# Top **URL:** https://discuss.elastic.co/top.md?page=208&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 209 --- ## [Targeting Field Content](https://discuss.elastic.co/t/targeting-field-content/249543)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 16\ **Last updated:** [September 24, 2020, 8:10pm UTC](https://discuss.elastic.co/t/targeting-field-content/249543 "2020-09-24T20:10:42Z")
Hi, I am trying to get grok to target certain fields and extract the content that follows. For example: \3186\ I want to find c\_port and extract the number that follows, in this case 3186. I have tried … --- ## [Mapping: how to disable array of string?](https://discuss.elastic.co/t/mapping-how-to-disable-array-of-string/315782)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 10\ **Last updated:** [October 5, 2022, 3:42pm UTC](https://discuss.elastic.co/t/mapping-how-to-disable-array-of-string/315782 "2022-10-05T15:42:56Z")
We want to apply a real strict mapping , but arrays are still accepted and mess around our data pipeline (because after we use Apache Spark to read data). We (at our team level) have no control on the incoming data. Ho… --- ## [Custom Logo Kibana 7.10.0 (guide)](https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 5:31pm UTC](https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686 "2020-12-04T17:31:08Z")
Verified on Kibana 7.10.0, running on Debian 10 (Buster). Applies for the same version in Windows. Hello, For all users like me, that need to customize the logos in Kibana, I share this guide that I have been creating … --- ## [ILM error killing all indexes](https://discuss.elastic.co/t/ilm-error-killing-all-indexes/298993)
**Author:** [@cstone1492](https://discuss.elastic.co/u/cstone1492)\ **Replies:** 9\ **Last updated:** [March 10, 2022, 3:06pm UTC](https://discuss.elastic.co/t/ilm-error-killing-all-indexes/298993 "2022-03-10T15:06:59Z")
The es instance I'm working with crashed, and attempting to restart the kernel leads to the run command immediately being killed (runES.sh: line 1: 92654 Killed ./bin/Elasticsearch). The log shows this … --- ## [Удаленный reindex в качестве средства бэкапа](https://discuss.elastic.co/t/reindex/153341)
**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\ **Replies:** 9\ **Last updated:** [October 25, 2018, 7:54am UTC](https://discuss.elastic.co/t/reindex/153341 "2018-10-25T07:54:55Z")
Добрый день. У меня есть задача - бэкапить индексы с одного ES кластера на другой. Для нее я в данный момент использую reindex API. Соединение между двумя кластерами нестабильное и может прерываться. Процесс реиндекса… --- ## [Logstash CPU gets pegged, all processing stops with Apache logs](https://discuss.elastic.co/t/logstash-cpu-gets-pegged-all-processing-stops-with-apache-logs/292985)
**Author:** [@erihar](https://discuss.elastic.co/u/erihar)\ **Replies:** 10\ **Last updated:** [December 27, 2021, 7:27pm UTC](https://discuss.elastic.co/t/logstash-cpu-gets-pegged-all-processing-stops-with-apache-logs/292985 "2021-12-27T19:27:40Z")
We are doing Apache accesslog ingestion into Logstash, from publicly-facing web servers. These work correctly, however after a day or two, some "crafty" requests come in, either from a security scan or hack attempt, and… --- ## [Search Performance Issue](https://discuss.elastic.co/t/search-performance-issue/12036)
**Author:** [@Maria\_John\_Franklin](https://discuss.elastic.co/u/Maria_John_Franklin)\ **Replies:** 11\ **Last updated:** [May 30, 2013, 3:15am UTC](https://discuss.elastic.co/t/search-performance-issue/12036 "2013-05-30T03:15:03Z")
Hi Friends, Elastic search Performance is very slow when i add multiple OR condition in query string..How to manage that one? Example ====== ( Discover OR the OR concepts OR and OR experiments OR… --- ## [Does Elastic Web Crawler supports noindex and nofollow directive](https://discuss.elastic.co/t/does-elastic-web-crawler-supports-noindex-and-nofollow-directive/344821)
