# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=873 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 874 --- ## [Multi if condition on filter aggregation](https://discuss.elastic.co/t/multi-if-condition-on-filter-aggregation/279495)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 10\ **Last updated:** [July 26, 2021, 1:56pm UTC](https://discuss.elastic.co/t/multi-if-condition-on-filter-aggregation/279495 "2021-07-26T13:56:03Z")
Hi guys. I hope somebody can help to understand this problem I am having while trying to aggregate a field based on multi if condition. I have a field named message in which I have multiple events coming to. for exampl… --- ## [Query performance- filter aggregation with the same filter improve performance drastically](https://discuss.elastic.co/t/query-performance-filter-aggregation-with-the-same-filter-improve-performance-drastically/279618)
**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 1:47pm UTC](https://discuss.elastic.co/t/query-performance-filter-aggregation-with-the-same-filter-improve-performance-drastically/279618 "2021-07-26T13:47:12Z")
Can anyone explain why the left (pseudo) query runs above 5s the while the right part in 30ms? The filters in the example below, are identical (aggs/ query filters). isn't the aggregation part suppose to run on filtere… --- ## [What does "OK" mean for a rule?](https://discuss.elastic.co/t/what-does-ok-mean-for-a-rule/278536)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 5\ **Last updated:** [July 26, 2021, 12:28pm UTC](https://discuss.elastic.co/t/what-does-ok-mean-for-a-rule/278536 "2021-07-26T12:28:15Z")
Dear all =) What does it mean that a rule is "ok" as seen on this screenshot? I suppose I don't want anything but "Active"? Hugs, Sandra =) --- ## [Problem create dashboard](https://discuss.elastic.co/t/problem-create-dashboard/279378)
**Author:** [@Lisouu\_13](https://discuss.elastic.co/u/Lisouu_13)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 12:27pm UTC](https://discuss.elastic.co/t/problem-create-dashboard/279378 "2021-07-26T12:27:49Z")
Hello, I want to create my first dashboard on kibana 7.13, but I can't do it. I would like to make a graph against the elapsed time that I specified in the data, but the timestamp does not appear anywhere. So i really ne… --- ## [How to use Elasticsearch from a SPA?](https://discuss.elastic.co/t/how-to-use-elasticsearch-from-a-spa/279522)
**Author:** [@kazza](https://discuss.elastic.co/u/kazza)\ **Replies:** 3\ **Last updated:** [July 26, 2021, 12:23pm UTC](https://discuss.elastic.co/t/how-to-use-elasticsearch-from-a-spa/279522 "2021-07-26T12:23:19Z")
I have been wondering what is the best practice when wanting to query Elasticsearch directly from browser javascript. E.g. such as a React/VueJS/Angular application. I hoped that it would be possible to use a standard o… --- ## [Rufus-scheduler error: TZInfo::PeriodNotFound](https://discuss.elastic.co/t/rufus-scheduler-error-tzinfo-periodnotfound/278811)
**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\ **Replies:** 3\ **Last updated:** [July 26, 2021, 12:12pm UTC](https://discuss.elastic.co/t/rufus-scheduler-error-tzinfo-periodnotfound/278811 "2021-07-26T12:12:58Z")
Hi all, I recently posted a question about my logstash pipeline at some point (seemingly) randomly not updating the jdbc metadata for sql\_last\_value substitution. For completeness, I'll include the input plugin of my co… --- ## [ES is getting killed :(](https://discuss.elastic.co/t/es-is-getting-killed/279354)
**Author:** [@kamal\_khushi](https://discuss.elastic.co/u/kamal_khushi)\ **Replies:** 13\ **Last updated:** [July 26, 2021, 11:39am UTC](https://discuss.elastic.co/t/es-is-getting-killed/279354 "2021-07-26T11:39:12Z")
OS:-ubuntu ram:-16gb Storage:-500GB CPU:-i5 10th gen i have Cloned ES in two different directory : Es1 Es2 Then first i launched Es1/bin/elastisearch And next i launched Es2/bin/elastisearch while Es2 is launchi… --- ## [Lfd on Server: Suspicious File Alert](https://discuss.elastic.co/t/lfd-on-server-suspicious-file-alert/279541)
