# Top

**URL:** https://discuss.elastic.co/top.md?page=824&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 825

---

## [Geo Query Performance](https://discuss.elastic.co/t/geo-query-performance/109827)

<div class="topic-metadata">

**Author:** [@Zhengcong\_Yin](https://discuss.elastic.co/u/Zhengcong_Yin)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 8:24pm UTC](https://discuss.elastic.co/t/geo-query-performance/109827 "2017-12-01T20:24:49Z")

</div>

HI, Is Geo query scalable in items of query time? I indexed 38 thousand geo point, and run k-nearest neighbor on it. I found the "took" value from each response becomes slower from the cluster with one data node to the…

---

## [Custom index not creating at ElasticSearch cluster](https://discuss.elastic.co/t/custom-index-not-creating-at-elasticsearch-cluster/61016)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 8\
**Last updated:** [September 21, 2016, 12:11pm UTC](https://discuss.elastic.co/t/custom-index-not-creating-at-elasticsearch-cluster/61016 "2016-09-21T12:11:29Z")

</div>

HI All, I am using ES 1.5.2 with logstash 2.4.0 . i have the following configurations to pull data from kafka topic and index to ES. input{ kafka { zk\_connect =\> ":2181" group\_id =\> "logstash" topic\_i…

---

## [Flush data periodically](https://discuss.elastic.co/t/flush-data-periodically/51279)

<div class="topic-metadata">

**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\
**Replies:** 8\
**Last updated:** [May 31, 2016, 11:45am UTC](https://discuss.elastic.co/t/flush-data-periodically/51279 "2016-05-31T11:45:35Z")

</div>

Hi All, Please suggest how to configure data flush in elasticsearch periodically. Regards, Prateek

---

## [Elasticsearch doesn't update pid file (and kibana does)](https://discuss.elastic.co/t/elasticsearch-doesnt-update-pid-file-and-kibana-does/200681)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 6\
**Last updated:** [September 23, 2019, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-update-pid-file-and-kibana-does/200681 "2019-09-23T12:24:43Z")

</div>

Hi everyone! I have a setup of the elk stack (I don't use any beats or other members of the elastic stack) that start and stop not via deamon or system ctl, rather directly from the respective bin and scripts. When I s…

---

## [Combining simple\_query\_string with range and fuzziness](https://discuss.elastic.co/t/combining-simple-query-string-with-range-and-fuzziness/25263)

<div class="topic-metadata">

**Author:** [@aarongu](https://discuss.elastic.co/u/aarongu)\
**Replies:** 2\
**Last updated:** [July 9, 2015, 9:24pm UTC](https://discuss.elastic.co/t/combining-simple-query-string-with-range-and-fuzziness/25263 "2015-07-09T21:24:33Z")

</div>

Hello All! I have been having difficulty combining a simple\_query\_string, range, and the fuzziness field. I can get all of them to work individually, "query": { "simple\_query\_string": { "query": "crit"…

---

## [Use 2 variable in a math expression](https://discuss.elastic.co/t/use-2-variable-in-a-math-expression/264041)

<div class="topic-metadata">

**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\
**Replies:** 4\
**Last updated:** [February 12, 2021, 12:17pm UTC](https://discuss.elastic.co/t/use-2-variable-in-a-math-expression/264041 "2021-02-12T12:17:09Z")

</div>

I am running 7.9.1 and am trying to perform math with 2 variables like below. Is this possible? filters | timefilter field="@timestamp" from="now-1d" to="now" | var\_set name="completed" value={escount index="index\_1" q…

---

## [No\_shard\_available\_action\_exception in integration tests](https://discuss.elastic.co/t/no-shard-available-action-exception-in-integration-tests/262941)

<div class="topic-metadata">

**Author:** [@rdehuyss](https://discuss.elastic.co/u/rdehuyss)\
**Replies:** 4\
**Last updated:** [February 3, 2021, 11:49am UTC](https://discuss.elastic.co/t/no-shard-available-action-exception-in-integration-tests/262941 "2021-02-03T11:49:34Z")

</div>

Hi, I'm the author of JobRunr, a distributed job scheduling library that also supports ElasticSearch as a storage provider. For my integration tests, I use TestContainers and start an ElasticSearch. @Container pri…

---

## [Click tracking with resultView - any examples out there](https://discuss.elastic.co/t/click-tracking-with-resultview-any-examples-out-there/233239)

