# Top

**URL:** https://discuss.elastic.co/top.md?page=337&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 338

---

## [Browser error: Your browser does not meet the security requirements for Kibana](https://discuss.elastic.co/t/browser-error-your-browser-does-not-meet-the-security-requirements-for-kibana/329499)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [April 12, 2023, 10:39pm UTC](https://discuss.elastic.co/t/browser-error-your-browser-does-not-meet-the-security-requirements-for-kibana/329499 "2023-04-12T22:39:27Z")

</div>

Hi all, When my dashboards get loaded in browser, the below error pops up everytime & it gets frustrating to show this pop up to others. Dashboards get loaded , but this error pops up too. I'm using ES version 8.6.2 …

---

## [Why does \_stats doc count differ from \_search/\_count doc count for an index?](https://discuss.elastic.co/t/why-does--stats-doc-count-differ-from--search--count-doc-count-for-an-index/21722)

<div class="topic-metadata">

**Author:** [@Peter\_2](https://discuss.elastic.co/u/Peter_2)\
**Replies:** 3\
**Last updated:** [January 20, 2015, 6:34am UTC](https://discuss.elastic.co/t/why-does--stats-doc-count-differ-from--search--count-doc-count-for-an-index/21722 "2015-01-20T06:34:14Z")

</div>

Hi Team, I'm trying to work out which documents the \_stats is counting when the index \_count is so much smaller. On a test index with no replicas. When hitting the stats: localhost:9200/my-index/\_stats ind…

---

## [How to have CURL command equivalent of triple quotes?](https://discuss.elastic.co/t/how-to-have-curl-command-equivalent-of-triple-quotes/248332)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 0\
**Last updated:** [September 11, 2020, 1:27pm UTC](https://discuss.elastic.co/t/how-to-have-curl-command-equivalent-of-triple-quotes/248332 "2020-09-11T13:27:49Z")

</div>

hi, we have a watcher code which contains "actions": { "index\_alert": { "transform": { "script": { "source": """ return \[ 'watch\_id': ctx.watch\_id, …

---

## [Debug Errors while setting up SSL communication between Filebeat and Logstash](https://discuss.elastic.co/t/debug-errors-while-setting-up-ssl-communication-between-filebeat-and-logstash/107421)

<div class="topic-metadata">

**Author:** [@Shalvin\_Kumar](https://discuss.elastic.co/u/Shalvin_Kumar)\
**Replies:** 6\
**Last updated:** [November 17, 2017, 11:57am UTC](https://discuss.elastic.co/t/debug-errors-while-setting-up-ssl-communication-between-filebeat-and-logstash/107421 "2017-11-17T11:57:27Z")

</div>

I am trying a POC for my organisation and have the following setup : Filebeat on Linux Server Logstash, ElasticSearch and Kibana on Windows Server 2012 A simple flow of picking up log files from Filebeat to Kibana wor…

---

## [Logstash to delete document from Elasticsearch](https://discuss.elastic.co/t/logstash-to-delete-document-from-elasticsearch/27142)

<div class="topic-metadata">

**Author:** [@umangjain](https://discuss.elastic.co/u/umangjain)\
**Replies:** 6\
**Last updated:** [August 19, 2015, 2:36pm UTC](https://discuss.elastic.co/t/logstash-to-delete-document-from-elasticsearch/27142 "2015-08-19T14:36:18Z")

</div>

I am using Logstash version 1.5.1 to parse a log file and create or update documents on Elasticsearch. In one of the cases, I am trying to delete an existing document from elasticsearch using logstash configuration file.…

---

## [When starting elasticsearch - 'can not run elasticsearch as root'](https://discuss.elastic.co/t/when-starting-elasticsearch-can-not-run-elasticsearch-as-root/166914)

<div class="topic-metadata">

**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\
**Replies:** 3\
**Last updated:** [February 4, 2019, 11:55am UTC](https://discuss.elastic.co/t/when-starting-elasticsearch-can-not-run-elasticsearch-as-root/166914 "2019-02-04T11:55:33Z")

</div>

How to resolve ?? I am centos 6... just removed elasticsearch older version and installed v6.5.4 now trying to start service as - \[root@localhost elasticsearch\]# bin/elasticsearch & but getting error as - \[1\] 10317 …

