# Top

**URL:** https://discuss.elastic.co/top.md?page=233&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 234

---

## [Kibana groups transactions under generic GET and POST paths](https://discuss.elastic.co/t/kibana-groups-transactions-under-generic-get-and-post-paths/322307)

<div class="topic-metadata">

**Author:** [@gmacini](https://discuss.elastic.co/u/gmacini)\
**Replies:** 9\
**Last updated:** [January 23, 2023, 2:45pm UTC](https://discuss.elastic.co/t/kibana-groups-transactions-under-generic-get-and-post-paths/322307 "2023-01-23T14:45:56Z")

</div>

Hi, We are trying your technology to monitoring a cloud service deployed on Kubernetes and developed using Vert.x. We enabled the experimental instrumentation (following the instructions of this link) because the defau…

---

## [Problem with cluster after Windows Server patch](https://discuss.elastic.co/t/problem-with-cluster-after-windows-server-patch/376183)

<div class="topic-metadata">

**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\
**Replies:** 16\
**Last updated:** [April 30, 2025, 12:11pm UTC](https://discuss.elastic.co/t/problem-with-cluster-after-windows-server-patch/376183 "2025-04-30T12:11:18Z")

</div>

Hi! A week a go we added a Microsoft patch to our three test servers and after that we have major issues with Elastic. We often get timeout when doing a full reindex. This is the startup log: \[2025-03-20 13:17:19\] \[de…

---

## [Getting wrong\_method\_type\_exception](https://discuss.elastic.co/t/getting-wrong-method-type-exception/359905)

<div class="topic-metadata">

**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\
**Replies:** 15\
**Last updated:** [May 22, 2024, 9:54am UTC](https://discuss.elastic.co/t/getting-wrong-method-type-exception/359905 "2024-05-22T09:54:11Z")

</div>

Query - {"timeout":"900000ms","query":{"constant\_score":{"filter":{"bool":{"must":{"bool":{"must":\[{"bool":{"should":\[{"terms":{"addI.sem.data.sentiment\_polarity":\["-1","-2","-1.0","-2.0","negative"\]}},{"terms":{"addI.s…

---

## [Options List Control Ignores Filters and Queries](https://discuss.elastic.co/t/options-list-control-ignores-filters-and-queries/317334)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 10\
**Last updated:** [March 19, 2023, 11:28pm UTC](https://discuss.elastic.co/t/options-list-control-ignores-filters-and-queries/317334 "2023-03-19T23:28:23Z")

</div>

Please see original thread Options List Control Ignores Filters and Queries - Elastic Stack / Kibana - Discuss the Elastic Stack. Why does no notification go out when a topic is about to close? @Teresa\_Alvarez , One …

---

## [Need some help with a range query](https://discuss.elastic.co/t/need-some-help-with-a-range-query/5854)

<div class="topic-metadata">

**Author:** [@electic](https://discuss.elastic.co/u/electic)\
**Replies:** 11\
**Last updated:** [November 13, 2011, 11:55pm UTC](https://discuss.elastic.co/t/need-some-help-with-a-range-query/5854 "2011-11-13T23:55:23Z")

</div>

I have a document like this: curl -XPOST 192.168.8.231:9200/documents -d '{ "settings" : { "number\_of\_shards" : 20, "number\_of\_replicas" : 0 }, "mappings" : { "document" : { …

---

## [Scripted field help](https://discuss.elastic.co/t/scripted-field-help/130152)

<div class="topic-metadata">

**Author:** [@jskuyper](https://discuss.elastic.co/u/jskuyper)\
**Replies:** 9\
**Last updated:** [May 3, 2018, 8:09pm UTC](https://discuss.elastic.co/t/scripted-field-help/130152 "2018-05-03T20:09:00Z")

</div>

I am attempting to create a new scripted field assignee.role where there may be thousands of possibilities, but only want to make it defined for a subset of the possibilities, how do I lump everyone else into the undefi…

---

## [Setting up a watcher is seems harder than it should be](https://discuss.elastic.co/t/setting-up-a-watcher-is-seems-harder-than-it-should-be/258046)

<div class="topic-metadata">

**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\
**Replies:** 10\
**Last updated:** [December 9, 2020, 4:29pm UTC](https://discuss.elastic.co/t/setting-up-a-watcher-is-seems-harder-than-it-should-be/258046 "2020-12-09T16:29:47Z")

