# Top

**URL:** https://discuss.elastic.co/top.md?page=234&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 235

---

## [Cloud plugin for 0.15.0 (using Azure blob storage)](https://discuss.elastic.co/t/cloud-plugin-for-0-15-0-using-azure-blob-storage/4001)

<div class="topic-metadata">

**Author:** [@Administrator\_2](https://discuss.elastic.co/u/Administrator_2)\
**Replies:** 10\
**Last updated:** [March 2, 2011, 4:57am UTC](https://discuss.elastic.co/t/cloud-plugin-for-0-15-0-using-azure-blob-storage/4001 "2011-03-02T04:57:19Z")

</div>

I'm simply trying to run ElasticSearch on my local machine, using Azure blob storage as a backing store. I've downloaded ES 0.15.0, and unzipped it into a directory. I then changed the config file like so: cl…

---

## [Visualize not works after reindex](https://discuss.elastic.co/t/visualize-not-works-after-reindex/328315)

<div class="topic-metadata">

**Author:** [@rachit](https://discuss.elastic.co/u/rachit)\
**Replies:** 11\
**Last updated:** [March 24, 2023, 5:53am UTC](https://discuss.elastic.co/t/visualize-not-works-after-reindex/328315 "2023-03-24T05:53:37Z")

</div>

Hi Team, i have merged 2 indexes with reindex Query. Billingdemo(index) filedemo(index) POST \_reindex { "source": { "index": "\*demo" }, "dest": { "index": "ReindexDemo" } } indexes merged, but now wh…

---

## [How to find data anomalies?](https://discuss.elastic.co/t/how-to-find-data-anomalies/305238)

<div class="topic-metadata">

**Author:** [@AdamYS](https://discuss.elastic.co/u/AdamYS)\
**Replies:** 9\
**Last updated:** [May 20, 2022, 3:58pm UTC](https://discuss.elastic.co/t/how-to-find-data-anomalies/305238 "2022-05-20T15:58:50Z")

</div>

We have various indexes in Elasticsearch and I wonder if it'd be possible to find anomalies in the data? For example: We have a document for each test we run. The document has the test name as one field and the result …

---

## [Search with \_routing on indices without \_routing](https://discuss.elastic.co/t/search-with-routing-on-indices-without-routing/227366)

<div class="topic-metadata">

**Author:** [@jeffzhao](https://discuss.elastic.co/u/jeffzhao)\
**Replies:** 9\
**Last updated:** [April 9, 2020, 7:38pm UTC](https://discuss.elastic.co/t/search-with-routing-on-indices-without-routing/227366 "2020-04-09T19:38:21Z")

</div>

Hi, We have time-based data in Elasticsearch cluster: one index per month and use alias to join them. So the user only need to search on the index alias. In the past when creating the index for each month, we didn't sp…

---

## [Is it possible to reinitialize the model at a certain date?](https://discuss.elastic.co/t/is-it-possible-to-reinitialize-the-model-at-a-certain-date/162627)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 9\
**Last updated:** [January 4, 2019, 5:55pm UTC](https://discuss.elastic.co/t/is-it-possible-to-reinitialize-the-model-at-a-certain-date/162627 "2019-01-04T17:55:52Z")

</div>

Hello, I am monitoring sensor data with ML. Each time the sensor is replaced, the values jumps, that's something I am OK with. But after the jump, the model bounds are getting wider. I don't want this, and I want to res…

---

## [Marvel does not display any contents with ES1.2.1](https://discuss.elastic.co/t/marvel-does-not-display-any-contents-with-es1-2-1/18587)

<div class="topic-metadata">

**Author:** [@ajay\_bh111](https://discuss.elastic.co/u/ajay_bh111)\
**Replies:** 9\
**Last updated:** [July 22, 2014, 2:08pm UTC](https://discuss.elastic.co/t/marvel-does-not-display-any-contents-with-es1-2-1/18587 "2014-07-22T14:08:31Z")

</div>

Hi I have new test setup for ES and added latest marvel from internet and tried ipv6 workaround to mentioned in other thread too but display does not show any contents from the marvel URL. Marvel plugin installed…

