# Top

**URL:** https://discuss.elastic.co/top.md?page=941&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 942

---

## [Install Fleet server 8.2.2 fails: Error - could not start the HTTP server for the API: failed to listen on the named pipe](https://discuss.elastic.co/t/install-fleet-server-8-2-2-fails-error-could-not-start-the-http-server-for-the-api-failed-to-listen-on-the-named-pipe/307964)

<div class="topic-metadata">

**Author:** [@tidenhub](https://discuss.elastic.co/u/tidenhub)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 12:02pm UTC](https://discuss.elastic.co/t/install-fleet-server-8-2-2-fails-error-could-not-start-the-http-server-for-the-api-failed-to-listen-on-the-named-pipe/307964 "2022-07-13T12:02:19Z")

</div>

Hi, I set up Elasticsearch and Kibana via Docker Compose using elasticsearch/docker-compose.yml at 8.2 · elastic/elasticsearch (github.com). I created the agent policy to host Fleet Server. I choose "Quick start" as de…

---

## [How to raw logs to logstash default index and filtered log to another index](https://discuss.elastic.co/t/how-to-raw-logs-to-logstash-default-index-and-filtered-log-to-another-index/86517)

<div class="topic-metadata">

**Author:** [@shamimgeek](https://discuss.elastic.co/u/shamimgeek)\
**Replies:** 3\
**Last updated:** [May 24, 2017, 9:25am UTC](https://discuss.elastic.co/t/how-to-raw-logs-to-logstash-default-index-and-filtered-log-to-another-index/86517 "2017-05-24T09:25:37Z")

</div>

Hi All, How can i configure logstash which can send all logs to default logstash-xxxx index and filtered log { i want only specific fields} will go to analytics index. But I also want to have all raw logs in logstash …

---

## [Kibana: getting wrong data with offset -1w?](https://discuss.elastic.co/t/kibana-getting-wrong-data-with-offset-1w/83360)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [April 25, 2017, 2:56pm UTC](https://discuss.elastic.co/t/kibana-getting-wrong-data-with-offset-1w/83360 "2017-04-25T14:56:54Z")

</div>

Hi, I've got a problem with kibana's timelion. I am comparing the count of today and last week using offset functionality. This picture I got, when running for today: This picture I get, if I set the time picker - …

---

## [Logstash output to cassandra](https://discuss.elastic.co/t/logstash-output-to-cassandra/76188)

<div class="topic-metadata">

**Author:** [@agrawalsaurabh](https://discuss.elastic.co/u/agrawalsaurabh)\
**Replies:** 3\
**Last updated:** [February 24, 2017, 9:46am UTC](https://discuss.elastic.co/t/logstash-output-to-cassandra/76188 "2017-02-24T09:46:12Z")

</div>

Hi, I am looking forward to dump the output of LOGSTASH to cassandra instead of elastic search. The idea is to have cassandra as a single source of truth when it coms to ingesting data from multiple sources and use cas…

---

## [Quoting multi line problems](https://discuss.elastic.co/t/quoting-multi-line-problems/70234)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 3\
**Last updated:** [February 13, 2017, 3:31am UTC](https://discuss.elastic.co/t/quoting-multi-line-problems/70234 "2017-02-13T03:31:20Z")

</div>

If I have this line. And this line. And I quote them, they get merged together (see the next post).

---

## [Fingerprint unable to fingerprint @timestamp](https://discuss.elastic.co/t/fingerprint-unable-to-fingerprint-timestamp/29855)

<div class="topic-metadata">

**Author:** [@cpattonj](https://discuss.elastic.co/u/cpattonj)\
**Replies:** 3\
**Last updated:** [September 24, 2015, 11:34am UTC](https://discuss.elastic.co/t/fingerprint-unable-to-fingerprint-timestamp/29855 "2015-09-24T11:34:53Z")

</div>

With input lines like: {"count":10, "timestamp":"2015-09-22T00:00:00.000Z"} I am unable to fingerprint based off of the date extracted by my date filter. For fingerprint, it's exactly the same for all of my messages w…

