# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1243 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1244 --- ## [Elastic Cluster Good Configuration for better performance](https://discuss.elastic.co/t/elastic-cluster-good-configuration-for-better-performance/248144)
**Author:** [@Naveena1](https://discuss.elastic.co/u/Naveena1)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 10:46am UTC](https://discuss.elastic.co/t/elastic-cluster-good-configuration-for-better-performance/248144 "2020-09-10T10:46:12Z")
Hi Team, Please help me with good configuration for the cluster to improve the performance. My requirement was :- we are using Cluster 7.9.1 We have an employee table which has around 30 columns and total records i… --- ## [Create Offline Index using File](https://discuss.elastic.co/t/create-offline-index-using-file/248145)
**Author:** [@Naveena1](https://discuss.elastic.co/u/Naveena1)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 10:44am UTC](https://discuss.elastic.co/t/create-offline-index-using-file/248145 "2020-09-10T10:44:07Z")
Hi , Is it possible to create offline index ?. Can we create index using a file which has data in it. --- ## [Is it normal for cluster to turn "Yellow" daily briefly during heavy indexing to existing index?](https://discuss.elastic.co/t/is-it-normal-for-cluster-to-turn-yellow-daily-briefly-during-heavy-indexing-to-existing-index/248098)
**Author:** [@vorapoap](https://discuss.elastic.co/u/vorapoap)\ **Replies:** 3\ **Last updated:** [September 10, 2020, 9:59am UTC](https://discuss.elastic.co/t/is-it-normal-for-cluster-to-turn-yellow-daily-briefly-during-heavy-indexing-to-existing-index/248098 "2020-09-10T09:59:19Z")
Cluster configuration: 3 Dedicated Master Node 15 Data nodes 0-all Replica (meaning the replica on every data node) The index is pre created. --- ## [Logstash Error while replicating Data from Oracle to Elasticsearch](https://discuss.elastic.co/t/logstash-error-while-replicating-data-from-oracle-to-elasticsearch/248140)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 9:58am UTC](https://discuss.elastic.co/t/logstash-error-while-replicating-data-from-oracle-to-elasticsearch/248140 "2020-09-10T09:58:17Z")
Hi I am using Elasticsearch version 7.8.0 , Logtash version 7.8.0 RDBMS : Oracle I have configured Logstash to move data from Oracle to Elasticsearch of particular table on continuity basis. Logstash.conf file -- \> … --- ## [\[Elastic Cloud/ Elasticsearch service\] Latest change to Elasticsearch configuration failed](https://discuss.elastic.co/t/elastic-cloud-elasticsearch-service-latest-change-to-elasticsearch-configuration-failed/247781)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 9:55am UTC](https://discuss.elastic.co/t/elastic-cloud-elasticsearch-service-latest-change-to-elasticsearch-configuration-failed/247781 "2020-09-10T09:55:13Z")
Hello, ELK 7.9.1 After a long weekend ... Have noticed something on our current deployment on Elastic Cloud/ Elasticsearch service. The below health warning as been issued and I am a little confused as to yet at the mo… --- ## [Unable to delete the Elasticsearch pods](https://discuss.elastic.co/t/unable-to-delete-the-elasticsearch-pods/248139)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 9:04am UTC](https://discuss.elastic.co/t/unable-to-delete-the-elasticsearch-pods/248139 "2020-09-10T09:04:25Z")
we are deleting the elasticsearch cluster (deleting elasticsearch\_cr and operator files by using kubectl commad). When I am doing 'kubectl get elasticsearch' not able to see anything .But pods(elastic operator, master, d… --- ## [Failed to execute \`flush synced\`](https://discuss.elastic.co/t/failed-to-execute-flush-synced/248138)
**Author:** [@vincentduan](https://discuss.elastic.co/u/vincentduan)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 9:00am UTC](https://discuss.elastic.co/t/failed-to-execute-flush-synced/248138 "2020-09-10T09:00:48Z")
Elasticsearch version 6.2.3 I execute curl -XPOST ''http://192.168.2.201:9203/myindex/\_flush/synced" . The result shows as follows: { "\_shards":{ "total": 10, "successful": 6, "failed": 4 }, "myindex" : { … --- ## [Can we backup log in kibana](https://discuss.elastic.co/t/can-we-backup-log-in-kibana/248102)
