# Top

**URL:** https://discuss.elastic.co/top.md?page=1398&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1399

---

## [How to upgrade openSSL from 1.0.2k to 1.1.1?](https://discuss.elastic.co/t/how-to-upgrade-openssl-from-1-0-2k-to-1-1-1/208618)

<div class="topic-metadata">

**Author:** [@hapablanha](https://discuss.elastic.co/u/hapablanha)\
**Replies:** 2\
**Last updated:** [November 25, 2019, 3:55pm UTC](https://discuss.elastic.co/t/how-to-upgrade-openssl-from-1-0-2k-to-1-1-1/208618 "2019-11-25T15:55:30Z")

</div>

OpenSSL 1.1.1 has important features like SM2-SM4, anyone knows tips to upgrade openSSL in kibana(current version is 7.3.0)? “Note that as previously announced OpenSSL 1.0.2 will be End Of Life at the end of this year. …

---

## [Reporting button not showing in 6.5.1](https://discuss.elastic.co/t/reporting-button-not-showing-in-6-5-1/160369)

<div class="topic-metadata">

**Author:** [@avais](https://discuss.elastic.co/u/avais)\
**Replies:** 2\
**Last updated:** [December 11, 2018, 1:31pm UTC](https://discuss.elastic.co/t/reporting-button-not-showing-in-6-5-1/160369 "2018-12-11T13:31:23Z")

</div>

Hi Community, I am confused as should I be able to see 'Reporting' button on dashboard, etc in Kibana 6.5.1 I have read documentation where it says to expect the reporting button in 6.5+ where as this post suggest othe…

---

## [Limiting the amount of data being sent](https://discuss.elastic.co/t/limiting-the-amount-of-data-being-sent/128904)

<div class="topic-metadata">

**Author:** [@francisaugusto](https://discuss.elastic.co/u/francisaugusto)\
**Replies:** 2\
**Last updated:** [April 21, 2018, 6:43am UTC](https://discuss.elastic.co/t/limiting-the-amount-of-data-being-sent/128904 "2018-04-21T06:43:18Z")

</div>

Hi, I'm concerned about using Filebeat to gather information from multiple laptops running macOS, as some of them might be connected to cellular networks and it is therefore risky that huge logs might imply extra costs …

---

## [Use logstash as proxy for elasticsearch](https://discuss.elastic.co/t/use-logstash-as-proxy-for-elasticsearch/125980)

<div class="topic-metadata">

**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\
**Replies:** 2\
**Last updated:** [April 5, 2018, 2:05pm UTC](https://discuss.elastic.co/t/use-logstash-as-proxy-for-elasticsearch/125980 "2018-04-05T14:05:39Z")

</div>

Hi, I deployed some proxy servers that run logstash and nginx. I do not want developers or users hitting the elasticsearch cluster directly. Logstash provides an input to handle JSON text that logstash turns around a…

---

## [Elasticsearch有配置可以保护正在重启的节点吗？](https://discuss.elastic.co/t/elasticsearch/88680)

<div class="topic-metadata">

**Author:** [@BrickXu](https://discuss.elastic.co/u/BrickXu)\
**Replies:** 2\
**Last updated:** [July 5, 2017, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch/88680 "2017-07-05T07:57:46Z")

</div>

Hi 各位， 我的Elasticsearch版本是2.4.2，最近有一个问题想请教下： 如果节点突然宕机了，用程序/手工启动后，recovery过程中，如何保证外部的请求不会路由到这个节点呢？ 感谢！

---

## [Elasticsearch whitepaper](https://discuss.elastic.co/t/elasticsearch-whitepaper/70412)

<div class="topic-metadata">

**Author:** [@vinodMS](https://discuss.elastic.co/u/vinodMS)\
**Replies:** 2\
**Last updated:** [January 3, 2017, 10:56am UTC](https://discuss.elastic.co/t/elasticsearch-whitepaper/70412 "2017-01-03T10:56:05Z")

</div>

Hello All, Somehow a simple search on the internet doesn't get me a Elasticsearch white paper. Does someone have this?