---

## [CCR and number of licensed nodes](https://discuss.elastic.co/t/ccr-and-number-of-licensed-nodes/234307)

<div class="topic-metadata">

**Author:** [@KidFashion](https://discuss.elastic.co/u/KidFashion)\
**Replies:** 2\
**Last updated:** [May 26, 2020, 11:51am UTC](https://discuss.elastic.co/t/ccr-and-number-of-licensed-nodes/234307 "2020-05-26T11:51:17Z")

</div>

Hello, I know that CCR feature requires a Platinum License but I would like to understand if, in a DR scenario, nodes of the DR cluster needs to be counted or not: To make things clearer I was looking at the webinar at…

---

## [Splunk lookup file equivalent](https://discuss.elastic.co/t/splunk-lookup-file-equivalent/196015)

<div class="topic-metadata">

**Author:** [@wengsengtam](https://discuss.elastic.co/u/wengsengtam)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 10:36am UTC](https://discuss.elastic.co/t/splunk-lookup-file-equivalent/196015 "2019-08-21T10:36:25Z")

</div>

Hello Elastic Forum members, I have been exploring the different possible data enrichments that are available in Splunk. However, I am trying to understand if there is a plugin or module that can be added to Elastic to …

---

## [Dashboard background color issue](https://discuss.elastic.co/t/dashboard-background-color-issue/190148)

<div class="topic-metadata">

**Author:** [@June](https://discuss.elastic.co/u/June)\
**Replies:** 2\
**Last updated:** [July 19, 2019, 9:13am UTC](https://discuss.elastic.co/t/dashboard-background-color-issue/190148 "2019-07-19T09:13:01Z")

</div>

Greetings! For version 7.1.1, the background color of the dashboard cannot change to "dark" although the setting is changed as shown below: Can anyone help on this? Thanks!

---

## [Creating multiple users for Kibana/Elasticsearch](https://discuss.elastic.co/t/creating-multiple-users-for-kibana-elasticsearch/162903)

<div class="topic-metadata">

**Author:** [@KindTomato](https://discuss.elastic.co/u/KindTomato)\
**Replies:** 2\
**Last updated:** [January 4, 2019, 10:01am UTC](https://discuss.elastic.co/t/creating-multiple-users-for-kibana-elasticsearch/162903 "2019-01-04T10:01:16Z")

</div>

Hey, I wanted to move from default one user on kibana and create multiple. I'v been stuck doing it for couple of hours now so .. here I am : ). Running Elasticsearch 6.5.2-1(x-pack is installed by default and I believe …

---

## [Inconsistent newlines in email body text](https://discuss.elastic.co/t/inconsistent-newlines-in-email-body-text/148681)

<div class="topic-metadata">

**Author:** [@jgburks](https://discuss.elastic.co/u/jgburks)\
**Replies:** 2\
**Last updated:** [September 17, 2018, 12:29pm UTC](https://discuss.elastic.co/t/inconsistent-newlines-in-email-body-text/148681 "2018-09-17T12:29:58Z")

</div>

I'm using this Watcher code to send myself emails: "body": { "text": "{{#ctx.payload.hits.hits}}{{\_source.@timestamp}} {{\_source.message}}\\n{{/ctx.payload.hits.hits}}" But I don't get a newline in the email body bet…

---

## [Disable compound file storage format](https://discuss.elastic.co/t/disable-compound-file-storage-format/13799)

<div class="topic-metadata">

**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\
**Replies:** 2\
**Last updated:** [September 14, 2016, 9:21am UTC](https://discuss.elastic.co/t/disable-compound-file-storage-format/13799 "2016-09-14T09:21:19Z")

</div>

Hi All, I am upgrading my elastic-search from elasticsearch-0.90.0.RC2 to elasticsearch-0.90.5. As default file compound format is false so files should be stored as normal files like .fdx,.fdt and many other for…

---

## [Changing Colors in Kibana](https://discuss.elastic.co/t/changing-colors-in-kibana/56555)

<div class="topic-metadata">

**Author:** [@puja.jena](https://discuss.elastic.co/u/puja.jena)\
**Replies:** 2\
**Last updated:** [July 28, 2016, 5:50pm UTC](https://discuss.elastic.co/t/changing-colors-in-kibana/56555 "2016-07-28T17:50:35Z")

