# Top

**URL:** https://discuss.elastic.co/top.md?page=1421&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1422

---

## [Filter using a button on vega map](https://discuss.elastic.co/t/filter-using-a-button-on-vega-map/217615)

<div class="topic-metadata">

**Author:** [@Aadesh\_Sharma](https://discuss.elastic.co/u/Aadesh_Sharma)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 6:30am UTC](https://discuss.elastic.co/t/filter-using-a-button-on-vega-map/217615 "2020-02-04T06:30:32Z")

</div>

Hi, I have made a button on vega map and I want to use that button as a filter I have a field called "cat" in my index and in "cat" there are three values high, medium and low. I have added a button named high I need to…

---

## [Manage the connection pool size in Java client](https://discuss.elastic.co/t/manage-the-connection-pool-size-in-java-client/362762)

<div class="topic-metadata">

**Author:** [@Priyansh\_Maheshwari](https://discuss.elastic.co/u/Priyansh_Maheshwari)\
**Replies:** 2\
**Last updated:** [July 12, 2024, 4:04pm UTC](https://discuss.elastic.co/t/manage-the-connection-pool-size-in-java-client/362762 "2024-07-12T16:04:42Z")

</div>

Hi, I am currently utilizing the ElasticsearchClient library in java for connecting to Elasticsearch. As per the docs the library manages its own connection pool and its not required to create a separate client with eac…

---

## [Using Leaflet with Elasticsearch](https://discuss.elastic.co/t/using-leaflet-with-elasticsearch/252433)

<div class="topic-metadata">

**Author:** [@morescratch](https://discuss.elastic.co/u/morescratch)\
**Replies:** 2\
**Last updated:** [October 19, 2020, 1:20am UTC](https://discuss.elastic.co/t/using-leaflet-with-elasticsearch/252433 "2020-10-19T01:20:22Z")

</div>

Hi all, I’ve been looking for examples on how to use Elasticsearch as a data source for a Leaflet map. I understand that Kibana uses leaflet so I am hoping there some code snippets out there that I can reuse. Anyone know…

---

## [Problem with dates in Javascript](https://discuss.elastic.co/t/problem-with-dates-in-javascript/249702)

<div class="topic-metadata">

**Author:** [@HockeyFan0000](https://discuss.elastic.co/u/HockeyFan0000)\
**Replies:** 2\
**Last updated:** [September 29, 2020, 6:52pm UTC](https://discuss.elastic.co/t/problem-with-dates-in-javascript/249702 "2020-09-29T18:52:24Z")

</div>

I've seen many people having this same issue but I've not found an answer that has resolved my problem. I know this was a bug in ES 7.5 but I'm using ES 6.8. I've got logs with dates/times in the format "09/23 14:16:16…

---

## [Filebeat harvester open file count increasing when Logstash output to Elasticsearch Fails](https://discuss.elastic.co/t/filebeat-harvester-open-file-count-increasing-when-logstash-output-to-elasticsearch-fails/249892)

<div class="topic-metadata">

**Author:** [@arijitb](https://discuss.elastic.co/u/arijitb)\
**Replies:** 2\
**Last updated:** [September 25, 2020, 3:34pm UTC](https://discuss.elastic.co/t/filebeat-harvester-open-file-count-increasing-when-logstash-output-to-elasticsearch-fails/249892 "2020-09-25T15:34:38Z")

</div>

We have a log streaming pipeline setup with filebeat -\> logstash -\> Elasticsearch. Recently, our ES cluster started throwing 429 exceptions for all traffic and we observed that eventually logs stopped streaming to Logst…

---

## [Missing left menu](https://discuss.elastic.co/t/missing-left-menu/198410)

<div class="topic-metadata">

**Author:** [@rverchere](https://discuss.elastic.co/u/rverchere)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 1:29pm UTC](https://discuss.elastic.co/t/missing-left-menu/198410 "2019-09-12T13:29:22Z")

</div>

Hello, "Suddenly", the left menu disappeared on my browser when playing with Kibana from Firefox. When using private mode, I have no problems (see image below). I guess it's a cookie/cache/browser related stuff, any i…

