# Top **URL:** https://discuss.elastic.co/top.md?page=221&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 222 --- ## [ES 6.x / 7.x freezes on index deletion/creation for a long time ONLY with big amount of deprecation warnings](https://discuss.elastic.co/t/es-6-x-7-x-freezes-on-index-deletion-creation-for-a-long-time-only-with-big-amount-of-deprecation-warnings/265516)
**Author:** [@Ivan\_Rabotyga](https://discuss.elastic.co/u/Ivan_Rabotyga)\ **Replies:** 9\ **Last updated:** [March 26, 2021, 12:13pm UTC](https://discuss.elastic.co/t/es-6-x-7-x-freezes-on-index-deletion-creation-for-a-long-time-only-with-big-amount-of-deprecation-warnings/265516 "2021-03-26T12:13:19Z")
Hello everyone :wave: ! I'm getting a mysterious case on the CI. ES freezes on an index deletion or creation for a long time, when I run application tests using ES 6.8.13 (same for 7.10.1) and the application is config… --- ## [Adding compound word token filter to a template results in “Failed to install template - response code 500 contacting Elasticsearch”](https://discuss.elastic.co/t/adding-compound-word-token-filter-to-a-template-results-in-failed-to-install-template-response-code-500-contacting-elasticsearch/190914)
**Author:** [@Marta1](https://discuss.elastic.co/u/Marta1)\ **Replies:** 9\ **Last updated:** [July 18, 2019, 12:22pm UTC](https://discuss.elastic.co/t/adding-compound-word-token-filter-to-a-template-results-in-failed-to-install-template-response-code-500-contacting-elasticsearch/190914 "2019-07-18T12:22:08Z")
After adding hyphenation decompounder to my custom template, logstash fails to install it: "Got response code '500' contacting Elasticsearch at URL...". I have already had different token filters like stopwords and stem… --- ## [Grok error while loading](https://discuss.elastic.co/t/grok-error-while-loading/181515)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 13\ **Last updated:** [May 17, 2019, 6:51pm UTC](https://discuss.elastic.co/t/grok-error-while-loading/181515 "2019-05-17T18:51:04Z")
i am running a logstash for the log file with below a sample entry Sample entry : 72.14.199.105 - - \[30/Apr/2019:06:21:26 +0000\] "GET /catalog/view/javascript/font-awesome/css/font-awesome.min.css HTTP/1.1" 200 4748 "h… --- ## [How to configure HttpNode on elasticsearch](https://discuss.elastic.co/t/how-to-configure-httpnode-on-elasticsearch/153726)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 12\ **Last updated:** [October 26, 2018, 11:44am UTC](https://discuss.elastic.co/t/how-to-configure-httpnode-on-elasticsearch/153726 "2018-10-26T11:44:47Z")
HI, I want to create one httpnode on elasticsearch. How can i configure that in elasticsearch.yml Please anyone can help me on this. --- ## [Extract information from field](https://discuss.elastic.co/t/extract-information-from-field/145376)
**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\ **Replies:** 13\ **Last updated:** [August 21, 2018, 6:52pm UTC](https://discuss.elastic.co/t/extract-information-from-field/145376 "2018-08-21T18:52:01Z")
Hello, I am using Logstash to parse an XML file, I have something like that: \ I am looking for a way to get a new field with SPM whic… --- ## [Issue Upgrading from Elasticsearch 8.19.4 to 9.1.4 – Indices Not Read-Only Despite Settings](https://discuss.elastic.co/t/issue-upgrading-from-elasticsearch-8-19-4-to-9-1-4-indices-not-read-only-despite-settings/382398)