</div>

Is there a way to change the colors for these three ranges for the field for "Score" without doing it manually? I want all the data points that fall in the score range of "from 0.9 to 1" to be green, "from 0.8 to 0.9" …

---

## [Kibana - "Discover: unknown error"](https://discuss.elastic.co/t/kibana-discover-unknown-error/47714)

<div class="topic-metadata">

**Author:** [@anthonydigangi](https://discuss.elastic.co/u/anthonydigangi)\
**Replies:** 2\
**Last updated:** [April 19, 2016, 1:54am UTC](https://discuss.elastic.co/t/kibana-discover-unknown-error/47714 "2016-04-19T01:54:33Z")

</div>

The Error Kibana web UI Error: unknown error at respond (http://192.168.33.10:5601/bundles/kibana.bundle.js?v=9889:76380:16) at checkRespForFailure (http://192.168.33.10:5601/bundles/kibana.bundle.js?v=9889:76341…

---

## [Is redis really necessary in current version of ELK](https://discuss.elastic.co/t/is-redis-really-necessary-in-current-version-of-elk/45343)

<div class="topic-metadata">

**Author:** [@zhmq0124v](https://discuss.elastic.co/u/zhmq0124v)\
**Replies:** 2\
**Last updated:** [March 24, 2016, 6:25pm UTC](https://discuss.elastic.co/t/is-redis-really-necessary-in-current-version-of-elk/45343 "2016-03-24T18:25:49Z")

</div>

Dear ELK funs, I am new to ELK, had watched online videos from elastic.co and installed logstash 2.2.2 elasticsearch 2.2.1 locally on a standalone server. Learned from the videos, I know current version of logstash's …

---

## [Create new metricset for windows services states](https://discuss.elastic.co/t/create-new-metricset-for-windows-services-states/101727)

<div class="topic-metadata">

**Author:** [@maddin2016](https://discuss.elastic.co/u/maddin2016)\
**Replies:** 4\
**Last updated:** [September 27, 2017, 6:35am UTC](https://discuss.elastic.co/t/create-new-metricset-for-windows-services-states/101727 "2017-09-27T06:35:12Z")

</div>

Hi @andrewkroh. Because there some requests for having a collector for windows services, i have decided to create a new metricset to collect windows service states. It's very basic at the moment and i don't know if you h…

---

## [Metricbeat missing kubernetes pods metrics](https://discuss.elastic.co/t/metricbeat-missing-kubernetes-pods-metrics/205417)

<div class="topic-metadata">

**Author:** [@Ivan\_Martos](https://discuss.elastic.co/u/Ivan_Martos)\
**Replies:** 6\
**Last updated:** [November 4, 2019, 8:29am UTC](https://discuss.elastic.co/t/metricbeat-missing-kubernetes-pods-metrics/205417 "2019-11-04T08:29:15Z")

</div>

Hey guys I need a bit of help with Metricbeat. I have Kubernetes (1.14) running in AWS EKS. Inside Kibana I can see metrics of Hosts, but when I switch to Kubernetes view, I can see all the pods, but no metrics for the…

---

## [About the retrieval depth & ranking](https://discuss.elastic.co/t/about-the-retrieval-depth-ranking/51945)

<div class="topic-metadata">

**Author:** [@sanzhiyuan](https://discuss.elastic.co/u/sanzhiyuan)\
**Replies:** 6\
**Last updated:** [June 7, 2016, 3:58am UTC](https://discuss.elastic.co/t/about-the-retrieval-depth-ranking/51945 "2016-06-07T03:58:45Z")

</div>

Hi all, I have 2 questions about retrieval and scoring, 1. How deep when ES retrieving documents, even without scoring? By now the information I got was all. please help me to ensure this mechanism. Actually when I …

---

## [Missing field in a filter](https://discuss.elastic.co/t/missing-field-in-a-filter/11198)

<div class="topic-metadata">

**Author:** [@Stefanie](https://discuss.elastic.co/u/Stefanie)\
**Replies:** 6\
**Last updated:** [March 19, 2013, 9:15pm UTC](https://discuss.elastic.co/t/missing-field-in-a-filter/11198 "2013-03-19T21:15:40Z")

</div>

I am working on a query to do some searching between multiple indexes with different fields and I am having an issue with the location filter. In the query I was hoping that an or filter with a missing clause wou…

