Re: Help with architecture

2014-10-15 Thread Mark Walkom
There's heaps of good docs; http://logstash.net/docs/1.4.2/ http://www.logstashbook.com/ If you want separate data then keep separate stacks! You can use the one ES cluster if you want and then just use different indexes. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma

Re: Optimal configuration for 2 high powered nodes

2014-10-15 Thread Mark Walkom
I'd go with option 3 and use puppet to manage it. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 15 October 2014 08:10, Rémi Nonnon remi.non...@gmail.com wrote: Hi, I think the 2nd proposition could be the worst

Re: running multiple cluster on 1 server

2014-10-14 Thread Mark Walkom
Yes it will work, and probably the same way as pre 1.X. The elasticsearch puppet module could handle this for you. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 14 October 2014 20:21, haries fajar nugroho harie

Re: best practice for thread pool queue size

2014-10-13 Thread Mark Walkom
Increasing queues isn't going to help if there are underlying problems stopping the processing. Based on those errors it looks like you may have network issues, but they are from July? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: Easiest way to switch ES between multiple example directories?

2014-10-12 Thread Mark Walkom
It's all absolute paths. You could just run multiple, contained instances rather than multiple data dirs. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 13 October 2014 03:03, Alexandre Rafalovitch arafa

Re: Easiest way to switch ES between multiple example directories?

2014-10-12 Thread Mark Walkom
You can use the same binaries, but if you setup multiple configs pointing to different data directories then you can leverage -Des.config pointing to each config and then run multiple instances. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: Bulk insert vs Single insert

2014-10-11 Thread Mark Walkom
From what I understand (which may not be 100% right), most of the overhead is with generating and dealing with the HTTP request as it's a heavy operation. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 11 October

Re: Performance with an arbitrary number of indicies

2014-10-11 Thread Mark Walkom
Why not use aliases? This way you can move larger customers to their own index if need be. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 11 October 2014 01:54, jnortey jeremy.nor...@gmail.com wrote: Lets say

Re: 1 cluster, multiple replicas with different synch settings

2014-10-11 Thread Mark Walkom
A and B should be ok, not sure on C as I believe that a/sync is on an index level and would apply to any and all replicas. http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/docs-index_.html#index-replication Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email

Re: Optimal usage of big server (use VMs or not ...)

2014-10-11 Thread Mark Walkom
We use VMs as we knew the tech, we did consider containers (eg docker) but they were still new to us and considered a risk. Running multiple instance on a single node can work, you just need to be able to manage it. The Elasticsearch puppet module lets you do this though. Regards, Mark Walkom

Re: environment variable values .

2014-10-11 Thread Mark Walkom
Only set ES_HAP_SIZE, there is no point setting all 3 separately. Best practise is to use 50% of system RAM, in your case that'd be 15GB. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 11 October 2014 20:20, Deepak

Re: How many indexes is too many indexes?

2014-10-09 Thread Mark Walkom
Did you get better writes? What sort of storage are you on, did you measure before and after, are you reaching I/O limits? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 9 October 2014 17:33, Kang-min Liu gu

Re: ES eating all memory despite JVM startup configuration

2014-10-09 Thread Mark Walkom
How much data is in your cluster? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 9 October 2014 18:25, David Pilato da...@pilato.fr wrote: Any chance you could try elasticsearch 1.3.4? David Le 9 oct. 2014 à

Re: How many indexes is too many indexes?

2014-10-08 Thread Mark Walkom
This entirely depends on your data structure, volume and cluster sizing. Hundreds works, thousands should be ok if you have a lot of nodes, tens of thousands is even more nodes. Aliases will also affect your requirements. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma

Re: Index recovery failure on node restart since v1.3.x

2014-10-07 Thread Mark Walkom
Why are you restarting the node every week? That sounds like a problem you should solve to stop this one happening. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 8 October 2014 07:56, Ankush Jhalani ankush.jhal

Re: Confused about saving (backing up) configuration information

2014-10-07 Thread Mark Walkom
/_cluster/settings. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 8 October 2014 04:27, Larry killerbea...@gmail.com wrote: I've been playing with both Elasticsearch and Solr. I have made much more progress

Re: How to make ElasticHQ to auto-connect to my cluster?

