# Top

**URL:** https://discuss.elastic.co/top.md?page=1221&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1222

---

## [Kibana plugin dev: loading order for "hacks"](https://discuss.elastic.co/t/kibana-plugin-dev-loading-order-for-hacks/178763)

<div class="topic-metadata">

**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\
**Replies:** 5\
**Last updated:** [May 8, 2019, 6:28pm UTC](https://discuss.elastic.co/t/kibana-plugin-dev-loading-order-for-hacks/178763 "2019-05-08T18:28:12Z")

</div>

In my plugin index.js I declare 5 "hacks" as an array. They are all loaded, but the order Kibana runs them is not the same I am declaring them. In fact the ordering happens to be: 1,5,3,2,4 instead of 1,2,3,4,5. This i…

---

## [Doc\_values for GUID-esque, unique data](https://discuss.elastic.co/t/doc-values-for-guid-esque-unique-data/54789)

<div class="topic-metadata">

**Author:** [@jstmatt](https://discuss.elastic.co/u/jstmatt)\
**Replies:** 5\
**Last updated:** [July 14, 2016, 9:43pm UTC](https://discuss.elastic.co/t/doc-values-for-guid-esque-unique-data/54789 "2016-07-14T21:43:32Z")

</div>

Hi, We have a large amount of transactional data coming in. Each transactions has a transaction identified (i.e. ti) that is unique to each transaction. This looks like this: ti : "144e647b-3b72-4206-9d72-3fa18ea4896…

---

## [Backlog Logs without a Day parameter](https://discuss.elastic.co/t/backlog-logs-without-a-day-parameter/23929)

<div class="topic-metadata">

**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\
**Replies:** 5\
**Last updated:** [June 23, 2015, 2:41am UTC](https://discuss.elastic.co/t/backlog-logs-without-a-day-parameter/23929 "2015-06-23T02:41:29Z")

</div>

So I am trying to backlog some older logs which do not have a MM:dd:YYY. My question is what should I do then? The timestamp will just be over written with the one of which logstash parsed the data. Thanks. Mike

---

## [Tunning ElasticSearch with Spark](https://discuss.elastic.co/t/tunning-elasticsearch-with-spark/44463)

<div class="topic-metadata">

**Author:** [@Guillermo\_Ortiz](https://discuss.elastic.co/u/Guillermo_Ortiz)\
**Replies:** 0\
**Last updated:** [March 15, 2016, 5:18pm UTC](https://discuss.elastic.co/t/tunning-elasticsearch-with-spark/44463 "2016-03-15T17:18:52Z")

</div>

Hello, I'm working with ElasticSearch using the Spark to ElasticSearch. Indexing batches of documents each 10 seconds (about 200K-300K document in 10 seconds). The problem is that if I have some peaks and I have to in…

---

## [Disable Kibana login for user elastic](https://discuss.elastic.co/t/disable-kibana-login-for-user-elastic/257365)

<div class="topic-metadata">

**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\
**Replies:** 2\
**Last updated:** [December 3, 2020, 10:52am UTC](https://discuss.elastic.co/t/disable-kibana-login-for-user-elastic/257365 "2020-12-03T10:52:47Z")

</div>

Hi Team, Could you please let me know if there are any tweaks that can be done is elasticsearch or kibana to only disable kibana UI login for user elastic. Currently we are using user elastic in beats to send the logs t…

---

## [Kibana 7.6.0: UI Registry - Cannot Resolve VisTypes - Visualization Factory](https://discuss.elastic.co/t/kibana-7-6-0-ui-registry-cannot-resolve-vistypes-visualization-factory/222691)

<div class="topic-metadata">

**Author:** [@abidub](https://discuss.elastic.co/u/abidub)\
**Replies:** 2\
**Last updated:** [March 13, 2020, 4:56pm UTC](https://discuss.elastic.co/t/kibana-7-6-0-ui-registry-cannot-resolve-vistypes-visualization-factory/222691 "2020-03-13T16:56:05Z")

</div>

I am trying to update a plugin (kbn sankey vis) so that it works with Kibana 7.6 https://github.com/uniberg/kbn\_sankey\_vis in order to try to create a sankey diagram in vega. I am having the same issue as in Can't reso…

