# Top **URL:** https://discuss.elastic.co/top.md?page=229&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 230 --- ## [Updating xpack certificates to a new CA in an active Elasticsearch cluster without downtime](https://discuss.elastic.co/t/updating-xpack-certificates-to-a-new-ca-in-an-active-elasticsearch-cluster-without-downtime/385871)
**Author:** [@Anup\_Kumar](https://discuss.elastic.co/u/Anup_Kumar)\ **Replies:** 22\ **Last updated:** [May 15, 2026, 12:39pm UTC](https://discuss.elastic.co/t/updating-xpack-certificates-to-a-new-ca-in-an-active-elasticsearch-cluster-without-downtime/385871 "2026-05-15T12:39:34Z")
Hi, We have an active Elasticsearch cluster (large) with TLS/SSL enabled for inter-node communication (xpack.security.transport.ssl). We are planning to replace the existing node certificates with new ones issued by a d… --- ## [ScriptFilter very slow, need to do: startField \<= number \<= endField](https://discuss.elastic.co/t/scriptfilter-very-slow-need-to-do-startfield-number-endfield/6894)
**Author:** [@Hovanes](https://discuss.elastic.co/u/Hovanes)\ **Replies:** 9\ **Last updated:** [February 7, 2013, 10:35am UTC](https://discuss.elastic.co/t/scriptfilter-very-slow-need-to-do-startfield-number-endfield/6894 "2013-02-07T10:35:56Z")
Hi, I'd really appreciate some help here. My problem is very simple I have a documents that have 2 numeric fields that define startField and endField (none of the ranges in the documents overlap btw). I need to p… --- ## [Adding a node from a single node cluster to a different cluster](https://discuss.elastic.co/t/adding-a-node-from-a-single-node-cluster-to-a-different-cluster/282627)
**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\ **Replies:** 11\ **Last updated:** [September 3, 2021, 6:26am UTC](https://discuss.elastic.co/t/adding-a-node-from-a-single-node-cluster-to-a-different-cluster/282627 "2021-09-03T06:26:47Z")
I'm using a multi node cluster with 2 master eligible nodes. I want to add a master eligible voting only node to the cluster. This node was was previously part of a single node cluster. I had setup SSH with different pas… --- ## [Removing one shard of a pair](https://discuss.elastic.co/t/removing-one-shard-of-a-pair/6479)
**Author:** [@Kenneth\_Loafman](https://discuss.elastic.co/u/Kenneth_Loafman)\ **Replies:** 11\ **Last updated:** [January 24, 2012, 7:02pm UTC](https://discuss.elastic.co/t/removing-one-shard-of-a-pair/6479 "2012-01-24T19:02:09Z")
Hi, Originally we had the following on a 3-node cluster: index : number\_of\_shards : 2 number\_of\_replicas : 1 Then we increased the cluster to 4 nodes and modded the setup to: index : number\_of\_… --- ## [Manuall re-balancing shard](https://discuss.elastic.co/t/manuall-re-balancing-shard/12656)
**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\ **Replies:** 12\ **Last updated:** [July 4, 2013, 2:09pm UTC](https://discuss.elastic.co/t/manuall-re-balancing-shard/12656 "2013-07-04T14:09:04Z")
Hi All, I would like to handle rebalancing of shards manually. We are planning to deploy 5 nodes of ES. I would like to create 5 shards per index and each node would serve exactly one shard of each index. How w… --- ## [How to implement task life cycle scenario](https://discuss.elastic.co/t/how-to-implement-task-life-cycle-scenario/248128)
