# Top **URL:** https://discuss.elastic.co/top.md?page=235&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 236 --- ## [Question about use case: gmail-like "I can only see my own emails"?](https://discuss.elastic.co/t/question-about-use-case-gmail-like-i-can-only-see-my-own-emails/3903)
**Author:** [@Peter\_Van\_Dijck](https://discuss.elastic.co/u/Peter_Van_Dijck)\ **Replies:** 10\ **Last updated:** [February 10, 2011, 11:59am UTC](https://discuss.elastic.co/t/question-about-use-case-gmail-like-i-can-only-see-my-own-emails/3903 "2011-02-10T11:59:10Z")
Hi, newbie here. I have a question about a usecase. Evaluating using solr vs elasticsearch. The use case is this: we have many users, who each have their own list of objects they can search. Think Gmail. I should b… --- ## [JDBC river doesn't start after delete & recreate](https://discuss.elastic.co/t/jdbc-river-doesnt-start-after-delete-recreate/14755)
**Author:** [@Justin\_Doles](https://discuss.elastic.co/u/Justin_Doles)\ **Replies:** 11\ **Last updated:** [December 9, 2013, 5:05pm UTC](https://discuss.elastic.co/t/jdbc-river-doesnt-start-after-delete-recreate/14755 "2013-12-09T17:05:17Z")
I'm having an issue with JDBC rivers. I'm running ES 0.90.7 and JDBC river 2.2.3. I have a 3 node cluster: 1 w/no data (Windows) and 2 w/ data (Linux). I can create a simple river initially. { "type" : "jdb… --- ## [Json multiline codec is not working and messages are not getting parsed](https://discuss.elastic.co/t/json-multiline-codec-is-not-working-and-messages-are-not-getting-parsed/343172)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 16\ **Last updated:** [September 27, 2023, 10:44am UTC](https://discuss.elastic.co/t/json-multiline-codec-is-not-working-and-messages-are-not-getting-parsed/343172 "2023-09-27T10:44:41Z")
Hi Team, I an working on logstash json parser and messages are not getting parsed; any clue what could be wrong? Here are original messages \[ { "time": "12/Aug/2023:13:20:52 +0000", "source\_ip": "117.193.217.44",… --- ## [The maximum configured depth of 64 has been exceeded. Cannot read next JSON object](https://discuss.elastic.co/t/the-maximum-configured-depth-of-64-has-been-exceeded-cannot-read-next-json-object/378954)
**Author:** [@Nikos\_Levogiannis](https://discuss.elastic.co/u/Nikos_Levogiannis)\ **Replies:** 10\ **Last updated:** [June 14, 2025, 7:45am UTC](https://discuss.elastic.co/t/the-maximum-configured-depth-of-64-has-been-exceeded-cannot-read-next-json-object/378954 "2025-06-14T07:45:32Z")
I am trying to make a search request using the new ElasticsearchClient 8.18 (C# .net) with a high number of aggregations and I get the error : The maximum configured depth of 64 has been exceeded. Cannot read next JSON … --- ## [Snapshot questions](https://discuss.elastic.co/t/snapshot-questions/162253)
**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\ **Replies:** 10\ **Last updated:** [January 3, 2019, 12:43pm UTC](https://discuss.elastic.co/t/snapshot-questions/162253 "2019-01-03T12:43:32Z")
Hi, I would like to implement a snapshot policy but I have a question. Snapshots are incremental, so the first snapshot contains all datas, then the following contains the difference. If I delete the first snapshot, h… --- ## [Kafka Integration Installation Error - "Limit of total dimension fields \[16\] has been exceeded"](https://discuss.elastic.co/t/kafka-integration-installation-error-limit-of-total-dimension-fields-16-has-been-exceeded/339052)