---

## [Automatic document id generation in elasticSearch](https://discuss.elastic.co/t/automatic-document-id-generation-in-elasticsearch/65164)

<div class="topic-metadata">

**Author:** [@bkantu](https://discuss.elastic.co/u/bkantu)\
**Replies:** 2\
**Last updated:** [November 7, 2016, 5:57am UTC](https://discuss.elastic.co/t/automatic-document-id-generation-in-elasticsearch/65164 "2016-11-07T05:57:13Z")

</div>

Hi, I was inserting the data as below. PUT /employees/employee/1 { "name":"Crescent School", "description":"State Board Affiliation", "street":"Tonk Road", "city":"Jaipur", "state":"RJ", "zip":"176114","location":\[…

---

## [Creating a mapping using hadoop configuration](https://discuss.elastic.co/t/creating-a-mapping-using-hadoop-configuration/26190)

<div class="topic-metadata">

**Author:** [@caskEmployee](https://discuss.elastic.co/u/caskEmployee)\
**Replies:** 2\
**Last updated:** [July 27, 2015, 7:58pm UTC](https://discuss.elastic.co/t/creating-a-mapping-using-hadoop-configuration/26190 "2015-07-27T19:58:56Z")

</div>

Hi, I want to put a mapping in an index using elasticsearch-hadoop. Is there a way to create the mapping using the configuration? I've only found information on creating a mapping with the java api by using a node and …

---

## [Sorting on timestamps from multiple fields](https://discuss.elastic.co/t/sorting-on-timestamps-from-multiple-fields/18069)

<div class="topic-metadata">

**Author:** [@Jurian\_Sluiman](https://discuss.elastic.co/u/Jurian_Sluiman)\
**Replies:** 2\
**Last updated:** [June 17, 2014, 8:52am UTC](https://discuss.elastic.co/t/sorting-on-timestamps-from-multiple-fields/18069 "2014-06-17T08:52:46Z")

</div>

In Elasticsearch I'd like to index items of multiple types. Examples are "blog posts" and "deals". All types in the index should be sorted according to their publish date, with a single exception: deals are valid in a…

---

## [Cannot update plugin logstash-filter-grok](https://discuss.elastic.co/t/cannot-update-plugin-logstash-filter-grok/236388)

<div class="topic-metadata">

**Author:** [@nhnicwaller](https://discuss.elastic.co/u/nhnicwaller)\
**Replies:** 1\
**Last updated:** [June 10, 2020, 1:50pm UTC](https://discuss.elastic.co/t/cannot-update-plugin-logstash-filter-grok/236388 "2020-06-10T13:50:55Z")

</div>

I have this command as part of my process to build a docker image for Logstash. It worked fine a month ago, and today it is failing. logstash-plugin update logstash-filter-grok Here's the exact error message: An error…

---

## [Lifecycle Management question about multiple index patterns in one template?](https://discuss.elastic.co/t/lifecycle-management-question-about-multiple-index-patterns-in-one-template/220226)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 4:25pm UTC](https://discuss.elastic.co/t/lifecycle-management-question-about-multiple-index-patterns-in-one-template/220226 "2020-02-20T16:25:01Z")

</div>

After upgrading our ElasticSearch in the recent months we now have Lifecycle Management to use - we have always used Curator to manage our rollover/delete indices, etc. Now we are looking to do away with Curator and use …

---

## [Cannot display Logstash pipeline in Monitoring UI](https://discuss.elastic.co/t/cannot-display-logstash-pipeline-in-monitoring-ui/256894)

<div class="topic-metadata">

**Author:** [@glenacota](https://discuss.elastic.co/u/glenacota)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 7:01pm UTC](https://discuss.elastic.co/t/cannot-display-logstash-pipeline-in-monitoring-ui/256894 "2020-12-04T19:01:07Z")

</div>

Hi, I've enabled monitoring of my Logstash instance by following the instructions here: Collect Logstash monitoring data with Metricbeatedit. I can see all the collected metrics in the Kibana Stack Monitoring UI, except …

---

## [Elastic Search is not starting please help](https://discuss.elastic.co/t/elastic-search-is-not-starting-please-help/187329)

<div class="topic-metadata">

**Author:** [@Dhruv\_Patodia](https://discuss.elastic.co/u/Dhruv_Patodia)\
**Replies:** 1\
**Last updated:** [June 27, 2019, 4:12am UTC](https://discuss.elastic.co/t/elastic-search-is-not-starting-please-help/187329 "2019-06-27T04:12:16Z")

