# Top

**URL:** https://discuss.elastic.co/top.md?page=725&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 726

---

## [Scaleup (adding CPU) of ES node](https://discuss.elastic.co/t/scaleup-adding-cpu-of-es-node/255812)

<div class="topic-metadata">

**Author:** [@Shilpa\_S\_Shetty](https://discuss.elastic.co/u/Shilpa_S_Shetty)\
**Replies:** 8\
**Last updated:** [November 19, 2020, 8:02am UTC](https://discuss.elastic.co/t/scaleup-adding-cpu-of-es-node/255812 "2020-11-19T08:02:03Z")

</div>

I have requirement to add CPU to elastic search ,was looking into the specific document.Is it possible to add CPU to exisiting elastic search .New to elastic search but concepts are saying NO.Am I right or can v add more…

---

## [Failed to get local cluster state Critical issue](https://discuss.elastic.co/t/failed-to-get-local-cluster-state-critical-issue/188205)

<div class="topic-metadata">

**Author:** [@jiouser](https://discuss.elastic.co/u/jiouser)\
**Replies:** 8\
**Last updated:** [July 3, 2019, 7:37am UTC](https://discuss.elastic.co/t/failed-to-get-local-cluster-state-critical-issue/188205 "2019-07-03T07:37:36Z")

</div>

I have 30+ client putting data in 60 data node ES cluster all running on physical machine. Around 15tb data get inserted daily in ES with retention of 2 days. Heavy indexing happens on 3 main indexes which are roll over …

---

## [Document-level security query failing](https://discuss.elastic.co/t/document-level-security-query-failing/73763)

<div class="topic-metadata">

**Author:** [@jmcginty](https://discuss.elastic.co/u/jmcginty)\
**Replies:** 8\
**Last updated:** [February 3, 2017, 4:24pm UTC](https://discuss.elastic.co/t/document-level-security-query-failing/73763 "2017-02-03T16:24:33Z")

</div>

Hi, I want to add a document level filter that uses user metadata. My user metadata is defined as: "metadata": { "sids": \[1,2,3\] } } My role for the user is defined as: { "cluster": \[ "all" \], "indices": \[ { …

---

## [Creating ES Cluster with dedicated masters](https://discuss.elastic.co/t/creating-es-cluster-with-dedicated-masters/65742)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 8\
**Last updated:** [November 14, 2016, 6:34am UTC](https://discuss.elastic.co/t/creating-es-cluster-with-dedicated-masters/65742 "2016-11-14T06:34:29Z")

</div>

We are planning to create ES cluster with about 10 data nodes and 3 dedicated masters and we want to dockerize our cluster. Following is how we are planning to configure: Let's say there are only 3 nodes in the cluster…

---

## [Unabale to star logstash as a service](https://discuss.elastic.co/t/unabale-to-star-logstash-as-a-service/135673)

<div class="topic-metadata">

**Author:** [@Bechir\_Taleb\_Ali](https://discuss.elastic.co/u/Bechir_Taleb_Ali)\
**Replies:** 2\
**Last updated:** [June 25, 2018, 3:05pm UTC](https://discuss.elastic.co/t/unabale-to-star-logstash-as-a-service/135673 "2018-06-25T15:05:31Z")

</div>

Hello, My Environement includes: Logstash version: 6.2.4 Operating System : RedHat Entreprise Linux Server release 6.6. I install Logstash form rpm file but while starting the deamon, I get the following error: Does…

---

## [Security\_exception on Kibana after x-pack installation](https://discuss.elastic.co/t/security-exception-on-kibana-after-x-pack-installation/108766)

<div class="topic-metadata">

**Author:** [@koalabear974](https://discuss.elastic.co/u/koalabear974)\
**Replies:** 2\
**Last updated:** [November 23, 2017, 9:11am UTC](https://discuss.elastic.co/t/security-exception-on-kibana-after-x-pack-installation/108766 "2017-11-23T09:11:29Z")

</div>

Hallo ! Just installed x-pack and generated the password with the setup-password script. I can access elasticsearch and kibana via their simple htaccess with their respectiv password, so far so good. Now in kibana con…

---

## [Logs and data directories are not created by Debian installation for 6.1.x](https://discuss.elastic.co/t/logs-and-data-directories-are-not-created-by-debian-installation-for-6-1-x/112129)

