# Top

**URL:** https://discuss.elastic.co/top.md?page=1182&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1183

---

## [Rollups for beats?](https://discuss.elastic.co/t/rollups-for-beats/135951)

<div class="topic-metadata">

**Author:** [@christopher-b](https://discuss.elastic.co/u/christopher-b)\
**Replies:** 4\
**Last updated:** [July 11, 2018, 5:23pm UTC](https://discuss.elastic.co/t/rollups-for-beats/135951 "2018-07-11T17:23:38Z")

</div>

Now that Elastic Stack 6.3 has shipped with the Rollups API, I'm wondering if there is any plan to develop a set of "default" or jumping-off point rollup configs for Beats. I'm sure many people would like to rollup their…

---

## [Term Vector With BiGrams](https://discuss.elastic.co/t/term-vector-with-bigrams/86887)

<div class="topic-metadata">

**Author:** [@vishva\_deepak\_tewari](https://discuss.elastic.co/u/vishva_deepak_tewari)\
**Replies:** 4\
**Last updated:** [June 6, 2017, 10:28am UTC](https://discuss.elastic.co/t/term-vector-with-bigrams/86887 "2017-06-06T10:28:37Z")

</div>

Hi, I have a a document which contains a subdocument, as such I have made the subdocument a nested property of the document. Now i need to find term vectors for the sub document. My terms can be unigrams or bigrams, henc…

---

## [Failed to connect to node exception by running elastic/found-shield-example (https://github.com/elastic/found-shield-example)](https://discuss.elastic.co/t/failed-to-connect-to-node-exception-by-running-elastic-found-shield-example-https-github-com-elastic-found-shield-example/84787)

<div class="topic-metadata">

**Author:** [@gdeng1](https://discuss.elastic.co/u/gdeng1)\
**Replies:** 4\
**Last updated:** [May 5, 2017, 9:15pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-node-exception-by-running-elastic-found-shield-example-https-github-com-elastic-found-shield-example/84787 "2017-05-05T21:15:07Z")

</div>

I'm attempting to follow the elastic/found-shield-example (https://github.com/elastic/found-shield-example) to connect to a cluster running on elastic.co using the elastic Java client, however, I'm unable to connect succ…

---

## [Is it possible to preprocess source?](https://discuss.elastic.co/t/is-it-possible-to-preprocess-source/50950)

<div class="topic-metadata">

**Author:** [@eprst](https://discuss.elastic.co/u/eprst)\
**Replies:** 4\
**Last updated:** [May 27, 2016, 10:37am UTC](https://discuss.elastic.co/t/is-it-possible-to-preprocess-source/50950 "2016-05-27T10:37:43Z")

</div>

i need to apply some filters to indexing document's field or just to source and get it filtered in query response. i know that transform is deprecated but even transfrom did not process source field. another option is t…

---

## [How to do advanced mathematical computations with ELK?](https://discuss.elastic.co/t/how-to-do-advanced-mathematical-computations-with-elk/45768)

<div class="topic-metadata">

**Author:** [@sen](https://discuss.elastic.co/u/sen)\
**Replies:** 4\
**Last updated:** [April 4, 2016, 7:07am UTC](https://discuss.elastic.co/t/how-to-do-advanced-mathematical-computations-with-elk/45768 "2016-04-04T07:07:34Z")

</div>

Hello everyone, I am wondering if it is possible to do advanced mathematical operations with ELK. Here is an example of what I would like to do: I have logs from my radio network and for each device i have a frame coun…

---

## [Change indices settings in Metric app](https://discuss.elastic.co/t/change-indices-settings-in-metric-app/211769)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 2:50pm UTC](https://discuss.elastic.co/t/change-indices-settings-in-metric-app/211769 "2019-12-17T14:50:28Z")

</div>

Hi, we have a lot of servers due to several kubernets environments, that are monitored by the Elastic stack. Due to this fact, I often get an error "Failed to load datasources" (Response 504) when opening the metrics or…

---

## [Kibana Dashboard sharing question](https://discuss.elastic.co/t/kibana-dashboard-sharing-question/49881)

<div class="topic-metadata">

**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\
**Replies:** 3\
**Last updated:** [May 17, 2016, 4:16pm UTC](https://discuss.elastic.co/t/kibana-dashboard-sharing-question/49881 "2016-05-17T16:16:20Z")

