# Top **URL:** https://discuss.elastic.co/top.md?page=496&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 497 --- ## [Terms Query performance with increased number of terms](https://discuss.elastic.co/t/terms-query-performance-with-increased-number-of-terms/206888)
**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 6:58am UTC](https://discuss.elastic.co/t/terms-query-performance-with-increased-number-of-terms/206888 "2019-11-08T06:58:31Z")
I would like to understand how the performance of terms query is effected by the number of terms passed in to the terms query. According to very old blogs and Q&A terms around 1000 should not cause issue but what if the … --- ## [Kibana alerting message with query results](https://discuss.elastic.co/t/kibana-alerting-message-with-query-results/264075)
**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\ **Replies:** 6\ **Last updated:** [February 18, 2021, 5:19pm UTC](https://discuss.elastic.co/t/kibana-alerting-message-with-query-results/264075 "2021-02-18T17:19:08Z")
I have a Kibana monitor setup with a trigger and actions. In the actions email message I can email the alert query results for 1 document with these ctx parameters: - Hostname: {{ctx.results.0.hits.hits.0.\_source.host.n… --- ## [Index.lifecycle.rollover\_alias \[filebeat-7.9.1\] does not point to index \[filebeat-7.9.1-2020.09.30\]](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-9-1-does-not-point-to-index-filebeat-7-9-1-2020-09-30/259798)
**Author:** [@NaiaraSS](https://discuss.elastic.co/u/NaiaraSS)\ **Replies:** 6\ **Last updated:** [January 13, 2021, 9:25pm UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-filebeat-7-9-1-does-not-point-to-index-filebeat-7-9-1-2020-09-30/259798 "2021-01-13T21:25:28Z")
Hi everyone! I was balancing my nodes, and after i get sucessfull i needed to improve my storeage, after i finish this procedure, i got this error in node master: \[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[n… --- ## [Enterprise Search 8.11.2 / 7.17.16 Security Update (ESA-2023-31)](https://discuss.elastic.co/t/enterprise-search-8-11-2-7-17-16-security-update-esa-2023-31/349181)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 5:06pm UTC](https://discuss.elastic.co/t/enterprise-search-8-11-2-7-17-16-security-update-esa-2023-31/349181 "2023-12-12T17:06:41Z")
Enterprise Search Insertion of Sensitive Information into Log File (ESA-2023-31) An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents at INFO log level. … --- ## [Exporting a saved search to JSON file](https://discuss.elastic.co/t/exporting-a-saved-search-to-json-file/227543)
**Author:** [@soffonisol](https://discuss.elastic.co/u/soffonisol)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 7:33pm UTC](https://discuss.elastic.co/t/exporting-a-saved-search-to-json-file/227543 "2020-04-10T19:33:48Z")
I have seen many articles that instructs us to go to management -\> Saved Object -\> export from there. However, when I examine the exported JSON, it's completely different than my saved search results. Do you know why tha… --- ## [NGinx + Elasticsearch + HTTP keepalive](https://discuss.elastic.co/t/nginx-elasticsearch-http-keepalive/1021)
**Author:** [@Roy\_Russo](https://discuss.elastic.co/u/Roy_Russo)\ **Replies:** 3\ **Last updated:** [May 21, 2015, 9:00am UTC](https://discuss.elastic.co/t/nginx-elasticsearch-http-keepalive/1021 "2015-05-21T09:00:46Z")
We have setup several small clusters and are noticing strange HTTP keepalive behavior. My understanding is that keepalive in NGinx should keep the given number of connections open to the backend ES cluster. Unfortunately… --- ## [Using conditional formatting for Kibana Visualization Data Table](https://discuss.elastic.co/t/using-conditional-formatting-for-kibana-visualization-data-table/137590)