2014-10-07 Thread Mark Walkom
I vaguely recall a way of doing this by adding the URL of the cluster to the URL you enter in the browser, but I can't find a way in the docs. Have a search through the archives here, I am pretty sure the author (Roy) posted it. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor

Re: Repairing effects of careless Elasticsearch administration

2014-10-07 Thread Mark Walkom
can't open it then install something like ElasticHQ or kopf. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 8 October 2014 02:02, Pitaga ach...@blarg.net wrote: I'm running Elasticsearch 1.0 on an Ubuntu 13.10

Re: snapshot/restore

2014-10-07 Thread Mark Walkom
It's a 0.90 release. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 8 October 2014 09:02, Tim Swetonic sweto...@gmail.com wrote: Thanks. Is there a disconnect in the version numbers here? Is 0.90.10 a 1.0 release

Re: Need Help

2014-10-04 Thread Mark Walkom
You should ask this over on the Logstash list - https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 4 October 2014 22:24, Madhu Neal madhu.n...@gmail.com

Re: Mastering Querying

2014-10-04 Thread Mark Walkom
If you haven't already, check out the docs - http://www.elasticsearch.org/guide/ Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 5 October 2014 14:53, naveen gayar navind...@gmail.com wrote: Hi I wish to know

Re: Disk-based shard allocation per node settings

2014-10-02 Thread Mark Walkom
Nope, it's for the node as a whole. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 3 October 2014 07:18, Andrew Mehler meh...@gmail.com wrote: If I hava multiple data dirs on a node, can I apply these settings

Re: shard splitting and dynamic cluster expansion?

2014-10-02 Thread Mark Walkom
You can easily add more nodes. You cannot however add more shards to an index, which is probably what you are getting at. The simple solution to that is to over allocate your initial shard count to cater for more servers. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma

Re: Checking for tampering of indices

2014-10-01 Thread Mark Walkom
You might be able to achieve this with versioning - http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/docs-index_.html#index-versioning Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 2 October

Re: Alternative BI Reporting visualization tool for Kibana

2014-10-01 Thread Mark Walkom
Kibana does everything via the Elasticsearch APIs. You might want to have a poke around the docs - http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/index.html Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: Elasticsearch cluster setup

2014-09-30 Thread Mark Walkom
, then you may have to pay someone ;) Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 30 September 2014 05:00, shakul shakul.hameed...@gmail.com wrote: Hi Mark, Thanks for the response. I'm expecting a load of 100 M

Re: unable to make snapshots to NFS filesystem

2014-09-29 Thread Mark Walkom
Can you do an ls -ld /srv/backup and provide the output? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 29 September 2014 18:45, Alex Harvey alexharv...@gmail.com wrote: Hi all, I have been struggling to put

Re: Marvel dashboard not showing Nodes and other info

2014-09-29 Thread Mark Walkom
Are you running the same version across all the nodes? Is there anything in the logs on your master? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 26 September 2014 22:49, satishmallik satishmal...@gmail.com wrote

Re: Logtsash output to ElasticSearch Cluster

2014-09-27 Thread Mark Walkom
Is the cluster external to the LS instance? Check the logs of your ES master server, it should show the logstash node join, if you aren't seeing that then enable verbose mode in LS and you should see the issue. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma

Re: Replace failing disks on a single node

2014-09-27 Thread Mark Walkom
, if you're wanting this functionality then it'd be worth creating a github issue with the request. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 28 September 2014 01:12, vic hargrave vichargr...@gmail.com wrote

Re: move index metadata

2014-09-25 Thread Mark Walkom
You want to move the mapping? This might help - http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/indices-put-mapping.html Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 25 September 2014 17:52

Re: Elasticsearch as Logwatch

2014-09-25 Thread Mark Walkom
categorisation. If you want to know more about the Logstash side of things then it's a good idea to sign up to that mailing list as well - https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com

Re: Elasticsearch as Logwatch

2014-09-25 Thread Mark Walkom
. As for your pattern problem, if the rsyslog output contains the daemon name that generated the log entry, as it should, then it is simple to categorise the entry. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 25

Re: Which RAID config for ES?

