# Top **URL:** https://discuss.elastic.co/top.md?page=1357&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1358 --- ## [Master election takes minutes](https://discuss.elastic.co/t/master-election-takes-minutes/272303)
**Author:** [@jacknl](https://discuss.elastic.co/u/jacknl)\ **Replies:** 3\ **Last updated:** [May 7, 2021, 1:10pm UTC](https://discuss.elastic.co/t/master-election-takes-minutes/272303 "2021-05-07T13:10:15Z")
Recently I upgraded my 3 master-eligible nodes from Ubuntu 16.04 to 18.04. The master changed twice during this procedure. I noticed that these two master elections took about 1 minute and 4 minutes, respectively. This i… --- ## [Doc2vec для более релевантного поиска в elastic search](https://discuss.elastic.co/t/doc2vec-elastic-search/194668)
**Author:** [@alexpython](https://discuss.elastic.co/u/alexpython)\ **Replies:** 3\ **Last updated:** [September 2, 2019, 2:18pm UTC](https://discuss.elastic.co/t/doc2vec-elastic-search/194668 "2019-09-02T14:18:46Z")
Доброго времени суток! Уже год настраиваем поиск в ES. Проблема с релевантностью выдачи. У нас есть база с нормативными документами. Одно и тоже слово может означать диаметрально противоположные значения. Например, отпу… --- ## [How to create line chart for metricbeat filesystem](https://discuss.elastic.co/t/how-to-create-line-chart-for-metricbeat-filesystem/153973)
**Author:** [@Susmitha\_Devathi](https://discuss.elastic.co/u/Susmitha_Devathi)\ **Replies:** 3\ **Last updated:** [October 29, 2018, 5:04pm UTC](https://discuss.elastic.co/t/how-to-create-line-chart-for-metricbeat-filesystem/153973 "2018-10-29T17:04:24Z")
Hi Team, I am creating line graph for metricbeat diskusage using system.filesystem.used.pct and system.filesystem.mount\_point for different servers. I want to filter system.filesystem.mount\_point for each individual se… --- ## [Filebeat sends incomplete message both in logstash and elasticsearch](https://discuss.elastic.co/t/filebeat-sends-incomplete-message-both-in-logstash-and-elasticsearch/114007)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 3\ **Last updated:** [January 5, 2018, 11:57am UTC](https://discuss.elastic.co/t/filebeat-sends-incomplete-message-both-in-logstash-and-elasticsearch/114007 "2018-01-05T11:57:32Z")
We've noticed that our message seems incomplete in filebeat/logstash. Btw, the message field is our xml payload, and we need to store this for searching. When we stdout in filebeat, the message is somewhat cut, i wonder … --- ## [Kibana 6 ML](https://discuss.elastic.co/t/kibana-6-ml/112458)
**Author:** [@Kornelia\_Watson](https://discuss.elastic.co/u/Kornelia_Watson)\ **Replies:** 3\ **Last updated:** [December 20, 2017, 7:28pm UTC](https://discuss.elastic.co/t/kibana-6-ml/112458 "2017-12-20T19:28:20Z")
Hi, We have just upgraded to Kibana 6 and I wanted to try out ML plugin. It would be ideal for me if I could export anomalies found to a csv file. Is this possible? Also, is it possible to trigger ML job and return it… --- ## [How can we make output to elasticsearch host array to load from a file](https://discuss.elastic.co/t/how-can-we-make-output-to-elasticsearch-host-array-to-load-from-a-file/72861)
**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\ **Replies:** 3\ **Last updated:** [January 26, 2017, 10:51am UTC](https://discuss.elastic.co/t/how-can-we-make-output-to-elasticsearch-host-array-to-load-from-a-file/72861 "2017-01-26T10:51:20Z")
Hi, when logstash output to elasticsearch , in our case the hosts can be changed quite frequently. is there any way we can configure the hosts to load from certain files instead of change the server inside logstash conf … --- ## [Do you need to have the shield plugin to be able to use HTTPS?](https://discuss.elastic.co/t/do-you-need-to-have-the-shield-plugin-to-be-able-to-use-https/54166)