**Author:** [@Sandeep\_Kumar2](https://discuss.elastic.co/u/Sandeep_Kumar2)\ **Replies:** 1\ **Last updated:** [June 27, 2018, 5:14pm UTC](https://discuss.elastic.co/t/using-conditional-formatting-for-kibana-visualization-data-table/137590 "2018-06-27T17:14:48Z")
Hello, I want to add conditional formatting like excel based on certain field value to color code the cells. How i can achieve that. e.g. If field value is yes, I want green and if it is no I want in to red color. Nee… --- ## [I got "Limited to 500 results. Refine your search. 256 documents" in save search displayed in dashboard](https://discuss.elastic.co/t/i-got-limited-to-500-results-refine-your-search-256-documents-in-save-search-displayed-in-dashboard/296420)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 6:57am UTC](https://discuss.elastic.co/t/i-got-limited-to-500-results-refine-your-search-256-documents-in-save-search-displayed-in-dashboard/296420 "2022-02-07T06:57:25Z")
Hi All, I'm using 7.16.2 version. I have a saved search that I'm displaying in dashboard. When I add a filter for a text field which contains certain text I get: "Limited to 500 results. Refine your search. 256 documen… --- ## [Using Jackson to parse JSON in an ingest processor](https://discuss.elastic.co/t/using-jackson-to-parse-json-in-an-ingest-processor/90927)
**Author:** [@pdesoyres](https://discuss.elastic.co/u/pdesoyres)\ **Replies:** 6\ **Last updated:** [June 28, 2017, 10:15pm UTC](https://discuss.elastic.co/t/using-jackson-to-parse-json-in-an-ingest-processor/90927 "2017-06-28T22:15:11Z")
Hello, I'm writing an ingest processor that has a JSON string as input. I'm using Jackson library to read that string but it seams that there are some limitation on the usage of the java reflection API. I'm getting the… --- ## [Best forwarder for elasticsearch](https://discuss.elastic.co/t/best-forwarder-for-elasticsearch/45715)
**Author:** [@rajkumar3v](https://discuss.elastic.co/u/rajkumar3v)\ **Replies:** 6\ **Last updated:** [June 17, 2016, 10:05pm UTC](https://discuss.elastic.co/t/best-forwarder-for-elasticsearch/45715 "2016-06-17T22:05:49Z")
Hi, I am using Graylog + Elastic clusters in my small production setup. Right now am using splunk forwarder to forward logs also using splunk forwarder i can easily run a shell or bash script and forwarding the output … --- ## [Wrong Canvas timezone](https://discuss.elastic.co/t/wrong-canvas-timezone/190221)
**Author:** [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\ **Replies:** 7\ **Last updated:** [July 19, 2019, 2:25pm UTC](https://discuss.elastic.co/t/wrong-canvas-timezone/190221 "2019-07-19T14:25:21Z")
I have created a line graph in canvas but in the time line I got a wrong timezone with the next SQL query: SELECT HISTOGRAM("@timestamp", INTERVAL 1 MINUTES) Hora, ip\_origen, COUNT(ip\_origen) as Cont FROM autenticacion… --- ## [Install Filebeat in remote server (Different from log servers)](https://discuss.elastic.co/t/install-filebeat-in-remote-server-different-from-log-servers/86692)
**Author:** [@ThaPoox](https://discuss.elastic.co/u/ThaPoox)\ **Replies:** 1\ **Last updated:** [May 23, 2017, 7:57am UTC](https://discuss.elastic.co/t/install-filebeat-in-remote-server-different-from-log-servers/86692 "2017-05-23T07:57:24Z")
I have 4 servers to check logs from, but I don't have access to install stuff in them, so I can't install Filebeat there. So I installed Filebeat locally (Just to test), and I was wondering if there's any way to get the … --- ## [Config file for multiple multi-line patterns?](https://discuss.elastic.co/t/config-file-for-multiple-multi-line-patterns/273877)
