# Top **URL:** https://discuss.elastic.co/top.md?page=956&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 957 --- ## [Parent-child relation not working with Elasticsearch 2.0.0-beta 2](https://discuss.elastic.co/t/parent-child-relation-not-working-with-elasticsearch-2-0-0-beta-2/33121)
**Author:** [@Vid](https://discuss.elastic.co/u/Vid)\ **Replies:** 0\ **Last updated:** [October 28, 2015, 4:50am UTC](https://discuss.elastic.co/t/parent-child-relation-not-working-with-elasticsearch-2-0-0-beta-2/33121 "2015-10-28T04:50:53Z")
We are trying to index data from two db tables (e.g: dept - master and employee - child) with parent-child relationship. We are able to index dept data which is parent. However, we are not able to index employee data (ha… --- ## [Connecting logstash to Elasticsearch via SSL](https://discuss.elastic.co/t/connecting-logstash-to-elasticsearch-via-ssl/308828)
**Author:** [@dsilvera](https://discuss.elastic.co/u/dsilvera)\ **Replies:** 5\ **Last updated:** [July 10, 2022, 2:01am UTC](https://discuss.elastic.co/t/connecting-logstash-to-elasticsearch-via-ssl/308828 "2022-07-10T02:01:32Z")
So I have read that since v8.0 Elasticsearch has encryption turned on by default for connections from Logstash, Kabana, Beats. But I'm not finding a guide on how to setup the certificate and connect to Elasticsearch fro… --- ## [APM client drop queue if memory usage too big](https://discuss.elastic.co/t/apm-client-drop-queue-if-memory-usage-too-big/119711)
**Author:** [@adobnikar](https://discuss.elastic.co/u/adobnikar)\ **Replies:** 5\ **Last updated:** [March 16, 2018, 3:32pm UTC](https://discuss.elastic.co/t/apm-client-drop-queue-if-memory-usage-too-big/119711 "2018-03-16T15:32:44Z")
I am using npm package "elastic-apm-node" (APM agent) to log koa server requests and mysql quries. The problem is that sometimes the APM server is unavailable. When I do some big mysql queries the memory fills up quite… --- ## [Aggregations / Curl / # of events by device in the past hour](https://discuss.elastic.co/t/aggregations-curl-of-events-by-device-in-the-past-hour/64636)
**Author:** [@l1carter](https://discuss.elastic.co/u/l1carter)\ **Replies:** 5\ **Last updated:** [November 2, 2016, 6:26pm UTC](https://discuss.elastic.co/t/aggregations-curl-of-events-by-device-in-the-past-hour/64636 "2016-11-02T18:26:31Z")
All, looking for a simple curl command that can run every hour in crontab. it's purpose is to look at the total number of events generated for the past hour and sort by: source device generating event, total number of ev… --- ## [Elasticsearch upgrade from 1.7 to 2.2 write speed is very slow](https://discuss.elastic.co/t/elasticsearch-upgrade-from-1-7-to-2-2-write-speed-is-very-slow/46148)
**Author:** [@maple](https://discuss.elastic.co/u/maple)\ **Replies:** 5\ **Last updated:** [May 22, 2016, 2:45pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-1-7-to-2-2-write-speed-is-very-slow/46148 "2016-05-22T14:45:42Z")
Elasticsearch upgrade from 1.7 to 2.2 write speed is very slow？？？？ I found that after the upgrade data is written to the elasticseach speed is very slow, slow to bear, but I don't know how to analyze the cause of the s… --- ## [Memory usage constantly increasing?](https://discuss.elastic.co/t/memory-usage-constantly-increasing/44964)
**Author:** [@seidler2547](https://discuss.elastic.co/u/seidler2547)\ **Replies:** 5\ **Last updated:** [March 22, 2016, 12:12pm UTC](https://discuss.elastic.co/t/memory-usage-constantly-increasing/44964 "2016-03-22T12:12:36Z")
Hi, we use elasticsearch for the classic ELK stack. We're indexing on average about 18 million docs (log file entries) per day. ES is doing a fantastic job, but I was wondering about memory usage. It seems it is consta… --- ## [How to restore .security index from snapshot](https://discuss.elastic.co/t/how-to-restore-security-index-from-snapshot/344959)
