# Top

**URL:** https://discuss.elastic.co/top.md?page=901&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 902

---

## [Spark SQL thriftserver DDL?](https://discuss.elastic.co/t/spark-sql-thriftserver-ddl/42450)

<div class="topic-metadata">

**Author:** [@andrewwwooster](https://discuss.elastic.co/u/andrewwwooster)\
**Replies:** 2\
**Last updated:** [March 3, 2016, 9:31am UTC](https://discuss.elastic.co/t/spark-sql-thriftserver-ddl/42450 "2016-03-03T09:31:22Z")

</div>

I have a working example using the Elasticsearch/Hive SQL connector. It allows me to use Tableau to query Elasticsearch. Here is my working Hive SQL DDL: CREATE EXTERNAL TABLE biblio\_raw ( url STRING, conte…

---

## [How to Search Freeze Index using Java High Level REST Client](https://discuss.elastic.co/t/how-to-search-freeze-index-using-java-high-level-rest-client/189275)

<div class="topic-metadata">

**Author:** [@taku333](https://discuss.elastic.co/u/taku333)\
**Replies:** 5\
**Last updated:** [July 9, 2019, 1:47am UTC](https://discuss.elastic.co/t/how-to-search-freeze-index-using-java-high-level-rest-client/189275 "2019-07-09T01:47:01Z")

</div>

Hi Everyone, Currently, I am creating an application that acquires data from Elasticsearch using Java High Level REST Client. So I want to implement a search for the Freeze Index, but can't find something in the docume…

---

## [Slow bulk indexing performance](https://discuss.elastic.co/t/slow-bulk-indexing-performance/156365)

<div class="topic-metadata">

**Author:** [@TDZ](https://discuss.elastic.co/u/TDZ)\
**Replies:** 5\
**Last updated:** [November 13, 2018, 11:56am UTC](https://discuss.elastic.co/t/slow-bulk-indexing-performance/156365 "2018-11-13T11:56:05Z")

</div>

Im using ES 6.4.3 on Google Compute. Im indexing documents where each doc has 6 fields, 4 ints, 2 floats. Index has 5 shards and replication factor of 1. All fields are indexed (didnt add anything in the mapping, only ty…

---

## [Elastic 2.3.4 Client nodes do not see each other](https://discuss.elastic.co/t/elastic-2-3-4-client-nodes-do-not-see-each-other/61283)

<div class="topic-metadata">

**Author:** [@Moshe\_Sucaz](https://discuss.elastic.co/u/Moshe_Sucaz)\
**Replies:** 5\
**Last updated:** [September 26, 2016, 7:09am UTC](https://discuss.elastic.co/t/elastic-2-3-4-client-nodes-do-not-see-each-other/61283 "2016-09-26T07:09:26Z")

</div>

I am having a problem with Elastic 2.3.4 where nodes do not see each other. When I try to boot them, both nodes are "started", but when checking cluster health I get master\_not\_discovered\_exception (503) my configurati…

---

## [Dynamic Template not working after upgrading to Elasticsearch 2.3.1](https://discuss.elastic.co/t/dynamic-template-not-working-after-upgrading-to-elasticsearch-2-3-1/48475)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 5\
**Last updated:** [April 29, 2016, 6:59pm UTC](https://discuss.elastic.co/t/dynamic-template-not-working-after-upgrading-to-elasticsearch-2-3-1/48475 "2016-04-29T18:59:49Z")

</div>

I just upgraded the elasticsearch from 2.0 to 2.3.1 It is strange that the templates I used to use were working in 2.0, but not working in 2.3.1 The same logstash instance I was using to inject the same docs, but the d…

---

## [Logstash/logstash forwarder connection issue](https://discuss.elastic.co/t/logstash-logstash-forwarder-connection-issue/40532)

<div class="topic-metadata">

**Author:** [@DavidL](https://discuss.elastic.co/u/DavidL)\
**Replies:** 5\
**Last updated:** [February 8, 2016, 10:58pm UTC](https://discuss.elastic.co/t/logstash-logstash-forwarder-connection-issue/40532 "2016-02-08T22:58:12Z")

