# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1079 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1080 --- ## [Query ES cluster state size](https://discuss.elastic.co/t/query-es-cluster-state-size/261542)
**Author:** [@CanardMoussant](https://discuss.elastic.co/u/CanardMoussant)\ **Replies:** 3\ **Last updated:** [January 19, 2021, 1:36pm UTC](https://discuss.elastic.co/t/query-es-cluster-state-size/261542 "2021-01-19T13:36:37Z")
I would like to get the size of the compressed cluster state (as done in PublishClusterStateAction) using an external API. Is it something possible? I am not calling it from java so I cannot duplicate the code doing the … --- ## [Logstash doesn't index to elasticsearch properly/delay in indexing](https://discuss.elastic.co/t/logstash-doesnt-index-to-elasticsearch-properly-delay-in-indexing/261536)
**Author:** [@thrower](https://discuss.elastic.co/u/thrower)\ **Replies:** 0\ **Last updated:** [January 19, 2021, 12:02pm UTC](https://discuss.elastic.co/t/logstash-doesnt-index-to-elasticsearch-properly-delay-in-indexing/261536 "2021-01-19T12:02:43Z")
There is quite a significant delay occurring when there is updation in the database. It takes up to one to half an hour for the change to be reflected in the elasticsearch index. However if I change another product or ch… --- ## [Debugging extremely slow indexing](https://discuss.elastic.co/t/debugging-extremely-slow-indexing/258498)
**Author:** [@beckerr](https://discuss.elastic.co/u/beckerr)\ **Replies:** 38\ **Last updated:** [January 19, 2021, 11:48am UTC](https://discuss.elastic.co/t/debugging-extremely-slow-indexing/258498 "2021-01-19T11:48:32Z")
I have recently "inherited" an ES cluster at work that used to run just fine (since I inherited at least) but recently has been experiencing extreme performance issues around indexing. We have 20 "processor" containers i… --- ## [Create log visualization for my recently created logs](https://discuss.elastic.co/t/create-log-visualization-for-my-recently-created-logs/261261)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 7\ **Last updated:** [January 19, 2021, 11:37am UTC](https://discuss.elastic.co/t/create-log-visualization-for-my-recently-created-logs/261261 "2021-01-19T11:37:10Z")
Hy guys. Im sending some logs from a custom process using elasticsearch api interface. I can see logs at discover section. Now , I need to create a visualization for non technical personal. I dont need any graphs , j… --- ## [How to disable limitation of index fields](https://discuss.elastic.co/t/how-to-disable-limitation-of-index-fields/261347)
**Author:** [@liran1](https://discuss.elastic.co/u/liran1)\ **Replies:** 2\ **Last updated:** [January 19, 2021, 11:29am UTC](https://discuss.elastic.co/t/how-to-disable-limitation-of-index-fields/261347 "2021-01-19T11:29:21Z")
In the ElasticSearch docs, I found a way to increase the default index fields parameter (1000), I wonder if there is an option to disable the limitation for good? Thanks :slight\_smile: --- ## [Timezone of kibana logs should be same host's timezone](https://discuss.elastic.co/t/timezone-of-kibana-logs-should-be-same-hosts-timezone/261008)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 7\ **Last updated:** [January 19, 2021, 11:22am UTC](https://discuss.elastic.co/t/timezone-of-kibana-logs-should-be-same-hosts-timezone/261008 "2021-01-19T11:22:20Z")
We are using ELK 7.8.0 version and want to have kibana logs in the same timezone as host's timezone. In this topic "https://discuss.elastic.co/t/changing-the-timezone-of-logs-written-in-logging-dest-in-kibana-yml/117564"… --- ## [Rendimiento en ingesta - Nodos de coordinación](https://discuss.elastic.co/t/rendimiento-en-ingesta-nodos-de-coordinacion/260889)
**Author:** [@malambra](https://discuss.elastic.co/u/malambra)\ **Replies:** 2\ **Last updated:** [January 19, 2021, 10:42am UTC](https://discuss.elastic.co/t/rendimiento-en-ingesta-nodos-de-coordinacion/260889 "2021-01-19T10:42:43Z")
Hola, Tengo varios entornos en los que estamos ingestando entre 5000 y 30000 eps con una replica, en clusters de entre 4 y 12 nodos de elastic (+3 nodos master dedicados). La ingesta se realiza desde entre 4 a 8 nodos … --- ## [Timezone in UTC causes wrong filename](https://discuss.elastic.co/t/timezone-in-utc-causes-wrong-filename/261480)
