# Top

**URL:** https://discuss.elastic.co/top.md?page=1333&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1334

---

## [Uneven size per shards](https://discuss.elastic.co/t/uneven-size-per-shards/144852)

<div class="topic-metadata">

**Author:** [@lazam](https://discuss.elastic.co/u/lazam)\
**Replies:** 4\
**Last updated:** [August 21, 2018, 8:47am UTC](https://discuss.elastic.co/t/uneven-size-per-shards/144852 "2018-08-21T08:47:11Z")

</div>

Hello! I saw some previous posts about uneven shard distribution but I was unable to get information that I need. I have an index which has 2 Shards and 1 Replication: index-name 1 r STARTED 1510504 546.6…

---

## [Missing conditions on action level in documentation](https://discuss.elastic.co/t/missing-conditions-on-action-level-in-documentation/93502)

<div class="topic-metadata">

**Author:** [@brommer](https://discuss.elastic.co/u/brommer)\
**Replies:** 4\
**Last updated:** [July 19, 2017, 2:53pm UTC](https://discuss.elastic.co/t/missing-conditions-on-action-level-in-documentation/93502 "2017-07-19T14:53:47Z")

</div>

Hi everyone, I could not really find a clear documentation on conditions used on action base (https://www.elastic.co/guide/en/x-pack/current/condition.html and https://www.elastic.co/guide/en/x-pack/current/how-watcher…

---

## [Change default session timeout length?](https://discuss.elastic.co/t/change-default-session-timeout-length/320636)

<div class="topic-metadata">

**Author:** [@Mike\_Cann](https://discuss.elastic.co/u/Mike_Cann)\
**Replies:** 2\
**Last updated:** [December 7, 2022, 6:56am UTC](https://discuss.elastic.co/t/change-default-session-timeout-length/320636 "2022-12-07T06:56:46Z")

</div>

Hi, We are using Elastic Cloud and are kind of frustrated by how quickly it logs us out. Is there a way to change that? I saw in the docs there is this: Session management | Kibana Guide \[8.5\] | Elastic But im not sur…

---

## [How to backup on-prem Elasticsearch cluster to S3 bucket and restore reverse way](https://discuss.elastic.co/t/how-to-backup-on-prem-elasticsearch-cluster-to-s3-bucket-and-restore-reverse-way/265320)

<div class="topic-metadata">

**Author:** [@rafiqul](https://discuss.elastic.co/u/rafiqul)\
**Replies:** 2\
**Last updated:** [March 2, 2021, 9:19am UTC](https://discuss.elastic.co/t/how-to-backup-on-prem-elasticsearch-cluster-to-s3-bucket-and-restore-reverse-way/265320 "2021-03-02T09:19:05Z")

</div>

Hello I have a Elasticsearch cluster installed in my on-premise infrastructure. Also installed repository plug-in by running bin/elasticsearch-plugin install repository-s3 ''' curl -X PUT "localhost:9200/\_snapshot/te…

---

## [Scroll analysis at node stats level](https://discuss.elastic.co/t/scroll-analysis-at-node-stats-level/232127)

<div class="topic-metadata">

**Author:** [@solenom85](https://discuss.elastic.co/u/solenom85)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 7:39pm UTC](https://discuss.elastic.co/t/scroll-analysis-at-node-stats-level/232127 "2020-05-12T19:39:17Z")

</div>

Hi: I was querying the nodes API in an ES cluster and saw the following output related to scroll contexts. "scroll\_total": 1546241427, "scroll\_time": "103866.7d", "scroll\_time\_in\_millis": 8974085281558, "scroll\_curr…

---

## [Search guard configuration question](https://discuss.elastic.co/t/search-guard-configuration-question/171937)

<div class="topic-metadata">

**Author:** [@vaslion](https://discuss.elastic.co/u/vaslion)\
**Replies:** 2\
**Last updated:** [March 12, 2019, 12:13pm UTC](https://discuss.elastic.co/t/search-guard-configuration-question/171937 "2019-03-12T12:13:13Z")

</div>

hello everyone, i am attempting to run search guard with elastic search but no matter what I have tried from the suggestions I found while googling I could not solve it. So i decided to ask here. Here is the error i re…