<div class="topic-metadata">

**Author:** [@lcanas](https://discuss.elastic.co/u/lcanas)\
**Replies:** 1\
**Last updated:** [December 18, 2017, 3:10am UTC](https://discuss.elastic.co/t/logs-and-data-directories-are-not-created-by-debian-installation-for-6-1-x/112129 "2017-12-18T03:10:08Z")

</div>

Hey guys, I'm playing with Ansible to get Elasticsearch 6.1 + Kibana up & running in a fresh Debian 9.x installation. I've followed the steps at https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html b…

---

## [Elastic APM not working with .net WCF service](https://discuss.elastic.co/t/elastic-apm-not-working-with-net-wcf-service/290574)

<div class="topic-metadata">

**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\
**Replies:** 6\
**Last updated:** [December 7, 2021, 2:37pm UTC](https://discuss.elastic.co/t/elastic-apm-not-working-with-net-wcf-service/290574 "2021-12-07T14:37:33Z")

</div>

Hi Team, Elastic APM not working with .net WCF service. Please help me how to configure elastic .net apm agent with wcf service. Its working fine with mvc web application, but not with wcf service. My application fet…

---

## [User Limits on queries](https://discuss.elastic.co/t/user-limits-on-queries/46552)

<div class="topic-metadata">

**Author:** [@lawndart](https://discuss.elastic.co/u/lawndart)\
**Replies:** 6\
**Last updated:** [April 7, 2016, 3:33pm UTC](https://discuss.elastic.co/t/user-limits-on-queries/46552 "2016-04-07T15:33:04Z")

</div>

I have an 8 data node ES cluster (a development one with about 4TB of data in 2 billion documents) with Kibana attached and I'm looking for a way to limit the size or scope of the queries that Kibana can request. I've ma…

---

## [Defining multiple Elasticsearch URL on kibana.yml](https://discuss.elastic.co/t/defining-multiple-elasticsearch-url-on-kibana-yml/155883)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 4\
**Last updated:** [November 10, 2018, 6:10am UTC](https://discuss.elastic.co/t/defining-multiple-elasticsearch-url-on-kibana-yml/155883 "2018-11-10T06:10:21Z")

</div>

HI, I have 2 master node and i want to configure both the ES URL into my kibana.yml . So that when any one of my master get down kibana will point another master. How can i do this.

---

## [All shards are unassigned, no index name in \_cat/shards](https://discuss.elastic.co/t/all-shards-are-unassigned-no-index-name-in--cat-shards/71455)

<div class="topic-metadata">

**Author:** [@George\_Luka](https://discuss.elastic.co/u/George_Luka)\
**Replies:** 4\
**Last updated:** [January 13, 2017, 3:19am UTC](https://discuss.elastic.co/t/all-shards-are-unassigned-no-index-name-in--cat-shards/71455 "2017-01-13T03:19:43Z")

</div>

Hi All, After running the \_cat/shards command I get the below, warning 3 p STARTED 0 160b 10.0.0.4 Karl Mordo warning 3 r UNASSIGNED warning 2 p STARTED 0 160b 10.0.0.4 Karl Mordo warn…

---

## [Unknown key for a VALUE\_STRING in \[Name\]](https://discuss.elastic.co/t/unknown-key-for-a-value-string-in-name/175365)

<div class="topic-metadata">

**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\
**Replies:** 1\
**Last updated:** [April 4, 2019, 9:44am UTC](https://discuss.elastic.co/t/unknown-key-for-a-value-string-in-name/175365 "2019-04-04T09:44:20Z")

</div>

After successfully loading data into my Elasticsearch server (I use ElasticSearch 6.7.0), this is the response I receive when I send a GET request to the URL localhost:9200/bank/: \> { "bank": { "aliases": {}, …

---

## [Logs UI beta, how it works !?](https://discuss.elastic.co/t/logs-ui-beta-how-it-works/157430)

<div class="topic-metadata">

**Author:** [@dimuskin](https://discuss.elastic.co/u/dimuskin)\
**Replies:** 7\
**Last updated:** [January 3, 2019, 10:22am UTC](https://discuss.elastic.co/t/logs-ui-beta-how-it-works/157430 "2019-01-03T10:22:02Z")

</div>

Hello, I finally upgraded to ES 6.5 and was pleasantly surprised by the innovations. Really liked the feature Logs UI (watching logs in real time), but unfortunately I did not find a description of her work. Documenta…

