# Top

**URL:** https://discuss.elastic.co/top.md?page=834&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 835

---

## [Logstash unable to start](https://discuss.elastic.co/t/logstash-unable-to-start/200474)

<div class="topic-metadata">

**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\
**Replies:** 5\
**Last updated:** [September 23, 2019, 7:05am UTC](https://discuss.elastic.co/t/logstash-unable-to-start/200474 "2019-09-23T07:05:33Z")

</div>

I have installed logstash 7.3.2 on EC2 RHEL linux , when i try to start the service i am getting below error systemctl start logstash "Failed to start logstash.service: Unit not found." i have downloaded logstash RPM …

---

## [JFrog Artifactory for ECE Docker repository](https://discuss.elastic.co/t/jfrog-artifactory-for-ece-docker-repository/169734)

<div class="topic-metadata">

**Author:** [@Randy-312](https://discuss.elastic.co/u/Randy-312)\
**Replies:** 5\
**Last updated:** [March 20, 2019, 5:00pm UTC](https://discuss.elastic.co/t/jfrog-artifactory-for-ece-docker-repository/169734 "2019-03-20T17:00:09Z")

</div>

Has anyone connected ECE to use Artifactory as the docker repo? If so, I would welcome hearing of any challenges that you encountered in doing so. Especially around security / authentication if you were required to put…

---

## [Error connection from filebeat to Logstash](https://discuss.elastic.co/t/error-connection-from-filebeat-to-logstash/172145)

<div class="topic-metadata">

**Author:** [@Zachary](https://discuss.elastic.co/u/Zachary)\
**Replies:** 5\
**Last updated:** [March 15, 2019, 6:56am UTC](https://discuss.elastic.co/t/error-connection-from-filebeat-to-logstash/172145 "2019-03-15T06:56:43Z")

</div>

I set up the filebeat to ingest logs and pass to Logstash using SSL however when I try to test the connection to between filebeat and logstash using curl the following error shows: \* SSL read: errno -5961 (PR\_CONNECT\_R…

---

## [Faster to index raw data or load a static data dump](https://discuss.elastic.co/t/faster-to-index-raw-data-or-load-a-static-data-dump/247581)

<div class="topic-metadata">

**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\
**Replies:** 8\
**Last updated:** [September 6, 2020, 7:02am UTC](https://discuss.elastic.co/t/faster-to-index-raw-data-or-load-a-static-data-dump/247581 "2020-09-06T07:02:51Z")

</div>

I want to leverage ES for analysis of static data. I was using a subset and it worked as planned. I would be able to query, build graphs in kibana etc. It is quite useful. That being said, since the data is static, S…

---

## [Persistent ECS warning](https://discuss.elastic.co/t/persistent-ecs-warning/349743)

<div class="topic-metadata">

**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\
**Replies:** 3\
**Last updated:** [December 20, 2023, 6:03pm UTC](https://discuss.elastic.co/t/persistent-ecs-warning/349743 "2023-12-20T18:03:45Z")

</div>

logstash 8.11.3 Can anyone tell me why with the following config, and everything else at the default install, why I continue to get the \[logstash.codecs.jsonlines\] ECS compatibility is enabled but \`target\` option was n…

---

## [Can't split series on visualization](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725)

<div class="topic-metadata">

**Author:** [@hio77](https://discuss.elastic.co/u/hio77)\
**Replies:** 3\
**Last updated:** [May 14, 2018, 9:44am UTC](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725 "2018-05-14T09:44:26Z")

</div>

Hey, bit of a weird one here. all my visualizations that do a split series aggregation seem to have stopped working. this happened about the same time that i had to rebuild my main node, so i suspected it was corrupted…

---

## [How many ES nodes will be needed to handle 400GB/Day Data](https://discuss.elastic.co/t/how-many-es-nodes-will-be-needed-to-handle-400gb-day-data/101458)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [September 22, 2017, 11:44am UTC](https://discuss.elastic.co/t/how-many-es-nodes-will-be-needed-to-handle-400gb-day-data/101458 "2017-09-22T11:44:30Z")

</div>

Hi Experts, I know this is not an easy question to answer but still any idea can help here . Curious to know how many ES nodes will be sufficient to handle 400 GB/day data volume . I have gone through this blog(https:/…

