# Top

**URL:** https://discuss.elastic.co/top.md?page=1344&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1345

---

## [Elasticsearch plugin - is there a way to keep it forever listening](https://discuss.elastic.co/t/elasticsearch-plugin-is-there-a-way-to-keep-it-forever-listening/27484)

<div class="topic-metadata">

**Author:** [@Cjtow](https://discuss.elastic.co/u/Cjtow)\
**Replies:** 2\
**Last updated:** [August 17, 2015, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-is-there-a-way-to-keep-it-forever-listening/27484 "2015-08-17T11:15:01Z")

</div>

Good morning, At the moment, I have a query and it runs against the Logstash-\* index but once it's done reading from today's date it closes the connection. Is there a way to keep it always running so it will pick up an…

---

## [Searches on different nodes return different results](https://discuss.elastic.co/t/searches-on-different-nodes-return-different-results/9933)

<div class="topic-metadata">

**Author:** [@Rob\_Styles](https://discuss.elastic.co/u/Rob_Styles)\
**Replies:** 2\
**Last updated:** [December 4, 2012, 4:27pm UTC](https://discuss.elastic.co/t/searches-on-different-nodes-return-different-results/9933 "2012-12-04T16:27:53Z")

</div>

I have a five node cluster configured with 0.19.11 and have indexed a large number of documents using 40 java client procs (in Hadoop Map/Reduce). Each of the five nodes in my cluster has log entries recognizing the …

---

## [How to update values present in particular field for every docs in index using DSL query](https://discuss.elastic.co/t/how-to-update-values-present-in-particular-field-for-every-docs-in-index-using-dsl-query/284885)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 1\
**Last updated:** [September 27, 2021, 9:02am UTC](https://discuss.elastic.co/t/how-to-update-values-present-in-particular-field-for-every-docs-in-index-using-dsl-query/284885 "2021-09-27T09:02:57Z")

</div>

Hi, I want to update a particular field in the index. Index contains 100 docs. I want to update field "name" with "condition\_system" in every doc where "Condition System" is present. GET part\_ther/\_search { "\_…

---

## [Elasticsearch DSL with (A or B) and C](https://discuss.elastic.co/t/elasticsearch-dsl-with-a-or-b-and-c/222890)

<div class="topic-metadata">

**Author:** [@Tennis](https://discuss.elastic.co/u/Tennis)\
**Replies:** 1\
**Last updated:** [March 10, 2020, 9:29am UTC](https://discuss.elastic.co/t/elasticsearch-dsl-with-a-or-b-and-c/222890 "2020-03-10T09:29:19Z")

</div>

I want to query the data with the condition: ("product":"book" OR customer":"A") AND "Tag":"T1" My DSL: body = { "query":{ "bool":{ "must":\[ {"bool":{ "should":\[ { "match"…

---

## [Kibana query: average value](https://discuss.elastic.co/t/kibana-query-average-value/140561)

<div class="topic-metadata">

**Author:** [@neizmirasego](https://discuss.elastic.co/u/neizmirasego)\
**Replies:** 1\
**Last updated:** [July 18, 2018, 8:37pm UTC](https://discuss.elastic.co/t/kibana-query-average-value/140561 "2018-07-18T20:37:35Z")

</div>

Hi! I am looking for a way to create a query in kibana like this: if some field's average value (let's say for the last week) is higher than some threshold. Unfortunately it can not be done with the standard filters or …

---

## [Shards will be relocated away from this node in ES](https://discuss.elastic.co/t/shards-will-be-relocated-away-from-this-node-in-es/112745)

<div class="topic-metadata">

**Author:** [@narasiman1986](https://discuss.elastic.co/u/narasiman1986)\
**Replies:** 1\
**Last updated:** [December 21, 2017, 5:40am UTC](https://discuss.elastic.co/t/shards-will-be-relocated-away-from-this-node-in-es/112745 "2017-12-21T05:40:17Z")

</div>

i am displaying the records from mysql to elastic search through logstash and GUI kibana In logstash config file code as follows input { jdbc { jdbc\_driver\_library =\> "D:\\mysql-connector-java-5.1.44\\mysql-connector-j…

