# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1116

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1117

---

## [How to find which indices are mostly queried](https://discuss.elastic.co/t/how-to-find-which-indices-are-mostly-queried/305250)

<div class="topic-metadata">

**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\
**Replies:** 3\
**Last updated:** [May 25, 2022, 7:59pm UTC](https://discuss.elastic.co/t/how-to-find-which-indices-are-mostly-queried/305250 "2022-05-25T19:59:40Z")

</div>

Hi All, What is the best way to rank the indices in a cluster according to how many requests they get? API Index stats? Thank you in advance for your insights/opinons!

---

## [Improving runtime for dense embedding rescoring](https://discuss.elastic.co/t/improving-runtime-for-dense-embedding-rescoring/304445)

<div class="topic-metadata">

**Author:** [@armin20](https://discuss.elastic.co/u/armin20)\
**Replies:** 1\
**Last updated:** [May 25, 2022, 7:53pm UTC](https://discuss.elastic.co/t/improving-runtime-for-dense-embedding-rescoring/304445 "2022-05-25T19:53:07Z")

</div>

Hello, I'm using script\_score queries for rescoring search results using query and document embeddings. As expected, the runtime is notably longer than my baseline multi\_match queries and I'm looking into ways to work a…

---

## [Frozen Tier heap memory requirements](https://discuss.elastic.co/t/frozen-tier-heap-memory-requirements/305546)

<div class="topic-metadata">

**Author:** [@schapman](https://discuss.elastic.co/u/schapman)\
**Replies:** 10\
**Last updated:** [May 25, 2022, 7:20pm UTC](https://discuss.elastic.co/t/frozen-tier-heap-memory-requirements/305546 "2022-05-25T19:20:42Z")

</div>

This suggests keeping to less than 20 shards / GB of heap. But this blog post about the frozen tier seems to (if I read it correctly) benchmarked a test case with 12500 shards on a node with 29GB of heap for a ratio of …

---

## [Bug for sincedb with gz file](https://discuss.elastic.co/t/bug-for-sincedb-with-gz-file/305602)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 3\
**Last updated:** [May 25, 2022, 7:19pm UTC](https://discuss.elastic.co/t/bug-for-sincedb-with-gz-file/305602 "2022-05-25T19:19:16Z")

</div>

Hi I'm facing with issue for \*.xml.gz files generally issue was reproduced on gz compress files. Even on the latest version of logstash 8.2.1 When I recovered logstash service with sincedb configuration it seems that …

---

## [Mapper \[user\_agent.version\] cannot be changed from type \[text\] to \[keyword\] How to disable this warining?](https://discuss.elastic.co/t/mapper-user-agent-version-cannot-be-changed-from-type-text-to-keyword-how-to-disable-this-warining/305638)

<div class="topic-metadata">

**Author:** [@Sebastian\_Pacuk](https://discuss.elastic.co/u/Sebastian_Pacuk)\
**Replies:** 0\
**Last updated:** [May 25, 2022, 7:09pm UTC](https://discuss.elastic.co/t/mapper-user-agent-version-cannot-be-changed-from-type-text-to-keyword-how-to-disable-this-warining/305638 "2022-05-25T19:09:23Z")

</div>

I'm newbie to elasticsearch. What I want to do is to gather logs with filebeat from kubernetes cluster and send them to elasticsearch. My filebeat config file looks like this: \`filebeat.yml: | filebeat.inputs: type: …

---

## [Hide Search Bar and Time Control on Kibana Dashboard, ES 8.0](https://discuss.elastic.co/t/hide-search-bar-and-time-control-on-kibana-dashboard-es-8-0/305540)

<div class="topic-metadata">

**Author:** [@Miguel\_Frazao](https://discuss.elastic.co/u/Miguel_Frazao)\
**Replies:** 0\
**Last updated:** [May 24, 2022, 8:20pm UTC](https://discuss.elastic.co/t/hide-search-bar-and-time-control-on-kibana-dashboard-es-8-0/305540 "2022-05-24T20:20:44Z")