**Author:** [@syafeera](https://discuss.elastic.co/u/syafeera)\ **Replies:** 9\ **Last updated:** [September 10, 2020, 8:53am UTC](https://discuss.elastic.co/t/can-we-backup-log-in-kibana/248102 "2020-09-10T08:53:36Z")
Hi can we backup our log in kibana? --- ## [Very large delete\_by\_query - supported?](https://discuss.elastic.co/t/very-large-delete-by-query-supported/247891)
**Author:** [@aidofitz](https://discuss.elastic.co/u/aidofitz)\ **Replies:** 5\ **Last updated:** [September 10, 2020, 8:42am UTC](https://discuss.elastic.co/t/very-large-delete-by-query-supported/247891 "2020-09-10T08:42:25Z")
Hi, I'm trying to run a very large \_delete\_by\_query, targeting ~1.5 billion documents in an index, amounting to 100's of GB of data. This is from a single index and in the context of a overall ES cluster side of ~80Tb. … --- ## [【ダッシュボード】URLのリンクについて](https://discuss.elastic.co/t/url/247690)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 8:20am UTC](https://discuss.elastic.co/t/url/247690 "2020-09-10T08:20:42Z")
お世話になります。 ダッシュボードの機能に関して、ご質問します。 ダッシュボードにて、Discoverで作成したindex項目一覧の掲載を検討しています。 index一覧に「WebサイトのURL」がある場合、URLを押下してWebサイトに遷移する方法はありますでしょうか？ （項目のtypeがStringだと実現出来ないと思いますが、何かしらのtypeを指定すれば実現出来ますでしょうか） 例)下記「WebURL」を押下するとgo… --- ## [Data Import not Analysing all Lines Present in Document](https://discuss.elastic.co/t/data-import-not-analysing-all-lines-present-in-document/248127)
**Author:** [@Broggy-Git](https://discuss.elastic.co/u/Broggy-Git)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 7:54am UTC](https://discuss.elastic.co/t/data-import-not-analysing-all-lines-present-in-document/248127 "2020-09-10T07:54:01Z")
Recently I have tried to import a json file to test the visualization feature. In Visual Studio, I see that the file reaches 954 lines in length. I have noticed, however, that when imported the lines of text at the end … --- ## [Identifying corrupt indices](https://discuss.elastic.co/t/identifying-corrupt-indices/248123)
**Author:** [@Nkrb](https://discuss.elastic.co/u/Nkrb)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:51am UTC](https://discuss.elastic.co/t/identifying-corrupt-indices/248123 "2020-09-10T07:51:34Z")
Hi All, We have a single node elasticsearch having good amount of storage. It has been working fine since last one year and suddenly stopped working, seems due to data corruption. I can see few indices, for which state… --- ## [ES shards data rebalancing](https://discuss.elastic.co/t/es-shards-data-rebalancing/248001)
**Author:** [@gintek](https://discuss.elastic.co/u/gintek)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 7:07am UTC](https://discuss.elastic.co/t/es-shards-data-rebalancing/248001 "2020-09-10T07:07:25Z")
Hello, I'm wondering how are you guys doing with data rebalancing on large clusters ? We have 3 masters, 3 hot nodes and 6 cold. Some cold nodes have 4T disk and few 2T. ES is rebalancing shards based on number shards p… --- ## [Help: How to filter unwanted metadata and fields from filebeats](https://discuss.elastic.co/t/help-how-to-filter-unwanted-metadata-and-fields-from-filebeats/245685)
**Author:** [@Moksha20](https://discuss.elastic.co/u/Moksha20)\ **Replies:** 6\ **Last updated:** [September 10, 2020, 6:18am UTC](https://discuss.elastic.co/t/help-how-to-filter-unwanted-metadata-and-fields-from-filebeats/245685 "2020-09-10T06:18:10Z")
I am very new to this filebeat shipping thing. Once I ship the log to kibana I am getting so many meta data field both for kibana and filebeat...now I can filter it in kibana visualization but is there any way to filter… --- ## [【ingest node】JSON processor 配列のパース処理に関して](https://discuss.elastic.co/t/ingest-node-json-processor/246385)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 5:50am UTC](https://discuss.elastic.co/t/ingest-node-json-processor/246385 "2020-09-10T05:50:07Z")
お世話になります。 Ingest nodeのJSON processorに関して質問させて頂きます。 以下にてmessage("objects"の配列に"references"の配列がネストされている)のデータをJSON processorを使いパース処理を検証しています。 Simulate上、"references"は"json\_target.objects"の値となっていますが、 "json\_target.objects"と… --- ## [Plugin - How to intercept a shard query phase and reject?](https://discuss.elastic.co/t/plugin-how-to-intercept-a-shard-query-phase-and-reject/248108)
