# Top **URL:** https://discuss.elastic.co/top.md?page=237&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 238 --- ## [Anyone have issues with node communication in a cluster?](https://discuss.elastic.co/t/anyone-have-issues-with-node-communication-in-a-cluster/3149)
**Author:** [@Samuel\_Doyle](https://discuss.elastic.co/u/Samuel_Doyle)\ **Replies:** 12\ **Last updated:** [July 26, 2010, 12:43am UTC](https://discuss.elastic.co/t/anyone-have-issues-with-node-communication-in-a-cluster/3149 "2010-07-26T00:43:37Z")
I am testing in a staging environment with several servers but have unable to successfully get elastic search to recognize each peer. Multicast is enabled and being used by other parts of our application. I have also … --- ## [Elastic Endpoint 8.13.0 constantly crashing on Server 2022](https://discuss.elastic.co/t/elastic-endpoint-8-13-0-constantly-crashing-on-server-2022/356471)
**Author:** [@twilson](https://discuss.elastic.co/u/twilson)\ **Replies:** 11\ **Last updated:** [April 2, 2024, 4:49pm UTC](https://discuss.elastic.co/t/elastic-endpoint-8-13-0-constantly-crashing-on-server-2022/356471 "2024-04-02T16:49:59Z")
After upgrading from 8.12.1 to 8.13.0 the endpoint service on Windows Server 2022 machines is constantly crashing and restarting. This is not happening on Server 2016 or 2019 machines. The agent output is to elasticsea… --- ## [Is it possible to configure filters that use boolean logic for SearchProvider?](https://discuss.elastic.co/t/is-it-possible-to-configure-filters-that-use-boolean-logic-for-searchprovider/314352)
**Author:** [@Beratna](https://discuss.elastic.co/u/Beratna)\ **Replies:** 9\ **Last updated:** [September 15, 2022, 5:50pm UTC](https://discuss.elastic.co/t/is-it-possible-to-configure-filters-that-use-boolean-logic-for-searchprovider/314352 "2022-09-15T17:50:52Z")
Hi there, I'm currently using App Search with search-ui react library. I'm looking for a way to apply boolean logic to the filters inside my searchQuery config. Let's say I have 10 documents in my search engine. Each… --- ## [What is the event hook to know when the dashboard dark theme changes?](https://discuss.elastic.co/t/what-is-the-event-hook-to-know-when-the-dashboard-dark-theme-changes/213927)
**Author:** [@brandtj](https://discuss.elastic.co/u/brandtj)\ **Replies:** 9\ **Last updated:** [January 6, 2020, 9:18pm UTC](https://discuss.elastic.co/t/what-is-the-event-hook-to-know-when-the-dashboard-dark-theme-changes/213927 "2020-01-06T21:18:03Z")
I can't seem to find how to register a plugin to watch for the dark theme changing on a dashboard. --- ## [Kibana ML](https://discuss.elastic.co/t/kibana-ml/159080)
**Author:** [@apremgeorge](https://discuss.elastic.co/u/apremgeorge)\ **Replies:** 9\ **Last updated:** [December 3, 2018, 4:15pm UTC](https://discuss.elastic.co/t/kibana-ml/159080 "2018-12-03T16:15:12Z")
i am using kibana 6.5, in machine learning i have uploaded a time series data, one column is date and other is currency value, while indexing i have selected the date column as time filed, but showing error as index patt… --- ## [License Updating in X-pack](https://discuss.elastic.co/t/license-updating-in-x-pack/132444)
**Author:** [@raman2.0](https://discuss.elastic.co/u/raman2.0)\ **Replies:** 10\ **Last updated:** [May 18, 2018, 9:53am UTC](https://discuss.elastic.co/t/license-updating-in-x-pack/132444 "2018-05-18T09:53:16Z")
Where should I use this command to upgrade my licencse? curl -XPUT -u elastic 'http://\:\/\_xpack/license' -H "Content-Type: application/json" -d @license.json --- ## [Kibana Dashboard: Create line graph from a list of floats](https://discuss.elastic.co/t/kibana-dashboard-create-line-graph-from-a-list-of-floats/373131)