---

## [Bind\_address vs publish\_address](https://discuss.elastic.co/t/bind-address-vs-publish-address/14273)

<div class="topic-metadata">

**Author:** [@Justin\_Uang](https://discuss.elastic.co/u/Justin_Uang)\
**Replies:** 2\
**Last updated:** [December 4, 2013, 6:26pm UTC](https://discuss.elastic.co/t/bind-address-vs-publish-address/14273 "2013-12-04T18:26:10Z")

</div>

I don't quite understand the difference between these two. I thought, in general, that bind\_address is the local address (and port) that the server listens on. What is publish\_address then? -- You received this …

---

## [Bootstrap Checks trouble on non-root access cluster(CentOS)](https://discuss.elastic.co/t/bootstrap-checks-trouble-on-non-root-access-cluster-centos/84342)

<div class="topic-metadata">

**Author:** [@mastayoda](https://discuss.elastic.co/u/mastayoda)\
**Replies:** 8\
**Last updated:** [May 3, 2017, 1:11pm UTC](https://discuss.elastic.co/t/bootstrap-checks-trouble-on-non-root-access-cluster-centos/84342 "2017-05-03T13:11:07Z")

</div>

Continuing discussion in github issue 21655 Brief: We are building a graph database in top of ElasticSearch( trueno). Previously we where using ES 2.3 without problem to form a cluster of 20 machines using CentOS: …

---

## [ElasticSearch / Python: CannotSendRequest error](https://discuss.elastic.co/t/elasticsearch-python-cannotsendrequest-error/29648)

<div class="topic-metadata">

**Author:** [@rfo2006](https://discuss.elastic.co/u/rfo2006)\
**Replies:** 0\
**Last updated:** [September 20, 2015, 5:26am UTC](https://discuss.elastic.co/t/elasticsearch-python-cannotsendrequest-error/29648 "2015-09-20T05:26:45Z")

</div>

I'm using the ElasticSearch python client to connect to an ES node. When my application is running a fairly heavy query (in the sense that it's taking a few hundred milliseconds to process), I'm getting the following err…

---

## [Subqueries in Kibana it that posible?](https://discuss.elastic.co/t/subqueries-in-kibana-it-that-posible/315589)

<div class="topic-metadata">

**Author:** [@Jose\_Javier\_Marti\_Ca](https://discuss.elastic.co/u/Jose_Javier_Marti_Ca)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 9:05am UTC](https://discuss.elastic.co/t/subqueries-in-kibana-it-that-posible/315589 "2022-10-10T09:05:08Z")

</div>

Hi I'm new in Elastic and do not know if it even can be possible. I'd like to perform this "query" i kibana. Select col1 from table1 t1 where NOT exists (select col1 from table1 t2 where t1.col1=t2.col1 and t1.date = …

---

## [Transform with fixed time interval and different sync delay](https://discuss.elastic.co/t/transform-with-fixed-time-interval-and-different-sync-delay/308075)

<div class="topic-metadata">

**Author:** [@Avarjana](https://discuss.elastic.co/u/Avarjana)\
**Replies:** 2\
**Last updated:** [June 27, 2022, 11:37am UTC](https://discuss.elastic.co/t/transform-with-fixed-time-interval-and-different-sync-delay/308075 "2022-06-27T11:37:51Z")

</div>

I have a transform to identify anomaly and trigger alert in one of my index. Following are the details of the behavior. Expected behavior For each minute, aggregate last 5 minutes data and check for alerts. …

---

## [Error while setting up Elastic Cluster](https://discuss.elastic.co/t/error-while-setting-up-elastic-cluster/160866)

<div class="topic-metadata">

**Author:** [@Sathish\_Gopal](https://discuss.elastic.co/u/Sathish_Gopal)\
**Replies:** 2\
**Last updated:** [December 14, 2018, 9:56am UTC](https://discuss.elastic.co/t/error-while-setting-up-elastic-cluster/160866 "2018-12-14T09:56:51Z")

</div>

Hi, I'm trying to setup a 2 node cluster. one of the elastic node is running inside docker VM. My docker vm itself is running inside Virtual box vm. And the other node works inside my host machine - windows. If i run e…

---

## [Fuzzy match query unexpected results](https://discuss.elastic.co/t/fuzzy-match-query-unexpected-results/43912)

<div class="topic-metadata">

**Author:** [@batmaci](https://discuss.elastic.co/u/batmaci)\
**Replies:** 2\
**Last updated:** [March 17, 2016, 4:53pm UTC](https://discuss.elastic.co/t/fuzzy-match-query-unexpected-results/43912 "2016-03-17T16:53:28Z")

