# Top

**URL:** https://discuss.elastic.co/top.md?page=241&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 242

---

## [Problem with Fields in search requests](https://discuss.elastic.co/t/problem-with-fields-in-search-requests/4318)

<div class="topic-metadata">

**Author:** [@Mustafa\_Sener](https://discuss.elastic.co/u/Mustafa_Sener)\
**Replies:** 9\
**Last updated:** [April 30, 2011, 8:37am UTC](https://discuss.elastic.co/t/problem-with-fields-in-search-requests/4318 "2011-04-30T08:37:14Z")

</div>

Hi, \*I have following type mapping\* XContentBuilder builder = XContentFactory.jsonBuilder(); builder.startObject(). startObject("optimizedmetric1"). startObject("\_all").field…

---

## [Kibana already restart](https://discuss.elastic.co/t/kibana-already-restart/275156)

<div class="topic-metadata">

**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\
**Replies:** 12\
**Last updated:** [June 8, 2021, 5:18am UTC](https://discuss.elastic.co/t/kibana-already-restart/275156 "2021-06-08T05:18:34Z")

</div>

Kibana restarts for an unknown reason, LOG: C:\\\\ELK\\\\kibana-7.1.1-windows-x86\_64\\\\node\_modules\\\\x-pack"} {"type":"log","@timestamp":"2021-06-07T13:22:29Z","tags":\["debug","legacy-proxy"\],"pid":16240,"message":"\\"getCo…

---

## [Logstash cannot connect to elasticsearch](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch/369510)

<div class="topic-metadata">

**Author:** [@saqibmushtaq](https://discuss.elastic.co/u/saqibmushtaq)\
**Replies:** 9\
**Last updated:** [October 28, 2024, 4:55pm UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch/369510 "2024-10-28T16:55:48Z")

</div>

I am not able to connect logstash with elasticsearch, below are my configuration files version: "1.0" services: elasticsearch: container\_name: elasticsearch-container image: docker.elastic.co/elasticsearch/ela…

---

## [Kibana 9.3.1 Disabling message "New! Connect AutoOps to this self-managed cluster"](https://discuss.elastic.co/t/kibana-9-3-1-disabling-message-new-connect-autoops-to-this-self-managed-cluster/385736)

<div class="topic-metadata">

**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\
**Replies:** 14\
**Last updated:** [April 16, 2026, 10:10am UTC](https://discuss.elastic.co/t/kibana-9-3-1-disabling-message-new-connect-autoops-to-this-self-managed-cluster/385736 "2026-04-16T10:10:01Z")

</div>

We would like to not present this message to our users. Is there a way this disable this?

---

## [Title: Implementing S3 Buffer Layer for Elasticsearch - Looking for Community Feedback](https://discuss.elastic.co/t/title-implementing-s3-buffer-layer-for-elasticsearch-looking-for-community-feedback/380778)

<div class="topic-metadata">

**Author:** [@Hadj\_Hassine\_Younes](https://discuss.elastic.co/u/Hadj_Hassine_Younes)\
**Replies:** 11\
**Last updated:** [August 7, 2025, 4:02pm UTC](https://discuss.elastic.co/t/title-implementing-s3-buffer-layer-for-elasticsearch-looking-for-community-feedback/380778 "2025-08-07T16:02:43Z")

</div>

Hi everyone, We're evaluating an S3-based buffer architecture to address circuit breaker issues and reduce costs in our ECK deployment. Would really appreciate insights from anyone who's implemented similar patterns. T…

---

## [Not able to connect docker logstash to docker elasticsearch using basic-auth using docker-compose](https://discuss.elastic.co/t/not-able-to-connect-docker-logstash-to-docker-elasticsearch-using-basic-auth-using-docker-compose/369941)

<div class="topic-metadata">

**Author:** [@pranchalm](https://discuss.elastic.co/u/pranchalm)\
**Replies:** 11\
**Last updated:** [November 2, 2024, 7:02pm UTC](https://discuss.elastic.co/t/not-able-to-connect-docker-logstash-to-docker-elasticsearch-using-basic-auth-using-docker-compose/369941 "2024-11-02T19:02:07Z")