**Author:** [@ram546](https://discuss.elastic.co/u/ram546)\ **Replies:** 9\ **Last updated:** [September 18, 2020, 3:09pm UTC](https://discuss.elastic.co/t/how-to-implement-task-life-cycle-scenario/248128 "2020-09-18T15:09:35Z")
hello, I am new to ELK stack and I want to create one scenario where I can track elapsed time. e.g I have a platform where user can CREATE ticket. and that ticket will be assigned to some department/person. then it will … --- ## [Space in key : remove\_char\_key is not working](https://discuss.elastic.co/t/space-in-key-remove-char-key-is-not-working/225873)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 9\ **Last updated:** [April 1, 2020, 8:08am UTC](https://discuss.elastic.co/t/space-in-key-remove-char-key-is-not-working/225873 "2020-04-01T08:08:27Z")
Hello ! I have a nested part in a log I can't succeed to parse : Here is my config : filter { #replace second "msg" field by "nested" field mutate { gsub =\> \["message", "Message=", " nested="\] } kv { … --- ## [What are the best servers for storing Elasticsearch data?](https://discuss.elastic.co/t/what-are-the-best-servers-for-storing-elasticsearch-data/381754)
**Author:** [@Ella\_conan](https://discuss.elastic.co/u/Ella_conan)\ **Replies:** 17\ **Last updated:** [September 15, 2025, 6:09am UTC](https://discuss.elastic.co/t/what-are-the-best-servers-for-storing-elasticsearch-data/381754 "2025-09-15T06:09:13Z")
Hi I am storing events from devices in Elasticsearch, and the size of these events is very large. Therefore, I decided to purchase high-performance servers to make search as fast as possible, ideally around 1 second. I… --- ## [For those wanting to try Marvel](https://discuss.elastic.co/t/for-those-wanting-to-try-marvel/15459)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 13\ **Last updated:** [January 29, 2014, 5:53pm UTC](https://discuss.elastic.co/t/for-those-wanting-to-try-marvel/15459 "2014-01-29T17:53:25Z")
It is only supported with Elasticsearch 0.90.8 and higher. Yet another push for me to upgrade! -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe f… --- ## [ElasticSearch: Mapping not applied to AWS ELK](https://discuss.elastic.co/t/elasticsearch-mapping-not-applied-to-aws-elk/252326)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 12\ **Last updated:** [October 18, 2020, 5:38am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-not-applied-to-aws-elk/252326 "2020-10-18T05:38:00Z")
While applying below mapping to my local ElasticSearch 7.4.1 private static void addIndexMapping(RestHighLevelClient client, String indexName) throws IOException { PutMappingRequest request = new PutMappingReque… --- ## [Index is larger after Re-index (6.6.1 to 7)](https://discuss.elastic.co/t/index-is-larger-after-re-index-6-6-1-to-7/188755)
**Author:** [@SCL\_ADMIN](https://discuss.elastic.co/u/SCL_ADMIN)\ **Replies:** 12\ **Last updated:** [July 4, 2019, 5:05pm UTC](https://discuss.elastic.co/t/index-is-larger-after-re-index-6-6-1-to-7/188755 "2019-07-04T17:05:30Z")
I'm making my way thought reindexing the indices from 6.6.1 to 7 but i'm noticing that the re-indexed index file is larger than the original. also as part of the re-index the Mapping type has been changed to \_doc. is … --- ## [Indexing a Circle (geoshape) Using NEST](https://discuss.elastic.co/t/indexing-a-circle-geoshape-using-nest/301421)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 10\ **Last updated:** [April 4, 2022, 5:33am UTC](https://discuss.elastic.co/t/indexing-a-circle-geoshape-using-nest/301421 "2022-04-04T05:33:02Z")
Is there anyway of Indexing a Circle i.e. just have the lat/lng and a radius without first having to create a geojson polygon that represents it. i.e. just using its center lat/lng and its radius. Thanks. --- ## [Replacing a cluster node](https://discuss.elastic.co/t/replacing-a-cluster-node/351253)
