# Top

**URL:** https://discuss.elastic.co/top.md?page=147&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 148

---

## [High cpu load but low memory usage](https://discuss.elastic.co/t/high-cpu-load-but-low-memory-usage/20417)

<div class="topic-metadata">

**Author:** [@Atrus](https://discuss.elastic.co/u/Atrus)\
**Replies:** 9\
**Last updated:** [October 28, 2014, 1:04pm UTC](https://discuss.elastic.co/t/high-cpu-load-but-low-memory-usage/20417 "2014-10-28T13:04:10Z")

</div>

Hi Pros, I've used ES for several months, it works perfectly and speed as lightning. There are 3 nodes in cluster, each have 12cores CPU and 24GB-32GB RAM. For some recent days, the cpu get too high on all…

---

## [3,000 events/sec Architecture](https://discuss.elastic.co/t/3-000-events-sec-architecture/16148)

<div class="topic-metadata">

**Author:** [@Eric\_Luellen](https://discuss.elastic.co/u/Eric_Luellen)\
**Replies:** 9\
**Last updated:** [March 14, 2014, 9:34pm UTC](https://discuss.elastic.co/t/3-000-events-sec-architecture/16148 "2014-03-14T21:34:51Z")

</div>

Hello, I've been working on a POC for Logstash/ElasticSearch/Kibana for about 2 months now and everything has worked out pretty good and we are ready to move it to production. Before building out the infrastructur…

---

## [Metric Threshold Alert reporting incorrect document count](https://discuss.elastic.co/t/metric-threshold-alert-reporting-incorrect-document-count/346553)

<div class="topic-metadata">

**Author:** [@vsabado](https://discuss.elastic.co/u/vsabado)\
**Replies:** 32\
**Last updated:** [November 9, 2023, 3:34pm UTC](https://discuss.elastic.co/t/metric-threshold-alert-reporting-incorrect-document-count/346553 "2023-11-09T15:34:20Z")

</div>

I have a metric threshold alert that will trigger when document count is above 30. This alert seems to trigger just fine. For the body I'm setting this: And this is the data that I get back when the alert fires up: {…

---

## [TransportClient consumes too much CPU](https://discuss.elastic.co/t/transportclient-consumes-too-much-cpu/71330)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 10\
**Last updated:** [January 12, 2017, 6:22pm UTC](https://discuss.elastic.co/t/transportclient-consumes-too-much-cpu/71330 "2017-01-12T18:22:34Z")

</div>

I have a very small and simple test I'm trying to perform. I use TransportClient in order to insert 1000 documents into my index. This is done as you can see below: for (Integer i = 0; i \< 1000; i++) { Man…

---

## [Location of custom filters](https://discuss.elastic.co/t/location-of-custom-filters/24700)

<div class="topic-metadata">

**Author:** [@sushmithak](https://discuss.elastic.co/u/sushmithak)\
**Replies:** 10\
**Last updated:** [July 2, 2015, 6:01am UTC](https://discuss.elastic.co/t/location-of-custom-filters/24700 "2015-07-02T06:01:05Z")

</div>

Hi, I want to extract required fields from syslog-messages where can i write (exact location) custom filters in logstash. plz provide any examples to write custom filters. -thanks

---

## [How to collect from two instances to logstash instance using filebeat](https://discuss.elastic.co/t/how-to-collect-from-two-instances-to-logstash-instance-using-filebeat/36689)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 11\
**Last updated:** [December 9, 2015, 8:15am UTC](https://discuss.elastic.co/t/how-to-collect-from-two-instances-to-logstash-instance-using-filebeat/36689 "2015-12-09T08:15:08Z")

</div>

Can you please guide me how to collect logs from two seperate instances to logstash.

---

## [Configure HTTPS without xpack and nginx or any other external modules](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 10\
**Last updated:** [March 18, 2019, 6:52am UTC](https://discuss.elastic.co/t/configure-https-without-xpack-and-nginx-or-any-other-external-modules/170849 "2019-03-18T06:52:19Z")

</div>

I am trying to configure https for elasticsearch without any third party modules or reverse proxies. Any idea how to approach it.