**Author:** [@Moaath](https://discuss.elastic.co/u/Moaath)\ **Replies:** 9\ **Last updated:** [July 30, 2023, 6:46am UTC](https://discuss.elastic.co/t/kafka-integration-installation-error-limit-of-total-dimension-fields-16-has-been-exceeded/339052 "2023-07-30T06:46:29Z")
Hi Everyone, I am currently trying to install the Kafka integration via the Fleet UI in Kibana, but I've encountered an issue that I hope someone can shed some light on. The error message I'm receiving is as follows: E… --- ## [Not accept logs when beats pointing to logstash](https://discuss.elastic.co/t/not-accept-logs-when-beats-pointing-to-logstash/268859)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 9\ **Last updated:** [April 6, 2021, 4:58am UTC](https://discuss.elastic.co/t/not-accept-logs-when-beats-pointing-to-logstash/268859 "2021-04-06T04:58:52Z")
i have 3 beats winlogbeat (server os windows), filebeat and auditbeat (server os linux). when i pointing winlogbeat to logstash there's no problem to receive log. but when i pointing filebeat and auditbeat to logstash, … --- ## [Unnesting user\_agent fields](https://discuss.elastic.co/t/unnesting-user-agent-fields/173704)
**Author:** [@opfreehere](https://discuss.elastic.co/u/opfreehere)\ **Replies:** 11\ **Last updated:** [March 25, 2019, 11:00am UTC](https://discuss.elastic.co/t/unnesting-user-agent-fields/173704 "2019-03-25T11:00:06Z")
After using user\_agent processor, I am getting the results somewhat like this: "user\_agent" : { "patch" : "1", "major" : "5", "minor" : "1", "os" : "Android 5.1.1", "os\_minor" : "1", "os\_major" : "5", "name" : "A… --- ## [Profiling shows large cpu usage for scripts](https://discuss.elastic.co/t/profiling-shows-large-cpu-usage-for-scripts/4395)
**Author:** [@Paul\_Loy](https://discuss.elastic.co/u/Paul_Loy)\ **Replies:** 9\ **Last updated:** [May 13, 2011, 9:24pm UTC](https://discuss.elastic.co/t/profiling-shows-large-cpu-usage-for-scripts/4395 "2011-05-13T21:24:08Z")
Profiling our application we see that around 40% of our CPU used is in executing the script part of our customscorequery. The only script we have is "random()" in order to get a random list of results that match our… --- ## [Windows ETW logs (DNSServer Analytics logs) not getting ingested](https://discuss.elastic.co/t/windows-etw-logs-dnsserver-analytics-logs-not-getting-ingested/368606)
**Author:** [@suhasbhatt101](https://discuss.elastic.co/u/suhasbhatt101)\ **Replies:** 11\ **Last updated:** [March 20, 2025, 2:21pm UTC](https://discuss.elastic.co/t/windows-etw-logs-dnsserver-analytics-logs-not-getting-ingested/368606 "2025-03-20T14:21:38Z")
I am trying to ingest DNSServer Analytics logs to my ELK stack (V-8.14) but the logs are not getting ingested, below is the configurations i added in my elastic-agent.yml file: Trial 1: - type: etw id: etw-dnss… --- ## [Running Pipeline Manually](https://discuss.elastic.co/t/running-pipeline-manually/352777)
**Author:** [@dfir](https://discuss.elastic.co/u/dfir)\ **Replies:** 10\ **Last updated:** [February 7, 2024, 10:14pm UTC](https://discuss.elastic.co/t/running-pipeline-manually/352777 "2024-02-07T22:14:34Z")
Quick Question for all: When I am trying to run my pipeline for logstash do I execute pipelines.yml, or just start up logstash? Based on this Documentation I believe I should be starting up logstash " This file is for… --- ## [Logstash webhdfs output plugin AlreadyBeingCreatedException](https://discuss.elastic.co/t/logstash-webhdfs-output-plugin-alreadybeingcreatedexception/317887)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 10\ **Last updated:** [November 2, 2022, 1:20pm UTC](https://discuss.elastic.co/t/logstash-webhdfs-output-plugin-alreadybeingcreatedexception/317887 "2022-11-02T13:20:54Z")
