# Top

**URL:** https://discuss.elastic.co/top.md?page=223&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 224

---

## [Persistent keystore errors - guidance for new install please](https://discuss.elastic.co/t/persistent-keystore-errors-guidance-for-new-install-please/378620)

<div class="topic-metadata">

**Author:** [@GuyMark](https://discuss.elastic.co/u/GuyMark)\
**Replies:** 18\
**Last updated:** [July 19, 2025, 5:18pm UTC](https://discuss.elastic.co/t/persistent-keystore-errors-guidance-for-new-install-please/378620 "2025-07-19T17:18:12Z")

</div>

I am trying to install elasticsearch both to learn how to use it - and as I need to try to make a working system too. I first tried installing with notes from here over a year ago, but right from the start I had issues …

---

## [Elasticsearch 8.1.1 error](https://discuss.elastic.co/t/elasticsearch-8-1-1-error/301126)

<div class="topic-metadata">

**Author:** [@andrewm659](https://discuss.elastic.co/u/andrewm659)\
**Replies:** 9\
**Last updated:** [April 5, 2022, 2:41pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-1-error/301126 "2022-04-05T14:41:29Z")

</div>

I am trying to upgrade from 7.17.1 to 8.1.1 and getting the following error on RHEL 7.x latest with Java 17 from RHEL: \[2022-03-30T11:51:49,898\]\[INFO \]\[o.e.n.Node \] \[elasticsearch01.internaldomain.com\] ver…

---

## [Need help optimizing index with 450mio entries](https://discuss.elastic.co/t/need-help-optimizing-index-with-450mio-entries/228879)

<div class="topic-metadata">

**Author:** [@sulo](https://discuss.elastic.co/u/sulo)\
**Replies:** 9\
**Last updated:** [April 22, 2020, 7:27pm UTC](https://discuss.elastic.co/t/need-help-optimizing-index-with-450mio-entries/228879 "2020-04-22T19:27:08Z")

</div>

Hi everybody, I have currently massive problems with my elasticsearch setup. I store aggregated google analytics data in elastic search for further processing. There are currently around 450mio documents in this index. …

---

## [How to improve log ingestion in multi-node cluster](https://discuss.elastic.co/t/how-to-improve-log-ingestion-in-multi-node-cluster/376679)

<div class="topic-metadata">

**Author:** [@Mohijeetsinh\_Jadeja](https://discuss.elastic.co/u/Mohijeetsinh_Jadeja)\
**Replies:** 12\
**Last updated:** [April 26, 2025, 8:19am UTC](https://discuss.elastic.co/t/how-to-improve-log-ingestion-in-multi-node-cluster/376679 "2025-04-26T08:19:18Z")

</div>

Hi Everyone, Recently we started using elasticsearch with multi-node architecture to handle heavy logs ingestion which is around 200K per second on an average during normal workload (not sure is this too much logs or no…

---

## [Upgrade elasticsearch from version 7.16 to 7.17](https://discuss.elastic.co/t/upgrade-elasticsearch-from-version-7-16-to-7-17/373837)

<div class="topic-metadata">

**Author:** [@p\_alavi](https://discuss.elastic.co/u/p_alavi)\
**Replies:** 12\
**Last updated:** [February 2, 2025, 12:56pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-version-7-16-to-7-17/373837 "2025-02-02T12:56:16Z")

</div>

Hi all, I recently upgraded my Elasticsearch cluster from version 7.16 to 7.17 and encountered several issues. Kibana is not loading properly, and I am receiving license-related errors and missing authentication credent…

---

## [Certified Analyst practice exam issues](https://discuss.elastic.co/t/certified-analyst-practice-exam-issues/335221)

<div class="topic-metadata">

**Author:** [@Auckinston](https://discuss.elastic.co/u/Auckinston)\
**Replies:** 10\
**Last updated:** [June 29, 2023, 10:28am UTC](https://discuss.elastic.co/t/certified-analyst-practice-exam-issues/335221 "2023-06-29T10:28:54Z")

</div>

Course: Version: \<7.1x\> Question: Identical issue reported by many users previously, the VM build is outdated/bad. Based on the instruction provided: IMPORTANT: You need to define index patterns for the following in…

---

## [How to send heartbeats to Elasticsearch in a secured network?](https://discuss.elastic.co/t/how-to-send-heartbeats-to-elasticsearch-in-a-secured-network/353484)

