# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=655 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 656 --- ## [Track Queries with High Heap Usage](https://discuss.elastic.co/t/track-queries-with-high-heap-usage/302267)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 5\ **Last updated:** [April 14, 2022, 3:24am UTC](https://discuss.elastic.co/t/track-queries-with-high-heap-usage/302267 "2022-04-14T03:24:29Z")
Hi All, I was wondering the best way to track queries based on their Heap usage. Context: I've recently had to increase heap allocation (currently 20GB RAM - 18GB Heap, up from 10GB RAM - 8GB Heap) on coordinating node… --- ## [Forced-awareness in Elastic 8.0.1](https://discuss.elastic.co/t/forced-awareness-in-elastic-8-0-1/301738)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 10\ **Last updated:** [April 14, 2022, 2:44am UTC](https://discuss.elastic.co/t/forced-awareness-in-elastic-8-0-1/301738 "2022-04-14T02:44:57Z")
Hi I have a question: how I can ensure shard replication for to scatter shards to other hosts?, My Elastic cluster consist from 3 host (under 51 data nodes) As You can see Elasticsearch has made replicat on the same … --- ## [Editing and re-indexing large amounts of data in elasticsearch (millions of records)](https://discuss.elastic.co/t/editing-and-re-indexing-large-amounts-of-data-in-elasticsearch-millions-of-records/302373)
**Author:** [@jp184](https://discuss.elastic.co/u/jp184)\ **Replies:** 1\ **Last updated:** [April 14, 2022, 12:55am UTC](https://discuss.elastic.co/t/editing-and-re-indexing-large-amounts-of-data-in-elasticsearch-millions-of-records/302373 "2022-04-14T00:55:20Z")
I recently made a new version of an index for my Elasticsearch data with some new fields included. I re-indexed from the old index, so the new index has all of the old data with also the new mapping to include the new fi… --- ## [Weird / strange version number of cluster after migration to 8.1.2](https://discuss.elastic.co/t/weird-strange-version-number-of-cluster-after-migration-to-8-1-2/302378)
**Author:** [@Zdeno\_Liska](https://discuss.elastic.co/u/Zdeno_Liska)\ **Replies:** 4\ **Last updated:** [April 14, 2022, 12:24am UTC](https://discuss.elastic.co/t/weird-strange-version-number-of-cluster-after-migration-to-8-1-2/302378 "2022-04-14T00:24:46Z")
Hi, I have just upgraded from 7.17 ro 8.1.2. Anyway, what I see in Stack monitoring in cluster version is not 8.1.2, as before when it was there 7.17.2 but can you please help to solve it? Cluster state is green, all… --- ## [Elastic Search Logstash input -\>output AWS s3](https://discuss.elastic.co/t/elastic-search-logstash-input-output-aws-s3/302376)
**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 7:35pm UTC](https://discuss.elastic.co/t/elastic-search-logstash-input-output-aws-s3/302376 "2022-04-13T19:35:14Z")
Is it possible not to query all the data(duplication) when we ingest data from Elasticsearch input -\>aws s3 output? I want to ingest the data daily but it would duplicate it querying all the data from the start again bu… --- ## [How to parse json logs in logstash](https://discuss.elastic.co/t/how-to-parse-json-logs-in-logstash/302358)
**Author:** [@hassnain](https://discuss.elastic.co/u/hassnain)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 7:02pm UTC](https://discuss.elastic.co/t/how-to-parse-json-logs-in-logstash/302358 "2022-04-13T19:02:10Z")
{"className":"HomePageBusiness.java","msisdn":"912345678902","method":"HOMEPAGE","externalAPI":"My project info","message":"Delta this is successfull","timestamp":"2022/04/06 21:49:14","timeElapsed":"0:0:0:109"} This is… --- ## [Default Search in Discover](https://discuss.elastic.co/t/default-search-in-discover/302362)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 4:28pm UTC](https://discuss.elastic.co/t/default-search-in-discover/302362 "2022-04-13T16:28:05Z")
Is there a way to set Discover to open to a default saved search? I know you can set the default index pattern, but my ideal would be that - for each Space's Discover - it would open with a default saved search with all … --- ## [Reducing relevance for viewed videos](https://discuss.elastic.co/t/reducing-relevance-for-viewed-videos/302352)