Hello, I have created a webhdfc logstash configuaration file which will take file input and insert the data in hdfs through webhdfs output. sharing you the config file below. input { file { path =\> "C:/Users/user/… --- ## [Elasticsearch cluster resiliency and availability](https://discuss.elastic.co/t/elasticsearch-cluster-resiliency-and-availability/350033)
**Author:** [@artechkey](https://discuss.elastic.co/u/artechkey)\ **Replies:** 12\ **Last updated:** [January 2, 2024, 3:56pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-resiliency-and-availability/350033 "2024-01-02T15:56:48Z")
Hi, We are currently running ES on a 4 node cluster where 2 nodes are in DC 1 & 2 in DC 2. We have a third node in DC 1 with master-voting-only role. The n/w latency b/w DC 1 & DC 2 is negligible. DC 1 - 2 nodes (all r… --- ## [Sort is incorrect](https://discuss.elastic.co/t/sort-is-incorrect/349906)
**Author:** [@Binh\_Phan\_Thanh](https://discuss.elastic.co/u/Binh_Phan_Thanh)\ **Replies:** 12\ **Last updated:** [December 26, 2023, 10:45am UTC](https://discuss.elastic.co/t/sort-is-incorrect/349906 "2023-12-26T10:45:04Z")
My mapping: { "my\_index": { "mappings": { "properties": { "attributesRecommend": { "type": "text", "fields": { "keyword": { "type": "keyword", … --- ## [Java API](https://discuss.elastic.co/t/java-api/4496)
**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\ **Replies:** 12\ **Last updated:** [June 10, 2011, 3:42am UTC](https://discuss.elastic.co/t/java-api/4496 "2011-06-10T03:42:55Z")
Hi, I'm a newbie in the elasticsearch and trying to make simple test, create an index and the search for it, but i get 0 hits, here the sample: Node node = nodeBuilder().client(true).node(); Client client = no… --- ## [Filebeat to elastic/cloud not using defined index in yml config](https://discuss.elastic.co/t/filebeat-to-elastic-cloud-not-using-defined-index-in-yml-config/326216)
**Author:** [@tymercer](https://discuss.elastic.co/u/tymercer)\ **Replies:** 9\ **Last updated:** [February 22, 2023, 10:35pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-cloud-not-using-defined-index-in-yml-config/326216 "2023-02-22T22:35:07Z")
First, I am new to all of this and have next to no knowledge of how all of our systems were setup originally as I took this over when the person in charge of it left the company. ELK 6.8.12, Filebeats 6.4 (yes, old, it … --- ## [Just Pushed: IP (ipv4) address type](https://discuss.elastic.co/t/just-pushed-ip-ipv4-address-type/3485)
**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\ **Replies:** 9\ **Last updated:** [October 31, 2010, 8:31am UTC](https://discuss.elastic.co/t/just-pushed-ip-ipv4-address-type/3485 "2010-10-31T08:31:28Z")
Hi, Just pushed support ip address support (with auto detection): http://github.com/elasticsearch/elasticsearch/issues/issue/461 (as discussed in a previous) thread. Here is a simple test I do to have the p… --- ## [If I have ELK stack running on EC2. How can I make the ES as a cluster?](https://discuss.elastic.co/t/if-i-have-elk-stack-running-on-ec2-how-can-i-make-the-es-as-a-cluster/18917)
**Author:** [@vjbangis](https://discuss.elastic.co/u/vjbangis)\ **Replies:** 11\ **Last updated:** [August 3, 2014, 11:30pm UTC](https://discuss.elastic.co/t/if-i-have-elk-stack-running-on-ec2-how-can-i-make-the-es-as-a-cluster/18917 "2014-08-03T23:30:02Z")
If I have ELK stack running on EC2. How can I make the ES as a cluster? or I have to create another ELK stack again to make it as a cluster? TIA! -- You received this message because you are subscribed to the … --- ## [Kibana issue (6.8.1)](https://discuss.elastic.co/t/kibana-issue-6-8-1/192563)
