# Top **URL:** https://discuss.elastic.co/top.md?page=228&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 229 --- ## [Advice on my approach to this search problem](https://discuss.elastic.co/t/advice-on-my-approach-to-this-search-problem/5606)
**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\ **Replies:** 10\ **Last updated:** [October 19, 2011, 3:47pm UTC](https://discuss.elastic.co/t/advice-on-my-approach-to-this-search-problem/5606 "2011-10-19T15:47:01Z")
Hey guys. I've been using ES for 1-2 weeks now, and love it. Being very new to it, though, I've been piecing together bits of knowledge as I go along. I have a semi-working solution to a problem, but I'm sure that it… --- ## [Errors on bulk delete of child](https://discuss.elastic.co/t/errors-on-bulk-delete-of-child/4016)
**Author:** [@Matt\_Paul\_2](https://discuss.elastic.co/u/Matt_Paul_2)\ **Replies:** 11\ **Last updated:** [March 2, 2011, 10:29pm UTC](https://discuss.elastic.co/t/errors-on-bulk-delete-of-child/4016 "2011-03-02T22:29:19Z")
Hi All, I'm working with the latest build of ES (just downloaded yesterday morning from source) and I've come across an issue where when I attempt to do a bulk delete of a child document, I'm getting an error sayin… --- ## [Dashboard performance help](https://discuss.elastic.co/t/dashboard-performance-help/327582)
**Author:** [@tommycahir](https://discuss.elastic.co/u/tommycahir)\ **Replies:** 9\ **Last updated:** [March 23, 2023, 8:56am UTC](https://discuss.elastic.co/t/dashboard-performance-help/327582 "2023-03-23T08:56:57Z")
Hi All I am looking for some help in understanding how I can debug/find slow performance issues and then resolve them. We have a dashboard that is presenting some visualisations on an index with 29,369,877 documents an… --- ## [Logstash cant start the pipeline in the conf.d file](https://discuss.elastic.co/t/logstash-cant-start-the-pipeline-in-the-conf-d-file/304172)
**Author:** [@ahmed\_barki](https://discuss.elastic.co/u/ahmed_barki)\ **Replies:** 9\ **Last updated:** [May 8, 2022, 7:49pm UTC](https://discuss.elastic.co/t/logstash-cant-start-the-pipeline-in-the-conf-d-file/304172 "2022-05-08T19:49:00Z")
Hello everyone, when i use the command /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/simple.conf here is what i get '\[INFO \] 2022-05-07 09:58:02.271 \[\[main\]-pipeline-manager\] elasticsearch - New Elasticsear… --- ## [Guides on getting Elastic 8 working with a Java backend?](https://discuss.elastic.co/t/guides-on-getting-elastic-8-working-with-a-java-backend/348765)
**Author:** [@DenverCoder9](https://discuss.elastic.co/u/DenverCoder9)\ **Replies:** 10\ **Last updated:** [December 7, 2023, 8:44pm UTC](https://discuss.elastic.co/t/guides-on-getting-elastic-8-working-with-a-java-backend/348765 "2023-12-07T20:44:26Z")
Hello. Been working in Java to try getting Elasticsearch up and working in a Java backend and not having good luck with finding examples of how to have it working. A lot of the materials I've seen use RestHighLevelClien… --- ## [Repository-s3 plugin not synching snapshots](https://discuss.elastic.co/t/repository-s3-plugin-not-synching-snapshots/315117)
**Author:** [@Vishrant\_Gupta](https://discuss.elastic.co/u/Vishrant_Gupta)\ **Replies:** 12\ **Last updated:** [October 20, 2022, 4:54pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-not-synching-snapshots/315117 "2022-10-20T16:54:55Z")
Hi there, I have two elasticsearch clusters running on two separate kubernetes clusters. Both the elasticsearch clusters have the repository-s3 plugin installed. "2": { "name": "elasticsearch-client-575db98f… --- ## [Indexing rate became very low in elastic cluster](https://discuss.elastic.co/t/indexing-rate-became-very-low-in-elastic-cluster/352377)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 14\ **Last updated:** [February 6, 2024, 9:38am UTC](https://discuss.elastic.co/t/indexing-rate-became-very-low-in-elastic-cluster/352377 "2024-02-06T09:38:42Z")