**Author:** [@Gustavo\_Leite\_Silvan](https://discuss.elastic.co/u/Gustavo_Leite_Silvan)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 6:14pm UTC](https://discuss.elastic.co/t/reducing-relevance-for-viewed-videos/302352 "2022-04-13T18:14:05Z")
Hello there! We have a social network app that contains user's videos. The video URL is stored in a timeline index on Elastic. When the users opens the app, we will retrieve relevant videos for him based on the video p… --- ## [How to configure syslog output plugin to useboth tcp and udp protocols based on Remote syslog protocol](https://discuss.elastic.co/t/how-to-configure-syslog-output-plugin-to-useboth-tcp-and-udp-protocols-based-on-remote-syslog-protocol/302312)
**Author:** [@Nikhitha](https://discuss.elastic.co/u/Nikhitha)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 5:58pm UTC](https://discuss.elastic.co/t/how-to-configure-syslog-output-plugin-to-useboth-tcp-and-udp-protocols-based-on-remote-syslog-protocol/302312 "2022-04-13T17:58:01Z")
logstash syslog output plugin protocol should be configured to use tcp or udp dynamically instead of being hardcoded to any one protocol. Can someone help me with this. --- ## [How to Index duplicate documents with the different routing id](https://discuss.elastic.co/t/how-to-index-duplicate-documents-with-the-different-routing-id/302353)
**Author:** [@raja\_augstin](https://discuss.elastic.co/u/raja_augstin)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 5:20pm UTC](https://discuss.elastic.co/t/how-to-index-duplicate-documents-with-the-different-routing-id/302353 "2022-04-13T17:20:26Z")
My index settings: { "aliases": { "alias\_test\_read": {} }, "mappings": { "\_routing": { "required": true }, "properties": { "id": { "typ… --- ## [Specifying multiple preferences](https://discuss.elastic.co/t/specifying-multiple-preferences/302367)
**Author:** [@ahmedasadi](https://discuss.elastic.co/u/ahmedasadi)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 5:30pm UTC](https://discuss.elastic.co/t/specifying-multiple-preferences/302367 "2022-04-13T17:30:35Z")
Hi, Is it possible to specify multiple preferences in an Elasticsearch query? I'm getting an error when using \_local and \_shard as preferences: URL: localhost:9200/testindex/\_search?preference=\_local,\_shards:1 { "… --- ## [Restore MediaWiki ElasticSearch functionality](https://discuss.elastic.co/t/restore-mediawiki-elasticsearch-functionality/301786)
**Author:** [@lenhartp](https://discuss.elastic.co/u/lenhartp)\ **Replies:** 5\ **Last updated:** [April 13, 2022, 5:29pm UTC](https://discuss.elastic.co/t/restore-mediawiki-elasticsearch-functionality/301786 "2022-04-13T17:29:32Z")
A couple months ago, had a mediawiki server with 3 wikis running on it dumped in my lap to support. The search box was using CirrusSearch and Elasticsearch / Elastica to generate results, but that was recently broken whe… --- ## [I'm getting this error while looking for logs Error loading data bad gateway](https://discuss.elastic.co/t/im-getting-this-error-while-looking-for-logs-error-loading-data-bad-gateway/302361)
**Author:** [@Prasadevops0710](https://discuss.elastic.co/u/Prasadevops0710)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 4:30pm UTC](https://discuss.elastic.co/t/im-getting-this-error-while-looking-for-logs-error-loading-data-bad-gateway/302361 "2022-04-13T16:30:13Z")
SearchError: Bad Gateway at https://elk.abc.com/bundles/commons.bundle.js:5:1844068 at processQueue (https://elk.abc.com/built\_assets/dlls/vendors.bundle.dll.js:417:203810) at https://elk.abc.com/built\_assets/dlls/ven… --- ## [Display Name for Index Patterns](https://discuss.elastic.co/t/display-name-for-index-patterns/302357)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 4:26pm UTC](https://discuss.elastic.co/t/display-name-for-index-patterns/302357 "2022-04-13T16:26:29Z")
I was wondering if it is possible to use a different, more intuitive/human-readable, display name for index patterns in Discover rather than the actual pattern? My reason is that some index patterns are ugly and I'd it t… --- ## [Field format color](https://discuss.elastic.co/t/field-format-color/302106)
**Author:** [@Plachey](https://discuss.elastic.co/u/Plachey)\ **Replies:** 11\ **Last updated:** [April 13, 2022, 3:58pm UTC](https://discuss.elastic.co/t/field-format-color/302106 "2022-04-13T15:58:39Z")
Hello Who can help me with index color format request I found this api /api/saved\_objects/index-pattern/xxxxx/fields but i got problem with data for it request, I can't find how to do it (format and naming fields) m… --- ## [Error on import the Elasticsearch public GPG key into apt](https://discuss.elastic.co/t/error-on-import-the-elasticsearch-public-gpg-key-into-apt/302337)