<div class="topic-metadata">

**Author:** [@georgina](https://discuss.elastic.co/u/georgina)\
**Replies:** 1\
**Last updated:** [June 5, 2020, 11:28am UTC](https://discuss.elastic.co/t/click-tracking-with-resultview-any-examples-out-there/233239 "2020-06-05T11:28:00Z")

</div>

Hi, I'm using search-ui and am trying to enable link click tracking, using resultView as below. \<Results titleField="title" urlField="url" shouldTrackClickThrough={true} clickThroughTags={\['Documents'\]} resultView={Res…

---

## [How to add application metrics to elastic APM dashbords](https://discuss.elastic.co/t/how-to-add-application-metrics-to-elastic-apm-dashbords/201341)

<div class="topic-metadata">

**Author:** [@surenraju](https://discuss.elastic.co/u/surenraju)\
**Replies:** 4\
**Last updated:** [September 30, 2019, 12:06pm UTC](https://discuss.elastic.co/t/how-to-add-application-metrics-to-elastic-apm-dashbords/201341 "2019-09-30T12:06:06Z")

</div>

Elastic Search Version: 7.3.1 APM Server Version: 7.3.1 APM Client Version: APM Java Agent: 1.x (current) APM Agent language and version: Java 1.8 We are evaluating elastic APM for our micro service stack. And we are…

---

## [6.5.4 Filebeat w enabled postgresql module doesn't create proper index - no postgresql.\*.\* fields](https://discuss.elastic.co/t/6-5-4-filebeat-w-enabled-postgresql-module-doesnt-create-proper-index-no-postgresql-fields/172575)

<div class="topic-metadata">

**Author:** [@yurim](https://discuss.elastic.co/u/yurim)\
**Replies:** 4\
**Last updated:** [March 18, 2019, 7:09pm UTC](https://discuss.elastic.co/t/6-5-4-filebeat-w-enabled-postgresql-module-doesnt-create-proper-index-no-postgresql-fields/172575 "2019-03-18T19:09:15Z")

</div>

Hi guys, running ELK stack 6.5.4 on rhat 7.3 and postgresql 11.2, though had the same issue with pgsql 9.6. Postgresql has been configured to write into syslog and csvlog, so filebeat with postgresql module enabled sho…

---

## [Multiple tables as input. Multiple pipelines?](https://discuss.elastic.co/t/multiple-tables-as-input-multiple-pipelines/122630)

<div class="topic-metadata">

**Author:** [@justin\_Kim](https://discuss.elastic.co/u/justin_Kim)\
**Replies:** 4\
**Last updated:** [March 7, 2018, 7:00am UTC](https://discuss.elastic.co/t/multiple-tables-as-input-multiple-pipelines/122630 "2018-03-07T07:00:26Z")

</div>

Hello, I'm a complete n00b at Logstash, so please excuse my ignorance. I have multple tables that I'd like to read using the JDBC input. They have different schemas, different purposes, etc. Consuming these data as an…

---

## [Export data](https://discuss.elastic.co/t/export-data/219184)

<div class="topic-metadata">

**Author:** [@jof300](https://discuss.elastic.co/u/jof300)\
**Replies:** 5\
**Last updated:** [February 17, 2020, 4:10pm UTC](https://discuss.elastic.co/t/export-data/219184 "2020-02-17T16:10:51Z")

</div>

Hi, We have a cluster of 7 nodes which is growing up fastly. We want to find a way to "archive" some logs that we must keep (legal inquiries) for several years. I would like to know if there is a solution / command / w…

---

## [Extract From a Field Name and Add Fields](https://discuss.elastic.co/t/extract-from-a-field-name-and-add-fields/216911)

<div class="topic-metadata">

**Author:** [@mfisher](https://discuss.elastic.co/u/mfisher)\
**Replies:** 5\
**Last updated:** [January 29, 2020, 5:53pm UTC](https://discuss.elastic.co/t/extract-from-a-field-name-and-add-fields/216911 "2020-01-29T17:53:19Z")

</div>

I need to copy the dynamic "MODEL" from the field name and copy the value "RandomSerial" to new fields. When "MODEL" and "RandomSerial" will be different for all messages. Logstash Output: "Serial Number (MODEL)" =\> …

---

## [Sorting by distance with minimum distance](https://discuss.elastic.co/t/sorting-by-distance-with-minimum-distance/104632)

