# Top

**URL:** https://discuss.elastic.co/top.md?page=1098&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1099

---

## [Calculating ArcDistance of a geopoint field within an object field](https://discuss.elastic.co/t/calculating-arcdistance-of-a-geopoint-field-within-an-object-field/17027)

<div class="topic-metadata">

**Author:** [@Umami](https://discuss.elastic.co/u/Umami)\
**Replies:** 4\
**Last updated:** [April 17, 2014, 12:24pm UTC](https://discuss.elastic.co/t/calculating-arcdistance-of-a-geopoint-field-within-an-object-field/17027 "2014-04-17T12:24:47Z")

</div>

I am trying to obtain geodistance values for records in cases where geodistance is not the primary purpose of the search (i.e. do not want it to affect score/sort not included in a query/filter), but where that inf…

---

## [Logstash isn't starting. Getting a FATAL error](https://discuss.elastic.co/t/logstash-isnt-starting-getting-a-fatal-error/309045)

<div class="topic-metadata">

**Author:** [@kakkarsachin7](https://discuss.elastic.co/u/kakkarsachin7)\
**Replies:** 6\
**Last updated:** [July 6, 2022, 8:40pm UTC](https://discuss.elastic.co/t/logstash-isnt-starting-getting-a-fatal-error/309045 "2022-07-06T20:40:00Z")

</div>

I am new to ELK stack. I am able to start Elasticsearch and Kibana but unable to start Logstash using command logstash -f logstash-studio.conf Version 7.14 Java Version 1.8 Here are the logs:- Using JAVA\_HOME defined…

---

## [Increased disk writes on elasticsearch](https://discuss.elastic.co/t/increased-disk-writes-on-elasticsearch/182949)

<div class="topic-metadata">

**Author:** [@camjesus2](https://discuss.elastic.co/u/camjesus2)\
**Replies:** 6\
**Last updated:** [May 29, 2019, 8:56am UTC](https://discuss.elastic.co/t/increased-disk-writes-on-elasticsearch/182949 "2019-05-29T08:56:51Z")

</div>

Hi all, kinda new to ES, so please bear with me. I've noticed a clear increse in disk WRITES more or less (but not quite) coincident with the upgrade to ES 7. I have only one node with around 150 shards ingesting data …

---

## [How to get horisontal bars fill the width?](https://discuss.elastic.co/t/how-to-get-horisontal-bars-fill-the-width/146433)

<div class="topic-metadata">

**Author:** [@GGorast](https://discuss.elastic.co/u/GGorast)\
**Replies:** 6\
**Last updated:** [August 30, 2018, 8:07pm UTC](https://discuss.elastic.co/t/how-to-get-horisontal-bars-fill-the-width/146433 "2018-08-30T20:07:21Z")

</div>

I can not manage to get the horizontal bar with highest value to fill the width of the element. As you can see on the screen shot the rectangle for the element is far right but there is a free space, a gap till the en…

---

## [How to switch rows and columns in datatable in Canvas?](https://discuss.elastic.co/t/how-to-switch-rows-and-columns-in-datatable-in-canvas/185731)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [June 14, 2019, 2:59pm UTC](https://discuss.elastic.co/t/how-to-switch-rows-and-columns-in-datatable-in-canvas/185731 "2019-06-14T14:59:04Z")

</div>

Hello. I would like to get help with kibana Canvas. I have a data table as below. My goal here is to create a table like below. I want to create columns according to the value of tag\_type. shape.model first …

---

## [Logstash server NOT seeing files shipped by rsyslog from remote client?](https://discuss.elastic.co/t/logstash-server-not-seeing-files-shipped-by-rsyslog-from-remote-client/59227)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 2\
**Last updated:** [August 30, 2016, 6:10pm UTC](https://discuss.elastic.co/t/logstash-server-not-seeing-files-shipped-by-rsyslog-from-remote-client/59227 "2016-08-30T18:10:12Z")

</div>

Logstash is not seeing files sent over from a remote client (VM running rsyslog) on my ELK server. I've been following the great article How to ship logs with Rsyslog and Logstash and am at the point where I'm shipping…

