Re: increase query performance by adding more machines, shouldn't it be linear to # of machines?

2014-07-02 Thread Seungjin Lee
yes, all same machines on which only ES with same configuration is running 2014-07-02 14:55 GMT+09:00 David Pilato da...@pilato.fr: Are you using same physical machine for all your VMs? -- David ;-) Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs Le 2 juil. 2014 à 07:09, Seungjin

Re: increase query performance by adding more machines, shouldn't it be linear to # of machines?

2014-07-02 Thread David Pilato
Sorry. I meant on how many physical bare metal machines your 5 VMs are running? -- David ;-) Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs Le 2 juil. 2014 à 07:59, Seungjin Lee sweetest0...@gmail.com a écrit : yes, all same machines on which only ES with same configuration is running

Re: Dealing with spam in this forum

2014-07-02 Thread Paul Brown
Hi, Clinton -- May I suggest: - Some users (e.g., me) who read this list via an email subscription regard ANY spam on the list as an unacceptable state of affairs. This is not a problem with Apache lists, for example, so I would point the finger of blame at Google Groups. - Having N

How to search the records with locations all in a polygon or multiPolygon?

2014-07-02 Thread 阙裕斌
I add the mappings and insert a record with 2 locations ([13, 13], [52, 52]), and I want to search the results with it's locations all in the polygon,not one of the locations in the polygon. would you please tell me how to search the reslut? curl -XPOST localhost:9200/test5 -d '{

Re: Dealing with spam in this forum

2014-07-02 Thread Patrick Proniewski
Hi, I do agree with Paul, 200%. I've received in my mailbox at least 49 spams just for the 06/30. I won't call this a few spam email. I'm subscribed for years on many mailing lists, and I'm pretty sure that it would take years to get as much spam on those lists as I get in 1 day on ES mailing

Re: help in query

2014-07-02 Thread surfer
oops there is an it that doesn't belong On 07/02/2014 09:24 AM, surfer wrote: That definitely helped it. Thank you Vineeth Regards giovanni On 07/01/2014 07:19 PM, vineeth mohan wrote: Hello Giovanni , I feel this will help -

Re: help in query

2014-07-02 Thread surfer
That definitely helped it. Thank you Vineeth Regards giovanni On 07/01/2014 07:19 PM, vineeth mohan wrote: Hello Giovanni , I feel this will help - http://www.elasticsearch.org/guide/en/elasticsearch/guide/current/_literal_multi_match_literal_query_2.html#_wildcards_in_field_names

Re: Queries with fields {...} don't return field with dot in their name

2014-07-02 Thread benq
Hello Vineeth, the items that are indexed in elasticsearch really contains a field named response.user. _source: { clientip: aaa.bbb..ddd, request: http://.aa/b/c;, request.accept-encoding: gzip, deflate, request.accept-language: de-ch, response.content-type:

Re: limitation of 2,147,483,647 terms per segment index in Lucene

2014-07-02 Thread simonw
Peter, thanks so much for raising this. This looks aweful! I think we should move this into an issue on [1] (please feel free to create one) IMO we should aim to name the issue in a way to prevent this from happening altogether. Along the lines we should help you to recover but I don't know

Min Hard Drive Requirements

2014-07-02 Thread Ophir Michaeli
Hi all, I'm testing the indexing of 100 million documents, it took about 400GB of the hard drive. Is there a minimum free hard drive space needed for the index to work OK? I'm asking because after we indexed 100 million documents we tested the index and it worked OK, but then when trying to

problem index date yyyy-MM-dd’T'HH:mm:ss.SSS

2014-07-02 Thread Tanguy Bernard
Hello, I try to indexing datetime mysql like this : 2013-05-01 00:00:00 In ES it's represented like this : 2013-05-01T00:00:00.000Z The real problem seems to be when I index this date : -00-00 00:00:00 I have used this mapping : type:date, format:-MM-dd

