# Top

**URL:** https://discuss.elastic.co/top.md?page=1618&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1619

---

## [Weird error using AWS Elasticsearch with Laravel ES packages](https://discuss.elastic.co/t/weird-error-using-aws-elasticsearch-with-laravel-es-packages/168979)

<div class="topic-metadata">

**Author:** [@megusta420](https://discuss.elastic.co/u/megusta420)\
**Replies:** 3\
**Last updated:** [February 19, 2019, 9:43am UTC](https://discuss.elastic.co/t/weird-error-using-aws-elasticsearch-with-laravel-es-packages/168979 "2019-02-19T09:43:54Z")

</div>

Using these packages: Here is my dotenv: ES\_HOST=search-\*\*\*\*-w3skhs3k55\*\*\*\*\*trko6qhjsxq.eu-central-1.es.amazonaws.com ES\_PORT=443 ES\_SCHEME=https I'm getting this error while trying to add an index: {"message…

---

## [Not able to see sense](https://discuss.elastic.co/t/not-able-to-see-sense/108042)

<div class="topic-metadata">

**Author:** [@avenky](https://discuss.elastic.co/u/avenky)\
**Replies:** 3\
**Last updated:** [November 17, 2017, 4:04am UTC](https://discuss.elastic.co/t/not-able-to-see-sense/108042 "2017-11-17T04:04:46Z")

</div>

Hi All, I am running kibana 6.0 with elastic 5.6.2. I read Kibana 6.0 comes with Sense. But it shows me the same web page with the Cluster status when i clicked on any items on left include Dev Tools. Can some one t…

---

## [Ingest attachment - missing attachment field in results](https://discuss.elastic.co/t/ingest-attachment-missing-attachment-field-in-results/103656)

<div class="topic-metadata">

**Author:** [@Shawn\_Mullen\_2](https://discuss.elastic.co/u/Shawn_Mullen_2)\
**Replies:** 3\
**Last updated:** [October 12, 2017, 12:03pm UTC](https://discuss.elastic.co/t/ingest-attachment-missing-attachment-field-in-results/103656 "2017-10-12T12:03:25Z")

</div>

I have read everything I could find but I have not been able to get the ingest attachment plugin to work. I am using the mapping below: { "settings": { "analysis": { "analyzer": { "lower\_keyword\_ana…

---

## [Does the Final Flow log aggregate the previous (non-final) flow logs?](https://discuss.elastic.co/t/does-the-final-flow-log-aggregate-the-previous-non-final-flow-logs/93797)

<div class="topic-metadata">

**Author:** [@Bobby](https://discuss.elastic.co/u/Bobby)\
**Replies:** 3\
**Last updated:** [July 19, 2017, 9:40pm UTC](https://discuss.elastic.co/t/does-the-final-flow-log-aggregate-the-previous-non-final-flow-logs/93797 "2017-07-19T21:40:49Z")

</div>

Hi, I'm looking to get clarification on what my flow logs are telling me. For a given request, I'd like to know the total number of bytes that have been sent and received by that request. Currently, I have my period c…

---

## [Show line not working in Dashboard](https://discuss.elastic.co/t/show-line-not-working-in-dashboard/84907)

<div class="topic-metadata">

**Author:** [@Riyazur\_Rahaman](https://discuss.elastic.co/u/Riyazur_Rahaman)\
**Replies:** 3\
**Last updated:** [May 9, 2017, 6:11am UTC](https://discuss.elastic.co/t/show-line-not-working-in-dashboard/84907 "2017-05-09T06:11:26Z")

</div>

I have unchecked the show line in line chart then I saved the same and when I open it in dashboard the line is coming in 5.4.

---

## [GeoIP filter missing some ECS fields](https://discuss.elastic.co/t/geoip-filter-missing-some-ecs-fields/333339)

<div class="topic-metadata">

**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\
**Replies:** 7\
**Last updated:** [May 17, 2023, 5:18am UTC](https://discuss.elastic.co/t/geoip-filter-missing-some-ecs-fields/333339 "2023-05-17T05:18:00Z")

</div>

I am using the GeoIP Logstash filter and it seems to not have some desired fields for example \[mmdb\]\[isp\]. Overall it has no as or mmdb fields, as well as some other random fields. It does have all the geo fields however…