**Author:** [@Pasjonsfrukt](https://discuss.elastic.co/u/Pasjonsfrukt)\ **Replies:** 17\ **Last updated:** [January 20, 2025, 3:48pm UTC](https://discuss.elastic.co/t/kibana-dashboard-create-line-graph-from-a-list-of-floats/373131 "2025-01-20T15:48:06Z")
Hi, I have a list of floats that I am passing to ES/Kibana through the Python API. I am able to see the document in Discover, and the list is visible there as expected. Now, I want to create a graph that iterates over … --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/350280)
**Author:** [@MD\_Rezaul\_Karim](https://discuss.elastic.co/u/MD_Rezaul_Karim)\ **Replies:** 10\ **Last updated:** [January 3, 2024, 11:11am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/350280 "2024-01-03T11:11:08Z")
Hi, I am getting following error. anyone pls. help me .. Jan 03 13:21:50 siem kibana\[10792\]: FATAL Error: Unable to complete saved object migrations for the \[.kibana\_task\_manager\] index. Please check the health of you… --- ## [KIbana Index always reset suddenly](https://discuss.elastic.co/t/kibana-index-always-reset-suddenly/256298)
**Author:** [@Junedi\_Rajagukguk](https://discuss.elastic.co/u/Junedi_Rajagukguk)\ **Replies:** 10\ **Last updated:** [November 24, 2020, 4:28am UTC](https://discuss.elastic.co/t/kibana-index-always-reset-suddenly/256298 "2020-11-24T04:28:42Z")
Hello, i want to ask why my data in kibana always reset with randomly time. ( i noticed this when i open discover, the data date always reset) i've been searching for long time and yet i still don't get the solution. … --- ## [Help on merging 2 indices in production](https://discuss.elastic.co/t/help-on-merging-2-indices-in-production/182356)
**Author:** [@vijaykriishna](https://discuss.elastic.co/u/vijaykriishna)\ **Replies:** 10\ **Last updated:** [May 23, 2019, 2:32pm UTC](https://discuss.elastic.co/t/help-on-merging-2-indices-in-production/182356 "2019-05-23T14:32:58Z")
Hi i have 2 indices being used by an app which is in production. Now, i need to merge these 2 indices so that there is minimal code change or activity to be done from my end. The activity should also not break the exist… --- ## [On Kibana web interface l doesn't appear result of logstash](https://discuss.elastic.co/t/on-kibana-web-interface-l-doesnt-appear-result-of-logstash/260793)
**Author:** [@Tabriz](https://discuss.elastic.co/u/Tabriz)\ **Replies:** 13\ **Last updated:** [January 12, 2021, 12:36pm UTC](https://discuss.elastic.co/t/on-kibana-web-interface-l-doesnt-appear-result-of-logstash/260793 "2021-01-12T12:36:29Z")
What l need to do Thanks --- ## [Fields count in elasticsearch indice](https://discuss.elastic.co/t/fields-count-in-elasticsearch-indice/258138)
**Author:** [@malcolm666](https://discuss.elastic.co/u/malcolm666)\ **Replies:** 9\ **Last updated:** [December 10, 2020, 6:42am UTC](https://discuss.elastic.co/t/fields-count-in-elasticsearch-indice/258138 "2020-12-10T06:42:52Z")
Hi. I have elasticsearch, Grafana and some beats deployed in k8s. Version is 7.6.1. There are some fields from my configuration: # env values - env: - name: cluster.name value: k8s-logs … --- ## [Queries regarding the rivers implementation](https://discuss.elastic.co/t/queries-regarding-the-rivers-implementation/3383)