Hi sir. @stephenb The indexing rate of our cluster become very low and even search results are getting delayed. cluster details: 3 Master nodes - cpu 4 cores -RAM 16GB 4 Data nodes (out of 4 one node is given both ing… --- ## [Index don't want deleted automatically](https://discuss.elastic.co/t/index-dont-want-deleted-automatically/305554)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 14\ **Last updated:** [May 31, 2022, 9:00am UTC](https://discuss.elastic.co/t/index-dont-want-deleted-automatically/305554 "2022-05-31T09:00:42Z")
Hi there, i wanna ask about index and retention. so here is the question in my Elasticsearch i have created index automatically and give them policy to go away after 5 days. the problem is they don't want to be deleted… --- ## [Terms facet explodes memory](https://discuss.elastic.co/t/terms-facet-explodes-memory/5175)
**Author:** [@Jurgen\_kartnaller](https://discuss.elastic.co/u/Jurgen_kartnaller)\ **Replies:** 15\ **Last updated:** [December 3, 2011, 5:04pm UTC](https://discuss.elastic.co/t/terms-facet-explodes-memory/5175 "2011-12-03T17:04:44Z")
The terms facet seems to read the terms field from ALL documents into the field cache not only the fields from the query result. This also happens if the query returns no results for the facet. In our case this re… --- ## [Wrong result in Bool Query](https://discuss.elastic.co/t/wrong-result-in-bool-query/241136)
**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\ **Replies:** 11\ **Last updated:** [July 14, 2020, 2:19pm UTC](https://discuss.elastic.co/t/wrong-result-in-bool-query/241136 "2020-07-14T14:19:02Z")
Mapping PUT index PUT /index/\_mapping { "properties": { "categories": { "type": "nested", "properties": { "id": { "type": "integer" } } }, "deleted": { "… --- ## [Massive index creation after conditional indexing](https://discuss.elastic.co/t/massive-index-creation-after-conditional-indexing/360427)
**Author:** [@Samuel\_Ruiz\_Garcia](https://discuss.elastic.co/u/Samuel_Ruiz_Garcia)\ **Replies:** 12\ **Last updated:** [June 4, 2024, 9:34pm UTC](https://discuss.elastic.co/t/massive-index-creation-after-conditional-indexing/360427 "2024-06-04T21:34:17Z")
We have a server, where we had previously configured a filebeat for a simple monitoring of log files. A month ago we were asked to ingest the record of a containered docker application, but this had to be recorded in a s… --- ## [Unable to manually specify start/end timestamps in date range selector](https://discuss.elastic.co/t/unable-to-manually-specify-start-end-timestamps-in-date-range-selector/251487)
**Author:** [@daq](https://discuss.elastic.co/u/daq)\ **Replies:** 9\ **Last updated:** [October 8, 2020, 9:29pm UTC](https://discuss.elastic.co/t/unable-to-manually-specify-start-end-timestamps-in-date-range-selector/251487 "2020-10-08T21:29:39Z")
What am I doing wrong? I'm trying to manually adjust start/end timestamps in the date range selector in discover tab, but it just prints expected format in red and doesn't give me any way to apply manually entered timest… --- ## [No text field to input a default index pattern](https://discuss.elastic.co/t/no-text-field-to-input-a-default-index-pattern/135978)
**Author:** [@JustTheDr](https://discuss.elastic.co/u/JustTheDr)\ **Replies:** 9\ **Last updated:** [June 22, 2018, 7:35pm UTC](https://discuss.elastic.co/t/no-text-field-to-input-a-default-index-pattern/135978 "2018-06-22T19:35:20Z")
Hello, I am running my ELK stack on Ubuntu Server 18.04 LTS (Bionic Beaver). The 3 ELK services and nginx are running. When accessing the kibana management page I am unable to type in an index pattern. I see no text … --- ## [Logstash-output-elasticsearch Connection reset while trying to send bulk request to elasticsearch](https://discuss.elastic.co/t/logstash-output-elasticsearch-connection-reset-while-trying-to-send-bulk-request-to-elasticsearch/379398)