---

## [Help needed with OpenLDAP Logstash filter](https://discuss.elastic.co/t/help-needed-with-openldap-logstash-filter/104605)

<div class="topic-metadata">

**Author:** [@pdna](https://discuss.elastic.co/u/pdna)\
**Replies:** 1\
**Last updated:** [October 19, 2017, 7:12pm UTC](https://discuss.elastic.co/t/help-needed-with-openldap-logstash-filter/104605 "2017-10-19T19:12:31Z")

</div>

I have the following logstash.conf file that I have taken from github input { file { path =\> "/var/log/openldap.log" start\_position =\> beginning type =\> "openldap\_log\_file" } } filter { grok { …

---

## [Not\_analyzed is not working](https://discuss.elastic.co/t/not-analyzed-is-not-working/71922)

<div class="topic-metadata">

**Author:** [@VuNguyen](https://discuss.elastic.co/u/VuNguyen)\
**Replies:** 1\
**Last updated:** [January 18, 2017, 6:01am UTC](https://discuss.elastic.co/t/not-analyzed-is-not-working/71922 "2017-01-18T06:01:39Z")

</div>

Hi everyone, I am new to Elasticsearch, and using ES 5.1.1. When I create a Map for my type, I set property "index" of a text field to "not\_analyzed", but when I try to query document using term filter, it did not ret…

---

## [Redis::CannotConnectError](https://discuss.elastic.co/t/redis-cannotconnecterror/69935)

<div class="topic-metadata">

**Author:** [@sockaddr\_in](https://discuss.elastic.co/u/sockaddr_in)\
**Replies:** 1\
**Last updated:** [December 27, 2016, 5:46am UTC](https://discuss.elastic.co/t/redis-cannotconnecterror/69935 "2016-12-27T05:46:13Z")

</div>

Hello, everyone, I used to connect redis logstash, and monitor the redis for the key, not the beginning of any problems, but after a very long period of time will be reported redis connection timeout error. Is this a war…

---

## [Kibana 5 : Sense plugin installation fails in windows](https://discuss.elastic.co/t/kibana-5-sense-plugin-installation-fails-in-windows/67459)

<div class="topic-metadata">

**Author:** [@sharmila\_prajapati](https://discuss.elastic.co/u/sharmila_prajapati)\
**Replies:** 1\
**Last updated:** [November 29, 2016, 2:43pm UTC](https://discuss.elastic.co/t/kibana-5-sense-plugin-installation-fails-in-windows/67459 "2016-11-29T14:43:56Z")

</div>

I'm trying to install the Sense plugin in Kibana 5.0.1 and I am using windows 7 As per the documentation I have used following commands bin/kibana-plugin install \<package name or URL\> I am getting follwing error: U…

---

## [Change the default precision\_threshold from 3000 to 40000](https://discuss.elastic.co/t/change-the-default-precision-threshold-from-3000-to-40000/295038)

<div class="topic-metadata">

**Author:** [@zevodku](https://discuss.elastic.co/u/zevodku)\
**Replies:** 0\
**Last updated:** [January 21, 2022, 9:03am UTC](https://discuss.elastic.co/t/change-the-default-precision-threshold-from-3000-to-40000/295038 "2022-01-21T09:03:59Z")

</div>

Hello folks, Is there any way to change the default precision\_threshold from "3000" to "40000" as a global thing? Like in the configuration files (Elasticsearch.yml or kibana.yml)? I'm using cardinality extensively and…

---

## [Using Ngrams for building a autocomplete suggester](https://discuss.elastic.co/t/using-ngrams-for-building-a-autocomplete-suggester/276520)

<div class="topic-metadata">

**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\
**Replies:** 0\
**Last updated:** [June 21, 2021, 10:19am UTC](https://discuss.elastic.co/t/using-ngrams-for-building-a-autocomplete-suggester/276520 "2021-06-21T10:19:47Z")

</div>

I have 2 fields in my index, Title and Description. Title obviously a short phrase (max 100 characters) and description is a long description (up to 5000 characters). I have built a autocomplete by building ngrams on T…