---

## [Using Kibana to forward events as SNMP traps](https://discuss.elastic.co/t/using-kibana-to-forward-events-as-snmp-traps/90312)

<div class="topic-metadata">

**Author:** [@turnerj](https://discuss.elastic.co/u/turnerj)\
**Replies:** 2\
**Last updated:** [June 22, 2017, 7:21am UTC](https://discuss.elastic.co/t/using-kibana-to-forward-events-as-snmp-traps/90312 "2017-06-22T07:21:04Z")

</div>

Hi, I'm new to Kibana, but I've been asked to find a solution where syslogs sent into Kibana are forwarded on to CA Spectrum as SNMP traps. This is to simplify a convoluted solution we have right now where syslog messa…

---

## [How to disable client certificate checks?](https://discuss.elastic.co/t/how-to-disable-client-certificate-checks/341365)

<div class="topic-metadata">

**Author:** [@nick\_harper1](https://discuss.elastic.co/u/nick_harper1)\
**Replies:** 3\
**Last updated:** [August 23, 2023, 10:54am UTC](https://discuss.elastic.co/t/how-to-disable-client-certificate-checks/341365 "2023-08-23T10:54:39Z")

</div>

Is it possible to disable the server from checking the clients? Even when I have this set: xpack.security.http.ssl.client\_authentication: none When I try to import anything using a script I get this: at java.lang.Thr…

---

## [Unable to generate export - Kibana 7.2.0](https://discuss.elastic.co/t/unable-to-generate-export-kibana-7-2-0/188692)

<div class="topic-metadata">

**Author:** [@Ron70](https://discuss.elastic.co/u/Ron70)\
**Replies:** 3\
**Last updated:** [July 4, 2019, 11:57am UTC](https://discuss.elastic.co/t/unable-to-generate-export-kibana-7-2-0/188692 "2019-07-04T11:57:23Z")

</div>

Hi, when I try to export all objects in the "Saved Objects" screen using the "Export xx objects" button, I get the error "Unable to generate export". I did not change anything in the shown "Export dialog", just press "E…

---

## [Logstash crashes when converting fields to ECS Format](https://discuss.elastic.co/t/logstash-crashes-when-converting-fields-to-ecs-format/165306)

<div class="topic-metadata">

**Author:** [@olatunde.tokun](https://discuss.elastic.co/u/olatunde.tokun)\
**Replies:** 3\
**Last updated:** [January 23, 2019, 2:30pm UTC](https://discuss.elastic.co/t/logstash-crashes-when-converting-fields-to-ecs-format/165306 "2019-01-23T14:30:03Z")

</div>

Got some logstash errors while converting fields to the Elastic Common Schema (ECS). Logstash version: logstash 6.0.0 The goal is to rename a source field into an ecs compliant field e.g \[destination\]\[field\] echo '{"s…

---

## [Flush\_Size & max\_retry\_item count metrics!](https://discuss.elastic.co/t/flush-size-max-retry-item-count-metrics/28093)

<div class="topic-metadata">

**Author:** [@sreeram](https://discuss.elastic.co/u/sreeram)\
**Replies:** 3\
**Last updated:** [March 23, 2016, 10:18am UTC](https://discuss.elastic.co/t/flush-size-max-retry-item-count-metrics/28093 "2016-03-23T10:18:25Z")

</div>

I see flush\_Size & max\_retry\_item default count as 5000. what this 5000 means? 5000 bytes? 5000 log count ?

---

## [How to use Distributed tracing in with elastic apm in non .net core application?](https://discuss.elastic.co/t/how-to-use-distributed-tracing-in-with-elastic-apm-in-non-net-core-application/197356)

<div class="topic-metadata">

**Author:** [@sonammarda](https://discuss.elastic.co/u/sonammarda)\
**Replies:** 6\
**Last updated:** [September 5, 2019, 4:58am UTC](https://discuss.elastic.co/t/how-to-use-distributed-tracing-in-with-elastic-apm-in-non-net-core-application/197356 "2019-09-05T04:58:08Z")

</div>

Kibana version: 7.3 Elasticsearch version: 7.3 APM Server version: 7.2 APM Agent language and version: Using for .NET project. My project is in .Net Framework 4.6.1. I can capture transactions now in my project. Now…