**Author:** [@Advay](https://discuss.elastic.co/u/Advay)\ **Replies:** 21\ **Last updated:** [June 30, 2025, 12:46pm UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-connection-reset-while-trying-to-send-bulk-request-to-elasticsearch/379398 "2025-06-30T12:46:14Z")
We are encountering an issue in our Logstash cluster and would appreciate your assistance in investigating and resolving it. Upon starting the Logstash cluster, we are consistently observing the following warning messag… --- ## [ES is upgraded from version 6.3.2 to 6.8.22 in a rolling manner. After the upgrade, the cluster status is abnormal. How to roll back to 6.3.2?](https://discuss.elastic.co/t/es-is-upgraded-from-version-6-3-2-to-6-8-22-in-a-rolling-manner-after-the-upgrade-the-cluster-status-is-abnormal-how-to-roll-back-to-6-3-2/304533)
**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\ **Replies:** 10\ **Last updated:** [May 18, 2022, 9:37pm UTC](https://discuss.elastic.co/t/es-is-upgraded-from-version-6-3-2-to-6-8-22-in-a-rolling-manner-after-the-upgrade-the-cluster-status-is-abnormal-how-to-roll-back-to-6-3-2/304533 "2022-05-18T21:37:04Z")
Currently I am working on the ES rolling upgrade plan. The official manual lists the rolling upgrade steps, but there is no rollback step. After the ES rolling upgrade, the cluster status is abnormal or the application w… --- ## [Kibana runs perfectly if started from terminal, refuses connections if started via Runtime.getRuntime().exec()](https://discuss.elastic.co/t/kibana-runs-perfectly-if-started-from-terminal-refuses-connections-if-started-via-runtime-getruntime-exec/195024)
**Author:** [@mathwin](https://discuss.elastic.co/u/mathwin)\ **Replies:** 10\ **Last updated:** [August 16, 2019, 7:13pm UTC](https://discuss.elastic.co/t/kibana-runs-perfectly-if-started-from-terminal-refuses-connections-if-started-via-runtime-getruntime-exec/195024 "2019-08-16T19:13:41Z")
I'm writing a java application that injects data into Elastic and displays Kibana in an embedded browser window. During initialization, it attempts to start the services for both. The init code for that looks like this… --- ## [Logstash Date parsing error](https://discuss.elastic.co/t/logstash-date-parsing-error/298780)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 11\ **Last updated:** [March 4, 2022, 10:11pm UTC](https://discuss.elastic.co/t/logstash-date-parsing-error/298780 "2022-03-04T22:11:27Z")
Hi! I am trying to parse the following date format: 2022-03-03 10:45:02,520 My current configuration for logstash to parse is: grok { match =\> \[ "message", "%{TIMESTAMP\_ISO8601:logdate}....." \] } d… --- ## [Do I need a plugin to search geographically](https://discuss.elastic.co/t/do-i-need-a-plugin-to-search-geographically/19605)
**Author:** [@James\_3](https://discuss.elastic.co/u/James_3)\ **Replies:** 9\ **Last updated:** [September 8, 2014, 1:22pm UTC](https://discuss.elastic.co/t/do-i-need-a-plugin-to-search-geographically/19605 "2014-09-08T13:22:52Z")
Hi, I'm a bit confused with this. If have results in elasticsearch with lat and long coordinates, and I search using lat, long and distance parameters, can elastic search return all the results within that given a… --- ## [Can I replace the @timestamp of the dashboard with the time at which the event get logged in the file](https://discuss.elastic.co/t/can-i-replace-the-timestamp-of-the-dashboard-with-the-time-at-which-the-event-get-logged-in-the-file/355607)