---

## [Grok Expression in If condition Filter](https://discuss.elastic.co/t/grok-expression-in-if-condition-filter/58615)

<div class="topic-metadata">

**Author:** [@kamesh](https://discuss.elastic.co/u/kamesh)\
**Replies:** 4\
**Last updated:** [August 24, 2016, 2:14pm UTC](https://discuss.elastic.co/t/grok-expression-in-if-condition-filter/58615 "2016-08-24T14:14:52Z")

</div>

Is it possible to use Grok Expression with in If condition i.e. filter { if (\[message\] = /^\\%{TIMESTAMP\_ISO8601}) (i.e. if line starts with ISO8601 Timestamp it needs to execute different condition) { grok (some co…

---

## [Shard Relocation Speed](https://discuss.elastic.co/t/shard-relocation-speed/135999)

<div class="topic-metadata">

**Author:** [@Jonathan\_Mendenhall](https://discuss.elastic.co/u/Jonathan_Mendenhall)\
**Replies:** 7\
**Last updated:** [June 22, 2018, 7:10am UTC](https://discuss.elastic.co/t/shard-relocation-speed/135999 "2018-06-22T07:10:54Z")

</div>

I'm trying to get a good grasp on how long I can expect for a replica shard to take to transfer between nodes. Running ES 6.2 on Windows, I ran a few tests. First I used the "/\_cluster/reroute" API to get a good baseli…

---

## [Can't start filebeat on windows-machine](https://discuss.elastic.co/t/cant-start-filebeat-on-windows-machine/32954)

<div class="topic-metadata">

**Author:** [@moo2k](https://discuss.elastic.co/u/moo2k)\
**Replies:** 7\
**Last updated:** [February 2, 2017, 9:55am UTC](https://discuss.elastic.co/t/cant-start-filebeat-on-windows-machine/32954 "2017-02-02T09:55:06Z")

</div>

Hello, guys. I have installed and configured ElasticSearch, Logstash and Kibana on my windows-machine. I downloaded a FileBeat product. But I can't start filebeat service via PowerShell or manually. Service installs. but…

---

## [How to search fields with dates in KQL](https://discuss.elastic.co/t/how-to-search-fields-with-dates-in-kql/206673)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 2\
**Last updated:** [November 18, 2019, 5:35pm UTC](https://discuss.elastic.co/t/how-to-search-fields-with-dates-in-kql/206673 "2019-11-18T17:35:56Z")

</div>

So this link: nor this link: https://www.elastic.co/guide/en/kibana/current/kuery-query.html document how to use KQL to search fields with dates. We have a creation\_date field (not the @timestamp) and would like t…

---

## [Split columns in a table](https://discuss.elastic.co/t/split-columns-in-a-table/49184)

<div class="topic-metadata">

**Author:** [@fred-d](https://discuss.elastic.co/u/fred-d)\
**Replies:** 5\
**Last updated:** [June 13, 2017, 2:16pm UTC](https://discuss.elastic.co/t/split-columns-in-a-table/49184 "2017-06-13T14:16:27Z")

</div>

Hello, I have some problems creating a table and I hope you can help me. The relevant part in my documents is a string field and an integer field. I have a row (bucket) for each string. I want columns with count for di…

---

## [Can't get ctx.payload.hits.hits.index.fields.fieldname to work](https://discuss.elastic.co/t/cant-get-ctx-payload-hits-hits-index-fields-fieldname-to-work/25471)

<div class="topic-metadata">

**Author:** [@crayy8](https://discuss.elastic.co/u/crayy8)\
**Replies:** 5\
**Last updated:** [November 14, 2016, 8:33pm UTC](https://discuss.elastic.co/t/cant-get-ctx-payload-hits-hits-index-fields-fieldname-to-work/25471 "2016-11-14T20:33:57Z")

</div>

Hi, I am trying to get some data from the returned query results into my web hook action but I cant get it to work. The bellow is a simple example I came up with to test out what I wanted to do. ctx.payload.hits.hits.0…

---

## [Group by data in data table using Kibana](https://discuss.elastic.co/t/group-by-data-in-data-table-using-kibana/32745)

