# Top

**URL:** https://discuss.elastic.co/top.md?page=1658&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1659

---

## [Not able to start elasticsearch](https://discuss.elastic.co/t/not-able-to-start-elasticsearch/250018)

<div class="topic-metadata">

**Author:** [@pradnya\_05](https://discuss.elastic.co/u/pradnya_05)\
**Replies:** 1\
**Last updated:** [September 28, 2020, 3:23am UTC](https://discuss.elastic.co/t/not-able-to-start-elasticsearch/250018 "2020-09-28T03:23:44Z")

</div>

I have just started reading about elasticsearch concept so I am new in this concept. I have downloaded zip file of elasticseach as I am using windows. But after running batch file from cmd with admin access, getting exce…

---

## [What's the performance difference between \`ids query\` and \`terms query\`?](https://discuss.elastic.co/t/whats-the-performance-difference-between-ids-query-and-terms-query/248398)

<div class="topic-metadata">

**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\
**Replies:** 1\
**Last updated:** [September 12, 2020, 8:54am UTC](https://discuss.elastic.co/t/whats-the-performance-difference-between-ids-query-and-terms-query/248398 "2020-09-12T08:54:46Z")

</div>

Say we got a large id set, then which query would be the best choice? # ids query { "query": { "bool": { "filter": \[ { "ids" : { "values" : \["1", "2", ....,"100000"\] }…

---

## [Elasticsearch query over multiple indexes very slow](https://discuss.elastic.co/t/elasticsearch-query-over-multiple-indexes-very-slow/216520)

<div class="topic-metadata">

**Author:** [@Pedro\_Torres](https://discuss.elastic.co/u/Pedro_Torres)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 9:44am UTC](https://discuss.elastic.co/t/elasticsearch-query-over-multiple-indexes-very-slow/216520 "2020-01-27T09:44:25Z")

</div>

Question: I create one index with one shard per day on Elasticsearch. When I perform queries against several days worth of these indices, it is very slow. Would anyone that has implemented a similar architecture give som…

---

## [S3 dynamic date prefix in folder name by using current date as backup\_add\_prefix](https://discuss.elastic.co/t/s3-dynamic-date-prefix-in-folder-name-by-using-current-date-as-backup-add-prefix/215104)

<div class="topic-metadata">

**Author:** [@Xandr90](https://discuss.elastic.co/u/Xandr90)\
**Replies:** 1\
**Last updated:** [January 15, 2020, 3:38pm UTC](https://discuss.elastic.co/t/s3-dynamic-date-prefix-in-folder-name-by-using-current-date-as-backup-add-prefix/215104 "2020-01-15T15:38:53Z")

</div>

So what i want to do is use Logstash to rename incoming files in a s3 bucket. I run it via docker and use the following logstash.conf input { s3 { access\_key\_id =\> "some\_key" secret\_access\_key =\> "some\_secret" reg…

---

## [How to create a mapping for an image type (i have a url that points to an image)](https://discuss.elastic.co/t/how-to-create-a-mapping-for-an-image-type-i-have-a-url-that-points-to-an-image/202601)

<div class="topic-metadata">

**Author:** [@veravira](https://discuss.elastic.co/u/veravira)\
**Replies:** 1\
**Last updated:** [October 11, 2019, 2:21pm UTC](https://discuss.elastic.co/t/how-to-create-a-mapping-for-an-image-type-i-have-a-url-that-points-to-an-image/202601 "2019-10-11T14:21:13Z")

</div>

Continuing the discussion from Showing images in Kibana 6 dashoboard:

---

## [Timestamp range in watcher doesn't work](https://discuss.elastic.co/t/timestamp-range-in-watcher-doesnt-work/114436)

<div class="topic-metadata">

**Author:** [@saradac](https://discuss.elastic.co/u/saradac)\
**Replies:** 1\
**Last updated:** [January 8, 2018, 2:24am UTC](https://discuss.elastic.co/t/timestamp-range-in-watcher-doesnt-work/114436 "2018-01-08T02:24:50Z")

</div>

Hello, I added the watcher in Kibana manually. I am not sure where to add mappings to enable \_timestamp. Below is my watcher: Which return's nothing. All I added is "range": { "\_timestamp": { "gt": "now-5m" } } {…

