# Top

**URL:** https://discuss.elastic.co/top.md?page=255&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 256

---

## [Clarification about recommended memory-disk ratio of 1:30](https://discuss.elastic.co/t/clarification-about-recommended-memory-disk-ratio-of-1-30/221547)

<div class="topic-metadata">

**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\
**Replies:** 4\
**Last updated:** [March 3, 2020, 5:40pm UTC](https://discuss.elastic.co/t/clarification-about-recommended-memory-disk-ratio-of-1-30/221547 "2020-03-03T17:40:19Z")

</div>

I've seen some confusing (seemingly contradicting) official guidelines about sizing an ElasticSearch cluster, so I'd like to know if somebody can shed some light on this. These are the guidelines in question: As per …

---

## [How to dynamically move nested key value to root level](https://discuss.elastic.co/t/how-to-dynamically-move-nested-key-value-to-root-level/180006)

<div class="topic-metadata">

**Author:** [@arefeh](https://discuss.elastic.co/u/arefeh)\
**Replies:** 2\
**Last updated:** [May 8, 2019, 4:56am UTC](https://discuss.elastic.co/t/how-to-dynamically-move-nested-key-value-to-root-level/180006 "2019-05-08T04:56:31Z")

</div>

This is my logstash config file: input { http { id =\> bulkHttpInput port =\> 8088 additional\_codecs =\> {"application/json" =\> "es\_bulk"} codec =\> es\_bulk } } filter { mutate { remove\_field =\> \[…

---

## [Total hits with field collapsing](https://discuss.elastic.co/t/total-hits-with-field-collapsing/105061)

<div class="topic-metadata">

**Author:** [@Ons](https://discuss.elastic.co/u/Ons)\
**Replies:** 3\
**Last updated:** [November 8, 2017, 9:19pm UTC](https://discuss.elastic.co/t/total-hits-with-field-collapsing/105061 "2017-11-08T21:19:48Z")

</div>

Hi all, I am using the field collapsing feature to group my results by a certain field and get only the top ranked hits. In the documentation, it is mentioned that ''The total number of hits in the response indicates t…

---

## [Corrupted elastic index](https://discuss.elastic.co/t/corrupted-elastic-index/135932)

<div class="topic-metadata">

**Author:** [@matw](https://discuss.elastic.co/u/matw)\
**Replies:** 4\
**Last updated:** [June 22, 2018, 2:53pm UTC](https://discuss.elastic.co/t/corrupted-elastic-index/135932 "2018-06-22T14:53:42Z")

</div>

my instance of elasticsearch (5.6.1) stopped indexing because of the following error \[2018-06-13T16:39:07,413\]\[ERROR\]\[o.e.i.e.InternalEngine$EngineMergeScheduler\] \[tracer-node-1\] \[tracer-default-logs-network-2018.06.13\]…

---

## [Dec 22nd, 2019 \[EN\]\[Machine Learning\] Outlier Detection by Example](https://discuss.elastic.co/t/dec-22nd-2019-en-machine-learning-outlier-detection-by-example/210937)

<div class="topic-metadata">

**Author:** [@blaklaybul](https://discuss.elastic.co/u/blaklaybul)\
**Replies:** 0\
**Last updated:** [December 22, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-22nd-2019-en-machine-learning-outlier-detection-by-example/210937 "2019-12-22T08:00:03Z")

</div>

Outlier Detection by Example Outlier detection has been available in machine learning since 7.2 - what follows is a demonstration about how to create outlier detection analyses and how to analyze the results. For the sa…

---

## [Query to display the results contains speicifed string](https://discuss.elastic.co/t/query-to-display-the-results-contains-speicifed-string/48570)

<div class="topic-metadata">

**Author:** [@nagesh](https://discuss.elastic.co/u/nagesh)\
**Replies:** 8\
**Last updated:** [September 4, 2021, 3:32am UTC](https://discuss.elastic.co/t/query-to-display-the-results-contains-speicifed-string/48570 "2021-09-04T03:32:15Z")

</div>

Hi, Application name is property in the fields list of Kibana dashboard viewlet. Suppose if I need to display logs which contains application name in the log message then what query I need to use in dashboard. Thanks…