**Author:** [@moti.mor](https://discuss.elastic.co/u/moti.mor)\ **Replies:** 10\ **Last updated:** [July 30, 2019, 7:37pm UTC](https://discuss.elastic.co/t/kibana-issue-6-8-1/192563 "2019-07-30T19:37:25Z")
Hi, Problem with kibana.. in both “stacked” and normal modes it appear as “stacked”: In my configuration line with 6% should be before 87% :blush: Please advise :slight\_smile: --- ## [River to elasticSearch based on TTL](https://discuss.elastic.co/t/river-to-elasticsearch-based-on-ttl/5707)
**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\ **Replies:** 10\ **Last updated:** [October 27, 2011, 4:53pm UTC](https://discuss.elastic.co/t/river-to-elasticsearch-based-on-ttl/5707 "2011-10-27T16:53:43Z")
Hi , If i got it right , with the new TTL feature , a timeStamp of creation would be tagged with each document. If this is right cant we create a river to elasticSearch based on this. That is each time we poll el… --- ## [Begin LogStash](https://discuss.elastic.co/t/begin-logstash/146585)
**Author:** [@marcos.vbp](https://discuss.elastic.co/u/marcos.vbp)\ **Replies:** 9\ **Last updated:** [August 30, 2018, 9:05pm UTC](https://discuss.elastic.co/t/begin-logstash/146585 "2018-08-30T21:05:07Z")
Hi All, I'm starting with logstash, and studying alone. I was trying to make a simple filter to display in kiban, for example the number of requests that an apache receives, I put two apaches of tests to show in a grap… --- ## [Wierd scoring](https://discuss.elastic.co/t/wierd-scoring/13673)
**Author:** [@kristofer](https://discuss.elastic.co/u/kristofer)\ **Replies:** 9\ **Last updated:** [September 20, 2013, 9:14pm UTC](https://discuss.elastic.co/t/wierd-scoring/13673 "2013-09-20T21:14:22Z")
Hello I'm currently building a search using elasticsearch and I'm getting some wierd results "query" : { "match\_phrase\_prefix" : { "name" : "agnes" } } gives "Carin Agneta Axeltorp" a higher score then "St. Agnes" … --- ## [Help troubleshoot this template please](https://discuss.elastic.co/t/help-troubleshoot-this-template-please/2329)
**Author:** [@abaykal](https://discuss.elastic.co/u/abaykal)\ **Replies:** 10\ **Last updated:** [June 10, 2015, 6:31pm UTC](https://discuss.elastic.co/t/help-troubleshoot-this-template-please/2329 "2015-06-10T18:31:34Z")
I am trying to make sure everything is indexed but the username is not analyzed. This is not working. what am i doing wrong? { "template" : "twitter", "settings" : { "index.refresh\_interval" : "5s" }, "mapp… --- ## [Anomaly detector query to find IPs that only visit a specific page?](https://discuss.elastic.co/t/anomaly-detector-query-to-find-ips-that-only-visit-a-specific-page/312647)
**Author:** [@parkerjthomas](https://discuss.elastic.co/u/parkerjthomas)\ **Replies:** 14\ **Last updated:** [August 29, 2022, 1:59pm UTC](https://discuss.elastic.co/t/anomaly-detector-query-to-find-ips-that-only-visit-a-specific-page/312647 "2022-08-29T13:59:53Z")
I am looking for a way to find IPs that are only hitting a specific page repeatedly to detect credential stuffing with an anomaly detector. I currently have a detector setup to look for 401 responses coming from visits … --- ## [Logstash tcp input CPU perfomance](https://discuss.elastic.co/t/logstash-tcp-input-cpu-perfomance/307759)