**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\ **Replies:** 9\ **Last updated:** [January 17, 2024, 1:44pm UTC](https://discuss.elastic.co/t/replacing-a-cluster-node/351253 "2024-01-17T13:44:50Z")
Hi, we have a 3 node cluster, with 3 ME nodes. Today I needed to replace one node with another on a new server. I simply shut down ES on the old server, and started ES on the new server. It did join the cluster according… --- ## [Docker Filebeat 7.9.3 cannot collect metrics from http from outside the container](https://discuss.elastic.co/t/docker-filebeat-7-9-3-cannot-collect-metrics-from-http-from-outside-the-container/253792)
**Author:** [@Tisi](https://discuss.elastic.co/u/Tisi)\ **Replies:** 9\ **Last updated:** [October 30, 2020, 2:37pm UTC](https://discuss.elastic.co/t/docker-filebeat-7-9-3-cannot-collect-metrics-from-http-from-outside-the-container/253792 "2020-10-30T14:37:55Z")
Hello Elastic Staff I am not able to collect metrics from filebeat from the defined http port. I can get the metrics from within the filebeat container with curl -XGET localhost:5066/stats. When I want to collect the… --- ## [Facet terms int overflow](https://discuss.elastic.co/t/facet-terms-int-overflow/8417)
**Author:** [@Andy\_Wick](https://discuss.elastic.co/u/Andy_Wick)\ **Replies:** 9\ **Last updated:** [August 9, 2012, 6:58am UTC](https://discuss.elastic.co/t/facet-terms-int-overflow/8417 "2012-08-09T06:58:15Z")
I have over 4 billion documents I'm trying to facet over and I'm hitting a int overflow with a terms facet. I'm faceting over multiple indexes and shards, so the overflow only happens when the result is combined. … --- ## [Too\_many\_scroll\_contexts\_exception](https://discuss.elastic.co/t/too-many-scroll-contexts-exception/384981)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 9\ **Last updated:** [February 20, 2026, 10:07pm UTC](https://discuss.elastic.co/t/too-many-scroll-contexts-exception/384981 "2026-02-20T22:07:39Z")
elasticsearch -{"statusCode":500,"error":"Internal Server Error","message":"\[search\_phase\_execution\_exception\\n\\tRoot causes:\\n\\t\\ttoo\_many\_scroll\_contexts\_exception: Trying to create too many scroll contexts. Must be le… --- ## [EXCEPTION\_ACCESS\_VIOLATION in Elasticsearch 8.16.1 Running on Java 17](https://discuss.elastic.co/t/exception-access-violation-in-elasticsearch-8-16-1-running-on-java-17/371277)
**Author:** [@SalehEska](https://discuss.elastic.co/u/SalehEska)\ **Replies:** 14\ **Last updated:** [December 2, 2024, 7:51am UTC](https://discuss.elastic.co/t/exception-access-violation-in-elasticsearch-8-16-1-running-on-java-17/371277 "2024-12-02T07:51:16Z")
Error Summary: I'm encountering a fatal error when running Elasticsearch 8.16.1 on Windows Server 2016. The process crashes with an access violation. Below are the details: System Configuration: -OS: Windows Server 201… --- ## [Connection errors when running functional\_test\_runner.js](https://discuss.elastic.co/t/connection-errors-when-running-functional-test-runner-js/153685)
**Author:** [@Sam\_Reynolds](https://discuss.elastic.co/u/Sam_Reynolds)\ **Replies:** 10\ **Last updated:** [October 26, 2018, 2:50pm UTC](https://discuss.elastic.co/t/connection-errors-when-running-functional-test-runner-js/153685 "2018-10-26T14:50:04Z")
Hello, I'm having an issue with running tests for kibana. These are the steps I took to run the tests. cloned the 6.3.4 repo to a directory ran yarn kbn bootstrap in the kibana directory. ran node ./script/functional\_… --- ## [How di I map Timestamp to event Timestamp from filebeat thru logstash](https://discuss.elastic.co/t/how-di-i-map-timestamp-to-event-timestamp-from-filebeat-thru-logstash/325577)