<div class="topic-metadata">

**Author:** [@lukas-gitl](https://discuss.elastic.co/u/lukas-gitl)\
**Replies:** 5\
**Last updated:** [November 22, 2017, 12:45am UTC](https://discuss.elastic.co/t/sorting-by-distance-with-minimum-distance/104632 "2017-11-22T00:45:58Z")

</div>

I'm trying to sort results by distance. Something like this works perfectly: \_geo\_distance: { "nested\_path": ..., "location": \[..., ...\], "order": "asc", "unit": "m", "mode": "min", "distance\_type": "sloppy\_…

---

## [Update s3 snapshots base\_path for a cluster in ECE (v1.1)](https://discuss.elastic.co/t/update-s3-snapshots-base-path-for-a-cluster-in-ece-v1-1/151934)

<div class="topic-metadata">

**Author:** [@Simon\_Khan](https://discuss.elastic.co/u/Simon_Khan)\
**Replies:** 2\
**Last updated:** [October 15, 2018, 12:57am UTC](https://discuss.elastic.co/t/update-s3-snapshots-base-path-for-a-cluster-in-ece-v1-1/151934 "2018-10-15T00:57:32Z")

</div>

From what I understand, ECE automates creating snapshots by creating a found-snapshots repository which stores the snapshots of all the clusters in a folder described by their cluster id. And so for Cluster A, its setti…

---

## [Volume Sizing Example](https://discuss.elastic.co/t/volume-sizing-example/208357)

<div class="topic-metadata">

**Author:** [@magneton](https://discuss.elastic.co/u/magneton)\
**Replies:** 3\
**Last updated:** [November 19, 2019, 12:04pm UTC](https://discuss.elastic.co/t/volume-sizing-example/208357 "2019-11-19T12:04:08Z")

</div>

Dear Elastic In your webinar, you gave the following formula for volume sizing: I want to just check with a worked example. so for 1.5TB retained for 7 days with one replica Total Data = 1.5 \*7 \*2 = 22TB. Total Sto…

---

## [Cakephp example](https://discuss.elastic.co/t/cakephp-example/129138)

<div class="topic-metadata">

**Author:** [@Gwen\_P](https://discuss.elastic.co/u/Gwen_P)\
**Replies:** 3\
**Last updated:** [April 23, 2018, 4:42pm UTC](https://discuss.elastic.co/t/cakephp-example/129138 "2018-04-23T16:42:04Z")

</div>

Hello everyone, I'm working on Cakephp and Elasticsearch and I'm trying to find some example of how to display index information using cakephp. I know that there is an official Cakephp plugin called Elasticsearch but t…

---

## [Terms query not returning documents if string has spaces](https://discuss.elastic.co/t/terms-query-not-returning-documents-if-string-has-spaces/61584)

<div class="topic-metadata">

**Author:** [@RamSailendraVarma](https://discuss.elastic.co/u/RamSailendraVarma)\
**Replies:** 3\
**Last updated:** [September 29, 2016, 3:59am UTC](https://discuss.elastic.co/t/terms-query-not-returning-documents-if-string-has-spaces/61584 "2016-09-29T03:59:25Z")

</div>

Hi, I have a scenario where i need to get documents related to multiple keywords. here's the query: { "query":{ "filtered": { "query" : { "constant\_score" : { "filter" : { "bool" : { …

---

## [Watcher and X-Pack do not appear to run or even be installed despite using Elastic stack v6.3.2](https://discuss.elastic.co/t/watcher-and-x-pack-do-not-appear-to-run-or-even-be-installed-despite-using-elastic-stack-v6-3-2/145781)

<div class="topic-metadata">

**Author:** [@shirakaba](https://discuss.elastic.co/u/shirakaba)\
**Replies:** 2\
**Last updated:** [August 24, 2018, 9:59am UTC](https://discuss.elastic.co/t/watcher-and-x-pack-do-not-appear-to-run-or-even-be-installed-despite-using-elastic-stack-v6-3-2/145781 "2018-08-24T09:59:41Z")

</div>

My setup I'm using the master branch of docker-elk via Docker for Mac v18.06.0-ce-mac70. The docker-elk repo is currently based on the Elastic stack v6.3.2, and specifically uses the following images (links to GitHub re…