---

## [No Compatible Fields - GeoIP](https://discuss.elastic.co/t/no-compatible-fields-geoip/29264)

<div class="topic-metadata">

**Author:** [@Ben19](https://discuss.elastic.co/u/Ben19)\
**Replies:** 3\
**Last updated:** [September 21, 2015, 2:15pm UTC](https://discuss.elastic.co/t/no-compatible-fields-geoip/29264 "2015-09-21T14:15:39Z")

</div>

Hello I’ve put together the NetFlow codec with GeoIP and configured the parts in logstash, they now appear as indexable fields in Kibana4 but when I attempt to Visualise the data suign the Tile Map I receive the below us…

---

## [Elasticsearch .net v8 and operator](https://discuss.elastic.co/t/elasticsearch-net-v8-and-operator/361496)

<div class="topic-metadata">

**Author:** [@Odd\_Erik\_Gronberg](https://discuss.elastic.co/u/Odd_Erik_Gronberg)\
**Replies:** 4\
**Last updated:** [June 18, 2024, 7:44am UTC](https://discuss.elastic.co/t/elasticsearch-net-v8-and-operator/361496 "2024-06-18T07:44:17Z")

</div>

Hi, just started porting our ES facing code from NEST to the new V8 client. I am facing some issues that I would like to get some input on. In NEST I am able to use the AND operator to "join" multiple QueryContainers li…

---

## [\[ SOLVED\] Adding custom csp rule on Elastic Cloud : 'csp.rules': is not allowed - Not possible yet](https://discuss.elastic.co/t/solved-adding-custom-csp-rule-on-elastic-cloud-csp-rules-is-not-allowed-not-possible-yet/228513)

<div class="topic-metadata">

**Author:** [@IanCap](https://discuss.elastic.co/u/IanCap)\
**Replies:** 4\
**Last updated:** [April 17, 2020, 2:23pm UTC](https://discuss.elastic.co/t/solved-adding-custom-csp-rule-on-elastic-cloud-csp-rules-is-not-allowed-not-possible-yet/228513 "2020-04-17T14:23:14Z")

</div>

Hi ! I'm currently trying to modify the Content Security Policy in the kibana.yml file on a Clouded Deployment to allow a custom javascript to run on a dashboard but i get the following error message when adding the csp…

---

## [Clean install of ES 7.13.2 on Ubuntu 20.04 hangs](https://discuss.elastic.co/t/clean-install-of-es-7-13-2-on-ubuntu-20-04-hangs/276808)

<div class="topic-metadata">

**Author:** [@Roger\_Clark](https://discuss.elastic.co/u/Roger_Clark)\
**Replies:** 6\
**Last updated:** [June 27, 2021, 11:28am UTC](https://discuss.elastic.co/t/clean-install-of-es-7-13-2-on-ubuntu-20-04-hangs/276808 "2021-06-27T11:28:02Z")

</div>

I've been trying to test a clean config of ES stack on an Ubuntu VM following Install Elasticsearch with Debian Package | Elasticsearch Guide \[7.13\] | Elastic The system was a clean install to a 4 core 4GB VM on 20.04.2…

---

## [The APM Agent can give a offline packges to down?](https://discuss.elastic.co/t/the-apm-agent-can-give-a-offline-packges-to-down/103170)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 6\
**Last updated:** [October 13, 2017, 3:45am UTC](https://discuss.elastic.co/t/the-apm-agent-can-give-a-offline-packges-to-down/103170 "2017-10-13T03:45:17Z")

</div>

the APM Agent can give a offline packges to down ,not online. thanks!

---

## [ElasticSearch- IndexReaders cannot exceed 2147483647](https://discuss.elastic.co/t/elasticsearch-indexreaders-cannot-exceed-2147483647/20242)

<div class="topic-metadata">

**Author:** [@PrasathRajan](https://discuss.elastic.co/u/PrasathRajan)\
**Replies:** 6\
**Last updated:** [October 17, 2014, 10:11am UTC](https://discuss.elastic.co/t/elasticsearch-indexreaders-cannot-exceed-2147483647/20242 "2014-10-17T10:11:07Z")

