div class="topic-metadata">

**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\
**Replies:** 1\
**Last updated:** [July 19, 2019, 6:13pm UTC](https://discuss.elastic.co/t/what-privileges-roles-does-a-user-need-to-be-able-to-export-csv-files-from-kibana-7-1/190086 "2019-07-19T18:13:02Z")

</div>

I am trying to generate a CSV report from a saved search in Kibana, but am getting this error: \[ { "type": "security\_exception", "reason": "action \[cluster:monitor/state\] is unauthorized for user \[someuser\]" …

---

## [Logstash not importing data into elasticsearch](https://discuss.elastic.co/t/logstash-not-importing-data-into-elasticsearch/88197)

<div class="topic-metadata">

**Author:** [@amilus](https://discuss.elastic.co/u/amilus)\
**Replies:** 1\
**Last updated:** [June 5, 2017, 3:02am UTC](https://discuss.elastic.co/t/logstash-not-importing-data-into-elasticsearch/88197 "2017-06-05T03:02:13Z")

</div>

i'm importing data from twitter through logstash into elasticsearch, it was working just fine but since a \> few days it stopped working, and im getting this error, could someone help me please \[2017-06-04T18:25:39,…

---

## [Search for non indexed fields is not working Please help](https://discuss.elastic.co/t/search-for-non-indexed-fields-is-not-working-please-help/215996)

<div class="topic-metadata">

**Author:** [@srivatsalya](https://discuss.elastic.co/u/srivatsalya)\
**Replies:** 3\
**Last updated:** [January 23, 2020, 10:12am UTC](https://discuss.elastic.co/t/search-for-non-indexed-fields-is-not-working-please-help/215996 "2020-01-23T10:12:30Z")

</div>

Hello, I want to filter the search results using non indexed field. { "\_index" : "shipmentdata\_v1", "\_type" : "\_doc", "\_id" : "128Q711U", "\_score" : 1.0, "\_source" : { "bundleId" : 13663, "customerId" : 101456 …

---

## [Filebeats ILM permission error](https://discuss.elastic.co/t/filebeats-ilm-permission-error/214617)

<div class="topic-metadata">

**Author:** [@trunet](https://discuss.elastic.co/u/trunet)\
**Replies:** 3\
**Last updated:** [January 13, 2020, 10:01am UTC](https://discuss.elastic.co/t/filebeats-ilm-permission-error/214617 "2020-01-13T10:01:30Z")

</div>

Hello, Just finished configuring elasticsearch, filebeat and kibana with SSL, xpack security and ILM. Issue is that after following https://www.elastic.co/guide/en/beats/filebeat/current/feature-roles.html and creating…

---

## [Setup Elasticsearch and Kibana on the same server with TLS/SSL](https://discuss.elastic.co/t/setup-elasticsearch-and-kibana-on-the-same-server-with-tls-ssl/214012)

<div class="topic-metadata">

**Author:** [@HrDahl](https://discuss.elastic.co/u/HrDahl)\
**Replies:** 3\
**Last updated:** [January 8, 2020, 9:57am UTC](https://discuss.elastic.co/t/setup-elasticsearch-and-kibana-on-the-same-server-with-tls-ssl/214012 "2020-01-08T09:57:04Z")

</div>

I have tried for the past week to get ES and Kibana working over https on the same server with proper DNS names. :confused: I am using a wildcard certificate for everything e.g. ES DNS, Kibana DNS and server certificat…

---

## [SSL and Elastic API](https://discuss.elastic.co/t/ssl-and-elastic-api/224201)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 5\
**Last updated:** [March 19, 2020, 1:54pm UTC](https://discuss.elastic.co/t/ssl-and-elastic-api/224201 "2020-03-19T13:54:52Z")

</div>

Hi, I have enabled SSL in elastic search, then using Postman I try to make a request to elastic and didn't work, I have to turn off 'SSL certificate verification' in Postman to make the request. That means that the pro…

---

## [I can't start elasticsearch](https://discuss.elastic.co/t/i-cant-start-elasticsearch/66538)

<div class="topic-metadata">

**Author:** [@vanyadog](https://discuss.elastic.co/u/vanyadog)\
**Replies:** 5\
**Last updated:** [November 19, 2016, 8:01pm UTC](https://discuss.elastic.co/t/i-cant-start-elasticsearch/66538 "2016-11-19T20:01:04Z")

</div>

Hello Could you help me please? i've got debian 8.6 Linux debian 3.16.0-4-686-pae #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) i686 GNU/Linux the system is clear, i installed only mc and curl next apt-get insta…