---

## [Json for setting up new indices](https://discuss.elastic.co/t/json-for-setting-up-new-indices/311135)

<div class="topic-metadata">

**Author:** [@jhop](https://discuss.elastic.co/u/jhop)\
**Replies:** 7\
**Last updated:** [August 1, 2022, 10:09pm UTC](https://discuss.elastic.co/t/json-for-setting-up-new-indices/311135 "2022-08-01T22:09:30Z")

</div>

Sorry for the simple question but the documentation was not clear to me. I am using python to send data to elasticsearch. Should we always define an index before using json specifying this index to populate elasticsearc…

---

## [UDP packets cover 50% of packetbeat logs](https://discuss.elastic.co/t/udp-packets-cover-50-of-packetbeat-logs/272689)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 7\
**Last updated:** [May 18, 2021, 8:34am UTC](https://discuss.elastic.co/t/udp-packets-cover-50-of-packetbeat-logs/272689 "2021-05-18T08:34:24Z")

</div>

Hi, I can see that 50% of my packetbeat logs are from network.transport: udp . In terms of SIEM perspective do I need this types of logs in kibana? (I don't use any VOIP or streaming services on my monitored machine.) …

---

## [Unable to show region maps on Dashboard](https://discuss.elastic.co/t/unable-to-show-region-maps-on-dashboard/246012)

<div class="topic-metadata">

**Author:** [@krishnendu](https://discuss.elastic.co/u/krishnendu)\
**Replies:** 7\
**Last updated:** [August 24, 2020, 2:58pm UTC](https://discuss.elastic.co/t/unable-to-show-region-maps-on-dashboard/246012 "2020-08-24T14:58:36Z")

</div>

I have been able to create a map visualisation. But the tiles do not load when the map is put into a dashboard. Visualisatuion : In Dashboard: Can someone help me ?

---

## [Terms may be incomplete because the request is taking too long](https://discuss.elastic.co/t/terms-may-be-incomplete-because-the-request-is-taking-too-long/228899)

<div class="topic-metadata">

**Author:** [@jpigott](https://discuss.elastic.co/u/jpigott)\
**Replies:** 1\
**Last updated:** [April 20, 2020, 4:24pm UTC](https://discuss.elastic.co/t/terms-may-be-incomplete-because-the-request-is-taking-too-long/228899 "2020-04-20T16:24:15Z")

</div>

I am hosted in the Elastic Cloud and a new subscriber. I am using the experimental controls filter option (which is awesome) but receiving this error when the pages are loading."Terms may be incomplete because the reque…

---

## [Kibana dashboards export/import not working](https://discuss.elastic.co/t/kibana-dashboards-export-import-not-working/221118)

<div class="topic-metadata">

**Author:** [@kriket](https://discuss.elastic.co/u/kriket)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 6:09pm UTC](https://discuss.elastic.co/t/kibana-dashboards-export-import-not-working/221118 "2020-03-12T18:09:50Z")

</div>

We have 2 different Elasticsearch clusters (A-cluster & B-cluster) - The incoming data stream is pretty similar in both clusters. But the index naming differs in both clusters. I'm having trouble export the dashboards f…

---

## [Any solution?](https://discuss.elastic.co/t/any-solution/204984)

<div class="topic-metadata">

**Author:** [@pbona](https://discuss.elastic.co/u/pbona)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 2:58am UTC](https://discuss.elastic.co/t/any-solution/204984 "2019-10-24T02:58:41Z")

</div>

\[root@elastic ~\]# auditbeat setup --dashboards Loading dashboards (Kibana must be running and reachable) Exiting: Failed to import dashboard: Failed to load directory /usr/share/auditbeat/kibana/7/dashboard: error loa…

---

## [\[Plugin visualization\] CORS policy error message with ElasticsearchJS](https://discuss.elastic.co/t/plugin-visualization-cors-policy-error-message-with-elasticsearchjs/167994)

<div class="topic-metadata">

**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\
**Replies:** 1\
**Last updated:** [February 12, 2019, 9:21am UTC](https://discuss.elastic.co/t/plugin-visualization-cors-policy-error-message-with-elasticsearchjs/167994 "2019-02-12T09:21:20Z")

</div>

Hi guys, I developed a kibana plugin visualization integrating elasticsearch-browser to comunicate with elasticsearch. When I configure elasticsearch-browser with an angularJS application, if I try to ping my ES instan…