</div>

Getting following exception in one of our ElasticSearch Index, \[Failed to start shard, message \[IndexShardGatewayRecoveryException\[\[fw\]\[4\] failed recovery\]; nested: IllegalArgumentException\[Too many documents, com…

---

## [Default sort for same score documents](https://discuss.elastic.co/t/default-sort-for-same-score-documents/151076)

<div class="topic-metadata">

**Author:** [@vvelichkovich](https://discuss.elastic.co/u/vvelichkovich)\
**Replies:** 1\
**Last updated:** [October 12, 2018, 11:45am UTC](https://discuss.elastic.co/t/default-sort-for-same-score-documents/151076 "2018-10-12T11:45:57Z")

</div>

If I do search and all documents have score of 1, what is the default order elasticsearch use to give me results back? I am looking at the case where we re-indexed data and just doing GET index/\_search in those two indi…

---

## [How can we know the event sent per second](https://discuss.elastic.co/t/how-can-we-know-the-event-sent-per-second/144006)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 1\
**Last updated:** [August 11, 2018, 10:38pm UTC](https://discuss.elastic.co/t/how-can-we-know-the-event-sent-per-second/144006 "2018-08-11T22:38:40Z")

</div>

hello evry body i want to know if there is a method to know the eps (event sent per second) of elastic stack

---

## [How to update the type of a field](https://discuss.elastic.co/t/how-to-update-the-type-of-a-field/142641)

<div class="topic-metadata">

**Author:** [@jmoffitt](https://discuss.elastic.co/u/jmoffitt)\
**Replies:** 7\
**Last updated:** [August 6, 2018, 12:07pm UTC](https://discuss.elastic.co/t/how-to-update-the-type-of-a-field/142641 "2018-08-06T12:07:10Z")

</div>

I am having the same problem as listed at this link I first attempted to update the logstash template as described, but that appeared to completely wipe out everything but the field for location and caused writes from l…

---

## [\[6.1.1\]delete the index and reindex it,kibana could not discover the data](https://discuss.elastic.co/t/6-1-1-delete-the-index-and-reindex-it-kibana-could-not-discover-the-data/117296)

<div class="topic-metadata">

**Author:** [@foolcage](https://discuss.elastic.co/u/foolcage)\
**Replies:** 7\
**Last updated:** [January 29, 2018, 10:34am UTC](https://discuss.elastic.co/t/6-1-1-delete-the-index-and-reindex-it-kibana-could-not-discover-the-data/117296 "2018-01-29T10:34:43Z")

</div>

delete the index and reindex it,kibana could not discover the data? I could use curl to get the data,but in kibana discover page,nothing show,any one meet this problem? ➜ ~ curl -XGET 'localhost:9200/\_cat/indices?v&s=…

---

## [Kibana Metrics Visualization : Sum Aggregation, applied to Unique (field based) objects](https://discuss.elastic.co/t/kibana-metrics-visualization-sum-aggregation-applied-to-unique-field-based-objects/39543)

<div class="topic-metadata">

**Author:** [@Lucas\_Gerard](https://discuss.elastic.co/u/Lucas_Gerard)\
**Replies:** 1\
**Last updated:** [January 19, 2016, 6:31pm UTC](https://discuss.elastic.co/t/kibana-metrics-visualization-sum-aggregation-applied-to-unique-field-based-objects/39543 "2016-01-19T18:31:10Z")

</div>

Hi There, I am using Metrics Visualization tool to display the sum of a particular field, but I would like to remove duplicate objects - based on an other field, as it is done with Unique Count. Is it possible to hav…

---

## [Resource not found exception in discovery](https://discuss.elastic.co/t/resource-not-found-exception-in-discovery/266613)

<div class="topic-metadata">

**Author:** [@Charles\_Ferguson](https://discuss.elastic.co/u/Charles_Ferguson)\
**Replies:** 2\
**Last updated:** [March 17, 2021, 4:38am UTC](https://discuss.elastic.co/t/resource-not-found-exception-in-discovery/266613 "2021-03-17T04:38:03Z")

</div>

Hello, We are starting to get lots of reports of random resource not found errors when searching in discovery. It looks like the issue goes back to a version conflict for the search on elasticsearch. I am little bit of…

---

## [Watcher webhook send message to telegram bot issue](https://discuss.elastic.co/t/watcher-webhook-send-message-to-telegram-bot-issue/224424)