</div>

Hello I've been searching a lot for this but I didn't find any link that helped me. I made a Demo, no problem sharing here (https://flights-demo.migueldvl.com), but I would like to hide/remove (just) the search bar (KQL…

---

## [Performing operations on Scripted fields in painless](https://discuss.elastic.co/t/performing-operations-on-scripted-fields-in-painless/305403)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 5\
**Last updated:** [May 25, 2022, 6:46pm UTC](https://discuss.elastic.co/t/performing-operations-on-scripted-fields-in-painless/305403 "2022-05-25T18:46:52Z")

</div>

Can if conditions be performed on scripted fields in Kibana painless? For example, I have a scripted field "TAT" which is the difference in 2 times to return turn around time in minutes. I want to see values for TAT \> 9…

---

## [Search for values on a scripted fields](https://discuss.elastic.co/t/search-for-values-on-a-scripted-fields/305499)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 1\
**Last updated:** [May 25, 2022, 5:50pm UTC](https://discuss.elastic.co/t/search-for-values-on-a-scripted-fields/305499 "2022-05-25T17:50:10Z")

</div>

Once a scripted field is created, is it possible to query a search on the values on the scripted field? For example, here I created a scripted field SLA\_Check but when I try to filter for certain values on this field, n…

---

## [Data specification help](https://discuss.elastic.co/t/data-specification-help/305066)

<div class="topic-metadata">

**Author:** [@Vishwajeet\_Kumar](https://discuss.elastic.co/u/Vishwajeet_Kumar)\
**Replies:** 9\
**Last updated:** [May 25, 2022, 5:43pm UTC](https://discuss.elastic.co/t/data-specification-help/305066 "2022-05-25T17:43:14Z")

</div>

i'm trying to fetch some data from my index based on the event name matching exactly certain keyword but the catch is that i need the data of the current week and the previous week and also for few more previous weeks li…

---

## [Search in elasticsearch 8](https://discuss.elastic.co/t/search-in-elasticsearch-8/305493)

<div class="topic-metadata">

**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\
**Replies:** 5\
**Last updated:** [May 25, 2022, 4:06pm UTC](https://discuss.elastic.co/t/search-in-elasticsearch-8/305493 "2022-05-25T16:06:24Z")

</div>

Hi, In v.7.X the search performed as follow: searchResponse = client.search(searchRequest, RequestOptions.DEFAULT); How do I perform search in v.8 without defining the target class for the matching documents. (I want …

---

## [Restricting kibana watchers across spaces](https://discuss.elastic.co/t/restricting-kibana-watchers-across-spaces/304496)

<div class="topic-metadata">

**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Replies:** 5\
**Last updated:** [May 25, 2022, 3:48pm UTC](https://discuss.elastic.co/t/restricting-kibana-watchers-across-spaces/304496 "2022-05-25T15:48:34Z")

</div>

Hi Team, We are using Elastic cloud 7.16.2 version and we are using spaces to restrict users to access only the data related to them. Now we want to provide access to them to create and manage kibana watchers by themsel…

---

## [Multiple Nested Object Function Scoring](https://discuss.elastic.co/t/multiple-nested-object-function-scoring/305626)

<div class="topic-metadata">

**Author:** [@vp\_tech](https://discuss.elastic.co/u/vp_tech)\
**Replies:** 0\
**Last updated:** [May 25, 2022, 3:32pm UTC](https://discuss.elastic.co/t/multiple-nested-object-function-scoring/305626 "2022-05-25T15:32:32Z")

</div>

ES Version: 6.8 I have an index storing documents that contain a list of nested tag objects. Each tag object has a text field (for the tag itself) and a float field representing a weight that describes the strength of as…

---

## [Combine knn score and match score](https://discuss.elastic.co/t/combine-knn-score-and-match-score/304032)

<div class="topic-metadata">

**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\
**Replies:** 2\
**Last updated:** [May 25, 2022, 3:13pm UTC](https://discuss.elastic.co/t/combine-knn-score-and-match-score/304032 "2022-05-25T15:13:37Z")

