# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1676

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1677

---

## [GeoPoint vs GeoLocation and Search and Sorting](https://discuss.elastic.co/t/geopoint-vs-geolocation-and-search-and-sorting/273018)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 4\
**Last updated:** [May 17, 2021, 7:41am UTC](https://discuss.elastic.co/t/geopoint-vs-geolocation-and-search-and-sorting/273018 "2021-05-17T07:41:28Z")

</div>

Good morning, Now I'm beginning to work with geoLocations and I'm using the library nest to interact to ElasticSearch, but my first question is: Whats is more correct? GeoLocation type or geoPoint: Location "locatio…

---

## [Restarting elasticsearch (via systemctl): Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and "journalctl -xe" for details](https://discuss.elastic.co/t/restarting-elasticsearch-via-systemctl-job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-elasticsearch-service-and-journalctl-xe-for-details/273137)

<div class="topic-metadata">

**Author:** [@confidential](https://discuss.elastic.co/u/confidential)\
**Replies:** 1\
**Last updated:** [May 17, 2021, 7:39am UTC](https://discuss.elastic.co/t/restarting-elasticsearch-via-systemctl-job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-elasticsearch-service-and-journalctl-xe-for-details/273137 "2021-05-17T07:39:38Z")

</div>

Restarting elasticsearch (via systemctl): Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and "journalctl -xe" for details. ## JVM c…

---

## [How to avoid outputting filebeat logs to /var/log/messages](https://discuss.elastic.co/t/how-to-avoid-outputting-filebeat-logs-to-var-log-messages/272642)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 2\
**Last updated:** [May 17, 2021, 7:31am UTC](https://discuss.elastic.co/t/how-to-avoid-outputting-filebeat-logs-to-var-log-messages/272642 "2021-05-17T07:31:54Z")

</div>

I do not want to output filebeat logs to /var/log/messages. So, I configured to\_syslog and Environment, referring to the following article. However, they do not work. Can you please tell me how to do it correctly? H…

---

## [HPE\_INVALID\_CONSTANT nodejs elastic apm](https://discuss.elastic.co/t/hpe-invalid-constant-nodejs-elastic-apm/272795)

<div class="topic-metadata">

**Author:** [@Max\_Lee](https://discuss.elastic.co/u/Max_Lee)\
**Replies:** 2\
**Last updated:** [May 17, 2021, 7:13am UTC](https://discuss.elastic.co/t/hpe-invalid-constant-nodejs-elastic-apm/272795 "2021-05-17T07:13:11Z")

</div>

Kibana version : v7.12.1 Elasticsearch version : v7.12.1 APM Server version : v7.12.1 APM Agent language and version : nodejs : 12 fastify : 2.11.0 mongoose : 5.11.1 elastic-apm-node : 3.14.0 ioredis : 4.14.1 …

---

## [Need Help with Logstash Multiline Codec](https://discuss.elastic.co/t/need-help-with-logstash-multiline-codec/273134)

<div class="topic-metadata">

**Author:** [@Pemitha\_Randiya](https://discuss.elastic.co/u/Pemitha_Randiya)\
**Replies:** 0\
**Last updated:** [May 17, 2021, 7:01am UTC](https://discuss.elastic.co/t/need-help-with-logstash-multiline-codec/273134 "2021-05-17T07:01:39Z")

</div>

Here is my sample log data : 2021/05/17 12:17:41.866 | 382DC9789F284D3C9D7CC269F1851094|0000SUMMARY:\[INFO \]: 2021/05/17 12:17:41.866 |--------------------------------------------------------------------- 2021/05/1…

---

## [Does the index API block responses until the indexing process is through?](https://discuss.elastic.co/t/does-the-index-api-block-responses-until-the-indexing-process-is-through/273115)

<div class="topic-metadata">

**Author:** [@Courtan](https://discuss.elastic.co/u/Courtan)\
**Replies:** 9\
**Last updated:** [May 17, 2021, 6:54am UTC](https://discuss.elastic.co/t/does-the-index-api-block-responses-until-the-indexing-process-is-through/273115 "2021-05-17T06:54:14Z")

</div>

I am wondering wether the index API waits to return a response until the whole indexing process is complete. More specifically: When I send a document to the API for indexing, will ES only check wether the request, json…