**Author:** [@Shrimad\_Mishra](https://discuss.elastic.co/u/Shrimad_Mishra)\ **Replies:** 16\ **Last updated:** [March 20, 2024, 2:12am UTC](https://discuss.elastic.co/t/can-i-replace-the-timestamp-of-the-dashboard-with-the-time-at-which-the-event-get-logged-in-the-file/355607 "2024-03-20T02:12:23Z")
Hi there, I wanted to replace the @timestamp value with the log time. I am using filebeat as a logs collector. Here is my filter value which I am trying grok { match =\> { "message" =\> "\\\[%{DATA:datetime}\\\] I… --- ## [Parsing input in to logstash](https://discuss.elastic.co/t/parsing-input-in-to-logstash/167539)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 9\ **Last updated:** [February 11, 2019, 2:27pm UTC](https://discuss.elastic.co/t/parsing-input-in-to-logstash/167539 "2019-02-11T14:27:39Z")
I configure snmp to get information from PDU Run only two get to test, and output is long. { "iso.org.dod.internet.private.enterprises.apc.products.hardware.rPDU2.rPDU2Device.rPDU2DeviceConfigTable.rPDU2DeviceConfigEn… --- ## [Logstash8.12.2 restart many times may encounter plugin load errors 'cabin/metrics','cabin/log/logger', "logstash::codecs::multiline::grok"](https://discuss.elastic.co/t/logstash8-12-2-restart-many-times-may-encounter-plugin-load-errors-cabin-metrics-cabin-log-logger-logstash-grok/355206)
**Author:** [@LiYuzhuo2020](https://discuss.elastic.co/u/LiYuzhuo2020)\ **Replies:** 15\ **Last updated:** [March 27, 2024, 9:31am UTC](https://discuss.elastic.co/t/logstash8-12-2-restart-many-times-may-encounter-plugin-load-errors-cabin-metrics-cabin-log-logger-logstash-grok/355206 "2024-03-27T09:31:40Z")
I upgrade the logstash from 7.16.3 to 8.12.2 and it can start up successfully after the configuration file adjustment, but if I restart the logstash service time from times it may encounter above plugin load errors. Can … --- ## [Importing Apache logs with FIlebeats tutorial doesn't work](https://discuss.elastic.co/t/importing-apache-logs-with-filebeats-tutorial-doesnt-work/221065)
**Author:** [@lgo](https://discuss.elastic.co/u/lgo)\ **Replies:** 10\ **Last updated:** [February 28, 2020, 9:07am UTC](https://discuss.elastic.co/t/importing-apache-logs-with-filebeats-tutorial-doesnt-work/221065 "2020-02-28T09:07:08Z")
Hello I'm following this tutorial, where you ingest some Apache logs with FIlebeats into Elasticsearch to visualize them in Kibana. I follow all the steps and none fails, but when I have a look at the index pattern … --- ## [Estimating field cache size for facets in advance](https://discuss.elastic.co/t/estimating-field-cache-size-for-facets-in-advance/9265)
**Author:** [@Andrew\_Clegg](https://discuss.elastic.co/u/Andrew_Clegg)\ **Replies:** 10\ **Last updated:** [October 30, 2013, 2:21pm UTC](https://discuss.elastic.co/t/estimating-field-cache-size-for-facets-in-advance/9265 "2013-10-30T14:21:09Z")
I want to do some planning around how much cache memory it will take to facet over potentially a lot of records (millions, eventually billions). These are mainly date histograms and term facets. So, I have a few … --- ## [Elastic Unstable](https://discuss.elastic.co/t/elastic-unstable/350593)
**Author:** [@Dea\_Agra](https://discuss.elastic.co/u/Dea_Agra)\ **Replies:** 16\ **Last updated:** [January 11, 2024, 10:38am UTC](https://discuss.elastic.co/t/elastic-unstable/350593 "2024-01-11T10:38:34Z")
Hi Team Elastic, I have been stressful latelty because my logs are coming to Elasticsearch delay for about 10 hours. I have 3 nodes, Node 1: master, ingest, transform, resource: 16vCPU, 16GB, 500GB Node 2: data\_hot, … --- ## [SocketTimeout Exception issue reported for Elasticsearch Node with moderate resource usage](https://discuss.elastic.co/t/sockettimeout-exception-issue-reported-for-elasticsearch-node-with-moderate-resource-usage/360984)