</div>

Hello, I am trying to send records using logstash forwarder to logstash instance(dedicated server), then from logstash to elasticsearch(another dedicated server) but got this error from logstash: Lumberjack input: The …

---

## [APM manual distributed tracing](https://discuss.elastic.co/t/apm-manual-distributed-tracing/192532)

<div class="topic-metadata">

**Author:** [@nashwin2804](https://discuss.elastic.co/u/nashwin2804)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 2:06pm UTC](https://discuss.elastic.co/t/apm-manual-distributed-tracing/192532 "2019-07-31T14:06:28Z")

</div>

Problem Description I have a client application that makes http get request to server. With auto instrumentation, I am getting this as a single trace. But with manual instrumentation, I am getting 2 different traces. Ho…

---

## [Apm-agent-java don't work](https://discuss.elastic.co/t/apm-agent-java-dont-work/315742)

<div class="topic-metadata">

**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\
**Replies:** 3\
**Last updated:** [October 11, 2022, 10:22am UTC](https://discuss.elastic.co/t/apm-agent-java-dont-work/315742 "2022-10-11T10:22:42Z")

</div>

Hi friends, I configured elastic-agent with elastic-agent-java to monitoring app myapp.jar, but I have the follow error: ERROR co.elastic.apm.agent.report.IntakeV2ReportingEventHandler - Error sending data to APM server…

---

## [German compound words in an e-commerce search](https://discuss.elastic.co/t/german-compound-words-in-an-e-commerce-search/270280)

<div class="topic-metadata">

**Author:** [@thaarbach](https://discuss.elastic.co/u/thaarbach)\
**Replies:** 3\
**Last updated:** [May 31, 2021, 9:59am UTC](https://discuss.elastic.co/t/german-compound-words-in-an-e-commerce-search/270280 "2021-05-31T09:59:27Z")

</div>

Hi elastic! We are developing an e-commerce application and have been using elasticsearch 2.0 since 2014. We are prevented from upgrading by a problem that we simply cannot solve with the current ES version. The german…

---

## [How to Compare Data from 2 indices in same visualization?](https://discuss.elastic.co/t/how-to-compare-data-from-2-indices-in-same-visualization/247665)

<div class="topic-metadata">

**Author:** [@vishesh1](https://discuss.elastic.co/u/vishesh1)\
**Replies:** 3\
**Last updated:** [September 7, 2020, 8:27am UTC](https://discuss.elastic.co/t/how-to-compare-data-from-2-indices-in-same-visualization/247665 "2020-09-07T08:27:46Z")

</div>

Hi, I am new to elastic stack, so please excuse the incorrect terminologies if any. I am indexing some data from a csv file to elasticsearch using one index "build1", which contains some performance data for my softwar…

---

## [Several configuration files for filebeat processors?](https://discuss.elastic.co/t/several-configuration-files-for-filebeat-processors/140295)

<div class="topic-metadata">

**Author:** [@qvigand](https://discuss.elastic.co/u/qvigand)\
**Replies:** 3\
**Last updated:** [July 17, 2018, 2:00pm UTC](https://discuss.elastic.co/t/several-configuration-files-for-filebeat-processors/140295 "2018-07-17T14:00:56Z")

</div>

Hello, I'm using filebeat to parse multiple log files and send them directly to elasticsearch. I use processors to parse those files and I would like to separate those processors by file. I first tried to create module…

---

## [Ldap group seems to don't work](https://discuss.elastic.co/t/ldap-group-seems-to-dont-work/67782)

<div class="topic-metadata">

**Author:** [@Del](https://discuss.elastic.co/u/Del)\
**Replies:** 3\
**Last updated:** [December 6, 2016, 8:52am UTC](https://discuss.elastic.co/t/ldap-group-seems-to-dont-work/67782 "2016-12-06T08:52:35Z")

</div>

Hi everyone, I use an ldap server to authent my users to kibana. The thing is ALL users can access to kibana, not only the members of my 'restict\_group\_kibana' ldap group. In the elasticsearch.yml I have: shield: a…

---

## [How to parse today's file](https://discuss.elastic.co/t/how-to-parse-todays-file/25968)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [July 21, 2015, 10:06am UTC](https://discuss.elastic.co/t/how-to-parse-todays-file/25968 "2015-07-21T10:06:20Z")