<div class="topic-metadata">

**Author:** [@jschreud](https://discuss.elastic.co/u/jschreud)\
**Replies:** 13\
**Last updated:** [February 23, 2024, 7:16pm UTC](https://discuss.elastic.co/t/how-to-send-heartbeats-to-elasticsearch-in-a-secured-network/353484 "2024-02-23T19:16:56Z")

</div>

Hey there everyone,.. really hoping I can find some help here. I am working in an environment where Elasticsearch, Kibana and Logstash is running on machine A. Machine B has a Heartbeat installed and is collecting heart…

---

## [ELK Indexing Strategy](https://discuss.elastic.co/t/elk-indexing-strategy/333663)

<div class="topic-metadata">

**Author:** [@ARDA\_ASLAN](https://discuss.elastic.co/u/ARDA_ASLAN)\
**Replies:** 11\
**Last updated:** [May 21, 2023, 6:46pm UTC](https://discuss.elastic.co/t/elk-indexing-strategy/333663 "2023-05-21T18:46:30Z")

</div>

Hello Elastic Community, I am quite new in ELK environment so trying to understand the concept and the best practices for a new project that i am responsible. Needing some advices and overview about the indexing strate…

---

## [ElasticSearch 0.19.8 - JVM crash on solaris](https://discuss.elastic.co/t/elasticsearch-0-19-8-jvm-crash-on-solaris/8333)

<div class="topic-metadata">

**Author:** [@f\_shantanu](https://discuss.elastic.co/u/f_shantanu)\
**Replies:** 10\
**Last updated:** [April 29, 2013, 6:38pm UTC](https://discuss.elastic.co/t/elasticsearch-0-19-8-jvm-crash-on-solaris/8333 "2013-04-29T18:38:33Z")

</div>

Elastic search 0.19.8 causes JVM to crash on solaris java 6 U 31. I am using mapper-attachmnents 18.7 and I have not had this problem with the previous version I was using 0.18.7 and mapper-attachments 18.6. Here i…

---

## [Elasticsearch v.20 RC1 and IndexRequest.writeTo](https://discuss.elastic.co/t/elasticsearch-v-20-rc1-and-indexrequest-writeto/9447)

<div class="topic-metadata">

**Author:** [@emj11](https://discuss.elastic.co/u/emj11)\
**Replies:** 14\
**Last updated:** [November 29, 2012, 1:01am UTC](https://discuss.elastic.co/t/elasticsearch-v-20-rc1-and-indexrequest-writeto/9447 "2012-11-29T01:01:22Z")

</div>

Hi, I came across an issue when doing some load testing (inserts only), my JVM actually crashed, output: # JRE version: 7.0\_07-b10 # Java VM: Java HotSpot(TM) 64-Bit Server VM (23.3-b01 mixed mode linux-amd64 c…

---

## [Help with Logstash file input](https://discuss.elastic.co/t/help-with-logstash-file-input/345475)

<div class="topic-metadata">

**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\
**Replies:** 11\
**Last updated:** [October 24, 2023, 5:01am UTC](https://discuss.elastic.co/t/help-with-logstash-file-input/345475 "2023-10-24T05:01:02Z")

</div>

I am not receiving the contents of fortune.txt for my ELK implementation. This is the input section: file { path =\> "/etc/elasticsearch/scripts/otherScripts/fortune.txt" sincedb\_path =\> "/dev/null" sta…

---

## [Влияние Named Queries на производительность](https://discuss.elastic.co/t/named-queries/184989)

<div class="topic-metadata">

**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\
**Replies:** 10\
**Last updated:** [June 14, 2019, 5:53am UTC](https://discuss.elastic.co/t/named-queries/184989 "2019-06-14T05:53:38Z")

</div>

Добрый день! Я хочу использовать в своих запросах Named Queries, однако протестировав на небольшом запросе, я заметил почти двукратное снижение производительности. (90-150 мс против 200-300мс с именованными запросам). Ср…

---

## [Is there any solution with elasticsearch parent-child join](https://discuss.elastic.co/t/is-there-any-solution-with-elasticsearch-parent-child-join/162726)

