# Top **URL:** https://discuss.elastic.co/top.md?page=848&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 849 --- ## [Shard awareness: multiple awareness attributes](https://discuss.elastic.co/t/shard-awareness-multiple-awareness-attributes/65506)
**Author:** [@drjz](https://discuss.elastic.co/u/drjz)\ **Replies:** 4\ **Last updated:** [November 14, 2016, 9:49am UTC](https://discuss.elastic.co/t/shard-awareness-multiple-awareness-attributes/65506 "2016-11-14T09:49:27Z")
We want to make the shards awareness of the infrastructure topology. We have racks, and within those racks, we have zones. A zone consists of multiple physical machines. A physical machine has multiple virtual machines. … --- ## [How to check logstash have listen snmptrap?](https://discuss.elastic.co/t/how-to-check-logstash-have-listen-snmptrap/44530)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 4\ **Last updated:** [March 24, 2016, 1:04pm UTC](https://discuss.elastic.co/t/how-to-check-logstash-have-listen-snmptrap/44530 "2016-03-24T13:04:16Z")
I am a new to lostash and elastichsearch. I want to collection logs of network devices by snmptrap. I have a problem with logstash. +snmptrapd.conf authCommunity log,net public forward default localhost:1062 +logstas… --- ## [Taking backup with NetApps snapshot](https://discuss.elastic.co/t/taking-backup-with-netapps-snapshot/39079)
**Author:** [@Ken\_Astrup](https://discuss.elastic.co/u/Ken_Astrup)\ **Replies:** 4\ **Last updated:** [January 18, 2016, 7:17am UTC](https://discuss.elastic.co/t/taking-backup-with-netapps-snapshot/39079 "2016-01-18T07:17:53Z")
I am implementing a backup solution to our elasticsearch cluster. All the indices on the whole cluster (10 data nodes, 3 master nodes) is stored on the same NetApp FAS8000 network share. NetApp has incredibly fast snap… --- ## [ClusterBlockException after upgrade 1.7 to 2.1](https://discuss.elastic.co/t/clusterblockexception-after-upgrade-1-7-to-2-1/35579)
**Author:** [@Greg\_5](https://discuss.elastic.co/u/Greg_5)\ **Replies:** 4\ **Last updated:** [November 26, 2015, 7:31am UTC](https://discuss.elastic.co/t/clusterblockexception-after-upgrade-1-7-to-2-1/35579 "2015-11-26T07:31:20Z")
Hello, I upgraded my cluster from 1.7 to 2.1. Everything was green with the migration plugin. Some of my indices where set as read only. After the upgrade ALL my indices are not readable. I got a ClusterBlockException … --- ## [Date Histogram Visualization](https://discuss.elastic.co/t/date-histogram-visualization/296199)
**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\ **Replies:** 3\ **Last updated:** [February 4, 2022, 11:40am UTC](https://discuss.elastic.co/t/date-histogram-visualization/296199 "2022-02-04T11:40:41Z")
I have a Datetime field in my index and I want to show a visualization where I will be able to see in which hours my records are the most frequent. But when I use the Date Histogram and choose to show "per 2 hours" for e… --- ## [Calculate time difference between two log lines in a file](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-in-a-file/203606)
**Author:** [@basavyr](https://discuss.elastic.co/u/basavyr)\ **Replies:** 3\ **Last updated:** [October 16, 2019, 1:33pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-log-lines-in-a-file/203606 "2019-10-16T13:33:06Z")
Hello there, I have a log file (given by the SLURM workload manager) that looks something like this: 2019-07-15 13:26:40 Started - job id: V3gNDm1MD7unkvVVEmSjiJLoABFKDmABFKDmtdGKDmABFKDmN8Erlm, unix user: 45001:45000,… --- ## [Problem with crashing UDP Sender in Logstash](https://discuss.elastic.co/t/problem-with-crashing-udp-sender-in-logstash/179032)
