# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=926 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 927 --- ## [Frozen Tier heap memory requirements](https://discuss.elastic.co/t/frozen-tier-heap-memory-requirements/305546)
**Author:** [@schapman](https://discuss.elastic.co/u/schapman)\ **Replies:** 10\ **Last updated:** [May 25, 2022, 7:20pm UTC](https://discuss.elastic.co/t/frozen-tier-heap-memory-requirements/305546 "2022-05-25T19:20:42Z")
This suggests keeping to less than 20 shards / GB of heap. But this blog post about the frozen tier seems to (if I read it correctly) benchmarked a test case with 12500 shards on a node with 29GB of heap for a ratio of … --- ## [Bug for sincedb with gz file](https://discuss.elastic.co/t/bug-for-sincedb-with-gz-file/305602)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 3\ **Last updated:** [May 25, 2022, 7:19pm UTC](https://discuss.elastic.co/t/bug-for-sincedb-with-gz-file/305602 "2022-05-25T19:19:16Z")
Hi I'm facing with issue for \*.xml.gz files generally issue was reproduced on gz compress files. Even on the latest version of logstash 8.2.1 When I recovered logstash service with sincedb configuration it seems that … --- ## [Mapper \[user\_agent.version\] cannot be changed from type \[text\] to \[keyword\] How to disable this warining?](https://discuss.elastic.co/t/mapper-user-agent-version-cannot-be-changed-from-type-text-to-keyword-how-to-disable-this-warining/305638)
**Author:** [@Sebastian\_Pacuk](https://discuss.elastic.co/u/Sebastian_Pacuk)\ **Replies:** 0\ **Last updated:** [May 25, 2022, 7:09pm UTC](https://discuss.elastic.co/t/mapper-user-agent-version-cannot-be-changed-from-type-text-to-keyword-how-to-disable-this-warining/305638 "2022-05-25T19:09:23Z")
I'm newbie to elasticsearch. What I want to do is to gather logs with filebeat from kubernetes cluster and send them to elasticsearch. My filebeat config file looks like this: \`filebeat.yml: | filebeat.inputs: type: … --- ## [Hide Search Bar and Time Control on Kibana Dashboard, ES 8.0](https://discuss.elastic.co/t/hide-search-bar-and-time-control-on-kibana-dashboard-es-8-0/305540)
**Author:** [@Miguel\_Frazao](https://discuss.elastic.co/u/Miguel_Frazao)\ **Replies:** 0\ **Last updated:** [May 24, 2022, 8:20pm UTC](https://discuss.elastic.co/t/hide-search-bar-and-time-control-on-kibana-dashboard-es-8-0/305540 "2022-05-24T20:20:44Z")
Hello I've been searching a lot for this but I didn't find any link that helped me. I made a Demo, no problem sharing here (https://flights-demo.migueldvl.com), but I would like to hide/remove (just) the search bar (KQL… --- ## [Performing operations on Scripted fields in painless](https://discuss.elastic.co/t/performing-operations-on-scripted-fields-in-painless/305403)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 5\ **Last updated:** [May 25, 2022, 6:46pm UTC](https://discuss.elastic.co/t/performing-operations-on-scripted-fields-in-painless/305403 "2022-05-25T18:46:52Z")
Can if conditions be performed on scripted fields in Kibana painless? For example, I have a scripted field "TAT" which is the difference in 2 times to return turn around time in minutes. I want to see values for TAT \> 9… --- ## [Search for values on a scripted fields](https://discuss.elastic.co/t/search-for-values-on-a-scripted-fields/305499)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 5:50pm UTC](https://discuss.elastic.co/t/search-for-values-on-a-scripted-fields/305499 "2022-05-25T17:50:10Z")
Once a scripted field is created, is it possible to query a search on the values on the scripted field? For example, here I created a scripted field SLA\_Check but when I try to filter for certain values on this field, n… --- ## [Data specification help](https://discuss.elastic.co/t/data-specification-help/305066)
**Author:** [@Vishwajeet\_Kumar](https://discuss.elastic.co/u/Vishwajeet_Kumar)\ **Replies:** 9\ **Last updated:** [May 25, 2022, 5:43pm UTC](https://discuss.elastic.co/t/data-specification-help/305066 "2022-05-25T17:43:14Z")
i'm trying to fetch some data from my index based on the event name matching exactly certain keyword but the catch is that i need the data of the current week and the previous week and also for few more previous weeks li… --- ## [Search in elasticsearch 8](https://discuss.elastic.co/t/search-in-elasticsearch-8/305493)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 5\ **Last updated:** [May 25, 2022, 4:06pm UTC](https://discuss.elastic.co/t/search-in-elasticsearch-8/305493 "2022-05-25T16:06:24Z")