<div class="topic-metadata">

**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\
**Replies:** 1\
**Last updated:** [October 29, 2015, 6:24am UTC](https://discuss.elastic.co/t/group-by-data-in-data-table-using-kibana/32745 "2015-10-29T06:24:16Z")

</div>

How will i group by data in data table using kibana? Also, is it possible to to check condition between two fields like field1 \> field2 and then taking the sum of them. Thank you

---

## [Query string with range](https://discuss.elastic.co/t/query-string-with-range/85111)

<div class="topic-metadata">

**Author:** [@X\_Calibur](https://discuss.elastic.co/u/X_Calibur)\
**Replies:** 3\
**Last updated:** [May 9, 2017, 2:52pm UTC](https://discuss.elastic.co/t/query-string-with-range/85111 "2017-05-09T14:52:34Z")

</div>

I'm having difficulties getting the this one right. What did I miss? { "query": { "query\_string" : { "analyze\_wildcard": true, "query" : "failed to add key to cache" }, "ran…

---

## [When I log in to Kibana as kibana\_system user, it says "You do not have permission"](https://discuss.elastic.co/t/when-i-log-in-to-kibana-as-kibana-system-user-it-says-you-do-not-have-permission/290837)

<div class="topic-metadata">

**Author:** [@tadashi.oya](https://discuss.elastic.co/u/tadashi.oya)\
**Replies:** 4\
**Last updated:** [December 3, 2021, 7:38am UTC](https://discuss.elastic.co/t/when-i-log-in-to-kibana-as-kibana-system-user-it-says-you-do-not-have-permission/290837 "2021-12-03T07:38:40Z")

</div>

Hi there. When I log in to Kibana as kibana\_system user, it says "You do not have permission to access the requested page". As elastic user, the dashboard is displayed. The reproduction procedure is as follows. step …

---

## [\[elasticserach performance\] Elasticsearch-spend-all-time-in-build-scorer](https://discuss.elastic.co/t/elasticserach-performance-elasticsearch-spend-all-time-in-build-scorer/113717)

<div class="topic-metadata">

**Author:** [@Holygost](https://discuss.elastic.co/u/Holygost)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 2:21pm UTC](https://discuss.elastic.co/t/elasticserach-performance-elasticsearch-spend-all-time-in-build-scorer/113717 "2018-01-05T14:21:56Z")

</div>

I use ES 5.5.0，and I have the same problem that the time almost cost at build\_scorer, detail as follow:

---

## [Hunspell vs russian-morphology](https://discuss.elastic.co/t/hunspell-vs-russian-morphology/168341)

<div class="topic-metadata">

**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\
**Replies:** 7\
**Last updated:** [March 1, 2019, 5:51am UTC](https://discuss.elastic.co/t/hunspell-vs-russian-morphology/168341 "2019-03-01T05:51:31Z")

</div>

Всем привет! Пытаюсь перейтина hunspell, но пока результат не очень получается. Например, слово "быстро" - молуль морфологии возвращает "быстро" и "быстрый". Делаю анализатор с hunspell и словарями из libreoffice - ка…

---

## [Data node CPU constantly 90-98% on one node](https://discuss.elastic.co/t/data-node-cpu-constantly-90-98-on-one-node/302720)

<div class="topic-metadata">

**Author:** [@Damelon](https://discuss.elastic.co/u/Damelon)\
**Replies:** 5\
**Last updated:** [May 2, 2022, 5:46pm UTC](https://discuss.elastic.co/t/data-node-cpu-constantly-90-98-on-one-node/302720 "2022-05-02T17:46:22Z")

</div>

I currently have an Elasticsearch cluster (7.15.1) Which has 3 masters, 6 data nodes, 2 ingest nodes which is deployed onto Kubernetes in AWS. Each data node is using an m5.2xlarge AWS instance and a 1.5TB storage volu…

---

## [Encryption at rest support in x-pack platinum](https://discuss.elastic.co/t/encryption-at-rest-support-in-x-pack-platinum/100111)

<div class="topic-metadata">

**Author:** [@nkoothrappahli](https://discuss.elastic.co/u/nkoothrappahli)\
**Replies:** 3\
**Last updated:** [May 19, 2020, 5:49am UTC](https://discuss.elastic.co/t/encryption-at-rest-support-in-x-pack-platinum/100111 "2020-05-19T05:49:17Z")