Re: Min Hard Drive Requirements

2014-07-02 Thread Mark Walkom
It will work until it's full, but then ES will fall over. Merging does require a certain amount of disk space, usually the same amount as the segment that is being merged as it has to take a copy of the shard to work on. So for a 10GB segment, you'd need at least 10GB free. How many shards do you

One date field mapping for two different locale

2014-07-02 Thread Jahrit
Here's the problem. I have data with date field that can be either in english or german date format (or rather week and month naming convention). I.e.Mittwoch, 18. Juni 2012 or Wednesday, 18. June 2012 I can set up separate mappings for separate fileds for each nation's date. { website :

Shards considered in write consistency

2014-07-02 Thread Varun Vasan V
Hey, I have a question related to write consistency. I have a elasticsearch cluster with 2 nodes. The nodes are configured as number_of_shards = 5 number_of_replicas = 1 If i set the action.write_consistency value as `quorum`, what is the number of active shards required to satisfy the

Re: problem index date yyyy-MM-dd’T'HH:mm:ss.SSS

2014-07-02 Thread Tanguy Bernard
As made, when I index date -00-00 00:00:00 the indexing stop completly with an error. (the begin work and stop instantly) I have tried to put (mapping) the type : string to my date but it doesn't work Have you an idea to solve my problem ? -- You received this message because you are

Re: problem index date yyyy-MM-dd’T'HH:mm:ss.SSS

2014-07-02 Thread vineeth mohan
Hi Tanguy , How is this a valid date string - java.io.IOException: java.sql.SQLException: Value '7918-00-00 00:00:00 ? This value cant be mapped to any date format or is valid in anyway. Thanks Vineth On Wed, Jul 2, 2014 at 3:21 PM, Tanguy Bernard bernardtanguy1...@gmail.com

Re: problem index date yyyy-MM-dd’T'HH:mm:ss.SSS

2014-07-02 Thread Clinton Gormley
What you can do is to set the mapping for the date field to have: { type: date, format: -MM-dd HH:mm:ss, ignore_malformed: true } then it will just ignore those invalid dates rather than throwing an error -- You received this message because you are subscribed to the Google Groups

Re: problem index date yyyy-MM-dd’T'HH:mm:ss.SSS

2014-07-02 Thread Tanguy Bernard
In my mysql table (type : datetime) : | date_source | +-+ | 2008-09-15 18:29:07 | | 2013-08-29 00:00:00 | | 2013-07-04 00:00:00 | | 2013-07-17 00:00:00 | | 2013-07-17 00:00:00 | | -00-00 00:00:00 | ... If I use a mapping (type :string) And I index : PUT

Index missing error Eelasticseach java

2014-07-02 Thread venuchitta
Hi, I am new to elasticsearch. I am using JAVA Api to establish connection with ES. public void createIndex(final String index) { getClient().admin().indices().prepareCreate(index).execute().actionGet(); } public void createLocalCluster(final String

Re: Dealing with spam in this forum

2014-07-02 Thread Clinton Gormley
I've received in my mailbox at least 49 spams just for the 06/30. I won't call this a few spam email. I'm subscribed for years on many mailing lists, and I'm pretty sure that it would take years to get as much spam on those lists as I get in 1 day on ES mailing list. That's

Re: problem index date yyyy-MM-dd’T'HH:mm:ss.SSS

2014-07-02 Thread David Pilato
What this date is supposed to represent?  month = 0 or day = 0 does not exist, right?  --  David Pilato | Technical Advocate | Elasticsearch.com @dadoonet | @elasticsearchfr Le 2 juillet 2014 à 12:29:29, Tanguy Bernard (bernardtanguy1...@gmail.com) a écrit: In my mysql table (type : datetime)

Re: Shards considered in write consistency

2014-07-02 Thread David Pilato
In your case quorum means that you need all primaries to be allocated. Which is the case here. Doc explains that very well:  http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/docs-index_.html#index-consistency Have a look in detail at: 

have we a way to use highlight and fuzzy together ?

