# Top

**URL:** https://discuss.elastic.co/top.md?page=804&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 805

---

## [\[logstash.outputs.elasticsearch\] An unknown error occurred sending a bulk request to Elasticsearch](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-an-unknown-error-occurred-sending-a-bulk-request-to-elasticsearch/145435)

<div class="topic-metadata">

**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\
**Replies:** 1\
**Last updated:** [August 21, 2018, 9:25pm UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-an-unknown-error-occurred-sending-a-bulk-request-to-elasticsearch/145435 "2018-08-21T21:25:20Z")

</div>

Hi, I am getting below error when starting Logstash. I tried restarting Elasticsearch then Logstash, but still have such issue. Please advise cause of it. Thanks! \[2018-08-21T11:54:17,570\]\[ERROR\]\[logstash.outputs.elas…

---

## [Failed to publish events](https://discuss.elastic.co/t/failed-to-publish-events/94983)

<div class="topic-metadata">

**Author:** [@pastperfect](https://discuss.elastic.co/u/pastperfect)\
**Replies:** 5\
**Last updated:** [August 1, 2017, 12:53pm UTC](https://discuss.elastic.co/t/failed-to-publish-events/94983 "2017-08-01T12:53:47Z")

</div>

I have set up packetbeat on a single client workstation alongside winlogbeat. When running packetbeat it doesn't seem to send the data through to my logstash server. These are the errors I get: ERR Failed to publish ev…

---

## [Filebeat store under different index per host?](https://discuss.elastic.co/t/filebeat-store-under-different-index-per-host/85270)

<div class="topic-metadata">

**Author:** [@xon](https://discuss.elastic.co/u/xon)\
**Replies:** 5\
**Last updated:** [May 11, 2017, 10:07pm UTC](https://discuss.elastic.co/t/filebeat-store-under-different-index-per-host/85270 "2017-05-11T22:07:23Z")

</div>

Hi, I am having different instances of filebeat running sending different logs and i want to output to elasticsearch and index per host. Is this a nested if statement and which field should I cross reference? Is it po…

---

## [Tribe node configuration issues](https://discuss.elastic.co/t/tribe-node-configuration-issues/44754)

<div class="topic-metadata">

**Author:** [@sfunk](https://discuss.elastic.co/u/sfunk)\
**Replies:** 5\
**Last updated:** [May 17, 2016, 11:15am UTC](https://discuss.elastic.co/t/tribe-node-configuration-issues/44754 "2016-05-17T11:15:30Z")

</div>

Hi all, I'm currently running into some issues with a tribe node configuration using Elasticsearch 1.5.2. I have two existing elasticsearch 1.5.2 clusters which I'd like to cross query using a tribe node. I setup ano…

---

## [Getting this error java.lang.ClassNotFoundException: jakarta.json.JsonException](https://discuss.elastic.co/t/getting-this-error-java-lang-classnotfoundexception-jakarta-json-jsonexception/306734)

<div class="topic-metadata">

**Author:** [@Bhavya\_Dawar](https://discuss.elastic.co/u/Bhavya_Dawar)\
**Replies:** 0\
**Last updated:** [June 8, 2022, 5:55pm UTC](https://discuss.elastic.co/t/getting-this-error-java-lang-classnotfoundexception-jakarta-json-jsonexception/306734 "2022-06-08T17:55:49Z")

</div>

Failed to instantiate \[co.elastic.clients.Elasticsearch.ElasticsearchClient\]: Factory method 'client' threw exception; nested exception is java.lang.NoClassDefFoundError: jakarta/json/JsonException @Bean public Elastic…

---

## [Facing some issue building kibana](https://discuss.elastic.co/t/facing-some-issue-building-kibana/97751)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 8\
**Last updated:** [August 22, 2017, 6:52pm UTC](https://discuss.elastic.co/t/facing-some-issue-building-kibana/97751 "2017-08-22T18:52:27Z")

</div>

Hi , I am getting the following error messages on Kibana log: og \[10:47:37.026\] \[warning\]\[admin\]\[elasticsearch\] Unable to revive connection: http://localhost:9229/ log \[10:47:37.026\] \[warning\]\[admin\]\[elasticsearch…

