# Top **URL:** https://discuss.elastic.co/top.md?page=771&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 772 --- ## [Best way to reindex very active index](https://discuss.elastic.co/t/best-way-to-reindex-very-active-index/84979)
**Author:** [@courtney](https://discuss.elastic.co/u/courtney)\ **Replies:** 3\ **Last updated:** [May 9, 2017, 11:13am UTC](https://discuss.elastic.co/t/best-way-to-reindex-very-active-index/84979 "2017-05-09T11:13:48Z")
When migrating to a new index, what's the best way to handle ensuring there's no differential between the two indexes and migrating aliases for zero downtime. So let's say we are adding 10k documents per second in an i… --- ## [Logstash jdbc multi input](https://discuss.elastic.co/t/logstash-jdbc-multi-input/74957)
**Author:** [@Greentea](https://discuss.elastic.co/u/Greentea)\ **Replies:** 3\ **Last updated:** [February 14, 2017, 10:28am UTC](https://discuss.elastic.co/t/logstash-jdbc-multi-input/74957 "2017-02-14T10:28:41Z")
Hi I am currently using logstash-plugin-jdbc to pull data from mysql to elasticsearch.I want to know how can I input multi table from mysql into same index? here is some of the code input { jdbc { # the contr… --- ## [How to run Logstash multiple instance](https://discuss.elastic.co/t/how-to-run-logstash-multiple-instance/46959)
**Author:** [@ggilat](https://discuss.elastic.co/u/ggilat)\ **Replies:** 8\ **Last updated:** [April 11, 2016, 9:23am UTC](https://discuss.elastic.co/t/how-to-run-logstash-multiple-instance/46959 "2016-04-11T09:23:01Z")
hello, in trying to run second logstash instance with a different config file (for syslog events) i'm getting this error: "Pipeline aborted due to error {:exception=\># how can i change the port so i want clash? t… --- ## [Tuning elasticsearch node client non-heap memory consumption](https://discuss.elastic.co/t/tuning-elasticsearch-node-client-non-heap-memory-consumption/21601)
**Author:** [@Itai\_Frenkel](https://discuss.elastic.co/u/Itai_Frenkel)\ **Replies:** 3\ **Last updated:** [January 13, 2015, 10:10pm UTC](https://discuss.elastic.co/t/tuning-elasticsearch-node-client-non-heap-memory-consumption/21601 "2015-01-13T22:10:33Z")
Hello, We are running a node client on each machine with small JVM heap -Xms384m -Xmx384m -Xss256k which is suitable for our use case. There are however another 285MB non-heap memory (676-389=285). How can this e… --- ## [Increasing ES search throughput](https://discuss.elastic.co/t/increasing-es-search-throughput/8750)
**Author:** [@sumitborar](https://discuss.elastic.co/u/sumitborar)\ **Replies:** 3\ **Last updated:** [August 22, 2012, 7:40pm UTC](https://discuss.elastic.co/t/increasing-es-search-throughput/8750 "2012-08-22T19:40:35Z")
I have 15 node cluster with 14 data nodes and 1 master node. We are indexing about 300M documents with 7 shards and 1 replica. Each node has 24G of RAM . Right now I am using mmapfs for index store and ES is using o… --- ## [Index Size is 4 times than a document size?](https://discuss.elastic.co/t/index-size-is-4-times-than-a-document-size/47272)
**Author:** [@vasa47](https://discuss.elastic.co/u/vasa47)\ **Replies:** 7\ **Last updated:** [April 19, 2016, 9:42am UTC](https://discuss.elastic.co/t/index-size-is-4-times-than-a-document-size/47272 "2016-04-19T09:42:49Z")
With this below setting and mapping I indexed a text file of 1.3MB and now my index size in data/clusters\_name/nodes/ size is almost 4 times. What is happening? what settings am I missing? "settings" : { … --- ## [Display sum of two valiues as percentage in Kibana 5.3](https://discuss.elastic.co/t/display-sum-of-two-valiues-as-percentage-in-kibana-5-3/84334)
