# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1594 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1595 --- ## [Search performance when indexing new documents](https://discuss.elastic.co/t/search-performance-when-indexing-new-documents/222025)
**Author:** [@tjshae](https://discuss.elastic.co/u/tjshae)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 9:27am UTC](https://discuss.elastic.co/t/search-performance-when-indexing-new-documents/222025 "2020-03-04T09:27:38Z")
Hi all We have just been indexing quite a lot of new documents into our index. Queries performed through the Kibana console usually take around 200ms. However, during this period of creating new documents, the same sea… --- ## [Handeling nested bucketing when the data set is very large](https://discuss.elastic.co/t/handeling-nested-bucketing-when-the-data-set-is-very-large/221998)
**Author:** [@shivam\_chaurasia](https://discuss.elastic.co/u/shivam_chaurasia)\ **Replies:** 2\ **Last updated:** [March 4, 2020, 9:27am UTC](https://discuss.elastic.co/t/handeling-nested-bucketing-when-the-data-set-is-very-large/221998 "2020-03-04T09:27:36Z")
Hi there I am new to Elasticsearch and my use case in this regard is pretty simple, I am running a query, with aggregations, which returns result \> 10000 documents. I am navigating through the buckets and getting relevan… --- ## [Must\_not query in nested doc not working](https://discuss.elastic.co/t/must-not-query-in-nested-doc-not-working/222024)
**Author:** [@tarungargbtp2612](https://discuss.elastic.co/u/tarungargbtp2612)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 9:24am UTC](https://discuss.elastic.co/t/must-not-query-in-nested-doc-not-working/222024 "2020-03-04T09:24:31Z")
I have written two queries the docs with field profiles.educations = null: GET livecore/\_search { "query": { "nested": { "path": "profiles.educations", "query": { "bool": { "must\_… --- ## [External Elasticsearch and Cluster Priviliges](https://discuss.elastic.co/t/external-elasticsearch-and-cluster-priviliges/221824)
**Author:** [@NK\_12](https://discuss.elastic.co/u/NK_12)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 8:56am UTC](https://discuss.elastic.co/t/external-elasticsearch-and-cluster-priviliges/221824 "2020-03-04T08:56:59Z")
Hello Elasticsearch Community, this might be a stupid question, but I can't seem to find the answer by my self. I set up a Nextcloud on an apache2 Webspace. Then I wanted to configure the fulltextsearch, for that I ne… --- ## [Logs are not showing in kibana - maximum shards open error](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156)
**Author:** [@rvb\_n](https://discuss.elastic.co/u/rvb_n)\ **Replies:** 15\ **Last updated:** [March 4, 2020, 8:28am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-maximum-shards-open-error/221156 "2020-03-04T08:28:53Z")
Logs stopped suddenly from displaying in kibana. no clue.index pattern also not created. --- ## [Bad error handling of regex errors in pipelines](https://discuss.elastic.co/t/bad-error-handling-of-regex-errors-in-pipelines/222006)
**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 8:19am UTC](https://discuss.elastic.co/t/bad-error-handling-of-regex-errors-in-pipelines/222006 "2020-03-04T08:19:20Z")
Hello, this is meant as feedback to elastic: All of a sudden yesterday my entire cluster (thankfully not my production cluster) started bombing out "regular expression has redundant nested repeat operator" errors, after… --- ## [Multiple Output Sections to the same Elastic-Cluster](https://discuss.elastic.co/t/multiple-output-sections-to-the-same-elastic-cluster/222002)
**Author:** [@danieln](https://discuss.elastic.co/u/danieln)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 8:14am UTC](https://discuss.elastic.co/t/multiple-output-sections-to-the-same-elastic-cluster/222002 "2020-03-04T08:14:56Z")
Hallo Community, we are actually using logstash with a quite big pipeline for all data send from filebeat. All data goes through the pipeline and then there are multiple output sections which send the data to different … --- ## [Link logstash-filter to ruby gem](https://discuss.elastic.co/t/link-logstash-filter-to-ruby-gem/222000)
