# Top

**URL:** https://discuss.elastic.co/top.md?page=207&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 208

---

## [Kibana Dashboard - net::ERR\_ABORTED 400](https://discuss.elastic.co/t/kibana-dashboard-net-err-aborted-400/335806)

<div class="topic-metadata">

**Author:** [@duartera](https://discuss.elastic.co/u/duartera)\
**Replies:** 12\
**Last updated:** [June 22, 2023, 10:59pm UTC](https://discuss.elastic.co/t/kibana-dashboard-net-err-aborted-400/335806 "2023-06-22T22:59:30Z")

</div>

Hey, We are facing a very random issue, the most of the time the Kibana Dashboard loads properly but when not, we got this error messages: Here the Kibana logs (a piece of it, these are the only relevant records on …

---

## [Beats 7.7.0 wont run on some of our Windows clients](https://discuss.elastic.co/t/beats-7-7-0-wont-run-on-some-of-our-windows-clients/234319)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 12\
**Last updated:** [May 29, 2020, 7:04am UTC](https://discuss.elastic.co/t/beats-7-7-0-wont-run-on-some-of-our-windows-clients/234319 "2020-05-29T07:04:24Z")

</div>

trying to update our beats v.7.6.2 to 7.7.0, but for some reasons it seems that ~25-30% of them fails to launch the service after installing. v.7.6.2 was running just fine. Debug log from an launch attempt of AuditBeat …

---

## [Logstash improve time performance](https://discuss.elastic.co/t/logstash-improve-time-performance/123741)

<div class="topic-metadata">

**Author:** [@youssef](https://discuss.elastic.co/u/youssef)\
**Replies:** 12\
**Last updated:** [March 15, 2018, 11:18am UTC](https://discuss.elastic.co/t/logstash-improve-time-performance/123741 "2018-03-15T11:18:27Z")

</div>

hi all, i have csv file that contains 4 Million lines, each line is more than 100 columns, i process about 30 columns and add another 10 columns, so that in total i upload about 40 columns to the kibana, in average i n…

---

## [Azure Module in Metricbeat : Monitor Metricset](https://discuss.elastic.co/t/azure-module-in-metricbeat-monitor-metricset/236746)

<div class="topic-metadata">

**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\
**Replies:** 13\
**Last updated:** [July 1, 2020, 2:07pm UTC](https://discuss.elastic.co/t/azure-module-in-metricbeat-monitor-metricset/236746 "2020-07-01T14:07:00Z")

</div>

Hello, I want to make efficient use of "Monitor" metricset in "Azure" module on metricbeat side. I am looking to get relevant information regarding disk usage, memory availability of my Azure VMs. The issue is that I …

---

## [About intersection functionality](https://discuss.elastic.co/t/about-intersection-functionality/145153)

<div class="topic-metadata">

**Author:** [@Acepcs](https://discuss.elastic.co/u/Acepcs)\
**Replies:** 13\
**Last updated:** [August 23, 2018, 2:02am UTC](https://discuss.elastic.co/t/about-intersection-functionality/145153 "2018-08-23T02:02:44Z")

</div>

Hi all, I am encountering a problem about intersection functionality. I have the following mapping: { "message": {"type": "text"}, "created\_at": {"type": "date", "format": "yyyy-MM-dd HH:mm:ss||yyyy-MM-dd||epoch\_mill…

---

## [Filebeat .csv file is not updating on Kibana](https://discuss.elastic.co/t/filebeat-csv-file-is-not-updating-on-kibana/270393)

<div class="topic-metadata">

**Author:** [@SHUBHAM\_SALUNKHE](https://discuss.elastic.co/u/SHUBHAM_SALUNKHE)\
**Replies:** 11\
**Last updated:** [April 28, 2021, 1:38pm UTC](https://discuss.elastic.co/t/filebeat-csv-file-is-not-updating-on-kibana/270393 "2021-04-28T13:38:34Z")

</div>

Hi, there are 2 .conf files under conf.d on server where ELK is hosted. one .conf file for jenkins logs & another one for filebeat. filebeat is hosted on another server. So, which .conf file is taken as config file? Al…

---

## [Elasticsearch 6.\* still not running on rhel7.5](https://discuss.elastic.co/t/elasticsearch-6-still-not-running-on-rhel7-5/149095)