**Author:** [@MikeyE](https://discuss.elastic.co/u/MikeyE)\ **Replies:** 2\ **Last updated:** [May 3, 2017, 11:47pm UTC](https://discuss.elastic.co/t/display-sum-of-two-valiues-as-percentage-in-kibana-5-3/84334 "2017-05-03T23:47:52Z")
Hi I apologize for my beginner question. I've created an index in elasticstack with contains all my servers and includes fields for server function, installed and used memory, example below: name, function, installed me… --- ## [Kibana Query Minus Operator](https://discuss.elastic.co/t/kibana-query-minus-operator/104053)
**Author:** [@ChrisChua](https://discuss.elastic.co/u/ChrisChua)\ **Replies:** 2\ **Last updated:** [October 17, 2017, 8:25am UTC](https://discuss.elastic.co/t/kibana-query-minus-operator/104053 "2017-10-17T08:25:21Z")
Hi, I am new to ELK , I have data inside elasticsearch and each record has these fields "Status", "Policy", "Testcase","OS",etc. I want to find out those "Policy","Testcase","OS" which have a "Status:start testing" but… --- ## [ES rally benchmarking for existing cluster on AWS](https://discuss.elastic.co/t/es-rally-benchmarking-for-existing-cluster-on-aws/250182)
**Author:** [@naga2](https://discuss.elastic.co/u/naga2)\ **Replies:** 4\ **Last updated:** [September 30, 2020, 6:50am UTC](https://discuss.elastic.co/t/es-rally-benchmarking-for-existing-cluster-on-aws/250182 "2020-09-30T06:50:39Z")
I want to benchmark Elastic cluster which was on AWS with ES Rally on local machine. I got the below error when tried with following benchmarking command. Input: esrally --track=data --target-hosts= \[cluster public ip… --- ## [Waiting for nodes to stop - timeout](https://discuss.elastic.co/t/waiting-for-nodes-to-stop-timeout/84134)
**Author:** [@iremmats](https://discuss.elastic.co/u/iremmats)\ **Replies:** 4\ **Last updated:** [May 1, 2017, 7:45pm UTC](https://discuss.elastic.co/t/waiting-for-nodes-to-stop-timeout/84134 "2017-05-01T19:45:06Z")
While resizing a three node cluster it doesn't show as completed action due to timeout when stopping nodes. Change memory per node from 4 GB to 8 GB Timeout for configuration change: 5h 33m Unexpected error during ste… --- ## [16Gb RAM / 8 cores : best config?](https://discuss.elastic.co/t/16gb-ram-8-cores-best-config/15062)
**Author:** [@Yann\_Barraud](https://discuss.elastic.co/u/Yann_Barraud)\ **Replies:** 4\ **Last updated:** [January 3, 2014, 10:34am UTC](https://discuss.elastic.co/t/16gb-ram-8-cores-best-config/15062 "2014-01-03T10:34:16Z")
Hi What would be the best cubic for ES running on a dedicated machine with 16 Gb of RAM & 8 cores ? Thanks, Yann -- You received this message because you are subscribed to the Google Groups "elasticsearch"… --- ## [Is this a bug？](https://discuss.elastic.co/t/is-this-a-bug/7990)
**Author:** [@zhouxiang](https://discuss.elastic.co/u/zhouxiang)\ **Replies:** 4\ **Last updated:** [June 13, 2012, 3:00am UTC](https://discuss.elastic.co/t/is-this-a-bug/7990 "2012-06-13T03:00:22Z")
yesterday the es didn't serve the query request.every request is time out.after restart the cluster it recovered.every request took much time to excute.And,the request num become too large,then the cpu usage very high. … --- ## [How to create mapping for index names begin with?](https://discuss.elastic.co/t/how-to-create-mapping-for-index-names-begin-with/76363)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [February 24, 2017, 7:53am UTC](https://discuss.elastic.co/t/how-to-create-mapping-for-index-names-begin-with/76363 "2017-02-24T07:53:20Z")
Hi, I have made a mapping like below for my indices begin with mylogs-; PUT mylogs-\* { "mappings": { "logfile": { "\_all": { "enabled": false }, "properties" : { "@timestamp" : { "type" : "dat… --- ## [ElasticSearch HTTP Server on Android?](https://discuss.elastic.co/t/elasticsearch-http-server-on-android/17715)