---

## [Af\_packet error on RHEL](https://discuss.elastic.co/t/af-packet-error-on-rhel/37314)

<div class="topic-metadata">

**Author:** [@Marcbilger](https://discuss.elastic.co/u/Marcbilger)\
**Replies:** 2\
**Last updated:** [December 16, 2015, 9:56am UTC](https://discuss.elastic.co/t/af-packet-error-on-rhel/37314 "2015-12-16T09:56:14Z")

</div>

Hi, First, I'd like to thank you for the great job you're providing ! Here is my use case : I want to get DNS data into ELK (huge amount of packets/ sec). Packetbeat is installed on a dedicated server. I installed P…

---

## [Dynamic Mapping and Pending Tasks](https://discuss.elastic.co/t/dynamic-mapping-and-pending-tasks/28604)

<div class="topic-metadata">

**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\
**Replies:** 2\
**Last updated:** [September 5, 2015, 11:40am UTC](https://discuss.elastic.co/t/dynamic-mapping-and-pending-tasks/28604 "2015-09-05T11:40:36Z")

</div>

Hi, We are dynamically adding new fields to our index. It creates large number of pending tasks especially "refresh-mapping" tasks . We are creating daily indices , once a day rotated for the first 7 or 8 hours we ha…

---

## [Text embedding different in elastic search and python library](https://discuss.elastic.co/t/text-embedding-different-in-elastic-search-and-python-library/329164)

<div class="topic-metadata">

**Author:** [@Roshan\_Kumar1](https://discuss.elastic.co/u/Roshan_Kumar1)\
**Replies:** 5\
**Last updated:** [July 5, 2023, 3:07pm UTC](https://discuss.elastic.co/t/text-embedding-different-in-elastic-search-and-python-library/329164 "2023-07-05T15:07:51Z")

</div>

Deploying sentence transformer model as provided in this blog, using eland on Elasticsearch returns only the embedding corresponding to the first token. However, while using the python implementation to encode the text r…

---

## [JVM setting](https://discuss.elastic.co/t/jvm-setting/287954)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 5\
**Last updated:** [November 9, 2021, 1:49am UTC](https://discuss.elastic.co/t/jvm-setting/287954 "2021-11-09T01:49:56Z")

</div>

What should be prefer jvm option for cluster? using elasicsearch java three node x 100gig ram each, 20core each host -Xms24g -Xmx24g -XX:+UseG1GC -XX:G1ReservePercent=25 -XX:InitiatingHeapOccupancyPercent=30 or follo…

---

## [Unable to disable Java APM agent in 1.9.0](https://discuss.elastic.co/t/unable-to-disable-java-apm-agent-in-1-9-0/197669)

<div class="topic-metadata">

**Author:** [@jaks](https://discuss.elastic.co/u/jaks)\
**Replies:** 5\
**Last updated:** [September 3, 2019, 2:39pm UTC](https://discuss.elastic.co/t/unable-to-disable-java-apm-agent-in-1-9-0/197669 "2019-09-03T14:39:13Z")

</div>

We are using the APM agent 1.9.0 in production & pre-prod. For dev services, we want to disable the APM, for this we are trying to set via Environment variables. Disabling of APM worked in 1.7.0, but it is not working in…

---

## [Stored fields and SearchResponse](https://discuss.elastic.co/t/stored-fields-and-searchresponse/342062)

<div class="topic-metadata">

**Author:** [@toddcarv](https://discuss.elastic.co/u/toddcarv)\
**Replies:** 7\
**Last updated:** [September 5, 2023, 7:00pm UTC](https://discuss.elastic.co/t/stored-fields-and-searchresponse/342062 "2023-09-05T19:00:34Z")

</div>

Example: SearchResponse\<ObjectNode\> searchResponse = elasticsearchClient.search(searchRequest, ObjectNode.class); Hit\<ObjectNode\> hit = searchResponse.hits().hits().get(0); Map\<String, JsonData\> fields = hit.fields(); J…

---

## [Set custom ID for elastic-agent](https://discuss.elastic.co/t/set-custom-id-for-elastic-agent/282419)

<div class="topic-metadata">

**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\
**Replies:** 7\
**Last updated:** [August 30, 2021, 7:17pm UTC](https://discuss.elastic.co/t/set-custom-id-for-elastic-agent/282419 "2021-08-30T19:17:56Z")