---

## [How to use an array as a param for feature logging (Elasticsearch learning to rank plugin)](https://discuss.elastic.co/t/how-to-use-an-array-as-a-param-for-feature-logging-elasticsearch-learning-to-rank-plugin/273112)

<div class="topic-metadata">

**Author:** [@ndkmath1](https://discuss.elastic.co/u/ndkmath1)\
**Replies:** 4\
**Last updated:** [May 17, 2021, 6:41am UTC](https://discuss.elastic.co/t/how-to-use-an-array-as-a-param-for-feature-logging-elasticsearch-learning-to-rank-plugin/273112 "2021-05-17T06:41:02Z")

</div>

I want to create a feature in my featureset and its param is an array. I known how to use a single value for feature logging but I don't know how to use an array. I tried something like below but it didn't help. Do you h…

---

## [Impact of setting max\_inner\_result\_window at index level](https://discuss.elastic.co/t/impact-of-setting-max-inner-result-window-at-index-level/273128)

<div class="topic-metadata">

**Author:** [@surabhi11](https://discuss.elastic.co/u/surabhi11)\
**Replies:** 0\
**Last updated:** [May 17, 2021, 6:20am UTC](https://discuss.elastic.co/t/impact-of-setting-max-inner-result-window-at-index-level/273128 "2021-05-17T06:20:02Z")

</div>

Hi, We have a user index and it has recipients (nested object). Since recipients are saved in User domain as nested object, so in order to pull the recipients data with pagination we are using inner\_hits query in respe…

---

## [CPU loading: 100% under load after 10-12 hrs of usage](https://discuss.elastic.co/t/cpu-loading-100-under-load-after-10-12-hrs-of-usage/271041)

<div class="topic-metadata">

**Author:** [@Dmitry\_Uglatch](https://discuss.elastic.co/u/Dmitry_Uglatch)\
**Replies:** 8\
**Last updated:** [May 17, 2021, 6:06am UTC](https://discuss.elastic.co/t/cpu-loading-100-under-load-after-10-12-hrs-of-usage/271041 "2021-05-17T06:06:45Z")

</div>

Hello, we're switching from ES 5.5 to 7.12. After applying it works perfect for about 10-12 hrs: and then we get CPU loading: 100% Even simple queries: GET /products/\_search?size=0 works for 5-6 seconds. And it return…

---

## [Daily reingestion of data](https://discuss.elastic.co/t/daily-reingestion-of-data/272972)

<div class="topic-metadata">

**Author:** [@SamKidman](https://discuss.elastic.co/u/SamKidman)\
**Replies:** 2\
**Last updated:** [May 17, 2021, 4:42am UTC](https://discuss.elastic.co/t/daily-reingestion-of-data/272972 "2021-05-17T04:42:21Z")

</div>

We've had an elasticsearch setup for a while now that has worked by reingesting all data from a relational database into a new index in denormalised form. We now want to perform immediate updates to the data in elastics…

---

## [Watcher X-Pack Monitoring: Nodes Changed](https://discuss.elastic.co/t/watcher-x-pack-monitoring-nodes-changed/272473)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 14\
**Last updated:** [May 17, 2021, 4:24am UTC](https://discuss.elastic.co/t/watcher-x-pack-monitoring-nodes-changed/272473 "2021-05-17T04:24:06Z")

</div>

Hi I have a cluster with 4nodes of data and 1node for kibana. about 5 days ago one of the built-in watcher (Nodes Changed) run most of the times. { "watch\_id": "kVfChQJ8TWWjr5Mrbw\_nEg\_elasticsearch\_nodes", "node": …

---

## [Suggest score up by hit position](https://discuss.elastic.co/t/suggest-score-up-by-hit-position/273118)

<div class="topic-metadata">

**Author:** [@Yuya\_Takao](https://discuss.elastic.co/u/Yuya_Takao)\
**Replies:** 0\
**Last updated:** [May 17, 2021, 1:21am UTC](https://discuss.elastic.co/t/suggest-score-up-by-hit-position/273118 "2021-05-17T01:21:52Z")

</div>

Hi there, I want to suggest score up by hit position. Is there any idea? I know boost option, but I have no idea to score up by hit position. for example: \[search word 'a'\] largest score 'august' second largest sc…

---

## [Does indices()-\>refresh() wait for the completion of Bulk API?](https://discuss.elastic.co/t/does-indices-refresh-wait-for-the-completion-of-bulk-api/272914)