</div>

Hi, I have successfully embedded the iframe from the Kibana sharing option into a 3rd party application. However, I notice that there is no tab for visualisations to switch between tabular mode and graphical model in…

---

## [How to set path.home in ubunu?](https://discuss.elastic.co/t/how-to-set-path-home-in-ubunu/41028)

<div class="topic-metadata">

**Author:** [@Rajnikant](https://discuss.elastic.co/u/Rajnikant)\
**Replies:** 3\
**Last updated:** [February 5, 2016, 8:52am UTC](https://discuss.elastic.co/t/how-to-set-path-home-in-ubunu/41028 "2016-02-05T08:52:32Z")

</div>

i used eclipse for java programming. when i connect to elastic search to java then i got "path.home is not configured" this type of error. My code is Settings settings = Settings.settingsBuilder() .put("path.…

---

## [Old ElasticSearch Data & Upgrading Major Versions?](https://discuss.elastic.co/t/old-elasticsearch-data-upgrading-major-versions/35964)

<div class="topic-metadata">

**Author:** [@ninjada](https://discuss.elastic.co/u/ninjada)\
**Replies:** 3\
**Last updated:** [December 1, 2015, 4:43am UTC](https://discuss.elastic.co/t/old-elasticsearch-data-upgrading-major-versions/35964 "2015-12-01T04:43:38Z")

</div>

Hello, Approaching the second time I'm attempting a major update across my elasticsearch, logstash & kibana stacks. Previously I did this around version 1.7x of elasticsearch & logstash 1.5 -- I had to jettison all pre…

---

## [Filebeat not pushing events to multiple Kafka broker in a single Kafka cluster](https://discuss.elastic.co/t/filebeat-not-pushing-events-to-multiple-kafka-broker-in-a-single-kafka-cluster/163250)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 1\
**Last updated:** [January 14, 2019, 3:33am UTC](https://discuss.elastic.co/t/filebeat-not-pushing-events-to-multiple-kafka-broker-in-a-single-kafka-cluster/163250 "2019-01-14T03:33:20Z")

</div>

The Filebeat in my setup pushes the events to a Kafka cluster with 2 brokers. I have added only one node in the host list but both the brokers in the cluster were discovered. I understood this from the Filebeat logs. Bu…

---

## [Apm .net capturing outgoing http request body](https://discuss.elastic.co/t/apm-net-capturing-outgoing-http-request-body/348921)

<div class="topic-metadata">

**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\
**Replies:** 5\
**Last updated:** [December 12, 2023, 8:55pm UTC](https://discuss.elastic.co/t/apm-net-capturing-outgoing-http-request-body/348921 "2023-12-12T20:55:00Z")

</div>

Hi, I'm using the 1.25.0 version of .net apm agent, and I wonder how I can capture the body of the outgoing requests (Post, Patch ...) that are performed within an Apm transaction? What are the guidelines to do it prop…

---

## [Search for results based on aggregations](https://discuss.elastic.co/t/search-for-results-based-on-aggregations/24888)

<div class="topic-metadata">

**Author:** [@ptgamr](https://discuss.elastic.co/u/ptgamr)\
**Replies:** 5\
**Last updated:** [July 7, 2015, 9:00am UTC](https://discuss.elastic.co/t/search-for-results-based-on-aggregations/24888 "2015-07-07T09:00:39Z")

</div>

The use of aggregation is popular for the use case: In this date range, how many visits we have in total? However, what should I do when I want something reverse: On which days does I have the visits range from x to y? …

---

## [Change indices on discover](https://discuss.elastic.co/t/change-indices-on-discover/220154)

<div class="topic-metadata">

**Author:** [@andras.vecsi](https://discuss.elastic.co/u/andras.vecsi)\
**Replies:** 1\
**Last updated:** [February 20, 2020, 10:26am UTC](https://discuss.elastic.co/t/change-indices-on-discover/220154 "2020-02-20T10:26:08Z")

</div>

Hello, I have two spaces: Users and IT In the IT space I am able to change the indices on the discover page: In the Users space I am not able to change the indices Under Management/Spaces I can see this In the…