---

## [How to configure Elastic.Serilog.Sinks librari with appsettings.json?](https://discuss.elastic.co/t/how-to-configure-elastic-serilog-sinks-librari-with-appsettings-json/335635)

<div class="topic-metadata">

**Author:** [@mchudinov](https://discuss.elastic.co/u/mchudinov)\
**Replies:** 1\
**Last updated:** [June 12, 2023, 11:30pm UTC](https://discuss.elastic.co/t/how-to-configure-elastic-serilog-sinks-librari-with-appsettings-json/335635 "2023-06-12T23:30:01Z")

</div>

I want to use Elastic.Serilog.Sinks library (created by Elastic co) to submit logs to an Elastic instance inside the Elastic cloud. How to configure logging using appsettings.json for a .NET 7 application? How to confi…

---

## [Increase the resolution of Elastic timestamps to nanoseconds](https://discuss.elastic.co/t/increase-the-resolution-of-elastic-timestamps-to-nanoseconds/24227)

<div class="topic-metadata">

**Author:** [@anoban](https://discuss.elastic.co/u/anoban)\
**Replies:** 2\
**Last updated:** [June 7, 2016, 10:09am UTC](https://discuss.elastic.co/t/increase-the-resolution-of-elastic-timestamps-to-nanoseconds/24227 "2016-06-07T10:09:06Z")

</div>

I am not sure this is possible currently, but if not what would be required to do so? All my events have nanoseconds timestamps, and at the moment I split the us/ns into a new variable so I dont lose the info. However…

---

## [X-Pack Authentication issue](https://discuss.elastic.co/t/x-pack-authentication-issue/121632)

<div class="topic-metadata">

**Author:** [@Suryakumar](https://discuss.elastic.co/u/Suryakumar)\
**Replies:** 8\
**Last updated:** [March 8, 2018, 3:57am UTC](https://discuss.elastic.co/t/x-pack-authentication-issue/121632 "2018-03-08T03:57:00Z")

</div>

I have recently uninstalled and again reinstalled X-Pack. But when I followed the same tutorial used before, now I am getting error messages. I have installed X-Pack with sudo permission. When I use the below command to…

---

## [Contradictory and, sometimes, poor, advice given for es.set.netty.runtime.available.processors](https://discuss.elastic.co/t/contradictory-and-sometimes-poor-advice-given-for-es-set-netty-runtime-available-processors/148014)

<div class="topic-metadata">

**Author:** [@Stu\_S](https://discuss.elastic.co/u/Stu_S)\
**Replies:** 0\
**Last updated:** [September 10, 2018, 7:55pm UTC](https://discuss.elastic.co/t/contradictory-and-sometimes-poor-advice-given-for-es-set-netty-runtime-available-processors/148014 "2018-09-10T19:55:09Z")

</div>

Elasticsearch has a setting "processors" that defaults to "Runtime.getRuntime().availableProcessors()": It takes that setting, and tries to set the availableProcessor variable in Netty: Unless a particular system p…

---

## [Elastic-agent status Error: failed to communicate with Elastic Agent daemon](https://discuss.elastic.co/t/elastic-agent-status-error-failed-to-communicate-with-elastic-agent-daemon/308023)

<div class="topic-metadata">

**Author:** [@tidenhub](https://discuss.elastic.co/u/tidenhub)\
**Replies:** 2\
**Last updated:** [July 24, 2022, 9:52am UTC](https://discuss.elastic.co/t/elastic-agent-status-error-failed-to-communicate-with-elastic-agent-daemon/308023 "2022-07-24T09:52:35Z")

</div>

I have installed Elastic Agent 8.2.2 at my Windows 10 host. I can see the service running in the Management tools. But the command to get the status throws an error. PS is running in admin mode. PS C:\\Program Files\\El…

---

## [Elastic Stack 7.17.4 and 8.2.1 Security Update](https://discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 0\
**Last updated:** [May 24, 2022, 4:55pm UTC](https://discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530 "2022-05-24T16:55:27Z")

</div>

Elastic Stack update for CVE-2022-21449 Java vulnerability in Elliptic Curve Digital Signature Algorithm (ECDSA) (ESA-2022-06) A vulnerability (CVE-2022-21449) affecting the implementation of Elliptic Curve Digital Sign…

