# Top

**URL:** https://discuss.elastic.co/top.md?page=1575&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1576

---

## [JMS River](https://discuss.elastic.co/t/jms-river/5364)

<div class="topic-metadata">

**Author:** [@lalit\_mishra](https://discuss.elastic.co/u/lalit_mishra)\
**Replies:** 4\
**Last updated:** [September 19, 2011, 1:50pm UTC](https://discuss.elastic.co/t/jms-river/5364 "2011-09-19T13:50:39Z")

</div>

Hi Shay, In our project we receive documents which we want to index from a queue (IBM MQ server) and it will be nice to use JMS rather than using proprietary class. Could you please advise as to how I can get this wor…

---

## [Why I'm getting 0 results when fuzziness is more than 2?](https://discuss.elastic.co/t/why-im-getting-0-results-when-fuzziness-is-more-than-2/307883)

<div class="topic-metadata">

**Author:** [@asil](https://discuss.elastic.co/u/asil)\
**Replies:** 1\
**Last updated:** [June 22, 2022, 1:31pm UTC](https://discuss.elastic.co/t/why-im-getting-0-results-when-fuzziness-is-more-than-2/307883 "2022-06-22T13:31:13Z")

</div>

I'm using elastic search 7.6.2 I have index with the following mapping: "mappings": { "properties": { "content": {"type": "text"}, } } with 3 documents: michae…

---

## [Kibana Failed to load indices](https://discuss.elastic.co/t/kibana-failed-to-load-indices/216034)

<div class="topic-metadata">

**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 2:12pm UTC](https://discuss.elastic.co/t/kibana-failed-to-load-indices/216034 "2020-01-27T14:12:14Z")

</div>

Hello. When i upgraded Kibana ( and the whole elk stack from 7.4.1 to 7.5.1), everything went fine. Except that now i cannot create a new index pattern The developper console shows: What can i do ? I already tried t…

---

## [How to sum two metric inside a data table](https://discuss.elastic.co/t/how-to-sum-two-metric-inside-a-data-table/166944)

<div class="topic-metadata">

**Author:** [@mattbc](https://discuss.elastic.co/u/mattbc)\
**Replies:** 1\
**Last updated:** [February 5, 2019, 7:45pm UTC](https://discuss.elastic.co/t/how-to-sum-two-metric-inside-a-data-table/166944 "2019-02-05T19:45:57Z")

</div>

Hello, I've started to work with Kibana this week to make some graphs with the data I do have from Google Analytics. I'm trying to make a few calculations based on the columns that I already have in my visualizations wi…

---

## [How do I link multiple linked dashboards](https://discuss.elastic.co/t/how-do-i-link-multiple-linked-dashboards/120257)

<div class="topic-metadata">

**Author:** [@thormg](https://discuss.elastic.co/u/thormg)\
**Replies:** 1\
**Last updated:** [February 16, 2018, 9:29pm UTC](https://discuss.elastic.co/t/how-do-i-link-multiple-linked-dashboards/120257 "2018-02-16T21:29:42Z")

</div>

Example : Dashboard D1 : States in USA Dashboard D2 : Particular City in the state. Visualization V1 on D1 showing population count for the state. I want to build the Dashboard flow in a way where if I click on the P…

---

## [Elasticsearch indexing while rollover](https://discuss.elastic.co/t/elasticsearch-indexing-while-rollover/112158)

<div class="topic-metadata">

**Author:** [@khatkar](https://discuss.elastic.co/u/khatkar)\
**Replies:** 1\
**Last updated:** [December 18, 2017, 7:39am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-while-rollover/112158 "2017-12-18T07:39:01Z")

</div>

I have an application which writes to the ES and which also schedules time based index rollover based on max\_docs condition. What will happen if I try indexing during the rollover ? Does ES takes lock while performing …

---

## [Build NEST SearchDescriptor with Boost for Contract Price](https://discuss.elastic.co/t/build-nest-searchdescriptor-with-boost-for-contract-price/102307)