---

## [Apply custom column name to data table](https://discuss.elastic.co/t/apply-custom-column-name-to-data-table/145249)

<div class="topic-metadata">

**Author:** [@cdaringe](https://discuss.elastic.co/u/cdaringe)\
**Replies:** 2\
**Last updated:** [August 20, 2018, 11:05pm UTC](https://discuss.elastic.co/t/apply-custom-column-name-to-data-table/145249 "2018-08-20T23:05:57Z")

</div>

Hi all: I cannot figure out how to apply a custom header name to my aggregate column. Currently, it reads "filters." I can't find a prescription in the docs. Any tips? Thanks,

---

## [Elasticsearch Search return blank results](https://discuss.elastic.co/t/elasticsearch-search-return-blank-results/127311)

<div class="topic-metadata">

**Author:** [@bruce88](https://discuss.elastic.co/u/bruce88)\
**Replies:** 2\
**Last updated:** [April 10, 2018, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-search-return-blank-results/127311 "2018-04-10T06:57:27Z")

</div>

I have an index with 1.9 billion data. When I try to do a search, it always return a blank result which is "". But the HTTP status code is 200. Then I just don't know what happens. Did anyone ever have this problem? Or …

---

## [Date Histogram Aggregation - decade interval](https://discuss.elastic.co/t/date-histogram-aggregation-decade-interval/38578)

<div class="topic-metadata">

**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\
**Replies:** 2\
**Last updated:** [January 7, 2016, 10:13am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-decade-interval/38578 "2016-01-07T10:13:42Z")

</div>

Can anybody explain how and if it is possible to build a decade interval with date histogram aggregation? I tried interval 10y which isn't supported. As possible solution used 3650d as interval which seems to work but …

---

## [First run error, "Can't find variable: ZeroClipboard"](https://discuss.elastic.co/t/first-run-error-cant-find-variable-zeroclipboard/29596)

<div class="topic-metadata">

**Author:** [@ajmichels](https://discuss.elastic.co/u/ajmichels)\
**Replies:** 2\
**Last updated:** [September 21, 2015, 1:41pm UTC](https://discuss.elastic.co/t/first-run-error-cant-find-variable-zeroclipboard/29596 "2015-09-21T13:41:03Z")

</div>

I am new the ELK and I am working setting up a stack on a virtual machine. Everything appears to be running fine (Elasticsearch, Kibana, Nginx, Logstash). But when I try to bring up Kibana in my browser I immediately get…

---

## [Elasticagent - filebeat is still increasing memory](https://discuss.elastic.co/t/elasticagent-filebeat-is-still-increasing-memory/350211)

<div class="topic-metadata">

**Author:** [@secsec](https://discuss.elastic.co/u/secsec)\
**Replies:** 3\
**Last updated:** [January 2, 2024, 2:07pm UTC](https://discuss.elastic.co/t/elasticagent-filebeat-is-still-increasing-memory/350211 "2024-01-02T14:07:33Z")

</div>

Hello, we are using ELK 8.11 and we have figured out that after installing elastic agent on windows and linux machines, they are 2 processes filebeat that are still increasing/allocation RAM more and more RAM. Even it …

---

## [Elasticsearch api url cloud service](https://discuss.elastic.co/t/elasticsearch-api-url-cloud-service/270399)

<div class="topic-metadata">

**Author:** [@Jeroen2](https://discuss.elastic.co/u/Jeroen2)\
**Replies:** 3\
**Last updated:** [April 18, 2021, 3:36am UTC](https://discuss.elastic.co/t/elasticsearch-api-url-cloud-service/270399 "2021-04-18T03:36:06Z")

</div>

I've got a very basic question. What is the URL to query my indexes? I use elastic cloud services. GET https://unique\_url\_key\_9sdf9asdf9.europe-west3.gcp.cloud.es.io:9243/message\_\* I get the following message: { "st…

---

## [Unknown type in Discover even with Dynamic Mapping](https://discuss.elastic.co/t/unknown-type-in-discover-even-with-dynamic-mapping/229423)

<div class="topic-metadata">

**Author:** [@Bibas](https://discuss.elastic.co/u/Bibas)\
**Replies:** 3\
**Last updated:** [April 24, 2020, 4:52pm UTC](https://discuss.elastic.co/t/unknown-type-in-discover-even-with-dynamic-mapping/229423 "2020-04-24T16:52:31Z")