**Author:** [@perezdev](https://discuss.elastic.co/u/perezdev)\ **Replies:** 9\ **Last updated:** [June 22, 2022, 1:49pm UTC](https://discuss.elastic.co/t/logstash-tcp-input-cpu-perfomance/307759 "2022-06-22T13:49:26Z")
Hello, I have configured logstash using one tcp input as follows: input { #logs01 tcp { type =\> "logs" codec =\> "line" port =\> 9916 add\_field =\> { "event\_dataset" =\> "logs\_01" } } } With this co… --- ## [Elastic Search (Query)](https://discuss.elastic.co/t/elastic-search-query/5972)
**Author:** [@sweta\_k](https://discuss.elastic.co/u/sweta_k)\ **Replies:** 12\ **Last updated:** [December 21, 2011, 5:32pm UTC](https://discuss.elastic.co/t/elastic-search-query/5972 "2011-12-21T17:32:46Z")
What is the Query to Search a String in Elastic search , When i disable \_all and \_source Properties . --- ## [Filebeat elasticsearh](https://discuss.elastic.co/t/filebeat-elasticsearh/347077)
**Author:** [@VijayIQA](https://discuss.elastic.co/u/VijayIQA)\ **Replies:** 13\ **Last updated:** [November 17, 2023, 10:14am UTC](https://discuss.elastic.co/t/filebeat-elasticsearh/347077 "2023-11-17T10:14:04Z")
Hi Team, I have Elasticsearch database cluster with two nodes in docker. and Kibana configured. while adding filebeat getting an error. filebeat error log pasted here. {"@timestamp":"2023-11-14T04:19:07.634Z", "log.lev… --- ## [Enable user to generate API Key and access API](https://discuss.elastic.co/t/enable-user-to-generate-api-key-and-access-api/318695)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 9\ **Last updated:** [November 14, 2022, 2:43am UTC](https://discuss.elastic.co/t/enable-user-to-generate-api-key-and-access-api/318695 "2022-11-14T02:43:43Z")
Hello. We are running ELK 7.6.2 stack. I need to create a user and provide it access for API key generation along with API access. When I check in Kibana console it says "API keys not enabled in Elasticsearch" Please … --- ## [Does elastic remembers most recently indexed documents?](https://discuss.elastic.co/t/does-elastic-remembers-most-recently-indexed-documents/202815)
**Author:** [@Tinkerbell](https://discuss.elastic.co/u/Tinkerbell)\ **Replies:** 9\ **Last updated:** [October 23, 2019, 11:04am UTC](https://discuss.elastic.co/t/does-elastic-remembers-most-recently-indexed-documents/202815 "2019-10-23T11:04:08Z")
I have a requirement in which i need to update the indexed data. Based on the value from the recent document , i need to update the current document. Ex: similar to a counter. Can someone pour in some suggestions pleas… --- ## [Can anyone please help me how can i parse this firewall log?](https://discuss.elastic.co/t/can-anyone-please-help-me-how-can-i-parse-this-firewall-log/186599)
**Author:** [@deepanshu\_goel](https://discuss.elastic.co/u/deepanshu_goel)\ **Replies:** 9\ **Last updated:** [June 26, 2019, 12:09pm UTC](https://discuss.elastic.co/t/can-anyone-please-help-me-how-can-i-parse-this-firewall-log/186599 "2019-06-26T12:09:50Z")
date stamp timestamp(data)private IP \[public IP\]-\>\[public IP(client side)(protocol) -\>i am not able to understand the type of log and i am new in the field so kindly please help me to parse the data of this kind of log --- ## [Using document \_id](https://discuss.elastic.co/t/using-document-id/137885)
**Author:** [@ybegus](https://discuss.elastic.co/u/ybegus)\ **Replies:** 9\ **Last updated:** [June 29, 2018, 8:01pm UTC](https://discuss.elastic.co/t/using-document-id/137885 "2018-06-29T20:01:51Z")
When I insert document to index Is it necessary to set valid \_id for this document? I know that this document will not be updated in an index. --- ## [Logstash file shutdown](https://discuss.elastic.co/t/logstash-file-shutdown/219369)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 12\ **Last updated:** [February 17, 2020, 6:35am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369 "2020-02-17T06:35:15Z")