---

## [Connection reset by peer when connecting to Elastic](https://discuss.elastic.co/t/connection-reset-by-peer-when-connecting-to-elastic/296065)

<div class="topic-metadata">

**Author:** [@brampurnot](https://discuss.elastic.co/u/brampurnot)\
**Replies:** 1\
**Last updated:** [February 3, 2022, 9:14pm UTC](https://discuss.elastic.co/t/connection-reset-by-peer-when-connecting-to-elastic/296065 "2022-02-03T21:14:58Z")

</div>

Hi all, I'm trying to setup Heartbeat without Logstash (directly integrated into Elastic ECK) on a kubernetes platform. When the pod is starting, I can see the following error message: Failed to connect to backoff(Ela…

---

## [Добавление новой data-ноды в кластер](https://discuss.elastic.co/t/data/207533)

<div class="topic-metadata">

**Author:** [@111229](https://discuss.elastic.co/u/111229)\
**Replies:** 7\
**Last updated:** [November 13, 2019, 4:09pm UTC](https://discuss.elastic.co/t/data/207533 "2019-11-13T16:09:30Z")

</div>

Коллеги, добрый день! У нас кластер из 6 нод в SSL, хотим добавить еще 2 ноды. Вопрос: как можно выпустить сертификаты только для двух новых серверов ? Если я правильно понял, то если использовать elasticsearch-certge…

---

## [Curator: "Invalid epoch received, unable to convert None to int"](https://discuss.elastic.co/t/curator-invalid-epoch-received-unable-to-convert-none-to-int/198516)

<div class="topic-metadata">

**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\
**Replies:** 7\
**Last updated:** [September 7, 2019, 10:15pm UTC](https://discuss.elastic.co/t/curator-invalid-epoch-received-unable-to-convert-none-to-int/198516 "2019-09-07T22:15:53Z")

</div>

Hello, When I try to delete old indices, I get the following error: 2019-09-07 18:13:34,959 INFO Preparing Action ID: 2, "delete\_indices" 2019-09-07 18:13:34,965 INFO Trying Action ID: 2, "delete\_indices": De…

---

## [Wildcard matches in logstash filters](https://discuss.elastic.co/t/wildcard-matches-in-logstash-filters/152445)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 1\
**Last updated:** [October 15, 2018, 8:23am UTC](https://discuss.elastic.co/t/wildcard-matches-in-logstash-filters/152445 "2018-10-15T08:23:47Z")

</div>

Hi, I want to match every ip adress that starts with 10.99 in our field "dst\_ip". This is our logstash conf: filter { if "syslog" in \[tags\] and "pre-processed" not in \[tags\] { if "test" in \[field1\] { muta…

---

## [Sum (Count) of Stacked Bars](https://discuss.elastic.co/t/sum-count-of-stacked-bars/66765)

<div class="topic-metadata">

**Author:** [@cin\_rnascimento](https://discuss.elastic.co/u/cin_rnascimento)\
**Replies:** 1\
**Last updated:** [November 22, 2016, 10:56pm UTC](https://discuss.elastic.co/t/sum-count-of-stacked-bars/66765 "2016-11-22T22:56:22Z")

</div>

Hi, I have this vertical bar chart: Is it possible to show the value of the sum of the each bar? For example, I know that the number of response code 404 is between 0 and 2,000, but I don't know the exact value. Is…

---

## [Free license limitation for MSP](https://discuss.elastic.co/t/free-license-limitation-for-msp/336129)

<div class="topic-metadata">

**Author:** [@Rsinsta](https://discuss.elastic.co/u/Rsinsta)\
**Replies:** 5\
**Last updated:** [June 15, 2023, 7:44pm UTC](https://discuss.elastic.co/t/free-license-limitation-for-msp/336129 "2023-06-15T19:44:44Z")

</div>

Hi, We are a startup/MSP and we would like to provide services with the elastic stack. Is it possible to use the free license for that or do we have to buy a commercial one? Thanks!