2014-09-25 Thread Mark Walkom
Raid 0 , don't use 5 as the performance is sucky and ES is i/o intensive. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 26 September 2014 06:01, joergpra...@gmail.com joergpra...@gmail.com wrote: If you have

Re: Nodes randomly not getting latest cluster state

2014-09-25 Thread Mark Walkom
Checked your logs? What ES and java version, how many nodes (data and master) and how much data do you store (doc, size and index counts). Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 25 September 2014 00:09

Re: Search performance - Scaling options Horizontally vs Vertically

2014-09-25 Thread Mark Walkom
There are a few blog posts, but nothing consolidated. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 25 September 2014 07:58, pavan.bkv pavan@gmail.com wrote: Thanks Mark. Appreciate the response

Re: Find the number of Shards and Replicas on a Rest call for each node???

2014-09-25 Thread Mark Walkom
You're first bet is always the docs - http://www.elasticsearch.org/guide/ You want with either the _cat/indices or the indices API. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 26 September 2014 02:11, gthoman

Re: Snapshot a single node

2014-09-25 Thread Mark Walkom
Not unless it's a single node cluster :) Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 26 September 2014 10:59, vic hargrave vichargr...@gmail.com wrote: I'm new to the Elasticseach snapshot API

Re: Kibana Default Time Range

2014-09-24 Thread Mark Walkom
Now is an entirely relative time period and you cannot fix it to a specific point. I'm not sure you can achieve a fixed period in kibana though. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 25 September 2014 04

Re: Search performance - Scaling options Horizontally vs Vertically

2014-09-24 Thread Mark Walkom
ES does scale better horizontally. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 24 September 2014 08:24, pavan.bkv pavan@gmail.com wrote: Can anyone answer this? -- View this message in context: http

Re: elasticsearch blocked futex

2014-09-24 Thread Mark Walkom
What state is your cluster in? Can you get _cat/health to return? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 25 September 2014 08:16, Chris Denneen cdenn...@gmail.com wrote: If anyone can help me understand

Re: Why am I getting GC Warnings?

2014-09-22 Thread Mark Walkom
I don't think it's anything you should be overly worried about as GC is normal. I am not sure why this is considered a warn level though. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 23 September 2014 00:27

Re: how big the directory for es.path.logs and es.path.work has to be?

2014-09-22 Thread Mark Walkom
The work directory is deprecated as far I know, so you shouldn't need to worry about it. Logging will depend on what you do and how you manage retention, eg I just checked one of our nodes and it has 400MB of logs for this month so far. Regards, Mark Walkom Infrastructure Engineer Campaign

Re: Announce Mailing List

2014-09-21 Thread Mark Walkom
An announce list would be awesome :) Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 22 September 2014 04:06, Igal @ getRailo.org i...@getrailo.org wrote: I understand, but thanks to your project's success

Re: Failed to obtain node lock

2014-09-21 Thread Mark Walkom
What are the ownership and permissions on the directory? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 21 September 2014 19:42, vyeluri vyelu...@gmail.com wrote: Hi, I have a similar problem. Ive defined

Re: how to join

2014-09-20 Thread Mark Walkom
If you can send an email like this to the list then you're already subscribed! Otherwise check out https://support.google.com/groups/answer/1067205?hl=en Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 21 September

Re: Can ES scale to 30TB / day, and still be usable?

2014-09-20 Thread Mark Walkom
, and then move the indexes onto slower SAS/SATA drives after that time. A lot of what you may need depends on our retention period and how you expect to have the data accessed. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 20

Re: Disable writes over http

2014-09-19 Thread Mark Walkom
You can disable http entirely, that's it http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-http.html#_disable_http Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 20 September 2014 01:41

Re: Facing error and warning messages with ELK stack

2014-09-19 Thread Mark Walkom
It looks like networking issues, lots of connection reset/closed/timeout. It might help if you can out your configs into a pastebin too. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 20 September 2014 04:33

Re: Configuring kibana/elasticsearc for SSL

2014-09-19 Thread Mark Walkom
There is a few good results here https://www.google.com.au/?gws_rd=ssl#q=kibana+https+apache Check out http://blog.stevenmeyer.co.uk/2014/02/securing-kibana-and-elasticsearch-with-https-ssl.html for example Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma

Re: Indexing is being throttled

2014-09-18 Thread Mark Walkom
Also given you're over 32GB heap your java pointers aren't going to be compressed, which means GC will suffer. You haven't mentioned what ES and java versions you are using, which would be useful. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: Indexing is being throttled

