# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=455 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 456 --- ## [Does ES have the 99th percentile time of request?](https://discuss.elastic.co/t/does-es-have-the-99th-percentile-time-of-request/302557)
**Author:** [@gaojiabao1991](https://discuss.elastic.co/u/gaojiabao1991)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 8:49am UTC](https://discuss.elastic.co/t/does-es-have-the-99th-percentile-time-of-request/302557 "2022-04-18T08:49:01Z")
Hello everyone, I'm new to ES, and I'm recently replacing our company's Solr with ES. Our current monitoring is to use the elasticsearch-exporter provided by the prometheus community to record the system operation infor… --- ## [Elastic Lucene vs KQL vs DSL vs EQL](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588)
**Author:** [@Esha](https://discuss.elastic.co/u/Esha)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 6:23am UTC](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588 "2022-04-18T06:23:11Z")
Hi Team, Can you please share when should we use the lucene query, KQL, DSL and EQL query types. For rules creation is it best to use the lucene query or KQL query? Thank you --- ## [Steps to integrate App connect with Elasticserach](https://discuss.elastic.co/t/steps-to-integrate-app-connect-with-elasticserach/302593)
**Author:** [@SnehaB](https://discuss.elastic.co/u/SnehaB)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 5:10am UTC](https://discuss.elastic.co/t/steps-to-integrate-app-connect-with-elasticserach/302593 "2022-04-18T05:10:47Z")
Hello Team, Please help me to integrate ELK stack with IBM app connect. If any links or documents are there please let me know. --- ## [Error setting up Dashboards with auditbeat](https://discuss.elastic.co/t/error-setting-up-dashboards-with-auditbeat/302591)
**Author:** [@b\_tolu](https://discuss.elastic.co/u/b_tolu)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 4:41am UTC](https://discuss.elastic.co/t/error-setting-up-dashboards-with-auditbeat/302591 "2022-04-18T04:41:58Z")
hi so i would run the background of all i have done i am trying to create a SIEM , so I installed Elasticsearch,kibana, and auditbeat . I have made all the right settings for me to be able to startup. My issue now is tha… --- ## [Disabling geoip downloader is not working (elastic 7.16.2 and java 11)](https://discuss.elastic.co/t/disabling-geoip-downloader-is-not-working-elastic-7-16-2-and-java-11/302523)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 5\ **Last updated:** [April 17, 2022, 4:31pm UTC](https://discuss.elastic.co/t/disabling-geoip-downloader-is-not-working-elastic-7-16-2-and-java-11/302523 "2022-04-17T16:31:13Z")
RHEL release 7.9 jdk-11.0.14 (not bundled) Elasticsearch with x-pack security multi hosts/nodes cluster has been setup from Elasticsearch-7.16.2-linux-x86\_64.tar.gz. It is fully functional. I tried to disable geoip d… --- ## [Unable to create mapping of an index through Java code](https://discuss.elastic.co/t/unable-to-create-mapping-of-an-index-through-java-code/302180)
**Author:** [@Apurba](https://discuss.elastic.co/u/Apurba)\ **Replies:** 3\ **Last updated:** [April 17, 2022, 4:08pm UTC](https://discuss.elastic.co/t/unable-to-create-mapping-of-an-index-through-java-code/302180 "2022-04-17T16:08:56Z")
I'm trying to create mapping from Java code by request.mapping(parameter) and request.source(parameter) but every time I'm getting "Mapper\_parsing\_exception", can anyone please help me out if they have any context about … --- ## [Correlating fields between 2 different logs/indices](https://discuss.elastic.co/t/correlating-fields-between-2-different-logs-indices/302294)
**Author:** [@cnwdoug23](https://discuss.elastic.co/u/cnwdoug23)\ **Replies:** 1\ **Last updated:** [April 17, 2022, 8:59am UTC](https://discuss.elastic.co/t/correlating-fields-between-2-different-logs-indices/302294 "2022-04-17T08:59:00Z")
Hi I m trying to correlate different logs/indices based on a certain fields. Unfortunately the target field in these logs are not the same naming. I have found a way creating runtime field to rename the field to sync up … --- ## [How to index CSV files with big number of columns/fields](https://discuss.elastic.co/t/how-to-index-csv-files-with-big-number-of-columns-fields/302555)