---

## [Logstash .Conf file](https://discuss.elastic.co/t/logstash-conf-file/278194)

<div class="topic-metadata">

**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Replies:** 9\
**Last updated:** [July 9, 2021, 2:40pm UTC](https://discuss.elastic.co/t/logstash-conf-file/278194 "2021-07-09T14:40:33Z")

</div>

I am trying to collect logs from multiple inputs and write them into 2 indices. Please refer the below conf file, am able to create a index called syslog but am not able to create index called winlog. All the logs are g…

---

## [Need to get latest 2 records](https://discuss.elastic.co/t/need-to-get-latest-2-records/204092)

<div class="topic-metadata">

**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\
**Replies:** 9\
**Last updated:** [October 24, 2019, 8:15am UTC](https://discuss.elastic.co/t/need-to-get-latest-2-records/204092 "2019-10-24T08:15:27Z")

</div>

Hi, i need a query to fetch last and 2nd last record entered the index. What should be the query other than putting size: 2 after sorting and all? thanks

---

## [Getting 429 ES Exception while performing search queries](https://discuss.elastic.co/t/getting-429-es-exception-while-performing-search-queries/166945)

<div class="topic-metadata">

**Author:** [@Shibbu11](https://discuss.elastic.co/u/Shibbu11)\
**Replies:** 9\
**Last updated:** [February 7, 2019, 10:15am UTC](https://discuss.elastic.co/t/getting-429-es-exception-while-performing-search-queries/166945 "2019-02-07T10:15:23Z")

</div>

Hello, I am using Elasticsearch 5.6.7. I have one node in my cluster with 128 GB ram and 16 GB heap size. I have around 14 indices with 5 primary and 1 replica shard each in this node. Each index has a size of 40-50…

---

## [Looking for a best practice to get all data according to some filters](https://discuss.elastic.co/t/looking-for-a-best-practice-to-get-all-data-according-to-some-filters/21195)

<div class="topic-metadata">

**Author:** [@Ron\_Sher](https://discuss.elastic.co/u/Ron_Sher)\
**Replies:** 9\
**Last updated:** [December 14, 2014, 5:47pm UTC](https://discuss.elastic.co/t/looking-for-a-best-practice-to-get-all-data-according-to-some-filters/21195 "2014-12-14T17:47:17Z")

</div>

Hi, I was wondering about best practices to to get all data according to some filters. The options as I see them are: - Use a very big size that will return all accounts, i.e. use some value like 1m to m…

---

## [Slow to index](https://discuss.elastic.co/t/slow-to-index/5238)

<div class="topic-metadata">

**Author:** [@Harry\_Waye](https://discuss.elastic.co/u/Harry_Waye)\
**Replies:** 12\
**Last updated:** [August 26, 2011, 2:22pm UTC](https://discuss.elastic.co/t/slow-to-index/5238 "2011-08-26T14:22:05Z")

</div>

Hi, I'm on elasticsearch master with two nodes, one index or 5 shards and 1 replica. I'm rivering in a couchdb database of about 3GB of 400000 documents. It's going very slowly, something like 50 documents a minute…

---

## [Issue with pattern analyzer](https://discuss.elastic.co/t/issue-with-pattern-analyzer/6688)

<div class="topic-metadata">

**Author:** [@Scott\_Decker](https://discuss.elastic.co/u/Scott_Decker)\
**Replies:** 10\
**Last updated:** [February 22, 2012, 10:17pm UTC](https://discuss.elastic.co/t/issue-with-pattern-analyzer/6688 "2012-02-22T22:17:57Z")

</div>

Hey All, I am trying to setup a pattern analyzer for indexes, but something just isn't working. Here is what I have tried in our elasticsearch.json "pipeDelim":{ "type": "pattern", …

---

## [GCP LOGGING TO ELASTIC | security](https://discuss.elastic.co/t/gcp-logging-to-elastic-security/332596)

<div class="topic-metadata">

**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\
**Replies:** 11\
**Last updated:** [May 19, 2023, 12:30am UTC](https://discuss.elastic.co/t/gcp-logging-to-elastic-security/332596 "2023-05-19T00:30:00Z")

</div>

Hi, We have elasticsearch running on VMs and we are trying to share the logs from GCP to local elastic cluster. Thing is, GCP uses service account and key. Is there a way where we can add GCP service account credential…

---

## [Package service with elasticsearch client](https://discuss.elastic.co/t/package-service-with-elasticsearch-client/179874)

<div class="topic-metadata">

**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\
**Replies:** 11\
**Last updated:** [May 7, 2019, 6:15am UTC](https://discuss.elastic.co/t/package-service-with-elasticsearch-client/179874 "2019-05-07T06:15:00Z")

</div>

I want to use elasticsearch client,is there a recommend elasticsearch packaged service?