<div class="topic-metadata">

**Author:** [@ghohenstatt](https://discuss.elastic.co/u/ghohenstatt)\
**Replies:** 1\
**Last updated:** [October 6, 2017, 6:59am UTC](https://discuss.elastic.co/t/build-nest-searchdescriptor-with-boost-for-contract-price/102307 "2017-10-06T06:59:43Z")

</div>

Hello, I am tasked with an enhancement to a product search. The technology stack is NEST version 1.0.0.0 integrated with Visual Studio 2017 and running Elastic version 2.0. Sorry so old! I've been asked to ensure tha…

---

## [Returning multiple inner hits](https://discuss.elastic.co/t/returning-multiple-inner-hits/86794)

<div class="topic-metadata">

**Author:** [@bmills-Inkwrx](https://discuss.elastic.co/u/bmills-Inkwrx)\
**Replies:** 1\
**Last updated:** [May 23, 2017, 10:39am UTC](https://discuss.elastic.co/t/returning-multiple-inner-hits/86794 "2017-05-23T10:39:48Z")

</div>

I have a query that aims to return just the specified nested fields. GET data/\_search?pretty { "\_source":false, "query": { "nested":{ "path":"fields", "query":{ "match":{"fields.fieldId…

---

## [Doing nothing and CPU: 8% user, 10% system](https://discuss.elastic.co/t/doing-nothing-and-cpu-8-user-10-system/8363)

<div class="topic-metadata">

**Author:** [@Filirom1](https://discuss.elastic.co/u/Filirom1)\
**Replies:** 1\
**Last updated:** [July 10, 2012, 12:04pm UTC](https://discuss.elastic.co/t/doing-nothing-and-cpu-8-user-10-system/8363 "2012-07-10T12:04:46Z")

</div>

Hi, I am wondering why ES is using 20% of my CPU, even when alone, empty and doing nothing ? 04:05:01 PM CPU %user %nice %system %iowait %steal %idle 04:58:01 PM all 8.34 0.00 …

---

## [Elastic Version Release Cycle?](https://discuss.elastic.co/t/elastic-version-release-cycle/370429)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 2\
**Last updated:** [November 12, 2024, 9:54pm UTC](https://discuss.elastic.co/t/elastic-version-release-cycle/370429 "2024-11-12T21:54:30Z")

</div>

Random question, How often does elastic release a new major version? When is 8.16.0 coming out? What is the release cycle on minor versions? Also when is version 9.0 coming out?

---

## [Indices not rolling over](https://discuss.elastic.co/t/indices-not-rolling-over/275640)

<div class="topic-metadata">

**Author:** [@lchan](https://discuss.elastic.co/u/lchan)\
**Replies:** 2\
**Last updated:** [June 12, 2021, 4:55am UTC](https://discuss.elastic.co/t/indices-not-rolling-over/275640 "2021-06-12T04:55:14Z")

</div>

I am troubleshooting an issue where my indices (filebeats\*) are not rolling from hot to warm. I changed rollover max\_age=30d to max\_age=1d. However, the indices of the ILM action is "completed" and looks like they won't…

---

## [Message: file too big for single read](https://discuss.elastic.co/t/message-file-too-big-for-single-read/238348)

<div class="topic-metadata">

**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\
**Replies:** 2\
**Last updated:** [June 24, 2020, 6:55pm UTC](https://discuss.elastic.co/t/message-file-too-big-for-single-read/238348 "2020-06-24T18:55:28Z")

</div>

Hello, Logstash was working fine for me until this started happening. I can't start my logstash instance and I can't find some extra information on this error anywhere. \[2020-06-23T23:03:31,655\]\[INFO \]\[logstash.runner …

---

## [Kibana - Filter data where sum of field 1 \> sum of field 2](https://discuss.elastic.co/t/kibana-filter-data-where-sum-of-field-1-sum-of-field-2/113592)

<div class="topic-metadata">

**Author:** [@PedroMarques](https://discuss.elastic.co/u/PedroMarques)\
**Replies:** 2\
**Last updated:** [December 30, 2017, 9:35am UTC](https://discuss.elastic.co/t/kibana-filter-data-where-sum-of-field-1-sum-of-field-2/113592 "2017-12-30T09:35:40Z")