---

## [How to progressively update my document](https://discuss.elastic.co/t/how-to-progressively-update-my-document/36575)

<div class="topic-metadata">

**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\
**Replies:** 4\
**Last updated:** [February 15, 2016, 2:57pm UTC](https://discuss.elastic.co/t/how-to-progressively-update-my-document/36575 "2016-02-15T14:57:01Z")

</div>

I have LS 2.0.x ES2.0 Shield 2.0 and Kibana 4.2 My configuration reads incoming application log data. The data represents all of the work flow events that our orders go thorugh - a series of pre-defined steps (approx …

---

## [Using wildcard in multiple fields](https://discuss.elastic.co/t/using-wildcard-in-multiple-fields/239924)

<div class="topic-metadata">

**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\
**Replies:** 1\
**Last updated:** [July 6, 2020, 8:36am UTC](https://discuss.elastic.co/t/using-wildcard-in-multiple-fields/239924 "2020-07-06T08:36:45Z")

</div>

Hello everyone, i have mapping like this PUT test { "mappings": { "properties": { "elastic\_case\_title": { "properties": { "ace": { "type": "text", "term\_vector": "with\_position…

---

## [Date data type and time for kibana](https://discuss.elastic.co/t/date-data-type-and-time-for-kibana/272047)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 6\
**Last updated:** [May 4, 2021, 4:10pm UTC](https://discuss.elastic.co/t/date-data-type-and-time-for-kibana/272047 "2021-05-04T16:10:30Z")

</div>

Hi all experts, I'm a beginner of this new techonolgy. I've some doubt about data type: I used the data like this and using python for interacting I manage to use this script to incorporate data+ time in order to be co…

---

## [Kibana alert on index threshold](https://discuss.elastic.co/t/kibana-alert-on-index-threshold/268221)

<div class="topic-metadata">

**Author:** [@sireesha\_m](https://discuss.elastic.co/u/sireesha_m)\
**Replies:** 7\
**Last updated:** [March 26, 2021, 12:53am UTC](https://discuss.elastic.co/t/kibana-alert-on-index-threshold/268221 "2021-03-26T00:53:18Z")

</div>

I have created an index 'foo'. I created an alert of type index threshold to send emails when any info is written in this index. But I see that the alert has not changed to 'active' state. It stays in 'ok' and I see no …

---

## [Vietnamese support](https://discuss.elastic.co/t/vietnamese-support/305037)

<div class="topic-metadata">

**Author:** [@Jean-Marc\_Autexier](https://discuss.elastic.co/u/Jean-Marc_Autexier)\
**Replies:** 2\
**Last updated:** [June 3, 2022, 10:50am UTC](https://discuss.elastic.co/t/vietnamese-support/305037 "2022-06-03T10:50:49Z")

</div>

Hi, the documentation \[1\] does mention the Vietnamese analysis plugin: I already do use the ICU plugin \[2\] for multi language support. How much better is the Vietnamese Plugin compared to ICU for Vietnamese language? …

---

## [Beat protocol](https://discuss.elastic.co/t/beat-protocol/83295)

<div class="topic-metadata">

**Author:** [@Mister\_X](https://discuss.elastic.co/u/Mister_X)\
**Replies:** 2\
**Last updated:** [April 24, 2017, 7:00pm UTC](https://discuss.elastic.co/t/beat-protocol/83295 "2017-04-24T19:00:05Z")

</div>

I've been looking for the beat protocol definition. I'd like to implement it in another language than just golang (C++ and maybe C#) and I found at least one post in this forum that someone would like to have it in anoth…

---

## [Count sessions from events](https://discuss.elastic.co/t/count-sessions-from-events/1553)

<div class="topic-metadata">

**Author:** [@FredG](https://discuss.elastic.co/u/FredG)\
**Replies:** 2\
**Last updated:** [June 1, 2015, 7:46am UTC](https://discuss.elastic.co/t/count-sessions-from-events/1553 "2015-06-01T07:46:46Z")

</div>

Hello, I'm rather novice in Kibana/Elasticsearch. I have records of sessions containing two fields: "mappings": { .... "start\_date": { "type": "date", "format": "dateOp…