---

## [Kibana won't start: “node” can’t be opened because Apple cannot check it for malicious software](https://discuss.elastic.co/t/kibana-wont-start-node-can-t-be-opened-because-apple-cannot-check-it-for-malicious-software/222994)

<div class="topic-metadata">

**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 5:02pm UTC](https://discuss.elastic.co/t/kibana-wont-start-node-can-t-be-opened-because-apple-cannot-check-it-for-malicious-software/222994 "2020-03-12T17:02:27Z")

</div>

I downloaded Kibana and tried to start it on Mac OSX 10.13.3 (Catalina) but I get the following error and the application is killed: It seems like more of a mac issue but I was hoping someone here might be able to hel…

---

## [Curl -X GET 'http://localhost:9200' curl: (52) Empty reply from server](https://discuss.elastic.co/t/curl-x-get-http-localhost-9200-curl-52-empty-reply-from-server/329211)

<div class="topic-metadata">

**Author:** [@Adarsh\_R\_K](https://discuss.elastic.co/u/Adarsh_R_K)\
**Replies:** 7\
**Last updated:** [April 4, 2023, 12:49pm UTC](https://discuss.elastic.co/t/curl-x-get-http-localhost-9200-curl-52-empty-reply-from-server/329211 "2023-04-04T12:49:59Z")

</div>

elasticsearch service is active and running but got this error while accessing 9200, elasticsearch.yml file is properly configuredcurl -X GET 'http://localhost:9200' curl: (52) Empty reply from server

---

## [Unable to connect to Elasticsearch at http://localhost:9200](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-at-http-localhost-9200/48633)

<div class="topic-metadata">

**Author:** [@niks](https://discuss.elastic.co/u/niks)\
**Replies:** 8\
**Last updated:** [May 30, 2017, 9:17pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-at-http-localhost-9200/48633 "2017-05-30T21:17:36Z")

</div>

is it a version issue or some issues related to firewall. pls help

---

## [Are shards skipped when a range query does not create hits](https://discuss.elastic.co/t/are-shards-skipped-when-a-range-query-does-not-create-hits/120239)

<div class="topic-metadata">

**Author:** [@dbman666](https://discuss.elastic.co/u/dbman666)\
**Replies:** 1\
**Last updated:** [February 17, 2018, 2:59am UTC](https://discuss.elastic.co/t/are-shards-skipped-when-a-range-query-does-not-create-hits/120239 "2018-02-17T02:59:42Z")

</div>

In my templated mapping, I use a sort.field on a datetime field. That datetime field thus contains increasing values for the rows inserted during the day. I rollover daily, and do a force merge on older indices. I want …

---

## [MUST\_NOT not working with EXIST in NESTED query](https://discuss.elastic.co/t/must-not-not-working-with-exist-in-nested-query/101952)

<div class="topic-metadata">

**Author:** [@jlp1](https://discuss.elastic.co/u/jlp1)\
**Replies:** 1\
**Last updated:** [September 27, 2017, 6:29pm UTC](https://discuss.elastic.co/t/must-not-not-working-with-exist-in-nested-query/101952 "2017-09-27T18:29:35Z")

</div>

ES 5.2.2 Here is my mapping: PUT players { "mappings": { "players": { "properties": { "features": { "type": "nested", "properties": { "name"…

---

## [Visualizing funnels in Kibana](https://discuss.elastic.co/t/visualizing-funnels-in-kibana/29199)

<div class="topic-metadata">

**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\
**Replies:** 8\
**Last updated:** [December 28, 2016, 12:44pm UTC](https://discuss.elastic.co/t/visualizing-funnels-in-kibana/29199 "2016-12-28T12:44:41Z")

</div>

Hey gang! Simple request here. We want to migrate more and more basic analytics team needs into ELK, but one key question I'm stumped on is: can you visualize funnels in Kibana? Specifically drop off rates between page…

---

## [Dec 3rd, 2022: \[EN\] Get insights from your webmapping application with Ingest Pipelines and Elastic Observability](https://discuss.elastic.co/t/dec-3rd-2022-en-get-insights-from-your-webmapping-application-with-ingest-pipelines-and-elastic-observability/316864)

