# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=31 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 32 --- ## [Does querystring supports spannotquery?](https://discuss.elastic.co/t/does-querystring-supports-spannotquery/383328)
**Author:** [@vsop\_479](https://discuss.elastic.co/u/vsop_479)\ **Replies:** 0\ **Last updated:** [November 10, 2025, 7:32am UTC](https://discuss.elastic.co/t/does-querystring-supports-spannotquery/383328 "2025-11-10T07:32:02Z")
Does querystring supports spannotquery? Does querystring like below supported by ES? spanNot(title:united, title:states, 1, true) --- ## [In ElasticSearch version 7.14.2, the following query causes the estimated\_size of the request circuit breaker to keep increasing and will not decrease even after 1-2 days](https://discuss.elastic.co/t/in-elasticsearch-version-7-14-2-the-following-query-causes-the-estimated-size-of-the-request-circuit-breaker-to-keep-increasing-and-will-not-decrease-even-after-1-2-days/383288)
**Author:** [@dackh](https://discuss.elastic.co/u/dackh)\ **Replies:** 7\ **Last updated:** [November 10, 2025, 6:23am UTC](https://discuss.elastic.co/t/in-elasticsearch-version-7-14-2-the-following-query-causes-the-estimated-size-of-the-request-circuit-breaker-to-keep-increasing-and-will-not-decrease-even-after-1-2-days/383288 "2025-11-10T06:23:52Z")
This index has 2 million documents, each with approximately 300 fields. The query syntax is as follows: GET /option\_indicator/\_search { "profile": true, "\_source": true, "track\_total\_hits": true, "size": 0,… --- ## [Private connection to elastic cloud deployment](https://discuss.elastic.co/t/private-connection-to-elastic-cloud-deployment/383303)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 3\ **Last updated:** [November 9, 2025, 1:38pm UTC](https://discuss.elastic.co/t/private-connection-to-elastic-cloud-deployment/383303 "2025-11-09T13:38:21Z")
Hi! We are evlauting elastic cloud but only if this is possible : set up private connectivity between onprem (or laptop) to elastic cloud deployment . From docs, I see private connection is posisble just with private li… --- ## [How to Configure Trust/Entitlements for Datadog APM Java Agent on Elasticsearch 9.X](https://discuss.elastic.co/t/how-to-configure-trust-entitlements-for-datadog-apm-java-agent-on-elasticsearch-9-x/383119)
**Author:** [@flyxp11](https://discuss.elastic.co/u/flyxp11)\ **Replies:** 6\ **Last updated:** [November 9, 2025, 11:42am UTC](https://discuss.elastic.co/t/how-to-configure-trust-entitlements-for-datadog-apm-java-agent-on-elasticsearch-9-x/383119 "2025-11-09T11:42:23Z")
1. Is the Datadog APM Java Agent officially supported for use with Elasticsearch 9.x? 2. What are the specifuc Entitlements(security permissions) required for the dd-java-agent.jar to run as a Java Agent on an Elasticse… --- ## [Logback ECS Encoder vs Logstash](https://discuss.elastic.co/t/logback-ecs-encoder-vs-logstash/383307)
**Author:** [@haider665](https://discuss.elastic.co/u/haider665)\ **Replies:** 0\ **Last updated:** [November 9, 2025, 8:39am UTC](https://discuss.elastic.co/t/logback-ecs-encoder-vs-logstash/383307 "2025-11-09T08:39:09Z")
I was doing some study on ELK stack and how to implement it with our spring boot microservices. I have seen two approaches to get logs from my application to kibana dashboard. Using logstash: File beat reads the log fr… --- ## [Anomaly Scores Differ on Same UI](https://discuss.elastic.co/t/anomaly-scores-differ-on-same-ui/383251)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [November 9, 2025, 6:38am UTC](https://discuss.elastic.co/t/anomaly-scores-differ-on-same-ui/383251 "2025-11-09T06:38:33Z")