**Author:** [@RuiCosta78](https://discuss.elastic.co/u/RuiCosta78)\ **Replies:** 11\ **Last updated:** [November 21, 2025, 8:50am UTC](https://discuss.elastic.co/t/issue-upgrading-from-elasticsearch-8-19-4-to-9-1-4-indices-not-read-only-despite-settings/382398 "2025-11-21T08:50:39Z")
Hi everyone, We're in the process of upgrading our Elasticsearch cluster from version 8.12.0 to 9.1.4, following the recommended upgrade path. Here's what we've done so far: Upgraded from 8.12.0 → 8.19.4 (latest 8.x … --- ## [Scroll Concept slows the search performance in latest Elastic version by php client](https://discuss.elastic.co/t/scroll-concept-slows-the-search-performance-in-latest-elastic-version-by-php-client/166388)
**Author:** [@kshi\_yelpale000](https://discuss.elastic.co/u/kshi_yelpale000)\ **Replies:** 11\ **Last updated:** [January 31, 2019, 5:15pm UTC](https://discuss.elastic.co/t/scroll-concept-slows-the-search-performance-in-latest-elastic-version-by-php-client/166388 "2019-01-31T17:15:41Z")
Hi all, I have migrated my application's elastic search version from 2.4 to 6.3, in which i saw decrease in performance figures. Size parameter in query request in old version was 1000000000, and by this i was getting 2… --- ## [Kibana Query Displaying Incorrect Results](https://discuss.elastic.co/t/kibana-query-displaying-incorrect-results/228703)
**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\ **Replies:** 10\ **Last updated:** [May 14, 2020, 6:09am UTC](https://discuss.elastic.co/t/kibana-query-displaying-incorrect-results/228703 "2020-05-14T06:09:24Z")
Hi, I am trying to view the logs which have higher time-taken parameter. In many of the logs, I can see that the time taken parameter is logged in as 8.000, 15.500, 15.753 etc If I try to search with timetaken \> 8.000 … --- ## [ES is allocating indexes that are hot to nodes in the cold tier](https://discuss.elastic.co/t/es-is-allocating-indexes-that-are-hot-to-nodes-in-the-cold-tier/322972)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 9\ **Last updated:** [January 12, 2023, 7:07pm UTC](https://discuss.elastic.co/t/es-is-allocating-indexes-that-are-hot-to-nodes-in-the-cold-tier/322972 "2023-01-12T19:07:20Z")
I can't figure out how to diagnose what is happening here. I am using a hot/warm/cold data tier model but ES keeps allocating indexes to my overloaded cold tier when they are still in the hot phase (being actively writt… --- ## [Logstash configuration not creating index in elasticseach](https://discuss.elastic.co/t/logstash-configuration-not-creating-index-in-elasticseach/193540)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 9\ **Last updated:** [August 13, 2019, 12:41pm UTC](https://discuss.elastic.co/t/logstash-configuration-not-creating-index-in-elasticseach/193540 "2019-08-13T12:41:42Z")
i am trying to create index based on quarter and each document is unique in elasticsearch via logstash. the data is coming from multiple xml files. there seems to be no error in configuration file and pipeline is started… --- ## [Updating document in elasticsearch](https://discuss.elastic.co/t/updating-document-in-elasticsearch/294916)
**Author:** [@Aniketvk008](https://discuss.elastic.co/u/Aniketvk008)\ **Replies:** 11\ **Last updated:** [February 3, 2022, 3:41pm UTC](https://discuss.elastic.co/t/updating-document-in-elasticsearch/294916 "2022-02-03T15:41:08Z")
After updating document its creating new row rather than updating in same row Doc\_id|| EmpID || Name || Age || Salary || Salary credited || Active xxxxx || 10001 || John || 30 || 20000 … --- ## [How to take indexes backup node wise in cluster](https://discuss.elastic.co/t/how-to-take-indexes-backup-node-wise-in-cluster/215742)