2014-09-18 Thread Mark Walkom
Does your server have hardware RAID capabilities? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 18 September 2014 19:30, bob.web...@gmail.com wrote: Good point on heap, so I will bring that back down to 30GB

Re: Indexing is being throttled

2014-09-18 Thread Mark Walkom
You'd get a much greater benefit from RAID than you will by using all disks as individuals. You can however use multiple mountpoints to store ES data it's just an array in path.data. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: Inter connection between clusters

2014-09-18 Thread Mark Walkom
Check out Tribe Nodes - http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-tribe.html#modules-tribe Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 19 September 2014 00:43, Sree srssreej

Re: Using ES as a primary datastore.

2014-09-17 Thread Mark Walkom
That's a lot of data, do you have a big budget, automation, monitoring? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 17 September 2014 20:41, P Suman papanaboina.su...@gmail.com wrote: Hello, We are planning

Re: ReceiveTimeoutTransportException in logs

2014-09-16 Thread Mark Walkom
Can you manually test all of that using telnet? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 16 September 2014 20:09, Abhishek Aggarwal boyobo...@gmail.com wrote: Thanks for the reply. I am facing this error

Re: Strange issue with 2 seperate ELK servers

2014-09-16 Thread Mark Walkom
though, if you're new then install plugins like ElasticHQ and kopf, they will give you some good visual insight into Elasticsearch and lets you manage it via the GUI. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 16

Re: Just cannot seem to make progress with rsyslog and Logstash

2014-09-16 Thread Mark Walkom
You should ask this over on the logstash list - https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users :) Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 17 September 2014 06:04, Marty Hillman antimi

Re: How to connect elasticsearch instance of docker VMs from two different machine?

2014-09-15 Thread Mark Walkom
Are they on the same network? Can you telnet to each of the hosts? It looks like the two nodes don't have access to each other, hence the no route to host error. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 15

Re: How to connect elasticsearch instance of docker VMs from two different machine?

2014-09-15 Thread Mark Walkom
Your problem is a docker networking issue, not an ES one. I'm not familiar with docker so can't help much more sorry. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 15 September 2014 21:34, Anand kumar anandv1

Re: Logstash Parsing Error

2014-09-12 Thread Mark Walkom
You should really ask that on the logstash group - https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 12 September 2014 18:27, Atul K atulnkhair

Re: powerful cluster is not able to handle 1.5Tb of data, how to optimize?

2014-09-12 Thread Mark Walkom
That's a lot of data for 3 nodes! You really need to adjust your infrastructure; add more nodes, more ram, or alternatively remove some old indexes (delete or close). What ES and java version are you running? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma

Re: powerful cluster is not able to handle 1.5Tb of data, how to optimize?

2014-09-12 Thread Mark Walkom
across, as that is where ES excels and also how many other big data platforms operate. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 12 September 2014 19:01, Pavel P pa...@kredito.de wrote: Java version is 1.7.0_55

Re: powerful cluster is not able to handle 1.5Tb of data, how to optimize?

2014-09-12 Thread Mark Walkom
for one primary shard per node but you can over allocate if you expect to grow - ie create 6 shards if you expect to grow to 6 servers. This applies on larger clusters as well, to a point. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: Seeking opinions on cluster platforms

2014-09-12 Thread Mark Walkom
into it and you would have an awesome elastic compute platform. Or just use something like OpenStack, though it might be a bit heavy. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 13 September 2014 03:16, Jack Park jackp

Re: Cluster allocation awareness - opposite

2014-09-12 Thread Mark Walkom
? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 12 September 2014 22:40, spezam spe...@gmail.com wrote: Hi All, we currently have an Elasticsearch (1.1.1) cluster distributed among DCs * 3 Data nodes in 3 DC * 1

Re: Ramifications of G1GC in ES1.3 with JDK 1.8

2014-09-11 Thread Mark Walkom
We also use it in dev for months across various ES and Java 8 releases, I have been considering rolling it out to a smaller prod cluster as well as we've had no problems at all. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: Move Elasticsearch index's from /auto/abc to /auto/def

2014-09-11 Thread Mark Walkom
You should be able to just copy them across and then start ES with your new path value, yes. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 12 September 2014 03:37, shriyansh jain shriyanshaj...@gmail.com wrote

Re: Which UI tool is good for adjusting templates for the future indices?