---

## [Single Node Changing Number of Shards and Indexes](https://discuss.elastic.co/t/single-node-changing-number-of-shards-and-indexes/82490)

<div class="topic-metadata">

**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\
**Replies:** 2\
**Last updated:** [April 16, 2017, 2:51pm UTC](https://discuss.elastic.co/t/single-node-changing-number-of-shards-and-indexes/82490 "2017-04-16T14:51:39Z")

</div>

Hi there guys I have a single node with ES 5, if I want to change the number of index and shard in elasticsearch.yml it complains that the configuration file should have no index/shard configuration references at all t…

---

## [io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record:](https://discuss.elastic.co/t/io-netty-handler-ssl-notsslrecordexception-not-an-ssl-tls-record/130987)

<div class="topic-metadata">

**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 11:57am UTC](https://discuss.elastic.co/t/io-netty-handler-ssl-notsslrecordexception-not-an-ssl-tls-record/130987 "2018-05-08T11:57:54Z")

</div>

Hello, I have installed x-pack and configured each and every node of my elastic cluster for SSL certificates using certutil tool provided by x-pack. A forwarder is configured to ingest data into elastic cluster, I chec…

---

## [Reindex error content type plain text](https://discuss.elastic.co/t/reindex-error-content-type-plain-text/180929)

<div class="topic-metadata">

**Author:** [@bry-c](https://discuss.elastic.co/u/bry-c)\
**Replies:** 5\
**Last updated:** [May 20, 2019, 4:51am UTC](https://discuss.elastic.co/t/reindex-error-content-type-plain-text/180929 "2019-05-20T04:51:15Z")

</div>

I run remote reindex in elastic version 5.2 to target remote elastic server with version 6.5.4. This is the command i run in kibana console: POST \_reindex { "source": { "remote": { "host": "http://172.16.xx.xx:9200"…

---

## [Geolocation documented methods missing distance, distanceInKm](https://discuss.elastic.co/t/geolocation-documented-methods-missing-distance-distanceinkm/4224)

<div class="topic-metadata">

**Author:** [@speedopus](https://discuss.elastic.co/u/speedopus)\
**Replies:** 8\
**Last updated:** [April 13, 2011, 7:55am UTC](https://discuss.elastic.co/t/geolocation-documented-methods-missing-distance-distanceinkm/4224 "2011-04-13T07:55:14Z")

</div>

For an acknowledged/mapped geo point type: $ curl -XGET 'http://localhost:9200/edus/rpl\_edu/\_mapping?pretty=true' { "edus" : { "rpl\_edu" : { "properties" : { "location" : { "type" :…

---

## [Https://docker.elastic.co/v2/ not accessible - can't download integration repo](https://discuss.elastic.co/t/https-docker-elastic-co-v2-not-accessible-cant-download-integration-repo/347716)

<div class="topic-metadata">

**Author:** [@jojoke13](https://discuss.elastic.co/u/jojoke13)\
**Replies:** 0\
**Last updated:** [November 22, 2023, 10:16am UTC](https://discuss.elastic.co/t/https-docker-elastic-co-v2-not-accessible-cant-download-integration-repo/347716 "2023-11-22T10:16:52Z")

</div>

Hi everyone ! I'm in an air-gapped environnement, so to use integration i need to install the docker repository, as stated in this tutorial : Air-gapped environments | Fleet and Elastic Agent Guide \[8.11\] | Elastic Ho…

---

## [ElasticSearch autocomplete/suggest by token](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggest-by-token/291854)

<div class="topic-metadata">

**Author:** [@abhinav-nath](https://discuss.elastic.co/u/abhinav-nath)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 6:15pm UTC](https://discuss.elastic.co/t/elasticsearch-autocomplete-suggest-by-token/291854 "2021-12-14T18:15:12Z")

</div>

I want to create search suggestions based on the tokens (and not full documents) that are present in my index. For example: I have a simple index for movies in which I have these two documents: {"name":"Captain Ameri…

---

## [ElasticsearchException\[Failure running machine learning native code](https://discuss.elastic.co/t/elasticsearchexception-failure-running-machine-learning-native-code/214439)

<div class="topic-metadata">

**Author:** [@fekade](https://discuss.elastic.co/u/fekade)\
**Replies:** 4\
**Last updated:** [January 10, 2020, 3:10pm UTC](https://discuss.elastic.co/t/elasticsearchexception-failure-running-machine-learning-native-code/214439 "2020-01-10T15:10:07Z")