</div>

Hello ! I'm new to the ELK stack so this question might be a bit dumb and I apologize. I have logs going through Logstash, then Elastic Search and arriving to Kibana without problems. My logs contains severals custom f…

---

## [Duplicate beat.uuids on different hosts](https://discuss.elastic.co/t/duplicate-beat-uuids-on-different-hosts/218184)

<div class="topic-metadata">

**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\
**Replies:** 3\
**Last updated:** [February 7, 2020, 2:53pm UTC](https://discuss.elastic.co/t/duplicate-beat-uuids-on-different-hosts/218184 "2020-02-07T14:53:29Z")

</div>

Hi, I'll preface this by saying I have a ticket open with Elastic Support about this, but since it's a really weird one IMO, I thought'd I'd post here in case anyone else has seen it. Basically we're sending monitoring…

---

## [Hardware for searching and visualizing 3 billion documents?](https://discuss.elastic.co/t/hardware-for-searching-and-visualizing-3-billion-documents/155355)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 3\
**Last updated:** [November 6, 2018, 5:04am UTC](https://discuss.elastic.co/t/hardware-for-searching-and-visualizing-3-billion-documents/155355 "2018-11-06T05:04:14Z")

</div>

Hi, I know this might be a bit of a vague question, but hopefully I can get some insight into the hardware I'll need. I'm collected netflow data and use Kibana to make visualizations. My dashboard has about 20 visualiz…

---

## [Unable to import Dashboard](https://discuss.elastic.co/t/unable-to-import-dashboard/46674)

<div class="topic-metadata">

**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\
**Replies:** 3\
**Last updated:** [April 13, 2016, 10:35am UTC](https://discuss.elastic.co/t/unable-to-import-dashboard/46674 "2016-04-13T10:35:28Z")

</div>

Hi, I'm using Kibana 4.3.0 and I want to import a dashboard I downloaded online. But when I click the "Import" button, and choose the .json file I want, nothing happens. Has this happened to anyone?

---

## [Yaml settings inheritance](https://discuss.elastic.co/t/yaml-settings-inheritance/37605)

<div class="topic-metadata">

**Author:** [@ergo14](https://discuss.elastic.co/u/ergo14)\
**Replies:** 3\
**Last updated:** [January 5, 2016, 4:42am UTC](https://discuss.elastic.co/t/yaml-settings-inheritance/37605 "2016-01-05T04:42:12Z")

</div>

The way newly created indices inherit default settings is unclear to me: My elasticsearch.yaml has this setting: index.translog.durability: async - but index template doesn't have any config options related to trans…

---

## [ElasticSearch memory usage on centralized log clusters](https://discuss.elastic.co/t/elasticsearch-memory-usage-on-centralized-log-clusters/19001)

<div class="topic-metadata">

**Author:** [@Tim\_Stoop](https://discuss.elastic.co/u/Tim_Stoop)\
**Replies:** 3\
**Last updated:** [July 31, 2014, 11:38am UTC](https://discuss.elastic.co/t/elasticsearch-memory-usage-on-centralized-log-clusters/19001 "2014-07-31T11:38:57Z")

</div>

Hi all, We've been running an ElasticSearch cluster of three nodes since last December. We're running them on Debian Wheezy. Due to the size of our network, we're getting about 600 messages/s (800 at peak times). …

---

## [Error 1053 the service did not respond to the start or control request in a timely fashion](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-to-the-start-or-control-request-in-a-timely-fashion/194388)

<div class="topic-metadata">

**Author:** [@marcohald](https://discuss.elastic.co/u/marcohald)\
**Replies:** 0\
**Last updated:** [August 8, 2019, 9:37am UTC](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-to-the-start-or-control-request-in-a-timely-fashion/194388 "2019-08-08T09:37:09Z")

</div>

Hi, i have had installed the winlogbeat server on a 2019 Server and it worked without a Problem. Then I uninstalled it and tested a few things and tweaked the config. Now when i reinstall it i cannot start it. I get t…