</div>

Can someone help me with elasticsearch, its not starting. when I check the status this is the response sudo systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/syst…

---

## [Unable to import json file in kibana dashboard](https://discuss.elastic.co/t/unable-to-import-json-file-in-kibana-dashboard/166091)

<div class="topic-metadata">

**Author:** [@Bhavesh\_Padharia](https://discuss.elastic.co/u/Bhavesh_Padharia)\
**Replies:** 1\
**Last updated:** [January 29, 2019, 7:02am UTC](https://discuss.elastic.co/t/unable-to-import-json-file-in-kibana-dashboard/166091 "2019-01-29T07:02:24Z")

</div>

Hello, i am using kibana-6.5.4-linux-x86\_64 version (OS Ubantu 16.4 version)in this i try to import json file using kibana dashboard but it show No objects imported . Step: Kibana Dashboard \> Management \> Saved Object \> …

---

## [Visualizing the ratio of a boolean](https://discuss.elastic.co/t/visualizing-the-ratio-of-a-boolean/157288)

<div class="topic-metadata">

**Author:** [@Michael\_Be\_eri](https://discuss.elastic.co/u/Michael_Be_eri)\
**Replies:** 1\
**Last updated:** [November 19, 2018, 5:16pm UTC](https://discuss.elastic.co/t/visualizing-the-ratio-of-a-boolean/157288 "2018-11-19T17:16:54Z")

</div>

I'm using the sample flights data from the Kibana tutorials, Each log has a 'carrier' field (one of 4 string values), and a 'cancelled' field (boolean) I want to visualize the percentage of cancelled flights per carrier…

---

## [How to assign an unassigned shards](https://discuss.elastic.co/t/how-to-assign-an-unassigned-shards/107307)

<div class="topic-metadata">

**Author:** [@vishu.kolki](https://discuss.elastic.co/u/vishu.kolki)\
**Replies:** 1\
**Last updated:** [November 12, 2017, 4:57pm UTC](https://discuss.elastic.co/t/how-to-assign-an-unassigned-shards/107307 "2017-11-12T16:57:16Z")

</div>

Hi, When i check my elasticsearch health status, i find one unassigned\_shard. So how can i assign it manually, since it is a prod environment, i cannot afford down time. Thank you

---

## [Help with watch.poll\_file](https://discuss.elastic.co/t/help-with-watch-poll-file/88220)

<div class="topic-metadata">

**Author:** [@packland](https://discuss.elastic.co/u/packland)\
**Replies:** 1\
**Last updated:** [June 6, 2017, 9:59am UTC](https://discuss.elastic.co/t/help-with-watch-poll-file/88220 "2017-06-06T09:59:27Z")

</div>

I'm looking to make use of this feature by basically having a json file which contains all the details of the monitors I want to use and be able to change those on the fly but I'm not entirely sure how to set it up as th…

---

## [Why the percentile latency is several times more than service time](https://discuss.elastic.co/t/why-the-percentile-latency-is-several-times-more-than-service-time/69630)

<div class="topic-metadata">

**Author:** [@a943013827](https://discuss.elastic.co/u/a943013827)\
**Replies:** 1\
**Last updated:** [December 21, 2016, 8:07am UTC](https://discuss.elastic.co/t/why-the-percentile-latency-is-several-times-more-than-service-time/69630 "2016-12-21T08:07:51Z")

</div>

as follow: 34 | All | Min Throughput | phrase | 109.962 | ops/s | 35 | All | Median Throughput | phrase | 122.17 | ops/s | 36 | All | Max Th…

---

## [ES 2.4 indices.store.throttle settings with SSD servers](https://discuss.elastic.co/t/es-2-4-indices-store-throttle-settings-with-ssd-servers/60179)

<div class="topic-metadata">

**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Replies:** 1\
**Last updated:** [September 9, 2016, 6:19pm UTC](https://discuss.elastic.co/t/es-2-4-indices-store-throttle-settings-with-ssd-servers/60179 "2016-09-09T18:19:22Z")

</div>

Hello, We're currently joining our new servers to existing cluster. They're pretty decent with SSD disks behind RAID0 array over controller. When we start ES we get: \[2016-09-09 11:31:15,004\]\[INFO \]\[env …