</div>

hi, my index has one knn vector field and one text field. I would like to create a search query which score would combile a score of KNN vector(cosinemil) and match score . Also I would like to boost KNN score so it can…

---

## [Painless script with GeoShape type query](https://discuss.elastic.co/t/painless-script-with-geoshape-type-query/304647)

<div class="topic-metadata">

**Author:** [@kindchri](https://discuss.elastic.co/u/kindchri)\
**Replies:** 5\
**Last updated:** [May 25, 2022, 2:40pm UTC](https://discuss.elastic.co/t/painless-script-with-geoshape-type-query/304647 "2022-05-25T14:40:21Z")

</div>

I'm trying to create a runtime field in a search request Link to documentation. In the script for the field I need to check if a geo point (lat, lng) in a field on the document is within a poiygon/bounding box that is p…

---

## [All of my documents have specific field but I get "A document doesn't have a value for a field! Use doc\[\<field\>\].size()==0 to check if a document is missing a field!"](https://discuss.elastic.co/t/all-of-my-documents-have-specific-field-but-i-get-a-document-doesnt-have-a-value-for-a-field-use-doc-field-size-0-to-check-if-a-document-is-missing-a-field/304969)

<div class="topic-metadata">

**Author:** [@msln](https://discuss.elastic.co/u/msln)\
**Replies:** 1\
**Last updated:** [May 25, 2022, 2:38pm UTC](https://discuss.elastic.co/t/all-of-my-documents-have-specific-field-but-i-get-a-document-doesnt-have-a-value-for-a-field-use-doc-field-size-0-to-check-if-a-document-is-missing-a-field/304969 "2022-05-25T14:38:46Z")

</div>

when I run following query: GET /annotations/\_search { "query": { "match\_all": {} } } I receive following response: { "took" : 1, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1,…

---

## [Unable to connect 502 during a bulk document upload](https://discuss.elastic.co/t/unable-to-connect-502-during-a-bulk-document-upload/305527)

<div class="topic-metadata">

**Author:** [@lukelindner01](https://discuss.elastic.co/u/lukelindner01)\
**Replies:** 3\
**Last updated:** [May 25, 2022, 2:29pm UTC](https://discuss.elastic.co/t/unable-to-connect-502-during-a-bulk-document-upload/305527 "2022-05-25T14:29:00Z")

</div>

Heya. I'm new with Elastic Search and AppSearch but we have setup an engine and am attempting to bulk upload a 100 documents per request and up to 1000 requests, throttled to 10 at a time via a semaphore (c#). I keep on …

---

## [APM docker image for node.js application](https://discuss.elastic.co/t/apm-docker-image-for-node-js-application/305593)

<div class="topic-metadata">

**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Replies:** 1\
**Last updated:** [May 25, 2022, 2:26pm UTC](https://discuss.elastic.co/t/apm-docker-image-for-node-js-application/305593 "2022-05-25T14:26:31Z")

</div>

Hi Team, We are trying to find a docker image for APM installtion for one of our node.js application. Elasticsearch version: Elastic cloud - 7.17.3 like - docker.elastic.co/observability/apm-agent-java:1.29.0 Could y…

---

## [Connecting to remote fleet server](https://discuss.elastic.co/t/connecting-to-remote-fleet-server/305523)

<div class="topic-metadata">

**Author:** [@manpreet](https://discuss.elastic.co/u/manpreet)\
**Replies:** 3\
**Last updated:** [May 25, 2022, 2:21pm UTC](https://discuss.elastic.co/t/connecting-to-remote-fleet-server/305523 "2022-05-25T14:21:06Z")

</div>

When configuring fleet server on the kubernetes cluster running the elasticssearch/kibana as well works, but when I try to use the same fleet server from a remote cluster the config I receive points to the "service" url…