</div>

Hello. I'm trying to visualize terms of my data in a bar graph, showing two bars: one for the sum of src\_bytes and one for the sum of dst\_bytes. It is also important to order the terms based on the total number of bytes…

---

## [Filebeat process exits daily automatically](https://discuss.elastic.co/t/filebeat-process-exits-daily-automatically/74925)

<div class="topic-metadata">

**Author:** [@harshavardan25000](https://discuss.elastic.co/u/harshavardan25000)\
**Replies:** 2\
**Last updated:** [February 15, 2017, 3:54pm UTC](https://discuss.elastic.co/t/filebeat-process-exits-daily-automatically/74925 "2017-02-15T15:54:48Z")

</div>

Hi, The filebeat process exits automatically everyday. I manually start it every day for the agent to start shipping. The command I use to start the process is sudo nohup ./filebeat -c /etc/filebeat/filebeat.yml -…

---

## [CPU usage doubles and does not return to normal](https://discuss.elastic.co/t/cpu-usage-doubles-and-does-not-return-to-normal/52359)

<div class="topic-metadata">

**Author:** [@erempel](https://discuss.elastic.co/u/erempel)\
**Replies:** 2\
**Last updated:** [June 10, 2016, 6:54pm UTC](https://discuss.elastic.co/t/cpu-usage-doubles-and-does-not-return-to-normal/52359 "2016-06-10T18:54:14Z")

</div>

I have a 6 node cluster (2.3.3 java 1.8.0\_91) with only 3 nodes storing data. we are feeding our syslog stream into the nodes, so the load is fairly constant and consistent. After a few days of running, the CPU on the st…

---

## [Storage per heap?](https://discuss.elastic.co/t/storage-per-heap/52157)

<div class="topic-metadata">

**Author:** [@brain](https://discuss.elastic.co/u/brain)\
**Replies:** 2\
**Last updated:** [June 8, 2016, 6:48am UTC](https://discuss.elastic.co/t/storage-per-heap/52157 "2016-06-08T06:48:46Z")

</div>

is there a recommended storage size per heap for a node at all? for example; if you have 16GB heap would 5tb of data for that node be too much? or if you have a node with 32GB for the heap, can it handle 10tb of data? …

---

## [ElasticSearch vs. Solr search/update workflow plugability](https://discuss.elastic.co/t/elasticsearch-vs-solr-search-update-workflow-plugability/37606)

<div class="topic-metadata">

**Author:** [@Bob\_Lawson](https://discuss.elastic.co/u/Bob_Lawson)\
**Replies:** 2\
**Last updated:** [December 22, 2015, 3:20pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-solr-search-update-workflow-plugability/37606 "2015-12-22T15:20:30Z")

</div>

I just completed a project to extend Solr as follows: 1) subclassed the QueryComponent class to add a mandatory filter query (fq) for all user searches 2) subclassed the UpdateRequestProcessor class to add fields to …

---

## [\[Logstash Performance\]](https://discuss.elastic.co/t/logstash-performance/36904)

<div class="topic-metadata">

**Author:** [@varun\_kumar1](https://discuss.elastic.co/u/varun_kumar1)\
**Replies:** 2\
**Last updated:** [December 11, 2015, 7:39pm UTC](https://discuss.elastic.co/t/logstash-performance/36904 "2015-12-11T19:39:14Z")

</div>

I am running logstash with the following config input { file{ path =\> "D:/Log/\*/MIP/\*" start\_position =\> "beginning" } } filter{ mutate{ gsub =\> \["path","D:/Log/", ""\] } } output { s…

---

## [Creating Index Hangs](https://discuss.elastic.co/t/creating-index-hangs/1124)

<div class="topic-metadata">

**Author:** [@Phil\_Burress](https://discuss.elastic.co/u/Phil_Burress)\
**Replies:** 2\
**Last updated:** [May 22, 2015, 1:16am UTC](https://discuss.elastic.co/t/creating-index-hangs/1124 "2015-05-22T01:16:32Z")

</div>

I'm attempting to create an index using code as follows: client.admin().indices().prepareCreate("myindex").execute().actionGet(); However, it hangs on this line and eventually the JVM runs out of memory and dies. An…