</div>

Hello, Is it possible to set or create a custom agent.id during or after the elastic-agent install, whether it be via a command line argument or an API call we can make? For example, instead of agent.id being a uuid li…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/277844)

<div class="topic-metadata">

**Author:** [@sagar.pattnayak](https://discuss.elastic.co/u/sagar.pattnayak)\
**Replies:** 7\
**Last updated:** [July 8, 2021, 2:17pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/277844 "2021-07-08T14:17:09Z")

</div>

Hi There, I have recently enabled SSL for my elastic instance using out company provided SSL certificate. The elasticsearch is running fine and i can query it using https url. However when I open Kibana it says "Kibana …

---

## [Is Prune Supported on 5.0?](https://discuss.elastic.co/t/is-prune-supported-on-5-0/61751)

<div class="topic-metadata">

**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\
**Replies:** 7\
**Last updated:** [November 4, 2016, 5:47am UTC](https://discuss.elastic.co/t/is-prune-supported-on-5-0/61751 "2016-11-04T05:47:52Z")

</div>

Wondering if Prune filter is still supported on logstash 5.0? Looks like it requires lower version of logstash. Error: In Gemfile: logstash-filter-prune (\>= 0) java depends on logstash (\< 2.0.0, \>= 1.4.0) jav…

---

## [Cluster recovery is slower than molasses](https://discuss.elastic.co/t/cluster-recovery-is-slower-than-molasses/48206)

<div class="topic-metadata">

**Author:** [@imabob](https://discuss.elastic.co/u/imabob)\
**Replies:** 7\
**Last updated:** [April 29, 2016, 6:10pm UTC](https://discuss.elastic.co/t/cluster-recovery-is-slower-than-molasses/48206 "2016-04-29T18:10:47Z")

</div>

We've been running into this issue with multiple clusters and I'm wondering if there's something inherently wrong with what we're doing. We take logs in from various services and systems to keep an eye on how things a…

---

## [Kibana Line Graph - Cumulative](https://discuss.elastic.co/t/kibana-line-graph-cumulative/168845)

<div class="topic-metadata">

**Author:** [@ek9boy](https://discuss.elastic.co/u/ek9boy)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 9:21pm UTC](https://discuss.elastic.co/t/kibana-line-graph-cumulative/168845 "2019-02-20T21:21:14Z")

</div>

I am new to Kibana I need to create a graph to show the two below: A graph showing a Cumulative total of files each day (split by hour) Also on the same graph a count of files each day (split by hour) this should aut…

---

## [Elasticsearch::Transport::Transport::Errors::BadRequest](https://discuss.elastic.co/t/elasticsearch-badrequest/156507)

<div class="topic-metadata">

**Author:** [@jonaspreisler](https://discuss.elastic.co/u/jonaspreisler)\
**Replies:** 1\
**Last updated:** [November 14, 2018, 8:45am UTC](https://discuss.elastic.co/t/elasticsearch-badrequest/156507 "2018-11-14T08:45:08Z")

</div>

How to solve this error? This is my model file (Ruby on Rails): https://github.com/JonasPreisler/tim4/blob/master/app/models/vehicle.rb This is the error: Elasticsearch::Transport::Transport::Errors::BadRequest: \[400\]…

---

## [Extract domain with grok](https://discuss.elastic.co/t/extract-domain-with-grok/103156)

<div class="topic-metadata">

**Author:** [@Shoham\_Ben\_Shitrit](https://discuss.elastic.co/u/Shoham_Ben_Shitrit)\
**Replies:** 1\
**Last updated:** [October 10, 2017, 8:54am UTC](https://discuss.elastic.co/t/extract-domain-with-grok/103156 "2017-10-10T08:54:46Z")

</div>

I'd like to make the simplest grok filter, just to extract domain from url For example, for the url https://discuss.elastic.co/top/all I'd like to get the result discuss.elastic.co I tried to do so with the filter %…

---

## [Reindex with new boolean field and null\_value](https://discuss.elastic.co/t/reindex-with-new-boolean-field-and-null-value/82166)