---

## [WinlogBeat - parsing "message" field](https://discuss.elastic.co/t/winlogbeat-parsing-message-field/272497)

<div class="topic-metadata">

**Author:** [@filip.wozniak](https://discuss.elastic.co/u/filip.wozniak)\
**Replies:** 0\
**Last updated:** [May 9, 2021, 11:06am UTC](https://discuss.elastic.co/t/winlogbeat-parsing-message-field/272497 "2021-05-09T11:06:04Z")

</div>

Greetings! I'm using basic setup that uses Winlogbeat with configured sysmon. I'm writing some correlation rules and I would like to detect whether powershell command is suspiciously long. The command itself is in "mes…

---

## [Exclusions for elastic EQL rules](https://discuss.elastic.co/t/exclusions-for-elastic-eql-rules/266144)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 5:39pm UTC](https://discuss.elastic.co/t/exclusions-for-elastic-eql-rules/266144 "2021-03-03T17:39:46Z")

</div>

Hi, We are trying to create exclusions for one of the new EQL rules - remote execution via file shares Within the detection there is no relevent info to base an exclusion, from the timeline we see the events and fields…

---

## [Elastic Contributor Program: How to contribute code](https://discuss.elastic.co/t/elastic-contributor-program-how-to-contribute-code/261584)

<div class="topic-metadata">

**Author:** [@riferrei](https://discuss.elastic.co/u/riferrei)\
**Replies:** 0\
**Last updated:** [January 19, 2021, 7:31pm UTC](https://discuss.elastic.co/t/elastic-contributor-program-how-to-contribute-code/261584 "2021-01-19T19:31:12Z")

</div>

If you are planning to submit code content for the Elastic Contributor Program but don't know how — I created the resources below to help you with this :partying\_face: :page\_facing\_up: Blog : https://www.elastic.co/bl…

---

## [Filebeat favors single logstash node after significant backpressure](https://discuss.elastic.co/t/filebeat-favors-single-logstash-node-after-significant-backpressure/241716)

<div class="topic-metadata">

**Author:** [@Derek\_Gallo](https://discuss.elastic.co/u/Derek_Gallo)\
**Replies:** 0\
**Last updated:** [July 17, 2020, 7:36pm UTC](https://discuss.elastic.co/t/filebeat-favors-single-logstash-node-after-significant-backpressure/241716 "2020-07-17T19:36:53Z")

</div>

We are running Filebeat via a daemonset in Kubernetes. We are running logstash as a statefulset with persistent queues and 12 nodes. Filebeat is configured with the hostname to each logstash node and loadbalance is set…

---

## [Malformed Error](https://discuss.elastic.co/t/malformed-error/71151)

<div class="topic-metadata">

**Author:** [@romspacenut](https://discuss.elastic.co/u/romspacenut)\
**Replies:** 6\
**Last updated:** [January 11, 2017, 6:39am UTC](https://discuss.elastic.co/t/malformed-error/71151 "2017-01-11T06:39:26Z")

</div>

Can't figure out these errors I've been seeing. Been seeing a lot of these kind errors in my logstash.log file: "caused\_by"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Invalid format: \\"2017-01-10T12:36:22-08:00…

---

## [Elasticsearch search response pick(latency) occurs when \_refresh with G1GC](https://discuss.elastic.co/t/elasticsearch-search-response-pick-latency-occurs-when-refresh-with-g1gc/327612)

<div class="topic-metadata">

**Author:** [@doyle.min](https://discuss.elastic.co/u/doyle.min)\
**Replies:** 3\
**Last updated:** [March 17, 2023, 3:18pm UTC](https://discuss.elastic.co/t/elasticsearch-search-response-pick-latency-occurs-when-refresh-with-g1gc/327612 "2023-03-17T15:18:03Z")

</div>

hello. Our elasticsearch cluster has 3 master nodes and 12 data nodes installed on 2 IDCs. In front of elasticsearch, there is search api server that multisearches three indexes. It shows an average response time of le…

---

## [Encrypted Indices?](https://discuss.elastic.co/t/encrypted-indices/16341)

<div class="topic-metadata">

**Author:** [@Parag\_Shah](https://discuss.elastic.co/u/Parag_Shah)\
**Replies:** 3\
**Last updated:** [March 13, 2014, 7:09am UTC](https://discuss.elastic.co/t/encrypted-indices/16341 "2014-03-13T07:09:30Z")