<div class="topic-metadata">

**Author:** [@jsanz](https://discuss.elastic.co/u/jsanz)\
**Replies:** 0\
**Last updated:** [December 3, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-3rd-2022-en-get-insights-from-your-webmapping-application-with-ingest-pipelines-and-elastic-observability/316864 "2022-12-03T08:00:57Z")

</div>

Introduction Imagine you have an application that offers a map interface that should render thousands of elements, so you learn you must go through the modern route of generating tiles. But what are those tiles? Well,…

---

## [Dec 1st, 2020: \[EN\] Synthetics: Finding problems before they happen](https://discuss.elastic.co/t/dec-1st-2020-en-synthetics-finding-problems-before-they-happen/254953)

<div class="topic-metadata">

**Author:** [@Ahil\_PonArul](https://discuss.elastic.co/u/Ahil_PonArul)\
**Replies:** 0\
**Last updated:** [December 1, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2020-en-synthetics-finding-problems-before-they-happen/254953 "2020-12-01T08:00:00Z")

</div>

Synthetics: Proactive Problem Detection Elastic is excited to introduce Synthetic monitoring to our Uptime solution. This allows for more advanced uptime checks beyond basic pings. Combined with our new User Experience U…

---

## [Unable to start elasticsearch 6.2.0 in windows 10](https://discuss.elastic.co/t/unable-to-start-elasticsearch-6-2-0-in-windows-10/118851)

<div class="topic-metadata">

**Author:** [@bikkina\_mahesh](https://discuss.elastic.co/u/bikkina_mahesh)\
**Replies:** 8\
**Last updated:** [February 22, 2018, 2:42am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-6-2-0-in-windows-10/118851 "2018-02-22T02:42:35Z")

</div>

My java version is : java version "1.8.0\_151" Java(TM) SE Runtime Environment (build 1.8.0\_151-b12) Java HotSpot(TM) Client VM (build 25.151-b12, mixed mode) and JAVA\_HOME is set correctly and when i am running the …

---

## [In Kibana how to do a text search with multiple contains](https://discuss.elastic.co/t/in-kibana-how-to-do-a-text-search-with-multiple-contains/109867)

<div class="topic-metadata">

**Author:** [@Vivek\_Menon](https://discuss.elastic.co/u/Vivek_Menon)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 8:53pm UTC](https://discuss.elastic.co/t/in-kibana-how-to-do-a-text-search-with-multiple-contains/109867 "2017-12-01T20:53:36Z")

</div>

On the kibana UI if I want to search the term car in text on a field named message I would do message: "%car%" that works. If I want to find text that contains both car and bike, I would try message:"%car%bike%" but…

---

## [Query on \_id field](https://discuss.elastic.co/t/query-on--id-field/95430)

<div class="topic-metadata">

**Author:** [@xwang12345](https://discuss.elastic.co/u/xwang12345)\
**Replies:** 1\
**Last updated:** [August 2, 2017, 8:59pm UTC](https://discuss.elastic.co/t/query-on--id-field/95430 "2017-08-02T20:59:14Z")

</div>

I had some trouble trying to query the id\_ field The following query works: GET my\_index/my\_type/\_search { "query" : { "match":{ "\_id": "ABC\_my\_content1" } } } But what if I want to search for …

---

## [Dec 14, 2022: \[EN\] Our favorite Kibana application - Discover](https://discuss.elastic.co/t/dec-14-2022-en-our-favorite-kibana-application-discover/321052)

<div class="topic-metadata">

**Author:** [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Replies:** 0\
**Last updated:** [December 14, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-14-2022-en-our-favorite-kibana-application-discover/321052 "2022-12-14T08:00:16Z")

</div>

For this advent post, I decided I will ask my teammates for their favourite Kibana application. We all picked discover. Kibana's discover is the most used application of Kibana. It lets you explore your data and ask …

---

## [Dec 1st, 2017: \[EN\]\[Elastic Stack\] Upgrading to 6.0.0!](https://discuss.elastic.co/t/dec-1st-2017-en-elastic-stack-upgrading-to-6-0-0/109300)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 5\
**Last updated:** [February 8, 2018, 12:05pm UTC](https://discuss.elastic.co/t/dec-1st-2017-en-elastic-stack-upgrading-to-6-0-0/109300 "2018-02-08T12:05:26Z")