---

## [Unit elasticsearch.service entered failed state.--X](https://discuss.elastic.co/t/unit-elasticsearch-service-entered-failed-state-x/143034)

<div class="topic-metadata">

**Author:** [@Deepakny](https://discuss.elastic.co/u/Deepakny)\
**Replies:** 1\
**Last updated:** [August 5, 2018, 6:14am UTC](https://discuss.elastic.co/t/unit-elasticsearch-service-entered-failed-state-x/143034 "2018-08-05T06:14:23Z")

</div>

\[root@ip-\*\*\*\*\*\*\*\*\*\* ~\]# sudo service elasticsearch start Starting elasticsearch (via systemctl): \[ OK \] \[root@ip-\*\*\*\*\*\*\*\*\*\* ~\]# sudo service elasticsearch status ● elasticsearch.service - Starts…

---

## [Parent child RelationShip with ES 5.X](https://discuss.elastic.co/t/parent-child-relationship-with-es-5-x/107668)

<div class="topic-metadata">

**Author:** [@Narmatha](https://discuss.elastic.co/u/Narmatha)\
**Replies:** 1\
**Last updated:** [November 16, 2017, 9:38pm UTC](https://discuss.elastic.co/t/parent-child-relationship-with-es-5-x/107668 "2017-11-16T21:38:59Z")

</div>

I am changing the nested object model to parent child model. Since type is going to get removed from elasticsearch 6.x onwards. Do we have parent-child relationship still ? Then how to achieve this ?

---

## [How frequently is the circuit breaker tripped metric in /\_node/stats API refreshed?](https://discuss.elastic.co/t/how-frequently-is-the-circuit-breaker-tripped-metric-in--node-stats-api-refreshed/100956)

<div class="topic-metadata">

**Author:** [@srinivasc](https://discuss.elastic.co/u/srinivasc)\
**Replies:** 1\
**Last updated:** [September 19, 2017, 10:37pm UTC](https://discuss.elastic.co/t/how-frequently-is-the-circuit-breaker-tripped-metric-in--node-stats-api-refreshed/100956 "2017-09-19T22:37:21Z")

</div>

Even though field data breaker was triggered on my cluster, the metric still shows it as 0. curl localhost:9200/\_nodes/stats/breaker?pretty { "\_nodes" : { "total" : 1, "successful" : 1, "failed" : 0 }, "cluster\_n…

---

## [Pass result from first query to another one](https://discuss.elastic.co/t/pass-result-from-first-query-to-another-one/97681)

<div class="topic-metadata">

**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\
**Replies:** 1\
**Last updated:** [August 20, 2017, 5:28pm UTC](https://discuss.elastic.co/t/pass-result-from-first-query-to-another-one/97681 "2017-08-20T17:28:10Z")

</div>

GET logstash-2017.08.14/gateway\_logs/\_search { "query": { "bool": { "must": { "match": { "status": "logged in"} } } } } The output is that: { "\_index": "logstash-2017.08.14", "\_type": "gateway\_logs", "\_i…

---

## [Synonyms not working with diacritic chars](https://discuss.elastic.co/t/synonyms-not-working-with-diacritic-chars/94623)

<div class="topic-metadata">

**Author:** [@wiert](https://discuss.elastic.co/u/wiert)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 10:20am UTC](https://discuss.elastic.co/t/synonyms-not-working-with-diacritic-chars/94623 "2017-07-27T10:20:47Z")

</div>

Hi, I'm using ES 5.5 and I'm unable to put some words into the synonyms file (støvmaske, buntebånd, etc). When putting the filter { "settings": { "analysis": { "analyzer": { "synonym\_analyzer": { "t…

---

## [Failed to execute \[org.elasticsearch.action.search.SearchRequest@71328a37\] lastShard \[true\]](https://discuss.elastic.co/t/failed-to-execute-org-elasticsearch-action-search-searchrequest-71328a37-lastshard-true/87007)

<div class="topic-metadata">

**Author:** [@yedukondalu](https://discuss.elastic.co/u/yedukondalu)\
**Replies:** 1\
**Last updated:** [May 25, 2017, 9:37am UTC](https://discuss.elastic.co/t/failed-to-execute-org-elasticsearch-action-search-searchrequest-71328a37-lastshard-true/87007 "2017-05-25T09:37:46Z")