---

## [Finding out if an index exists](https://discuss.elastic.co/t/finding-out-if-an-index-exists/3497)

<div class="topic-metadata">

**Author:** [@zohar](https://discuss.elastic.co/u/zohar)\
**Replies:** 10\
**Last updated:** [November 15, 2010, 5:32pm UTC](https://discuss.elastic.co/t/finding-out-if-an-index-exists/3497 "2010-11-15T17:32:37Z")

</div>

Hi We have some code to detect if an index exists : client.admin().cluster().state(clusterStateRequest()).actionGet().getState().metaData().getIndices().containsKey(index.name()) is there a slightly more com…

---

## [Logstash applying grok to only specific log lines](https://discuss.elastic.co/t/logstash-applying-grok-to-only-specific-log-lines/181645)

<div class="topic-metadata">

**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\
**Replies:** 12\
**Last updated:** [May 21, 2019, 4:20pm UTC](https://discuss.elastic.co/t/logstash-applying-grok-to-only-specific-log-lines/181645 "2019-05-21T16:20:20Z")

</div>

Hi, why logstash applying grok for only only few log lines even though I have grok patterns for all log lines and I can run through same logs using grok debugger and its working fine, I think its behaving like unpredict…

---

## [Does ES reindex a shard that's been moved to another node?](https://discuss.elastic.co/t/does-es-reindex-a-shard-thats-been-moved-to-another-node/346819)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 13\
**Last updated:** [November 15, 2023, 7:58pm UTC](https://discuss.elastic.co/t/does-es-reindex-a-shard-thats-been-moved-to-another-node/346819 "2023-11-15T19:58:11Z")

</div>

I have noticed that the document indexing rate for a new data node stays higher than all other existing data nodes for few days after it's been introduced into the cluster. Is this expected?

---

## [Dashboard with kibana](https://discuss.elastic.co/t/dashboard-with-kibana/334016)

<div class="topic-metadata">

**Author:** [@Hanni](https://discuss.elastic.co/u/Hanni)\
**Replies:** 13\
**Last updated:** [May 31, 2023, 8:52am UTC](https://discuss.elastic.co/t/dashboard-with-kibana/334016 "2023-05-31T08:52:28Z")

</div>

Hello, I have two CSV files. One file contains the names of applications, and the other file contains information about a specific application. Both files have the "Host" column in common. I have imported these two files…

---

## [DLQ not enabled for logstasha](https://discuss.elastic.co/t/dlq-not-enabled-for-logstasha/280940)

<div class="topic-metadata">

**Author:** [@Krrish\_Raj1](https://discuss.elastic.co/u/Krrish_Raj1)\
**Replies:** 9\
**Last updated:** [August 10, 2021, 9:33pm UTC](https://discuss.elastic.co/t/dlq-not-enabled-for-logstasha/280940 "2021-08-10T21:33:28Z")

</div>

I have two events: test\_start and test\_end When I receive test\_start event, I clone one more event from it test\_attempt and index it in elasticsearch. Then when test\_end event arrives, I extract document id and index …

---

## [Migrating packetbeat ingestion from Elasticsearch to Logstash](https://discuss.elastic.co/t/migrating-packetbeat-ingestion-from-elasticsearch-to-logstash/236215)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 9\
**Last updated:** [June 11, 2020, 3:04pm UTC](https://discuss.elastic.co/t/migrating-packetbeat-ingestion-from-elasticsearch-to-logstash/236215 "2020-06-11T15:04:14Z")

</div>

Hello, I currently push packetbeat logs from hosts directly to elasticsearch with a geo-pipeline. I want to migrate this compute load to a dedicated logstash pipeline. Stack is running at 7.7.1. I need help with: Geo…