**Author:** [@SidM](https://discuss.elastic.co/u/SidM)\ **Replies:** 1\ **Last updated:** [May 25, 2014, 10:38pm UTC](https://discuss.elastic.co/t/elasticsearch-http-server-on-android/17715 "2014-05-25T22:38:21Z")
Hi, I am analyzing elastic search, i found it very useful .. But, i have some specific requirement, my application should run on desktop and android . For desktop, i am planning to use elastic search server and cl… --- ## [How to get a free basic license.key for building?](https://discuss.elastic.co/t/how-to-get-a-free-basic-license-key-for-building/157693)
**Author:** [@zyx\_0312](https://discuss.elastic.co/u/zyx_0312)\ **Replies:** 3\ **Last updated:** [November 23, 2018, 9:49am UTC](https://discuss.elastic.co/t/how-to-get-a-free-basic-license-key-for-building/157693 "2018-11-23T09:49:47Z")
Hi all: I want to create a elasticsearch release build by command: gradle assemble -Dbuild.snapshot=false But I get an error message like this: Property license.key must be set for release build I didn't find ho… --- ## [如何确定es集群需要增加节点了](https://discuss.elastic.co/t/es/84690)
**Author:** [@zhaochl](https://discuss.elastic.co/u/zhaochl)\ **Replies:** 3\ **Last updated:** [May 29, 2017, 2:47pm UTC](https://discuss.elastic.co/t/es/84690 "2017-05-29T14:47:22Z")
现有集群2个节点，CPU和内存都很高，想增加一个节点，不知道是不是会降低原来2台机器的负载了， 还有如何知道集群该扩展了，一般的机器节点数与文档总量关系是如何对应的了 多谢 --- ## [Zstandard compression support](https://discuss.elastic.co/t/zstandard-compression-support/75229)
**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\ **Replies:** 3\ **Last updated:** [February 16, 2017, 9:54am UTC](https://discuss.elastic.co/t/zstandard-compression-support/75229 "2017-02-16T09:54:18Z")
Hi there! I wanted to know if you planned to add support to Zstandard, an awesome (de)compression algorithm by Facebook? The benchmarks show impressive speed/compression rate, compared to zlib. It would be very nic… --- ## [Enable login on kibana dashboard and Xpack Fee](https://discuss.elastic.co/t/enable-login-on-kibana-dashboard-and-xpack-fee/102267)
**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\ **Replies:** 5\ **Last updated:** [September 30, 2017, 5:45am UTC](https://discuss.elastic.co/t/enable-login-on-kibana-dashboard-and-xpack-fee/102267 "2017-09-30T05:45:42Z")
Hi experts I would like to create a login on kibana. Follow the topic has created, i see that without xpack i'll not be able to create a login form. So my question is ulti now i still have to use xpack to create a log… --- ## [KV Filter to include spaces in selected fields/values](https://discuss.elastic.co/t/kv-filter-to-include-spaces-in-selected-fields-values/86733)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 5\ **Last updated:** [May 26, 2017, 2:49pm UTC](https://discuss.elastic.co/t/kv-filter-to-include-spaces-in-selected-fields-values/86733 "2017-05-26T14:49:24Z")
My log line has a field with "\[reasonPhrase : Internal Server Error\]" as value. I need to extract the reasonPhrase field and value as Internal Server Error. But with the current filter or the default kv filter, only Int… --- ## [High CPU usage question](https://discuss.elastic.co/t/high-cpu-usage-question/10941)
**Author:** [@snmaynard](https://discuss.elastic.co/u/snmaynard)\ **Replies:** 5\ **Last updated:** [May 19, 2015, 6:07pm UTC](https://discuss.elastic.co/t/high-cpu-usage-question/10941 "2015-05-19T18:07:10Z")
We've been using elasticsearch in production for a month or so, and I'm seeing strange CPU usage patterns, with really high CPU for periods, followed by really low CPU for a long time. These patterns cause timeouts … --- ## [Is it possible to combine some MultiSearchResponse to one SearchResponse?](https://discuss.elastic.co/t/is-it-possible-to-combine-some-multisearchresponse-to-one-searchresponse/8449)