---

## [Using a Variable in Canvas Render CSS](https://discuss.elastic.co/t/using-a-variable-in-canvas-render-css/305618)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 1\
**Last updated:** [May 25, 2022, 2:19pm UTC](https://discuss.elastic.co/t/using-a-variable-in-canvas-render-css/305618 "2022-05-25T14:19:30Z")

</div>

Hi All, I have a need to use a variable in Canvas' render CSS, but I can't find a way to do this. I'm effectively trying to do some math on an animation to be able to handle variable length text. Canvas simplified exa…

---

## [Setting Environment for Traces Collected by OpenTelemetry Collector](https://discuss.elastic.co/t/setting-environment-for-traces-collected-by-opentelemetry-collector/304160)

<div class="topic-metadata">

**Author:** [@Hans\_Knecht](https://discuss.elastic.co/u/Hans_Knecht)\
**Replies:** 2\
**Last updated:** [May 25, 2022, 2:12pm UTC](https://discuss.elastic.co/t/setting-environment-for-traces-collected-by-opentelemetry-collector/304160 "2022-05-25T14:12:51Z")

</div>

Kibana version: 7.17.2 Elasticsearch version: 7.17.2 APM Server version: 7.17.2 APM Agent language and version: Open Telemetry Collector Browser version: N/A Original install method (e.g. download page, yum, deb, fr…

---

## [AWS integration with Elasticsearch](https://discuss.elastic.co/t/aws-integration-with-elasticsearch/305284)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 5\
**Last updated:** [May 25, 2022, 1:52pm UTC](https://discuss.elastic.co/t/aws-integration-with-elasticsearch/305284 "2022-05-25T13:52:48Z")

</div>

I am trying to setup AWS integration with Elasticsearch 7.17.3 and have had some success. I am not able to get data for few services and the filebeat.json log shows the below error. I am seeing the region code twice in …

---

## [Indices not creating after logstah starting with Systemctl service](https://discuss.elastic.co/t/indices-not-creating-after-logstah-starting-with-systemctl-service/304871)

<div class="topic-metadata">

**Author:** [@Karthik9099](https://discuss.elastic.co/u/Karthik9099)\
**Replies:** 25\
**Last updated:** [May 25, 2022, 1:04pm UTC](https://discuss.elastic.co/t/indices-not-creating-after-logstah-starting-with-systemctl-service/304871 "2022-05-25T13:04:53Z")

</div>

Logstash not creating indices when I use the below command sudo systemctl start logstash.service If I run below command then indices creating successfully and pulling the data bin/logstash -f /etc/logstash/conf.d/logs…

---

## [Dashboards and index patterns lost after every upgrade](https://discuss.elastic.co/t/dashboards-and-index-patterns-lost-after-every-upgrade/305155)

<div class="topic-metadata">

**Author:** [@Roberto\_D\_Arco](https://discuss.elastic.co/u/Roberto_D_Arco)\
**Replies:** 4\
**Last updated:** [May 25, 2022, 12:50pm UTC](https://discuss.elastic.co/t/dashboards-and-index-patterns-lost-after-every-upgrade/305155 "2022-05-25T12:50:48Z")

</div>

Hello, I 'inherited' the clusters so I don't know the details of 'how we reached this situation', but I hope that the facts that I have will be enough to have a possible solution. I have 3 very similar clusters: staging…

---

## [Regarding Snapshots](https://discuss.elastic.co/t/regarding-snapshots/305595)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [May 25, 2022, 12:32pm UTC](https://discuss.elastic.co/t/regarding-snapshots/305595 "2022-05-25T12:32:13Z")

</div>

Hi, Is it possible, at snapshot time, to snapshot only primary shards? Thx D

---

## [Possible de corriger les anomalies?](https://discuss.elastic.co/t/possible-de-corriger-les-anomalies/305579)

<div class="topic-metadata">

**Author:** [@Merveille\_Kimfuta](https://discuss.elastic.co/u/Merveille_Kimfuta)\
**Replies:** 2\
**Last updated:** [May 25, 2022, 12:16pm UTC](https://discuss.elastic.co/t/possible-de-corriger-les-anomalies/305579 "2022-05-25T12:16:45Z")