**Author:** [@NileYouth](https://discuss.elastic.co/u/NileYouth)\ **Replies:** 3\ **Last updated:** [July 26, 2021, 9:35am UTC](https://discuss.elastic.co/t/lfd-on-server-suspicious-file-alert/279541 "2021-07-26T09:35:44Z")
I have got many suspiction on CSF notfication can any one help in this or how can I exclode this files Time: Sat Jul 24 20:25:39 2021 +0200 File: /tmp/systemd-private-07b3a323be3d4e5e9196051704fa4e9b-elasticsearch.s… --- ## [Disk space issues on 7.10](https://discuss.elastic.co/t/disk-space-issues-on-7-10/279584)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 8:54am UTC](https://discuss.elastic.co/t/disk-space-issues-on-7-10/279584 "2021-07-26T08:54:51Z")
I have two more or less identical servers in my cluster that each have 3 disks in the data\_path each with 1.5TB. Recently one of the server has started running out of disk on one of the three disks (the first in the li… --- ## [Heap usage](https://discuss.elastic.co/t/heap-usage/279149)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 8:42am UTC](https://discuss.elastic.co/t/heap-usage/279149 "2021-07-26T08:42:21Z")
I'm trying to understand how Elasticsearch uses heap while performing the searches. Does it load entire shard into memory or particular segment for searching the users data? --- ## [How to add a field to the result of the aggregation](https://discuss.elastic.co/t/how-to-add-a-field-to-the-result-of-the-aggregation/279581)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 8:24am UTC](https://discuss.elastic.co/t/how-to-add-a-field-to-the-result-of-the-aggregation/279581 "2021-07-26T08:24:26Z")
I wrote an aggregation, and it meets my requirements, but I also need to add a field (trace.id) when the results are displayed. Trace.id does not need to be aggregated. How should dsl be written in this case? Can an… --- ## [Elasticsearch will return a decreased 'hits total' value](https://discuss.elastic.co/t/elasticsearch-will-return-a-decreased-hits-total-value/279556)
**Author:** [@wangqinghuan](https://discuss.elastic.co/u/wangqinghuan)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 7:44am UTC](https://discuss.elastic.co/t/elasticsearch-will-return-a-decreased-hits-total-value/279556 "2021-07-26T07:44:53Z")
Hi community I have a flink job which will consume Kafka message and load into Elasticsearch. In order to monitor the number of documents loaded into Elasticsearch, I write a DSL to get the 'hits total' in Elasticsearc… --- ## [After securing elasticsearch cluster uuid not found](https://discuss.elastic.co/t/after-securing-elasticsearch-cluster-uuid-not-found/279594)
**Author:** [@Salim\_Adnan](https://discuss.elastic.co/u/Salim_Adnan)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 7:39am UTC](https://discuss.elastic.co/t/after-securing-elasticsearch-cluster-uuid-not-found/279594 "2021-07-26T07:39:43Z")
i have create 4 elastice node all are working find before securing them after securing my cluster uuid not working i detach-cluster my cluster but the problem not solve etc i do following command \> cd /usr/share/elast… --- ## [Elasticsearch Bulk Insert through Python Client API](https://discuss.elastic.co/t/elasticsearch-bulk-insert-through-python-client-api/279032)
**Author:** [@Anirudhan](https://discuss.elastic.co/u/Anirudhan)\ **Replies:** 7\ **Last updated:** [July 26, 2021, 7:24am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-insert-through-python-client-api/279032 "2021-07-26T07:24:59Z")
Dear Team, I am trying to bulk insert 3000 records into an elastic search using BULK API. Whichever documents having the keyword version are not being inserted. For eg: \[{"name": "XXXX", "description": "XXXX", "\_id": … --- ## [How can I add secret to the keystore using API](https://discuss.elastic.co/t/how-can-i-add-secret-to-the-keystore-using-api/279532)
**Author:** [@idelix](https://discuss.elastic.co/u/idelix)\ **Replies:** 3\ **Last updated:** [July 26, 2021, 6:09am UTC](https://discuss.elastic.co/t/how-can-i-add-secret-to-the-keystore-using-api/279532 "2021-07-26T06:09:26Z")
I deployed elastic cloud in Azure and now I'm trying to add keystore secret but not through UI as it will have to be automated in CI/CD. Could you please advise how this can be achieved via either API or some remote co… --- ## [How to add an already existing ElasticSearch server to Cluster?](https://discuss.elastic.co/t/how-to-add-an-already-existing-elasticsearch-server-to-cluster/279575)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 5:04am UTC](https://discuss.elastic.co/t/how-to-add-an-already-existing-elasticsearch-server-to-cluster/279575 "2021-07-26T05:04:45Z")
