# Latest **URL:** https://discuss.elastic.co/latest.md?page=1092 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1093 --- ## [Installing Elasticsearch and Kibana on kubernetes, what is next?](https://discuss.elastic.co/t/installing-elasticsearch-and-kibana-on-kubernetes-what-is-next/306968)
**Author:** [@levitoh123](https://discuss.elastic.co/u/levitoh123)\ **Replies:** 12\ **Last updated:** [June 14, 2022, 5:35am UTC](https://discuss.elastic.co/t/installing-elasticsearch-and-kibana-on-kubernetes-what-is-next/306968 "2022-06-14T05:35:20Z")
Hi, I'm very new to ELK, and I have a very rookie question. I want to monitor the applications running in our kubernetes solution and we chose ELK for it. I have followed the instructions on Deploy ECK in your Kubernetes… --- ## [Alternate for sub aggregation in elastic search](https://discuss.elastic.co/t/alternate-for-sub-aggregation-in-elastic-search/306423)
**Author:** [@khasim\_vali\_dudekula](https://discuss.elastic.co/u/khasim_vali_dudekula)\ **Replies:** 4\ **Last updated:** [June 14, 2022, 5:13am UTC](https://discuss.elastic.co/t/alternate-for-sub-aggregation-in-elastic-search/306423 "2022-06-14T05:13:44Z")
Hi I am new to Elasticsearch, and I'm writing a query using sub aggregations. I'm not sure whether it is okay in terms of performance or any other alternatives exist. please guide me. the query looks like this { "siz… --- ## [Fast&simple url short for Discover section?](https://discuss.elastic.co/t/fast-simple-url-short-for-discover-section/307023)
**Author:** [@xxddgert](https://discuss.elastic.co/u/xxddgert)\ **Replies:** 1\ **Last updated:** [June 14, 2022, 4:14am UTC](https://discuss.elastic.co/t/fast-simple-url-short-for-discover-section/307023 "2022-06-14T04:14:29Z")
Hi I have kibana 7.17.1 in which I applied some filters to some index pattern in discover section and I have such url now: https://kibana.example.com/app/discover#/?\_g=(filters:!(),refreshInterval:(pause:!t,value:0),ti… --- ## [Very basic question](https://discuss.elastic.co/t/very-basic-question/307042)
**Author:** [@stobbe99](https://discuss.elastic.co/u/stobbe99)\ **Replies:** 2\ **Last updated:** [June 14, 2022, 2:30am UTC](https://discuss.elastic.co/t/very-basic-question/307042 "2022-06-14T02:30:48Z")
Hello, What dataset do I need to load to make the documentation examples work? KR Henk --- ## [Registering Repository](https://discuss.elastic.co/t/registering-repository/306930)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 1\ **Last updated:** [June 14, 2022, 1:42am UTC](https://discuss.elastic.co/t/registering-repository/306930 "2022-06-14T01:42:26Z")
What is more applicable, turning On or Off source-only in registering repository? Upon my research, this is more advantage when it comes to lessen disk space, and by doing this, it only includes fields and metadata not … --- ## [No to use closing index while performing restore](https://discuss.elastic.co/t/no-to-use-closing-index-while-performing-restore/307027)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 1\ **Last updated:** [June 14, 2022, 1:32am UTC](https://discuss.elastic.co/t/no-to-use-closing-index-while-performing-restore/307027 "2022-06-14T01:32:07Z")
Is there any possible way or steps to not close the index while performing restore? If closing is the only way then it makes user life miserable to one by one closing indexes in order to perform restore. --- ## [Moving Elasticsearch Data to New Storage](https://discuss.elastic.co/t/moving-elasticsearch-data-to-new-storage/306658)
**Author:** [@Ryan66740](https://discuss.elastic.co/u/Ryan66740)\ **Replies:** 3\ **Last updated:** [June 14, 2022, 12:33am UTC](https://discuss.elastic.co/t/moving-elasticsearch-data-to-new-storage/306658 "2022-06-14T00:33:27Z")
I have an Elasticsearch Cluster (v5.6.9) - x2 Data Nodes Both Physical Servers with Storage on different 3PAR systems + x1 Master (Quorum VM). Having 2 Shards + 1 Replica. I need to migrate both Data Nodes' storage to n… --- ## [Ingest pipeline : dissect log sentence](https://discuss.elastic.co/t/ingest-pipeline-dissect-log-sentence/305690)