**Author:** [@GaryChewter](https://discuss.elastic.co/u/GaryChewter)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 7:58am UTC](https://discuss.elastic.co/t/link-logstash-filter-to-ruby-gem/222000 "2020-03-04T07:58:16Z")
I want to create a logstash filter plugin that make use the function from a ruby gem library. Any ways to use a ruby gem library in logstash filter plugin? --- ## [Unable to increase shard allocation limit](https://discuss.elastic.co/t/unable-to-increase-shard-allocation-limit/221884)
**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 7:39am UTC](https://discuss.elastic.co/t/unable-to-increase-shard-allocation-limit/221884 "2020-03-04T07:39:20Z")
Hello, I am upgrading my ELK stack from 6.8 version to 7.5. While upgrading, I am getting following error in elasticsearch : "Validation Failed: 1: this action would add \[2\] total shards, but this cluster currently has… --- ## [KIBANA visualize -PDF reports issue](https://discuss.elastic.co/t/kibana-visualize-pdf-reports-issue/221956)
**Author:** [@vikumars](https://discuss.elastic.co/u/vikumars)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 7:27am UTC](https://discuss.elastic.co/t/kibana-visualize-pdf-reports-issue/221956 "2020-03-04T07:27:17Z")
Hi , In the kibana under the visualize tab --\>share--\>PDF reports --\>Generate pdf Generate pdf is not highlighted, ist's not working . How to resolve this ( http://) --- ## [Clickable Metric Visualization (Or alternatives)](https://discuss.elastic.co/t/clickable-metric-visualization-or-alternatives/221797)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 7:23am UTC](https://discuss.elastic.co/t/clickable-metric-visualization-or-alternatives/221797 "2020-03-04T07:23:42Z")
Hey All, I know it is impossible to have a metric visualization that can be clickable for drill-down purposes. I thought as a workaround to create a Vega visualisation. Is this possible? i.e. create with vega a clickab… --- ## [How to store different index on different storage device?](https://discuss.elastic.co/t/how-to-store-different-index-on-different-storage-device/221984)
**Author:** [@Muhammad\_Ariful\_Isla](https://discuss.elastic.co/u/Muhammad_Ariful_Isla)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 5:49am UTC](https://discuss.elastic.co/t/how-to-store-different-index-on-different-storage-device/221984 "2020-03-04T05:49:43Z")
Hi there, How can I store different index on the different storage device? I want to storage hot indices to an SSD device and cold ones to a Spinning disk. How can I achieve this? --- ## [Sequel::DatabaseConnectionError](https://discuss.elastic.co/t/sequel-databaseconnectionerror/221882)
**Author:** [@Raguvarthan](https://discuss.elastic.co/u/Raguvarthan)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 5:53am UTC](https://discuss.elastic.co/t/sequel-databaseconnectionerror/221882 "2020-03-04T05:53:45Z")
I am trying to configure my SQL server with elastic search using logstash. I have completed configuring elastic search and logstash. But when I trigger logstash.bat to connect my pipeline file below is the error captured… --- ## [Export saved search to csv in kibana oss](https://discuss.elastic.co/t/export-saved-search-to-csv-in-kibana-oss/221592)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 5:21am UTC](https://discuss.elastic.co/t/export-saved-search-to-csv-in-kibana-oss/221592 "2020-03-04T05:21:54Z")
Hi, I am using kibana-oss: 7.0.1. I am able to export a data table visualization to csv format (using the Export Raw/Formatted option at the bottom). I have also added a Saved Search into my dashboard but I am unable t… --- ## [Elastic Search : Matching all the values from a multi-value field](https://discuss.elastic.co/t/elastic-search-matching-all-the-values-from-a-multi-value-field/221983)
**Author:** [@Vikram.Jain](https://discuss.elastic.co/u/Vikram.Jain)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 5:13am UTC](https://discuss.elastic.co/t/elastic-search-matching-all-the-values-from-a-multi-value-field/221983 "2020-03-04T05:13:31Z")
I have the exact same problem as asked by @Bostjan\_Kovac " hi all! I am trying to build query that will match a document only when all the document's values in it's multi-value field are present in the given query. … --- ## [Unable to read files in persistent queue for logstash](https://discuss.elastic.co/t/unable-to-read-files-in-persistent-queue-for-logstash/221935)