</div>

Hi team, facing the following issue-: While running the following docker-compose.yml, rest of the containers apart from logstash container are up and running , logstash-container fails and is exited, while trying to con…

---

## [Ingest Pipeline KV Processor](https://discuss.elastic.co/t/ingest-pipeline-kv-processor/367252)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 9\
**Last updated:** [August 26, 2025, 1:38am UTC](https://discuss.elastic.co/t/ingest-pipeline-kv-processor/367252 "2025-08-26T01:38:26Z")

</div>

Hi Team, I am using custom logs integration to receive data via an elastic agent(ELK Version 8.13.4). The data looks something like this. "message": " URL : https://www.google.com\\n Action Type …

---

## [Memory for Facet query with filter](https://discuss.elastic.co/t/memory-for-facet-query-with-filter/8326)

<div class="topic-metadata">

**Author:** [@Kartavya](https://discuss.elastic.co/u/Kartavya)\
**Replies:** 9\
**Last updated:** [July 23, 2012, 1:47pm UTC](https://discuss.elastic.co/t/memory-for-facet-query-with-filter/8326 "2012-07-23T13:47:17Z")

</div>

Hi I am running facet query with date range filter. It consume the same memory whether I am running it for 7 days, or 70 days. I know facet loads the index in memory but What if I am using filter. Does it load co…

---

## [0.19.0 Released](https://discuss.elastic.co/t/0-19-0-released/6864)

<div class="topic-metadata">

**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\
**Replies:** 9\
**Last updated:** [March 5, 2012, 6:26pm UTC](https://discuss.elastic.co/t/0-19-0-released/6864 "2012-03-05T18:26:30Z")

</div>

Hi, 0.19.0 final has just been released. More info here: http://www.elasticsearch.org/blog/2012/03/01/0.19.0-released.html. This release, on top of its features, marks an important improvement to the stability of…

---

## [Connect to EC2 cluster from other security groups](https://discuss.elastic.co/t/connect-to-ec2-cluster-from-other-security-groups/6653)

<div class="topic-metadata">

**Author:** [@vreal](https://discuss.elastic.co/u/vreal)\
**Replies:** 9\
**Last updated:** [February 17, 2012, 5:27am UTC](https://discuss.elastic.co/t/connect-to-ec2-cluster-from-other-security-groups/6653 "2012-02-17T05:27:01Z")

</div>

I've created a cluster with 2 EC2 instances on amazon and set the security group as search-cluster and they are works fine. Then I start another instance which is in security group web-server. Both security groups have p…

---

## [Indexing performance problems](https://discuss.elastic.co/t/indexing-performance-problems/3415)

<div class="topic-metadata">

**Author:** [@thiago](https://discuss.elastic.co/u/thiago)\
**Replies:** 9\
**Last updated:** [October 6, 2010, 11:49pm UTC](https://discuss.elastic.co/t/indexing-performance-problems/3415 "2010-10-06T23:49:45Z")

</div>

Hello ppl, I currently experiencing performance problem when indexing. The system is indexing ~30tweets/sec, and after a period (10h-20h) indexing ElasticSearch stops responding consuming 100% of a cpu's core.…

---

## [SPLIT Pipeline is not working correctly](https://discuss.elastic.co/t/split-pipeline-is-not-working-correctly/337880)

<div class="topic-metadata">

**Author:** [@anupvtr](https://discuss.elastic.co/u/anupvtr)\
**Replies:** 16\
**Last updated:** [July 7, 2023, 2:55pm UTC](https://discuss.elastic.co/t/split-pipeline-is-not-working-correctly/337880 "2023-07-07T14:55:56Z")

</div>

Hello All, Thanks in advance. We have configured the logstash on ServerA and pipeline is configured. All the filebeat agents are sending data successfully to ServerA. PipelinePrimary.conf To avoid delay and better l…

---

## [Develop ELK Cluster](https://discuss.elastic.co/t/develop-elk-cluster/283004)

<div class="topic-metadata">

**Author:** [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Replies:** 9\
**Last updated:** [September 2, 2021, 10:21pm UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004 "2021-09-02T22:21:05Z")