</div>

I want to add misspelling control in my match query. For that reason I added fuzziness as below but this totally changed the expected results when I don't do fuzziness. I am using mapping and analyzers as below { "st…

---

## [In what folder is the private key that corresponds to the certificate config\\certs\\http\_ca.crt?](https://discuss.elastic.co/t/in-what-folder-is-the-private-key-that-corresponds-to-the-certificate-config-certs-http-ca-crt/308488)

<div class="topic-metadata">

**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\
**Replies:** 1\
**Last updated:** [June 29, 2022, 10:08pm UTC](https://discuss.elastic.co/t/in-what-folder-is-the-private-key-that-corresponds-to-the-certificate-config-certs-http-ca-crt/308488 "2022-06-29T22:08:40Z")

</div>

I'm trying to modify http\_ca.crt (using the command ./bin/elasticsearch-certutil http), and it asks me for the path to private key corresponding to that file: What is the path to your CA key? elasticsearch-8.2.3-window…

---

## [Illegal\_argument\_exception: source alias \[server\] does not point to a write index](https://discuss.elastic.co/t/illegal-argument-exception-source-alias-server-does-not-point-to-a-write-index/231458)

<div class="topic-metadata">

**Author:** [@darkwingzero](https://discuss.elastic.co/u/darkwingzero)\
**Replies:** 1\
**Last updated:** [May 17, 2020, 3:21am UTC](https://discuss.elastic.co/t/illegal-argument-exception-source-alias-server-does-not-point-to-a-write-index/231458 "2020-05-17T03:21:40Z")

</div>

Hi, May i request your help, i'm facing error on ILM, request for fix please. Thank you!

---

## [Converting SQL query to Lucence query grafana](https://discuss.elastic.co/t/converting-sql-query-to-lucence-query-grafana/211784)

<div class="topic-metadata">

**Author:** [@mindbee](https://discuss.elastic.co/u/mindbee)\
**Replies:** 1\
**Last updated:** [December 17, 2019, 2:20pm UTC](https://discuss.elastic.co/t/converting-sql-query-to-lucence-query-grafana/211784 "2019-12-17T14:20:29Z")

</div>

Hi, I can get the data required using Kibana devtool using sql query. POST \_sql?format=txt { "query": "SELECT transactionID.keyword, max(responseTime) FROM "test-logs" GROUP BY transactionID.keyword HAVING count(tr…

---

## [What is the equivalent of the removeAll function in Painless](https://discuss.elastic.co/t/what-is-the-equivalent-of-the-removeall-function-in-painless/138308)

<div class="topic-metadata">

**Author:** [@Kvin](https://discuss.elastic.co/u/Kvin)\
**Replies:** 1\
**Last updated:** [July 3, 2018, 6:35am UTC](https://discuss.elastic.co/t/what-is-the-equivalent-of-the-removeall-function-in-painless/138308 "2018-07-03T06:35:42Z")

</div>

We had the following line of Groovy script in 5.X: "inline":"ctx.\_source.all\_phone.removeAll{it.phone\_number == params.remove\_id} It throws the following error in 6.3.0: { "error": { "root\_cause": \[ { "type": "…

---

## [Storage limit and retrieval size](https://discuss.elastic.co/t/storage-limit-and-retrieval-size/116579)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 1\
**Last updated:** [January 23, 2018, 4:08am UTC](https://discuss.elastic.co/t/storage-limit-and-retrieval-size/116579 "2018-01-23T04:08:36Z")

</div>

Hi I have a scenario where need to store from 10 to more than 100000 records in a single index and use like a cache provider too. In search I need to retrieve from 20 to 10000 records. What will be the best way to imp…

---

## [File output overwrite?](https://discuss.elastic.co/t/file-output-overwrite/80651)

<div class="topic-metadata">

**Author:** [@Mouss](https://discuss.elastic.co/u/Mouss)\
**Replies:** 1\
**Last updated:** [March 30, 2017, 10:13am UTC](https://discuss.elastic.co/t/file-output-overwrite/80651 "2017-03-30T10:13:57Z")