**Author:** [@Mahendra\_M](https://discuss.elastic.co/u/Mahendra_M)\ **Replies:** 9\ **Last updated:** [October 2, 2010, 3:52am UTC](https://discuss.elastic.co/t/queries-regarding-the-rivers-implementation/3383 "2010-10-02T03:52:55Z")
Hi, I was going through the elasticsearch code and docs (couchdb river) and had some doubts. (I am still in the process of setting up ES 0.11). 1. The couchdb river plugin provides extra settings for "index" \[1\].… --- ## [Transform is only partially updated](https://discuss.elastic.co/t/transform-is-only-partially-updated/351935)
**Author:** [@Doron\_Abramovich](https://discuss.elastic.co/u/Doron_Abramovich)\ **Replies:** 9\ **Last updated:** [January 31, 2024, 9:54am UTC](https://discuss.elastic.co/t/transform-is-only-partially-updated/351935 "2024-01-31T09:54:19Z")
Hi everyone, I have an transform that suppose to track the latest doc of some index. The transform I made is based on field called "etl\_id" and for some reason it is updated only for few "etl\_id" but not all of them, h… --- ## [Elastic search configuration for windows server](https://discuss.elastic.co/t/elastic-search-configuration-for-windows-server/137378)
**Author:** [@saineshwar\_bageri](https://discuss.elastic.co/u/saineshwar_bageri)\ **Replies:** 9\ **Last updated:** [July 2, 2018, 8:43am UTC](https://discuss.elastic.co/t/elastic-search-configuration-for-windows-server/137378 "2018-07-02T08:43:16Z")
If I have a data of 20 Million and I want to push into elastic search single instance. what will be the configuration of the server, I will be using windows server. Does single instance is enough. Creating Elasticsearc… --- ## [Terms facet all\_terms does not work](https://discuss.elastic.co/t/terms-facet-all-terms-does-not-work/6093)
**Author:** [@Mustafa\_Sener](https://discuss.elastic.co/u/Mustafa_Sener)\ **Replies:** 9\ **Last updated:** [December 12, 2011, 2:01pm UTC](https://discuss.elastic.co/t/terms-facet-all-terms-does-not-work/6093 "2011-12-12T14:01:46Z")
Hi, I want to get all terms of a field. For this purpose I used all\_terms property in terms facet. However, it does not work. In my test I had 1000 distinct terms for a field. However, when I executed terms facet with… --- ## [JSON Filter Errors help](https://discuss.elastic.co/t/json-filter-errors-help/294830)
**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Replies:** 10\ **Last updated:** [January 20, 2022, 11:03am UTC](https://discuss.elastic.co/t/json-filter-errors-help/294830 "2022-01-20T11:03:38Z")
Hi All, I'm trying to run the JSON filter on this input with continual errors. Any suggestions on how i do it please? Thanks {"host":"192.168.221.11","message":"HAL GetChassisSlot called from LACPD\_USER(timeout=3000 … --- ## ["Wide" cluster](https://discuss.elastic.co/t/wide-cluster/137603)
**Author:** [@LesioS](https://discuss.elastic.co/u/LesioS)\ **Replies:** 10\ **Last updated:** [June 27, 2018, 12:16pm UTC](https://discuss.elastic.co/t/wide-cluster/137603 "2018-06-27T12:16:09Z")
I wonder if multinode cluster has any limitations with geographical localization of nodes (mainly master). Is it possible (and efficient) to install 3 master nodes in e.g London, NY and Sydney respectively and connect th… --- ## [Suggestion problem after upgrading to elasticsearch 1.0.0](https://discuss.elastic.co/t/suggestion-problem-after-upgrading-to-elasticsearch-1-0-0/15829)
**Author:** [@Zhihai](https://discuss.elastic.co/u/Zhihai)\ **Replies:** 10\ **Last updated:** [February 20, 2014, 1:31pm UTC](https://discuss.elastic.co/t/suggestion-problem-after-upgrading-to-elasticsearch-1-0-0/15829 "2014-02-20T13:31:44Z")
Hi After upgrading to elasticsearch 1.0.0, I got a suggestion search error: RemoteTransportException\[\[data98\]\[inet\[/172.28.96.98:9300\]\]\[search/phase/query\]\]; nested: IllegalStateException\[TokenStream contract vi… --- ## [Elasticsearch thoughts; also, a bug](https://discuss.elastic.co/t/elasticsearch-thoughts-also-a-bug/4134)