<div class="topic-metadata">

**Author:** [@Kissaki](https://discuss.elastic.co/u/Kissaki)\
**Replies:** 1\
**Last updated:** [April 12, 2017, 1:24pm UTC](https://discuss.elastic.co/t/reindex-with-new-boolean-field-and-null-value/82166 "2017-04-12T13:24:36Z")

</div>

Hi, I was adding a new boolean field for an existing index and need to have that field for all existing documents with the default value of false. So I changed the template for my indexes and added a mapping like this: …

---

## [No Index for winlogbeat-\*](https://discuss.elastic.co/t/no-index-for-winlogbeat/73028)

<div class="topic-metadata">

**Author:** [@craigothy](https://discuss.elastic.co/u/craigothy)\
**Replies:** 1\
**Last updated:** [January 27, 2017, 3:09pm UTC](https://discuss.elastic.co/t/no-index-for-winlogbeat/73028 "2017-01-27T15:09:42Z")

</div>

For some reason, my winlogbeat indexes are not being created. I have installed the template manually and verified that it is there along with my default logstash template. I also see data hitting my logstash listening po…

---

## [Basic elasticsearch tribe setup with docker](https://discuss.elastic.co/t/basic-elasticsearch-tribe-setup-with-docker/69944)

<div class="topic-metadata">

**Author:** [@ssakhuja](https://discuss.elastic.co/u/ssakhuja)\
**Replies:** 1\
**Last updated:** [December 24, 2016, 6:13pm UTC](https://discuss.elastic.co/t/basic-elasticsearch-tribe-setup-with-docker/69944 "2016-12-24T18:13:58Z")

</div>

Hello! I am wanting to do a very basic setup to see if a tribe setup works with docker. I have the below: A 1 node cluster that I run with simply: docker run -d elasticsearch I then check the IP of the above cont…

---

## [java.lang.OutOfMemoryError](https://discuss.elastic.co/t/java-lang-outofmemoryerror/57292)

<div class="topic-metadata">

**Author:** [@hadonas](https://discuss.elastic.co/u/hadonas)\
**Replies:** 1\
**Last updated:** [August 5, 2016, 7:52am UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror/57292 "2016-08-05T07:52:41Z")

</div>

I am running two nodes with logs about 200 gigabytes on my backup database. My nodes were returning OutOfMemoryError after processing few queries, so I have set up bootstrap.mlockall to true, modified etc/security/limits…

---

## [Confusing memory settings on Ubuntu](https://discuss.elastic.co/t/confusing-memory-settings-on-ubuntu/29065)

<div class="topic-metadata">

**Author:** [@Florin\_Andrei](https://discuss.elastic.co/u/Florin_Andrei)\
**Replies:** 1\
**Last updated:** [September 11, 2015, 12:01am UTC](https://discuss.elastic.co/t/confusing-memory-settings-on-ubuntu/29065 "2015-09-11T00:01:47Z")

</div>

When I install ES from a .deb package on Ubuntu, it creates /etc/default/elasticsearch with something like this: ES\_HEAP\_SIZE=2g ES\_MIN\_MEM=512m ES\_MAX\_MEM=2g ES\_JAVA\_OPTS="-Xmx2048m -Xms512m" All these things are pas…

---

## [It takes 2 mins to indexing a single doc](https://discuss.elastic.co/t/it-takes-2-mins-to-indexing-a-single-doc/189030)

<div class="topic-metadata">

**Author:** [@erdel](https://discuss.elastic.co/u/erdel)\
**Replies:** 8\
**Last updated:** [July 5, 2019, 9:06am UTC](https://discuss.elastic.co/t/it-takes-2-mins-to-indexing-a-single-doc/189030 "2019-07-05T09:06:28Z")

</div>

Hi, I am using monstache for connecting elastic to mongodb. Here is my monstache command: monstache -elasticsearch-url "http://localhost:9200" -mongo-url 'mongodb+srv://XXXX' monstache -direct-read-namespace portaldb.…

---

## [Data stream backing indices don't support aliases](https://discuss.elastic.co/t/data-stream-backing-indices-dont-support-aliases/321838)