**Author:** [@pipari](https://discuss.elastic.co/u/pipari)\ **Replies:** 3\ **Last updated:** [April 30, 2019, 8:10am UTC](https://discuss.elastic.co/t/problem-with-crashing-udp-sender-in-logstash/179032 "2019-04-30T08:10:42Z")
Hi, We use logstash to send UDP data through a secure interface that only allows communication in one direction. It worked very well intil I introduced a little more load to it. Running ELK stack 6.6.0 with filebeat an… --- ## [How to create a webhook for Appsearch from Contentful](https://discuss.elastic.co/t/how-to-create-a-webhook-for-appsearch-from-contentful/162192)
**Author:** [@venu.pgi](https://discuss.elastic.co/u/venu.pgi)\ **Replies:** 2\ **Last updated:** [January 2, 2019, 3:12pm UTC](https://discuss.elastic.co/t/how-to-create-a-webhook-for-appsearch-from-contentful/162192 "2019-01-02T15:12:09Z")
HI, I have created a webhook from contentful cms like below, using post method. POST: https://host-ucy3pj.api.swiftype.com/api/as/v1/engines/national-parks-demo/documents. But it fails to send data into the Appsearch. … --- ## [Add math to metrics in kibana](https://discuss.elastic.co/t/add-math-to-metrics-in-kibana/132412)
**Author:** [@tfe2012](https://discuss.elastic.co/u/tfe2012)\ **Replies:** 2\ **Last updated:** [May 19, 2018, 1:34am UTC](https://discuss.elastic.co/t/add-math-to-metrics-in-kibana/132412 "2018-05-19T01:34:02Z")
I have this count metric: \[42\] Is it possible this number (457) multiply on some coefficient ? For example 457 \* (10 / 29) to get: 157,58 --- ## [Print values from all aggregation buckets into alert email body](https://discuss.elastic.co/t/print-values-from-all-aggregation-buckets-into-alert-email-body/56442)
**Author:** [@ignaqui](https://discuss.elastic.co/u/ignaqui)\ **Replies:** 2\ **Last updated:** [July 27, 2016, 1:37pm UTC](https://discuss.elastic.co/t/print-values-from-all-aggregation-buckets-into-alert-email-body/56442 "2016-07-27T13:37:23Z")
Hello! I'm trying to create watcher which will put data from aggregation into email's body. However, I stuck with the transformation. I even tried to hardcode say, 1st element of aggregation, like: {{ctx.payload.aggre… --- ## [Completion suggester sorting](https://discuss.elastic.co/t/completion-suggester-sorting/17131)
**Author:** [@Facundo\_Olano](https://discuss.elastic.co/u/Facundo_Olano)\ **Replies:** 2\ **Last updated:** [April 26, 2014, 12:05am UTC](https://discuss.elastic.co/t/completion-suggester-sorting/17131 "2014-04-26T00:05:40Z")
Hi, I'm using the completion suggester for an autocomplete API. I need it to autocomplete on middle words, so for example "Siberian Tiger" should be a suggestion for "tig". To accomplish that, following the documentati… --- ## [CSV exporting reports fails almost all the time](https://discuss.elastic.co/t/csv-exporting-reports-fails-almost-all-the-time/289087)
**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:09pm UTC](https://discuss.elastic.co/t/csv-exporting-reports-fails-almost-all-the-time/289087 "2021-12-02T19:09:17Z")
In very similar vanes as 7.5 \[reporting\] fails randomly and Kibana Reporting -csv download fails frequently with error 'Unable to generate report Max attempts reached (3)' we're currently unable to do CSV exporting most … --- ## [Auditbeat index pattern](https://discuss.elastic.co/t/auditbeat-index-pattern/185579)
**Author:** [@yasin](https://discuss.elastic.co/u/yasin)\ **Replies:** 7\ **Last updated:** [June 13, 2019, 1:21pm UTC](https://discuss.elastic.co/t/auditbeat-index-pattern/185579 "2019-06-13T13:21:45Z")
I'm not able to create the index pattern and tried the following steps. what am i doing wrong? Tried 1: auditbeat setup --template -E output.logstash.enabled=false -E output.elasticsearch.hosts= -E setup.kibana.userna… --- ## [Fuzzy search "too complex to determinize exception" with unicode characters](https://discuss.elastic.co/t/fuzzy-search-too-complex-to-determinize-exception-with-unicode-characters/168882)