---

## [Unassigned shards due to FailedNodeException](https://discuss.elastic.co/t/unassigned-shards-due-to-failednodeexception/79294)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 2\
**Last updated:** [March 24, 2017, 4:34pm UTC](https://discuss.elastic.co/t/unassigned-shards-due-to-failednodeexception/79294 "2017-03-24T16:34:21Z")

</div>

Started a couple of simple 5.2.0 clusters of three identical nodes, where each node is master eligible and has data. There are no restarts or rebalancing going on. Data set is relatively small. The indexing process for…

---

## [Kibana 5: Data Table (Add/Remove or Show/Hide Fields like in Kibana 3)](https://discuss.elastic.co/t/kibana-5-data-table-add-remove-or-show-hide-fields-like-in-kibana-3/82169)

<div class="topic-metadata">

**Author:** [@SSB](https://discuss.elastic.co/u/SSB)\
**Replies:** 3\
**Last updated:** [May 4, 2017, 3:10pm UTC](https://discuss.elastic.co/t/kibana-5-data-table-add-remove-or-show-hide-fields-like-in-kibana-3/82169 "2017-05-04T15:10:04Z")

</div>

Hello, I would like to know how we can have Data Table with options to Show/Hide (Add/remove) Fields of Data Table? On the left of the data table, you do have a list of All available fields/Current fields then you tick…

---

## [Kibana doesn't load integrations, and gets stuck loading them](https://discuss.elastic.co/t/kibana-doesnt-load-integrations-and-gets-stuck-loading-them/368913)

<div class="topic-metadata">

**Author:** [@slapjackuser](https://discuss.elastic.co/u/slapjackuser)\
**Replies:** 7\
**Last updated:** [November 19, 2024, 10:54am UTC](https://discuss.elastic.co/t/kibana-doesnt-load-integrations-and-gets-stuck-loading-them/368913 "2024-11-19T10:54:08Z")

</div>

Hey I have a problem that has been bothering me for sometime now and I would really use some help here. I am running elk stack using docker on an amazon ec2 instance (ubuntu 22.04) as a siem, the problem is when I try t…

---

## [ERROR: Unknown command \[http\] when executing bin/elasticsearch-certutil http](https://discuss.elastic.co/t/error-unknown-command-http-when-executing-bin-elasticsearch-certutil-http/234993)

<div class="topic-metadata">

**Author:** [@Shan\_Chathusanda](https://discuss.elastic.co/u/Shan_Chathusanda)\
**Replies:** 0\
**Last updated:** [May 29, 2020, 10:20pm UTC](https://discuss.elastic.co/t/error-unknown-command-http-when-executing-bin-elasticsearch-certutil-http/234993 "2020-05-29T22:20:36Z")

</div>

I am trying to encrypt HTTP client communications as the doc in https://www.elastic.co/guide/en/elasticsearch/reference/7.x/configuring-tls.html#tls-http. But when I execute this command it prompts an error as follows. …

---

## [Index per user or Index for all users?](https://discuss.elastic.co/t/index-per-user-or-index-for-all-users/47633)

<div class="topic-metadata">

**Author:** [@living\_jordi](https://discuss.elastic.co/u/living_jordi)\
**Replies:** 0\
**Last updated:** [April 18, 2016, 9:34am UTC](https://discuss.elastic.co/t/index-per-user-or-index-for-all-users/47633 "2016-04-18T09:34:53Z")

</div>

I've been listening to everybody saying that's better to share a same index for all users instead of a index per user. So each user would an alias. From then on, I've ever guess that's the best solution for several rea…

---

## [Problem with ansible-beats and processors config](https://discuss.elastic.co/t/problem-with-ansible-beats-and-processors-config/213690)

<div class="topic-metadata">

**Author:** [@blabu23](https://discuss.elastic.co/u/blabu23)\
**Replies:** 3\
**Last updated:** [January 3, 2020, 5:05pm UTC](https://discuss.elastic.co/t/problem-with-ansible-beats-and-processors-config/213690 "2020-01-03T17:05:59Z")

</div>

Hi there! I am trying to install/configure filebeat with the ansible role from elastic. My playbook looks like this: - hosts: filebeat\_hosts roles: - role: role-beats vars: use\_repository: true beats\_ve…

---

## [Elasticsearch 1.x から 6.x へ upgrade する際の text/keyword(analyzed/not\_analyzed) の共存方法](https://discuss.elastic.co/t/elasticsearch-1-x-6-x-upgrade-text-keyword-analyzed-not-analyzed/162050)