<div class="topic-metadata">

**Author:** [@wallellen](https://discuss.elastic.co/u/wallellen)\
**Replies:** 10\
**Last updated:** [January 4, 2019, 10:26am UTC](https://discuss.elastic.co/t/is-there-any-solution-with-elasticsearch-parent-child-join/162726 "2019-01-04T10:26:04Z")

</div>

I have an es settings like following: PUT /test { "mappings": { "doc": { "properties": { "status": { "type": "keyword" }, "counting": { "type": "intege…

---

## [Query Regarding Filebeat](https://discuss.elastic.co/t/query-regarding-filebeat/147672)

<div class="topic-metadata">

**Author:** [@Akhilesh-Tiwari](https://discuss.elastic.co/u/Akhilesh-Tiwari)\
**Replies:** 9\
**Last updated:** [September 10, 2018, 1:31pm UTC](https://discuss.elastic.co/t/query-regarding-filebeat/147672 "2018-09-10T13:31:19Z")

</div>

HI @magnusbaeck and @elastic My Requirement is, Reading the logs from filebeat in windows System and push that logs into a different windows system's File. without using logstash and elasticsearch. is it possib…

---

## [Logstash kibana](https://discuss.elastic.co/t/logstash-kibana/183319)

<div class="topic-metadata">

**Author:** [@krishnakekan](https://discuss.elastic.co/u/krishnakekan)\
**Replies:** 14\
**Last updated:** [June 3, 2019, 12:32pm UTC](https://discuss.elastic.co/t/logstash-kibana/183319 "2019-06-03T12:32:11Z")

</div>

not able to load data from mysql to elasticsearch using logstash?

---

## [Curator does not work correctly](https://discuss.elastic.co/t/curator-does-not-work-correctly/155905)

<div class="topic-metadata">

**Author:** [@Imad\_Bouchakour](https://discuss.elastic.co/u/Imad_Bouchakour)\
**Replies:** 10\
**Last updated:** [November 8, 2018, 4:43pm UTC](https://discuss.elastic.co/t/curator-does-not-work-correctly/155905 "2018-11-08T16:43:05Z")

</div>

I have curator 5.5.4 installed in my debian 9, sometimes curator works when i execute a command like curator --version or curator --help, but most of the time curator does not work and the command gives nothing Why ??

---

## [Elasticsearch-hadoop - getting specified fields from elasticsearch as an input to a mapreduce job](https://discuss.elastic.co/t/elasticsearch-hadoop-getting-specified-fields-from-elasticsearch-as-an-input-to-a-mapreduce-job/21026)

<div class="topic-metadata">

**Author:** [@eliasah](https://discuss.elastic.co/u/eliasah)\
**Replies:** 10\
**Last updated:** [December 3, 2014, 3:57pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-getting-specified-fields-from-elasticsearch-as-an-input-to-a-mapreduce-job/21026 "2014-12-03T15:57:25Z")

</div>

I'm trying to write a mapreduce job where I can query elasticsearch so it can return to me specific fields. Is there any way to do that? My mapping contains about 30 fields and I will need just 4 of them ("\_id","t…

---

## [Implementing a plugin to process the whole input document](https://discuss.elastic.co/t/implementing-a-plugin-to-process-the-whole-input-document/17696)

<div class="topic-metadata">

**Author:** [@Jakub\_Kotowski](https://discuss.elastic.co/u/Jakub_Kotowski)\
**Replies:** 10\
**Last updated:** [June 13, 2014, 9:22am UTC](https://discuss.elastic.co/t/implementing-a-plugin-to-process-the-whole-input-document/17696 "2014-06-13T09:22:02Z")

</div>

Hello all, we are trying to implement a SIREn plugin for ElasticSearch for indexing and querying documents. We already implemented a version which uses SIREn to index and query a specific field (called "contents" …

---

## [Running rally locally](https://discuss.elastic.co/t/running-rally-locally/354924)

<div class="topic-metadata">

**Author:** [@Qia](https://discuss.elastic.co/u/Qia)\
**Replies:** 15\
**Last updated:** [March 13, 2024, 5:56am UTC](https://discuss.elastic.co/t/running-rally-locally/354924 "2024-03-13T05:56:37Z")

</div>

After following Developing Rally - Rally 2.10.0.dev0 documentation I ran: (.venv) ➜ rally git:(master) python esrally/rally.py race --pipeline=benchmark-only --target-host=127.0.0.1:39200 --track=geonames --challenge=…