**Author:** [@CathalCoffey](https://discuss.elastic.co/u/CathalCoffey)\ **Replies:** 1\ **Last updated:** [February 19, 2019, 10:48am UTC](https://discuss.elastic.co/t/fuzzy-search-too-complex-to-determinize-exception-with-unicode-characters/168882 "2019-02-19T10:48:11Z")
We occasionally see the following exception. It seems to be dependant on whether the search contains unicode characters or not. { "error": { "root\_cause": \[ { "type": "too\_complex\_to\_determinize\_exce… --- ## [Nginx Access Logs Parsing Using Filebeat On Kubernetes Cluster](https://discuss.elastic.co/t/nginx-access-logs-parsing-using-filebeat-on-kubernetes-cluster/147303)
**Author:** [@Arjun\_Sharma](https://discuss.elastic.co/u/Arjun_Sharma)\ **Replies:** 1\ **Last updated:** [September 5, 2018, 6:53am UTC](https://discuss.elastic.co/t/nginx-access-logs-parsing-using-filebeat-on-kubernetes-cluster/147303 "2018-09-05T06:53:57Z")
We are using elasticsearch for centralized logging in our application. There are many components in our application which generate logs. All components running in kubernetes cluster. we are using filebeat as deamonset … --- ## [Getting unique list from array of nested objects](https://discuss.elastic.co/t/getting-unique-list-from-array-of-nested-objects/9623)
**Author:** [@Mark\_Huang\_2](https://discuss.elastic.co/u/Mark_Huang_2)\ **Replies:** 1\ **Last updated:** [November 8, 2012, 12:28pm UTC](https://discuss.elastic.co/t/getting-unique-list-from-array-of-nested-objects/9623 "2012-11-08T12:28:31Z")
Hi guys, I am using couchdb with elasticsearch and up until recently, I've been a very happy and satisfied user. Recently there was an issue that I could not figure how to solve using pure ElasticSearch. I wante… --- ## [Understanding field limit across index pattern and solution to mapping explosion](https://discuss.elastic.co/t/understanding-field-limit-across-index-pattern-and-solution-to-mapping-explosion/196262)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 4\ **Last updated:** [August 26, 2019, 3:22pm UTC](https://discuss.elastic.co/t/understanding-field-limit-across-index-pattern-and-solution-to-mapping-explosion/196262 "2019-08-26T15:22:20Z")
Hi, elasticsearch and kibana version: 7.0 We are experiencing mapping explosion with number of fields upto 4500 and increasing. Then the first thing which came to our mind was to implement nested fields to reduce the n… --- ## [Timelion: Error: in cell #1: Elasticsearch index not found: metricbeat-\*](https://discuss.elastic.co/t/timelion-error-in-cell-1-elasticsearch-index-not-found-metricbeat/131678)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 4\ **Last updated:** [May 14, 2018, 9:19am UTC](https://discuss.elastic.co/t/timelion-error-in-cell-1-elasticsearch-index-not-found-metricbeat/131678 "2018-05-14T09:19:13Z")
Hi, I wanted to use Timelion but I have this error : Timelion: Error: in cell #1: Elasticsearch index not found: metricbeat-\* How could I resolve it ? --- ## [Kibana http requests instead of https? i.e. without encryption](https://discuss.elastic.co/t/kibana-http-requests-instead-of-https-i-e-without-encryption/64243)
**Author:** [@jasona](https://discuss.elastic.co/u/jasona)\ **Replies:** 4\ **Last updated:** [October 28, 2016, 11:45pm UTC](https://discuss.elastic.co/t/kibana-http-requests-instead-of-https-i-e-without-encryption/64243 "2016-10-28T23:45:12Z")
I'm running kibana 4.6.1 behind nginx configured as a reverse proxy to terminate TLS connections. I'd like the nginx -\> kibana connections to happen over http rather that https so that my logging can be effective, and… --- ## [Snapshot failing for 1 shard](https://discuss.elastic.co/t/snapshot-failing-for-1-shard/263446)