**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\ **Replies:** 3\ **Last updated:** [January 19, 2021, 10:23am UTC](https://discuss.elastic.co/t/timezone-in-utc-causes-wrong-filename/261480 "2021-01-19T10:23:23Z")
i have a logserver with logstash only. no elasticsearch nor kibana. all other servers are using filebeat to send log to the logserver. logstash writes to /var/log/logstash/appname.txt.%{+YYYY-MM-dd} after some processi… --- ## [Select only one field to output](https://discuss.elastic.co/t/select-only-one-field-to-output/261451)
**Author:** [@Finley](https://discuss.elastic.co/u/Finley)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 4:40pm UTC](https://discuss.elastic.co/t/select-only-one-field-to-output/261451 "2021-01-18T16:40:50Z")
Hello, I'm trying to setup a logstash configuration. I want to forward the event.original field only on the udp output. I have a filebeat input, and elasticsearch/udp output. I tried the "codec line" option with "forma… --- ## [How to share Dashboard to our business client](https://discuss.elastic.co/t/how-to-share-dashboard-to-our-business-client/261431)
**Author:** [@irfangk1](https://discuss.elastic.co/u/irfangk1)\ **Replies:** 6\ **Last updated:** [January 19, 2021, 9:36am UTC](https://discuss.elastic.co/t/how-to-share-dashboard-to-our-business-client/261431 "2021-01-19T09:36:55Z")
Hi Team, I want to share Dashbaord to our Bussiness Client how can we make changes in Dashboard with our companys logo and our company details --- ## [Aggregate the data such that there's a new column which depends on the original Question?](https://discuss.elastic.co/t/aggregate-the-data-such-that-theres-a-new-column-which-depends-on-the-original-question/260859)
**Author:** [@Prabhu.292](https://discuss.elastic.co/u/Prabhu.292)\ **Replies:** 8\ **Last updated:** [January 19, 2021, 9:35am UTC](https://discuss.elastic.co/t/aggregate-the-data-such-that-theres-a-new-column-which-depends-on-the-original-question/260859 "2021-01-19T09:35:12Z")
Dear Team, Below is my requirement. I have 2 fields in my system (1. Category & 2. Questions) Here is my requirement goes. and below is my data. My requirement. I need to Manually add one more new field called Sub … --- ## [Logstash translate filter](https://discuss.elastic.co/t/logstash-translate-filter/261518)
**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\ **Replies:** 0\ **Last updated:** [January 19, 2021, 9:31am UTC](https://discuss.elastic.co/t/logstash-translate-filter/261518 "2021-01-19T09:31:02Z")
hi, i have a csv file containing malicious domains and category,i want to check whether those domains are comings in my logs and i achieved that using translate field..but i want to extract the particular category also… --- ## [Force a node to be the master](https://discuss.elastic.co/t/force-a-node-to-be-the-master/261467)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 6\ **Last updated:** [January 19, 2021, 9:26am UTC](https://discuss.elastic.co/t/force-a-node-to-be-the-master/261467 "2021-01-19T09:26:23Z")
Just curious, how to fix a broken cluster like this: Via official Helm release, I made a 3 nodes cluster, was working fine: node-0 / node-1 / node-2 I scaled down the STS to 0, to remove all pods/nodes. Then when I s… --- ## [Clearing cache on stack with read only indices](https://discuss.elastic.co/t/clearing-cache-on-stack-with-read-only-indices/261507)
**Author:** [@crs](https://discuss.elastic.co/u/crs)\ **Replies:** 2\ **Last updated:** [January 19, 2021, 9:15am UTC](https://discuss.elastic.co/t/clearing-cache-on-stack-with-read-only-indices/261507 "2021-01-19T09:15:43Z")
Hi, I have system (ES 7.6.2) with many read only indices (index.blocks.read\_only=true). All works fine but when I want to clear cache (curl -X POST "localhost:9200/\_cache/clear") then I'm getting a lot of errors "index … --- ## [How to use significant term in Y axis during visualisation](https://discuss.elastic.co/t/how-to-use-significant-term-in-y-axis-during-visualisation/261380)