---

## [Search is slower in ElasticSearch 2.0.0 than 1.7.3 when the document count is high ( \> 2.5 million)](https://discuss.elastic.co/t/search-is-slower-in-elasticsearch-2-0-0-than-1-7-3-when-the-document-count-is-high-2-5-million/34593)

<div class="topic-metadata">

**Author:** [@vignesh\_c](https://discuss.elastic.co/u/vignesh_c)\
**Replies:** 5\
**Last updated:** [April 27, 2016, 12:54pm UTC](https://discuss.elastic.co/t/search-is-slower-in-elasticsearch-2-0-0-than-1-7-3-when-the-document-count-is-high-2-5-million/34593 "2016-04-27T12:54:11Z")

</div>

Hi, While testing out the search performance, it was found that the search is considerably faster in 1.7.3 than in 2.0.0 when the document count in a single shard index is \> 2.5 million. There is a 200-300 ms differe…

---

## ["Can't merge because of conflicts: \[Cannot update enabled setting for \[\_source\], Cannot update excludes setting for \[\_source\]\]"](https://discuss.elastic.co/t/cant-merge-because-of-conflicts-cannot-update-enabled-setting-for-source-cannot-update-excludes-setting-for-source/179200)

<div class="topic-metadata">

**Author:** [@Maesuri\_Fauziah](https://discuss.elastic.co/u/Maesuri_Fauziah)\
**Replies:** 4\
**Last updated:** [May 2, 2019, 12:52am UTC](https://discuss.elastic.co/t/cant-merge-because-of-conflicts-cannot-update-enabled-setting-for-source-cannot-update-excludes-setting-for-source/179200 "2019-05-02T00:52:00Z")

</div>

i write this: PUT /my\_index/\_mapping/article { "article": { "\_source": { "excludes": \[ "date"\] } } } but the result: { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Can't me…

---

## [Ruby maths operation error](https://discuss.elastic.co/t/ruby-maths-operation-error/108966)

<div class="topic-metadata">

**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\
**Replies:** 4\
**Last updated:** [November 24, 2017, 9:11am UTC](https://discuss.elastic.co/t/ruby-maths-operation-error/108966 "2017-11-24T09:11:46Z")

</div>

Hi.. ruby { code =\> "event\['discount'\] = \[\[event\['mrp'\].to\_i - event\['price'\].to\_i\].to\_f / event\['mrp'\].to\_f \] \* 100" } But the above code some what wrong....can anybody explain where I am wrong... Th…

---

## [Parent/child with logstash 2.1.1](https://discuss.elastic.co/t/parent-child-with-logstash-2-1-1/37769)

<div class="topic-metadata">

**Author:** [@fchantrel](https://discuss.elastic.co/u/fchantrel)\
**Replies:** 4\
**Last updated:** [July 7, 2016, 8:48pm UTC](https://discuss.elastic.co/t/parent-child-with-logstash-2-1-1/37769 "2016-07-07T20:48:59Z")

</div>

Hi, i've tried to index child documents with logstash but it doesn't work since I use the 2.1.1 version. Here is my config : ''' ... filter { mutate { add\_field =\> { "parent" =\> "%{id}" } remove\_fie…

---

## [How set filebeat output logstash speed limit?](https://discuss.elastic.co/t/how-set-filebeat-output-logstash-speed-limit/43359)

<div class="topic-metadata">

**Author:** [@iyaozhen](https://discuss.elastic.co/u/iyaozhen)\
**Replies:** 4\
**Last updated:** [March 3, 2016, 9:58am UTC](https://discuss.elastic.co/t/how-set-filebeat-output-logstash-speed-limit/43359 "2016-03-03T09:58:33Z")

</div>

I use Filebeat and logshtash, But I worry most of message use high NET\_OUT\_BITPS, and affect online business. \[:sweat:\]

---

## [Kibana: Kibana's memory limit won't change. Even to default](https://discuss.elastic.co/t/kibana-kibanas-memory-limit-wont-change-even-to-default/270197)

<div class="topic-metadata">

**Author:** [@ade.syseng](https://discuss.elastic.co/u/ade.syseng)\
**Replies:** 7\
**Last updated:** [July 17, 2025, 2:17pm UTC](https://discuss.elastic.co/t/kibana-kibanas-memory-limit-wont-change-even-to-default/270197 "2025-07-17T14:17:44Z")