</div>

Hi Experts, I want parse today's log file . I tried the following (kind of stupid thing I have done as it works only for output )but no luck .Please suggest how I can achieve this . input { file { p…

---

## [ElasticSearch orderby length of field](https://discuss.elastic.co/t/elasticsearch-orderby-length-of-field/202644)

<div class="topic-metadata">

**Author:** [@Sanjay\_Agnani](https://discuss.elastic.co/u/Sanjay_Agnani)\
**Replies:** 1\
**Last updated:** [October 8, 2019, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-orderby-length-of-field/202644 "2019-10-08T12:06:27Z")

</div>

Hello there , i have any elasticSearch Index with an requirement where field needs to be sorted based on it's length. Have used below aggregate: { "size": 0, "aggs": { "groupByMake": { "terms": { …

---

## [How can connect from android studio to elasticsearch](https://discuss.elastic.co/t/how-can-connect-from-android-studio-to-elasticsearch/115156)

<div class="topic-metadata">

**Author:** [@yaser](https://discuss.elastic.co/u/yaser)\
**Replies:** 1\
**Last updated:** [January 11, 2018, 11:42pm UTC](https://discuss.elastic.co/t/how-can-connect-from-android-studio-to-elasticsearch/115156 "2018-01-11T23:42:25Z")

</div>

How can connect from android studio to elasticsearch and fetch data from elasticsearch ? is there any library? any example ?

---

## [Missing delete phase](https://discuss.elastic.co/t/missing-delete-phase/286261)

<div class="topic-metadata">

**Author:** [@ggab31](https://discuss.elastic.co/u/ggab31)\
**Replies:** 2\
**Last updated:** [October 8, 2021, 5:56pm UTC](https://discuss.elastic.co/t/missing-delete-phase/286261 "2021-10-08T17:56:34Z")

</div>

Hi, I have cluster with a single node. Today, I upgraded Elasticsearch and Kibana from 7.5 to 7.15. Maybe it's not related to the upgrade but now, the delete phase is missing when I want to create a new Index Lifecycle…

---

## [Download CSV from dashboard panel](https://discuss.elastic.co/t/download-csv-from-dashboard-panel/268638)

<div class="topic-metadata">

**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\
**Replies:** 2\
**Last updated:** [April 7, 2021, 3:59pm UTC](https://discuss.elastic.co/t/download-csv-from-dashboard-panel/268638 "2021-04-07T15:59:49Z")

</div>

Hi, I'm having trouble exporting saved searches from a Kibana dashboard in CSV format through the Download CSV tool. The download works as usual when I set the time interval (through the time picker of the dashboard) t…

---

## [\_geoip\_lookup\_failure Error](https://discuss.elastic.co/t/geoip-lookup-failure-error/146348)

<div class="topic-metadata">

**Author:** [@Ira](https://discuss.elastic.co/u/Ira)\
**Replies:** 2\
**Last updated:** [August 30, 2018, 8:30am UTC](https://discuss.elastic.co/t/geoip-lookup-failure-error/146348 "2018-08-30T08:30:50Z")

</div>

Hi, I'm trying to add a geoip filter. My configuration file looks like this: input { beats { port =\> "5044" } } filter { grok{ match =\> { message =\> "%{TIMESTAMP\_ISO8601:timestamp}%{SPACE}\[%{DATA:thread}\]%{SPA…

---

## [Index structure for storing blog posts and page analytics for said posts?](https://discuss.elastic.co/t/index-structure-for-storing-blog-posts-and-page-analytics-for-said-posts/88529)

<div class="topic-metadata">

**Author:** [@strideram](https://discuss.elastic.co/u/strideram)\
**Replies:** 6\
**Last updated:** [June 10, 2017, 8:03am UTC](https://discuss.elastic.co/t/index-structure-for-storing-blog-posts-and-page-analytics-for-said-posts/88529 "2017-06-10T08:03:03Z")

</div>

Consider a typical content platform. Thousands of stories published every day. Millions of pageviews a day. Millions of analytics data events per day. How should I structure the index(s) to be able to query page views…