2014-07-02 Thread Tanguy Bernard
Hello Everything is on subject I have to use fuzzy for my fileds (title,content) and when I'm searching I want to see a part of the sentance where my keyword is. This, together, doesn't work: $params['body']['highlight']['fields'][$value]['fragment_size']=30;

Re: problem index date yyyy-MM-dd’T'HH:mm:ss.SSS

2014-07-02 Thread Tanguy Bernard
This date is created when a document is created, but an error occur and I have this -00-00 ^^ I'm in company while exist since 10 years, the database is old and they are this kind of error. For the moment, I will use : sql : select id_source as _id, title_source, date_source from source,

Re: problem index date yyyy-MM-dd’T'HH:mm:ss.SSS

2014-07-02 Thread David Pilato
I would recommend updating the SQL database! :) So may be update all dates where date is -00-00 to 1970-01-01 if it fits with your use case. --  David Pilato | Technical Advocate | Elasticsearch.com @dadoonet | @elasticsearchfr Le 2 juillet 2014 à 12:54:36, Tanguy Bernard

[ANN] ElasticUI AngularJS Directives - Easily Build an Interface on top of Elasticsearch

2014-07-02 Thread Yousef El-Dardiry
Hi all, I just open sourced a set of AngularJS Directives for Elasticsearch. It enables developers to rapidly build a frontend (e.g.: faceted search engine) on top of Elasticsearch. http://www.elasticui.com (or github https://github.com/YousefED/ElasticUI) It makes creating an aggregation and

Re: _all analyzer advice

2014-07-02 Thread mooky
Ah. Cheers. I had looked at that page a few times but missed that. On Tuesday, 1 July 2014 19:04:56 UTC+1, Glen Smith wrote: http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/analysis-analyzers.html On Tuesday, July 1, 2014 6:23:54 AM UTC-4, mooky wrote: Thanks. So

Re: problem index date yyyy-MM-dd’T'HH:mm:ss.SSS

2014-07-02 Thread Tanguy Bernard
Yes, it's just some date. I think that it can be update quickly. It's the better way :) Thank you all. Le mercredi 2 juillet 2014 12:56:59 UTC+2, David Pilato a écrit : I would recommend updating the SQL database! :) So may be update all dates where date is -00-00 to 1970-01-01 if it

Re: [ANN] ElasticUI AngularJS Directives - Easily Build an Interface on top of Elasticsearch

2014-07-02 Thread Mark Walkom
Very cool, I'll pass this onto some of our devs :) Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 2 July 2014 20:56, Yousef El-Dardiry yousefdard...@gmail.com wrote: Hi all, I just open sourced a set of

spellcheck and completion suggester or what?

2014-07-02 Thread Bernd Fehling
Hi group, I have a special problem which I'm trying to solve. I need search suggestions while typing text into a search box. I tried different settings and options with ES, including term suggester, completion suggester and so on, but no success. What I'm looking for is if I type in a search and

Something I am finding difficult, using Aggregations

2014-07-02 Thread mooky
Having used elastic aggregations for a little bit (and having used Mongo aggregations previously), I have been finding a couple of things a bit difficult/awkward. I am not sure if its because I don't know how to do it properly - or we missing a feature/enhancement in elastic. A common thing I

Re: Realtime search + fast indexing

2014-07-02 Thread mooky
One thing you can consider is calling refresh() after indexing - which has the effect I think you are looking for. There are probably some performance considerations others here can comment on better than I. In any case, calling refresh() is what we do. On Thursday, 26 June 2014 10:25:12

cluster.routing.allocation.enable behavior (sticky shard allocation not working as expected)

2014-07-02 Thread Andrew Davidoff
Hi, I am trying to use cluster.routing.allocation.enable to speed up node restarts. As I understand it, if I set cluster.routing.allocation.enable to none, restart a node, then set cluster.routing.allocation.enable to all, the shards that go UNASSIGNED when the node goes down should start

Re: Dealing with spam in this forum

2014-07-02 Thread mooky
I fall on the side of caring less about spam emails (since I have decent spam filter on my email) and would rate easy access to the group much higher. I tend to add/remove myself from groups all the time - so adding a delay to adding myself to a group with be a big PITA for me. -M On

Looking to build a logging solution with threshold alerting.