</div>

\[2017-05-24 15:58:22,695\]\[DEBUG\]\[action.search.type \] \[Ajax\] \[cms-2017-w18\]\[2\], node\[Esi\_VQ09S9C6Aw7n6bjsyg\], \[P\], s\[STARTED\]: Failed to execute \[org.elasticsearch.action.search.SearchRequest@71328a37\] lastShard \[t…

---

## [Сортировка объектов по условию](https://discuss.elastic.co/t/topic/44487)

<div class="topic-metadata">

**Author:** [@serge](https://discuss.elastic.co/u/serge)\
**Replies:** 1\
**Last updated:** [March 18, 2016, 12:55am UTC](https://discuss.elastic.co/t/topic/44487 "2016-03-18T00:55:41Z")

</div>

Здравствуйте, есть индекс товаров различных компаний, товар можно маркировать как промо. Раньше промо товары компаний в результате сортировки оказывались первыми в поисковой выдаче. Теперь кейс изменился и необходимо пер…

---

## [Using logstash to reindex Elasticsearch](https://discuss.elastic.co/t/using-logstash-to-reindex-elasticsearch/29493)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 1\
**Last updated:** [September 17, 2015, 10:32pm UTC](https://discuss.elastic.co/t/using-logstash-to-reindex-elasticsearch/29493 "2015-09-17T22:32:43Z")

</div>

I recently read DavidPilato's blog post : http://david.pilato.fr/blog/2015/05/20/reindex-elasticsearch-with-logstash/ Its a cool thing you can do, and for the most part it works just like David mentioned except for some …

---

## [.net agent with masstransit rabbitmq transactions](https://discuss.elastic.co/t/net-agent-with-masstransit-rabbitmq-transactions/332260)

<div class="topic-metadata">

**Author:** [@Joao\_Cardoso](https://discuss.elastic.co/u/Joao_Cardoso)\
**Replies:** 2\
**Last updated:** [May 26, 2023, 9:02am UTC](https://discuss.elastic.co/t/net-agent-with-masstransit-rabbitmq-transactions/332260 "2023-05-26T09:02:23Z")

</div>

Hello, Im using .net 6 with MassTransit and RabbitMQ and i'm trying to figure out how can i have the APM transactions of my messages being consumed. I saw the .net agent has integration with rabbitMQ nowdays but i wasn'…

---

## [Elasticsearch config issue](https://discuss.elastic.co/t/elasticsearch-config-issue/321999)

<div class="topic-metadata">

**Author:** [@Lakshmi\_Kumari](https://discuss.elastic.co/u/Lakshmi_Kumari)\
**Replies:** 2\
**Last updated:** [December 26, 2022, 6:11pm UTC](https://discuss.elastic.co/t/elasticsearch-config-issue/321999 "2022-12-26T18:11:05Z")

</div>

Running a duplicate node for the first time in the server, getting below issue. \[ERROR\]\[o.e.b.Elasticsearch \] \[node-1\] fatal exception while booting Elasticsearch org.elasticsearch.http.BindHttpException: Failed to…

---

## [Wildcard search based on a field like Splunk?](https://discuss.elastic.co/t/wildcard-search-based-on-a-field-like-splunk/295250)

<div class="topic-metadata">

**Author:** [@jlrMantu](https://discuss.elastic.co/u/jlrMantu)\
**Replies:** 2\
**Last updated:** [February 7, 2022, 3:04pm UTC](https://discuss.elastic.co/t/wildcard-search-based-on-a-field-like-splunk/295250 "2022-02-07T15:04:13Z")

</div>

Hello, Sorry if this has been posted before, I couldn't find. We are currently using Splunk but moving to Elastic / Kibana. On Splunk, we have some Fields in the dashboard, and when we search for a value, the search su…

---

## [Regexp Not Evaluating as Expected](https://discuss.elastic.co/t/regexp-not-evaluating-as-expected/251954)

<div class="topic-metadata">

**Author:** [@eafrost.cissp](https://discuss.elastic.co/u/eafrost.cissp)\
**Replies:** 2\
**Last updated:** [October 15, 2020, 6:56am UTC](https://discuss.elastic.co/t/regexp-not-evaluating-as-expected/251954 "2020-10-15T06:56:54Z")