**Author:** [@Micou12](https://discuss.elastic.co/u/Micou12)\ **Replies:** 3\ **Last updated:** [June 14, 2022, 12:27am UTC](https://discuss.elastic.co/t/ingest-pipeline-dissect-log-sentence/305690 "2022-06-14T00:27:38Z")
Hello All , would like to request a help on how to split a sentence into small chunk . for example I am making a pipeline from custom integration through kibana dashboard , the log is like this: \[name=tamari.mpaka@apm.rw… --- ## [Data stream indices not moving from frozen to delete state](https://discuss.elastic.co/t/data-stream-indices-not-moving-from-frozen-to-delete-state/304622)
**Author:** [@elastictor](https://discuss.elastic.co/u/elastictor)\ **Replies:** 7\ **Last updated:** [June 14, 2022, 12:27am UTC](https://discuss.elastic.co/t/data-stream-indices-not-moving-from-frozen-to-delete-state/304622 "2022-06-14T00:27:04Z")
I have created a data stream with ILM with phases ranging from Hot to Deleted. The backing indices are successfully moved into Frozen state but never continue into the Deleted phase. Why are the indices not moving to d… --- ## [Is there a way to print the SQL with the jdbc\_streaming filter?](https://discuss.elastic.co/t/is-there-a-way-to-print-the-sql-with-the-jdbc-streaming-filter/307083)
**Author:** [@Chris\_Kessel](https://discuss.elastic.co/u/Chris_Kessel)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 11:50pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-print-the-sql-with-the-jdbc-streaming-filter/307083 "2022-06-13T23:50:43Z")
The jdbc input plugin conveniently prints the SQL that's being executed. Is there a way to do that with the jdbc\_streaming filter? --- ## [Logstash restarts every 13 seconds](https://discuss.elastic.co/t/logstash-restarts-every-13-seconds/306955)
**Author:** [@Wang\_Yin](https://discuss.elastic.co/u/Wang_Yin)\ **Replies:** 4\ **Last updated:** [June 13, 2022, 10:12pm UTC](https://discuss.elastic.co/t/logstash-restarts-every-13-seconds/306955 "2022-06-13T22:12:14Z")
Hi, I'm new to ELK, I noticed that the Logstash (version: 8.2.2) restarted every 13 seconds, the log I found in /var/log/logstash/logstash-plain.log suggested that there are some syntax error at line 26 of a certain fi… --- ## [Peoplesoft distributed elasticsearch](https://discuss.elastic.co/t/peoplesoft-distributed-elasticsearch/307079)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 9:49pm UTC](https://discuss.elastic.co/t/peoplesoft-distributed-elasticsearch/307079 "2022-06-13T21:49:05Z")
It seems that Peoplesoft uses Elasticsearch for some search functions? Our Peoplesoft is on-prem and someone is asking questions.... Is it a current version? I searched the web and only saw references from the Elastic… --- ## [Apm-agent-dotnet Errors after updating from 1.14.1 to 1.15.0+](https://discuss.elastic.co/t/apm-agent-dotnet-errors-after-updating-from-1-14-1-to-1-15-0/306350)
**Author:** [@GregS1](https://discuss.elastic.co/u/GregS1)\ **Replies:** 4\ **Last updated:** [June 13, 2022, 8:42pm UTC](https://discuss.elastic.co/t/apm-agent-dotnet-errors-after-updating-from-1-14-1-to-1-15-0/306350 "2022-06-13T20:42:40Z")
Hi, after updating one of our .NET 6 services to use Elastic.Apm.Azure.\* v1.15.0 (from 1.14.1), we started seeing this in our logs (and do on v1.16.0 as well) about every 30 seconds: {BackendCommComponentBase (CentralCo… --- ## [Transport 502 Error: Need Help Isolating Error](https://discuss.elastic.co/t/transport-502-error-need-help-isolating-error/306590)
**Author:** [@raphaelli1](https://discuss.elastic.co/u/raphaelli1)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 6:23pm UTC](https://discuss.elastic.co/t/transport-502-error-need-help-isolating-error/306590 "2022-06-13T18:23:20Z")
The command we are using is this: esrally race --track=http\_logs --target-hosts=\[IP address\] --pipeline=benchmark-only --report-file=es\_report\_E3\_32gb.md --report-format=csv --kill-running-processes The IP address is t… --- ## [How to Use Multiple Remote Hosts for Reindexing](https://discuss.elastic.co/t/how-to-use-multiple-remote-hosts-for-reindexing/307060)
**Author:** [@robromo](https://discuss.elastic.co/u/robromo)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 6:10pm UTC](https://discuss.elastic.co/t/how-to-use-multiple-remote-hosts-for-reindexing/307060 "2022-06-13T18:10:25Z")
I'm just trying to get some clarification on how to use multiple remote hosts for reindexing. It seems (from the official docs) you can list multiple old servers in your reindex.remote.whitelist easily with: reindex.re… --- ## [Searching for exact phrase with \[\] in kibana kql](https://discuss.elastic.co/t/searching-for-exact-phrase-with-in-kibana-kql/306989)