Hi, In v.7.X the search performed as follow: searchResponse = client.search(searchRequest, RequestOptions.DEFAULT); How do I perform search in v.8 without defining the target class for the matching documents. (I want … --- ## [Restricting kibana watchers across spaces](https://discuss.elastic.co/t/restricting-kibana-watchers-across-spaces/304496)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 5\ **Last updated:** [May 25, 2022, 3:48pm UTC](https://discuss.elastic.co/t/restricting-kibana-watchers-across-spaces/304496 "2022-05-25T15:48:34Z")
Hi Team, We are using Elastic cloud 7.16.2 version and we are using spaces to restrict users to access only the data related to them. Now we want to provide access to them to create and manage kibana watchers by themsel… --- ## [Multiple Nested Object Function Scoring](https://discuss.elastic.co/t/multiple-nested-object-function-scoring/305626)
**Author:** [@vp\_tech](https://discuss.elastic.co/u/vp_tech)\ **Replies:** 0\ **Last updated:** [May 25, 2022, 3:32pm UTC](https://discuss.elastic.co/t/multiple-nested-object-function-scoring/305626 "2022-05-25T15:32:32Z")
ES Version: 6.8 I have an index storing documents that contain a list of nested tag objects. Each tag object has a text field (for the tag itself) and a float field representing a weight that describes the strength of as… --- ## [Combine knn score and match score](https://discuss.elastic.co/t/combine-knn-score-and-match-score/304032)
**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\ **Replies:** 2\ **Last updated:** [May 25, 2022, 3:13pm UTC](https://discuss.elastic.co/t/combine-knn-score-and-match-score/304032 "2022-05-25T15:13:37Z")
hi, my index has one knn vector field and one text field. I would like to create a search query which score would combile a score of KNN vector(cosinemil) and match score . Also I would like to boost KNN score so it can… --- ## [Painless script with GeoShape type query](https://discuss.elastic.co/t/painless-script-with-geoshape-type-query/304647)
**Author:** [@kindchri](https://discuss.elastic.co/u/kindchri)\ **Replies:** 5\ **Last updated:** [May 25, 2022, 2:40pm UTC](https://discuss.elastic.co/t/painless-script-with-geoshape-type-query/304647 "2022-05-25T14:40:21Z")
I'm trying to create a runtime field in a search request Link to documentation. In the script for the field I need to check if a geo point (lat, lng) in a field on the document is within a poiygon/bounding box that is p… --- ## [All of my documents have specific field but I get "A document doesn't have a value for a field! Use doc\[\\].size()==0 to check if a document is missing a field!"](https://discuss.elastic.co/t/all-of-my-documents-have-specific-field-but-i-get-a-document-doesnt-have-a-value-for-a-field-use-doc-field-size-0-to-check-if-a-document-is-missing-a-field/304969)
**Author:** [@msln](https://discuss.elastic.co/u/msln)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 2:38pm UTC](https://discuss.elastic.co/t/all-of-my-documents-have-specific-field-but-i-get-a-document-doesnt-have-a-value-for-a-field-use-doc-field-size-0-to-check-if-a-document-is-missing-a-field/304969 "2022-05-25T14:38:46Z")
when I run following query: GET /annotations/\_search { "query": { "match\_all": {} } } I receive following response: { "took" : 1, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1,… --- ## [Using a Variable in Canvas Render CSS](https://discuss.elastic.co/t/using-a-variable-in-canvas-render-css/305618)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 2:19pm UTC](https://discuss.elastic.co/t/using-a-variable-in-canvas-render-css/305618 "2022-05-25T14:19:30Z")
Hi All, I have a need to use a variable in Canvas' render CSS, but I can't find a way to do this. I'm effectively trying to do some math on an animation to be able to handle variable length text. Canvas simplified exa… --- ## [AWS integration with Elasticsearch](https://discuss.elastic.co/t/aws-integration-with-elasticsearch/305284)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 5\ **Last updated:** [May 25, 2022, 1:52pm UTC](https://discuss.elastic.co/t/aws-integration-with-elasticsearch/305284 "2022-05-25T13:52:48Z")