<div class="topic-metadata">

**Author:** [@adrwer](https://discuss.elastic.co/u/adrwer)\
**Replies:** 10\
**Last updated:** [September 19, 2018, 12:10pm UTC](https://discuss.elastic.co/t/elasticsearch-6-still-not-running-on-rhel7-5/149095 "2018-09-19T12:10:47Z")

</div>

Blocked by another huddle....I installed Elasticsearch as adviced here: but it sends this error when i try checking if it runs curl: (7) Failed connect to localhost:9200; Connection refused i checked if the service w…

---

## [Unable to parse "message"](https://discuss.elastic.co/t/unable-to-parse-message/333635)

<div class="topic-metadata">

**Author:** [@bsauvage1](https://discuss.elastic.co/u/bsauvage1)\
**Replies:** 9\
**Last updated:** [May 23, 2023, 3:41am UTC](https://discuss.elastic.co/t/unable-to-parse-message/333635 "2023-05-23T03:41:55Z")

</div>

Hello. New user of logstash here so please bear with me! Sending over TCP from python using logstash\_async, I receive the item in logstash (see bottom of message). How can I parse the "message" into fields? I have tri…

---

## [Elasticsearch and Kibana in v7.6.2 are loading slowly](https://discuss.elastic.co/t/elasticsearch-and-kibana-in-v7-6-2-are-loading-slowly/232743)

<div class="topic-metadata">

**Author:** [@lynnlu](https://discuss.elastic.co/u/lynnlu)\
**Replies:** 9\
**Last updated:** [May 15, 2020, 9:28am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-in-v7-6-2-are-loading-slowly/232743 "2020-05-15T09:28:23Z")

</div>

Hi, We found that Elasticsearch and Kibana in v7.6.2 are loading slowly. It took us 2.52s to load a page completely. You can see the screenshot that Dynatrace Managed shows us. Meanwhile, /index.light.css executed lot…

---

## [Urgent Cluster suggestion required](https://discuss.elastic.co/t/urgent-cluster-suggestion-required/35658)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 11\
**Last updated:** [December 4, 2015, 7:14am UTC](https://discuss.elastic.co/t/urgent-cluster-suggestion-required/35658 "2015-12-04T07:14:01Z")

</div>

Hi All, I have recently added client nodes to my cluster which will ships logs from every server to es. Unfortunately es and java versions installed on the client node machines differ than my data nodes configuration…

---

## [❗️ Issue: NotEntitledException after upgrading to Elasticsearch 8.18.1](https://discuss.elastic.co/t/issue-notentitledexception-after-upgrading-to-elasticsearch-8-18-1/381148)

<div class="topic-metadata">

**Author:** [@Shubham.Kumar](https://discuss.elastic.co/u/Shubham.Kumar)\
**Replies:** 13\
**Last updated:** [August 21, 2025, 10:09am UTC](https://discuss.elastic.co/t/issue-notentitledexception-after-upgrading-to-elasticsearch-8-18-1/381148 "2025-08-21T10:09:00Z")

</div>

Hi everyone, After upgrading to Elasticsearch 8.18.1, I'm encountering the following warning during startup: \[2025-08-20T05:39:57,789\]\[WARN \]\[o.e.e.r.p.P.r.o.e.r.root \] \[node-1\] Not entitled: component \[rest-root\], mod…

---

## [Is there a way to use TransportClient that will use all available servers in the cluster without specifically specifying them?](https://discuss.elastic.co/t/is-there-a-way-to-use-transportclient-that-will-use-all-available-servers-in-the-cluster-without-specifically-specifying-them/10521)

<div class="topic-metadata">

**Author:** [@Ron\_Sher](https://discuss.elastic.co/u/Ron_Sher)\
**Replies:** 13\
**Last updated:** [January 30, 2013, 3:16pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-use-transportclient-that-will-use-all-available-servers-in-the-cluster-without-specifically-specifying-them/10521 "2013-01-30T15:16:58Z")

</div>

Hi, I have several environments (test & production) that have elasticsearch clusters. I would like to use the TransportClient and give it the cluster name and have it figure out automatically which servers exist …

---

## [How to configure a cluster with enable X-Pac(security)?](https://discuss.elastic.co/t/how-to-configure-a-cluster-with-enable-x-pac-security/243801)

<div class="topic-metadata">

**Author:** [@HenriqueNogueira](https://discuss.elastic.co/u/HenriqueNogueira)\
**Replies:** 9\
**Last updated:** [August 5, 2020, 6:17pm UTC](https://discuss.elastic.co/t/how-to-configure-a-cluster-with-enable-x-pac-security/243801 "2020-08-05T18:17:16Z")

</div>

I'm using version 7.8.1 with x-pac enabled and I can't get my second node to connect to my cluster, what should I do?