</div>

According to https://www.elastic.co/subscriptions there is "Encryption at rest support" in Platinum x-pack security (formerly Shield). I cannot find any documentation about it or how to enable or configure it. Can you pl…

---

## [Painless scripting: Update a OBJECT FIELD](https://discuss.elastic.co/t/painless-scripting-update-a-object-field/195488)

<div class="topic-metadata">

**Author:** [@Koshur](https://discuss.elastic.co/u/Koshur)\
**Replies:** 1\
**Last updated:** [August 16, 2019, 12:43pm UTC](https://discuss.elastic.co/t/painless-scripting-update-a-object-field/195488 "2019-08-16T12:43:32Z")

</div>

We have a field called access2 that is currently mapped with object (json). Now I want to add some data to it based on some logic. I want to check the value of another field access (which is mapped to nested/array) and …

---

## [Okay to use negative value for boost on boolean query?](https://discuss.elastic.co/t/okay-to-use-negative-value-for-boost-on-boolean-query/22474)

<div class="topic-metadata">

**Author:** [@jpotisch](https://discuss.elastic.co/u/jpotisch)\
**Replies:** 4\
**Last updated:** [March 3, 2015, 2:39pm UTC](https://discuss.elastic.co/t/okay-to-use-negative-value-for-boost-on-boolean-query/22474 "2015-03-03T14:39:46Z")

</div>

I have a query template that currently returns results exactly as desired. I've been given a requirement to very slightly downrank results that have an optional boolean field set to True. The intent is to ensure that…

---

## [How to draw pie chart with sum of two columns](https://discuss.elastic.co/t/how-to-draw-pie-chart-with-sum-of-two-columns/127060)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 8\
**Last updated:** [May 2, 2018, 7:48am UTC](https://discuss.elastic.co/t/how-to-draw-pie-chart-with-sum-of-two-columns/127060 "2018-05-02T07:48:38Z")

</div>

Hey guys ! I've got a CSV which is imported into elasticsearch. It looks like : day;brushing;haircut;waxing hair removal;makeup Monday;150;350;0;50 Tuesday;130;450;0;120 Wednesday;40;250;60;120 Thursday;78;150;80;0 Fri…

---

## [Document Size Limit to 2kb while indexing document](https://discuss.elastic.co/t/document-size-limit-to-2kb-while-indexing-document/128337)

<div class="topic-metadata">

**Author:** [@Nitin\_Gupta2](https://discuss.elastic.co/u/Nitin_Gupta2)\
**Replies:** 7\
**Last updated:** [April 20, 2018, 2:14am UTC](https://discuss.elastic.co/t/document-size-limit-to-2kb-while-indexing-document/128337 "2018-04-20T02:14:21Z")

</div>

Hello team, I'm facing a serious issue while trying to index a document. I've simple java object "Country" which contains simple fields. Shown below; @JsonProperty("country") private String countryName; @JsonPro…

---

## [Resolved: Exampleconfiguration how to send logs from Logstash Kafka output plugin (8.1.0) to Azure Event Hubs with Kafka enabled](https://discuss.elastic.co/t/resolved-exampleconfiguration-how-to-send-logs-from-logstash-kafka-output-plugin-8-1-0-to-azure-event-hubs-with-kafka-enabled/201485)

<div class="topic-metadata">

**Author:** [@ssddgreg](https://discuss.elastic.co/u/ssddgreg)\
**Replies:** 0\
**Last updated:** [September 28, 2019, 9:45am UTC](https://discuss.elastic.co/t/resolved-exampleconfiguration-how-to-send-logs-from-logstash-kafka-output-plugin-8-1-0-to-azure-event-hubs-with-kafka-enabled/201485 "2019-09-28T09:45:12Z")

</div>

This post is for information sharing as there is so little complete documentation on how to connect Kafka clients (2.x) to Azure Event Hubs with Kafka enabled. Feel free to comment and use my examples:

---

## [The environment LS\_HEAP\_SIZE setting](https://discuss.elastic.co/t/the-environment-ls-heap-size-setting/55363)

<div class="topic-metadata">

**Author:** [@xiaozhuqq48](https://discuss.elastic.co/u/xiaozhuqq48)\
**Replies:** 5\
**Last updated:** [July 15, 2016, 6:16am UTC](https://discuss.elastic.co/t/the-environment-ls-heap-size-setting/55363 "2016-07-15T06:16:17Z")