</div>

Hi all, I know ElasticSearch does not support encrypting indices. Has anyone built something on top of ElasticSearch or modified ElasticSearch to achieve encrypted indices? Would like to hear stories of how it…

---

## [\`block in start\_input\` appears when trying to run logstash input using jdbc plugin](https://discuss.elastic.co/t/block-in-start-input-appears-when-trying-to-run-logstash-input-using-jdbc-plugin/313697)

<div class="topic-metadata">

**Author:** [@Khammassi\_HoussemEdd](https://discuss.elastic.co/u/Khammassi_HoussemEdd)\
**Replies:** 2\
**Last updated:** [September 6, 2022, 7:49am UTC](https://discuss.elastic.co/t/block-in-start-input-appears-when-trying-to-run-logstash-input-using-jdbc-plugin/313697 "2022-09-06T07:49:09Z")

</div>

Hello i have a mysql database and i want to ingest it's data into elasticsearch using logstash after configuring the input and output i am getting the following error: org/jruby/RubyArray.java:1865:in \`each' /usr/share…

---

## [Elasticsearch Component Template Increase Total Mappings Limit](https://discuss.elastic.co/t/elasticsearch-component-template-increase-total-mappings-limit/307047)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 2\
**Last updated:** [June 13, 2022, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-component-template-increase-total-mappings-limit/307047 "2022-06-13T16:21:23Z")

</div>

Hi All, I was wondering if there is a way to increase the total mappings limit on Component Template? I have a component template with \> 1000 mappings and am hitting the error: {"error":{"root\_cause":\[{"type":"illegal…

---

## [Unknown time-zone ID: strict\_date\_hour\_minute\_second](https://discuss.elastic.co/t/unknown-time-zone-id-strict-date-hour-minute-second/277933)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 2\
**Last updated:** [July 7, 2021, 11:56pm UTC](https://discuss.elastic.co/t/unknown-time-zone-id-strict-date-hour-minute-second/277933 "2021-07-07T23:56:51Z")

</div>

I read the document and wrote a DSL query, but there was an error. What is a time zone ID? It's not mentioned in the document. quote doc date\_hour\_minute\_second or strict\_date\_hour\_minute\_second A formatter that com…

---

## [100 percent cpu utilization on single node elasticsearch](https://discuss.elastic.co/t/100-percent-cpu-utilization-on-single-node-elasticsearch/226178)

<div class="topic-metadata">

**Author:** [@Shubham\_Mittal](https://discuss.elastic.co/u/Shubham_Mittal)\
**Replies:** 2\
**Last updated:** [April 13, 2020, 5:38pm UTC](https://discuss.elastic.co/t/100-percent-cpu-utilization-on-single-node-elasticsearch/226178 "2020-04-13T17:38:26Z")

</div>

Hi Team, Facing 100 cpu utilization when running multiple search requests with only 10 users on an AWS Windows server, with 2 core cpu and 16 GB RAM, with 2 GB allocated as HEAP in elasticsearch. Can anyone suggest ho…

---

## [Unable to process attachments using logstash 7.6.0 IMAP Input plugin](https://discuss.elastic.co/t/unable-to-process-attachments-using-logstash-7-6-0-imap-input-plugin/227416)

<div class="topic-metadata">

**Author:** [@Diptee](https://discuss.elastic.co/u/Diptee)\
**Replies:** 2\
**Last updated:** [April 13, 2020, 2:13pm UTC](https://discuss.elastic.co/t/unable-to-process-attachments-using-logstash-7-6-0-imap-input-plugin/227416 "2020-04-13T14:13:56Z")

</div>

I have configured logstash input to process emails from Gmail/Outlook using IMAP Input plugin. I am getting error when the email contains attachments or images. Sample config below- input { imap { host =\> "xyz.com" …

---

## [Change docker registry and repo path](https://discuss.elastic.co/t/change-docker-registry-and-repo-path/206422)

<div class="topic-metadata">

**Author:** [@logger](https://discuss.elastic.co/u/logger)\
**Replies:** 2\
**Last updated:** [November 6, 2019, 3:10pm UTC](https://discuss.elastic.co/t/change-docker-registry-and-repo-path/206422 "2019-11-06T15:10:32Z")