2014-07-02 Thread Joshua Hall
I am looking to build a logging solution and wanted to make sure that I am not missing any key components. The logs that I have are currently stored in a database which there is limited access due to locking risks from bad queries. My plan is to have the dba's write the logs from the database

Re: get rid of _all to optimize storage and perfs (Re: Splunk vs. Elastic search performance?)

2014-07-02 Thread Brian
Patrick, * Well, I did answer your question. But probably not from the direction you expected. hmm no, you didn't. My question was: it looks like I cant retrieve/display [_all fields] content. Any idea? and you replied with your logstash template where _all is disabled. I'm

Problem accessing fields from a native script during percolation

2014-07-02 Thread petchemaite
Hi all, We're trying to figure out how to access fields from within a native AbstractSearchScript when it's called from a percolate request that contains the document to percolate. We tried to use source mechanism and stored fields to no avail (no errors, but no matches). The same

Re: have we a way to use highlight and fuzzy together ?

2014-07-02 Thread Nikolas Everett
On Wed, Jul 2, 2014 at 6:47 AM, Tanguy Bernard bernardtanguy1...@gmail.com wrote: Hello Everything is on subject I have to use fuzzy for my fileds (title,content) and when I'm searching I want to see a part of the sentance where my keyword is. This, together, doesn't work:

Re: Dealing with spam in this forum

2014-07-02 Thread Jack Park
The behavior in my gmail-operated spam filter has been to toss out lots of emails from this list as false positives. So, I keep sending them back to my in box; pretty soon, gmail asks me to forward the good ones to them to study, so I do. The result of that is that they catch NONE of those spams.

Re: Index missing error Eelasticseach java

2014-07-02 Thread joergpra...@gmail.com
Use gateway type local instead of none, then your index persists across cluster restarts. Jörg On Wed, Jul 2, 2014 at 12:35 AM, venuchitta venu.chitta1...@gmail.com wrote: Hi, I am new to elasticsearch. I am using JAVA Api to establish connection with ES. public void

Re: Inter-document Queries

2014-07-02 Thread Theo Harris
Together with Zennet we brainstormed a solution building on top of Itamar's proposal. In one string field we append the current path to the all previous ones and since we are talking about funnels we need to store them only on the last event/document generated, e.g SessionEndedEvent. Then we

Re: Memory issues on ES client node

2014-07-02 Thread joergpra...@gmail.com
I'm not sure but it looks like a node tries to move some GB of document hits around. This might have triggered timeouts at other places (probably with node disconnects) and maybe the GB chunk is not yet GC collected, so you see this in your heap analyzer tool. It depends on the search results and

ElasticSearch 1.2.1 doesnt run on JDK 1.6?

2014-07-02 Thread David Marko
We have been using older Elasticsearch version here upgrading to 1.2.1 shows use 'unknown class version errors' on JDK 1.6 . Docs says that JDK 1.6 is support (and it was) . Is there some update here? What latest Elasticsearch version is available fo JDK 1.6? -- You received this message

Re: Elastic Search

2014-07-02 Thread Jamie A
Thanks Mark, Yeah sorry I realized after the post that I should have done pastebin but I couldnt edit my post. Yes I am using the logstash dashboard. I changed the number of pages to a max record size of 10,000 results. I also realized that my query in kibana was only selecting the last

Re: ElasticSearch 1.2.1 doesnt run on JDK 1.6?