2014-09-11 Thread Mark Walkom
in that regards. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 12 September 2014 05:03, Konstantin Erman kon...@gmail.com wrote: We have different indexes for different log types and one index of each type is generated

Re: Index/Shard Design on ES cluster

2014-09-10 Thread Mark Walkom
Your assumption is correct, one node per shard. You can over allocate if you expect or want to add more nodes in the future. -- You received this message because you are subscribed to the Google Groups elasticsearch group. To unsubscribe from this group and stop receiving emails from it, send

Re: Kibana ElasticSearch issue Error Could not contact Elasticsearch at http:/address:9200. Please ensure that Elasticsearch is reachable from your system.

2014-09-10 Thread Mark Walkom
Because kibana connects from the users desktop to ES. You can reverse proxy this very easily, there are a few example configs in the KB code to help ad it's worth doing. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com

Re: (WAN) Distributed Cluster: Confine Primary Shards and/or Master to Node(s) Nearest Source Data?

2014-09-08 Thread Mark Walkom
If you're running a cluster across those links then you need to expect problems as ES is latency sensitive. You may be better off looking into tribe nodes - http://www.elasticsearch.org/guide/en/elasticsearch/reference/master/modules-tribe.html Regards, Mark Walkom Infrastructure Engineer

Re: Cleaning up red Shards

2014-09-08 Thread Mark Walkom
Check out the cat APIs for, there are end points for indexes and shards that will give you this info. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 8 September 2014 23:34, Johnathan Phan jp...@berryjar.com wrote

Re: Elasticsearch High CPU high load when searching

2014-09-04 Thread Mark Walkom
Your second two links do not work. Can you add another node, or close some old indexes? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 4 September 2014 20:18, 王星龙 xinglong.w...@upai.com wrote: Hi,everyone I'm

Re: shard recovery

2014-09-04 Thread Mark Walkom
Easiest way is to drop the replicas and then re-add them. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 5 September 2014 08:30, daa qqu daa...@gmail.com wrote: Hello everyone, I am new to ES and need some help

Re: moustache search templates are too limited

2014-09-03 Thread Mark Walkom
Ok I'll bite, what do you mean by moustache search? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 3 September 2014 07:33, Damian Wood damian.woood9...@gmail.com wrote: I want to use search templates to generate

Re: Copy Indices to new Server

2014-09-03 Thread Mark Walkom
Did you change path.data as well in elasticsearch.yml? If not, what are the two values you have on each node. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 3 September 2014 20:46, Andrew Lakes alakes...@gmail.com

Re: Shards stuck on initialising

2014-09-03 Thread Mark Walkom
If it's a replica, which it appears to be, then just drop the replicas on the problem index to 0 and then readd them. This is a quick and dirty fix, I'm not sure if there is a way to recover the underlying shard as it. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma

Re: Shards stuck on initialising

2014-09-03 Thread Mark Walkom
Yes you can use wildcards. The easiest way to tell would be to use the cat APIs, eg _cat/shards?v Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 4 September 2014 08:58, eistconn david.mant...@gmail.com wrote: I

Re: Shards stuck on initialising

2014-09-03 Thread Mark Walkom
Oh right, yeah that'd fix it too :p Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 4 September 2014 09:22, eistconn david.mant...@gmail.com wrote: Just did this: curl -XPUT 'localhost:9200/_settings' -d

Re: Corrupted Shard on Recovery

2014-09-02 Thread Mark Walkom
Have you checked your hardware status as the error mentioned? I'd also do a FS check to be safe. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 3 September 2014 14:58, David Kleiner david.klei...@gmail.com wrote

Re: Replica assignement on the same host

2014-08-29 Thread Mark Walkom
That's the best method as per http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-cluster.html#allocation-awareness Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 29 August 2014 20:45

Re: 4 primary shards instead of 3

2014-08-28 Thread Mark Walkom
Are you using marvel at all? It uses an index with a single shard by default. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 29 August 2014 02:04, Eddy Meds zqckf...@gmail.com wrote: Hello I created an index

Re: Explicitly Copying Replica Shards That Fail to Start

2014-08-28 Thread Mark Walkom
Yep, the easiest way is to drop the replica and then add it back and see how you go. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 29 August 2014 08:40, David Kleiner david.klei...@gmail.com wrote: Greetings

Re: stuck thread problem?