</div>

The Elastic Stack 6.0.0 was recently released as GA, and there are heaps of amazing changes, improvements, and new functionality ready to use! We've put a massive amount of work to make this the best possible release for…

---

## [\[Solved\] How can i do a manual rollover for all indices to the newest index policy?](https://discuss.elastic.co/t/solved-how-can-i-do-a-manual-rollover-for-all-indices-to-the-newest-index-policy/184694)

<div class="topic-metadata">

**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 6:42am UTC](https://discuss.elastic.co/t/solved-how-can-i-do-a-manual-rollover-for-all-indices-to-the-newest-index-policy/184694 "2019-06-07T06:42:46Z")

</div>

Is it possible to force a rollover for my indices to the latest updated policy? Currently, I have 3 indices in 1 policy and I have just updated my policy. It is now version 61. GET \_ilm/policy/filebeat-7.0.1 { "fileb…

---

## [What is the difference between keyword type vs. text type with keyword analyzer?](https://discuss.elastic.co/t/what-is-the-difference-between-keyword-type-vs-text-type-with-keyword-analyzer/81176)

<div class="topic-metadata">

**Author:** [@dng](https://discuss.elastic.co/u/dng)\
**Replies:** 1\
**Last updated:** [April 5, 2017, 2:21pm UTC](https://discuss.elastic.co/t/what-is-the-difference-between-keyword-type-vs-text-type-with-keyword-analyzer/81176 "2017-04-05T14:21:34Z")

</div>

What is the difference between using the keyword type vs. text type with the keyword analyzer? E.g. \* If I need to index a guid, which would I pick? \* If i need to index a single word, which would I pick? Thanks!

---

## [Too big a shard vs Too many shards](https://discuss.elastic.co/t/too-big-a-shard-vs-too-many-shards/75889)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 6\
**Last updated:** [February 22, 2017, 9:46am UTC](https://discuss.elastic.co/t/too-big-a-shard-vs-too-many-shards/75889 "2017-02-22T09:46:43Z")

</div>

Hi Elastic Team, I am in a bit of dilemma where currently I have limited amount of nodes in the cluster however the amount of data is fairly large so I need to decide whether I should have more shards in the whole clu…

---

## [How to warm up shard request cache?](https://discuss.elastic.co/t/how-to-warm-up-shard-request-cache/226109)

<div class="topic-metadata">

**Author:** [@hhsuey](https://discuss.elastic.co/u/hhsuey)\
**Replies:** 0\
**Last updated:** [April 1, 2020, 6:00pm UTC](https://discuss.elastic.co/t/how-to-warm-up-shard-request-cache/226109 "2020-04-01T18:00:39Z")

</div>

We have an elasticsearch cluster with 1 small index and high read to write volumes. It has 1 primary and several replicas to handle the read loads. We turned on shard request cache for searches (with size\>0 hits). As exp…

---

## [Dec 25th, 2021: \[en\] Using Elastic to build forms in your app](https://discuss.elastic.co/t/dec-25th-2021-en-using-elastic-to-build-forms-in-your-app/289475)

<div class="topic-metadata">

**Author:** [@britt\_joiner](https://discuss.elastic.co/u/britt_joiner)\
**Replies:** 0\
**Last updated:** [December 25, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-25th-2021-en-using-elastic-to-build-forms-in-your-app/289475 "2021-12-25T08:00:54Z")

</div>

While Elastic is most known for our open-source search tools, did you know we also have an open-source design library that anyone can use for creating the user interface inside of your apps and websites? You can not only…

---

## [Dec 5th, 2019 \[DE\] Weihnachtswünsche zusammenfassen mit Transforms](https://discuss.elastic.co/t/dec-5th-2019-de-weihnachtswunsche-zusammenfassen-mit-transforms/209946)

<div class="topic-metadata">

**Author:** [@Hendrik\_Muhs](https://discuss.elastic.co/u/Hendrik_Muhs)\
**Replies:** 0\
**Last updated:** [December 5, 2019, 7:59am UTC](https://discuss.elastic.co/t/dec-5th-2019-de-weihnachtswunsche-zusammenfassen-mit-transforms/209946 "2019-12-05T07:59:59Z")

</div>

Weihnachtswünsche zusammenfassen mit Transforms Zu Weihnachten gibt es die schöne Tradition des Wunschzettels, Kinder können hier Ihre Wünsche aufschreiben, aber auch Sorgen und andere Dinge dem Weihnachtsmann mitteilen.…