---

## [Custom integrations // the ability to install a tool for APT scaning](https://discuss.elastic.co/t/custom-integrations-the-ability-to-install-a-tool-for-apt-scaning/304251)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 0\
**Last updated:** [May 9, 2022, 12:33pm UTC](https://discuss.elastic.co/t/custom-integrations-the-ability-to-install-a-tool-for-apt-scaning/304251 "2022-05-09T12:33:28Z")

</div>

Hello, I'm checking the integrations developer guide, trying to build some custom integrations but I noticed that this documentation is strongly related to integrations based on #filebeat modules. my idea is to build a…

---

## [NEST client always using PUT http method instead of POST](https://discuss.elastic.co/t/nest-client-always-using-put-http-method-instead-of-post/261552)

<div class="topic-metadata">

**Author:** [@Izzy](https://discuss.elastic.co/u/Izzy)\
**Replies:** 0\
**Last updated:** [January 19, 2021, 1:56pm UTC](https://discuss.elastic.co/t/nest-client-always-using-put-http-method-instead-of-post/261552 "2021-01-19T13:56:39Z")

</div>

I'm trying to index my documents and expect them to have unique Ids, for doing that I'm using pipeline processor in order to remove the Id field from my model. However, Id always stored as 0 in elastic side. I noticed …

---

## [Match Query with input word order maintain](https://discuss.elastic.co/t/match-query-with-input-word-order-maintain/192677)

<div class="topic-metadata">

**Author:** [@harkesh\_kumar](https://discuss.elastic.co/u/harkesh_kumar)\
**Replies:** 0\
**Last updated:** [July 29, 2019, 10:39am UTC](https://discuss.elastic.co/t/match-query-with-input-word-order-maintain/192677 "2019-07-29T10:39:53Z")

</div>

0 I am working or Elastic search 7 I am facing some issue with Match query with elastic search My Issue i want to search all Possible result we match with sequence of words Like below Example:- Input is - Pawan Shrim…

---

## [TSVB Visualization takes only the default index pattern into account](https://discuss.elastic.co/t/tsvb-visualization-takes-only-the-default-index-pattern-into-account/251292)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 4\
**Last updated:** [October 7, 2020, 5:05pm UTC](https://discuss.elastic.co/t/tsvb-visualization-takes-only-the-default-index-pattern-into-account/251292 "2020-10-07T17:05:30Z")

</div>

Hi All, I am new to visualizations/ dashboards for Kibana 7.6.2 TSVB Visualization takes only the default index pattern into account. We want to create dashboards containing TSVB visualizations from different index pa…

---

## [Python RQ](https://discuss.elastic.co/t/python-rq/206045)

<div class="topic-metadata">

**Author:** [@Josef\_Rousek](https://discuss.elastic.co/u/Josef_Rousek)\
**Replies:** 4\
**Last updated:** [November 14, 2019, 6:18pm UTC](https://discuss.elastic.co/t/python-rq/206045 "2019-11-14T18:18:54Z")

</div>

Hi, I'm having hard time setting up APM with Python RQ, which is using fork. I was following https://discuss.elastic.co/t/python-agent-only-recording-some-background-tasks/149707, which led me to creating custom rq.job.…

---

## [Kibana configuration error](https://discuss.elastic.co/t/kibana-configuration-error/141522)

<div class="topic-metadata">

**Author:** [@Vladimir\_Fedotov](https://discuss.elastic.co/u/Vladimir_Fedotov)\
**Replies:** 4\
**Last updated:** [July 25, 2018, 11:11am UTC](https://discuss.elastic.co/t/kibana-configuration-error/141522 "2018-07-25T11:11:12Z")

</div>

I'm trying to make kibana work, but getting configuration errors of similar type. kibana 6.3.2 (same with 6.3.1 and 6.3.0) default config, installed together with elastic on same server. Please check the screenshots t…

---

## [Different load on nodes](https://discuss.elastic.co/t/different-load-on-nodes/123228)

<div class="topic-metadata">

**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\
**Replies:** 4\
**Last updated:** [March 9, 2018, 10:35am UTC](https://discuss.elastic.co/t/different-load-on-nodes/123228 "2018-03-09T10:35:25Z")

</div>

Hi, We had more load on our cluster than usual and at that time we noticed some strange behavior. A node that hold primaries had much higher GC count. All nodes have the same configuration, JVM: 1.8.0\_162 ES: 5.6.4. Th…