</div>

I'm using bin/logstash -f xx.conf -b 2000 -m 6, but i get a warning, "CAUTION: Recommended inflight events max exceeded!.xxxxxxxxxxxxxxxxx this may cause instability with the default heap size. please consider setting…

---

## [Lower/Upper case search](https://discuss.elastic.co/t/lower-upper-case-search/113322)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 5\
**Last updated:** [December 29, 2017, 10:52pm UTC](https://discuss.elastic.co/t/lower-upper-case-search/113322 "2017-12-29T22:52:14Z")

</div>

In a kibana dashboard I need to query a field for upper or lowercase. The field is a scriptblock from powershell so it has to be a string(text), I need to be able to search for different words inside it. After reading …

---

## [No data on kibana](https://discuss.elastic.co/t/no-data-on-kibana/95899)

<div class="topic-metadata">

**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\
**Replies:** 8\
**Last updated:** [August 5, 2017, 1:38pm UTC](https://discuss.elastic.co/t/no-data-on-kibana/95899 "2017-08-05T13:38:15Z")

</div>

Hi , i am seeing data coming to ES but i dont see any data or newly created index in kibana . Below is my kibana.yml server.port: 5601 server.host: "dfdevelasticp1.df.jabodo.com" elasticsearch.url: "http://d…

---

## [Unable to index child documents in parent-child relationship](https://discuss.elastic.co/t/unable-to-index-child-documents-in-parent-child-relationship/37380)

<div class="topic-metadata">

**Author:** [@godefroi](https://discuss.elastic.co/u/godefroi)\
**Replies:** 2\
**Last updated:** [December 16, 2015, 6:05pm UTC](https://discuss.elastic.co/t/unable-to-index-child-documents-in-parent-child-relationship/37380 "2015-12-16T18:05:10Z")

</div>

I've created an index with two types: PUT /pc\_test\_index { "mappings": { "childtype": { "\_parent": { "type": "parenttype" }, "properties": { "childprop": { "type": "st…

---

## [Displaying top 1000 results only in elastic search](https://discuss.elastic.co/t/displaying-top-1000-results-only-in-elastic-search/59479)

<div class="topic-metadata">

**Author:** [@subbu.nv](https://discuss.elastic.co/u/subbu.nv)\
**Replies:** 5\
**Last updated:** [October 31, 2016, 7:00pm UTC](https://discuss.elastic.co/t/displaying-top-1000-results-only-in-elastic-search/59479 "2016-10-31T19:00:15Z")

</div>

i have a simple search query, where i am searching all the documents that falls in a data range. i have more than 50K results, with in which i want to display only top 1000 results based on date. this way my query can a…

---

## [Compare fields in two documents?](https://discuss.elastic.co/t/compare-fields-in-two-documents/116548)

<div class="topic-metadata">

**Author:** [@kyle1441](https://discuss.elastic.co/u/kyle1441)\
**Replies:** 1\
**Last updated:** [January 23, 2018, 10:00am UTC](https://discuss.elastic.co/t/compare-fields-in-two-documents/116548 "2018-01-23T10:00:24Z")

</div>

Hello, In this topic, Get time elapsed between two different documents (now locked), it is indicated that Scripted Fields can help with this. However, elsewhere I've seen it mentioned that scripted fields only allow fiel…

---

## [Grok Filter + Expect Blank value into Variable/Parameter](https://discuss.elastic.co/t/grok-filter-expect-blank-value-into-variable-parameter/51621)

<div class="topic-metadata">

**Author:** [@sarthak2016](https://discuss.elastic.co/u/sarthak2016)\
**Replies:** 6\
**Last updated:** [June 3, 2016, 4:56pm UTC](https://discuss.elastic.co/t/grok-filter-expect-blank-value-into-variable-parameter/51621 "2016-06-03T16:56:24Z")

</div>

Hello All, Here is grok Filter grok { match =\> \["message", "%{DATESTAMP:timestamp1},%{GREEDYDATA:logmsg1},%{GREEDYDATA:logmsg2},%{INT:auth\_method1},%{INT:auth\_method2},%{GREEDYDATA:logmsg}"\] add\_field =\> \[ …