</div>

1 I used the following command to enable Watcher: PUT \_cluster/settings { "persistent": { "xpack.monitoring.collection.enabled": true } } When I goto the Watcher to create a watcher, ther…

---

## [Saving data to ES 5.4 blocked when ES is creating mapping and updating mapping](https://discuss.elastic.co/t/saving-data-to-es-5-4-blocked-when-es-is-creating-mapping-and-updating-mapping/129612)

<div class="topic-metadata">

**Author:** [@elasticyu](https://discuss.elastic.co/u/elasticyu)\
**Replies:** 10\
**Last updated:** [April 26, 2018, 9:27am UTC](https://discuss.elastic.co/t/saving-data-to-es-5-4-blocked-when-es-is-creating-mapping-and-updating-mapping/129612 "2018-04-26T09:27:45Z")

</div>

My workflow is: Reading data from kafka Saving data into Elastic Search 5.4 I checked the time spent at every method in my application, the following picture shows normal workflow: most time is spent at reading data f…

---

## [Output isolator pattern, not working as expected when one pipeline is down](https://discuss.elastic.co/t/output-isolator-pattern-not-working-as-expected-when-one-pipeline-is-down/319329)

<div class="topic-metadata">

**Author:** [@rravitech](https://discuss.elastic.co/u/rravitech)\
**Replies:** 9\
**Last updated:** [November 22, 2022, 5:28pm UTC](https://discuss.elastic.co/t/output-isolator-pattern-not-working-as-expected-when-one-pipeline-is-down/319329 "2022-11-22T17:28:16Z")

</div>

All the outputs stop when one goes down here, i am trying to implement the output isolator pattern. In the below configuration when hosts =\> \["ext-se:9200"\] goes down the other host "es-host1" { hosts =\> \["eric-data-se…

---

## [Shard recovery in 8.10.2 seems to happen more often](https://discuss.elastic.co/t/shard-recovery-in-8-10-2-seems-to-happen-more-often/357024)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 14\
**Last updated:** [January 16, 2025, 7:59pm UTC](https://discuss.elastic.co/t/shard-recovery-in-8-10-2-seems-to-happen-more-often/357024 "2025-01-16T19:59:11Z")

</div>

I have noticed that in version 8.10.2, shard allocation seems to prioritize on storage space first then the shard delta. Which is fine. I don't really have a preference either way. But as the result, shard moving seem…

---

## [Logstash not giving the expected output](https://discuss.elastic.co/t/logstash-not-giving-the-expected-output/374034)

<div class="topic-metadata">

**Author:** [@nkknkk](https://discuss.elastic.co/u/nkknkk)\
**Replies:** 37\
**Last updated:** [February 12, 2025, 6:16pm UTC](https://discuss.elastic.co/t/logstash-not-giving-the-expected-output/374034 "2025-02-12T18:16:14Z")

</div>

I am trying to parse my sample catalina.out file. here is my tomcat.conf file i am giving to the logstash ./logstash -f conf.d/tomcat.conf -r here is my tomcat.conf input { file { path =\> "/elkstack/logs/input…

---

## [Performance Issue with KNN + Filter on Large Index (v8.12)](https://discuss.elastic.co/t/performance-issue-with-knn-filter-on-large-index-v8-12/377279)

<div class="topic-metadata">

**Author:** [@Saleh\_AbuAli](https://discuss.elastic.co/u/Saleh_AbuAli)\
**Replies:** 12\
**Last updated:** [April 28, 2025, 12:48pm UTC](https://discuss.elastic.co/t/performance-issue-with-knn-filter-on-large-index-v8-12/377279 "2025-04-28T12:48:33Z")

</div>

Hi, I’m currently using KNN search in Elasticsearch (version 8.12) with the following setup: Query vector dimension: 384 Index size: 200M+ documents k = 100, num\_candidates = 200 Quantized vectors using 'int8\_hnsw' in…

---

## [Production deployment with dedicated masters](https://discuss.elastic.co/t/production-deployment-with-dedicated-masters/346965)

<div class="topic-metadata">

**Author:** [@DaddyYusk](https://discuss.elastic.co/u/DaddyYusk)\
**Replies:** 9\
**Last updated:** [November 17, 2023, 3:20pm UTC](https://discuss.elastic.co/t/production-deployment-with-dedicated-masters/346965 "2023-11-17T15:20:00Z")