---

## [Failed Node Join in Elasticsearch Cluster "jaeger-es" due to Cluster UUID Mismatch](https://discuss.elastic.co/t/failed-node-join-in-elasticsearch-cluster-jaeger-es-due-to-cluster-uuid-mismatch/345888)

<div class="topic-metadata">

**Author:** [@Srinivas\_Rayudu](https://discuss.elastic.co/u/Srinivas_Rayudu)\
**Replies:** 12\
**Last updated:** [October 27, 2023, 9:36am UTC](https://discuss.elastic.co/t/failed-node-join-in-elasticsearch-cluster-jaeger-es-due-to-cluster-uuid-mismatch/345888 "2023-10-27T09:36:16Z")

</div>

Hello, I am encountering an issue where one of the data nodes in my Elasticsearch cluster is unable to join the cluster. The cluster name is "jaeger-es" and the problematic node is "jaeger-es-data-0". I found an error i…

---

## [Deep Aggregation Support](https://discuss.elastic.co/t/deep-aggregation-support/131720)

<div class="topic-metadata">

**Author:** [@Robert\_George](https://discuss.elastic.co/u/Robert_George)\
**Replies:** 10\
**Last updated:** [May 14, 2018, 1:43pm UTC](https://discuss.elastic.co/t/deep-aggregation-support/131720 "2018-05-14T13:43:27Z")

</div>

Hi. I do have a question. Does elasticsearch support deep aggregations? (nested aggregation in nested aggregation). To make agg of a nested object inside a nested object. Specifically to count docs. If so, please give…

---

## [Elasticsearch 5.5 is taking more than 4 hours to start in CentOS 7.x](https://discuss.elastic.co/t/elasticsearch-5-5-is-taking-more-than-4-hours-to-start-in-centos-7-x/151989)

<div class="topic-metadata">

**Author:** [@vrajasekhar123](https://discuss.elastic.co/u/vrajasekhar123)\
**Replies:** 9\
**Last updated:** [October 15, 2018, 4:31am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-is-taking-more-than-4-hours-to-start-in-centos-7-x/151989 "2018-10-15T04:31:17Z")

</div>

Hi All, I used Elasticsearch 5.5.2 on CentOS 6.9. It was working fine. Now i have upgraded my OS to CentOS 7.5. Now it is taking around 4 to 5 hours to enable 9200 port. Logs also not updating till that time. Process …

---

## [Percolator Problems](https://discuss.elastic.co/t/percolator-problems/10591)

<div class="topic-metadata">

**Author:** [@Kenneth\_Loafman\_2](https://discuss.elastic.co/u/Kenneth_Loafman_2)\
**Replies:** 13\
**Last updated:** [March 21, 2013, 1:30pm UTC](https://discuss.elastic.co/t/percolator-problems/10591 "2013-03-21T13:30:54Z")

</div>

Hi, We have two clusters, one for search and the other for percolation, all under 0.19.4 running on Ubuntu Lucid server. The elasticsearch.yml is here: https://gist.github.com/4691735 There are 24 4GB nodes sp…

---

## [Restarting logstash cloudwatch plugin](https://discuss.elastic.co/t/restarting-logstash-cloudwatch-plugin/329681)

<div class="topic-metadata">

**Author:** [@mphilip9](https://discuss.elastic.co/u/mphilip9)\
**Replies:** 15\
**Last updated:** [April 13, 2023, 1:42pm UTC](https://discuss.elastic.co/t/restarting-logstash-cloudwatch-plugin/329681 "2023-04-13T13:42:41Z")

</div>

We have an ELK stack app that has been down for over a month due to a credentials issue in the logstash cloudwatch plugin. The plugin is digesting data again now, but what is strange is that it is digesting logs from the…

---

## [Sql Server to Logstash](https://discuss.elastic.co/t/sql-server-to-logstash/136608)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 15\
**Last updated:** [June 20, 2018, 6:43am UTC](https://discuss.elastic.co/t/sql-server-to-logstash/136608 "2018-06-20T06:43:56Z")

</div>

I'm trying to index records that are fetched from sql server and inserted into elasticsearch.Actually now I have 25k records and while I'm running logstash.conf file it is indexing upto 2000 records and logstash is termi…