**Author:** [@chagara](https://discuss.elastic.co/u/chagara)\ **Replies:** 3\ **Last updated:** [June 30, 2016, 6:09pm UTC](https://discuss.elastic.co/t/do-you-need-to-have-the-shield-plugin-to-be-able-to-use-https/54166 "2016-06-30T18:09:26Z")
I was trying to follow this documentation https://www.elastic.co/guide/en/shield/current/ssl-tls.html but, it mentions shield and I was wondering if its needed to be able to have HTTPS on elasticsearch? --- ## [K4.3 No display Field Formatters](https://discuss.elastic.co/t/k4-3-no-display-field-formatters/38069)
**Author:** [@Jorge](https://discuss.elastic.co/u/Jorge)\ **Replies:** 3\ **Last updated:** [December 28, 2015, 11:16pm UTC](https://discuss.elastic.co/t/k4-3-no-display-field-formatters/38069 "2015-12-28T23:16:57Z")
Follow the instructions as indicated by the link Writing Custom Field Formatters , but in index options is not displayed . I also did the test to modify String, js nor the modifications made ​​are showed . Kibana service… --- ## [Elasticsearch crashing after a while](https://discuss.elastic.co/t/elasticsearch-crashing-after-a-while/22804)
**Author:** [@Le\_Livre](https://discuss.elastic.co/u/Le_Livre)\ **Replies:** 3\ **Last updated:** [March 23, 2015, 1:35am UTC](https://discuss.elastic.co/t/elasticsearch-crashing-after-a-while/22804 "2015-03-23T01:35:29Z")
Hi guys, I have recently installed Elasticsearch but it always crashes after a while. I have tried it with different JVMs but it still does the same thing. I suspect it is lack of RAM, but I can't see it in the l… --- ## [Match query against Stored & Unindexed Field (Not storing source)](https://discuss.elastic.co/t/match-query-against-stored-unindexed-field-not-storing-source/17393)
**Author:** [@Aaron\_Troy](https://discuss.elastic.co/u/Aaron_Troy)\ **Replies:** 3\ **Last updated:** [May 7, 2014, 4:51pm UTC](https://discuss.elastic.co/t/match-query-against-stored-unindexed-field-not-storing-source/17393 "2014-05-07T16:51:58Z")
Hi all, I'm trying to build a side-set of data for some people by querying the 'sourceName' field of an index. This field (as you can see from the mapping) is stored and not indexed. I'm also NOT storing the sourc… --- ## [Exception in thread "LogStash::Runner" org.jruby.exceptions.RaiseException: (TimeoutError) watchdog timeout](https://discuss.elastic.co/t/exception-in-thread-logstash-runner-org-jruby-exceptions-raiseexception-timeouterror-watchdog-timeout/13386)
**Author:** [@haim\_ari](https://discuss.elastic.co/u/haim_ari)\ **Replies:** 3\ **Last updated:** [August 29, 2013, 9:31pm UTC](https://discuss.elastic.co/t/exception-in-thread-logstash-runner-org-jruby-exceptions-raiseexception-timeouterror-watchdog-timeout/13386 "2013-08-29T21:31:08Z")
PowerEdge R420 Physical Memory: 24GB 2 X Intel(R) Xeon(R) CPU E5-2420 0 @ 1.90GHz (Total 24 cores with Multi-threading) Centos \_6.4\_x86\_64 \*Logstash error:\* Exception in thread "LogStash::Runner" org.jruby.exc… --- ## [Shard Allocation Awareness in ec2](https://discuss.elastic.co/t/shard-allocation-awareness-in-ec2/6156)
**Author:** [@Piavlo](https://discuss.elastic.co/u/Piavlo)\ **Replies:** 3\ **Last updated:** [December 14, 2011, 10:10pm UTC](https://discuss.elastic.co/t/shard-allocation-awareness-in-ec2/6156 "2011-12-14T22:10:06Z")
Hi, I'm setting up elastic search cluster in ec2 This is the discovery configuration \`\`\` discovery: type: ec2 ec2: groups: elasticsearch hos… --- ## [Aggregate filter plugin - timeout function bug](https://discuss.elastic.co/t/aggregate-filter-plugin-timeout-function-bug/286383)