---

## [Sorting on Integer field whose values are not the same length](https://discuss.elastic.co/t/sorting-on-integer-field-whose-values-are-not-the-same-length/112373)

<div class="topic-metadata">

**Author:** [@bswingle](https://discuss.elastic.co/u/bswingle)\
**Replies:** 3\
**Last updated:** [December 29, 2017, 11:34pm UTC](https://discuss.elastic.co/t/sorting-on-integer-field-whose-values-are-not-the-same-length/112373 "2017-12-29T23:34:25Z")

</div>

Hello All, My elastic search index has about 325K records in it of data I've crawled over time and is no longer available publicly. I have an integer field (So i can use range) containing the items price. I'm having an …

---

## [Import data from mysql dump to Elasticsearch](https://discuss.elastic.co/t/import-data-from-mysql-dump-to-elasticsearch/173383)

<div class="topic-metadata">

**Author:** [@virgo714us](https://discuss.elastic.co/u/virgo714us)\
**Replies:** 5\
**Last updated:** [March 22, 2019, 8:44am UTC](https://discuss.elastic.co/t/import-data-from-mysql-dump-to-elasticsearch/173383 "2019-03-22T08:44:53Z")

</div>

I want to import data from .sql file (backup created from mysql db with extension .sql) to elasticsearch. What is the way of doing that?

---

## [Removing field doesn't work](https://discuss.elastic.co/t/removing-field-doesnt-work/55165)

<div class="topic-metadata">

**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\
**Replies:** 5\
**Last updated:** [July 11, 2016, 8:02pm UTC](https://discuss.elastic.co/t/removing-field-doesnt-work/55165 "2016-07-11T20:02:33Z")

</div>

Hello, I'm using ES 1.7 I'm trying to remove a field that only appears in some of the documents on my index. Here is my query: curl -XPOST 'localhost:9200/data/\_update' -d '{"script" : "ctx.\_source.remove = \\"publishe…

---

## [Elastic agent Unhealthy](https://discuss.elastic.co/t/elastic-agent-unhealthy/311426)

<div class="topic-metadata">

**Author:** [@MAPER](https://discuss.elastic.co/u/MAPER)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 8:34pm UTC](https://discuss.elastic.co/t/elastic-agent-unhealthy/311426 "2022-08-12T20:34:48Z")

</div>

HI, I have my Elastic cluster , Kibana and Fleet up and running. Now I created New Agent-policy it has Endpoint and system integration. When I am Adding the agent client system the Agent installed successfully and Hea…

---

## [Numeric value (18446744073709551615) out of range of long (-9223372036854775808 - 9223372036854775807)](https://discuss.elastic.co/t/numeric-value-18446744073709551615-out-of-range-of-long-9223372036854775808-9223372036854775807/155732)

<div class="topic-metadata">

**Author:** [@Jun\_Zhang](https://discuss.elastic.co/u/Jun_Zhang)\
**Replies:** 1\
**Last updated:** [November 7, 2018, 3:30pm UTC](https://discuss.elastic.co/t/numeric-value-18446744073709551615-out-of-range-of-long-9223372036854775808-9223372036854775807/155732 "2018-11-07T15:30:45Z")

</div>

filebeat 6.4.3: 2018-11-07T21:46:19.653+0800 WARN elasticsearch/client.go:520 Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Time{wall:0xbef0d90aa48b4054, ext:10511332183032, loc:(\*time.L…

---

## [Rufus-scheduler intercepted an error](https://discuss.elastic.co/t/rufus-scheduler-intercepted-an-error/91859)

<div class="topic-metadata">

**Author:** [@Djelouah\_Laala](https://discuss.elastic.co/u/Djelouah_Laala)\
**Replies:** 1\
**Last updated:** [July 5, 2017, 9:16am UTC](https://discuss.elastic.co/t/rufus-scheduler-intercepted-an-error/91859 "2017-07-05T09:16:25Z")

</div>

I have this error message : { 1175704 rufus-scheduler intercepted an error: 1175704 job: 1175704 Rufus::Scheduler::CronJob "\*/5 \* \* \* \*" {} 1175704 error: …

---

## [How to add a link in Side Navbar of Kibana 6.2](https://discuss.elastic.co/t/how-to-add-a-link-in-side-navbar-of-kibana-6-2/138692)