<div class="topic-metadata">

**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\
**Replies:** 2\
**Last updated:** [March 20, 2020, 4:57pm UTC](https://discuss.elastic.co/t/watcher-webhook-send-message-to-telegram-bot-issue/224424 "2020-03-20T16:57:18Z")

</div>

Hi, I wrote a watcher which send a message (via Webhook) to my twitterbot. Let start with my config: "actions": { "my\_webhook": { "webhook": { "scheme": "https", "host": "api.telegram.org/bot…

---

## [Grouped Vertical Bar Graphs in 6.x](https://discuss.elastic.co/t/grouped-vertical-bar-graphs-in-6-x/135030)

<div class="topic-metadata">

**Author:** [@rjain](https://discuss.elastic.co/u/rjain)\
**Replies:** 2\
**Last updated:** [June 8, 2018, 5:34am UTC](https://discuss.elastic.co/t/grouped-vertical-bar-graphs-in-6-x/135030 "2018-06-08T05:34:31Z")

</div>

I need to plot values in grouped bar graph mode in ES, similar to the issues here: However, neither of the solutions seems to work in the current kibana release. Can you help me with this issue? Thanks!

---

## [Confused about filter "bar" for Kibana visualization](https://discuss.elastic.co/t/confused-about-filter-bar-for-kibana-visualization/89476)

<div class="topic-metadata">

**Author:** [@clowder](https://discuss.elastic.co/u/clowder)\
**Replies:** 2\
**Last updated:** [June 15, 2017, 5:20pm UTC](https://discuss.elastic.co/t/confused-about-filter-bar-for-kibana-visualization/89476 "2017-06-15T17:20:14Z")

</div>

Sorry for not knowing a lot since I am very new... I have been playing around with using the sub aggregations in Kibana's visualization tab. One aspect of it I don't understand is the filter metric. You can specify a n…

---

## [Kibana 4.4 "No default index pattern"?](https://discuss.elastic.co/t/kibana-4-4-no-default-index-pattern/43604)

<div class="topic-metadata">

**Author:** [@Ivo\_Stoyanoff](https://discuss.elastic.co/u/Ivo_Stoyanoff)\
**Replies:** 2\
**Last updated:** [March 6, 2016, 8:06pm UTC](https://discuss.elastic.co/t/kibana-4-4-no-default-index-pattern/43604 "2016-03-06T20:06:18Z")

</div>

Newbie question - ES2.2 and Kibana 4.4.1 I am following "Getting started" guide. Loaded accounts and logstash sample data. Added 2 indices for them - I see the fields, set @timestamp. I see indexes and docs are OK in…

---

## [Kibana 4 showing deleted documents in range views](https://discuss.elastic.co/t/kibana-4-showing-deleted-documents-in-range-views/29931)

<div class="topic-metadata">

**Author:** [@cpattonj](https://discuss.elastic.co/u/cpattonj)\
**Replies:** 5\
**Last updated:** [November 5, 2015, 10:16pm UTC](https://discuss.elastic.co/t/kibana-4-showing-deleted-documents-in-range-views/29931 "2015-11-05T22:16:11Z")

</div>

My kibana dashboard is showing documents that I have since deleted.. To reproduce the issue, create an alias that encapsulates the indices that you will be deleting a document type from and assign it to those indices. …

---

## [ES 2.3 - http.max.content.length and http.max\_initial\_line\_length](https://discuss.elastic.co/t/es-2-3-http-max-content-length-and-http-max-initial-line-length/56191)

<div class="topic-metadata">

**Author:** [@lhorsky1](https://discuss.elastic.co/u/lhorsky1)\
**Replies:** 1\
**Last updated:** [July 25, 2016, 1:09am UTC](https://discuss.elastic.co/t/es-2-3-http-max-content-length-and-http-max-initial-line-length/56191 "2016-07-25T01:09:42Z")

</div>

In ES2.3, is it still necessary to set http.max.content.length and http.max\_initial\_line\_length higher to handle large Kibana queries? In 1.5, we set these to 1000mb and 400kb respectively to prevent issues with Kibana…