</div>

Hi All, I have plan to create Elastic Cluster. I have prepared 3 elastic servers and SAN Storage. I will create cluster which the three nodes. I need insight to join SAN Storage to the cluster. How to join the SAN S…

---

## [Search query in graph returns no response](https://discuss.elastic.co/t/search-query-in-graph-returns-no-response/141376)

<div class="topic-metadata">

**Author:** [@Gokul\_15](https://discuss.elastic.co/u/Gokul_15)\
**Replies:** 9\
**Last updated:** [July 25, 2018, 8:02am UTC](https://discuss.elastic.co/t/search-query-in-graph-returns-no-response/141376 "2018-07-25T08:02:02Z")

</div>

search query in graph returns no response,may i know the reason??

---

## [Inconsistent Results From Percolator](https://discuss.elastic.co/t/inconsistent-results-from-percolator/5603)

<div class="topic-metadata">

**Author:** [@Kenneth\_Loafman](https://discuss.elastic.co/u/Kenneth_Loafman)\
**Replies:** 9\
**Last updated:** [November 30, 2012, 2:48pm UTC](https://discuss.elastic.co/t/inconsistent-results-from-percolator/5603 "2012-11-30T14:48:37Z")

</div>

Hi, We are running 18-SNAPSHOT from a couple of weeks ago and we're getting inconsistent results from percolator. We have a three node cluster and it appears that node 1 is getting correct results while nodes 2 and…

---

## [Rum integration on NextJS with ELK-stack on k8s](https://discuss.elastic.co/t/rum-integration-on-nextjs-with-elk-stack-on-k8s/364422)

<div class="topic-metadata">

**Author:** [@Alex\_Thoger\_Holmberg](https://discuss.elastic.co/u/Alex_Thoger_Holmberg)\
**Replies:** 12\
**Last updated:** [August 13, 2024, 1:11pm UTC](https://discuss.elastic.co/t/rum-integration-on-nextjs-with-elk-stack-on-k8s/364422 "2024-08-13T13:11:13Z")

</div>

Kibana version: Newest version available Elasticsearch version: Newest version available APM Server version: Newest version available APM Agent language and version: RumJS Browser version: N/A Original install metho…

---

## [Distribution of work](https://discuss.elastic.co/t/distribution-of-work/7231)

<div class="topic-metadata">

**Author:** [@orenmazor](https://discuss.elastic.co/u/orenmazor)\
**Replies:** 9\
**Last updated:** [April 29, 2012, 4:51pm UTC](https://discuss.elastic.co/t/distribution-of-work/7231 "2012-04-29T16:51:32Z")

</div>

hey guys, I've been on/off dealing with some ES issues, and I think I've resolved a LOT of them. but there's still one thing that bugs me. My structure: 40gb index two nodes, ten shards, one replica. each nod…

---

## [How to create Elasticsearch Dedicated Replica Cluster](https://discuss.elastic.co/t/how-to-create-elasticsearch-dedicated-replica-cluster/301697)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 11\
**Last updated:** [April 20, 2022, 6:29am UTC](https://discuss.elastic.co/t/how-to-create-elasticsearch-dedicated-replica-cluster/301697 "2022-04-20T06:29:38Z")

</div>

Hello Everyone: I am using Elasticsearch v7.8.0 cluster having indices in 100TB+. I am looking for a backup cluster for my running PROD cluster , a cluster where my DATA would reside in READ-ONLY Manner while it still …

---

## [Implement filebeat with ingest pipelies](https://discuss.elastic.co/t/implement-filebeat-with-ingest-pipelies/378482)

<div class="topic-metadata">

**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\
**Replies:** 19\
**Last updated:** [May 25, 2025, 10:40pm UTC](https://discuss.elastic.co/t/implement-filebeat-with-ingest-pipelies/378482 "2025-05-25T22:40:53Z")

</div>

Hello, I have ELK instance which consists of elasticsearch, logstash and kibana. I would like to implement filebeat with ingest pipelines - meaning filebeat sends logs with tags and ingest pipelines recognize it and cr…