Hello, I've been leveraging the Anomaly Detection jobs in Elastic. I think this might be a visual bug but I see an influencer with an anomaly score of 98: But down at the bottom it reveals a score of 77: Even th… --- ## [The Service list in Kibana APM](https://discuss.elastic.co/t/the-service-list-in-kibana-apm/383206)
**Author:** [@Henk\_Stobbe](https://discuss.elastic.co/u/Henk_Stobbe)\ **Replies:** 1\ **Last updated:** [November 9, 2025, 5:55am UTC](https://discuss.elastic.co/t/the-service-list-in-kibana-apm/383206 "2025-11-09T05:55:27Z")
Hello, I want to export the list of Services from Kibana, is this stored in an seperate index or does Kibana looks in the traces for this when you open the Dashboard? Who knows? KR Henk --- ## [Easier acces to information regarding the default fields sent by all the Beats](https://discuss.elastic.co/t/easier-acces-to-information-regarding-the-default-fields-sent-by-all-the-beats/383290)
**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\ **Replies:** 1\ **Last updated:** [November 7, 2025, 5:08pm UTC](https://discuss.elastic.co/t/easier-acces-to-information-regarding-the-default-fields-sent-by-all-the-beats/383290 "2025-11-07T17:08:19Z")
Hi there, I have a quick suggestion to improve the documentation of all the beats. Why don’t you add a section explaining the default fields that are expected of the beats, in the documentation? I don’t have to work of… --- ## [Need help with simple agregation](https://discuss.elastic.co/t/need-help-with-simple-agregation/383274)
**Author:** [@marjue](https://discuss.elastic.co/u/marjue)\ **Replies:** 4\ **Last updated:** [November 7, 2025, 4:21am UTC](https://discuss.elastic.co/t/need-help-with-simple-agregation/383274 "2025-11-07T04:21:41Z")
Hello I need help in a simple case but I’m too stupid. There is an index with simple monitoring data. The main fields are: service\_name (text) service\_status (text) service\_time (date) Every 5 minutes a new state f… --- ## [Eck-elasticsearch helm chart - how to properly set path.repo](https://discuss.elastic.co/t/eck-elasticsearch-helm-chart-how-to-properly-set-path-repo/383278)
**Author:** [@Scott\_Weller](https://discuss.elastic.co/u/Scott_Weller)\ **Replies:** 0\ **Last updated:** [November 6, 2025, 11:38pm UTC](https://discuss.elastic.co/t/eck-elasticsearch-helm-chart-how-to-properly-set-path-repo/383278 "2025-11-06T23:38:14Z")
I have installed an ES cluster and kibana instance on k8s and verified both are working correctly. I am currently attempting to link a snapshot repository created for our prod cluster to my dev cluster which was provisio… --- ## [AI Assistant with local LLM](https://discuss.elastic.co/t/ai-assistant-with-local-llm/383091)
**Author:** [@arcsons](https://discuss.elastic.co/u/arcsons)\ **Replies:** 8\ **Last updated:** [November 6, 2025, 9:21pm UTC](https://discuss.elastic.co/t/ai-assistant-with-local-llm/383091 "2025-11-06T21:21:25Z")
Hi, I’m trying to setup an AI connector for my local LLM. I have ngnix as reverse proxy with an API key. $ curl -s http://x.x.x.x:8080/api/chat -H "Authorization: $OKEY" -H "Content-Type: application/json" -d '{ … --- ## [Calculating size for status](https://discuss.elastic.co/t/calculating-size-for-status/383209)
**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\ **Replies:** 4\ **Last updated:** [November 6, 2025, 8:33pm UTC](https://discuss.elastic.co/t/calculating-size-for-status/383209 "2025-11-06T20:33:54Z")
Is there a proper way to calculate EPS or GB per day using Elasticsearch or Kibana dashboards? --- ## [Logstash geoip download/update](https://discuss.elastic.co/t/logstash-geoip-download-update/383241)