---

## [How do you do rolling upgrade with Chef?](https://discuss.elastic.co/t/how-do-you-do-rolling-upgrade-with-chef/18921)

<div class="topic-metadata">

**Author:** [@Ron\_Sher](https://discuss.elastic.co/u/Ron_Sher)\
**Replies:** 2\
**Last updated:** [May 7, 2015, 9:10pm UTC](https://discuss.elastic.co/t/how-do-you-do-rolling-upgrade-with-chef/18921 "2015-05-07T21:10:04Z")

</div>

Hi, I know there's a guide on installing elasticsearch with Chef here but it looks like it's suitable for first installation or a complete cluster shutdown. I'm looking for an automated rolling upgra…

---

## [What is the difference between common terms query vs match query with cutoff\_frequency set](https://discuss.elastic.co/t/what-is-the-difference-between-common-terms-query-vs-match-query-with-cutoff-frequency-set/17466)

<div class="topic-metadata">

**Author:** [@Mike](https://discuss.elastic.co/u/Mike)\
**Replies:** 2\
**Last updated:** [May 30, 2014, 7:34pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-common-terms-query-vs-match-query-with-cutoff-frequency-set/17466 "2014-05-30T19:34:09Z")

</div>

I was reading up on the match query and noticed that it has a cutoff\_frequency parameter, which seems to do pretty much what the common terms query does. 1. What is the difference between the common and match…

---

## [Elasticearch and Power BI](https://discuss.elastic.co/t/elasticearch-and-power-bi/323250)

<div class="topic-metadata">

**Author:** [@palko.balazs](https://discuss.elastic.co/u/palko.balazs)\
**Replies:** 0\
**Last updated:** [January 16, 2023, 12:35pm UTC](https://discuss.elastic.co/t/elasticearch-and-power-bi/323250 "2023-01-16T12:35:02Z")

</div>

Hi, I'm trying to import our data stored in Elasticsearch into a BI Tool. I tried Power BI with ODBC using this guide and this guide for Tableau. I was able to get our data into both PowerBi and Tableau, however I'm st…

---

## [Cannot start docker image (elasticsearch 6.8](https://discuss.elastic.co/t/cannot-start-docker-image-elasticsearch-6-8/287161)

<div class="topic-metadata">

**Author:** [@ggiovinazzo](https://discuss.elastic.co/u/ggiovinazzo)\
**Replies:** 0\
**Last updated:** [October 20, 2021, 7:53am UTC](https://discuss.elastic.co/t/cannot-start-docker-image-elasticsearch-6-8/287161 "2021-10-20T07:53:05Z")

</div>

Hi all, This morning I updated my Ubuntu (20.4) dev machine kernel to version 5.4.0-89.100. When restarted my dev instance of Elasticsearch (6.8.2) was crashing with the following exception: \[2021-10-20T07:09:58,338\]\[…

---

## [Kibana Scripted Field HourOfDay](https://discuss.elastic.co/t/kibana-scripted-field-hourofday/311447)

<div class="topic-metadata">

**Author:** [@fim01](https://discuss.elastic.co/u/fim01)\
**Replies:** 3\
**Last updated:** [August 22, 2022, 8:14am UTC](https://discuss.elastic.co/t/kibana-scripted-field-hourofday/311447 "2022-08-22T08:14:14Z")

</div>

I followed documentation to create a simple scripted field to calculate HourOfDay doc\['@timestamp'\].date.hourOfDay error: { "took": 5, "timed\_out": false, "\_shards": { "total": 9, "successful": 8, …

---

## [My ES client always receives "Request execution exceeded the timeout"](https://discuss.elastic.co/t/my-es-client-always-receives-request-execution-exceeded-the-timeout/310309)

<div class="topic-metadata">

**Author:** [@fraf](https://discuss.elastic.co/u/fraf)\
**Replies:** 3\
**Last updated:** [July 26, 2022, 9:59am UTC](https://discuss.elastic.co/t/my-es-client-always-receives-request-execution-exceeded-the-timeout/310309 "2022-07-26T09:59:04Z")