---

## [Error loading sample data](https://discuss.elastic.co/t/error-loading-sample-data/79055)

<div class="topic-metadata">

**Author:** [@RDumais](https://discuss.elastic.co/u/RDumais)\
**Replies:** 2\
**Last updated:** [March 23, 2017, 7:21pm UTC](https://discuss.elastic.co/t/error-loading-sample-data/79055 "2017-03-23T19:21:19Z")

</div>

I am trying to follow the tutorial available here: https://www.elastic.co/guide/en/kibana/current/tutorial-load-dataset.html Where I am trying to run this: curl -XPUT http://localhost:9200/shakespeare -d ' { "mappin…

---

## [Highlight Field implementation in version 5.0](https://discuss.elastic.co/t/highlight-field-implementation-in-version-5-0/66697)

<div class="topic-metadata">

**Author:** [@bluish\_penguin](https://discuss.elastic.co/u/bluish_penguin)\
**Replies:** 2\
**Last updated:** [November 23, 2016, 3:00am UTC](https://discuss.elastic.co/t/highlight-field-implementation-in-version-5-0/66697 "2016-11-23T03:00:02Z")

</div>

Hi all, I would like to upgrade code from version 2..4 to version 5.0. response = client .prepareSearch(indexName) .setQuery(finalBuilder) .setScroll(new TimeValue(150000)) .add…

---

## [Different thread priorities for indexing vs. searching?](https://discuss.elastic.co/t/different-thread-priorities-for-indexing-vs-searching/33090)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 2\
**Last updated:** [October 28, 2015, 12:38am UTC](https://discuss.elastic.co/t/different-thread-priorities-for-indexing-vs-searching/33090 "2015-10-28T00:38:00Z")

</div>

Hi, ES has different thread pools for indexing, searching, etc. Is it possible to tell ES to set different priority on indexing vs. search requests? I didn't see a way to do that. Wouldn't that be very valuable, es…

---

## [Confusion regarding elasticsearch enterprise search and app search](https://discuss.elastic.co/t/confusion-regarding-elasticsearch-enterprise-search-and-app-search/342744)

<div class="topic-metadata">

**Author:** [@elitzur\_e](https://discuss.elastic.co/u/elitzur_e)\
**Replies:** 1\
**Last updated:** [September 11, 2023, 3:11pm UTC](https://discuss.elastic.co/t/confusion-regarding-elasticsearch-enterprise-search-and-app-search/342744 "2023-09-11T15:11:07Z")

</div>

Hi. after playing around in elastic cloud. i would like to setup a real (enterprise grade) solution for a big site. in the instance i made there is a category "enterprise search" in that there is (among other things) El…

---

## [Cannot resolve org.elasticsearch:elasticsearch-plugin-classloader:7.11.0](https://discuss.elastic.co/t/cannot-resolve-org-elasticsearch7-11-0/264304)

<div class="topic-metadata">

**Author:** [@ciment](https://discuss.elastic.co/u/ciment)\
**Replies:** 1\
**Last updated:** [February 15, 2021, 5:36pm UTC](https://discuss.elastic.co/t/cannot-resolve-org-elasticsearch7-11-0/264304 "2021-02-15T17:36:27Z")

</div>

Hi, I tried to use dependency \<dependency\> \<groupId\>org.elasticsearch.client\</groupId\> \<artifactId\>elasticsearch-rest-high-level-client\</artifactId\> \<version\>7.11.0\</version\> \</dependency\> but I got except…

---

## [Logstash-plugins/logstash-output-slack](https://discuss.elastic.co/t/logstash-plugins-logstash-output-slack/154332)

<div class="topic-metadata">

**Author:** [@Eladku](https://discuss.elastic.co/u/Eladku)\
**Replies:** 1\
**Last updated:** [October 29, 2018, 9:00am UTC](https://discuss.elastic.co/t/logstash-plugins-logstash-output-slack/154332 "2018-10-29T09:00:13Z")

</div>

So this might seem like a dumb question..... How do I install this output filter on logstash 2.3? Thanks,