---

## [Seeing OOM in 0.19.0.RC2](https://discuss.elastic.co/t/seeing-oom-in-0-19-0-rc2/6767)

<div class="topic-metadata">

**Author:** [@ajan](https://discuss.elastic.co/u/ajan)\
**Replies:** 15\
**Last updated:** [March 5, 2012, 3:15pm UTC](https://discuss.elastic.co/t/seeing-oom-in-0-19-0-rc2/6767 "2012-03-05T15:15:17Z")

</div>

Hi! I'm seeing OOM errors while using 0.19.0.RC2 with default startup script with just about 4K docs indexed. Is there anything wrong in what I'm doing? Here is the \_stats output. {"ok":true,"\_shards":{"tota…

---

## [Logs not getting to elasticsearch from logstash](https://discuss.elastic.co/t/logs-not-getting-to-elasticsearch-from-logstash/166050)

<div class="topic-metadata">

**Author:** [@CG3](https://discuss.elastic.co/u/CG3)\
**Replies:** 9\
**Last updated:** [February 5, 2019, 8:35pm UTC](https://discuss.elastic.co/t/logs-not-getting-to-elasticsearch-from-logstash/166050 "2019-02-05T20:35:46Z")

</div>

I have an elastic cluster with a logstash server as the first point of entry. In this ecosystem, I have filebeat running on several windows servers. They are sending logs to logstash, which then forwards them to elasti…

---

## [Facet filters using nested objects](https://discuss.elastic.co/t/facet-filters-using-nested-objects/7818)

<div class="topic-metadata">

**Author:** [@Marcin\_Dojwa](https://discuss.elastic.co/u/Marcin_Dojwa)\
**Replies:** 9\
**Last updated:** [May 25, 2012, 6:44pm UTC](https://discuss.elastic.co/t/facet-filters-using-nested-objects/7818 "2012-05-25T18:44:40Z")

</div>

Hi, I have the following problem, please check out https://gist.github.com/d3234db747e6e845d1e5 1. query\_ok.js - executes OK and this is OK 2. query\_failed.js - this returns empty set because there is exists filter…

---

## [Fsriver will not index](https://discuss.elastic.co/t/fsriver-will-not-index/17350)

<div class="topic-metadata">

**Author:** [@John\_Ottosson](https://discuss.elastic.co/u/John_Ottosson)\
**Replies:** 9\
**Last updated:** [May 9, 2014, 8:44am UTC](https://discuss.elastic.co/t/fsriver-will-not-index/17350 "2014-05-09T08:44:45Z")

</div>

Ive got some problems getting fsriver to index my files, ive got a diskimage mounted on /mnt/ and it contains a folder files containing files. I am running this on a single server for testing purposes. When I try …

---

## [Memory consumption in io.netty.buffer.PoolThreadCache](https://discuss.elastic.co/t/memory-consumption-in-io-netty-buffer-poolthreadcache/339412)

<div class="topic-metadata">

**Author:** [@liguifa](https://discuss.elastic.co/u/liguifa)\
**Replies:** 10\
**Last updated:** [July 28, 2023, 8:02am UTC](https://discuss.elastic.co/t/memory-consumption-in-io-netty-buffer-poolthreadcache/339412 "2023-07-28T08:02:13Z")

</div>

Hi guys, I'm facing a large memory consumption in io.netty.buffer.PoolThreadCache. This portion of memory can reach up to 5GB. I think this is abnormal /usr/share/elasticsearch/jdk/bin/java -Xshare:auto -Des.networ…

---

## [How to imported file GEOJSON to kibana](https://discuss.elastic.co/t/how-to-imported-file-geojson-to-kibana/309456)

<div class="topic-metadata">

**Author:** [@Khadija\_BOUDINAR1](https://discuss.elastic.co/u/Khadija_BOUDINAR1)\
**Replies:** 10\
**Last updated:** [July 13, 2022, 7:11pm UTC](https://discuss.elastic.co/t/how-to-imported-file-geojson-to-kibana/309456 "2022-07-13T19:11:49Z")

</div>

hi all, i have created new layers in kibana maps and i upload my file geojson but I can't visualize the file have you any suggestion please