**Author:** [@Aryaman\_Gupta](https://discuss.elastic.co/u/Aryaman_Gupta)\ **Replies:** 3\ **Last updated:** [January 19, 2021, 8:37am UTC](https://discuss.elastic.co/t/how-to-use-significant-term-in-y-axis-during-visualisation/261380 "2021-01-19T08:37:46Z")
I am new to use visualisation in kibana. During visualisation, I saw in Y axis by default uses count i.e number of logs filtered. But I want it to behave differently, I want Y axis to represent time and x axis to repre… --- ## [Elasticsearch Failed with signal](https://discuss.elastic.co/t/elasticsearch-failed-with-signal/260975)
**Author:** [@Joegio](https://discuss.elastic.co/u/Joegio)\ **Replies:** 4\ **Last updated:** [January 19, 2021, 8:09am UTC](https://discuss.elastic.co/t/elasticsearch-failed-with-signal/260975 "2021-01-19T08:09:15Z")
Good Morning, i'm newbie with elasticsearch. I have installed zammad on the our server with elasticsearch. ES service running but after about one hour has been killed with result 'signal'. I have tried to change confi… --- ## [Join query type in Query DSL](https://discuss.elastic.co/t/join-query-type-in-query-dsl/261423)
**Author:** [@Sivajanani](https://discuss.elastic.co/u/Sivajanani)\ **Replies:** 4\ **Last updated:** [January 19, 2021, 7:45am UTC](https://discuss.elastic.co/t/join-query-type-in-query-dsl/261423 "2021-01-19T07:45:10Z")
Hello, I have created a join field using below query, PUT test\_corr { "mappings": { "properties": { "my\_id": { "type": "keyword" }, "my\_join\_field": { "type": "join", "relations": { "indicators": "indicator" … --- ## [Elasticsearch threadpool and index settings in ECK](https://discuss.elastic.co/t/elasticsearch-threadpool-and-index-settings-in-eck/261272)
**Author:** [@zohaib](https://discuss.elastic.co/u/zohaib)\ **Replies:** 5\ **Last updated:** [January 18, 2021, 9:53am UTC](https://discuss.elastic.co/t/elasticsearch-threadpool-and-index-settings-in-eck/261272 "2021-01-18T09:53:55Z")
We are using ECK operator 1.2 and ElasticSearch 7.4.0 for a 3 node cluster with the default settings on Azure Kubernetes Services. We need to update the following ElasticSearch configuration in our cluster: threadpool.… --- ## [I want to restict my Time range as per user](https://discuss.elastic.co/t/i-want-to-restict-my-time-range-as-per-user/261424)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 3\ **Last updated:** [January 19, 2021, 5:34am UTC](https://discuss.elastic.co/t/i-want-to-restict-my-time-range-as-per-user/261424 "2021-01-19T05:34:56Z")
Hi, I want to restrict my Kibana Dashboard Time-Range feature to specific dates as per User or Space. In brief, If A user Logs in he should be able to see data till 30 days, where B user can only search data for only … --- ## [Dec 14th, 2020 \[CN\] 如何成为一名 Elastic 认证工程师](https://discuss.elastic.co/t/dec-14th-2020-cn-elastic/257010)
**Author:** [@xiaoguo.liu](https://discuss.elastic.co/u/xiaoguo.liu)\ **Replies:** 2\ **Last updated:** [January 19, 2021, 3:01am UTC](https://discuss.elastic.co/t/dec-14th-2020-cn-elastic/257010 "2021-01-19T03:01:32Z")
Elasticsearch 无疑是是目前世界上最为流行的大数据搜索引擎。世界上很多著名的 IT 公司都是我们的客户。这些客户包括微软，甲骨文，Adobe，Salesforce, Uber，苹果，沃尔玛等等这些跨国公司。在中国也有很多的用户，比如腾讯，阿里，360，滴滴，抖音，美团，联想，CCTV，银行公司，保险公司，电信公司，汽车制造商，手机制造商等等。我们常用到的 github，linkedin，wikipedia 等上面的搜索都是使… --- ## [How can I stop cluster from filling my cold nodes with hot data?](https://discuss.elastic.co/t/how-can-i-stop-cluster-from-filling-my-cold-nodes-with-hot-data/261044)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 5\ **Last updated:** [January 19, 2021, 1:11am UTC](https://discuss.elastic.co/t/how-can-i-stop-cluster-from-filling-my-cold-nodes-with-hot-data/261044 "2021-01-19T01:11:56Z")
title really says it all. I just added two cold nodes to my cluster -- these have slow disks and I don't want active indexes on them but I find that ES is treating them the same as the other nodes. both nodes have node… --- ## [Kibana Intensif](https://discuss.elastic.co/t/kibana-intensif/260185)
**Author:** [@rbeg](https://discuss.elastic.co/u/rbeg)\ **Replies:** 4\ **Last updated:** [January 19, 2021, 12:09am UTC](https://discuss.elastic.co/t/kibana-intensif/260185 "2021-01-19T00:09:51Z")
Bonjour, Lorsqu'ELK commence à contenir beaucoup de données, ça se ressent dans les temps de réaction sur Kibana qui commencent à devenir plus longs. J'aimerai savoir s'il existe une fonctionnalité, un plugin, ou autre… --- ## [How many RAM does lucene occupy](https://discuss.elastic.co/t/how-many-ram-does-lucene-occupy/261437)