---

## [DB in Kibana](https://discuss.elastic.co/t/db-in-kibana/166871)

<div class="topic-metadata">

**Author:** [@manju134](https://discuss.elastic.co/u/manju134)\
**Replies:** 9\
**Last updated:** [February 15, 2019, 11:32am UTC](https://discuss.elastic.co/t/db-in-kibana/166871 "2019-02-15T11:32:40Z")

</div>

Hi, I have a client actually hosted in db 00580 but in Kibana it is logged as 0516 is there anything like listener. As one my colleague found out it is behind a listener. Please help on this.

---

## [AWS nodes don't discover each other](https://discuss.elastic.co/t/aws-nodes-dont-discover-each-other/14177)

<div class="topic-metadata">

**Author:** [@gzion7](https://discuss.elastic.co/u/gzion7)\
**Replies:** 9\
**Last updated:** [November 1, 2013, 2:25am UTC](https://discuss.elastic.co/t/aws-nodes-dont-discover-each-other/14177 "2013-11-01T02:25:52Z")

</div>

I have two ES servers in AWS, I have security groups set to allow all traffic from these 2 IPs. I installed the aws plugin. The only changes I've made in the yml file are the cluster name, http.max.content.length…

---

## [How to build grok filter](https://discuss.elastic.co/t/how-to-build-grok-filter/304537)

<div class="topic-metadata">

**Author:** [@smam](https://discuss.elastic.co/u/smam)\
**Replies:** 10\
**Last updated:** [May 12, 2022, 10:31am UTC](https://discuss.elastic.co/t/how-to-build-grok-filter/304537 "2022-05-12T10:31:42Z")

</div>

Hello, I want to understand how to build grok filter since other posts did not make it clear enough for me. Here are example lines I want to send: 30,05/10/22,07:30:27,DNS Update Request,\<ip\>,\<name\>,,,0,6,,,,,,,,,0 11…

---

## [Queries on Index LifeCycle Management](https://discuss.elastic.co/t/queries-on-index-lifecycle-management/223920)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 9\
**Last updated:** [March 18, 2020, 3:29pm UTC](https://discuss.elastic.co/t/queries-on-index-lifecycle-management/223920 "2020-03-18T15:29:13Z")

</div>

Hi Team, I have a doubt about ILM. Do I have to explicitly enable ILM in elastic search configuration or it is enabled by default? I am using elastcsearch-7.5.2 version. I have pasted output of the elasticsearch.yaml …

---

## [ILM rollover](https://discuss.elastic.co/t/ilm-rollover/338771)

<div class="topic-metadata">

**Author:** [@kruzadmn](https://discuss.elastic.co/u/kruzadmn)\
**Replies:** 12\
**Last updated:** [July 20, 2023, 1:20pm UTC](https://discuss.elastic.co/t/ilm-rollover/338771 "2023-07-20T13:20:51Z")

</div>

Hi! Please help me. I have configured ILM to rollover the index when it reaches 120GB or 7 days. I have a problem that ILM does not rollover the index because it thinks that the index size is for example 117GB, when in …

---

## [Logstash http\_pollar Rest API push more than 1000 records](https://discuss.elastic.co/t/logstash-http-pollar-rest-api-push-more-than-1000-records/346374)

<div class="topic-metadata">

**Author:** [@puneetsharma2](https://discuss.elastic.co/u/puneetsharma2)\
**Replies:** 12\
**Last updated:** [November 3, 2023, 6:35pm UTC](https://discuss.elastic.co/t/logstash-http-pollar-rest-api-push-more-than-1000-records/346374 "2023-11-03T18:35:20Z")

</div>

Logstash http\_pollar Rest API push more than 1000 records As we are using HTTP\_POLLAR to execute the rest API and push the response in elastic index in one go. But default only 1000 records are pushing in elastic. How …

---

## [Question regarding filebeat indexes for version 8.11.x and ILM](https://discuss.elastic.co/t/question-regarding-filebeat-indexes-for-version-8-11-x-and-ilm/352726)