---

## [GC spending too much time on elastic injest node](https://discuss.elastic.co/t/gc-spending-too-much-time-on-elastic-injest-node/105903)

<div class="topic-metadata">

**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\
**Replies:** 1\
**Last updated:** [October 31, 2017, 2:51pm UTC](https://discuss.elastic.co/t/gc-spending-too-much-time-on-elastic-injest-node/105903 "2017-10-31T14:51:21Z")

</div>

Hi All, I am running elastic 5.5 and my set up is having 3 client node, \[data: false, master:false\] and I am sending bulk request of 15000 from Logstash to client nodes. I have: 3 Master 3 Client 10 Data 1 Logstas…

---

## [Private IP Address](https://discuss.elastic.co/t/private-ip-address/94589)

<div class="topic-metadata">

**Author:** [@Bondo](https://discuss.elastic.co/u/Bondo)\
**Replies:** 1\
**Last updated:** [July 26, 2017, 7:57am UTC](https://discuss.elastic.co/t/private-ip-address/94589 "2017-07-26T07:57:59Z")

</div>

I am trying to enter in an IF statement to preset the geo information based on some internal IPs, but I'm not sure what the syntax needs to be when listing the range. The example below is for any IP with a 10.x.x.x addre…

---

## [Logstash init script bug](https://discuss.elastic.co/t/logstash-init-script-bug/48081)

<div class="topic-metadata">

**Author:** [@Cheyenne\_Greatorex](https://discuss.elastic.co/u/Cheyenne_Greatorex)\
**Replies:** 1\
**Last updated:** [April 21, 2016, 5:37pm UTC](https://discuss.elastic.co/t/logstash-init-script-bug/48081 "2016-04-21T17:37:08Z")

</div>

When logstash doesn't stop in a timely manner, the init script exits with a bug trying to handle the timeout, and when calling it with restart, it ends up starting multiple copies. sudo service logstash restart Killing…

---

## [Topbeat: seeing userid of process](https://discuss.elastic.co/t/topbeat-seeing-userid-of-process/39039)

<div class="topic-metadata">

**Author:** [@biswajit86](https://discuss.elastic.co/u/biswajit86)\
**Replies:** 1\
**Last updated:** [January 13, 2016, 10:35pm UTC](https://discuss.elastic.co/t/topbeat-seeing-userid-of-process/39039 "2016-01-13T22:35:24Z")

</div>

Is there a way in topbeat to figure out the userid which is running the process. We have a few instances where multiple user ids can run on the same host and we want to see that information in Elastic/Kibana

---

## [Exact match in a not\_analyzed field](https://discuss.elastic.co/t/exact-match-in-a-not-analyzed-field/37121)

<div class="topic-metadata">

**Author:** [@Imran\_Azad](https://discuss.elastic.co/u/Imran_Azad)\
**Replies:** 1\
**Last updated:** [December 14, 2015, 5:41pm UTC](https://discuss.elastic.co/t/exact-match-in-a-not-analyzed-field/37121 "2015-12-14T17:41:17Z")

</div>

How would I do an exact match on a not\_analyzed field that contains a large amount of text? For example take the following paragraph: Kefir grains are a combination of lactic acid bacteria and yeasts in a matrix of pro…

---

## [GitHub Puppet modules - issues and pull requests](https://discuss.elastic.co/t/github-puppet-modules-issues-and-pull-requests/25723)

<div class="topic-metadata">

**Author:** [@oloc](https://discuss.elastic.co/u/oloc)\
**Replies:** 1\
**Last updated:** [July 21, 2015, 12:48pm UTC](https://discuss.elastic.co/t/github-puppet-modules-issues-and-pull-requests/25723 "2015-07-21T12:48:11Z")

</div>

Are the issues and the pull request are followed for the puppet modules? Or should I move them all in a new topic here? What is the frequency of validation/reject of the proposals? https://github.com/elastic/puppet-l…

---

## [Alerts on kubernetes.node.status. fields](https://discuss.elastic.co/t/alerts-on-kubernetes-node-status-fields/290780)

<div class="topic-metadata">

**Author:** [@Hakim](https://discuss.elastic.co/u/Hakim)\
**Replies:** 2\
**Last updated:** [December 2, 2021, 4:49pm UTC](https://discuss.elastic.co/t/alerts-on-kubernetes-node-status-fields/290780 "2021-12-02T16:49:33Z")