Logstash file is not starting getting this error please help --- ## [Unstructured data source](https://discuss.elastic.co/t/unstructured-data-source/186316)
**Author:** [@ashokchinna](https://discuss.elastic.co/u/ashokchinna)\ **Replies:** 12\ **Last updated:** [June 20, 2019, 9:47pm UTC](https://discuss.elastic.co/t/unstructured-data-source/186316 "2019-06-20T21:47:21Z")
I am trying to read data from an unstructured data source. What is the best filter to start with? Grok? Example:- The below log details should fall into one document. LogFile- 2019-06-17T00:00:01 ProcessId\[1234\] Tra… --- ## [0.90.8 released](https://discuss.elastic.co/t/0-90-8-released/14937)
**Author:** [@KevinKluge](https://discuss.elastic.co/u/KevinKluge)\ **Replies:** 9\ **Last updated:** [December 19, 2013, 10:50pm UTC](https://discuss.elastic.co/t/0-90-8-released/14937 "2013-12-19T22:50:09Z")
Elasticsearch 0.90.8 was just released. New features include an API for cluster stats and a "simple" query string function that is more accessible to end users. Download and release info: http://www.elasticsearch.o… --- ## [ES: How to stop servers in a cluster](https://discuss.elastic.co/t/es-how-to-stop-servers-in-a-cluster/5325)
**Author:** [@lalit\_mishra](https://discuss.elastic.co/u/lalit_mishra)\ **Replies:** 11\ **Last updated:** [September 11, 2011, 3:53am UTC](https://discuss.elastic.co/t/es-how-to-stop-servers-in-a-cluster/5325 "2011-09-11T03:53:44Z")
Hi Shay, Cntrl-C options is currently not available in ES(new version) so the best way to stop elastic search using Shutdown api ? or is there any other way to stop ES (server or cluster) other than making HTTP reque… --- ## [Setup a Machine Learning rule is not active](https://discuss.elastic.co/t/setup-a-machine-learning-rule-is-not-active/378170)
**Author:** [@nzeland149](https://discuss.elastic.co/u/nzeland149)\ **Replies:** 25\ **Last updated:** [May 22, 2025, 2:03pm UTC](https://discuss.elastic.co/t/setup-a-machine-learning-rule-is-not-active/378170 "2025-05-22T14:03:26Z")
i have configured this rule but status always ok not active what can i do to fix this --- ## [Highly variable query performance with ES 1.3.2 (filter + aggregations)](https://discuss.elastic.co/t/highly-variable-query-performance-with-es-1-3-2-filter-aggregations/19801)
**Author:** [@craigwi](https://discuss.elastic.co/u/craigwi)\ **Replies:** 10\ **Last updated:** [September 22, 2014, 5:44pm UTC](https://discuss.elastic.co/t/highly-variable-query-performance-with-es-1-3-2-filter-aggregations/19801 "2014-09-22T17:44:44Z")
Hello, Our team recently upgraded from ES 1.1.2 to 1.3.2 and are happy with the improvements ... except for one perplexing situation. We are running on Azure worker roles with Oracle Java 1.8u11 and using the … --- ## [Facing issue with occasional slow queries on 5 node ES cluster](https://discuss.elastic.co/t/facing-issue-with-occasional-slow-queries-on-5-node-es-cluster/269228)
**Author:** [@Vikash](https://discuss.elastic.co/u/Vikash)\ **Replies:** 11\ **Last updated:** [April 7, 2021, 9:04pm UTC](https://discuss.elastic.co/t/facing-issue-with-occasional-slow-queries-on-5-node-es-cluster/269228 "2021-04-07T21:04:57Z")
I have a 5 node ES cluster and it's performing well on an average but sometime 0.5% of the queries are taking 1 sec to respond. I have tried all the possible solutions/suggestions, not sure what is causing issue. Overvi… --- ## [Palo Alto Logs Not Parsing Properly with panw Module in Filebeat](https://discuss.elastic.co/t/palo-alto-logs-not-parsing-properly-with-panw-module-in-filebeat/371269)