---

## [Easiest OS to install ELK 7.x on?](https://discuss.elastic.co/t/easiest-os-to-install-elk-7-x-on/218632)

<div class="topic-metadata">

**Author:** [@greenwar](https://discuss.elastic.co/u/greenwar)\
**Replies:** 9\
**Last updated:** [February 10, 2020, 10:18pm UTC](https://discuss.elastic.co/t/easiest-os-to-install-elk-7-x-on/218632 "2020-02-10T22:18:13Z")

</div>

Hello, Really NEW user here, and also really new or have forgotten most of my LINUX Skills. Anyway, I tried setting up a VM running CENTOS version 7 and then installed JAVA as instructions stated. Then I installed Elast…

---

## [Getting on the "total" of a term](https://discuss.elastic.co/t/getting-on-the-total-of-a-term/80024)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 9\
**Last updated:** [March 26, 2017, 3:18pm UTC](https://discuss.elastic.co/t/getting-on-the-total-of-a-term/80024 "2017-03-26T15:18:22Z")

</div>

Hi, When I type in: GET filebeat-\*/log/\_search { "query": { "term" : {"terminationCause": "SUCCESS"} } } I get: { "took": 25, "timed\_out": false, "\_shards": { "total": 5, "successful…

---

## [Elastic fleet issue- it takes long time to load](https://discuss.elastic.co/t/elastic-fleet-issue-it-takes-long-time-to-load/368311)

<div class="topic-metadata">

**Author:** [@Mahmoud0x](https://discuss.elastic.co/u/Mahmoud0x)\
**Replies:** 15\
**Last updated:** [October 7, 2024, 3:35pm UTC](https://discuss.elastic.co/t/elastic-fleet-issue-it-takes-long-time-to-load/368311 "2024-10-07T15:35:04Z")

</div>

There is a problem with fleet section in kibana takes so mush time loading

---

## [What are different subscription available in ES 5.5.2](https://discuss.elastic.co/t/what-are-different-subscription-available-in-es-5-5-2/177825)

<div class="topic-metadata">

**Author:** [@rahulka](https://discuss.elastic.co/u/rahulka)\
**Replies:** 13\
**Last updated:** [April 22, 2019, 12:02pm UTC](https://discuss.elastic.co/t/what-are-different-subscription-available-in-es-5-5-2/177825 "2019-04-22T12:02:13Z")

</div>

Hi, We are planning to use ES 5.5.2 version. Can you help me understand different subscription available for this release. Information about latest one is already available on the internet site.

---

## [Kv split everything after ";"](https://discuss.elastic.co/t/kv-split-everything-after/180403)

<div class="topic-metadata">

**Author:** [@ghost3h](https://discuss.elastic.co/u/ghost3h)\
**Replies:** 9\
**Last updated:** [May 20, 2019, 1:53pm UTC](https://discuss.elastic.co/t/kv-split-everything-after/180403 "2019-05-20T13:53:57Z")

</div>

So I am trying to split the following data format examples: 'process\_count'=259;300;400; 'cpu'=3.8%;;; 'available'=27.29GiB;50;57; I essentially want my key pair to be name and first value, e.g "process\_count" =\> "…

---

## [Getting timestamp inside timestamp](https://discuss.elastic.co/t/getting-timestamp-inside-timestamp/286511)

<div class="topic-metadata">

**Author:** [@Prasang-Biyani](https://discuss.elastic.co/u/Prasang-Biyani)\
**Replies:** 12\
**Last updated:** [October 13, 2021, 5:28am UTC](https://discuss.elastic.co/t/getting-timestamp-inside-timestamp/286511 "2021-10-13T05:28:05Z")