**Author:** [@1steve](https://discuss.elastic.co/u/1steve)\ **Replies:** 8\ **Last updated:** [May 27, 2021, 2:30pm UTC](https://discuss.elastic.co/t/config-file-for-multiple-multi-line-patterns/273877 "2021-05-27T14:30:52Z")
It looks like the configs described here no longer work; Config file for multiple multiline patterns There is now a codec for multiline inputs; Multiline codec plugin | Logstash Reference \[7.12\] | Elastic input { std… --- ## [JSON Query via REST from Java client](https://discuss.elastic.co/t/json-query-via-rest-from-java-client/93760)
**Author:** [@Velusamy\_Velu](https://discuss.elastic.co/u/Velusamy_Velu)\ **Replies:** 4\ **Last updated:** [July 26, 2017, 7:22pm UTC](https://discuss.elastic.co/t/json-query-via-rest-from-java-client/93760 "2017-07-26T19:22:21Z")
Friends: I want to know the way to send a query in JSON format to ES from Java via a REST API. For example one of my query is given below the signature line. I want to construct an end point in my Java client like this… --- ## [Nested objects, hits, inner hits and sorting](https://discuss.elastic.co/t/nested-objects-hits-inner-hits-and-sorting/32565)
**Author:** [@seagullmouse](https://discuss.elastic.co/u/seagullmouse)\ **Replies:** 2\ **Last updated:** [October 21, 2015, 9:05am UTC](https://discuss.elastic.co/t/nested-objects-hits-inner-hits-and-sorting/32565 "2015-10-21T09:05:34Z")
As an example imagine Mapping OuterObject contains nested NestedObject. Data OuterObject1 contains NestedObject1, NestedObject2 OuterObject2 contains NestedObject3, NestedObject4 Desired Results (using a nested fi… --- ## [Eck pvc pending](https://discuss.elastic.co/t/eck-pvc-pending/229919)
**Author:** [@willes](https://discuss.elastic.co/u/willes)\ **Replies:** 6\ **Last updated:** [April 27, 2020, 9:29am UTC](https://discuss.elastic.co/t/eck-pvc-pending/229919 "2020-04-27T09:29:45Z")
instlal operator kubectl apply -f https://download.elastic.co/downloads/eck/1.0.1/all-in-one.yaml run elasticsearch cluster cat \<\ **Author:** [@TheZeke](https://discuss.elastic.co/u/TheZeke)\ **Replies:** 5\ **Last updated:** [October 3, 2018, 8:20am UTC](https://discuss.elastic.co/t/dropped-udp-packets-on-logstash-inputs-3-different-udp-inputs/146922 "2018-10-03T08:20:59Z") Netdata Alert: 1m ipv4 udp receive buffer errors | 23650 errors I have a cluster of three servers that are all part of an ELK (Elasticsearch Logstash Kibana) cluster receiving netflow/sflow/ipfix data. Everything appe… --- ## [Splitting a single index into daily indices](https://discuss.elastic.co/t/splitting-a-single-index-into-daily-indices/49317)
**Author:** [@parthu](https://discuss.elastic.co/u/parthu)\ **Replies:** 4\ **Last updated:** [May 5, 2016, 6:33pm UTC](https://discuss.elastic.co/t/splitting-a-single-index-into-daily-indices/49317 "2016-05-05T18:33:08Z")
My situation is a little tricky. I currently run Elasticsearch 1.3.2 that has just ONE index over the months. I need to accomplish two things: a) Upgrade the version to Elasticsearch 2.3.2 b) Convert that ONE ind… --- ## [Template index with dynamic mapping to float](https://discuss.elastic.co/t/template-index-with-dynamic-mapping-to-float/43407)
**Author:** [@LiorK](https://discuss.elastic.co/u/LiorK)\ **Replies:** 5\ **Last updated:** [March 7, 2016, 12:37pm UTC](https://discuss.elastic.co/t/template-index-with-dynamic-mapping-to-float/43407 "2016-03-07T12:37:52Z")
Hi all, \[:slightly\_smiling:\] how I can manage and deploy a dynamic mapping to elasticsearch (which i will merge into index template later on) that will take a specific type and all his fields will be converted to float t… --- ## [Slow queries in case a very large number of documents match](https://discuss.elastic.co/t/slow-queries-in-case-a-very-large-number-of-documents-match/81420)