**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\ **Replies:** 10\ **Last updated:** [January 21, 2020, 6:39am UTC](https://discuss.elastic.co/t/how-to-take-indexes-backup-node-wise-in-cluster/215742 "2020-01-21T06:39:36Z")
We need to take indexes backup node wise or there would be cluster . how to take the backup please help me . --- ## [Split ES event](https://discuss.elastic.co/t/split-es-event/154152)
**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\ **Replies:** 12\ **Last updated:** [October 26, 2018, 2:48pm UTC](https://discuss.elastic.co/t/split-es-event/154152 "2018-10-26T14:48:56Z")
Hello, at the moment I have one event. Console brings the following output: { port =\> \[ \[0\] "22", \[1\] "443", \[2\] "623", \[3\] "0", \[4\] "22", \[5\] "80" \], "path" =\>"/home/data/… --- ## [Nested json with multi field parsing through logstash](https://discuss.elastic.co/t/nested-json-with-multi-field-parsing-through-logstash/345549)
**Author:** [@sudhir\_singh](https://discuss.elastic.co/u/sudhir_singh)\ **Replies:** 15\ **Last updated:** [November 10, 2023, 1:31pm UTC](https://discuss.elastic.co/t/nested-json-with-multi-field-parsing-through-logstash/345549 "2023-11-10T13:31:21Z")
Please help me with below log how do I parse it ? {"@timestamp":"2023-10-11T07:38:56.607Z","log.level":"error","message":"API REQUEST TIME","ecs":{"version":"1.6.0"},"requestedAPI":\["https://cloudservices.indiatimes.com… --- ## [Index with few shard or index with many shards?](https://discuss.elastic.co/t/index-with-few-shard-or-index-with-many-shards/161985)
**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\ **Replies:** 9\ **Last updated:** [December 24, 2018, 4:30pm UTC](https://discuss.elastic.co/t/index-with-few-shard-or-index-with-many-shards/161985 "2018-12-24T16:30:13Z")
Hi I have 3 nodes and 55TB data to index, I can split it to 10 index, each one contain 155 shard or 110 index each contain 10 shards. I don't know which one is the best? Can any one help? --- ## [Getting invalid protocol error on install kibana (8.5.1)](https://discuss.elastic.co/t/getting-invalid-protocol-error-on-install-kibana-8-5-1/361335)
**Author:** [@Sunita\_Rajput](https://discuss.elastic.co/u/Sunita_Rajput)\ **Replies:** 9\ **Last updated:** [November 4, 2024, 5:48am UTC](https://discuss.elastic.co/t/getting-invalid-protocol-error-on-install-kibana-8-5-1/361335 "2024-11-04T05:48:15Z")
Creating a new Elasticsearch token for Kibana Cleaning previous token TypeError \[ERR\_INVALID\_PROTOCOL\]: Protocol "http:" not supported. Expected "https:" at new NodeError (node:internal/errors:387:5) at new ClientReq… --- ## [Data is not saved equally in each datanode](https://discuss.elastic.co/t/data-is-not-saved-equally-in-each-datanode/21386)
**Author:** [@xiaoliang\_tian](https://discuss.elastic.co/u/xiaoliang_tian)\ **Replies:** 14\ **Last updated:** [January 5, 2015, 8:51am UTC](https://discuss.elastic.co/t/data-is-not-saved-equally-in-each-datanode/21386 "2015-01-05T08:51:20Z")
Hi,I got 4 data nodes,1 master node and 1 search node For example,At first,the data was equally saved in 4 data nodes node1 1.6TB node2 1.6TB node3 1.6TB node4 1.6TB Since My disk is 2TB and it is almost ful… --- ## [Usually data are not enriched](https://discuss.elastic.co/t/usually-data-are-not-enriched/316435)
**Author:** [@Marcin\_Frankiewicz](https://discuss.elastic.co/u/Marcin_Frankiewicz)\ **Replies:** 10\ **Last updated:** [December 2, 2022, 10:04am UTC](https://discuss.elastic.co/t/usually-data-are-not-enriched/316435 "2022-12-02T10:04:59Z")
Hi, Does exists some situactions, when data are not enriched ? (i'm excluding scenario when there are no matching data) Example : Can be skipped for perfomance reasons? It is possible that enrich processor in pipeline… --- ## [Highlight events with only one value for a field](https://discuss.elastic.co/t/highlight-events-with-only-one-value-for-a-field/181861)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 13\ **Last updated:** [May 21, 2019, 1:40pm UTC](https://discuss.elastic.co/t/highlight-events-with-only-one-value-for-a-field/181861 "2019-05-21T13:40:58Z")