</div>

Hi there, we have a satellite server for our internal docker registry. When I setup ECE I can change the registry server but not the repository path. Unfortunatley we have a static path and cannot change it. satellite…

---

## [Combining 2 Graphs and disregarding one metric when creating split series](https://discuss.elastic.co/t/combining-2-graphs-and-disregarding-one-metric-when-creating-split-series/198902)

<div class="topic-metadata">

**Author:** [@kdsantos07](https://discuss.elastic.co/u/kdsantos07)\
**Replies:** 2\
**Last updated:** [September 18, 2019, 4:11am UTC](https://discuss.elastic.co/t/combining-2-graphs-and-disregarding-one-metric-when-creating-split-series/198902 "2019-09-18T04:11:00Z")

</div>

This will be my first post here since I cannot see similar problem on the internet. So I got this two metric which in this case a "Bar" and a "Line" graph What I want to achieve is the "Line graph" shows the total coun…

---

## [Cross Cluster Search param search.remote.initial\_connect\_timeout does not work](https://discuss.elastic.co/t/cross-cluster-search-param-search-remote-initial-connect-timeout-does-not-work/193671)

<div class="topic-metadata">

**Author:** [@michal1](https://discuss.elastic.co/u/michal1)\
**Replies:** 2\
**Last updated:** [August 11, 2019, 6:23am UTC](https://discuss.elastic.co/t/cross-cluster-search-param-search-remote-initial-connect-timeout-does-not-work/193671 "2019-08-11T06:23:07Z")

</div>

Hi, I am running with cross cluster search in elastic. I want to raise the search.remote.initial\_connect\_timeout from the default 30sec to a larger number, but i see this has no impact on anything. I would expect it t…

---

## [ES Gradle plugin](https://discuss.elastic.co/t/es-gradle-plugin/139366)

<div class="topic-metadata">

**Author:** [@vvelichkovich](https://discuss.elastic.co/u/vvelichkovich)\
**Replies:** 2\
**Last updated:** [July 10, 2018, 2:41pm UTC](https://discuss.elastic.co/t/es-gradle-plugin/139366 "2018-07-10T14:41:14Z")

</div>

I am have trouble to find anything about "ES Gradle plugin". I am finding in different posts recommendation to use this plugin for integration tests that I need (when I want to start my ES node and run different tests …

---

## [Packetbeat postgresql](https://discuss.elastic.co/t/packetbeat-postgresql/127577)

<div class="topic-metadata">

**Author:** [@philippkahr](https://discuss.elastic.co/u/philippkahr)\
**Replies:** 2\
**Last updated:** [April 14, 2018, 1:03pm UTC](https://discuss.elastic.co/t/packetbeat-postgresql/127577 "2018-04-14T13:03:41Z")

</div>

Hallo, I experience some funny errors when dealing with packetbeat and the postgresql module. First of all, I can see Data being send to Elasticsearch and I can view them in Kibana. Secondly, I think it is more a bug …

---

## [How to visualize "terms lookup twitter example" in kibana](https://discuss.elastic.co/t/how-to-visualize-terms-lookup-twitter-example-in-kibana/78950)

<div class="topic-metadata">

**Author:** [@shun](https://discuss.elastic.co/u/shun)\
**Replies:** 2\
**Last updated:** [March 18, 2017, 4:20am UTC](https://discuss.elastic.co/t/how-to-visualize-terms-lookup-twitter-example-in-kibana/78950 "2017-03-18T04:20:31Z")

</div>

Elasticsearch reference gives a good example to combine 2 indices between tweets and users. GET /tweets/\_search { "query" : { "terms" : { "user" : { "index" : "users", …

---

## [Tiered merge policy settings not documented in 2.x: gone?](https://discuss.elastic.co/t/tiered-merge-policy-settings-not-documented-in-2-x-gone/61470)

<div class="topic-metadata">

**Author:** [@Luke\_Nezda](https://discuss.elastic.co/u/Luke_Nezda)\
**Replies:** 2\
**Last updated:** [September 26, 2016, 2:38pm UTC](https://discuss.elastic.co/t/tiered-merge-policy-settings-not-documented-in-2-x-gone/61470 "2016-09-26T14:38:20Z")