---

## [How to use the elasticsearch Attachment Processor with node.js](https://discuss.elastic.co/t/how-to-use-the-elasticsearch-attachment-processor-with-node-js/173609)

<div class="topic-metadata">

**Author:** [@Joao\_D\_Junior](https://discuss.elastic.co/u/Joao_D_Junior)\
**Replies:** 9\
**Last updated:** [March 25, 2019, 3:27pm UTC](https://discuss.elastic.co/t/how-to-use-the-elasticsearch-attachment-processor-with-node-js/173609 "2019-03-25T15:27:56Z")

</div>

I'm making an application to search for words or phrases in .PDF files and I made the following code (Found on the internet): const elasticsearch = require('elasticsearch'); const fse = require('fs-extra') let clie…

---

## [Search Connectors Microsoft SQL](https://discuss.elastic.co/t/search-connectors-microsoft-sql/346263)

<div class="topic-metadata">

**Author:** [@aisyaharifin](https://discuss.elastic.co/u/aisyaharifin)\
**Replies:** 18\
**Last updated:** [March 7, 2024, 3:29pm UTC](https://discuss.elastic.co/t/search-connectors-microsoft-sql/346263 "2024-03-07T15:29:14Z")

</div>

Hello Elastic, I have a query to ask you specifically regarding the Search Connectors for Microsoft SQL. I have successfully connected to the Microsoft SQL database, and there are multiple tables that I would like to q…

---

## [Logstash service getting restarted after trying to set keystore on \`v7.14\`](https://discuss.elastic.co/t/logstash-service-getting-restarted-after-trying-to-set-keystore-on-v7-14/284582)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 15\
**Last updated:** [September 20, 2021, 2:28am UTC](https://discuss.elastic.co/t/logstash-service-getting-restarted-after-trying-to-set-keystore-on-v7-14/284582 "2021-09-20T02:28:40Z")

</div>

Hi Team, I am trying to set logstash keystore but having hard time. I have refer below link but still its not working. (not creating keystore password from below) I am creating keystore as, echo y | /usr/share/log…

---

## [Generate alarm only when a condition is applied](https://discuss.elastic.co/t/generate-alarm-only-when-a-condition-is-applied/88572)

<div class="topic-metadata">

**Author:** [@miteak](https://discuss.elastic.co/u/miteak)\
**Replies:** 9\
**Last updated:** [June 9, 2017, 7:18am UTC](https://discuss.elastic.co/t/generate-alarm-only-when-a-condition-is-applied/88572 "2017-06-09T07:18:45Z")

</div>

Dear, I'm trying to config an alarm to be sent only when a value from aggregation has a desired or higher value. e.g. i receive this email, but it must contains only United States and France: workstation 1 | username…

---

## [Mapping for multiple types under one index](https://discuss.elastic.co/t/mapping-for-multiple-types-under-one-index/5006)

<div class="topic-metadata">

**Author:** [@sophia\_parafina](https://discuss.elastic.co/u/sophia_parafina)\
**Replies:** 12\
**Last updated:** [July 31, 2011, 6:07pm UTC](https://discuss.elastic.co/t/mapping-for-multiple-types-under-one-index/5006 "2011-07-31T18:07:11Z")

</div>

Is there an example for mapping multiple geo\_point types under one index. I've searched the group for examples but all of them are for single types and those work, but I can't get the correct syntax for multiple type…

---

## [Elasticsearch - return records having a field falling in the given range](https://discuss.elastic.co/t/elasticsearch-return-records-having-a-field-falling-in-the-given-range/170676)

<div class="topic-metadata">

**Author:** [@prakritidev](https://discuss.elastic.co/u/prakritidev)\
**Replies:** 10\
**Last updated:** [March 5, 2019, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-return-records-having-a-field-falling-in-the-given-range/170676 "2019-03-05T11:37:22Z")

</div>

A subset of my data looks like: { "6220":{ "abstract":"We investigate the two-dimensional $\\\\mathcal{ N }=(2, 2)$ supersymmetric\\nYang-Mills (SYM) theory on …

---

## [Elasticsearch enable watcher - email notifications](https://discuss.elastic.co/t/elasticsearch-enable-watcher-email-notifications/283794)