</div>

Hi Everyone, I am new to the Logstash, so please forgive me for asking silly question. I am trying to convert timestamp from the log file into @timestamp. Here is my logstash conf file. input { udp { port…

---

## [Elasticsearch sql response change](https://discuss.elastic.co/t/elasticsearch-sql-response-change/187730)

<div class="topic-metadata">

**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\
**Replies:** 17\
**Last updated:** [July 1, 2019, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-sql-response-change/187730 "2019-07-01T10:14:53Z")

</div>

Hi, when i use the match query like below: GET test/\_search { "query": { "match": { "name": "elastic" } } } The response is : { "took" : 2, "timed\_out" : false, "\_shards" : { "total" : 1, …

---

## [Geopoint based pie chart map for success and failed results?](https://discuss.elastic.co/t/geopoint-based-pie-chart-map-for-success-and-failed-results/273842)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 10\
**Last updated:** [May 28, 2021, 6:31am UTC](https://discuss.elastic.co/t/geopoint-based-pie-chart-map-for-success-and-failed-results/273842 "2021-05-28T06:31:06Z")

</div>

Hello I have a index with geopoints and a result which is either "failure" or "success". I would like to draw points on the map with each result but red points are failures and green points are successful. The issue is…

---

## [Kibana- not able to login using saml](https://discuss.elastic.co/t/kibana-not-able-to-login-using-saml/227321)

<div class="topic-metadata">

**Author:** [@jbaskaran\_123](https://discuss.elastic.co/u/jbaskaran_123)\
**Replies:** 10\
**Last updated:** [April 22, 2020, 4:20am UTC](https://discuss.elastic.co/t/kibana-not-able-to-login-using-saml/227321 "2020-04-22T04:20:49Z")

</div>

We have configured SAML for our Elasticsearch cluster running in Kubernetes. when I hit the application URL, it redirects to IDP login (IDMS) but after logging in it shows "you are not authorized to use this application…

---

## [Readiness check for Elasticsearch coordinator nodes behind a load balancer?](https://discuss.elastic.co/t/readiness-check-for-elasticsearch-coordinator-nodes-behind-a-load-balancer/386690)

<div class="topic-metadata">

**Author:** [@sagar\_cenation](https://discuss.elastic.co/u/sagar_cenation)\
**Replies:** 33\
**Last updated:** [July 29, 2026, 10:54am UTC](https://discuss.elastic.co/t/readiness-check-for-elasticsearch-coordinator-nodes-behind-a-load-balancer/386690 "2026-07-29T10:54:03Z")

</div>

Hello, I am trying to choose the right readiness check for Elasticsearch coordinator nodes behind a load balancer / proxy. We are on Elasticsearch 8.8.2. The coorinator nodes serve search traffic behind a load balancer…

---

## [Elasticsarch Garbage Collection Issue](https://discuss.elastic.co/t/elasticsarch-garbage-collection-issue/229211)

<div class="topic-metadata">

**Author:** [@sam0853](https://discuss.elastic.co/u/sam0853)\
**Replies:** 14\
**Last updated:** [April 23, 2020, 6:27am UTC](https://discuss.elastic.co/t/elasticsarch-garbage-collection-issue/229211 "2020-04-23T06:27:14Z")

</div>

Hi Team, I am continuously observing, my ES cluster goes into \[GC\] mode. Below is my cluster configuration, 3 datastore having below H/W configuration, 1: 8C/64GB/6TB 2: 8C/64GB/6TB 3: 8C/64GB/6TB Current Cluster S…

---

## [ELSER hybrid search. Error: '\[sub\_searches\] query malformed, no start\_object after query name')](https://discuss.elastic.co/t/elser-hybrid-search-error-sub-searches-query-malformed-no-start-object-after-query-name/351802)

<div class="topic-metadata">

**Author:** [@SanthoshKMurugadass](https://discuss.elastic.co/u/SanthoshKMurugadass)\
**Replies:** 12\
**Last updated:** [January 29, 2024, 1:44pm UTC](https://discuss.elastic.co/t/elser-hybrid-search-error-sub-searches-query-malformed-no-start-object-after-query-name/351802 "2024-01-29T13:44:06Z")

</div>

I am trying a develop a hybrid search query by combing ELSER Semantic and Full Text searches using Python client. Below is my sample code. I am getting a error '\[sub\_searches\] query malformed, no start\_object after quer…