---

## [Fuzzy query ranks misspellings over exact for repeated "close" tokens](https://discuss.elastic.co/t/fuzzy-query-ranks-misspellings-over-exact-for-repeated-close-tokens/72605)

<div class="topic-metadata">

**Author:** [@Jean\_Helou](https://discuss.elastic.co/u/Jean_Helou)\
**Replies:** 0\
**Last updated:** [January 24, 2017, 9:48am UTC](https://discuss.elastic.co/t/fuzzy-query-ranks-misspellings-over-exact-for-repeated-close-tokens/72605 "2017-01-24T09:48:37Z")

</div>

In this issue I reported a was where exact matches where ranked below fuzzy matches in some edge cases which unfortunately affect us very directly. I think this would affect a lot of catalog searches. The problem occurs…

---

## [Dec 19th, 2020: \[EN\] OpenTelemetry in Go Applications using Elastic APM](https://discuss.elastic.co/t/dec-19th-2020-en-opentelemetry-in-go-applications-using-elastic-apm/257279)

<div class="topic-metadata">

**Author:** [@riferrei](https://discuss.elastic.co/u/riferrei)\
**Replies:** 0\
**Last updated:** [December 19, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-19th-2020-en-opentelemetry-in-go-applications-using-elastic-apm/257279 "2020-12-19T08:00:24Z")

</div>

Distributed tracing technologies allow developers to virtually glue together disparate services to build a cohesive transaction that can be observed by folks in the operations team. This is super important because the di…

---

## [Kibana - Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate-in-certificate-chain/299159)

<div class="topic-metadata">

**Author:** [@elasticScrub](https://discuss.elastic.co/u/elasticScrub)\
**Replies:** 6\
**Last updated:** [March 10, 2022, 5:01am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate-in-certificate-chain/299159 "2022-03-10T05:01:55Z")

</div>

When starting Kibana, I'm getting the following message: \[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain root@ubuntu:~# syste…

---

## [Multiple logstash ouputs for Filebeats](https://discuss.elastic.co/t/multiple-logstash-ouputs-for-filebeats/68427)

<div class="topic-metadata">

**Author:** [@apkruger](https://discuss.elastic.co/u/apkruger)\
**Replies:** 1\
**Last updated:** [December 8, 2016, 1:43pm UTC](https://discuss.elastic.co/t/multiple-logstash-ouputs-for-filebeats/68427 "2016-12-08T13:43:18Z")

</div>

One of our Business Application was developed and still supported by an external company, what we would like to do is use Filebeats to send this application logs to our own instance of Logstash as well as the External Co…

---

## [Dec 2nd, 2020: \[DE\] Aufgemerkt & zugehört! Bessere Suchresultate mit phonetischer Suche](https://discuss.elastic.co/t/dec-2nd-2020-de-aufgemerkt-zugehort-bessere-suchresultate-mit-phonetischer-suche/257045)

<div class="topic-metadata">

**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Replies:** 0\
**Last updated:** [December 2, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-2nd-2020-de-aufgemerkt-zugehort-bessere-suchresultate-mit-phonetischer-suche/257045 "2020-12-02T08:00:01Z")

</div>

Tippfehler - ärgerlich, aber in Zeiten des Smartphones omnipräsent und somit auch eine Herausforderung für Suchmaschinen. Es gibt unterschiedliche Strategien, mit Tippfehlern in einer Suchmaschine umzugehen. Man kann Vor…

---

## [Dec 1st, 2021: \[en\] The impact of Elasticsearch source filtering on performance](https://discuss.elastic.co/t/dec-1st-2021-en-the-impact-of-elasticsearch-source-filtering-on-performance/289181)

<div class="topic-metadata">

**Author:** [@Quentin\_Pradet](https://discuss.elastic.co/u/Quentin_Pradet)\
**Replies:** 0\
**Last updated:** [December 1, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2021-en-the-impact-of-elasticsearch-source-filtering-on-performance/289181 "2021-12-01T08:00:43Z")

</div>

:information\_source: Ce billet est aussi disponible en français : Dec 1st, 2021: \[fr\] L'impact du filtrage de champs sur les performances d'Elasticsearch A few years ago, I needed to retrieve many documents from Elastic…