<div class="topic-metadata">

**Author:** [@Dheeraj\_Singh](https://discuss.elastic.co/u/Dheeraj_Singh)\
**Replies:** 4\
**Last updated:** [July 10, 2018, 8:50am UTC](https://discuss.elastic.co/t/how-to-add-a-link-in-side-navbar-of-kibana-6-2/138692 "2018-07-10T08:50:06Z")

</div>

Hi There, I want to add a link in side-navigation of Kibana 6.2. The URL of the link needs to be taken from kibana.yml (dashboard.defaultAppId). Thanks in advance for the help! Regards, Dhiraj

---

## [Read only access to elasticsearch](https://discuss.elastic.co/t/read-only-access-to-elasticsearch/25248)

<div class="topic-metadata">

**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\
**Replies:** 2\
**Last updated:** [July 13, 2016, 2:31am UTC](https://discuss.elastic.co/t/read-only-access-to-elasticsearch/25248 "2016-07-13T02:31:11Z")

</div>

Hi, I am interested in restricting users to read only access to elasticsearch data. So I would like to limit curl commands to GET method. But if I do so head plugin is not displaying any data. So I allowed POST metho…

---

## [Multiple timepickers in Canvas](https://discuss.elastic.co/t/multiple-timepickers-in-canvas/225247)

<div class="topic-metadata">

**Author:** [@KevSex](https://discuss.elastic.co/u/KevSex)\
**Replies:** 5\
**Last updated:** [April 23, 2020, 1:07pm UTC](https://discuss.elastic.co/t/multiple-timepickers-in-canvas/225247 "2020-04-23T13:07:33Z")

</div>

Hey, Is there a way for multiple timepickers to exist within the one Workpad in Canvas? For example having two graphs, both with its own time period Cheers!

---

## [Function\_score is so slow . how can i slove it?](https://discuss.elastic.co/t/function-score-is-so-slow-how-can-i-slove-it/242636)

<div class="topic-metadata">

**Author:** [@liutao053877](https://discuss.elastic.co/u/liutao053877)\
**Replies:** 6\
**Last updated:** [July 26, 2020, 11:03am UTC](https://discuss.elastic.co/t/function-score-is-so-slow-how-can-i-slove-it/242636 "2020-07-26T11:03:09Z")

</div>

just like this . : https://discuss.elastic.co/t/simple-function-score-query-shows-very-poor-performance/274 I use the version es 6.8. I write a rescore plugin in java and the speed is so slow . I rescore need to fetc…

---

## [Highly available logstash with Redis](https://discuss.elastic.co/t/highly-available-logstash-with-redis/70622)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 3\
**Last updated:** [January 9, 2017, 8:25pm UTC](https://discuss.elastic.co/t/highly-available-logstash-with-redis/70622 "2017-01-09T20:25:30Z")

</div>

I would like to setup highly available logstash with highly available Redis queue. My idea is to have Logstash shipping instances (configured on app servers) send logs to Redis and from their, Logstash indexers work on t…

---

## [How to import oracle Clob data in a Index of Elastic](https://discuss.elastic.co/t/how-to-import-oracle-clob-data-in-a-index-of-elastic/59837)

<div class="topic-metadata">

**Author:** [@chaudhry\_salil](https://discuss.elastic.co/u/chaudhry_salil)\
**Replies:** 3\
**Last updated:** [September 6, 2016, 5:25am UTC](https://discuss.elastic.co/t/how-to-import-oracle-clob-data-in-a-index-of-elastic/59837 "2016-09-06T05:25:15Z")

</div>

We have big tables with data stored as XML clob in Oracle. Now we need to import this data in Elastic and sure we can't import and store it as XML in elastic. instead want to store it as different field values of a docum…

---

## [Logstash run as service](https://discuss.elastic.co/t/logstash-run-as-service/223371)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 1\
**Last updated:** [March 13, 2020, 9:01am UTC](https://discuss.elastic.co/t/logstash-run-as-service/223371 "2020-03-13T09:01:25Z")

</div>

I installed logstash with a tar.gz package. I want to run as a service so that logstash can run automatically when the system reboots. How should I set it up? logstash: 7.6 os: centos7 Instead of using rpm, we need …