**Author:** [@ParashB](https://discuss.elastic.co/u/ParashB)\ **Replies:** 3\ **Last updated:** [February 8, 2021, 11:44am UTC](https://discuss.elastic.co/t/snapshot-failing-for-1-shard/263446 "2021-02-08T11:44:46Z")
Hi Guys, I am using SLM to create snapshots but its failing to snapshot 1 of the shards consistently. The shard is 120GB in size but I have been able to snapshot such large shards for other indices successfully. I can't… --- ## [Fields are not visible in the Discovery panel](https://discuss.elastic.co/t/fields-are-not-visible-in-the-discovery-panel/233915)
**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\ **Replies:** 3\ **Last updated:** [June 2, 2020, 7:59pm UTC](https://discuss.elastic.co/t/fields-are-not-visible-in-the-discovery-panel/233915 "2020-06-02T19:59:12Z")
Hello, I am encountering a "weird" problem with kibana. I am ingesting some few event from an ESXi Vmware through logstash to Elasticsearch. At first I can see the fields that I added with logstash on the discovery pan… --- ## [How to set a user with customized roles for kibana on ECK](https://discuss.elastic.co/t/how-to-set-a-user-with-customized-roles-for-kibana-on-eck/353690)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 5\ **Last updated:** [February 22, 2024, 7:21am UTC](https://discuss.elastic.co/t/how-to-set-a-user-with-customized-roles-for-kibana-on-eck/353690 "2024-02-22T07:21:59Z")
apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: quickstart spec: version: 8.12.0 count: 1 elasticsearchRef: name: quickstart namespace: default http: tls: selfSignedCertifica… --- ## [Slow query performance with a large size value](https://discuss.elastic.co/t/slow-query-performance-with-a-large-size-value/25702)
**Author:** [@dag](https://discuss.elastic.co/u/dag)\ **Replies:** 5\ **Last updated:** [July 16, 2015, 11:50am UTC](https://discuss.elastic.co/t/slow-query-performance-with-a-large-size-value/25702 "2015-07-16T11:50:33Z")
Hello, Firstly, sorry for my wrong english. I have a index called sample. This index has a lot of documents. (about 2 millions) My query example: POST samples/sample/\_search { "\_source": \["someId"\], "size": 50… --- ## [Delete index automatically after particular days](https://discuss.elastic.co/t/delete-index-automatically-after-particular-days/251289)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 5:16am UTC](https://discuss.elastic.co/t/delete-index-automatically-after-particular-days/251289 "2020-10-08T05:16:59Z")
Hi, I am using Logstash to ingest log data to elasticsearch, Indices are created daily, that every day's index has a unique name like index\_name-YYYY-MM-DD. So, after 30 days, there will be 30 indices. On day 31st, I wa… --- ## [Counting the duplicates and non-duplicates of a count aggregation](https://discuss.elastic.co/t/counting-the-duplicates-and-non-duplicates-of-a-count-aggregation/243916)
**Author:** [@benji87](https://discuss.elastic.co/u/benji87)\ **Replies:** 2\ **Last updated:** [August 6, 2020, 8:08am UTC](https://discuss.elastic.co/t/counting-the-duplicates-and-non-duplicates-of-a-count-aggregation/243916 "2020-08-06T08:08:58Z")
Hello all, I'm hoping someone can help me with my issue, as I feel it's a simple problem to solve and it's just me missing something! I'm fairly new to ELK (3 months in), so hopefully this isn't too much of a newbie qu… --- ## [Monitoring throwing error](https://discuss.elastic.co/t/monitoring-throwing-error/88352)
