Skip to content

Instantly share code, notes, and snippets.

View inqueue's full-sized avatar

Jason Bryan inqueue

View GitHub Profile
@inqueue
inqueue / tsdb-benchmarks.md
Last active June 23, 2023 15:30
tsdb investigation
git log 73cd3d8163a38532663ff9ba8643705f387ab78b...b3d7ed530aaf83e5a6decfdf391490fc74158d8d --oneline
  • b3d7ed530aa Switch API test @AwaitsFix to broader issue
  • f032faef25b Adds the _cluster object to the AsyncStatusResponse XContent when Clusters has a non-zero count total (#96535)
  • ec6b7900a91 Migrate some uses of Version.luceneVersion() to IndexVersion (#96300)
  • 8b628517a9c Load synonyms from system index for analyzers (#96674)
  • 946ffa3aac1 Do not double close in AbstractHttpServerTransportTests.testForceClosesOpenChannels (#96635)
  • 235133d7e1f Prune changelogs after 8.8.1 release
298:
2023-04-06 16:36:07
Full thread dump OpenJDK 64-Bit Server VM (19.0.2+7-44 mixed mode, sharing):
Threads class SMR info:
_java_thread_list=0x0000fffcc00623f0, length=234, elements={
0x0000ffff88562d40, 0x0000ffff885642b0, 0x0000ffff88565910, 0x0000ffff88566db0,
0x0000ffff88568240, 0x0000ffff88569c80, 0x0000ffff8856b230, 0x0000ffff8856c720,
0x0000ffff8857b130, 0x0000ffff889dcf50, 0x0000fffea400bd70, 0x0000ffff88d161f0,
0x0000ffff88eb0f40, 0x0000ffff88eb2590, 0x0000ffff88ebeea0, 0x0000ffff88ec01e0,

Manual index rollover with ILM

  1. Stop ILM

    POST /_ilm/stop
    
  2. Call the Rollover API on the write alias

@inqueue
inqueue / elasticsearch.yml
Created March 26, 2019 19:34
X-Pack transport TLS sample configuration
xpack.security:
enabled: true
http:
ssl:
enabled: false
transport:
ssl:
enabled: true
key: /etc/elasticsearch/${HOSTNAME}/${HOSTNAME}.key
certificate: /etc/elasticsearch/${HOSTNAME}/${HOSTNAME}.crt
@inqueue
inqueue / fix_stuck_kibana.md
Last active November 15, 2018 20:48
Steps to recover Kibana with failed 6.5.0 upgrade

Fixes this error when starting Kibana 6.5.0 when Security is enabled and using the default kibana user.

log   [17:58:17.221] [error][status][plugin:spaces@6.5.0] Status changed from yellow to red - action [indices:data/read/get] is unauthorized for user [kibana]: [security_exception] action [indices:data/read/get] is unauthorized for user [kibana]
 error  [17:58:17.227] [fatal][root] [security_exception] action [indices:data/read/get] is unauthorized for user [kibana] :: {"path":"/_tasks/09ge3Z3xQliEfF18KTiZ5Q%3A305","query":{},"statusCode":403,"response":"{\"error\":{\"root_cause\":[{\"type\":\"security_exception\",\"reason\":\"action [indices:data/read/get] is unauthorized for user [kibana]\"}],\"type\":\"security_exception\",\"reason\":\"action [indices:data/read/get] is unauthorized for user [kibana]\"},\"status\":403}"}
    at respond (/Users/jbryan/stack/6.4/kibana-6.5.0-darwin-x86_64-kibana_issue/node_modules/elasticsearch/src/lib/transport.js:308:15)
    at checkRespForFailure (/Users/jbryan/sta
@inqueue
inqueue / count_buckets.http
Created May 8, 2018 15:42
Counting histogram buckets
POST metricbeat/_search
{
"size": 0,
"aggs": {
"date_histo": {
"date_histogram": {
"field": "@timestamp",
"interval": "day"
}
},

PUT _xpack/watcher/watch/purge_indices

{
  "trigger": {
    "schedule": {
      "interval": "24h"
    }
  },
  "input": {
    "search": {
@inqueue
inqueue / elastic-pi.md
Last active January 15, 2018 02:17 — forked from andig/elastic-pi.md

Installing elastic beats on Raspberry Pi

At time of writing elastic.co does not provide ARM builds for raspberry. This tutorial describes how to compile e.g. filebeat and run in on Raspberry Pi3.

Prerequisites

You'll need Go (>1.8) and Pyhton with virtualenv.

Go 1.8

PUT names
{
"settings": {
"analysis": {
"analyzer": {
"my_analyzer": {
"tokenizer": "my_tokenizer"
}
},
"tokenizer": {