</div>

Hi Elastic team, I'm looking to add alerts on boolean fields of kubernetes nodes starting with kubernetes.node.status. but when I try to create alerte rule for these fields there is no condition in Metric threshold for t…

---

## [Why is docvalue\_fields much faster than source.includes?](https://discuss.elastic.co/t/why-is-docvalue-fields-much-faster-than-source-includes/225972)

<div class="topic-metadata">

**Author:** [@G-K-Patel](https://discuss.elastic.co/u/G-K-Patel)\
**Replies:** 2\
**Last updated:** [April 1, 2020, 8:44am UTC](https://discuss.elastic.co/t/why-is-docvalue-fields-much-faster-than-source-includes/225972 "2020-04-01T08:44:12Z")

</div>

Hi Elastic Community, I have seen drastic change in retrival speed when using docvalue\_fields instead of source.includes, as speficied in the documentation. Can someone explain to me what is the different between the t…

---

## [Count duplicated field value by doc](https://discuss.elastic.co/t/count-duplicated-field-value-by-doc/193567)

<div class="topic-metadata">

**Author:** [@chaymaa](https://discuss.elastic.co/u/chaymaa)\
**Replies:** 2\
**Last updated:** [August 5, 2019, 8:36am UTC](https://discuss.elastic.co/t/count-duplicated-field-value-by-doc/193567 "2019-08-05T08:36:53Z")

</div>

Hi All, I have already aggregate and filter my message into elastic search, and i have now a problem to display the results on a kibana bar chart, This is the final filtered message: { "features" =\> \[ \[0\] { "action…

---

## [Showing status : Red and request timeout after 3000ms](https://discuss.elastic.co/t/showing-status-red-and-request-timeout-after-3000ms/184284)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 2\
**Last updated:** [June 5, 2019, 9:04am UTC](https://discuss.elastic.co/t/showing-status-red-and-request-timeout-after-3000ms/184284 "2019-06-05T09:04:37Z")

</div>

HI , i am new to elk stack and i have no idea why i am getting the following error in kibana and after few webpage refreshes it working again. and also if i try to search the keyword its taking lot of time it never hap…

---

## [Very low cpu usage in logstash server](https://discuss.elastic.co/t/very-low-cpu-usage-in-logstash-server/172240)

<div class="topic-metadata">

**Author:** [@xiaochuan\_lin](https://discuss.elastic.co/u/xiaochuan_lin)\
**Replies:** 2\
**Last updated:** [March 15, 2019, 1:12am UTC](https://discuss.elastic.co/t/very-low-cpu-usage-in-logstash-server/172240 "2019-03-15T01:12:52Z")

</div>

Hi, My logstash server has 8 CPUs and 8g Men, and 4 pipeline-workers( 4 pipeline-workers is the best performance after testing), but no matter how i test it, the CPU usage has been 20-30%. The logstash input data come…

---

## [Filebeat 5.6 error](https://discuss.elastic.co/t/filebeat-5-6-error/114602)

<div class="topic-metadata">

**Author:** [@Samuel\_Miller](https://discuss.elastic.co/u/Samuel_Miller)\
**Replies:** 2\
**Last updated:** [January 21, 2018, 9:43pm UTC](https://discuss.elastic.co/t/filebeat-5-6-error/114602 "2018-01-21T21:43:50Z")

</div>

I'm seeing the error below, it looks extremely similar to Error when reloading prospectors for filebeat - #7 by ruflin (Filebeat: Live Reload incorrectly stops prospectors · Issue #4133 · elastic/beats · GitHub) , which…

---

## [Kibana 6.x throws FATAL error for 'action.search.shard\_count.limit'](https://discuss.elastic.co/t/kibana-6-x-throws-fatal-error-for-action-search-shard-count-limit/112011)

<div class="topic-metadata">

**Author:** [@choppa](https://discuss.elastic.co/u/choppa)\
**Replies:** 2\
**Last updated:** [December 15, 2017, 5:27pm UTC](https://discuss.elastic.co/t/kibana-6-x-throws-fatal-error-for-action-search-shard-count-limit/112011 "2017-12-15T17:27:47Z")