**Author:** [@lzz118](https://discuss.elastic.co/u/lzz118)\ **Replies:** 9\ **Last updated:** [June 9, 2024, 5:32am UTC](https://discuss.elastic.co/t/sockettimeout-exception-issue-reported-for-elasticsearch-node-with-moderate-resource-usage/360984 "2024-06-09T05:32:24Z")
The Elasticsearch Cluster with the reported issue includes 86 data nodes and 3 dedicated master nodes, each with 32 GB heap 64 to 128GB OS memory, and between 16 ~ 32 CPU cores per node. We have two ES clusters with sim… --- ## [Highlighting a text\_phrase\_prefix query](https://discuss.elastic.co/t/highlighting-a-text-phrase-prefix-query/5094)
**Author:** [@William\_Schwarzenbac](https://discuss.elastic.co/u/William_Schwarzenbac)\ **Replies:** 9\ **Last updated:** [February 5, 2013, 1:52pm UTC](https://discuss.elastic.co/t/highlighting-a-text-phrase-prefix-query/5094 "2013-02-05T13:52:04Z")
I'm trying to get a quick and dirty autocomplete implementation working and thought a decent approach would be to fetch the highlighted phrase for a prefix phrase query and be done with it. However, no highlights are … --- ## [Dynamic Mapping](https://discuss.elastic.co/t/dynamic-mapping/6575)
**Author:** [@Sky\_Stebnicki1](https://discuss.elastic.co/u/Sky_Stebnicki1)\ **Replies:** 9\ **Last updated:** [April 16, 2012, 2:51pm UTC](https://discuss.elastic.co/t/dynamic-mapping/6575 "2012-04-16T14:51:39Z")
Hi all, I'm new(er) to elasticsearch but pretty experienced with Apache Solr. In Solr there is a configuration option in solr that allows me to create dynamic mapping with the prefix or the postfix of a field name. Fo… --- ## [NPE in SignificanceHeuristicStreams.read while deserializing response (SearchResponse)](https://discuss.elastic.co/t/npe-in-significanceheuristicstreams-read-while-deserializing-response-searchresponse/19891)
**Author:** [@Felipe\_Hummel](https://discuss.elastic.co/u/Felipe_Hummel)\ **Replies:** 12\ **Last updated:** [September 24, 2014, 9:46am UTC](https://discuss.elastic.co/t/npe-in-significanceheuristicstreams-read-while-deserializing-response-searchresponse/19891 "2014-09-24T09:46:58Z")
Hey guys, I’m getting NullPointerException while using a significant\_terms aggregation. It happens in this line: org.elasticsearch.search.aggregations.bucket.significant.heuristics.SignificanceHeuristicStreams.read(Sig… --- ## [Moving data directory](https://discuss.elastic.co/t/moving-data-directory/10791)
**Author:** [@j\_barrett\_strausser](https://discuss.elastic.co/u/j_barrett_strausser)\ **Replies:** 12\ **Last updated:** [February 19, 2013, 9:27pm UTC](https://discuss.elastic.co/t/moving-data-directory/10791 "2013-02-19T21:27:58Z")
Apologies for the simple question. What would be the procedure for moving the data from the current data directory to a new directory ? Can I simple 'cp /old/data /new/data' without worrying about corruption somep… --- ## [Problems expanding replicas for \_percolator](https://discuss.elastic.co/t/problems-expanding-replicas-for--percolator/6584)
**Author:** [@Kenneth\_Loafman](https://discuss.elastic.co/u/Kenneth_Loafman)\ **Replies:** 12\ **Last updated:** [February 5, 2012, 6:45pm UTC](https://discuss.elastic.co/t/problems-expanding-replicas-for--percolator/6584 "2012-02-05T18:45:53Z")
Hi, I gave up on my previous question about 0-all being answered, but I'm still having troubles with expanding the number of replicas for \_percolator. I'm running 18.6 on 3 nodes, strictly for percolator use. Per… --- ## [Error while retrieving an object field](https://discuss.elastic.co/t/error-while-retrieving-an-object-field/3279)
