# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=268 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 269 --- ## [Debugging in Elastic Search](https://discuss.elastic.co/t/debugging-in-elastic-search/356651)
**Author:** [@ShubhamSaxena8](https://discuss.elastic.co/u/ShubhamSaxena8)\ **Replies:** 12\ **Last updated:** [April 8, 2024, 10:51am UTC](https://discuss.elastic.co/t/debugging-in-elastic-search/356651 "2024-04-08T10:51:23Z")
Hello Team, I need some suggestion related to debugging in Elasticsearch. I am kind of stuck because I am not getting any errors in Elastic console or dotnet console. I am trying to implement centralized logging system… --- ## [Filtering table based on a calculated metric fields - Is it possible?](https://discuss.elastic.co/t/filtering-table-based-on-a-calculated-metric-fields-is-it-possible/356666)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 3\ **Last updated:** [April 8, 2024, 10:51am UTC](https://discuss.elastic.co/t/filtering-table-based-on-a-calculated-metric-fields-is-it-possible/356666 "2024-04-08T10:51:20Z")
I'm using version 7.17.3 I've lens visual with a metric field using formula, attached screenshoot. I want to filter out some values, for example I want to filter all rows with 0 in column "Failed" --- ## [Request to extract metadata fields in the self-hosted content extraction service](https://discuss.elastic.co/t/request-to-extract-metadata-fields-in-the-self-hosted-content-extraction-service/354131)
**Author:** [@jan.stap](https://discuss.elastic.co/u/jan.stap)\ **Replies:** 7\ **Last updated:** [April 8, 2024, 9:29am UTC](https://discuss.elastic.co/t/request-to-extract-metadata-fields-in-the-self-hosted-content-extraction-service/354131 "2024-04-08T09:29:24Z")
Hi, I'm using the self-hosted content extraction service to be able to ingest office documents larger than 10 MBytes via the Elastic S3 connector, which we need for a client project. I notice that only the document con… --- ## [Best multilingual ML model for semantic search?](https://discuss.elastic.co/t/best-multilingual-ml-model-for-semantic-search/356667)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 2\ **Last updated:** [April 8, 2024, 8:30am UTC](https://discuss.elastic.co/t/best-multilingual-ml-model-for-semantic-search/356667 "2024-04-08T08:30:19Z")
Hello! As the title said I am looking for the best ML models to use for semantic search. I was wondering what models everyone here recommends. The models need to be multilingual! I wrote this post because this seems to… --- ## [Filebeat with multiple path and index](https://discuss.elastic.co/t/filebeat-with-multiple-path-and-index/356487)
**Author:** [@Milad\_Akhlaghi](https://discuss.elastic.co/u/Milad_Akhlaghi)\ **Replies:** 7\ **Last updated:** [April 8, 2024, 8:28am UTC](https://discuss.elastic.co/t/filebeat-with-multiple-path-and-index/356487 "2024-04-08T08:28:51Z")
hi dear friends, i have a filebeat with multiple paths that needs to ship logs directly to elasticsearch and i need each one to have it's index name , below is my filebeat.yml config file: filebeat.inputs: - type: lo… --- ## [Timelion visualization - getting average of events grouped by id](https://discuss.elastic.co/t/timelion-visualization-getting-average-of-events-grouped-by-id/356936)
**Author:** [@Sabika](https://discuss.elastic.co/u/Sabika)\ **Replies:** 2\ **Last updated:** [April 8, 2024, 7:49am UTC](https://discuss.elastic.co/t/timelion-visualization-getting-average-of-events-grouped-by-id/356936 "2024-04-08T07:49:04Z")
Hi, I am tryng to calculate average of a group of events by calculating the difference between min and max timestamps and then dividing by count. Split events by an ID For each of these groups calculate time taken(by … --- ## [Need nodejs listener/Observer to detect new document in the index](https://discuss.elastic.co/t/need-nodejs-listener-observer-to-detect-new-document-in-the-index/356940)
**Author:** [@brijeshp.sdei](https://discuss.elastic.co/u/brijeshp.sdei)\ **Replies:** 3\ **Last updated:** [April 8, 2024, 6:24am UTC](https://discuss.elastic.co/t/need-nodejs-listener-observer-to-detect-new-document-in-the-index/356940 "2024-04-08T06:24:08Z")
Please help me to detect addition of new document in the elasticsearch (@elastic/elasticsearch nodejs plugin) (from logstash) and have to trigger javascript function --- ## [Reindex remote cluster connection timeout](https://discuss.elastic.co/t/reindex-remote-cluster-connection-timeout/356922)
