# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1367 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1368 --- ## [How much memory does single elastic search instance need for 200MB of document?](https://discuss.elastic.co/t/how-much-memory-does-single-elastic-search-instance-need-for-200mb-of-document/238217)
**Author:** [@shahidcodes](https://discuss.elastic.co/u/shahidcodes)\ **Replies:** 5\ **Last updated:** [June 25, 2020, 6:01am UTC](https://discuss.elastic.co/t/how-much-memory-does-single-elastic-search-instance-need-for-200mb-of-document/238217 "2020-06-25T06:01:10Z")
Hi, I am running a single elastic search instance, the ram consumption is always above 90% of total 4GB ram. Does elasticsearch needs alot of ram by default? --- ## [What was the name of the Kibana feature that allowed searching repo code](https://discuss.elastic.co/t/what-was-the-name-of-the-kibana-feature-that-allowed-searching-repo-code/238598)
**Author:** [@rwatts3](https://discuss.elastic.co/u/rwatts3)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 5:55am UTC](https://discuss.elastic.co/t/what-was-the-name-of-the-kibana-feature-that-allowed-searching-repo-code/238598 "2020-06-25T05:55:00Z")
Greetings, Last year I recalled reading about a kibana feature that allowed searching repository code bases. I believe the feature may have been removed or deferred to a later date but I cannot recall the name of the fe… --- ## [Audit logging in elasticsearch](https://discuss.elastic.co/t/audit-logging-in-elasticsearch/238550)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 6\ **Last updated:** [June 25, 2020, 5:45am UTC](https://discuss.elastic.co/t/audit-logging-in-elasticsearch/238550 "2020-06-25T05:45:16Z")
Hi, I'm trying to enable audit loging in elasticsearch, i have a 3 node cluster and on each elasticsearch.yml i added: xpack.security.audit.enabled: true xpack.security.audit.logfile.emit\_node\_host\_address: true Then … --- ## [Elasticsearch data type](https://discuss.elastic.co/t/elasticsearch-data-type/238517)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 5:40am UTC](https://discuss.elastic.co/t/elasticsearch-data-type/238517 "2020-06-25T05:40:27Z")
I have an index named users and i have a provided a field called user\_id which is int type.The question is it is accepting floating value and string value.This is the index i have created PUT /users { "mappings" : { … --- ## [Handling exception: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 69](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-69/238253)
**Author:** [@priyashree](https://discuss.elastic.co/u/priyashree)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 4:38am UTC](https://discuss.elastic.co/t/handling-exception-org-logstash-beats-invalidframeprotocolexception-invalid-version-of-beats-protocol-69/238253 "2020-06-25T04:38:14Z")
I have 2 logstash machines and both the machines shows the following error in /var/log/logstash. \[2020-06-23T12:12:08,031\]\[INFO \]\[org.logstash.beats.BeatsHandler\]\[main\] \[local: logstash\_machine\_ip:5044, remote: filebeat… --- ## [java.lang.IllegalStateException: Unable to access 'path.data' (/var/lib/elasticsearch)](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-data-var-lib-elasticsearch/238456)
**Author:** [@natarajjk](https://discuss.elastic.co/u/natarajjk)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 4:35am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unable-to-access-path-data-var-lib-elasticsearch/238456 "2020-06-25T04:35:54Z")
Can some let me know why i am getting this error on ELK 7.8.0 Jun 24 08:59:02 nagiosclient.sg.com systemd\[1\]: Starting Elasticsearch... Jun 24 08:59:06 nagiosclient.sg.com systemd-entrypoint\[11107\]: uncaught exception … --- ## [Configure tcp input to accept syslog over ssl](https://discuss.elastic.co/t/configure-tcp-input-to-accept-syslog-over-ssl/237853)
**Author:** [@danona45](https://discuss.elastic.co/u/danona45)\ **Replies:** 5\ **Last updated:** [June 25, 2020, 4:30am UTC](https://discuss.elastic.co/t/configure-tcp-input-to-accept-syslog-over-ssl/237853 "2020-06-25T04:30:52Z")
This is my input config, but I don't get anything passed input in my pipeline or I would see something in my ruby debug output. No errors in the log. \> tcp { \> type =\> "syslog" \> port =\> "4000" \> … --- ## [Logstash shuts down after setting offset for kafka partition](https://discuss.elastic.co/t/logstash-shuts-down-after-setting-offset-for-kafka-partition/237233)