</div>

Hi, I'm just upgraded Kibana to 7.12. And I noticed Kibana's memory limit configured at 4GB according to Stack Monitoring. So then I set the memory limit to 2GB, it was a success. Sometime later, due to web server l…

---

## [Custom Log integration multiple pipelines](https://discuss.elastic.co/t/custom-log-integration-multiple-pipelines/322485)

<div class="topic-metadata">

**Author:** [@searchtastic](https://discuss.elastic.co/u/searchtastic)\
**Replies:** 7\
**Last updated:** [January 9, 2023, 3:43pm UTC](https://discuss.elastic.co/t/custom-log-integration-multiple-pipelines/322485 "2023-01-09T15:43:39Z")

</div>

I have a custom integration setup with Elastic agent. At the moment I have a directory with several log files containing quite different data. I can't use the same pipeline so I would like to reference another pipeline.…

---

## [Jdbc client is not working in elastic search 6.5.1](https://discuss.elastic.co/t/jdbc-client-is-not-working-in-elastic-search-6-5-1/159331)

<div class="topic-metadata">

**Author:** [@afeef1915](https://discuss.elastic.co/u/afeef1915)\
**Replies:** 7\
**Last updated:** [December 6, 2018, 2:01pm UTC](https://discuss.elastic.co/t/jdbc-client-is-not-working-in-elastic-search-6-5-1/159331 "2018-12-06T14:01:52Z")

</div>

cannot sync data from mysql to elastic search . I tried to follow https://www.elastic.co/blog/logstash-jdbc-input-plugin asked in stack overflow logstash config # file: logstash-sample.conf input { jdbc { …

---

## [Sum aggregation on nested query](https://discuss.elastic.co/t/sum-aggregation-on-nested-query/149093)

<div class="topic-metadata">

**Author:** [@kardagan](https://discuss.elastic.co/u/kardagan)\
**Replies:** 1\
**Last updated:** [September 20, 2018, 2:00pm UTC](https://discuss.elastic.co/t/sum-aggregation-on-nested-query/149093 "2018-09-20T14:00:30Z")

</div>

Hello, In my database I have products, each products have differents offers and offers have sales. A sale is defined by a sale datetime and a nb (number of sales for de date) I have to get produts and offers who have …

---

## [Curator for deleting indices older than 30 days or more based on a field that isn't of type date](https://discuss.elastic.co/t/curator-for-deleting-indices-older-than-30-days-or-more-based-on-a-field-that-isnt-of-type-date/89248)

<div class="topic-metadata">

**Author:** [@shrenikgala](https://discuss.elastic.co/u/shrenikgala)\
**Replies:** 6\
**Last updated:** [June 22, 2017, 9:40pm UTC](https://discuss.elastic.co/t/curator-for-deleting-indices-older-than-30-days-or-more-based-on-a-field-that-isnt-of-type-date/89248 "2017-06-22T21:40:29Z")

</div>

{ "\_index": "user:1494813192000", "\_type": "fruits", "\_id": "pbyac5r88-yghe-v1ez-cpgb-sqdjipr54alzgj/tp4oqalbd-bo2v-ikj1-atfq-wezcoeeuf6wiqpt/apple", "\_score": 1, …

---

## [Index content to elasticsearch cluster from sitemap](https://discuss.elastic.co/t/index-content-to-elasticsearch-cluster-from-sitemap/65717)

<div class="topic-metadata">

**Author:** [@Srinivasan\_Ramaswamy](https://discuss.elastic.co/u/Srinivasan_Ramaswamy)\
**Replies:** 0\
**Last updated:** [November 10, 2016, 7:43pm UTC](https://discuss.elastic.co/t/index-content-to-elasticsearch-cluster-from-sitemap/65717 "2016-11-10T19:43:39Z")

</div>

I have bunch of sitemaps with a list of urls and last modified time, that i want to fetch (get the html) and parse (extract title, links, text, etc) the content and finally index it to elasticsearch. In future, I might h…

---

## [How load balancing work between logstash and elasticsearch](https://discuss.elastic.co/t/how-load-balancing-work-between-logstash-and-elasticsearch/313821)

<div class="topic-metadata">

**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\
**Replies:** 8\
**Last updated:** [September 8, 2022, 10:51am UTC](https://discuss.elastic.co/t/how-load-balancing-work-between-logstash-and-elasticsearch/313821 "2022-09-08T10:51:14Z")

</div>

Hi everyone, I have a question about logstash and how it load balances to an elasticsearch servers cluster. The warning "high disk watermark \[90%\] exceeded" is displayed in the logstash log file, and documents are no l…