</div>

Hi, I plan to deploy Elasticsearch for a production environment following this architecture : 3 x dedicated Master node (node.roles: \[ master \]) 1 x Hot Data node (node.roles: \[ data\_hot \]) 1 x Warm Data node (node.ro…

---

## [Strange behaviour of Elasticsearch by sorting](https://discuss.elastic.co/t/strange-behaviour-of-elasticsearch-by-sorting/14737)

<div class="topic-metadata">

**Author:** [@J\_Schulz](https://discuss.elastic.co/u/J_Schulz)\
**Replies:** 10\
**Last updated:** [December 8, 2013, 7:46am UTC](https://discuss.elastic.co/t/strange-behaviour-of-elasticsearch-by-sorting/14737 "2013-12-08T07:46:36Z")

</div>

Hello together, I have a really strange behaviour and need your wisdom. At first some information about my setup: 2 Nodes 60 Shards 15 Indices 300 millions documents 125gb size 1 replica After a …

---

## [Is 0.90.3 release planned anytime soon?](https://discuss.elastic.co/t/is-0-90-3-release-planned-anytime-soon/13016)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 13\
**Last updated:** [August 6, 2013, 4:01pm UTC](https://discuss.elastic.co/t/is-0-90-3-release-planned-anytime-soon/13016 "2013-08-06T16:01:45Z")

</div>

Hi, is new release planned soon? Regards, Lukas -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails fr…

---

## [Data specification help](https://discuss.elastic.co/t/data-specification-help/305066)

<div class="topic-metadata">

**Author:** [@Vishwajeet\_Kumar](https://discuss.elastic.co/u/Vishwajeet_Kumar)\
**Replies:** 9\
**Last updated:** [May 25, 2022, 5:43pm UTC](https://discuss.elastic.co/t/data-specification-help/305066 "2022-05-25T17:43:14Z")

</div>

i'm trying to fetch some data from my index based on the event name matching exactly certain keyword but the catch is that i need the data of the current week and the previous week and also for few more previous weeks li…

---

## [Create multiple Index for different steams of data](https://discuss.elastic.co/t/create-multiple-index-for-different-steams-of-data/261203)

<div class="topic-metadata">

**Author:** [@leinad](https://discuss.elastic.co/u/leinad)\
**Replies:** 9\
**Last updated:** [February 3, 2021, 3:45am UTC](https://discuss.elastic.co/t/create-multiple-index-for-different-steams-of-data/261203 "2021-02-03T03:45:05Z")

</div>

Hi , I am very new on setting up log stash, but have been using Kibana on user level of createing dashboard and analysis using basic templates My input logs are all JSON types, this is the logstash config which works p…

---

## [CPU and memory usage suddenly spiral out of control](https://discuss.elastic.co/t/cpu-and-memory-usage-suddenly-spiral-out-of-control/4621)

<div class="topic-metadata">

**Author:** [@Eric\_Mill](https://discuss.elastic.co/u/Eric_Mill)\
**Replies:** 9\
**Last updated:** [June 18, 2011, 5:09am UTC](https://discuss.elastic.co/t/cpu-and-memory-usage-suddenly-spiral-out-of-control/4621 "2011-06-18T05:09:25Z")

</div>

Any ideas of why a query might work fine, and then suddenly spike out of control? I have the logs, running at DEBUG level, from an example incident. The same query gets executed, and on the 10th or so run, the memory s…

---

## [Detail-questions on ES features](https://discuss.elastic.co/t/detail-questions-on-es-features/12314)

<div class="topic-metadata">

**Author:** [@Erik\_Fassler\_2](https://discuss.elastic.co/u/Erik_Fassler_2)\
**Replies:** 11\
**Last updated:** [June 8, 2013, 6:07pm UTC](https://discuss.elastic.co/t/detail-questions-on-es-features/12314 "2013-06-08T18:07:13Z")

</div>

Hello all, I've been using Solr for quite some time now in the project I'm working on. When I started this project, ES was still a bit at the beginning so I chose the - at the time - more advanced Solr. Now I'm…