<div class="topic-metadata">

**Author:** [@Ravi\_Pattar](https://discuss.elastic.co/u/Ravi_Pattar)\
**Replies:** 9\
**Last updated:** [February 26, 2024, 3:04pm UTC](https://discuss.elastic.co/t/question-regarding-filebeat-indexes-for-version-8-11-x-and-ilm/352726 "2024-02-26T15:04:49Z")

</div>

Hi @all I am seeing an issue on the ELK production server w.r.t to ILM. We have a production server (standalone) where ELK stack is installed and has the version 7.17.15. Recently ILM policy was implemented and is run…

---

## [Elasticsearch mappings for ASA](https://discuss.elastic.co/t/elasticsearch-mappings-for-asa/220515)

<div class="topic-metadata">

**Author:** [@digger86](https://discuss.elastic.co/u/digger86)\
**Replies:** 9\
**Last updated:** [February 23, 2020, 9:03pm UTC](https://discuss.elastic.co/t/elasticsearch-mappings-for-asa/220515 "2020-02-23T21:03:18Z")

</div>

I am new to using the Elastic stack. What is most important to me is to collect firewall logs from an ASA. One of the challenges is that I cannot not search for networks in the logs because the IP addresses are mapped to…

---

## [Logstash won't start due to memory heap issue](https://discuss.elastic.co/t/logstash-wont-start-due-to-memory-heap-issue/366069)

<div class="topic-metadata">

**Author:** [@Carolina\_Molina](https://discuss.elastic.co/u/Carolina_Molina)\
**Replies:** 10\
**Last updated:** [September 6, 2024, 11:35am UTC](https://discuss.elastic.co/t/logstash-wont-start-due-to-memory-heap-issue/366069 "2024-09-06T11:35:23Z")

</div>

Hello, I have a instance running logstsh 6.8.2 with Java 11.0.19 and JDK of 64Bits, I changed the filter file do add conditions and terraform logstash to the correct environment. After that logstash refused to start giv…

---

## [Boolean query does not return expected data in Elasticsearch](https://discuss.elastic.co/t/boolean-query-does-not-return-expected-data-in-elasticsearch/16189)

<div class="topic-metadata">

**Author:** [@Isaac\_Hazan](https://discuss.elastic.co/u/Isaac_Hazan)\
**Replies:** 9\
**Last updated:** [March 7, 2014, 3:11pm UTC](https://discuss.elastic.co/t/boolean-query-does-not-return-expected-data-in-elasticsearch/16189 "2014-03-07T15:11:27Z")

</div>

I have the following document in Elasticsearch as reported by Kibana: {"deviceId":"C1976429369BFE063ED8B3409DB7C7E7D87196D9","appId":"DisneyDigitalBooks.PlanesAdventureAlbum","ostype":"iOS"} Why the following qu…

---

## [Fleet integration for Barracauda Firewall logs](https://discuss.elastic.co/t/fleet-integration-for-barracauda-firewall-logs/348882)

<div class="topic-metadata">

**Author:** [@maadhav](https://discuss.elastic.co/u/maadhav)\
**Replies:** 10\
**Last updated:** [December 9, 2023, 5:46am UTC](https://discuss.elastic.co/t/fleet-integration-for-barracauda-firewall-logs/348882 "2023-12-09T05:46:04Z")

</div>

Hi Team We have configured Fleet server and added Elastic Agents. Output is configured using Logstash. Agent policy is added which contains system integration, its working fine and sending logs to logstash output. When…

---

## [Searching JSON value "A" / "a"](https://discuss.elastic.co/t/searching-json-value-a-a/3053)

<div class="topic-metadata">

**Author:** [@Franz\_Allan\_Valencia](https://discuss.elastic.co/u/Franz_Allan_Valencia)\
**Replies:** 14\
**Last updated:** [July 14, 2010, 5:38pm UTC](https://discuss.elastic.co/t/searching-json-value-a-a/3053 "2010-07-14T17:38:52Z")

</div>

Good day, I have a field that accepts a single character - either 'A' or 'P'. I can index them no properly (i think) with: curl -XPUT http://localhost:9200/test/dummy/1 -d '{"id" : 1, "statusCode" : "A", "anotherCam…