---

## [Getting warning in for every Kibana Field](https://discuss.elastic.co/t/getting-warning-in-for-every-kibana-field/917)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [May 20, 2015, 10:26pm UTC](https://discuss.elastic.co/t/getting-warning-in-for-every-kibana-field/917 "2015-05-20T22:26:22Z")

</div>

Hi Experts, I have created index using logstash and stored it to ES. Now when I feed it to kibana I am getting following warning for every field. "Doc Values are not enabled on this field . This may lead to excess he…

---

## [Read only on index prevents getting status](https://discuss.elastic.co/t/read-only-on-index-prevents-getting-status/6973)

<div class="topic-metadata">

**Author:** [@ruflin\_2](https://discuss.elastic.co/u/ruflin_2)\
**Replies:** 3\
**Last updated:** [May 4, 2012, 1:16pm UTC](https://discuss.elastic.co/t/read-only-on-index-prevents-getting-status/6973 "2012-05-04T13:16:44Z")

</div>

I started to use the new read only feature in ES 0.19.0. After I set some indices to readOnly, status does not work anymore. Here is a snippet to reproduce it: curl -XPUT http://localhost:9200/4f5f157e894cd/ -d '\[…

---

## [\[CH\] ES Meetup in Lausanne - Switzerland - 13th June 2018](https://discuss.elastic.co/t/ch-es-meetup-in-lausanne-switzerland-13th-june-2018/128318)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 5\
**Last updated:** [June 13, 2018, 8:26am UTC](https://discuss.elastic.co/t/ch-es-meetup-in-lausanne-switzerland-13th-june-2018/128318 "2018-06-13T08:26:00Z")

</div>

Our next meetup in Western Switzerland will take place in Lausanne with some great topics: Nicolas Ruflin (from Elastic) will provide some overview and highlights from Elastic{ON} 2018 Damien Alexandre (from Jolicode) …

---

## [Dramatic increase in the number of open files after an upgrade from Linux 6 to Linux 7](https://discuss.elastic.co/t/dramatic-increase-in-the-number-of-open-files-after-an-upgrade-from-linux-6-to-linux-7/153693)

<div class="topic-metadata">

**Author:** [@rlampe](https://discuss.elastic.co/u/rlampe)\
**Replies:** 1\
**Last updated:** [October 25, 2018, 1:30pm UTC](https://discuss.elastic.co/t/dramatic-increase-in-the-number-of-open-files-after-an-upgrade-from-linux-6-to-linux-7/153693 "2018-10-25T13:30:43Z")

</div>

We recently upgraded one of our Elastic Search servers from Oracle Linux 6.9 to 7.4. After the upgrade the server has over 1 million open files allocated to the ElasticSearch process. I am using version 5.2 of Elastic.…

---

## [\[Hadoop\]\[Spark\] Exclude metadata fields from \_source](https://discuss.elastic.co/t/hadoop-spark-exclude-metadata-fields-from--source/22125)

<div class="topic-metadata">

**Author:** [@Itai\_Yaffe](https://discuss.elastic.co/u/Itai_Yaffe)\
**Replies:** 4\
**Last updated:** [February 19, 2015, 5:03pm UTC](https://discuss.elastic.co/t/hadoop-spark-exclude-metadata-fields-from--source/22125 "2015-02-19T17:03:16Z")

</div>

Hey, I've recently started using Elasticsearch for Spark (Scala application). I've added elasticsearch-spark\_2.10 version 2.1.0.BUILD-SNAPSHOT to my Spark application pom file, and used org.apache.spark.rdd.RDD\[Str…

---

## [Logstash doesn't parse milliseconds with more than 4 digits](https://discuss.elastic.co/t/logstash-doesnt-parse-milliseconds-with-more-than-4-digits/188027)

<div class="topic-metadata">

**Author:** [@111167](https://discuss.elastic.co/u/111167)\
**Replies:** 2\
**Last updated:** [June 28, 2019, 4:05pm UTC](https://discuss.elastic.co/t/logstash-doesnt-parse-milliseconds-with-more-than-4-digits/188027 "2019-06-28T16:05:42Z")

</div>

Hello. I have logstash 6.6.1 version and conf file described below. input { file { start\_position =\> "beginning" path =\> "/logs/log.json" type =\> json } } filter { mutate { rename…

