# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=330 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 331 --- ## [How does the search performance compare between standard and nested document structure](https://discuss.elastic.co/t/how-does-the-search-performance-compare-between-standard-and-nested-document-structure/351070)
**Author:** [@mmaccou](https://discuss.elastic.co/u/mmaccou)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 10:36am UTC](https://discuss.elastic.co/t/how-does-the-search-performance-compare-between-standard-and-nested-document-structure/351070 "2024-01-17T10:36:12Z")
I’m exploring different ways to structure my indices. I found an article on the Elasticsearch blog about using nested documents. All else being equal, does this structure impact the speed or other performance/accuracy in… --- ## [Shards and Index states through Java Client](https://discuss.elastic.co/t/shards-and-index-states-through-java-client/351241)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 10:23am UTC](https://discuss.elastic.co/t/shards-and-index-states-through-java-client/351241 "2024-01-17T10:23:35Z")
Hi, I am looking a way to get Shards and Index states through Java Client 7.17 The states getting from: GET \_cat/indices/?v GET \_cat/shards/?v Is it possible though HighLevelRestAPI? --- ## [Search with exact phrase in my index](https://discuss.elastic.co/t/search-with-exact-phrase-in-my-index/351213)
**Author:** [@Indilya](https://discuss.elastic.co/u/Indilya)\ **Replies:** 7\ **Last updated:** [January 17, 2024, 10:08am UTC](https://discuss.elastic.co/t/search-with-exact-phrase-in-my-index/351213 "2024-01-17T10:08:58Z")
Hello, First of all I want to apologize if my post is not correct. This is my first time on this forum and my first time using Elastic Search. I also take this opportunity to thank you in advance for the help. I have … --- ## [How to Enable OCR in Elasticsearch for Enhanced PDF Readability?](https://discuss.elastic.co/t/how-to-enable-ocr-in-elasticsearch-for-enhanced-pdf-readability/351249)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 9:59am UTC](https://discuss.elastic.co/t/how-to-enable-ocr-in-elasticsearch-for-enhanced-pdf-readability/351249 "2024-01-17T09:59:25Z")
Hello, We're facing a challenge with a client regarding the upload and processing of PDF files to make them text-searchable. Initially, we implemented an ingest pipeline with Elasticsearch's attachment processor, levera… --- ## [Kibana v8.6.0 docker image build fails](https://discuss.elastic.co/t/kibana-v8-6-0-docker-image-build-fails/350851)
**Author:** [@salman\_kh](https://discuss.elastic.co/u/salman_kh)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 8:28am UTC](https://discuss.elastic.co/t/kibana-v8-6-0-docker-image-build-fails/350851 "2024-01-17T08:28:36Z")
Hello, I'm attempting to build a Kibana Docker image from the source code, specifically for version 8.6.0. However, I'm encountering an error. I followed the same procedure for this version a couple of months ago but di… --- ## [Map index creation\_date to new field in existing documents](https://discuss.elastic.co/t/map-index-creation-date-to-new-field-in-existing-documents/351235)
**Author:** [@es236908](https://discuss.elastic.co/u/es236908)\ **Replies:** 3\ **Last updated:** [January 17, 2024, 9:52am UTC](https://discuss.elastic.co/t/map-index-creation-date-to-new-field-in-existing-documents/351235 "2024-01-17T09:52:20Z")
Every day I create an index of my file system with Diskover so I have a large amount of indexes one for every day. Each of those indexes has documents for each file but there is no field for the time the index/document w… --- ## [Find an Phrase with addtional variants](https://discuss.elastic.co/t/find-an-phrase-with-addtional-variants/351067)
**Author:** [@libertey](https://discuss.elastic.co/u/libertey)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 9:49am UTC](https://discuss.elastic.co/t/find-an-phrase-with-addtional-variants/351067 "2024-01-17T09:49:26Z")
Hello, i run into a Problem with matching of queries, I have an keyowrd like John Doe and now my System should find all Entries where the John Doe is mentioned as author. The main Problem is the Person John Doe is not a… --- ## [Able to Calculate Metrics, Unable to Visualize as Graphs \[beginner\]](https://discuss.elastic.co/t/able-to-calculate-metrics-unable-to-visualize-as-graphs-beginner/351146)