**Author:** [@Hungming\_Chiu](https://discuss.elastic.co/u/Hungming_Chiu)\ **Replies:** 1\ **Last updated:** [January 18, 2021, 10:15pm UTC](https://discuss.elastic.co/t/how-many-ram-does-lucene-occupy/261437 "2021-01-18T22:15:00Z")
Hi there, Any way to know how many RAM does lucene occupy? Thank you --- ## [SQL to ElasticSearch, only new rows?](https://discuss.elastic.co/t/sql-to-elasticsearch-only-new-rows/261476)
**Author:** [@sath](https://discuss.elastic.co/u/sath)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 9:43pm UTC](https://discuss.elastic.co/t/sql-to-elasticsearch-only-new-rows/261476 "2021-01-18T21:43:28Z")
Hello, I'm relatively new to the ELK stack. I'm wondering how I could send data from a SQL table to Elasticsearch in a way that every time it runs, it only sends the rows that are new since the last time it ran. The SQL… --- ## [How to change index status from warm to hot](https://discuss.elastic.co/t/how-to-change-index-status-from-warm-to-hot/261398)
**Author:** [@opouwels](https://discuss.elastic.co/u/opouwels)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 9:24pm UTC](https://discuss.elastic.co/t/how-to-change-index-status-from-warm-to-hot/261398 "2021-01-18T21:24:38Z")
Hi How can I change the index from warm to hot? Regards Oscar --- ## [Delete old Elasticsearch Data Automatically](https://discuss.elastic.co/t/delete-old-elasticsearch-data-automatically/261464)
**Author:** [@Amantha](https://discuss.elastic.co/u/Amantha)\ **Replies:** 1\ **Last updated:** [January 18, 2021, 9:20pm UTC](https://discuss.elastic.co/t/delete-old-elasticsearch-data-automatically/261464 "2021-01-18T21:20:43Z")
I want to delete old elasticserach data automatically. Is there any proper method to do it? Can we delete those data within a preferred time period? --- ## [Elasticsearch repository-azure kubernetes](https://discuss.elastic.co/t/elasticsearch-repository-azure-kubernetes/261473)
**Author:** [@Pmoraes13](https://discuss.elastic.co/u/Pmoraes13)\ **Replies:** 0\ **Last updated:** [January 18, 2021, 8:44pm UTC](https://discuss.elastic.co/t/elasticsearch-repository-azure-kubernetes/261473 "2021-01-18T20:44:51Z")
Hello, someone has using Elasticsearch with repository-azure or Azure storage account for backup the snapshots? I'm trying to configure my kubernetes yml to install azure plugin before pod start but not success. All good… --- ## [Multi match equal both fields](https://discuss.elastic.co/t/multi-match-equal-both-fields/261463)
**Author:** [@seefor](https://discuss.elastic.co/u/seefor)\ **Replies:** 1\ **Last updated:** [January 18, 2021, 7:32pm UTC](https://discuss.elastic.co/t/multi-match-equal-both-fields/261463 "2021-01-18T19:32:20Z")
New to elastic search I have the following search, which works great but I would like to only return when both "result.confidence", "result.severity" = HIGH instead of when either equal HIGH { "size": 10000, … --- ## [Signal.rule.name empty?](https://discuss.elastic.co/t/signal-rule-name-empty/260823)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 6\ **Last updated:** [January 18, 2021, 7:08pm UTC](https://discuss.elastic.co/t/signal-rule-name-empty/260823 "2021-01-18T19:08:22Z")
Hello, Just noticed signal.rule.name is empty for some rules? Elastic 7.9.2 The above screenshot is from the rule "VNC to the Internet" which I copied from the official " VNC (Virtual Network Computing) to the Intern… --- ## [Update of field created by ruby script](https://discuss.elastic.co/t/update-of-field-created-by-ruby-script/261459)
**Author:** [@ggab31](https://discuss.elastic.co/u/ggab31)\ **Replies:** 3\ **Last updated:** [January 18, 2021, 6:24pm UTC](https://discuss.elastic.co/t/update-of-field-created-by-ruby-script/261459 "2021-01-18T18:24:33Z")
Hi, I have a logstash ruby filter that creates a few fields composed of two parts in a heartbeat index, this way : ruby { code =\> " temp=Time.new; event.set('time.second', temp.localtime.strftime('%S')); … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1078) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1080)