**Author:** [@Aliasgar\_Choolawala](https://discuss.elastic.co/u/Aliasgar_Choolawala)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 3:43am UTC](https://discuss.elastic.co/t/logstash-shuts-down-after-setting-offset-for-kafka-partition/237233 "2020-06-25T03:43:54Z")
this is logstash.conf input { kafka { bootstrap\_servers =\> "kafka-app-logs:9092" topics =\> \["pm2-logs"\] codec =\> multiline { pattern =\> "^\\s" what =\> "previous" } } } filter { mutate {… --- ## [How to get a continuous transform to write to multiple indexes](https://discuss.elastic.co/t/how-to-get-a-continuous-transform-to-write-to-multiple-indexes/238391)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 3:35am UTC](https://discuss.elastic.co/t/how-to-get-a-continuous-transform-to-write-to-multiple-indexes/238391 "2020-06-25T03:35:11Z")
When I load my data through logstash I specify an index name pattern, to split the index up by time. I now have a continuous transform running, grouping by a 1 hour date histogram, against that data. Problem is it's wr… --- ## [Complex Elastic Search Query](https://discuss.elastic.co/t/complex-elastic-search-query/238587)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 0\ **Last updated:** [June 25, 2020, 2:35am UTC](https://discuss.elastic.co/t/complex-elastic-search-query/238587 "2020-06-25T02:35:46Z")
I have the following documents in the elastic search index. \[{ "\_index": "ten2", "\_type": "documents", "\_id": "c323c2244a4a4c22\_en-us", "\_source": { "publish\_details": \[{ "environment": "603fe91adbdcff66… --- ## [Uptime monitor showing blank](https://discuss.elastic.co/t/uptime-monitor-showing-blank/238446)
**Author:** [@nikul\_jain](https://discuss.elastic.co/u/nikul_jain)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 2:10am UTC](https://discuss.elastic.co/t/uptime-monitor-showing-blank/238446 "2020-06-25T02:10:52Z")
Issue with monitor status kibana version : 7.5 --- ## [Kibana domain whitelist](https://discuss.elastic.co/t/kibana-domain-whitelist/237671)
**Author:** [@mqcc](https://discuss.elastic.co/u/mqcc)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 2:02am UTC](https://discuss.elastic.co/t/kibana-domain-whitelist/237671 "2020-06-25T02:02:41Z")
I need to configure kibana with microsoft cloud app which acts as a proxy. When I first open kibana it takes a while for anything to load and then comes up with an message Your browser does not meet the security requirem… --- ## [Store field as text and keyword in 7.3](https://discuss.elastic.co/t/store-field-as-text-and-keyword-in-7-3/238520)
**Author:** [@Jeremy\_A](https://discuss.elastic.co/u/Jeremy_A)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:58am UTC](https://discuss.elastic.co/t/store-field-as-text-and-keyword-in-7-3/238520 "2020-06-25T01:58:36Z")
I've recently migrated from 6.8 to 7.3 and noticed an apparent different in how Elasticsearch is handling my templates. Here's an excerpt from my index template: { "index\_patterns": \["xxx-\*"\], "settings":… --- ## [Drill Down Restrictions](https://discuss.elastic.co/t/drill-down-restrictions/237983)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:51am UTC](https://discuss.elastic.co/t/drill-down-restrictions/237983 "2020-06-25T01:51:23Z")
Is there anywhere where the drill down restrictions are documented? Is there any way around them? So far I've found: They aren't available with DataTables They aren't available for Lens generated visualization A mea… --- ## [Kibana: find IP addresses that are in two different indexes](https://discuss.elastic.co/t/kibana-find-ip-addresses-that-are-in-two-different-indexes/237889)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:46am UTC](https://discuss.elastic.co/t/kibana-find-ip-addresses-that-are-in-two-different-indexes/237889 "2020-06-25T01:46:47Z")
hi, i'm having trouble wrapping my head around the best way to query kibana. I have indexes lets just say: Index-Business1-firewall-Logs Index-Business2-filewall-Logs i have a kibana Index Pattern that is Index-Busine… --- ## [Compare common value in 2 documents within a index and create a field in documents](https://discuss.elastic.co/t/compare-common-value-in-2-documents-within-a-index-and-create-a-field-in-documents/237620)