**Author:** [@Scharka](https://discuss.elastic.co/u/Scharka)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 8:47am UTC](https://discuss.elastic.co/t/able-to-calculate-metrics-unable-to-visualize-as-graphs-beginner/351146 "2024-01-17T08:47:54Z")
I'm new to Kibana, and I can't seem to figure out a completely trivial thing. Can you please point me in the right direction? I tried searching & googling, but I was not able to move on for more days. Minimal working ex… --- ## [How to connect eStreamer with Elastic?](https://discuss.elastic.co/t/how-to-connect-estreamer-with-elastic/351090)
**Author:** [@hectorGC](https://discuss.elastic.co/u/hectorGC)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 9:27am UTC](https://discuss.elastic.co/t/how-to-connect-estreamer-with-elastic/351090 "2024-01-17T09:27:44Z")
Hi Elastic researchers! I am trying to get more logs from the ftds since the logs are not complete in the IPS events and cisco suggests to use eStreamer. I am trying to understand the technology but some help related on… --- ## [Getting fatal exception while booting Elasticsearch while trying to start elasticsearch in Vm](https://discuss.elastic.co/t/getting-fatal-exception-while-booting-elasticsearch-while-trying-to-start-elasticsearch-in-vm/351192)
**Author:** [@Mohammed\_Ahmed](https://discuss.elastic.co/u/Mohammed_Ahmed)\ **Replies:** 3\ **Last updated:** [January 17, 2024, 8:57am UTC](https://discuss.elastic.co/t/getting-fatal-exception-while-booting-elasticsearch-while-trying-to-start-elasticsearch-in-vm/351192 "2024-01-17T08:57:53Z")
getting this error fatal exception while booting Elasticsearch java.lang.IllegalStateException: cannot downgrade a node from version \[8.10.3\] to version \[8.9.0\] at org.elasticsearch.env.NodeMetadata.verifyUpgradeToCur… --- ## [Failed migration of system indices for the watcher and watcher not firing after update](https://discuss.elastic.co/t/failed-migration-of-system-indices-for-the-watcher-and-watcher-not-firing-after-update/350704)
**Author:** [@AEA27](https://discuss.elastic.co/u/AEA27)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 7:45am UTC](https://discuss.elastic.co/t/failed-migration-of-system-indices-for-the-watcher-and-watcher-not-firing-after-update/350704 "2024-01-17T07:45:14Z")
continuation of Failed migration of system indices (.triggered\_watches) with Upgrade Assistant using v7.17.14 Summary, upgrade assistant was giving an error for the watcher when migrating system indices. I tried deleti… --- ## [Filebeat causes](https://discuss.elastic.co/t/filebeat-causes/351119)
**Author:** [@Rutuja\_More](https://discuss.elastic.co/u/Rutuja_More)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 6:29am UTC](https://discuss.elastic.co/t/filebeat-causes/351119 "2024-01-17T06:29:01Z")
Has anyone encountered compatibility issues when running Filebeat alongside a live application? Are there known conflicts or considerations to be aware of when Filebeat is continuously monitoring logs in the presence of… --- ## [Kibana Lens Dashboard Link Broken 404 Dashboard Not Found](https://discuss.elastic.co/t/kibana-lens-dashboard-link-broken-404-dashboard-not-found/350980)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 5\ **Last updated:** [January 16, 2024, 9:59pm UTC](https://discuss.elastic.co/t/kibana-lens-dashboard-link-broken-404-dashboard-not-found/350980 "2024-01-16T21:59:27Z")
Note: It may be necessary to check the user permissions first. TL/DR 1. (Hamburger Menu) --\> Stack Management --\> Saved Objects 2. Select the dashboard and Export 3. Open with Notepad++, CTRL +F, change the Search Mo… --- ## [\[ElasticSearch v.7.5\] How to merge daily and weekly indexes into a monthly index?](https://discuss.elastic.co/t/elasticsearch-v-7-5-how-to-merge-daily-and-weekly-indexes-into-a-monthly-index/351210)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 9:34pm UTC](https://discuss.elastic.co/t/elasticsearch-v-7-5-how-to-merge-daily-and-weekly-indexes-into-a-monthly-index/351210 "2024-01-16T21:34:55Z")
How to merge daily and weekly indexes into a monthly index? In order to free shards. --- ## [After Installing Logstash version 8.11.4 it Exit because a System error](https://discuss.elastic.co/t/after-installing-logstash-version-8-11-4-it-exit-because-a-system-error/351035)