---

## [EL setup for fulltext search](https://discuss.elastic.co/t/el-setup-for-fulltext-search/19483)

<div class="topic-metadata">

**Author:** [@Marc\_2](https://discuss.elastic.co/u/Marc_2)\
**Replies:** 10\
**Last updated:** [September 3, 2014, 9:33am UTC](https://discuss.elastic.co/t/el-setup-for-fulltext-search/19483 "2014-09-03T09:33:29Z")

</div>

Hi, I have quiet a simple scenario that already gives me a headache for quiet a while. I have one Field which is quiet big and full of special characters like (,),=,:,",' digits and text. Example: "msg" : "Se…

---

## [Doubt shard allocation balance between nodes](https://discuss.elastic.co/t/doubt-shard-allocation-balance-between-nodes/249638)

<div class="topic-metadata">

**Author:** [@adrian-arapiles](https://discuss.elastic.co/u/adrian-arapiles)\
**Replies:** 11\
**Last updated:** [October 14, 2020, 11:26am UTC](https://discuss.elastic.co/t/doubt-shard-allocation-balance-between-nodes/249638 "2020-10-14T11:26:12Z")

</div>

Hi, I have a doubt about shard node allocation in elasticsearch. Maybe I missed any page of documentation, but I didn't find a solution for my issue. I have a elasticsearch cluster with n number of nodes, and I have sp…

---

## [Many slow transactions at index\_search\_slow\_log\_file](https://discuss.elastic.co/t/many-slow-transactions-at-index-search-slow-log-file/8875)

<div class="topic-metadata">

**Author:** [@agodoy](https://discuss.elastic.co/u/agodoy)\
**Replies:** 11\
**Last updated:** [September 10, 2012, 2:31pm UTC](https://discuss.elastic.co/t/many-slow-transactions-at-index-search-slow-log-file/8875 "2012-09-10T14:31:51Z")

</div>

Hello, I'm doing searches in elasticsearch and I see many with high times, some close to 4 seconds. Configuration: -OS: CPU vendor: Intel CPU model: Core(TM)2 Duo CPU T7700 @ 2.40GHz (2267 MHz) CPU total cores:…

---

## [Index Life cycle Policy indexes not roll overing](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102)

<div class="topic-metadata">

**Author:** [@Anu6006](https://discuss.elastic.co/u/Anu6006)\
**Replies:** 12\
**Last updated:** [February 2, 2021, 5:22am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102 "2021-02-02T05:22:31Z")

</div>

Hi, I'm facing some problem in Index life cycle policy in which indexes are not roll overing and delete phase is not working. Is there is a best practice to do so?

---

## [How to have logstash update logs as they are coming in from logstash and send to kibana graphs automatically](https://discuss.elastic.co/t/how-to-have-logstash-update-logs-as-they-are-coming-in-from-logstash-and-send-to-kibana-graphs-automatically/197383)

<div class="topic-metadata">

**Author:** [@nizztizz](https://discuss.elastic.co/u/nizztizz)\
**Replies:** 12\
**Last updated:** [August 29, 2019, 10:31pm UTC](https://discuss.elastic.co/t/how-to-have-logstash-update-logs-as-they-are-coming-in-from-logstash-and-send-to-kibana-graphs-automatically/197383 "2019-08-29T22:31:10Z")

</div>

I want logstash to automatically update and run as new logs are coming in from a web application and send them to kibana's graphs. As of right now I have to manually run logstash and once it finishes running it shows up …

---

## [Cluster will not start after upgrade from 8.x to 9.x](https://discuss.elastic.co/t/cluster-will-not-start-after-upgrade-from-8-x-to-9-x/383690)

<div class="topic-metadata">

**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\
**Replies:** 19\
**Last updated:** [November 27, 2025, 5:03pm UTC](https://discuss.elastic.co/t/cluster-will-not-start-after-upgrade-from-8-x-to-9-x/383690 "2025-11-27T17:03:11Z")

</div>

Hello all, I’ve upgraded from Elasticsearch 8.19 to 9.2.1. Since doing so none of the cluster nodes will start, the error message in the cluster log: java.lang.IllegalStateException: The index \[.reporting-2021-12-12/E…

---

## [Winlogbeat 8.0.0 parsing with module](https://discuss.elastic.co/t/winlogbeat-8-0-0-parsing-with-module/317812)

<div class="topic-metadata">

**Author:** [@vitkon](https://discuss.elastic.co/u/vitkon)\
**Replies:** 9\
**Last updated:** [November 10, 2022, 2:25pm UTC](https://discuss.elastic.co/t/winlogbeat-8-0-0-parsing-with-module/317812 "2022-11-10T14:25:49Z")