**Author:** [@dna01](https://discuss.elastic.co/u/dna01)\ **Replies:** 6\ **Last updated:** [October 29, 2023, 11:06am UTC](https://discuss.elastic.co/t/how-to-restore-security-index-from-snapshot/344959 "2023-10-29T11:06:56Z")
what is the recommended approach to restore .security index from snapshot? the index needs to be closed to be restored, but once it is closed, users cannot login anymore. and the whole database stuck since it cannot lo… --- ## [ActiveCollab](https://discuss.elastic.co/t/activecollab/148734)
**Author:** [@bulldzr](https://discuss.elastic.co/u/bulldzr)\ **Replies:** 6\ **Last updated:** [September 16, 2018, 5:10pm UTC](https://discuss.elastic.co/t/activecollab/148734 "2018-09-16T17:10:13Z")
I have been looking for a solution for quite some time. Activecollab a project management portal uses elasticsearch. I have installed this on my server and followed all of the instructions, I have successfully completed … --- ## [Jdbc-river error: no sqljdbc\_auth in java.ibrary.path for sqlserver dll](https://discuss.elastic.co/t/jdbc-river-error-no-sqljdbc-auth-in-java-ibrary-path-for-sqlserver-dll/15320)
**Author:** [@seralf](https://discuss.elastic.co/u/seralf)\ **Replies:** 6\ **Last updated:** [January 20, 2014, 2:56pm UTC](https://discuss.elastic.co/t/jdbc-river-error-no-sqljdbc-auth-in-java-ibrary-path-for-sqlserver-dll/15320 "2014-01-20T14:56:04Z")
Hi to all I have the following problem with sqlserver authentication. I am using Elasticsearch with SQLServer using the mixed authentication; I define my indexing on the river plugin as something like: curl -XPUT "h… --- ## [Filebeat not logging hints.enabled container logs](https://discuss.elastic.co/t/filebeat-not-logging-hints-enabled-container-logs/310574)
**Author:** [@dev4elasticapm](https://discuss.elastic.co/u/dev4elasticapm)\ **Replies:** 3\ **Last updated:** [July 30, 2022, 1:19am UTC](https://discuss.elastic.co/t/filebeat-not-logging-hints-enabled-container-logs/310574 "2022-07-30T01:19:06Z")
Hi, I am using ECK, I have configured filebeat with two options hints.enabled: true, which looks for all the containers with co.elastic.logs/enabled: "true" Checks the container containing name ingress. #2 is workin… --- ## [How to Parse the XML logs in Logstash and Convert into Json](https://discuss.elastic.co/t/how-to-parse-the-xml-logs-in-logstash-and-convert-into-json/302035)
**Author:** [@lolo\_prime](https://discuss.elastic.co/u/lolo_prime)\ **Replies:** 3\ **Last updated:** [April 11, 2022, 5:02pm UTC](https://discuss.elastic.co/t/how-to-parse-the-xml-logs-in-logstash-and-convert-into-json/302035 "2022-04-11T17:02:44Z")
i want to convert xml input to json data. The xml format is shown below --- ## [Hot/Warm/Cord Architecture](https://discuss.elastic.co/t/hot-warm-cord-architecture/208176)
**Author:** [@daniel\_a](https://discuss.elastic.co/u/daniel_a)\ **Replies:** 3\ **Last updated:** [November 18, 2019, 5:26pm UTC](https://discuss.elastic.co/t/hot-warm-cord-architecture/208176 "2019-11-18T17:26:44Z")
I'm trying to figure out what are the most optional ratios for each data storage. I'm aware about 30/100 ratios used for hot/warm storages in Elastic Cloud. I can't really find much information about the cold storage. W… --- ## [Geoip NOT WORKING HELP](https://discuss.elastic.co/t/geoip-not-working-help/143445)