**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Replies:** 6\ **Last updated:** [June 23, 2017, 6:57am UTC](https://discuss.elastic.co/t/monitoring-throwing-error/88352 "2017-06-23T06:57:59Z")
Hi Team, I'm using ELK stack 5.4 version and i can see there is an error while i click on monitoring in kibana. please find the below screenshot and let us know the solution. please let us know what is the issue ple… --- ## [How to improve performance of facet queries?](https://discuss.elastic.co/t/how-to-improve-performance-of-facet-queries/13512)
**Author:** [@Guillermo\_Arias\_del\_](https://discuss.elastic.co/u/Guillermo_Arias_del_)\ **Replies:** 6\ **Last updated:** [September 12, 2013, 9:56am UTC](https://discuss.elastic.co/t/how-to-improve-performance-of-facet-queries/13512 "2013-09-12T09:56:31Z")
Hi, I'm trying to improve the performance of my facet queries. My typical facet query looks a bit more complicated (two facets with regex and a more complex query), but I have reduced it to a very simple example: … --- ## [ML job update](https://discuss.elastic.co/t/ml-job-update/239220)
**Author:** [@saraKM](https://discuss.elastic.co/u/saraKM)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 2:19pm UTC](https://discuss.elastic.co/t/ml-job-update/239220 "2020-06-30T14:19:25Z")
Hi Is there a way to update job id (or some other attribute which is not supported in \_update API) while keeping previous results/models for a long-running job? or a way to clone a job, but also including model/results? … --- ## [Unable to format date and time correctly](https://discuss.elastic.co/t/unable-to-format-date-and-time-correctly/213217)
**Author:** [@sidhusaab](https://discuss.elastic.co/u/sidhusaab)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 9:08pm UTC](https://discuss.elastic.co/t/unable-to-format-date-and-time-correctly/213217 "2019-12-27T21:08:38Z")
I have been reading on various forums here, on stackoverflow and java pages about date time formatting. I have syslog time stamp which is "Dec 10 01:23:44" format. I simply wanted to add year to the timestamp so I added %… --- ## [Performance of filtered wildcard queries](https://discuss.elastic.co/t/performance-of-filtered-wildcard-queries/133841)
**Author:** [@tobstarr](https://discuss.elastic.co/u/tobstarr)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 3:07am UTC](https://discuss.elastic.co/t/performance-of-filtered-wildcard-queries/133841 "2018-06-01T03:07:43Z")
Hi all, I have a very simple index structure only containing the fields (project\_id:int and name:string). What I want to do is a wildcard (infix) query on the name field and that scoped with the project\_id. What I am us… --- ## [Running as non-root user: Service wrapper has changed](https://discuss.elastic.co/t/running-as-non-root-user-service-wrapper-has-changed/7863)
**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\ **Replies:** 1\ **Last updated:** [May 25, 2012, 4:25pm UTC](https://discuss.elastic.co/t/running-as-non-root-user-service-wrapper-has-changed/7863 "2012-05-25T16:25:02Z")
Hi all Just to let you know that if you are using the service wrapper and running elasticsearch as a non-root user, eg using the instructions on http://www.elasticsearch.org/tutorials/2011/02/22/running-elasticsearc… --- ## [Large dataset leads to TaskCancelledException: cancelled](https://discuss.elastic.co/t/large-dataset-leads-to-taskcancelledexception-cancelled/243720)