---

## [Using dissect dynamicly on filepath](https://discuss.elastic.co/t/using-dissect-dynamicly-on-filepath/249663)

<div class="topic-metadata">

**Author:** [@ThePreMan](https://discuss.elastic.co/u/ThePreMan)\
**Replies:** 4\
**Last updated:** [September 24, 2020, 1:45pm UTC](https://discuss.elastic.co/t/using-dissect-dynamicly-on-filepath/249663 "2020-09-24T13:45:55Z")

</div>

Hi. Im trying to setup a workflow where people can upload there log files onto a webserver and while doing so add tags to the log file for further differenciation. I was thinking of putting tags into the file name like f…

---

## [Using replace in Logstash](https://discuss.elastic.co/t/using-replace-in-logstash/216227)

<div class="topic-metadata">

**Author:** [@saravana\_hariharan](https://discuss.elastic.co/u/saravana_hariharan)\
**Replies:** 4\
**Last updated:** [January 24, 2020, 12:09pm UTC](https://discuss.elastic.co/t/using-replace-in-logstash/216227 "2020-01-24T12:09:08Z")

</div>

if \[score\] \>= "35" mutate replace =\> \[ "score","Success" \] my error is if score Greater than equal to 35 value considered as success so im displaying graph in success, but it only shows 35 to 99 values in label nam…

---

## [Does one failed output kill / stop the whole pipeline?](https://discuss.elastic.co/t/does-one-failed-output-kill-stop-the-whole-pipeline/182209)

<div class="topic-metadata">

**Author:** [@bjosve](https://discuss.elastic.co/u/bjosve)\
**Replies:** 4\
**Last updated:** [May 24, 2019, 1:35pm UTC](https://discuss.elastic.co/t/does-one-failed-output-kill-stop-the-whole-pipeline/182209 "2019-05-24T13:35:34Z")

</div>

Hi, I have a logstash output like this, output { tcp { mode =\> "client" host =\> "server01" port =\> 5400 codec =\> "line" } tcp { mode =\> "client" host =\> "server02" port =\> 5400 codec =\> "line" } file { p…

---

## [How to Use Interactive inputs with String variables](https://discuss.elastic.co/t/how-to-use-interactive-inputs-with-string-variables/173427)

<div class="topic-metadata">

**Author:** [@Ashutosh\_Kumar](https://discuss.elastic.co/u/Ashutosh_Kumar)\
**Replies:** 4\
**Last updated:** [March 27, 2019, 11:36am UTC](https://discuss.elastic.co/t/how-to-use-interactive-inputs-with-string-variables/173427 "2019-03-27T11:36:24Z")

</div>

Team, I was using Kibana interactive input control for my visualization part and wanted to use my job id or job name . As it's a string value it does not show in filters, only numeric values like timestamp i'm using now.…

---

## [Logstash all plugins](https://discuss.elastic.co/t/logstash-all-plugins/48419)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 4\
**Last updated:** [April 27, 2016, 8:54am UTC](https://discuss.elastic.co/t/logstash-all-plugins/48419 "2016-04-27T08:54:34Z")

</div>

Hi, I found Logstash 2.2.0 All Plugins. However there is no relase notes. https://www.elastic.co/downloads/past-releases/logstash-2-2-0-all-plugins Can anybody tell me the usage of this? Is it the logstash with all plu…

---

## [Prime shard closed but cluster was green, but bulk operations failed](https://discuss.elastic.co/t/prime-shard-closed-but-cluster-was-green-but-bulk-operations-failed/34837)

<div class="topic-metadata">

**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\
**Replies:** 4\
**Last updated:** [January 26, 2016, 8:40am UTC](https://discuss.elastic.co/t/prime-shard-closed-but-cluster-was-green-but-bulk-operations-failed/34837 "2016-01-26T08:40:30Z")

</div>

Hi, I was in the middle of massive delete of the documents (routing was always to the same shard) when I started to get this exception on the bulk operation : RemoteTransportException\[\[Jackdaw\]\[inet\[/10.0.XX.YY:9300\]\]\[in…

---

## [Should clause behaves like a must clause in filtered query](https://discuss.elastic.co/t/should-clause-behaves-like-a-must-clause-in-filtered-query/22632)