---

## [Kibana 6.8 to 7.3 fails: \[uiStateJSON\] within \[dashboard\] is not allowed](https://discuss.elastic.co/t/kibana-6-8-to-7-3-fails-uistatejson-within-dashboard-is-not-allowed/196312)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 1\
**Last updated:** [August 22, 2019, 12:52pm UTC](https://discuss.elastic.co/t/kibana-6-8-to-7-3-fails-uistatejson-within-dashboard-is-not-allowed/196312 "2019-08-22T12:52:20Z")

</div>

Just tried to upgrade Kibana from a working 6.8 to 7.3 and kibana will not start saying: FATAL Error: mapping set to strict, dynamic introduction of \[uiStateJSON\] within \[dashboard\] is not allowed log \[11:51:53.49…

---

## [Winlogbeat Nginx Proxy to Logstash - Connection Reset](https://discuss.elastic.co/t/winlogbeat-nginx-proxy-to-logstash-connection-reset/131967)

<div class="topic-metadata">

**Author:** [@douglas](https://discuss.elastic.co/u/douglas)\
**Replies:** 1\
**Last updated:** [May 16, 2018, 2:46pm UTC](https://discuss.elastic.co/t/winlogbeat-nginx-proxy-to-logstash-connection-reset/131967 "2018-05-16T14:46:44Z")

</div>

Hello, I have the following setup: \[Nginx Port 80\] Forwards to \[Logstash Port 5044\] Directly connects and speaks with \[Elasticsearch Port 9200\] This works with Metricbeat fine, all requests and conversations happe…

---

## [Escaping dots](https://discuss.elastic.co/t/escaping-dots/95892)

<div class="topic-metadata">

**Author:** [@bruno.teixeira](https://discuss.elastic.co/u/bruno.teixeira)\
**Replies:** 1\
**Last updated:** [August 4, 2017, 11:02pm UTC](https://discuss.elastic.co/t/escaping-dots/95892 "2017-08-04T23:02:18Z")

</div>

Hello guyz, I’m trying to map a dynamic dictionary and i’m having problems with some keys. Picture this example. “systemvariables”:{ “windows.user.home”:“C:\\Users\\someuser”, “windows.user.home.desktop”:“C:\\Users\\som…

---

## [Is removing cluster.initial\_master\_nodes still necessary?](https://discuss.elastic.co/t/is-removing-cluster-initial-master-nodes-still-necessary/284298)

<div class="topic-metadata">

**Author:** [@MSN](https://discuss.elastic.co/u/MSN)\
**Replies:** 2\
**Last updated:** [September 15, 2021, 3:00pm UTC](https://discuss.elastic.co/t/is-removing-cluster-initial-master-nodes-still-necessary/284298 "2021-09-15T15:00:27Z")

</div>

Hi, The documentation for elasticsearch 7.14 states, that the configuration setting cluster.initial\_master\_nodes has to be removed from the configuration file after a cluster has formed sucessfully and should be absent …

---

## [Elastic Agent 7.13.1 keeps degrading endpoint security for macOS](https://discuss.elastic.co/t/elastic-agent-7-13-1-keeps-degrading-endpoint-security-for-macos/275207)

<div class="topic-metadata">

**Author:** [@fgierlinger](https://discuss.elastic.co/u/fgierlinger)\
**Replies:** 2\
**Last updated:** [June 14, 2021, 7:17pm UTC](https://discuss.elastic.co/t/elastic-agent-7-13-1-keeps-degrading-endpoint-security-for-macos/275207 "2021-06-14T19:17:20Z")

</div>

The endpoint security for macOS keeps getting to the status 'DEGRADED'. I simply create a new policy, add endpoint security to the policy and enroll the fleet-agent with the provided command. Full-Disk Access Permission…

---

## [Facets Date Range](https://discuss.elastic.co/t/facets-date-range/216586)

<div class="topic-metadata">

**Author:** [@Jonathan\_Gautier](https://discuss.elastic.co/u/Jonathan_Gautier)\
**Replies:** 2\
**Last updated:** [January 27, 2020, 11:35am UTC](https://discuss.elastic.co/t/facets-date-range/216586 "2020-01-27T11:35:14Z")

</div>

Hi how to make facet date range in search ui OR filters date range in filters ? Thanks

---

## [Monitoring SAP Netweaver](https://discuss.elastic.co/t/monitoring-sap-netweaver/202793)

<div class="topic-metadata">

**Author:** [@RichardH](https://discuss.elastic.co/u/RichardH)\
**Replies:** 2\
**Last updated:** [October 14, 2019, 6:14am UTC](https://discuss.elastic.co/t/monitoring-sap-netweaver/202793 "2019-10-14T06:14:57Z")

</div>

Hi All, Has anyone tried using Elastic APM to monitor SAP Netweaver on SLES (as an alternative to using the Wily Introscope built into SAP Solman)?