**Author:** [@Antonio\_Lobato](https://discuss.elastic.co/u/Antonio_Lobato)\ **Replies:** 10\ **Last updated:** [March 22, 2011, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-thoughts-also-a-bug/4134 "2011-03-22T11:58:10Z")
Hey all. I just wanted to share my experiences with elasticsearch on a 10 node cluster and my thoughts. I've had a lot of fun using it, and will make heavy use of it in the future, :) http://blog.jinked.com/posts/… --- ## [Billing Insane ECU for learning Elastic Serverless instance](https://discuss.elastic.co/t/billing-insane-ecu-for-learning-elastic-serverless-instance/383973)
**Author:** [@Bhaskar\_Reddy](https://discuss.elastic.co/u/Bhaskar_Reddy)\ **Replies:** 21\ **Last updated:** [December 12, 2025, 4:21pm UTC](https://discuss.elastic.co/t/billing-insane-ecu-for-learning-elastic-serverless-instance/383973 "2025-12-12T16:21:10Z")
Details: I recently provisioned an Elastic Serverless instance on GCP (asia-south1) purely for learning and experimentation. My usage has been extremely minimal: Only one record stored in a single index. At most o… --- ## [Elasticsearch as Logstash output](https://discuss.elastic.co/t/elasticsearch-as-logstash-output/172256)
**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\ **Replies:** 13\ **Last updated:** [March 14, 2019, 5:26pm UTC](https://discuss.elastic.co/t/elasticsearch-as-logstash-output/172256 "2019-03-14T17:26:14Z")
Instead of having winlogbeat produces daily index, we can create separate index for separate winlogbeat clientlogs? Or any other idea? --- ## [Error Benchmarking AWS Managed Elasticsearch Cluster (version 7.10) using esrally](https://discuss.elastic.co/t/error-benchmarking-aws-managed-elasticsearch-cluster-version-7-10-using-esrally/361031)
**Author:** [@Peter\_Eskandar](https://discuss.elastic.co/u/Peter_Eskandar)\ **Replies:** 11\ **Last updated:** [June 9, 2024, 6:13pm UTC](https://discuss.elastic.co/t/error-benchmarking-aws-managed-elasticsearch-cluster-version-7-10-using-esrally/361031 "2024-06-09T18:13:17Z")
I'm attempting to benchmark an AWS Managed Elasticsearch Cluster (version: 7.10) using esrally, but I'm encountering the following error: \_\_\_\_ \_\_\_\_ / \_\_ \\\_\_\_\_ \_/ / /\_ \_\_ / /\_/ / \_\_ \`/ / / / / / / \_, \_/… --- ## [New index not created by ingestion pipeline](https://discuss.elastic.co/t/new-index-not-created-by-ingestion-pipeline/374018)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 19\ **Last updated:** [February 3, 2025, 10:24pm UTC](https://discuss.elastic.co/t/new-index-not-created-by-ingestion-pipeline/374018 "2025-02-03T22:24:06Z")
Hi I am using elastic-agent in k8s cluster with kubernetes integration. I have added a custom pipeline for kubernetes container logs to re-route all logs from containers in a specific namespace. The following is the … --- ## [Regarding Container Input](https://discuss.elastic.co/t/regarding-container-input/339707)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 14\ **Last updated:** [August 3, 2023, 1:06pm UTC](https://discuss.elastic.co/t/regarding-container-input/339707 "2023-08-03T13:06:17Z")
Hi, I see that combine\_partial is not a parameter for the container input. Does the input now automatically handle docker's 16kb message limit? Thx D --- ## [Copy contents of one field to same field of another row if certain condition matches](https://discuss.elastic.co/t/copy-contents-of-one-field-to-same-field-of-another-row-if-certain-condition-matches/308339)