</div>

I am running my own dockerized setup to install all necessary Elastic-Stack components through debian packages in a "fresh" debian container. Elasticsearch and the indices are starting fine in version 6.x Starting with…

---

## [Count how many items appear once and only once](https://discuss.elastic.co/t/count-how-many-items-appear-once-and-only-once/107745)

<div class="topic-metadata">

**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\
**Replies:** 2\
**Last updated:** [November 16, 2017, 10:19am UTC](https://discuss.elastic.co/t/count-how-many-items-appear-once-and-only-once/107745 "2017-11-16T10:19:53Z")

</div>

I have a set of documents with a user ID field which may appear once or many times accross the set of documents. I know i can count unique users. But i would like to know how many users appear in my document set once an…

---

## [Kibana sending "docvalue\_fields" that break ES?](https://discuss.elastic.co/t/kibana-sending-docvalue-fields-that-break-es/92139)

<div class="topic-metadata">

**Author:** [@jwalton](https://discuss.elastic.co/u/jwalton)\
**Replies:** 2\
**Last updated:** [July 11, 2017, 12:53pm UTC](https://discuss.elastic.co/t/kibana-sending-docvalue-fields-that-break-es/92139 "2017-07-11T12:53:16Z")

</div>

I've been using ES and Kibana for quite a while now, but this morning ES started failing with "Courier Fetch: 5 of 5 shards failed". I started digging into this, and there's nothing in the logs, but if I query older rec…

---

## [@timestamp conversion](https://discuss.elastic.co/t/timestamp-conversion/54640)

<div class="topic-metadata">

**Author:** [@Craig\_Botha](https://discuss.elastic.co/u/Craig_Botha)\
**Replies:** 2\
**Last updated:** [July 4, 2016, 11:58am UTC](https://discuss.elastic.co/t/timestamp-conversion/54640 "2016-07-04T11:58:57Z")

</div>

Hello Logstash community I set up ELK (filebeat\>logstash\>elasticsearch\>kibana) on a Windows 2012 server last week, and have been trying to configure Logstash to parse my logs correctly. I've got it mostly correct, but s…

---

## [Help with POST URL](https://discuss.elastic.co/t/help-with-post-url/343444)

<div class="topic-metadata">

**Author:** [@ElasticNovis](https://discuss.elastic.co/u/ElasticNovis)\
**Replies:** 3\
**Last updated:** [September 26, 2023, 11:14am UTC](https://discuss.elastic.co/t/help-with-post-url/343444 "2023-09-26T11:14:49Z")

</div>

Hi, I am new to POST URLs but my goal is to generate a pdf from a dashboard automatically, and save it locally to a shared area. I have got my POST URL of my dashboard and using Unix curl command I have tried to get the…

---

## [Improving resiliency or changing settings of system indices](https://discuss.elastic.co/t/improving-resiliency-or-changing-settings-of-system-indices/326108)

<div class="topic-metadata">

**Author:** [@garethhumphriesgkc](https://discuss.elastic.co/u/garethhumphriesgkc)\
**Replies:** 3\
**Last updated:** [March 1, 2023, 1:45am UTC](https://discuss.elastic.co/t/improving-resiliency-or-changing-settings-of-system-indices/326108 "2023-03-01T01:45:22Z")

</div>

Hi, I'm trying to improve the resiliency of my elastic stack. I want to make it tolerant to any two node failures, but I can't update system indices to have more than one replica. The setting in question is index.auto…

---

## [Bar chart single color and bar for Others bucket](https://discuss.elastic.co/t/bar-chart-single-color-and-bar-for-others-bucket/293136)

<div class="topic-metadata">

**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\
**Replies:** 3\
**Last updated:** [January 4, 2022, 4:21pm UTC](https://discuss.elastic.co/t/bar-chart-single-color-and-bar-for-others-bucket/293136 "2022-01-04T16:21:29Z")

</div>

Hi, Lets say I have table of countries and their GDP. I would like to have bar chart splitted on X-Axis by terms (countries) and be also colored by terms. I wanna show TOP 10 and Others buckets. I saw this is possible…

---

## [Boost value on a boolean field](https://discuss.elastic.co/t/boost-value-on-a-boolean-field/238869)

<div class="topic-metadata">

**Author:** [@djean](https://discuss.elastic.co/u/djean)\
**Replies:** 3\
**Last updated:** [July 2, 2020, 10:17am UTC](https://discuss.elastic.co/t/boost-value-on-a-boolean-field/238869 "2020-07-02T10:17:05Z")

</div>

Hello, I have a field indexed as a boolean. I wonder if there is a way to boost the document when this value is true and not boost it when the value is false. I can't find a way to do it. Thanks.