**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 3:19pm UTC](https://discuss.elastic.co/t/how-to-index-csv-files-with-big-number-of-columns-fields/302555 "2022-04-16T15:19:19Z")
Hi all, We have a lot of csv files with varied number of columns. The majority just have few columns but some have more than 1000 columns. At first we decided to consider each column as a field but the index.mapping.tot… --- ## [Elasticsearch on a virtual machine do or dont?](https://discuss.elastic.co/t/elasticsearch-on-a-virtual-machine-do-or-dont/302509)
**Author:** [@licensebypass](https://discuss.elastic.co/u/licensebypass)\ **Replies:** 1\ **Last updated:** [April 17, 2022, 6:20am UTC](https://discuss.elastic.co/t/elasticsearch-on-a-virtual-machine-do-or-dont/302509 "2022-04-17T06:20:15Z")
Hello everybody, I've been assigned the task of evaluating a few unused machines in a corporate network for the sole purpose of finding a place to setup Elasticsearch for a medium to large Magento installation, after ext… --- ## [EMPTY\_BYTE\_ARRAY error for for log4j configuration file after update](https://discuss.elastic.co/t/empty-byte-array-error-for-for-log4j-configuration-file-after-update/302560)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 7:40pm UTC](https://discuss.elastic.co/t/empty-byte-array-error-for-for-log4j-configuration-file-after-update/302560 "2022-04-16T19:40:36Z")
I just did a full system update for my Linux machine and now have this error when trying to start the Elasticsearch service: Apr 14 09:58:38 ELK-Stack.uhtasi.local systemd-entrypoint\[16746\]: Exception in thread "main" j… --- ## [What is the correct way to start up elasticsearch & kibana and connect them under docker swarm](https://discuss.elastic.co/t/what-is-the-correct-way-to-start-up-elasticsearch-kibana-and-connect-them-under-docker-swarm/302551)
**Author:** [@UchihaYuki](https://discuss.elastic.co/u/UchihaYuki)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 10:57am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-start-up-elasticsearch-kibana-and-connect-them-under-docker-swarm/302551 "2022-04-16T10:57:48Z")
I will post most relevant info from my docker-compose.yml. Please look at the following: services: es-1: hostname: es-1 environment: - ELASTIC\_PASSWORD=${ADMIN\_PASSWORD} - node.name=es-1 - cl… --- ## [Unable to install & enroll fleet server - v8.1.2](https://discuss.elastic.co/t/unable-to-install-enroll-fleet-server-v8-1-2/302553)
**Author:** [@jdswifty](https://discuss.elastic.co/u/jdswifty)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 2:17pm UTC](https://discuss.elastic.co/t/unable-to-install-enroll-fleet-server-v8-1-2/302553 "2022-04-16T14:17:09Z")
Hi, having some issues getting our first fleet server up & running using 8.1.2 on Windows followed the guided process from Kibana but the install fails each time. It doesnt even look like its getting to the point where… --- ## [CSV file uploading error](https://discuss.elastic.co/t/csv-file-uploading-error/302552)
**Author:** [@Celal\_Celik](https://discuss.elastic.co/u/Celal_Celik)\ **Replies:** 2\ **Last updated:** [April 16, 2022, 12:03pm UTC](https://discuss.elastic.co/t/csv-file-uploading-error/302552 "2022-04-16T12:03:20Z")
Hello, I am using ES 7.10 and tried to upload a csv file, so I can make a dashboard in Kibana. But unfortunately I get this error. My csv file looks like this: My Mapping looks like this: and this is the error: … --- ## [How to group docs by latest doc and run aggregation on the group in elastic search?](https://discuss.elastic.co/t/how-to-group-docs-by-latest-doc-and-run-aggregation-on-the-group-in-elastic-search/302524)
**Author:** [@Adil\_Ismail](https://discuss.elastic.co/u/Adil_Ismail)\ **Replies:** 2\ **Last updated:** [April 16, 2022, 11:10am UTC](https://discuss.elastic.co/t/how-to-group-docs-by-latest-doc-and-run-aggregation-on-the-group-in-elastic-search/302524 "2022-04-16T11:10:25Z")
Hi , I need to get all clients under a partnerId & since there would be many clients I need to group the clients by clientId,latest reportDate and run some aggregations . Index data is like below - \[ { partnerId:… --- ## [How to update a document in NEST whose document ID (which is autogenerated) is not known?](https://discuss.elastic.co/t/how-to-update-a-document-in-nest-whose-document-id-which-is-autogenerated-is-not-known/302544)