</div>

Hello everyone I have an ELK 8.0.0 series. I am testing the build of windows logs using winlogbeat 8.0.0. As I understand from the elastic documentation, the parsing of raw windows events will be by means of Security, P…

---

## [Filebeat haproxy with dns processor](https://discuss.elastic.co/t/filebeat-haproxy-with-dns-processor/304501)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 9\
**Last updated:** [May 17, 2022, 12:56pm UTC](https://discuss.elastic.co/t/filebeat-haproxy-with-dns-processor/304501 "2022-05-17T12:56:47Z")

</div>

I have succssfully send haproxy log to Elasticsearch using filebeat. next step I am trying to do is to change destination.ip and source.ip to name but I don't think I am using dns processor correctly. I am not getting…

---

## [Empty row in the patter when creating an index and undefined value out field name](https://discuss.elastic.co/t/empty-row-in-the-patter-when-creating-an-index-and-undefined-value-out-field-name/284082)

<div class="topic-metadata">

**Author:** [@Jaime\_Teixido](https://discuss.elastic.co/u/Jaime_Teixido)\
**Replies:** 9\
**Last updated:** [September 17, 2021, 10:07am UTC](https://discuss.elastic.co/t/empty-row-in-the-patter-when-creating-an-index-and-undefined-value-out-field-name/284082 "2021-09-17T10:07:42Z")

</div>

Hello, when creating a new index as follows: PUT index-name The index is generated correctly but when generating the pattern, I see an empty row. I'm not sure if this is what is causing the documents to have an emp…

---

## [Discover does not show any data for indices with \_source disabled](https://discuss.elastic.co/t/discover-does-not-show-any-data-for-indices-with-source-disabled/345652)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 11\
**Last updated:** [October 25, 2023, 5:32pm UTC](https://discuss.elastic.co/t/discover-does-not-show-any-data-for-indices-with-source-disabled/345652 "2023-10-25T17:32:38Z")

</div>

Hello, I disabled the \_source field on a couple of indices yesterday and today I noticed that I can not see anything from those indices on Discover. I can filter on values and fields, but everything is empty on Kibana …

---

## [Bulk import unbalanced](https://discuss.elastic.co/t/bulk-import-unbalanced/128818)

<div class="topic-metadata">

**Author:** [@JackFazackerley](https://discuss.elastic.co/u/JackFazackerley)\
**Replies:** 11\
**Last updated:** [April 20, 2018, 11:01am UTC](https://discuss.elastic.co/t/bulk-import-unbalanced/128818 "2018-04-20T11:01:58Z")

</div>

Elasticsearch version: 6.2.3 JVM version: openjdk version "1.8.0\_162" OpenJDK Runtime Environment (build 1.8.0\_162-8u162-b12-0ubuntu0.16.04.2-b12) OpenJDK 64-Bit Server VM (build 25.162-b12, mixed mode OS version L…

---

## [Faceting on \_id field](https://discuss.elastic.co/t/faceting-on--id-field/9039)

<div class="topic-metadata">

**Author:** [@sujoysett](https://discuss.elastic.co/u/sujoysett)\
**Replies:** 13\
**Last updated:** [May 15, 2013, 11:03am UTC](https://discuss.elastic.co/t/faceting-on--id-field/9039 "2013-05-15T11:03:44Z")

</div>

Hi, Sorry if I am asking a too obvious question, but is term facet possible on the \_id field of an index? The reason I am trying to facet an already unique field is this: I want to find the documents that are in…

---

## [Search failures on server restarts](https://discuss.elastic.co/t/search-failures-on-server-restarts/3553)

<div class="topic-metadata">

**Author:** [@Diptamay](https://discuss.elastic.co/u/Diptamay)\
**Replies:** 13\
**Last updated:** [November 12, 2010, 1:21am UTC](https://discuss.elastic.co/t/search-failures-on-server-restarts/3553 "2010-11-12T01:21:23Z")

</div>

Hi Shay Please checkout git@github.com:diptamay/es-issue.git and have a look at the issue listed below, running against the latest trunk build of ES. Scenario: ---------- Most of the times when an ES server is …