</div>

Hi everyone, When validating my indexes on client side, requests are sent to my ES server. After 100s, I received a timeout exception from the client. Failure: org.hibernate.search.util.common.SearchException: HSEARCH4…

---

## [Recommended workflow for indexing many binary docs](https://discuss.elastic.co/t/recommended-workflow-for-indexing-many-binary-docs/275142)

<div class="topic-metadata">

**Author:** [@ottadini](https://discuss.elastic.co/u/ottadini)\
**Replies:** 3\
**Last updated:** [June 8, 2021, 6:50am UTC](https://discuss.elastic.co/t/recommended-workflow-for-indexing-many-binary-docs/275142 "2021-06-08T06:50:30Z")

</div>

I have two options in front of me - use fscrawler to crawl my directory, use the setting fs:store\_source (Base64-encoded document) to add the file as a field to the message, send that message to a pipeline on ES that h…

---

## [Агрессивный merge сегментов ES](https://discuss.elastic.co/t/merge-es/266829)

<div class="topic-metadata">

**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\
**Replies:** 3\
**Last updated:** [March 11, 2021, 6:14am UTC](https://discuss.elastic.co/t/merge-es/266829 "2021-03-11T06:14:34Z")

</div>

День добрый! В продолжение темы про "НЕ идеальный" подсчет \_score: Я попробовал настроить более агрессивный merge в ES, но не особо получилось. Из всех крутилов в: https://github.com/elastic/elasticsearch/blob/7.10/s…

---

## [SSH Access Rule](https://discuss.elastic.co/t/ssh-access-rule/235647)

<div class="topic-metadata">

**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\
**Replies:** 3\
**Last updated:** [June 13, 2020, 3:28am UTC](https://discuss.elastic.co/t/ssh-access-rule/235647 "2020-06-13T03:28:34Z")

</div>

To detect SSH access, I'm using the rule below: ## External access (warning: these can be expensive to audit). -a always,exit -F arch=b64 -S accept,bind,connect -F key=external-access This is generating a lot of events…

---

## [Problem with log processing](https://discuss.elastic.co/t/problem-with-log-processing/227911)

<div class="topic-metadata">

**Author:** [@Vlad\_Piratov](https://discuss.elastic.co/u/Vlad_Piratov)\
**Replies:** 3\
**Last updated:** [April 15, 2020, 1:01pm UTC](https://discuss.elastic.co/t/problem-with-log-processing/227911 "2020-04-15T13:01:56Z")

</div>

Version 7.6.2 Data is processed incorrectly. All dashboards are empty (I created a user for this, used sudo commands, and so on) Configured filebeat as follows: filebeat - \> Logstash - \> Elasticsearch. I tried differe…

---

## [Is there any way to implement document level security in app search?](https://discuss.elastic.co/t/is-there-any-way-to-implement-document-level-security-in-app-search/201154)

<div class="topic-metadata">

**Author:** [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)\
**Replies:** 3\
**Last updated:** [September 30, 2019, 11:59am UTC](https://discuss.elastic.co/t/is-there-any-way-to-implement-document-level-security-in-app-search/201154 "2019-09-30T11:59:01Z")

</div>

Hi Team, We need to implement security trimming on search result. Presently we are using App search and Search UI to show result. Can we implement document level security in app search ?

---

## [Benefit of using Static Template](https://discuss.elastic.co/t/benefit-of-using-static-template/133050)

<div class="topic-metadata">

**Author:** [@Varun\_Somani](https://discuss.elastic.co/u/Varun_Somani)\
**Replies:** 3\
**Last updated:** [May 24, 2018, 3:31am UTC](https://discuss.elastic.co/t/benefit-of-using-static-template/133050 "2018-05-24T03:31:38Z")

</div>

Are there any benefit of using static template over dynamic template? I was hoping to do some space optimizations. My input data are mostly constant but can change with addition of some fields To give more context, Mo…

---

## [CSV Export not available](https://discuss.elastic.co/t/csv-export-not-available/131693)

<div class="topic-metadata">

**Author:** [@8c94400b6593539aa485](https://discuss.elastic.co/u/8c94400b6593539aa485)\
**Replies:** 3\
**Last updated:** [May 14, 2018, 10:27am UTC](https://discuss.elastic.co/t/csv-export-not-available/131693 "2018-05-14T10:27:56Z")