I am trying to setup AWS integration with Elasticsearch 7.17.3 and have had some success. I am not able to get data for few services and the filebeat.json log shows the below error. I am seeing the region code twice in … --- ## [Indices not creating after logstah starting with Systemctl service](https://discuss.elastic.co/t/indices-not-creating-after-logstah-starting-with-systemctl-service/304871)
**Author:** [@Karthik9099](https://discuss.elastic.co/u/Karthik9099)\ **Replies:** 25\ **Last updated:** [May 25, 2022, 1:04pm UTC](https://discuss.elastic.co/t/indices-not-creating-after-logstah-starting-with-systemctl-service/304871 "2022-05-25T13:04:53Z")
Logstash not creating indices when I use the below command sudo systemctl start logstash.service If I run below command then indices creating successfully and pulling the data bin/logstash -f /etc/logstash/conf.d/logs… --- ## [Dashboards and index patterns lost after every upgrade](https://discuss.elastic.co/t/dashboards-and-index-patterns-lost-after-every-upgrade/305155)
**Author:** [@Roberto\_D\_Arco](https://discuss.elastic.co/u/Roberto_D_Arco)\ **Replies:** 4\ **Last updated:** [May 25, 2022, 12:50pm UTC](https://discuss.elastic.co/t/dashboards-and-index-patterns-lost-after-every-upgrade/305155 "2022-05-25T12:50:48Z")
Hello, I 'inherited' the clusters so I don't know the details of 'how we reached this situation', but I hope that the facts that I have will be enough to have a possible solution. I have 3 very similar clusters: staging… --- ## [Regarding Snapshots](https://discuss.elastic.co/t/regarding-snapshots/305595)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [May 25, 2022, 12:32pm UTC](https://discuss.elastic.co/t/regarding-snapshots/305595 "2022-05-25T12:32:13Z")
Hi, Is it possible, at snapshot time, to snapshot only primary shards? Thx D --- ## [Stacked Bar with text labels on it](https://discuss.elastic.co/t/stacked-bar-with-text-labels-on-it/305576)
**Author:** [@nikaes](https://discuss.elastic.co/u/nikaes)\ **Replies:** 2\ **Last updated:** [May 25, 2022, 11:56am UTC](https://discuss.elastic.co/t/stacked-bar-with-text-labels-on-it/305576 "2022-05-25T11:56:28Z")
Hi All, when the splitted values are too much appart from each other, the stacked bar visualization is difficult to read. I would like to have fixed sized splits with text labels on them. See the picture below: i… --- ## [Metricbeat does not properly extract elasticsearch metrics in kubernetes using Helm](https://discuss.elastic.co/t/metricbeat-does-not-properly-extract-elasticsearch-metrics-in-kubernetes-using-helm/304698)
**Author:** [@Enric\_Rubio](https://discuss.elastic.co/u/Enric_Rubio)\ **Replies:** 6\ **Last updated:** [May 25, 2022, 11:39am UTC](https://discuss.elastic.co/t/metricbeat-does-not-properly-extract-elasticsearch-metrics-in-kubernetes-using-helm/304698 "2022-05-25T11:39:54Z")
Good afternoon, I am trying to deploy metricbeat and kibana to kubernetes in google cloud using Helm. My aim is to collect data to benchmark elastic while running migrations to find out what resources does Elasticsearch… --- ## [Logstash Keystore No java.exe executable found on PATH](https://discuss.elastic.co/t/logstash-keystore-no-java-exe-executable-found-on-path/304008)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 5\ **Last updated:** [May 25, 2022, 11:31am UTC](https://discuss.elastic.co/t/logstash-keystore-no-java-exe-executable-found-on-path/304008 "2022-05-25T11:31:16Z")
Hello, I am trying to use the keystore, that the passwords in the pipeline are not in plain text. I did not download any JDK. I used the bundled jdk which is included in the logstash download. I am getting these messag… --- ## [Getting first 3 characters of month from date](https://discuss.elastic.co/t/getting-first-3-characters-of-month-from-date/305590)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 11:25am UTC](https://discuss.elastic.co/t/getting-first-3-characters-of-month-from-date/305590 "2022-05-25T11:25:11Z")
How can we get only the first three characters of the month from a date field using a scripted field in kibana painless? Using getMonth() fetches the entire month. thanks --- ## [Elasticsearch : Access the lemmas of the analyzed text](https://discuss.elastic.co/t/elasticsearch-access-the-lemmas-of-the-analyzed-text/305597)