**Author:** [@jkingstone](https://discuss.elastic.co/u/jkingstone)\ **Replies:** 9\ **Last updated:** [February 21, 2023, 6:23am UTC](https://discuss.elastic.co/t/how-di-i-map-timestamp-to-event-timestamp-from-filebeat-thru-logstash/325577 "2023-02-21T06:23:25Z")
Hi, I want to change the @timestamp to the timestamp out of event.original or message. I don't know what I do wrong. right now the @timestamp is the time where the filebeat logfile ist importet thru logstash into elast… --- ## [New logstash installation is not working](https://discuss.elastic.co/t/new-logstash-installation-is-not-working/379824)
**Author:** [@Luis\_Moy](https://discuss.elastic.co/u/Luis_Moy)\ **Replies:** 11\ **Last updated:** [July 6, 2025, 7:29pm UTC](https://discuss.elastic.co/t/new-logstash-installation-is-not-working/379824 "2025-07-06T19:29:50Z")
Hello I want to install logstash in red hat linux 9. according with this documentation, because i need this specific version. I followed the instructions. downloaded from the github the version, and using jdk 11 from… --- ## [Use roles instead of ApiKey for Search Applications](https://discuss.elastic.co/t/use-roles-instead-of-apikey-for-search-applications/370284)
**Author:** [@Artem\_Ruzak](https://discuss.elastic.co/u/Artem_Ruzak)\ **Replies:** 13\ **Last updated:** [November 20, 2024, 10:11am UTC](https://discuss.elastic.co/t/use-roles-instead-of-apikey-for-search-applications/370284 "2024-11-20T10:11:58Z")
Hello Elastic community, I'm looking to implement a scenario where a client (the user's browser) makes API requests directly to the Elasticsearch service, allowing the client to access the Elasticsearch cluster directly… --- ## [Respect bootstrapNewHistoryUUID option when restoring from snapshot](https://discuss.elastic.co/t/respect-bootstrapnewhistoryuuid-option-when-restoring-from-snapshot/259498)
**Author:** [@asce0705](https://discuss.elastic.co/u/asce0705)\ **Replies:** 9\ **Last updated:** [January 4, 2021, 12:23pm UTC](https://discuss.elastic.co/t/respect-bootstrapnewhistoryuuid-option-when-restoring-from-snapshot/259498 "2021-01-04T12:23:09Z")
Shall we enable bootstrapNewHistoryUUID option in SnapshotRecoverySource, which disable bootstraping new history uuid of the primary shard index when set false. In some environment, the primary shard may be restored fro… --- ## [Elasticsearch 7.7 crashing for Term Query if term text 200 - 300 char](https://discuss.elastic.co/t/elasticsearch-7-7-crashing-for-term-query-if-term-text-200-300-char/241395)
**Author:** [@pappukhode](https://discuss.elastic.co/u/pappukhode)\ **Replies:** 9\ **Last updated:** [July 16, 2020, 9:29am UTC](https://discuss.elastic.co/t/elasticsearch-7-7-crashing-for-term-query-if-term-text-200-300-char/241395 "2020-07-16T09:29:26Z")
Hi, I have upgraded Elasticsearch 5.5 to 7.7 recently. I have only 1 index of 30 fields and 6K data. Dataset is very simple in nature. \[provided 1g memory in jvm options\] In the dataset i have a field description whi… --- ## [How can we eliminate the root structure for nested elements in the query result in Elasticsearch?](https://discuss.elastic.co/t/how-can-we-eliminate-the-root-structure-for-nested-elements-in-the-query-result-in-elasticsearch/163308)
**Author:** [@vinodanumarla](https://discuss.elastic.co/u/vinodanumarla)\ **Replies:** 9\ **Last updated:** [January 8, 2019, 9:01am UTC](https://discuss.elastic.co/t/how-can-we-eliminate-the-root-structure-for-nested-elements-in-the-query-result-in-elasticsearch/163308 "2019-01-08T09:01:44Z")
How to write a query to eliminate nested elements "results" and "lines" from the below document. { "\_id": "0048160a463a73faaa6c90f5af027772", "\_rev": "1-ff6255309f1b873a4e482310843a8a15", "timestamp": 1496275536… --- ## [Elasticsearch-river-csv Error: "NoClassSettingsException\[Failed to load class with value \[csv\]\]; nested: ClassNotFoundException\[csv\];"](https://discuss.elastic.co/t/elasticsearch-river-csv-error-noclasssettingsexception-failed-to-load-class-with-value-csv-nested-classnotfoundexception-csv/11286)