---

## [ResourceAlreadyExists Exception After Deleting Index](https://discuss.elastic.co/t/resourcealreadyexists-exception-after-deleting-index/231953)

<div class="topic-metadata">

**Author:** [@ddavid](https://discuss.elastic.co/u/ddavid)\
**Replies:** 3\
**Last updated:** [May 11, 2020, 11:31am UTC](https://discuss.elastic.co/t/resourcealreadyexists-exception-after-deleting-index/231953 "2020-05-11T11:31:06Z")

</div>

Background I am using python's behave library to write feature tests for my code in linux environment. Some features have data that is stored in elastic search (no clusters, 5 shards, 1 replica, version 6.4.0). For this…

---

## [Is it best practice to call \_forcemerge on active index?](https://discuss.elastic.co/t/is-it-best-practice-to-call--forcemerge-on-active-index/70488)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 8\
**Last updated:** [January 4, 2017, 9:24pm UTC](https://discuss.elastic.co/t/is-it-best-practice-to-call--forcemerge-on-active-index/70488 "2017-01-04T21:24:02Z")

</div>

I am going to optimize my indices daily with automatic tool which will simply call forcemerge?maxnum\_segments=1 all indices one by one. During the optimizing, there are still querying and indexing on all indices. Is it…

---

## [How to change transport\_address in cluster nodes](https://discuss.elastic.co/t/how-to-change-transport-address-in-cluster-nodes/63287)

<div class="topic-metadata">

**Author:** [@dmugyr](https://discuss.elastic.co/u/dmugyr)\
**Replies:** 3\
**Last updated:** [October 19, 2016, 9:12am UTC](https://discuss.elastic.co/t/how-to-change-transport-address-in-cluster-nodes/63287 "2016-10-19T09:12:35Z")

</div>

I have 6 nodes in cluster and 2 network(one of them local) How can i change communication between nodes? I need that nodes communicate with each other on local net I have set discovery.zen.ping.unicast.hosts to local ip …

---

## [I have mulitple views in SQL (Input) and multiple INDEXES in ES (Output). How can I use logstash to deal with them in single config file?](https://discuss.elastic.co/t/i-have-mulitple-views-in-sql-input-and-multiple-indexes-in-es-output-how-can-i-use-logstash-to-deal-with-them-in-single-config-file/39800)

<div class="topic-metadata">

**Author:** [@mrizwan](https://discuss.elastic.co/u/mrizwan)\
**Replies:** 3\
**Last updated:** [January 22, 2016, 12:00pm UTC](https://discuss.elastic.co/t/i-have-mulitple-views-in-sql-input-and-multiple-indexes-in-es-output-how-can-i-use-logstash-to-deal-with-them-in-single-config-file/39800 "2016-01-22T12:00:39Z")

</div>

I am new to ES 2.1 and Logstash. I was using \_river before for fetching records from SQL and can handle multiple queries and indexes in it. Now I am using Logstash 2.1 and ES 2.1. The issue is, I am not able to deal…

---

## [Square brackets in ingest node grok pattern](https://discuss.elastic.co/t/square-brackets-in-ingest-node-grok-pattern/67978)

<div class="topic-metadata">

**Author:** [@wenyao](https://discuss.elastic.co/u/wenyao)\
**Replies:** 2\
**Last updated:** [December 5, 2016, 10:16am UTC](https://discuss.elastic.co/t/square-brackets-in-ingest-node-grok-pattern/67978 "2016-12-05T10:16:37Z")

</div>

I am trying to convert my logstash configs into ingest node pipelines. In my previous logstash config, the grok pattern contains square brackets which looks like this: \\\[%{DATA:loglevel}\\\] %{TIMESTAMP\_ISO8601:datetime…

---

## [Exposing elastic search query APIs at a public endpoint](https://discuss.elastic.co/t/exposing-elastic-search-query-apis-at-a-public-endpoint/18006)

<div class="topic-metadata">

**Author:** [@Pradeep\_Narayan](https://discuss.elastic.co/u/Pradeep_Narayan)\
**Replies:** 2\
**Last updated:** [June 10, 2014, 10:38pm UTC](https://discuss.elastic.co/t/exposing-elastic-search-query-apis-at-a-public-endpoint/18006 "2014-06-10T22:38:41Z")

</div>

Hi - We are designing a system for reporting and are planning to use Elastic search as a backend. We want to expose reporting in such a way that users can build custom reports on top of their data without us coming i…