We have a standalone ElasticSearch server having around 50 indices. We want to add this server to a cluster of 3 nodes which are new (having no data/indices). Is it achievable in Elastic search? Please suggest. --- ## [How to add Load more button or infinte scrolling?](https://discuss.elastic.co/t/how-to-add-load-more-button-or-infinte-scrolling/279151)
**Author:** [@pradeep14](https://discuss.elastic.co/u/pradeep14)\ **Replies:** 5\ **Last updated:** [July 26, 2021, 4:53am UTC](https://discuss.elastic.co/t/how-to-add-load-more-button-or-infinte-scrolling/279151 "2021-07-26T04:53:13Z")
Hi guys I'm new in ES and I want to add a load more button because instead of pagination so could you please hel me --- ## [Query chinese resp?](https://discuss.elastic.co/t/query-chinese-resp/279587)
**Author:** [@GaiserChen](https://discuss.elastic.co/u/GaiserChen)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 4:48am UTC](https://discuss.elastic.co/t/query-chinese-resp/279587 "2021-07-26T04:48:20Z")
when I curl it work succ but when I search in java high level client it work on ??? thanks --- ## [When half more master node down, cluster can't work as normal](https://discuss.elastic.co/t/when-half-more-master-node-down-cluster-cant-work-as-normal/278843)
**Author:** [@chenyg0911](https://discuss.elastic.co/u/chenyg0911)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 3:58am UTC](https://discuss.elastic.co/t/when-half-more-master-node-down-cluster-cant-work-as-normal/278843 "2021-07-26T03:58:41Z")
still looking for a solution. I've to recreate the cluster, and all data lost after recreate the cluster. :cold\_sweat: --- ## [Elasticsearch is still indexing but can not see in kiabana](https://discuss.elastic.co/t/elasticsearch-is-still-indexing-but-can-not-see-in-kiabana/279567)
**Author:** [@anhthang88](https://discuss.elastic.co/u/anhthang88)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 2:45am UTC](https://discuss.elastic.co/t/elasticsearch-is-still-indexing-but-can-not-see-in-kiabana/279567 "2021-07-26T02:45:49Z")
Hi everyone, I have a problem with ES 6.8 I try to index with index rate ~ 1700. But I can not see realtime log in kibana. After the file was truncate, I can see all the logs. every 2 hours I can see the log. I … --- ## [Metricbeat SQL Module : Unable to extract data from a custom query](https://discuss.elastic.co/t/metricbeat-sql-module-unable-to-extract-data-from-a-custom-query/279360)
**Author:** [@VinodKumarPotta](https://discuss.elastic.co/u/VinodKumarPotta)\ **Replies:** 6\ **Last updated:** [July 26, 2021, 2:35am UTC](https://discuss.elastic.co/t/metricbeat-sql-module-unable-to-extract-data-from-a-custom-query/279360 "2021-07-26T02:35:45Z")
Hi Team, Seek your expert advise on this. I have recently enabled Metricbeat sql module to extract data from a custom query. I have followed the instructions given in sql.yml file (SQL module | Metricbeat Reference \[7… --- ## [How to prevent kubernetes bring down more than 1 data node during the deployment](https://discuss.elastic.co/t/how-to-prevent-kubernetes-bring-down-more-than-1-data-node-during-the-deployment/279104)
**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\ **Replies:** 6\ **Last updated:** [July 26, 2021, 2:01am UTC](https://discuss.elastic.co/t/how-to-prevent-kubernetes-bring-down-more-than-1-data-node-during-the-deployment/279104 "2021-07-26T02:01:58Z")
Not sure if this is a question for kubernetes or for elasticsearch. We are hosting elasticsearch on kubernetes. And during the deployment, the kubernetes brings down the pods 1 by 1. But it doesn't wait for the data nod… --- ## [Kibana Error After Connecting Node to a Cluster](https://discuss.elastic.co/t/kibana-error-after-connecting-node-to-a-cluster/279202)
