# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=247 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 248 --- ## [Canvas Expression failures](https://discuss.elastic.co/t/canvas-expression-failures/358489)
**Author:** [@Ercan\_OLMEZ](https://discuss.elastic.co/u/Ercan_OLMEZ)\ **Replies:** 2\ **Last updated:** [May 7, 2024, 2:09am UTC](https://discuss.elastic.co/t/canvas-expression-failures/358489 "2024-05-07T02:09:02Z")
Hi, While using kibana canvas we are facing this error "Expression failed with the message: \[essql\] \> Unexpected error from Elasticsearch: search\_phase\_execution\_exception - Partial shards failure" i dont know why… --- ## [Kstem not giving the expected results](https://discuss.elastic.co/t/kstem-not-giving-the-expected-results/358885)
**Author:** [@Mohan\_T](https://discuss.elastic.co/u/Mohan_T)\ **Replies:** 0\ **Last updated:** [May 7, 2024, 1:46am UTC](https://discuss.elastic.co/t/kstem-not-giving-the-expected-results/358885 "2024-05-07T01:46:45Z")
am using kstem due to this am not getting the proper results. Ex: In \_analyze Query: { "tokenizer": "standard", "filter": \[ "kstem" \], "text": "marbles" } in response, I am getting below { … --- ## [Elasticsearch 8.12 Error when tryng to generate a report using curl and an URL given by Discovery tool](https://discuss.elastic.co/t/elasticsearch-8-12-error-when-tryng-to-generate-a-report-using-curl-and-an-url-given-by-discovery-tool/358734)
**Author:** [@RobertC1](https://discuss.elastic.co/u/RobertC1)\ **Replies:** 13\ **Last updated:** [May 7, 2024, 12:42am UTC](https://discuss.elastic.co/t/elasticsearch-8-12-error-when-tryng-to-generate-a-report-using-curl-and-an-url-given-by-discovery-tool/358734 "2024-05-07T00:42:32Z")
Hi guys. I am tryng to generate a csv report using the following command curl -uelastic:xxxxxx -X POST \\ \> -H "kbn-xsrf: true" \\ "from": "now-12h" }, \> -H "Content-Type: application/json" \\ --cacert… --- ## [On-prem eck cluster disconnects after a couple hours and can't be reconnected](https://discuss.elastic.co/t/on-prem-eck-cluster-disconnects-after-a-couple-hours-and-cant-be-reconnected/358878)
**Author:** [@Greyson](https://discuss.elastic.co/u/Greyson)\ **Replies:** 0\ **Last updated:** [May 6, 2024, 11:11pm UTC](https://discuss.elastic.co/t/on-prem-eck-cluster-disconnects-after-a-couple-hours-and-cant-be-reconnected/358878 "2024-05-06T23:11:48Z")
My company uses elastic and I wanted to get more familiar with it so I spun up a k3's cluster in my homelab and have been trying to get it working for the last couple weeks but it keeps having issues. My setup is as fol… --- ## [How to set a Managed pipeline in a new Crawler index](https://discuss.elastic.co/t/how-to-set-a-managed-pipeline-in-a-new-crawler-index/358876)
**Author:** [@freddyrb](https://discuss.elastic.co/u/freddyrb)\ **Replies:** 0\ **Last updated:** [May 6, 2024, 10:29pm UTC](https://discuss.elastic.co/t/how-to-set-a-managed-pipeline-in-a-new-crawler-index/358876 "2024-05-06T22:29:10Z")
Hey community! Maybe it's a silly question, but I need to understand (and solve) why a newly created index, has no "Managed" default pipeline as there is in another existing index. How to make the "search-testindex1" pip… --- ## [History of updates modeling](https://discuss.elastic.co/t/history-of-updates-modeling/358865)
**Author:** [@hafssa\_askaoui](https://discuss.elastic.co/u/hafssa_askaoui)\ **Replies:** 1\ **Last updated:** [May 6, 2024, 7:15pm UTC](https://discuss.elastic.co/t/history-of-updates-modeling/358865 "2024-05-06T19:15:58Z")
I'm newbie to Elasticsearch and I'm wondering about the best way to model this requirement in Elasticsearch: we need to keep the modification history of an object like this: example{ id; name; type; } So far, we've… --- ## [Question in Node Configuration](https://discuss.elastic.co/t/question-in-node-configuration/358779)
**Author:** [@hossa](https://discuss.elastic.co/u/hossa)\ **Replies:** 2\ **Last updated:** [May 6, 2024, 4:43pm UTC](https://discuss.elastic.co/t/question-in-node-configuration/358779 "2024-05-06T16:43:57Z")
Hello I have a cluster consisting of 3 nodes, one of which I want to be for reading and the other for writing How can I do that? --- ## [Plugin installation](https://discuss.elastic.co/t/plugin-installation/358679)