**Author:** [@MarcelOs](https://discuss.elastic.co/u/MarcelOs)\ **Replies:** 6\ **Last updated:** [October 29, 2021, 7:22am UTC](https://discuss.elastic.co/t/aggregate-filter-plugin-timeout-function-bug/286383 "2021-10-29T07:22:44Z")
Hello everyone, I have some problems with the Timeout command from the aggregate filter plugin. I want to create a script that calculates the meantime between two log entries. There are examples of such a function (http… --- ## [Having issues importing logs to elasticsearch, Grok Issue?](https://discuss.elastic.co/t/having-issues-importing-logs-to-elasticsearch-grok-issue/185459)
**Author:** [@k.m.graybill](https://discuss.elastic.co/u/k.m.graybill)\ **Replies:** 6\ **Last updated:** [June 13, 2019, 7:41pm UTC](https://discuss.elastic.co/t/having-issues-importing-logs-to-elasticsearch-grok-issue/185459 "2019-06-13T19:41:50Z")
I'm trying to import log files from kiwi to elasticsearch using logstash. These log files are ANSI encoded with each log entry separated by a newline. 2019-05-24 11:23:25 Daemon.Notice WIN-DLI9AO07ERU May 24 11:23:24 WI… --- ## [Monitoring User for Logstash](https://discuss.elastic.co/t/monitoring-user-for-logstash/142290)
**Author:** [@toni](https://discuss.elastic.co/u/toni)\ **Replies:** 6\ **Last updated:** [August 13, 2018, 8:36am UTC](https://discuss.elastic.co/t/monitoring-user-for-logstash/142290 "2018-08-13T08:36:33Z")
Hi guys, I took over an elastic cluster with 3 nodes. All of the nodes have x-pack installed. What I'm trying to do is enable pipelines and monitoring for logstash through kibana. The pipeline configuration in logstash… --- ## [X-pack security module for a cluster on internet](https://discuss.elastic.co/t/x-pack-security-module-for-a-cluster-on-internet/123519)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 6\ **Last updated:** [March 12, 2018, 3:44pm UTC](https://discuss.elastic.co/t/x-pack-security-module-for-a-cluster-on-internet/123519 "2018-03-12T15:44:42Z")
Continuing the discussion from Deploy elasticsearch cluster over internet: Hey, I'd like to know if security takes care of the security of the cluster if the nodes are communicating on internet: I have 3 nodes, each o… --- ## [High-level rest client ElasticsearchStatusException instead of VersionConflictEngineException](https://discuss.elastic.co/t/high-level-rest-client-elasticsearchstatusexception-instead-of-versionconflictengineexception/115871)
**Author:** [@vaughnd](https://discuss.elastic.co/u/vaughnd)\ **Replies:** 1\ **Last updated:** [January 18, 2018, 5:02pm UTC](https://discuss.elastic.co/t/high-level-rest-client-elasticsearchstatusexception-instead-of-versionconflictengineexception/115871 "2018-01-18T17:02:14Z")
Hi, I used to catch DocumentAlreadyExistsException from the java TransportClient, but I'm busy migrating to ES 6 and the docs say it's now VersionConflictEngineException. My problem is that I only get ElasticsearchStatu… --- ## [Snapshot -Internal server Error](https://discuss.elastic.co/t/snapshot-internal-server-error/112821)
**Author:** [@sivakaran](https://discuss.elastic.co/u/sivakaran)\ **Replies:** 1\ **Last updated:** [December 29, 2017, 4:03pm UTC](https://discuss.elastic.co/t/snapshot-internal-server-error/112821 "2017-12-29T16:03:08Z")
Hi team, while snapshot Completed state, we found some internal server error occurs. In particular node, If the primary shards are available means It leads to internal server error. I checked with configuration it se… --- ## [ERR Kafka (topic=stack): dropping too large message of size 1262765](https://discuss.elastic.co/t/err-kafka-topic-stack-dropping-too-large-message-of-size-1262765/85122)