---

## [Histogramme grouped by modalities and sum of modalities kibana](https://discuss.elastic.co/t/histogramme-grouped-by-modalities-and-sum-of-modalities-kibana/218609)

<div class="topic-metadata">

**Author:** [@Alexxxman1](https://discuss.elastic.co/u/Alexxxman1)\
**Replies:** 10\
**Last updated:** [February 26, 2020, 3:35pm UTC](https://discuss.elastic.co/t/histogramme-grouped-by-modalities-and-sum-of-modalities-kibana/218609 "2020-02-26T15:35:45Z")

</div>

Hello, I want to reproduce an analysis like that. I want to reproduce an analysis with the vega or vega-lite kibana plugin. I would like to associate the total of the sites each day. Here is my vega code. If possible…

---

## [Rollup - Store statistics (just a number)](https://discuss.elastic.co/t/rollup-store-statistics-just-a-number/232214)

<div class="topic-metadata">

**Author:** [@vdelcampo](https://discuss.elastic.co/u/vdelcampo)\
**Replies:** 9\
**Last updated:** [May 14, 2020, 12:48pm UTC](https://discuss.elastic.co/t/rollup-store-statistics-just-a-number/232214 "2020-05-14T12:48:56Z")

</div>

Hi. I need to store historical data from my indexes, exactly the number of request per minute that my webservices has along time. Its possible to store only this information? If i create a rollup job using only the file…

---

## [Enterprise Search - GZip compression for App Engine API response](https://discuss.elastic.co/t/enterprise-search-gzip-compression-for-app-engine-api-response/350515)

<div class="topic-metadata">

**Author:** [@Pradeep\_Renukaiah](https://discuss.elastic.co/u/Pradeep_Renukaiah)\
**Replies:** 12\
**Last updated:** [January 10, 2024, 10:20pm UTC](https://discuss.elastic.co/t/enterprise-search-gzip-compression-for-app-engine-api-response/350515 "2024-01-10T22:20:55Z")

</div>

We are using Enterprise Search to build our e-commerce use cases. One of our challenges is the API response time and payload size. I am wondering if there is a way we can enable GZip compression for the Enterprise Search…

---

## [Add Transaction.name in Spans / Merge Doucment of span and transaction](https://discuss.elastic.co/t/add-transaction-name-in-spans-merge-doucment-of-span-and-transaction/376172)

<div class="topic-metadata">

**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\
**Replies:** 20\
**Last updated:** [April 16, 2025, 8:50pm UTC](https://discuss.elastic.co/t/add-transaction-name-in-spans-merge-doucment-of-span-and-transaction/376172 "2025-04-16T20:50:08Z")

</div>

Hello Elastic Observability \> APM engineers, I have multiple agents ingerated with multiple type of applications using multiple methods like nodes js agents, python, java and some of the application are ingerated using…

---

## [Too many smaller indices. shards is creating issue](https://discuss.elastic.co/t/too-many-smaller-indices-shards-is-creating-issue/369271)

<div class="topic-metadata">

**Author:** [@Jay\_Timbadia](https://discuss.elastic.co/u/Jay_Timbadia)\
**Replies:** 20\
**Last updated:** [October 23, 2024, 12:35pm UTC](https://discuss.elastic.co/t/too-many-smaller-indices-shards-is-creating-issue/369271 "2024-10-23T12:35:17Z")

</div>

Hello all, I have a requirement where we have 10s of thousands of smaller indices (~10-20mb). Now the issue is each index is creating a 2 shard(1 primary & 1 replica). So for 10s of thousands of indexes, it will be a …

---

## [ES Index Rate drops after every few hours](https://discuss.elastic.co/t/es-index-rate-drops-after-every-few-hours/336540)

<div class="topic-metadata">

**Author:** [@mukularora89](https://discuss.elastic.co/u/mukularora89)\
**Replies:** 10\
**Last updated:** [June 21, 2023, 2:48pm UTC](https://discuss.elastic.co/t/es-index-rate-drops-after-every-few-hours/336540 "2023-06-21T14:48:51Z")

</div>

Hi, We are observing a drop in ES index rate after every few hours. We have indexes created on daily basis and data is pushed into ES from logstash. In a day we expect 8 billion documents pushed to given day index. At t…

---

## [Understanding scaling & clustering decision making](https://discuss.elastic.co/t/understanding-scaling-clustering-decision-making/10896)