</div>

I'm trying to drop events for which the winlog.event\_data.TargetUserName ends with $ but keep the event when winlog.event\_data.TargetUserName has $ not as the end character. Using the regular expressions 101 tester (http…

---

## [Horizontal and vertical upgrade of eck cluster](https://discuss.elastic.co/t/horizontal-and-vertical-upgrade-of-eck-cluster/210309)

<div class="topic-metadata">

**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\
**Replies:** 2\
**Last updated:** [January 31, 2020, 3:46am UTC](https://discuss.elastic.co/t/horizontal-and-vertical-upgrade-of-eck-cluster/210309 "2020-01-31T03:46:09Z")

</div>

As per the documentation, I tried doing upgrades of the cluster using some of the examples given in https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-orchestration.html a) Horizontal upgrade: I see a new service …

---

## [Install kibana plugin](https://discuss.elastic.co/t/install-kibana-plugin/171824)

<div class="topic-metadata">

**Author:** [@Welton\_Leao\_Machado](https://discuss.elastic.co/u/Welton_Leao_Machado)\
**Replies:** 2\
**Last updated:** [March 11, 2019, 6:39pm UTC](https://discuss.elastic.co/t/install-kibana-plugin/171824 "2019-03-11T18:39:10Z")

</div>

I i'm trying to install a plugin chart on kibana and have not successful. I tried to install following way. Executing this command in KIBANA\_HOME/bin ./kibana-plugin install https://github.com/dlumbrer/kbn\_radar/relea…

---

## [\[ingest pipeline\] set convert in string](https://discuss.elastic.co/t/ingest-pipeline-set-convert-in-string/161806)

<div class="topic-metadata">

**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\
**Replies:** 2\
**Last updated:** [December 25, 2018, 6:52am UTC](https://discuss.elastic.co/t/ingest-pipeline-set-convert-in-string/161806 "2018-12-25T06:52:56Z")

</div>

Hi, Using Elasticsearch 6.5.1 I tried to set a value using set and my new value become a string: Here my debug simulate: POST \_ingest/pipeline/\_simulate { "pipeline" : { "description": "debug", "processors": …

---

## [Impossible to use both Monitoring and DevTools Console with monitoring cluster on basic license(!)?](https://discuss.elastic.co/t/impossible-to-use-both-monitoring-and-devtools-console-with-monitoring-cluster-on-basic-license/104756)

<div class="topic-metadata">

**Author:** [@aaron\_ximm](https://discuss.elastic.co/u/aaron_ximm)\
**Replies:** 2\
**Last updated:** [October 23, 2017, 11:16pm UTC](https://discuss.elastic.co/t/impossible-to-use-both-monitoring-and-devtools-console-with-monitoring-cluster-on-basic-license/104756 "2017-10-23T23:16:55Z")

</div>

Hi, I am in the process of migrating production services from ESv2 (last) to ES 5.6.3. I have encountered a huge headache trying to replicate our vanilla management/monitoring setup with the 5.x Kibana - XPack Monitor…

---

## [How to configure my packbeat to write http access information in my index?](https://discuss.elastic.co/t/how-to-configure-my-packbeat-to-write-http-access-information-in-my-index/91199)

<div class="topic-metadata">

**Author:** [@esportuga](https://discuss.elastic.co/u/esportuga)\
**Replies:** 2\
**Last updated:** [June 29, 2017, 8:11pm UTC](https://discuss.elastic.co/t/how-to-configure-my-packbeat-to-write-http-access-information-in-my-index/91199 "2017-06-29T20:11:56Z")

</div>

I want to record the access information to websites coming from a pc. I am using packetbeat but the information that is recorded still does not answer me. I believe I'm configuring wrong my packetbeat.yml file

---

## [Filebeat can't fetch the noeol(no end-of-line) file](https://discuss.elastic.co/t/filebeat-cant-fetch-the-noeol-no-end-of-line-file/90579)

<div class="topic-metadata">

**Author:** [@huzhengkai](https://discuss.elastic.co/u/huzhengkai)\
**Replies:** 2\
**Last updated:** [June 24, 2017, 1:35pm UTC](https://discuss.elastic.co/t/filebeat-cant-fetch-the-noeol-no-end-of-line-file/90579 "2017-06-24T13:35:14Z")