---

## [Add new field to index based on maths calculation from other fields in the same index](https://discuss.elastic.co/t/add-new-field-to-index-based-on-maths-calculation-from-other-fields-in-the-same-index/337571)

<div class="topic-metadata">

**Author:** [@patcan](https://discuss.elastic.co/u/patcan)\
**Replies:** 12\
**Last updated:** [July 7, 2023, 9:15pm UTC](https://discuss.elastic.co/t/add-new-field-to-index-based-on-maths-calculation-from-other-fields-in-the-same-index/337571 "2023-07-07T21:15:07Z")

</div>

Hi, I use elastic-agent on EKS with kubernetes integration. One of the field such as kubernetes.volume.fs.used.pct in the index provides incorrect values I was able to get the correct value using the following formula…

---

## [Share \[1000/1000\] elasticsearch one node](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192)

<div class="topic-metadata">

**Author:** [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Replies:** 13\
**Last updated:** [June 16, 2020, 4:34am UTC](https://discuss.elastic.co/t/share-1000-1000-elasticsearch-one-node/237192 "2020-06-16T04:34:25Z")

</div>

hi, I am running elasticsearch with one node and currently sahre on the elasticserach 1000/1000 is this what causes elasticserach not to be able to create indexes? is there an idea for the problem that I experienced t…

---

## [Grok parsing, still not solved](https://discuss.elastic.co/t/grok-parsing-still-not-solved/167676)

<div class="topic-metadata">

**Author:** [@heskez](https://discuss.elastic.co/u/heskez)\
**Replies:** 14\
**Last updated:** [February 13, 2019, 1:37pm UTC](https://discuss.elastic.co/t/grok-parsing-still-not-solved/167676 "2019-02-13T13:37:46Z")

</div>

Hello, I'm still struggling with the syslog parsing issue. So, my config file looks like this: input { udp { port =\> 5514 type =\> syslog } tcp { port =\> 5514 type =\> syslog } } filter { grok { …

---

## [Can't get geoip to work](https://discuss.elastic.co/t/cant-get-geoip-to-work/160577)

<div class="topic-metadata">

**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\
**Replies:** 11\
**Last updated:** [December 13, 2018, 1:51pm UTC](https://discuss.elastic.co/t/cant-get-geoip-to-work/160577 "2018-12-13T13:51:30Z")

</div>

All, Despite many, many attempts, I've not been able to make geoip work. I don't see the "clientip" field in any of my indices, nor is geoip an option when trying to create a Coordinate Map | Geo Coordinates Bucket | A…

---

## [Filebeat vs elastic putput](https://discuss.elastic.co/t/filebeat-vs-elastic-putput/327506)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 10\
**Last updated:** [March 12, 2023, 9:47pm UTC](https://discuss.elastic.co/t/filebeat-vs-elastic-putput/327506 "2023-03-12T21:47:10Z")

</div>

Hi Need a wall to play against here TIA :slight\_smile: What am I missing out on, I wonder, when trying to launch filebeat.service. I'm see these errors: ==\> /var/log/filebeat/filebeat-20230312.ndjson \<== {"log.level":…

---

## [How to identify specific users who are submitting slowlog queries?](https://discuss.elastic.co/t/how-to-identify-specific-users-who-are-submitting-slowlog-queries/312120)

<div class="topic-metadata">

**Author:** [@Apprentice](https://discuss.elastic.co/u/Apprentice)\
**Replies:** 10\
**Last updated:** [August 26, 2022, 7:19am UTC](https://discuss.elastic.co/t/how-to-identify-specific-users-who-are-submitting-slowlog-queries/312120 "2022-08-26T07:19:50Z")

</div>

I'm trying to create a dashboard that can identify slow queries and the user who submitted them. Was wondering if there were any examples/guides I could follow online as I am a bit stumped on how to go about this (am a b…

---

## [Syslog kills process in logstash](https://discuss.elastic.co/t/syslog-kills-process-in-logstash/275319)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 9\
**Last updated:** [June 9, 2021, 3:58pm UTC](https://discuss.elastic.co/t/syslog-kills-process-in-logstash/275319 "2021-06-09T15:58:33Z")