**Author:** [@Honestabe](https://discuss.elastic.co/u/Honestabe)\ **Replies:** 4\ **Last updated:** [May 6, 2024, 3:47pm UTC](https://discuss.elastic.co/t/plugin-installation/358679 "2024-05-06T15:47:02Z")
Is there a way to specify the directory to install the plugin to? Our home directory of logstash is not in /usr/share/logstash or the /etc/logstash. I have ran the install command but i am not sure if it was installed i… --- ## [Data insert/update in new index fields](https://discuss.elastic.co/t/data-insert-update-in-new-index-fields/358850)
**Author:** [@akashvermag](https://discuss.elastic.co/u/akashvermag)\ **Replies:** 1\ **Last updated:** [May 6, 2024, 3:28pm UTC](https://discuss.elastic.co/t/data-insert-update-in-new-index-fields/358850 "2024-05-06T15:28:36Z")
Hi, i have my Elasticsearch 7.17 installed, where i have multiple indexes with data in them. now, i want to update those indexes with new mappings & settings, and i also want that new field is present when i run searc… --- ## [Anomaly detection](https://discuss.elastic.co/t/anomaly-detection/358048)
**Author:** [@zi\_ninja](https://discuss.elastic.co/u/zi_ninja)\ **Replies:** 1\ **Last updated:** [May 6, 2024, 3:22pm UTC](https://discuss.elastic.co/t/anomaly-detection/358048 "2024-05-06T15:22:59Z")
In machine learning anomaly detection, can I set my own rules for detection? Example: I want to detect a computer. Normally this computer accesses many different IP addresses, but suddenly one day this computer accesses… --- ## [Adding Cold Nodes to Existing Cluster](https://discuss.elastic.co/t/adding-cold-nodes-to-existing-cluster/358855)
**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\ **Replies:** 2\ **Last updated:** [May 6, 2024, 3:20pm UTC](https://discuss.elastic.co/t/adding-cold-nodes-to-existing-cluster/358855 "2024-05-06T15:20:48Z")
Hello, I already have a cluster containing hot and master nodes, and I want to add 4 Cold nodes. Do I need a license for this, and what are the steps to follow? Thank you --- ## [Upper and lower bounds](https://discuss.elastic.co/t/upper-and-lower-bounds/357866)
**Author:** [@zi\_ninja](https://discuss.elastic.co/u/zi_ninja)\ **Replies:** 3\ **Last updated:** [May 6, 2024, 3:16pm UTC](https://discuss.elastic.co/t/upper-and-lower-bounds/357866 "2024-05-06T15:16:39Z")
I created a job in machine learning anomaly detection elastic, I used the sum function, I looked at the results in the single metric viewer and I saw some points as follows: - On what basis to calculate upper and lower … --- ## [Machine Learning score explanation](https://discuss.elastic.co/t/machine-learning-score-explanation/358424)
**Author:** [@Poukim0m](https://discuss.elastic.co/u/Poukim0m)\ **Replies:** 1\ **Last updated:** [May 6, 2024, 3:11pm UTC](https://discuss.elastic.co/t/machine-learning-score-explanation/358424 "2024-05-06T15:11:54Z")
Hello, according to the documentation regarding machine learning jobs the machine learning score depends on the probability that is calculated for the specific metrics and there are 3 different scores (Bucket, Influence… --- ## [Elasticsearch Java Client (8.13.2) building a zero result reponse](https://discuss.elastic.co/t/elasticsearch-java-client-8-13-2-building-a-zero-result-reponse/357704)
**Author:** [@SvenS4342](https://discuss.elastic.co/u/SvenS4342)\ **Replies:** 2\ **Last updated:** [May 6, 2024, 2:18pm UTC](https://discuss.elastic.co/t/elasticsearch-java-client-8-13-2-building-a-zero-result-reponse/357704 "2024-05-06T14:18:15Z")
Hello, for a use-case I'm creating I want to build a SearchResponse similar to a response which did not retrieve any matched documents. co.elastic.clients.elasticsearch.core.SearchResponse.of(r -\> r .aggregations(Ap… --- ## [Connection pool in elasticsearch kibana](https://discuss.elastic.co/t/connection-pool-in-elasticsearch-kibana/358736)
**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\ **Replies:** 4\ **Last updated:** [May 6, 2024, 1:52pm UTC](https://discuss.elastic.co/t/connection-pool-in-elasticsearch-kibana/358736 "2024-05-06T13:52:06Z")
Hello, Good day. Need help on connection pooling. We have onboard application of type Java and dependency with mango DB. Successfully sending APM and transaction data to elastic from application. Able to view data in … --- ## [What's the meaning of the underscore in the java api's methods, e.g., \_toQuery()](https://discuss.elastic.co/t/whats-the-meaning-of-the-underscore-in-the-java-apis-methods-e-g-toquery/358149)