---

## [Adding new node to existing cluster, not being recognized](https://discuss.elastic.co/t/adding-new-node-to-existing-cluster-not-being-recognized/309327)

<div class="topic-metadata">

**Author:** [@Rowan05](https://discuss.elastic.co/u/Rowan05)\
**Replies:** 10\
**Last updated:** [July 12, 2022, 9:21am UTC](https://discuss.elastic.co/t/adding-new-node-to-existing-cluster-not-being-recognized/309327 "2022-07-12T09:21:57Z")

</div>

Hello, I have a server which is running ElasticSearch 7.2 on an Ubuntu virtual machine. This server has limited disk space, so i want to add disk space. I was thinking of two options. Add an hard drive to server and…

---

## [Does the index API block responses until the indexing process is through?](https://discuss.elastic.co/t/does-the-index-api-block-responses-until-the-indexing-process-is-through/273115)

<div class="topic-metadata">

**Author:** [@Courtan](https://discuss.elastic.co/u/Courtan)\
**Replies:** 9\
**Last updated:** [May 17, 2021, 6:54am UTC](https://discuss.elastic.co/t/does-the-index-api-block-responses-until-the-indexing-process-is-through/273115 "2021-05-17T06:54:14Z")

</div>

I am wondering wether the index API waits to return a response until the whole indexing process is complete. More specifically: When I send a document to the API for indexing, will ES only check wether the request, json…

---

## [Uploading Event Logs](https://discuss.elastic.co/t/uploading-event-logs/138667)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 14\
**Last updated:** [July 5, 2018, 12:18pm UTC](https://discuss.elastic.co/t/uploading-event-logs/138667 "2018-07-05T12:18:33Z")

</div>

Does anyone know how to upload Windows Event Logs to my Linux VM?

---

## [Custom index not showing in Kibana V8.8.0](https://discuss.elastic.co/t/custom-index-not-showing-in-kibana-v8-8-0/336621)

<div class="topic-metadata">

**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\
**Replies:** 11\
**Last updated:** [July 1, 2023, 1:16pm UTC](https://discuss.elastic.co/t/custom-index-not-showing-in-kibana-v8-8-0/336621 "2023-07-01T13:16:50Z")

</div>

I have multiple filebeats v 7.17.5 are configured on different remote servers with custom index names. I have recently updated my ELk stack to 8.8.0 and also updating the filebeat version to 8.8.0. I also try to add some…

---

## [Links status based on sysloghost and message](https://discuss.elastic.co/t/links-status-based-on-sysloghost-and-message/215544)

<div class="topic-metadata">

**Author:** [@mushfiq](https://discuss.elastic.co/u/mushfiq)\
**Replies:** 10\
**Last updated:** [January 23, 2020, 10:36am UTC](https://discuss.elastic.co/t/links-status-based-on-sysloghost-and-message/215544 "2020-01-23T10:36:12Z")

</div>

Hi, I am new ELK stack & started testing it from last week. I must say, I just love it. What I Have Basic SOHO dual WAN routers, first link leased line and second link broadband (no static IP) These routers support s…

---

## [The mutate's gsub result is incorrect](https://discuss.elastic.co/t/the-mutates-gsub-result-is-incorrect/158838)

<div class="topic-metadata">

**Author:** [@jmkim](https://discuss.elastic.co/u/jmkim)\
**Replies:** 10\
**Last updated:** [November 30, 2018, 9:09am UTC](https://discuss.elastic.co/t/the-mutates-gsub-result-is-incorrect/158838 "2018-11-30T09:09:19Z")

</div>

Hello everyone! Here is the code: m\_mkt="CUK45:cuk45\_moonv2\_ab4533fd85f7d55ce6a1a695fdfb9300;" result: CUK45=cuk45\_moonv2\_ab4533fd85f7d55ce6a1a695fdfb9300 However, the result is this. CUK45 = CUK45:cuk45\_moonv2\_ab4…

---

## [ElasticSearch data directory on Windows 7](https://discuss.elastic.co/t/elasticsearch-data-directory-on-windows-7/22843)