---

## [Transform fails with null\_pointer\_exception for nested aggregation on adding a filter condition](https://discuss.elastic.co/t/transform-fails-with-null-pointer-exception-for-nested-aggregation-on-adding-a-filter-condition/149226)

<div class="topic-metadata">

**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\
**Replies:** 5\
**Last updated:** [September 21, 2018, 2:04pm UTC](https://discuss.elastic.co/t/transform-fails-with-null-pointer-exception-for-nested-aggregation-on-adding-a-filter-condition/149226 "2018-09-21T14:04:37Z")

</div>

I am trying to create a Watcher alert over monitoring indices. I want to aggregate over 'N' different clusters and output the nodes with it's cluster name if the disk utilization goes above a specified threshold % …

---

## [What is the best procedure to delete indices?](https://discuss.elastic.co/t/what-is-the-best-procedure-to-delete-indices/351778)

<div class="topic-metadata">

**Author:** [@7a6b6f](https://discuss.elastic.co/u/7a6b6f)\
**Replies:** 2\
**Last updated:** [February 2, 2024, 3:17pm UTC](https://discuss.elastic.co/t/what-is-the-best-procedure-to-delete-indices/351778 "2024-02-02T15:17:38Z")

</div>

Hello everyone, I have a question regarding the deletion of indices in an ELK (Elasticsearch, Logstash, Kibana) Docker-compose stack. Specifically, I would like to know the recommended procedure for deleting indices, an…

---

## [Sync mongodb and elastic using logstash](https://discuss.elastic.co/t/sync-mongodb-and-elastic-using-logstash/234075)

<div class="topic-metadata">

**Author:** [@farshid](https://discuss.elastic.co/u/farshid)\
**Replies:** 2\
**Last updated:** [May 25, 2020, 9:17am UTC](https://discuss.elastic.co/t/sync-mongodb-and-elastic-using-logstash/234075 "2020-05-25T09:17:33Z")

</div>

I have same problem with logstash issue https://discuss.elastic.co/t/sync-mongodb-data-to-elasticsearch-update-if-exists-or-insert-using-logstash/206897/2 https://discuss.elastic.co/t/sync-mongodb-data-to-elasticsearc…

---

## [Request Timeout after 30000ms](https://discuss.elastic.co/t/request-timeout-after-30000ms/78871)

<div class="topic-metadata">

**Author:** [@m.francia](https://discuss.elastic.co/u/m.francia)\
**Replies:** 4\
**Last updated:** [March 22, 2017, 12:59pm UTC](https://discuss.elastic.co/t/request-timeout-after-30000ms/78871 "2017-03-22T12:59:28Z")

</div>

Hi! I increased the request\_timeout and I have the same problem. My elasticsearch version is 2.3.4 and kibana version 4.5.3. Elasticsearch and kibana are running in a debian server with 6gb RAM and 4 cores without ssd. E…

---

## [Install 8.2.0 APM on ECK - "precondition 'apm integration installed'](https://discuss.elastic.co/t/install-8-2-0-apm-on-eck-precondition-apm-integration-installed/306052)

<div class="topic-metadata">

**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\
**Replies:** 3\
**Last updated:** [May 31, 2022, 5:14pm UTC](https://discuss.elastic.co/t/install-8-2-0-apm-on-eck-precondition-apm-integration-installed/306052 "2022-05-31T17:14:28Z")

</div>

I'm deploying an ECK stack on a new kubernetes cluster. I have installed so far and working Elasticsearch, kibana and filebeat. ps: I don't use "agents or fleet" because i could not get them to work and there was very l…

---

## [Backing up ElasticSearch's configuration ONLY](https://discuss.elastic.co/t/backing-up-elasticsearchs-configuration-only/85672)

<div class="topic-metadata">

**Author:** [@X\_Calibur](https://discuss.elastic.co/u/X_Calibur)\
**Replies:** 3\
**Last updated:** [May 23, 2017, 11:32am UTC](https://discuss.elastic.co/t/backing-up-elasticsearchs-configuration-only/85672 "2017-05-23T11:32:41Z")

</div>

Hi, From the docs I can see how to backup the indices. However that could take a hefty amount of time. Is there a way to backup just the configuration itself i.e templates, alerts, mappings etc? thanks gil