</div>

please any support in below issue when new installation of ES 7.5.1 and Kibana.. Elastic 7.5.1 and kibana7.5.1 new installation on the same windows server, I used elastic 7.5.1 msi windows installer and installation suc…

---

## [ElasticSearch/Logstash input to CSV output mapping question](https://discuss.elastic.co/t/elasticsearch-logstash-input-to-csv-output-mapping-question/65837)

<div class="topic-metadata">

**Author:** [@Thermocatalyst](https://discuss.elastic.co/u/Thermocatalyst)\
**Replies:** 4\
**Last updated:** [November 17, 2016, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-logstash-input-to-csv-output-mapping-question/65837 "2016-11-17T16:21:51Z")

</div>

I'm attempting to read JSON data from ES and convert it to a CSV file, but I'm getting an unexpected result. I'd like to take selected fields from the JSON document, and add write them to a CSV. Here's my configura…

---

## [What is the equivalent of creating MySQL indexes in Elasticsearch?](https://discuss.elastic.co/t/what-is-the-equivalent-of-creating-mysql-indexes-in-elasticsearch/48872)

<div class="topic-metadata">

**Author:** [@Hayder\_Abbass](https://discuss.elastic.co/u/Hayder_Abbass)\
**Replies:** 4\
**Last updated:** [May 2, 2016, 2:11pm UTC](https://discuss.elastic.co/t/what-is-the-equivalent-of-creating-mysql-indexes-in-elasticsearch/48872 "2016-05-02T14:11:04Z")

</div>

Hello! As you probably know, in MySQL you can create indexes to improve the performance of your queries. Is there any such equivalent in Elastic? I have gone through the entire documentation, and I'm pretty sure there …

---

## [Combo analyzer - Issue with English and Japanese text being stored in same fields](https://discuss.elastic.co/t/combo-analyzer-issue-with-english-and-japanese-text-being-stored-in-same-fields/10595)

<div class="topic-metadata">

**Author:** [@hemant\_pahilwani](https://discuss.elastic.co/u/hemant_pahilwani)\
**Replies:** 4\
**Last updated:** [February 8, 2013, 5:31pm UTC](https://discuss.elastic.co/t/combo-analyzer-issue-with-english-and-japanese-text-being-stored-in-same-fields/10595 "2013-02-08T17:31:07Z")

</div>

I am trying to add multilingual support to elastic search and part of the requirement is to allow same field to store either english and japanese text. While research i stumbled upon combo analyzer plugin where we c…

---

## [Dropping Events using Winlogbeat Processors](https://discuss.elastic.co/t/dropping-events-using-winlogbeat-processors/150781)

<div class="topic-metadata">

**Author:** [@popa](https://discuss.elastic.co/u/popa)\
**Replies:** 5\
**Last updated:** [October 5, 2018, 1:07am UTC](https://discuss.elastic.co/t/dropping-events-using-winlogbeat-processors/150781 "2018-10-05T01:07:43Z")

</div>

Good morning! I've done some reading in Winlogbeat's documentation and wanted to confirm the syntax of a processor that I'm trying to implement. I have a noisy event that I want to drop before it makes it to Logstash -…

---

## [Multiple sorting fields performance issues](https://discuss.elastic.co/t/multiple-sorting-fields-performance-issues/132349)

<div class="topic-metadata">

**Author:** [@bogdanjsx](https://discuss.elastic.co/u/bogdanjsx)\
**Replies:** 5\
**Last updated:** [May 21, 2018, 9:57am UTC](https://discuss.elastic.co/t/multiple-sorting-fields-performance-issues/132349 "2018-05-21T09:57:18Z")

</div>

Hello, I'm trying to implement pagination for a service that pulls data out of Elasticsearch by using the search after functionality. Data needs to be sorted by only one field, but, as the docs mention, a field with uni…

---

## [ELK performance](https://discuss.elastic.co/t/elk-performance/123716)

<div class="topic-metadata">

**Author:** [@Slop](https://discuss.elastic.co/u/Slop)\
**Replies:** 5\
**Last updated:** [March 22, 2018, 4:59pm UTC](https://discuss.elastic.co/t/elk-performance/123716 "2018-03-22T16:59:53Z")

</div>

Hello, I'm using ELK since a while (8 month), and everything start to being slow. For exemple it take 3 or 4 minutes to display dashboard of the day. I think, it's because no tuning have been done on the install (it ha…