**Author:** [@murali\_vraman](https://discuss.elastic.co/u/murali_vraman)\ **Replies:** 4\ **Last updated:** [November 6, 2025, 3:20pm UTC](https://discuss.elastic.co/t/logstash-geoip-download-update/383241 "2025-11-06T15:20:57Z")
I have enabled the following settings in logstash.yml file. When it does detect changes, does it do a full download of the database? xpack.geoip.downloader.endpoint: "https://geoip.elastic.co/v1/database" xpack.geoip.d… --- ## [How to get rid of dotted lines seen in Kibana maps](https://discuss.elastic.co/t/how-to-get-rid-of-dotted-lines-seen-in-kibana-maps/383240)
**Author:** [@ramenon](https://discuss.elastic.co/u/ramenon)\ **Replies:** 1\ **Last updated:** [November 6, 2025, 1:54pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-dotted-lines-seen-in-kibana-maps/383240 "2025-11-06T13:54:56Z")
Hello , Good day. I wanted to ask if there’s any way to remove the dotted line between the points that I have plotted in Kibana Maps , I tried toggling every option available for the Layers but it just doesn’t go away. … --- ## [Running Multiple Elasticsearch Nodes per VM to Bypass 32 GB Heap Limit Best Practice](https://discuss.elastic.co/t/running-multiple-elasticsearch-nodes-per-vm-to-bypass-32-gb-heap-limit-best-practice/383269)
**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\ **Replies:** 1\ **Last updated:** [November 6, 2025, 1:14pm UTC](https://discuss.elastic.co/t/running-multiple-elasticsearch-nodes-per-vm-to-bypass-32-gb-heap-limit-best-practice/383269 "2025-11-06T13:14:39Z")
I understand that a single Elasticsearch node shouldn’t have more than ~32 GB of JVM heap, but can I run multiple Elasticsearch containers (Let’s say 2) on the same machine with their heap set to 32 GB whilst having the … --- ## [Maximum cpu cores for a data node](https://discuss.elastic.co/t/maximum-cpu-cores-for-a-data-node/383267)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 1\ **Last updated:** [November 6, 2025, 12:50pm UTC](https://discuss.elastic.co/t/maximum-cpu-cores-for-a-data-node/383267 "2025-11-06T12:50:26Z")
Hi there, i’m just wondering. Is there a maximum number of CPU cores for a data node? Because, for the memory, it is limited to 30-32 GB Heap, right? But does CPU have the same thing? or can we scale it up as high as we… --- ## [Website search not returning consistent results](https://discuss.elastic.co/t/website-search-not-returning-consistent-results/383256)
**Author:** [@joeroot](https://discuss.elastic.co/u/joeroot)\ **Replies:** 2\ **Last updated:** [November 6, 2025, 9:47am UTC](https://discuss.elastic.co/t/website-search-not-returning-consistent-results/383256 "2025-11-06T09:47:50Z")
Hi everyone, I’m running a restaurant-based website that focuses on Texas Roadhouse menu updates, reviews, and nearby location listings. I’ve implemented Elasticsearch to power the internal search function on my site so… --- ## [Unable to load a trained model on ML node with sufficient memory](https://discuss.elastic.co/t/unable-to-load-a-trained-model-on-ml-node-with-sufficient-memory/383252)
**Author:** [@gueri](https://discuss.elastic.co/u/gueri)\ **Replies:** 0\ **Last updated:** [November 5, 2025, 5:52pm UTC](https://discuss.elastic.co/t/unable-to-load-a-trained-model-on-ml-node-with-sufficient-memory/383252 "2025-11-05T17:52:09Z")
Hello Here is the scenario. I have 2 ML nodes with 8 procs/64 Gb on Elastic 8.15.3. I start by loading a large bge\_m3 model with 1 allocation and 1 thread. :slight\_smile: As you can see on picture, one node had a … --- ## [Missing metrics documentation](https://discuss.elastic.co/t/missing-metrics-documentation/383047)