---

## [Highlighting issue with wildcard query string query](https://discuss.elastic.co/t/highlighting-issue-with-wildcard-query-string-query/44017)

<div class="topic-metadata">

**Author:** [@drippel](https://discuss.elastic.co/u/drippel)\
**Replies:** 3\
**Last updated:** [March 30, 2016, 6:10am UTC](https://discuss.elastic.co/t/highlighting-issue-with-wildcard-query-string-query/44017 "2016-03-30T06:10:31Z")

</div>

I have an index where the default indexing analyzer is defined this way: "default" : { "filter" : \[ "english\_possessive\_stemmer", "segment\_worddelimiter", "lowercase", "english\_stemmer", "english\_common\_gram…

---

## [Inconsistent content in data table visualization](https://discuss.elastic.co/t/inconsistent-content-in-data-table-visualization/177812)

<div class="topic-metadata">

**Author:** [@zivklara](https://discuss.elastic.co/u/zivklara)\
**Replies:** 6\
**Last updated:** [May 20, 2019, 10:57am UTC](https://discuss.elastic.co/t/inconsistent-content-in-data-table-visualization/177812 "2019-05-20T10:57:01Z")

</div>

Hi, I’m trying to work with data table visualization to show some error logs that occurred during tests I run, but I’m having problems with showing all the data. Basically I need all my tables to be sorted by date (e2e…

---

## [Issues with Data Retention - ELK Stack](https://discuss.elastic.co/t/issues-with-data-retention-elk-stack/75055)

<div class="topic-metadata">

**Author:** [@dperkins](https://discuss.elastic.co/u/dperkins)\
**Replies:** 6\
**Last updated:** [February 16, 2017, 9:35pm UTC](https://discuss.elastic.co/t/issues-with-data-retention-elk-stack/75055 "2017-02-16T21:35:30Z")

</div>

Having an issue with a ELK stack not retaining data longer than 7 days. It's been running for over a year without any issue but when my gold license expired and I had to remove the Shield plugin as a result the cluster n…

---

## [Ingest processor: remove a line from a CSV?](https://discuss.elastic.co/t/ingest-processor-remove-a-line-from-a-csv/291137)

<div class="topic-metadata">

**Author:** [@QuartoStato](https://discuss.elastic.co/u/QuartoStato)\
**Replies:** 8\
**Last updated:** [December 11, 2021, 12:58pm UTC](https://discuss.elastic.co/t/ingest-processor-remove-a-line-from-a-csv/291137 "2021-12-11T12:58:40Z")

</div>

Hi all, I'm trying to create a processor for an ingest pipeline. I'm checking all available existing processor but I can't understand if it's possible to remove a line from a CSV. The data we need to import has 2 header…

---

## [ES 2.3.3 - Cannot understand why OOM](https://discuss.elastic.co/t/es-2-3-3-cannot-understand-why-oom/77818)

<div class="topic-metadata">

**Author:** [@rzrucher](https://discuss.elastic.co/u/rzrucher)\
**Replies:** 8\
**Last updated:** [March 9, 2017, 9:26am UTC](https://discuss.elastic.co/t/es-2-3-3-cannot-understand-why-oom/77818 "2017-03-09T09:26:34Z")

</div>

I've a single node installation of ES with version 2.3.3 and I get an OOM. But I cannot understand why this OOM occurs. For now the server is only doing indexing (no search in progress). Can someone give my a clue to u…

---

## [Joining two indexes](https://discuss.elastic.co/t/joining-two-indexes/325876)

<div class="topic-metadata">

**Author:** [@etp](https://discuss.elastic.co/u/etp)\
**Replies:** 2\
**Last updated:** [February 19, 2023, 2:57pm UTC](https://discuss.elastic.co/t/joining-two-indexes/325876 "2023-02-19T14:57:06Z")

</div>

Hi, I have two indices A and B. I wanted to perform inner join on the two indices using a common field such that I can collect the fields(spread across both indices) into another index using transforms. What aggregatio…

---

## [How to use configure filebeat to filter docker containers using hints-based autodiscovery](https://discuss.elastic.co/t/how-to-use-configure-filebeat-to-filter-docker-containers-using-hints-based-autodiscovery/267813)