---

## [How to understand translog stats](https://discuss.elastic.co/t/how-to-understand-translog-stats/300507)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 2\
**Last updated:** [March 24, 2022, 3:12pm UTC](https://discuss.elastic.co/t/how-to-understand-translog-stats/300507 "2022-03-24T15:12:06Z")

</div>

We are seeing the situation where when we restart ES, there is a long recovery time for the shards. The service is down usually for only about 90 seconds, but the recovery can be an hour or so. During my investigation, I…

---

## [Elasticsearch plugin is red after update](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-after-update/111313)

<div class="topic-metadata">

**Author:** [@c4alexc4](https://discuss.elastic.co/u/c4alexc4)\
**Replies:** 5\
**Last updated:** [December 13, 2017, 4:08pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-after-update/111313 "2017-12-13T16:08:24Z")

</div>

Hey guys, Im new to unix and the elk-stack, so the fix might be an easy one for the "pros": I just updated to 6.0.1 and when I try to reach kibana, I get forwarded to the status site, saying that status is Red. In the…

---

## [Parent-Child Relationship with logstash](https://discuss.elastic.co/t/parent-child-relationship-with-logstash/33545)

<div class="topic-metadata">

**Author:** [@Hornov](https://discuss.elastic.co/u/Hornov)\
**Replies:** 5\
**Last updated:** [June 27, 2016, 7:52pm UTC](https://discuss.elastic.co/t/parent-child-relationship-with-logstash/33545 "2016-06-27T19:52:50Z")

</div>

I try to integrade child data with logstash but I can't. For example I tried to use a \_parent field with the value of the parent id but it did'nt work. Do you have any idea ?

---

## [Primary shard is not active timeout](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout/85281)

<div class="topic-metadata">

**Author:** [@LazPix](https://discuss.elastic.co/u/LazPix)\
**Replies:** 1\
**Last updated:** [May 14, 2017, 9:21am UTC](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout/85281 "2017-05-14T09:21:13Z")

</div>

I'm using ES 2.4.4 on a linux machine. I have a node js process that reads from a queue and writes in parallel 16 different batches of about 1MB each to Elasticsearch. After each write the process rests for 30ms. Most of…

---

## [\[NEWUSER\] JRuby ext built for wrong Java version](https://discuss.elastic.co/t/newuser-jruby-ext-built-for-wrong-java-version/66571)

<div class="topic-metadata">

**Author:** [@utdrmac](https://discuss.elastic.co/u/utdrmac)\
**Replies:** 1\
**Last updated:** [November 18, 2016, 8:06pm UTC](https://discuss.elastic.co/t/newuser-jruby-ext-built-for-wrong-java-version/66571 "2016-11-18T20:06:35Z")

</div>

Hi there. First time user of Logstash. I just installed OpenJDK 1.8 onto this machine \[root@hotspare ~\]# rpm -qa | grep openjdk java-1.8.0-openjdk-1.8.0.111-0.b15.el6\_8.x86\_64 java-1.8.0-openjdk-headless-1.8.0.111-0.b1…

---

## [MetricBeats || Apache ActiveMq|| Origin null is not allowed](https://discuss.elastic.co/t/metricbeats-apache-activemq-origin-null-is-not-allowed/232191)

<div class="topic-metadata">

**Author:** [@faiz0210](https://discuss.elastic.co/u/faiz0210)\
**Replies:** 4\
**Last updated:** [May 14, 2020, 7:44pm UTC](https://discuss.elastic.co/t/metricbeats-apache-activemq-origin-null-is-not-allowed/232191 "2020-05-14T19:44:21Z")

</div>

Hi Team, Trying to setup metricbeat for ActiveMq, whole installation and configuration process went smooth, but couldn't see any data on Kibana. On further diagnosis, found below information in /var/log/messages. metr…

---

## [Kibana - Count similar entries within a time interval of each other](https://discuss.elastic.co/t/kibana-count-similar-entries-within-a-time-interval-of-each-other/108879)

<div class="topic-metadata">

**Author:** [@PedroMarques](https://discuss.elastic.co/u/PedroMarques)\
**Replies:** 4\
**Last updated:** [November 24, 2017, 9:57am UTC](https://discuss.elastic.co/t/kibana-count-similar-entries-within-a-time-interval-of-each-other/108879 "2017-11-24T09:57:04Z")

</div>

I'm trying to analyse some IDS data and I'm having trouble understanding how to create a visualization that suits what I'm trying to see. Basically I'm trying to find the amount of shared entries two IDS have between th…