**Author:** [@leea](https://discuss.elastic.co/u/leea)\ **Replies:** 3\ **Last updated:** [August 9, 2018, 8:02pm UTC](https://discuss.elastic.co/t/geoip-not-working-help/143445 "2018-08-09T20:02:10Z")
Input.conf input { beats{ port =\> 5044 type =\> "ioc" } beats{ port =\> 5043 type =\> "packetbeat" } beats{ port =\> 5045 type =\> "snort" } } logstash.conf filter { date{ match =\> \["timestamp", "dd/MM/yyy:H… --- ## [Help: Flattened aggregations (with limiting and sorting)](https://discuss.elastic.co/t/help-flattened-aggregations-with-limiting-and-sorting/20373)
**Author:** [@Matt\_Traynham](https://discuss.elastic.co/u/Matt_Traynham)\ **Replies:** 3\ **Last updated:** [November 14, 2014, 4:30pm UTC](https://discuss.elastic.co/t/help-flattened-aggregations-with-limiting-and-sorting/20373 "2014-11-14T16:30:35Z")
Here's a bit of background info: I'm interested in using aggregations to produce distinct keys for multiple "term" fields and then getting a "measure" value for those keys. This can be accomplished by "tree"-ing … --- ## [How to add additional value in bucket aggregation?](https://discuss.elastic.co/t/how-to-add-additional-value-in-bucket-aggregation/269666)
**Author:** [@zeusfsx](https://discuss.elastic.co/u/zeusfsx)\ **Replies:** 4\ **Last updated:** [April 9, 2021, 8:56am UTC](https://discuss.elastic.co/t/how-to-add-additional-value-in-bucket-aggregation/269666 "2021-04-09T08:56:29Z")
Hi, I have documents in the index with the field sentimental\_keywords: sentimental\_keywords: \[ { rate: 0.2857143, keyword: "manager" }, ... { rate: -0.333333343, keyword: "project" }, \] When I do terms … --- ## [POST data from C++](https://discuss.elastic.co/t/post-data-from-c/233451)
**Author:** [@Anowar](https://discuss.elastic.co/u/Anowar)\ **Replies:** 4\ **Last updated:** [May 20, 2020, 8:43am UTC](https://discuss.elastic.co/t/post-data-from-c/233451 "2020-05-20T08:43:07Z")
POST data from C++ using cURL and executing the cURL command by system(). #include\ #include\ using namespace std; int main() { system("curl -XPOST \\"http://localhos… --- ## [APM Server URL - Page not found for Java Agent](https://discuss.elastic.co/t/apm-server-url-page-not-found-for-java-agent/146321)
**Author:** [@Senz79](https://discuss.elastic.co/u/Senz79)\ **Replies:** 4\ **Last updated:** [August 30, 2018, 4:00am UTC](https://discuss.elastic.co/t/apm-server-url-page-not-found-for-java-agent/146321 "2018-08-30T04:00:11Z")
Hello I have configured the Elastic Agent with JAVA Agent. I have configured the below components ElasticSearch 6.4 Kibana 6.4 APM 6.4 APM JAVA Agent - elastic-apm-agent-0.6.2 I start all the components in the same o… --- ## [Autostart Logstash configuration](https://discuss.elastic.co/t/autostart-logstash-configuration/65569)
**Author:** [@gmmurugan](https://discuss.elastic.co/u/gmmurugan)\ **Replies:** 4\ **Last updated:** [November 12, 2016, 4:40pm UTC](https://discuss.elastic.co/t/autostart-logstash-configuration/65569 "2016-11-12T16:40:32Z")
How exactly i can make the logstash\_server to start the pipeline automatically with configurations. i think im using logstash 2.3.2 and the path in my server is /opt/logstash/server/etc/conf.d/test.conf normally im s… --- ## [Shield support for SSO apps/protocols](https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769)
**Author:** [@avibh](https://discuss.elastic.co/u/avibh)\ **Replies:** 4\ **Last updated:** [August 27, 2015, 7:05am UTC](https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769 "2015-08-27T07:05:43Z")
Hi, I'm looking into integrating Shield into our ES. is there a plan to support SSO apps/protocols (like apache CAS, AuthO...) on Shield? Thanks --- ## [Sort by \_version field](https://discuss.elastic.co/t/sort-by--version-field/8169)