**Author:** [@mw-0](https://discuss.elastic.co/u/mw-0)\ **Replies:** 1\ **Last updated:** [May 9, 2017, 10:44pm UTC](https://discuss.elastic.co/t/err-kafka-topic-stack-dropping-too-large-message-of-size-1262765/85122 "2017-05-09T22:44:04Z")
Hi, I have been testing out filebeat 5.3 and now 5.4 but keep getting these errors and cannot find which config entry will solve it. I have configured 2 log files which produce about 16 lines per second combined and i … --- ## [Elasticsearch 5.0.0 aggregation error help plz](https://discuss.elastic.co/t/elasticsearch-5-0-0-aggregation-error-help-plz/65186)
**Author:** [@soo](https://discuss.elastic.co/u/soo)\ **Replies:** 1\ **Last updated:** [November 7, 2016, 1:53pm UTC](https://discuss.elastic.co/t/elasticsearch-5-0-0-aggregation-error-help-plz/65186 "2016-11-07T13:53:27Z")
enviroments spring 4.3.3 elasticsearch 2.4.1 -\> (today upgrade) elasticsearch 5.0.0 java 8 tomcat 8 error msg org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'dashboardControl… --- ## [\[Solved\] Truncate long lines](https://discuss.elastic.co/t/solved-truncate-long-lines/43126)
**Author:** [@mikula](https://discuss.elastic.co/u/mikula)\ **Replies:** 1\ **Last updated:** [March 1, 2016, 3:53pm UTC](https://discuss.elastic.co/t/solved-truncate-long-lines/43126 "2016-03-01T15:53:26Z")
Hello, I would like to be able to truncate long lines. I found: ruby { code =\> 'event\["message"\] = event.sprintf("\_MESSAGE\_SIZE\_EXCEEDED\_-\_DROPPING\_MESSAGE\_") if event\["message"\].bytesize \> 10240' } I trie… --- ## [Elastiseach not avalable in port 9200](https://discuss.elastic.co/t/elastiseach-not-avalable-in-port-9200/29873)
**Author:** [@Arunv](https://discuss.elastic.co/u/Arunv)\ **Replies:** 1\ **Last updated:** [September 23, 2015, 9:48pm UTC](https://discuss.elastic.co/t/elastiseach-not-avalable-in-port-9200/29873 "2015-09-23T21:48:38Z")
Installed elasticsearch-1.4.4 in linux and I see the process running. But I when I try to access http://localhost:9200, I am getting "Page note available". Does this mean elastisearch is listening on some other port? I d… --- ## [Logstash, query not executing inside of the elasticsearch input plugin](https://discuss.elastic.co/t/logstash-query-not-executing-inside-of-the-elasticsearch-input-plugin/323655)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 4\ **Last updated:** [January 24, 2023, 1:41pm UTC](https://discuss.elastic.co/t/logstash-query-not-executing-inside-of-the-elasticsearch-input-plugin/323655 "2023-01-24T13:41:08Z")
Hi, I have a logstash pipeline where I'm reading data in from Kafka and then inside of the filter plugin I have a conditional to call the elasticsearch input plugin if a certain condition is met. The condition: If ser… --- ## [How much heap memory need for elasticsearch data nodes](https://discuss.elastic.co/t/how-much-heap-memory-need-for-elasticsearch-data-nodes/262773)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [February 1, 2021, 1:07pm UTC](https://discuss.elastic.co/t/how-much-heap-memory-need-for-elasticsearch-data-nodes/262773 "2021-02-01T13:07:40Z")
I am runnig 8 node cluster (3 Master+3 data+2 coordinate) data\_node 1 contains 714 shards and heap memory is 10gb data\_node 2 contains 715 shards and heap memory is 10gb data\_node 3 contains 715 shards and heap memory … --- ## [Not able to use ts-react-google-login-component node package in plugin for authentication in 7.8 OSS version](https://discuss.elastic.co/t/not-able-to-use-ts-react-google-login-component-node-package-in-plugin-for-authentication-in-7-8-oss-version/247131)