**Author:** [@girirajsharma](https://discuss.elastic.co/u/girirajsharma)\ **Replies:** 3\ **Last updated:** [April 6, 2017, 12:54pm UTC](https://discuss.elastic.co/t/slow-queries-in-case-a-very-large-number-of-documents-match/81420 "2017-04-06T12:54:04Z")
Let's say I have a index named test (15 shards and 1 replica) consisting of 10 million docs. Each of the document has a category assigned to it. Let's name the categories as C1, C2, C3...Cn. Consider C1 is assigned to m… --- ## [How to keep the latest row in kibana data table?](https://discuss.elastic.co/t/how-to-keep-the-latest-row-in-kibana-data-table/110791)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 4\ **Last updated:** [December 12, 2017, 7:22am UTC](https://discuss.elastic.co/t/how-to-keep-the-latest-row-in-kibana-data-table/110791 "2017-12-12T07:22:51Z")
Hi, Basically i am trying to show URLs status with response code and hostname in a DataTable with 15 minute interval which refreshes after every 10 secs. the above scenario is achieved, however if a service goes down a… --- ## [Date pattern in file input path](https://discuss.elastic.co/t/date-pattern-in-file-input-path/100538)
**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\ **Replies:** 4\ **Last updated:** [September 14, 2017, 4:03pm UTC](https://discuss.elastic.co/t/date-pattern-in-file-input-path/100538 "2017-09-14T16:03:38Z")
Hi, I am in need to read files from different folders. These folders are maintained daily in the format of dates. e.g. 20170912, 20170911 etc. I am trying the file input path as "var/opt/data/%{+YYYY}%{+MM}%{+dd}/\*.txt… --- ## [Replace the Kibana icon in Web page tabs](https://discuss.elastic.co/t/replace-the-kibana-icon-in-web-page-tabs/88248)
**Author:** [@TrungNguyen3010](https://discuss.elastic.co/u/TrungNguyen3010)\ **Replies:** 4\ **Last updated:** [June 6, 2017, 7:03am UTC](https://discuss.elastic.co/t/replace-the-kibana-icon-in-web-page-tabs/88248 "2017-06-06T07:03:21Z")
Does anyone know if it is possible to replace Kibana icon with my company icon as well as the title text ? We are using Kibana 5.4.0 version. --- ## [Try to Parsing Postfix Log Using Logstash](https://discuss.elastic.co/t/try-to-parsing-postfix-log-using-logstash/288397)
**Author:** [@RichYaNa](https://discuss.elastic.co/u/RichYaNa)\ **Replies:** 6\ **Last updated:** [December 6, 2021, 9:48am UTC](https://discuss.elastic.co/t/try-to-parsing-postfix-log-using-logstash/288397 "2021-12-06T09:48:12Z")
Hi, I'm currently parsing postfix logs using Logstash, you can check my config file here. and here is a sample log that I will parse: Nov 4 08:51:20 mail /postfix-script\[XPIDX\]: the Postfix mail system is running: PI… --- ## [Hardware Requirement for Kibana Multiple Dashboard](https://discuss.elastic.co/t/hardware-requirement-for-kibana-multiple-dashboard/285971)
**Author:** [@smart\_admin](https://discuss.elastic.co/u/smart_admin)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 9:04pm UTC](https://discuss.elastic.co/t/hardware-requirement-for-kibana-multiple-dashboard/285971 "2021-10-25T21:04:45Z")
I am working on multipe visulization dashboard On kibana.How much hardware requirement needed for Each visulization .Do we need to increase the hardware when we configure multiple logs filter on one Visulization . If ye… --- ## [Logstash - Creating multiple pipelines for beats inputs on same port](https://discuss.elastic.co/t/logstash-creating-multiple-pipelines-for-beats-inputs-on-same-port/204562)