</div>

index.merge.policy.segments\_per\_tier and related tiered merge policy settings are in https://www.elastic.co/guide/en/elasticsearch/reference/1.7/index-modules-merge.html#policy but not https://www.elastic.co/guide/en/ela…

---

## [ES with high "total\_opened"](https://discuss.elastic.co/t/es-with-high-total-opened/56060)

<div class="topic-metadata">

**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\
**Replies:** 2\
**Last updated:** [August 1, 2016, 11:00am UTC](https://discuss.elastic.co/t/es-with-high-total-opened/56060 "2016-08-01T11:00:49Z")

</div>

I am using nodeJS & perl clients to connect to ES. While reading the definitive guide of ES I found that my ES shows Node -1 "transport": { "server\_open": 13, "rx\_count": 235417, "rx\_size\_in\_byt…

---

## [Error installing graph plugin](https://discuss.elastic.co/t/error-installing-graph-plugin/48713)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 2\
**Last updated:** [April 28, 2016, 5:25pm UTC](https://discuss.elastic.co/t/error-installing-graph-plugin/48713 "2016-04-28T17:25:34Z")

</div>

I'm trying to install graph-2.3.1.zip into our elasticsearch-2.2.0 installation. I'm following the instructions at Installing Graph | Elasticsearch Graph \[2.4\] | Elastic, installing from a zip file and I'm getting the er…

---

## [Haproxy 1.6 + logstash 2.2; grok vs. online validators](https://discuss.elastic.co/t/haproxy-1-6-logstash-2-2-grok-vs-online-validators/43318)

<div class="topic-metadata">

**Author:** [@rmrf](https://discuss.elastic.co/u/rmrf)\
**Replies:** 2\
**Last updated:** [March 3, 2016, 1:25pm UTC](https://discuss.elastic.co/t/haproxy-1-6-logstash-2-2-grok-vs-online-validators/43318 "2016-03-03T13:25:47Z")

</div>

I'm having a bit of a head banging against the wall issue... I have haproxy (v. 1.6) config'ed to syslog to logstash (v. 2.2.2). Grok's packaged haproxy filters are for v. 1.4- so i've had to hack them up a bit, plus add…

---

## [Combine has\_parent with AND & OR](https://discuss.elastic.co/t/combine-has-parent-with-and-or/39208)

<div class="topic-metadata">

**Author:** [@horte](https://discuss.elastic.co/u/horte)\
**Replies:** 2\
**Last updated:** [January 14, 2016, 10:19am UTC](https://discuss.elastic.co/t/combine-has-parent-with-and-or/39208 "2016-01-14T10:19:01Z")

</div>

Hi, I have a parent-child document setup that looks like this: { "mappings": { "campaigns":{ "properties":{ "name": { "type": "string" }, …

---

## [Mapping problem](https://discuss.elastic.co/t/mapping-problem/11342)

<div class="topic-metadata">

**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\
**Replies:** 2\
**Last updated:** [March 28, 2013, 11:39am UTC](https://discuss.elastic.co/t/mapping-problem/11342 "2013-03-28T11:39:35Z")

</div>

Hi, I have a json object with an optional list of link objects with an href and couple of optional fields such as type: {"tags":\[{"href":"http:...."}\], "anotherfield":"foo"} That works fine and I can do term q…

---

## [Is it possible to ignore documents that exceeds index.mapping.nested\_objects.limit](https://discuss.elastic.co/t/is-it-possible-to-ignore-documents-that-exceeds-index-mapping-nested-objects-limit/288538)

<div class="topic-metadata">

**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\
**Replies:** 1\
**Last updated:** [November 8, 2021, 4:43pm UTC](https://discuss.elastic.co/t/is-it-possible-to-ignore-documents-that-exceeds-index-mapping-nested-objects-limit/288538 "2021-11-08T16:43:27Z")

</div>

Hi, we have a transform that writes into a destination index, that includes a nested field. the transform failed because of the index.mapping.nested\_objects.limit. is there a way to ignore/processing/writing/updating …

---

## [Kibana data table text color formatting based on field value](https://discuss.elastic.co/t/kibana-data-table-text-color-formatting-based-on-field-value/208240)