**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 3:56pm UTC](https://discuss.elastic.co/t/not-able-to-use-ts-react-google-login-component-node-package-in-plugin-for-authentication-in-7-8-oss-version/247131 "2020-09-02T15:56:12Z")
Right now, I am using elastic/kibana 7.8 OSS version code I am trying to implement authentication using Google auth by developing a plugin. For that I have installed the 'react-google-login' package using yarn and impo… --- ## [Transform behavior with deleted documents](https://discuss.elastic.co/t/transform-behavior-with-deleted-documents/240172)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 4\ **Last updated:** [July 8, 2020, 9:15am UTC](https://discuss.elastic.co/t/transform-behavior-with-deleted-documents/240172 "2020-07-08T09:15:10Z")
Consider a source index that contains user authentications. I want to create a transform that contains, for each user, the oldest and newest login. It would look like this: Group by user Aggregate max(@timestamp) and m… --- ## [Create Multiple Secret Tokens](https://discuss.elastic.co/t/create-multiple-secret-tokens/211458)
**Author:** [@Matthew\_Petrie](https://discuss.elastic.co/u/Matthew_Petrie)\ **Replies:** 4\ **Last updated:** [December 12, 2019, 9:40am UTC](https://discuss.elastic.co/t/create-multiple-secret-tokens/211458 "2019-12-12T09:40:22Z")
Is it possible to create multiple secret tokens for authentication? Ideally we would like a different secret token per service we are using the APM Node.js Agent in Thanks, Matthew --- ## [Logstash Error parsing csv java.lang.ArrayIndexOutOfBoundsException](https://discuss.elastic.co/t/logstash-error-parsing-csv-java-lang-arrayindexoutofboundsexception/144900)
**Author:** [@kennymarx0](https://discuss.elastic.co/u/kennymarx0)\ **Replies:** 4\ **Last updated:** [August 17, 2018, 2:16pm UTC](https://discuss.elastic.co/t/logstash-error-parsing-csv-java-lang-arrayindexoutofboundsexception/144900 "2018-08-17T14:16:38Z")
when i use logstash to import data from csv file to elasticsearch, it has error like below and there are no data imported to es. how to fix it? \[2018-08-15T23:23:07,540\]\[WARN \]\[logstash.filters.csv \] Error parsing… --- ## [How to monitor and constantly forward newly added documents from an elasticsearch index to a Kafka topic with logstash?](https://discuss.elastic.co/t/how-to-monitor-and-constantly-forward-newly-added-documents-from-an-elasticsearch-index-to-a-kafka-topic-with-logstash/113631)
**Author:** [@anon24174512](https://discuss.elastic.co/u/anon24174512)\ **Replies:** 4\ **Last updated:** [January 3, 2018, 9:19am UTC](https://discuss.elastic.co/t/how-to-monitor-and-constantly-forward-newly-added-documents-from-an-elasticsearch-index-to-a-kafka-topic-with-logstash/113631 "2018-01-03T09:19:33Z")
Dear all, Question in the title :wink: To be more precise, I have a message written to a Kafka topic, then to an Elasticsearch index using Logstash then written back from the index to another Kafka topic using again Log… --- ## [Random hit counts in every time](https://discuss.elastic.co/t/random-hit-counts-in-every-time/91596)
**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\ **Replies:** 4\ **Last updated:** [July 3, 2017, 8:30am UTC](https://discuss.elastic.co/t/random-hit-counts-in-every-time/91596 "2017-07-03T08:30:33Z")
Hi All, We are using elasticsearch 1.3.7 version with 5 data only nodes and 3 master only nodes, now we are working hard on elasticsearch upgrade Now Facing some miscount issue ,one time same query gets 177 hits and … --- ## [Error while loading logstash](https://discuss.elastic.co/t/error-while-loading-logstash/90035)
**Author:** [@ent\_1](https://discuss.elastic.co/u/ent_1)\ **Replies:** 4\ **Last updated:** [June 20, 2017, 7:46am UTC](https://discuss.elastic.co/t/error-while-loading-logstash/90035 "2017-06-20T07:46:06Z")
Hi , i am unable to upload the data to elastic search using logstash ? config file : input { jdbc { jdbc\_driver\_library =\> "/home/ec2-user/ojdbc14.jar" jdbc\_driver\_class =\> "Java::oracle.jdbc.driver.Orac… --- ## [Running multiple instance per physical host/machine](https://discuss.elastic.co/t/running-multiple-instance-per-physical-host-machine/44057)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 4\ **Last updated:** [March 10, 2016, 6:41pm UTC](https://discuss.elastic.co/t/running-multiple-instance-per-physical-host-machine/44057 "2016-03-10T18:41:32Z")