**Author:** [@kim.ae](https://discuss.elastic.co/u/kim.ae)\ **Replies:** 1\ **Last updated:** [November 5, 2025, 4:57pm UTC](https://discuss.elastic.co/t/missing-metrics-documentation/383047 "2025-11-05T16:57:10Z")
I am trying to evaluate performance of filebeat instalation in a K8S, for that I was able to export filebeat metrics to prometheus. I was unable to find any comprehensive documentation regarding the metrics, so I am not… --- ## [Highlighting not working correctly with greek analyzer](https://discuss.elastic.co/t/highlighting-not-working-correctly-with-greek-analyzer/382873)
**Author:** [@epistola](https://discuss.elastic.co/u/epistola)\ **Replies:** 5\ **Last updated:** [November 5, 2025, 8:10am UTC](https://discuss.elastic.co/t/highlighting-not-working-correctly-with-greek-analyzer/382873 "2025-11-05T08:10:31Z")
Hello everyone, I have a problem with the highlighting in Elasticsearch. I have a field in an index like the following: "skepseis": { "type": "nested", "properties": { "text": { "type": "text", "analyzer": "g… --- ## [Query execution drastically increased after upgrade elastic cloud hosted deployment from v8.18.4 to v9.0.4](https://discuss.elastic.co/t/query-execution-drastically-increased-after-upgrade-elastic-cloud-hosted-deployment-from-v8-18-4-to-v9-0-4/382908)
**Author:** [@fpeter](https://discuss.elastic.co/u/fpeter)\ **Replies:** 8\ **Last updated:** [November 5, 2025, 6:14am UTC](https://discuss.elastic.co/t/query-execution-drastically-increased-after-upgrade-elastic-cloud-hosted-deployment-from-v8-18-4-to-v9-0-4/382908 "2025-11-05T06:14:38Z")
We had a really long query (it could be up to 30k lines), and in v8 it took around 50 ms. After upgrading to v9, the query took around 400–500 ms. When we profiled it, the results were essentially identical in profile.s… --- ## [Slowness in Performance of ElasticSearch/Kibana](https://discuss.elastic.co/t/slowness-in-performance-of-elasticsearch-kibana/383084)
**Author:** [@geoffrey](https://discuss.elastic.co/u/geoffrey)\ **Replies:** 7\ **Last updated:** [November 5, 2025, 5:20am UTC](https://discuss.elastic.co/t/slowness-in-performance-of-elasticsearch-kibana/383084 "2025-11-05T05:20:38Z")
I am running elasticsearch and kibana at V9.2.0: and have datasets that are very small: I am using edge with Kibana and I notice as more documents have been loaded that I can refresh the webpage (using edge refre… --- ## [Filebeat Dynamic Output File Path Configuration Issue](https://discuss.elastic.co/t/filebeat-dynamic-output-file-path-configuration-issue/382871)
**Author:** [@jiwanging](https://discuss.elastic.co/u/jiwanging)\ **Replies:** 2\ **Last updated:** [November 4, 2025, 8:57pm UTC](https://discuss.elastic.co/t/filebeat-dynamic-output-file-path-configuration-issue/382871 "2025-11-04T20:57:09Z")
I'm trying to configure Filebeat to dynamically output files to paths and filenames that map to the original source paths and filenames. For example: Source path to collect: /root/filebeat/log/source\_log/\*.log Desired … --- ## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/383028)
**Author:** [@Varinder](https://discuss.elastic.co/u/Varinder)\ **Replies:** 44\ **Last updated:** [November 4, 2025, 7:16pm UTC](https://discuss.elastic.co/t/elasticsearch/383028 "2025-11-04T19:16:09Z")
‘‘‘ Hi Folks, #lasticsearch.yml file of node ip ending in 17 ( 8.15.2) still not upgraded ’’’ path.data: /var/lib/elasticsearch/data path.logs: /var/log/elasticsearch/logs xpack.security.enabled: false xpack.secur… --- ## [Struggling to set up multiple namespaces for a single Beats data stream](https://discuss.elastic.co/t/struggling-to-set-up-multiple-namespaces-for-a-single-beats-data-stream/383212)