**Author:** [@mohammad\_rafi\_g](https://discuss.elastic.co/u/mohammad_rafi_g)\ **Replies:** 9\ **Last updated:** [March 28, 2013, 2:00pm UTC](https://discuss.elastic.co/t/elasticsearch-river-csv-error-noclasssettingsexception-failed-to-load-class-with-value-csv-nested-classnotfoundexception-csv/11286 "2013-03-28T14:00:41Z")
Hi to all. My name is Mohammad Rafi. And i am new learner to this ElasticSearch. I am using windows 7 64-bit Elasticsearch version 0.19.8 and i have added HEAD and RIVER-CSV plugins to my elasticsearch. … --- ## [Couchdb module not generating metrics](https://discuss.elastic.co/t/couchdb-module-not-generating-metrics/321048)
**Author:** [@jonnymccullagh](https://discuss.elastic.co/u/jonnymccullagh)\ **Replies:** 10\ **Last updated:** [December 22, 2022, 10:48am UTC](https://discuss.elastic.co/t/couchdb-module-not-generating-metrics/321048 "2022-12-22T10:48:31Z")
Hi, I'm having trouble getting metrics from CouchDB into ElasticCloud. System metrics are going ok. I have /etc/metricbeat/modules.d/couchdb.yml as follows: - module: couchdb metricsets: \["server"\] period: 10s hos… --- ## [Ensuring Document Ordering in Bulk Ingestion](https://discuss.elastic.co/t/ensuring-document-ordering-in-bulk-ingestion/350972)
**Author:** [@Ivelin\_Yanev](https://discuss.elastic.co/u/Ivelin_Yanev)\ **Replies:** 11\ **Last updated:** [January 15, 2024, 2:41pm UTC](https://discuss.elastic.co/t/ensuring-document-ordering-in-bulk-ingestion/350972 "2024-01-15T14:41:04Z")
Hi everyone, I'm currently working on implementing bulk operations for documents. In my scenario, I receive PubSub messages and generate corresponding Elasticsearch documents using the data from these PubSub messages. I… --- ## [BoundingBox Search takes time](https://discuss.elastic.co/t/boundingbox-search-takes-time/6556)
**Author:** [@prashant5375](https://discuss.elastic.co/u/prashant5375)\ **Replies:** 14\ **Last updated:** [March 5, 2012, 3:56am UTC](https://discuss.elastic.co/t/boundingbox-search-takes-time/6556 "2012-03-05T03:56:52Z")
Hi there , Actually i have just stated using Elastic Search , and i have a situation where in i have to search in the Boundary of lat/long . When i have created the boundary and performed the search using java code g… --- ## [Falied to start Elasticsearch to my group volumes](https://discuss.elastic.co/t/falied-to-start-elasticsearch-to-my-group-volumes/325501)
**Author:** [@MonkeyD.J](https://discuss.elastic.co/u/MonkeyD.J)\ **Replies:** 9\ **Last updated:** [March 7, 2023, 12:17pm UTC](https://discuss.elastic.co/t/falied-to-start-elasticsearch-to-my-group-volumes/325501 "2023-03-07T12:17:15Z")
Hello, Mrs,Mr, I try to start Elasticsearch on my volum group. So I am on a debian 11.3 and I install java jre1.8.0\_121. I Install the version elastick 7.17.6 amd64.deb on my folder with this command dpkg -x /applis… --- ## [Coordinating-only nodes are a \_significant\_ bottleneck for our cluster](https://discuss.elastic.co/t/coordinating-only-nodes-are-a-significant-bottleneck-for-our-cluster/319813)
**Author:** [@drs](https://discuss.elastic.co/u/drs)\ **Replies:** 9\ **Last updated:** [December 6, 2022, 10:50am UTC](https://discuss.elastic.co/t/coordinating-only-nodes-are-a-significant-bottleneck-for-our-cluster/319813 "2022-12-06T10:50:34Z")
We have a very large Elasticsearch cluster with the following node layout: masters: 5 ingest-only: 4 data-only: 98 coordinating-only: 3 Coordinating-only nodes have 32 cores and 64 GB of memory, data nodes typically… --- ## [Does ES require telnet be installed?](https://discuss.elastic.co/t/does-es-require-telnet-be-installed/191029)