Using ES 2.2.0 Hi, I have a decently beefy machine, 16 core (hyper threaded to 32) 128GB RAM. I decided to deploy 3 instances of of 20G RAM each... Rather then 1 instance of 30G. So this gives me an additional 30G of… --- ## [ES Plugin to extend Lucene's Standard Tokenizer](https://discuss.elastic.co/t/es-plugin-to-extend-lucenes-standard-tokenizer/19670)
**Author:** [@Bryan\_Warner](https://discuss.elastic.co/u/Bryan_Warner)\ **Replies:** 4\ **Last updated:** [September 9, 2014, 2:37pm UTC](https://discuss.elastic.co/t/es-plugin-to-extend-lucenes-standard-tokenizer/19670 "2014-09-09T14:37:21Z")
Hi all, Recently, I've been working on an extension to Lucene's Standard Tokenizer that allows the user to customize / override the default word boundary break rules for Unicode characters. The Standard Tokenizer … --- ## [Recommended exceptions for Elastic Endpoint](https://discuss.elastic.co/t/recommended-exceptions-for-elastic-endpoint/349545)
**Author:** [@slash24](https://discuss.elastic.co/u/slash24)\ **Replies:** 2\ **Last updated:** [December 21, 2023, 2:53pm UTC](https://discuss.elastic.co/t/recommended-exceptions-for-elastic-endpoint/349545 "2023-12-21T14:53:26Z")
We've got elastic (8.8) defend on few hundreds windows-servers, but also rely on Windows Defender. Due to this, we want to make sure we exclude them from one another. From Windows Defender, what processes, folders or fi… --- ## [Visualization in timeline format](https://discuss.elastic.co/t/visualization-in-timeline-format/334448)
**Author:** [@Leandro\_Salamaia](https://discuss.elastic.co/u/Leandro_Salamaia)\ **Replies:** 2\ **Last updated:** [June 3, 2023, 1:35am UTC](https://discuss.elastic.co/t/visualization-in-timeline-format/334448 "2023-06-03T01:35:26Z")
I need to create a view in kibana that shows the time difference between a Status true message and a Status false message but I haven't found a way yet if anyone can give me some tips log example Device:S0101 Status:1… --- ## [APM license](https://discuss.elastic.co/t/apm-license/247195)
**Author:** [@ohaddahan](https://discuss.elastic.co/u/ohaddahan)\ **Replies:** 2\ **Last updated:** [September 2, 2020, 12:47pm UTC](https://discuss.elastic.co/t/apm-license/247195 "2020-09-02T12:47:44Z")
I'm trying to understand the scope of the "Basic - Free forever plan" https://www.elastic.co/subscriptions . I downloaded APM (and Kibana and Elasticsearch) and deployed them on premise. All worked fine, after a coupl… --- ## [Filebeat dissect tokenizer problem](https://discuss.elastic.co/t/filebeat-dissect-tokenizer-problem/238701)
**Author:** [@elastic\_dave](https://discuss.elastic.co/u/elastic_dave)\ **Replies:** 2\ **Last updated:** [June 26, 2020, 9:57am UTC](https://discuss.elastic.co/t/filebeat-dissect-tokenizer-problem/238701 "2020-06-26T09:57:06Z")
Hi everyone, having problem with setting up .yml config file and specificaly processors:dissect. i have root filebeat.yml file pointing to several config files. This seems to work, in filebeat log i can see that confi… --- ## [Curator rollover fails with alias on multiple indices but only one is\_write\_index](https://discuss.elastic.co/t/curator-rollover-fails-with-alias-on-multiple-indices-but-only-one-is-write-index/163093)