2014-08-27 Thread Mark Walkom
It'd be worth raising this as an issue on Github if you are concerned, at least then the ES devs will see it :) Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 27 August 2014 18:34, Martin Forssen m

Re: Single node job

2014-08-27 Thread Mark Walkom
It depends on what you are exactly doing but there are document TTLs that might suit, but they are resource intensive. A plugin could work as you could leverage the quartz scheduler libraries to handle running it. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma

Re: marvel or elasticsearch-head with embedded elasticsearch

2014-08-27 Thread Mark Walkom
You cannot launch/access a plugin on a different port, it has to be on the same port that ES is running on. -- You received this message because you are subscribed to the Google Groups elasticsearch group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: How do I start elasticsearch as a service?

2014-08-26 Thread Mark Walkom
Check the logs under /var/log/elasticsearch, they should have something. Also please be aware that 1.2.0 has a critical bug and you should be using 1.2.1 instead. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 27

Re: Elastic HQ not getting back vendor info from Elasticsearch.

2014-08-26 Thread Mark Walkom
ElasticHQ is a community plugin, the ES devs can't help here. I have raised issues against ElasticHQ in the past and Roy has fixed them pretty quickly :) Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 27 August

Re: alerting in Marvel

2014-08-26 Thread Mark Walkom
Nope. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 27 August 2014 09:14, kti...@hotmail.com wrote: Hi, I started using Marvel for my cluster monitoring. Does Marvel have a way to set notification such as send

Re: gateway.recover_after_nodes minimum_master_nodes in a distributed environment?

2014-08-26 Thread Mark Walkom
/elasticsearch/reference/current/modules-gateway.html#recover-after Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 26 August 2014 23:37, Chris Neal chris.n...@derbysoft.net wrote: Hello all, Question about

Re: Data per node in ES

2014-08-26 Thread Mark Walkom
can handle, then extrapolate. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 27 August 2014 06:24, Gaurav Tiwari gtins...@gmail.com wrote: Hi , We are analyzing ES for storing our log data (~ 400 GB/Day

Re: alerting in Marvel

2014-08-26 Thread Mark Walkom
Also, you should really be monitoring your systems and core measurements (disk, CPU etc) with something specific for the job. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 27 August 2014 09:16, Mark Walkom ma

Re: stuck thread problem?

2014-08-25 Thread Mark Walkom
(You should really set Xms and Xmx to be the same.) But it's not faulty, it's probably just GC which should be visible in the logs. How much data do you have in your cluster? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: Thousand of shards

2014-08-25 Thread Mark Walkom
That sort of shard count is ok on your cluster as you have 17 nodes :) Can you give us more details on what sort of hardware you run on, your java, ES and OS versions and releases? Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: When will LogStash exceed the queue capacity and drop messages?

2014-08-25 Thread Mark Walkom
You should really ask this on the Logstash list - https://groups.google.com/forum/#!forum/logstash-users Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 26 August 2014 00:49, Shih-Peng Lin shihpeng@gmail.com

Re: indices.memory.index_buffer_size

2014-08-24 Thread Mark Walkom
http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-indices.html states It is a global setting that bubbles down to all the different shards allocated on a specific node. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web

Re: Multiple Indices vs Multiple Shards

2014-08-21 Thread Mark Walkom
Very little as you have found. But you might find aggregating will take a fair bit of resources. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com On 21 August 2014 18:34, 'Sandeep Ramesh Khanzode' via elasticsearch

Optimizing Elasticsearch Searches - from found.no

2014-08-21 Thread Mark Walkom
important optimizations that can buy you a lot of performance. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com -- You received this message because you are subscribed to the Google Groups elasticsearch group

Re: ELK stack Implementation on Windows using nxlog - Help required

2014-08-20 Thread Mark Walkom
to Elasticsearch as you are expecting. However you can check out a few visualisation plugins like ElasticHQ or kopf which will show you if anything has been indexed into ES. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: ma...@campaignmonitor.com web: www.campaignmonitor.com

<    3   4   5   6   7   8   9   10   11   12   >