<div class="topic-metadata">

**Author:** [@jonnymccullagh](https://discuss.elastic.co/u/jonnymccullagh)\
**Replies:** 3\
**Last updated:** [December 22, 2022, 4:51pm UTC](https://discuss.elastic.co/t/data-stream-backing-indices-dont-support-aliases/321838 "2022-12-22T16:51:32Z")

</div>

First of all let me admit that I am a newbie who has not found an explanation of how filebeat/metricbeat, data streams, indices and index templates work/flow together. I am using beats to send logs, metrics and traces in…

---

## [Metricbeat Prometheus and cAdvisor](https://discuss.elastic.co/t/metricbeat-prometheus-and-cadvisor/174786)

<div class="topic-metadata">

**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\
**Replies:** 3\
**Last updated:** [April 9, 2019, 8:33am UTC](https://discuss.elastic.co/t/metricbeat-prometheus-and-cadvisor/174786 "2019-04-09T08:33:02Z")

</div>

Hi, I let prometheus grab the data from cAdvisor and then I try to export the data to elasticsearch with metricbeat. I see some data but not everything, for example I am interested in the value container\_fs\_reads\_total …

---

## [Gsub filter not working as expected for dot to underscore conversion](https://discuss.elastic.co/t/gsub-filter-not-working-as-expected-for-dot-to-underscore-conversion/152180)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 3\
**Last updated:** [October 22, 2018, 4:55pm UTC](https://discuss.elastic.co/t/gsub-filter-not-working-as-expected-for-dot-to-underscore-conversion/152180 "2018-10-22T16:55:48Z")

</div>

Hi All, I have been trying to replace dots to underscores in the fieldname using gsub filter and didnt succeeded, here is my filter mutate { gsub =\> \[ "caller\_id.location.latitude", ".", "\_" \] } t…

---

## [Could not locate that index-pattern-field (id: iis.access.geoip.location)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-iis-access-geoip-location/146494)

<div class="topic-metadata">

**Author:** [@samid737](https://discuss.elastic.co/u/samid737)\
**Replies:** 3\
**Last updated:** [September 5, 2018, 9:04am UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-iis-access-geoip-location/146494 "2018-09-05T09:04:02Z")

</div>

Hi guys, Using Elastic Stack : 6.4.0 I am currently reading in IIS logs and trying to get geoIP filtering to work with Kibana, however I am quite stuck at the moment. When navigating to: The following message is d…

---

## [Manually loading Winlogbeat-overview.json into Kibana](https://discuss.elastic.co/t/manually-loading-winlogbeat-overview-json-into-kibana/116881)

<div class="topic-metadata">

**Author:** [@cruscio](https://discuss.elastic.co/u/cruscio)\
**Replies:** 3\
**Last updated:** [January 26, 2018, 3:42pm UTC](https://discuss.elastic.co/t/manually-loading-winlogbeat-overview-json-into-kibana/116881 "2018-01-26T15:42:27Z")

</div>

Is there a way to manually load the Winlogbeat dashboard into Kibana in an environment where the windows servers have no direct access to Elastic or Kibana? (Winlogbeat & Kibana 6.0.0)

---

## [Testing With Delete By Query ElasticSearch Plugin](https://discuss.elastic.co/t/testing-with-delete-by-query-elasticsearch-plugin/55498)

<div class="topic-metadata">

**Author:** [@dadepo](https://discuss.elastic.co/u/dadepo)\
**Replies:** 3\
**Last updated:** [July 14, 2016, 12:02pm UTC](https://discuss.elastic.co/t/testing-with-delete-by-query-elasticsearch-plugin/55498 "2016-07-14T12:02:10Z")

</div>

Is there anyway to have integration test for a code that makes use of the delete by query plugin using embedded elasticsearch node? Right now I get failed to find action \[org.elasticsearch.action.deletebyquery.DeleteBy…

---

## [Alias update not atomic](https://discuss.elastic.co/t/alias-update-not-atomic/53833)

<div class="topic-metadata">

**Author:** [@baller](https://discuss.elastic.co/u/baller)\
**Replies:** 3\
**Last updated:** [January 24, 2017, 5:40am UTC](https://discuss.elastic.co/t/alias-update-not-atomic/53833 "2017-01-24T05:40:44Z")