<div class="topic-metadata">

**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\
**Replies:** 9\
**Last updated:** [September 12, 2021, 6:30pm UTC](https://discuss.elastic.co/t/elasticsearch-enable-watcher-email-notifications/283794 "2021-09-12T18:30:02Z")

</div>

Hello, I would like to ask You for help, I have one-node elasticsearch with kibana on kubernetes. I need to have on kibana watcher email notifications enabled but don't know how to do from elasticsearch yml file. Rig…

---

## [Can convert "10%" string to float?](https://discuss.elastic.co/t/can-convert-10-string-to-float/125574)

<div class="topic-metadata">

**Author:** [@EditAxha](https://discuss.elastic.co/u/EditAxha)\
**Replies:** 11\
**Last updated:** [March 27, 2018, 12:41pm UTC](https://discuss.elastic.co/t/can-convert-10-string-to-float/125574 "2018-03-27T12:41:40Z")

</div>

Hello, It is possible to convert with filter logstash a string value like "10%" to float? thnx.

---

## [Is there a way to feed base64 encoded string to the ingest\_attachment plugin or fscrawler?](https://discuss.elastic.co/t/is-there-a-way-to-feed-base64-encoded-string-to-the-ingest-attachment-plugin-or-fscrawler/278016)

<div class="topic-metadata">

**Author:** [@dotel](https://discuss.elastic.co/u/dotel)\
**Replies:** 10\
**Last updated:** [July 8, 2021, 6:12am UTC](https://discuss.elastic.co/t/is-there-a-way-to-feed-base64-encoded-string-to-the-ingest-attachment-plugin-or-fscrawler/278016 "2021-07-08T06:12:34Z")

</div>

So I've been trying to come up with a poc for document content search. What I've found so far is, I can feed the documents to fscrawler and search for the content using something like GET bookstore/\_search { "query":…

---

## [Indexes (and thus data) gone after ES upgrade](https://discuss.elastic.co/t/indexes-and-thus-data-gone-after-es-upgrade/52531)

<div class="topic-metadata">

**Author:** [@coreation](https://discuss.elastic.co/u/coreation)\
**Replies:** 10\
**Last updated:** [June 17, 2016, 2:15pm UTC](https://discuss.elastic.co/t/indexes-and-thus-data-gone-after-es-upgrade/52531 "2016-06-17T14:15:19Z")

</div>

Hi all, I've updated my systems through sudo apt-get upgrade / update and my elasticsearch got updated with it as well. However after updating the necessary plug-ins I saw my data was gone as well. Is this expected? S…

---

## [Custom field to process DOB field calculating 'age'](https://discuss.elastic.co/t/custom-field-to-process-dob-field-calculating-age/194018)

<div class="topic-metadata">

**Author:** [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\
**Replies:** 12\
**Last updated:** [August 6, 2019, 5:44pm UTC](https://discuss.elastic.co/t/custom-field-to-process-dob-field-calculating-age/194018 "2019-08-06T17:44:46Z")

</div>

I have sample data as:- Sr No,CNIC,Cell Phone,Date Of Birth,Gender 1,3710144892657,3215510968,06/06/1961,male 2,3710155658463,3238547712,6/17/1952,male 3,3710153121295,3015357676,01/01/1956,male 4,3710116643365,32157019…

---

## [Need help connecting to elastic search cluster using java api](https://discuss.elastic.co/t/need-help-connecting-to-elastic-search-cluster-using-java-api/8063)

<div class="topic-metadata">

**Author:** [@Upender\_Gilakathula](https://discuss.elastic.co/u/Upender_Gilakathula)\
**Replies:** 10\
**Last updated:** [June 14, 2012, 6:02pm UTC](https://discuss.elastic.co/t/need-help-connecting-to-elastic-search-cluster-using-java-api/8063 "2012-06-14T18:02:50Z")

</div>

Hej all, I have created a Elastic Search cluster with 2 nodes in EC2 using the homepage documentation with out using any gateway. And Thats working fine. I can see that cluster helath and bigdesk all the stuff. H…