**Author:** [@Phillip\_Stivason](https://discuss.elastic.co/u/Phillip_Stivason)\ **Replies:** 9\ **Last updated:** [July 17, 2019, 6:43pm UTC](https://discuss.elastic.co/t/does-es-require-telnet-be-installed/191029 "2019-07-17T18:43:26Z")
I see telnet mentioned in many posts. Telnet is not installed by default here... do i need it? Can ssh be used instead? --- ## [What is logstash instance?](https://discuss.elastic.co/t/what-is-logstash-instance/345357)
**Author:** [@Nghia\_D\_ng](https://discuss.elastic.co/u/Nghia_D_ng)\ **Replies:** 10\ **Last updated:** [November 2, 2023, 2:50pm UTC](https://discuss.elastic.co/t/what-is-logstash-instance/345357 "2023-11-02T14:50:49Z")
I want to know what a logstash instance is? Is it a self-generated .conf file? Which command should I use to check which instances are running? --- ## [Loading high transactional data to elasticsearch](https://discuss.elastic.co/t/loading-high-transactional-data-to-elasticsearch/371726)
**Author:** [@amirhosseinbi](https://discuss.elastic.co/u/amirhosseinbi)\ **Replies:** 22\ **Last updated:** [December 12, 2024, 10:15pm UTC](https://discuss.elastic.co/t/loading-high-transactional-data-to-elasticsearch/371726 "2024-12-12T22:15:11Z")
Hi all, I'm ingesting network traffic using tshark and need to load it to elasticsearch for further analysis and troubleshooting. The traffic is transformed to json format and around 1TB daily, my bottleneck is now logs… --- ## [Disk Capacity](https://discuss.elastic.co/t/disk-capacity/229224)
**Author:** [@DawitCh](https://discuss.elastic.co/u/DawitCh)\ **Replies:** 9\ **Last updated:** [April 23, 2020, 4:48am UTC](https://discuss.elastic.co/t/disk-capacity/229224 "2020-04-23T04:48:03Z")
I have 3 nodes of Elasticsearch. The master node has 20 GB, the others have 12 GB. I check the path to store data of node 3, it shows full capacity. Can I check why node 3 is full? Is there any option for me to solve the… --- ## [Using Filebeat or Logstash](https://discuss.elastic.co/t/using-filebeat-or-logstash/254332)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 10\ **Last updated:** [November 5, 2020, 4:34pm UTC](https://discuss.elastic.co/t/using-filebeat-or-logstash/254332 "2020-11-05T16:34:20Z")
What is the benefit of using Filebeat alone? What is the advantage of using Logstash alone? What is the advantage of using Filebeat and Logstash? --- ## [Storage gains in removing redundant message fields](https://discuss.elastic.co/t/storage-gains-in-removing-redundant-message-fields/159812)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 10\ **Last updated:** [December 19, 2018, 8:01am UTC](https://discuss.elastic.co/t/storage-gains-in-removing-redundant-message-fields/159812 "2018-12-19T08:01:17Z")
Consider the following document (no logstash is involved here): { "\_index": "day-wise-2018.11.25", "\_type": "type1", "\_id": "11111111111111111111111111111111111111111111111111111111", "\_score": 1, "\_… --- ## [Error trying to use FSRiver](https://discuss.elastic.co/t/error-trying-to-use-fsriver/18421)
**Author:** [@Alain\_Desilets](https://discuss.elastic.co/u/Alain_Desilets)\ **Replies:** 10\ **Last updated:** [July 24, 2014, 2:45pm UTC](https://discuss.elastic.co/t/error-trying-to-use-fsriver/18421 "2014-07-24T14:45:45Z")
I am trying to use the FSRiver with elastic-1.2.1. I installed the plugin as follows: bin\\plugin -install fr.pilato.elasticsearch.river/fsriver/1.0.0 I then tried to restart ES by doing: bin\\service.bat man… --- ## [A query is not working, and I think it should](https://discuss.elastic.co/t/a-query-is-not-working-and-i-think-it-should/2852)