---

## [How to parse Logline](https://discuss.elastic.co/t/how-to-parse-logline/87736)

<div class="topic-metadata">

**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\
**Replies:** 4\
**Last updated:** [June 7, 2017, 7:37am UTC](https://discuss.elastic.co/t/how-to-parse-logline/87736 "2017-06-07T07:37:08Z")

</div>

Hi, I have the following line which I recieve in Kibana successfully. Connection ArchivUser: CIFS client \[ArchivUser\] from \[192.168.0.15(IP:192.168.0.15)\] accessed the shared folder \[Archiv Filme\]. So: "Connection"…

---

## [Logstash rotating log - sincedb issue on Windows](https://discuss.elastic.co/t/logstash-rotating-log-sincedb-issue-on-windows/74342)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 4\
**Last updated:** [February 16, 2017, 3:56pm UTC](https://discuss.elastic.co/t/logstash-rotating-log-sincedb-issue-on-windows/74342 "2017-02-16T15:56:56Z")

</div>

I am running Logstash 5.2 on Windows7 and I have a rotating log use case, where I maintain a file batchlog.txt everyday and I read this file into logstash and output to ES (daily indices) My file input config: inpu…

---

## [Filter IIS Log information](https://discuss.elastic.co/t/filter-iis-log-information/46209)

<div class="topic-metadata">

**Author:** [@freichert](https://discuss.elastic.co/u/freichert)\
**Replies:** 4\
**Last updated:** [April 4, 2016, 9:00am UTC](https://discuss.elastic.co/t/filter-iis-log-information/46209 "2016-04-04T09:00:01Z")

</div>

Hello everybody, i just set up the ELK Stack on an Ubuntu machine. Currently Logstash is processing the IIS Logs with a Grok Filter and Splits the information like it should. Now i am Stuck - i would like to "filter" t…

---

## [Send Failure Error while loading JSON file](https://discuss.elastic.co/t/send-failure-error-while-loading-json-file/25765)

<div class="topic-metadata">

**Author:** [@jithins53](https://discuss.elastic.co/u/jithins53)\
**Replies:** 4\
**Last updated:** [August 7, 2015, 11:23pm UTC](https://discuss.elastic.co/t/send-failure-error-while-loading-json-file/25765 "2015-08-07T23:23:06Z")

</div>

Hi, I am new to elastcisearch. When I try to load a JSON object (size of 2.14GB), using CURL, I am getting an error "CURL: (55) Send Failure: Connection was aborted". I don't have any problem with small sized JSON f…

---

## [DEPRECATED: Treating the CommonName field on X.509 certificates as a host name when no Subject Alternative Names are present is going to be removed](https://discuss.elastic.co/t/deprecated-treating-the-commonname-field-on-x-509-certificates-as-a-host-name-when-no-subject-alternative-names-are-present-is-going-to-be-removed/333326)

<div class="topic-metadata">

**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\
**Replies:** 2\
**Last updated:** [May 17, 2023, 3:28pm UTC](https://discuss.elastic.co/t/deprecated-treating-the-commonname-field-on-x-509-certificates-as-a-host-name-when-no-subject-alternative-names-are-present-is-going-to-be-removed/333326 "2023-05-17T15:28:30Z")

</div>

I am getting the following deprecation warning in both filebeat and metricbeat. I am currently using ES 7.17.9, but will be upgrading to 8.x soon: DEPRECATED: Treating the CommonName field on X.509 certificates as a ho…

---

## [Error when trying to install fleet server and elastic agent on Openshift K8s Cluster quickstart](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-and-elastic-agent-on-openshift-k8s-cluster-quickstart/322059)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 2\
**Last updated:** [January 17, 2023, 4:22pm UTC](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-and-elastic-agent-on-openshift-k8s-cluster-quickstart/322059 "2023-01-17T16:22:34Z")

</div>

Hi all. I'm trying to follow the quickstart procedure to get a ECK cluster on a Openshift K8s cluster. I've created a namespace called 'elastic' After that I have downloaded the operator: wget https://download.elasti…

---

## [Not receiving logs from Elastic Agent](https://discuss.elastic.co/t/not-receiving-logs-from-elastic-agent/289743)

<div class="topic-metadata">

**Author:** [@eleong](https://discuss.elastic.co/u/eleong)\
**Replies:** 2\
**Last updated:** [November 24, 2021, 2:13pm UTC](https://discuss.elastic.co/t/not-receiving-logs-from-elastic-agent/289743 "2021-11-24T14:13:56Z")