**Author:** [@Ashutosh\_Vaidya](https://discuss.elastic.co/u/Ashutosh_Vaidya)\ **Replies:** 14\ **Last updated:** [July 20, 2022, 5:20am UTC](https://discuss.elastic.co/t/copy-contents-of-one-field-to-same-field-of-another-row-if-certain-condition-matches/308339 "2022-07-20T05:20:07Z")
I need to copy contents of “Service” field from No. 15256 into the :path field of No.15257 if “Stream\_Identifier” of both lines in 15256 and 15257 are matching. Kindly suggest how to get this done in the conf file of lo… --- ## [Sparse Vectors](https://discuss.elastic.co/t/sparse-vectors/366856)
**Author:** [@Harsh\_Sonaiya](https://discuss.elastic.co/u/Harsh_Sonaiya)\ **Replies:** 18\ **Last updated:** [September 20, 2024, 3:30pm UTC](https://discuss.elastic.co/t/sparse-vectors/366856 "2024-09-20T15:30:53Z")
Is there a way to create index with sparse vectors and insert sparse vectors --- ## [Message not fully read and TransportShardReplicationOperationAction](https://discuss.elastic.co/t/message-not-fully-read-and-transportshardreplicationoperationaction/10933)
**Author:** [@Germain\_Maurice](https://discuss.elastic.co/u/Germain_Maurice)\ **Replies:** 9\ **Last updated:** [March 11, 2013, 10:19am UTC](https://discuss.elastic.co/t/message-not-fully-read-and-transportshardreplicationoperationaction/10933 "2013-03-11T10:19:09Z")
Hello everybody, Since several days i have regularly this message : \[2013-02-27 17:26:42,001\]\[WARN \]\[transport.netty \] \[node1\] Message not fully read (response) for \[19644702\] handler org.elasticsearch… --- ## [Get an unique register in a block of traces](https://discuss.elastic.co/t/get-an-unique-register-in-a-block-of-traces/165020)
**Author:** [@Viti](https://discuss.elastic.co/u/Viti)\ **Replies:** 12\ **Last updated:** [January 22, 2019, 12:58pm UTC](https://discuss.elastic.co/t/get-an-unique-register-in-a-block-of-traces/165020 "2019-01-22T12:58:49Z")
Hello I need to get an unique register of a block of traces. For example I have the next block of traces: 2019-01-15 22:00:24,2534181078938 ERROR - ID\_TRAZA\_0001 \* FAIL\_1 \* CODE111 \* Error 1 2019-01-15 22:00:24,253418… --- ## [Fail to install elasticsearch-8.2.0 on Ubuntu machine](https://discuss.elastic.co/t/fail-to-install-elasticsearch-8-2-0-on-ubuntu-machine/304257)
**Author:** [@namespace-Pt](https://discuss.elastic.co/u/namespace-Pt)\ **Replies:** 10\ **Last updated:** [May 10, 2022, 5:26am UTC](https://discuss.elastic.co/t/fail-to-install-elasticsearch-8-2-0-on-ubuntu-machine/304257 "2022-05-10T05:26:47Z")
I downloaded the .tar.gz file on a Ubuntu 16.04.1 LTS machine, and shasum output OK. After unzipping the file and running ./bin/elasticsearch, the following error happens: \[0.001s\]\[warning\]\[os,container\] Duplicate cpuse… --- ## [If and problem](https://discuss.elastic.co/t/if-and-problem/230222)
**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\ **Replies:** 10\ **Last updated:** [April 29, 2020, 5:16pm UTC](https://discuss.elastic.co/t/if-and-problem/230222 "2020-04-29T17:16:50Z")
I have an erreur if use this condition in logstsh if \[job\] == "MNNATY0P02" and \[statut\] == "OK" { mutate { add\_field =\> { "statut\_globale" =\> "1" } } } --- ## [Release with Lucene 4.1.x?](https://discuss.elastic.co/t/release-with-lucene-4-1-x/10504)