---

## [Kibana cannot reach epr.elastic.co even though "chainpem" is set](https://discuss.elastic.co/t/kibana-cannot-reach-epr-elastic-co-even-though-chainpem-is-set/380858)

<div class="topic-metadata">

**Author:** [@Elasticisti](https://discuss.elastic.co/u/Elasticisti)\
**Replies:** 16\
**Last updated:** [August 12, 2025, 1:01pm UTC](https://discuss.elastic.co/t/kibana-cannot-reach-epr-elastic-co-even-though-chainpem-is-set/380858 "2025-08-12T13:01:00Z")

</div>

hi, as described here, we have set the environment variable to our “chainpem” likely correctly. File: /usr/share/kibana/bin/kibana (see last line) #!/bin/sh SCRIPT=$0 # SCRIPT may be an arbitrarily deep series of sy…

---

## [Elastic search : Quesry not executing](https://discuss.elastic.co/t/elastic-search-quesry-not-executing/19542)

<div class="topic-metadata">

**Author:** [@ravi\_kumar](https://discuss.elastic.co/u/ravi_kumar)\
**Replies:** 12\
**Last updated:** [September 1, 2014, 7:50am UTC](https://discuss.elastic.co/t/elastic-search-quesry-not-executing/19542 "2014-09-01T07:50:23Z")

</div>

Here is mapping of my elastic search {"MYAPP":{"mappings":{ "XX":{ "\_ttl":{"enabled":true}, "properties":{"propX":{"type":"integer"}} }, …

---

## [Compresstion in ES 1.2.1](https://discuss.elastic.co/t/compresstion-in-es-1-2-1/17980)

<div class="topic-metadata">

**Author:** [@sri](https://discuss.elastic.co/u/sri)\
**Replies:** 12\
**Last updated:** [June 13, 2014, 12:29pm UTC](https://discuss.elastic.co/t/compresstion-in-es-1-2-1/17980 "2014-06-13T12:29:25Z")

</div>

Hello everyone, I have read posts and blogs on how elasticsearch compression can be enabled in the previous versions(0.17 - 0.19). I am currently using ES 1.2.1, i wasn't able to find out how to enable compre…

---

## [Availability of Older Elasticsearch Versions on Elastic Cloud (Below 8.17.5)](https://discuss.elastic.co/t/availability-of-older-elasticsearch-versions-on-elastic-cloud-below-8-17-5/377399)

<div class="topic-metadata">

**Author:** [@Aniket\_Dubey10](https://discuss.elastic.co/u/Aniket_Dubey10)\
**Replies:** 10\
**Last updated:** [April 25, 2025, 3:16pm UTC](https://discuss.elastic.co/t/availability-of-older-elasticsearch-versions-on-elastic-cloud-below-8-17-5/377399 "2025-04-25T15:16:27Z")

</div>

Is it possible to deploy an earlier version, such as 8.10.2, via Elastic Cloud — either through advanced settings or support request?

---

## [How to take backup of elasticsearch service config?](https://discuss.elastic.co/t/how-to-take-backup-of-elasticsearch-service-config/125321)

<div class="topic-metadata">

**Author:** [@SathishKannan](https://discuss.elastic.co/u/SathishKannan)\
**Replies:** 9\
**Last updated:** [April 12, 2018, 6:44am UTC](https://discuss.elastic.co/t/how-to-take-backup-of-elasticsearch-service-config/125321 "2018-04-12T06:44:06Z")

</div>

how to take backup of config /etc/elasticsearch//conf..?

---

## [Need help with setting up 1 masternode and two datanodes set up](https://discuss.elastic.co/t/need-help-with-setting-up-1-masternode-and-two-datanodes-set-up/251505)

<div class="topic-metadata">

**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\
**Replies:** 10\
**Last updated:** [October 20, 2020, 2:09pm UTC](https://discuss.elastic.co/t/need-help-with-setting-up-1-masternode-and-two-datanodes-set-up/251505 "2020-10-20T14:09:56Z")

</div>

Hello All, As we are implementing ELK in our org as a pilot project, I'm trying to set up 3 nodes Elastic cluster (all acts master and data nodes ), I have created Ubuntu servers in Azure cloud with specific hardware c…

[Previous page](https://discuss.elastic.co/top.md?page=222&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=224&per_page=50&period=all)