**Author:** [@Yang](https://discuss.elastic.co/u/Yang)\ **Replies:** 5\ **Last updated:** [March 7, 2013, 8:47am UTC](https://discuss.elastic.co/t/is-it-possible-to-combine-some-multisearchresponse-to-one-searchresponse/8449 "2013-03-07T08:47:34Z")
Dear all, I met a ver special use case, here is my example: I use user's name as a value of elasticsearch index, and the document type as a value of elasticsearch type, here we go: index: john type: email … --- ## [1 second index refresh and eventual consistency between nodes](https://discuss.elastic.co/t/1-second-index-refresh-and-eventual-consistency-between-nodes/5242)
**Author:** [@Spring\_Ninja](https://discuss.elastic.co/u/Spring_Ninja)\ **Replies:** 5\ **Last updated:** [August 25, 2011, 6:09pm UTC](https://discuss.elastic.co/t/1-second-index-refresh-and-eventual-consistency-between-nodes/5242 "2011-08-25T18:09:00Z")
Hi there, Could someone clarify the index refresh behavior. I understand and see in my app and tests that the writes are made visible to my (currently) single node app at 1 second intervals. My app will be a mult… --- ## [Elasticsearch puppet host config](https://discuss.elastic.co/t/elasticsearch-puppet-host-config/83396)
**Author:** [@meaglin](https://discuss.elastic.co/u/meaglin)\ **Replies:** 6\ **Last updated:** [April 25, 2017, 8:17am UTC](https://discuss.elastic.co/t/elasticsearch-puppet-host-config/83396 "2017-04-25T08:17:31Z")
Hello Everyone, I'm working on getting elasticsearch to work using puppet. I've been able to get it installed but not to get it to accept connections. This is my current puppet elasticsearch manifest: class essearc… --- ## [Logstash Oracle JDBC issue](https://discuss.elastic.co/t/logstash-oracle-jdbc-issue/71814)
**Author:** [@anusha\_samarakkodi](https://discuss.elastic.co/u/anusha_samarakkodi)\ **Replies:** 6\ **Last updated:** [January 17, 2017, 9:19am UTC](https://discuss.elastic.co/t/logstash-oracle-jdbc-issue/71814 "2017-01-17T09:19:33Z")
could you please help to resolve this issue???? Here is my logstash configuration file input { jdbc { jdbc\_validate\_connection =\> true jdbc\_connection\_string =\> "jdbc:oracle:thin:@172.22.28.52:1521/prod" … --- ## [Deleted cluster,cant restore index from non-ES snapshot (disk backup)](https://discuss.elastic.co/t/deleted-cluster-cant-restore-index-from-non-es-snapshot-disk-backup/32905)
**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\ **Replies:** 8\ **Last updated:** [October 26, 2015, 7:21pm UTC](https://discuss.elastic.co/t/deleted-cluster-cant-restore-index-from-non-es-snapshot-disk-backup/32905 "2015-10-26T19:21:50Z")
Hello, we managed to delete our cluster. And we have no good backup.(I know that we fucked up \[:smile:\] ) Well, to be more precise, ES decided to delete all data after we started 3 new master nodes and assigned the dat… --- ## [Reasoning behind a daily logstash index?](https://discuss.elastic.co/t/reasoning-behind-a-daily-logstash-index/62769)
**Author:** [@chrisan](https://discuss.elastic.co/u/chrisan)\ **Replies:** 2\ **Last updated:** [October 20, 2016, 10:20pm UTC](https://discuss.elastic.co/t/reasoning-behind-a-daily-logstash-index/62769 "2016-10-20T22:20:15Z")
Hello, I'm still coming up to speed with ELK. My use case is to analyze AWS CloudFront logs in aggregates (such as total bandwidth for a folder in a bucket per month). These logs are about 5,000 KB compressed per day … --- ## [Request for Updated Blog Post: Elastic Stack Monitoring with ES 8.7](https://discuss.elastic.co/t/request-for-updated-blog-post-elastic-stack-monitoring-with-es-8-7/333673)