<div class="topic-metadata">

**Author:** [@Daniel\_Myung](https://discuss.elastic.co/u/Daniel_Myung)\
**Replies:** 10\
**Last updated:** [March 8, 2013, 1:47pm UTC](https://discuss.elastic.co/t/understanding-scaling-clustering-decision-making/10896 "2013-03-08T13:47:44Z")

</div>

Hello, We are in the midst of transitioning much of our data into ES, but have been running into performance issues loading data into our index. As recommended in other threads on this group, I've created a separa…

---

## [I'm just confused in using grok](https://discuss.elastic.co/t/im-just-confused-in-using-grok/133153)

<div class="topic-metadata">

**Author:** [@Ben\_Chaabene\_Wissem](https://discuss.elastic.co/u/Ben_Chaabene_Wissem)\
**Replies:** 9\
**Last updated:** [May 24, 2018, 3:33pm UTC](https://discuss.elastic.co/t/im-just-confused-in-using-grok/133153 "2018-05-24T15:33:00Z")

</div>

Hello, I'm beginner with grok and I'm trying to extract log patterns using match property. This what I do : grok { match =\> { "message" =\> "REQUEST\\t%{WORD:senario\_group}\\t{NOTSPACE:user\_id}\\t% {WORD:senario\_name}\\t%…

---

## [Forwarding my bulk records from Http Input Plugin to Elasticsearch Output Plugin - Discuss the Elastic Stack](https://discuss.elastic.co/t/forwarding-my-bulk-records-from-http-input-plugin-to-elasticsearch-output-plugin-discuss-the-elastic-stack/375866)

<div class="topic-metadata">

**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\
**Replies:** 23\
**Last updated:** [March 17, 2025, 6:39pm UTC](https://discuss.elastic.co/t/forwarding-my-bulk-records-from-http-input-plugin-to-elasticsearch-output-plugin-discuss-the-elastic-stack/375866 "2025-03-17T18:39:15Z")

</div>

Hello there. Passing from Elastic On-Prem to Elastic Cloud, I am trying to use Logstash to create a "store and forward" implementation for creating documents in elastic. So, practically, before I was directly writing to…

---

## [WARN message when trying to install on windows 10](https://discuss.elastic.co/t/warn-message-when-trying-to-install-on-windows-10/328348)

<div class="topic-metadata">

**Author:** [@Ene\_Dragos](https://discuss.elastic.co/u/Ene_Dragos)\
**Replies:** 10\
**Last updated:** [March 23, 2023, 4:08pm UTC](https://discuss.elastic.co/t/warn-message-when-trying-to-install-on-windows-10/328348 "2023-03-23T16:08:19Z")

</div>

Hi! I'm trying to install elasticsearch on windows and i've followed the guid on here: Install Elasticsearch with .zip on Windows | Elasticsearch Guide \[8.6\] | Elastic. The issue is, when I try to configure Elasticsearc…

---

## [Is there any Latency module/merticset available across beats family](https://discuss.elastic.co/t/is-there-any-latency-module-merticset-available-across-beats-family/261804)

<div class="topic-metadata">

**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\
**Replies:** 10\
**Last updated:** [January 25, 2021, 10:14pm UTC](https://discuss.elastic.co/t/is-there-any-latency-module-merticset-available-across-beats-family/261804 "2021-01-25T22:14:30Z")

</div>

Hello, I would like to know if there is any Latency module/metricset available across beats family to pull latency data from the different OS platforms? Thanks

---

## [Is Facet affects the Filtered Query Result?](https://discuss.elastic.co/t/is-facet-affects-the-filtered-query-result/13559)

<div class="topic-metadata">

**Author:** [@AniruddhaPol](https://discuss.elastic.co/u/AniruddhaPol)\
**Replies:** 10\
**Last updated:** [October 10, 2013, 9:59pm UTC](https://discuss.elastic.co/t/is-facet-affects-the-filtered-query-result/13559 "2013-10-10T21:59:12Z")

</div>

Hi , I am Using Filtered Query With Facet. My query Structure is as Following : { "query": { "filtered": { }, "filter": { …