---

## [Filebeat autodiscover: When running on windows filebeat can not be started](https://discuss.elastic.co/t/filebeat-autodiscover-when-running-on-windows-filebeat-can-not-be-started/153801)

<div class="topic-metadata">

**Author:** [@Maxim\_Ozerov](https://discuss.elastic.co/u/Maxim_Ozerov)\
**Replies:** 1\
**Last updated:** [October 25, 2018, 11:19am UTC](https://discuss.elastic.co/t/filebeat-autodiscover-when-running-on-windows-filebeat-can-not-be-started/153801 "2018-10-25T11:19:22Z")

</div>

On windows when adding configuration for autodiscover filebeat can not be started and there is the following error appears: Exiting: error in autodiscover provider settings: error during connect: Get http://%2Fvar%2Frun…

---

## [Multiple file inputs as sources](https://discuss.elastic.co/t/multiple-file-inputs-as-sources/143317)

<div class="topic-metadata">

**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\
**Replies:** 1\
**Last updated:** [August 7, 2018, 1:12pm UTC](https://discuss.elastic.co/t/multiple-file-inputs-as-sources/143317 "2018-08-07T13:12:12Z")

</div>

I want to ingest 2 different log files from filebeat to logstash. I have the below configuration for filebeat. I am using 6.3 version of ELK so don't worry about the path of file. Filebeat will take C:\\data\\log\\eis.log. …

---

## [Index naming problem](https://discuss.elastic.co/t/index-naming-problem/115712)

<div class="topic-metadata">

**Author:** [@JohanLanderholm](https://discuss.elastic.co/u/JohanLanderholm)\
**Replies:** 1\
**Last updated:** [January 16, 2018, 1:43pm UTC](https://discuss.elastic.co/t/index-naming-problem/115712 "2018-01-16T13:43:40Z")

</div>

Hi, I'm trying to insert documents into an Elasticsearch index from a filebeat, through Logstash processing. My Logstash config looks like this: input { beats { port =\> 5044 } } output { elasticsearch { hosts =\>…

---

## [Possibility to not output intermediate aggregations](https://discuss.elastic.co/t/possibility-to-not-output-intermediate-aggregations/97082)

<div class="topic-metadata">

**Author:** [@Tobsucht](https://discuss.elastic.co/u/Tobsucht)\
**Replies:** 1\
**Last updated:** [August 18, 2017, 3:53pm UTC](https://discuss.elastic.co/t/possibility-to-not-output-intermediate-aggregations/97082 "2017-08-18T15:53:53Z")

</div>

Hi, is there any possibility to NOT output the result of an intermediate aggregation? This seems to take a lot of time depending on the resultset. What I want to achieve is the following: I have a mapping for items, wh…

---

## [Beats: Ansible Playbook](https://discuss.elastic.co/t/beats-ansible-playbook/41893)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [February 29, 2016, 2:44am UTC](https://discuss.elastic.co/t/beats-ansible-playbook/41893 "2016-02-29T02:44:28Z")

</div>

Hi, I've seen reference to a beats playbook here: https://www.elastic.co/blog/deploying-elasticsearch-with-ansible What is the status of the beats ansible playbook and role(s)? Regards, David

---

## [How to change fields to not\_analyzed in kibana](https://discuss.elastic.co/t/how-to-change-fields-to-not-analyzed-in-kibana/29004)

<div class="topic-metadata">

**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\
**Replies:** 1\
**Last updated:** [September 10, 2015, 9:31am UTC](https://discuss.elastic.co/t/how-to-change-fields-to-not-analyzed-in-kibana/29004 "2015-09-10T09:31:58Z")

</div>

Hi, I have indexed some documents through logstash(version : 1.5.4) in elasticsearch (version : 1.7.1), I had tried to change the string as not\_analyzed from logstash using template but could not do so logstash thread …

---

## [Forecasting holidays](https://discuss.elastic.co/t/forecasting-holidays/323854)

<div class="topic-metadata">

**Author:** [@Patrick\_P](https://discuss.elastic.co/u/Patrick_P)\
**Replies:** 3\
**Last updated:** [January 26, 2023, 8:05pm UTC](https://discuss.elastic.co/t/forecasting-holidays/323854 "2023-01-26T20:05:53Z")