</div>

Hi , On Kibana's Discover page I can only get Generate Printable PDF , I wish to get only CSV , How can I achieve that ? Thank you Avi. \[image\]

---

## [Search data last occurrence](https://discuss.elastic.co/t/search-data-last-occurrence/128128)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 3\
**Last updated:** [April 17, 2018, 10:12am UTC](https://discuss.elastic.co/t/search-data-last-occurrence/128128 "2018-04-17T10:12:34Z")

</div>

Hi, I have a data on multiple indexes and want to search it's last occurrence. Could you please help me on this. Here is the scenario: I have following indexes: acct-2018-03-01 , acct-2018-03-02 , acct-2018-03-03 ...…

---

## [How to set charset in input, filter and output in logstash conf fille](https://discuss.elastic.co/t/how-to-set-charset-in-input-filter-and-output-in-logstash-conf-fille/122843)

<div class="topic-metadata">

**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\
**Replies:** 0\
**Last updated:** [March 7, 2018, 8:19am UTC](https://discuss.elastic.co/t/how-to-set-charset-in-input-filter-and-output-in-logstash-conf-fille/122843 "2018-03-07T08:19:48Z")

</div>

Hi, I have in my logstash-plain.log this kind of log : \[2018-03-07T09:02:28,053\]\[WARN \]\[logstash.codecs.multiline\] Received an event that has a different character encoding than you configured. {:text=\>"\\\\u00002\\\\u0000…

---

## [How to point Monitoring to correct Indices](https://discuss.elastic.co/t/how-to-point-monitoring-to-correct-indices/94662)

<div class="topic-metadata">

**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\
**Replies:** 3\
**Last updated:** [July 27, 2017, 4:30pm UTC](https://discuss.elastic.co/t/how-to-point-monitoring-to-correct-indices/94662 "2017-07-27T16:30:58Z")

</div>

I have a single node monitoring cluster, which has been monitoring a larger cluster without issues for some time. This morning the main cluster had issues.. I've since recovered that cluster, but the monitoring node stil…

---

## [Index document with script](https://discuss.elastic.co/t/index-document-with-script/86222)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 3\
**Last updated:** [May 22, 2017, 2:33pm UTC](https://discuss.elastic.co/t/index-document-with-script/86222 "2017-05-22T14:33:57Z")

</div>

I have documents with a field named "num". I want to insert a new document with value (max "num" + 1) at that time in ES cluster. Is it possible to create an index w/script that does this? Can it promise atomicity and va…

---

## [All but the first snapshot not showing up in a s3-repository](https://discuss.elastic.co/t/all-but-the-first-snapshot-not-showing-up-in-a-s3-repository/79777)

<div class="topic-metadata">

**Author:** [@tanner-bruce](https://discuss.elastic.co/u/tanner-bruce)\
**Replies:** 3\
**Last updated:** [March 23, 2017, 9:35pm UTC](https://discuss.elastic.co/t/all-but-the-first-snapshot-not-showing-up-in-a-s3-repository/79777 "2017-03-23T21:35:24Z")

</div>

I have two clusters, one running 2.4 and the other 5.2.2. I created an S3-repo on the 2.4 cluster, and took a snapshot to s3. I then added this repo on the 5.2.2 cluster, and restored to it succesfully. Now, we have some…

---

## [Phonetic-Plugin in Maven-Repository is outdated](https://discuss.elastic.co/t/phonetic-plugin-in-maven-repository-is-outdated/70698)

<div class="topic-metadata">

**Author:** [@mpsabe](https://discuss.elastic.co/u/mpsabe)\
**Replies:** 3\
**Last updated:** [January 12, 2017, 12:15pm UTC](https://discuss.elastic.co/t/phonetic-plugin-in-maven-repository-is-outdated/70698 "2017-01-12T12:15:24Z")

</div>

https://www.elastic.co/guide/en/elasticsearch/plugins/current/analysis-phonetic.html http://mvnrepository.com/artifact/org.elasticsearch.plugin/analysis-phonetic I can download the current version from your Website, bu…