**Author:** [@Tanveer\_Khan](https://discuss.elastic.co/u/Tanveer_Khan)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 9:06am UTC](https://discuss.elastic.co/t/how-to-update-a-document-in-nest-whose-document-id-which-is-autogenerated-is-not-known/302544 "2022-04-16T09:06:54Z")
\[Route("api/CancelSlotAppointment")\] \[HttpGet\] public string CancelSlotAppointment(string SlotID, bool Cancel) { var uri = new Uri("http://localhost:9200"); var settings = new ConnectionSettings(uri); var client = … --- ## [Cluster going read only, trying to understand why](https://discuss.elastic.co/t/cluster-going-read-only-trying-to-understand-why/302502)
**Author:** [@graphman](https://discuss.elastic.co/u/graphman)\ **Replies:** 4\ **Last updated:** [April 16, 2022, 5:40am UTC](https://discuss.elastic.co/t/cluster-going-read-only-trying-to-understand-why/302502 "2022-04-16T05:40:10Z")
Hi, I have a really simple setup with a cluster of 2 nodes, and a really small number of documents (\<20k). But it's the second time my cluster goes to read only mode and I can't understand why. I've plenty of storage l… --- ## [Overriding default jvm options is not working (elastic 7.16.2 and java 11)](https://discuss.elastic.co/t/overriding-default-jvm-options-is-not-working-elastic-7-16-2-and-java-11/302525)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 9:04pm UTC](https://discuss.elastic.co/t/overriding-default-jvm-options-is-not-working-elastic-7-16-2-and-java-11/302525 "2022-04-15T21:04:58Z")
RHEL release 7.9 jdk-11.0.14 (not bundled) Elasticsearch with x-pack security multi hosts/nodes cluster has been setup from Elasticsearch-7.16.2-linux-x86\_64.tar.gz and it is fully functional. I tried to override defa… --- ## [Contribute to Elastic Tech Blog](https://discuss.elastic.co/t/contribute-to-elastic-tech-blog/302490)
**Author:** [@EmersonDing](https://discuss.elastic.co/u/EmersonDing)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 5:21pm UTC](https://discuss.elastic.co/t/contribute-to-elastic-tech-blog/302490 "2022-04-15T17:21:35Z")
Is https://www.elastic.co/blog welcome blog submission from outside of Elastic? We've ran into some interesting issues for the past few years, and thought it'll be useful to share the experience. Elastic blog will be an … --- ## ['suggest\_mode' =\> 'always' does not return suggestion's full word query](https://discuss.elastic.co/t/suggest-mode-always-does-not-return-suggestions-full-word-query/302268)
**Author:** [@jacreich](https://discuss.elastic.co/u/jacreich)\ **Replies:** 8\ **Last updated:** [April 15, 2022, 4:49pm UTC](https://discuss.elastic.co/t/suggest-mode-always-does-not-return-suggestions-full-word-query/302268 "2022-04-15T16:49:29Z")
Hello, I am running an suggestions query using Elasticsearch v5.5. When looking for a whole word in the document (e.g. 'kneecap'), suggestions are not returned when the whole word is typed, but it does appear when typing… --- ## [ECS issues](https://discuss.elastic.co/t/ecs-issues/301804)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 5\ **Last updated:** [April 15, 2022, 4:14pm UTC](https://discuss.elastic.co/t/ecs-issues/301804 "2022-04-15T16:14:53Z")
Hi, We have recently upgraded from 7.x to 8.x which overall has been OK. We have a number of feeds via logstash which were in place under 7.x which are indexing correctly due to having been created under 7.x, however w… --- ## [Logging ES queries in elasticsearch-spark-30](https://discuss.elastic.co/t/logging-es-queries-in-elasticsearch-spark-30/302435)
**Author:** [@sergeyka](https://discuss.elastic.co/u/sergeyka)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 2:03pm UTC](https://discuss.elastic.co/t/logging-es-queries-in-elasticsearch-spark-30/302435 "2022-04-15T14:03:48Z")
Is there a way to log Elasticsearch queries issued by the elasticsearch-spark-30\_2.12 library? What I tried: Setting everything to trace log level. URLs of requests sent to Elasticsearch were printed, but not the body… --- ## [Elastic 8.1 RAM memory leak](https://discuss.elastic.co/t/elastic-8-1-ram-memory-leak/302497)
**Author:** [@Alex\_A](https://discuss.elastic.co/u/Alex_A)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 9:55am UTC](https://discuss.elastic.co/t/elastic-8-1-ram-memory-leak/302497 "2022-04-15T09:55:31Z")
Hello. I'm using Elasticsearch 8.1, dependency co.elastic.clients Elasticsearch-java version 8.1.2. When creating one scroll request for 15\_000 records, a large memory consumption occurs. The request consumed 8 GB of mem… --- ## [Spring4Shell ::Spring Framework Remote Code Execution Vulnerability](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/302396)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 4\ **Last updated:** [April 15, 2022, 12:20pm UTC](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/302396 "2022-04-15T12:20:05Z")