---

## [Kibana dashboard tab unresponsive](https://discuss.elastic.co/t/kibana-dashboard-tab-unresponsive/39988)

<div class="topic-metadata">

**Author:** [@richardvk](https://discuss.elastic.co/u/richardvk)\
**Replies:** 4\
**Last updated:** [January 26, 2016, 4:54pm UTC](https://discuss.elastic.co/t/kibana-dashboard-tab-unresponsive/39988 "2016-01-26T16:54:28Z")

</div>

Hi all, I have installed ELK on an existing Ubuntu 12.04 server, by following these DigitalOcean instructions, even though they are explicitly for 14.04. I tested them first on a 14.04 droplet and all works 100% Afte…

---

## [Watcher: http input specify current date in path](https://discuss.elastic.co/t/watcher-http-input-specify-current-date-in-path/293391)

<div class="topic-metadata">

**Author:** [@Kevin\_Gonzalez](https://discuss.elastic.co/u/Kevin_Gonzalez)\
**Replies:** 7\
**Last updated:** [January 25, 2022, 12:36pm UTC](https://discuss.elastic.co/t/watcher-http-input-specify-current-date-in-path/293391 "2022-01-25T12:36:15Z")

</div>

I'm trying to create a watcher that monitors the size of a specific index. I have daily indices with this naming convention: "indexname-YYYY.MM.dd", example: "test-index-2022.01.03". I want to monitor the size of that s…

---

## [Ограничение поиска клиентов через kibana\\gafana](https://discuss.elastic.co/t/kibana-gafana/217861)

<div class="topic-metadata">

**Author:** [@111229](https://discuss.elastic.co/u/111229)\
**Replies:** 7\
**Last updated:** [February 5, 2020, 4:08pm UTC](https://discuss.elastic.co/t/kibana-gafana/217861 "2020-02-05T16:08:18Z")

</div>

Коллеги, добрый день. Подскажите, пожалуйста, как защититься от пользовательских запросов в elasticsearch, когда пользователь выбирает огромный диапазон данных и этот объем просто на некоторое время (пока по таймауту не…

---

## [Noise Word handling on ingest](https://discuss.elastic.co/t/noise-word-handling-on-ingest/215871)

<div class="topic-metadata">

**Author:** [@TWhitehouse](https://discuss.elastic.co/u/TWhitehouse)\
**Replies:** 7\
**Last updated:** [January 21, 2020, 2:35pm UTC](https://discuss.elastic.co/t/noise-word-handling-on-ingest/215871 "2020-01-21T14:35:17Z")

</div>

Hi All One of my current use cases is to take input from a SQL DB of service desk ticket subjects and descriptions, and be able to show words that are trending (meaning we have a potential problem). So far I've importe…

---

## [Error during creating cluster](https://discuss.elastic.co/t/error-during-creating-cluster/88791)

<div class="topic-metadata">

**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\
**Replies:** 7\
**Last updated:** [June 14, 2017, 12:50pm UTC](https://discuss.elastic.co/t/error-during-creating-cluster/88791 "2017-06-14T12:50:58Z")

</div>

Hi ECE: During creating cluster, I got this error Unexpected error during step: \[ensure-s3-resources\]: \[java.lang.Exception: Unable to assign S3 resources: \[No available resources.\] I did not setup any snapshot when…

---

## [Always get "do you want to open or save ..." when use IE to access the elasticsearch](https://discuss.elastic.co/t/always-get-do-you-want-to-open-or-save-when-use-ie-to-access-the-elasticsearch/32389)

<div class="topic-metadata">

**Author:** [@billchen](https://discuss.elastic.co/u/billchen)\
**Replies:** 1\
**Last updated:** [October 16, 2015, 3:29pm UTC](https://discuss.elastic.co/t/always-get-do-you-want-to-open-or-save-when-use-ie-to-access-the-elasticsearch/32389 "2015-10-16T15:29:54Z")

</div>

This is a simple question - when I use IE to access the elasticsearch instance, I always get a pop-up window aksing "do you want to open or save \_search ..." and I need to confirm and select an external program to view …

---

## [Groovy to Painless Script migration](https://discuss.elastic.co/t/groovy-to-painless-script-migration/132421)

<div class="topic-metadata">

**Author:** [@avinashchauhan](https://discuss.elastic.co/u/avinashchauhan)\
**Replies:** 3\
**Last updated:** [May 19, 2018, 5:47am UTC](https://discuss.elastic.co/t/groovy-to-painless-script-migration/132421 "2018-05-19T05:47:45Z")