**Author:** [@araniera](https://discuss.elastic.co/u/araniera)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 5:32am UTC](https://discuss.elastic.co/t/plugin-how-to-intercept-a-shard-query-phase-and-reject/248108 "2020-09-10T05:32:00Z")
Hello, am toying with a plugin and am trying to add some behavior where I can intercept a query happening at the shard level. This can be done it seems through the SearchOperationListener with the onPreQueryPhase and on… --- ## [How to grant read only permission to aws cognito user to access kibana](https://discuss.elastic.co/t/how-to-grant-read-only-permission-to-aws-cognito-user-to-access-kibana/248031)
**Author:** [@Dheeraj\_Bhargav](https://discuss.elastic.co/u/Dheeraj_Bhargav)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 4:05am UTC](https://discuss.elastic.co/t/how-to-grant-read-only-permission-to-aws-cognito-user-to-access-kibana/248031 "2020-09-10T04:05:42Z")
How to grant read-only permission to AWS Cognito user to access kibana in read-only. The user should not change anything in kibana. --- ## [Can es shards allocate to nodes based on disk capacity？](https://discuss.elastic.co/t/can-es-shards-allocate-to-nodes-based-on-disk-capacity/248096)
**Author:** [@taidengpub](https://discuss.elastic.co/u/taidengpub)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 3:25am UTC](https://discuss.elastic.co/t/can-es-shards-allocate-to-nodes-based-on-disk-capacity/248096 "2020-09-10T03:25:20Z")
https://www.elastic.co/guide/en/elasticsearch/reference/7.8/modules-cluster.html#cluster-shard-allocation-settings es doc said cluster.routing.allocation.disk.threshold\_enabled can control shard allocate when some node … --- ## [Auto\_flush\_interval not working inside my exec plugin](https://discuss.elastic.co/t/auto-flush-interval-not-working-inside-my-exec-plugin/247990)
**Author:** [@sharma\_yash](https://discuss.elastic.co/u/sharma_yash)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 1:09am UTC](https://discuss.elastic.co/t/auto-flush-interval-not-working-inside-my-exec-plugin/247990 "2020-09-10T01:09:47Z")
Hi, I am executing a command using exec plugin. I am getting the response OK. I wanted to keep all the response lines in a single event. exec{ command =\> "my command" interval =\> 300 # To tackle this, I use multiline … --- ## [ElasticSearch(7.7.1) become unresponsive for sometime due to circuit breaker](https://discuss.elastic.co/t/elasticsearch-7-7-1-become-unresponsive-for-sometime-due-to-circuit-breaker/248004)
**Author:** [@het](https://discuss.elastic.co/u/het)\ **Replies:** 1\ **Last updated:** [September 9, 2020, 11:47pm UTC](https://discuss.elastic.co/t/elasticsearch-7-7-1-become-unresponsive-for-sometime-due-to-circuit-breaker/248004 "2020-09-09T23:47:11Z")
Hi Team, I am using elasticsearch 7.7.1. I have 3 data nodes(31GB) and 3 master nodes(16GB). With a heavy load, I am getting below error and I can not see my data node on the monitoring tool for 10-15 mins, also at that… --- ## [How to lock the current allocation state](https://discuss.elastic.co/t/how-to-lock-the-current-allocation-state/248072)
**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\ **Replies:** 1\ **Last updated:** [September 9, 2020, 11:44pm UTC](https://discuss.elastic.co/t/how-to-lock-the-current-allocation-state/248072 "2020-09-09T23:44:18Z")
When cluster.routing.rebalance.enable is set to none, I understand that we are lokcing the current allocation state of the cluster. i.e. the currenlty allocated shards will not relocate to other nodes. But what happens … --- ## [Inaccessibility of Path.repo location cause primary shard corruption?](https://discuss.elastic.co/t/inaccessibility-of-path-repo-location-cause-primary-shard-corruption/248046)
**Author:** [@amit.karir](https://discuss.elastic.co/u/amit.karir)\ **Replies:** 1\ **Last updated:** [September 9, 2020, 11:39pm UTC](https://discuss.elastic.co/t/inaccessibility-of-path-repo-location-cause-primary-shard-corruption/248046 "2020-09-09T23:39:45Z")
Hi, Can Inaccessibility of Path.repo location cause primary shard corruption or being unassigned? --- ## [Large data migration failure](https://discuss.elastic.co/t/large-data-migration-failure/246901)
**Author:** [@chen\_steven](https://discuss.elastic.co/u/chen_steven)\ **Replies:** 13\ **Last updated:** [September 9, 2020, 8:20pm UTC](https://discuss.elastic.co/t/large-data-migration-failure/246901 "2020-09-09T20:20:01Z")
Background: I need to migrate my data from 1 cloud service provider to another, and I pick the solution of add new nodes in current cluster, wait for data copy and rebalance and separate them into 2 clusters. But after… --- ## [Indexing the query reslut directly to the same elasticsearch](https://discuss.elastic.co/t/indexing-the-query-reslut-directly-to-the-same-elasticsearch/247953)