**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\ **Replies:** 1\ **Last updated:** [May 6, 2024, 1:32pm UTC](https://discuss.elastic.co/t/whats-the-meaning-of-the-underscore-in-the-java-apis-methods-e-g-toquery/358149 "2024-05-06T13:32:06Z")
\_toQuery() is a public method that's used in examples on public docs (like Searching for documents | Elasticsearch Java API Client \[8.13\] | Elastic), so the method isn't internal - something the underscore sometimes repr… --- ## [TSVB calcul taux de croissance](https://discuss.elastic.co/t/tsvb-calcul-taux-de-croissance/358835)
**Author:** [@OlivierFournie](https://discuss.elastic.co/u/OlivierFournie)\ **Replies:** 0\ **Last updated:** [May 6, 2024, 1:17pm UTC](https://discuss.elastic.co/t/tsvb-calcul-taux-de-croissance/358835 "2024-05-06T13:17:29Z")
Bonjour, je souhaiterais calculer le taux de croissance entre les années 2024 et 2023. Pouvez vous m'aider svp? --- ## [Index Management](https://discuss.elastic.co/t/index-management/358828)
**Author:** [@himanshu\_2502d](https://discuss.elastic.co/u/himanshu_2502d)\ **Replies:** 0\ **Last updated:** [May 6, 2024, 12:50pm UTC](https://discuss.elastic.co/t/index-management/358828 "2024-05-06T12:50:16Z")
I have one Elastic search cluster hosted on AWS with 5 nodes , Currently we are making one index per tenant per month and we have 70 tenants registered currently and for creation of one index it requires 3 primary and 2… --- ## [Filebeat.yml for a csv file](https://discuss.elastic.co/t/filebeat-yml-for-a-csv-file/358822)
**Author:** [@uhxqc](https://discuss.elastic.co/u/uhxqc)\ **Replies:** 0\ **Last updated:** [May 6, 2024, 12:05pm UTC](https://discuss.elastic.co/t/filebeat-yml-for-a-csv-file/358822 "2024-05-06T12:05:08Z")
Hello, I've been trying to write a filebeat.yml for a csv file with data in the following format: "ParameterA","ParameterB","ParameterC","ParameterD","ParameterE" "DataA1","DataB1","DataC1","DataD1","DataE1" "DataA2","… --- ## [Painless script errors](https://discuss.elastic.co/t/painless-script-errors/358700)
**Author:** [@sravan\_kaheti](https://discuss.elastic.co/u/sravan_kaheti)\ **Replies:** 3\ **Last updated:** [May 6, 2024, 11:40am UTC](https://discuss.elastic.co/t/painless-script-errors/358700 "2024-05-06T11:40:29Z")
Hi There , I need a quick help for painless script implementation for one logic The Environment : I am ingesting huge number of documents in following manner Filebeat \> logstash \> elasticsearch Filebeat will just co… --- ## [How to assign weight attribute to a completion suggester field using Elasticsearch Hadoop connector (Spark/Databricks)](https://discuss.elastic.co/t/how-to-assign-weight-attribute-to-a-completion-suggester-field-using-elasticsearch-hadoop-connector-spark-databricks/358815)
**Author:** [@landlord\_matt](https://discuss.elastic.co/u/landlord_matt)\ **Replies:** 0\ **Last updated:** [May 6, 2024, 11:17am UTC](https://discuss.elastic.co/t/how-to-assign-weight-attribute-to-a-completion-suggester-field-using-elasticsearch-hadoop-connector-spark-databricks/358815 "2024-05-06T11:17:28Z")
Hi! We're successfully using the org.elasticsearch.spark.sql driver to upload our Databricks Spark tables as Elasticsearch indices. We now want to assign the weight attribute to one of our suggester fields in order to g… --- ## [Reduce number of shard](https://discuss.elastic.co/t/reduce-number-of-shard/358791)
**Author:** [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\ **Replies:** 3\ **Last updated:** [May 6, 2024, 10:24am UTC](https://discuss.elastic.co/t/reduce-number-of-shard/358791 "2024-05-06T10:24:43Z")
My Elasticsearch received three logs: Log\_A Log\_B Log\_C To facilitate index lifecycle management (iLM), I updated the index names as follows: Log\_A\_YYYYMMDD Log\_B\_YYYYMMDD Log\_C\_YYYYMMDD Consequently, a new index… --- ## [Sending data to ES via Google Load balancer a good idea?](https://discuss.elastic.co/t/sending-data-to-es-via-google-load-balancer-a-good-idea/358807)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 0\ **Last updated:** [May 6, 2024, 10:24am UTC](https://discuss.elastic.co/t/sending-data-to-es-via-google-load-balancer-a-good-idea/358807 "2024-05-06T10:24:41Z")