</div>

Hi, I'm experiencing a very strange issue that only occurs sometimes when updating aliases (POST /\_aliases). I'm sending a request like the following: \`{'actions': \[ {'remove': {'index': old\_index\_name, …

---

## [Merging two fields in a visualization](https://discuss.elastic.co/t/merging-two-fields-in-a-visualization/291139)

<div class="topic-metadata">

**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\
**Replies:** 4\
**Last updated:** [December 9, 2021, 7:53am UTC](https://discuss.elastic.co/t/merging-two-fields-in-a-visualization/291139 "2021-12-09T07:53:43Z")

</div>

Team! I need to merge two fields into one in a Kibana visualization. Does anyone know how to do that? Have a good one :slight\_smile:

---

## [Jira Action sending broken links on detection jobs](https://discuss.elastic.co/t/jira-action-sending-broken-links-on-detection-jobs/268809)

<div class="topic-metadata">

**Author:** [@Balor](https://discuss.elastic.co/u/Balor)\
**Replies:** 1\
**Last updated:** [April 1, 2021, 5:01pm UTC](https://discuss.elastic.co/t/jira-action-sending-broken-links-on-detection-jobs/268809 "2021-04-01T17:01:21Z")

</div>

Hello Elastic discuss, Am on: ECE 2.9.0 Elastic 7.12. I have been using the Detection API to add actions to certain Detection jobs. I am using a Jira connector. Am seeing this sort of behaviour in the action messag…

---

## [Installing xpack plugin on 7.7.1 elastic](https://discuss.elastic.co/t/installing-xpack-plugin-on-7-7-1-elastic/252397)

<div class="topic-metadata">

**Author:** [@txmrlevine](https://discuss.elastic.co/u/txmrlevine)\
**Replies:** 4\
**Last updated:** [October 19, 2020, 1:54pm UTC](https://discuss.elastic.co/t/installing-xpack-plugin-on-7-7-1-elastic/252397 "2020-10-19T13:54:23Z")

</div>

I am trying to set up security on my stack. looks like from what I can see version 7.7.1 should have the plugin available to install but when I go to install it I only get this . ./elasticsearch-plugin install xpack -\>…

---

## [Filebeat configuration file](https://discuss.elastic.co/t/filebeat-configuration-file/139488)

<div class="topic-metadata">

**Author:** [@CCH0124](https://discuss.elastic.co/u/CCH0124)\
**Replies:** 4\
**Last updated:** [July 13, 2018, 12:42am UTC](https://discuss.elastic.co/t/filebeat-configuration-file/139488 "2018-07-13T00:42:37Z")

</div>

Kibana has used nginx as a reverse proxy. kibana version 6.2 filebeat version 6.3 filebeat.config: inputs: enabled: true modules: enabled: true filebeat.inputs: enabled: true filebeat.modules: - modu…

---

## [Is it possible to show prefix in suggester from different index?](https://discuss.elastic.co/t/is-it-possible-to-show-prefix-in-suggester-from-different-index/136479)

<div class="topic-metadata">

**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\
**Replies:** 4\
**Last updated:** [June 25, 2018, 6:20am UTC](https://discuss.elastic.co/t/is-it-possible-to-show-prefix-in-suggester-from-different-index/136479 "2018-06-25T06:20:45Z")

</div>

In documents if I store some strings in prefix field then they are being shown in suggestions but if I want to show prefix from other index, can it be done and how?

---

## [User dictionary file support for AWS Elasticsearch Service?](https://discuss.elastic.co/t/user-dictionary-file-support-for-aws-elasticsearch-service/130245)

<div class="topic-metadata">

**Author:** [@Boney\_Jacob](https://discuss.elastic.co/u/Boney_Jacob)\
**Replies:** 4\
**Last updated:** [May 9, 2018, 7:52am UTC](https://discuss.elastic.co/t/user-dictionary-file-support-for-aws-elasticsearch-service/130245 "2018-05-09T07:52:32Z")

</div>

I'm using AWS Elasticsearch Service6.2 with kuromoji plugin. Is it support user\_dictionary file? How to create it in aws elasticsearch? kuromoji\_tokenizer