<div class="topic-metadata">

**Author:** [@Pir\_Abdul\_Rasool\_Qur](https://discuss.elastic.co/u/Pir_Abdul_Rasool_Qur)\
**Replies:** 4\
**Last updated:** [March 13, 2015, 2:15pm UTC](https://discuss.elastic.co/t/should-clause-behaves-like-a-must-clause-in-filtered-query/22632 "2015-03-13T14:15:05Z")

</div>

Hello all, We have a single document in an index: $ curl -XGET "http://localhost:9200/test-cbx/bug/\_search?q=\*" gives us the following response {"took":2,"timed\_out":false,"\_shards":{"total":5,"successful":5,…

---

## [Multiline: flush downstream error java.io.IOException since upgrading from 6.8 to 7.12](https://discuss.elastic.co/t/multiline-flush-downstream-error-java-io-ioexception-since-upgrading-from-6-8-to-7-12/274236)

<div class="topic-metadata">

**Author:** [@soulless](https://discuss.elastic.co/u/soulless)\
**Replies:** 3\
**Last updated:** [May 28, 2021, 5:51pm UTC](https://discuss.elastic.co/t/multiline-flush-downstream-error-java-io-ioexception-since-upgrading-from-6-8-to-7-12/274236 "2021-05-28T17:51:49Z")

</div>

We have a multiline config that we use for capturing exceptions. codec =\> multiline { pattern =\> "^%{TIMESTAMP\_ISO8601}" negate =\> true what =\> "previous" } It appears to still be working, but since upgradi…

---

## [Extract value from regex with parentheses in if condition](https://discuss.elastic.co/t/extract-value-from-regex-with-parentheses-in-if-condition/268190)

<div class="topic-metadata">

**Author:** [@Romanian\_Coder](https://discuss.elastic.co/u/Romanian_Coder)\
**Replies:** 8\
**Last updated:** [March 26, 2021, 4:14pm UTC](https://discuss.elastic.co/t/extract-value-from-regex-with-parentheses-in-if-condition/268190 "2021-03-26T16:14:24Z")

</div>

I have next input in logstash { logstash | "sourceRecordPosition" =\> 11, logstash | "rejectionReason" =\> "", logstash | "key" =\> 2251799813685255, logstash …

---

## [3-nodes License, Adding Unlicensed Nodes to the Cluster](https://discuss.elastic.co/t/3-nodes-license-adding-unlicensed-nodes-to-the-cluster/252122)

<div class="topic-metadata">

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Replies:** 3\
**Last updated:** [October 16, 2020, 12:34pm UTC](https://discuss.elastic.co/t/3-nodes-license-adding-unlicensed-nodes-to-the-cluster/252122 "2020-10-16T12:34:38Z")

</div>

Hello, I want to purchase a 3-nodes license. What will happen if I add unlicensed data nodes to the cluster? Will commercial features be enabled for some nodes or indices, but not for others?

---

## [Translation doesn't affect all of Kibana strings](https://discuss.elastic.co/t/translation-doesnt-affect-all-of-kibana-strings/216798)

<div class="topic-metadata">

**Author:** [@MaciejPietrek](https://discuss.elastic.co/u/MaciejPietrek)\
**Replies:** 3\
**Last updated:** [January 28, 2020, 1:38pm UTC](https://discuss.elastic.co/t/translation-doesnt-affect-all-of-kibana-strings/216798 "2020-01-28T13:38:49Z")

</div>

Hello everyone. I'm in process of translating Kibana to polish. So according to https://www.elastic.co/guide/en/kibana/current/development-plugin-localization.html and some others this is what I've done: 1.Taken t…

---

## [How to install Kibana Plugin on Elastic Cloud?](https://discuss.elastic.co/t/how-to-install-kibana-plugin-on-elastic-cloud/184812)

<div class="topic-metadata">

**Author:** [@bitcoin](https://discuss.elastic.co/u/bitcoin)\
**Replies:** 3\
**Last updated:** [June 8, 2019, 6:54am UTC](https://discuss.elastic.co/t/how-to-install-kibana-plugin-on-elastic-cloud/184812 "2019-06-08T06:54:50Z")

</div>

Hello Wonderful people! I am using hosted elasticsearch + kibana from hosted elastic.co cloud service. It's working great so far but I need to be able to 'live tail' my logs. I found a plugin that can do this but I am …