</div>

Forgive my poor English,I'm a chinese.I use the filebeat 5.2.0,our system is Linux 2.6.32-431.el6.x86\_64.My colleague keep generating many new files by the Spring.All those file have only one line of data(json). When v…

---

## [ES-Hadoop 5.1.1 performance](https://discuss.elastic.co/t/es-hadoop-5-1-1-performance/71492)

<div class="topic-metadata">

**Author:** [@Tommaso\_Anzidei](https://discuss.elastic.co/u/Tommaso_Anzidei)\
**Replies:** 2\
**Last updated:** [January 17, 2017, 8:47am UTC](https://discuss.elastic.co/t/es-hadoop-5-1-1-performance/71492 "2017-01-17T08:47:39Z")

</div>

Hello, we upgraded Elasticsearch to 5.1.1 from 2.1. After that upgrade we noticed a loss of performance in running hive queries against an external table linked to an Elasticsearch index. The same query used to take 30 m…

---

## [How do you merge the syslogs from network device into message queue when logstash scales out?](https://discuss.elastic.co/t/how-do-you-merge-the-syslogs-from-network-device-into-message-queue-when-logstash-scales-out/66032)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [November 17, 2016, 10:24am UTC](https://discuss.elastic.co/t/how-do-you-merge-the-syslogs-from-network-device-into-message-queue-when-logstash-scales-out/66032 "2016-11-17T10:24:01Z")

</div>

I'd like to ask question about the theory of scale out process for logstash. I am planning to have 2300 evt/sec events into logstash. This number includes both from filebeat and syslog of network device. But number of…

---

## [Map Files to specific Ingest Pipelines](https://discuss.elastic.co/t/map-files-to-specific-ingest-pipelines/55063)

<div class="topic-metadata">

**Author:** [@sirsteve](https://discuss.elastic.co/u/sirsteve)\
**Replies:** 2\
**Last updated:** [July 8, 2016, 3:32pm UTC](https://discuss.elastic.co/t/map-files-to-specific-ingest-pipelines/55063 "2016-07-08T15:32:17Z")

</div>

Hi, I'm playing around with the new Elastic5 products and am interested in using the ingest node feature with Filebeat as the agent. I have a server that runs several applications with different log files/formats and …

---

## [OpenJDK](https://discuss.elastic.co/t/openjdk/14754)

<div class="topic-metadata">

**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Replies:** 2\
**Last updated:** [December 7, 2013, 2:24am UTC](https://discuss.elastic.co/t/openjdk/14754 "2013-12-07T02:24:46Z")

</div>

What is the status on OpenJDK support? What is broken about it? I only ask because we're pretty rabid about open source and don't really want to run the Oracle VM. Nik -- You received this message because you…

---

## [Retrieve records and update a field at the same time](https://discuss.elastic.co/t/retrieve-records-and-update-a-field-at-the-same-time/319465)

<div class="topic-metadata">

**Author:** [@xef](https://discuss.elastic.co/u/xef)\
**Replies:** 8\
**Last updated:** [November 23, 2022, 5:35pm UTC](https://discuss.elastic.co/t/retrieve-records-and-update-a-field-at-the-same-time/319465 "2022-11-23T17:35:38Z")

</div>

Is there anyway when making a query in Elasticsearch, to update a field (such as say a counter++) in each record that is selected by the query. Thanks

---

## [Google Cloud discovery not working](https://discuss.elastic.co/t/google-cloud-discovery-not-working/260871)

<div class="topic-metadata">

**Author:** [@Mark\_Pevec](https://discuss.elastic.co/u/Mark_Pevec)\
**Replies:** 8\
**Last updated:** [January 12, 2021, 6:06pm UTC](https://discuss.elastic.co/t/google-cloud-discovery-not-working/260871 "2021-01-12T18:06:03Z")

</div>

Has anyone ever successfully used the Google Cloud discovery plugin successfully? After testing and debugging for a week I can't get it working. I am using the latest 7.x release (installed on debian-10 following all th…

---

## [Workaround for broken pgp signature on es 1.7.6 debian repo](https://discuss.elastic.co/t/workaround-for-broken-pgp-signature-on-es-1-7-6-debian-repo/193547)

<div class="topic-metadata">

**Author:** [@jillesvangurp](https://discuss.elastic.co/u/jillesvangurp)\
**Replies:** 0\
**Last updated:** [August 2, 2019, 1:43pm UTC](https://discuss.elastic.co/t/workaround-for-broken-pgp-signature-on-es-1-7-6-debian-repo/193547 "2019-08-02T13:43:11Z")