---

## [Field not found; typically this occurs with arrays which are not mapped as single value](https://discuss.elastic.co/t/field-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/45392)

<div class="topic-metadata">

**Author:** [@kraney](https://discuss.elastic.co/u/kraney)\
**Replies:** 8\
**Last updated:** [November 25, 2016, 2:56am UTC](https://discuss.elastic.co/t/field-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/45392 "2016-11-25T02:56:05Z")

</div>

I'm a new user, and I'm running into this error. Indeed the field it's complaining about is an array. I'm running elasticsearch-hadoop-2.2.0-rc1 I saw this topic on the error and attempted to use the fix with no improv…

---

## [New Install: unable to load JNA native support library](https://discuss.elastic.co/t/new-install-unable-to-load-jna-native-support-library/106738)

<div class="topic-metadata">

**Author:** [@boogybren](https://discuss.elastic.co/u/boogybren)\
**Replies:** 4\
**Last updated:** [November 8, 2017, 6:34pm UTC](https://discuss.elastic.co/t/new-install-unable-to-load-jna-native-support-library/106738 "2017-11-08T18:34:51Z")

</div>

CentOS Linux release 7.4.1708 (Core) java version "1.8.0\_152" elasticsearch-5.6.3 I am brand new to elasticsearch and hence, this is a brand new install. I installed elasticsearch using the rpm. After installation, …

---

## [Error on logstash, can't connect to elasticsearch](https://discuss.elastic.co/t/error-on-logstash-cant-connect-to-elasticsearch/28674)

<div class="topic-metadata">

**Author:** [@Aditya\_Patel](https://discuss.elastic.co/u/Aditya_Patel)\
**Replies:** 4\
**Last updated:** [September 9, 2015, 11:23am UTC](https://discuss.elastic.co/t/error-on-logstash-cant-connect-to-elasticsearch/28674 "2015-09-09T11:23:51Z")

</div>

Hi Currently I am using logstash forwarder , logstash and elasticsearch to monitor my syslogs on various machines. It was working fine but it stopped working all of sudden. I noticed my logstash had stopped working. …

---

## [How to prioritize more recent content?](https://discuss.elastic.co/t/how-to-prioritize-more-recent-content/134100)

<div class="topic-metadata">

**Author:** [@techliminal](https://discuss.elastic.co/u/techliminal)\
**Replies:** 2\
**Last updated:** [June 4, 2018, 6:15pm UTC](https://discuss.elastic.co/t/how-to-prioritize-more-recent-content/134100 "2018-06-04T18:15:24Z")

</div>

Hello there, I'm using ElasticSearch to search through a WordPress database. I'd like to create a query that returns results based on score, where the score is improved when a document is found with a more recent date,…

---

## [Controlling Elastic memory inside docker](https://discuss.elastic.co/t/controlling-elastic-memory-inside-docker/168368)

<div class="topic-metadata">

**Author:** [@Tobias\_Eriksson](https://discuss.elastic.co/u/Tobias_Eriksson)\
**Replies:** 4\
**Last updated:** [February 22, 2019, 10:26am UTC](https://discuss.elastic.co/t/controlling-elastic-memory-inside-docker/168368 "2019-02-22T10:26:26Z")

</div>

I am running Elastic 6.2.3 in a Docker container But do not understand how the RAM used by the process goes way beyond the limits set Container is configured "Memory": 34225520640, "CpusetMems": "", "KernelMemory":…

---

## [How to determine if a field is analyzed or not\_analyzed?](https://discuss.elastic.co/t/how-to-determine-if-a-field-is-analyzed-or-not-analyzed/54852)

<div class="topic-metadata">

**Author:** [@fikse](https://discuss.elastic.co/u/fikse)\
**Replies:** 3\
**Last updated:** [July 6, 2016, 5:54pm UTC](https://discuss.elastic.co/t/how-to-determine-if-a-field-is-analyzed-or-not-analyzed/54852 "2016-07-06T17:54:30Z")

</div>

must: { term: { ... }} fails but must: { match: { ... }} has hits. term will only work for not\_analyzed fields, correct? How can I see if a field is not\_analyzed?