---

## [Can 2 queries be used in a Metric or Markdown element, with if logic in the display?](https://discuss.elastic.co/t/can-2-queries-be-used-in-a-metric-or-markdown-element-with-if-logic-in-the-display/248237)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 12\
**Last updated:** [September 21, 2020, 9:42pm UTC](https://discuss.elastic.co/t/can-2-queries-be-used-in-a-metric-or-markdown-element-with-if-logic-in-the-display/248237 "2020-09-21T21:42:36Z")

</div>

I have a Metric element on Kibana Canvas with the following expression syntax: filters group="default" | essql query="SELECT COUNT(\*) as count FROM \\"index1\*\\" " | markdown " {{#each rows}}{{coun…

---

## [Kibana 8.2.3 "Donut chart can't render with negative values"](https://discuss.elastic.co/t/kibana-8-2-3-donut-chart-cant-render-with-negative-values/314508)

<div class="topic-metadata">

**Author:** [@nesretep](https://discuss.elastic.co/u/nesretep)\
**Replies:** 20\
**Last updated:** [October 20, 2022, 4:08pm UTC](https://discuss.elastic.co/t/kibana-8-2-3-donut-chart-cant-render-with-negative-values/314508 "2022-10-20T16:08:21Z")

</div>

Previously donuts and pies just rendered. Now this message is shown when negative values exist on buckets. How can this message be turned off, and thereby achieve the rendering of all buckets which are in fact positive. …

---

## [Elasticsearch autocomplete suggestion on array object](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggestion-on-array-object/322375)

<div class="topic-metadata">

**Author:** [@ysunil702](https://discuss.elastic.co/u/ysunil702)\
**Replies:** 14\
**Last updated:** [January 10, 2023, 10:12am UTC](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggestion-on-array-object/322375 "2023-01-10T10:12:52Z")

</div>

my mapping as follow : \`"skills": { "properties": { "id": { "type": "long" }, "skillName": { …

---

## [Transport client settings](https://discuss.elastic.co/t/transport-client-settings/67272)

<div class="topic-metadata">

**Author:** [@avaneeshr](https://discuss.elastic.co/u/avaneeshr)\
**Replies:** 10\
**Last updated:** [November 28, 2016, 12:57pm UTC](https://discuss.elastic.co/t/transport-client-settings/67272 "2016-11-28T12:57:27Z")

</div>

Hi! I am using Java to connect to my ES (v2.4.0) cluster using a Transport client. I am seeing very bad query throughput performance. I have two questions: 1) Does transport client also sort the query results, or is i…

---

## [Snapshot repository missing after remounting network disk](https://discuss.elastic.co/t/snapshot-repository-missing-after-remounting-network-disk/304921)

<div class="topic-metadata">

**Author:** [@elaskibuser](https://discuss.elastic.co/u/elaskibuser)\
**Replies:** 9\
**Last updated:** [May 20, 2022, 12:50pm UTC](https://discuss.elastic.co/t/snapshot-repository-missing-after-remounting-network-disk/304921 "2022-05-20T12:50:45Z")

</div>

Hi All, We decided to increase the amount of storage we have for snapshots On a three node cluster elastic cluster v7. We did that by copying the contents of the old disk to the bigger disk. When copying was done, we u…

---

## [Esrally error in k8s cluster and not able to deploy](https://discuss.elastic.co/t/esrally-error-in-k8s-cluster-and-not-able-to-deploy/277143)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 9\
**Last updated:** [July 5, 2021, 3:55am UTC](https://discuss.elastic.co/t/esrally-error-in-k8s-cluster-and-not-able-to-deploy/277143 "2021-07-05T03:55:45Z")

</div>

Hi All, I am trying to deploy esrally in kubernetes cluster and below is the manifest I have created, --- kind: PersistentVolumeClaim apiVersion: v1 metadata: name: esrally-claim spec: storageClassName: db access…

---

## [404 error for just /api calls. Nginx as proxy](https://discuss.elastic.co/t/404-error-for-just-api-calls-nginx-as-proxy/196958)