**Author:** [@neoaddix](https://discuss.elastic.co/u/neoaddix)\ **Replies:** 4\ **Last updated:** [April 8, 2024, 6:19am UTC](https://discuss.elastic.co/t/reindex-remote-cluster-connection-timeout/356922 "2024-04-08T06:19:02Z")
I'm trying to reindex an index from a remote cluster POST \_reindex?wait\_for\_completion=false { "source": { "remote": { "host": "https://remote-cluster.eu-west-1.aws.found.io:9200", "username": "xxx", … --- ## [Elastic-agent - Custom logs - no asn fields](https://discuss.elastic.co/t/elastic-agent-custom-logs-no-asn-fields/356883)
**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\ **Replies:** 5\ **Last updated:** [April 7, 2024, 10:32pm UTC](https://discuss.elastic.co/t/elastic-agent-custom-logs-no-asn-fields/356883 "2024-04-07T22:32:24Z")
When using Elastic Agent, one can't use the GeoIP processor, presumably because it's built-in. It does the location lookup well, but the ASN details are missing and I've not found a way yet to toggle a setting for this. … --- ## [Skip log in screen on an embed dashboard](https://discuss.elastic.co/t/skip-log-in-screen-on-an-embed-dashboard/356921)
**Author:** [@ErnestoEntrambasagua](https://discuss.elastic.co/u/ErnestoEntrambasagua)\ **Replies:** 0\ **Last updated:** [April 7, 2024, 2:53pm UTC](https://discuss.elastic.co/t/skip-log-in-screen-on-an-embed-dashboard/356921 "2024-04-07T14:53:04Z")
Hi everyone! I'm having some troubles doing this, and I read a lot of posts related to this, but none works for me. I have a local ELK stack for a final project at university. The point is, I cannot pay for pluggins or … --- ## [Can the java High Level REST client use a socks5 proxy?](https://discuss.elastic.co/t/can-the-java-high-level-rest-client-use-a-socks5-proxy/356910)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 1\ **Last updated:** [April 7, 2024, 10:48am UTC](https://discuss.elastic.co/t/can-the-java-high-level-rest-client-use-a-socks5-proxy/356910 "2024-04-07T10:48:51Z")
Can the (deprecated) java HLRC be made to use a socks5 proxy? I'm trying to make a java app talk to elasticsearch and other containers running in a private network via their internal, not published, ports. I'm running th… --- ## [Using SUM and LATEST in ESQL](https://discuss.elastic.co/t/using-sum-and-latest-in-esql/356501)
**Author:** [@lizozom](https://discuss.elastic.co/u/lizozom)\ **Replies:** 2\ **Last updated:** [April 7, 2024, 7:35am UTC](https://discuss.elastic.co/t/using-sum-and-latest-in-esql/356501 "2024-04-07T07:35:54Z")
I have log data that contains the name and price of an item purchased. For example: .fruit-cost Date, Name, Price 2024-03-01 12:00, Banana, 1.05 2024-03-01 11:00, Banana, 1.07 2024-03-01 11:30, Strawberry, 0.97 I wou… --- ## [What happens stemming-wise in this situation?](https://discuss.elastic.co/t/what-happens-stemming-wise-in-this-situation/356908)
**Author:** [@mrodent](https://discuss.elastic.co/u/mrodent)\ **Replies:** 0\ **Last updated:** [April 6, 2024, 5:42pm UTC](https://discuss.elastic.co/t/what-happens-stemming-wise-in-this-situation/356908 "2024-04-06T17:42:52Z")
I have implemented a simple module where .docx (Word) files in a directory tree are parsed and each one split into multiple (overlapping) 10-line "Lucene documents", and entered into an index using the \_bulk endpoint ...… --- ## [Use ilm for rollup indices](https://discuss.elastic.co/t/use-ilm-for-rollup-indices/356904)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 0\ **Last updated:** [April 6, 2024, 12:38pm UTC](https://discuss.elastic.co/t/use-ilm-for-rollup-indices/356904 "2024-04-06T12:38:04Z")
Hi everybody, Is there any way to use ilm in rollup indices !? --- ## [Elasticsearch index placement on specific nodes](https://discuss.elastic.co/t/elasticsearch-index-placement-on-specific-nodes/356875)
**Author:** [@jaykb77](https://discuss.elastic.co/u/jaykb77)\ **Replies:** 4\ **Last updated:** [April 6, 2024, 8:54am UTC](https://discuss.elastic.co/t/elasticsearch-index-placement-on-specific-nodes/356875 "2024-04-06T08:54:41Z")
Hi all, I know that we can set 'cluster.routing.allocation.awareness.attributes' to route shards and replicas based on this configuration. However, I need a configuration where indices created with a specific template, … --- ## [Elasticsearch high CPU usage due to one index and replica doesnt help](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-due-to-one-index-and-replica-doesnt-help/356899)