**Author:** [@Greg\_2](https://discuss.elastic.co/u/Greg_2)\ **Replies:** 4\ **Last updated:** [November 18, 2013, 11:56pm UTC](https://discuss.elastic.co/t/sort-by--version-field/8169 "2013-11-18T23:56:37Z")
Hi, i must sort the documents by the version number ("\_version"- field). How can I do that? Thanks. Greg --- ## [The service was suddenly shutdown,then saw the logs"unexpected error while indexing monitoring document"](https://discuss.elastic.co/t/the-service-was-suddenly-shutdown-then-saw-the-logs-unexpected-error-while-indexing-monitoring-document/137823)
**Author:** [@KenChen](https://discuss.elastic.co/u/KenChen)\ **Replies:** 1\ **Last updated:** [June 28, 2018, 4:07pm UTC](https://discuss.elastic.co/t/the-service-was-suddenly-shutdown-then-saw-the-logs-unexpected-error-while-indexing-monitoring-document/137823 "2018-06-28T16:07:57Z")
our elasticserach service was shutdown,we found "unexpected error while indexing monitoring document",then we searched many answers,but no one can resolve our problem. org.elasticsearch.xpack.monitoring.exporter.Export… --- ## [How to attach a URL to a string in painless](https://discuss.elastic.co/t/how-to-attach-a-url-to-a-string-in-painless/205951)
**Author:** [@hedi.guedidi](https://discuss.elastic.co/u/hedi.guedidi)\ **Replies:** 2\ **Last updated:** [November 2, 2019, 10:56am UTC](https://discuss.elastic.co/t/how-to-attach-a-url-to-a-string-in-painless/205951 "2019-11-02T10:56:44Z")
Hey everyone, I want to create a scripted field with painless that basically does this: If(doc\['field'\].value== val){ return("go to site 1");} Else{return ("go to site 2");} And I don't see how I can add a hyperlink… --- ## [Combining Events Based on Common session\_id Field](https://discuss.elastic.co/t/combining-events-based-on-common-session-id-field/180627)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 2\ **Last updated:** [May 14, 2019, 10:13pm UTC](https://discuss.elastic.co/t/combining-events-based-on-common-session-id-field/180627 "2019-05-14T22:13:28Z")
Good afternoon, all! I first have to say I am very new to ElasticSearch, so I would appreciate some assistance here. I have a firewall that sends a few different types of logs for the same event, but in a different cate… --- ## [Custom Kibana html plugin](https://discuss.elastic.co/t/custom-kibana-html-plugin/88037)
**Author:** [@Corine](https://discuss.elastic.co/u/Corine)\ **Replies:** 2\ **Last updated:** [June 2, 2017, 12:13pm UTC](https://discuss.elastic.co/t/custom-kibana-html-plugin/88037 "2017-06-02T12:13:35Z")
Hello, I'm learning to develop a kibana plugin so I'm trying to modify an existing html plugin. I added a metric and I want to display the result by using data. But I don't have any result when i choose my metrics. Can … --- ## [Is SUBQUERY possible?](https://discuss.elastic.co/t/is-subquery-possible/275043)
**Author:** [@Jakub\_Kaczmarek](https://discuss.elastic.co/u/Jakub_Kaczmarek)\ **Replies:** 3\ **Last updated:** [June 10, 2021, 11:50am UTC](https://discuss.elastic.co/t/is-subquery-possible/275043 "2021-06-10T11:50:05Z")
Hi, I have an index "inputs", which consists of 2 columns: sessionId (string), timestamp (date). I want to calculate average session duration and try to add visualization to Canvas. SQL formula: SELECT AVG(duration) … --- ## [SystemTotalCpuProvider Failed instantiating PerformanceCounter](https://discuss.elastic.co/t/systemtotalcpuprovider-failed-instantiating-performancecounter/217811)