---

## [Request http error on Wildfly 9 io.undertow.servlet.spec.HttpServletRequestImpl](https://discuss.elastic.co/t/request-http-error-on-wildfly-9-io-undertow-servlet-spec-httpservletrequestimpl/329547)

<div class="topic-metadata">

**Author:** [@miguel.longo](https://discuss.elastic.co/u/miguel.longo)\
**Replies:** 7\
**Last updated:** [May 9, 2023, 6:57pm UTC](https://discuss.elastic.co/t/request-http-error-on-wildfly-9-io-undertow-servlet-spec-httpservletrequestimpl/329547 "2023-05-09T18:57:00Z")

</div>

Kibana version: 8.6.2 Elasticsearch version: 8.6.2 APM Server version: 8.6.2 APM Agent language and version: Java on 1.36.0 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.)…

---

## [Make Single output call with multiple events](https://discuss.elastic.co/t/make-single-output-call-with-multiple-events/315808)

<div class="topic-metadata">

**Author:** [@LJ\_LongWing](https://discuss.elastic.co/u/LJ_LongWing)\
**Replies:** 7\
**Last updated:** [October 6, 2022, 9:11pm UTC](https://discuss.elastic.co/t/make-single-output-call-with-multiple-events/315808 "2022-10-06T21:11:42Z")

</div>

I've done a few days of searching but can't find what I'm looking for....the closest I've found is this topic (How to aggregate multiple events into single output) I'll state that I'm starting with a functional pipeline…

---

## [Go-elasticsearch versus Olivere golang client](https://discuss.elastic.co/t/go-elasticsearch-versus-olivere-golang-client/252248)

<div class="topic-metadata">

**Author:** [@Sudd\_Ghosh](https://discuss.elastic.co/u/Sudd_Ghosh)\
**Replies:** 1\
**Last updated:** [October 16, 2020, 2:39pm UTC](https://discuss.elastic.co/t/go-elasticsearch-versus-olivere-golang-client/252248 "2020-10-16T14:39:50Z")

</div>

Hi, I am planning to migrate from golang Olivere to the official go-elasticsearch API for a data ingestion application running in K8s container. This I am doing mainly because I read Olivere is not committing to support…

---

## [Mapsのtooltipの時間のみが9時間マイナスされる](https://discuss.elastic.co/t/maps-tooltip-9/198335)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 7\
**Last updated:** [September 20, 2019, 7:45am UTC](https://discuss.elastic.co/t/maps-tooltip-9/198335 "2019-09-20T07:45:35Z")

</div>

お世話になります。 UTCのdateデータを扱っています。 Mapsのtooltipの時間のみが9時間マイナスされて表示されてしまいます。 -- Source Settings --\> Fields to display in tooltip : dateのフィールドを選択 下記スレッドの事象と内容は似ていますが、言及されている内容は対応済みです。 -- Advanced Setting --\> Timezone for d…

---

## [Elastic Search “should” clause not working as expected when “should”, “must” and “must\_not” clause are present](https://discuss.elastic.co/t/elastic-search-should-clause-not-working-as-expected-when-should-must-and-must-not-clause-are-present/70231)

<div class="topic-metadata">

**Author:** [@bandikishores](https://discuss.elastic.co/u/bandikishores)\
**Replies:** 1\
**Last updated:** [December 29, 2016, 10:07pm UTC](https://discuss.elastic.co/t/elastic-search-should-clause-not-working-as-expected-when-should-must-and-must-not-clause-are-present/70231 "2016-12-29T22:07:58Z")

</div>

I've loaded the data provided here into elastic search. Now I'm trying to query for Accounts. Age Must be 38. State Should not be "ID". Address Should Contain Either: (This is not Working) The text "lane" OR The a …

---

## [ES upgrade shards issue - ES 5.6.10 to ES 6.3](https://discuss.elastic.co/t/es-upgrade-shards-issue-es-5-6-10-to-es-6-3/136899)

<div class="topic-metadata">

**Author:** [@sureshvytla](https://discuss.elastic.co/u/sureshvytla)\
**Replies:** 4\
**Last updated:** [June 25, 2018, 2:52pm UTC](https://discuss.elastic.co/t/es-upgrade-shards-issue-es-5-6-10-to-es-6-3/136899 "2018-06-25T14:52:13Z")