<div class="topic-metadata">

**Author:** [@MasakiAndo](https://discuss.elastic.co/u/MasakiAndo)\
**Replies:** 4\
**Last updated:** [December 25, 2018, 10:11am UTC](https://discuss.elastic.co/t/elasticsearch-1-x-6-x-upgrade-text-keyword-analyzed-not-analyzed/162050 "2018-12-25T10:11:22Z")

</div>

今までバージョン1.xを使用していましたが、バージョン6.4にアップデートする予定です。 現在このアップデートの作業中で、index templateを作成する際に、 1.xのバージョンのindex templateがそのままでは使えないため、 貴社のドキュメントを確認ながらstringをtextやkeywordに置き換えたりしてアップデート作業を進めているのですが、 単純にstringをtextやkeywordに置き換えるだけ…

---

## [障害時のBeats動作について教えてください](https://discuss.elastic.co/t/beats/113133)

<div class="topic-metadata">

**Author:** [@shingo](https://discuss.elastic.co/u/shingo)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 1:35am UTC](https://discuss.elastic.co/t/beats/113133 "2018-01-10T01:35:31Z")

</div>

みなさま、はじめまして。最近Elasticデビューしました。 初投稿となりますので、至らない点がございましたらご容赦ください。 \<環境\> ・Elastic Server (以降、ES) 6.x ・Beats (Metric、File、Packet） 6.1 ・Ubuntu 16.04.2 Server（ES、Beats双方とも) \[ES\] \<------- \[Beats\] \<質問\> ・ESサーバ障害時やネットワーク障害な…

---

## [Insert and update relational data with denormalization](https://discuss.elastic.co/t/insert-and-update-relational-data-with-denormalization/202556)

<div class="topic-metadata">

**Author:** [@meynety](https://discuss.elastic.co/u/meynety)\
**Replies:** 1\
**Last updated:** [October 9, 2019, 11:33am UTC](https://discuss.elastic.co/t/insert-and-update-relational-data-with-denormalization/202556 "2019-10-09T11:33:42Z")

</div>

Hello, As a new ES user, I'm facing some questions about data structure, denormalization and what comes with it : Considering a simple 1:n data structure, like Device -\> Record, where a Device produces a high number of…

---

## [{"min\_doc\_count"} on Unique Count aggregation](https://discuss.elastic.co/t/min-doc-count-on-unique-count-aggregation/174751)

<div class="topic-metadata">

**Author:** [@elk\_user188](https://discuss.elastic.co/u/elk_user188)\
**Replies:** 1\
**Last updated:** [April 3, 2019, 6:53pm UTC](https://discuss.elastic.co/t/min-doc-count-on-unique-count-aggregation/174751 "2019-04-03T18:53:25Z")

</div>

Hi! I'd like to know a simple thing: in a visualization (e.g. Table visualization), using a Count aggregation, I can filter the results by writing {"min\_doc\_count":2} in the JSON input field. Unfortunately, the same s…

---

## [Performance of a wildcard index search for \_id](https://discuss.elastic.co/t/performance-of-a-wildcard-index-search-for-id/249931)

<div class="topic-metadata">

**Author:** [@Munawwar1](https://discuss.elastic.co/u/Munawwar1)\
**Replies:** 8\
**Last updated:** [October 14, 2020, 7:33am UTC](https://discuss.elastic.co/t/performance-of-a-wildcard-index-search-for-id/249931 "2020-10-14T07:33:49Z")

</div>

Hi all. I am doing a term query search for \_id field (which happens to be a uuid in my case) across all indexes via a wildcard index name search. e.g. GET http://elasticsearch.endpoint/prod-\*/\_search { "query": { …

---

## [\[SOLVED\] Increment field value in logstash filter](https://discuss.elastic.co/t/solved-increment-field-value-in-logstash-filter/166757)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 3\
**Last updated:** [February 4, 2019, 9:42am UTC](https://discuss.elastic.co/t/solved-increment-field-value-in-logstash-filter/166757 "2019-02-04T09:42:29Z")

</div>

Hello, I have a data taken from the filter elasticsearch query. elasticsearch { hosts =\> \["localhost:9200"\] index =\> "elasticinput" query =\> '\_id=%{fingerprint}' fields =\> { "request\_ip\_count" =\> "new\_request\_ip\_c…