---

## [Painless scripting - Using match\_phrase along with must\_not.exists](https://discuss.elastic.co/t/painless-scripting-using-match-phrase-along-with-must-not-exists/133498)

<div class="topic-metadata">

**Author:** [@Suhas\_K](https://discuss.elastic.co/u/Suhas_K)\
**Replies:** 2\
**Last updated:** [May 28, 2018, 10:05am UTC](https://discuss.elastic.co/t/painless-scripting-using-match-phrase-along-with-must-not-exists/133498 "2018-05-28T10:05:37Z")

</div>

Hi, I am currently using painless scripting to parse through a message field, extract the required information and create a new field consisting of only that information. The issue I'm facing is that if the query is hit…

---

## [Simple iframe app shows empty page](https://discuss.elastic.co/t/simple-iframe-app-shows-empty-page/106041)

<div class="topic-metadata">

**Author:** [@blueemerald](https://discuss.elastic.co/u/blueemerald)\
**Replies:** 8\
**Last updated:** [November 20, 2017, 6:48pm UTC](https://discuss.elastic.co/t/simple-iframe-app-shows-empty-page/106041 "2017-11-20T18:48:37Z")

</div>

I have a kibana app plugin that is implemented as an iframe to another URL. When I go my kibana website the app plugin in shows up. When I click on my app (on the left side where all the apps are), it works just fine. Bu…

---

## [Using csv file as dictionary for translate plugin](https://discuss.elastic.co/t/using-csv-file-as-dictionary-for-translate-plugin/185069)

<div class="topic-metadata">

**Author:** [@leeyu](https://discuss.elastic.co/u/leeyu)\
**Replies:** 6\
**Last updated:** [June 11, 2019, 2:26am UTC](https://discuss.elastic.co/t/using-csv-file-as-dictionary-for-translate-plugin/185069 "2019-06-11T02:26:48Z")

</div>

Hi all, I am new to elastic. Today I was trying to perform translate on a csv file. Including the dictionary in the conf works fine but logstash always shut down if I try to load the dictionary from a csv file. Can a…

---

## [Topbeat Dashboard not working](https://discuss.elastic.co/t/topbeat-dashboard-not-working/87372)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 6\
**Last updated:** [May 31, 2017, 3:59am UTC](https://discuss.elastic.co/t/topbeat-dashboard-not-working/87372 "2017-05-31T03:59:27Z")

</div>

I have Elastic, logstash, FB and kibana configured. Recently, I have added the topbeat on one of my server and have installed the beats dashboard. But when I try viewing the topbeat dashboard i see below error ... I…

---

## [Elasticsearch-Hadoop Integration Issue: cannot find class definition](https://discuss.elastic.co/t/elasticsearch-hadoop-integration-issue-cannot-find-class-definition/293070)

<div class="topic-metadata">

**Author:** [@scheung3](https://discuss.elastic.co/u/scheung3)\
**Replies:** 7\
**Last updated:** [December 31, 2021, 4:38pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-integration-issue-cannot-find-class-definition/293070 "2021-12-31T16:38:27Z")

</div>

Hi helpful community! I am trying to load data from hive to Elasticsearch through a JDBC driver connection. I was able to execute my create index query and load index query without errors. However, I got java errors abo…

---

## [Reducing disk space](https://discuss.elastic.co/t/reducing-disk-space/202593)

<div class="topic-metadata">

**Author:** [@NateC](https://discuss.elastic.co/u/NateC)\
**Replies:** 1\
**Last updated:** [October 11, 2019, 7:16pm UTC](https://discuss.elastic.co/t/reducing-disk-space/202593 "2019-10-11T19:16:26Z")

</div>

Is there a way to reduce the amount of storage is that is used by ES? Right now I have about 30-ish servers using winlogbeat to send to logstash then to ES. An index pattern gets generated each day and by the end, each i…

---

## [Filebeat available for AIX?](https://discuss.elastic.co/t/filebeat-available-for-aix/34947)

<div class="topic-metadata">

**Author:** [@ssampati](https://discuss.elastic.co/u/ssampati)\
**Replies:** 1\
**Last updated:** [November 18, 2015, 4:17pm UTC](https://discuss.elastic.co/t/filebeat-available-for-aix/34947 "2015-11-18T16:17:54Z")