**Author:** [@ssovee](https://discuss.elastic.co/u/ssovee)\ **Replies:** 9\ **Last updated:** [December 4, 2024, 7:01am UTC](https://discuss.elastic.co/t/palo-alto-logs-not-parsing-properly-with-panw-module-in-filebeat/371269 "2024-12-04T07:01:47Z")
Hi Team, I am using Palo Alto VM version 11.0.1 and forwarding syslogs to Elasticsearch through Filebeat using the panw module. While I can see the logs in Kibana, they are not being parsed properly. All the traffic log… --- ## [Index Allocation based on attribute not working](https://discuss.elastic.co/t/index-allocation-based-on-attribute-not-working/248147)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 9\ **Last updated:** [September 11, 2020, 6:25am UTC](https://discuss.elastic.co/t/index-allocation-based-on-attribute-not-working/248147 "2020-09-11T06:25:38Z")
Hi! Can someone pls explain to me why some shards dont get relocated to the correct node in my cluster? I want no shard on node-4 at the moment. Infos: GET \_cat/nodeattrs node-4 172.21.2.174 172.21.2.174 ml.machine\_m… --- ## [Question about Optimized Scalar Quantization](https://discuss.elastic.co/t/question-about-optimized-scalar-quantization/379969)
**Author:** [@yli](https://discuss.elastic.co/u/yli)\ **Replies:** 22\ **Last updated:** [July 25, 2025, 1:45pm UTC](https://discuss.elastic.co/t/question-about-optimized-scalar-quantization/379969 "2025-07-25T13:45:58Z")
Hi, Good day, We are planning to use Elasticsearch for vector search in our application, and we have a need to check the feasibility to remove the storage of original floating point vectors from Lucene which Elasticsear… --- ## [Process monitor](https://discuss.elastic.co/t/process-monitor/352026)
**Author:** [@Gadapa\_Vasundhara](https://discuss.elastic.co/u/Gadapa_Vasundhara)\ **Replies:** 13\ **Last updated:** [February 8, 2024, 3:59pm UTC](https://discuss.elastic.co/t/process-monitor/352026 "2024-02-08T15:59:25Z")
Hi Team, I need some help on process monitor ex: datamonitor.exe process from logstash which plugin i need to use. wmi plugin is not working. and more over we are getting the status of process.state as running only.… --- ## [Logstash and Kibana as coordinating nodes - Does it makes senses?](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 9\ **Last updated:** [August 18, 2020, 10:41am UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045 "2020-08-18T10:41:00Z")
Hello ! In the following setup, does it makes sense to configure Logstash-Central and Kibana as coordinating nodes ? : Syslog/beats =\> Logstash-satellite =\> Kafka \<= Logstash-central =\> Elasticsearch \<= Kibana If this… --- ## [Optimizing number of shards](https://discuss.elastic.co/t/optimizing-number-of-shards/4830)
**Author:** [@Anurag\_Phadke](https://discuss.elastic.co/u/Anurag_Phadke)\ **Replies:** 9\ **Last updated:** [July 11, 2011, 1:10am UTC](https://discuss.elastic.co/t/optimizing-number-of-shards/4830 "2011-07-11T01:10:53Z")
We are indexing about 3m documents / day (20kb/doc), for a total of 90-days with 1-replica. Each day corresponds to a new index, thereby creating 90 indexes. In addition, each index uses a custom mapping, this mapping… --- ## [Increment custom field ID on certain event using logstash conf file](https://discuss.elastic.co/t/increment-custom-field-id-on-certain-event-using-logstash-conf-file/317839)