---

## [Security for Elasticsearch is now free](https://discuss.elastic.co/t/security-for-elasticsearch-is-now-free/181904)

<div class="topic-metadata">

**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\
**Replies:** 0\
**Last updated:** [May 20, 2019, 9:43pm UTC](https://discuss.elastic.co/t/security-for-elasticsearch-is-now-free/181904 "2019-05-20T21:43:23Z")

</div>

Security for Elasticsearch is now free! We’re making core Elasticsearch security features more accessible for all. TLS encryption, file-based and native realm authentication, and role-based access control are now free u…

---

## [Enterprise Search 8.x - Docker Compose example](https://discuss.elastic.co/t/enterprise-search-8-x-docker-compose-example/284811)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [September 22, 2021, 7:39am UTC](https://discuss.elastic.co/t/enterprise-search-8-x-docker-compose-example/284811 "2021-09-22T07:39:07Z")

</div>

Here is a simple way to start Enterprise Search (App Search and Workplace Search) with docker-compose . File: docker-compose.yml --- version: "2.2" services: setup: image: docker.elastic.co/elasticsearch/elastic…

---

## [Dec 15th, 2019: \[EN\] Elasticsearch Snapshot Lifecycle Management (SLM) with Minio.io S3](https://discuss.elastic.co/t/dec-15th-2019-en-elasticsearch-snapshot-lifecycle-management-slm-with-minio-io-s3/210608)

<div class="topic-metadata">

**Author:** [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\
**Replies:** 0\
**Last updated:** [December 15, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-15th-2019-en-elasticsearch-snapshot-lifecycle-management-slm-with-minio-io-s3/210608 "2019-12-15T08:00:03Z")

</div>

Snapshot Lifecycle Management (SLM) is a way to schedule and define snapshot policies using the Elasticsearch API or the Kibana UI. It also allows to check the existing snapshots and restore them directly on Kibana. SLM…

---

## [Adjusting Time Intervals from Dashboard](https://discuss.elastic.co/t/adjusting-time-intervals-from-dashboard/92014)

<div class="topic-metadata">

**Author:** [@Jacqueline\_Kong](https://discuss.elastic.co/u/Jacqueline_Kong)\
**Replies:** 1\
**Last updated:** [July 7, 2017, 10:43am UTC](https://discuss.elastic.co/t/adjusting-time-intervals-from-dashboard/92014 "2017-07-07T10:43:45Z")

</div>

I'm making several dashboards, and would like to make it easy to adjust the time interval for a graph directly from the dashboard. Right now, I have each visualization set to automatically adjust the date range interv…

---

## [Is it possible to have a custom document\_id in Logstash?](https://discuss.elastic.co/t/is-it-possible-to-have-a-custom-document-id-in-logstash/69543)

<div class="topic-metadata">

**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\
**Replies:** 2\
**Last updated:** [December 20, 2016, 11:36am UTC](https://discuss.elastic.co/t/is-it-possible-to-have-a-custom-document-id-in-logstash/69543 "2016-12-20T11:36:18Z")

</div>

I'm having two jdbc filters (but the same connection parameters, apart from the MySQL query) in my input part where i'm trying to get data from the database and push it to the index. As I said the only difference in both…

---

## [Recommended number of workers](https://discuss.elastic.co/t/recommended-number-of-workers/92168)

<div class="topic-metadata">

**Author:** [@hding](https://discuss.elastic.co/u/hding)\
**Replies:** 8\
**Last updated:** [July 12, 2017, 1:44pm UTC](https://discuss.elastic.co/t/recommended-number-of-workers/92168 "2017-07-12T13:44:55Z")

</div>

I'm using ElasticSearch ingest node as output. I didn't set worker in filebeat.yml at first. The indexing rate was around 3k doc/sec. Then I set worker to 4. The indexing rate doubled to 6k doc/sec. What is the def…

---

## [Automatic Elasticsearch snapshot backup](https://discuss.elastic.co/t/automatic-elasticsearch-snapshot-backup/173223)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 0\
**Last updated:** [March 20, 2019, 8:45pm UTC](https://discuss.elastic.co/t/automatic-elasticsearch-snapshot-backup/173223 "2019-03-20T20:45:09Z")