**Author:** [@Vishnu\_G](https://discuss.elastic.co/u/Vishnu_G)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:43am UTC](https://discuss.elastic.co/t/compare-common-value-in-2-documents-within-a-index-and-create-a-field-in-documents/237620 "2020-06-25T01:43:19Z")
I have metricbeats configured to send process and services metrics to kibana. Process and windows services have a common field i.e., pid . My requirement is to create a TSVB that will show memory utilization of all wi… --- ## [Integrate Kibana custom app in dashboard](https://discuss.elastic.co/t/integrate-kibana-custom-app-in-dashboard/237646)
**Author:** [@Tejashree\_kate](https://discuss.elastic.co/u/Tejashree_kate)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:32am UTC](https://discuss.elastic.co/t/integrate-kibana-custom-app-in-dashboard/237646 "2020-06-25T01:32:51Z")
Hi Team, Is it possible to integrate a Kibana custom application in dashboard as one of the panels with its all existing functionalities like search, filter etc? My usecase doesn't fit to build a custom visualisation. … --- ## [Matched Words are not highlighted](https://discuss.elastic.co/t/matched-words-are-not-highlighted/238452)
**Author:** [@Shubham](https://discuss.elastic.co/u/Shubham)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 12:01pm UTC](https://discuss.elastic.co/t/matched-words-are-not-highlighted/238452 "2020-06-24T12:01:08Z")
I have placed highlighter in my search query and performing fuzzy search. Some of the matched words aren't highlighted in despite of fuzzy matching with two character change. For example: "James" is matching with "Thames… --- ## [Can you recover deleted documents when you didnt take s snapshot?](https://discuss.elastic.co/t/can-you-recover-deleted-documents-when-you-didnt-take-s-snapshot/238531)
**Author:** [@chappers72](https://discuss.elastic.co/u/chappers72)\ **Replies:** 1\ **Last updated:** [June 25, 2020, 1:16am UTC](https://discuss.elastic.co/t/can-you-recover-deleted-documents-when-you-didnt-take-s-snapshot/238531 "2020-06-25T01:16:27Z")
I deleted some documents in a bulk process last night by mistake. I need to get them back, I have restores of my VM data directory but they do not appear there (as per docs). Can I get them back? --- ## [Unable to connect my java application to the Elastic Stack Instance](https://discuss.elastic.co/t/unable-to-connect-my-java-application-to-the-elastic-stack-instance/238430)
**Author:** [@Ubeta](https://discuss.elastic.co/u/Ubeta)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 1:13am UTC](https://discuss.elastic.co/t/unable-to-connect-my-java-application-to-the-elastic-stack-instance/238430 "2020-06-25T01:13:03Z")
Hi! I have set up my Elastic Cloud Service through Google Cloud and have set up an Elastic Search Instance. I can upload my data to Elastic search and query my data just fine. However, when I try to connect to the Elas… --- ## [Elapsed filter doesn't work sometimes](https://discuss.elastic.co/t/elapsed-filter-doesnt-work-sometimes/238557)
**Author:** [@Ferdous\_Khan](https://discuss.elastic.co/u/Ferdous_Khan)\ **Replies:** 4\ **Last updated:** [June 25, 2020, 12:26am UTC](https://discuss.elastic.co/t/elapsed-filter-doesnt-work-sometimes/238557 "2020-06-25T00:26:48Z")
Hello, I am seeing Elapsed filter doesn't work all the times in our staging environment. In our development environment, we have single logstash and elasticsearch instance and Elapsed filter works fine there. But in sta… --- ## [About the Elastic Tips and Common Fixes category](https://discuss.elastic.co/t/about-the-elastic-tips-and-common-fixes-category/238568)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0
The idea behind this category is a space akin to a knowledge base. A space to share tips, solutions to common problems, and other neat things that exist in the Elastic Stack that you may not be aware of. This category i… --- ## [Index management Logstash vs Elasticsearch](https://discuss.elastic.co/t/index-management-logstash-vs-elasticsearch/238408)
**Author:** [@envycz](https://discuss.elastic.co/u/envycz)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 10:39pm UTC](https://discuss.elastic.co/t/index-management-logstash-vs-elasticsearch/238408 "2020-06-24T22:39:26Z")
Hello, I have ELK stack deployed all on one host for testing purposes and two Filebeat klients sending data from other hosts to it. First one is sending Apache and Icinga monitoring logs from a linux machine directly d… --- ## [Fetch distinct values in a nested type field in elasticsearch? Can anyone provide one example?](https://discuss.elastic.co/t/fetch-distinct-values-in-a-nested-type-field-in-elasticsearch-can-anyone-provide-one-example/238426)