</div>

I'm trying to create a forecast from an anomaly detection job in Kibana. It tracks the number of events in certain intervals, and we always have lower volume on certain holidays. I have applied a Calendar that I created …

---

## [Sincedb\_path file type](https://discuss.elastic.co/t/sincedb-path-file-type/300182)

<div class="topic-metadata">

**Author:** [@Greninja\_San](https://discuss.elastic.co/u/Greninja_San)\
**Replies:** 3\
**Last updated:** [March 21, 2022, 10:05am UTC](https://discuss.elastic.co/t/sincedb-path-file-type/300182 "2022-03-21T10:05:50Z")

</div>

Hello! I have to set a sincedb\_path file for logstash. However, I have to create one and I cannot find the file type required. What should it be? (CSV, TXT, JSON...) Thank you :slight\_smile:

---

## [Rotated log files have incorrect permissions](https://discuss.elastic.co/t/rotated-log-files-have-incorrect-permissions/244623)

<div class="topic-metadata">

**Author:** [@drjan](https://discuss.elastic.co/u/drjan)\
**Replies:** 3\
**Last updated:** [August 13, 2020, 10:40am UTC](https://discuss.elastic.co/t/rotated-log-files-have-incorrect-permissions/244623 "2020-08-13T10:40:01Z")

</div>

When log files are rotated by metricbeat, the files created do not have the permissions specified in the metricbeat.yml file. Here's part of metricbeat.yml: logging.to\_files: true logging.files: path: /var/log/metric…

---

## [Gsoc 2020](https://discuss.elastic.co/t/gsoc-2020/221317)

<div class="topic-metadata">

**Author:** [@Jay\_Mehta](https://discuss.elastic.co/u/Jay_Mehta)\
**Replies:** 3\
**Last updated:** [March 1, 2020, 10:37am UTC](https://discuss.elastic.co/t/gsoc-2020/221317 "2020-03-01T10:37:49Z")

</div>

Hello, my name is Jay Mehta , Second Year,computer Science ,DJ Sanghavi College.I have experience in working with Reactjs, Redux and Nodejs . I would like to put my all efforts and contribute to EUI for GSoC 2020. Apa…

---

## [Logstash slow input for TCP CEF Codec](https://discuss.elastic.co/t/logstash-slow-input-for-tcp-cef-codec/199808)

<div class="topic-metadata">

**Author:** [@Moses\_Lim\_Him\_Kuong](https://discuss.elastic.co/u/Moses_Lim_Him_Kuong)\
**Replies:** 3\
**Last updated:** [September 19, 2019, 2:35am UTC](https://discuss.elastic.co/t/logstash-slow-input-for-tcp-cef-codec/199808 "2019-09-19T02:35:05Z")

</div>

I'm setting up an instance of logstash that will be receiving CEF events from tcp port. I'm expecting it to be able to get up to 10k EPS but its only getting to around 2k on the input. What should i do? i'm on a 8core …

---

## [Simple HTTPS connection to ES](https://discuss.elastic.co/t/simple-https-connection-to-es/194827)

<div class="topic-metadata">

**Author:** [@Lincoln\_dev](https://discuss.elastic.co/u/Lincoln_dev)\
**Replies:** 3\
**Last updated:** [August 13, 2019, 6:50am UTC](https://discuss.elastic.co/t/simple-https-connection-to-es/194827 "2019-08-13T06:50:55Z")

</div>

Hello ! It's my first time here, so I hope I have done things well. I am currently working on a project using ES. I have the following setup : One serveur where ES is running in HTTP : ES\_SERVER One Website in HTTP …

---

## [Sort option is not active in kibana](https://discuss.elastic.co/t/sort-option-is-not-active-in-kibana/156428)

<div class="topic-metadata">

**Author:** [@roopeshetty](https://discuss.elastic.co/u/roopeshetty)\
**Replies:** 3\
**Last updated:** [November 15, 2018, 10:47pm UTC](https://discuss.elastic.co/t/sort-option-is-not-active-in-kibana/156428 "2018-11-15T22:47:59Z")