Hi there! I'm trying to visualize in a data table only the documents which have never had a certain value for a specific field. Let's say I have fields USERNAME and OUTCOME. I'd like to find all those docs which have o… --- ## [Why "conf.dfs.replication" : "1" is not SUCCESS?](https://discuss.elastic.co/t/why-conf-dfs-replication-1-is-not-success/316405)
**Author:** [@bo8888](https://discuss.elastic.co/u/bo8888)\ **Replies:** 12\ **Last updated:** [October 17, 2022, 9:38am UTC](https://discuss.elastic.co/t/why-conf-dfs-replication-1-is-not-success/316405 "2022-10-17T09:38:23Z")
I set snapshot use hdfs with conf conf.dfs.replication = 1 ,but I found the replication of data is also 3，i need to hdfs dfs -setrep -R -w 1 /es\_snapshots GET \_snapshot/es\_snapshots { "es\_snapshots" : { "type" : … --- ## [Creating a field of field](https://discuss.elastic.co/t/creating-a-field-of-field/191844)
**Author:** [@luc1](https://discuss.elastic.co/u/luc1)\ **Replies:** 12\ **Last updated:** [August 1, 2019, 3:45pm UTC](https://discuss.elastic.co/t/creating-a-field-of-field/191844 "2019-08-01T15:45:49Z")
Hello, I have this field in my JSON file which looks like this : "activeAlarms":\[{"id":\*\*\*\*\*, "description":"something", "repairAction": "do this"}, {"id":\*\*\*\*\*, "description":"somethingElse", "repairAction": "do that}… --- ## [Inconsistent 'fields' returned when explicitly asking for fields in 0.19.4](https://discuss.elastic.co/t/inconsistent-fields-returned-when-explicitly-asking-for-fields-in-0-19-4/10934)
**Author:** [@Bob\_Sandiford](https://discuss.elastic.co/u/Bob_Sandiford)\ **Replies:** 12\ **Last updated:** [March 8, 2013, 1:54am UTC](https://discuss.elastic.co/t/inconsistent-fields-returned-when-explicitly-asking-for-fields-in-0-19-4/10934 "2013-03-08T01:54:56Z")
Hi, all. We have an odd case where requesting explicit fields on a query sometimes returns all the fields, and sometimes doesn't - for the same ids query (i.e. for the same record). We haven't been able to nail … --- ## [Elasticsearch,Kibana,logstash,filebeat](https://discuss.elastic.co/t/elasticsearch-kibana-logstash-filebeat/322133)
**Author:** [@Mursel](https://discuss.elastic.co/u/Mursel)\ **Replies:** 15\ **Last updated:** [January 5, 2023, 7:27am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-logstash-filebeat/322133 "2023-01-05T07:27:50Z")
The hit point in Kibana was more than one hundred thousand for 3 hours. Then I observed that this number has dropped to three thousand. The reason for this was that 90 percent of the memory was full. To fix this, I remov… --- ## [Index not created after template update](https://discuss.elastic.co/t/index-not-created-after-template-update/165076)
**Author:** [@wholzgruber](https://discuss.elastic.co/u/wholzgruber)\ **Replies:** 11\ **Last updated:** [January 23, 2019, 6:23pm UTC](https://discuss.elastic.co/t/index-not-created-after-template-update/165076 "2019-01-23T18:23:56Z")
Dear Community, I need your help again. Following situation: I´ve downloaded the default logstash template with: curl -XGET '192.168.100.92:9200/\_template/logstash?pretty' \> logstash-template.json updated the default… --- ## [Elasticsearch-hadoop sporadic timeouts](https://discuss.elastic.co/t/elasticsearch-hadoop-sporadic-timeouts/20014)