**Author:** [@sherzinger](https://discuss.elastic.co/u/sherzinger)\ **Replies:** 3\ **Last updated:** [August 7, 2020, 7:02am UTC](https://discuss.elastic.co/t/large-dataset-leads-to-taskcancelledexception-cancelled/243720 "2020-08-07T07:02:11Z")
Hi, When watching a dashboard or browsing Discovery of a large datas et (several 100GB) sometimes Elastic will just give up with the error message below. The cluster consists of 10 nodes with a total of 88 cores and 75… --- ## [Kibana URL shows "Not Secure" when HTTPS enabled](https://discuss.elastic.co/t/kibana-url-shows-not-secure-when-https-enabled/146765)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 3\ **Last updated:** [August 30, 2018, 8:36pm UTC](https://discuss.elastic.co/t/kibana-url-shows-not-secure-when-https-enabled/146765 "2018-08-30T20:36:31Z")
Hello there, I enabled the SSL on ELK and now I'm able to log on to Kibana with HTTPS, but on the URL, it always show "Not Secure" in RED and the HTTPS in the url was crossed out in Red. Is there anyway to get rid of … --- ## [Hive real time or near real time sync with ES](https://discuss.elastic.co/t/hive-real-time-or-near-real-time-sync-with-es/202103)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 4\ **Last updated:** [October 16, 2019, 8:24pm UTC](https://discuss.elastic.co/t/hive-real-time-or-near-real-time-sync-with-es/202103 "2019-10-16T20:24:38Z")
Dear All, Have a scenario, I am successfully able to bring Hive table data to ES. At the same time when it comes to sync latest updated row data from same Hive table then there is a manual work required to get the updat… --- ## [Deleted an index in Kibana Settings, and now all Kibana screens are blank](https://discuss.elastic.co/t/deleted-an-index-in-kibana-settings-and-now-all-kibana-screens-are-blank/36081)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 4\ **Last updated:** [December 10, 2015, 3:55pm UTC](https://discuss.elastic.co/t/deleted-an-index-in-kibana-settings-and-now-all-kibana-screens-are-blank/36081 "2015-12-10T15:55:03Z")
Hi folks. I just deleted an old index in the Kibana Settings (an old logstash-product-\* one, we have several products), and now my Kibana only shows the logo and menu-bar, with nothing but a white box below. I'm not … --- ## [Kafka for read-only replication?](https://discuss.elastic.co/t/kafka-for-read-only-replication/33784)
**Author:** [@Bobby\_Pilot](https://discuss.elastic.co/u/Bobby_Pilot)\ **Replies:** 4\ **Last updated:** [November 7, 2015, 4:40pm UTC](https://discuss.elastic.co/t/kafka-for-read-only-replication/33784 "2015-11-07T16:40:34Z")
We have a need now for remote cluster replication. (Can't wait for native replication whenever that might be coming...) I don't need active active (yet) but I do need to replicate all the indices within the cluster to a … --- ## [Compare two time periods for same timeseries](https://discuss.elastic.co/t/compare-two-time-periods-for-same-timeseries/297196)
**Author:** [@achint](https://discuss.elastic.co/u/achint)\ **Replies:** 2\ **Last updated:** [March 7, 2022, 5:50pm UTC](https://discuss.elastic.co/t/compare-two-time-periods-for-same-timeseries/297196 "2022-03-07T17:50:35Z")
Hi, I run performance tests on different time periods and i get the application response time in ELK. I want to compare these time intervals so that i can compare the response time for different build. Response time dat… --- ## [Force default "type" of new fields to be "string"?](https://discuss.elastic.co/t/force-default-type-of-new-fields-to-be-string/11618)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 2\ **Last updated:** [April 17, 2013, 9:51pm UTC](https://discuss.elastic.co/t/force-default-type-of-new-fields-to-be-string/11618 "2013-04-17T21:51:04Z")
Hi, I'm currently setting the type of the "known" fields in my index via elasticsearch-0.19.3/config/templates/foo.json: { "foo\_template" : { "template" : "\*", "settings" : { "ind… --- ## [Filebeat - How to disable "kube-system" namespace logs?](https://discuss.elastic.co/t/filebeat-how-to-disable-kube-system-namespace-logs/259313)