---

## [Set default to not\_analyzed](https://discuss.elastic.co/t/set-default-to-not-analyzed/60911)

<div class="topic-metadata">

**Author:** [@arsenepark](https://discuss.elastic.co/u/arsenepark)\
**Replies:** 3\
**Last updated:** [September 21, 2016, 11:03am UTC](https://discuss.elastic.co/t/set-default-to-not-analyzed/60911 "2016-09-21T11:03:58Z")

</div>

hi, there, I know ES default setting is "analyzed", how to set it to "not\_analyzed", 'cause I want to try term-search with most of my fields. Thanks, Dennis

---

## [Filebeat hangs when logstash dies](https://discuss.elastic.co/t/filebeat-hangs-when-logstash-dies/33406)

<div class="topic-metadata">

**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\
**Replies:** 3\
**Last updated:** [November 3, 2015, 7:44am UTC](https://discuss.elastic.co/t/filebeat-hangs-when-logstash-dies/33406 "2015-11-03T07:44:48Z")

</div>

I'm seeing the connection made to the logstash server stuck in a state of CLOSE\_WAIT when logstash goes offline. My expectation is that filebeat would try to re-establish the connection periodically. Anyone else experi…

---

## [Each first different query is slow](https://discuss.elastic.co/t/each-first-different-query-is-slow/14035)

<div class="topic-metadata">

**Author:** [@Lucian\_Precup](https://discuss.elastic.co/u/Lucian_Precup)\
**Replies:** 3\
**Last updated:** [October 22, 2013, 1:35pm UTC](https://discuss.elastic.co/t/each-first-different-query-is-slow/14035 "2013-10-22T13:35:49Z")

</div>

Hello Elasticsearch and Elasticsearch users, I encounter a strange issue with query performance. I am able to reproduce this behavior with simple match queries, without using filters, facets or sorts. In summary, th…

---

## [A node "Received response for a request that has timed out, sent \[24704ms\] ago, timed out \[9704ms\] ago, action \[cluster: monitor / nodes / stats \[n\]\]," stuck entire cluster](https://discuss.elastic.co/t/a-node-received-response-for-a-request-that-has-timed-out-sent-24704ms-ago-timed-out-9704ms-ago-action-cluster-monitor-nodes-stats-n-stuck-entire-cluster/82653)

<div class="topic-metadata">

**Author:** [@zcola](https://discuss.elastic.co/u/zcola)\
**Replies:** 2\
**Last updated:** [April 19, 2017, 3:22am UTC](https://discuss.elastic.co/t/a-node-received-response-for-a-request-that-has-timed-out-sent-24704ms-ago-timed-out-9704ms-ago-action-cluster-monitor-nodes-stats-n-stuck-entire-cluster/82653 "2017-04-19T03:22:59Z")

</div>

Elasticsearch version: 2.4.4 Plugins installed: \[\] analysis-ik, graph, kopf, license, marvel-agent, repository-hdfs JVM version: ocr 1.8.0\_66 OS version: Debian 8 Description of the problem including expected versus…

---

## [How elasticsearch supports regex search and its performance](https://discuss.elastic.co/t/how-elasticsearch-supports-regex-search-and-its-performance/12033)

<div class="topic-metadata">

**Author:** [@Wenbin\_Li](https://discuss.elastic.co/u/Wenbin_Li)\
**Replies:** 2\
**Last updated:** [May 23, 2013, 10:31am UTC](https://discuss.elastic.co/t/how-elasticsearch-supports-regex-search-and-its-performance/12033 "2013-05-23T10:31:35Z")

</div>

Hi, I want to use elasticsearch to index large amount log data and search using regex. So I want to know how elasticsearch support the regex search for millions of raw data. I think it could not be matching all …

---

## [\_dateparsefailure in ISO8601 date strings](https://discuss.elastic.co/t/dateparsefailure-in-iso8601-date-strings/292799)

<div class="topic-metadata">

**Author:** [@bitnapper](https://discuss.elastic.co/u/bitnapper)\
**Replies:** 7\
**Last updated:** [January 3, 2022, 11:40am UTC](https://discuss.elastic.co/t/dateparsefailure-in-iso8601-date-strings/292799 "2022-01-03T11:40:01Z")

</div>

I want to pull logs from an mssql server and parse their date strings. unfortunately I can not figure out why it can not parse the date. My filter looks like this: filter { date { match =\> \[ "evtime", "ISO8601" \] tim…