**Author:** [@Alireza\_Zabihi](https://discuss.elastic.co/u/Alireza_Zabihi)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 5:42pm UTC](https://discuss.elastic.co/t/searching-for-exact-phrase-with-in-kibana-kql/306989 "2022-06-13T17:42:26Z")
Hi, I want to filter messages by exact phrase like \[ERROR\] in message field, how can I do it ? I searched with this and many other syntaxes but it returned every error and warn messages. kubernetes.namespace :"my-names… --- ## [Kibana Permalink and Side panel not working after upgrade to 7.17.0-1](https://discuss.elastic.co/t/kibana-permalink-and-side-panel-not-working-after-upgrade-to-7-17-0-1/307058)
**Author:** [@racerx](https://discuss.elastic.co/u/racerx)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 5:41pm UTC](https://discuss.elastic.co/t/kibana-permalink-and-side-panel-not-working-after-upgrade-to-7-17-0-1/307058 "2022-06-13T17:41:07Z")
Hello Team, I recently upgraded a cluster from 7.9.3 to 7.17.0-1 and am facing some issues related to non-superusers. Problem #1: Users are unable to share permalinks - using the permalink returns a 404. Problem #2: U… --- ## [Logstash Elasticsearch Fail to Respond](https://discuss.elastic.co/t/logstash-elasticsearch-fail-to-respond/307040)
**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\ **Replies:** 8\ **Last updated:** [June 13, 2022, 5:39pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-fail-to-respond/307040 "2022-06-13T17:39:29Z")
Hello Everyone, I'm trying to connect Logstash to Elasticsearch. However, it fails with the message Failed to perform request {:message=\>"10.10.145.124:9200 failed to respond", :exception=\>Manticore::ClientProtocolExcep… --- ## [Coloration error in tournament mode](https://discuss.elastic.co/t/coloration-error-in-tournament-mode/307041)
**Author:** [@Gsqsf](https://discuss.elastic.co/u/Gsqsf)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 4:49pm UTC](https://discuss.elastic.co/t/coloration-error-in-tournament-mode/307041 "2022-06-13T16:49:53Z")
An upgrade in the range -90% percent take the color red for Mean Throughput Median Throughput Max Throughput --- ## [Elasticsearch Component Template Increase Total Mappings Limit](https://discuss.elastic.co/t/elasticsearch-component-template-increase-total-mappings-limit/307047)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-component-template-increase-total-mappings-limit/307047 "2022-06-13T16:21:23Z")
Hi All, I was wondering if there is a way to increase the total mappings limit on Component Template? I have a component template with \> 1000 mappings and am hitting the error: {"error":{"root\_cause":\[{"type":"illegal… --- ## [Manage pipeline launch order](https://discuss.elastic.co/t/manage-pipeline-launch-order/307052)
**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\ **Replies:** 4\ **Last updated:** [June 13, 2022, 4:19pm UTC](https://discuss.elastic.co/t/manage-pipeline-launch-order/307052 "2022-06-13T16:19:55Z")
Hi, I have a project with 8 pipelines that handle different data, some depend on the end of execution of other pipelines. Is there a way to schedule their execution and wait for some to finish executing before starting o… --- ## [Kibana Alerts - Action on Recovered still contains no context.group](https://discuss.elastic.co/t/kibana-alerts-action-on-recovered-still-contains-no-context-group/307050)
**Author:** [@Eiim](https://discuss.elastic.co/u/Eiim)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 3:04pm UTC](https://discuss.elastic.co/t/kibana-alerts-action-on-recovered-still-contains-no-context-group/307050 "2022-06-13T15:04:46Z")
This post asked about being able to use {{context.group}} in Recovered messages. Since then, the relevant pull request has been merged, seemingly for 8.2.0. However, this still doesn't seem to work in 8.2.0. Is it actual… --- ## [Side effect of command "elasticsearch-users useradd"](https://discuss.elastic.co/t/side-effect-of-command-elasticsearch-users-useradd/307044)
**Author:** [@luok0](https://discuss.elastic.co/u/luok0)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 2:23pm UTC](https://discuss.elastic.co/t/side-effect-of-command-elasticsearch-users-useradd/307044 "2022-06-13T14:23:23Z")
We have a superuser named "admin1" in config/users file, what would happen to admin1 if we add a new superuser "admin2" through below command, will it cover the existing admin1 as the only superuser and make admin1 not v… --- ## [Run elasticsearch on startup](https://discuss.elastic.co/t/run-elasticsearch-on-startup/307036)