---

## [Elasticsearch/Lucene scoring broken?](https://discuss.elastic.co/t/elasticsearch-lucene-scoring-broken/10961)

<div class="topic-metadata">

**Author:** [@Bruno\_Miranda](https://discuss.elastic.co/u/Bruno_Miranda)\
**Replies:** 10\
**Last updated:** [March 1, 2013, 7:42pm UTC](https://discuss.elastic.co/t/elasticsearch-lucene-scoring-broken/10961 "2013-03-01T19:42:41Z")

</div>

I am seeing the same exact index and the same exact query return different results, could someone please help me understand? curl -X DELETE http://localhost:9200/search curl -X POST http://localhost:9200/search -d…

---

## [Protecting my data](https://discuss.elastic.co/t/protecting-my-data/14637)

<div class="topic-metadata">

**Author:** [@danielr](https://discuss.elastic.co/u/danielr)\
**Replies:** 12\
**Last updated:** [December 1, 2013, 9:26pm UTC](https://discuss.elastic.co/t/protecting-my-data/14637 "2013-12-01T21:26:50Z")

</div>

Here's a question I couldn't find an answer to by searching the web.. How do I protect my data from being attacked by hostile sources? I mean.. does anyone who has my server's ip can just send a DELETE request and …

---

## [Searching on more types but results only for one type, please help!](https://discuss.elastic.co/t/searching-on-more-types-but-results-only-for-one-type-please-help/8551)

<div class="topic-metadata">

**Author:** [@zhairong](https://discuss.elastic.co/u/zhairong)\
**Replies:** 11\
**Last updated:** [July 28, 2012, 2:30pm UTC](https://discuss.elastic.co/t/searching-on-more-types-but-results-only-for-one-type-please-help/8551 "2012-07-28T14:30:03Z")

</div>

dear all, I have the following case: index: pms type: Unit, Building searching with one type: curl -XGET 'http://localhost:9200/pms/Building/\_search?pretty=true' -d '{ "query" : { "wildcard": …

---

## [Snippet q1](https://discuss.elastic.co/t/snippet-q1/141340)

<div class="topic-metadata">

**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\
**Replies:** 13\
**Last updated:** [July 24, 2018, 10:58am UTC](https://discuss.elastic.co/t/snippet-q1/141340 "2018-07-24T10:58:24Z")

</div>

what does this following snippet, especially the message line grok { match =\> { "message" =\> "CustomerID%{INT:CustomerID:int} "tag\_on\_failure" =\> \[\] } }

---

## [Heartbeat.7.5.2 works but no details under 'monitor status'](https://discuss.elastic.co/t/heartbeat-7-5-2-works-but-no-details-under-monitor-status/233456)

<div class="topic-metadata">

**Author:** [@sivaaws](https://discuss.elastic.co/u/sivaaws)\
**Replies:** 9\
**Last updated:** [May 25, 2020, 6:10am UTC](https://discuss.elastic.co/t/heartbeat-7-5-2-works-but-no-details-under-monitor-status/233456 "2020-05-25T06:10:07Z")

</div>

Hello. I'm trying to setup heartbeat.7.5.2 and able to do so; could find the HTTP/ TCP end-points status on Kibana (under 'Uptime'). However, it doesnt show up the name/status/url; despite i've explicitly added 'name & …

---

## [Logstash Consuming too Much JVM](https://discuss.elastic.co/t/logstash-consuming-too-much-jvm/223860)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 9\
**Last updated:** [April 21, 2020, 3:38pm UTC](https://discuss.elastic.co/t/logstash-consuming-too-much-jvm/223860 "2020-04-21T15:38:32Z")

</div>

Hello, My Logstash is Consuming too much JVM due to it Logstash is getting shut down and not receiving any data. I have 4 Pipelines running in my Logstash and Can Some one suggest me What all steps to followed for tun…

---

## [Any way to do something similar to SQL's "IN"/"NOT IN" other table?](https://discuss.elastic.co/t/any-way-to-do-something-similar-to-sqls-in-not-in-other-table/214750)

<div class="topic-metadata">

**Author:** [@Wang\_Hay\_Ng](https://discuss.elastic.co/u/Wang_Hay_Ng)\
**Replies:** 9\
**Last updated:** [January 16, 2020, 1:42am UTC](https://discuss.elastic.co/t/any-way-to-do-something-similar-to-sqls-in-not-in-other-table/214750 "2020-01-16T01:42:09Z")