**Author:** [@David\_Fachini](https://discuss.elastic.co/u/David_Fachini)\ **Replies:** 5\ **Last updated:** [December 23, 2020, 3:15pm UTC](https://discuss.elastic.co/t/filebeat-how-to-disable-kube-system-namespace-logs/259313 "2020-12-23T15:15:42Z")
Hello, I am using Elasticsearch + Filebeat and Kibana. I have two namespaces "datastore" and "logging". I would like only to collect logs from those and avoid to harvest log from "kube-system". Checking in kibana I am a… --- ## [Logstash JDBC Statement with Unicode](https://discuss.elastic.co/t/logstash-jdbc-statement-with-unicode/59412)
**Author:** [@yaacovki](https://discuss.elastic.co/u/yaacovki)\ **Replies:** 5\ **Last updated:** [September 14, 2016, 5:34am UTC](https://discuss.elastic.co/t/logstash-jdbc-statement-with-unicode/59412 "2016-09-14T05:34:52Z")
Hi, I'm trying to Run an Oracle SQL Statement with JDBC. the SQL Statement has some unicode text in it (Hebrew) in order to filter information. Logstash cannot run this. this is a basic example that isnt working n… --- ## [Error: No config files found: /etc/logstash/conf.d](https://discuss.elastic.co/t/error-no-config-files-found-etc-logstash-conf-d/20084)
**Author:** [@StueckJu](https://discuss.elastic.co/u/StueckJu)\ **Replies:** 1\ **Last updated:** [October 6, 2014, 11:49am UTC](https://discuss.elastic.co/t/error-no-config-files-found-etc-logstash-conf-d/20084 "2014-10-06T11:49:22Z")
Hey, when i start logstash as a service /etc/init.d/logstash start, i get the Error Message in the topic in file logstash.stdout. I have a logstash config file in the directory /etc/logstash/conf.d/server.conf. So … --- ## [Logstash not reading more than 2 files](https://discuss.elastic.co/t/logstash-not-reading-more-than-2-files/95269)
**Author:** [@P\_Kumar](https://discuss.elastic.co/u/P_Kumar)\ **Replies:** 6\ **Last updated:** [August 3, 2017, 2:42am UTC](https://discuss.elastic.co/t/logstash-not-reading-more-than-2-files/95269 "2017-08-03T02:42:13Z")
Hi , I am new to ELK , i am trying to read the logs for IBM dmgr ,node and Application logs . but it is reading top 2 file input and creating index but 3rd file is not creating index and not reading could you please hel… --- ## [Logstash ingest pipeline - Data from one pipeline going to another](https://discuss.elastic.co/t/logstash-ingest-pipeline-data-from-one-pipeline-going-to-another/289131)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 8\ **Last updated:** [December 12, 2021, 9:35am UTC](https://discuss.elastic.co/t/logstash-ingest-pipeline-data-from-one-pipeline-going-to-another/289131 "2021-12-12T09:35:42Z")
Hello, I hope my message finds the members of the community and their loved ones safe and healthy. I am running logstash (7.15.2) on a Raspberry Pi 4B running Ubuntu 20.04.3 LTS. I have seven pipelines, all listening … --- ## [filebeat+logstash,The number of output events per second cannot break the hard limit (CPU and memory are sufficient)](https://discuss.elastic.co/t/filebeat-logstash-the-number-of-output-events-per-second-cannot-break-the-hard-limit-cpu-and-memory-are-sufficient/273596)
**Author:** [@liuliugang](https://discuss.elastic.co/u/liuliugang)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 1:13am UTC](https://discuss.elastic.co/t/filebeat-logstash-the-number-of-output-events-per-second-cannot-break-the-hard-limit-cpu-and-memory-are-sufficient/273596 "2021-05-24T01:13:59Z")
FileBeat configuration :2 core 8G Logstahs configuration :8 core 8G FileBeat version and Logstash version 7.10.0 Single node FileBeat sends log to Logstash. The number of data per second is fixed and cannot break the 6… --- ## [Formatting fields... html, markdown](https://discuss.elastic.co/t/formatting-fields-html-markdown/204514)