</div>

Hi, We are upgrading our elastic search and we have found that most of our groovy scripts are not working with the new version. How can I migrate all my scripts which are on groovy to painless ? Is there a tool or libr…

---

## [Bulk API parameters](https://discuss.elastic.co/t/bulk-api-parameters/18938)

<div class="topic-metadata">

**Author:** [@Ashish\_Mishra](https://discuss.elastic.co/u/Ashish_Mishra)\
**Replies:** 3\
**Last updated:** [July 29, 2014, 11:08pm UTC](https://discuss.elastic.co/t/bulk-api-parameters/18938 "2014-07-29T23:08:56Z")

</div>

I'm uploading documents using syntax like the following. curl -XPOST 'http://localhost:9200/test/type1/\_bulk' -d ' { "index" : { "\_id" : "i1", "version": 3, "version\_type": "external", "replication": "async", "time…

---

## [Custom Queries in Kibana Panels](https://discuss.elastic.co/t/custom-queries-in-kibana-panels/17270)

<div class="topic-metadata">

**Author:** [@Chris\_F](https://discuss.elastic.co/u/Chris_F)\
**Replies:** 3\
**Last updated:** [April 29, 2014, 11:53pm UTC](https://discuss.elastic.co/t/custom-queries-in-kibana-panels/17270 "2014-04-29T23:53:37Z")

</div>

What I'm looking for, is a way to add custom query parameters to some panels in Kibana. For instance, I want to restrict the \_type on my date histogram. My user can still do a \* search from the search bar, but I…

---

## [Logstash - Syslog Help - I am a total pleb](https://discuss.elastic.co/t/logstash-syslog-help-i-am-a-total-pleb/109957)

<div class="topic-metadata">

**Author:** [@MalwareSandbox](https://discuss.elastic.co/u/MalwareSandbox)\
**Replies:** 5\
**Last updated:** [December 5, 2017, 6:24am UTC](https://discuss.elastic.co/t/logstash-syslog-help-i-am-a-total-pleb/109957 "2017-12-05T06:24:53Z")

</div>

Hey Guys, I am a noob when it comes to ELK but am really eager to get this set up. I am currently using ELK to store syslog from multiple firewalls. I am using a fortinet (which is seeming to be not that fun to work wit…

---

## [Hive JSON integration and Deprecated \_ID capability](https://discuss.elastic.co/t/hive-json-integration-and-deprecated--id-capability/36416)

<div class="topic-metadata">

**Author:** [@corgone](https://discuss.elastic.co/u/corgone)\
**Replies:** 5\
**Last updated:** [December 18, 2015, 12:41pm UTC](https://discuss.elastic.co/t/hive-json-integration-and-deprecated--id-capability/36416 "2015-12-18T12:41:06Z")

</div>

How do you explicitly set the \_ID field when indexing via HIVE using the "es.input.json" option? in 1.7 we were able to use the PATH command to extract the ID from the corresponding JSON record. However, now I'm unsure…

---

## [Stability issues with elasticsearch cluster](https://discuss.elastic.co/t/stability-issues-with-elasticsearch-cluster/24977)

<div class="topic-metadata">

**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\
**Replies:** 5\
**Last updated:** [July 10, 2015, 4:02am UTC](https://discuss.elastic.co/t/stability-issues-with-elasticsearch-cluster/24977 "2015-07-10T04:02:18Z")

</div>

Hi, Off late we've observed some stability issues with our elasticsearch cluster in production. Appreciate any kind of hints in troubleshooting this one. Our cluster 6 instances of c3.xlarge instances running on aws …

---

## [Issue with posting json data to elastic search via Flume](https://discuss.elastic.co/t/issue-with-posting-json-data-to-elastic-search-via-flume/16953)

<div class="topic-metadata">

**Author:** [@deepakas](https://discuss.elastic.co/u/deepakas)\
**Replies:** 5\
**Last updated:** [May 8, 2014, 5:28pm UTC](https://discuss.elastic.co/t/issue-with-posting-json-data-to-elastic-search-via-flume/16953 "2014-05-08T17:28:48Z")