**Author:** [@jaykb77](https://discuss.elastic.co/u/jaykb77)\ **Replies:** 3\ **Last updated:** [April 6, 2024, 8:50am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-due-to-one-index-and-replica-doesnt-help/356899 "2024-04-06T08:50:35Z")
Hi all, We have an ES cluster spanning different cloud regions, say region1 and region2. We have below configuration on elasticsearch.yml (this one for region1 machines) so an index with 1p:1r will have a either a prima… --- ## [Should setting op\_type = create on the \_bulk API be faster than index?](https://discuss.elastic.co/t/should-setting-op-type-create-on-the-bulk-api-be-faster-than-index/356710)
**Author:** [@pingo](https://discuss.elastic.co/u/pingo)\ **Replies:** 1\ **Last updated:** [April 6, 2024, 7:51am UTC](https://discuss.elastic.co/t/should-setting-op-type-create-on-the-bulk-api-be-faster-than-index/356710 "2024-04-06T07:51:00Z")
Hi there! We have some indices using datastreams so we have to set op\_type to create in logstash. But for other append-only non-datastream indices, is there any performance benefit to setting it there aswell? --- ## [Log is swarm with "Giving up on search" "No such index"](https://discuss.elastic.co/t/log-is-swarm-with-giving-up-on-search-no-such-index/356881)
**Author:** [@ricardocr](https://discuss.elastic.co/u/ricardocr)\ **Replies:** 1\ **Last updated:** [April 6, 2024, 7:39am UTC](https://discuss.elastic.co/t/log-is-swarm-with-giving-up-on-search-no-such-index/356881 "2024-04-06T07:39:57Z")
the log file is receiving tons of such errors after some indexes were closed and deleted a month ago, we haven't removed any after that but the error persists, what can I do about it? --- ## [How to set relative time with timestamp?](https://discuss.elastic.co/t/how-to-set-relative-time-with-timestamp/356898)
**Author:** [@ChillarAnand](https://discuss.elastic.co/u/ChillarAnand)\ **Replies:** 1\ **Last updated:** [April 6, 2024, 1:43am UTC](https://discuss.elastic.co/t/how-to-set-relative-time-with-timestamp/356898 "2024-04-06T01:43:05Z")
There is a similar question at Set relative time with timestamp - #2 by Pierre-Olivier\_Lerou However, the solution provided there no longer works. Is there any alternative solution for this? --- ## [How to move from 2 node cluster to single node?](https://discuss.elastic.co/t/how-to-move-from-2-node-cluster-to-single-node/356861)
**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\ **Replies:** 1\ **Last updated:** [April 5, 2024, 9:23pm UTC](https://discuss.elastic.co/t/how-to-move-from-2-node-cluster-to-single-node/356861 "2024-04-05T21:23:20Z")
Hello, I've two nodes configured like this: indices replica is 1. #define node 1 as master-eligible: node.master: true #define nodes 2 and 3 as data nodes: node.data: true #ingest mode node.ingest: true #defin… --- ## [Want to show retried and failed counts separately in visulization](https://discuss.elastic.co/t/want-to-show-retried-and-failed-counts-separately-in-visulization/356535)
**Author:** [@2328943\_dc](https://discuss.elastic.co/u/2328943_dc)\ **Replies:** 1\ **Last updated:** [April 5, 2024, 9:09pm UTC](https://discuss.elastic.co/t/want-to-show-retried-and-failed-counts-separately-in-visulization/356535 "2024-04-05T21:09:50Z")
Non zero failed documents will retry on servers . doc ID is unique but Folder name is same for failed and retried docs so we want to show retry documents and failed doc separately in visulization,how can we achive this… --- ## [Is there a way to add more than a single partition field in an ML job?](https://discuss.elastic.co/t/is-there-a-way-to-add-more-than-a-single-partition-field-in-an-ml-job/356888)
**Author:** [@mir02](https://discuss.elastic.co/u/mir02)\ **Replies:** 0\ **Last updated:** [April 5, 2024, 6:56pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-add-more-than-a-single-partition-field-in-an-ml-job/356888 "2024-04-05T18:56:25Z")
I have KPIs that are broken down into locations but the locations have further breakdown which I am interested in, is there a way to add more partitions to an ML model? --- ## [Why does my aggregation apply to only some of my tasks?](https://discuss.elastic.co/t/why-does-my-aggregation-apply-to-only-some-of-my-tasks/356825)
**Author:** [@Mack1](https://discuss.elastic.co/u/Mack1)\ **Replies:** 1\ **Last updated:** [April 5, 2024, 5:55pm UTC](https://discuss.elastic.co/t/why-does-my-aggregation-apply-to-only-some-of-my-tasks/356825 "2024-04-05T17:55:10Z")
Hello. Learning Logstash here. I am using logstash to apply aggregation formatting so that data arrives to elasticsearch in a specific format. It seems to work most of the time, but some data seems to get no aggregation … --- ## [Integration elasticsearch in laravel app](https://discuss.elastic.co/t/integration-elasticsearch-in-laravel-app/356804)