**Author:** [@davidkov](https://discuss.elastic.co/u/davidkov)\ **Replies:** 1\ **Last updated:** [May 26, 2023, 12:39pm UTC](https://discuss.elastic.co/t/request-for-updated-blog-post-elastic-stack-monitoring-with-es-8-7/333673 "2023-05-26T12:39:14Z")
Dear Sir, @shaunak I would like to express my gratitude for your insightful blog post titled 'Elastic Stack monitoring with Metricbeat via Logstash or Kafka' It has been instrumental in helping me set up a centralized … --- ## [Can curl https://elasticsearch:9200 from host, but connection refused in kibana container](https://discuss.elastic.co/t/can-curl-https-elasticsearch-9200-from-host-but-connection-refused-in-kibana-container/228562)
**Author:** [@J7mbo](https://discuss.elastic.co/u/J7mbo)\ **Replies:** 1\ **Last updated:** [April 17, 2020, 8:05pm UTC](https://discuss.elastic.co/t/can-curl-https-elasticsearch-9200-from-host-but-connection-refused-in-kibana-container/228562 "2020-04-17T20:05:13Z")
I have elasticsearch and kibana running on the same node in a swarm, connected to the same docker network. From the node (host machine), I can curl https://elasticsearch:9200 and I get a response. From inside the kiban… --- ## [SHIELD: Can we use patterns while naming roles in roles.yml in SHIELD](https://discuss.elastic.co/t/shield-can-we-use-patterns-while-naming-roles-in-roles-yml-in-shield/40723)
**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\ **Replies:** 7\ **Last updated:** [February 5, 2016, 2:46am UTC](https://discuss.elastic.co/t/shield-can-we-use-patterns-while-naming-roles-in-roles-yml-in-shield/40723 "2016-02-05T02:46:22Z")
I am providing a functionality where I can create users with roles \[ admin, user \] As there will be no of users going fall in both the categories and they will also be able to upload there files using logstash. Specify… --- ## [LogStash Docker just stops after start](https://discuss.elastic.co/t/logstash-docker-just-stops-after-start/207790)
**Author:** [@aravindpillai](https://discuss.elastic.co/u/aravindpillai)\ **Replies:** 4\ **Last updated:** [November 14, 2019, 3:29pm UTC](https://discuss.elastic.co/t/logstash-docker-just-stops-after-start/207790 "2019-11-14T15:29:08Z")
HI Here is a simple Docker file and configuration file for Elastic Search and Log stash. The plugin wont start version: '3.2' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:7.4.0 … --- ## [How to use multiple Ingest Pipelines in Elasticsearch?](https://discuss.elastic.co/t/how-to-use-multiple-ingest-pipelines-in-elasticsearch/321775)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 3\ **Last updated:** [December 22, 2022, 11:34am UTC](https://discuss.elastic.co/t/how-to-use-multiple-ingest-pipelines-in-elasticsearch/321775 "2022-12-22T11:34:26Z")
Hi, I'm trying to switch from Logstash in favor of Elasticsearch Ingest Pipeline feature, and I'm having trouble with topic of multiple ingest pipelines. How does Elastic know when to use which pipeline? I ship data wit… --- ## [Reindex fails in Kibana DevTools Console, but succeeds on command line using curl](https://discuss.elastic.co/t/reindex-fails-in-kibana-devtools-console-but-succeeds-on-command-line-using-curl/237266)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 3\ **Last updated:** [June 18, 2020, 3:18pm UTC](https://discuss.elastic.co/t/reindex-fails-in-kibana-devtools-console-but-succeeds-on-command-line-using-curl/237266 "2020-06-18T15:18:06Z")