</div>

I am using Flume to post data to ElasticSearch. When the data is xml it works fine. But when the data is json it is loading incorrect data in the message field.I checked the flume code. It looks like the issue may be w…

---

## [Lost data due to out of memory error](https://discuss.elastic.co/t/lost-data-due-to-out-of-memory-error/5121)

<div class="topic-metadata">

**Author:** [@dottom](https://discuss.elastic.co/u/dottom)\
**Replies:** 5\
**Last updated:** [August 12, 2011, 9:58pm UTC](https://discuss.elastic.co/t/lost-data-due-to-out-of-memory-error/5121 "2011-08-12T21:58:19Z")

</div>

I encountered lost data as a result of java.lang.OutOfMemoryError condition. I am using: 0.17.4 4g min/max heap size mlockall single node, 1 shard per index, 0 replicas indexed 300m documents across 6 indexes config…

---

## [Registry file entry is empty](https://discuss.elastic.co/t/registry-file-entry-is-empty/90719)

<div class="topic-metadata">

**Author:** [@punit\_j](https://discuss.elastic.co/u/punit_j)\
**Replies:** 2\
**Last updated:** [July 4, 2017, 10:28am UTC](https://discuss.elastic.co/t/registry-file-entry-is-empty/90719 "2017-07-04T10:28:16Z")

</div>

Hi, I am facing an issue in filebeat registry file under windows platform. Registry file under C:\\Program Files\\filebeat\\data\\registry shows empty array \[\]. I dont see this behavior under linux platform. Am I missing …

---

## [ECDSA TLS Key Support](https://discuss.elastic.co/t/ecdsa-tls-key-support/80953)

<div class="topic-metadata">

**Author:** [@David\_Lam](https://discuss.elastic.co/u/David_Lam)\
**Replies:** 2\
**Last updated:** [April 13, 2017, 4:53pm UTC](https://discuss.elastic.co/t/ecdsa-tls-key-support/80953 "2017-04-13T16:53:58Z")

</div>

We are trying to enable TLS on Elasticsearch using a self-signed EC based CA with EC based keys. That being said, when we tried to supply these to ES it throws up with the following error: Caused by: java.security.NoSu…

---

## [Is there a way to access internal \_id and \_type fields in ES SQL query (XPack)?](https://discuss.elastic.co/t/is-there-a-way-to-access-internal-id-and-type-fields-in-es-sql-query-xpack/174894)

<div class="topic-metadata">

**Author:** [@j\_bennet](https://discuss.elastic.co/u/j_bennet)\
**Replies:** 1\
**Last updated:** [April 4, 2019, 8:09am UTC](https://discuss.elastic.co/t/is-there-a-way-to-access-internal-id-and-type-fields-in-es-sql-query-xpack/174894 "2019-04-04T08:09:36Z")

</div>

It looks like currently (6.7), I can't select or filter on internal \_id or \_type fields in SQL, even though this is still possible with a regular JSON query. For example, this will not work: POST /\_xpack/sql?format=txt …

---

## [Logstash s3 input, ignore old files](https://discuss.elastic.co/t/logstash-s3-input-ignore-old-files/130853)

<div class="topic-metadata">

**Author:** [@dhume](https://discuss.elastic.co/u/dhume)\
**Replies:** 0\
**Last updated:** [May 7, 2018, 2:59pm UTC](https://discuss.elastic.co/t/logstash-s3-input-ignore-old-files/130853 "2018-05-07T14:59:37Z")

</div>

Hello, I'm setting up Logstash to pull in from an s3 bucket. Within this prefix there is a lot of files but I'm only interested in pulling data from this point forward. Is there a way to have Logstash ingest the data wi…

---

## [Any reason not to enable http.compression?](https://discuss.elastic.co/t/any-reason-not-to-enable-http-compression/18209)

<div class="topic-metadata">

**Author:** [@davidski](https://discuss.elastic.co/u/davidski)\
**Replies:** 0\
**Last updated:** [June 19, 2014, 12:48pm UTC](https://discuss.elastic.co/t/any-reason-not-to-enable-http-compression/18209 "2014-06-19T12:48:18Z")