**Author:** [@Mahendra\_M](https://discuss.elastic.co/u/Mahendra_M)\ **Replies:** 12\ **Last updated:** [September 7, 2010, 7:19am UTC](https://discuss.elastic.co/t/error-while-retrieving-an-object-field/3279 "2010-09-07T07:19:58Z")
Hi, In the documents that I index, I have a field of 'object' type. Mapped as follows. "price" : { "type" : "object", "dynamic" : true, "enabled" : true, "store" : true, … --- ## [Logstash error - Unable to retrieve Elasticsearch version](https://discuss.elastic.co/t/logstash-error-unable-to-retrieve-elasticsearch-version/375620)
**Author:** [@kawalkarhemant](https://discuss.elastic.co/u/kawalkarhemant)\ **Replies:** 22\ **Last updated:** [March 18, 2025, 6:07am UTC](https://discuss.elastic.co/t/logstash-error-unable-to-retrieve-elasticsearch-version/375620 "2025-03-18T06:07:38Z")
I am trying to trasanfer data from MSSQL to Elasticsearch using Logstash config file. But keep getting error message. \[2025-03-10T00:13:43,950\]\[WARN \]\[logstash.runner \] NOTICE: Running Logstash as a superuser … --- ## [Filebeat and logstash not communicating](https://discuss.elastic.co/t/filebeat-and-logstash-not-communicating/168639)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 10\ **Last updated:** [February 15, 2019, 9:04pm UTC](https://discuss.elastic.co/t/filebeat-and-logstash-not-communicating/168639 "2019-02-15T21:04:07Z")
I have simplest configuration I have follwoing on system where log is being shipped from cat filebeat.yml |grep -v '#' |sed '/^$/d' filebeat.inputs: type: log enabled: true paths: /tmp/sensors\*.log scan\_frequenc… --- ## [Kibana is not ready yet](https://discuss.elastic.co/t/kibana-is-not-ready-yet/194403)
**Author:** [@Pierrelaurent](https://discuss.elastic.co/u/Pierrelaurent)\ **Replies:** 9\ **Last updated:** [August 14, 2019, 3:58am UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet/194403 "2019-08-14T03:58:11Z")
Hi There, I got the error when trying to start Kibana that there is a fatal error qserver.host setting was not applied? Can you guys tell me what that means? --- ## [Why all replicas are unassigned?](https://discuss.elastic.co/t/why-all-replicas-are-unassigned/19727)
**Author:** [@Sephen\_Xu](https://discuss.elastic.co/u/Sephen_Xu)\ **Replies:** 9\ **Last updated:** [April 15, 2015, 8:31am UTC](https://discuss.elastic.co/t/why-all-replicas-are-unassigned/19727 "2015-04-15T08:31:36Z")
Hello, I startup 4 nodes on 2 machines, and when create index, all replicas are unassigned. { "cluster\_name" : "elasticsearch\_log", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 4, … --- ## [Exception while creating a custom analyzer](https://discuss.elastic.co/t/exception-while-creating-a-custom-analyzer/14711)
**Author:** [@Arjit\_Gupta](https://discuss.elastic.co/u/Arjit_Gupta)\ **Replies:** 9\ **Last updated:** [December 10, 2013, 8:08am UTC](https://discuss.elastic.co/t/exception-while-creating-a-custom-analyzer/14711 "2013-12-10T08:08:53Z")
Hi, I am trying to create some custom analyzer. definition: https://gist.github.com/arjitgupta/7792134 My use case is If I have an input 1. Remove stop words 2. Remove special characters So if I have inpu… --- ## [SearchPhaseExecutionException on wild loop](https://discuss.elastic.co/t/searchphaseexecutionexception-on-wild-loop/4432)
**Author:** [@Sebastian\_Gavarini](https://discuss.elastic.co/u/Sebastian_Gavarini)\ **Replies:** 15\ **Last updated:** [May 21, 2011, 9:01pm UTC](https://discuss.elastic.co/t/searchphaseexecutionexception-on-wild-loop/4432 "2011-05-21T21:01:10Z")
Hi all, I am having a problem with an exception being thrown in ES. It all started with a loop that tries to get a fixed size page of data (document titles) from an index, but in my case there isn't enough data on … --- ## [Handling tags in elasticsearch documents and kibana visualisations](https://discuss.elastic.co/t/handling-tags-in-elasticsearch-documents-and-kibana-visualisations/371869)