---

## [Automated log search and reporting](https://discuss.elastic.co/t/automated-log-search-and-reporting/168447)

<div class="topic-metadata">

**Author:** [@kladizkov](https://discuss.elastic.co/u/kladizkov)\
**Replies:** 2\
**Last updated:** [February 14, 2019, 6:18pm UTC](https://discuss.elastic.co/t/automated-log-search-and-reporting/168447 "2019-02-14T18:18:41Z")

</div>

Hi, I'm new to ELK. I have completed setting up ElasticSearch, Logstash and Kibana. I have 20+ servers to manage. As it is not easy to manually look for errors and warning in the logs, I think there should be something …

---

## [How can I save documents like docx, pdf, xls and other microsoft documents in elasticsearch](https://discuss.elastic.co/t/how-can-i-save-documents-like-docx-pdf-xls-and-other-microsoft-documents-in-elasticsearch/83424)

<div class="topic-metadata">

**Author:** [@sonal410](https://discuss.elastic.co/u/sonal410)\
**Replies:** 2\
**Last updated:** [April 26, 2017, 2:05pm UTC](https://discuss.elastic.co/t/how-can-i-save-documents-like-docx-pdf-xls-and-other-microsoft-documents-in-elasticsearch/83424 "2017-04-26T14:05:54Z")

</div>

Is their any way to add microsoft documents to elasticsearch and do the search on the documnets

---

## [Can geoip source be a sub-field?](https://discuss.elastic.co/t/can-geoip-source-be-a-sub-field/66951)

<div class="topic-metadata">

**Author:** [@Balsam](https://discuss.elastic.co/u/Balsam)\
**Replies:** 2\
**Last updated:** [November 24, 2016, 5:40pm UTC](https://discuss.elastic.co/t/can-geoip-source-be-a-sub-field/66951 "2016-11-24T17:40:58Z")

</div>

Hello everyone, I'm new to ELK. I'm learning to use it to store and analyze Suricata events. Everything is working except I can't get geoip working. The problem is the geoip source is from a sub-field and when I put th…

---

## [Not able to install head plugin in elasticsearch 5.0.0(Windows 7)](https://discuss.elastic.co/t/not-able-to-install-head-plugin-in-elasticsearch-5-0-0-windows-7/66210)

<div class="topic-metadata">

**Author:** [@Anil\_Kumar1](https://discuss.elastic.co/u/Anil_Kumar1)\
**Replies:** 2\
**Last updated:** [November 16, 2016, 10:36am UTC](https://discuss.elastic.co/t/not-able-to-install-head-plugin-in-elasticsearch-5-0-0-windows-7/66210 "2016-11-16T10:36:53Z")

</div>

Hi All, I have installed elasticsearch 5.0.0 version in Windows 7.after that i am not able to install head plugin by going through below steps. (Running with built in server enable cors by adding http.cors.enabled: tr…

---

## [Empty value cant be converted to integer or float](https://discuss.elastic.co/t/empty-value-cant-be-converted-to-integer-or-float/55646)

<div class="topic-metadata">

**Author:** [@Ngumba\_Kamau](https://discuss.elastic.co/u/Ngumba_Kamau)\
**Replies:** 2\
**Last updated:** [July 22, 2016, 7:22pm UTC](https://discuss.elastic.co/t/empty-value-cant-be-converted-to-integer-or-float/55646 "2016-07-22T19:22:29Z")

</div>

When specifying the schema for the logstash-output-google\_bigquery plugin whenever i select integer or float as the type for the field i get a cannot convert value to integer. This problem has been pinned down to having …

---

## [Maximum limit to number of shards cluster wide](https://discuss.elastic.co/t/maximum-limit-to-number-of-shards-cluster-wide/56180)

<div class="topic-metadata">

**Author:** [@Charlie\_Moad](https://discuss.elastic.co/u/Charlie_Moad)\
**Replies:** 2\
**Last updated:** [July 22, 2016, 1:20pm UTC](https://discuss.elastic.co/t/maximum-limit-to-number-of-shards-cluster-wide/56180 "2016-07-22T13:20:07Z")