</div>

Hi Guy's! I need your help with this problem, please. Means that, syslog is killing the process in logstash, this means that it stops listening to syslog, I don't know why this is happening, the process stops working f…

---

## [Custom Output stops receiving batches after errors](https://discuss.elastic.co/t/custom-output-stops-receiving-batches-after-errors/128235)

<div class="topic-metadata">

**Author:** [@Justin\_Seely](https://discuss.elastic.co/u/Justin_Seely)\
**Replies:** 9\
**Last updated:** [April 26, 2018, 3:08am UTC](https://discuss.elastic.co/t/custom-output-stops-receiving-batches-after-errors/128235 "2018-04-26T03:08:38Z")

</div>

Hi all, I have a custom output (writing to Azure Event Hubs) and when I introduce network failures, causing the output to return errors, it stops receiving batches from Beats. Beats still appears to be running and recei…

---

## [Please, tell about the success story about ES usage on production](https://discuss.elastic.co/t/please-tell-about-the-success-story-about-es-usage-on-production/6022)

<div class="topic-metadata">

**Author:** [@vsiryi](https://discuss.elastic.co/u/vsiryi)\
**Replies:** 17\
**Last updated:** [December 9, 2011, 5:58pm UTC](https://discuss.elastic.co/t/please-tell-about-the-success-story-about-es-usage-on-production/6022 "2011-12-09T17:58:21Z")

</div>

I want to convince my customer to use the ES. To do this I need success stories about ES usage on production. I tried to find similar information at the ElasticSearch official site and in Google but not found. I'll…

---

## [Problème: "\_dateparsefailure"](https://discuss.elastic.co/t/probleme-dateparsefailure/357750)

<div class="topic-metadata">

**Author:** [@AHA](https://discuss.elastic.co/u/AHA)\
**Replies:** 20\
**Last updated:** [April 24, 2024, 10:39am UTC](https://discuss.elastic.co/t/probleme-dateparsefailure/357750 "2024-04-24T10:39:19Z")

</div>

Bonjour tout le monde! Je suis entrain de configuré logstash, je veux afficher mes données avec la date d'enregistrement, et tout se passe bien seulement on affiche aussi la date d'aujourd'hui et si je lance GET pour vo…

---

## [Are hashes/objects saved in order?](https://discuss.elastic.co/t/are-hashes-objects-saved-in-order/243881)

<div class="topic-metadata">

**Author:** [@spdoes](https://discuss.elastic.co/u/spdoes)\
**Replies:** 10\
**Last updated:** [August 5, 2020, 5:33pm UTC](https://discuss.elastic.co/t/are-hashes-objects-saved-in-order/243881 "2020-08-05T17:33:15Z")

</div>

if I insert this field in this order: "name\_of\_field": {"first":1,"second":2,"third":3} will it always save in the same order as I inserted ? Based on my test, inserting multiple objects like that can make it save it …

---

## [Uptime does not display the details accurately](https://discuss.elastic.co/t/uptime-does-not-display-the-details-accurately/316214)

<div class="topic-metadata">

**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\
**Replies:** 9\
**Last updated:** [October 17, 2022, 3:09pm UTC](https://discuss.elastic.co/t/uptime-does-not-display-the-details-accurately/316214 "2022-10-17T15:09:25Z")

</div>

Hi, ELK 8.4.1 does not show correct details in uptime home. The graph is blank and monitors does not show correct time. But I can go through the monitor and check latest steps's data by clicking on next Did any one f…

---

## [Sql query with like in "elasticSearch Sql" bugs?](https://discuss.elastic.co/t/sql-query-with-like-in-elasticsearch-sql-bugs/315621)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 17\
**Last updated:** [October 4, 2022, 2:22pm UTC](https://discuss.elastic.co/t/sql-query-with-like-in-elasticsearch-sql-bugs/315621 "2022-10-04T14:22:41Z")

</div>

i' ve simple query but not have resulset with SELECT \* FROM "errors\_prima\*" where message like '%fiscal%' (sorry is closed on test not is the problem) but if use SELECT \* FROM "errors\_prima\*" where message like '%…

---

## [We use id to update or delete without routing. I can't find this document. Is there a way to broadcast this operation without routing to all shards?](https://discuss.elastic.co/t/we-use-id-to-update-or-delete-without-routing-i-cant-find-this-document-is-there-a-way-to-broadcast-this-operation-without-routing-to-all-shards/241599)