**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\ **Replies:** 3\ **Last updated:** [October 28, 2019, 9:32am UTC](https://discuss.elastic.co/t/formatting-fields-html-markdown/204514 "2019-10-28T09:32:08Z")
I have data in Elasticsearch where some fields are currently formatted as HTML. It contains simple things like P, A, B and I tags. These are fields that are never aggregated on but are sometimes displayed. Is there so… --- ## [Deep nesting and recommendation for its usage](https://discuss.elastic.co/t/deep-nesting-and-recommendation-for-its-usage/185321)
**Author:** [@abhigyan](https://discuss.elastic.co/u/abhigyan)\ **Replies:** 3\ **Last updated:** [June 12, 2019, 7:14am UTC](https://discuss.elastic.co/t/deep-nesting-and-recommendation-for-its-usage/185321 "2019-06-12T07:14:39Z")
Hello ES community! We are building cloud application which is going to have high scaling data store inside an RDBMS. What we are trying to do is moving the relational data which are searchable to the ES which everyone … --- ## [Using Cassandra in addition to Elasticsearch](https://discuss.elastic.co/t/using-cassandra-in-addition-to-elasticsearch/169172)
**Author:** [@krambambuli](https://discuss.elastic.co/u/krambambuli)\ **Replies:** 3\ **Last updated:** [February 20, 2019, 4:11pm UTC](https://discuss.elastic.co/t/using-cassandra-in-addition-to-elasticsearch/169172 "2019-02-20T16:11:51Z")
Hi there, as far as I understand Elastic has matured enough by now to be used as a primary data store. Data losses are getting less and less likely and the possibility of freezing indexes introduced in version 6.6 allow… --- ## [How to calculate the throughput of parallel indexing?](https://discuss.elastic.co/t/how-to-calculate-the-throughput-of-parallel-indexing/149213)
**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\ **Replies:** 8\ **Last updated:** [September 20, 2018, 7:40am UTC](https://discuss.elastic.co/t/how-to-calculate-the-throughput-of-parallel-indexing/149213 "2018-09-20T07:40:11Z")
There is a test scenario for me, the configuration file is (track.json): {% if index\_count is not defined %} {% set index\_count = 1 %} {% endif %} {% set index\_prefix = "billions-jssz.benchmark.scene1-" %} {% import "ra… --- ## [Slow loading or timeout in Discover](https://discuss.elastic.co/t/slow-loading-or-timeout-in-discover/58398)
**Author:** [@bastianhoss](https://discuss.elastic.co/u/bastianhoss)\ **Replies:** 3\ **Last updated:** [August 19, 2016, 8:56pm UTC](https://discuss.elastic.co/t/slow-loading-or-timeout-in-discover/58398 "2016-08-19T20:56:48Z")
Hi Community, It's me... I'm wondering why loading of data in discover is very slow or timeout. But calculation of 5 visualizations in a dashboard (Same time range) takes 10 seconds... --- ## [Elasticsearch doesn't join the cluster back after restart](https://discuss.elastic.co/t/elasticsearch-doesnt-join-the-cluster-back-after-restart/46478)
**Author:** [@vinod8427](https://discuss.elastic.co/u/vinod8427)\ **Replies:** 3\ **Last updated:** [April 6, 2016, 7:16am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-join-the-cluster-back-after-restart/46478 "2016-04-06T07:16:21Z")
I have 3 node cluster whose config is as below: Node1: discovery.zen.ping.unicast.hosts: \["10.0.0.57"\] discovery.zen.minimum\_master\_nodes: 2 Node2: discovery.zen.ping.unicast.hosts: \["10.0.0.57","10.0.0.58"\] … [Previous page](https://discuss.elastic.co/top.md?page=847&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=849&per_page=50&period=all)