</div>

Bonjour, Je dois remplacer un outil de log management interne par ELK pour un client et je cherche à savoir si ELK a ces fonctionnalités (je ne trouve pas d'informations la dessus :/) Est-il possible de corriger manuel…

---

## [Stacked Bar with text labels on it](https://discuss.elastic.co/t/stacked-bar-with-text-labels-on-it/305576)

<div class="topic-metadata">

**Author:** [@nikaes](https://discuss.elastic.co/u/nikaes)\
**Replies:** 2\
**Last updated:** [May 25, 2022, 11:56am UTC](https://discuss.elastic.co/t/stacked-bar-with-text-labels-on-it/305576 "2022-05-25T11:56:28Z")

</div>

Hi All, when the splitted values are too much appart from each other, the stacked bar visualization is difficult to read. I would like to have fixed sized splits with text labels on them. See the picture below: i…

---

## [Metricbeat does not properly extract elasticsearch metrics in kubernetes using Helm](https://discuss.elastic.co/t/metricbeat-does-not-properly-extract-elasticsearch-metrics-in-kubernetes-using-helm/304698)

<div class="topic-metadata">

**Author:** [@Enric\_Rubio](https://discuss.elastic.co/u/Enric_Rubio)\
**Replies:** 6\
**Last updated:** [May 25, 2022, 11:39am UTC](https://discuss.elastic.co/t/metricbeat-does-not-properly-extract-elasticsearch-metrics-in-kubernetes-using-helm/304698 "2022-05-25T11:39:54Z")

</div>

Good afternoon, I am trying to deploy metricbeat and kibana to kubernetes in google cloud using Helm. My aim is to collect data to benchmark elastic while running migrations to find out what resources does Elasticsearch…

---

## [Logstash Keystore No java.exe executable found on PATH](https://discuss.elastic.co/t/logstash-keystore-no-java-exe-executable-found-on-path/304008)

<div class="topic-metadata">

**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\
**Replies:** 5\
**Last updated:** [May 25, 2022, 11:31am UTC](https://discuss.elastic.co/t/logstash-keystore-no-java-exe-executable-found-on-path/304008 "2022-05-25T11:31:16Z")

</div>

Hello, I am trying to use the keystore, that the passwords in the pipeline are not in plain text. I did not download any JDK. I used the bundled jdk which is included in the logstash download. I am getting these messag…

---

## [Getting first 3 characters of month from date](https://discuss.elastic.co/t/getting-first-3-characters-of-month-from-date/305590)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 1\
**Last updated:** [May 25, 2022, 11:25am UTC](https://discuss.elastic.co/t/getting-first-3-characters-of-month-from-date/305590 "2022-05-25T11:25:11Z")

</div>

How can we get only the first three characters of the month from a date field using a scripted field in kibana painless? Using getMonth() fetches the entire month. thanks

---

## [Elasticsearch : Access the lemmas of the analyzed text](https://discuss.elastic.co/t/elasticsearch-access-the-lemmas-of-the-analyzed-text/305597)

<div class="topic-metadata">

**Author:** [@dpappas](https://discuss.elastic.co/u/dpappas)\
**Replies:** 0\
**Last updated:** [May 25, 2022, 11:02am UTC](https://discuss.elastic.co/t/elasticsearch-access-the-lemmas-of-the-analyzed-text/305597 "2022-05-25T11:02:19Z")

</div>

Hi everyone! I would like to extract the lemmatized form of the tokens instead of the stemmed form of the tokens. I know that I could get the stems using the following code curl -X GET "localhost:9200/\_analyze?pretty"…

[Previous page](https://discuss.elastic.co/latest.md?page=1115)

[Next page](https://discuss.elastic.co/latest.md?page=1117)