**Author:** [@dpappas](https://discuss.elastic.co/u/dpappas)\ **Replies:** 0\ **Last updated:** [May 25, 2022, 11:02am UTC](https://discuss.elastic.co/t/elasticsearch-access-the-lemmas-of-the-analyzed-text/305597 "2022-05-25T11:02:19Z")
Hi everyone! I would like to extract the lemmatized form of the tokens instead of the stemmed form of the tokens. I know that I could get the stems using the following code curl -X GET "localhost:9200/\_analyze?pretty"… --- ## [How static mapping works at storage level](https://discuss.elastic.co/t/how-static-mapping-works-at-storage-level/304470)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 11\ **Last updated:** [May 25, 2022, 10:59am UTC](https://discuss.elastic.co/t/how-static-mapping-works-at-storage-level/304470 "2022-05-25T10:59:04Z")
Team, I am using static mappings for elastic index with 10 fields as indexed fields, but application is sending 20 fields. out of 20 fields only 10 fields will be available for searching and querying does non indexed … --- ## [Filebeat daemonset losing messages](https://discuss.elastic.co/t/filebeat-daemonset-losing-messages/305515)
**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 10:43am UTC](https://discuss.elastic.co/t/filebeat-daemonset-losing-messages/305515 "2022-05-25T10:43:22Z")
Hi, Roughly this question has been asked a few times over the years but I've yet to find any real solutions. We've got filebeat deployed as a daemonset in an on-prem k8s cluster. The config is very simple. filebeat.a… --- ## [Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 127.0.0.1:9200](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-127-0-0-1-9200/305585)
**Author:** [@devikingno](https://discuss.elastic.co/u/devikingno)\ **Replies:** 0\ **Last updated:** [May 25, 2022, 9:57am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-127-0-0-1-9200/305585 "2022-05-25T09:57:02Z")
Hi everyone I'm trying setup SSL, TLS, HTTPS for my Elasticsearch and kibana container, 2 container ES and Kibana are all the same version (8.1.3) and run at localhost. I'm edited the configure host file locally in /et… --- ## [HOW TO CREATE DASHBOARD FOR JAVA(tomcat) EXCEPTIONS IN KIBANA](https://discuss.elastic.co/t/how-to-create-dashboard-for-java-tomcat-exceptions-in-kibana/305556)
**Author:** [@Rajesh119](https://discuss.elastic.co/u/Rajesh119)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 7:44am UTC](https://discuss.elastic.co/t/how-to-create-dashboard-for-java-tomcat-exceptions-in-kibana/305556 "2022-05-25T07:44:09Z")
I want to create a dashboard in kibana for java exceptions like picture shown in below is it possible in kibana or any other ways to monitor each exception. Please help me regarding this issue. Thanks in Advance. --- ## [Stop repetion of month in x-axis @timestan](https://discuss.elastic.co/t/stop-repetion-of-month-in-x-axis-timestan/305453)
**Author:** [@Rashmi\_Prabha](https://discuss.elastic.co/u/Rashmi_Prabha)\ **Replies:** 3\ **Last updated:** [May 25, 2022, 9:21am UTC](https://discuss.elastic.co/t/stop-repetion-of-month-in-x-axis-timestan/305453 "2022-05-25T09:21:20Z")
How to remove month repitition on x-axis? --- ## [Only match if all tokens of an indexed field are included in the search query in any order](https://discuss.elastic.co/t/only-match-if-all-tokens-of-an-indexed-field-are-included-in-the-search-query-in-any-order/305520)
**Author:** [@SwonVIP](https://discuss.elastic.co/u/SwonVIP)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 8:26am UTC](https://discuss.elastic.co/t/only-match-if-all-tokens-of-an-indexed-field-are-included-in-the-search-query-in-any-order/305520 "2022-05-25T08:26:26Z")
Dear Elasticsearch Community, currently trying to solve an use-case of a reverse AND condition on user search queries where all tokens have to be included in an indexed field in order to match a certain document. Examp… --- ## [Highlighting on new wildcard field?](https://discuss.elastic.co/t/highlighting-on-new-wildcard-field/305525)
**Author:** [@schmitch](https://discuss.elastic.co/u/schmitch)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 6:51am UTC](https://discuss.elastic.co/t/highlighting-on-new-wildcard-field/305525 "2022-05-25T06:51:31Z")
hello, we tried to highlight on a new wildcard field type, unfortunatly it looks non working. is there any way to get this working? since most of our queries use infixes and we prefer to have them highlighted a wildca… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=925) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=927)