</div>

We are using ELK stack in our lab. We have created 2 new fields by name “Certificate” (which contains certificate names) and “Days\_Remaining”(which shows the number of days left for certificate expiry) using GROK filter…

---

## [Plugin doesn't work after Kibana update](https://discuss.elastic.co/t/plugin-doesnt-work-after-kibana-update/134749)

<div class="topic-metadata">

**Author:** [@Kvin](https://discuss.elastic.co/u/Kvin)\
**Replies:** 3\
**Last updated:** [June 7, 2018, 11:34pm UTC](https://discuss.elastic.co/t/plugin-doesnt-work-after-kibana-update/134749 "2018-06-07T23:34:44Z")

</div>

Hi, We want to upgrade our stack from 5.2 to 6.2.4. As suggested in the documentation, first I'm trying to upgrade the stack to 5.6.9 so I'll be able to do a rolling update to 6.2.4 from that. However we have a custom …

---

## [Painless calculate average last 10 values](https://discuss.elastic.co/t/painless-calculate-average-last-10-values/123979)

<div class="topic-metadata">

**Author:** [@Rodrigo\_Tornis](https://discuss.elastic.co/u/Rodrigo_Tornis)\
**Replies:** 3\
**Last updated:** [March 21, 2018, 10:36pm UTC](https://discuss.elastic.co/t/painless-calculate-average-last-10-values/123979 "2018-03-21T22:36:46Z")

</div>

Hello guys! Is it possible to create a painless script to calculate the average of the last 10 values in the lastprice field for calculating price changes? Thank you!

---

## [Use of \_meta field in elasticsearch 2.4.1?](https://discuss.elastic.co/t/use-of--meta-field-in-elasticsearch-2-4-1/86506)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 3\
**Last updated:** [June 19, 2017, 6:48am UTC](https://discuss.elastic.co/t/use-of--meta-field-in-elasticsearch-2-4-1/86506 "2017-06-19T06:48:58Z")

</div>

Hi, In my scenario , i have two applications(i.e.A,B) both will push documents to ES .Normally in the slowlogs we can able to get the \[2016-03-23 06:43:47,231\]\[DEBUG\]\[index.search.slowlog.fetch\] took\[5.8ms\], took\_mi…

---

## [Kafka client from confluent](https://discuss.elastic.co/t/kafka-client-from-confluent/83301)

<div class="topic-metadata">

**Author:** [@lightkz](https://discuss.elastic.co/u/lightkz)\
**Replies:** 3\
**Last updated:** [April 24, 2017, 3:44pm UTC](https://discuss.elastic.co/t/kafka-client-from-confluent/83301 "2017-04-24T15:44:06Z")

</div>

Is there any plans in roadmap to switch to official Kafka client supported by confluent? It seems to setup Kafka connect the agent suppose to support “ interceptor.classes”. That is essential feature to setup Kafka…

---

## [Return numerical values without quotes](https://discuss.elastic.co/t/return-numerical-values-without-quotes/65687)

<div class="topic-metadata">

**Author:** [@blekfet](https://discuss.elastic.co/u/blekfet)\
**Replies:** 3\
**Last updated:** [November 14, 2016, 8:11am UTC](https://discuss.elastic.co/t/return-numerical-values-without-quotes/65687 "2016-11-14T08:11:43Z")

</div>

Hi! I have an elasticsearch installation with numerical mappings. The problem is that i can't control what is inserted. And the insertions are putting the numbers within quotes. When I query the index these values ar…

---

## [Can ElasticSearch support IBM JVM?](https://discuss.elastic.co/t/can-elasticsearch-support-ibm-jvm/21888)

<div class="topic-metadata">

**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\
**Replies:** 3\
**Last updated:** [January 29, 2015, 5:09am UTC](https://discuss.elastic.co/t/can-elasticsearch-support-ibm-jvm/21888 "2015-01-29T05:09:31Z")

</div>

In setup guide, I read "Only Oracle’s Java and the OpenJDK are supported. The same JVM version should be used on all Elasticsearch nodes and clients. We recommend installing the \*Java 8 update 20 or later\*, or \*Ja…