<div class="topic-metadata">

**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Replies:** 9\
**Last updated:** [September 3, 2019, 12:47pm UTC](https://discuss.elastic.co/t/404-error-for-just-api-calls-nginx-as-proxy/196958 "2019-09-03T12:47:08Z")

</div>

I'm running Kibana 7.3 behind an Nginx proxy (in Kubernetes) and most things work but the /api calls don't seem to respect the basePath configuration. I set the basePath value and most calls prepend that and work, but …

---

## [Kibana behind firewall](https://discuss.elastic.co/t/kibana-behind-firewall/356558)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 14\
**Last updated:** [April 16, 2024, 8:32am UTC](https://discuss.elastic.co/t/kibana-behind-firewall/356558 "2024-04-16T08:32:50Z")

</div>

I have my kibana running behind firewall and can't connect to outside world. I don't need to connect either. it is working fine but getting following error. how do I stop kibana to even trying.? I already has this in k…

---

## [Why "knn\_query" doesn’t have a separate k parameter?](https://discuss.elastic.co/t/why-knn-query-doesn-t-have-a-separate-k-parameter/358727)

<div class="topic-metadata">

**Author:** [@alliswell](https://discuss.elastic.co/u/alliswell)\
**Replies:** 13\
**Last updated:** [May 9, 2024, 5:00pm UTC](https://discuss.elastic.co/t/why-knn-query-doesn-t-have-a-separate-k-parameter/358727 "2024-05-09T17:00:08Z")

</div>

Thanks elastic team, for adding knn\_query. Now with knn\_query it is possible to use function\_score or script\_score and influence the rank of vector search result and not solely rely on the cosine similarity score. This w…

---

## [Better effective substring query idea?](https://discuss.elastic.co/t/better-effective-substring-query-idea/7853)

<div class="topic-metadata">

**Author:** [@arta](https://discuss.elastic.co/u/arta)\
**Replies:** 12\
**Last updated:** [June 1, 2012, 6:19pm UTC](https://discuss.elastic.co/t/better-effective-substring-query-idea/7853 "2012-06-01T18:19:34Z")

</div>

Hi, I have a string field that is analyzed by NGram analyzer. Let's say the name of the field is 'id' and its value is \[a-z\]+ I use NGram analyzer because I want to search any substring of ids. Here's an example:…

---

## [Using Terms Query](https://discuss.elastic.co/t/using-terms-query/122745)

<div class="topic-metadata">

**Author:** [@Francisco1](https://discuss.elastic.co/u/Francisco1)\
**Replies:** 9\
**Last updated:** [March 8, 2018, 7:35am UTC](https://discuss.elastic.co/t/using-terms-query/122745 "2018-03-08T07:35:15Z")

</div>

Hello guys, I'm looking for some help on the topic Terms Query(URL Available) "https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-terms-query.html". What I'm trying to do it's something like it'…

---

## [Plugin installation on local ElasticSearch](https://discuss.elastic.co/t/plugin-installation-on-local-elasticsearch/270729)

<div class="topic-metadata">

**Author:** [@Lukas\_Smilek](https://discuss.elastic.co/u/Lukas_Smilek)\
**Replies:** 10\
**Last updated:** [April 22, 2021, 7:55am UTC](https://discuss.elastic.co/t/plugin-installation-on-local-elasticsearch/270729 "2021-04-22T07:55:13Z")

</div>

Hello, I was able to successfully install ElasticSearch 7.12.0 on my Mac and also work with it (mapping and indexing first objects via non local network). I want to install a plugin, but I can't get pass this error: \*\*\*…

---

## [Which is the main master in 3 dedicated master node?](https://discuss.elastic.co/t/which-is-the-main-master-in-3-dedicated-master-node/240264)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 13\
**Last updated:** [July 13, 2020, 12:50pm UTC](https://discuss.elastic.co/t/which-is-the-main-master-in-3-dedicated-master-node/240264 "2020-07-13T12:50:36Z")

</div>

Suppose I have a 3 dedicated master node and 4 data nodes. At a moment are all 3 acting as a master or is there a supreme master between them so that when it goes down another is elected as Supreme Master ? Are 3 master…