**Author:** [@Poongkuyil\_Muse](https://discuss.elastic.co/u/Poongkuyil_Muse)\ **Replies:** 10\ **Last updated:** [November 17, 2022, 5:48am UTC](https://discuss.elastic.co/t/increment-custom-field-id-on-certain-event-using-logstash-conf-file/317839 "2022-11-17T05:48:32Z")
Problem: I want to increment trap\_id on every process.php request. but in my case, trap\_id is always 0. I dont know why. Please help me My log file is in csv format. I am trying to fetch the periodical logs of a single … --- ## [Shard Level Allocation Filtering](https://discuss.elastic.co/t/shard-level-allocation-filtering/195621)
**Author:** [@eightnoteight](https://discuss.elastic.co/u/eightnoteight)\ **Replies:** 9\ **Last updated:** [September 10, 2019, 5:05am UTC](https://discuss.elastic.co/t/shard-level-allocation-filtering/195621 "2019-09-10T05:05:20Z")
Hey, I'm thinking of working on individual shard level allocation filtering settings of a particular index rather than the entire index's shard allocation filtering. Basically, I want to do manual shard level allocation… --- ## [Changing node and cluster name Version: 1.1.1](https://discuss.elastic.co/t/changing-node-and-cluster-name-version-1-1-1/17399)
**Author:** [@Francesco\_Audisio](https://discuss.elastic.co/u/Francesco_Audisio)\ **Replies:** 9\ **Last updated:** [May 8, 2014, 3:40pm UTC](https://discuss.elastic.co/t/changing-node-and-cluster-name-version-1-1-1/17399 "2014-05-08T15:40:56Z")
Hi all, I am a beginner with Marvel, and I already meet a first difficulty =) as I do to change and to assign with IP adress of the pc the name of the node with this file: elasticsearch.yml because inside this file … --- ## [Custom Score Query not working in elasticsearch-0.90.3](https://discuss.elastic.co/t/custom-score-query-not-working-in-elasticsearch-0-90-3/15505)
**Author:** [@dark\_shadow](https://discuss.elastic.co/u/dark_shadow)\ **Replies:** 9\ **Last updated:** [January 31, 2014, 5:06pm UTC](https://discuss.elastic.co/t/custom-score-query-not-working-in-elasticsearch-0-90-3/15505 "2014-01-31T17:06:03Z")
Hi, I'm facing an issue in Elasticsearch-0.90.3 in my java code. I'm writing following query: String script = "\_score \* (doc\['po'\].empty ? 1 : doc\['po'\].value == 0.0 ? 1 : doc\['po'\].value)"; QueryBuild… --- ## [Adding new fields from timestamp nvarchar(max) with grok filter in logstash](https://discuss.elastic.co/t/adding-new-fields-from-timestamp-nvarchar-max-with-grok-filter-in-logstash/323645)
**Author:** [@Dor\_Steinberg](https://discuss.elastic.co/u/Dor_Steinberg)\ **Replies:** 12\ **Last updated:** [January 22, 2023, 9:57am UTC](https://discuss.elastic.co/t/adding-new-fields-from-timestamp-nvarchar-max-with-grok-filter-in-logstash/323645 "2023-01-22T09:57:40Z")
hey everyone, i want to create 2 new fields (as month, year) from an existing timestamp field that comes from a json filter (payload) when the timestamp field type is nvarchar(max) I tried going in several directions … --- ## [Whether to allow the profile to be opened on every query request](https://discuss.elastic.co/t/whether-to-allow-the-profile-to-be-opened-on-every-query-request/263540)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 12\ **Last updated:** [February 8, 2021, 7:05am UTC](https://discuss.elastic.co/t/whether-to-allow-the-profile-to-be-opened-on-every-query-request/263540 "2021-02-08T07:05:29Z")
I want to turn on profile for each elasticsearch query request in my system, so that I can get the profile results to print the logs, combined with traceId, I can get what the reason for each slow request is, but I am wo… [Previous page](https://discuss.elastic.co/top.md?page=234&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=236&per_page=50&period=all)