**Author:** [@sebastianboelling](https://discuss.elastic.co/u/sebastianboelling)\ **Replies:** 9\ **Last updated:** [November 10, 2023, 5:10pm UTC](https://discuss.elastic.co/t/does-elastic-web-crawler-supports-noindex-and-nofollow-directive/344821 "2023-11-10T17:10:51Z")
Hi all, does the Elastic Web Crawler supports noindex and nofollow directive? I've found this feature only on the App Search Web Crawler reference Web crawler reference | App Search documentation \[8.10\] | Elastic and no… --- ## [I can't start apm servicemap](https://discuss.elastic.co/t/i-cant-start-apm-servicemap/233033)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 9\ **Last updated:** [May 28, 2020, 8:53am UTC](https://discuss.elastic.co/t/i-cant-start-apm-servicemap/233033 "2020-05-28T08:53:02Z")
yaml context kind: ApmServer metadata: name: apm-server spec: version: 7.7.0 count: 1 http: tls: selfSignedCertificate: disabled: true service: spec: type: NodePort p… --- ## [Pipeline Grok Expressions](https://discuss.elastic.co/t/pipeline-grok-expressions/169174)
**Author:** [@Sharad\_Ananth](https://discuss.elastic.co/u/Sharad_Ananth)\ **Replies:** 9\ **Last updated:** [February 20, 2019, 6:45pm UTC](https://discuss.elastic.co/t/pipeline-grok-expressions/169174 "2019-02-20T18:45:36Z")
I have a logline : 172.17.60.26 - - \[14/Feb/2019:01:50:47 -0000\] "GET http://live-paytv.mobitv.com/mm/dash/live/19033/LIVESERVICE\_2403/V5000\_W/258351504.m4s http/1.1" 200 3696282 200 3696282 0 0 591 579 674 566 1.695 1.… --- ## [Trying to avoid manual changes to files pre-logstash](https://discuss.elastic.co/t/trying-to-avoid-manual-changes-to-files-pre-logstash/113824)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 9\ **Last updated:** [January 4, 2018, 9:20pm UTC](https://discuss.elastic.co/t/trying-to-avoid-manual-changes-to-files-pre-logstash/113824 "2018-01-04T21:20:41Z")
Hello, I have csv files that include bad output from SQL output that logstash fails to parse because of quote marks that stay open. Example line: "1";"2";"3";"N;"N;"N;"N;"N;"N;"N;"N;"N;"N;"N;"N;"N;"N I am fixing them … --- ## [Irrelevant field search results](https://discuss.elastic.co/t/irrelevant-field-search-results/293188)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 10\ **Last updated:** [January 20, 2022, 9:12am UTC](https://discuss.elastic.co/t/irrelevant-field-search-results/293188 "2022-01-20T09:12:58Z")
Hi, I've made this Lucene query in Kibana to search if Nginx access logs contain a URL with the word "malware": source.as.organization.name: (/.\*\[Mm\]\[Aa\]\[Ll\]\[Ww\]\[Aa\]\[Rr\]\[Ee\].\*/) But in Kibana I'm getting the results … --- ## [Logstash log showing "error:1e00007d:Cipher functions:OPENSSL\_internal:INVALID\_NONCE"](https://discuss.elastic.co/t/logstash-log-showing-errorcipher-functionsinvalid-nonce/189418)
**Author:** [@xchai](https://discuss.elastic.co/u/xchai)\ **Replies:** 10\ **Last updated:** [August 20, 2019, 12:30am UTC](https://discuss.elastic.co/t/logstash-log-showing-errorcipher-functionsinvalid-nonce/189418 "2019-08-20T00:30:05Z")
Hi, we are testing ELK 6.6.1 on s390x platform (Linux on Z). After starting the ELK 6.6.1 stack, everything seems working fine and we can see logs on Kibana UI, but logstash log has following entries from time to time: … --- ## [Logstash file as input plugin isn't working](https://discuss.elastic.co/t/logstash-file-as-input-plugin-isnt-working/126806)
**Author:** [@aysala](https://discuss.elastic.co/u/aysala)\ **Replies:** 10\ **Last updated:** [April 5, 2018, 10:06pm UTC](https://discuss.elastic.co/t/logstash-file-as-input-plugin-isnt-working/126806 "2018-04-05T22:06:43Z")
Hi, I am currently running ELK stack on my dcos cluster. I wanted to add few more log paths to Logstash configuration using file input plugin as follows. input { file { path =\> \['/var/lib/mesos/slave/slaves/… --- ## [Elastic search and hadoop](https://discuss.elastic.co/t/elastic-search-and-hadoop/10178)