**Author:** [@xavier\_lacot](https://discuss.elastic.co/u/xavier_lacot)\ **Replies:** 10\ **Last updated:** [April 1, 2010, 10:05pm UTC](https://discuss.elastic.co/t/a-query-is-not-working-and-i-think-it-should/2852 "2010-04-01T22:05:30Z")
Hello, I discovered elasticsearch a few weeks ago and have found some time to give it a try. I tried yesterday to use it to index some data that I have in a database, and query this data using some constraints. S… --- ## [ElasticSearch crashes OS?](https://discuss.elastic.co/t/elasticsearch-crashes-os/4253)
**Author:** [@Karussell1](https://discuss.elastic.co/u/Karussell1)\ **Replies:** 12\ **Last updated:** [May 1, 2011, 7:06pm UTC](https://discuss.elastic.co/t/elasticsearch-crashes-os/4253 "2011-05-01T19:06:06Z")
Hi there, our server crashed every two weeks or so and I thought it was a hardware failure or something similar. Now it gets even worse: the servers crashes nearly every two days - I think this gets worse after I'm… --- ## [Scroll API is dropping records](https://discuss.elastic.co/t/scroll-api-is-dropping-records/361237)
**Author:** [@jerry\_jacob](https://discuss.elastic.co/u/jerry_jacob)\ **Replies:** 9\ **Last updated:** [July 29, 2024, 4:44am UTC](https://discuss.elastic.co/t/scroll-api-is-dropping-records/361237 "2024-07-29T04:44:21Z")
ES version: 7.5.1 { "query": { "range": { "columnName": { "gt": "2024-05-28T16:00:25Z", "lte": "2024-05-28T19:00:24Z" } } } } I have a program that runs above query to pull recor… --- ## [No Detections after the first time zero detection was detected](https://discuss.elastic.co/t/no-detections-after-the-first-time-zero-detection-was-detected/302047)
**Author:** [@Shahzaib\_Abid](https://discuss.elastic.co/u/Shahzaib_Abid)\ **Replies:** 9\ **Last updated:** [April 12, 2022, 12:16pm UTC](https://discuss.elastic.co/t/no-detections-after-the-first-time-zero-detection-was-detected/302047 "2022-04-12T12:16:07Z")
We have created an anomaly detection job using elastic machine learning. For this particular case, our device doing detections failed for electrical issues and stopped doing detection. Previously for cases like these… --- ## [\_dateparsefailure](https://discuss.elastic.co/t/dateparsefailure/294997)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 9\ **Last updated:** [January 22, 2022, 10:22am UTC](https://discuss.elastic.co/t/dateparsefailure/294997 "2022-01-22T10:22:20Z")
So I don't know why I got the so kind error : \_dateparsefailure below You can find one of data input |date|time|millisecond| |18.11.2021|09:29:15|257| code: ruby { code =\> " event\_millisecond = ('000' + eve… --- ## [EC2 VPC Discovery Problems](https://discuss.elastic.co/t/ec2-vpc-discovery-problems/10581)
**Author:** [@NickHaggmark](https://discuss.elastic.co/u/NickHaggmark)\ **Replies:** 11\ **Last updated:** [February 1, 2013, 4:51am UTC](https://discuss.elastic.co/t/ec2-vpc-discovery-problems/10581 "2013-02-01T04:51:11Z")
Hi Guys, I've recently spun up a new ES cluster (2 nodes) to replace my old stack. The new cluster is using the newest ES version (0.20.4) and newest AWS plugin (1.10.0) and is backing to S3. I cannot get them t… --- ## [Json parsin](https://discuss.elastic.co/t/json-parsin/326849)
**Author:** [@chrispos](https://discuss.elastic.co/u/chrispos)\ **Replies:** 10\ **Last updated:** [March 20, 2023, 4:34pm UTC](https://discuss.elastic.co/t/json-parsin/326849 "2023-03-20T16:34:54Z")
Hello, I have a question. We are trying to set up a logging system for a java application running on Jboss. The goal is to be able to filter for certain errors. We've done the following Server.log converted to server.… --- ## [While spinning up elastic search on ec2 machines with warm nodes, kibana not yet ready message](https://discuss.elastic.co/t/while-spinning-up-elastic-search-on-ec2-machines-with-warm-nodes-kibana-not-yet-ready-message/246147)