---

## [How to update alias to capture new matching index patterns?](https://discuss.elastic.co/t/how-to-update-alias-to-capture-new-matching-index-patterns/194051)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 3\
**Last updated:** [August 7, 2019, 1:35pm UTC](https://discuss.elastic.co/t/how-to-update-alias-to-capture-new-matching-index-patterns/194051 "2019-08-07T13:35:33Z")

</div>

TL;DR How do I continuously update an alias to capture new matching index patterns? Longer Version... We use a non-standard format that looks like this: myapp-beatname-version-YYYY.mm.dd I.e., a heartbeat index will l…

---

## [Split not working as expected](https://discuss.elastic.co/t/split-not-working-as-expected/179373)

<div class="topic-metadata">

**Author:** [@ghost3h](https://discuss.elastic.co/u/ghost3h)\
**Replies:** 3\
**Last updated:** [May 3, 2019, 12:35pm UTC](https://discuss.elastic.co/t/split-not-working-as-expected/179373 "2019-05-03T12:35:42Z")

</div>

Hi All, I'm having a issue with my split on a field that is comma deliminated. I've got the syntax for what I want from previous questions, but the output is not as I expected. I have seen different syntax used on the …

---

## [Dedot Kubernetes labels and annotations](https://discuss.elastic.co/t/dedot-kubernetes-labels-and-annotations/167457)

<div class="topic-metadata">

**Author:** [@anton-johansson](https://discuss.elastic.co/u/anton-johansson)\
**Replies:** 0\
**Last updated:** [February 7, 2019, 1:18pm UTC](https://discuss.elastic.co/t/dedot-kubernetes-labels-and-annotations/167457 "2019-02-07T13:18:41Z")

</div>

I'm using Filebeat with Kubernetes autodiscovery. I'm using version 6.5.3 for all Elastic components. I've had some struggle with Kubernetes labels and annotations which can contain dots and slashes. I know that this pul…

---

## [Optimize Action in Alerts to trigger only once for a detected anomaly](https://discuss.elastic.co/t/optimize-action-in-alerts-to-trigger-only-once-for-a-detected-anomaly/152008)

<div class="topic-metadata">

**Author:** [@Elango-mas](https://discuss.elastic.co/u/Elango-mas)\
**Replies:** 3\
**Last updated:** [October 15, 2018, 12:23pm UTC](https://discuss.elastic.co/t/optimize-action-in-alerts-to-trigger-only-once-for-a-detected-anomaly/152008 "2018-10-15T12:23:37Z")

</div>

Hi Experts, I need to optimize the alerts as triggered in scheduled interval in which the action is to be executed only once for detected anomalies and the same alert should not execute the action until the anomaly is r…

---

## [Active Directory - Account not assigned to role](https://discuss.elastic.co/t/active-directory-account-not-assigned-to-role/81119)

<div class="topic-metadata">

**Author:** [@Fabien](https://discuss.elastic.co/u/Fabien)\
**Replies:** 3\
**Last updated:** [April 5, 2017, 8:09am UTC](https://discuss.elastic.co/t/active-directory-account-not-assigned-to-role/81119 "2017-04-05T08:09:39Z")

</div>

Hello, I want to use an active directory connection with x-pack. My error is that the account of active directory is associated with no role. However, it seems to me that I followed the configuration steps: Edit ela…

---

## [How to get specified fields in elasticsearch 5.1 (using curl)?](https://discuss.elastic.co/t/how-to-get-specified-fields-in-elasticsearch-5-1-using-curl/74164)

<div class="topic-metadata">

**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\
**Replies:** 3\
**Last updated:** [February 7, 2017, 11:34am UTC](https://discuss.elastic.co/t/how-to-get-specified-fields-in-elasticsearch-5-1-using-curl/74164 "2017-02-07T11:34:15Z")

</div>

I want to get specified fields in elasticsearch 5.1 . For example select x,y from table.