**Author:** [@marcus.labohm](https://discuss.elastic.co/u/marcus.labohm)\ **Replies:** 3\ **Last updated:** [February 5, 2020, 8:31am UTC](https://discuss.elastic.co/t/systemtotalcpuprovider-failed-instantiating-performancecounter/217811 "2020-02-05T08:31:28Z")
Kibana 7.5 Elasticsearch 7.5 APM Server 7.5 APM Agent dot net NuGet Elastic.Apm.NetCoreAll (1.2.0) Fresh install .Net Core 2.1 Web App with the Elastic APM NuGet Package. Deployed on a IIS 8 (8.5.9600) on a Windows… --- ## [Kafka output plugin java.lang.long error](https://discuss.elastic.co/t/kafka-output-plugin-java-lang-long-error/145398)
**Author:** [@nich](https://discuss.elastic.co/u/nich)\ **Replies:** 3\ **Last updated:** [August 23, 2018, 9:53pm UTC](https://discuss.elastic.co/t/kafka-output-plugin-java-lang-long-error/145398 "2018-08-23T21:53:58Z")
When I try to use the Kafka output plugin I get this variable type error: \[ERROR\]\[logstash.outputs.kafka \] Unable to create Kafka producer from given configuration {:kafka\_error\_message=\>org.apache.kafka.common.config.C… --- ## [Limit results count when using sliced scroll api](https://discuss.elastic.co/t/limit-results-count-when-using-sliced-scroll-api/95498)
**Author:** [@Josca](https://discuss.elastic.co/u/Josca)\ **Replies:** 3\ **Last updated:** [August 3, 2017, 10:09am UTC](https://discuss.elastic.co/t/limit-results-count-when-using-sliced-scroll-api/95498 "2017-08-03T10:09:28Z")
Hi, I use sliced scroll api to fetch results from Elasticsearch in parallel (https://www.elastic.co/guide/en/elasticsearch/reference/current/search-request-scroll.html#sliced-scroll). But I am not able to set Elasticsea… --- ## [Logstash dies because of to high load](https://discuss.elastic.co/t/logstash-dies-because-of-to-high-load/89019)
**Author:** [@disappear89](https://discuss.elastic.co/u/disappear89)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 7:25pm UTC](https://discuss.elastic.co/t/logstash-dies-because-of-to-high-load/89019 "2017-06-16T19:25:16Z")
Hi, we have the following setup: Many Clients with collectors sidecar and filebeat installed, sending their logs to logstash Some Clients that send their openshift logs via fluentd to logstash Two Graylog / Logstash… --- ## [Evaluation of Prototype Identifying Unnecessary Code](https://discuss.elastic.co/t/evaluation-of-prototype-identifying-unnecessary-code/74685)
**Author:** [@Roman\_Haas](https://discuss.elastic.co/u/Roman_Haas)\ **Replies:** 8\ **Last updated:** [February 14, 2017, 3:12pm UTC](https://discuss.elastic.co/t/evaluation-of-prototype-identifying-unnecessary-code/74685 "2017-02-14T15:12:58Z")
Dear Elasticsearch developers, you are working on an amazing project and I am sure you are investing a lot of time to keep it up and running! I am researching in the field of software maintenance and I implemented a… --- ## [Error 503 on server post unblocking the index on a proxy](https://discuss.elastic.co/t/error-503-on-server-post-unblocking-the-index-on-a-proxy/257720)
**Author:** [@Anuradha12](https://discuss.elastic.co/u/Anuradha12)\ **Replies:** 7\ **Last updated:** [December 5, 2020, 8:14am UTC](https://discuss.elastic.co/t/error-503-on-server-post-unblocking-the-index-on-a-proxy/257720 "2020-12-05T08:14:45Z")
Could not save: {'index': {'\_index': 'prj\_1a9c0440af7f4ed297736cffa5591082\_connector', '\_type': '\_doc', '\_id': 'model\_d25q7003720200', 'status': 503, 'error': {'type': 'unavailable\_shards\_exception', 'reason': '\[prj\_1a9c… --- ## [Exception in thread "main" java.nio.file.AccessDeniedException while run ./bin/elasticsearch](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception-while-run-bin-elasticsearch/199177)