<div class="topic-metadata">

**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\
**Replies:** 1\
**Last updated:** [November 18, 2019, 1:45am UTC](https://discuss.elastic.co/t/kibana-data-table-text-color-formatting-based-on-field-value/208240 "2019-11-18T01:45:55Z")

</div>

Hi, I want to change the text color of the data table cell, based on the index filed value for that cell. I saw couple of old questions around that and saying that it was not supported in Kibana at that time. May I know…

---

## [Change index per pipeline](https://discuss.elastic.co/t/change-index-per-pipeline/144901)

<div class="topic-metadata">

**Author:** [@Josiah\_Raiche](https://discuss.elastic.co/u/Josiah_Raiche)\
**Replies:** 1\
**Last updated:** [August 17, 2018, 2:02pm UTC](https://discuss.elastic.co/t/change-index-per-pipeline/144901 "2018-08-17T14:02:00Z")

</div>

I'm very new to elasticsearch, so I may be approaching this problem incorrectly. I've got a couple logs with different log formats. It's pretty easy to create a pipeline with a grok pattern for each, but I'd like to sen…

---

## [Mysql DB sync of all tables in DB at once](https://discuss.elastic.co/t/mysql-db-sync-of-all-tables-in-db-at-once/129602)

<div class="topic-metadata">

**Author:** [@raghav1107](https://discuss.elastic.co/u/raghav1107)\
**Replies:** 1\
**Last updated:** [April 26, 2018, 8:09am UTC](https://discuss.elastic.co/t/mysql-db-sync-of-all-tables-in-db-at-once/129602 "2018-04-26T08:09:21Z")

</div>

Hi, We have mysql database which has 10 to 12 tables. Currently we are using log stash conf as below and jdbc plugin to sync the table data into elastic search. some tables has lakhs of records and might take time to sy…

---

## [Where to know the datanode name like "2XK4x5-tRHyLhpPB7XTdXg" in tasks](https://discuss.elastic.co/t/where-to-know-the-datanode-name-like-2xk4x5-trhylhppb7xtdxg-in-tasks/100272)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 7\
**Last updated:** [September 13, 2017, 9:02am UTC](https://discuss.elastic.co/t/where-to-know-the-datanode-name-like-2xk4x5-trhylhppb7xtdxg-in-tasks/100272 "2017-09-13T09:02:49Z")

</div>

where to know the datanode name or ip addr like "2XK4x5-tRHyLhpPB7XTdXg" in tasks "tasks" : { "Qb03E91zSCG1tBvhmfWqzg:96694" : { "node" : "Qb03E91zSCG1tBvhmfWqzg", "id" : 96694, "type" : "netty"…

---

## [Java.lang.OutOfMemoryError - how to anticipate memory usage?](https://discuss.elastic.co/t/java-lang-outofmemoryerror-how-to-anticipate-memory-usage/5912)

<div class="topic-metadata">

**Author:** [@Michal\_Wegorek](https://discuss.elastic.co/u/Michal_Wegorek)\
**Replies:** 7\
**Last updated:** [November 24, 2011, 1:50pm UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-how-to-anticipate-memory-usage/5912 "2011-11-24T13:50:44Z")

</div>

Problem: Indexing tens of millions of small (200B) docs. During indexing process memory is gradually rising, see: http://i.imgur.com/xfI98.png As soon as ES reaches max memory limit I receive WARN: failed engine j…

---

## [Elastic Load Balancer as Target Host](https://discuss.elastic.co/t/elastic-load-balancer-as-target-host/176328)

<div class="topic-metadata">

**Author:** [@rocksnslopes](https://discuss.elastic.co/u/rocksnslopes)\
**Replies:** 5\
**Last updated:** [April 12, 2019, 4:27pm UTC](https://discuss.elastic.co/t/elastic-load-balancer-as-target-host/176328 "2019-04-12T16:27:59Z")

</div>

Hi - I have various scenarios I would like to benchmark using different instance classes with varying node counts. It would be rather cumbersome to specify each node's IP address in the target-hosts param. I instead w…