**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\ **Replies:** 10\ **Last updated:** [January 30, 2013, 9:05am UTC](https://discuss.elastic.co/t/release-with-lucene-4-1-x/10504 "2013-01-30T09:05:45Z")
Hi, is there any estimate about when we can expect ES release with Lucene 4.1? Is it in terms of 3-4 weeks or more? Regards, Lukas --- ## [Logstash log repeated acquisition](https://discuss.elastic.co/t/logstash-log-repeated-acquisition/347821)
**Author:** [@kubo\_Smith](https://discuss.elastic.co/u/kubo_Smith)\ **Replies:** 14\ **Last updated:** [December 4, 2023, 7:34am UTC](https://discuss.elastic.co/t/logstash-log-repeated-acquisition/347821 "2023-12-04T07:34:16Z")
My log is like this: \[23/Nov/2023:14:12:37 +0800\] | gateway | \[http\] | 195.161.250.29 | POST /gateway/xxx HTTP/1.1 | 9090 | 200 | 182 | sss67jhsd | 0 | gateway | - | - | - | - | Java/1.8.0\_362 Logstash(version: 7.4.2)… --- ## [Can I just install the latest ES 7.x in my case?](https://discuss.elastic.co/t/can-i-just-install-the-latest-es-7-x-in-my-case/271684)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 9\ **Last updated:** [May 2, 2021, 12:34am UTC](https://discuss.elastic.co/t/can-i-just-install-the-latest-es-7-x-in-my-case/271684 "2021-05-02T00:34:24Z")
I've asked and talk about this on a few threads, but want to dial this in a bit more... My situation... We currently are running on ES 5.5.1 (Cluster Environment) on Ubuntu 16.04. Recently, we attempted to upgrade the… --- ## [Elasticsearch with logstash tuning](https://discuss.elastic.co/t/elasticsearch-with-logstash-tuning/169788)
**Author:** [@fadihaddad](https://discuss.elastic.co/u/fadihaddad)\ **Replies:** 9\ **Last updated:** [February 26, 2019, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-with-logstash-tuning/169788 "2019-02-26T10:14:20Z")
hello, i have been using configuring logstash for tuning and i need help. i set the JVM heap of elasticsearch to 8gb and logstash JVM heap to 6gb my server has 4 cpus, 4 cores each 2.2ghz and 16gb RAM. i set the number… --- ## [Filtering question](https://discuss.elastic.co/t/filtering-question/163241)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 10\ **Last updated:** [January 8, 2019, 4:07pm UTC](https://discuss.elastic.co/t/filtering-question/163241 "2019-01-08T16:07:23Z")
I have the following output, as viewed in Kibana: { "\_index": "filebeat-6.5.4-2019.01.07", "\_type": "doc", "\_id": "KoIlKWgBCwfgisRVoVxm", "\_version": 1, "\_score": null, "\_source": { "offset": 159112, "prospecto… --- ## [I m running logstash in a container](https://discuss.elastic.co/t/i-m-running-logstash-in-a-container/342564)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 9\ **Last updated:** [September 8, 2023, 9:07am UTC](https://discuss.elastic.co/t/i-m-running-logstash-in-a-container/342564 "2023-09-08T09:07:26Z")
Why does this runs pipelines.yml. while passing the configuration using -f. I use startup.sh which in turn calls the /usr/share/logstash/bin/logstash -f /usr/share/logstash/conf.d/ -w 2 Within the container I see 2 pro… --- ## [Historical (Past) Data Ingestion in Time Series Data Stream](https://discuss.elastic.co/t/historical-past-data-ingestion-in-time-series-data-stream/379584)
**Author:** [@rubayetahmed314](https://discuss.elastic.co/u/rubayetahmed314)\ **Replies:** 14\ **Last updated:** [June 29, 2025, 6:04pm UTC](https://discuss.elastic.co/t/historical-past-data-ingestion-in-time-series-data-stream/379584 "2025-06-29T18:04:34Z")
Is it possible to insert historical (past) data into a Time Series Data Stream (TSDS) of Elasticsearch? To be more clear, suppose, I want to ingest NYC Taxi Trip Data from Year 2009 to 2024 in a time-series data stream. … --- ## [How to enable/hide not necessary k8s pod metrics with metricbeat?](https://discuss.elastic.co/t/how-to-enable-hide-not-necessary-k8s-pod-metrics-with-metricbeat/329437)