---

## [Filebeat loads record with error whereas same record works from STDIN](https://discuss.elastic.co/t/filebeat-loads-record-with-error-whereas-same-record-works-from-stdin/67986)

<div class="topic-metadata">

**Author:** [@Matt\_Simcox](https://discuss.elastic.co/u/Matt_Simcox)\
**Replies:** 3\
**Last updated:** [December 5, 2016, 11:57pm UTC](https://discuss.elastic.co/t/filebeat-loads-record-with-error-whereas-same-record-works-from-stdin/67986 "2016-12-05T23:57:20Z")

</div>

Just getting started with ES and I've hit a snag. I have logstash being fed data by filebeat on server1. Logstash then sends data to Elasticsearch on server2. If I set logstash to read the following line from stdin i…

---

## [Need help framing index, id and document](https://discuss.elastic.co/t/need-help-framing-index-id-and-document/54117)

<div class="topic-metadata">

**Author:** [@sampathkumar23](https://discuss.elastic.co/u/sampathkumar23)\
**Replies:** 3\
**Last updated:** [June 29, 2016, 12:40pm UTC](https://discuss.elastic.co/t/need-help-framing-index-id-and-document/54117 "2016-06-29T12:40:07Z")

</div>

we have problem statement. We want to load around 50 million email addresses into elastic search in the initial load(probably chunking into several splits). later on we will be adding in few thousands every day. Email …

---

## [Why the logstash running so slowly?](https://discuss.elastic.co/t/why-the-logstash-running-so-slowly/44664)

<div class="topic-metadata">

**Author:** [@lester015](https://discuss.elastic.co/u/lester015)\
**Replies:** 3\
**Last updated:** [March 17, 2016, 11:59am UTC](https://discuss.elastic.co/t/why-the-logstash-running-so-slowly/44664 "2016-03-17T11:59:59Z")

</div>

hi everyone, I found the logstash running my conf file so slowly,Anyone has an solution? My conf file is very easy. a. stdin.conf contents is input { stdin { add\_field =\> {"key" =\> "value"} c…

---

## [Connecting Linux and Windows Eastic servers](https://discuss.elastic.co/t/connecting-linux-and-windows-eastic-servers/21291)

<div class="topic-metadata">

**Author:** [@Gal\_Artsi](https://discuss.elastic.co/u/Gal_Artsi)\
**Replies:** 3\
**Last updated:** [December 17, 2014, 6:27pm UTC](https://discuss.elastic.co/t/connecting-linux-and-windows-eastic-servers/21291 "2014-12-17T18:27:26Z")

</div>

hey guys! i need a little help here. i am trying to create a cluster with 3 linux machines and a few windows machines, but i want the windows machine to do nothing and that all of the work will be on the linux machi…

---

## [Retrieve the configured max\_clause\_count setting 8.x](https://discuss.elastic.co/t/retrieve-the-configured-max-clause-count-setting-8-x/359873)

<div class="topic-metadata">

**Author:** [@mengjiann](https://discuss.elastic.co/u/mengjiann)\
**Replies:** 5\
**Last updated:** [June 1, 2024, 3:16am UTC](https://discuss.elastic.co/t/retrieve-the-configured-max-clause-count-setting-8-x/359873 "2024-06-01T03:16:25Z")

</div>

Hi, I understand that indices.query.bool.max\_clause\_count is deprecated in 8.x. The calculation is performed dynamically depending on the heap size and also the thread pool. But is there is a way to retrieve it durin…

---

## [How to (offsite) backup and recover snapshots](https://discuss.elastic.co/t/how-to-offsite-backup-and-recover-snapshots/312081)

<div class="topic-metadata">

**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\
**Replies:** 5\
**Last updated:** [August 15, 2022, 10:30am UTC](https://discuss.elastic.co/t/how-to-offsite-backup-and-recover-snapshots/312081 "2022-08-15T10:30:15Z")

</div>

Hi - have a ES cluster consisting of lets say 20 nodes for arguments sake. Of course the indexes and shards are spread across the nodes... now lets say I do a snapshot. It looks like each node snapshots the data on its…