</div>

i have never used elk before and not very familiar with the structure of the database, mostly work with mysql stuff before at the old place. since people want a visualization of the server log, i put the log into elk st…

---

## [ES goes to red when node restarts](https://discuss.elastic.co/t/es-goes-to-red-when-node-restarts/193716)

<div class="topic-metadata">

**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\
**Replies:** 9\
**Last updated:** [August 9, 2019, 9:04am UTC](https://discuss.elastic.co/t/es-goes-to-red-when-node-restarts/193716 "2019-08-09T09:04:42Z")

</div>

Hi I am using ES 6.4 version. And I have 3 machines, Each of them have one instance of ES master and ES data node running as separate processes. totally 6 nodes, 3 master and 3 data nodes. Replication Factor is being se…

---

## [Custom similarity setting does not work with version 0.20.2](https://discuss.elastic.co/t/custom-similarity-setting-does-not-work-with-version-0-20-2/10662)

<div class="topic-metadata">

**Author:** [@Mustafa\_Sener](https://discuss.elastic.co/u/Mustafa_Sener)\
**Replies:** 12\
**Last updated:** [February 8, 2013, 3:41pm UTC](https://discuss.elastic.co/t/custom-similarity-setting-does-not-work-with-version-0-20-2/10662 "2013-02-08T15:41:23Z")

</div>

Hi, I tried following configurations for my custom similarity provider but none of them worked with version 0.20. Can anyone give me some information about this setting for version 0.20.2? Any sample usages will be en…

---

## [ILM slows down node recovery/rolling upgrade process](https://discuss.elastic.co/t/ilm-slows-down-node-recovery-rolling-upgrade-process/356476)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 13\
**Last updated:** [May 7, 2024, 8:04pm UTC](https://discuss.elastic.co/t/ilm-slows-down-node-recovery-rolling-upgrade-process/356476 "2024-05-07T20:04:36Z")

</div>

On my test cluster, I started a rolling upgrade. It's a 3 node cluster, so the cluster state went promptly to red. Once my upgraded node started up, I found that the index reallocation/recovery process was taking a lot l…

---

## [Logstash doesn't reads JSON file on Windows](https://discuss.elastic.co/t/logstash-doesnt-reads-json-file-on-windows/341156)

<div class="topic-metadata">

**Author:** [@VSKMurali](https://discuss.elastic.co/u/VSKMurali)\
**Replies:** 10\
**Last updated:** [August 19, 2023, 11:35pm UTC](https://discuss.elastic.co/t/logstash-doesnt-reads-json-file-on-windows/341156 "2023-08-19T23:35:17Z")

</div>

Hello, I am trying to configure a following setup on Windows machine. JSON file (creates every 5 mins with the same file name) and Elasticsearch should read the file and push to Index and this is my Logstash config fil…

---

## [How to set Thread Pool settings for all data nodes in 7.14 Elastic cloud](https://discuss.elastic.co/t/how-to-set-thread-pool-settings-for-all-data-nodes-in-7-14-elastic-cloud/284473)

<div class="topic-metadata">

**Author:** [@rohitnagarro](https://discuss.elastic.co/u/rohitnagarro)\
**Replies:** 10\
**Last updated:** [September 21, 2021, 10:49am UTC](https://discuss.elastic.co/t/how-to-set-thread-pool-settings-for-all-data-nodes-in-7-14-elastic-cloud/284473 "2021-09-21T10:49:34Z")

</div>

Hi, We have 200K video assets on Elastic cloud, consuming 500mb of space on single node. Configuration wise we have 32 GB RAM Elasticsearch in 3 Zone Dedicated Master with 1GB RAM | 8 vCPU | 3 Zone Coordinating nod…

---

## [Don't store certain fields by default](https://discuss.elastic.co/t/dont-store-certain-fields-by-default/12373)

<div class="topic-metadata">

**Author:** [@Allan\_Johns](https://discuss.elastic.co/u/Allan_Johns)\
**Replies:** 11\
**Last updated:** [June 18, 2013, 12:04am UTC](https://discuss.elastic.co/t/dont-store-certain-fields-by-default/12373 "2013-06-18T00:04:17Z")

</div>

I can't quite figure out from the docs how to do this. I know I need to use the exclude functionality shown here http://www.elasticsearch.org/guide/reference/mapping/source-field/, but the documentation frustratingly …