---

## [\_score of and "OR" query is invalid?](https://discuss.elastic.co/t/-score-of-and-or-query-is-invalid/98732)

<div class="topic-metadata">

**Author:** [@chrisribe](https://discuss.elastic.co/u/chrisribe)\
**Replies:** 4\
**Last updated:** [September 22, 2017, 6:53pm UTC](https://discuss.elastic.co/t/-score-of-and-or-query-is-invalid/98732 "2017-09-22T18:53:41Z")

</div>

Hi, Pulling my hair out here. I created a query on a string field and want to get documents that have the most matches by order desc. Query: exists:ids AND (ids:5 || 17 || 21 || 27 || 38 || 41 || 43 || 46 || 47 || 77…

---

## [So slow in loading the log files via stdin plugin](https://discuss.elastic.co/t/so-slow-in-loading-the-log-files-via-stdin-plugin/84963)

<div class="topic-metadata">

**Author:** [@andypark](https://discuss.elastic.co/u/andypark)\
**Replies:** 4\
**Last updated:** [May 11, 2017, 10:20am UTC](https://discuss.elastic.co/t/so-slow-in-loading-the-log-files-via-stdin-plugin/84963 "2017-05-11T10:20:32Z")

</div>

Hi guys, Currently I need to load some logfiles contained in tar (archive) files. To load them into filebeat, I am using gzcat tool to echo the log files inside the archive files using stdin input for filebeat. For a 2…

---

## [Bulk API JAva](https://discuss.elastic.co/t/bulk-api-java/80762)

<div class="topic-metadata">

**Author:** [@billnbell](https://discuss.elastic.co/u/billnbell)\
**Replies:** 4\
**Last updated:** [April 6, 2017, 9:46pm UTC](https://discuss.elastic.co/t/bulk-api-java/80762 "2017-04-06T21:46:01Z")

</div>

Do we need to close() the bulk request? Or can we just ignore it if we have 0 requests in there? \> if (bulk.numberOfActions() \> 0) { \> LOGGER.debug("Elasticsearch Writing \[{}\]", bulk.request().reque…

---

## [Where to find Elastic Experts?](https://discuss.elastic.co/t/where-to-find-elastic-experts/8408)

<div class="topic-metadata">

**Author:** [@randy\_2](https://discuss.elastic.co/u/randy_2)\
**Replies:** 4\
**Last updated:** [July 23, 2012, 9:10am UTC](https://discuss.elastic.co/t/where-to-find-elastic-experts/8408 "2012-07-23T09:10:09Z")

</div>

Hi, Anyone know of any firms providing expert Elastic Search consultancy or freelancers with strong experience? Any pointers highly appreciated. Thanks

---

## [Sorting a field on the view mode](https://discuss.elastic.co/t/sorting-a-field-on-the-view-mode/295251)

<div class="topic-metadata">

**Author:** [@dash5000](https://discuss.elastic.co/u/dash5000)\
**Replies:** 5\
**Last updated:** [January 25, 2022, 9:15pm UTC](https://discuss.elastic.co/t/sorting-a-field-on-the-view-mode/295251 "2022-01-25T21:15:11Z")

</div>

Hello Everyone, I was checking the sorting on the table visualization using the lens. I can sort the fields on the table in the edit mode, but i don't see the same option in the view mode. This is the drop down i see i…

---

## [Configure xpack basic authentication](https://discuss.elastic.co/t/configure-xpack-basic-authentication/259916)

<div class="topic-metadata">

**Author:** [@dis](https://discuss.elastic.co/u/dis)\
**Replies:** 5\
**Last updated:** [December 31, 2020, 6:01am UTC](https://discuss.elastic.co/t/configure-xpack-basic-authentication/259916 "2020-12-31T06:01:23Z")

</div>

ES: 7.10.2-SNAPSHOT with basic/trial license. I want to run elasticsearch with xpack enabled as basic authentication. xpack.security.enabled: true xpack.security.authc.realms: native.realm1: order: 0 running in…

---

## [Use wildcard data type ,The number of events does not match when querying](https://discuss.elastic.co/t/use-wildcard-data-type-the-number-of-events-does-not-match-when-querying/247318)