Hi, I'm want to replace my old cluster in AWS with a new one in GCP, while there, I restructured the layout of the cluster a bit, i.e. have separate master and data nodes, and Kibana running on separate hosts, instead r… --- ## [Kibana slow and sluggish when connecting via GCP tcp loadbalancer to ES](https://discuss.elastic.co/t/kibana-slow-and-sluggish-when-connecting-via-gcp-tcp-loadbalancer-to-es/357241)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 4\ **Last updated:** [May 6, 2024, 10:02am UTC](https://discuss.elastic.co/t/kibana-slow-and-sluggish-when-connecting-via-gcp-tcp-loadbalancer-to-es/357241 "2024-05-06T10:02:58Z")
Hi, I'm in the phase of upgrading, or better replacing my old \*beats 7.x cluster with a currently 8.12.2 cluster setup in GCP. In my test setup, I have GCP tcp load balancer in front of the ES cluster nodes with a publ… --- ## [Is there any way to ignore the Split metrics by in metric to include the second metric of sum](https://discuss.elastic.co/t/is-there-any-way-to-ignore-the-split-metrics-by-in-metric-to-include-the-second-metric-of-sum/358740)
**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\ **Replies:** 1\ **Last updated:** [May 6, 2024, 8:58am UTC](https://discuss.elastic.co/t/is-there-any-way-to-ignore-the-split-metrics-by-in-metric-to-include-the-second-metric-of-sum/358740 "2024-05-06T08:58:12Z")
Ho exclude the Split metrics by from second metric i just want a sum off itemCount i have the field which has the value of that. right now if i include the second metric i will also be splitted as split metric by i… --- ## [Multiplication and division query](https://discuss.elastic.co/t/multiplication-and-division-query/358787)
**Author:** [@orlenkoda5](https://discuss.elastic.co/u/orlenkoda5)\ **Replies:** 1\ **Last updated:** [May 6, 2024, 8:43am UTC](https://discuss.elastic.co/t/multiplication-and-division-query/358787 "2024-05-06T08:43:11Z")
Good day evetyone. I have a question in making a query wich will count multiplication of value of two fields and then division of this multiplication on third field. Example of data in index: { "\_index" : "inst… --- ## [HTTP output - Mapping reference to object make it string](https://discuss.elastic.co/t/http-output-mapping-reference-to-object-make-it-string/358721)
**Author:** [@AfiLouis](https://discuss.elastic.co/u/AfiLouis)\ **Replies:** 3\ **Last updated:** [May 6, 2024, 8:31am UTC](https://discuss.elastic.co/t/http-output-mapping-reference-to-object-make-it-string/358721 "2024-05-06T08:31:33Z")
Hi, I have made the following object using grok, ruby code and field mutation : { // ... "E2E"=\> { "scenarioId" =\> "drg", "XFT": { "name": "xft\_name", "RQ": "\", … --- ## [Plotting date versus date in Kibana](https://discuss.elastic.co/t/plotting-date-versus-date-in-kibana/358018)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 4\ **Last updated:** [May 6, 2024, 8:09am UTC](https://discuss.elastic.co/t/plotting-date-versus-date-in-kibana/358018 "2024-05-06T08:09:54Z")
Hi there! I'm trying (without success...) to plot two date fields (one vs the other) in Kibana. I have a data source of movie watch event by a set of users, for the past 5 years. Each document includes, among others, t… --- ## [Compute a % out of absolute values in Kibana](https://discuss.elastic.co/t/compute-a-out-of-absolute-values-in-kibana/358085)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 4\ **Last updated:** [May 6, 2024, 8:09am UTC](https://discuss.elastic.co/t/compute-a-out-of-absolute-values-in-kibana/358085 "2024-05-06T08:09:28Z")
Hi there! I've been searching on the threads for a way to do this, but I'm afraid that it's not something I can do. Anyway, just in case I missed something: I have 5 nodes reporting used and total memory. I need to sh… --- ## [Struggle to connect to elasticsearch from apps](https://discuss.elastic.co/t/struggle-to-connect-to-elasticsearch-from-apps/358789)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 0\ **Last updated:** [May 6, 2024, 7:41am UTC](https://discuss.elastic.co/t/struggle-to-connect-to-elasticsearch-from-apps/358789 "2024-05-06T07:41:11Z")
Hi everyone, I'm facing an issue with my apps when I try to connect to my Elastic cluster. first of all, do you guys have ever found this error? before that, I want you to know my cluster first: Version: 8.13.2 HTTPS:… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=246) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=248)