</div>

This is not a question but information. I spend few hours to get this works, because nothing I found was what I wanted, hence posting it here for other people Once you setup first few variable this script will do backup…

---

## [Filebeat: DNS lookup error for ip](https://discuss.elastic.co/t/filebeat-dns-lookup-error-for-ip/81466)

<div class="topic-metadata">

**Author:** [@mw\_jko](https://discuss.elastic.co/u/mw_jko)\
**Replies:** 1\
**Last updated:** [April 6, 2017, 10:44pm UTC](https://discuss.elastic.co/t/filebeat-dns-lookup-error-for-ip/81466 "2017-04-06T22:44:12Z")

</div>

Hi there, I'm setting up filebeat on one of our servers. Config checks says everything is fine: sudo service filebeat start 2017/04/06 12:28:36.166996 beat.go:285: INFO Home path: \[/usr/share/filebeat\] Config path: \[…

---

## [Combine 'should' with 'filter' (search API)](https://discuss.elastic.co/t/combine-should-with-filter-search-api/139129)

<div class="topic-metadata">

**Author:** [@cweinberger](https://discuss.elastic.co/u/cweinberger)\
**Replies:** 2\
**Last updated:** [July 11, 2018, 9:07am UTC](https://discuss.elastic.co/t/combine-should-with-filter-search-api/139129 "2018-07-11T09:07:58Z")

</div>

When combining should with filter, the conditions in should are ignored. When using must, the filter works as expected. Query without filter: { "query": { "bool": { "should": \[ {…

---

## [Detection and Response for ProxyShell Activity](https://discuss.elastic.co/t/detection-and-response-for-proxyshell-activity/282407)

<div class="topic-metadata">

**Author:** [@variable](https://discuss.elastic.co/u/variable)\
**Replies:** 0\
**Last updated:** [August 24, 2021, 7:58pm UTC](https://discuss.elastic.co/t/detection-and-response-for-proxyshell-activity/282407 "2021-08-24T19:58:56Z")

</div>

Detection and Response for ProxyShell Activity Executive Summary On August 21, 2021, the Cybersecurity and Infrastructure Security Agency (CISA) released an urgent notice related to the exploitation of ProxyShell vulnera…

---

## [Elasticsearch is Open Source, again](https://discuss.elastic.co/t/elasticsearch-is-open-source-again/365798)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [August 30, 2024, 7:05am UTC](https://discuss.elastic.co/t/elasticsearch-is-open-source-again/365798 "2024-08-30T07:05:39Z")

</div>

Hey Elasticsearch and Kibana are going open source, again! We are super excited by this addition of an open source license alongside ELv2 and SSPL. The repositories will be updated soonish. You can read more about th…

---

## [Dec 9th, 2019 \[EN\]\[Kibana\] Smart query cancellation in Kibana](https://discuss.elastic.co/t/dec-9th-2019-en-kibana-smart-query-cancellation-in-kibana/211047)

<div class="topic-metadata">

**Author:** [@lukas](https://discuss.elastic.co/u/lukas)\
**Replies:** 0\
**Last updated:** [December 9, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-9th-2019-en-kibana-smart-query-cancellation-in-kibana/211047 "2019-12-09T08:00:08Z")

</div>

Since the beginning, Kibana has always been about taking huge volumes of data in Elasticsearch and making sense of it visually. Over time, Kibana has stretched the limits of Elasticsearch, and we’ve needed to make change…

---

## [Deprecated field \[template\] used, replaced by \[index\_patterns\]](https://discuss.elastic.co/t/deprecated-field-template-used-replaced-by-index-patterns/120528)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 0\
**Last updated:** [February 19, 2018, 9:18pm UTC](https://discuss.elastic.co/t/deprecated-field-template-used-replaced-by-index-patterns/120528 "2018-02-19T21:18:21Z")

</div>

While I was deleting one of my old snapshot, I noticed following message: \< Warning: 299 Elasticsearch-6.2.1-7299dc3 "Deprecated field \[template\] used, replaced by \[index\_patterns\]" "Mon, 19 Feb 2018 16:52:33 GMT" ho…

[Previous page](https://discuss.elastic.co/top.md?page=254&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=256&per_page=50&period=all)