<div class="topic-metadata">

**Author:** [@woxiang-H](https://discuss.elastic.co/u/woxiang-H)\
**Replies:** 5\
**Last updated:** [September 3, 2020, 10:01am UTC](https://discuss.elastic.co/t/use-wildcard-data-type-the-number-of-events-does-not-match-when-querying/247318 "2020-09-03T10:01:03Z")

</div>

I use two field types: text and wildcard to store the same error log. When I query, I find the missing content GET test-wildcard/\_search { "query": { "match": { "json.thrown.stack": "\*invokeWithoutCircuitBre…

---

## [Elasticsearch log](https://discuss.elastic.co/t/elasticsearch-log/89442)

<div class="topic-metadata">

**Author:** [@AdaYang](https://discuss.elastic.co/u/AdaYang)\
**Replies:** 5\
**Last updated:** [June 15, 2017, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-log/89442 "2017-06-15T05:54:13Z")

</div>

I am using ingest-mapper to digest PDF files. I got a lot of Warning message on package org.apache.pdfbox.pdmodel.font. Anybody knows how to turn off these kind of messages? I tried to tweak log4j2.properties but seems …

---

## [E: The repository 'https://artifacts.elastic.co/packages/7.x/apt stable Release' does not have a Release file](https://discuss.elastic.co/t/e-the-repository-https-artifacts-elastic-co-packages-7-x-apt-stable-release-does-not-have-a-release-file/319947)

<div class="topic-metadata">

**Author:** [@Rohith2](https://discuss.elastic.co/u/Rohith2)\
**Replies:** 1\
**Last updated:** [November 29, 2022, 2:22am UTC](https://discuss.elastic.co/t/e-the-repository-https-artifacts-elastic-co-packages-7-x-apt-stable-release-does-not-have-a-release-file/319947 "2022-11-29T02:22:07Z")

</div>

Hi, When I am giving the "sudo apt update" command I am getting this error: Err:2 https://artifacts.elastic.co/packages/7.x/apt stable Release Certificate verification failed: The certificate is NOT trusted. The certi…

---

## [Kibana 7.6 Change Logo's and text on LogIn page](https://discuss.elastic.co/t/kibana-7-6-change-logos-and-text-on-login-page/221350)

<div class="topic-metadata">

**Author:** [@punjala](https://discuss.elastic.co/u/punjala)\
**Replies:** 1\
**Last updated:** [March 13, 2020, 11:58pm UTC](https://discuss.elastic.co/t/kibana-7-6-change-logos-and-text-on-login-page/221350 "2020-03-13T23:58:38Z")

</div>

Is it a possibility to change the following on Kibana 7.6 Kibana Logo Text on the login page Loading logo

---

## [Query an index an put it into another index in Ingest plugin](https://discuss.elastic.co/t/query-an-index-an-put-it-into-another-index-in-ingest-plugin/119379)

<div class="topic-metadata">

**Author:** [@chrigui94](https://discuss.elastic.co/u/chrigui94)\
**Replies:** 1\
**Last updated:** [February 11, 2018, 4:24pm UTC](https://discuss.elastic.co/t/query-an-index-an-put-it-into-another-index-in-ingest-plugin/119379 "2018-02-11T16:24:08Z")

</div>

I need to copy fields from an index to another one using an ingest plugin. I have used the following query: SearchResponse response = client.prepareSearch("index1", "index2") .setTypes("type1", "type2") .setSearchType…

---

## [Ingest-geoip install SSLHandshakeException](https://discuss.elastic.co/t/ingest-geoip-install-sslhandshakeexception/113159)

<div class="topic-metadata">

**Author:** [@Nofar](https://discuss.elastic.co/u/Nofar)\
**Replies:** 1\
**Last updated:** [December 25, 2017, 8:13pm UTC](https://discuss.elastic.co/t/ingest-geoip-install-sslhandshakeexception/113159 "2017-12-25T20:13:34Z")

</div>

I'm trying to install geoip plugin: $sudo bin/elasticsearch-plugin install ingest-geoip But getting SSLHandshakeException. I don't know what certificate is missing.. because I don't have any problem with accessing to …