**Author:** [@Tan\_Chween\_Tah](https://discuss.elastic.co/u/Tan_Chween_Tah)\ **Replies:** 19\ **Last updated:** [January 2, 2013, 5:18am UTC](https://discuss.elastic.co/t/elastic-search-and-hadoop/10178 "2013-01-02T05:18:51Z")
Hi all I am new to elasictc search. got some problem here setting up elasictic search. i got a hadoop running up now . one master and one slave . but after i download elastic search and try to run /bin/elasticse… --- ## [2 Data nodes being used unevenly](https://discuss.elastic.co/t/2-data-nodes-being-used-unevenly/200521)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 11\ **Last updated:** [September 22, 2019, 2:30pm UTC](https://discuss.elastic.co/t/2-data-nodes-being-used-unevenly/200521 "2019-09-22T14:30:18Z")
ES - v6.4.1 3Master, 2Data, 2Coord nodes One replica setup. I use \_routing. Can somebody please explain me the below behavior ?? When i send continuous requests to my both coordinating nodes, i have observed that onl… --- ## [Why am I getting such poor performance?](https://discuss.elastic.co/t/why-am-i-getting-such-poor-performance/155567)
**Author:** [@monk](https://discuss.elastic.co/u/monk)\ **Replies:** 13\ **Last updated:** [November 20, 2018, 4:39pm UTC](https://discuss.elastic.co/t/why-am-i-getting-such-poor-performance/155567 "2018-11-20T16:39:30Z")
I've got a large (23M record) CSV file I want to upload once to ES. I've made a few small tweaks to my LS config (10 workers, batch size 5000, Xms and Xmx 5 Gb), but it still uploads only about 1000 records/s, compared t… --- ## [Need help in undertsanding Elastic Hot Threads API output](https://discuss.elastic.co/t/need-help-in-undertsanding-elastic-hot-threads-api-output/319265)
**Author:** [@vinit0711](https://discuss.elastic.co/u/vinit0711)\ **Replies:** 16\ **Last updated:** [November 24, 2022, 2:43pm UTC](https://discuss.elastic.co/t/need-help-in-undertsanding-elastic-hot-threads-api-output/319265 "2022-11-24T14:43:30Z")
I am running a single Node Elastic Cluster on a Server . Filebeat is used as collector for netflow data . Further FIlebeat is giving output to Elastic . Some Important Point Server has 32 core CPU and 500 GB RAM . I se… --- ## [Filebeats Sending Data to the Wrong index (ignoring .yml config and using default index)](https://discuss.elastic.co/t/filebeats-sending-data-to-the-wrong-index-ignoring-yml-config-and-using-default-index/216708)
**Author:** [@guibarati](https://discuss.elastic.co/u/guibarati)\ **Replies:** 9\ **Last updated:** [January 30, 2020, 2:17pm UTC](https://discuss.elastic.co/t/filebeats-sending-data-to-the-wrong-index-ignoring-yml-config-and-using-default-index/216708 "2020-01-30T14:17:39Z")
Hi, I'm testing a filebeats indexing of JSON content created with wireshark. I have the filebeat.yml configured as below, but the logs keep going to the default filebeats index, (filebeat-7.5.2-2020.01.27-000001). Can… --- ## [Watcher Http Input - PKIX path building failed](https://discuss.elastic.co/t/watcher-http-input-pkix-path-building-failed/348279)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 14\ **Last updated:** [November 30, 2023, 7:52pm UTC](https://discuss.elastic.co/t/watcher-http-input-pkix-path-building-failed/348279 "2023-11-30T19:52:34Z")
Hi, I create a watcher to monitoring de HEALTH of the Cluster. I did get this error on the watcher response: I also check my kibana configuration and I have TLS config : I dont know why this error happend! --- ## [Adding other nodes](https://discuss.elastic.co/t/adding-other-nodes/191057)
**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\ **Replies:** 14\ **Last updated:** [July 24, 2019, 11:18am UTC](https://discuss.elastic.co/t/adding-other-nodes/191057 "2019-07-24T11:18:30Z")
Hi, all. We want to add 2 more (master-eligible) nodes to our single-server cluster. Some experimentation on multiple dummy servers showed that the only thing I need to do for that is add discovery.zen.ping.unicast.hosts… --- ## [Export PDF/Vector Graphic without installing 1000 tools](https://discuss.elastic.co/t/export-pdf-vector-graphic-without-installing-1000-tools/105792)