</div>

Im doing a project to replace Splunk \[:smile:\] using ELK Stack opensource. Im having tough time finding Logstash forwarder agent for AIX. Logstash forwarder java is not working as it is supposed to be, Does Filebeat supp…

---

## [Python Client : Receive illegal\_argument\_exception error when trying to create an index template](https://discuss.elastic.co/t/python-client-receive-illegal-argument-exception-error-when-trying-to-create-an-index-template/288457)

<div class="topic-metadata">

**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\
**Replies:** 3\
**Last updated:** [November 8, 2021, 5:55pm UTC](https://discuss.elastic.co/t/python-client-receive-illegal-argument-exception-error-when-trying-to-create-an-index-template/288457 "2021-11-08T17:55:15Z")

</div>

Hi, I am trying to create an index template to use it for my data stream. I use this command to create the template: es = client.Elasticsearch(\['\_host\_name'\], http\_auth=('user', 'psw'), port=\_port, scheme='https', tim…

---

## [Alert for disk space on server with multiple disks](https://discuss.elastic.co/t/alert-for-disk-space-on-server-with-multiple-disks/137856)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 3\
**Last updated:** [June 29, 2018, 1:18pm UTC](https://discuss.elastic.co/t/alert-for-disk-space-on-server-with-multiple-disks/137856 "2018-06-29T13:18:40Z")

</div>

Hello Community, I working to get an alert for diskspace over 75% on server which have multiple drives (A, B, C, D). I having difficulty to in compare condition with multiple drives in a bucket. I hope below snippet of …

---

## [Query with a character on any position on few fields](https://discuss.elastic.co/t/query-with-a-character-on-any-position-on-few-fields/95203)

<div class="topic-metadata">

**Author:** [@mjgasior](https://discuss.elastic.co/u/mjgasior)\
**Replies:** 3\
**Last updated:** [August 2, 2017, 12:34pm UTC](https://discuss.elastic.co/t/query-with-a-character-on-any-position-on-few-fields/95203 "2017-08-02T12:34:17Z")

</div>

I’m pretty new to ElasticSearch and I have some difficulties making the right query in NEST. My data model looks like this: \[ElasticsearchType(Name = "examination")\] public class Project { public Guid Id { get; set;…

---

## [Does the cluster state size impact performance?](https://discuss.elastic.co/t/does-the-cluster-state-size-impact-performance/11344)

<div class="topic-metadata">

**Author:** [@Telvis\_Calhoun\_Jr](https://discuss.elastic.co/u/Telvis_Calhoun_Jr)\
**Replies:** 3\
**Last updated:** [March 28, 2013, 3:45pm UTC](https://discuss.elastic.co/t/does-the-cluster-state-size-impact-performance/11344 "2013-03-28T15:45:14Z")

</div>

In my cluster running 0.20.1, the message returned from /\_cluster/state is 6.8M and growing. Will that cause a problem? -- You received this message because you are subscribed to the Google Groups "elasticsearch" …

---

## [Visualizing Prometheus Histogram](https://discuss.elastic.co/t/visualizing-prometheus-histogram/268668)

<div class="topic-metadata">

**Author:** [@waczi](https://discuss.elastic.co/u/waczi)\
**Replies:** 5\
**Last updated:** [March 30, 2021, 2:40pm UTC](https://discuss.elastic.co/t/visualizing-prometheus-histogram/268668 "2021-03-30T14:40:19Z")

</div>

Hi, which type of aggregation should I use for the Prometheus Histogram Metrics generated like shown below. I would like to sum count and values arrays, for given time period, and then based on that create histogram…

---

## [Errors have caused Elastic Cloud Enterprise installation to fail](https://discuss.elastic.co/t/errors-have-caused-elastic-cloud-enterprise-installation-to-fail/178952)

<div class="topic-metadata">

**Author:** [@Frrrrrunkis](https://discuss.elastic.co/u/Frrrrrunkis)\
**Replies:** 5\
**Last updated:** [May 1, 2019, 1:12am UTC](https://discuss.elastic.co/t/errors-have-caused-elastic-cloud-enterprise-installation-to-fail/178952 "2019-05-01T01:12:19Z")