---

## [What is the difference between \_source and fields? When to use \_source vs fields in queries?](https://discuss.elastic.co/t/what-is-the-difference-between--source-and-fields-when-to-use--source-vs-fields-in-queries/78647)

<div class="topic-metadata">

**Author:** [@sam99](https://discuss.elastic.co/u/sam99)\
**Replies:** 1\
**Last updated:** [March 16, 2017, 7:55am UTC](https://discuss.elastic.co/t/what-is-the-difference-between--source-and-fields-when-to-use--source-vs-fields-in-queries/78647 "2017-03-16T07:55:50Z")

</div>

I am reading the docs, but I am confused and do not think I understand what these mean. I need to get a specific set of key:value pairs that are an exact match in the specified query. Do I use \_source or fields or so…

---

## [Looking for a french interface for KIBANA](https://discuss.elastic.co/t/looking-for-a-french-interface-for-kibana/43922)

<div class="topic-metadata">

**Author:** [@denis.wozniak](https://discuss.elastic.co/u/denis.wozniak)\
**Replies:** 1\
**Last updated:** [March 9, 2016, 6:44pm UTC](https://discuss.elastic.co/t/looking-for-a-french-interface-for-kibana/43922 "2016-03-09T18:44:52Z")

</div>

I'm looking for an existing french interface for KIBANA for my customer, to be used by non-english users. Does anyone know if such an interface exist, or if anyone has already translated Kibana's interface from english t…

---

## [Http get request using libcurl in json format](https://discuss.elastic.co/t/http-get-request-using-libcurl-in-json-format/9564)

<div class="topic-metadata">

**Author:** [@Dinesh\_Sriram](https://discuss.elastic.co/u/Dinesh_Sriram)\
**Replies:** 1\
**Last updated:** [November 6, 2012, 6:51pm UTC](https://discuss.elastic.co/t/http-get-request-using-libcurl-in-json-format/9564 "2012-11-06T18:51:04Z")

</div>

Hi All, I am using libcurl to add indices and retrieve search results. I would like to know whether there is a way to send http get requests using libcurl in json format? For example, the request in curl is cur…

---

## [Logstash if conditions connected with and](https://discuss.elastic.co/t/logstash-if-conditions-connected-with-and/243199)

<div class="topic-metadata">

**Author:** [@Souji\_T](https://discuss.elastic.co/u/Souji_T)\
**Replies:** 8\
**Last updated:** [August 4, 2020, 6:08am UTC](https://discuss.elastic.co/t/logstash-if-conditions-connected-with-and/243199 "2020-08-04T06:08:02Z")

</div>

Hello, I am trying to add a field with logstash. For example, I have following line in the filter section of my config file from logstash: if \[dest\_ip\] == "194.175.245.9" and \[alert\]\[signature\_id\] == "2009702" { …

---

## [Search on frozen index cause huge usage of JVM Heap](https://discuss.elastic.co/t/search-on-frozen-index-cause-huge-usage-of-jvm-heap/193101)

<div class="topic-metadata">

**Author:** [@Ali\_Reza\_Haghighat](https://discuss.elastic.co/u/Ali_Reza_Haghighat)\
**Replies:** 8\
**Last updated:** [August 5, 2019, 2:17pm UTC](https://discuss.elastic.co/t/search-on-frozen-index-cause-huge-usage-of-jvm-heap/193101 "2019-08-05T14:17:22Z")

</div>

Hi, I have run the following test to analyze the effect of using frozen indices of JVM heap usage. I have a single node cluster with the following properties: JVM Heap: 6 GB Number of indices: 200 Number of shards:…

---

## [How to find error from logs using regex pattern?](https://discuss.elastic.co/t/how-to-find-error-from-logs-using-regex-pattern/128099)

<div class="topic-metadata">

**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\
**Replies:** 8\
**Last updated:** [April 18, 2018, 4:25am UTC](https://discuss.elastic.co/t/how-to-find-error-from-logs-using-regex-pattern/128099 "2018-04-18T04:25:08Z")

</div>

regex Pattern which is saved in the local drive-in abc.json file and input of logs comes from Kafka server and send only error log snippet to elasticsearch if errors are not matched in abc.json then skip dumping of json …