<div class="topic-metadata">

**Author:** [@Liyes](https://discuss.elastic.co/u/Liyes)\
**Replies:** 11\
**Last updated:** [July 17, 2020, 10:09am UTC](https://discuss.elastic.co/t/we-use-id-to-update-or-delete-without-routing-i-cant-find-this-document-is-there-a-way-to-broadcast-this-operation-without-routing-to-all-shards/241599 "2020-07-17T10:09:08Z")

</div>

Our index has 3 primary shards. Previously, id was used for routing by default. Now we need to change to use another field as routing, and create a docuemnt based on this routing, but when we do update or delete operati…

---

## [Elasticsearch OpenNLP Ingest Processor plugin installation on Elasticsearch cloud service](https://discuss.elastic.co/t/elasticsearch-opennlp-ingest-processor-plugin-installation-on-elasticsearch-cloud-service/233724)

<div class="topic-metadata">

**Author:** [@Jeremy\_Gachet](https://discuss.elastic.co/u/Jeremy_Gachet)\
**Replies:** 9\
**Last updated:** [May 22, 2020, 6:26am UTC](https://discuss.elastic.co/t/elasticsearch-opennlp-ingest-processor-plugin-installation-on-elasticsearch-cloud-service/233724 "2020-05-22T06:26:05Z")

</div>

Hello, I'm trying to install OpenNLP Ingest Processor plugin on Elastic cloud. But after uploading the zip file we have to download the model Manually. IMPORTANT : If you are running this plugin with Elasticsearch 6.…

---

## [ElasticSearch 1.7: query time spike, and the application processor crash after that](https://discuss.elastic.co/t/elasticsearch-1-7-query-time-spike-and-the-application-processor-crash-after-that/109673)

<div class="topic-metadata">

**Author:** [@Weizhi\_Li](https://discuss.elastic.co/u/Weizhi_Li)\
**Replies:** 9\
**Last updated:** [December 1, 2017, 3:08am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-query-time-spike-and-the-application-processor-crash-after-that/109673 "2017-12-01T03:08:43Z")

</div>

I used ES as the search engine, the QPS is high (i. e, 1500 rpm), and find some time there is a spike in some nodes, and I have set up timeout is 2s. The traffic is stuck after that. Any ideas to solve this issues? Cac…

---

## [Compounding a phrase and prefix](https://discuss.elastic.co/t/compounding-a-phrase-and-prefix/69226)

<div class="topic-metadata">

**Author:** [@daveharig](https://discuss.elastic.co/u/daveharig)\
**Replies:** 9\
**Last updated:** [December 21, 2016, 1:01pm UTC](https://discuss.elastic.co/t/compounding-a-phrase-and-prefix/69226 "2016-12-21T13:01:01Z")

</div>

Is it possible to compound phrase and prefix? The user types in ‘Spring Mea’ Matching everything that has ‘Spring Mea’ in it like ‘Spring Meadows’ ‘High Spring Meals' vs. just search for results that match dire…

---

## [Filebeat set add\_id: ~ does not take effect](https://discuss.elastic.co/t/filebeat-set-add-id-does-not-take-effect/336825)

<div class="topic-metadata">

**Author:** [@yt\_h](https://discuss.elastic.co/u/yt_h)\
**Replies:** 17\
**Last updated:** [July 28, 2023, 3:19am UTC](https://discuss.elastic.co/t/filebeat-set-add-id-does-not-take-effect/336825 "2023-07-28T03:19:49Z")

</div>

I have a filebeat 7.16.2 to extract messages in kafka 3.4. After setting add\_id: ~, restarting filebeat will repeatedly send data to elasticsearch. filebeat.yml: filebeat.yml: | filebeat.inputs: - type: kafka h…

---

## [JavaScript](https://discuss.elastic.co/t/javascript/257561)

<div class="topic-metadata">

**Author:** [@ravishka](https://discuss.elastic.co/u/ravishka)\
**Replies:** 11\
**Last updated:** [December 23, 2020, 1:53pm UTC](https://discuss.elastic.co/t/javascript/257561 "2020-12-23T13:53:48Z")

</div>

Can I put Javascript code or library on the kibana canvas?