**Author:** [@souji](https://discuss.elastic.co/u/souji)\ **Replies:** 10\ **Last updated:** [August 25, 2020, 3:28pm UTC](https://discuss.elastic.co/t/while-spinning-up-elastic-search-on-ec2-machines-with-warm-nodes-kibana-not-yet-ready-message/246147 "2020-08-25T15:28:22Z")
Hi, I am new self hosted elastic search, for poc I started spinning the self hosted es with data nodes, client nodes set up worked fine. I added the warm nodes I am seeing message kibana not yet ready. Elasticsearch.ym… --- ## [I didn't understand the Elastic Snapshot properly Please help](https://discuss.elastic.co/t/i-didnt-understand-the-elastic-snapshot-properly-please-help/237260)
**Author:** [@111349](https://discuss.elastic.co/u/111349)\ **Replies:** 10\ **Last updated:** [June 17, 2020, 6:14am UTC](https://discuss.elastic.co/t/i-didnt-understand-the-elastic-snapshot-properly-please-help/237260 "2020-06-17T06:14:14Z")
My configuration is to run each elastic on 3 different servers. Elastic that works as a master node (also a data node) on the 1st server. Elastic No. 2 and No. 3 operate as data nodes. I know that I have to specify th… --- ## [How to correctly use lat\_long detector on geo.location from azure.signin dataset](https://discuss.elastic.co/t/how-to-correctly-use-lat-long-detector-on-geo-location-from-azure-signin-dataset/233388)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 10\ **Last updated:** [May 22, 2020, 12:35pm UTC](https://discuss.elastic.co/t/how-to-correctly-use-lat-long-detector-on-geo-location-from-azure-signin-dataset/233388 "2020-05-22T12:35:07Z")
Hello, When I try to create a machine learning job with lat\_long detector, for some reason, the job is not starting to process records. Query: {"bool":{"must":\[{"match\_all":{}}\],"filter":\[{"match\_phrase":{"event.datas… --- ## [\_source disabled](https://discuss.elastic.co/t/-source-disabled/11874)
**Author:** [@Fadel\_Chafai](https://discuss.elastic.co/u/Fadel_Chafai)\ **Replies:** 10\ **Last updated:** [May 9, 2013, 5:36pm UTC](https://discuss.elastic.co/t/-source-disabled/11874 "2013-05-09T17:36:29Z")
hi how i can get result ( fields ) if \_source field is disabled ?? thank you -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group … --- ## [How i can create index on xml tags](https://discuss.elastic.co/t/how-i-can-create-index-on-xml-tags/170175)
**Author:** [@mandar.raj](https://discuss.elastic.co/u/mandar.raj)\ **Replies:** 12\ **Last updated:** [March 6, 2019, 2:09pm UTC](https://discuss.elastic.co/t/how-i-can-create-index-on-xml-tags/170175 "2019-03-06T14:09:57Z")
Hello, I am new to logstash, i have one requirement like below. i want to create index on xml tag. this xml is present in database table. I am able to index on column which having this xml. but the requirement is to in… --- ## [Logstash config advise](https://discuss.elastic.co/t/logstash-config-advise/368415)
**Author:** [@Athen](https://discuss.elastic.co/u/Athen)\ **Replies:** 22\ **Last updated:** [October 9, 2024, 5:48pm UTC](https://discuss.elastic.co/t/logstash-config-advise/368415 "2024-10-09T17:48:10Z")
Hi Team, I'm new to ELK and have deployed the ELK stack (Elasticsearch, Logstash, and Kibana) in Kubernetes and exposed Logstash via a Traefik ingress route to allow external servers to send logs. However, I am encounte… [Previous page](https://discuss.elastic.co/top.md?page=228&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=230&per_page=50&period=all)