**Author:** [@krishna\_bhargav](https://discuss.elastic.co/u/krishna_bhargav)\ **Replies:** 2\ **Last updated:** [October 24, 2019, 4:43pm UTC](https://discuss.elastic.co/t/logstash-creating-multiple-pipelines-for-beats-inputs-on-same-port/204562 "2019-10-24T16:43:43Z")
Am trying to create multiple pipelines beatsPipeline1 and beatsPipeline2 in logstash listening to beats events from same port but getting error saying address in use for second pipeline: pipeline.id: beatsPipeline1 pa… --- ## [Cluster\_block\_exception](https://discuss.elastic.co/t/cluster-block-exception/133525)
**Author:** [@Aviyoosh](https://discuss.elastic.co/u/Aviyoosh)\ **Replies:** 2\ **Last updated:** [May 28, 2018, 11:41am UTC](https://discuss.elastic.co/t/cluster-block-exception/133525 "2018-05-28T11:41:29Z")
Hi, When trying to add documents to index : put my\_index\_name/doc/5 i get this error: { "error": { "root\_cause": \[ { "type": "cluster\_block\_exception", "reason": "blocked by: \[FORBIDDEN/12/index read-only / allo… --- ## [Elastic cluster keeps crashing/hanging](https://discuss.elastic.co/t/elastic-cluster-keeps-crashing-hanging/91390)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 3\ **Last updated:** [June 30, 2017, 9:11am UTC](https://discuss.elastic.co/t/elastic-cluster-keeps-crashing-hanging/91390 "2017-06-30T09:11:47Z")
Hi. First of all , let me state , I'm a developer that read/write docs to elastic - but dont necessarily know all the ins and outs of elasticsearch setup/management. Secondly - I know its a long post , thanx for taking … --- ## [Nginx log filter problem](https://discuss.elastic.co/t/nginx-log-filter-problem/46744)
**Author:** [@wby](https://discuss.elastic.co/u/wby)\ **Replies:** 3\ **Last updated:** [April 11, 2016, 6:12pm UTC](https://discuss.elastic.co/t/nginx-log-filter-problem/46744 "2016-04-11T18:12:02Z")
Logstash 2.1.3 on CentOS 7. I'm sending logs to ELK in syslog format (for now, though will switch to JSON at some point) from rsyslog. I'm ingesting some nginx access logs in NCSA combined format. I do still see the … --- ## [How does Elasticsearch protect from data loss?](https://discuss.elastic.co/t/how-does-elasticsearch-protect-from-data-loss/33232)
**Author:** [@Attila\_Nagy](https://discuss.elastic.co/u/Attila_Nagy)\ **Replies:** 5\ **Last updated:** [November 1, 2015, 9:21pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-protect-from-data-loss/33232 "2015-11-01T21:21:34Z")
Hi, I would like to know whether (and how) ES protects me from data loss in the following case: I have an index with the default 5 shards, spread to three machines. The index has replica count of 1 (two replicas). In t… --- ## [Elastic 6.3.0 Error installing discovery and repository plugins](https://discuss.elastic.co/t/elastic-6-3-0-error-installing-discovery-and-repository-plugins/136018)
**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\ **Replies:** 7\ **Last updated:** [June 15, 2018, 8:44pm UTC](https://discuss.elastic.co/t/elastic-6-3-0-error-installing-discovery-and-repository-plugins/136018 "2018-06-15T20:44:01Z")
Hello, We've been successfully been able to install discovery 5.5 and 6.2.4 plugins on their respective Elastic Versions. We're using CFTs to install ES and these respective plugins. However, we moved to install 6.3.0 t… --- ## [Elastic Search AllPermission security manager issue ...continued](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue-continued/159091)