---

## [Why the kibana action so slow?](https://discuss.elastic.co/t/why-the-kibana-action-so-slow/350702)

<div class="topic-metadata">

**Author:** [@jevonsnotes](https://discuss.elastic.co/u/jevonsnotes)\
**Replies:** 9\
**Last updated:** [February 4, 2024, 8:43am UTC](https://discuss.elastic.co/t/why-the-kibana-action-so-slow/350702 "2024-02-04T08:43:01Z")

</div>

version 8.11.3 such as the Synthetics func ,it take a few minutes to action when i change the switch

---

## [Creating Index for different Systems is problematic](https://discuss.elastic.co/t/creating-index-for-different-systems-is-problematic/277516)

<div class="topic-metadata">

**Author:** [@Saumyadipta\_Sarkar](https://discuss.elastic.co/u/Saumyadipta_Sarkar)\
**Replies:** 9\
**Last updated:** [July 1, 2021, 5:19pm UTC](https://discuss.elastic.co/t/creating-index-for-different-systems-is-problematic/277516 "2021-07-01T17:19:09Z")

</div>

When I create an Index in Kibana and Search specific logs using query its giving me correct response. But Then if I want to open the URL composed with queries from any other system then its asking me to create an Index a…

---

## [I cannot see every column or see wrong output for the exisiting ones](https://discuss.elastic.co/t/i-cannot-see-every-column-or-see-wrong-output-for-the-exisiting-ones/230343)

<div class="topic-metadata">

**Author:** [@Burak\_Sakallioglu](https://discuss.elastic.co/u/Burak_Sakallioglu)\
**Replies:** 9\
**Last updated:** [May 3, 2020, 1:30pm UTC](https://discuss.elastic.co/t/i-cannot-see-every-column-or-see-wrong-output-for-the-exisiting-ones/230343 "2020-05-03T13:30:20Z")

</div>

Hi everyone, I have been trying to import my csv file with logstash, however, the output is not seen as I expected. Firstly, I cannot see every column in the output, then I cannot see the correct value for some existin…

---

## [Can I avoid elasticsearch monitoring index from moving to my temporary nodes?](https://discuss.elastic.co/t/can-i-avoid-elasticsearch-monitoring-index-from-moving-to-my-temporary-nodes/353128)

<div class="topic-metadata">

**Author:** [@Churchill](https://discuss.elastic.co/u/Churchill)\
**Replies:** 10\
**Last updated:** [February 13, 2024, 3:47pm UTC](https://discuss.elastic.co/t/can-i-avoid-elasticsearch-monitoring-index-from-moving-to-my-temporary-nodes/353128 "2024-02-13T15:47:15Z")

</div>

Good day, I'm currently maintaining a cluster with 4 permanent nodes and 3 temporary nodes. How it works is, during work hours, our temporary nodes will be started automatically, and will be shutdown after work hours. T…

---

## [Recency](https://discuss.elastic.co/t/recency/2919)

<div class="topic-metadata">

**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\
**Replies:** 9\
**Last updated:** [April 19, 2010, 9:57am UTC](https://discuss.elastic.co/t/recency/2919 "2010-04-19T09:57:49Z")

</div>

Hiya all How can I factor recency into the relevance score? ie add a boost factor to docs that have been created more recently. ta clint -- Web Announcements Limited is a company registered in England and …

---

## [Logstash stopped processing](https://discuss.elastic.co/t/logstash-stopped-processing/319641)

<div class="topic-metadata">

**Author:** [@shubham.s](https://discuss.elastic.co/u/shubham.s)\
**Replies:** 10\
**Last updated:** [November 24, 2022, 7:27am UTC](https://discuss.elastic.co/t/logstash-stopped-processing/319641 "2022-11-24T07:27:29Z")

</div>

Hi, The elasticsearch and kibana are working as intentional but after installing and configuring logstash in centos , the service stops \[2022-11-23T15:20:38,842\]\[INFO \]\[logstash.runner \] Log4j configuration pa…

---

## [Csv reporting always failed win 5m records](https://discuss.elastic.co/t/csv-reporting-always-failed-win-5m-records/239072)