---

## [Lens - If Statements with color](https://discuss.elastic.co/t/lens-if-statements-with-color/366750)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 3\
**Last updated:** [September 19, 2024, 8:07am UTC](https://discuss.elastic.co/t/lens-if-statements-with-color/366750 "2024-09-19T08:07:26Z")

</div>

Hello, is it possible to add a condition in Lens? I am trying to create a visualization that will turn "red" or "green" based on the value of a keyword. So for example, task: "running" = green , and it will show the v…

---

## [Entreprise Elastic license](https://discuss.elastic.co/t/entreprise-elastic-license/341665)

<div class="topic-metadata">

**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\
**Replies:** 3\
**Last updated:** [August 25, 2023, 2:34pm UTC](https://discuss.elastic.co/t/entreprise-elastic-license/341665 "2023-08-25T14:34:32Z")

</div>

Does the enterprise license of Elastic depend on the basic system resource configuration or on the scalability ?

---

## [Issue with index](https://discuss.elastic.co/t/issue-with-index/78028)

<div class="topic-metadata">

**Author:** [@bob-bza](https://discuss.elastic.co/u/bob-bza)\
**Replies:** 8\
**Last updated:** [March 10, 2017, 2:57pm UTC](https://discuss.elastic.co/t/issue-with-index/78028 "2017-03-10T14:57:00Z")

</div>

filebeat 1: - input\_type: log paths: - /var/log/ambari.log document\_type: ambari - input\_type: log paths: - /var/log/zookeeper.log document\_type: zookeeper tags: \["masternode"\] filebeat 2: - input\_typ…

---

## [Elasticsearch SQL - How to query data only from yesterday](https://discuss.elastic.co/t/elasticsearch-sql-how-to-query-data-only-from-yesterday/299151)

<div class="topic-metadata">

**Author:** [@ezra](https://discuss.elastic.co/u/ezra)\
**Replies:** 1\
**Last updated:** [March 10, 2022, 3:38pm UTC](https://discuss.elastic.co/t/elasticsearch-sql-how-to-query-data-only-from-yesterday/299151 "2022-03-10T15:38:44Z")

</div>

Hello everyone. I am looking to query data from yesterday, excluding the data from today. I have figured out how to do this when inputting a specific date and subtracting 1 day. However, I need it to be from today's dat…

---

## [Histogram There are too many series defined (n). The configured maximum is 50](https://discuss.elastic.co/t/histogram-there-are-too-many-series-defined-n-the-configured-maximum-is-50/276853)

<div class="topic-metadata">

**Author:** [@Dgoodwin](https://discuss.elastic.co/u/Dgoodwin)\
**Replies:** 1\
**Last updated:** [June 24, 2021, 7:15am UTC](https://discuss.elastic.co/t/histogram-there-are-too-many-series-defined-n-the-configured-maximum-is-50/276853 "2021-06-24T07:15:06Z")

</div>

Is there a way to show 50 or change the configured maximum to include more than 50? Can we show the top 50? Currently, nothing shows when there are more the 50 series.

---

## [Message of length too large or too small](https://discuss.elastic.co/t/message-of-length-too-large-or-too-small/181563)

<div class="topic-metadata">

**Author:** [@joongwan\_koo](https://discuss.elastic.co/u/joongwan_koo)\
**Replies:** 1\
**Last updated:** [May 23, 2019, 12:54am UTC](https://discuss.elastic.co/t/message-of-length-too-large-or-too-small/181563 "2019-05-23T00:54:03Z")

</div>

Hi i makeing a log anslysis system using elastic It worked well in the test environment, but the following error occurred int the live environment. the target log file size is 140M , and error message is more 1g syste…

---

## [Enhance performance when using FSCrawler and Elasticsearch together](https://discuss.elastic.co/t/enhance-performance-when-using-fscrawler-and-elasticsearch-together/160038)

<div class="topic-metadata">

**Author:** [@mohsen](https://discuss.elastic.co/u/mohsen)\
**Replies:** 1\
**Last updated:** [December 9, 2018, 10:13am UTC](https://discuss.elastic.co/t/enhance-performance-when-using-fscrawler-and-elasticsearch-together/160038 "2018-12-09T10:13:36Z")