Hi, I want to reindex a couple of indices into a single one. This fails in Kibana DevTools Console, but succeeds using cURL on the command line. Kibana DevTools Console returns: "error" : { "root\_cause" : \[ … --- ## [Logstash Aggregate map working only for few rows while merging two data sources](https://discuss.elastic.co/t/logstash-aggregate-map-working-only-for-few-rows-while-merging-two-data-sources/231293)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 9:02am UTC](https://discuss.elastic.co/t/logstash-aggregate-map-working-only-for-few-rows-while-merging-two-data-sources/231293 "2020-05-07T09:02:55Z")
I am using the latest version of logstash(7.6.2). I am trying to merge rows from two different files using a common ID. Find below the samples of the two data sources. Also, find below my desired output. Sample Data 1 w… --- ## [Notify slack action configuration not loading under ES 6.6 with new secure\_url setting](https://discuss.elastic.co/t/notify-slack-action-configuration-not-loading-under-es-6-6-with-new-secure-url-setting/169050)
**Author:** [@elasticdave](https://discuss.elastic.co/u/elasticdave)\ **Replies:** 1\ **Last updated:** [February 19, 2019, 8:22pm UTC](https://discuss.elastic.co/t/notify-slack-action-configuration-not-loading-under-es-6-6-with-new-secure-url-setting/169050 "2019-02-19T20:22:57Z")
Hello, Since updating to Elasticsearch 6.6 I am unable to make use of the slack action. I've reviewed the breaking changes and found that the 'url' setting has been deprecated in favor of the new 'secure\_url' setting t… --- ## [Warning can not be imported as a dangling index, as index with same name already exists in cluster metadata](https://discuss.elastic.co/t/warning-can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/199577)
**Author:** [@Nikhil\_Pillai](https://discuss.elastic.co/u/Nikhil_Pillai)\ **Replies:** 6\ **Last updated:** [September 16, 2019, 6:13am UTC](https://discuss.elastic.co/t/warning-can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/199577 "2019-09-16T06:13:05Z")
I am running ELK 6.5.4 with 3 node cluster. Cluster health is GREEN I see below error in one of the node. \[2019-09-16T11:05:49,832\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[node-3\] \[\[.watcher-history-9-2019.07.12/1fkhSke8S7… --- ## [Term Aggregation: Count Duplicates](https://discuss.elastic.co/t/term-aggregation-count-duplicates/159569)
**Author:** [@cebor](https://discuss.elastic.co/u/cebor)\ **Replies:** 6\ **Last updated:** [December 6, 2018, 9:36am UTC](https://discuss.elastic.co/t/term-aggregation-count-duplicates/159569 "2018-12-06T09:36:57Z")
Hello, my TA pushes following doc to my elasticsearch: I want to visualize the count of all doc.test\_cases\[''\].verdict terms. The visualisation omits duplicate verdicts. Got the following result: passed: 1 skipped… --- ## [Poor performance of scripted bitwise operations in facet filters](https://discuss.elastic.co/t/poor-performance-of-scripted-bitwise-operations-in-facet-filters/7308)
**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\ **Replies:** 6\ **Last updated:** [April 17, 2012, 1:13pm UTC](https://discuss.elastic.co/t/poor-performance-of-scripted-bitwise-operations-in-facet-filters/7308 "2012-04-17T13:13:42Z")
I have a requirement where several facets need to do bitwise operations similar to the following: "opened\_today\_dev":{ "query":{ "query\_string":{ … --- ## [Parse email message in Logstash](https://discuss.elastic.co/t/parse-email-message-in-logstash/44036)