---

## [Failing Replica Shards](https://discuss.elastic.co/t/failing-replica-shards/19473)

<div class="topic-metadata">

**Author:** [@David\_Kleiner](https://discuss.elastic.co/u/David_Kleiner)\
**Replies:** 4\
**Last updated:** [November 30, 2014, 11:05am UTC](https://discuss.elastic.co/t/failing-replica-shards/19473 "2014-11-30T11:05:50Z")

</div>

Hello, In the past couple of days I've been getting a lot of error messages about corrupted replica shards. The primary shards come up fast after ES process restart but replicas take a long time to come back. Som…

---

## [Dangling index, exists on local file system, but not in cluster metadata, scheduling to delete](https://discuss.elastic.co/t/dangling-index-exists-on-local-file-system-but-not-in-cluster-metadata-scheduling-to-delete/7975)

<div class="topic-metadata">

**Author:** [@Dong\_Aihua](https://discuss.elastic.co/u/Dong_Aihua)\
**Replies:** 4\
**Last updated:** [April 8, 2013, 3:28pm UTC](https://discuss.elastic.co/t/dangling-index-exists-on-local-file-system-but-not-in-cluster-metadata-scheduling-to-delete/7975 "2013-04-08T15:28:07Z")

</div>

Hi, My index is missing. How can I find it back? Firstly, I created an index on one node(2 shards, no replica). Then shutdown the node, and add another node into the cluster. And change the configure to 2 sh…

---

## [Docker-compose setup healthcheck unhealthy](https://discuss.elastic.co/t/docker-compose-setup-healthcheck-unhealthy/321665)

<div class="topic-metadata">

**Author:** [@divadpoc](https://discuss.elastic.co/u/divadpoc)\
**Replies:** 1\
**Last updated:** [January 9, 2023, 10:36am UTC](https://discuss.elastic.co/t/docker-compose-setup-healthcheck-unhealthy/321665 "2023-01-09T10:36:39Z")

</div>

Hello, I'm using the example docker-compose file as presented here - with stack version 8.5.2 . I wrapped the docker-compose command into a systemd script. All services were running until today when I had to restart my …

---

## [File Data Visualizer... Structure Cannot Be Determined?](https://discuss.elastic.co/t/file-data-visualizer-structure-cannot-be-determined/270747)

<div class="topic-metadata">

**Author:** [@Marcus007](https://discuss.elastic.co/u/Marcus007)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 1:45pm UTC](https://discuss.elastic.co/t/file-data-visualizer-structure-cannot-be-determined/270747 "2021-04-22T13:45:33Z")

</div>

Hello all, I am trying to upload a JSON file, which consists of around 1000 objects and 2MB total size. But for whatever reason, the Data Visualizer is returning the following errors: File structure cannot be determine…

---

## [Search query - StartsWIth, Contains and Endswith](https://discuss.elastic.co/t/search-query-startswith-contains-and-endswith/252501)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [October 19, 2020, 8:41am UTC](https://discuss.elastic.co/t/search-query-startswith-contains-and-endswith/252501 "2020-10-19T08:41:24Z")

</div>

How to query elasticsearch with Startswith, contains and Endswith. \\Looks like it is not recommended to use wildcard \* at the beginning of the search term considering the performance impact.

---

## [Logstash dosn't run file.conf in /etc/logstash/conf.d](https://discuss.elastic.co/t/logstash-dosnt-run-file-conf-in-etc-logstash-conf-d/244192)

<div class="topic-metadata">

**Author:** [@Amine\_Aloui](https://discuss.elastic.co/u/Amine_Aloui)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 8:30am UTC](https://discuss.elastic.co/t/logstash-dosnt-run-file-conf-in-etc-logstash-conf-d/244192 "2020-08-21T08:30:52Z")

</div>

in /etc/logstash.yml i put this config path.config: /etc/logstash/conf.d/\*.conf config.reload.automatic: true config.reload.interval: 3s in /etc/logstash/conf.d i put my index.conf tail -f /var/log/logstash/logst…

---

## [Kibana dashboard, permission to saved search](https://discuss.elastic.co/t/kibana-dashboard-permission-to-saved-search/146551)