---

## [What is hs\_err\_pidxxx.mdmp files and why is it getting created?](https://discuss.elastic.co/t/what-is-hs-err-pidxxx-mdmp-files-and-why-is-it-getting-created/74004)

<div class="topic-metadata">

**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\
**Replies:** 0\
**Last updated:** [February 6, 2017, 3:55am UTC](https://discuss.elastic.co/t/what-is-hs-err-pidxxx-mdmp-files-and-why-is-it-getting-created/74004 "2017-02-06T03:55:49Z")

</div>

Hi, hs\_err\_pidxxx.mdmp files are getting created in c$ and its eating up complete c$ space and elastic search stopped working. First of all, what is this file about and why and when this will be created? Also, pl…

---

## [ElasticSearch with some QueryBuilder](https://discuss.elastic.co/t/elasticsearch-with-some-querybuilder/50322)

<div class="topic-metadata">

**Author:** [@LeshaRB](https://discuss.elastic.co/u/LeshaRB)\
**Replies:** 3\
**Last updated:** [June 3, 2016, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-with-some-querybuilder/50322 "2016-06-03T17:33:07Z")

</div>

How I can use some queryBuilder with SearchRequestBuilder SearchRequestBuilder searchRequestBuilder = new SearchRequestBuilder(client); searchRequestBuilder.setIndices("mongoindex"); searchRequestBuilder.setTypes("fi…

---

## [Script for adding new object](https://discuss.elastic.co/t/script-for-adding-new-object/7677)

<div class="topic-metadata">

**Author:** [@Jerome](https://discuss.elastic.co/u/Jerome)\
**Replies:** 3\
**Last updated:** [May 15, 2012, 8:49pm UTC](https://discuss.elastic.co/t/script-for-adding-new-object/7677 "2012-05-15T20:49:44Z")

</div>

Hi everyone, I've a little question about scripting i've try to make a script who adds a new object if it doesn't exist but doesn't works. { object { tag : value, tag2 : …

---

## [\_id field missing from the mapping?](https://discuss.elastic.co/t/-id-field-missing-from-the-mapping/7254)

<div class="topic-metadata">

**Author:** [@Andrius\_Juozapaitis](https://discuss.elastic.co/u/Andrius_Juozapaitis)\
**Replies:** 3\
**Last updated:** [April 7, 2012, 10:00pm UTC](https://discuss.elastic.co/t/-id-field-missing-from-the-mapping/7254 "2012-04-07T22:00:04Z")

</div>

Hey all, I stumbled upon an issue with elasticsearch indexing couchdb documents: \_id field is indexed, but not added to the mapping, and hence the \_all field, so if I do a query\_string search, I have to specifical…

---

## [How to ingest firewall log data to elastic security](https://discuss.elastic.co/t/how-to-ingest-firewall-log-data-to-elastic-security/324138)

<div class="topic-metadata">

**Author:** [@yak990](https://discuss.elastic.co/u/yak990)\
**Replies:** 2\
**Last updated:** [January 31, 2023, 4:36pm UTC](https://discuss.elastic.co/t/how-to-ingest-firewall-log-data-to-elastic-security/324138 "2023-01-31T16:36:38Z")

</div>

I've figured out how to parse my firewall logs with logstash, and they are in ECS format now. I can create a new index and edit some settings to get it to show in discover. How do I add the new index pattern to the log…

---

## [Improving analysis of gaps between spans](https://discuss.elastic.co/t/improving-analysis-of-gaps-between-spans/204482)

<div class="topic-metadata">

**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 4:30pm UTC](https://discuss.elastic.co/t/improving-analysis-of-gaps-between-spans/204482 "2019-10-21T16:30:07Z")

</div>

Hi All, Elastic APM Stack 7.1.0 (APM Server, Logstash, Kibana, Elasticsearch), Java Agent 1.7.0 Application: Spring-Boot with JDBC After going live for several weeks with Elastic APM and getting lots of good insights,…

---

## [Error while using spring-data-elasticsearch : 3.1.0.M3](https://discuss.elastic.co/t/error-while-using-spring-data-elasticsearch-3-1-0-m3/133152)

<div class="topic-metadata">

**Author:** [@RRSR](https://discuss.elastic.co/u/RRSR)\
**Replies:** 2\
**Last updated:** [May 25, 2018, 6:41am UTC](https://discuss.elastic.co/t/error-while-using-spring-data-elasticsearch-3-1-0-m3/133152 "2018-05-25T06:41:35Z")