---

## [How can I change fields type on elasticsearch without stop my services?](https://discuss.elastic.co/t/how-can-i-change-fields-type-on-elasticsearch-without-stop-my-services/69348)

<div class="topic-metadata">

**Author:** [@Terence\_Chuen](https://discuss.elastic.co/u/Terence_Chuen)\
**Replies:** 3\
**Last updated:** [December 17, 2016, 8:16pm UTC](https://discuss.elastic.co/t/how-can-i-change-fields-type-on-elasticsearch-without-stop-my-services/69348 "2016-12-17T20:16:27Z")

</div>

In last two days,I search in google and looking for information in www.elastic.co,but I still feeling puzzled.Here is my actual situation: I learn and set up ELK services at last month.I import my logs to elasticsearch…

---

## [Logstash fails to start with init script (RHEL/CentOS)](https://discuss.elastic.co/t/logstash-fails-to-start-with-init-script-rhel-centos/55516)

<div class="topic-metadata">

**Author:** [@pysysops](https://discuss.elastic.co/u/pysysops)\
**Replies:** 3\
**Last updated:** [July 15, 2016, 9:22am UTC](https://discuss.elastic.co/t/logstash-fails-to-start-with-init-script-rhel-centos/55516 "2016-07-15T09:22:34Z")

</div>

Hey! When run as a user that belongs to a group with spaces in the name (a la Windows / Samba), Logstash fails to start. I have fixed this locally by amending line: 61 Before (not working due to names): SGROUPS=$(id…

---

## [Elastic search node replication](https://discuss.elastic.co/t/elastic-search-node-replication/31382)

<div class="topic-metadata">

**Author:** [@vinod\_rao](https://discuss.elastic.co/u/vinod_rao)\
**Replies:** 3\
**Last updated:** [September 30, 2015, 9:46am UTC](https://discuss.elastic.co/t/elastic-search-node-replication/31382 "2015-09-30T09:46:55Z")

</div>

Can we configure elasticsearch replication to act as PRODUCTION and DR in different data centers?

---

## [Logstash are not running properly](https://discuss.elastic.co/t/logstash-are-not-running-properly/323002)

<div class="topic-metadata">

**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\
**Replies:** 7\
**Last updated:** [January 13, 2023, 4:26am UTC](https://discuss.elastic.co/t/logstash-are-not-running-properly/323002 "2023-01-13T04:26:42Z")

</div>

Hi team, We are trying to get the live logs from DEV Environment for testing.. But after started the Logstash (7.16.1) service, it through a error. Please check the below error. at RUBY.\<module:LibC\>(/usr/shar…

---

## [Filebeat Fortinet Module + Kibana SIEM](https://discuss.elastic.co/t/filebeat-fortinet-module-kibana-siem/317721)

<div class="topic-metadata">

**Author:** [@Rafa\_Moreno](https://discuss.elastic.co/u/Rafa_Moreno)\
**Replies:** 7\
**Last updated:** [October 31, 2022, 8:12am UTC](https://discuss.elastic.co/t/filebeat-fortinet-module-kibana-siem/317721 "2022-10-31T08:12:56Z")

</div>

Hi there, I have an installation of kibana and Elasticsearch, I have tried to use the fortinet filebeat module, even the elastic agent, and send the logs by syslogd, I understand that I should be able to see the fortiga…

---

## [Performance impacts of track\_scores on sorted queries](https://discuss.elastic.co/t/performance-impacts-of-track-scores-on-sorted-queries/260578)

<div class="topic-metadata">

**Author:** [@AlanN](https://discuss.elastic.co/u/AlanN)\
**Replies:** 1\
**Last updated:** [January 9, 2021, 6:57am UTC](https://discuss.elastic.co/t/performance-impacts-of-track-scores-on-sorted-queries/260578 "2021-01-09T06:57:12Z")

</div>

Hi, I'm attempting to wrap my head around what the performance hit is on queries with and without the track\_scores flag flipped in the sort during queries in our ElasticSearch 6.8 cluster. Unfortunately it's pretty bus…

---

## [How search es using spark-sql with 'function match' or others](https://discuss.elastic.co/t/how-search-es-using-spark-sql-with-function-match-or-others/232340)