**Author:** [@Schizo](https://discuss.elastic.co/u/Schizo)\ **Replies:** 10\ **Last updated:** [November 7, 2017, 5:11pm UTC](https://discuss.elastic.co/t/export-pdf-vector-graphic-without-installing-1000-tools/105792 "2017-11-07T17:11:14Z")
Is there an easy way of exporting a PDF or a vector graph without the need of installing additional tools? At least a printable html file, that reorganizes better? --- ## [Dashboards for Suricata \> Filebeat \> Logstash Setup](https://discuss.elastic.co/t/dashboards-for-suricata-filebeat-logstash-setup/372436)
**Author:** [@elastirroot](https://discuss.elastic.co/u/elastirroot)\ **Replies:** 11\ **Last updated:** [December 29, 2024, 3:10am UTC](https://discuss.elastic.co/t/dashboards-for-suricata-filebeat-logstash-setup/372436 "2024-12-29T03:10:19Z")
Hi, I have my Stack setup across two machines. The first with Suricata and filebeat and the other logstash and Kibana/Elasticsearch. tcpdump confirms logs are being sent over and I recently figured out how to import my… --- ## [Finding top users moving around vs stationary](https://discuss.elastic.co/t/finding-top-users-moving-around-vs-stationary/142844)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 16\ **Last updated:** [August 9, 2018, 8:33am UTC](https://discuss.elastic.co/t/finding-top-users-moving-around-vs-stationary/142844 "2018-08-09T08:33:30Z")
Hi, Let's say we have multiple servers providing a service. Users can connect to any of the server and get served. There is a unique ID for a user and the server. We have log when a user 'connects' to a particular serv… --- ## [Validation of APM-approach across transactions and spans](https://discuss.elastic.co/t/validation-of-apm-approach-across-transactions-and-spans/162805)
**Author:** [@jhoninck](https://discuss.elastic.co/u/jhoninck)\ **Replies:** 12\ **Last updated:** [January 7, 2019, 2:27pm UTC](https://discuss.elastic.co/t/validation-of-apm-approach-across-transactions-and-spans/162805 "2019-01-07T14:27:40Z")
Would like to validate my approach for APM. We have a web-server application. Inside that application we can identify the message being send to a JMS queue. It is possible to identify: A. the application sending the … --- ## [Upgraded beats (7.10) still writing to old version indices](https://discuss.elastic.co/t/upgraded-beats-7-10-still-writing-to-old-version-indices/257405)
**Author:** [@rgeisman](https://discuss.elastic.co/u/rgeisman)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 6:12pm UTC](https://discuss.elastic.co/t/upgraded-beats-7-10-still-writing-to-old-version-indices/257405 "2020-12-03T18:12:03Z")
Hello all. A maddening problem. We upgraded our cluster to 7.10 (ES, Logstash, Metricbeat, Auditbeat, Filebeat). Since we use Logstash I manually loaded each index template for the beats and default dashboards, then I … --- ## [Really slow speed search ES 7.8](https://discuss.elastic.co/t/really-slow-speed-search-es-7-8/241191)
**Author:** [@Shryx\_Cetus](https://discuss.elastic.co/u/Shryx_Cetus)\ **Replies:** 9\ **Last updated:** [July 20, 2020, 2:22am UTC](https://discuss.elastic.co/t/really-slow-speed-search-es-7-8/241191 "2020-07-20T02:22:29Z")
hi guys, i just starting with ES 7.8 and i'm getting really slow search perfoming, i'm loading data from mysql to ES with this structure: https://paste.ofcode.org/pmYEUVmWGKGvwxr2FEJZvz and i'm trying to read it from p… --- ## [Elasticsearch-cli](https://discuss.elastic.co/t/elasticsearch-cli/346847)
**Author:** [@VijayIQA](https://discuss.elastic.co/u/VijayIQA)\ **Replies:** 11\ **Last updated:** [November 13, 2023, 11:06am UTC](https://discuss.elastic.co/t/elasticsearch-cli/346847 "2023-11-13T11:06:35Z")
Hi Team, while installing plugin or else using Elasticsearch-cli command getting an error. screenshot attached here. --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/346809)
**Author:** [@maycoonferreira](https://discuss.elastic.co/u/maycoonferreira)\ **Replies:** 17\ **Last updated:** [November 13, 2023, 6:54pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/346809 "2023-11-13T18:54:52Z")
Kibana server is not ready yet --- ## [IllegalStateException\[field \\"DISPLAY\_NAME\\" was indexed without position data](https://discuss.elastic.co/t/illegalstateexception-field-display-name-was-indexed-without-position-data/17194)