</div>

Hi, I'm getting an error for the ElasticsearchRepository using the below pom.xml : \<?xml version="1.0" encoding="UTF-8"?\> \<project xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://maven.apache.org/…

---

## [Failed to add 2nd ECE VM to cluster](https://discuss.elastic.co/t/failed-to-add-2nd-ece-vm-to-cluster/89198)

<div class="topic-metadata">

**Author:** [@Matthew\_Bailey](https://discuss.elastic.co/u/Matthew_Bailey)\
**Replies:** 2\
**Last updated:** [June 13, 2017, 6:44pm UTC](https://discuss.elastic.co/t/failed-to-add-2nd-ece-vm-to-cluster/89198 "2017-06-13T18:44:12Z")

</div>

I ran int the following issue adding a 2nd server to my ECE Cluster (v 1.01) Error: Can't connect COORDINATOR\_HOST \[AH-ECE-POC01:2112\]: Connection refused bash: ./elastic-cloud-enterprise.sh --availability-zone "Aub…

---

## [ES Pagination - best way](https://discuss.elastic.co/t/es-pagination-best-way/88177)

<div class="topic-metadata">

**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\
**Replies:** 2\
**Last updated:** [June 4, 2017, 2:03pm UTC](https://discuss.elastic.co/t/es-pagination-best-way/88177 "2017-06-04T14:03:11Z")

</div>

I was looking into making pagination in my app. at first, i used the "From", "size" options and it all worked great, until i reached the 10,000, results, which was 2 large to process as each shard process 10,010 result…

---

## [What does \_all in a vertial bar chart mean and is it possible to trim the value showed in tooltip?](https://discuss.elastic.co/t/what-does--all-in-a-vertial-bar-chart-mean-and-is-it-possible-to-trim-the-value-showed-in-tooltip/70389)

<div class="topic-metadata">

**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\
**Replies:** 2\
**Last updated:** [January 4, 2017, 5:07am UTC](https://discuss.elastic.co/t/what-does--all-in-a-vertial-bar-chart-mean-and-is-it-possible-to-trim-the-value-showed-in-tooltip/70389 "2017-01-04T05:07:26Z")

</div>

This is how my graph in Kibana looks like: What does \_all mean in the graph above and is it possible to trim the part of a value which is being shown in the tool tip ? I've gone through this thread as well, in which …

---

## [Concurrent delete\_by\_query and indexing](https://discuss.elastic.co/t/concurrent-delete-by-query-and-indexing/68868)

<div class="topic-metadata">

**Author:** [@Serg\_Pilipenko](https://discuss.elastic.co/u/Serg_Pilipenko)\
**Replies:** 2\
**Last updated:** [December 13, 2016, 9:07pm UTC](https://discuss.elastic.co/t/concurrent-delete-by-query-and-indexing/68868 "2016-12-13T21:07:32Z")

</div>

Hi there, I am using delete\_by\_query plugin and it's work is not quite predictable. Here is step by step of what I do: There is a doc in index for a long while {id: 1 and synctimestamp: 1} Then I concurrently run t…

---

## [Exact phrase matching in any word order, but restricts words not in query](https://discuss.elastic.co/t/exact-phrase-matching-in-any-word-order-but-restricts-words-not-in-query/12825)

<div class="topic-metadata">

**Author:** [@waysidekoi](https://discuss.elastic.co/u/waysidekoi)\
**Replies:** 2\
**Last updated:** [July 19, 2013, 12:35am UTC](https://discuss.elastic.co/t/exact-phrase-matching-in-any-word-order-but-restricts-words-not-in-query/12825 "2013-07-19T00:35:23Z")

</div>

I would like to query for 'apple pie' and return the result 'apple pie' as well as 'pie apple', but I want to restrict any results such as 'apple pie crumb cake' or 'brown apple pie'. Is there some kind of: 'result …

---

## [Run Elasticsearch on port other than 9200](https://discuss.elastic.co/t/run-elasticsearch-on-port-other-than-9200/281830)