<div class="topic-metadata">

**Author:** [@Hari\_Krishnan](https://discuss.elastic.co/u/Hari_Krishnan)\
**Replies:** 9\
**Last updated:** [July 2, 2020, 9:50am UTC](https://discuss.elastic.co/t/csv-reporting-always-failed-win-5m-records/239072 "2020-07-02T09:50:22Z")

</div>

Hi, I was trying to share CSV with 5 million records which is only datatime and md5 . so size might be less even its 5 million records . I have 900 MB in limit in both xpack.reporting.csv.maxSizeBytes http.max\_conten…

---

## [Log not visible on Kibana Interface](https://discuss.elastic.co/t/log-not-visible-on-kibana-interface/375193)

<div class="topic-metadata">

**Author:** [@pofudukhamsi](https://discuss.elastic.co/u/pofudukhamsi)\
**Replies:** 22\
**Last updated:** [March 5, 2025, 9:47pm UTC](https://discuss.elastic.co/t/log-not-visible-on-kibana-interface/375193 "2025-03-05T21:47:51Z")

</div>

Hello, I send the logs to ELK via Qradar. I can see the logs with TCPdump, but I cannot access the logs in the Kibana interface. Elasticsearch, Logstash, Kibana are all installed on a single server. Old sent logs are …

---

## [How can I restore a snapshot from S3 to a different cluster?](https://discuss.elastic.co/t/how-can-i-restore-a-snapshot-from-s3-to-a-different-cluster/368182)

<div class="topic-metadata">

**Author:** [@summoner](https://discuss.elastic.co/u/summoner)\
**Replies:** 9\
**Last updated:** [October 4, 2024, 3:59am UTC](https://discuss.elastic.co/t/how-can-i-restore-a-snapshot-from-s3-to-a-different-cluster/368182 "2024-10-04T03:59:24Z")

</div>

I have managed to get a snapshot stored on S3, now trying to get that snapshot onto my elasticsearch deployment using an operator on GKE. Currently I have 1 master data pod elasticsearch-config-es-master-data-1 active. W…

---

## [Merging fields of documents based on some field](https://discuss.elastic.co/t/merging-fields-of-documents-based-on-some-field/201413)

<div class="topic-metadata">

**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\
**Replies:** 9\
**Last updated:** [September 29, 2019, 1:28pm UTC](https://discuss.elastic.co/t/merging-fields-of-documents-based-on-some-field/201413 "2019-09-29T13:28:44Z")

</div>

Hi Elasticians, is it possible using Logstash to do this: #fields of document 1 connection-id: 1000 ip: 10.88.88.201 #fileds of document 2 connection-id: 1000 uid: user #fields of document 3 connection-id: 1000 messa…

---

## [Strange highlighting issue with custom\_score](https://discuss.elastic.co/t/strange-highlighting-issue-with-custom-score/7456)

<div class="topic-metadata">

**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\
**Replies:** 9\
**Last updated:** [April 29, 2012, 3:22pm UTC](https://discuss.elastic.co/t/strange-highlighting-issue-with-custom-score/7456 "2012-04-29T15:22:08Z")

</div>

Hi , When i DONT give the index name and type in the URL , highlighting is coming in result. And when i give the index name and type in URL , highlighting is NOT working. GIST of the query used - https://gist.gi…

---

## [Unable to parse CSP logs with filebeat](https://discuss.elastic.co/t/unable-to-parse-csp-logs-with-filebeat/362279)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 15\
**Last updated:** [July 3, 2024, 3:12am UTC](https://discuss.elastic.co/t/unable-to-parse-csp-logs-with-filebeat/362279 "2024-07-03T03:12:34Z")

</div>

Hi Team, I am trying to parse the csp logs with filebeat and I tried numerous option but none of them is working. Can someone please help? Here are the raw csp log {"date":"01/Jul/2024:12:07:00 +0530", "IP address":"1…

---

## [Cannot provide a name](https://discuss.elastic.co/t/cannot-provide-a-name/182027)

<div class="topic-metadata">

**Author:** [@yasin](https://discuss.elastic.co/u/yasin)\
**Replies:** 9\
**Last updated:** [May 27, 2019, 11:27am UTC](https://discuss.elastic.co/t/cannot-provide-a-name/182027 "2019-05-27T11:27:47Z")

</div>

Dear Elastic Team, Seems like when giving a "name:" in heartbeat.yml file it doesn't work?