</div>

I would like to use the file output to overwrite an existing file. Right now the new content is appended at the end of the existing file which keeps this file growing

---

## [Action message variable](https://discuss.elastic.co/t/action-message-variable/294908)

<div class="topic-metadata">

**Author:** [@eddieyee](https://discuss.elastic.co/u/eddieyee)\
**Replies:** 4\
**Last updated:** [February 9, 2022, 8:44am UTC](https://discuss.elastic.co/t/action-message-variable/294908 "2022-02-09T08:44:44Z")

</div>

In my Alert using Elasticsearch query, I'm building a URL pointing to Elastic Discover link in the action message and I'm able to include a time filter as seen below: time:(from:now-{{params.timeWindowSize}}{{params.tim…

---

## [Automate Creation of Dashboards!](https://discuss.elastic.co/t/automate-creation-of-dashboards/173649)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 4\
**Last updated:** [March 26, 2019, 10:25pm UTC](https://discuss.elastic.co/t/automate-creation-of-dashboards/173649 "2019-03-26T22:25:42Z")

</div>

Hi, I have Linux and Windows Servers where I am using filebeat to get data for Tomcat and IIS access logs. MY index pattern is created by the server name. EX -beats-server-data. Now I have many linux and windows server…

---

## [Multiple pipelines with Kafka input](https://discuss.elastic.co/t/multiple-pipelines-with-kafka-input/163641)

<div class="topic-metadata">

**Author:** [@rocknroll](https://discuss.elastic.co/u/rocknroll)\
**Replies:** 4\
**Last updated:** [January 10, 2019, 8:50pm UTC](https://discuss.elastic.co/t/multiple-pipelines-with-kafka-input/163641 "2019-01-10T20:50:22Z")

</div>

When using the Kafka input plugin is it possible to assign different topics to their own pipeline in Logstash? e.g with the Beats input we can setup different input configs to get Logstash to listen on different ports. …

---

## [Logstash - TimeStamp Normalization](https://discuss.elastic.co/t/logstash-timestamp-normalization/144531)

<div class="topic-metadata">

**Author:** [@Corey\_H](https://discuss.elastic.co/u/Corey_H)\
**Replies:** 4\
**Last updated:** [August 15, 2018, 9:02pm UTC](https://discuss.elastic.co/t/logstash-timestamp-normalization/144531 "2018-08-15T21:02:31Z")

</div>

Hi Everyone, Versions to get it out of the way, and I am not sure how to write this question up.. Wazuh Manager: 3.4.0 Filebeat and Logstash: 6.3.2 Elasticsearch 6.3.2 I have loaded the wazuh templates as per the in…

---

## [6.2.2 after X-pack timeout errors at start](https://discuss.elastic.co/t/6-2-2-after-x-pack-timeout-errors-at-start/126694)

<div class="topic-metadata">

**Author:** [@Ongun](https://discuss.elastic.co/u/Ongun)\
**Replies:** 4\
**Last updated:** [April 9, 2018, 8:33pm UTC](https://discuss.elastic.co/t/6-2-2-after-x-pack-timeout-errors-at-start/126694 "2018-04-09T20:33:12Z")

</div>

Hello, I am a new ELK stack user and I just installed X-pack on Elasticsearch and Kibana. After installation during Kibana startup (at the same time with Elasticsearch or independent of it) I always get timeout errors, …

---

## [Will indices created on ES2 and upgraded to ES5 be able to be upgraded by ES6?](https://discuss.elastic.co/t/will-indices-created-on-es2-and-upgraded-to-es5-be-able-to-be-upgraded-by-es6/85294)

<div class="topic-metadata">

**Author:** [@mpereira](https://discuss.elastic.co/u/mpereira)\
**Replies:** 1\
**Last updated:** [May 10, 2017, 7:07pm UTC](https://discuss.elastic.co/t/will-indices-created-on-es2-and-upgraded-to-es5-be-able-to-be-upgraded-by-es6/85294 "2017-05-10T19:07:58Z")

</div>

The title basically. We have indices created on ES2 that were upgraded in-place by ES5 when we bumped the version. Would these be able to be read and upgraded by ES6 or will we need to reindex?