**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\ **Replies:** 2\ **Last updated:** [January 6, 2019, 8:12pm UTC](https://discuss.elastic.co/t/curator-rollover-fails-with-alias-on-multiple-indices-but-only-one-is-write-index/163093 "2019-01-06T20:12:11Z")
I have a series rolled over indices { "test-000003" : { "aliases" : { "test-xxx" : { "is\_write\_index" : true }, "test-yyy" : { } } }, "test-000002" : { "aliases" : { "te… --- ## [Multi fileds sort order](https://discuss.elastic.co/t/multi-fileds-sort-order/142732)
**Author:** [@leexum](https://discuss.elastic.co/u/leexum)\ **Replies:** 2\ **Last updated:** [August 7, 2018, 8:56am UTC](https://discuss.elastic.co/t/multi-fileds-sort-order/142732 "2018-08-07T08:56:15Z")
Because the timestamp is not precise enough, I want to set "offset" as secondary sort order field to sort the items which have same timestamp. I know Elasticsearch support this function by add this in query command: "s… --- ## [Logstash use the "--config.reload.automatic" fail](https://discuss.elastic.co/t/logstash-use-the-config-reload-automatic-fail/138316)
**Author:** [@sun\_changlong](https://discuss.elastic.co/u/sun_changlong)\ **Replies:** 2\ **Last updated:** [July 3, 2018, 7:22am UTC](https://discuss.elastic.co/t/logstash-use-the-config-reload-automatic-fail/138316 "2018-07-03T07:22:45Z")
I use the bin/logstash -f sys.conf --config.reload.automatic run the logstash,The first time is normal operation，However, after I change the configuration file, logstash will report an error when reloading. \[ERROR\]\[logs… --- ## [Analyzing High Elastic Search Response time](https://discuss.elastic.co/t/analyzing-high-elastic-search-response-time/97926)
**Author:** [@sss](https://discuss.elastic.co/u/sss)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 6:31pm UTC](https://discuss.elastic.co/t/analyzing-high-elastic-search-response-time/97926 "2017-08-22T18:31:54Z")
We have a setup of 2 index nodes. We have 3 indexes in the cluster with 1 shard each per index. The size of the index is around 11GB and we have around 86k documents in the index. Issue is that our search requests are… --- ## [Make cluster more resilient to network failures - how?](https://discuss.elastic.co/t/make-cluster-more-resilient-to-network-failures-how/96714)
**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\ **Replies:** 2\ **Last updated:** [August 18, 2017, 7:16am UTC](https://discuss.elastic.co/t/make-cluster-more-resilient-to-network-failures-how/96714 "2017-08-18T07:16:26Z")
Hello all, I need some advice regarding node to node communication. It happens quite often (several times per day) that individual nodes lose contact with the master, and the cluster goes to yellow and then recovers. Oc… --- ## [Upgrading Marvel](https://discuss.elastic.co/t/upgrading-marvel/49292)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 2\ **Last updated:** [June 23, 2016, 3:06am UTC](https://discuss.elastic.co/t/upgrading-marvel/49292 "2016-06-23T03:06:34Z")
Hi, At our site we're running elasticsearch and marvel 2.1.2. Do they have to be upgraded in lock-step with one another? Or could we upgrade marvel directly to 2.3.2 independent of ES? Regards, David --- ## [What jar is needed when I use elasticsearch.jar to develop java program?](https://discuss.elastic.co/t/what-jar-is-needed-when-i-use-elasticsearch-jar-to-develop-java-program/52007)
**Author:** [@kikuchan](https://discuss.elastic.co/u/kikuchan)\ **Replies:** 2\ **Last updated:** [June 8, 2016, 2:46am UTC](https://discuss.elastic.co/t/what-jar-is-needed-when-i-use-elasticsearch-jar-to-develop-java-program/52007 "2016-06-08T02:46:03Z")
Hello, I would like to use elasticsearch-2.2.1.jar to develop a java program. I want to know what jar is depended on When I develop Java program using elasticsearch-2.2.1.jar. could you tell me know what is needed? --- ## [Is there a way to return true/false if documents exists for the given query?](https://discuss.elastic.co/t/is-there-a-way-to-return-true-false-if-documents-exists-for-the-given-query/316965)