**Author:** [@raghuveera](https://discuss.elastic.co/u/raghuveera)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 3:36am UTC](https://discuss.elastic.co/t/unable-to-read-files-in-persistent-queue-for-logstash/221935 "2020-03-04T03:36:11Z")
I have recently enabled persistent queue configuration for logstash. I do see some files in location /var/lib/logstash/queue/\/, named as checkpoint.head and page.50. But, when i try to cat and read the file… --- ## [Logstash config file issues](https://discuss.elastic.co/t/logstash-config-file-issues/221977)
**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 3:30am UTC](https://discuss.elastic.co/t/logstash-config-file-issues/221977 "2020-03-04T03:30:05Z")
Hi All, i have doubts on below two queries. I have 2 linux servers where the filebeat was installed . i want to configure the each server to connect to logstash config seperately. ie. one server should read one logst… --- ## [Кибана говорит что не видит логов NGinx](https://discuss.elastic.co/t/nginx/221382)
**Author:** [@Chawoosh](https://discuss.elastic.co/u/Chawoosh)\ **Replies:** 5\ **Last updated:** [March 4, 2020, 2:07am UTC](https://discuss.elastic.co/t/nginx/221382 "2020-03-04T02:07:06Z")
Ситуация следующая: на FreeBSD 12.2 P2 стоит эластик, кибана и файлбит, в последнем разблокировал плагин nginx, прописал тэг nginx, в конфиге nginx прописан путь к логам access: enabled: true var.paths: - /v… --- ## [Error appeared while trying to get all documents from an index one by one](https://discuss.elastic.co/t/error-appeared-while-trying-to-get-all-documents-from-an-index-one-by-one/221964)
**Author:** [@Aayush\_Lakkad](https://discuss.elastic.co/u/Aayush_Lakkad)\ **Replies:** 0\ **Last updated:** [March 4, 2020, 2:05am UTC](https://discuss.elastic.co/t/error-appeared-while-trying-to-get-all-documents-from-an-index-one-by-one/221964 "2020-03-04T02:05:42Z")
Hey, I am new to elasticsearch and was trying a piece of code to get all the documents from an index one by one but I got an error. The code was: \> from elasticsearch import Elasticsearch \> import pandas as pd \> es … --- ## [Sample Application Log File](https://discuss.elastic.co/t/sample-application-log-file/221957)
**Author:** [@GulfTower](https://discuss.elastic.co/u/GulfTower)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 2:04am UTC](https://discuss.elastic.co/t/sample-application-log-file/221957 "2020-03-04T02:04:32Z")
Anyone know where I can find sample web application logs to use as I learn Kibana? --- ## [Logstash 7.6.0 wrong @timestamp](https://discuss.elastic.co/t/logstash-7-6-0-wrong-timestamp/221960)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 1:22am UTC](https://discuss.elastic.co/t/logstash-7-6-0-wrong-timestamp/221960 "2020-03-04T01:22:58Z")
Hi all, I've been shipping data from winlogbeat to logstash to es and the @timestamp field is not showing the correct timezone The server is in GMT+11 and the date is correct as you can see below (Mar 4 11:04:01) I'm … --- ## [\[GSOC\] 2020 Introduction](https://discuss.elastic.co/t/gsoc-2020-introduction/221946)
**Author:** [@prashant.globe](https://discuss.elastic.co/u/prashant.globe)\ **Replies:** 1\ **Last updated:** [March 4, 2020, 12:05am UTC](https://discuss.elastic.co/t/gsoc-2020-introduction/221946 "2020-03-04T00:05:59Z")
Hi all ! This is Prashant . I am a final year undergraduate student from BITS Pilani , India . I have prior experience working with React , Electron ,JS,PHP and TypeScript . I would like to contribute to the Toggle Syst… --- ## [How to search for anomalies in metrics?](https://discuss.elastic.co/t/how-to-search-for-anomalies-in-metrics/221953)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 0\ **Last updated:** [March 3, 2020, 10:58pm UTC](https://discuss.elastic.co/t/how-to-search-for-anomalies-in-metrics/221953 "2020-03-03T22:58:49Z")