</div>

I just tried to rebuild some AMIs for our very outdated 1.7 cluster and discovered that our ansible scripts now fail with a signature error on the elastic repo which used to work as documented here: https://www.elastic.…

---

## [ECS Orgnasisation fields](https://discuss.elastic.co/t/ecs-orgnasisation-fields/180799)

<div class="topic-metadata">

**Author:** [@suikast42](https://discuss.elastic.co/u/suikast42)\
**Replies:** 8\
**Last updated:** [May 26, 2019, 7:24am UTC](https://discuss.elastic.co/t/ecs-orgnasisation-fields/180799 "2019-05-26T07:24:23Z")

</div>

Is the organisation field for APM supported ? https://www.elastic.co/guide/en/ecs/1.0/ecs-organization.html I can't find an option in the latest java APM agent.

---

## [Spring data elasticsearch or java elasticsearch api is better](https://discuss.elastic.co/t/spring-data-elasticsearch-or-java-elasticsearch-api-is-better/105378)

<div class="topic-metadata">

**Author:** [@LakshmiTF](https://discuss.elastic.co/u/LakshmiTF)\
**Replies:** 0\
**Last updated:** [October 26, 2017, 9:09am UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-or-java-elasticsearch-api-is-better/105378 "2017-10-26T09:09:55Z")

</div>

Hi Team, I am working for an application. This application does CRUD operations to elasticsearch along with search queries. I am using spring data elasticsearch repositories/elasticsearchTemplate for CRUD operations. …

---

## [Understanding execution time and memory usage of a terms aggregation?](https://discuss.elastic.co/t/understanding-execution-time-and-memory-usage-of-a-terms-aggregation/31336)

<div class="topic-metadata">

**Author:** [@AJ\_2](https://discuss.elastic.co/u/AJ_2)\
**Replies:** 0\
**Last updated:** [September 29, 2015, 12:31pm UTC](https://discuss.elastic.co/t/understanding-execution-time-and-memory-usage-of-a-terms-aggregation/31336 "2015-09-29T12:31:40Z")

</div>

Hello to everyone. The cluster has 4nodes(EC2 r3.2xlarge) with 60GB of memory, 30GB allocated to the Java Heap. We're doing a terms aggregation on a field that has 20M terms (9M distinct) spread across 19M docutments. T…

---

## [Angular or React for external kibana plugin](https://discuss.elastic.co/t/angular-or-react-for-external-kibana-plugin/316986)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 5\
**Last updated:** [October 26, 2022, 9:17am UTC](https://discuss.elastic.co/t/angular-or-react-for-external-kibana-plugin/316986 "2022-10-26T09:17:51Z")

</div>

Hi, I am creating an external kibana plugin (which will be a bug project). Which is recommended for the same: Angular JS or React JS? Thanks

---

## [Node not getting shards allocated back to it after upgrade](https://discuss.elastic.co/t/node-not-getting-shards-allocated-back-to-it-after-upgrade/186546)

<div class="topic-metadata">

**Author:** [@RayS](https://discuss.elastic.co/u/RayS)\
**Replies:** 5\
**Last updated:** [June 20, 2019, 9:38pm UTC](https://discuss.elastic.co/t/node-not-getting-shards-allocated-back-to-it-after-upgrade/186546 "2019-06-20T21:38:13Z")

</div>

I tried my hand at a roll update for my cluster. I have 3 nodes (elastic01,elastic02 and elastic03). Elastic03 is currently the master so I started with 02 first. That upgrade went fine and cluster rebuilt no problem.…

---

## [Hi, ALL ! that have elasticsearch data of tomcat war,but](https://discuss.elastic.co/t/hi-all-that-have-elasticsearch-data-of-tomcat-war-but/183064)

<div class="topic-metadata">

**Author:** [@yycm](https://discuss.elastic.co/u/yycm)\
**Replies:** 5\
**Last updated:** [May 29, 2019, 6:32am UTC](https://discuss.elastic.co/t/hi-all-that-have-elasticsearch-data-of-tomcat-war-but/183064 "2019-05-29T06:32:55Z")

</div>

but ????

