Re: Term facet problem

2013-12-23 Thread abhi patel
Thank you.It worked On Friday, December 20, 2013 12:37:59 PM UTC+5:30, Jun Ohtani wrote: Hi, Your “Product_ID” field is “analyzed”. You change the Product_ID field to “not_analyzed” for faceting. If you want to search analyzed Product_ID field, then you should use multi_field. See

Add dropdown box in Kibana Interface

2013-12-23 Thread Salih Kardan
Hi folks I want to add a small feature to Kibana, however I could not understand whole structure of Kibana. Particularly I want to add a dropdown menu to be able to choose host to display the logs accordingly.

Re: Adding EC2 settings to elasticsearch.yml stops listening to port 9200

2013-12-23 Thread David Pilato
Could you try to add to elasticsearch.yml file: cloud.enabled: true and restart? Also, your logs show that you are using elasticsearch 0.90.7, right? Did you install was plugin 1.16.0? bin/plugin -install elasticsearch/elasticsearch-cloud-aws/1.16.0 --  David Pilato | Technical Advocate | 

Re: Logstash 1.3 repository not working?

2013-12-23 Thread Richard Pijnenburg
Hi Will, My apologies for the confusion. the 1.3. release has been removed because of bugs in the 1.3.0/1.3.1 releases. Later today we will be releasing 1.3.2 which has fixes for those bugs. When that release is done we will update the repo and add the 1.3.2 release to it. On Monday,

Shard missing from response

2013-12-23 Thread Pierre Durand
I use Elasticsearch 0.90.5 for log management (1 index by day). In my query, I have a term facet in order to aggregate my data. But sometimes, there is a really weird problem, I get: _shards: {total:700, successful:551, failed:0} How is it possible? Some shards are not successful or failed. --

Re: Add dropdown box in Kibana Interface

2013-12-23 Thread Salih Kardan
Actually, I probably could not explain my problem very well. Here is another screen shot: https://lh3.googleusercontent.com/-6nu5mhvVNLY/UrglwNJaSII/AMQ/VdnxQvU9Co4/s1600/Screenshot+from+2013-12-23+13%3A58%3A18.png When choose Host 1 from dropdown menu, I want to filter all logs from

Bool filter is not searching field content

2013-12-23 Thread Bruno Galindro da Costa
This query returns 7 itens: curl -XGET http://localhost:9200/modmine/_search; -d' { query: { filtered: { query: { match_all: {} }, filter: { bool: { must: [ {

Re: Help with a Query DSL

2013-12-23 Thread Bijuv V
Any help from the experts? Is this not possible using ElasticSearch query DSL or the only option is to change the object structure as described below by Sina? Op vrijdag 20 december 2013 21:16:08 UTC+1 schreef Bijuv V: I have the data in the following format in Elastic Search (from

Re: CPU Usage more than 100% in case of Rivering large data (around 100K records) (JBDC river plugin with ES )

2013-12-23 Thread Justin Doles
Meant *max_bulk_requests = 5. On Monday, December 23, 2013 10:35:59 AM UTC-5, Justin Doles wrote: You have max_bulk_requests set to bulk_size set to 1000. If I read the JDBC docs correct, that would potentially result in trying to bulk 500,000 docs at a time. Which CPU is high?

Re: CPU Usage more than 100% in case of Rivering large data (around 100K records) (JBDC river plugin with ES )

2013-12-23 Thread Justin Doles
You have max_bulk_requests set to bulk_size set to 1000. If I read the JDBC docs correct, that would potentially result in trying to bulk 500,000 docs at a time. Which CPU is high? MySQL or the nodes in ES? On Monday, December 23, 2013 2:19:02 AM UTC-5, Anup Sakhare wrote: Hello, I could

How can I achieve the elasticsearch and shark(spark) Integration

2013-12-23 Thread zhuoming chen
I have used the elasticsearch-hadoop successfully,it very nice, but as we know ,mapreduce is very slow,so I want to use the shark(spark) which is faster than the mapreduce!!! but I have no idea what to do? can anyone help me??? thanks -- You received this message because you are subscribed to

Re: Bulk throughput issues

2013-12-23 Thread Jason Wee
Hi, this is interesting discussion, have a few extra questions if it is okay. // 7k per sec depend also on doc size. The larger the docs, the slower. Is there a way to quickly determine what is the size of a doc? // Note that by default, 50% heap memory of a node is dedicated for search, but 10%

Meaning of different FS IO information from the Cluster stats?

2013-12-23 Thread Search User
When I query for my cluster stats (_cluster/stats), I got the following for Disk IO. I am not sure how to read this information. Can some one explain how to find whether I have a disk IO issues are not based on the following (if possible details of each key) fs : { total :

Re: Possible to make ES Node Name same as Hostname?

2013-12-23 Thread Tony Su
After posting my last, I noticed that auto-correct modified systemd to system Should read I noticed that a number of similar -Des commands are implemented in the systemd Unit file referencing variables. Tony On Monday, December 23, 2013 2:19:46 PM UTC-8, Tony Su wrote: Additional minor

What is the best way to make multy index search

2013-12-23 Thread Nikolay Chankov
Hi guys, I guess, this is pretty trivial question, but so far I couldn't find the answer. The case: I have 4+ indices which contain different type of data (properly mapped of this make sense). I need to execute a search across all indices for a term, but when I search I need to put some

Proposal for Multi-Cluster Search Support

2013-12-23 Thread Gavin Seng
I know that most of the focus is on getting ready for RC1. Posting here in case this gets more attention than creating an issue on github.

Re: Possible to make ES Node Name same as Hostname?

2013-12-23 Thread joergpra...@gmail.com
Note, if you are using systemd, you must set environment vars with systemctl http://www.freedesktop.org/software/systemd/man/systemctl.html Not sure what -Des commands are. If you mean the elasticsearch command line, many ES config variables can be prefixed with es., the -D flag is Java. Jörg

Re: using river plugin for live requests

2013-12-23 Thread Karol Gwaj
by live request, do you mean the situation that user hits elasticsearch with query, and then waits for elasticsearch river to pull data from some API (before responding back to user)? is so then i dont think the river is the way to go here if in other hand you can populate your index a little