**Author:** [@sashasingle](https://discuss.elastic.co/u/sashasingle)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 2:58pm UTC](https://discuss.elastic.co/t/error-on-import-the-elasticsearch-public-gpg-key-into-apt/302337 "2022-04-13T14:58:08Z")
Hi, cannot download GPG-KEY when i run this command wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -. System send answer - gpg: no valid OpenPGP data found --- ## [Installa elasticsearch in a different directory](https://discuss.elastic.co/t/installa-elasticsearch-in-a-different-directory/302226)
**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 2:27pm UTC](https://discuss.elastic.co/t/installa-elasticsearch-in-a-different-directory/302226 "2022-04-13T14:27:17Z")
hi, by default Elasticsearch are installed in / directory (/etc/Elasticsearch). but i have an partition in my centos that is dedicated just for the database, how can change the default installing partition and install … --- ## [Problems with EST5EDT timezone in Kibana 7.17.0](https://discuss.elastic.co/t/problems-with-est5edt-timezone-in-kibana-7-17-0/300810)
**Author:** [@lifer](https://discuss.elastic.co/u/lifer)\ **Replies:** 17\ **Last updated:** [April 13, 2022, 1:32pm UTC](https://discuss.elastic.co/t/problems-with-est5edt-timezone-in-kibana-7-17-0/300810 "2022-04-13T13:32:52Z")
Hi team! I have some problems with EST5EDT timezone in Kibana v 7.17.0: So, when I set timezone to UTC on the "Slack Management -\> Advanced Settings" page - everything works fine and I see data with correct timezone. B… --- ## [Handling Logstash with RabbitMQ Input receiving basic.cancel](https://discuss.elastic.co/t/handling-logstash-with-rabbitmq-input-receiving-basic-cancel/302339)
**Author:** [@Ben-G](https://discuss.elastic.co/u/Ben-G)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 1:29pm UTC](https://discuss.elastic.co/t/handling-logstash-with-rabbitmq-input-receiving-basic-cancel/302339 "2022-04-13T13:29:31Z")
I have deployed a logstash pod on our k8s cluster that reads from a RabbitMQ deployment. Recently we saw lag suddenly start to increase on RabbitMQ as the number of ready messages grew linearly without stopping. The Rab… --- ## [Need help how to remove unwanted fields logstash](https://discuss.elastic.co/t/need-help-how-to-remove-unwanted-fields-logstash/302315)
**Author:** [@holpa](https://discuss.elastic.co/u/holpa)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 1:08pm UTC](https://discuss.elastic.co/t/need-help-how-to-remove-unwanted-fields-logstash/302315 "2022-04-13T13:08:40Z")
Please tell me how to remove unnecessary fields. Type: agent.ephemeral\_id agent.id winlog.provider\_guid I tried, But kibana stops showing logs at all drop\_fields: fields: \["date\_created", "ecs.version", "agent.version… --- ## [Search for a text not working](https://discuss.elastic.co/t/search-for-a-text-not-working/302287)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 3\ **Last updated:** [April 13, 2022, 12:02pm UTC](https://discuss.elastic.co/t/search-for-a-text-not-working/302287 "2022-04-13T12:02:04Z")
When searching for a text in the field I'm not getting any data enough though the text is present in the logs query- message : error while getting meet audit data for customer When I search directly without putting th… --- ## [How to configure sendgrid api in elasticsearch.yml](https://discuss.elastic.co/t/how-to-configure-sendgrid-api-in-elasticsearch-yml/302113)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 11:58am UTC](https://discuss.elastic.co/t/how-to-configure-sendgrid-api-in-elasticsearch-yml/302113 "2022-04-13T11:58:40Z")
Hello, Can any one please help me? Want to configure sendgrid api in Elasticsearch.yml to send and alert notification. Thanks & Regards, Kiran Katkar. --- ## [Logstash stopped processing because of an error](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error/302291)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 11:39am UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error/302291 "2022-04-13T11:39:23Z")