</div>

Hi all. I can find lots of information on shard limitations per node, but I'm struggling to find any guidance on a limit of shards cluster wide. We have an application where between intelligent index selection and shard …

---

## [Rejected execution exception for multiple parallel requests](https://discuss.elastic.co/t/rejected-execution-exception-for-multiple-parallel-requests/21497)

<div class="topic-metadata">

**Author:** [@vipins](https://discuss.elastic.co/u/vipins)\
**Replies:** 2\
**Last updated:** [January 7, 2015, 3:28pm UTC](https://discuss.elastic.co/t/rejected-execution-exception-for-multiple-parallel-requests/21497 "2015-01-07T15:28:13Z")

</div>

Hi, I am querying elasticsearch for multiple parallel requests using single transport client instance in my application. I got the below exception for the parallel execution. Hot to overcome the issue. org…

---

## [Reindex just one specific index in datastrem](https://discuss.elastic.co/t/reindex-just-one-specific-index-in-datastrem/317079)

<div class="topic-metadata">

**Author:** [@Oleksandr\_Isniuk](https://discuss.elastic.co/u/Oleksandr_Isniuk)\
**Replies:** 8\
**Last updated:** [November 10, 2022, 3:58pm UTC](https://discuss.elastic.co/t/reindex-just-one-specific-index-in-datastrem/317079 "2022-11-10T15:58:35Z")

</div>

We changed field mappings in our template. After rollover new index file works with correct field types. We supposed that we can use smaller time ranges to be sure that all data was read fro the new file. But it is not e…

---

## [How to start a elastic cluster 8.1 with three or more nodes](https://discuss.elastic.co/t/how-to-start-a-elastic-cluster-8-1-with-three-or-more-nodes/303540)

<div class="topic-metadata">

**Author:** [@Adrian\_Gtz](https://discuss.elastic.co/u/Adrian_Gtz)\
**Replies:** 8\
**Last updated:** [May 3, 2022, 8:10pm UTC](https://discuss.elastic.co/t/how-to-start-a-elastic-cluster-8-1-with-three-or-more-nodes/303540 "2022-05-03T20:10:59Z")

</div>

I have the first node, but I don't know what is next. What do I have to do to define the master and join new nodes to the cluster. Is there a guide or something explained ? Thanks in advanced.

---

## [Is it normal for elastic search to occupy 12 gb of ram](https://discuss.elastic.co/t/is-it-normal-for-elastic-search-to-occupy-12-gb-of-ram/193945)

<div class="topic-metadata">

**Author:** [@iaskdoubt](https://discuss.elastic.co/u/iaskdoubt)\
**Replies:** 3\
**Last updated:** [August 6, 2019, 9:07am UTC](https://discuss.elastic.co/t/is-it-normal-for-elastic-search-to-occupy-12-gb-of-ram/193945 "2019-08-06T09:07:25Z")

</div>

Hi we are using elastic search and have a per day index with a event per second of around 900 and each event having a size of .5 ~ 2 kB . The problem is that our elastic search is occupying a lot of memory .. can any on…

---

## [Find missing values from index](https://discuss.elastic.co/t/find-missing-values-from-index/178008)

<div class="topic-metadata">

**Author:** [@singhster](https://discuss.elastic.co/u/singhster)\
**Replies:** 3\
**Last updated:** [May 7, 2019, 8:23am UTC](https://discuss.elastic.co/t/find-missing-values-from-index/178008 "2019-05-07T08:23:32Z")

</div>

Is there a way to find missing values in Kibana (v 6.5.2)? For example, we have 100 venue\_ids, and we expect to see a record for each venue\_id in an index every day. Let's say on day 1 we have all 100, but in subsequent …

---

## [Visualize log message specific content frequency](https://discuss.elastic.co/t/visualize-log-message-specific-content-frequency/170033)

<div class="topic-metadata">

**Author:** [@Andrew\_Albert](https://discuss.elastic.co/u/Andrew_Albert)\
**Replies:** 3\
**Last updated:** [February 27, 2019, 12:50pm UTC](https://discuss.elastic.co/t/visualize-log-message-specific-content-frequency/170033 "2019-02-27T12:50:19Z")