---

## [Elasticsearch get random document, atleast 5 from each category](https://discuss.elastic.co/t/elasticsearch-get-random-document-atleast-5-from-each-category/120015)

<div class="topic-metadata">

**Author:** [@JACK-ARRAY](https://discuss.elastic.co/u/JACK-ARRAY)\
**Replies:** 5\
**Last updated:** [February 15, 2018, 6:47pm UTC](https://discuss.elastic.co/t/elasticsearch-get-random-document-atleast-5-from-each-category/120015 "2018-02-15T18:47:05Z")

</div>

I have 1000 documents with 5 categories. Each category has around 200 documents. I want to pull 30 random documents with at-least 5 from each category. Please suggest me any solution.

---

## [Which version of ES was an index created with?](https://discuss.elastic.co/t/which-version-of-es-was-an-index-created-with/157904)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 1\
**Last updated:** [November 22, 2018, 5:22pm UTC](https://discuss.elastic.co/t/which-version-of-es-was-an-index-created-with/157904 "2018-11-22T17:22:16Z")

</div>

Is it possible to see which version of elasticsearch an index was created with?

---

## [Delayed unassigned shards](https://discuss.elastic.co/t/delayed-unassigned-shards/65400)

<div class="topic-metadata">

**Author:** [@chihccha](https://discuss.elastic.co/u/chihccha)\
**Replies:** 5\
**Last updated:** [December 2, 2016, 11:19pm UTC](https://discuss.elastic.co/t/delayed-unassigned-shards/65400 "2016-12-02T23:19:31Z")

</div>

Hi guys! I have a question regarding how delayed\_unassigned\_shards works. Our ES cluster has - 5 datanodes, 5 master nodes, and 5 client nodes - we have this setting set to 5m for all our indices "index.unassigned…

---

## [Rollover Alias with date?](https://discuss.elastic.co/t/rollover-alias-with-date/126469)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 8\
**Last updated:** [April 5, 2018, 5:28pm UTC](https://discuss.elastic.co/t/rollover-alias-with-date/126469 "2018-04-05T17:28:11Z")

</div>

Hello All, I'm having difficulty figuring out the correct API call to rollover an index to an hourly index name. Basically I need to rollover every hour if the index is over a certain size, and I have it working with a …

---

## [Satellite Tile Map in Kibana](https://discuss.elastic.co/t/satellite-tile-map-in-kibana/182765)

<div class="topic-metadata">

**Author:** [@cblackburn36](https://discuss.elastic.co/u/cblackburn36)\
**Replies:** 2\
**Last updated:** [May 27, 2019, 1:31am UTC](https://discuss.elastic.co/t/satellite-tile-map-in-kibana/182765 "2019-05-27T01:31:52Z")

</div>

Hi All, I'm trying to get the Kibana Maps app to show satellite images rather than the standard cartesian "road\_map" that's provided by default. Is it possible to connect it to another data source for this? If so is th…

---

## [Updating documents with Elasticsearch output](https://discuss.elastic.co/t/updating-documents-with-elasticsearch-output/91898)

<div class="topic-metadata">

**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\
**Replies:** 5\
**Last updated:** [July 10, 2017, 10:32am UTC](https://discuss.elastic.co/t/updating-documents-with-elasticsearch-output/91898 "2017-07-10T10:32:48Z")

</div>

I'm trying to figure out how to update documents properly using the Elasticsearch output. Documentation on this issue is very confusing. I have a document that might already be in Elasticsearch, and if so I would like …

---

## [Logstash service keeps crashing](https://discuss.elastic.co/t/logstash-service-keeps-crashing/37330)

<div class="topic-metadata">

**Author:** [@simroo](https://discuss.elastic.co/u/simroo)\
**Replies:** 7\
**Last updated:** [December 16, 2015, 11:25am UTC](https://discuss.elastic.co/t/logstash-service-keeps-crashing/37330 "2015-12-16T11:25:44Z")

</div>

Hello I have som problems with logstash and it keeps crashing. Im not sure why, i thought it was a premisson problem but after chmod 777 on the files, the problem still prisets. Note that this is during installation on…

---

## [The security index is not yet available - no role mappings can be loaded](https://discuss.elastic.co/t/the-security-index-is-not-yet-available-no-role-mappings-can-be-loaded/107295)