**Author:** [@Tje](https://discuss.elastic.co/u/Tje)\ **Replies:** 1\ **Last updated:** [September 12, 2019, 8:19am UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-accessdeniedexception-while-run-bin-elasticsearch/199177 "2019-09-12T08:19:20Z")
I'm trying to install ElasticSearch in to my server.When i run ./bin/elasticsearch got bellow error Exception in thread "main" java.nio.file.AccessDeniedException: /var/www/elasticsearch-7.3.1/config/jvm.options at jav… --- ## [NGRAM Tokenizer Problem - segment writing can't keep up](https://discuss.elastic.co/t/ngram-tokenizer-problem-segment-writing-cant-keep-up/80179)
**Author:** [@Adam\_Whittaker](https://discuss.elastic.co/u/Adam_Whittaker)\ **Replies:** 1\ **Last updated:** [March 28, 2017, 3:23pm UTC](https://discuss.elastic.co/t/ngram-tokenizer-problem-segment-writing-cant-keep-up/80179 "2017-03-28T15:23:47Z")
Hello, I enabled an NGRAM Tokenizer on a field in one of my indexes (im using ElasticSearch 5.2.0) and after the indexing was complete my ElasticSearch stopped responding. In checking the logs i kept seeing this err… --- ## [ELK Heartbeat x509: certificate signed by unknown authority for Sectigo CA](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871)
**Author:** [@ezramiller](https://discuss.elastic.co/u/ezramiller)\ **Replies:** 5\ **Last updated:** [June 24, 2021, 12:36pm UTC](https://discuss.elastic.co/t/elk-heartbeat-x509-certificate-signed-by-unknown-authority-for-sectigo-ca/276871 "2021-06-24T12:36:46Z")
Hello everyone. I am monitoring some websites and a lot of these websites using Sectigo SSL Certificates. Heartbeat showing these websites with Sectigo certificates as x509: certificate signed by unknown authority. Why i… --- ## [Graphing Interface Utilization with Timelion or TVSB](https://discuss.elastic.co/t/graphing-interface-utilization-with-timelion-or-tvsb/272459)
**Author:** [@nickr](https://discuss.elastic.co/u/nickr)\ **Replies:** 5\ **Last updated:** [May 11, 2021, 2:37pm UTC](https://discuss.elastic.co/t/graphing-interface-utilization-with-timelion-or-tvsb/272459 "2021-05-11T14:37:55Z")
Hi, I'm trying to follow this blogpost to normalize network traffic collected by the SNMP filter (ifHCInOctects/ifHCOutOctets) on a 7.12 stack. I'm sure I had this working on a previous version 6 months or so ago. At … --- ## [Enable x-pack](https://discuss.elastic.co/t/enable-x-pack/142252)
**Author:** [@avranCheck](https://discuss.elastic.co/u/avranCheck)\ **Replies:** 6\ **Last updated:** [August 2, 2018, 9:30pm UTC](https://discuss.elastic.co/t/enable-x-pack/142252 "2018-08-02T21:30:28Z")
Based on this https://www.elastic.co/blog/doubling-down-on-open and https://www.elastic.co/products/x-pack/open I was expecting to see XPack in the base product I have ELK 6.3.0 and don't see the xpack settings mentione… --- ## [Custom filter plugin logging configuration through log4j](https://discuss.elastic.co/t/custom-filter-plugin-logging-configuration-through-log4j/123389)
**Author:** [@srikanth\_muddu](https://discuss.elastic.co/u/srikanth_muddu)\ **Replies:** 6\ **Last updated:** [March 13, 2018, 8:57pm UTC](https://discuss.elastic.co/t/custom-filter-plugin-logging-configuration-through-log4j/123389 "2018-03-13T20:57:50Z")
I have installed new filter plugin with jar dependencies.I kept log4j2.properties for a java project and was able to create logging with a java project.But after installing plugin logs are not appending in the logstash-… --- ## [Kibana bar chart inaccurate when searching on field? \[SOLVED\]](https://discuss.elastic.co/t/kibana-bar-chart-inaccurate-when-searching-on-field-solved/42908)