---

## [Как организовать доставку информации "в реальном времени"?](https://discuss.elastic.co/t/topic/78844)

<div class="topic-metadata">

**Author:** [@111116](https://discuss.elastic.co/u/111116)\
**Replies:** 4\
**Last updated:** [March 19, 2017, 2:33pm UTC](https://discuss.elastic.co/t/topic/78844 "2017-03-19T14:33:25Z")

</div>

Опишу алгоритм работы приложения: Парсится открытый API источник информации (50-100 ГБ в сутки, много дублирующей информации, реально хранится из этого в десятки-сотни тысяч раз меньше). Есть необходимость (в общем и цел…

---

## [Missing event\_data fields in Winlogbeat 1.x](https://discuss.elastic.co/t/missing-event-data-fields-in-winlogbeat-1-x/62511)

<div class="topic-metadata">

**Author:** [@gmourani](https://discuss.elastic.co/u/gmourani)\
**Replies:** 4\
**Last updated:** [October 12, 2016, 1:40pm UTC](https://discuss.elastic.co/t/missing-event-data-fields-in-winlogbeat-1-x/62511 "2016-10-12T13:40:38Z")

</div>

Hello, winlogbeat 1.3 is installed and successful send event log directly to elastic on port 9200. Index is created in Kibana and I can see fields related to winlogbeat except all the "event\_data fields.\*" !

---

## [\_all field getting corrupted, no mapping changes possible anymore](https://discuss.elastic.co/t/-all-field-getting-corrupted-no-mapping-changes-possible-anymore/20631)

<div class="topic-metadata">

**Author:** [@mindbits](https://discuss.elastic.co/u/mindbits)\
**Replies:** 4\
**Last updated:** [November 7, 2014, 4:49pm UTC](https://discuss.elastic.co/t/-all-field-getting-corrupted-no-mapping-changes-possible-anymore/20631 "2014-11-07T16:49:42Z")

</div>

Hi, with 1.40Beta1 all of a sudden we can not change the mapping on existing -not all- types in our index anymore. \*mapper \[\_all\] has different store values, \* \*mapper \[\_all\] has different store\_term\_vector v…

---

## [Parse Exception in Query Excecution](https://discuss.elastic.co/t/parse-exception-in-query-excecution/13963)

<div class="topic-metadata">

**Author:** [@samaswin](https://discuss.elastic.co/u/samaswin)\
**Replies:** 4\
**Last updated:** [October 16, 2013, 10:54am UTC](https://discuss.elastic.co/t/parse-exception-in-query-excecution/13963 "2013-10-16T10:54:26Z")

</div>

Hi, If I execute the follow query its shows a exception, { "from" : 0, "size" : 20, "query" : { "multi\_match" : { "fields" : \[ "Description", "jobStatus","rxCustomerID" \], "query" : "no" } …

---

## [Node.js Agent not instrumenting Mongoose](https://discuss.elastic.co/t/node-js-agent-not-instrumenting-mongoose/201254)

<div class="topic-metadata">

**Author:** [@hpinhal](https://discuss.elastic.co/u/hpinhal)\
**Replies:** 3\
**Last updated:** [October 1, 2019, 4:26pm UTC](https://discuss.elastic.co/t/node-js-agent-not-instrumenting-mongoose/201254 "2019-10-01T16:26:55Z")

</div>

Hi guys, I'm running a trial on Elastic Cloud and I'm trying to instrument a Node.js API. In general, the transactions are showing just fine. However, I think there's two items that are not working well. Mongoose n…

---

## [Machine Learning error when creating and openning new Job](https://discuss.elastic.co/t/machine-learning-error-when-creating-and-openning-new-job/184325)

<div class="topic-metadata">

**Author:** [@jonathanfr84](https://discuss.elastic.co/u/jonathanfr84)\
**Replies:** 3\
**Last updated:** [June 6, 2019, 10:38am UTC](https://discuss.elastic.co/t/machine-learning-error-when-creating-and-openning-new-job/184325 "2019-06-06T10:38:56Z")

</div>

Hello, I've installed a metricbeat which is garthering information about a linux system and I want to try the machine learning forecast feautre using the index generated by metricbeat. I've created a Job using the metr…

---

## [Tls verification\_mode, custom validation options?](https://discuss.elastic.co/t/tls-verification-mode-custom-validation-options/171532)

<div class="topic-metadata">

**Author:** [@matp](https://discuss.elastic.co/u/matp)\
**Replies:** 3\
**Last updated:** [April 5, 2019, 5:20pm UTC](https://discuss.elastic.co/t/tls-verification-mode-custom-validation-options/171532 "2019-04-05T17:20:24Z")