---

## [Issue about automatically created index](https://discuss.elastic.co/t/issue-about-automatically-created-index/126059)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 11\
**Last updated:** [April 1, 2018, 9:40pm UTC](https://discuss.elastic.co/t/issue-about-automatically-created-index/126059 "2018-04-01T21:40:20Z")

</div>

Hello ELK community ! I'll explain you a big problem, look at this : I empty the cache : curl -XDELETE 'http://localhost:9200/\_all' Answer : {"acknowledged":true} I display my indexes: curl -XGET 'localhost:9…

---

## [ML doesn't track "array" type data using by\_field\_name individually](https://discuss.elastic.co/t/ml-doesnt-track-array-type-data-using-by-field-name-individually/227967)

<div class="topic-metadata">

**Author:** [@gatling822](https://discuss.elastic.co/u/gatling822)\
**Replies:** 12\
**Last updated:** [April 18, 2020, 1:34pm UTC](https://discuss.elastic.co/t/ml-doesnt-track-array-type-data-using-by-field-name-individually/227967 "2020-04-18T13:34:45Z")

</div>

Kibana/Elastic version 7.5.2 I recently set up a new ML job in Kibana and what I want to do is track individual error categories over time broken down by PCR (similar to host) over the population of Host Endpoints (BINs…

---

## [Terms is not fetching the results if total number of terms is more](https://discuss.elastic.co/t/terms-is-not-fetching-the-results-if-total-number-of-terms-is-more/91598)

<div class="topic-metadata">

**Author:** [@venkat2758](https://discuss.elastic.co/u/venkat2758)\
**Replies:** 9\
**Last updated:** [July 5, 2017, 9:12pm UTC](https://discuss.elastic.co/t/terms-is-not-fetching-the-results-if-total-number-of-terms-is-more/91598 "2017-07-05T21:12:38Z")

</div>

I am tring to filter the data using Elasticsearch terms query.I am passing morethan 300000 inputs to the terms query.Finally it ended up by showing the memory issue. How can i resolve this issue. Please help. Thanks …

---

## [How can i create different indices for different module](https://discuss.elastic.co/t/how-can-i-create-different-indices-for-different-module/269095)

<div class="topic-metadata">

**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\
**Replies:** 11\
**Last updated:** [April 7, 2021, 4:45pm UTC](https://discuss.elastic.co/t/how-can-i-create-different-indices-for-different-module/269095 "2021-04-07T16:45:03Z")

</div>

Hello, i have two modules activated Apache and tomcat,, i want to store logs of this two in two different indices for better result but i am not able to get how to do that. please help me to set this configuration in m…

---

## [Search rejected due to missing shards \[\[tasklist-flownode-instance-1.0.0\_\]\[0\]\]. Consider using \`allow\_partial\_search\_results\` setting to bypass this error](https://discuss.elastic.co/t/search-rejected-due-to-missing-shards-tasklist-flownode-instance-1-0-0-0-consider-using-allow-partial-search-results-setting-to-bypass-this-error/365248)

<div class="topic-metadata">

**Author:** [@mlngupta](https://discuss.elastic.co/u/mlngupta)\
**Replies:** 14\
**Last updated:** [August 21, 2024, 8:57am UTC](https://discuss.elastic.co/t/search-rejected-due-to-missing-shards-tasklist-flownode-instance-1-0-0-0-consider-using-allow-partial-search-results-setting-to-bypass-this-error/365248 "2024-08-21T08:57:37Z")

</div>

Hi Team, We have Elasticsearch running with 7 node and version 7.17.1 running on EKS pods. Recently we noticed that the issue with one of the node due to PVC got issue because of EFS\_CSI driver. Once issue fixed PVC re…

---

## [Increase the number of shrads](https://discuss.elastic.co/t/increase-the-number-of-shrads/141425)

<div class="topic-metadata">

**Author:** [@cool\_arun](https://discuss.elastic.co/u/cool_arun)\
**Replies:** 9\
**Last updated:** [July 25, 2018, 6:37am UTC](https://discuss.elastic.co/t/increase-the-number-of-shrads/141425 "2018-07-25T06:37:31Z")

</div>

How to increase the the number of shrads of elasticsearch index

[Previous page](https://discuss.elastic.co/top.md?page=206&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=208&per_page=50&period=all)