</div>

Hello, I'm new to Kibana, currently, I can see my logs at the dashboard, but now what I need is to visualize my logs, what I want to achieve is to show a histogram where the x-axis is the logs containing specific text, …

---

## [Kibana compare two date range](https://discuss.elastic.co/t/kibana-compare-two-date-range/152962)

<div class="topic-metadata">

**Author:** [@cemkuleyin](https://discuss.elastic.co/u/cemkuleyin)\
**Replies:** 3\
**Last updated:** [October 19, 2018, 7:41am UTC](https://discuss.elastic.co/t/kibana-compare-two-date-range/152962 "2018-10-19T07:41:53Z")

</div>

Hi, I have a problem with alerts. I want to set alert for compare known two different time range. For example, compare today and last thursday. If value greater than threshold, fire alert with email. Can I do that reas…

---

## [Multi Match Query for multiple words with operator AND](https://discuss.elastic.co/t/multi-match-query-for-multiple-words-with-operator-and/130631)

<div class="topic-metadata">

**Author:** [@pafheuch](https://discuss.elastic.co/u/pafheuch)\
**Replies:** 0\
**Last updated:** [May 4, 2018, 12:54pm UTC](https://discuss.elastic.co/t/multi-match-query-for-multiple-words-with-operator-and/130631 "2018-05-04T12:54:00Z")

</div>

My scenario is that in my application there is an inline search just like the one we have here on Udemy site's header bar and the user can type more than one word in it. Now, I want to use that multi word search text ent…

---

## [Date format high level rest client 6.2](https://discuss.elastic.co/t/date-format-high-level-rest-client-6-2/130091)

<div class="topic-metadata">

**Author:** [@Omprakash\_Verma](https://discuss.elastic.co/u/Omprakash_Verma)\
**Replies:** 3\
**Last updated:** [May 1, 2018, 6:23pm UTC](https://discuss.elastic.co/t/date-format-high-level-rest-client-6-2/130091 "2018-05-01T18:23:39Z")

</div>

Hi, I am facing one issue related to date format in ES response. When I index data, it is mapped as text, how can I specify the mappings before or at the time of indexing the data. If I call the mappings api before ind…

---

## [Custom analyzer with standard tokenizer is splitting long tokens instead of discarding](https://discuss.elastic.co/t/custom-analyzer-with-standard-tokenizer-is-splitting-long-tokens-instead-of-discarding/44583)

<div class="topic-metadata">

**Author:** [@mikeb7986](https://discuss.elastic.co/u/mikeb7986)\
**Replies:** 3\
**Last updated:** [March 19, 2016, 3:15pm UTC](https://discuss.elastic.co/t/custom-analyzer-with-standard-tokenizer-is-splitting-long-tokens-instead-of-discarding/44583 "2016-03-19T15:15:26Z")

</div>

I have a custom mapping that seems like it should be discarding the text, based on the documentation here: https://www.elastic.co/guide/en/elasticsearch/reference/2.2/analysis-standard-tokenizer.html : max\_token\_length …

---

## [ElasticSearch not starting after switching network](https://discuss.elastic.co/t/elasticsearch-not-starting-after-switching-network/18116)

<div class="topic-metadata">

**Author:** [@Ashok\_Chidige](https://discuss.elastic.co/u/Ashok_Chidige)\
**Replies:** 3\
**Last updated:** [June 16, 2014, 10:25am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-switching-network/18116 "2014-06-16T10:25:38Z")

</div>

Hi, I've been using ES from my office and home. I really liked it but suddenly today it stopped working when I tried to start at my home. See below the log file details. Restarting my machine/ES many times but di…

---

## [Please help newbie to create hot and warm cluster nodes](https://discuss.elastic.co/t/please-help-newbie-to-create-hot-and-warm-cluster-nodes/167269)

<div class="topic-metadata">

**Author:** [@nessero](https://discuss.elastic.co/u/nessero)\
**Replies:** 4\
**Last updated:** [February 11, 2019, 9:41am UTC](https://discuss.elastic.co/t/please-help-newbie-to-create-hot-and-warm-cluster-nodes/167269 "2019-02-11T09:41:45Z")

</div>

Hi everyone ! I have one hot and one warm node of elasticsearch. And need to enlarge cluster. May i create two hot nodes and use 3 hot and one warm ? Or i must have 3 hot and 3 warm nodes ? And how elasticsearch will ke…