**Author:** [@Zach\_Cox](https://discuss.elastic.co/u/Zach_Cox)\ **Replies:** 12\ **Last updated:** [October 3, 2014, 5:11pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-sporadic-timeouts/20014 "2014-10-03T17:11:54Z")
Hi - we're having problems with one of our map-reduce jobs that writes to Elasticsearch. Lots of map tasks are failing due to ES being "unavailable", with logs like this: https://gist.githubusercontent.com/zcox/3d… --- ## [Pyes related question : performance related](https://discuss.elastic.co/t/pyes-related-question-performance-related/8751)
**Author:** [@Abhishek\_Pratap](https://discuss.elastic.co/u/Abhishek_Pratap)\ **Replies:** 12\ **Last updated:** [August 24, 2012, 6:43am UTC](https://discuss.elastic.co/t/pyes-related-question-performance-related/8751 "2012-08-24T06:43:37Z")
Hi Guys Another strange behavior in terms of performance. If I am time the following code I get a good performance..about about 100k search results in 2 seconds. conn = ES(\['128.55.54.149:9200','128.55.54.149:… --- ## [How can i identify? Is it indexed successful or not?](https://discuss.elastic.co/t/how-can-i-identify-is-it-indexed-successful-or-not/14967)
**Author:** [@Sigehere](https://discuss.elastic.co/u/Sigehere)\ **Replies:** 14\ **Last updated:** [December 20, 2013, 12:53pm UTC](https://discuss.elastic.co/t/how-can-i-identify-is-it-indexed-successful-or-not/14967 "2013-12-20T12:53:40Z")
Hi Friends, I have installed elasticsearch and elasticsearch wikipedia river plagin then i have run following curl request and i got this response $ curl -XPUT 192.168.1.13:9200/\_river/my\_wikipedia/\_meta -d … --- ## [How to monitor two servers with Metricbeat?](https://discuss.elastic.co/t/how-to-monitor-two-servers-with-metricbeat/180052)
**Author:** [@zenimagine](https://discuss.elastic.co/u/zenimagine)\ **Replies:** 9\ **Last updated:** [May 8, 2019, 3:52am UTC](https://discuss.elastic.co/t/how-to-monitor-two-servers-with-metricbeat/180052 "2019-05-08T03:52:27Z")
I have a two servers : SERVER\_1 with ELK (https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubuntu-18-04) ELK is accessible from a subdomain and protect… --- ## [Enrich information with the administrator flag](https://discuss.elastic.co/t/enrich-information-with-the-administrator-flag/186062)
**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\ **Replies:** 12\ **Last updated:** [June 17, 2019, 10:10pm UTC](https://discuss.elastic.co/t/enrich-information-with-the-administrator-flag/186062 "2019-06-17T22:10:36Z")
Hi all I try to enrich the information that I send to Logstash. I'd like to add a field in the winlogbeat index with a label like administrator and in this field I'd like to set YES for the user that is admin of the pc… --- ## [River puts too much load on only one node](https://discuss.elastic.co/t/river-puts-too-much-load-on-only-one-node/180053)
**Author:** [@KashiPashoria\_Tonny](https://discuss.elastic.co/u/KashiPashoria_Tonny)\ **Replies:** 13\ **Last updated:** [May 8, 2019, 7:42am UTC](https://discuss.elastic.co/t/river-puts-too-much-load-on-only-one-node/180053 "2019-05-08T07:42:40Z")
I'm using Elasticsearch 1.5. It uses rivers to ingest data. I've 3 nodes in my cluster. The river that ingest large amount of data puts too much load on a specific node. I want to divert this utilization to another node.… --- ## [Firewall logs to different Datastream by type](https://discuss.elastic.co/t/firewall-logs-to-different-datastream-by-type/377211)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 22\ **Last updated:** [April 24, 2025, 12:57pm UTC](https://discuss.elastic.co/t/firewall-logs-to-different-datastream-by-type/377211 "2025-04-24T12:57:39Z")