**Author:** [@Yemboaro](https://discuss.elastic.co/u/Yemboaro)\ **Replies:** 3\ **Last updated:** [April 5, 2024, 3:57pm UTC](https://discuss.elastic.co/t/integration-elasticsearch-in-laravel-app/356804 "2024-04-05T15:57:38Z")
Hello Elastic community, I'm a beginner and I'm looking to integrate Elasticsearch into a Laravel application with a relational database. I'm seeking guidance on the process to follow in order to understand how Elastics… --- ## [Facing TLS handshake error in Fleet server elastic agent logs](https://discuss.elastic.co/t/facing-tls-handshake-error-in-fleet-server-elastic-agent-logs/356398)
**Author:** [@Shayan\_Ahmed](https://discuss.elastic.co/u/Shayan_Ahmed)\ **Replies:** 4\ **Last updated:** [April 5, 2024, 3:21pm UTC](https://discuss.elastic.co/t/facing-tls-handshake-error-in-fleet-server-elastic-agent-logs/356398 "2024-04-05T15:21:34Z")
Hi all, I have configured a Fleet server on my EC2. All setup is working fine, but currently, I am facing a TLS handshake error in the Fleet server elastic agent logs. {"log.level":"error","service.name":"fleet-server"… --- ## [Sorting nested aggregations painless](https://discuss.elastic.co/t/sorting-nested-aggregations-painless/356882)
**Author:** [@twierdzenie](https://discuss.elastic.co/u/twierdzenie)\ **Replies:** 0\ **Last updated:** [April 5, 2024, 2:50pm UTC](https://discuss.elastic.co/t/sorting-nested-aggregations-painless/356882 "2024-04-05T14:50:53Z")
Hi, let's say i have documents with fields: name, surname, score and timestamp; i'm aggregating it by combination name and surname then getting last score of the day for each pair for 1 week, BUT: i'm trying to get th… --- ## [Joining node to cluster - what am I doing wrong?](https://discuss.elastic.co/t/joining-node-to-cluster-what-am-i-doing-wrong/356817)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 12\ **Last updated:** [April 5, 2024, 2:48pm UTC](https://discuss.elastic.co/t/joining-node-to-cluster-what-am-i-doing-wrong/356817 "2024-04-05T14:48:03Z")
We have an existing cluster consisting of a single node. We would like to add another node to the cluster. Both nodes are running Elasticsearch 8.13. We followed the instructions in here, and additionally here. After c… --- ## [Setting up Minimal Security with ElasticSearch Docker Image fails](https://discuss.elastic.co/t/setting-up-minimal-security-with-elasticsearch-docker-image-fails/356562)
**Author:** [@tryin2stupelk](https://discuss.elastic.co/u/tryin2stupelk)\ **Replies:** 12\ **Last updated:** [April 5, 2024, 2:46pm UTC](https://discuss.elastic.co/t/setting-up-minimal-security-with-elasticsearch-docker-image-fails/356562 "2024-04-05T14:46:04Z")
Hello everyone, I was wondering if I could get some assistance with setting up Minimal Security (Username + Password to access the console as outlined here: Set up minimal security for Elasticsearch | Elasticsearch Guid… --- ## [Limit CPU consumptio by auditbeat initial scan](https://discuss.elastic.co/t/limit-cpu-consumptio-by-auditbeat-initial-scan/356847)
**Author:** [@Roberto3](https://discuss.elastic.co/u/Roberto3)\ **Replies:** 1\ **Last updated:** [April 5, 2024, 2:45pm UTC](https://discuss.elastic.co/t/limit-cpu-consumptio-by-auditbeat-initial-scan/356847 "2024-04-05T14:45:05Z")
Hi, we need to lower the cpu usage by the initial scan done by auditbeat windows agent. it takes up to 20% but for 30 to 60 min and we need to reduce the CPU consumption because is a critical server. Is there a way to r… --- ## [Elasticsearch Query function\_score ignores quotes in query string](https://discuss.elastic.co/t/elasticsearch-query-function-score-ignores-quotes-in-query-string/356877)
**Author:** [@Savo\_Pejovic](https://discuss.elastic.co/u/Savo_Pejovic)\ **Replies:** 0\ **Last updated:** [April 5, 2024, 2:22pm UTC](https://discuss.elastic.co/t/elasticsearch-query-function-score-ignores-quotes-in-query-string/356877 "2024-04-05T14:22:27Z")
The results of two same query string queries with quoted phrases return different results if one query is wrapped inside a function\_score query. In the wrapped query, the phrase isn't preserved in full but tokenized, whi… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=267) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=269)