**Author:** [@tommycahir](https://discuss.elastic.co/u/tommycahir)\ **Replies:** 10\ **Last updated:** [December 12, 2024, 5:30pm UTC](https://discuss.elastic.co/t/handling-tags-in-elasticsearch-documents-and-kibana-visualisations/371869 "2024-12-12T17:30:22Z")
Hey folks I have been asked to determine how we can leverage a set of tags that will be added to all documents being indexed in future and I am looking for guidance on best practices. Our clusters are primarily used as… --- ## [Search query problem](https://discuss.elastic.co/t/search-query-problem/13491)
**Author:** [@Gabriele\_Angeli](https://discuss.elastic.co/u/Gabriele_Angeli)\ **Replies:** 10\ **Last updated:** [September 9, 2013, 7:56am UTC](https://discuss.elastic.co/t/search-query-problem/13491 "2013-09-09T07:56:05Z")
After this search query \*curl localhost:9200/logstash-2013.09.06/\_search?pretty=true\* i have this results: "\_index" : "logstash-2013.09.06", "\_type" : "domain\_alert", "\_id" : "82-WdTekRUOMPCxYr… --- ## [Ingesting documents (.pbix) to elasticsearch](https://discuss.elastic.co/t/ingesting-documents-pbix-to-elasticsearch/254549)
**Author:** [@Yuval\_David](https://discuss.elastic.co/u/Yuval_David)\ **Replies:** 13\ **Last updated:** [November 12, 2020, 3:18pm UTC](https://discuss.elastic.co/t/ingesting-documents-pbix-to-elasticsearch/254549 "2020-11-12T15:18:46Z")
so I would like to create an application which would get pbix files insert those files into elastic and then we could create a rest application which could query elastic for full text search over those pbix files. howev… --- ## [Create 2 versions of the same index (one with less fields)](https://discuss.elastic.co/t/create-2-versions-of-the-same-index-one-with-less-fields/305506)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 9\ **Last updated:** [June 2, 2022, 5:46pm UTC](https://discuss.elastic.co/t/create-2-versions-of-the-same-index-one-with-less-fields/305506 "2022-06-02T17:46:56Z")
Hello, I have the requirement of ingesting metricbeat/filebeat data twice, once with all the default fields, and a second time with only the fields the dashboards will be using. This two versions will have different re… --- ## [Edit feilds.yml in apm server to get country details](https://discuss.elastic.co/t/edit-feilds-yml-in-apm-server-to-get-country-details/229705)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 11\ **Last updated:** [April 30, 2020, 11:42am UTC](https://discuss.elastic.co/t/edit-feilds-yml-in-apm-server-to-get-country-details/229705 "2020-04-30T11:42:28Z")
Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s… --- ## [Backup repository s3 bucket size is almost 5 times the actual index size](https://discuss.elastic.co/t/backup-repository-s3-bucket-size-is-almost-5-times-the-actual-index-size/373910)
**Author:** [@Dharani\_Vattamwar](https://discuss.elastic.co/u/Dharani_Vattamwar)\ **Replies:** 25\ **Last updated:** [February 3, 2025, 3:26pm UTC](https://discuss.elastic.co/t/backup-repository-s3-bucket-size-is-almost-5-times-the-actual-index-size/373910 "2025-02-03T15:26:18Z")
our elasticsearch indices are about 12TB and we have backups happening on daily basis with retention of 3 days. How can the snapshot storage s3 size be 60TB? Is there any way to estimate the size if we retain snapshots … --- ## [Master not discovered or elected yet, when stopping Elasticsearch service](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-when-stopping-elasticsearch-service/353377)
**Author:** [@andrejze](https://discuss.elastic.co/u/andrejze)\ **Replies:** 18\ **Last updated:** [February 16, 2024, 12:45pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-when-stopping-elasticsearch-service/353377 "2024-02-16T12:45:50Z")
OS: Debian 10 (buster), 4.19.0-25-amd64 #1 SMP Debian 4.19.289-2 (2023-08-08) Elasticsearch: 8.12.0 Cluster: 3 nodes, all master eligible When stopping Elasticsearch service on any node, operation gets stuck with err… --- ## [Displaying data from one event to other events](https://discuss.elastic.co/t/displaying-data-from-one-event-to-other-events/285747)