2014-07-02 Thread joergpra...@gmail.com
Docs say at least Java 7 is required from ES 1.2.0 on http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/setup.html For Java 6, you have to use ES versions 1.2.0 Jörg On Wed, Jul 2, 2014 at 4:21 PM, David Marko dmarko...@gmail.com wrote: We have been using older

Re: cluster.routing.allocation.enable behavior (sticky shard allocation not working as expected)

2014-07-02 Thread Gregoire Seux
On Wed, Jul 02, 2014 at 05:43:26AM -0700, Andrew Davidoff wrote: How can I avoid this, and make shards on a restarted node come back on the same node? Hello, I have exactly the same issue. My objective is to make a rolling restart script which wait for green cluster state before restarting a

Re: does snapshot restore lead to a memory leak?

2014-07-02 Thread Igor Motov
So, your search-only machines are running out of memory, while your index-only machines are doing fine. Did I understand you correctly? Could you send me nodes stats (curl localhost:9200/_nodes/stats?pretty) from the machine that runs out of memory, please run stats a few times with 1 hour

geo_polygon filter with non-zero rule filling

2014-07-02 Thread Clément SALAÜN
Is it possible to apply a geo_polygon filter with a non-zero rule https://en.wikipedia.org/wiki/Nonzero-rule ? -- You received this message because you are subscribed to the Google Groups elasticsearch group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: Queries with fields {...} don't return field with dot in their name

2014-07-02 Thread vineeth mohan
Hello Ben , This is defenitely an ambiguity. By request.user , in the usual case ES expects a data like request : { user : vm } Try request\.user or something. Some mechanism to escape the dot. Thanks Vineeth On Wed, Jul 2, 2014 at 1:13 PM,

Re: get rid of _all to optimize storage and perfs (Re: Splunk vs. Elastic search performance?)

2014-07-02 Thread Steve Mayzak
All, This seems apropos to the current discussion and could help clear up some confusion on recommendations etc. We, Elasticsearch, are hosting a Webinar on ELK, given by the Logstash creator, Jordan Sissel. Its today in 40 minutes.

Re: does snapshot restore lead to a memory leak?

2014-07-02 Thread JoeZ99
Igor. Yes, that's right. My index only machines are just machines that are booted just for the indexing-snapshotting task. once there is no more tasks in queue, those machines are terminated. they only handle a few indices each time (their only purpose is to snapshot). I will do as you tell

Re: does snapshot restore lead to a memory leak?

2014-07-02 Thread joergpra...@gmail.com
This memory issue report might be related https://groups.google.com/forum/#!topic/elasticsearch/EH76o1CIeQQ Jörg On Wed, Jul 2, 2014 at 5:34 PM, JoeZ99 jzar...@gmail.com wrote: Igor. Yes, that's right. My index only machines are just machines that are booted just for the

Re: Min Hard Drive Requirements

2014-07-02 Thread Ophir Michaeli
When I tried to optimize the index had 51 shards. Regards, Ophir On Wednesday, July 2, 2014 11:27:50 AM UTC+3, Mark Walkom wrote: It will work until it's full, but then ES will fall over. Merging does require a certain amount of disk space, usually the same amount as the segment that is

Re: Custom Query variables ?

2014-07-02 Thread Ivan Brusic
If you enable explanations, you can see why Lucene the rational behind the scoring: http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-request-explain.html You are probably correct in that the array length is influencing the scoring. By default, Lucene will rate higher

Re: Custom Query variables ?

2014-07-02 Thread joergpra...@gmail.com
For geo search, it would be a good approach to respect the searchers preference by using a locale, so I suggest to add a locale fr filter to the search. Or an origin is added to the start query and all cities are ordered by geo distance in relation to the origin. For country search, the origin

Defing default mapping to enable _timestamp for all indices

2014-07-02 Thread kazoompa
Hi, I have the following ES setting defined in my YAML file: http.enabled: false discovery.zen.ping.multicast.enabled: false index: mappings: _default_: _timestamp: enabled: true store : true analysis: analyzer: mica_index_analyzer: type: custom