---

## [How can we view all but a few selected fields in an elasticsearch document using http URL?](https://discuss.elastic.co/t/how-can-we-view-all-but-a-few-selected-fields-in-an-elasticsearch-document-using-http-url/53888)

<div class="topic-metadata">

**Author:** [@Vicky2000](https://discuss.elastic.co/u/Vicky2000)\
**Replies:** 4\
**Last updated:** [June 25, 2016, 12:05pm UTC](https://discuss.elastic.co/t/how-can-we-view-all-but-a-few-selected-fields-in-an-elasticsearch-document-using-http-url/53888 "2016-06-25T12:05:44Z")

</div>

I can view selected fields in a ES doc using the link "http://localhost:9200/index/type/id?fields=field1,field2,field3" But my ES doc contains contains many fields and I want to view most of them using a direct url (no…

---

## [Sorting by Geo Distance with Relevance Score](https://discuss.elastic.co/t/sorting-by-geo-distance-with-relevance-score/304953)

<div class="topic-metadata">

**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\
**Replies:** 6\
**Last updated:** [May 18, 2022, 3:19pm UTC](https://discuss.elastic.co/t/sorting-by-geo-distance-with-relevance-score/304953 "2022-05-18T15:19:04Z")

</div>

Hello everyone, I want to sort results according to relevance score and geo distance together. What is the best way to do so?

---

## [Kindly suggest a filter strategy for "csv in csv" data](https://discuss.elastic.co/t/kindly-suggest-a-filter-strategy-for-csv-in-csv-data/69833)

<div class="topic-metadata">

**Author:** [@cprior](https://discuss.elastic.co/u/cprior)\
**Replies:** 6\
**Last updated:** [December 25, 2016, 6:10am UTC](https://discuss.elastic.co/t/kindly-suggest-a-filter-strategy-for-csv-in-csv-data/69833 "2016-12-25T06:10:27Z")

</div>

Dear all, I believe I have read all current filter docs, but still I'd like to get input from more knowledgeable folks: I want to parse with logstash curency counter information, structured like: The input is a text …

---

## [CVE-2020-9488 vulnerabilities with java apm agent 1.34.1](https://discuss.elastic.co/t/cve-2020-9488-vulnerabilities-with-java-apm-agent-1-34-1/319055)

<div class="topic-metadata">

**Author:** [@vin89](https://discuss.elastic.co/u/vin89)\
**Replies:** 1\
**Last updated:** [November 16, 2022, 11:09am UTC](https://discuss.elastic.co/t/cve-2020-9488-vulnerabilities-with-java-apm-agent-1-34-1/319055 "2022-11-16T11:09:32Z")

</div>

After we have upgraded apm to 1.34.1, we are still seeing vulnerability CVE-2020-9488 showing up in our application scan reports (earlier we were using 1.28.4) Expected log4j fix version is 2.13.2 but where in apm 1.34.…

---

## ["Empty client certificate chain" error stops inter-node handshake using wildcard certs](https://discuss.elastic.co/t/empty-client-certificate-chain-error-stops-inter-node-handshake-using-wildcard-certs/306278)

<div class="topic-metadata">

**Author:** [@Anil\_Kumar\_2003](https://discuss.elastic.co/u/Anil_Kumar_2003)\
**Replies:** 1\
**Last updated:** [June 4, 2022, 6:02am UTC](https://discuss.elastic.co/t/empty-client-certificate-chain-error-stops-inter-node-handshake-using-wildcard-certs/306278 "2022-06-04T06:02:58Z")

</div>

Hi Team, I need help securing ES inter-node communication. Environment Details: ES version: 7.14.1, cluster with 2 nodes (reduced size to get to the root cause) Java: openjdk-16.0.2 OS: Ubuntu 20.02 JVM options: al…

---

## [What Elasticsearch privileges should Curator have?](https://discuss.elastic.co/t/what-elasticsearch-privileges-should-curator-have/224019)

<div class="topic-metadata">

**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\
**Replies:** 1\
**Last updated:** [March 19, 2020, 6:15am UTC](https://discuss.elastic.co/t/what-elasticsearch-privileges-should-curator-have/224019 "2020-03-19T06:15:00Z")