---

## [How to start a machine learning job to check if a user starts an application they normally do not use with Kibana](https://discuss.elastic.co/t/how-to-start-a-machine-learning-job-to-check-if-a-user-starts-an-application-they-normally-do-not-use-with-kibana/304094)

<div class="topic-metadata">

**Author:** [@anddam](https://discuss.elastic.co/u/anddam)\
**Replies:** 9\
**Last updated:** [May 9, 2022, 11:44am UTC](https://discuss.elastic.co/t/how-to-start-a-machine-learning-job-to-check-if-a-user-starts-an-application-they-normally-do-not-use-with-kibana/304094 "2022-05-09T11:44:22Z")

</div>

I am trying to set up a machine learning job to detect when non admin users who normally do not use powershell start powershell. I already saved a search function that shows powershell started logs, and filters the unim…

---

## [Benchmark scripts/code?](https://discuss.elastic.co/t/benchmark-scripts-code/9075)

<div class="topic-metadata">

**Author:** [@jdd](https://discuss.elastic.co/u/jdd)\
**Replies:** 9\
**Last updated:** [September 21, 2012, 10:38am UTC](https://discuss.elastic.co/t/benchmark-scripts-code/9075 "2012-09-21T10:38:10Z")

</div>

Hi all, We have setup ES on a medium size cluster, and so far it's working smoothly (Thanks for that!) We wanted benchmark indexing and query performance, so wanted to check if there are any benchmarking tools out …

---

## [Setup Elasticsearch cluster mode](https://discuss.elastic.co/t/setup-elasticsearch-cluster-mode/341228)

<div class="topic-metadata">

**Author:** [@HiteshSingh](https://discuss.elastic.co/u/HiteshSingh)\
**Replies:** 13\
**Last updated:** [August 28, 2023, 1:16pm UTC](https://discuss.elastic.co/t/setup-elasticsearch-cluster-mode/341228 "2023-08-28T13:16:58Z")

</div>

I want to setup cluster mode between 2 linux servers One of them will be master and data node and other one will only be a data node. Whenever i try to setup any external IP/interfaces to transport.host, elasticsearch …

---

## [Restrict the fields from being updated](https://discuss.elastic.co/t/restrict-the-fields-from-being-updated/272264)

<div class="topic-metadata">

**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\
**Replies:** 9\
**Last updated:** [May 10, 2021, 6:21am UTC](https://discuss.elastic.co/t/restrict-the-fields-from-being-updated/272264 "2021-05-10T06:21:35Z")

</div>

Hi , Is there a way to restrict the updation of a particular field while indexing a document. For example I have a field 'name' which is of type text and I index a document , next time I try to change this 'name' eithe…

---

## [Change String to Hours - date filters](https://discuss.elastic.co/t/change-string-to-hours-date-filters/215834)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 9\
**Last updated:** [January 23, 2020, 6:34am UTC](https://discuss.elastic.co/t/change-string-to-hours-date-filters/215834 "2020-01-23T06:34:18Z")

</div>

Hello everyone, I have a column like this: business\_time\_left 3 Hours 24 Minutes 59 Minutes 4 Days 23 Hours 58 Minutes 0 Seconds 1 Hour and so on.. What I want to do in Logstash is to convert this entirely into h…

---

## [This version of Kibana requires at least Elasticsearch 1.4.0.Beta1 but using 1.4.1](https://discuss.elastic.co/t/this-version-of-kibana-requires-at-least-elasticsearch-1-4-0-beta1-but-using-1-4-1/21055)

<div class="topic-metadata">

**Author:** [@David\_Montgomery](https://discuss.elastic.co/u/David_Montgomery)\
**Replies:** 9\
**Last updated:** [December 4, 2014, 9:48am UTC](https://discuss.elastic.co/t/this-version-of-kibana-requires-at-least-elasticsearch-1-4-0-beta1-but-using-1-4-1/21055 "2014-12-04T09:48:45Z")

</div>

Hi, This version of Kibana requires at least Elasticsearch 1.4.0.Beta1 SetupError@ http://monitor-development-east.test.com:5601/index.js?\_b=3998:42905:51 checkEsVersion/http://monitor-development-east.test.com…

[Previous page](https://discuss.elastic.co/top.md?page=232&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=234&per_page=50&period=all)