**Author:** [@cyrilforce](https://discuss.elastic.co/u/cyrilforce)\ **Replies:** 12\ **Last updated:** [April 30, 2014, 2:00pm UTC](https://discuss.elastic.co/t/illegalstateexception-field-display-name-was-indexed-without-position-data/17194 "2014-04-30T14:00:13Z")
Hi, I am trying to query some records via the span\_first query as below : { "from" : 100, "size" : 100, "query" : { "span\_first" : { "match" : { \* "span\_term" : { "DISPLAY\_NAME" : "… --- ## [Getting error when TTL is executed](https://discuss.elastic.co/t/getting-error-when-ttl-is-executed/16649)
**Author:** [@Arun\_Prasath](https://discuss.elastic.co/u/Arun_Prasath)\ **Replies:** 12\ **Last updated:** [March 28, 2014, 3:01pm UTC](https://discuss.elastic.co/t/getting-error-when-ttl-is-executed/16649 "2014-03-28T15:01:38Z")
Getting error when i applied TTL while creating Index. Able to search data. I set TTL for 4m , after 4m still i see data available. How to make TTL work and delete records after specified time. I'm using elastic… --- ## [Kibana report not reading \_source](https://discuss.elastic.co/t/kibana-report-not-reading-source/281625)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 10\ **Last updated:** [August 26, 2021, 3:40am UTC](https://discuss.elastic.co/t/kibana-report-not-reading-source/281625 "2021-08-26T03:40:56Z")
Hi Team, Kibana version 7.13.4. I've enabled read fields from \_source in Kibana advanced settings. Issue - I've saved a search in Kibana and tried to generate the CSV, however only the Timestamp has a value. \_source… --- ## [Unable to establish the connection between two clusters](https://discuss.elastic.co/t/unable-to-establish-the-connection-between-two-clusters/354499)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 14\ **Last updated:** [March 27, 2024, 12:06pm UTC](https://discuss.elastic.co/t/unable-to-establish-the-connection-between-two-clusters/354499 "2024-03-27T12:06:51Z")
Hi sir, im trying to establish the connection between the two clusters (local and remote) and i have used the same CA of local cluster to generate the certificates of the remote cluster node. In kibana remote clusters, … --- ## [\[Bucket max\] cardinality estimate required for \[influencers\] \[host.name\] but not supplied](https://discuss.elastic.co/t/bucket-max-cardinality-estimate-required-for-influencers-host-name-but-not-supplied/304103)
**Author:** [@anddam](https://discuss.elastic.co/u/anddam)\ **Replies:** 11\ **Last updated:** [May 9, 2022, 3:44pm UTC](https://discuss.elastic.co/t/bucket-max-cardinality-estimate-required-for-influencers-host-name-but-not-supplied/304103 "2022-05-09T15:44:39Z")
I'm currently setting up a machine learning job to detect rare events for host names. However I get the following error on the validation page of the job: This is the full error: { "statusCode": 400, "error": "B… --- ## [How to open my cluster](https://discuss.elastic.co/t/how-to-open-my-cluster/113787)
**Author:** [@Nada\_I](https://discuss.elastic.co/u/Nada_I)\ **Replies:** 11\ **Last updated:** [January 4, 2018, 12:29pm UTC](https://discuss.elastic.co/t/how-to-open-my-cluster/113787 "2018-01-04T12:29:48Z")
Hi, I have these questions: -How can I monitor my network on Elasticsearch ? -What is the difference between Elasticsearch and Kibana ? -When I insert the username and the password In Kibana it doesn't work what is t… --- ## [PySpark writing to ES: "Cannot detect ES version"](https://discuss.elastic.co/t/pyspark-writing-to-es-cannot-detect-es-version/363662)
**Author:** [@rzotti-sd](https://discuss.elastic.co/u/rzotti-sd)\ **Replies:** 9\ **Last updated:** [July 24, 2024, 11:55pm UTC](https://discuss.elastic.co/t/pyspark-writing-to-es-cannot-detect-es-version/363662 "2024-07-24T23:55:44Z")
I'm using the following PySpark code to write a DataFrame to an Elasticsearch cluster hosted in Elastic Cloud. df.writeStream.outputMode("append") .format("org.elasticsearch.spark.sql") .option("checkpoi… --- ## [Slow Query Performance](https://discuss.elastic.co/t/slow-query-performance/9399)