</div>

Hello I know the question and the scenario I'm going to make is general and the answer depends on the circumstances, but I would like to know what is the best approach and setting for such a scenario. What we are going…

---

## [Node cant rejoin to cluster (after reboot)](https://discuss.elastic.co/t/node-cant-rejoin-to-cluster-after-reboot/145517)

<div class="topic-metadata">

**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\
**Replies:** 1\
**Last updated:** [August 27, 2018, 12:23pm UTC](https://discuss.elastic.co/t/node-cant-rejoin-to-cluster-after-reboot/145517 "2018-08-27T12:23:42Z")

</div>

Hello, I am using elasticsearch version 5.6.6 with 5 nodes on bare-metal servers. All was running fine for many months then I wanted to test how cluster behaves without one node. So I stoppped node sn5 and also reboote…

---

## [Bool query with range](https://discuss.elastic.co/t/bool-query-with-range/117321)

<div class="topic-metadata">

**Author:** [@riccardone1](https://discuss.elastic.co/u/riccardone1)\
**Replies:** 1\
**Last updated:** [January 27, 2018, 7:06pm UTC](https://discuss.elastic.co/t/bool-query-with-range/117321 "2018-01-27T19:06:28Z")

</div>

Hi Given that in my index there is a document with "LogType": "Terapy" and "LogDate": { "gte": "2015-01-01"} why the following bool query doesn't return any document? { "query": { "bool" : { "must" : { "term" : { …

---

## [Java API Error on Aggregations](https://discuss.elastic.co/t/java-api-error-on-aggregations/32886)

<div class="topic-metadata">

**Author:** [@William\_Bowen](https://discuss.elastic.co/u/William_Bowen)\
**Replies:** 1\
**Last updated:** [January 17, 2017, 2:26am UTC](https://discuss.elastic.co/t/java-api-error-on-aggregations/32886 "2017-01-17T02:26:49Z")

</div>

Hello, I'm using the Java API (1.4.5) to submit JSON like so: SearchResponse response = client.prepareSearch(index).setSource(json).get(); Where json is a Map that's being passed to me. Suffice to say, I'm being passe…

---

## [Closing index in elastic search](https://discuss.elastic.co/t/closing-index-in-elastic-search/41899)

<div class="topic-metadata">

**Author:** [@bubu.senapati](https://discuss.elastic.co/u/bubu.senapati)\
**Replies:** 1\
**Last updated:** [February 16, 2016, 3:25pm UTC](https://discuss.elastic.co/t/closing-index-in-elastic-search/41899 "2016-02-16T15:25:12Z")

</div>

Hi, there is an index in my elastic search which i want to close and subsequently delete. The index created is with name falog-%{\[time\_stamp\]} I tried to execute the curl like curl -XPOST 'http://localhost:9200/falog-%{\[…

---

## [Importing Big Data in Elasticsearch](https://discuss.elastic.co/t/importing-big-data-in-elasticsearch/40864)

<div class="topic-metadata">

**Author:** [@Sanjay\_Bhosale](https://discuss.elastic.co/u/Sanjay_Bhosale)\
**Replies:** 1\
**Last updated:** [February 7, 2016, 2:55pm UTC](https://discuss.elastic.co/t/importing-big-data-in-elasticsearch/40864 "2016-02-07T14:55:10Z")

</div>

Hi, I Have 3 node Elasticsearch cluster and around 1TB data with 16 indexes and many ids. While parsing document ids may get repeated and i need to update old id by concatenating new values. I have tried importing in…

---

## [Filebeat only sends logs on restart](https://discuss.elastic.co/t/filebeat-only-sends-logs-on-restart/37184)

<div class="topic-metadata">

**Author:** [@Sedward](https://discuss.elastic.co/u/Sedward)\
**Replies:** 1\
**Last updated:** [December 15, 2015, 12:58am UTC](https://discuss.elastic.co/t/filebeat-only-sends-logs-on-restart/37184 "2015-12-15T00:58:10Z")

</div>

I've just got started using Filebeat with logstash and amazon's elasticsearch + kibana setup. Whenever I start/restart filebeat, all new logs are sent through and show up in my es server. However when new new logs come i…