Re: Wrong Scoring using match query on Sense

2014-07-02 Thread Ivan Brusic
If you enable explanations, you would see that length normalization is scoring the document with the shorter field higher than the document with a term frequency of 2. The fieldNorm is incredibly lossy since it uses only 1 byte, so there must be some inconsistencies between the example and your

[ANN] Elasticsearch Servlet Transport plugin 2.2.0 released

2014-07-02 Thread Elasticsearch Team
Heya, We are pleased to announce the release of the Elasticsearch Servlet Transport plugin, version 2.2.0. The wares transport plugin allows to use the REST interface over servlets.. https://github.com/elasticsearch/elasticsearch-transport-wares/ Release Notes -

Re: Problem Configuring AWS S3 for Backups

2014-07-02 Thread sabdalla80
Unfortunately, I tried with and without the region setting, no difference. On Tuesday, July 1, 2014 7:43:21 PM UTC-4, Glen Smith wrote: I'm not sure it matters, but I noticed you aren't setting a region in either your config or when registering your repo. On Tuesday, July 1, 2014 7:08:28 PM

ES doesn't work with rexster gremlin extension

2014-07-02 Thread Aaliyah
the problem is like the topic. I'm not sure if I misunderstood something or I missed some configurations. The ES works fine in usual situations, but doesn't work with rexster gremlin extension. In java, I configured the graph as follows:

Re: Recommended Hardware Specs Sharding\Index Strategy

2014-07-02 Thread mrno42
When you say - do not let a shard grow bigger than your JVM heap (this is really a rough estimation) so segment merging will work flawlessly are we counting all the primary and replicas shards of all indexes on that node? So for example, if we had two indexes with on 10 node cluster. Each

Documents not being stored

2014-07-02 Thread Joseph Johnson
Hello, I am attempting to set up a large scale ELK setup at work. Here is a basic setup of what we have so far: ``` Nodes (approx 150) [logstash] | | +---+ | | Indexer1 Indexer2 [Redis] [Redis] [Logstash] [Logstash] | | | |

Re: [ANN] ElasticUI AngularJS Directives - Easily Build an Interface on top of Elasticsearch

2014-07-02 Thread Matthew Morrison
Great idea. I'll give it a try ASAP. On Wednesday, July 2, 2014 10:56:48 PM UTC+12, Yousef El-Dardiry wrote: Hi all, I just open sourced a set of AngularJS Directives for Elasticsearch. It enables developers to rapidly build a frontend (e.g.: faceted search engine) on top of

Re: Min Hard Drive Requirements

2014-07-02 Thread Mark Walkom
Ok, how many were you reducing to? How big is the index? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 3 July 2014 02:03, Ophir Michaeli ophirmicha...@gmail.com wrote: When I tried to optimize the index had 51

Re: Are there any facets that can be used to co-relate log events ?

2014-07-02 Thread Matthew Morrison
Hi Aditya, I'm looking to do something similar, did you have any success with this problem? Thanks Matt On Wednesday, January 22, 2014 11:53:36 PM UTC+13, Aditya Pavan Kumar Vegesna wrote: Hi I am looking for way to co-relate multiple log events and then calculate the time duration

Re: Kibana browser compatibility issues

2014-07-02 Thread Laura
We are using Logstash-ElasticSearch-Kibana and just want to be able to open the index file in Kibana. What is the necessary plugin that will allow us to do this in something other than firefox? On Monday, June 2, 2014 11:56:35 AM UTC-7, Binh Ly wrote: If you simply point the browser at the

Re: Kibana browser compatibility issues

2014-07-02 Thread Brian
Laura, The simplest way is to install Kibana as a site plug-in on the same node on which you run Elasticsearch. Not the best way from a performance and security perspective, but certainly the easiest way to start with an absolute minimum of extra levers to pull and knobs to turn, so to speak.