**Author:** [@jcourt2006](https://discuss.elastic.co/u/jcourt2006)\ **Replies:** 10\ **Last updated:** [January 16, 2024, 8:56pm UTC](https://discuss.elastic.co/t/after-installing-logstash-version-8-11-4-it-exit-because-a-system-error/351035 "2024-01-16T20:56:56Z")
I get the following error: \[root@app logstash\]# /usr/share/logstash/bin/logstash -t --path.settings /etc/logstash Using bundled JDK: /usr/share/logstash/jdk /usr/share/logstash/vendor/bundle/jruby/3.1.0/gems/concurrent-… --- ## [Why is a new index created with 0001 if you restart logstash?](https://discuss.elastic.co/t/why-is-a-new-index-created-with-0001-if-you-restart-logstash/351167)
**Author:** [@emoxam](https://discuss.elastic.co/u/emoxam)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 5:39pm UTC](https://discuss.elastic.co/t/why-is-a-new-index-created-with-0001-if-you-restart-logstash/351167 "2024-01-16T17:39:27Z")
Why is a new index created with 0001 if you restart logstash? And does not continue to write to the main one, without numbers. But if you restart it again, it keeps writing to 0001 without creating 0002? /etc/logstash/c… --- ## [\[Ingest processor\] How to apply ingest pipeline on an index?](https://discuss.elastic.co/t/ingest-processor-how-to-apply-ingest-pipeline-on-an-index/351180)
**Author:** [@Keith\_Lin](https://discuss.elastic.co/u/Keith_Lin)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 4:14pm UTC](https://discuss.elastic.co/t/ingest-processor-how-to-apply-ingest-pipeline-on-an-index/351180 "2024-01-16T16:14:58Z")
So in kibana i created an ingest pipeline. Is there a way to apply it to an index or it will be automatically applied? --- ## [Azure: Normalizing Array Fields](https://discuss.elastic.co/t/azure-normalizing-array-fields/351184)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [January 16, 2024, 4:13pm UTC](https://discuss.elastic.co/t/azure-normalizing-array-fields/351184 "2024-01-16T16:13:12Z")
Hello, I am using Elastic's Azure Integration to collect AD Audit logs. Everything is working as expected but I find the schema logic to be hard to work with. The managed ingest pipeline runs a script to map out nested… --- ## [Cannot restore open indices in new empty cluster](https://discuss.elastic.co/t/cannot-restore-open-indices-in-new-empty-cluster/351176)
**Author:** [@mebaj91360](https://discuss.elastic.co/u/mebaj91360)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 3:43pm UTC](https://discuss.elastic.co/t/cannot-restore-open-indices-in-new-empty-cluster/351176 "2024-01-16T15:43:54Z")
Hello, I am trying to restore a snapshot on a new, empty cluster, but I get this error: \[restore-old:snapshot-2024.01.09-5ebjtwcnqksvliv3h9tcug/r4dfaUrJQXyQ0xxVa0OE8Q\] cannot restore index \[logstash-2023.09.02\] because… --- ## [\[Error\] fleet-server failed: context canceled](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled/351096)
**Author:** [@Cliff\_ln](https://discuss.elastic.co/u/Cliff_ln)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 3:42pm UTC](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled/351096 "2024-01-16T15:42:07Z")
Hello, I'm trying to upgrade my Elastic cluster from version 8.10.4 to 8.11.1. I encountered issues during the upgrade of Fleet. The upgrade steps involve deleting the existing Fleet server and Agent policies, then crea… --- ## [Error management in elasticsearch output plugin](https://discuss.elastic.co/t/error-management-in-elasticsearch-output-plugin/351100)
**Author:** [@Cesar\_Garcia1](https://discuss.elastic.co/u/Cesar_Garcia1)\ **Replies:** 4\ **Last updated:** [January 16, 2024, 3:41pm UTC](https://discuss.elastic.co/t/error-management-in-elasticsearch-output-plugin/351100 "2024-01-16T15:41:28Z")
Hello everyone Hello to all of you I have a problem with logstash and elasticsearch I have this configuration file for logstash input { file { path =\> "${FILE\_TO\_SEND}" sincedb\_path =\> "/dev/null" mode =\> read… --- ## [Redirect Elastic Agent to new Fleet Server](https://discuss.elastic.co/t/redirect-elastic-agent-to-new-fleet-server/350310)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 3\ **Last updated:** [January 16, 2024, 3:36pm UTC](https://discuss.elastic.co/t/redirect-elastic-agent-to-new-fleet-server/350310 "2024-01-16T15:36:59Z")
I have about 1000 elastic agents currently connected to a Fleet server that is also my Kibana server. I'd like to migrate the devices to a new Fleet server to improve the performance of my Kibana server. Can I migrate … --- ## [Unable to retrieve version information from Elasticsearch nodes. security\_exception](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-security-exception/350524)