**Author:** [@Franck\_LONGO](https://discuss.elastic.co/u/Franck_LONGO)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 1:18pm UTC](https://discuss.elastic.co/t/run-elasticsearch-on-startup/307036 "2022-06-13T13:18:07Z")
Hi there, I installed Nextcloud on Windows with WSL 2 and Elasticsearch. All is working great but I’m unable to run Elasticsearch on Windows Startup. I managed to have MYSQL, APACHE2 and CRON running on startup with th… --- ## [How to perform Index Stats API using NodeClient?](https://discuss.elastic.co/t/how-to-perform-index-stats-api-using-nodeclient/307002)
**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 12:47pm UTC](https://discuss.elastic.co/t/how-to-perform-index-stats-api-using-nodeclient/307002 "2022-06-13T12:47:18Z")
Hi, I am using ES 7.10.2 I have come across Index Stats API in ES documentation. Also in Java Lib there is class available named I did come across NodeClient, so I am trying to fetch index stats as below : NodeClient… --- ## [Old logs are not getting compressed](https://discuss.elastic.co/t/old-logs-are-not-getting-compressed/307029)
**Author:** [@Giri\_Dharan1](https://discuss.elastic.co/u/Giri_Dharan1)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 12:30pm UTC](https://discuss.elastic.co/t/old-logs-are-not-getting-compressed/307029 "2022-06-13T12:30:26Z")
I'm using the below code to delete and roll(compress) old logs ######## Server - old style pattern ########### appender.rolling\_old.type = RollingFile appender.rolling\_old.name = rolling\_old appender.rolling\_old.fil… --- ## [Query with multiple conditions on denormalized data](https://discuss.elastic.co/t/query-with-multiple-conditions-on-denormalized-data/307010)
**Author:** [@sherzinger](https://discuss.elastic.co/u/sherzinger)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 11:55am UTC](https://discuss.elastic.co/t/query-with-multiple-conditions-on-denormalized-data/307010 "2022-06-13T11:55:59Z")
Hi, I seem to be stuck formulating a certain query on a denormalized matrix. The original dataset looks like this: id fieldA fieldB fieldC "0001" 0.1 0.2 0.3 "0002" 0.4 0.5 0.6 ... In such a structure I can easily fin… --- ## [Highest ingestion speed](https://discuss.elastic.co/t/highest-ingestion-speed/307019)
**Author:** [@ktomu](https://discuss.elastic.co/u/ktomu)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 11:39am UTC](https://discuss.elastic.co/t/highest-ingestion-speed/307019 "2022-06-13T11:39:50Z")
Hi, I have a general architectical question I'm going to use Elasticsearch in the way of highest ingestion speed of data. I don't care about data save, the most important is throughput of data ingestion. I have 100k ne… --- ## [Folder status can be monitored via ELK](https://discuss.elastic.co/t/folder-status-can-be-monitored-via-elk/304519)
**Author:** [@rajvel](https://discuss.elastic.co/u/rajvel)\ **Replies:** 5\ **Last updated:** [June 13, 2022, 11:21am UTC](https://discuss.elastic.co/t/folder-status-can-be-monitored-via-elk/304519 "2022-06-13T11:21:22Z")
Hello Team, I would like to monitor folder date and time change, looks like some of the files will be written on the folder, i want to monitor the parent folder date and time. Please advise. --- ## [Optimization of function\_score's functions clause to adjust scores for a range of specific fields](https://discuss.elastic.co/t/optimization-of-function-scores-functions-clause-to-adjust-scores-for-a-range-of-specific-fields/307015)
**Author:** [@Yuki\_Akano](https://discuss.elastic.co/u/Yuki_Akano)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 10:29am UTC](https://discuss.elastic.co/t/optimization-of-function-scores-functions-clause-to-adjust-scores-for-a-range-of-specific-fields/307015 "2022-06-13T10:29:53Z")
Hi everyone, I want to adjust the score according to the range of a particular field in function\_score. For example, I have the following query in mind. { "query":{ "function\_score":{ "query": { ...… [Previous page](https://discuss.elastic.co/latest.md?page=1091) [Next page](https://discuss.elastic.co/latest.md?page=1093)