**Author:** [@divya005](https://discuss.elastic.co/u/divya005)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 9:48am UTC](https://discuss.elastic.co/t/fetch-distinct-values-in-a-nested-type-field-in-elasticsearch-can-anyone-provide-one-example/238426 "2020-06-24T09:48:50Z")
{ "aggs" : { "groupBatches" : { "nested": { "path": "admin" }, "aggs" : { "batches" : { "terms" : {"field" : "admin.ids.batchId"} } } } } } This is i got from 1 link but my requirement is same can anybody h… --- ## [Enhanced Table plugin](https://discuss.elastic.co/t/enhanced-table-plugin/238486)
**Author:** [@ahadi](https://discuss.elastic.co/u/ahadi)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 10:17pm UTC](https://discuss.elastic.co/t/enhanced-table-plugin/238486 "2020-06-24T22:17:51Z")
Is enhanced table compatible with mobile? I have created a dasboard on witch i make data table and enhanced table .I can see the data table on my mobile but i can't see the enhanced table on mobile. Howerver i can see… --- ## [How to give more priority to certain words in a phrase](https://discuss.elastic.co/t/how-to-give-more-priority-to-certain-words-in-a-phrase/238497)
**Author:** [@Dilip\_Khemani](https://discuss.elastic.co/u/Dilip_Khemani)\ **Replies:** 0\ **Last updated:** [June 24, 2020, 1:52pm UTC](https://discuss.elastic.co/t/how-to-give-more-priority-to-certain-words-in-a-phrase/238497 "2020-06-24T13:52:39Z")
I have an index named product in Elastic Search 7.4 Product has a field named title. If I want to search all titles for blue watch I want to see all results which are blue watch or watch. I do not want to see results l… --- ## [How does elasticsearch limit the results of a query on multiple index search?](https://discuss.elastic.co/t/how-does-elasticsearch-limit-the-results-of-a-query-on-multiple-index-search/238543)
**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 10:06pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-limit-the-results-of-a-query-on-multiple-index-search/238543 "2020-06-24T22:06:43Z")
Say i queried data that is contained in 5 indexes, and the results are limited to 100 will elasticsearch search all the indexes and get 20 results from each or get 100 results from the first index it encounters? --- ## [Should I make any chown to elasticsearch](https://discuss.elastic.co/t/should-i-make-any-chown-to-elasticsearch/238547)
**Author:** [@azteker](https://discuss.elastic.co/u/azteker)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 9:59pm UTC](https://discuss.elastic.co/t/should-i-make-any-chown-to-elasticsearch/238547 "2020-06-24T21:59:35Z")
Now the /etc/elasticsearch is root.root, and /var/data/elasticsearch and /var/log/elasticsearch are elasticsearch.elasticsearch. Is this correct? --- ## [Value in Pivot Field of a transform not found in source index](https://discuss.elastic.co/t/value-in-pivot-field-of-a-transform-not-found-in-source-index/238318)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 6\ **Last updated:** [June 24, 2020, 9:21pm UTC](https://discuss.elastic.co/t/value-in-pivot-field-of-a-transform-not-found-in-source-index/238318 "2020-06-24T21:21:13Z")
Hi all My transform JSON is illustrated below. A screen shot of the Transform Preview is also attached. TRANSFORM INDEX On the Kibana Discovery Console (index = interactions\_new\_conversations\_transform\_idx) I can sea… --- ## [Send Kibana Dashboard screenshots in HTML email](https://discuss.elastic.co/t/send-kibana-dashboard-screenshots-in-html-email/238534)
**Author:** [@Lakshmy\_S](https://discuss.elastic.co/u/Lakshmy_S)\ **Replies:** 1\ **Last updated:** [June 24, 2020, 9:15pm UTC](https://discuss.elastic.co/t/send-kibana-dashboard-screenshots-in-html-email/238534 "2020-06-24T21:15:20Z")
I have an use case which is to have a watcher check for RED/AMBER metrics in Kibana and it should automatically send a screenshot of the kibana dashboard via html email. In a nutshell the html email should have nice loo… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1366) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1368)