I am using the integration “Fortinet FortiGate Firewall Logs”. To date it is working correctly, but I have been asked to ingest the UTM type logs in a different Datastream and I really have no idea how to do this using … --- ## [Return Logstash Failed User logons by day and return code](https://discuss.elastic.co/t/return-logstash-failed-user-logons-by-day-and-return-code/21260)
**Author:** [@Rod\_Clayton](https://discuss.elastic.co/u/Rod_Clayton)\ **Replies:** 10\ **Last updated:** [December 17, 2014, 8:19pm UTC](https://discuss.elastic.co/t/return-logstash-failed-user-logons-by-day-and-return-code/21260 "2014-12-17T20:19:51Z")
I have loaded login data into Elasticsearch using Logstash. I have fields: username retcd workstation. I want to query and get a count of failed logon requests by username and workstation on a given day. The i… --- ## [TSVB Timeline missing](https://discuss.elastic.co/t/tsvb-timeline-missing/247772)
**Author:** [@isarib](https://discuss.elastic.co/u/isarib)\ **Replies:** 9\ **Last updated:** [September 8, 2020, 2:53pm UTC](https://discuss.elastic.co/t/tsvb-timeline-missing/247772 "2020-09-08T14:53:59Z")
Displaying more than 2 days from the time picker selection will make the timeline go missing on the TSVB visualizations. Is there a fix to this? --- ## [More search time](https://discuss.elastic.co/t/more-search-time/233136)
**Author:** [@hegebharat](https://discuss.elastic.co/u/hegebharat)\ **Replies:** 9\ **Last updated:** [May 21, 2020, 11:04am UTC](https://discuss.elastic.co/t/more-search-time/233136 "2020-05-21T11:04:22Z")
Hi, We have case where we have indexed 1billion vectors(each is 512 -dims) using dense\_vector (elastic version 7.6). We are using cosine similarity to find the best hits. But every query is taking 6.7 sec to get the … --- ## [ES0.15.2 - network partition can lead to data loss](https://discuss.elastic.co/t/es0-15-2-network-partition-can-lead-to-data-loss/4079)
**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\ **Replies:** 9\ **Last updated:** [March 15, 2011, 5:08pm UTC](https://discuss.elastic.co/t/es0-15-2-network-partition-can-lead-to-data-loss/4079 "2011-03-15T17:08:11Z")
FYI, first encountered the issue in 14.2 and discussed it in this thread: http://elasticsearch-users.115913.n3.nabble.com/Cluster-partition-resulted-in-loss-of-data-td2569870.html#none Upgraded to 15.2 and ran vario… --- ## [Patterns defined under patterns\_dir are not valid](https://discuss.elastic.co/t/patterns-defined-under-patterns-dir-are-not-valid/352498)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 23\ **Last updated:** [February 7, 2024, 8:29pm UTC](https://discuss.elastic.co/t/patterns-defined-under-patterns-dir-are-not-valid/352498 "2024-02-07T20:29:39Z")
I would like to write a grok pattern for logstash using patterns\_dir for maillog based on the following document. There is a postfix-grok-patterns file in patterns\_dir with all the following patterns. I have added th… --- ## [I'm trying to build new integration](https://discuss.elastic.co/t/im-trying-to-build-new-integration/349866)
**Author:** [@zeynepyz](https://discuss.elastic.co/u/zeynepyz)\ **Replies:** 9\ **Last updated:** [January 8, 2024, 8:17am UTC](https://discuss.elastic.co/t/im-trying-to-build-new-integration/349866 "2024-01-08T08:17:29Z")
hello, i'm trying to create new integration for collecting k6 metrics via rest api. I just don't understand how can i test my integration i mean i'm trying to connect k6 but idk how can i see it? is there a command for t… --- ## [Is Delete by query a clean operation?](https://discuss.elastic.co/t/is-delete-by-query-a-clean-operation/295778)