</div>

Hi, I cant seem to receive any logs from elastic agent installed on either Windows or Ubuntu machine. I've searched through the documentations to the best of my abilities but I'm afraid that I'm still too new to Elastic…

---

## [Filter documents if a field exists and report on the value of that field](https://discuss.elastic.co/t/filter-documents-if-a-field-exists-and-report-on-the-value-of-that-field/75653)

<div class="topic-metadata">

**Author:** [@Matt\_Simcox](https://discuss.elastic.co/u/Matt_Simcox)\
**Replies:** 2\
**Last updated:** [February 20, 2017, 11:08am UTC](https://discuss.elastic.co/t/filter-documents-if-a-field-exists-and-report-on-the-value-of-that-field/75653 "2017-02-20T11:08:33Z")

</div>

Hi, I have documents that may or may not contain certain fields in ES. I need to create a visualisation in kibana that restricts to only documents that: Contain a particular field. Report on the value of that field …

---

## [Plusieurs problème avec mon cluster ElasticSearch](https://discuss.elastic.co/t/plusieurs-probleme-avec-mon-cluster-elasticsearch/217376)

<div class="topic-metadata">

**Author:** [@Medidou](https://discuss.elastic.co/u/Medidou)\
**Replies:** 8\
**Last updated:** [February 3, 2020, 12:57pm UTC](https://discuss.elastic.co/t/plusieurs-probleme-avec-mon-cluster-elasticsearch/217376 "2020-02-03T12:57:43Z")

</div>

Bonjour tous, j'ai monter un cluster Elasticsearch 2 sont dans un DC (node-1 & 2) et 1 dans un autre DC (node-3) Voici la version de Elasticsearch sur mes nodes la communication entre eux se fais en HTTPS { "name"…

---

## [Dest.stats vs Source.stats](https://discuss.elastic.co/t/dest-stats-vs-source-stats/100442)

<div class="topic-metadata">

**Author:** [@flowsys](https://discuss.elastic.co/u/flowsys)\
**Replies:** 3\
**Last updated:** [October 4, 2017, 10:15am UTC](https://discuss.elastic.co/t/dest-stats-vs-source-stats/100442 "2017-10-04T10:15:40Z")

</div>

How do we interpret in a document the value of dest.stats.net\_packets\_total vs source.stats.net\_packets\_total ? Is it the total packets received at destination IP and total packets sent from source IP? Or Total packet…

---

## [Scroll API for java api 2.3.0](https://discuss.elastic.co/t/scroll-api-for-java-api-2-3-0/46342)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 3\
**Last updated:** [March 2, 2017, 11:10pm UTC](https://discuss.elastic.co/t/scroll-api-for-java-api-2-3-0/46342 "2017-03-02T23:10:38Z")

</div>

Hi ! I am practicing with the java api for elasticsearch and have a question for scroll api. According to the online document, SearchType.SCAN should be defined for for setSearchType. https://www.elastic.co/guide…

---

## [CPU:Memory ratio for a general-purpose cluster](https://discuss.elastic.co/t/cpu-memory-ratio-for-a-general-purpose-cluster/311060)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 1\
**Last updated:** [July 31, 2022, 7:51pm UTC](https://discuss.elastic.co/t/cpu-memory-ratio-for-a-general-purpose-cluster/311060 "2022-07-31T19:51:34Z")

</div>

How can we determine a good ratio of CPU/memory configuration for elasticsearch nodes for general purpose usage? I see 1:4 ratio in most places, I am not sure though, how that ratio is derived.

---

## [Can a scripted field be mapped as a geo\_point](https://discuss.elastic.co/t/can-a-scripted-field-be-mapped-as-a-geo-point/171655)

<div class="topic-metadata">

**Author:** [@rahul\_bhagwat](https://discuss.elastic.co/u/rahul_bhagwat)\
**Replies:** 1\
**Last updated:** [March 11, 2019, 10:18pm UTC](https://discuss.elastic.co/t/can-a-scripted-field-be-mapped-as-a-geo-point/171655 "2019-03-11T22:18:29Z")

</div>

I have some log files with latitude and longitude data in different rows, i created a scripted field which concatenated the data of these two rows but i am unable to save this field as a geo\_point to visualise it. How ca…