**Author:** [@mostafaelsayed](https://discuss.elastic.co/u/mostafaelsayed)\ **Replies:** 10\ **Last updated:** [October 2, 2021, 7:42pm UTC](https://discuss.elastic.co/t/displaying-data-from-one-event-to-other-events/285747 "2021-10-02T19:42:19Z")
Hello All Is there a way in kibana to display fields from one event to other related events in data tables aggregations and discover views? for example, 2 events with this format: 1. { id: 1, city: 'London', tem… --- ## [Elastic Search Query on Two Documents](https://discuss.elastic.co/t/elastic-search-query-on-two-documents/238479)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 9\ **Last updated:** [June 29, 2020, 9:40am UTC](https://discuss.elastic.co/t/elastic-search-query-on-two-documents/238479 "2020-06-29T09:40:37Z")
Hi, I have created the index PUT ten2 { "mappings": { "documents": { "properties": { "title": { "type": "text", "fields": { "raw": { "type": "keyword" } } }, "publish… --- ## [Will the number of indices become a performance bottleneck?](https://discuss.elastic.co/t/will-the-number-of-indices-become-a-performance-bottleneck/161035)
**Author:** [@wxywj1005](https://discuss.elastic.co/u/wxywj1005)\ **Replies:** 9\ **Last updated:** [December 19, 2018, 8:47am UTC](https://discuss.elastic.co/t/will-the-number-of-indices-become-a-performance-bottleneck/161035 "2018-12-19T08:47:00Z")
my case is that users can only search their own data, and the scores of the results are only related to their own data users won't have much data. I want to create index per user. Will too more indices be a huge perfo… --- ## [EC2 discovery leads to two masters](https://discuss.elastic.co/t/ec2-discovery-leads-to-two-masters/5101)
**Author:** [@Pavel\_Penchev](https://discuss.elastic.co/u/Pavel_Penchev)\ **Replies:** 11\ **Last updated:** [August 19, 2011, 1:04pm UTC](https://discuss.elastic.co/t/ec2-discovery-leads-to-two-masters/5101 "2011-08-19T13:04:40Z")
Hi, I'm having some troubles configuring ES in the cloud. Most of the time everything works, but sometimes the discovery fails and I endup with two masters using the same cluster name. The situation happens on ro… --- ## [New install of elasticsearch (on Lion), status red, unassigned\_shards, nothing in the logs](https://discuss.elastic.co/t/new-install-of-elasticsearch-on-lion-status-red-unassigned-shards-nothing-in-the-logs/5989)
**Author:** [@doug\_livesey](https://discuss.elastic.co/u/doug_livesey)\ **Replies:** 10\ **Last updated:** [November 29, 2011, 10:25am UTC](https://discuss.elastic.co/t/new-install-of-elasticsearch-on-lion-status-red-unassigned-shards-nothing-in-the-logs/5989 "2011-11-29T10:25:15Z")
Hi -- I have a new install of elasticsearch on my dev machine after upgrading to OSX Lion. Now, when I try to start elasticsearch, and check the cluster health, I get this: { "cluster\_name" : "elasticsearch", … --- ## [Question about logstash and kafka](https://discuss.elastic.co/t/question-about-logstash-and-kafka/240553)
**Author:** [@Maurizio\_Tarducci](https://discuss.elastic.co/u/Maurizio_Tarducci)\ **Replies:** 12\ **Last updated:** [July 9, 2020, 6:26pm UTC](https://discuss.elastic.co/t/question-about-logstash-and-kafka/240553 "2020-07-09T18:26:23Z")
Hi i would like to configure logstash with kafka in a way that based on the content of the message that logstash collect send to kafka in a different topic : for example if the message contains the string XXX i want send… [Previous page](https://discuss.elastic.co/top.md?page=227&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=229&per_page=50&period=all)