<div class="topic-metadata">

**Author:** [@mba](https://discuss.elastic.co/u/mba)\
**Replies:** 5\
**Last updated:** [August 19, 2021, 10:12pm UTC](https://discuss.elastic.co/t/run-elasticsearch-on-port-other-than-9200/281830 "2021-08-19T22:12:55Z")

</div>

I want to run elasticsearch on port other than 9200, so I changed http.port=9220 in elasticsearch.yml but still it is running on port number 9200

---

## [How to speed up Language Identification Inference](https://discuss.elastic.co/t/how-to-speed-up-language-identification-inference/271660)

<div class="topic-metadata">

**Author:** [@rueian](https://discuss.elastic.co/u/rueian)\
**Replies:** 5\
**Last updated:** [April 29, 2021, 6:35pm UTC](https://discuss.elastic.co/t/how-to-speed-up-language-identification-inference/271660 "2021-04-29T18:35:34Z")

</div>

Hi, I were trying the language identification feature (Language identification | Machine Learning in the Elastic Stack \[7.12\] | Elastic), and noticed that the model inference was very slow. Originally, my elasticsearch …

---

## [Snapshots - guarantee of correctness?](https://discuss.elastic.co/t/snapshots-guarantee-of-correctness/258025)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 5\
**Last updated:** [December 15, 2020, 7:35am UTC](https://discuss.elastic.co/t/snapshots-guarantee-of-correctness/258025 "2020-12-15T07:35:35Z")

</div>

Are the snapshots made by elasticsearch surely not to have any errors? Is there any additional option to quickly check the correctness of generated snapshots?

---

## [Documentation on adding new Packetbeat protocols](https://discuss.elastic.co/t/documentation-on-adding-new-packetbeat-protocols/141831)

<div class="topic-metadata">

**Author:** [@dhughes](https://discuss.elastic.co/u/dhughes)\
**Replies:** 5\
**Last updated:** [August 7, 2018, 3:37pm UTC](https://discuss.elastic.co/t/documentation-on-adding-new-packetbeat-protocols/141831 "2018-08-07T15:37:17Z")

</div>

I'm looking for any documentation on the current packetbeat structure, as well as how to add new protocols ... if this exists. I've installed the project, compiled and tested a little. But other than just starting goin…

---

## [Elasticsearch - count users query](https://discuss.elastic.co/t/elasticsearch-count-users-query/12564)

<div class="topic-metadata">

**Author:** [@oreno](https://discuss.elastic.co/u/oreno)\
**Replies:** 5\
**Last updated:** [July 1, 2013, 7:06am UTC](https://discuss.elastic.co/t/elasticsearch-count-users-query/12564 "2013-07-01T07:06:01Z")

</div>

Hi All, I have a problem that I hope someone can help me with: I have the next mapping for my user index -\> docs(users) containing events in which the user bought different products. each event(date) can contain s…

---

## [\[Résolu\] Rotation de sauvegarde](https://discuss.elastic.co/t/resolu-rotation-de-sauvegarde/132588)

<div class="topic-metadata">

**Author:** [@Jean-Luc\_Mathay](https://discuss.elastic.co/u/Jean-Luc_Mathay)\
**Replies:** 2\
**Last updated:** [May 21, 2018, 12:59pm UTC](https://discuss.elastic.co/t/resolu-rotation-de-sauvegarde/132588 "2018-05-21T12:59:02Z")

</div>

Bonjour à tous. Une petite question... La documentation sur les snapshots dit "The index snapshot process is incremental. In the process of making the index snapshot Elasticsearch analyses the list of the index files t…

---

## [Unassigned shards after upgrade to 8.2](https://discuss.elastic.co/t/unassigned-shards-after-upgrade-to-8-2/304717)

<div class="topic-metadata">

**Author:** [@Ian\_Simpson](https://discuss.elastic.co/u/Ian_Simpson)\
**Replies:** 6\
**Last updated:** [June 3, 2022, 8:09am UTC](https://discuss.elastic.co/t/unassigned-shards-after-upgrade-to-8-2/304717 "2022-06-03T08:09:45Z")

</div>

I am managing an Elasticsearch cluster deployed to our Azure environment. I am trying to upgrade our test single-node cluster from 7.x to 8.2. I have done the following: Upgraded to 7.17.3 and confirmed all shards were…

[Previous page](https://discuss.elastic.co/top.md?page=1397&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1399&per_page=50&period=all)