---

## [ECE setName API do not support Chinese Character](https://discuss.elastic.co/t/ece-setname-api-do-not-support-chinese-character/166016)

<div class="topic-metadata">

**Author:** [@rockybean](https://discuss.elastic.co/u/rockybean)\
**Replies:** 5\
**Last updated:** [January 28, 2019, 3:27pm UTC](https://discuss.elastic.co/t/ece-setname-api-do-not-support-chinese-character/166016 "2019-01-28T15:27:19Z")

</div>

Hi, I'm testing ece api and try to update a deployment name by usign setName API. https://www.elastic.co/guide/en/cloud-enterprise/1.0/set-es-cluster-name.html But if I use Chinese words for new cluster name, this cal…

---

## [Scaling and Optimisation advices](https://discuss.elastic.co/t/scaling-and-optimisation-advices/133192)

<div class="topic-metadata">

**Author:** [@Jeremie\_Vallee](https://discuss.elastic.co/u/Jeremie_Vallee)\
**Replies:** 5\
**Last updated:** [May 25, 2018, 8:20am UTC](https://discuss.elastic.co/t/scaling-and-optimisation-advices/133192 "2018-05-25T08:20:27Z")

</div>

Hello, I would like to get advices about scaling up an Elasticsearch cluster I currently manage. The cluster is used to store logs from many different environments (dev, staging, ...). Each environment gets its own inde…

---

## [Return documents where exact number of conditions in should clause(Bool Query) are matched](https://discuss.elastic.co/t/return-documents-where-exact-number-of-conditions-in-should-clause-bool-query-are-matched/82052)

<div class="topic-metadata">

**Author:** [@Rory](https://discuss.elastic.co/u/Rory)\
**Replies:** 5\
**Last updated:** [April 24, 2017, 5:42pm UTC](https://discuss.elastic.co/t/return-documents-where-exact-number-of-conditions-in-should-clause-bool-query-are-matched/82052 "2017-04-24T17:42:21Z")

</div>

Hi, The "minimum\_number\_should\_match" property allows us to specify a minimum number of conditions in the should clause of the bool query that need to be satisfied. So if there are 4 conditions in the should clause and…

---

## [Error on query\_suggestion endpoint (Elastic based AppSearch)](https://discuss.elastic.co/t/error-on-query-suggestion-endpoint-elastic-based-appsearch/319457)

<div class="topic-metadata">

**Author:** [@adesso-david](https://discuss.elastic.co/u/adesso-david)\
**Replies:** 4\
**Last updated:** [November 24, 2022, 11:12am UTC](https://discuss.elastic.co/t/error-on-query-suggestion-endpoint-elastic-based-appsearch/319457 "2022-11-24T11:12:07Z")

</div>

Hi everybody! I am going to build a search solution for my companies' website using App Search. Since we use a 3rd party webcrawler, we decided to use App Search based on an Elasticsearch index, so we can use ingest pip…

---

## [Fields don't show up when events are published](https://discuss.elastic.co/t/fields-dont-show-up-when-events-are-published/294722)

<div class="topic-metadata">

**Author:** [@a11](https://discuss.elastic.co/u/a11)\
**Replies:** 4\
**Last updated:** [January 21, 2022, 3:24pm UTC](https://discuss.elastic.co/t/fields-dont-show-up-when-events-are-published/294722 "2022-01-21T15:24:37Z")

</div>

Hi all, I'm struggling with a windows event to publish. Event xml below, strongs fields aren't publish by Winlogbeat. - \<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"\> - \<System\> \<Provider Name…

---

## [Filtering or changing user metadata with Java agent](https://discuss.elastic.co/t/filtering-or-changing-user-metadata-with-java-agent/293899)

<div class="topic-metadata">

**Author:** [@Rob5](https://discuss.elastic.co/u/Rob5)\
**Replies:** 4\
**Last updated:** [January 17, 2022, 4:42pm UTC](https://discuss.elastic.co/t/filtering-or-changing-user-metadata-with-java-agent/293899 "2022-01-17T16:42:57Z")

</div>

Hi! I am using the apm Java agent attached to a Spring application without any custom spans or transactions. Is it possible to change or filter out the user metadata? Metadata | APM Overview \[7.15\] | Elastic The user.…

[Previous page](https://discuss.elastic.co/top.md?page=1617&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1619&per_page=50&period=all)