Hello, We are using Elasticsearch 7.16.3 and Elasticsearch 7.15.1. Can you let us know which java version both the Elasticsearch versions are using? Please let us know, whether ES is affected any way by the report… --- ## [ODBC failed connection to remote ES server](https://discuss.elastic.co/t/odbc-failed-connection-to-remote-es-server/301493)
**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\ **Replies:** 5\ **Last updated:** [April 15, 2022, 12:03pm UTC](https://discuss.elastic.co/t/odbc-failed-connection-to-remote-es-server/301493 "2022-04-15T12:03:34Z")
Hi, I'm trying to connect to my remote server, where i have ES and all my data, with the ODBC driver to pull data to excel in my PC. When i try to configure the remote connection in the ODBC data sources, i receive thi… --- ## [Incorrect time in @timestamp field](https://discuss.elastic.co/t/incorrect-time-in-timestamp-field/302489)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 4\ **Last updated:** [April 15, 2022, 11:43am UTC](https://discuss.elastic.co/t/incorrect-time-in-timestamp-field/302489 "2022-04-15T11:43:25Z")
Dears, I have some odd problem with @timestamp field in my indices which include incorrect time i.e. minus two hours. Logstash should populate time to @timestamp from logs on the base of this: if ("" in \[hi.my\_date\]) {… --- ## [Problems when importing ml models with eland\_import\_hub\_model](https://discuss.elastic.co/t/problems-when-importing-ml-models-with-eland-import-hub-model/302499)
**Author:** [@cman](https://discuss.elastic.co/u/cman)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 10:24am UTC](https://discuss.elastic.co/t/problems-when-importing-ml-models-with-eland-import-hub-model/302499 "2022-04-15T10:24:20Z")
I have got some errors while trying to import a couple of ml models by the command "eland\_import\_hub\_model". In the one case I would like to import this model: sentence-transformers/paraphrase-multilingual-MiniLM-L12-v2 … --- ## [Parse Haproxy Log](https://discuss.elastic.co/t/parse-haproxy-log/302494)
**Author:** [@Serge\_Reynier](https://discuss.elastic.co/u/Serge_Reynier)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 9:40am UTC](https://discuss.elastic.co/t/parse-haproxy-log/302494 "2022-04-15T09:40:38Z")
Hi, I actually testing "elastic.co" to store and parse my haproxy logs, but I can't parse them properly. I use Haproxy 2.2 and elastic-agent to send logs and i installed Haproxy Integration to parse log. Lots of field … --- ## [Create Coordinate nodes on existing cluster on Kubernetes](https://discuss.elastic.co/t/create-coordinate-nodes-on-existing-cluster-on-kubernetes/302432)
**Author:** [@mitesh.gangaramani](https://discuss.elastic.co/u/mitesh.gangaramani)\ **Replies:** 1\ **Last updated:** [April 15, 2022, 9:10am UTC](https://discuss.elastic.co/t/create-coordinate-nodes-on-existing-cluster-on-kubernetes/302432 "2022-04-15T09:10:12Z")
We want to add coordinate nodes to increase the performance. We have tried adding role : {} along with pod-affinity : {} but it doesn't create the coordinate nodes and marking yaml invalid. 3 master and 3 data nodes are… --- ## [Deployment of ElasticCloud turned pending status suddenly](https://discuss.elastic.co/t/deployment-of-elasticcloud-turned-pending-status-suddenly/302485)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 0\ **Last updated:** [April 15, 2022, 7:05am UTC](https://discuss.elastic.co/t/deployment-of-elasticcloud-turned-pending-status-suddenly/302485 "2022-04-15T07:05:53Z")
I am using ElasticCloud v.7.12.1 and it's status suddenly turned pending status. Why does that happen and not able to access Kibana during that time? This is the Summary of Activity during the time of pending. Additio… --- ## [Master\_not\_discovered\_exception](https://discuss.elastic.co/t/master-not-discovered-exception/301925)
**Author:** [@flavono123](https://discuss.elastic.co/u/flavono123)\ **Replies:** 19\ **Last updated:** [April 15, 2022, 6:20am UTC](https://discuss.elastic.co/t/master-not-discovered-exception/301925 "2022-04-15T06:20:21Z")
With the version 7.15.2 from ubuntu package, I deployed 4 ES nodes in 2 VMs, so 2 nodes fo r each VM. Names of nodes(node.name) are following: es-01-1(9301) es-01-2(9302) es-02-1(9301) es-02-2(9302) Where the prefix, … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=454) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=456)