**Author:** [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\ **Replies:** 8\ **Last updated:** [December 8, 2018, 5:24am UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue-continued/159091 "2018-12-08T05:24:02Z")
Hi, This is in continuation to following post: \[2018-09-15T00:04:42,632\]\[ERROR\]\[o.e.b.Bootstrap \] \[PC-VISHALG\] node validation exception \[1\] bootstrap checks failed \[1\]: granting the all permission effecti… --- ## [How to set content-header in Kibana?](https://discuss.elastic.co/t/how-to-set-content-header-in-kibana/93851)
**Author:** [@west415](https://discuss.elastic.co/u/west415)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 5:18am UTC](https://discuss.elastic.co/t/how-to-set-content-header-in-kibana/93851 "2017-07-21T05:18:45Z")
Hi, I'm running Elastic 5.4.3 This should be simple, but how do you set the content-header in Kibana or other console like tool? If I run this PUT command I get an error: PUT /myindex?pretty Error: {"error":"Co… --- ## [HTTP Response 401 "Unauthorized" Using API\_KEY (MetricBeat --\> Kibana)](https://discuss.elastic.co/t/http-response-401-unauthorized-using-api-key-metricbeat-kibana/305462)
**Author:** [@Lokesh\_Sachdeva](https://discuss.elastic.co/u/Lokesh_Sachdeva)\ **Replies:** 6\ **Last updated:** [June 6, 2022, 4:41pm UTC](https://discuss.elastic.co/t/http-response-401-unauthorized-using-api-key-metricbeat-kibana/305462 "2022-06-06T16:41:32Z")
Hi Elastic Team We are trying to load data from Metricbeat to Kibana using API KEY. API Key is created and provided full superuser (elastic role) access. API KEY is able to authenticate into Elasticsearch but while con… --- ## [Logstash - Merge multiple lines into one event](https://discuss.elastic.co/t/logstash-merge-multiple-lines-into-one-event/132573)
**Author:** [@Sunillinus](https://discuss.elastic.co/u/Sunillinus)\ **Replies:** 5\ **Last updated:** [May 22, 2018, 12:26pm UTC](https://discuss.elastic.co/t/logstash-merge-multiple-lines-into-one-event/132573 "2018-05-22T12:26:07Z")
Hi, I want to create one configuration file for logstash such that it should generate an event and upload a whole message whatever is there in one timestamp to other timestamp. Can anyone please help me how to achieve … --- ## [Kibana default homepage](https://discuss.elastic.co/t/kibana-default-homepage/132733)
**Author:** [@solo](https://discuss.elastic.co/u/solo)\ **Replies:** 2\ **Last updated:** [May 22, 2018, 7:32am UTC](https://discuss.elastic.co/t/kibana-default-homepage/132733 "2018-05-22T07:32:01Z")
When I lunch Kibana by going to localhost:5601/app/kibana#/home?\_g=() I always come to the page "Add Data to Kibana". How can i set the home page to a Dashboard instead? --- ## [Latest version of Elastic Stack and Suricata examples](https://discuss.elastic.co/t/latest-version-of-elastic-stack-and-suricata-examples/88184)
**Author:** [@AndrewW](https://discuss.elastic.co/u/AndrewW)\ **Replies:** 2\ **Last updated:** [June 5, 2017, 3:00am UTC](https://discuss.elastic.co/t/latest-version-of-elastic-stack-and-suricata-examples/88184 "2017-06-05T03:00:59Z")
I've got the latest version of suricata 3.2.1 working with EVE json logs I followed the woefully out of date instruction on https://redmine.openinfosecfoundation.org/projects/suricata/wiki/\_Logstash\_Kibana\_and\_Suricata\_J… --- ## [ElasticSearch - Geo Spatial search on location array](https://discuss.elastic.co/t/elasticsearch-geo-spatial-search-on-location-array/108210)