---

## [Enum Indexing As Number Instead Of Text](https://discuss.elastic.co/t/enum-indexing-as-number-instead-of-text/234624)

<div class="topic-metadata">

**Author:** [@Nathaniel\_Jones](https://discuss.elastic.co/u/Nathaniel_Jones)\
**Replies:** 1\
**Last updated:** [May 28, 2020, 12:24am UTC](https://discuss.elastic.co/t/enum-indexing-as-number-instead-of-text/234624 "2020-05-28T00:24:47Z")

</div>

We just upgraded from Elasticsearch/Nest 5.1.1 to 7.6.2 and are seeing a difference in how C# enums are being indexed. Previously, the JsonConverter attribute would store the enum in the index as a text string that we wo…

---

## [Vega Boxplot](https://discuss.elastic.co/t/vega-boxplot/123065)

<div class="topic-metadata">

**Author:** [@carlosvega](https://discuss.elastic.co/u/carlosvega)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 2:50am UTC](https://discuss.elastic.co/t/vega-boxplot/123065 "2018-03-09T02:50:38Z")

</div>

Hi, I'm trying to make this example work with elasticsearch data but I can't manage to do it. https://vega.github.io/editor/#/examples/vega/box-plot My documents are of the form: "properties" : { "timestamp" : "date…

---

## [Error publishing events from filebeat](https://discuss.elastic.co/t/error-publishing-events-from-filebeat/67759)

<div class="topic-metadata">

**Author:** [@aparadka](https://discuss.elastic.co/u/aparadka)\
**Replies:** 7\
**Last updated:** [December 21, 2016, 5:50pm UTC](https://discuss.elastic.co/t/error-publishing-events-from-filebeat/67759 "2016-12-21T17:50:30Z")

</div>

This is the error i'm encountering while sending the file from FB--\>LS--\>ES. This is what the LS console is showing

---

## [How to solve grokparsefailure in Logstash](https://discuss.elastic.co/t/how-to-solve-grokparsefailure-in-logstash/54055)

<div class="topic-metadata">

**Author:** [@keya](https://discuss.elastic.co/u/keya)\
**Replies:** 1\
**Last updated:** [June 29, 2016, 6:06am UTC](https://discuss.elastic.co/t/how-to-solve-grokparsefailure-in-logstash/54055 "2016-06-29T06:06:42Z")

</div>

Hi, I am trying to parse nginx error logs in Logstash. I have tested the grok pattern on http://grokdebug.herokuapp.com/ and it does not give any error. But when I try to use the same log sample and pattern in logstash…

---

## [Logstash to send logs to multiple locations](https://discuss.elastic.co/t/logstash-to-send-logs-to-multiple-locations/225784)

<div class="topic-metadata">

**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\
**Replies:** 4\
**Last updated:** [April 17, 2020, 2:37am UTC](https://discuss.elastic.co/t/logstash-to-send-logs-to-multiple-locations/225784 "2020-04-17T02:37:19Z")

</div>

I have seen several people ask this question, but there has been no complete solution delivered. Several people have said "just do this" or "just do that" without telling us what "this" or "that" are. So the requiremen…

---

## [K8S Install Fails on version \< 7.2](https://discuss.elastic.co/t/k8s-install-fails-on-version-7-2/194476)

<div class="topic-metadata">

**Author:** [@engineertdog](https://discuss.elastic.co/u/engineertdog)\
**Replies:** 4\
**Last updated:** [August 10, 2019, 7:17am UTC](https://discuss.elastic.co/t/k8s-install-fails-on-version-7-2/194476 "2019-08-10T07:17:28Z")

</div>

I am able to install v7.2 with the statefulset config that is listed below, but for a service I'm running, it hasn't been updated to support v7 yet. Currently, the service only supports v6.3. The following is the error I…

---

## [Metric beat kubernetes example not showing pod metrics](https://discuss.elastic.co/t/metric-beat-kubernetes-example-not-showing-pod-metrics/189257)

<div class="topic-metadata">

**Author:** [@csinc](https://discuss.elastic.co/u/csinc)\
**Replies:** 1\
**Last updated:** [July 19, 2019, 10:12pm UTC](https://discuss.elastic.co/t/metric-beat-kubernetes-example-not-showing-pod-metrics/189257 "2019-07-19T22:12:49Z")