</div>

Team, We have two node ES cluster which has been upgraded to 5.6.10 and we are having issue with shards in upgrading ES 5.6.10 to ES 6.3, in the both models either Rolling upgrade or full cluster restart we couldn't su…

---

## [How to embed kibana dashboard into an angular applications?](https://discuss.elastic.co/t/how-to-embed-kibana-dashboard-into-an-angular-applications/227379)

<div class="topic-metadata">

**Author:** [@kavya12345](https://discuss.elastic.co/u/kavya12345)\
**Replies:** 2\
**Last updated:** [April 14, 2020, 3:20am UTC](https://discuss.elastic.co/t/how-to-embed-kibana-dashboard-into-an-angular-applications/227379 "2020-04-14T03:20:26Z")

</div>

Hi, I would like to know the ways to embed kibana dashboard into an angular application(my application is angular version-8) ? I see we can embed using iframe. Is there any other ways we can embed it ? Please let me t…

---

## [Kibanaでフィルタリングをかけた際の検索クエリの取得方法](https://discuss.elastic.co/t/kibana/197288)

<div class="topic-metadata">

**Author:** [@tetsu\_kuwano](https://discuss.elastic.co/u/tetsu_kuwano)\
**Replies:** 2\
**Last updated:** [August 30, 2019, 1:27am UTC](https://discuss.elastic.co/t/kibana/197288 "2019-08-30T01:27:53Z")

</div>

お世話になっております。 Kibanaのフィルタリングした際のクエリ取得について質問させていただきます。 \*\* 実現したいこと\*\* ユーザーがKibanaダッシュボード上でフィルタリングしたクエリ式を取得したい。 ダッシュボード上で何かしらのvisualize→メニュー→inspect→ViewRequestsを見ると、 現在発行しているリクエストの "query": { "bool": { ・・・ …

---

## [Using must and must\_not on same field](https://discuss.elastic.co/t/using-must-and-must-not-on-same-field/152656)

<div class="topic-metadata">

**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\
**Replies:** 2\
**Last updated:** [October 22, 2018, 9:51am UTC](https://discuss.elastic.co/t/using-must-and-must-not-on-same-field/152656 "2018-10-22T09:51:41Z")

</div>

Hi All, I have a requirement like, need to extract documents based on two fields and out of those two fields i need to exclude one field(optional), and extract data. So for this requirement below is my ES query. { "que…

---

## [Private networks with GeoIP](https://discuss.elastic.co/t/private-networks-with-geoip/138099)

<div class="topic-metadata">

**Author:** [@marcelo](https://discuss.elastic.co/u/marcelo)\
**Replies:** 2\
**Last updated:** [July 2, 2018, 11:01pm UTC](https://discuss.elastic.co/t/private-networks-with-geoip/138099 "2018-07-02T23:01:44Z")

</div>

Continuing the discussion from Creating geoip data for internal networks: I've been studying a way to have my private networks with GeoIP. I tried to edit the GeoLite2-City.mmdb file and include my networks in it, howe…

---

## [NEST : How to index raw JSON through Bulk API](https://discuss.elastic.co/t/nest-how-to-index-raw-json-through-bulk-api/47432)

<div class="topic-metadata">

**Author:** [@avoxm](https://discuss.elastic.co/u/avoxm)\
**Replies:** 2\
**Last updated:** [May 4, 2016, 5:28am UTC](https://discuss.elastic.co/t/nest-how-to-index-raw-json-through-bulk-api/47432 "2016-05-04T05:28:44Z")

</div>

Since IRawClient has been removed how we can index raw json documents through bulk API ?

---

## [Documentation: Anchor link tooltips](https://discuss.elastic.co/t/documentation-anchor-link-tooltips/169747)

<div class="topic-metadata">

**Author:** [@Darren\_Meiss](https://discuss.elastic.co/u/Darren_Meiss)\
**Replies:** 2\
**Last updated:** [February 25, 2019, 3:02am UTC](https://discuss.elastic.co/t/documentation-anchor-link-tooltips/169747 "2019-02-25T03:02:42Z")

</div>

While making some edits to the Elasticsearch docs, I've noticed that the link tooltips for anchor links append the word "edit" to the tooltip text, e.g. the link "Search Cancellation" has a tooltip of "Search Cancellatio…