Visibility

2014-07-02 Thread smonasco
Hi, I'm trying to get a lot more visibility and metrics into what's going on under the hood. Occasionally, we see spikes in memory. I'd like to get heap mem used on a per shard basis. If I'm not mistaken, somewhere somehow, this Lucene index that is a shard is using memory in the heap, and

downside to using Bulk API for small/single-doc sets?

2014-07-02 Thread Nikita Tovstoles
Hi, I am using ES Java API to talk to an ES server. Sometimes I need to index a single doc, sometimes dozens or hundreds at a time. I'd prefer to keep my code simple (am a contrarian thinker) and wonder if I can get away with always using bulk API (ie BulkRequestBuilder). so that my interface

Re: Recommended Hardware Specs Sharding\Index Strategy

2014-07-02 Thread Mark Walkom
The heap should be as big as your largest shard, irrespective of what index it belongs to or if it's a replica. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 3 July 2014 05:50, mrno42 doug...@gmail.com wrote:

Re: Looking to build a logging solution with threshold alerting.

2014-07-02 Thread Mark Walkom
There was another thread on this very recently, and some people are using riemann for this. Take a look in the archives and you can probably find some useful info. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 2

Re: Visibility

2014-07-02 Thread Mark Walkom
Depends what you want to do really. There are plugins like ElasticHQ, Marvel, kopf and bigdesk that will give you some info. You can also hook collectd into the stack and take metrics, or use plugins from nagios etc. What monitoring platforms do you have in place now? Regards, Mark Walkom

Bulk API: different values for the same parameter at batch and operation level?

2014-07-02 Thread Yawei
Hi there, I noticed that in Java bulk API, some parameters can be set can on both per-batch-request level and per-operation level, e.g. the consistency level parameter: BulkRequestBuilder#setConsistencyLevel v.s IndexRequestBuilder. setConsistencyLevel. What if the parameter has different

Re: Splunk vs. Elastic search performance?

2014-07-02 Thread Steve Mayzak
In the latest version of Logstash, you can use the elasticsearch output and just set the protocol to http. The elasticsearch_http output will be removed eventually. On Monday, June 23, 2014 9:22:28 AM UTC-7, Ivan Brusic wrote: I agree. I thought elasticsearch_http was actually the

elasticsearch high cpu usage

2014-07-02 Thread vincent Park
Hi, I have 5 clustered nodes and each nodes have 1 replica. total document size is 216 M and 853,000 docs. I was suffering from very high CPU usage. every hours and every early morning about am 05:00 ~ am 09:00 you can see my cacti graph. there is elasticsearch only on this server I

elasticsearch high cpu usage

2014-07-02 Thread vincent Park
Hi, I have 5 clustered nodes and each nodes have 1 replica. total document size is 216 M and 853,000 docs. I was suffering from very high CPU usage. every hours and every early morning about am 05:00 ~ am 09:00 you can see my cacti graph. there is elasticsearch only on this server I

Re: Visibility

2014-07-02 Thread Shannon Monasco
I currently record basically everything in bigdesk, all the numerics from cluster health, cluster state, nodes info, node stats, index status and segments. I want memory allocated on a per shard level for Lucene level actions, query level actions (outside field and filter cache) and hooks into

elasticsearch high cpu usage

2014-07-02 Thread vincent Park
Hi, I have 5 clustered nodes and each nodes have 1 replica. total document size is 216 M and 853,000 docs. I was suffering from very high CPU usage. every hours and every early morning about am 05:00 ~ am 09:00 you can see my cacti graph. there is elasticsearch only on this server I

Re: Are there any facets that can be used to co-relate log events ?

2014-07-02 Thread Aditya Pavan Kumar Vegesna
Hey mathew Sorry no luck with that Cheers Aditya On Jul 3, 2014 2:22 AM, Matthew Morrison mmorri...@broadsoft.com wrote: Hi Aditya, I'm looking to do something similar, did you have any success with this problem? Thanks Matt On Wednesday, January 22, 2014 11:53:36 PM UTC+13, Aditya