---

## [Immense term and maximum length exception in elasticsearch output](https://discuss.elastic.co/t/immense-term-and-maximum-length-exception-in-elasticsearch-output/78536)

<div class="topic-metadata">

**Author:** [@fritzhardy](https://discuss.elastic.co/u/fritzhardy)\
**Replies:** 1\
**Last updated:** [April 9, 2018, 8:10pm UTC](https://discuss.elastic.co/t/immense-term-and-maximum-length-exception-in-elasticsearch-output/78536 "2018-04-09T20:10:16Z")

</div>

I recently began running into this: "max\_bytes\_length\_exceeded\_exception: bytes can be at most 32766 in length; got 338076" Full error: {"type"=\>"illegal\_argument\_exception", "reason"=\>"Document contains at least o…

---

## [Aggregate filter for mixed data lines](https://discuss.elastic.co/t/aggregate-filter-for-mixed-data-lines/236110)

<div class="topic-metadata">

**Author:** [@mskadu](https://discuss.elastic.co/u/mskadu)\
**Replies:** 4\
**Last updated:** [June 8, 2020, 7:54pm UTC](https://discuss.elastic.co/t/aggregate-filter-for-mixed-data-lines/236110 "2020-06-08T19:54:03Z")

</div>

Hello all! I am trying to use the Aggregate filter plugin to correlate and combine data from two different CSV file inputs which represent API data calls. The idea is to produce a record showing a combined picture. As y…

---

## [Permission Denied Error starting Elasticsearch 7.3 from RPM installation RedHat 6.7 Linux](https://discuss.elastic.co/t/permission-denied-error-starting-elasticsearch-7-3-from-rpm-installation-redhat-6-7-linux/200897)

<div class="topic-metadata">

**Author:** [@npm](https://discuss.elastic.co/u/npm)\
**Replies:** 4\
**Last updated:** [September 24, 2019, 4:37pm UTC](https://discuss.elastic.co/t/permission-denied-error-starting-elasticsearch-7-3-from-rpm-installation-redhat-6-7-linux/200897 "2019-09-24T16:37:07Z")

</div>

Installed Elasticsearch 7.3 from RPM on RedHat 6.7 machine as root. sudo rpm --install elasticsearch-7.3.0-x86\_64.rpm Attempted to start using the service commands: root@seismic-an10:/usr/share/elasticsearch\> chkconfi…

---

## [Creating custom modules from terminal](https://discuss.elastic.co/t/creating-custom-modules-from-terminal/145720)

<div class="topic-metadata">

**Author:** [@souravtyson](https://discuss.elastic.co/u/souravtyson)\
**Replies:** 4\
**Last updated:** [August 28, 2018, 1:05pm UTC](https://discuss.elastic.co/t/creating-custom-modules-from-terminal/145720 "2018-08-28T13:05:08Z")

</div>

Hi Team, I have been trying to create custom module for vmstat command. Earlier i created tomcat access log module by copying the existing module. But i wanted to try the steps available in the below link as the above…

---

## [Reindex API does not work as expected](https://discuss.elastic.co/t/reindex-api-does-not-work-as-expected/48602)

<div class="topic-metadata">

**Author:** [@apt275](https://discuss.elastic.co/u/apt275)\
**Replies:** 4\
**Last updated:** [April 28, 2016, 5:44pm UTC](https://discuss.elastic.co/t/reindex-api-does-not-work-as-expected/48602 "2016-04-28T17:44:43Z")

</div>

I am trying to use the reindex api for elasticsearch https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-reindex.html the old index has some data. so i tried to reindex that as POST /\_reindex { …

---

## [Do watcher watch scripts have the ability to add values to the result payload](https://discuss.elastic.co/t/do-watcher-watch-scripts-have-the-ability-to-add-values-to-the-result-payload/44349)

<div class="topic-metadata">

**Author:** [@beckerdo](https://discuss.elastic.co/u/beckerdo)\
**Replies:** 4\
**Last updated:** [March 17, 2016, 1:44pm UTC](https://discuss.elastic.co/t/do-watcher-watch-scripts-have-the-ability-to-add-values-to-the-result-payload/44349 "2016-03-17T13:44:35Z")