<div class="topic-metadata">

**Author:** [@Catalin](https://discuss.elastic.co/u/Catalin)\
**Replies:** 1\
**Last updated:** [May 17, 2021, 12:38am UTC](https://discuss.elastic.co/t/does-indices-refresh-wait-for-the-completion-of-bulk-api/272914 "2021-05-17T00:38:12Z")

</div>

In order to populate an index I have disabled its refresh\_interval and I'm using the Bulk API for inserting. The problem is I'm doing this in chunks of data and I need that after each chunk all the information is availa…

---

## [Reindex order](https://discuss.elastic.co/t/reindex-order/273114)

<div class="topic-metadata">

**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\
**Replies:** 3\
**Last updated:** [May 17, 2021, 12:36am UTC](https://discuss.elastic.co/t/reindex-order/273114 "2021-05-17T00:36:34Z")

</div>

Hello, Does the reindex save the original order of the documents? Does the answer the same when using slice? Thank you!

---

## [What happens to snapshots when a new node joins the cluster?](https://discuss.elastic.co/t/what-happens-to-snapshots-when-a-new-node-joins-the-cluster/272907)

<div class="topic-metadata">

**Author:** [@nadler](https://discuss.elastic.co/u/nadler)\
**Replies:** 1\
**Last updated:** [May 17, 2021, 12:36am UTC](https://discuss.elastic.co/t/what-happens-to-snapshots-when-a-new-node-joins-the-cluster/272907 "2021-05-17T00:36:19Z")

</div>

Hey all, I am implementing a backup and restore process on our clusters with hdfs and i was wandering what happens when a new node joins the cluster or an old one is replaced with a new machine? Because at first, we ne…

---

## [Secure Elasticsearch with LDAP or Active Directory - questions](https://discuss.elastic.co/t/secure-elasticsearch-with-ldap-or-active-directory-questions/272944)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 6:43pm UTC](https://discuss.elastic.co/t/secure-elasticsearch-with-ldap-or-active-directory-questions/272944 "2021-05-13T18:43:11Z")

</div>

Dears, Who can explain me the differences between two these methods of authentication? Active Directory user authentication vs LDAP user authentication On the base of Elastic documentation I understand that I need t…

---

## [Master nodes metrics](https://discuss.elastic.co/t/master-nodes-metrics/272994)

<div class="topic-metadata">

**Author:** [@Timur\_Makarchuk](https://discuss.elastic.co/u/Timur_Makarchuk)\
**Replies:** 1\
**Last updated:** [May 17, 2021, 12:28am UTC](https://discuss.elastic.co/t/master-nodes-metrics/272994 "2021-05-17T00:28:56Z")

</div>

What are some key metrics to monitor master nodes? We currently have a cluster with 30 nodes. We have 3 master-eligible nodes which also serve as data-nodes. I suspect our cluster is oversharded (~1500 shards per node)…

---

## [Setup logstash to stop reading a file after some time](https://discuss.elastic.co/t/setup-logstash-to-stop-reading-a-file-after-some-time/273117)

<div class="topic-metadata">

**Author:** [@Amit\_Singh3](https://discuss.elastic.co/u/Amit_Singh3)\
**Replies:** 1\
**Last updated:** [May 16, 2021, 10:33pm UTC](https://discuss.elastic.co/t/setup-logstash-to-stop-reading-a-file-after-some-time/273117 "2021-05-16T22:33:09Z")

</div>

We are using logstsash to read a folder to read logs, due to log rotation tons of files are being created in the folder, what if I want logstash to stop reading from a file if there is no new data in a file for 5 minute…

---

## [Ingest-convert.sh output incorrect for PaloAlto (pawn) Ingest Pipeline](https://discuss.elastic.co/t/ingest-convert-sh-output-incorrect-for-paloalto-pawn-ingest-pipeline/273076)

<div class="topic-metadata">

**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\
**Replies:** 1\
**Last updated:** [May 16, 2021, 4:38pm UTC](https://discuss.elastic.co/t/ingest-convert-sh-output-incorrect-for-paloalto-pawn-ingest-pipeline/273076 "2021-05-16T16:38:10Z")

</div>

Hi, I am planning to use Logstash instead of Filebeats for loading and parsing palo alto logs to Elastic. I setup the Filebeats as a one-time to generate the Ingest Pipeline Definition using the "pawn" Filebeats module…