</div>

trying the install and getting the following \[elk@console1 data\]$ ./elastic-cloud-enterprise.sh install Elastic Cloud Enterprise Installer Start setting up a new Elastic Cloud Enterprise installation by installing th…

---

## [Error while sending the report](https://discuss.elastic.co/t/error-while-sending-the-report/113641)

<div class="topic-metadata">

**Author:** [@uvarisubash](https://discuss.elastic.co/u/uvarisubash)\
**Replies:** 5\
**Last updated:** [January 8, 2018, 9:03am UTC](https://discuss.elastic.co/t/error-while-sending-the-report/113641 "2018-01-08T09:03:21Z")

</div>

I am getting an error while setting up email report: Watch\[inlined\] reporting\[error\_report.pdf\] Error when polling pdf from Error message -------------------------------------------------------------------------------…

---

## [Install Curator in Linux with no Network & Root Access or Pip](https://discuss.elastic.co/t/install-curator-in-linux-with-no-network-root-access-or-pip/89420)

<div class="topic-metadata">

**Author:** [@kevinc1029](https://discuss.elastic.co/u/kevinc1029)\
**Replies:** 5\
**Last updated:** [June 16, 2017, 11:03pm UTC](https://discuss.elastic.co/t/install-curator-in-linux-with-no-network-root-access-or-pip/89420 "2017-06-16T23:03:31Z")

</div>

I'm having trouble installing curator in my Linux stage environment. I don't have network and root access, or pip to help me install curator in my evnironment. What I've tried is using pip to install curator on my l…

---

## [Kibana not loading bcas of allow\_explicit\_index is disabled](https://discuss.elastic.co/t/kibana-not-loading-bcas-of-allow-explicit-index-is-disabled/46556)

<div class="topic-metadata">

**Author:** [@jigish\_thakar](https://discuss.elastic.co/u/jigish_thakar)\
**Replies:** 5\
**Last updated:** [October 14, 2016, 10:24am UTC](https://discuss.elastic.co/t/kibana-not-loading-bcas-of-allow-explicit-index-is-disabled/46556 "2016-10-14T10:24:06Z")

</div>

We are using ES 2.3 with below setting rest.action.multi.allow\_explicit\_index: false and due to some business logic, we cant enable above setting. we need Kibana 4, to work on this cluster and its giving below error. …

---

## [Elastalert - Connection aborted](https://discuss.elastic.co/t/elastalert-connection-aborted/215587)

<div class="topic-metadata">

**Author:** [@Newtoelastic](https://discuss.elastic.co/u/Newtoelastic)\
**Replies:** 2\
**Last updated:** [January 19, 2020, 10:44am UTC](https://discuss.elastic.co/t/elastalert-connection-aborted/215587 "2020-01-19T10:44:16Z")

</div>

Hey there guys, first time trying to work with Elastalert. I am attempting to use the elastalert-create-index command and I getting an odd response back. I used the same host and port on all my other config files and e…

---

## [Logstash Date Filter: Translation Missing](https://discuss.elastic.co/t/logstash-date-filter-translation-missing/79182)

<div class="topic-metadata">

**Author:** [@BenMatheja](https://discuss.elastic.co/u/BenMatheja)\
**Replies:** 0\
**Last updated:** [March 19, 2017, 5:58pm UTC](https://discuss.elastic.co/t/logstash-date-filter-translation-missing/79182 "2017-03-19T17:58:57Z")

</div>

I'm trying to use the date filter to parse an nginx access log. filter { if \[type\] == "nginx\_access" { grok { match =\> { "message" =\> "%{COMBINEDAPACHELOG}+%{GREEDYDATA:extra\_fields}" } } #locale is …

---

## [Can be Rally used to benchmark Kibana?](https://discuss.elastic.co/t/can-be-rally-used-to-benchmark-kibana/301794)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 4\
**Last updated:** [April 7, 2022, 2:22pm UTC](https://discuss.elastic.co/t/can-be-rally-used-to-benchmark-kibana/301794 "2022-04-07T14:22:15Z")

</div>

I want to benchmark an Elastic Cloud Kibana installation and I was thinking on using Rally. Is it possible? and how? Thanks!

[Previous page](https://discuss.elastic.co/top.md?page=833&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=835&per_page=50&period=all)