---

## [Bulk item insert failed](https://discuss.elastic.co/t/bulk-item-insert-failed/68179)

<div class="topic-metadata">

**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\
**Replies:** 2\
**Last updated:** [December 7, 2016, 8:49am UTC](https://discuss.elastic.co/t/bulk-item-insert-failed/68179 "2016-12-07T08:49:01Z")

</div>

Hello, I have a problem since last Sunday with my ELK. All Windows machines which are monitored can't send events to the ELK server, in winlogbeat log there is something like: 2016-12-06T15:18:03+01:00 INFO Bulk item i…

---

## [Index performace with large arrays](https://discuss.elastic.co/t/index-performace-with-large-arrays/18765)

<div class="topic-metadata">

**Author:** [@SteveM](https://discuss.elastic.co/u/SteveM)\
**Replies:** 2\
**Last updated:** [July 21, 2014, 4:10pm UTC](https://discuss.elastic.co/t/index-performace-with-large-arrays/18765 "2014-07-21T16:10:13Z")

</div>

Hi there. I'm new to ES and would appreciate some advice on design concepts around large arrays. I am writing a help tip feature that pops up a message each time a user logs in. The user can flag a checkbox if the…

---

## [Issues while connecting to HTTPS elastic search url from filebeat](https://discuss.elastic.co/t/issues-while-connecting-to-https-elastic-search-url-from-filebeat/90519)

<div class="topic-metadata">

**Author:** [@Hanciv](https://discuss.elastic.co/u/Hanciv)\
**Replies:** 3\
**Last updated:** [June 26, 2017, 11:32am UTC](https://discuss.elastic.co/t/issues-while-connecting-to-https-elastic-search-url-from-filebeat/90519 "2017-06-26T11:32:39Z")

</div>

Hi, I am trying to send my log messages to AWS Elastic search service which is resising in HTTPS. Below is the configuration I have given in filebeat: output.elasticsearch: # Array of hosts to connect to. hosts: …

---

## [Logstash does not identify ERROR log level](https://discuss.elastic.co/t/logstash-does-not-identify-error-log-level/42213)

<div class="topic-metadata">

**Author:** [@punit\_naik1](https://discuss.elastic.co/u/punit_naik1)\
**Replies:** 3\
**Last updated:** [February 19, 2016, 11:44am UTC](https://discuss.elastic.co/t/logstash-does-not-identify-error-log-level/42213 "2016-02-19T11:44:28Z")

</div>

I have a config file like this: input{ file{ path =\> \["/home/formcept/fcstack/fclogs/relax/logging.log"\] start\_position =\> "beginning" codec =\> multiline { …

---

## [Timelion counting dates for rows](https://discuss.elastic.co/t/timelion-counting-dates-for-rows/122153)

<div class="topic-metadata">

**Author:** [@rhass](https://discuss.elastic.co/u/rhass)\
**Replies:** 6\
**Last updated:** [March 20, 2018, 1:50am UTC](https://discuss.elastic.co/t/timelion-counting-dates-for-rows/122153 "2018-03-20T01:50:35Z")

</div>

Hello! I am using timelion and I am having an issue with the display. It seems that timelion is doing a count of all rows that hit on a certain date and is displaying that. For example. I have the "date" field below. In…

---

## [Data movement between indexes in elasticsearch](https://discuss.elastic.co/t/data-movement-between-indexes-in-elasticsearch/51423)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 6\
**Last updated:** [June 16, 2016, 7:31am UTC](https://discuss.elastic.co/t/data-movement-between-indexes-in-elasticsearch/51423 "2016-06-16T07:31:43Z")

</div>

Hi, We are looking to move data from one index to another index in the same server with changed mapping template... We have tried the below link after creating alias in the index and reassign the alias https://www.elas…

---

## [\[From Found\] Issue in .kibana index when checking upgrade to ES 2.0](https://discuss.elastic.co/t/from-found-issue-in-kibana-index-when-checking-upgrade-to-es-2-0/33675)

<div class="topic-metadata">

**Author:** [@erikthered](https://discuss.elastic.co/u/erikthered)\
**Replies:** 7\
**Last updated:** [May 18, 2016, 2:06pm UTC](https://discuss.elastic.co/t/from-found-issue-in-kibana-index-when-checking-upgrade-to-es-2-0/33675 "2016-05-18T14:06:20Z")

</div>

Continuing the discussion from Issue in .kibana index when checking upgrade to ES 2.0:

[Previous page](https://discuss.elastic.co/top.md?page=722&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=724&per_page=50&period=all)