<div class="topic-metadata">

**Author:** [@Mattias\_Arbin](https://discuss.elastic.co/u/Mattias_Arbin)\
**Replies:** 1\
**Last updated:** [August 29, 2018, 6:32pm UTC](https://discuss.elastic.co/t/kibana-dashboard-permission-to-saved-search/146551 "2018-08-29T18:32:03Z")

</div>

I have a problem with permissions and Kibana dashboards. In short: I have a dashboard to which I have added a saved search with some selected fields. I have created a role that have read access to the index. A user is …

---

## [How to index properties of GeoJson in geo\_shape type](https://discuss.elastic.co/t/how-to-index-properties-of-geojson-in-geo-shape-type/96322)

<div class="topic-metadata">

**Author:** [@Rohit\_Nigam](https://discuss.elastic.co/u/Rohit_Nigam)\
**Replies:** 1\
**Last updated:** [August 11, 2017, 6:11am UTC](https://discuss.elastic.co/t/how-to-index-properties-of-geojson-in-geo-shape-type/96322 "2017-08-11T06:11:10Z")

</div>

Hi I would like to index the properties in the GeoJson object as a part of geo\_shape type in elastic search. Any ideas how to do that. The GeoJson supports the object of type http://geojson.org/ { “type”: “Feature”, …

---

## [ElasticSearch Definitive Guide 한국어 문서](https://discuss.elastic.co/t/elasticsearch-definitive-guide/26702)

<div class="topic-metadata">

**Author:** [@Horyun\_Lee](https://discuss.elastic.co/u/Horyun_Lee)\
**Replies:** 1\
**Last updated:** [December 8, 2015, 5:40pm UTC](https://discuss.elastic.co/t/elasticsearch-definitive-guide/26702 "2015-12-08T17:40:14Z")

</div>

ElasticSearch Definitive Guide 문서에 대한 번역 계획이나 번역진행중인것 있나요? 지난 밋업에서 진행중이라는 이야기를 들었던것 같은데 어디있는지 모르겠네요 스터디를 위해 참고하려고 하는데 혹시 있다면 알려주시면 감사하겠습니다. 고맙습니다. \[smile\]

---

## [Roles, users and viewing the dashboard](https://discuss.elastic.co/t/roles-users-and-viewing-the-dashboard/205826)

<div class="topic-metadata">

**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\
**Replies:** 2\
**Last updated:** [November 4, 2019, 8:55am UTC](https://discuss.elastic.co/t/roles-users-and-viewing-the-dashboard/205826 "2019-11-04T08:55:19Z")

</div>

I have two dashboards - one displaying data from the client system and one displaying data from Kibanas own .security index. I have made two roles: user\_data user\_security I want the people in "user\_data" to be able …

---

## [Kibana Host Overview dashboard not showing all Metricbeats clients](https://discuss.elastic.co/t/kibana-host-overview-dashboard-not-showing-all-metricbeats-clients/167928)

<div class="topic-metadata">

**Author:** [@snovak](https://discuss.elastic.co/u/snovak)\
**Replies:** 2\
**Last updated:** [February 19, 2019, 7:30pm UTC](https://discuss.elastic.co/t/kibana-host-overview-dashboard-not-showing-all-metricbeats-clients/167928 "2019-02-19T19:30:25Z")

</div>

Previously we had a pinned search filter for host.name that would allow our users to pull down and select a host from a list. Now that list is only showing MetricBeat hosts which have the latest 6.0 version of the agent…

---

## [Kibana graphs stopped working](https://discuss.elastic.co/t/kibana-graphs-stopped-working/96206)

<div class="topic-metadata">

**Author:** [@mick1234](https://discuss.elastic.co/u/mick1234)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 6:21am UTC](https://discuss.elastic.co/t/kibana-graphs-stopped-working/96206 "2017-08-10T06:21:11Z")

</div>

Hi I have set up Elasticsearch and Kibana according to this page Everything was working fine for about one day. Then suddenly the graphs in Kibana started to display straight line. Data is still seen in Kibana -\> Di…

[Previous page](https://discuss.elastic.co/top.md?page=1097&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1099&per_page=50&period=all)