**Author:** [@Swathi12](https://discuss.elastic.co/u/Swathi12)\ **Replies:** 11\ **Last updated:** [April 13, 2023, 9:26am UTC](https://discuss.elastic.co/t/how-to-enable-hide-not-necessary-k8s-pod-metrics-with-metricbeat/329437 "2023-04-13T09:26:36Z")
Hi team, i successfully getting from my multiple cluster the metrics in Kibana. But now i see that i don't want ALL metrics from a cluster the pods.. Example: one Cluster has 15 Pods but i need total 8 Pod of them. I… --- ## [How to optimize my ElasticSearch Query](https://discuss.elastic.co/t/how-to-optimize-my-elasticsearch-query/376531)
**Author:** [@simon\_Guille](https://discuss.elastic.co/u/simon_Guille)\ **Replies:** 22\ **Last updated:** [April 5, 2025, 11:30pm UTC](https://discuss.elastic.co/t/how-to-optimize-my-elasticsearch-query/376531 "2025-04-05T23:30:19Z")
Hello, I use a really strong request for my project. I tried to follow Elasticsearch tunes for search speed but it looks like its slower than before. Here you can find my request before I did the optimizations : { "qu… --- ## [APM Server - not all variables are working for Indicies templates](https://discuss.elastic.co/t/apm-server-not-all-variables-are-working-for-indicies-templates/244847)
**Author:** [@TheVintik](https://discuss.elastic.co/u/TheVintik)\ **Replies:** 10\ **Last updated:** [August 19, 2020, 2:30am UTC](https://discuss.elastic.co/t/apm-server-not-all-variables-are-working-for-indicies-templates/244847 "2020-08-19T02:30:48Z")
Hello! I have APM Server with default config and all is working fine. Now I want to split ES indices from APM by project or hostname ore something else and get a problem. I am using this part of config for this: \` out… --- ## ["Sorting" with has\_child and custom\_score not working](https://discuss.elastic.co/t/sorting-with-has-child-and-custom-score-not-working/12275)
**Author:** [@q42jaap](https://discuss.elastic.co/u/q42jaap)\ **Replies:** 9\ **Last updated:** [October 17, 2013, 3:15am UTC](https://discuss.elastic.co/t/sorting-with-has-child-and-custom-score-not-working/12275 "2013-10-17T03:15:05Z")
https://gist.github.com/q42jaap/5712231 I've recreated the example Martijn presented at #bbuzz and tried to make the sorting by price work. However, the scoring script doesn't seem to be working. The individual … --- ## [Problems with plugins and index templates](https://discuss.elastic.co/t/problems-with-plugins-and-index-templates/10313)
**Author:** [@Klaus\_Brunner](https://discuss.elastic.co/u/Klaus_Brunner)\ **Replies:** 9\ **Last updated:** [January 18, 2013, 1:30pm UTC](https://discuss.elastic.co/t/problems-with-plugins-and-index-templates/10313 "2013-01-18T13:30:29Z")
Hi, we've been trying to switch some of our index creation from programmatic to index-template-based. This seems to work fine with one exception: plugins do not seem to work (we're using phonetic in this case, ES … --- ## [How to use logstash to send longs in real time](https://discuss.elastic.co/t/how-to-use-logstash-to-send-longs-in-real-time/357073)
**Author:** [@saywhat](https://discuss.elastic.co/u/saywhat)\ **Replies:** 14\ **Last updated:** [April 12, 2024, 12:56pm UTC](https://discuss.elastic.co/t/how-to-use-logstash-to-send-longs-in-real-time/357073 "2024-04-12T12:56:38Z")
Instead of running logstash manually and specify the configuration file and path with: /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf, how can I instruct logstash to run in the background and coll… --- ## [How filebeat custom parse rules?](https://discuss.elastic.co/t/how-filebeat-custom-parse-rules/348878)