---

## [Drop filter for multiple names](https://discuss.elastic.co/t/drop-filter-for-multiple-names/153108)

<div class="topic-metadata">

**Author:** [@pavuk](https://discuss.elastic.co/u/pavuk)\
**Replies:** 2\
**Last updated:** [October 19, 2018, 8:32am UTC](https://discuss.elastic.co/t/drop-filter-for-multiple-names/153108 "2018-10-19T08:32:00Z")

</div>

Hi, Could you please help me with drop logstash filter? I have field 'username' and I want to drop all records for specific usernames. Please correct my filter if it is wrong: if \["Pete", "John", "Bill", "Greg", "Pau…

---

## [Missing packets of packetbeat?](https://discuss.elastic.co/t/missing-packets-of-packetbeat/116025)

<div class="topic-metadata">

**Author:** [@foxfire881](https://discuss.elastic.co/u/foxfire881)\
**Replies:** 6\
**Last updated:** [January 24, 2018, 2:12pm UTC](https://discuss.elastic.co/t/missing-packets-of-packetbeat/116025 "2018-01-24T14:12:26Z")

</div>

hi，in our network we use packetbeat with 'af\_packet' mode on readhat 6.5 (22 core CPU, 768G memory, 16 SATA disks, 10Gbs NIC) to analyze HTTP traffic which is about 4Gbps, and we find that it does not work very well, too…

---

## [Can someone please explain the Beat architecture - Can a Beat be used to pull data from a list of sources?](https://discuss.elastic.co/t/can-someone-please-explain-the-beat-architecture-can-a-beat-be-used-to-pull-data-from-a-list-of-sources/69294)

<div class="topic-metadata">

**Author:** [@baden0x1](https://discuss.elastic.co/u/baden0x1)\
**Replies:** 6\
**Last updated:** [December 19, 2016, 3:10pm UTC](https://discuss.elastic.co/t/can-someone-please-explain-the-beat-architecture-can-a-beat-be-used-to-pull-data-from-a-list-of-sources/69294 "2016-12-19T15:10:27Z")

</div>

I am trying to understand exactly how beats work under the hood. From what I have read, they are mini daemons that run on a client that will ship data to an ElasticSearch endpoint. In our current platform, we have a W…

---

## [Renaming fileds in nested json](https://discuss.elastic.co/t/renaming-fileds-in-nested-json/45189)

<div class="topic-metadata">

**Author:** [@bongo\_zg](https://discuss.elastic.co/u/bongo_zg)\
**Replies:** 1\
**Last updated:** [March 23, 2016, 10:09am UTC](https://discuss.elastic.co/t/renaming-fileds-in-nested-json/45189 "2016-03-23T10:09:02Z")

</div>

I have a json like: {"doc\_id": 1, "name": "John", "traveller": { "field\_1": "Johnny" }} and would like to have it loaded like this: doc\_id =\> doc\_id name - ignored traveller.field\_1 =\> name\_1 I wrote a config fil…

---

## [Static Mapping vs Dynamic Mapping when using templates](https://discuss.elastic.co/t/static-mapping-vs-dynamic-mapping-when-using-templates/29094)

<div class="topic-metadata">

**Author:** [@stam585](https://discuss.elastic.co/u/stam585)\
**Replies:** 1\
**Last updated:** [September 11, 2015, 7:45am UTC](https://discuss.elastic.co/t/static-mapping-vs-dynamic-mapping-when-using-templates/29094 "2015-09-11T07:45:36Z")

</div>

Hi, I have let my system run with dynamic mapping for a while. It created a huge index form all of my entity data (current and history ) Many fields that I wouldn't like to index are being index. So, I thought to ch…

---

## [Java Client fail to insert index with mapping](https://discuss.elastic.co/t/java-client-fail-to-insert-index-with-mapping/73390)

<div class="topic-metadata">

**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\
**Replies:** 4\
**Last updated:** [January 31, 2017, 6:51pm UTC](https://discuss.elastic.co/t/java-client-fail-to-insert-index-with-mapping/73390 "2017-01-31T18:51:25Z")

</div>

Hi, I worte a java client to insert indexes into elasticsearch. After succsufuly doing it i wanted to ad a new index with mapping. where i ran into problem Exception in thread "main" MapperParsingException\[Failed to…

[Previous page](https://discuss.elastic.co/top.md?page=823&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=825&per_page=50&period=all)