<div class="topic-metadata">

**Author:** [@Daniel\_Porter](https://discuss.elastic.co/u/Daniel_Porter)\
**Replies:** 2\
**Last updated:** [March 22, 2021, 12:50pm UTC](https://discuss.elastic.co/t/how-to-use-configure-filebeat-to-filter-docker-containers-using-hints-based-autodiscovery/267813 "2021-03-22T12:50:33Z")

</div>

Hi there, I'm trying to figure out how to configure filebeat (e.g. set a condition) to harvest from certain docker containers when using hints-based autodiscover. My use case is having two instances of filebeat running,…

---

## [Disable annoying Hover messages "kibana Parts of or the entire chart might not be displayed due to null values in the data"](https://discuss.elastic.co/t/disable-annoying-hover-messages-kibana-parts-of-or-the-entire-chart-might-not-be-displayed-due-to-null-values-in-the-data/60701)

<div class="topic-metadata">

**Author:** [@Normen](https://discuss.elastic.co/u/Normen)\
**Replies:** 2\
**Last updated:** [September 20, 2016, 9:32am UTC](https://discuss.elastic.co/t/disable-annoying-hover-messages-kibana-parts-of-or-the-entire-chart-might-not-be-displayed-due-to-null-values-in-the-data/60701 "2016-09-20T09:32:09Z")

</div>

Hello there, I got several area charts which do produce from time to time empty values due to Deployments. When this occurs, the Dashboard is overwritten by a huge Textfeld which says: "kibana Parts of or the entire c…

---

## [Create mapping](https://discuss.elastic.co/t/create-mapping/82401)

<div class="topic-metadata">

**Author:** [@ToujouAya](https://discuss.elastic.co/u/ToujouAya)\
**Replies:** 7\
**Last updated:** [April 28, 2017, 2:09pm UTC](https://discuss.elastic.co/t/create-mapping/82401 "2017-04-28T14:09:15Z")

</div>

Elasticsearch version: 5.3.0 Plugins installed: \[\] JVM version: 1.8.0\_121 OS version: windows 10 Description of the problem including expected versus actual behavior: There is my mapping code created in PHP '…

---

## [APT fails to install elasticsearch 2.x](https://discuss.elastic.co/t/apt-fails-to-install-elasticsearch-2-x/296707)

<div class="topic-metadata">

**Author:** [@Viktor\_Habchak](https://discuss.elastic.co/u/Viktor_Habchak)\
**Replies:** 4\
**Last updated:** [February 9, 2022, 2:21pm UTC](https://discuss.elastic.co/t/apt-fails-to-install-elasticsearch-2-x/296707 "2022-02-09T14:21:37Z")

</div>

Hello, I have trouble installing Elasticsearch v2.x on ubuntu 18.04. Here's the output I get with the simplest case: vik@ubuntu:~$ curl -fsSL https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - OK vi…

---

## [Disabling circuit breakers in ES7](https://discuss.elastic.co/t/disabling-circuit-breakers-in-es7/231770)

<div class="topic-metadata">

**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 6:32am UTC](https://discuss.elastic.co/t/disabling-circuit-breakers-in-es7/231770 "2020-05-11T06:32:54Z")

</div>

What's the right way to disable circuit breakers in elasticsearch 7? indices.breaker.type be set to none or indices.breaker.total.use\_real\_memory be set to false?

---

## [Вопрос по архитектуре кластера elasticsearch](https://discuss.elastic.co/t/vopros-po-arhitekture-klastera-elasticsearch/158697)

<div class="topic-metadata">

**Author:** [@acidborn60](https://discuss.elastic.co/u/acidborn60)\
**Replies:** 4\
**Last updated:** [December 4, 2018, 11:35am UTC](https://discuss.elastic.co/t/vopros-po-arhitekture-klastera-elasticsearch/158697 "2018-12-04T11:35:07Z")

</div>

Добрый день! Планирую развернуть кластер elasticsearch в следующей конфигурации: 3 master-ноды (2 Core, 4 Gb Ram, 30 Gb HDD) 2 data-ноды (4 Core, 8 Gb Ram, 500 Gb под данные) 1 kibana (2 Core, 4 Gb Ram, 30 Gb HDD) Эт…