**Author:** [@yash\_196](https://discuss.elastic.co/u/yash_196)\ **Replies:** 9\ **Last updated:** [February 1, 2022, 7:02am UTC](https://discuss.elastic.co/t/is-delete-by-query-a-clean-operation/295778 "2022-02-01T07:02:00Z")
Hi Everyone, I wanted to know if delete by query is a clean API? Are the resources (Memory or I/O) released gracefully after the query is complete or does it still hold some resource which might affect perormance? --- ## [Writing custom scripts for indexing data in Elasticsearch](https://discuss.elastic.co/t/writing-custom-scripts-for-indexing-data-in-elasticsearch/21559)
**Author:** [@4m7u1](https://discuss.elastic.co/u/4m7u1)\ **Replies:** 9\ **Last updated:** [January 19, 2015, 6:56am UTC](https://discuss.elastic.co/t/writing-custom-scripts-for-indexing-data-in-elasticsearch/21559 "2015-01-19T06:56:33Z")
Hi, I'm a newbie to Elasticsearch, and I would like to know about writing custom scripts in Elasticsearch. Basically, I want to have a script which takes a table name and the columns in it as parameters, and would… --- ## [Slow Percolator Indexing](https://discuss.elastic.co/t/slow-percolator-indexing/16121)
**Author:** [@James\_Bathgate\_2](https://discuss.elastic.co/u/James_Bathgate_2)\ **Replies:** 9\ **Last updated:** [March 5, 2014, 12:02am UTC](https://discuss.elastic.co/t/slow-percolator-indexing/16121 "2014-03-05T00:02:05Z")
I'm having issues with indexing percolator queries taking a long time to insert. I created a sample test case: https://gist.github.com/julesbravo/9335275 As you can see it's taking 1.5s to insert a single percola… --- ## [To use the full set of free features, please update ES to the default dist](https://discuss.elastic.co/t/to-use-the-full-set-of-free-features-please-update-es-to-the-default-dist/374334)
**Author:** [@tnjeff](https://discuss.elastic.co/u/tnjeff)\ **Replies:** 15\ **Last updated:** [February 17, 2025, 9:54am UTC](https://discuss.elastic.co/t/to-use-the-full-set-of-free-features-please-update-es-to-the-default-dist/374334 "2025-02-17T09:54:00Z")
Older version of elasticsearch on VM, self-managed, Kibana is 8.17.1., Logstash 8.17.1, Elasticsearch 8.17.1. These run on plain old Ubuntu 20.04. 1 Kibana node, 1 Logstash node & 3 Elastic Seach (ES) nodes. All I did is… --- ## [Suggester plug-in](https://discuss.elastic.co/t/suggester-plug-in/7409)
**Author:** [@Renad\_Ahmed](https://discuss.elastic.co/u/Renad_Ahmed)\ **Replies:** 11\ **Last updated:** [April 24, 2012, 6:43am UTC](https://discuss.elastic.co/t/suggester-plug-in/7409 "2012-04-24T06:43:51Z")
I'm using play framework and i've already intalled it and downloaded the suggester plug in from https://github.com/codere/elasticsearch-suggest-plugin put i don't know how to install it, i know it is supposed to be a… --- ## [Multiple GROK filters not applying to log message](https://discuss.elastic.co/t/multiple-grok-filters-not-applying-to-log-message/157020)
**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Replies:** 13\ **Last updated:** [November 23, 2018, 4:06am UTC](https://discuss.elastic.co/t/multiple-grok-filters-not-applying-to-log-message/157020 "2018-11-23T04:06:01Z")
I have created 2 grok filters to match log messages, but the first filter is only applying the second filter is not applying to all log messages but the 2 filters parsing logs, I have created the first filter for log… --- ## [Kibana is not coming up](https://discuss.elastic.co/t/kibana-is-not-coming-up/315263)