---

## [Eshadoop : why lowercasing field names?](https://discuss.elastic.co/t/eshadoop-why-lowercasing-field-names/22170)

<div class="topic-metadata">

**Author:** [@Ulul](https://discuss.elastic.co/u/Ulul)\
**Replies:** 1\
**Last updated:** [February 15, 2015, 10:50am UTC](https://discuss.elastic.co/t/eshadoop-why-lowercasing-field-names/22170 "2015-02-15T10:50:56Z")

</div>

Hi I'm a (rather impressed) user of eshadoop but I'm a bit puzzled by the fact that all field names are lowercased prior to being sent to es and the doc doc states : "Elasticsearch accepts only lower-case field name…

---

## [New JAVA API Documentation](https://discuss.elastic.co/t/new-java-api-documentation/299559)

<div class="topic-metadata">

**Author:** [@willypol](https://discuss.elastic.co/u/willypol)\
**Replies:** 2\
**Last updated:** [March 18, 2022, 8:33am UTC](https://discuss.elastic.co/t/new-java-api-documentation/299559 "2022-03-18T08:33:54Z")

</div>

Hello, first of all congratulations on the new version of Elastic. A month ago we were translating a java software that uses Elasticsearch. We switched to the new Java API (with very poor documentation) and it took a lot…

---

## [How to install metricbeat on multiple servers once](https://discuss.elastic.co/t/how-to-install-metricbeat-on-multiple-servers-once/177937)

<div class="topic-metadata">

**Author:** [@kamal1](https://discuss.elastic.co/u/kamal1)\
**Replies:** 2\
**Last updated:** [April 23, 2019, 3:25pm UTC](https://discuss.elastic.co/t/how-to-install-metricbeat-on-multiple-servers-once/177937 "2019-04-23T15:25:15Z")

</div>

I have installed beat agents on single machine and I want to get them installed (winlogbeat, metricbeat and filebeat) on 5 more machines in my environment. I don't want to login to each and every machine and install them…

---

## [ILM phase completed](https://discuss.elastic.co/t/ilm-phase-completed/174718)

<div class="topic-metadata">

**Author:** [@Valker](https://discuss.elastic.co/u/Valker)\
**Replies:** 2\
**Last updated:** [April 1, 2019, 5:10pm UTC](https://discuss.elastic.co/t/ilm-phase-completed/174718 "2019-04-01T17:10:49Z")

</div>

Hello, I have one question regarding Index Lifecycle Managment. My lifecycle policy looks like this: Policy Details{ "policy": { "phases": { "hot": { "min\_age": "…

---

## [Discrepancies when dividing a result using JSON input](https://discuss.elastic.co/t/discrepancies-when-dividing-a-result-using-json-input/165297)

<div class="topic-metadata">

**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\
**Replies:** 2\
**Last updated:** [January 23, 2019, 7:05pm UTC](https://discuss.elastic.co/t/discrepancies-when-dividing-a-result-using-json-input/165297 "2019-01-23T19:05:02Z")

</div>

I'm using Kibana 6.5.4 and I'm trying to create a simple metric.. I want to sum inbound bites, so I create the metric, I use Sum as aggregation and in field I put the correct field ("server\_inbound\_bytes"). The result i…

---

## [How to stop Elasticsearch debugging gracefully](https://discuss.elastic.co/t/how-to-stop-elasticsearch-debugging-gracefully/86668)

<div class="topic-metadata">

**Author:** [@bidongliang](https://discuss.elastic.co/u/bidongliang)\
**Replies:** 2\
**Last updated:** [June 1, 2017, 8:07am UTC](https://discuss.elastic.co/t/how-to-stop-elasticsearch-debugging-gracefully/86668 "2017-06-01T08:07:41Z")

</div>

I'm novice in both Java and Elasticsearch, but assigned a task to implement an Elasticsearch plugin! :frowning: After download the Elasticsearch source code and imported them in IntelliJ, I managed to debug the source …

[Previous page](https://discuss.elastic.co/top.md?page=1332&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1334&per_page=50&period=all)