<div class="topic-metadata">

**Author:** [@ZBHdd](https://discuss.elastic.co/u/ZBHdd)\
**Replies:** 1\
**Last updated:** [May 14, 2020, 8:24pm UTC](https://discuss.elastic.co/t/how-search-es-using-spark-sql-with-function-match-or-others/232340 "2020-05-14T20:24:39Z")

</div>

Issue description now,I want select es using 'spark-sql',but 'predicate pushdown' does not take effect Description Steps to reproduce Code: first I create a index curl -H "Content-Type: application/json" -XPOST 'htt…

---

## [Could not locate that index-pattern (id: metricbeat-\*), \[click here to re-create it\](#/management/kibana/index\_pattern)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-metricbeat-click-here-to-re-create-it-management-kibana-index-pattern/211148)

<div class="topic-metadata">

**Author:** [@baronnenate](https://discuss.elastic.co/u/baronnenate)\
**Replies:** 1\
**Last updated:** [December 19, 2019, 9:05pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-metricbeat-click-here-to-re-create-it-management-kibana-index-pattern/211148 "2019-12-19T21:05:33Z")

</div>

Hi, I'm VERY new to ELK - I've been setting up a test stack over the past week or so, after a lot reading guides, following tutorials, etc. - I've managed to get something up and running. However, I've started to encount…

---

## [Can i know how to configure Apache server with proxy for Kibana](https://discuss.elastic.co/t/can-i-know-how-to-configure-apache-server-with-proxy-for-kibana/181711)

<div class="topic-metadata">

**Author:** [@syed\_faheem\_Hussain](https://discuss.elastic.co/u/syed_faheem_Hussain)\
**Replies:** 1\
**Last updated:** [May 27, 2019, 9:26pm UTC](https://discuss.elastic.co/t/can-i-know-how-to-configure-apache-server-with-proxy-for-kibana/181711 "2019-05-27T21:26:04Z")

</div>

Could you please help me

---

## [Logstash jdbc not creating index silently, debug also wrong](https://discuss.elastic.co/t/logstash-jdbc-not-creating-index-silently-debug-also-wrong/98263)

<div class="topic-metadata">

**Author:** [@EpiqSty](https://discuss.elastic.co/u/EpiqSty)\
**Replies:** 1\
**Last updated:** [August 25, 2017, 10:18am UTC](https://discuss.elastic.co/t/logstash-jdbc-not-creating-index-silently-debug-also-wrong/98263 "2017-08-25T10:18:05Z")

</div>

Hello! I use ELK stack for visualisation data from DB2, and have 2 jdbc inputs and outputs like: input{ jdbc{ jdbc\_connection\_string =\> "jdbc:db2://db2:50000/db2" jdbc\_driver\_library =\> …

---

## [\[CH\] ES Meetup in Geneva - Switzerland - 14th June 2017](https://discuss.elastic.co/t/ch-es-meetup-in-geneva-switzerland-14th-june-2017/85339)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 1\
**Last updated:** [June 14, 2017, 4:40am UTC](https://discuss.elastic.co/t/ch-es-meetup-in-geneva-switzerland-14th-june-2017/85339 "2017-06-14T04:40:29Z")

</div>

Our next ES meetup in Western Switzerland will take place at Impact Hub in Geneva with another set of great topics: Nicolas Frankel (from Hybris Software) will show us how to explore data sets with Kibana Bertrand H…

---

## [\[CH\] ES Meetup in Lausanne - Switzerland - 10th May 2017](https://discuss.elastic.co/t/ch-es-meetup-in-lausanne-switzerland-10th-may-2017/83856)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 1\
**Last updated:** [May 11, 2017, 6:41am UTC](https://discuss.elastic.co/t/ch-es-meetup-in-lausanne-switzerland-10th-may-2017/83856 "2017-05-11T06:41:41Z")

</div>

Our second ES meetup of 2017 in Western Switzerland will take place in Lausanne with some great topics: Evgeny Bogdanov (from Gait Up) will tell us how they used Elasticsearch in order to search inside video content. …

---

## [Dynamic configuration for filebeat?](https://discuss.elastic.co/t/dynamic-configuration-for-filebeat/52480)

<div class="topic-metadata">

**Author:** [@matanster](https://discuss.elastic.co/u/matanster)\
**Replies:** 1\
**Last updated:** [June 11, 2016, 12:40am UTC](https://discuss.elastic.co/t/dynamic-configuration-for-filebeat/52480 "2016-06-11T00:40:13Z")