**Author:** [@Mohammadreza\_Niknam](https://discuss.elastic.co/u/Mohammadreza_Niknam)\ **Replies:** 3\ **Last updated:** [September 9, 2020, 10:49pm UTC](https://discuss.elastic.co/t/indexing-the-query-reslut-directly-to-the-same-elasticsearch/247953 "2020-09-09T22:49:56Z")
Hi all, I have only access to the Kibana (I don't have access to ES) and I was wondering whether it is possible to index the result of my query into a new index directly into the same ES? or I need to have access to ES … --- ## [How to backup/restore?](https://discuss.elastic.co/t/how-to-backup-restore/194541)
**Author:** [@tew](https://discuss.elastic.co/u/tew)\ **Replies:** 8\ **Last updated:** [September 9, 2020, 9:32pm UTC](https://discuss.elastic.co/t/how-to-backup-restore/194541 "2020-09-09T21:32:09Z")
I installed the elasticsearch operator using the quickstart guide and have a 3 node cluster running. I can't find any documentation on how to schedule regular snapshots of the ES cluster or how to restore from snapshot. … --- ## [Adding a Custom Volume for Backups](https://discuss.elastic.co/t/adding-a-custom-volume-for-backups/205324)
**Author:** [@Zorlack](https://discuss.elastic.co/u/Zorlack)\ **Replies:** 12\ **Last updated:** [September 9, 2020, 8:51pm UTC](https://discuss.elastic.co/t/adding-a-custom-volume-for-backups/205324 "2020-09-09T20:51:58Z")
Hello, I'm interested in mounting a shared NFS PersistentVolume across an Elasticsearch ECK cluster so that I can add it has a Snapshot Repository. (This seems to be the obvious solution for on-prem snapshotting) I've … --- ## [Maximum length of Grok pattern?](https://discuss.elastic.co/t/maximum-length-of-grok-pattern/248062)
**Author:** [@anda](https://discuss.elastic.co/u/anda)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 7:55pm UTC](https://discuss.elastic.co/t/maximum-length-of-grok-pattern/248062 "2020-09-09T19:55:30Z")
Hello, I am trying to parse a very long log line that contains 294 fields and 11,500 characters. I've had some difficulties testing the grok pattern because it's so long. When trying to use the grok debugger in Kibana,… --- ## [Logstash cannot connect to Oracle cloud using wallet key](https://discuss.elastic.co/t/logstash-cannot-connect-to-oracle-cloud-using-wallet-key/248059)
**Author:** [@Otomar\_Jupiter](https://discuss.elastic.co/u/Otomar_Jupiter)\ **Replies:** 1\ **Last updated:** [September 9, 2020, 7:55pm UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-oracle-cloud-using-wallet-key/248059 "2020-09-09T19:55:28Z")
Hello community, I'm having hard time to establish Logstash connection towards Oracle cloud autonomous db. I have suspicion that it is connected to wallet key. I was able to connect to Oracle cloud using Ubuntu/sql dev… --- ## [Trying to add an alias on Index Template using kibana Wizard](https://discuss.elastic.co/t/trying-to-add-an-alias-on-index-template-using-kibana-wizard/248037)
**Author:** [@olg32](https://discuss.elastic.co/u/olg32)\ **Replies:** 1\ **Last updated:** [September 9, 2020, 7:32pm UTC](https://discuss.elastic.co/t/trying-to-add-an-alias-on-index-template-using-kibana-wizard/248037 "2020-09-09T19:32:22Z")
Hi, I just created an index template. Now, in order to to configure a lifecycle policy for rolling indices, I need to define an alias, so I'm using the Kibana Create template wizard to add it. I went to the "Aliases" … --- ## [Large amount of terms in Lucene query](https://discuss.elastic.co/t/large-amount-of-terms-in-lucene-query/248057)
**Author:** [@wpearson4](https://discuss.elastic.co/u/wpearson4)\ **Replies:** 0\ **Last updated:** [September 9, 2020, 7:24pm UTC](https://discuss.elastic.co/t/large-amount-of-terms-in-lucene-query/248057 "2020-09-09T19:24:12Z")
Hello, I am using a Lucene query for building dynamic search queries. Let's assume a sample search will take the following format: Blockquote (Gender:"Female" AND AgeRange:\[17 TO 24\] AND Sports:"YES" AND State:"TX")… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1242) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1244)