---

## [Beats not able to connect with Logstash](https://discuss.elastic.co/t/beats-not-able-to-connect-with-logstash/273093)

<div class="topic-metadata">

**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\
**Replies:** 2\
**Last updated:** [May 16, 2021, 4:29pm UTC](https://discuss.elastic.co/t/beats-not-able-to-connect-with-logstash/273093 "2021-05-16T16:29:09Z")

</div>

Hi All, I have deployed ELK Stack using OSS versions Elasticsearch and Kibana. While connecting with Beats using Logstash, I am seeing following error on the system. Please can someone help me on this. Thanks \[2021-05-…

---

## [Kibana not accessible anymore when index was close](https://discuss.elastic.co/t/kibana-not-accessible-anymore-when-index-was-close/273075)

<div class="topic-metadata">

**Author:** [@blitzkrieg](https://discuss.elastic.co/u/blitzkrieg)\
**Replies:** 6\
**Last updated:** [May 16, 2021, 2:50pm UTC](https://discuss.elastic.co/t/kibana-not-accessible-anymore-when-index-was-close/273075 "2021-05-16T14:50:37Z")

</div>

Hi Guys, I'm new to elasticsearch and would like to ask your expertise about. We are using ECK 7.9.3 and trying to restore a snapshot however, I was advice that make sure that all indices are closed before restoring sn…

---

## [Index policy or Index template for Elasticsearh](https://discuss.elastic.co/t/index-policy-or-index-template-for-elasticsearh/272931)

<div class="topic-metadata">

**Author:** [@KA3AXCTAH](https://discuss.elastic.co/u/KA3AXCTAH)\
**Replies:** 1\
**Last updated:** [May 16, 2021, 2:00pm UTC](https://discuss.elastic.co/t/index-policy-or-index-template-for-elasticsearh/272931 "2021-05-16T14:00:43Z")

</div>

I have elasticsearch cluster for storing logs, and i have indices like this logs-2021.01.01 logs-2021.01.02 logs.2021.01.03 ...etc so indices creates at daily basis, and i have index template for this indices PUT \_ind…

---

## [\[Elasticsearch\] Estimating the duration of a reindex](https://discuss.elastic.co/t/elasticsearch-estimating-the-duration-of-a-reindex/272929)

<div class="topic-metadata">

**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\
**Replies:** 1\
**Last updated:** [May 16, 2021, 1:56pm UTC](https://discuss.elastic.co/t/elasticsearch-estimating-the-duration-of-a-reindex/272929 "2021-05-16T13:56:19Z")

</div>

Hello everybody, is it possible to estimate the duration of a reindex between one cluster and another? Knowing the total GB and the characteristics of the VMs hosting the Elasticsearchs. Thanks Daniele

---

## [Input file plugin](https://discuss.elastic.co/t/input-file-plugin/273109)

<div class="topic-metadata">

**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\
**Replies:** 0\
**Last updated:** [May 16, 2021, 12:14pm UTC](https://discuss.elastic.co/t/input-file-plugin/273109 "2021-05-16T12:14:16Z")

</div>

Question 1: Has anyone seen following message with input File plugin? \[2021-05-15T23:26:23,609\]\[DEBUG\]\[logstash.javapipeline \] Shutdown waiting for worker thread {:pipeline\_id=\>"rawdiameter1200", :thread=\>"#\<Thread:0…

---

## [Exclude classes from excluded classes](https://discuss.elastic.co/t/exclude-classes-from-excluded-classes/272542)

<div class="topic-metadata">

**Author:** [@tstadler](https://discuss.elastic.co/u/tstadler)\
**Replies:** 2\
**Last updated:** [May 16, 2021, 11:29am UTC](https://discuss.elastic.co/t/exclude-classes-from-excluded-classes/272542 "2021-05-16T11:29:16Z")

</div>

I would like to develop a plugin that instruments a class in org.jboss.as.ejb3.remote. However classes\_excluded\_from\_instrumentation\_default contains (?-i)org.jboss.as.\*, so my instrumentation is ignored by default. Is …

---

## [Unable to install output-jdbc plugin on logstash](https://discuss.elastic.co/t/unable-to-install-output-jdbc-plugin-on-logstash/273062)