**Author:** [@unknownuser](https://discuss.elastic.co/u/unknownuser)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 3:20pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-security-exception/350524 "2024-01-16T15:20:56Z")
Hi Pal, I recently encountered an issue from my Kibana 8.11.1 version upgrade. The token I used is from monitoring node, this is for the kibana and monitoring connections. However, the kibana UI shows "Kibana server is … --- ## [Elasticsearch 8.11.4 Windows installation from zip not completing](https://discuss.elastic.co/t/elasticsearch-8-11-4-windows-installation-from-zip-not-completing/351172)
**Author:** [@Echo9Zulu](https://discuss.elastic.co/u/Echo9Zulu)\ **Replies:** 5\ **Last updated:** [January 16, 2024, 2:40pm UTC](https://discuss.elastic.co/t/elasticsearch-8-11-4-windows-installation-from-zip-not-completing/351172 "2024-01-16T14:40:42Z")
Hello! I am having difficulty installing Elasticsearch 8.11.4 on a laptop running Windows 10. Running elasticsearch.bat creates the following log in the command window. Shortly after running the command the install hang… --- ## [Maintaining "time delta" between events when reindexing](https://discuss.elastic.co/t/maintaining-time-delta-between-events-when-reindexing/351155)
**Author:** [@petlit2049](https://discuss.elastic.co/u/petlit2049)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 1:53pm UTC](https://discuss.elastic.co/t/maintaining-time-delta-between-events-when-reindexing/351155 "2024-01-16T13:53:21Z")
I'm trying to work out a process for maintaining the time difference between event records when re-indexing data from one index to another but with a new "t0" using only Elasticsearch with ingest pipelines and/or logstas… --- ## [How to move from 3 node cluster to single node](https://discuss.elastic.co/t/how-to-move-from-3-node-cluster-to-single-node/351132)
**Author:** [@Mohammed\_Ahmed](https://discuss.elastic.co/u/Mohammed_Ahmed)\ **Replies:** 5\ **Last updated:** [January 16, 2024, 1:12pm UTC](https://discuss.elastic.co/t/how-to-move-from-3-node-cluster-to-single-node/351132 "2024-01-16T13:12:21Z")
i have a three node cluster below is the config cluster.name: hotels-autosuggest node.name: "es-autosuggest-3" path.logs: /var/log/elasticsearch path.data: /data/elasticsearch/data bootstrap.memory\_lock: true network.ho… --- ## [Move data directory 8.5.2](https://discuss.elastic.co/t/move-data-directory-8-5-2/351168)
**Author:** [@Chel](https://discuss.elastic.co/u/Chel)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 1:00pm UTC](https://discuss.elastic.co/t/move-data-directory-8-5-2/351168 "2024-01-16T13:00:45Z")
I want to move data directory from cluster A to Cluster B. Both have documents present. I want to copy the documents from cluster A to cluster B. Both cluster have different uuid's . Is it possible to change the cluster … --- ## [Encountered a retryable error. Will Retry with exponential backoff code=\>400](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/351147)
**Author:** [@DIVANSHU\_AGARWAL](https://discuss.elastic.co/u/DIVANSHU_AGARWAL)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 12:03pm UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/351147 "2024-01-16T12:03:50Z")
Receiving these log traces on logstash end, unable to index documents to Elasticsearch. \[2024-01-15T11:28:39,573\]\[ERROR\]\[logstash.outputs.opensearch\] Encountered a retryable error (will retry with exponential backoff) {… --- ## [Logstash template](https://discuss.elastic.co/t/logstash-template/351131)
**Author:** [@SalehEska](https://discuss.elastic.co/u/SalehEska)\ **Replies:** 3\ **Last updated:** [January 16, 2024, 11:57am UTC](https://discuss.elastic.co/t/logstash-template/351131 "2024-01-16T11:57:08Z")
The problem is it does not create template , the template just for change things in the settings. this is the template : { "index\_patterns": \["audittrail\_transactions\_\*"\], "settings": { "number\_of\_shards": 2, "inde… --- ## [Snapshots integrity on elasticsearch](https://discuss.elastic.co/t/snapshots-integrity-on-elasticsearch/351074)
**Author:** [@TIT](https://discuss.elastic.co/u/TIT)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 11:10am UTC](https://discuss.elastic.co/t/snapshots-integrity-on-elasticsearch/351074 "2024-01-16T11:10:16Z")
Is There any way i can verify snapshots integrity something , the snapshots in my case are stored on an Nfs . [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=329) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=331)