**Author:** [@petar.kozic](https://discuss.elastic.co/u/petar.kozic)\ **Replies:** 4\ **Last updated:** [March 11, 2016, 8:31am UTC](https://discuss.elastic.co/t/parse-email-message-in-logstash/44036 "2016-03-11T08:31:59Z")
Hi, I use imap-plugin in Logstash. How can I parse email message. I receive log from server with long message. I need one sentense of them not whole message. Thank you. --- ## [Optimizations for nested aggregations](https://discuss.elastic.co/t/optimizations-for-nested-aggregations/17688)
**Author:** [@nilsga](https://discuss.elastic.co/u/nilsga)\ **Replies:** 4\ **Last updated:** [June 2, 2014, 8:21am UTC](https://discuss.elastic.co/t/optimizations-for-nested-aggregations/17688 "2014-06-02T08:21:39Z")
I'm doing some benchmarking on aggregations on a dataset of about 50.000.000 documents. It's quite a complex aggregation, nesting 5 levels deep. At the top level is a terms aggregation, and on the nested levels the… --- ## [Removing a field with dots in an ingest pipeline](https://discuss.elastic.co/t/removing-a-field-with-dots-in-an-ingest-pipeline/272570)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 3\ **Last updated:** [May 11, 2021, 2:50pm UTC](https://discuss.elastic.co/t/removing-a-field-with-dots-in-an-ingest-pipeline/272570 "2021-05-11T14:50:21Z")
Hi all, I'm using filebeat with an ingest simple ingest pipeline and I want to remove some of the host's field, for example the host.os I've defined a ingest pipeline PUT \_ingest/pipeline/appsalutmw { "description":… --- ## [Template for .monitoring\* indices](https://discuss.elastic.co/t/template-for-monitoring-indices/161636)
**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\ **Replies:** 8\ **Last updated:** [December 21, 2018, 11:49am UTC](https://discuss.elastic.co/t/template-for-monitoring-indices/161636 "2018-12-21T11:49:40Z")
Hi, In my setup I am using template from Logstash to set the configuration for various indices that are being created in Elasticsearch. But I am not able to do the same for the monitoring indices, that is .monitoring-es… --- ## [\[SOLVED\] Trying monitoring logstash in kibana/elasticsearch](https://discuss.elastic.co/t/solved-trying-monitoring-logstash-in-kibana-elasticsearch/146528)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 3\ **Last updated:** [August 30, 2018, 3:09pm UTC](https://discuss.elastic.co/t/solved-trying-monitoring-logstash-in-kibana-elasticsearch/146528 "2018-08-30T15:09:32Z")
Hi again forum! I've been again playing with ELK stuff these days, I've upgraded my 3 VM baby cluster lab from 5.4 to 6.3, and started adding new data onto it ... and I've realized that it is possible to monitor logstas… --- ## [.NET Nest vs HTML 5 RESTful API Performance in big data](https://discuss.elastic.co/t/net-nest-vs-html-5-restful-api-performance-in-big-data/49463)
**Author:** [@MohammadRK88](https://discuss.elastic.co/u/MohammadRK88)\ **Replies:** 3\ **Last updated:** [September 13, 2016, 8:10am UTC](https://discuss.elastic.co/t/net-nest-vs-html-5-restful-api-performance-in-big-data/49463 "2016-09-13T08:10:23Z")
Hi. I'm new in elasticsearch. we have a project with a lot of user interaction. Backend of the project is ASP.NET MVC and frontend is Angularjs. Backend and Frontend communicate with WEB API. We use SQL Server for data s… --- ## [Unexpected token \[START\_ARRAY\] when updating watch with Slack action](https://discuss.elastic.co/t/unexpected-token-start-array-when-updating-watch-with-slack-action/51797)
**Author:** [@baud](https://discuss.elastic.co/u/baud)\ **Replies:** 3\ **Last updated:** [June 7, 2016, 8:07am UTC](https://discuss.elastic.co/t/unexpected-token-start-array-when-updating-watch-with-slack-action/51797 "2016-06-07T08:07:02Z")
Elasticsearch 2.2.1 I am trying to update a watch, adding a "to" field to a slack action, using this as example. This works : "actions": { "notify-slack": { "slack": { "message": { "… --- ## [Scoring results from multiple indices](https://discuss.elastic.co/t/scoring-results-from-multiple-indices/9740)