---

## [How to change Data-Type in a Field to only get an Ip-Adr?](https://discuss.elastic.co/t/how-to-change-data-type-in-a-field-to-only-get-an-ip-adr/191994)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 9\
**Last updated:** [July 25, 2019, 12:40pm UTC](https://discuss.elastic.co/t/how-to-change-data-type-in-a-field-to-only-get-an-ip-adr/191994 "2019-07-25T12:40:16Z")

</div>

Hey Community, so basically i'm totally new to ES. I set up an Elk-Cluster with 2 Worker Node's, and a Master Node running Kibana etc. I attached a security system to it via logstash, so now i get the syslogs and it al…

---

## [No access to Kibana WebUI via Nginx Proxy](https://discuss.elastic.co/t/no-access-to-kibana-webui-via-nginx-proxy/369989)

<div class="topic-metadata">

**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\
**Replies:** 24\
**Last updated:** [November 5, 2024, 2:28pm UTC](https://discuss.elastic.co/t/no-access-to-kibana-webui-via-nginx-proxy/369989 "2024-11-05T14:28:52Z")

</div>

Hello, i just can't get my Kibana WebUI to load. After 5 seconds I get the following error message in the web browser: Kibana server is not ready yet. System Information: root@dsme01:~# lsb\_release -a No LSB modules …

---

## [All fields have the status "unknown field"](https://discuss.elastic.co/t/all-fields-have-the-status-unknown-field/371760)

<div class="topic-metadata">

**Author:** [@atbc](https://discuss.elastic.co/u/atbc)\
**Replies:** 17\
**Last updated:** [February 4, 2025, 3:17pm UTC](https://discuss.elastic.co/t/all-fields-have-the-status-unknown-field/371760 "2025-02-04T15:17:40Z")

</div>

Hello, We have a problem, all fields have the status "unknown field" on our Kibana, wich breaks most of our searches.. Do you know how to solve this ? Regards,

---

## [Logstash problem for loading data](https://discuss.elastic.co/t/logstash-problem-for-loading-data/192936)

<div class="topic-metadata">

**Author:** [@Abdelmadjid](https://discuss.elastic.co/u/Abdelmadjid)\
**Replies:** 11\
**Last updated:** [August 1, 2019, 12:53pm UTC](https://discuss.elastic.co/t/logstash-problem-for-loading-data/192936 "2019-08-01T12:53:17Z")

</div>

hello i need help for loading data to elasticsearch with logstash on windows 10 when i try to load data to logstash with these config file input{ file{ path =\> "C:\\Users\\pc intervalle\\Downloads\\Compressed\\logstash-7…

---

## [Filtering based on wildcard field name and synamicly adding them to \_source](https://discuss.elastic.co/t/filtering-based-on-wildcard-field-name-and-synamicly-adding-them-to-source/130092)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 9\
**Last updated:** [May 1, 2018, 3:08pm UTC](https://discuss.elastic.co/t/filtering-based-on-wildcard-field-name-and-synamicly-adding-them-to-source/130092 "2018-05-01T15:08:56Z")

</div>

Hi everyone! I have a doc the looks like this: { "field1\_isChanged": "false", "field1\_value": "someVal1", "field2\_isChanged": "true", "field2\_value": "someVal2", "field3\_isChanged": "true", "field3\_value": "someVal3", …

---

## [Insert later feature](https://discuss.elastic.co/t/insert-later-feature/15976)

<div class="topic-metadata">

**Author:** [@vineeth\_mohan\_2](https://discuss.elastic.co/u/vineeth_mohan_2)\
**Replies:** 10\
**Last updated:** [February 23, 2014, 10:01pm UTC](https://discuss.elastic.co/t/insert-later-feature/15976 "2014-02-23T22:01:19Z")

</div>

Hi , I am doing a lot of bulk insert into Elasticsearch and at the same time doing lots of read in another index. Because of the bulk insert my searches on other index are slow. It is not very urgent that these…