---

## [Index in memory](https://discuss.elastic.co/t/index-in-memory/7307)

<div class="topic-metadata">

**Author:** [@Gustavo\_Maia](https://discuss.elastic.co/u/Gustavo_Maia)\
**Replies:** 8\
**Last updated:** [April 17, 2012, 1:27pm UTC](https://discuss.elastic.co/t/index-in-memory/7307 "2012-04-17T13:27:48Z")

</div>

Hello, Please, anybody can check is the config below is correct, for use index in memory. { "topicoindex" : { "settings" : { "index.analysis.filter.myngram.max\_gram" : "200", "index.analysis.filt…

---

## [Best practice for TDocument class reference to pass to Java's ElasticsearchClient methods?](https://discuss.elastic.co/t/best-practice-for-tdocument-class-reference-to-pass-to-javas-elasticsearchclient-methods/344473)

<div class="topic-metadata">

**Author:** [@ilgrosso](https://discuss.elastic.co/u/ilgrosso)\
**Replies:** 2\
**Last updated:** [October 5, 2023, 12:14pm UTC](https://discuss.elastic.co/t/best-practice-for-tdocument-class-reference-to-pass-to-javas-elasticsearchclient-methods/344473 "2023-10-05T12:14:45Z")

</div>

Hi, I am using the latest Java REST API client and wondering what Class\<TDocument\> reference I should be passing to the search() method in case of no object domain model is being used. At present I am using a bare Map.…

---

## [Downgrade from 6.8 to 6.7](https://discuss.elastic.co/t/downgrade-from-6-8-to-6-7/186817)

<div class="topic-metadata">

**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\
**Replies:** 2\
**Last updated:** [June 22, 2019, 8:35am UTC](https://discuss.elastic.co/t/downgrade-from-6-8-to-6-7/186817 "2019-06-22T08:35:10Z")

</div>

Hi guys, After we upgraded to 6.8 we see performance issue with significantly high processor load. Is it possible downgrade from 6.8 to 6.7? As I correctly understand you are going to prevent downgrade in future Than…

---

## [Filter - grok, date and kv example](https://discuss.elastic.co/t/filter-grok-date-and-kv-example/144437)

<div class="topic-metadata">

**Author:** [@siddhardhan](https://discuss.elastic.co/u/siddhardhan)\
**Replies:** 2\
**Last updated:** [August 15, 2018, 4:44am UTC](https://discuss.elastic.co/t/filter-grok-date-and-kv-example/144437 "2018-08-15T04:44:25Z")

</div>

I am newbie to logstash and trying to ship logs using logstash agent to splunk server. But having trouble shipping the logs. Need help / guidance. Below is my log format: 2018.07.12.12:34:31:232 GID=xxx FID=asdf STRT=1…

---

## [Approach for receiving large amount of messages per second](https://discuss.elastic.co/t/approach-for-receiving-large-amount-of-messages-per-second/62969)

<div class="topic-metadata">

**Author:** [@Kissaki](https://discuss.elastic.co/u/Kissaki)\
**Replies:** 2\
**Last updated:** [October 14, 2016, 3:12pm UTC](https://discuss.elastic.co/t/approach-for-receiving-large-amount-of-messages-per-second/62969 "2016-10-14T15:12:44Z")

</div>

Hey, I try to set up logstash to receive a large number of UDP messages per second, up to may be 50k. Currently, for my test setup, logstash and elasticsearch is installed on my local machine (i5-4590S, 16gb RAM) and g…

---

## [What will happen when shard size is too large](https://discuss.elastic.co/t/what-will-happen-when-shard-size-is-too-large/21472)

<div class="topic-metadata">

**Author:** [@Jinyuan\_Zhou](https://discuss.elastic.co/u/Jinyuan_Zhou)\
**Replies:** 2\
**Last updated:** [January 5, 2015, 5:45am UTC](https://discuss.elastic.co/t/what-will-happen-when-shard-size-is-too-large/21472 "2015-01-05T05:45:48Z")

</div>

I read some where that max recommended shard size is about 50G. What are biggest bad consequences when shard size is too large. I have, for some indice, shard size more than 100G on a jvm with 29G fixed heap siz…

[Previous page](https://discuss.elastic.co/top.md?page=1420&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1422&per_page=50&period=all)