**Author:** [@DineshGarimella](https://discuss.elastic.co/u/DineshGarimella)\ **Replies:** 9\ **Last updated:** [September 29, 2022, 8:28pm UTC](https://discuss.elastic.co/t/kibana-is-not-coming-up/315263 "2022-09-29T20:28:57Z")
{"type":"log","@timestamp":"2022-09-27T11:07:06Z","tags":\["status","plugin:kibana@6.4.0","info"\],"pid":153778,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","pr… --- ## [Appending app field to coreos logs](https://discuss.elastic.co/t/appending-app-field-to-coreos-logs/80312)
**Author:** [@ticktockhouse](https://discuss.elastic.co/u/ticktockhouse)\ **Replies:** 9\ **Last updated:** [April 3, 2017, 2:48pm UTC](https://discuss.elastic.co/t/appending-app-field-to-coreos-logs/80312 "2017-04-03T14:48:02Z")
I have logs coming in from coreos nodes via filebeat, the "source" field is of the general form: /var/log/containers/\-\ I'd like to parse the part after /v… --- ## [Joda date format error](https://discuss.elastic.co/t/joda-date-format-error/2937)
**Author:** [@Mahendra\_M](https://discuss.elastic.co/u/Mahendra_M)\ **Replies:** 9\ **Last updated:** [May 5, 2010, 4:46pm UTC](https://discuss.elastic.co/t/joda-date-format-error/2937 "2010-05-05T16:46:15Z")
Hi, While applying mappings for a date field, I tried the following in the date\_formats field. "MM/yyyy", "yyyy/MM/dd HH:mm:ss" When I submitted content for indexing, this format was generating an error. java.… --- ## [Realtime GETs not working](https://discuss.elastic.co/t/realtime-gets-not-working/8743)
**Author:** [@amos\_wood](https://discuss.elastic.co/u/amos_wood)\ **Replies:** 10\ **Last updated:** [August 22, 2012, 5:35pm UTC](https://discuss.elastic.co/t/realtime-gets-not-working/8743 "2012-08-22T17:35:57Z")
We are testing our ES cluster prior to going live and we are having some issues where the realtime GETs are not in real-time. Using our testing logic below, we are noticing that after the update is done that the "… --- ## [Issue With Parsing Unique Problem. Please Please help](https://discuss.elastic.co/t/issue-with-parsing-unique-problem-please-please-help/223924)
**Author:** [@pariksh](https://discuss.elastic.co/u/pariksh)\ **Replies:** 15\ **Last updated:** [March 19, 2020, 9:21am UTC](https://discuss.elastic.co/t/issue-with-parsing-unique-problem-please-please-help/223924 "2020-03-19T09:21:34Z")
Hy Everyone myfile.log 17:54:24,429 DEBUG ExUsernamePasswordAuthenticationFilter.successfulAuthentication():319 - Authentication success. Updating SecurityContextHolder to contain: org.springframework.security.authenti… --- ## [Why does es upgrade index data synchronously？](https://discuss.elastic.co/t/why-does-es-upgrade-index-data-synchronously/283226)
**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\ **Replies:** 12\ **Last updated:** [September 6, 2021, 5:50am UTC](https://discuss.elastic.co/t/why-does-es-upgrade-index-data-synchronously/283226 "2021-09-06T05:50:32Z")
When I upgrade from 5.x to 7.x, I find that I cannot upgrade directly and need to reindex all index data. Why not update the index data automatically during the upgrade? --- ## [Logstash pipeline High avliliblity](https://discuss.elastic.co/t/logstash-pipeline-high-avliliblity/321965)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 13\ **Last updated:** [December 31, 2022, 1:30am UTC](https://discuss.elastic.co/t/logstash-pipeline-high-avliliblity/321965 "2022-12-31T01:30:02Z")
hello Everyone, How to achieve The Logstash Pipeline HA? I have 3 Nodes if any node opening count of pipeline after that the node is down what happen? what is the solutions to achieve the HA? [Previous page](https://discuss.elastic.co/top.md?page=220&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=222&per_page=50&period=all)