Hi, I am trying to send multiple log files to different ES indices. However, Logstash shuts down due to an error. I am a beginner and I could use some help with the same. here is my logstash conf file - input { beats… --- ## [Problem on Short Keywords](https://discuss.elastic.co/t/problem-on-short-keywords/302297)
**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\ **Replies:** 1\ **Last updated:** [April 13, 2022, 11:25am UTC](https://discuss.elastic.co/t/problem-on-short-keywords/302297 "2022-04-13T11:25:46Z")
Hello everyone, I have an Elasticsearch index which includes more than 5 fields and my query searches on all these fields. However, today I have realized something wrong. Even though I set fuzziness as 0, when I search … --- ## [Separate file(Lookup file) for grok pattern](https://discuss.elastic.co/t/separate-file-lookup-file-for-grok-pattern/302320)
**Author:** [@vikas.maske](https://discuss.elastic.co/u/vikas.maske)\ **Replies:** 0\ **Last updated:** [April 13, 2022, 11:15am UTC](https://discuss.elastic.co/t/separate-file-lookup-file-for-grok-pattern/302320 "2022-04-13T11:15:40Z")
Hello Team, Thanks for your valuable time. In my entire current ELK setup everyday some new changes needs to be performed on grok patterns and to avoid any human mistakes during changes , I want to use lookup file whi… --- ## [Unable to get new field with mutate filter](https://discuss.elastic.co/t/unable-to-get-new-field-with-mutate-filter/302228)
**Author:** [@zubair\_aftab](https://discuss.elastic.co/u/zubair_aftab)\ **Replies:** 4\ **Last updated:** [April 13, 2022, 10:35am UTC](https://discuss.elastic.co/t/unable-to-get-new-field-with-mutate-filter/302228 "2022-04-13T10:35:10Z")
i split my array temp as below if \[temp\] { split { field =\> "\[temp\]" } } i get different fields, one of the is : temp.isup\_isup\_message\_type Then i want to add a new field based on values in this field : temp.isup… --- ## [How to implement advanced search?](https://discuss.elastic.co/t/how-to-implement-advanced-search/301188)
**Author:** [@TS1997](https://discuss.elastic.co/u/TS1997)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 10:29am UTC](https://discuss.elastic.co/t/how-to-implement-advanced-search/301188 "2022-04-13T10:29:10Z")
Hello, I'm currently developing a site using Pimcore and their Advanced Object Search addon for Elasticsearch but am having issues getting hits on the correct words. A stripped down version of the index itself looks lik… --- ## [QUESTION ABOUT ELK SIEM](https://discuss.elastic.co/t/question-about-elk-siem/301633)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 25\ **Last updated:** [April 13, 2022, 10:24am UTC](https://discuss.elastic.co/t/question-about-elk-siem/301633 "2022-04-13T10:24:44Z")
how i can fix this error permanently when i fix it it shows for me again --- ## [Creating visualization that expands log data when clicking on dashboard object](https://discuss.elastic.co/t/creating-visualization-that-expands-log-data-when-clicking-on-dashboard-object/301916)
**Author:** [@Kenneth\_Rodriguez](https://discuss.elastic.co/u/Kenneth_Rodriguez)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 9:39am UTC](https://discuss.elastic.co/t/creating-visualization-that-expands-log-data-when-clicking-on-dashboard-object/301916 "2022-04-13T09:39:32Z")
Is it possible to create a visualization that expands all relevant log data when clicking on a value in dashboard object? For example, I have a pie chart in a dashboard that that tells me the country of origin from traff… --- ## [Successful create index pattern but when go to discovery tab it show "No results match your search criteria"](https://discuss.elastic.co/t/successful-create-index-pattern-but-when-go-to-discovery-tab-it-show-no-results-match-your-search-criteria/302192)
**Author:** [@Sugoy](https://discuss.elastic.co/u/Sugoy)\ **Replies:** 5\ **Last updated:** [April 13, 2022, 9:37am UTC](https://discuss.elastic.co/t/successful-create-index-pattern-but-when-go-to-discovery-tab-it-show-no-results-match-your-search-criteria/302192 "2022-04-13T09:37:39Z")
can anyone help me, i using ELK to logging mikrotik using this tutorial Push logs and data into elasticsearch - Part 2 Mikrotik Logs it successful create index pattern but when go to discovery tab it show "No results mat… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=654) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=656)