---

## [Kibana \[SOLVED\] Filter Applies to Incorrect Index: Visualize: failed to find geo\_point field \[nginxgeo1\]](https://discuss.elastic.co/t/kibana-solved-filter-applies-to-incorrect-index-visualize-failed-to-find-geo-point-field-nginxgeo1/84298)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 4\
**Last updated:** [May 10, 2017, 6:01pm UTC](https://discuss.elastic.co/t/kibana-solved-filter-applies-to-incorrect-index-visualize-failed-to-find-geo-point-field-nginxgeo1/84298 "2017-05-10T18:01:30Z")

</div>

I'm geomapping some data, all of which is located on my nginx index (e.g. nginx-2017.05.01) which contains the geo\_point; nginxgeo1. However I'm receiving an error that Elasticsearch can't find the geo\_point field nginx…

---

## [Which codec has the best performance?](https://discuss.elastic.co/t/which-codec-has-the-best-performance/50196)

<div class="topic-metadata">

**Author:** [@Piyush\_Goyal](https://discuss.elastic.co/u/Piyush_Goyal)\
**Replies:** 4\
**Last updated:** [May 18, 2016, 7:00pm UTC](https://discuss.elastic.co/t/which-codec-has-the-best-performance/50196 "2016-05-18T19:00:29Z")

</div>

Hi Team, In one of our new projects we are trying to use ELK stack with Redis as the buffering interface. I was going through the documentation and different examples over the internet and saw that at most of the place…

---

## [System load too high](https://discuss.elastic.co/t/system-load-too-high/293436)

<div class="topic-metadata">

**Author:** [@Davide89](https://discuss.elastic.co/u/Davide89)\
**Replies:** 5\
**Last updated:** [January 5, 2022, 8:41am UTC](https://discuss.elastic.co/t/system-load-too-high/293436 "2022-01-05T08:41:19Z")

</div>

I'm working on a VM with a single-node instance of Elasticsearch and I registered a lot of alerts about system load for many days. Indeed the overall system load is always higher then 1. Below a Grafana chart that shows…

---

## [Help with Grok pattern with space in field?](https://discuss.elastic.co/t/help-with-grok-pattern-with-space-in-field/291695)

<div class="topic-metadata">

**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\
**Replies:** 5\
**Last updated:** [December 14, 2021, 1:03pm UTC](https://discuss.elastic.co/t/help-with-grok-pattern-with-space-in-field/291695 "2021-12-14T13:03:56Z")

</div>

I have the following logs looks like: query: s03.amazon.com IN A + (21.12.21.21) query: s2.tabtest.com IN AAAA +++ (213.12.21.21) query: t4.asaptest.com OUT TD OP- (21.124.21.21) I need output to look like this: hos…

---

## [Improper detection of available CPUs](https://discuss.elastic.co/t/improper-detection-of-available-cpus/194282)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 5\
**Last updated:** [August 22, 2019, 8:00am UTC](https://discuss.elastic.co/t/improper-detection-of-available-cpus/194282 "2019-08-22T08:00:53Z")

</div>

Im running a 5 node cluster in kubernetes. Each k8 host has 56 cores but when I query for node information I get these values: "available\_processors" : 1, "allocated\_processors" : 1 Im using Java 12 so accordin…

---

## [2 instances of Elastic and Kibana but data is shared](https://discuss.elastic.co/t/2-instances-of-elastic-and-kibana-but-data-is-shared/95603)

<div class="topic-metadata">

**Author:** [@Erezinho](https://discuss.elastic.co/u/Erezinho)\
**Replies:** 5\
**Last updated:** [August 3, 2017, 1:33pm UTC](https://discuss.elastic.co/t/2-instances-of-elastic-and-kibana-but-data-is-shared/95603 "2017-08-03T13:33:05Z")

</div>

Hello, I have a vm with two instances of Elastic, on different folders. Each instance has its own port. Same goes to the two Kibana instances. ElasticA-KibanaA ElasticB-KibanaB. My client uses both elastic instances…

[Previous page](https://discuss.elastic.co/top.md?page=803&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=805&per_page=50&period=all)