</div>

I am using a few file scripts to influence my watch output. I see from the documentation that you can use mustache templates to get result and payload values into your conditions and transforms. However, can a condition …

---

## [Simple UI / Client](https://discuss.elastic.co/t/simple-ui-client/13465)

<div class="topic-metadata">

**Author:** [@Muthuveerappan\_Periy](https://discuss.elastic.co/u/Muthuveerappan_Periy)\
**Replies:** 4\
**Last updated:** [August 4, 2014, 1:58am UTC](https://discuss.elastic.co/t/simple-ui-client/13465 "2014-08-04T01:58:04Z")

</div>

Hi All, I am using plugins like FileSystem, SubversionRiver, rssriver, Wiki / web crawler (not done yet) - for this kind of data - which UI / client will be simple to implement and best that you know of ... a…

---

## [Compatibility issue Elastic - X-Pack](https://discuss.elastic.co/t/compatibility-issue-elastic-x-pack/137736)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 6\
**Last updated:** [June 28, 2018, 7:00am UTC](https://discuss.elastic.co/t/compatibility-issue-elastic-x-pack/137736 "2018-06-28T07:00:13Z")

</div>

Hi All, I am in the process of upgrade a elasticsearch cluster from 5.3.0 to 5.6.10. According to the upgrade matrix this should not be a problem. And the installation of elastic goes with a problem. However if I want t…

---

## [Vega-lite group count - Kibana 6.6](https://discuss.elastic.co/t/vega-lite-group-count-kibana-6-6/168040)

<div class="topic-metadata">

**Author:** [@martb](https://discuss.elastic.co/u/martb)\
**Replies:** 5\
**Last updated:** [February 21, 2019, 5:04pm UTC](https://discuss.elastic.co/t/vega-lite-group-count-kibana-6-6/168040 "2019-02-21T17:04:04Z")

</div>

Hi, I'm new to vega and trying to show the group count of sourceaddress when you hover over the graph item. The sourceaddress is a string. I've tried various ways but the below only shows zero. Any help would be much a…

---

## [Elasticsearch.yml](https://discuss.elastic.co/t/elasticsearch-yml/100350)

<div class="topic-metadata">

**Author:** [@Invictus](https://discuss.elastic.co/u/Invictus)\
**Replies:** 5\
**Last updated:** [September 13, 2017, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-yml/100350 "2017-09-13T13:24:02Z")

</div>

Whenever I change the Elasticsearch.yml (cluster.name, node.name etc.) in notepad++ and save the actual version, the http://localhost:9200/ isn't available anymore. When I uncomment the commands in Elasticsearch.yml the…

---

## [Lucene query syntax of exact match query in Kibana Discover view](https://discuss.elastic.co/t/lucene-query-syntax-of-exact-match-query-in-kibana-discover-view/219297)

<div class="topic-metadata">

**Author:** [@Michael\_C.H\_Wang](https://discuss.elastic.co/u/Michael_C.H_Wang)\
**Replies:** 1\
**Last updated:** [February 14, 2020, 5:22am UTC](https://discuss.elastic.co/t/lucene-query-syntax-of-exact-match-query-in-kibana-discover-view/219297 "2020-02-14T05:22:07Z")

</div>

Hi, I might have an index with two created Available Fields "Product" and "Bom" and other default ones like \_id, \_index, Bom is a string like "260-70-0002-00 650-66-0009-00 560-34-0106-00 560-34-0106-00 560-34-0211-00.…

---

## [How do I connect PostgreSQL data of a project to the Elasticsearch server database?](https://discuss.elastic.co/t/how-do-i-connect-postgresql-data-of-a-project-to-the-elasticsearch-server-database/64538)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 1\
**Last updated:** [November 1, 2016, 10:35am UTC](https://discuss.elastic.co/t/how-do-i-connect-postgresql-data-of-a-project-to-the-elasticsearch-server-database/64538 "2016-11-01T10:35:15Z")

</div>

Our project data is stored in postgresql database. We are trying to use elasticsearch for the search functionality. Please tell me the ways to implement search functionality using elasticsearch. regards Kartheek Gumm…

[Previous page](https://discuss.elastic.co/top.md?page=940&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=942&per_page=50&period=all)