**Author:** [@IWannaDance](https://discuss.elastic.co/u/IWannaDance)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 12:29am UTC](https://discuss.elastic.co/t/kibana-error-after-connecting-node-to-a-cluster/279202 "2021-07-26T00:29:50Z")
I originally had a single-node cluster set on machine 1, and everything was working fine. Then I tried to add another node to the cluster on machine 2 in the local area network. I had started elasticsearch on machine 2 … --- ## [How to find disk space usage of logs returned by query](https://discuss.elastic.co/t/how-to-find-disk-space-usage-of-logs-returned-by-query/279220)
**Author:** [@jteare](https://discuss.elastic.co/u/jteare)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 12:29am UTC](https://discuss.elastic.co/t/how-to-find-disk-space-usage-of-logs-returned-by-query/279220 "2021-07-26T00:29:05Z")
I am attempting to determine storage requirements for logging various systems. It's convenient when all logs for the system in question are going into one index e.g. all firewall logs going into a firewall index, I can j… --- ## [Metricbeat monitor using kibana](https://discuss.elastic.co/t/metricbeat-monitor-using-kibana/279296)
**Author:** [@ruwan1235](https://discuss.elastic.co/u/ruwan1235)\ **Replies:** 0\ **Last updated:** [July 21, 2021, 5:37pm UTC](https://discuss.elastic.co/t/metricbeat-monitor-using-kibana/279296 "2021-07-21T17:37:18Z")
Hi I used metricbeat to monitor my k8s cluster. i downloard metricbeat Download Metricbeat • Ship Metrics to Elasticsearch | Elastic site and used linux 64. i alredy create bear taken and used it. but still not working c… --- ## [Are the logs lost if elastic search down](https://discuss.elastic.co/t/are-the-logs-lost-if-elastic-search-down/279561)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 3\ **Last updated:** [July 25, 2021, 6:04pm UTC](https://discuss.elastic.co/t/are-the-logs-lost-if-elastic-search-down/279561 "2021-07-25T18:04:39Z")
Hello every body, I have a question about the fate of the logs when the elasticsearch is down. if the logs are lost during the inactivity of elasticsearch, how can we get around this problem? Best regards, --- ## [Fscrawler image file text extraction](https://discuss.elastic.co/t/fscrawler-image-file-text-extraction/279538)
**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\ **Replies:** 6\ **Last updated:** [July 25, 2021, 5:50pm UTC](https://discuss.elastic.co/t/fscrawler-image-file-text-extraction/279538 "2021-07-25T17:50:54Z")
Hello! I use FScrawler 2.7 on Windows 7 to ingest files content into Elastic 7.13 node on centos 7. It works really greate for .pdf and .docx extensions, but not for imge files such as .jpg or .png and .txt files. My… --- ## [Logstash filter json warning](https://discuss.elastic.co/t/logstash-filter-json-warning/279352)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [July 25, 2021, 3:16pm UTC](https://discuss.elastic.co/t/logstash-filter-json-warning/279352 "2021-07-25T15:16:56Z")
Using ELK 7.13.2 The logstash is consuming logs from kafka in json format earlier it was parsing the data but now it is not working \[2021-07-22T12:18:44,401\]\[WARN \]\[logstash.filters.json \]\[ise\]\[d51b308934c5e59604230… --- ## [Howto configure log4j2.properties to log to /dev/log](https://discuss.elastic.co/t/howto-configure-log4j2-properties-to-log-to-dev-log/279566)
**Author:** [@f1outsourcing](https://discuss.elastic.co/u/f1outsourcing)\ **Replies:** 0\ **Last updated:** [July 25, 2021, 2:01pm UTC](https://discuss.elastic.co/t/howto-configure-log4j2-properties-to-log-to-dev-log/279566 "2021-07-25T14:01:30Z")
I can get this to work, but I prefer to log to /dev/log appender.syslog.type = Syslog appender.syslog.name = syslog appender.syslog.host = xxxxxxxx.local appender.syslog.port = 514 appender.syslog.protocol = UDP ap… --- ## [How to run multiple nodes with esplugin / testsClusters?](https://discuss.elastic.co/t/how-to-run-multiple-nodes-with-esplugin-testsclusters/279562)
**Author:** [@Dor\_Levi](https://discuss.elastic.co/u/Dor_Levi)\ **Replies:** 0\ **Last updated:** [July 25, 2021, 1:15pm UTC](https://discuss.elastic.co/t/how-to-run-multiple-nodes-with-esplugin-testsclusters/279562 "2021-07-25T13:15:13Z")
Hi, I'm working on a plugin for Elasticsearch, and want to try and test it in a multi-node cluster. I'm building it with gradle and the esplugin/testcluster plugins. Everything works great when it's just one node, but… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=872) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=874)