---

## [Data modelling dilemma: Number of indices vs Sparse index](https://discuss.elastic.co/t/data-modelling-dilemma-number-of-indices-vs-sparse-index/158346)

<div class="topic-metadata">

**Author:** [@Jay\_Dihenkar](https://discuss.elastic.co/u/Jay_Dihenkar)\
**Replies:** 9\
**Last updated:** [November 29, 2018, 10:24am UTC](https://discuss.elastic.co/t/data-modelling-dilemma-number-of-indices-vs-sparse-index/158346 "2018-11-29T10:24:31Z")

</div>

We have an ES 5x setup and we create around 39 indices on monthly basis. Index distribution in the setup - https://gist.github.com/jay-dihenkar/80c9d3774b05027bd0f5db37df57b555 Cluster details - Nodes = 3 Heap = 31g …

---

## [java.lang.OutOfMemoryError: Java heap space on 5.1.2](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-on-5-1-2/71830)

<div class="topic-metadata">

**Author:** [@tramchamploo](https://discuss.elastic.co/u/tramchamploo)\
**Replies:** 9\
**Last updated:** [January 18, 2017, 10:03am UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-on-5-1-2/71830 "2017-01-18T10:03:13Z")

</div>

I formerly use 5.1.1 and encountered to this OOM, so I update to 5.1.2 it still happens.

---

## [GetTransformResponse unable to parse "source" field](https://discuss.elastic.co/t/gettransformresponse-unable-to-parse-source-field/254305)

<div class="topic-metadata">

**Author:** [@Craig\_Uss](https://discuss.elastic.co/u/Craig_Uss)\
**Replies:** 11\
**Last updated:** [November 6, 2020, 7:24pm UTC](https://discuss.elastic.co/t/gettransformresponse-unable-to-parse-source-field/254305 "2020-11-06T19:24:45Z")

</div>

ELK 7.8.1 Using Springboot 2.2.5 I am able to create a transform using the Kibana Stack Management and using the PUT \_transform curl command. However when trying to retrieve the same transform using the High Level REST…

---

## [After installing X-Pack into ELK am unable to view logs](https://discuss.elastic.co/t/after-installing-x-pack-into-elk-am-unable-to-view-logs/128912)

<div class="topic-metadata">

**Author:** [@imparker](https://discuss.elastic.co/u/imparker)\
**Replies:** 11\
**Last updated:** [April 25, 2018, 3:42pm UTC](https://discuss.elastic.co/t/after-installing-x-pack-into-elk-am-unable-to-view-logs/128912 "2018-04-25T15:42:23Z")

</div>

Installed X-pack into Elasticsearch, Logstash, & Kibana using this page. This was done after having an installation of ELK without xpack. I followed the docs when setting the components up, but am unable to view old or n…

---

## [Is it possible to do highlighting with knn and/or hybrid search?](https://discuss.elastic.co/t/is-it-possible-to-do-highlighting-with-knn-and-or-hybrid-search/354511)

<div class="topic-metadata">

**Author:** [@hadjebi](https://discuss.elastic.co/u/hadjebi)\
**Replies:** 12\
**Last updated:** [March 1, 2024, 9:26pm UTC](https://discuss.elastic.co/t/is-it-possible-to-do-highlighting-with-knn-and-or-hybrid-search/354511 "2024-03-01T21:26:28Z")

</div>

Is it possible to do highlighting with knn and/or hybrid search?

---

## [Failed to load BPF probes](https://discuss.elastic.co/t/failed-to-load-bpf-probes/339667)

<div class="topic-metadata">

**Author:** [@L1NG](https://discuss.elastic.co/u/L1NG)\
**Replies:** 9\
**Last updated:** [September 6, 2023, 6:28pm UTC](https://discuss.elastic.co/t/failed-to-load-bpf-probes/339667 "2023-09-06T18:28:10Z")

</div>

Hello, does anyone know how to resolve this issue? My kernel version is 6.4.5-1. el7.elrepo.x86\_ 64, the k8s version is v1.23.6, the system is CentOS Linux 7 (Core), and the Docker version is 24.0.5 state: 3 message: 1…

---

## [Elasticsearch output Plugin cant send data](https://discuss.elastic.co/t/elasticsearch-output-plugin-cant-send-data/64680)