**Author:** [@fansehep](https://discuss.elastic.co/u/fansehep)\ **Replies:** 11\ **Last updated:** [December 10, 2023, 6:42am UTC](https://discuss.elastic.co/t/how-filebeat-custom-parse-rules/348878 "2023-12-10T06:42:11Z")
I have a project. it will output a spiecal log like: | xxx | xxx | xxx | | xxx | xxx | xxx | | xxx | xxx | xxx | I want to know it there anyway to custom self parse rules or some plugins to help me ? --- ## [A shell for elasticsearch](https://discuss.elastic.co/t/a-shell-for-elasticsearch/10848)
**Author:** [@javanna](https://discuss.elastic.co/u/javanna)\ **Replies:** 11\ **Last updated:** [February 24, 2013, 3:20pm UTC](https://discuss.elastic.co/t/a-shell-for-elasticsearch/10848 "2013-02-24T15:20:54Z")
Hi all, I just pushed on github my last experiment: the elasticshell, a shell for elasticsearch. It's a javascript shell (written in Java) that allows to interact with a running elasticsearch cluster. It uses the e… --- ## [Logstash unable to parse specific format of log](https://discuss.elastic.co/t/logstash-unable-to-parse-specific-format-of-log/334815)
**Author:** [@SmoZyNS](https://discuss.elastic.co/u/SmoZyNS)\ **Replies:** 11\ **Last updated:** [June 2, 2023, 1:35pm UTC](https://discuss.elastic.co/t/logstash-unable-to-parse-specific-format-of-log/334815 "2023-06-02T13:35:33Z")
Hello I am looking for some help since getting some headaches when trying to parse some logs Raw logs cs1Label=username cs1=/test@test.com cn1Label=actionSuccess cn1=1 deviceCustomDate1Label=userActionTime deviceCusto… --- ## [Issue with Multi terms aggregation with Boolean field](https://discuss.elastic.co/t/issue-with-multi-terms-aggregation-with-boolean-field/378585)
**Author:** [@bsehra](https://discuss.elastic.co/u/bsehra)\ **Replies:** 15\ **Last updated:** [June 5, 2025, 9:04am UTC](https://discuss.elastic.co/t/issue-with-multi-terms-aggregation-with-boolean-field/378585 "2025-06-05T09:04:45Z")
I'm using Elasticsearch server 8.17.3 and Elasticsearch net Client 8.17.3. Looks like there is an issue with Elasticsearch resolving the multi terms aggregation involving a boolean field. I get below error where as I'm o… --- ## [How to show one entry per day](https://discuss.elastic.co/t/how-to-show-one-entry-per-day/348913)
**Author:** [@soad20000](https://discuss.elastic.co/u/soad20000)\ **Replies:** 10\ **Last updated:** [December 8, 2023, 9:06pm UTC](https://discuss.elastic.co/t/how-to-show-one-entry-per-day/348913 "2023-12-08T21:06:14Z")
Hello, I am on Elastic V8.10.4 and I have a dashboard for NTP that looks like this: I want it to show only one entry per day, instead of multiple per day like it currently does. How can I accomplish this? --- ## [Logstash and Grok Matching](https://discuss.elastic.co/t/logstash-and-grok-matching/183987)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 10\ **Last updated:** [June 5, 2019, 9:53am UTC](https://discuss.elastic.co/t/logstash-and-grok-matching/183987 "2019-06-05T09:53:04Z")
Hi My question is regarding Logstash and Grok. If I have two filters in two different files filter { if \[message\] =~ Regex grok { match =\> \[PATTERNA\] } filter { if \[message\] =~ Regex grok { match =\> \[PATTERNB\] } If … [Previous page](https://discuss.elastic.co/top.md?page=236&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=238&per_page=50&period=all)