**Author:** [@Hamza\_Khalid](https://discuss.elastic.co/u/Hamza_Khalid)\ **Replies:** 5\ **Last updated:** [October 19, 2022, 12:37pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-return-true-false-if-documents-exists-for-the-given-query/316965 "2022-10-19T12:37:47Z")
I have a query: GET users/\_search { "from": 0, "size": 20, "query": { "match\_all": {} } What i want to achieve is if the above query returns even a single document i get the response as true and if no document is r… --- ## [Logstash unable to reach Elasticsearch: port issues](https://discuss.elastic.co/t/logstash-unable-to-reach-elasticsearch-port-issues/241187)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 5\ **Last updated:** [July 14, 2020, 8:38pm UTC](https://discuss.elastic.co/t/logstash-unable-to-reach-elasticsearch-port-issues/241187 "2020-07-14T20:38:04Z")
Hello Team I deployed Elasticsearch on Kubernetes and it's working fine. Also, I created an ingress so it's redirecting from 80 =\> 9200. But logstash is looking for 9200 so connection is failing. However, if I try h… --- ## [How to write a efficient ES query for the below SQL query?](https://discuss.elastic.co/t/how-to-write-a-efficient-es-query-for-the-below-sql-query/215599)
**Author:** [@DeeeFOX](https://discuss.elastic.co/u/DeeeFOX)\ **Replies:** 5\ **Last updated:** [January 20, 2020, 4:53am UTC](https://discuss.elastic.co/t/how-to-write-a-efficient-es-query-for-the-below-sql-query/215599 "2020-01-20T04:53:09Z")
select tag1, tag2, sum(sum\_val) select tag-uid, sum(value) as sum\_val from data\_table group by tag-uid join tag\_table using(tag-uid) group by tag1, tag2 --- ## [Sequential data processing](https://discuss.elastic.co/t/sequential-data-processing/131520)
**Author:** [@nabha](https://discuss.elastic.co/u/nabha)\ **Replies:** 5\ **Last updated:** [May 14, 2018, 10:18am UTC](https://discuss.elastic.co/t/sequential-data-processing/131520 "2018-05-14T10:18:04Z")
Does Elasticsearch process data sequentially? I want to use elasticsearch with filebeat as no need to filter any kind of data. But will it process sequentially or non-sequentially. I just want to process data sequenti… --- ## [Kibana query preference leads to unfair load balancing](https://discuss.elastic.co/t/kibana-query-preference-leads-to-unfair-load-balancing/71742)
**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\ **Replies:** 5\ **Last updated:** [January 16, 2017, 10:37pm UTC](https://discuss.elastic.co/t/kibana-query-preference-leads-to-unfair-load-balancing/71742 "2017-01-16T22:37:19Z")
We have a cluster made of 3 data nodes. Our indexes are configured with 3 shards and 1 replica. For whatever reason, shard allocation on nodes is currently as follows: node1 node2 node3 R0 R2 P0 P1 P1 R… --- ## [Filebeat harvester detect the file's changes, but prospector don't deal with it](https://discuss.elastic.co/t/filebeat-harvester-detect-the-files-changes-but-prospector-dont-deal-with-it/84340)
**Author:** [@Zijian\_Wang](https://discuss.elastic.co/u/Zijian_Wang)\ **Replies:** 1\ **Last updated:** [May 3, 2017, 3:20pm UTC](https://discuss.elastic.co/t/filebeat-harvester-detect-the-files-changes-but-prospector-dont-deal-with-it/84340 "2017-05-03T15:20:53Z")
I am using the filebeat 5.3.2 and I want to run filebeat as a non-root user. Before I change the filebeat's directory privileges, filebeat works good. the /etc/filebeat/filebeat.yml : filebeat.prospectors: - i… [Previous page](https://discuss.elastic.co/top.md?page=1356&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1358&per_page=50&period=all)