<div class="topic-metadata">

**Author:** [@BADMAN](https://discuss.elastic.co/u/BADMAN)\
**Replies:** 9\
**Last updated:** [November 6, 2016, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-output-plugin-cant-send-data/64680 "2016-11-06T10:14:32Z")

</div>

Hi i upgraded my local ELK Stack to 5.0.0 . Now Logstash removes the elasticsearch hosturl so it doesnt push data to the Server. 2016-11-02T08:57:56,936\]\[DEBUG\]\[org.apache.http.impl.conn.DefaultHttpClientConnectionOp…

---

## [Filebaet and logstash encoding problem](https://discuss.elastic.co/t/filebaet-and-logstash-encoding-problem/330223)

<div class="topic-metadata">

**Author:** [@maks1001281](https://discuss.elastic.co/u/maks1001281)\
**Replies:** 15\
**Last updated:** [April 19, 2023, 3:00pm UTC](https://discuss.elastic.co/t/filebaet-and-logstash-encoding-problem/330223 "2023-04-19T15:00:01Z")

</div>

Hello, I can't understand why Logstash doesn't analyze logs from filebeat correctly, I see strange errors like: JSON parsing error, source data now in message field {:message=\>"Unexpected character ('\*' (code 42)): expe…

---

## [Filebeat Management - Output Configuration Block not saving](https://discuss.elastic.co/t/filebeat-management-output-configuration-block-not-saving/161380)

<div class="topic-metadata">

**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\
**Replies:** 21\
**Last updated:** [January 2, 2019, 6:35pm UTC](https://discuss.elastic.co/t/filebeat-management-output-configuration-block-not-saving/161380 "2019-01-02T18:35:48Z")

</div>

Hi, I'm using filebeat centralized management, and things are setting properly. But when I try to create a new beat tag with Output configuration block in Kibana UI it hanged in saving page and not saving it for me. …

---

## [Поиск решения CircuitBreakingException](https://discuss.elastic.co/t/circuitbreakingexception/211637)

<div class="topic-metadata">

**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\
**Replies:** 13\
**Last updated:** [December 30, 2019, 6:52am UTC](https://discuss.elastic.co/t/circuitbreakingexception/211637 "2019-12-30T06:52:48Z")

</div>

Здравствуйте! Сегодня произошел сбой в кластере, после чего перестал работать мониторинг. Все началось с ошибки, которую я указал ниже. \[2019-12-12T06:39:29,447\]\[WARN \]\[o.e.a.s.TransportClearScrollAction\] \[es-2\] Clear S…

---

## [Recherche de valeur distincte d'un champs](https://discuss.elastic.co/t/recherche-de-valeur-distincte-dun-champs/127308)

<div class="topic-metadata">

**Author:** [@olamy](https://discuss.elastic.co/u/olamy)\
**Replies:** 13\
**Last updated:** [April 10, 2018, 9:16pm UTC](https://discuss.elastic.co/t/recherche-de-valeur-distincte-dun-champs/127308 "2018-04-10T21:16:22Z")

</div>

Bonjour, Je stocke dans un index ce genre de document. Un search par un champs me donne curl -s -XGET 'localhost:9200/loadresult/result/\_search?pretty' -H 'Content-Type: application/json' -d' { "query" : { …

---

## [How does Logstash behave when Input file content is deleted?](https://discuss.elastic.co/t/how-does-logstash-behave-when-input-file-content-is-deleted/104570)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 9\
**Last updated:** [October 26, 2017, 4:19pm UTC](https://discuss.elastic.co/t/how-does-logstash-behave-when-input-file-content-is-deleted/104570 "2017-10-26T16:19:53Z")

</div>

Hi, I have a Logstash setup where it reads file(Linux server logs) as an input. But for every 5 days, content in that file will be deleted and new logs will be placed in the input file. Will Logstash be reading lines fr…

---

## [Scrolling is not intended for real time user requests - why?](https://discuss.elastic.co/t/scrolling-is-not-intended-for-real-time-user-requests-why/17647)