**Author:** [@dot-mike](https://discuss.elastic.co/u/dot-mike)\ **Replies:** 2\ **Last updated:** [November 4, 2025, 4:27pm UTC](https://discuss.elastic.co/t/struggling-to-set-up-multiple-namespaces-for-a-single-beats-data-stream/383212 "2025-11-04T16:27:54Z")
Dear community In Elastic Fleet you can set a namespace for an integration so you can have multiple data streams for a single type of index template without having to duplicate settings (ILM policy, index template, comp… --- ## [Logstash Output to Elastic Severless via API Issues](https://discuss.elastic.co/t/logstash-output-to-elastic-severless-via-api-issues/364620)
**Author:** [@teamomni](https://discuss.elastic.co/u/teamomni)\ **Replies:** 2\ **Last updated:** [November 4, 2025, 2:55pm UTC](https://discuss.elastic.co/t/logstash-output-to-elastic-severless-via-api-issues/364620 "2025-11-04T14:55:10Z")
Hello, We are currently moving our Elastic Cloud stack to Elastic Serverless on AWS and having issues trying to output Logstash data up the new to Elastic Serverless. Following documentation, we are providing hosts URL… --- ## [HighLevelRestClient7.17.5 date\_histogram offset is unexpected](https://discuss.elastic.co/t/highlevelrestclient7-17-5-date-histogram-offset-is-unexpected/383208)
**Author:** [@ZLEternity](https://discuss.elastic.co/u/ZLEternity)\ **Replies:** 0\ **Last updated:** [November 4, 2025, 12:35pm UTC](https://discuss.elastic.co/t/highlevelrestclient7-17-5-date-histogram-offset-is-unexpected/383208 "2025-11-04T12:35:57Z")
DateHistogramAggregationBuilder dateHistogramAggregationBuilder = AggregationBuilders .dateHistogram(AggValueEnum.TIME\_INTERVAL.getAggName()).field(AggValueEnum.TIME\_INTERVAL.getField()).minDocCount(0).extendedBo… --- ## [Negative Request Breaker Estimated Size](https://discuss.elastic.co/t/negative-request-breaker-estimated-size/383184)
**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\ **Replies:** 4\ **Last updated:** [November 4, 2025, 10:30am UTC](https://discuss.elastic.co/t/negative-request-breaker-estimated-size/383184 "2025-11-04T10:30:41Z")
Hi Everyone, I am using ES-8.15.5 and while using this in production I am getting negative value of requests circuit breaker estimated\_size\_in\_bytes. Not able to reproduce this locally either. I am having hard time ide… --- ## [Trial Extension Needed for Self-Hosted ML POC](https://discuss.elastic.co/t/trial-extension-needed-for-self-hosted-ml-poc/383202)
**Author:** [@EUphorik](https://discuss.elastic.co/u/EUphorik)\ **Replies:** 0\ **Last updated:** [November 4, 2025, 10:24am UTC](https://discuss.elastic.co/t/trial-extension-needed-for-self-hosted-ml-poc/383202 "2025-11-04T10:24:37Z")
Hello Elastic Team, We are mid-way through an urgent Proof of Concept (POC) involving a self-hosted deployment, specifically focusing on validating the Kibana Machine Learning (ML) module. Our trial license for Elastic… --- ## [Elasticesearch java client How to initiate a snapshot creation request?](https://discuss.elastic.co/t/elasticesearch-java-client-how-to-initiate-a-snapshot-creation-request/383198)
**Author:** [@lq\_dq](https://discuss.elastic.co/u/lq_dq)\ **Replies:** 1\ **Last updated:** [November 4, 2025, 10:15am UTC](https://discuss.elastic.co/t/elasticesearch-java-client-how-to-initiate-a-snapshot-creation-request/383198 "2025-11-04T10:15:17Z")
I couldn't find any examples of creating snapshots using the Elasticsearch Java client. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=30) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=32)