<div class="topic-metadata">

**Author:** [@Anoop\_kumar\_SRIVASTA](https://discuss.elastic.co/u/Anoop_kumar_SRIVASTA)\
**Replies:** 1\
**Last updated:** [May 16, 2021, 10:42am UTC](https://discuss.elastic.co/t/unable-to-install-output-jdbc-plugin-on-logstash/273062 "2021-05-16T10:42:40Z")

</div>

Hi I am facing issue while connecting logstash output send to mysql database..below are my configuration setting output { jdbc{ driver\_jar\_path =\> "/app/logstash-CBS/mysql-connector-java-8.0.25.jar" driver\_class =\> …

---

## [Determining custom timestamp for new index does not work](https://discuss.elastic.co/t/determining-custom-timestamp-for-new-index-does-not-work/273106)

<div class="topic-metadata">

**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\
**Replies:** 0\
**Last updated:** [May 16, 2021, 10:27am UTC](https://discuss.elastic.co/t/determining-custom-timestamp-for-new-index-does-not-work/273106 "2021-05-16T10:27:45Z")

</div>

Hey, I have an index which is loaded with aggregated data each day at same time, like so: I'm trying to use logstash in order to migrate the data to another ES cluster in order to use machine learning capabilities t…

---

## [Should ordering of items in BulkRequest and BulkResponse match if java client BulkProcessor is used and requests are retried?](https://discuss.elastic.co/t/should-ordering-of-items-in-bulkrequest-and-bulkresponse-match-if-java-client-bulkprocessor-is-used-and-requests-are-retried/273101)

<div class="topic-metadata">

**Author:** [@Chobicus](https://discuss.elastic.co/u/Chobicus)\
**Replies:** 0\
**Last updated:** [May 16, 2021, 7:58am UTC](https://discuss.elastic.co/t/should-ordering-of-items-in-bulkrequest-and-bulkresponse-match-if-java-client-bulkprocessor-is-used-and-requests-are-retried/273101 "2021-05-16T07:58:35Z")

</div>

Based on the code that is used for retrying it seems that the ordering of items in BulkRequest and BulkResponse do not match. e.g. BulkRequest might contain items foo1, foo2, foo3... and the BulkResponse, if retry mechan…

---

## [dentityMapCodec has reached 100% capacity {:current\_size=\>20000, :upper\_limit=\>20000} warning: thread "\[main\]\<file" terminated with exception (report\_on\_exception is true):](https://discuss.elastic.co/t/dentitymapcodec-has-reached-100-capacity-current-size-20000-upper-limit-20000-warning-thread-main-file-terminated-with-exception-report-on-exception-is-true/273097)

<div class="topic-metadata">

**Author:** [@Bugsbee](https://discuss.elastic.co/u/Bugsbee)\
**Replies:** 4\
**Last updated:** [May 16, 2021, 4:08am UTC](https://discuss.elastic.co/t/dentitymapcodec-has-reached-100-capacity-current-size-20000-upper-limit-20000-warning-thread-main-file-terminated-with-exception-report-on-exception-is-true/273097 "2021-05-16T04:08:15Z")

</div>

Hi Team, Community A.Error Need your assistance in this error im getting: dentityMapCodec has reached 100% capacity {:current\_size=\>20000, :upper\_limit=\>20000} warning: thread "\[main\]\<file" terminated with exception (r…

---

## [What's the best practice to use metricbeat for prometeus protocol collection on Kubernetes cluster](https://discuss.elastic.co/t/whats-the-best-practice-to-use-metricbeat-for-prometeus-protocol-collection-on-kubernetes-cluster/273096)

<div class="topic-metadata">

**Author:** [@shoothzj](https://discuss.elastic.co/u/shoothzj)\
**Replies:** 0\
**Last updated:** [May 16, 2021, 1:04am UTC](https://discuss.elastic.co/t/whats-the-best-practice-to-use-metricbeat-for-prometeus-protocol-collection-on-kubernetes-cluster/273096 "2021-05-16T01:04:54Z")

</div>

We are deploying metricbeat as a daemon set to collect vm、docker metrics. It works well. If we want metricbeat to collect Pulsar、Flink(they are Deploy on k8s）'s prometheus metrics. Currently, I found that metricbeat pr…

[Previous page](https://discuss.elastic.co/latest.md?page=1675)

[Next page](https://discuss.elastic.co/latest.md?page=1677)