</div>

Elasticsearch version: 6.8.2 Elasticsearch Curator version: 5.7.6 My action files were working fine before I enabled TLS. So in order to make sure, I spun up 2 instances of ELK (1 with and 1 without TLS) using helm an…

---

## [Error parsing CRI timestamp](https://discuss.elastic.co/t/error-parsing-cri-timestamp/168425)

<div class="topic-metadata">

**Author:** [@Robin\_GILH](https://discuss.elastic.co/u/Robin_GILH)\
**Replies:** 1\
**Last updated:** [February 15, 2019, 11:10am UTC](https://discuss.elastic.co/t/error-parsing-cri-timestamp/168425 "2019-02-15T11:10:34Z")

</div>

Hello, I'm using Filebeat 6.6.0 to monitor an Nginx ingress controller on Kubernetes. It seems that no matter how I format the logs, Filebeat choke after some minutes/hours on a log line and produce this parsing error : …

---

## [Resume reindex process](https://discuss.elastic.co/t/resume-reindex-process/119563)

<div class="topic-metadata">

**Author:** [@olanamramoj2](https://discuss.elastic.co/u/olanamramoj2)\
**Replies:** 1\
**Last updated:** [February 16, 2018, 5:12pm UTC](https://discuss.elastic.co/t/resume-reindex-process/119563 "2018-02-16T17:12:50Z")

</div>

Hi, We are reindexing a 500gb data, but we dont know how to resume the reindexing once there has been an interruption, can you help us? right now, we are doing this: curl -X POST -H "Content-Type: application/json" --…

---

## [How to listen only specific http ports in 6.5.1](https://discuss.elastic.co/t/how-to-listen-only-specific-http-ports-in-6-5-1/159251)

<div class="topic-metadata">

**Author:** [@Arunachalam\_lakshman](https://discuss.elastic.co/u/Arunachalam_lakshman)\
**Replies:** 5\
**Last updated:** [December 5, 2018, 3:38pm UTC](https://discuss.elastic.co/t/how-to-listen-only-specific-http-ports-in-6-5-1/159251 "2018-12-05T15:38:58Z")

</div>

I'm trying to use packetbeats 6.5.1 on my mac I'd like to listen only local elastic HTTP port (9200) and my spring boot application which queries elastic (port 8078). How do I listen only to these two? What do i miss? A…

---

## [Shards too large to archive data](https://discuss.elastic.co/t/shards-too-large-to-archive-data/81560)

<div class="topic-metadata">

**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\
**Replies:** 5\
**Last updated:** [April 7, 2017, 10:50am UTC](https://discuss.elastic.co/t/shards-too-large-to-archive-data/81560 "2017-04-07T10:50:46Z")

</div>

Hi Elasticsearch: When I start to take care one of our cluster. I found this cluster is too hugh. Shards: 5 Nodes: 5 Replica: 1 Each shard 400GB data. Total documents: 5 billions. Version: 1.4 I tried to do a simple …

---

## [Plugin JDBC](https://discuss.elastic.co/t/plugin-jdbc/67513)

<div class="topic-metadata">

**Author:** [@Diego\_Gomez](https://discuss.elastic.co/u/Diego_Gomez)\
**Replies:** 5\
**Last updated:** [December 6, 2016, 5:58pm UTC](https://discuss.elastic.co/t/plugin-jdbc/67513 "2016-12-06T17:58:03Z")

</div>

Hello, to a query because I can not make JDBC work, in the data where this "?" I do not know what to put so that logstash I take the data that are recorded in the database every 10 seconds, could help me to see the su…

---

## [Installing a custom local plugin](https://discuss.elastic.co/t/installing-a-custom-local-plugin/280574)

<div class="topic-metadata">

**Author:** [@gusDuarte](https://discuss.elastic.co/u/gusDuarte)\
**Replies:** 2\
**Last updated:** [August 5, 2021, 8:43pm UTC](https://discuss.elastic.co/t/installing-a-custom-local-plugin/280574 "2021-08-05T20:43:27Z")

</div>

Hi all, I want to make a bit modification to http input plugin, so to start with this task, i following steps: Install logstash 7.14 downloading logstash-7.14.0-darwin-x86\_64.tar.gz, and test if installation is ok bi…

[Previous page](https://discuss.elastic.co/top.md?page=1181&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1183&per_page=50&period=all)