---

## [Cluster network configuration with 2 network boards](https://discuss.elastic.co/t/cluster-network-configuration-with-2-network-boards/128385)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 5\
**Last updated:** [April 24, 2018, 12:01pm UTC](https://discuss.elastic.co/t/cluster-network-configuration-with-2-network-boards/128385 "2018-04-24T12:01:51Z")

</div>

Hello, I have 3 hosts with 2 network interfaces. one public and the other private. I want to bind port 9200 on public network interface (queries) and port 9300 on private interface (zen.discovery) Here is my conf ifcon…

---

## [ElasticSearch document versioning](https://discuss.elastic.co/t/elasticsearch-document-versioning/16110)

<div class="topic-metadata">

**Author:** [@janosz\_krzysztof](https://discuss.elastic.co/u/janosz_krzysztof)\
**Replies:** 5\
**Last updated:** [March 6, 2014, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-document-versioning/16110 "2014-03-06T11:58:54Z")

</div>

Hello, I have a question if it's possible to replace the document with same version? The reason why I'm trying to do it, is situation such that: - inserting new doc with external version - let's say that this docu…

---

## [Create Parent-Child relationship with Logstash](https://discuss.elastic.co/t/create-parent-child-relationship-with-logstash/294198)

<div class="topic-metadata">

**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\
**Replies:** 3\
**Last updated:** [January 12, 2022, 8:22pm UTC](https://discuss.elastic.co/t/create-parent-child-relationship-with-logstash/294198 "2022-01-12T20:22:19Z")

</div>

Hi Everyone; I need to create a Parent-Chield relationship with Logstash. I created index like this. Here is the mapping I try to create relationship using filter mutate as below picture But I am getting this…

---

## [How to view ES cluster CPU load?](https://discuss.elastic.co/t/how-to-view-es-cluster-cpu-load/249685)

<div class="topic-metadata">

**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\
**Replies:** 3\
**Last updated:** [September 24, 2020, 7:14pm UTC](https://discuss.elastic.co/t/how-to-view-es-cluster-cpu-load/249685 "2020-09-24T19:14:39Z")

</div>

Hi, is there a curl command I can run to pull the CPU load from each server in my ES cluster?

---

## [Error with scriptfield in visualization](https://discuss.elastic.co/t/error-with-scriptfield-in-visualization/222071)

<div class="topic-metadata">

**Author:** [@Anton91](https://discuss.elastic.co/u/Anton91)\
**Replies:** 3\
**Last updated:** [March 9, 2020, 10:03pm UTC](https://discuss.elastic.co/t/error-with-scriptfield-in-visualization/222071 "2020-03-09T22:03:33Z")

</div>

Hello, everybody, i have created a scripted field and whenever i want to visualize it i get an error: \[esaggs\] \> Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"aggregation\_execution\_exception","reaso…

---

## [Alerting in elastic by filtering a field in it](https://discuss.elastic.co/t/alerting-in-elastic-by-filtering-a-field-in-it/194288)

<div class="topic-metadata">

**Author:** [@Karthik2411](https://discuss.elastic.co/u/Karthik2411)\
**Replies:** 3\
**Last updated:** [August 15, 2019, 7:15am UTC](https://discuss.elastic.co/t/alerting-in-elastic-by-filtering-a-field-in-it/194288 "2019-08-15T07:15:48Z")

</div>

I have a log with a number of fields. i am trying to alert whenever i see a text and the script is something like this : { "trigger": { "schedule": { "interval": "5m" } }, "input": { "search": { "request": { "s…

---

## [Issue with transport client and sniffing nodes](https://discuss.elastic.co/t/issue-with-transport-client-and-sniffing-nodes/140363)

<div class="topic-metadata">

**Author:** [@vvelichkovich](https://discuss.elastic.co/u/vvelichkovich)\
**Replies:** 3\
**Last updated:** [July 18, 2018, 3:11pm UTC](https://discuss.elastic.co/t/issue-with-transport-client-and-sniffing-nodes/140363 "2018-07-18T15:11:29Z")

</div>

Elasticsearch versio 6.2.4 I have few issues, most likely related. If I enable sniffing Transport client, it doesn't see any nodes and trying to use it, in specific example, getting all indices from cluster, results i…

[Previous page](https://discuss.elastic.co/top.md?page=1343&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1345&per_page=50&period=all)