**Author:** [@ChrisR](https://discuss.elastic.co/u/ChrisR)\ **Replies:** 6\ **Last updated:** [March 1, 2016, 9:18pm UTC](https://discuss.elastic.co/t/kibana-bar-chart-inaccurate-when-searching-on-field-solved/42908 "2016-03-01T21:18:58Z")
I'm seeing an issue with bar chart values when searching on a field. The bar chart values are accurate when there is nothing in the search field, but when I search for field:"xyz", the numbers in the bars are close but … --- ## [Issue when enabling TLS in Fluent-bit with Elasticsearch as output](https://discuss.elastic.co/t/issue-when-enabling-tls-in-fluent-bit-with-elasticsearch-as-output/362573)
**Author:** [@Aingeru\_Scotland](https://discuss.elastic.co/u/Aingeru_Scotland)\ **Replies:** 2\ **Last updated:** [July 5, 2024, 5:02pm UTC](https://discuss.elastic.co/t/issue-when-enabling-tls-in-fluent-bit-with-elasticsearch-as-output/362573 "2024-07-05T17:02:43Z")
I am setting a EFK stack in a Kubernetes single host cluster. Everything works perfectly with http. However, when I enable TLS in Fluent-bit ConfigMap, I experience the following error: \[2024/07/04 16:51:57\] \[error\] \[tl… --- ## [Include & Exclude of 500k ids in a search query](https://discuss.elastic.co/t/include-exclude-of-500k-ids-in-a-search-query/296428)
**Author:** [@sanders\_2345](https://discuss.elastic.co/u/sanders_2345)\ **Replies:** 4\ **Last updated:** [February 8, 2022, 12:32pm UTC](https://discuss.elastic.co/t/include-exclude-of-500k-ids-in-a-search-query/296428 "2022-02-08T12:32:52Z")
Problem statement: We've millions of ids stored in another Id store. These ids we're generating from the application & will be as same es doc id. Here, for certain use-cases, we want to include & exclude these ids in a … --- ## [I want to output log to elasticsearch index from only specific "host.ip"](https://discuss.elastic.co/t/i-want-to-output-log-to-elasticsearch-index-from-only-specific-host-ip/266494)
**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\ **Replies:** 4\ **Last updated:** [March 9, 2021, 3:51am UTC](https://discuss.elastic.co/t/i-want-to-output-log-to-elasticsearch-index-from-only-specific-host-ip/266494 "2021-03-09T03:51:57Z")
"host.ip" is at "\_source" displayed on Kibana. Please teach me how to resolve. logstash config input { beats { port =\> 5044 } } filter { grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:Time} %{HO… --- ## [Index time boosting Vs Query time boosting](https://discuss.elastic.co/t/index-time-boosting-vs-query-time-boosting/13951)
**Author:** [@Karan\_Verma](https://discuss.elastic.co/u/Karan_Verma)\ **Replies:** 4\ **Last updated:** [October 16, 2013, 12:44am UTC](https://discuss.elastic.co/t/index-time-boosting-vs-query-time-boosting/13951 "2013-10-16T00:44:10Z")
Hi Which scenarios would support index time boosting over query time boosting and vice-versa. How does one score over an other and what to keep in mind while making a decision about one approach? Karan … --- ## [Org.logstash.beats Invalid frame protocol exception](https://discuss.elastic.co/t/org-logstash-beats-invalid-frame-protocol-exception/95010)
**Author:** [@sweety](https://discuss.elastic.co/u/sweety)\ **Replies:** 0\ **Last updated:** [July 28, 2017, 8:32pm UTC](https://discuss.elastic.co/t/org-logstash-beats-invalid-frame-protocol-exception/95010 "2017-07-28T20:32:38Z")
I am trying to send logs to logstash using filebeats On local machine: --filebeats --logstash --kibana On server --elastcisearch I ran filebeat and logstash on two terminals on my local machine: ran logstash - b… --- ## [Getting connection aborted exception](https://discuss.elastic.co/t/getting-connection-aborted-exception/105985)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 1\ **Last updated:** [November 1, 2017, 7:47am UTC](https://discuss.elastic.co/t/getting-connection-aborted-exception/105985 "2017-11-01T07:47:56Z")