</div>

I recently learned that ES's default for http.compression is false (no compression). A quick search through the archives find several instances of folks turning this on. Are there counter indications to enabling co…

---

## [Grok best practice](https://discuss.elastic.co/t/grok-best-practice/172871)

<div class="topic-metadata">

**Author:** [@kharvey](https://discuss.elastic.co/u/kharvey)\
**Replies:** 4\
**Last updated:** [March 20, 2019, 3:37pm UTC](https://discuss.elastic.co/t/grok-best-practice/172871 "2019-03-20T15:37:52Z")

</div>

I'm getting farther and farther in the weeds with building out custom grok stuff. And before I make it too far I would like to know what the best practice for handling grok patterns is. Is it best to make one giant gro…

---

## [Maximum Number of Objects in Kibana](https://discuss.elastic.co/t/maximum-number-of-objects-in-kibana/27003)

<div class="topic-metadata">

**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\
**Replies:** 4\
**Last updated:** [November 23, 2015, 8:59pm UTC](https://discuss.elastic.co/t/maximum-number-of-objects-in-kibana/27003 "2015-11-23T20:59:31Z")

</div>

Is there a maximum number of objects (dashboards, searches, visualizations) one can have in Kibana? My guys have built nearly 200 and if I need to put the brakes on, I should do it sooner than later.

---

## [Regex in mutate filter](https://discuss.elastic.co/t/regex-in-mutate-filter/233091)

<div class="topic-metadata">

**Author:** [@priyanshuk](https://discuss.elastic.co/u/priyanshuk)\
**Replies:** 3\
**Last updated:** [May 18, 2020, 10:13pm UTC](https://discuss.elastic.co/t/regex-in-mutate-filter/233091 "2020-05-18T22:13:43Z")

</div>

Hi, I need some help with regex in mutate Part of log in message field : "LogError":"30180" - Please note number can vary . in normal regex we can do grouping "LogError":"(\[0-9\]\[0-9\]\*)" and then get the matched regex…

---

## [Proper way to store large fields in elasticsearch](https://discuss.elastic.co/t/proper-way-to-store-large-fields-in-elasticsearch/200194)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 3\
**Last updated:** [September 19, 2019, 12:23pm UTC](https://discuss.elastic.co/t/proper-way-to-store-large-fields-in-elasticsearch/200194 "2019-09-19T12:23:35Z")

</div>

Hi, Our documents have few fields which cross the limit of length of the field allowed for highlighting. These are only some 6 fields which are very large. I don't want to increase that limit. And the error suggests sto…

---

## [Logstash Filter CSV last row not reading](https://discuss.elastic.co/t/logstash-filter-csv-last-row-not-reading/128005)

<div class="topic-metadata">

**Author:** [@sabdoul](https://discuss.elastic.co/u/sabdoul)\
**Replies:** 3\
**Last updated:** [April 17, 2018, 7:59am UTC](https://discuss.elastic.co/t/logstash-filter-csv-last-row-not-reading/128005 "2018-04-17T07:59:48Z")

</div>

Hello, I have my last line of csv data that I get with http\_poller plugin that is not imported. Some people have solved the problem by adding a blank newline at the end of the csv file. But me in my case my file is reco…

---

## [HIVE to Elasticsearch via PIG: Error-Requires ID but none was given/found](https://discuss.elastic.co/t/hive-to-elasticsearch-via-pig-error-requires-id-but-none-was-given-found/109060)

<div class="topic-metadata">

**Author:** [@rcbot](https://discuss.elastic.co/u/rcbot)\
**Replies:** 3\
**Last updated:** [November 30, 2017, 9:50pm UTC](https://discuss.elastic.co/t/hive-to-elasticsearch-via-pig-error-requires-id-but-none-was-given-found/109060 "2017-11-30T21:50:28Z")

</div>

I have a HIVE table(not external) called "default.reading" and it contains 2 columns called "name"(String) and "favoritebook"(Array of String) with the following data: name | favoritebook Tom | \["Book1" , "Book2"\] …

---

## [Cluster setup and monitoring with xpack in kibana - ELK 5.0](https://discuss.elastic.co/t/cluster-setup-and-monitoring-with-xpack-in-kibana-elk-5-0/73377)