---

## [Concerns with scaling Logstash when using the Aggregate filter](https://discuss.elastic.co/t/concerns-with-scaling-logstash-when-using-the-aggregate-filter/279855)

<div class="topic-metadata">

**Author:** [@nsouth](https://discuss.elastic.co/u/nsouth)\
**Replies:** 5\
**Last updated:** [July 30, 2021, 11:26am UTC](https://discuss.elastic.co/t/concerns-with-scaling-logstash-when-using-the-aggregate-filter/279855 "2021-07-30T11:26:55Z")

</div>

The aggregate filter is working great in my testing, but I'm concerned about scale because it is stateful and requires setting filter workers to 1 (-w 1 flag). We have about 150 servers, each of which will generate ~2GB …

---

## [Running custom aggregations in ES](https://discuss.elastic.co/t/running-custom-aggregations-in-es/243213)

<div class="topic-metadata">

**Author:** [@yBother](https://discuss.elastic.co/u/yBother)\
**Replies:** 5\
**Last updated:** [August 24, 2020, 5:31pm UTC](https://discuss.elastic.co/t/running-custom-aggregations-in-es/243213 "2020-08-24T17:31:36Z")

</div>

Is it possible to run custom "aggregations" directly db side? I know there are builtin functionalities like averaging etc. But I want to run a custom function on the data that is stored in a specific index.

---

## [No anomalies on live data](https://discuss.elastic.co/t/no-anomalies-on-live-data/149272)

<div class="topic-metadata">

**Author:** [@vinay\_2498](https://discuss.elastic.co/u/vinay_2498)\
**Replies:** 5\
**Last updated:** [September 21, 2018, 9:26am UTC](https://discuss.elastic.co/t/no-anomalies-on-live-data/149272 "2018-09-21T09:26:04Z")

</div>

Hi, The machine learning advance job of detecting anomalies in the network data is trained with two months of data. But when I test the model with real-time live data I can see the spike on the graph but no anomalies ar…

---

## [Logstash.service can not read nginx access.log](https://discuss.elastic.co/t/logstash-service-can-not-read-nginx-access-log/104066)

<div class="topic-metadata">

**Author:** [@bo8888](https://discuss.elastic.co/u/bo8888)\
**Replies:** 5\
**Last updated:** [October 16, 2017, 2:00pm UTC](https://discuss.elastic.co/t/logstash-service-can-not-read-nginx-access-log/104066 "2017-10-16T14:00:54Z")

</div>

vim /etc/systemd/system/logstash.service User=logstash Group=logstash /etc/logstash/conf.d/nginx.conf it is not work well but vim /etc/systemd/system/logstash.service User=root Group=root it is work well access…

---

## [Understanding doc\_values?](https://discuss.elastic.co/t/understanding-doc-values/20114)

<div class="topic-metadata">

**Author:** [@Michael\_Gallego\_2](https://discuss.elastic.co/u/Michael_Gallego_2)\
**Replies:** 5\
**Last updated:** [October 9, 2014, 2:50pm UTC](https://discuss.elastic.co/t/understanding-doc-values/20114 "2014-10-09T14:50:51Z")

</div>

Hi, With the release of Elasticsearch 1.4, I discovered about doc\_values. However their use remains a bit obscure for me, and the documentation didn't help. As I understand it, it is mostly useful when performing …

---

## [Does Elasticsearch and kibana use bzip2](https://discuss.elastic.co/t/does-elasticsearch-and-kibana-use-bzip2/267507)

<div class="topic-metadata">

**Author:** [@nkarthik](https://discuss.elastic.co/u/nkarthik)\
**Replies:** 8\
**Last updated:** [March 26, 2021, 3:07am UTC](https://discuss.elastic.co/t/does-elasticsearch-and-kibana-use-bzip2/267507 "2021-03-26T03:07:38Z")

</div>

Hi, Does kibana or Elasticsearch use bzip2 ? If yes, How can I check what is the current version?

[Previous page](https://discuss.elastic.co/top.md?page=1574&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1576&per_page=50&period=all)