I am pushing data to elasticsearch using RestClient bulk API. When file contains 100000 records it is working fine. But above 100000 records I am getting exception DEBUG \[I/O dispatcher 1\] RestClient.logFailedRequest(92… --- ## [How to properly configure Log4J 2?](https://discuss.elastic.co/t/how-to-properly-configure-log4j-2/100311)
**Author:** [@Jenia](https://discuss.elastic.co/u/Jenia)\ **Replies:** 1\ **Last updated:** [September 13, 2017, 8:59am UTC](https://discuss.elastic.co/t/how-to-properly-configure-log4j-2/100311 "2017-09-13T08:59:25Z")
Hi, I’m trying to configure Log4J2 in Java project after getting this message: “No log4j2 configuration file found. Using default configuration: logging only errors to the console. Set system property 'log4j2.debug' to… --- ## [Fail to create alias using transport client](https://discuss.elastic.co/t/fail-to-create-alias-using-transport-client/79550)
**Author:** [@Cherry\_Zhang](https://discuss.elastic.co/u/Cherry_Zhang)\ **Replies:** 1\ **Last updated:** [March 23, 2017, 12:33am UTC](https://discuss.elastic.co/t/fail-to-create-alias-using-transport-client/79550 "2017-03-23T00:33:14Z")
I use below command to add an alias client.admin().indices().prepareAliases().addAlias(index, alias).execute().actionGet(); but always gets an exception: org.elasticsearch.indices.InvalidAliasNameException: Invali… --- ## [Why can kibana\_dashboard\_only\_user hide navigation menu items but a custom role cannot?](https://discuss.elastic.co/t/why-can-kibana-dashboard-only-user-hide-navigation-menu-items-but-a-custom-role-cannot/151961)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 3\ **Last updated:** [October 11, 2018, 1:28pm UTC](https://discuss.elastic.co/t/why-can-kibana-dashboard-only-user-hide-navigation-menu-items-but-a-custom-role-cannot/151961 "2018-10-11T13:28:30Z")
Hi I've been breaking my head over this for two days and I just can't figure it out. For whatever reason the kibana\_dashboard\_only user role can hides all navigation menus except for the dashboard button (good). If I … --- ## [Kubernetes cpu usage](https://discuss.elastic.co/t/kubernetes-cpu-usage/116411)
**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\ **Replies:** 3\ **Last updated:** [January 22, 2018, 9:06pm UTC](https://discuss.elastic.co/t/kubernetes-cpu-usage/116411 "2018-01-22T21:06:03Z")
Hi all, I would like to find the CPU usage for each service with time. For this purpose, i am using the visual builder feature. I don't want to find the average or sum, just want to visualize the service and the memory … --- ## [Graph - no data](https://discuss.elastic.co/t/graph-no-data/47701)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 3\ **Last updated:** [April 20, 2016, 3:54pm UTC](https://discuss.elastic.co/t/graph-no-data/47701 "2016-04-20T15:54:11Z")
Just installed, I can see the icons. When I use it, no results/data shows up. Any ideas? --- ## [Kibana 7.3.1 "discover" tab won't load after enabling "Stack Monitoring"](https://discuss.elastic.co/t/kibana-7-3-1-discover-tab-wont-load-after-enabling-stack-monitoring/196632)
**Author:** [@pcgeek86](https://discuss.elastic.co/u/pcgeek86)\ **Replies:** 2\ **Last updated:** [August 25, 2019, 5:11pm UTC](https://discuss.elastic.co/t/kibana-7-3-1-discover-tab-wont-load-after-enabling-stack-monitoring/196632 "2019-08-25T17:11:54Z")
I am trying to learn about Elasticsearch and Kibana. I launched both Elasticsearch 7.3.1 and Kibana 7.3.1 in Docker containers, with --net host on an Ubuntu 18.04 VM. I configured Kibana to find the Elasticsearch server … [Previous page](https://discuss.elastic.co/top.md?page=955&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=957&per_page=50&period=all)