**Author:** [@Andrew\_O\_Brien](https://discuss.elastic.co/u/Andrew_O_Brien)\ **Replies:** 3\ **Last updated:** [November 16, 2012, 11:19pm UTC](https://discuss.elastic.co/t/scoring-results-from-multiple-indices/9740 "2012-11-16T23:19:07Z")
Hi everyone, I love how easy it is to search multiple indices at once in ES, but I started to wonder: how does scoring work with multiple indices? From what I understand, the idf of a term within an index was only… --- ## [SSO and Subscription](https://discuss.elastic.co/t/sso-and-subscription/291275)
**Author:** [@suren\_es](https://discuss.elastic.co/u/suren_es)\ **Replies:** 7\ **Last updated:** [December 9, 2021, 2:13pm UTC](https://discuss.elastic.co/t/sso-and-subscription/291275 "2021-12-09T14:13:36Z")
I did download ELK stack tarballs, installed, configured. All is working fine. But when I started enabling SSO (via parameter xpack.security.authc.realms.oidc.oidc1 in config file), it says that this is not possible wit… --- ## [Dashboard with different time ranges](https://discuss.elastic.co/t/dashboard-with-different-time-ranges/169085)
**Author:** [@jenyphur](https://discuss.elastic.co/u/jenyphur)\ **Replies:** 1\ **Last updated:** [February 19, 2019, 6:20pm UTC](https://discuss.elastic.co/t/dashboard-with-different-time-ranges/169085 "2019-02-19T18:20:00Z")
Hi there, is it possible to create a dashboard with different time ranges for each visualization? I have 2 visualizations..one that looks at a week of data and one that looks at just the current day. I'm trying to add … --- ## [How to get in memory queue statiscic](https://discuss.elastic.co/t/how-to-get-in-memory-queue-statiscic/148995)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 1\ **Last updated:** [September 24, 2018, 8:20pm UTC](https://discuss.elastic.co/t/how-to-get-in-memory-queue-statiscic/148995 "2018-09-24T20:20:52Z")
I used persistent queue for my logstash servers. I could check actual stat of queue via: curl -XGET 'localhost:9600/\_node/stats/ and get response: "queue": { "events": 0, "type": "persisted", "capacity": … --- ## [Index content on one machine, send index to other machine?](https://discuss.elastic.co/t/index-content-on-one-machine-send-index-to-other-machine/26120)
**Author:** [@stephan\_nordnes\_erik](https://discuss.elastic.co/u/stephan_nordnes_erik)\ **Replies:** 5\ **Last updated:** [July 23, 2015, 6:30am UTC](https://discuss.elastic.co/t/index-content-on-one-machine-send-index-to-other-machine/26120 "2015-07-23T06:30:04Z")
Hi, I am pretty new to elasticsearch, so I'm sorry if this is a trivial question. I am trying to figure out if it is possible to have a setup like this: Machine A has a large corpus of documents. Machine B is running e… --- ## [Combining indices with same name but different content](https://discuss.elastic.co/t/combining-indices-with-same-name-but-different-content/107757)
**Author:** [@alessandro](https://discuss.elastic.co/u/alessandro)\ **Replies:** 2\ **Last updated:** [November 20, 2017, 9:54am UTC](https://discuss.elastic.co/t/combining-indices-with-same-name-but-different-content/107757 "2017-11-20T09:54:30Z")
Good afternoon, I would like to ask a question regarding a situation that we will face soon in our production environment. We are moving our Elastic Stack from one server to another and, for some reasons we need to hav… [Previous page](https://discuss.elastic.co/top.md?page=770&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=772&per_page=50&period=all)