<div class="topic-metadata">

**Author:** [@marimuthu](https://discuss.elastic.co/u/marimuthu)\
**Replies:** 3\
**Last updated:** [January 31, 2017, 2:58pm UTC](https://discuss.elastic.co/t/cluster-setup-and-monitoring-with-xpack-in-kibana-elk-5-0/73377 "2017-01-31T14:58:00Z")

</div>

Hi, I'm learning the ELK stack to setup a cluster and monitor the same using x-pack plugin. When i dedicately create nodes for different purpose it fails. I'm running all these in one machine with Windows 7 and 8GB of…

---

## [Elastic cloud Kibana rollup is not working](https://discuss.elastic.co/t/elastic-cloud-kibana-rollup-is-not-working/178220)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 6\
**Last updated:** [May 7, 2019, 6:48am UTC](https://discuss.elastic.co/t/elastic-cloud-kibana-rollup-is-not-working/178220 "2019-05-07T06:48:24Z")

</div>

Dear Elastic Team Members, Recently we've been testing Elastic Cloud Kibana features with the trail, Today we have encountered an issue that rollup is not working. As we have an active index called metricbeat is being …

---

## [Slow ingestion speeds](https://discuss.elastic.co/t/slow-ingestion-speeds/271761)

<div class="topic-metadata">

**Author:** [@jamesm1](https://discuss.elastic.co/u/jamesm1)\
**Replies:** 7\
**Last updated:** [May 5, 2021, 7:48am UTC](https://discuss.elastic.co/t/slow-ingestion-speeds/271761 "2021-05-05T07:48:47Z")

</div>

Good Morning all, I have noticed that i appear to be having some ingestion speed issues... in a nut shell, if i look at historical data from a couple of hours ago and keep refreshing my screen, the amount of records inc…

---

## [Split array with multiple field](https://discuss.elastic.co/t/split-array-with-multiple-field/122702)

<div class="topic-metadata">

**Author:** [@stefan\_f](https://discuss.elastic.co/u/stefan_f)\
**Replies:** 7\
**Last updated:** [March 12, 2018, 9:18am UTC](https://discuss.elastic.co/t/split-array-with-multiple-field/122702 "2018-03-12T09:18:16Z")

</div>

Hi there, I have tried by my own, but I'm unable to figure out what I'm doing wrong here. I get a reply from a SQL database as an enrichment of my data. The SQL reply is an array and looks like: { "servicename": "Sky…

---

## [Storing Ansible facts in Elasticsearch (JSON) & mapper parsing exception](https://discuss.elastic.co/t/storing-ansible-facts-in-elasticsearch-json-mapper-parsing-exception/68053)

<div class="topic-metadata">

**Author:** [@sndr](https://discuss.elastic.co/u/sndr)\
**Replies:** 1\
**Last updated:** [December 6, 2016, 10:43am UTC](https://discuss.elastic.co/t/storing-ansible-facts-in-elasticsearch-json-mapper-parsing-exception/68053 "2016-12-06T10:43:32Z")

</div>

Hi, I'm very new to Elastic (and Ansible) and currently trying to store Ansible Facts in Elasticsearch by POST-ing the JSON-results from Ansible to Elastic. I keep running in to 'mapper .. of different type'-exceptions…

---

## [Elastic search 2.3.4 MapperParsingException with analyzer](https://discuss.elastic.co/t/elastic-search-2-3-4-mapperparsingexception-with-analyzer/56085)

<div class="topic-metadata">

**Author:** [@SwethaS](https://discuss.elastic.co/u/SwethaS)\
**Replies:** 7\
**Last updated:** [July 22, 2016, 4:57am UTC](https://discuss.elastic.co/t/elastic-search-2-3-4-mapperparsingexception-with-analyzer/56085 "2016-07-22T04:57:39Z")

</div>

When upgrading from ES 1.0.2 to ES 2.3.4, we had to remove the - ImmutableSettings.classLoader() api, so used mockNode extending Node class to add plugins for client node as suggested in Add plugins from classpath in emb…

[Previous page](https://discuss.elastic.co/top.md?page=900&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=902&per_page=50&period=all)