<div class="topic-metadata">

**Author:** [@Ravi\_Gupta](https://discuss.elastic.co/u/Ravi_Gupta)\
**Replies:** 10\
**Last updated:** [March 26, 2015, 6:51am UTC](https://discuss.elastic.co/t/elasticsearch-data-directory-on-windows-7/22843 "2015-03-26T06:51:24Z")

</div>

Hi , I have downloaded and installed ES on windows 7 and imported 2million+ records into it. (from a csv of size 2.2GB). I can search records using fiddler and it works as expected. I was hoping to see size of …

---

## [Terms Facet other property behavior vs documentation question](https://discuss.elastic.co/t/terms-facet-other-property-behavior-vs-documentation-question/10362)

<div class="topic-metadata">

**Author:** [@Kevin\_Fox\_2](https://discuss.elastic.co/u/Kevin_Fox_2)\
**Replies:** 9\
**Last updated:** [January 22, 2013, 10:31pm UTC](https://discuss.elastic.co/t/terms-facet-other-property-behavior-vs-documentation-question/10362 "2013-01-22T22:31:46Z")

</div>

The documentation at: http://www.elasticsearch.org/guide/reference/api/search/facets/ States: "the number of facet values not included in the returned facets (other), " In testing things, the number of facet entr…

---

## [Recovery from S3 gateway - only one shard recovers?](https://discuss.elastic.co/t/recovery-from-s3-gateway-only-one-shard-recovers/10127)

<div class="topic-metadata">

**Author:** [@James\_Chisholm](https://discuss.elastic.co/u/James_Chisholm)\
**Replies:** 9\
**Last updated:** [January 15, 2013, 6:08am UTC](https://discuss.elastic.co/t/recovery-from-s3-gateway-only-one-shard-recovers/10127 "2013-01-15T06:08:37Z")

</div>

Hi everyone, I've got a bit of a problem here which is doing my head in (and has been for the last 24hrs or so). Currently we are running Elasticsearch 0.19.8 on Amazon EC2 with S3 as a gateway (we're planning on m…

---

## [How static mapping works at storage level](https://discuss.elastic.co/t/how-static-mapping-works-at-storage-level/304470)

<div class="topic-metadata">

**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\
**Replies:** 11\
**Last updated:** [May 25, 2022, 10:59am UTC](https://discuss.elastic.co/t/how-static-mapping-works-at-storage-level/304470 "2022-05-25T10:59:04Z")

</div>

Team, I am using static mappings for elastic index with 10 fields as indexed fields, but application is sending 20 fields. out of 20 fields only 10 fields will be available for searching and querying does non indexed …

---

## [Problems with Number of replicas and UNASSIGNED errors](https://discuss.elastic.co/t/problems-with-number-of-replicas-and-unassigned-errors/342138)

<div class="topic-metadata">

**Author:** [@Ednei\_Rodrigues](https://discuss.elastic.co/u/Ednei_Rodrigues)\
**Replies:** 9\
**Last updated:** [September 5, 2023, 1:32pm UTC](https://discuss.elastic.co/t/problems-with-number-of-replicas-and-unassigned-errors/342138 "2023-09-05T13:32:54Z")

</div>

Hello, how are you doing ? So, I have a standalone ELK Stack and I am suffering with the error messages "UNASSIGNED" replicas. I know, to not use replica, I need to set 'number\_of\_replicas': 0 to the index. As I am usin…

---

## [Running the same ES query through the Java API and the ES console gives different number of results](https://discuss.elastic.co/t/running-the-same-es-query-through-the-java-api-and-the-es-console-gives-different-number-of-results/10827)

<div class="topic-metadata">

**Author:** [@john\_2](https://discuss.elastic.co/u/john_2)\
**Replies:** 9\
**Last updated:** [February 22, 2013, 8:27pm UTC](https://discuss.elastic.co/t/running-the-same-es-query-through-the-java-api-and-the-es-console-gives-different-number-of-results/10827 "2013-02-22T20:27:53Z")

</div>

Hi, When i run the below query through the Java API i get a certain number of results but when i run the same query through the elastic search console i get fewer records. The Elastic search version is 0.19.2 and…