---

## [Shard replication failures](https://discuss.elastic.co/t/shard-replication-failures/3224)

<div class="topic-metadata">

**Author:** [@Diptamay](https://discuss.elastic.co/u/Diptamay)\
**Replies:** 10\
**Last updated:** [August 17, 2010, 7:51pm UTC](https://discuss.elastic.co/t/shard-replication-failures/3224 "2010-08-17T19:51:45Z")

</div>

Hello I am trying to index data on our QA environment where I have two ES nodes setup running on Solaric. I am using unicast for communication. The configuration of the two nodes are as follows: 1) I am using thi…

---

## [Agent fleet URL not taking what is in the yaml config](https://discuss.elastic.co/t/agent-fleet-url-not-taking-what-is-in-the-yaml-config/370278)

<div class="topic-metadata">

**Author:** [@clockard](https://discuss.elastic.co/u/clockard)\
**Replies:** 14\
**Last updated:** [November 21, 2024, 7:01am UTC](https://discuss.elastic.co/t/agent-fleet-url-not-taking-what-is-in-the-yaml-config/370278 "2024-11-21T07:01:49Z")

</div>

Has anyone seen an issue with the fleet url that the agent is using does not correspond to the url in the yaml file ( elastic-agent-managed-kubernetes.yml) or the corresponding fleet configuration. evn vars for elsatic-…

---

## [Getting Kibana on Host](https://discuss.elastic.co/t/getting-kibana-on-host/137938)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 9\
**Last updated:** [June 29, 2018, 12:37pm UTC](https://discuss.elastic.co/t/getting-kibana-on-host/137938 "2018-06-29T12:37:54Z")

</div>

Hello, I'm trying to get Kibana to run on my host I have it running on my VMware server and I connect it via console. I am using NGINX and got all the settings configured according to multiple tutorials. For some reas…

---

## [ES goes out of heap when issuing clusterstats (caused by CompletionStats)](https://discuss.elastic.co/t/es-goes-out-of-heap-when-issuing-clusterstats-caused-by-completionstats/336866)

<div class="topic-metadata">

**Author:** [@mgsag](https://discuss.elastic.co/u/mgsag)\
**Replies:** 11\
**Last updated:** [June 28, 2023, 1:21pm UTC](https://discuss.elastic.co/t/es-goes-out-of-heap-when-issuing-clusterstats-caused-by-completionstats/336866 "2023-06-28T13:21:56Z")

</div>

We observed this behavior in several of our production ElasticSearches and we were also able to reproduce it locally. If a database contains a lot of data for the completion-suggester, issuing a "\_cluster/stats?pretty"…

---

## [What is the solution in order to search for the entire text accurately without increasing ignore\_above in order for the space to remain the same?](https://discuss.elastic.co/t/what-is-the-solution-in-order-to-search-for-the-entire-text-accurately-without-increasing-ignore-above-in-order-for-the-space-to-remain-the-same/372569)

<div class="topic-metadata">

**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\
**Replies:** 19\
**Last updated:** [January 16, 2025, 10:26am UTC](https://discuss.elastic.co/t/what-is-the-solution-in-order-to-search-for-the-entire-text-accurately-without-increasing-ignore-above-in-order-for-the-space-to-remain-the-same/372569 "2025-01-16T10:26:45Z")

</div>

Hi I have data that I store in elasticsearch and from these data there are long fields of up to 2000 characters and I want to search for them by term It is known in elasticsearch that the keyword field type reaches a le…

---

## [Making Logstash and/or Filebeats process one entry at a time](https://discuss.elastic.co/t/making-logstash-and-or-filebeats-process-one-entry-at-a-time/251822)

<div class="topic-metadata">

**Author:** [@jonVR](https://discuss.elastic.co/u/jonVR)\
**Replies:** 9\
**Last updated:** [October 16, 2020, 10:04pm UTC](https://discuss.elastic.co/t/making-logstash-and-or-filebeats-process-one-entry-at-a-time/251822 "2020-10-16T22:04:18Z")