</div>

https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#\_literal\_verification\_mode\_literal As I understand it, if verification\_mode is set to full, then the beats client will error if the hostname …

---

## [Top N of each type?](https://discuss.elastic.co/t/top-n-of-each-type/24176)

<div class="topic-metadata">

**Author:** [@nyc863](https://discuss.elastic.co/u/nyc863)\
**Replies:** 3\
**Last updated:** [June 23, 2015, 12:31pm UTC](https://discuss.elastic.co/t/top-n-of-each-type/24176 "2015-06-23T12:31:20Z")

</div>

Most are familiar with searching using apple spotlight, or other big sites with a drop-down as you type. Usually it shows aggregated types, with a top-N per type arrangement. So for example if you search "Widgets", it mi…

---

## [Introducing Beats](https://discuss.elastic.co/t/introducing-beats/1395)

<div class="topic-metadata">

**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\
**Replies:** 3\
**Last updated:** [June 12, 2015, 9:43am UTC](https://discuss.elastic.co/t/introducing-beats/1395 "2015-06-12T09:43:11Z")

</div>

Today, Elastic announced it has joined forces with Packetbeat, the open source wire data shipper for web, database, and other network protocols. And then we thought, why stop there? There is an entire spectrum of operati…

---

## [Elastic Endpoint Security on 150 Windows PCs](https://discuss.elastic.co/t/elastic-endpoint-security-on-150-windows-pcs/265008)

<div class="topic-metadata">

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Replies:** 6\
**Last updated:** [February 23, 2021, 12:16am UTC](https://discuss.elastic.co/t/elastic-endpoint-security-on-150-windows-pcs/265008 "2021-02-23T00:16:05Z")

</div>

I want to deploy Endpoint Security on 150 Windows PCs, how big should my Elastic Cloud container be to support all the data coming in?

---

## [How to create Repository for the gcloud ElasticSearch Instances](https://discuss.elastic.co/t/how-to-create-repository-for-the-gcloud-elasticsearch-instances/32952)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 6\
**Last updated:** [October 26, 2015, 6:26am UTC](https://discuss.elastic.co/t/how-to-create-repository-for-the-gcloud-elasticsearch-instances/32952 "2015-10-26T06:26:16Z")

</div>

Please find the pic where we are getting error while creating repository in gcloud instances. Thanks in advance Kartheek Gummaluri

---

## [How to use distributed tracing](https://discuss.elastic.co/t/how-to-use-distributed-tracing/196325)

<div class="topic-metadata">

**Author:** [@kin122](https://discuss.elastic.co/u/kin122)\
**Replies:** 5\
**Last updated:** [August 25, 2019, 4:54am UTC](https://discuss.elastic.co/t/how-to-use-distributed-tracing/196325 "2019-08-25T04:54:22Z")

</div>

hi , how to use distributed tracing without change the code in different classname? Kibana version:7.0.0 Elasticsearch version:7.0.0 APM Server version:7.2.0 APM Agent language and version: java 1.7.0 i just got the…

---

## [What occupies my heap](https://discuss.elastic.co/t/what-occupies-my-heap/75637)

<div class="topic-metadata">

**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\
**Replies:** 5\
**Last updated:** [February 27, 2017, 2:54pm UTC](https://discuss.elastic.co/t/what-occupies-my-heap/75637 "2017-02-27T14:54:34Z")

</div>

Hi guys, ES 2.3.5 here. We use 50GB RAM nodes with heap size set to 50% + mlockall on openjdk 1.8.0\_92. I'm trying to figure out what occupies the heap. I'm looking at the node stats of one of the data nodes and see …

---

## [Keep indices closed by default](https://discuss.elastic.co/t/keep-indices-closed-by-default/24728)

<div class="topic-metadata">

**Author:** [@Wunha](https://discuss.elastic.co/u/Wunha)\
**Replies:** 5\
**Last updated:** [July 3, 2015, 7:49am UTC](https://discuss.elastic.co/t/keep-indices-closed-by-default/24728 "2015-07-03T07:49:59Z")

</div>

Hi everyone ! I am facing a little issue with the embedded elasticsearch server my application is using, and I think you might be able to help me. The stage of my application is, basically, to be able to download MyS…