</div>

I wonder what am I doing wrong as per http://stackoverflow.com/questions/37756864/how-to-make-filebeat-pick-up-project-specific-configuration-file? as it is a dev box, I would find it more practical dynamically controlli…

---

## [Designing indices to have paging with filters and random page jump](https://discuss.elastic.co/t/designing-indices-to-have-paging-with-filters-and-random-page-jump/27784)

<div class="topic-metadata">

**Author:** [@imad](https://discuss.elastic.co/u/imad)\
**Replies:** 1\
**Last updated:** [August 22, 2015, 8:51am UTC](https://discuss.elastic.co/t/designing-indices-to-have-paging-with-filters-and-random-page-jump/27784 "2015-08-22T08:51:27Z")

</div>

Hi, I just want to have an expert opinion about my use case and the way I am planning to use indices to see if there is no problem in my approach or if there are any better ways to achieve it. Since I am new to ES, you…

---

## [Too\_Complex\_To\_Determinize Exception: Determinizing automaton with 57621 states and 60867 transitions would result in more than 10000 states](https://discuss.elastic.co/t/too-complex-to-determinize-exception-determinizing-automaton-with-57621-states-and-60867-transitions-would-result-in-more-than-10000-states/234653)

<div class="topic-metadata">

**Author:** [@Drurvesh](https://discuss.elastic.co/u/Drurvesh)\
**Replies:** 0\
**Last updated:** [May 28, 2020, 5:15am UTC](https://discuss.elastic.co/t/too-complex-to-determinize-exception-determinizing-automaton-with-57621-states-and-60867-transitions-would-result-in-more-than-10000-states/234653 "2020-05-28T05:15:52Z")

</div>

As seen on the community page last year this was the limitation as mentioned by @nik9000 "This is a side effect of the internal implementation of wildards as NFAs that are determinized to DFAs. The determinization proce…

---

## [Dec 18th, 2018: \[EN\]\[Elastic Stack\] Set up for success - don't repeat yourself!](https://discuss.elastic.co/t/dec-18th-2018-en-elastic-stack-set-up-for-success-dont-repeat-yourself/159817)

<div class="topic-metadata">

**Author:** [@kcm](https://discuss.elastic.co/u/kcm)\
**Replies:** 0\
**Last updated:** [December 18, 2018, 12:00am UTC](https://discuss.elastic.co/t/dec-18th-2018-en-elastic-stack-set-up-for-success-dont-repeat-yourself/159817 "2018-12-18T00:00:06Z")

</div>

Does every day start the same? Do you find yourself re-using the same index settings and mappings frequently? Do those mappings have lots of fields with repetitive naming conventions? If so, fear not! You aren't alone…

---

## [Huge aggregation triggers CircuitBreaker in loop](https://discuss.elastic.co/t/huge-aggregation-triggers-circuitbreaker-in-loop/299637)

<div class="topic-metadata">

**Author:** [@elephant](https://discuss.elastic.co/u/elephant)\
**Replies:** 4\
**Last updated:** [April 1, 2022, 11:15am UTC](https://discuss.elastic.co/t/huge-aggregation-triggers-circuitbreaker-in-loop/299637 "2022-04-01T11:15:20Z")

</div>

Hi, I was trying to make aggregations on a very huge index. The search triggered the circuit breaker which was expected given the size of the index (billion of documents): elastic1\_1 | "Caused by: org.elastics…

---

## [I want to add "yyyy-MM-dd" for Time field](https://discuss.elastic.co/t/i-want-to-add-yyyy-mm-dd-for-time-field/269079)

<div class="topic-metadata">

**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\
**Replies:** 4\
**Last updated:** [April 7, 2021, 6:25am UTC](https://discuss.elastic.co/t/i-want-to-add-yyyy-mm-dd-for-time-field/269079 "2021-04-07T06:25:53Z")

</div>

I want to use "yyyy-MM-dd" from current time. Please teach me how to do it. Raw log. 9:36:02 (tableau) (@tableau-SLOG@) === Memory Usage Info === I use below grok. grok { match =\> { "message" =\> "%{TIME:Time} %{GR…

[Previous page](https://discuss.elastic.co/top.md?page=1657&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1659&per_page=50&period=all)