</div>

Hi, I am just trying out metricbeat on kubernetes. I am using the provided example located at https://raw.githubusercontent.com/elastic/beats/7.2/deploy/kubernetes/metricbeat-kubernetes.yaml by only changing creds and c…

---

## [Jdbc and consistence of data](https://discuss.elastic.co/t/jdbc-and-consistence-of-data/147756)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [September 10, 2018, 4:19pm UTC](https://discuss.elastic.co/t/jdbc-and-consistence-of-data/147756 "2018-09-10T16:19:46Z")

</div>

I am doing simple test. connected to oracle db using jdbc and pulled two field name,date total 3000 record got pulled in to logstash. which are same when I check on oracle db. ran that automatically few time as my conf…

---

## [Curator, delete some data from within index](https://discuss.elastic.co/t/curator-delete-some-data-from-within-index/130041)

<div class="topic-metadata">

**Author:** [@papebadiane](https://discuss.elastic.co/u/papebadiane)\
**Replies:** 4\
**Last updated:** [May 1, 2018, 9:59pm UTC](https://discuss.elastic.co/t/curator-delete-some-data-from-within-index/130041 "2018-05-01T21:59:21Z")

</div>

Hello, i want to delete some rows older that 10 days from my index with Elastic Curator with the following action actions: 1: action: delete\_indices description: \>- Delete indices older than 10 days bas…

---

## [Low level REST API : bulk request and array problem](https://discuss.elastic.co/t/low-level-rest-api-bulk-request-and-array-problem/119775)

<div class="topic-metadata">

**Author:** [@yutanpo](https://discuss.elastic.co/u/yutanpo)\
**Replies:** 4\
**Last updated:** [February 14, 2018, 1:44pm UTC](https://discuss.elastic.co/t/low-level-rest-api-bulk-request-and-array-problem/119775 "2018-02-14T13:44:09Z")

</div>

Dear all, I am currently working on ES 6.0, using the low rest client to communicate with an ES 6.0. I am wondering few things, among them : is it possible, via the low rest client, to get a response like this one af…

---

## [How to send logs from logstash to a remote Elasticsearch Server](https://discuss.elastic.co/t/how-to-send-logs-from-logstash-to-a-remote-elasticsearch-server/123517)

<div class="topic-metadata">

**Author:** [@Hanen](https://discuss.elastic.co/u/Hanen)\
**Replies:** 3\
**Last updated:** [March 12, 2018, 9:20pm UTC](https://discuss.elastic.co/t/how-to-send-logs-from-logstash-to-a-remote-elasticsearch-server/123517 "2018-03-12T21:20:06Z")

</div>

Hi, I have a server where I have installed logstash. I am trying to forward a log windows using winlogbeat to a remote Elasticsearch server. i specified the elasticserver's host address and ports in the output configur…

---

## [How to enable security on an existing 8.1 multi nodes docker cluster](https://discuss.elastic.co/t/how-to-enable-security-on-an-existing-8-1-multi-nodes-docker-cluster/299268)

<div class="topic-metadata">

**Author:** [@jean.bissonnette](https://discuss.elastic.co/u/jean.bissonnette)\
**Replies:** 5\
**Last updated:** [March 17, 2022, 2:07pm UTC](https://discuss.elastic.co/t/how-to-enable-security-on-an-existing-8-1-multi-nodes-docker-cluster/299268 "2022-03-17T14:07:33Z")

</div>

I have an existing 5 nodes podman cluster. 4 nodes are on one VM, another node is on another VM. Security is not enabled (xpack.security.enabled: false). I tried to setup security by calling: bin/Elasticsearch-setup-p…

---

## [Quickstart: tolerations issues](https://discuss.elastic.co/t/quickstart-tolerations-issues/266984)

<div class="topic-metadata">

**Author:** [@maxclac1](https://discuss.elastic.co/u/maxclac1)\
**Replies:** 5\
**Last updated:** [March 22, 2021, 9:07am UTC](https://discuss.elastic.co/t/quickstart-tolerations-issues/266984 "2021-03-22T09:07:25Z")

</div>

Hi! I have a 3-node Kubernetes cluster running with OpenStack VM (Ubuntu 20). I wanted to create an ElasticSearch Cluster but I have to say that I am a bit confused with the instructions, especially about setting up the…

[Previous page](https://discuss.elastic.co/top.md?page=724&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=726&per_page=50&period=all)