---

## [APT will consider Elastic repositories invalid soon](https://discuss.elastic.co/t/apt-will-consider-elastic-repositories-invalid-soon/384448)

<div class="topic-metadata">

**Author:** [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\
**Replies:** 4\
**Last updated:** [February 12, 2026, 8:57am UTC](https://discuss.elastic.co/t/apt-will-consider-elastic-repositories-invalid-soon/384448 "2026-02-12T08:57:44Z")

</div>

Hi, On Debian 13+, apt will soon consider Elastic repository invalid Warning: https://artifacts.elastic.co/packages/8.x/apt/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details …

---

## [How to use packetbeat to monitor mysql of docker container?](https://discuss.elastic.co/t/how-to-use-packetbeat-to-monitor-mysql-of-docker-container/187968)

<div class="topic-metadata">

**Author:** [@meng\_liu](https://discuss.elastic.co/u/meng_liu)\
**Replies:** 4\
**Last updated:** [August 6, 2019, 5:37pm UTC](https://discuss.elastic.co/t/how-to-use-packetbeat-to-monitor-mysql-of-docker-container/187968 "2019-08-06T17:37:24Z")

</div>

Mysql and packetbeat be installed on the same machine! Mysql is started in docker container, and the packetbeat is installed on local machine. Local machine's 3306 is mapping mysql of container's 3306, i use packetbe…

---

## [Failed to execute logstash.javapipeline \] Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\<ArgumentError: The "sincedb\_path" argument must point to a file, received a directory: "C:/dev/null"\>](https://discuss.elastic.co/t/failed-to-execute-logstash-javapipeline-pipeline-aborted-due-to-error-pipeline-id-main-exception-argumenterror-the-sincedb-path-argument-must-point-to-a-file-received-a-directory-c-dev-null/193272)

<div class="topic-metadata">

**Author:** [@vikrant031](https://discuss.elastic.co/u/vikrant031)\
**Replies:** 1\
**Last updated:** [August 1, 2019, 10:57am UTC](https://discuss.elastic.co/t/failed-to-execute-logstash-javapipeline-pipeline-aborted-due-to-error-pipeline-id-main-exception-argumenterror-the-sincedb-path-argument-must-point-to-a-file-received-a-directory-c-dev-null/193272 "2019-08-01T10:57:13Z")

</div>

Config File: input{ file{ path =\>"C:\\logstash-7.2.0\\config\\cars.csv" start\_position =\> "beginning" sincedb\_path =\> "C:/dev/null" } } filter{ csv{ separator=\>"," columns=\> \["maker", "model", "mileage", "manufac…

---

## ["Connection Refused" for Elasticsearch and Kibana on AWS Elastic Beanstalk](https://discuss.elastic.co/t/connection-refused-for-elasticsearch-and-kibana-on-aws-elastic-beanstalk/187836)

<div class="topic-metadata">

**Author:** [@sami-t](https://discuss.elastic.co/u/sami-t)\
**Replies:** 1\
**Last updated:** [July 25, 2019, 9:56am UTC](https://discuss.elastic.co/t/connection-refused-for-elasticsearch-and-kibana-on-aws-elastic-beanstalk/187836 "2019-07-25T09:56:00Z")

</div>

I am trying to get the ELK stack deployed on my EC2 instance belonging to an ElasticBeanstalk environment, a Django app. I was able to set-up the ELK stack locally and it worked perfectly fine. But now I am struggling w…

---

## [Create elasticsearch client throws netty illegalstateexception in server enviroment](https://discuss.elastic.co/t/create-elasticsearch-client-throws-netty-illegalstateexception-in-server-enviroment/176809)

<div class="topic-metadata">

**Author:** [@dodolzg](https://discuss.elastic.co/u/dodolzg)\
**Replies:** 1\
**Last updated:** [April 15, 2019, 3:29am UTC](https://discuss.elastic.co/t/create-elasticsearch-client-throws-netty-illegalstateexception-in-server-enviroment/176809 "2019-04-15T03:29:25Z")

</div>

The error info Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate \[org.elasticsearch.client.transport.TransportClient\]: Factory method 'elasticsearchClient' threw exception; nested e…