</div>

I currently have a setup where Filebeats is tracking a folder (in which there is only 1 file), and sends entries to Logstash. In my logstash.yml, I have pipeline.workers set to 1. Here is a snippet of my logstash.conf, f…

---

## [Elastic search](https://discuss.elastic.co/t/elastic-search/5076)

<div class="topic-metadata">

**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Replies:** 10\
**Last updated:** [August 14, 2011, 10:41pm UTC](https://discuss.elastic.co/t/elastic-search/5076 "2011-08-14T22:41:34Z")

</div>

I am new to elastic search and trying to understand the concept. I am trying to find the information: 1) about how it distributes, replicates data for HA. 2) Where does it store the data? 3) Optimization techniques …

---

## [Error: entity content is too long \[105072697\] for the configured buffer limit \[104857600\]](https://discuss.elastic.co/t/error-entity-content-is-too-long-105072697-for-the-configured-buffer-limit-104857600/385636)

<div class="topic-metadata">

**Author:** [@Chen\_Wen](https://discuss.elastic.co/u/Chen_Wen)\
**Replies:** 16\
**Last updated:** [March 31, 2026, 8:49am UTC](https://discuss.elastic.co/t/error-entity-content-is-too-long-105072697-for-the-configured-buffer-limit-104857600/385636 "2026-03-31T08:49:15Z")

</div>

When I query data from ES8.2.3 with a big size in one req that the index docs are more than 10K and got en error Error: entity content is too long \[105072697\] for the configured buffer limit \[104857600\]. After search th…

---

## [Translate Elasticsearch querries to Appsearch](https://discuss.elastic.co/t/translate-elasticsearch-querries-to-appsearch/355246)

<div class="topic-metadata">

**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\
**Replies:** 10\
**Last updated:** [March 13, 2024, 2:20pm UTC](https://discuss.elastic.co/t/translate-elasticsearch-querries-to-appsearch/355246 "2024-03-13T14:20:32Z")

</div>

Hello, We have quite the situation on our hands. We need to be able to translate the old ES queries to App Search. How would this be done? Is this even possible for complexer queries? We thought of using the /elastic…

---

## [Kibana shows documents from different indices in one index, why?](https://discuss.elastic.co/t/kibana-shows-documents-from-different-indices-in-one-index-why/288962)

<div class="topic-metadata">

**Author:** [@My\_Google\_Account](https://discuss.elastic.co/u/My_Google_Account)\
**Replies:** 9\
**Last updated:** [November 12, 2021, 7:12am UTC](https://discuss.elastic.co/t/kibana-shows-documents-from-different-indices-in-one-index-why/288962 "2021-11-12T07:12:18Z")

</div>

Hello! ELK stack is 7.15 and i have one problem, we have a pipeline in logstash and two different configs with different ports 5000 and 6000 in input section, then filter where we set a field for cassandra logs: \[fields\]…

---

## [Issue with creating backup to s3](https://discuss.elastic.co/t/issue-with-creating-backup-to-s3/361701)

<div class="topic-metadata">

**Author:** [@Vakh](https://discuss.elastic.co/u/Vakh)\
**Replies:** 10\
**Last updated:** [June 19, 2024, 3:03pm UTC](https://discuss.elastic.co/t/issue-with-creating-backup-to-s3/361701 "2024-06-19T15:03:55Z")

</div>

Hello there! I will start by providing as many details as possible. First of all, I want to state that it is my first time working with Elastic and I do not know a lot. Now, in a company we have 3 EC2 instances, on wh…

---

## [Best ElasticSearch configuration mode](https://discuss.elastic.co/t/best-elasticsearch-configuration-mode/301566)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 9\
**Last updated:** [April 7, 2022, 2:28am UTC](https://discuss.elastic.co/t/best-elasticsearch-configuration-mode/301566 "2022-04-07T02:28:32Z")

</div>

Years ago I configured a server\* with Elasticsearch, however, until today my knowledge to configure, manage, define nodes, is totally 0. I don't have nodes for ingest, digest, etc, as I have no idea what they do. Even m…

[Previous page](https://discuss.elastic.co/top.md?page=240&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=242&per_page=50&period=all)