**Author:** [@athir.gillani](https://discuss.elastic.co/u/athir.gillani)\ **Replies:** 5\ **Last updated:** [November 18, 2017, 3:23pm UTC](https://discuss.elastic.co/t/elasticsearch-geo-spatial-search-on-location-array/108210 "2017-11-18T15:23:33Z")
Dear All, I am creating an index with two types Restaurant and Branch with Spring Data. Restaurant has many branches as nested type. When I create this mapping, Spring Data / ElasticSearch automatically converts the loca… --- ## [Upgrading elasticsearch from 2.x to 6.x in Docker containers](https://discuss.elastic.co/t/upgrading-elasticsearch-from-2-x-to-6-x-in-docker-containers/133213)
**Author:** [@uliana\_andreeva](https://discuss.elastic.co/u/uliana_andreeva)\ **Replies:** 0\ **Last updated:** [May 24, 2018, 7:12pm UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-from-2-x-to-6-x-in-docker-containers/133213 "2018-05-24T19:12:19Z")
Hi! I'm trying to upgrade elasticsearch from 2.4.4 to 6.2.2. According to https://www.elastic.co/guide/en/elasticsearch/reference/current/reindex-upgrade.html, "To upgrade an Elasticsearch cluster running 2.x, you hav… --- ## [Bulk posting to Elasticsearch in Node.js](https://discuss.elastic.co/t/bulk-posting-to-elasticsearch-in-node-js/38100)
**Author:** [@pewpewlasers](https://discuss.elastic.co/u/pewpewlasers)\ **Replies:** 3\ **Last updated:** [December 31, 2015, 5:13am UTC](https://discuss.elastic.co/t/bulk-posting-to-elasticsearch-in-node-js/38100 "2015-12-31T05:13:55Z")
I am using request.js to post data to the elasticsearch server. Indexing single document is working however I am not able to make bulk work. I have a simple function that posts data to "localhost:9200/\_bulk" with var… --- ## [Impact of increasing index.max\_result\_window size to 10 million?](https://discuss.elastic.co/t/impact-of-increasing-index-max-result-window-size-to-10-million/277241)
**Author:** [@StringerBell](https://discuss.elastic.co/u/StringerBell)\ **Replies:** 2\ **Last updated:** [July 4, 2021, 1:34pm UTC](https://discuss.elastic.co/t/impact-of-increasing-index-max-result-window-size-to-10-million/277241 "2021-07-04T13:34:24Z")
I have a scenario where I want to increase the index.max\_result\_window size to about 10 million. My query only cares about fetching the sort order and not the actual \_source field. Does changing the max\_result\_window si… --- ## [Ship Filebeat data to public IP Logstash](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855)
**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\ **Replies:** 6\ **Last updated:** [July 26, 2017, 12:11pm UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855 "2017-07-26T12:11:34Z")
I want to connect 2 different machines over the internet. My server is on public IP which holds the logstash and elasticsearch. It is possible to send data(filebeat) to the public ip server(logstash/elasticsearch) Can yo… --- ## [How to catch errors in output plugin?](https://discuss.elastic.co/t/how-to-catch-errors-in-output-plugin/60297)
**Author:** [@tiwilliam](https://discuss.elastic.co/u/tiwilliam)\ **Replies:** 1\ **Last updated:** [October 21, 2016, 1:40pm UTC](https://discuss.elastic.co/t/how-to-catch-errors-in-output-plugin/60297 "2016-10-21T13:40:25Z")
Hi, I'm trying to write a tag or a field in @metadata in an output plugin but can't match that value in a if statement. Here's the output block: output { something { ...setting the tag/field inside this plu… --- ## [How to write if condition inside of the logstash grok pattern?](https://discuss.elastic.co/t/how-to-write-if-condition-inside-of-the-logstash-grok-pattern/133330)