---

## [Log message truncated at 32k](https://discuss.elastic.co/t/log-message-truncated-at-32k/175604)

<div class="topic-metadata">

**Author:** [@sud7](https://discuss.elastic.co/u/sud7)\
**Replies:** 1\
**Last updated:** [April 8, 2019, 3:53pm UTC](https://discuss.elastic.co/t/log-message-truncated-at-32k/175604 "2019-04-08T15:53:07Z")

</div>

Hello Experts, We have been using filebeat on our K8s1 as a daemonset. One of our containers spits our huge amount of log and it seems only a fraction of it makes it to logstash. Upon more debugging we have seen the co…

---

## [How to rename elasticsearch columns?](https://discuss.elastic.co/t/how-to-rename-elasticsearch-columns/126930)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 7\
**Last updated:** [April 6, 2018, 7:38am UTC](https://discuss.elastic.co/t/how-to-rename-elasticsearch-columns/126930 "2018-04-06T07:38:22Z")

</div>

Hey community, I just import CSV into ElasticSearch but I would like to know if I had possibility to rename these columns : \[image\] "BloquÃ© par le filtrage par rÃ©putation" : { "type" : "text", …

---

## [Error message: the node is expected to continue to exceed the high disk watermark when these relocations are complete](https://discuss.elastic.co/t/error-message-the-node-is-expected-to-continue-to-exceed-the-high-disk-watermark-when-these-relocations-are-complete/335660)

<div class="topic-metadata">

**Author:** [@Mhvrke](https://discuss.elastic.co/u/Mhvrke)\
**Replies:** 2\
**Last updated:** [June 12, 2023, 1:00pm UTC](https://discuss.elastic.co/t/error-message-the-node-is-expected-to-continue-to-exceed-the-high-disk-watermark-when-these-relocations-are-complete/335660 "2023-06-12T13:00:02Z")

</div>

Hi! There’s this scenario where my cluster elasticsearch in rke logs is showing the following message: the node is expected to continue to exceed the high disk watermark when these relocations are complete. It keeps lo…

---

## [Cannot set up script\_score for dense\_vector using Java REST API](https://discuss.elastic.co/t/cannot-set-up-script-score-for-dense-vector-using-java-rest-api/238849)

<div class="topic-metadata">

**Author:** [@ivanqwam](https://discuss.elastic.co/u/ivanqwam)\
**Replies:** 2\
**Last updated:** [June 29, 2020, 4:34pm UTC](https://discuss.elastic.co/t/cannot-set-up-script-score-for-dense-vector-using-java-rest-api/238849 "2020-06-29T16:34:25Z")

</div>

I want to search similar sentences using dense vectors calculated by BERT. I am following this great paper in french or english I indexed sentences with each having a dense\_vector calculated by BERT. I ran this query …

---

## [Elasticsearch rolling restart recovery is slow](https://discuss.elastic.co/t/elasticsearch-rolling-restart-recovery-is-slow/211740)

<div class="topic-metadata">

**Author:** [@nemtso](https://discuss.elastic.co/u/nemtso)\
**Replies:** 2\
**Last updated:** [December 13, 2019, 7:56pm UTC](https://discuss.elastic.co/t/elasticsearch-rolling-restart-recovery-is-slow/211740 "2019-12-13T19:56:20Z")

</div>

Hi, I am trying to improve rolling restart process of our Elasticsearch cluster and looking for advice. We have a 8 node cluster on version 5.6.3: 5 Data nodes 3 master nodes 1 Coordinator node (with Kibana on it) Th…

---

## [Deprecated Warning in Elasticsearch 7.3.1](https://discuss.elastic.co/t/deprecated-warning-in-elasticsearch-7-3-1/202130)

<div class="topic-metadata">

**Author:** [@as50790](https://discuss.elastic.co/u/as50790)\
**Replies:** 2\
**Last updated:** [October 3, 2019, 9:51am UTC](https://discuss.elastic.co/t/deprecated-warning-in-elasticsearch-7-3-1/202130 "2019-10-03T09:51:53Z")

</div>

Kibana version: 7.3.1 Elasticsearch version: 7.3.1 Logstash Version: 7.3.1 Describe Warning: Deprecation Warning Logs not constantly raised, its raised first time when configure ELK. Warning Log: \[o.e.d.c.j.Jod…

[Previous page](https://discuss.elastic.co/top.md?page=1220&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1222&per_page=50&period=all)