I want to create a small script that will query ES for data, and then send me an alert when it sees that there is "anomalous" data. For example, if the cpu load on a vm is suddenly spiking. I'd like an alert. That's eas… --- ## [Are there any proper alternatives to "Join" queries in ElasticSearch?](https://discuss.elastic.co/t/are-there-any-proper-alternatives-to-join-queries-in-elasticsearch/221952)
**Author:** [@Kun\_Liu1](https://discuss.elastic.co/u/Kun_Liu1)\ **Replies:** 0\ **Last updated:** [March 3, 2020, 10:35pm UTC](https://discuss.elastic.co/t/are-there-any-proper-alternatives-to-join-queries-in-elasticsearch/221952 "2020-03-03T22:35:10Z")
Hi everyone, We are seeking advice on a situation which may need elasticsearch "join" queries. It is basically a subscription system. Different users may subscribe the same item, so we want to save the users data agai… --- ## [Can split processor address a multi-field?](https://discuss.elastic.co/t/can-split-processor-address-a-multi-field/221601)
**Author:** [@JohanP](https://discuss.elastic.co/u/JohanP)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 9:15pm UTC](https://discuss.elastic.co/t/can-split-processor-address-a-multi-field/221601 "2020-03-03T21:15:31Z")
Using the split processor as documented in my earlier topic: Now I would like to be able to specify a multi-field as the field to write to: PUT 51 { "mappings": { "properties": { "q3.read": { "type… --- ## [Highlighting в структурированном запросе Elasticsearch](https://discuss.elastic.co/t/highlighting-elasticsearch/221927)
**Author:** [@Pavel\_Novoydarskiy](https://discuss.elastic.co/u/Pavel_Novoydarskiy)\ **Replies:** 1\ **Last updated:** [March 3, 2020, 9:23pm UTC](https://discuss.elastic.co/t/highlighting-elasticsearch/221927 "2020-03-03T21:23:36Z")
Есть ли возможность в Elasticsearch подсвечивать в ответе информацию по которой произошло совпадение при использовании методов структурированного поиска(запросы range, term). Также интересует, можно ли использовать highl… --- ## [Geo\_point mapping problem](https://discuss.elastic.co/t/geo-point-mapping-problem/221799)
**Author:** [@Aba](https://discuss.elastic.co/u/Aba)\ **Replies:** 4\ **Last updated:** [March 3, 2020, 9:22pm UTC](https://discuss.elastic.co/t/geo-point-mapping-problem/221799 "2020-03-03T21:22:07Z")
Hi guys, I am ELK noob willing to learn. I've got a document \[...\] "\_source": { "network": { "type": "ipv4" }, "interface\_name": "LAN", "destination": { "geo": { "country\_name": "U… --- ## [Kibana Install Error - should not run as root](https://discuss.elastic.co/t/kibana-install-error-should-not-run-as-root/220929)
**Author:** [@Technolust](https://discuss.elastic.co/u/Technolust)\ **Replies:** 13\ **Last updated:** [March 3, 2020, 9:17pm UTC](https://discuss.elastic.co/t/kibana-install-error-should-not-run-as-root/220929 "2020-03-03T21:17:21Z")
Elk Stack newbie here... When I install Kibana on Centos 8 I get an error on install saying that I should not run ./bin/kibana as root. Do I need to create a specific user called "Kibana" instead of running as sudo? When… --- ## [Need Help Groking](https://discuss.elastic.co/t/need-help-groking/221772)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 2\ **Last updated:** [March 3, 2020, 9:11pm UTC](https://discuss.elastic.co/t/need-help-groking/221772 "2020-03-03T21:11:58Z")
I am attempting to write my first grok filter but I'm not getting any logs parsed. Here is my sample log. \<30\>2020:02:26-12:41:48 aua\[18909\]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication faile… --- ## [Odbc SQL rest access](https://discuss.elastic.co/t/odbc-sql-rest-access/220726)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 1\ **Last updated:** [March 3, 2020, 8:59pm UTC](https://discuss.elastic.co/t/odbc-sql-rest-access/220726 "2020-03-03T20:59:57Z")
hi on my ELK cluster i have LDAP (active directory) security enabled. i m trying to setup odbc from here https://www.elastic.co/guide/en/elasticsearch/reference/current/sql-odbc-setup.html and page says abotu security "I… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1593) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1595)