<div class="topic-metadata">

**Author:** [@Sarra\_Bouhenni](https://discuss.elastic.co/u/Sarra_Bouhenni)\
**Replies:** 4\
**Last updated:** [November 12, 2017, 12:31pm UTC](https://discuss.elastic.co/t/the-security-index-is-not-yet-available-no-role-mappings-can-be-loaded/107295 "2017-11-12T12:31:23Z")

</div>

Hello X-Pack community, After installing an elasticsearch cluster 5.6.3 on Kubernetes for about one week. One of my data nodes crushed and I can't access to the cluster anymore. The master reports the following error: …

---

## [How can access kibana in ip address?](https://discuss.elastic.co/t/how-can-access-kibana-in-ip-address/130706)

<div class="topic-metadata">

**Author:** [@Lynnic](https://discuss.elastic.co/u/Lynnic)\
**Replies:** 3\
**Last updated:** [May 5, 2018, 3:08pm UTC](https://discuss.elastic.co/t/how-can-access-kibana-in-ip-address/130706 "2018-05-05T15:08:07Z")

</div>

I have two machine , machine A and machine B and they are in the same local area network. I installed kibana in machine A and set server.host "127.0.0.1" in kibana.yml and I cannot access the page in machine B via mac…

---

## [Url kibana still charging](https://discuss.elastic.co/t/url-kibana-still-charging/292966)

<div class="topic-metadata">

**Author:** [@Aouatif\_Bouka](https://discuss.elastic.co/u/Aouatif_Bouka)\
**Replies:** 0\
**Last updated:** [December 27, 2021, 10:54am UTC](https://discuss.elastic.co/t/url-kibana-still-charging/292966 "2021-12-27T10:54:39Z")

</div>

hi, i have setup Elasticsearch, kibana and logstash version 7.16.2 and the UrL kibana works fine the firts day. second day, when i need to access to my kibana URL it still serach without any result. in the console of …

---

## [Trouble running metricbeat:5.3.0 with docker module](https://discuss.elastic.co/t/trouble-running-metricbeat-5-3-0-with-docker-module/82204)

<div class="topic-metadata">

**Author:** [@bsimpson53](https://discuss.elastic.co/u/bsimpson53)\
**Replies:** 7\
**Last updated:** [April 24, 2017, 3:24am UTC](https://discuss.elastic.co/t/trouble-running-metricbeat-5-3-0-with-docker-module/82204 "2017-04-24T03:24:30Z")

</div>

Hi, I've got metricbeat:5.3.0 happily pumping host data (system module) directly to elasticsearch:5.3.0 within a docker swarm (swarm mode), but I'm having difficulty getting the metricbeat docker module to work (I have…

---

## [How to convert existing timestamp format to another timestamp format using logstash?](https://discuss.elastic.co/t/how-to-convert-existing-timestamp-format-to-another-timestamp-format-using-logstash/87889)

<div class="topic-metadata">

**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\
**Replies:** 8\
**Last updated:** [June 2, 2017, 11:27am UTC](https://discuss.elastic.co/t/how-to-convert-existing-timestamp-format-to-another-timestamp-format-using-logstash/87889 "2017-06-02T11:27:49Z")

</div>

Hi Guyz, i have 2 different application logs. one is containing (application1) 16/02/2017 19:21:19:452 INFO - 9DDF7A1C53D518BC9C4F7DAE9045C70E:/RCOM\_PREPAID : \*\* Popped Stack Frame \[/RCOM\_PREPAID\] 16/02/2017 19:21:19…

---

## [Why does Elasticsearch choose to relocate shards?](https://discuss.elastic.co/t/why-does-elasticsearch-choose-to-relocate-shards/153939)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 6\
**Last updated:** [October 25, 2018, 10:12am UTC](https://discuss.elastic.co/t/why-does-elasticsearch-choose-to-relocate-shards/153939 "2018-10-25T10:12:05Z")

</div>

I've read https://www.elastic.co/blog/every-shard-deserves-a-home but can't see how any of the cases there apply. ES seems to be spending all its time moving shards around, sometimes apparently taking hours to move mult…

[Previous page](https://discuss.elastic.co/top.md?page=336&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=338&per_page=50&period=all)