**Author:** [@VegHead](https://discuss.elastic.co/u/VegHead)\ **Replies:** 9\ **Last updated:** [October 20, 2012, 10:05am UTC](https://discuss.elastic.co/t/slow-query-performance/9399 "2012-10-20T10:05:17Z")
We're seeing query performance that is surprisingly slow. Running 10 nodes with 0.19.10 on AWS EC2. Each instance is an m1.xlarge with 15GB of RAM and 8x 60GB EBS volumes in RAID-0 for data storage. ES\_MIN\_MEM=819… --- ## [Painless updates are not searchable](https://discuss.elastic.co/t/painless-updates-are-not-searchable/277518)
**Author:** [@dude88](https://discuss.elastic.co/u/dude88)\ **Replies:** 12\ **Last updated:** [July 7, 2021, 5:54pm UTC](https://discuss.elastic.co/t/painless-updates-are-not-searchable/277518 "2021-07-07T17:54:17Z")
I am trying to do an updateByQuery with the javascript api, and am using painless. Before running updateByQuery, I first update the index's mapping by adding in the following: await putMapping(elastic, index, { pr… --- ## [Refactoring a search](https://discuss.elastic.co/t/refactoring-a-search/6551)
**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\ **Replies:** 16\ **Last updated:** [February 7, 2012, 6:47pm UTC](https://discuss.elastic.co/t/refactoring-a-search/6551 "2012-02-07T18:47:25Z")
Hey guys. One of my queries is scoring documents strangely (IMO). Obviously, this means that my query and/or mapping needs some work. Would you mind giving me some advice on what type of query should be used here, p… --- ## [Should I deploy elasticsearch in docker on one machine?](https://discuss.elastic.co/t/should-i-deploy-elasticsearch-in-docker-on-one-machine/349115)
**Author:** [@sigmastar](https://discuss.elastic.co/u/sigmastar)\ **Replies:** 13\ **Last updated:** [December 19, 2023, 2:06am UTC](https://discuss.elastic.co/t/should-i-deploy-elasticsearch-in-docker-on-one-machine/349115 "2023-12-19T02:06:57Z")
I wanna achive the best performance for Elasticsearch on a single machine. But right now, I'm running three Elasticsearch instance in docker on only one machine. Shoud I keep this for better performance or I should deplo… --- ## [Error logstash \[logstash.outputs.elasticsearch\] Encountered a retryable error code=\>503](https://discuss.elastic.co/t/error-logstash-logstash-outputs-elasticsearch-encountered-a-retryable-error-code-503/328331)
**Author:** [@San9](https://discuss.elastic.co/u/San9)\ **Replies:** 13\ **Last updated:** [July 26, 2023, 2:56pm UTC](https://discuss.elastic.co/t/error-logstash-logstash-outputs-elasticsearch-encountered-a-retryable-error-code-503/328331 "2023-07-26T14:56:45Z")
Hi all. I'm a beginner at this. When setting up another pipelayer, after starting it, the following errors started to appear in the log for all other pipelines: logstash\[363391\]: \[2023-03-23T08:05:49,424\]\[ERROR\]\[logsta… --- ## [Need help getting the Watcher "condition" to trigger from the JVM Heap Pct usage](https://discuss.elastic.co/t/need-help-getting-the-watcher-condition-to-trigger-from-the-jvm-heap-pct-usage/212048)
**Author:** [@dis](https://discuss.elastic.co/u/dis)\ **Replies:** 10\ **Last updated:** [December 19, 2019, 9:05am UTC](https://discuss.elastic.co/t/need-help-getting-the-watcher-condition-to-trigger-from-the-jvm-heap-pct-usage/212048 "2019-12-19T09:05:02Z")
I am not sure what I am doing wrong in getting the watcher to trigger. Each of the current three nodes has the JVM Heap Usage Pct over 25% (attached screenshot). The condition in the watcher is purposely set at \> 5% to… --- ## [Uptime monitors false positive results](https://discuss.elastic.co/t/uptime-monitors-false-positive-results/351976)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 12\ **Last updated:** [February 26, 2024, 12:17pm UTC](https://discuss.elastic.co/t/uptime-monitors-false-positive-results/351976 "2024-02-26T12:17:01Z")
Hi I've added a monitor and its giving continuous false positive results I want to know why it is checking 2 times at every interval time A first its showing correct and then againg checks and shows FP results --- ## [Elasticsearch perform slow process intermittently](https://discuss.elastic.co/t/elasticsearch-perform-slow-process-intermittently/255510)