---

## [Bulk api without repetition the index string - performance optimisation](https://discuss.elastic.co/t/bulk-api-without-repetition-the-index-string-performance-optimisation/252831)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 10\
**Last updated:** [October 21, 2020, 5:19pm UTC](https://discuss.elastic.co/t/bulk-api-without-repetition-the-index-string-performance-optimisation/252831 "2020-10-21T17:19:06Z")

</div>

Hi, please is there a way how to optimise the bulk insert ? Having valueless strings {"index":{}} increases the bulk load and costs extra resources. this is the example but in our case we want to write huge amounts of…

---

## [How i can match and replace the log file data in logstash](https://discuss.elastic.co/t/how-i-can-match-and-replace-the-log-file-data-in-logstash/174059)

<div class="topic-metadata">

**Author:** [@Mac099](https://discuss.elastic.co/u/Mac099)\
**Replies:** 11\
**Last updated:** [March 29, 2019, 9:45am UTC](https://discuss.elastic.co/t/how-i-can-match-and-replace-the-log-file-data-in-logstash/174059 "2019-03-29T09:45:10Z")

</div>

input { beats { port =\> 5044 } } filter { grok { match=\>{'message'=\>'%{DATESTAMP:time} %{LOGLEVEL:level} '} mutate { add\_tag =\> "string in field" } } } output { elasticsearch { hosts =\> \["http://localhost:9…

---

## [Can't combine "order" with "size" in 0.90.0?](https://discuss.elastic.co/t/cant-combine-order-with-size-in-0-90-0/11790)

<div class="topic-metadata">

**Author:** [@Eric\_Jain](https://discuss.elastic.co/u/Eric_Jain)\
**Replies:** 11\
**Last updated:** [October 9, 2013, 12:32am UTC](https://discuss.elastic.co/t/cant-combine-order-with-size-in-0-90-0/11790 "2013-10-09T00:32:46Z")

</div>

I have a simple index with 4 docs containing a "tag" field, with the values "alpha", "beta", "delta" and "gamma", respectively. It appears that when I restrict the "size" to less than the total number of hits, the "o…

---

## [Different query results when using JDK8 and JDK7](https://discuss.elastic.co/t/different-query-results-when-using-jdk8-and-jdk7/20065)

<div class="topic-metadata">

**Author:** [@Umit\_Seren](https://discuss.elastic.co/u/Umit_Seren)\
**Replies:** 9\
**Last updated:** [October 4, 2014, 8:42am UTC](https://discuss.elastic.co/t/different-query-results-when-using-jdk8-and-jdk7/20065 "2014-10-04T08:42:19Z")

</div>

I have a weird problem when doing a simple query using different JDK versions with the same indexed data. I have 2 docker images based on the official dockerfiles ( http://dockerfile.github.io/#/elasticsearch). …

---

## [Microsoft SQL Connector not able to connect](https://discuss.elastic.co/t/microsoft-sql-connector-not-able-to-connect/362961)

<div class="topic-metadata">

**Author:** [@sebaV\_20](https://discuss.elastic.co/u/sebaV_20)\
**Replies:** 12\
**Last updated:** [May 21, 2025, 1:28pm UTC](https://discuss.elastic.co/t/microsoft-sql-connector-not-able-to-connect/362961 "2025-05-21T13:28:33Z")

</div>

Hello, So Basically what the title says. I´m trying to create a native connector for an Azure deployed Microsoft SQL Database and i´m not being able to connect to the db. All this in the Connectors tab. I have this con…

---

## [Json codec failed with data bigger then 4k size](https://discuss.elastic.co/t/json-codec-failed-with-data-bigger-then-4k-size/330687)

<div class="topic-metadata">

**Author:** [@arunporwal](https://discuss.elastic.co/u/arunporwal)\
**Replies:** 12\
**Last updated:** [May 3, 2023, 4:49am UTC](https://discuss.elastic.co/t/json-codec-failed-with-data-bigger-then-4k-size/330687 "2023-05-03T04:49:18Z")

</div>

I am trying to read the JSON files using logstash input plugin. For this I used codec as JSON, it is working fine until it encounters a file containing a size of more than 4k. It is giving a parsing error for this. I did…

[Previous page](https://discuss.elastic.co/top.md?page=233&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=235&per_page=50&period=all)