**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\ **Replies:** 3\ **Last updated:** [May 25, 2018, 4:37pm UTC](https://discuss.elastic.co/t/how-to-write-if-condition-inside-of-the-logstash-grok-pattern/133330 "2018-05-25T16:37:22Z")
My question is related to logstash grok pattern. I created below pattern that's working fine but the big problem is not string values. Sometimes; "Y" and "age" can be null so my grok pattern not create any log in elastic… --- ## [Unable to set xpack.security.authc.realms.oidc.oidc1.rp.client\_secret property through yml file](https://discuss.elastic.co/t/unable-to-set-xpack-security-authc-realms-oidc-oidc1-rp-client-secret-property-through-yml-file/217988)
**Author:** [@viveknagar](https://discuss.elastic.co/u/viveknagar)\ **Replies:** 4\ **Last updated:** [February 6, 2020, 6:19am UTC](https://discuss.elastic.co/t/unable-to-set-xpack-security-authc-realms-oidc-oidc1-rp-client-secret-property-through-yml-file/217988 "2020-02-06T06:19:53Z")
Hello, I want to deploy elasticsearch with OpenId connect authentication . I am using keycloack as my open id connect provider. I have done all my configuration as per documentations. Below is my elasticsearch.yml file. … --- ## [Kibana Canvas , Calculate percentage using to aggregations](https://discuss.elastic.co/t/kibana-canvas-calculate-percentage-using-to-aggregations/190702)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 4\ **Last updated:** [July 20, 2019, 7:21am UTC](https://discuss.elastic.co/t/kibana-canvas-calculate-percentage-using-to-aggregations/190702 "2019-07-20T07:21:23Z")
Hello Team, I am working on a use case where I have to calculate percentage of two count aggregations Get count of data from index1 with date filters Get count of data from index1 with date and field filters Calculate… --- ## [Mapping text field with keyword not aggregatable](https://discuss.elastic.co/t/mapping-text-field-with-keyword-not-aggregatable/68583)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 4\ **Last updated:** [January 4, 2017, 5:26pm UTC](https://discuss.elastic.co/t/mapping-text-field-with-keyword-not-aggregatable/68583 "2017-01-04T17:26:27Z")
Hi, I create a mapping like this "login": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_above" : 256 } } }, (here is the full mapping) … --- ## [Transfer the master role?](https://discuss.elastic.co/t/transfer-the-master-role/36654)
**Author:** [@tuckerpm](https://discuss.elastic.co/u/tuckerpm)\ **Replies:** 5\ **Last updated:** [December 15, 2015, 9:54pm UTC](https://discuss.elastic.co/t/transfer-the-master-role/36654 "2015-12-15T21:54:35Z")
We have to take down one of our master nodes, it is the current master, to replace some hardware and are wondering if it is possible to transfer the role prior to shutting down Elasticsearch? The version of Elasticsear… --- ## [Plugin install failed even with 'no-verify'](https://discuss.elastic.co/t/plugin-install-failed-even-with-no-verify/99869)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 4:42pm UTC](https://discuss.elastic.co/t/plugin-install-failed-even-with-no-verify/99869 "2017-09-08T16:42:59Z")
Not sure if I got the syntax right, but # bin/logstash-plugin install logstash-filter-tld ERROR: Something went wrong when installing logstash-filter-tld, message: certificate verify failed # bin/logstash-plugin insta… --- ## [Will elasticsearch 5.0 support embedded nodes?](https://discuss.elastic.co/t/will-elasticsearch-5-0-support-embedded-nodes/62331)
**Author:** [@Rajind\_Ruparathna](https://discuss.elastic.co/u/Rajind_Ruparathna)\ **Replies:** 6\ **Last updated:** [August 17, 2018, 5:29am UTC](https://discuss.elastic.co/t/will-elasticsearch-5-0-support-embedded-nodes/62331 "2018-08-17T05:29:46Z")
I would like to know whether Elasticsearch 5.0 supports embedded nodes. Thanks in advance. [Previous page](https://discuss.elastic.co/top.md?page=495&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=497&per_page=50&period=all)