**Author:** [@fardhana](https://discuss.elastic.co/u/fardhana)\ **Replies:** 12\ **Last updated:** [November 30, 2020, 10:59am UTC](https://discuss.elastic.co/t/elasticsearch-perform-slow-process-intermittently/255510 "2020-11-30T10:59:48Z")
Hi, i have nodejs consumer using rabbitmq that doing one of this two thing. simple Indexing into elasticsearch using predifined \_id (using INDEX API) search using specific id then if the doc exists it will running upda… --- ## [Facing issues on translate filter](https://discuss.elastic.co/t/facing-issues-on-translate-filter/180808)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 13\ **Last updated:** [May 14, 2019, 3:05pm UTC](https://discuss.elastic.co/t/facing-issues-on-translate-filter/180808 "2019-05-14T15:05:58Z")
HI Team, I'm using translate filter to match value with yaml, but those translate is doesnt happen, Conf: translate { field =\> "dcn\_id" destination =\> "restricted\_data" override =\> true dictionary\_path =\> "C:\\Gane… --- ## [Having trouble creating Elasticsearch Snapshot Repository](https://discuss.elastic.co/t/having-trouble-creating-elasticsearch-snapshot-repository/311868)
**Author:** [@yashverma](https://discuss.elastic.co/u/yashverma)\ **Replies:** 9\ **Last updated:** [August 18, 2022, 8:46am UTC](https://discuss.elastic.co/t/having-trouble-creating-elasticsearch-snapshot-repository/311868 "2022-08-18T08:46:44Z")
I want to create snapshot repository in order to backup elasticsearch indices locally. However I am getting error messages, I think I am not giving correct path in location. I have posted screenshots for better explanati… --- ## [Pyes bulk loading no server available error](https://discuss.elastic.co/t/pyes-bulk-loading-no-server-available-error/4162)
**Author:** [@Wolf\_2](https://discuss.elastic.co/u/Wolf_2)\ **Replies:** 10\ **Last updated:** [March 31, 2011, 8:32pm UTC](https://discuss.elastic.co/t/pyes-bulk-loading-no-server-available-error/4162 "2011-03-31T20:32:16Z")
Hi, First of all I cannot find any documentation other than python ES help pages or reading source code to setup bulk loading with pyes. However I am now running a demonstration with a limited capacity before errors… --- ## ["The heap is empty" error on KNN search](https://discuss.elastic.co/t/the-heap-is-empty-error-on-knn-search/321550)
**Author:** [@abay.kenzhekhan](https://discuss.elastic.co/u/abay.kenzhekhan)\ **Replies:** 10\ **Last updated:** [December 26, 2022, 12:28pm UTC](https://discuss.elastic.co/t/the-heap-is-empty-error-on-knn-search/321550 "2022-12-26T12:28:35Z")
I am doing following KNN search request { "filter": { "bool": { "must\_not": { "term": { "some\_field": 14642652 } }, "must": { "term": { "some\_field2": true } } } }, "knn": { … --- ## [Problems with enrichments](https://discuss.elastic.co/t/problems-with-enrichments/374215)
**Author:** [@arcsons](https://discuss.elastic.co/u/arcsons)\ **Replies:** 35\ **Last updated:** [February 11, 2025, 3:04pm UTC](https://discuss.elastic.co/t/problems-with-enrichments/374215 "2025-02-11T15:04:47Z")
Hello, The process of working with enrichments has been quite challenging for me, and I've been struggling with it for hours. It's first time so I may have done something wrong. However, I believe I'm close to a solutio… --- ## [Kibana aggregation sum wrong result](https://discuss.elastic.co/t/kibana-aggregation-sum-wrong-result/199494)
**Author:** [@111210](https://discuss.elastic.co/u/111210)\ **Replies:** 9\ **Last updated:** [September 16, 2019, 5:25am UTC](https://discuss.elastic.co/t/kibana-aggregation-sum-wrong-result/199494 "2019-09-16T05:25:16Z")
I don't understand why does Kibana sum different result when I just enable filter or disable filter. It should be same. Disable Enable [Previous page](https://discuss.elastic.co/top.md?page=207&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=209&per_page=50&period=all)