<div class="topic-metadata">

**Author:** [@Nikita\_Tovstoles](https://discuss.elastic.co/u/Nikita_Tovstoles)\
**Replies:** 9\
**Last updated:** [May 21, 2014, 8:34pm UTC](https://discuss.elastic.co/t/scrolling-is-not-intended-for-real-time-user-requests-why/17647 "2014-05-21T20:34:51Z")

</div>

I am looking at scroll to support a use case of paging through a list of products resulting from user checking off a number of product attribute filters in a typical ecommerce 'search & browse' scenario. Think some…

---

## [Unable to run Logstash](https://discuss.elastic.co/t/unable-to-run-logstash/250989)

<div class="topic-metadata">

**Author:** [@Javier\_Stauffenberg](https://discuss.elastic.co/u/Javier_Stauffenberg)\
**Replies:** 12\
**Last updated:** [October 6, 2020, 9:22am UTC](https://discuss.elastic.co/t/unable-to-run-logstash/250989 "2020-10-06T09:22:52Z")

</div>

Hi everyone, I am completely new to the ELK stack and have been following several tutorials to set up log stash and create an index from my csv file. Even following every step, and using the uploaded config files, I get…

---

## [Avoid too many useless field on elastic search - kibana](https://discuss.elastic.co/t/avoid-too-many-useless-field-on-elastic-search-kibana/274357)

<div class="topic-metadata">

**Author:** [@rebug](https://discuss.elastic.co/u/rebug)\
**Replies:** 9\
**Last updated:** [June 11, 2021, 7:30am UTC](https://discuss.elastic.co/t/avoid-too-many-useless-field-on-elastic-search-kibana/274357 "2021-06-11T07:30:03Z")

</div>

Hi, I am pretty new to this but, I have setup a elastic stack for starting a log centralization. I have just tested with Nginx log and syslog. My problem is the number of fields created (and many of them are useless a…

---

## [Coordinate Map - No Data](https://discuss.elastic.co/t/coordinate-map-no-data/222570)

<div class="topic-metadata">

**Author:** [@ads](https://discuss.elastic.co/u/ads)\
**Replies:** 14\
**Last updated:** [March 12, 2020, 12:42am UTC](https://discuss.elastic.co/t/coordinate-map-no-data/222570 "2020-03-12T00:42:12Z")

</div>

Hi, I am trying to create a coordinate map based off a geo\_point. However, no locations are being shown on my map. To get to this point I first created an index with a mapping: PUT cm\_delivery\_locations { "settings" :…

---

## [Can we create multiple searchbox with search and clear button for each of them. is this something can be implemented with react out of box library?](https://discuss.elastic.co/t/can-we-create-multiple-searchbox-with-search-and-clear-button-for-each-of-them-is-this-something-can-be-implemented-with-react-out-of-box-library/293949)

<div class="topic-metadata">

**Author:** [@pradeepjanga](https://discuss.elastic.co/u/pradeepjanga)\
**Replies:** 13\
**Last updated:** [January 20, 2022, 7:13pm UTC](https://discuss.elastic.co/t/can-we-create-multiple-searchbox-with-search-and-clear-button-for-each-of-them-is-this-something-can-be-implemented-with-react-out-of-box-library/293949 "2022-01-20T19:13:34Z")

</div>

we have currently one searchbox with search and clear button on it. But now we want to add another text box with similar functionality but with exact search on this one. is this something can be implemented ? if i use …

---

## [Not able to edit rules](https://discuss.elastic.co/t/not-able-to-edit-rules/314643)

<div class="topic-metadata">

**Author:** [@UweW](https://discuss.elastic.co/u/UweW)\
**Replies:** 11\
**Last updated:** [September 20, 2022, 5:01pm UTC](https://discuss.elastic.co/t/not-able-to-edit-rules/314643 "2022-09-20T17:01:39Z")

</div>

Hi, after updating from 8.2.3 to 8.4 it's no longer possible to edit the existing rules. Every time "Object type "siem.queryRule" is not registered." is shown. Hope somebody has an idea how to fix. another error occu…

[Previous page](https://discuss.elastic.co/top.md?page=146&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=148&per_page=50&period=all)
