# Top

**URL:** https://discuss.elastic.co/top.md?page=930&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 931

---

## [Http\_poller input giving read time out](https://discuss.elastic.co/t/http-poller-input-giving-read-time-out/126809)

<div class="topic-metadata">

**Author:** [@uvarisubash](https://discuss.elastic.co/u/uvarisubash)\
**Replies:** 3\
**Last updated:** [April 5, 2018, 5:58am UTC](https://discuss.elastic.co/t/http-poller-input-giving-read-time-out/126809 "2018-04-05T05:58:42Z")

</div>

Http\_poller input giving read time out when data is more 100000. please help me on this { "@timestamp" =\> 2018-04-04T19:17:10.278Z, "tags" =\> \[ \[0\] "\_http\_request\_failure", …

---

## [Query parse error](https://discuss.elastic.co/t/query-parse-error/45485)

<div class="topic-metadata">

**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\
**Replies:** 3\
**Last updated:** [March 26, 2016, 12:53am UTC](https://discuss.elastic.co/t/query-parse-error/45485 "2016-03-26T00:53:47Z")

</div>

I was wondering why one query works and other doesnt. The top one gives me a parse error. does not work: { "query": { "filtered": { "query": { "query\_string": { "query": "\*", "analyze\_wildcard": t…

---

## [Monitoring difference between full-stack and multi-stack](https://discuss.elastic.co/t/monitoring-difference-between-full-stack-and-multi-stack/222999)

<div class="topic-metadata">

**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\
**Replies:** 2\
**Last updated:** [March 10, 2020, 8:09pm UTC](https://discuss.elastic.co/t/monitoring-difference-between-full-stack-and-multi-stack/222999 "2020-03-10T20:09:18Z")

</div>

From https://www.elastic.co/subscriptions Full stack monitoring is available in the basic subscription. multi stack monitoring is NOT available. But what is the difference between 'full stack' and 'multi stack'

---

## [Kibana alerts: Calculate percentage of errors for a given period time](https://discuss.elastic.co/t/kibana-alerts-calculate-percentage-of-errors-for-a-given-period-time/271133)

<div class="topic-metadata">

**Author:** [@Rahul\_Miragi](https://discuss.elastic.co/u/Rahul_Miragi)\
**Replies:** 1\
**Last updated:** [April 24, 2021, 1:59pm UTC](https://discuss.elastic.co/t/kibana-alerts-calculate-percentage-of-errors-for-a-given-period-time/271133 "2021-04-24T13:59:20Z")

</div>

I’m looking for a solution to following problem: In ELK, I have to create an alert which will trigger - when an error field logged for an index is greater than 80% in last 30 mins The field name is status and it takes i…

---

## [Using ES as a back end DB for an APP with high transactions](https://discuss.elastic.co/t/using-es-as-a-back-end-db-for-an-app-with-high-transactions/328755)

<div class="topic-metadata">

**Author:** [@gstlouis](https://discuss.elastic.co/u/gstlouis)\
**Replies:** 5\
**Last updated:** [March 29, 2023, 8:54pm UTC](https://discuss.elastic.co/t/using-es-as-a-back-end-db-for-an-app-with-high-transactions/328755 "2023-03-29T20:54:25Z")

</div>

I am new to ES. I have been installing it and working with its REST API. I like it and I would like to use it in an APP. However, I have started watching some tutorials to understand the full stack, including beats to…

---

## [Per second aggregation across documents](https://discuss.elastic.co/t/per-second-aggregation-across-documents/205661)

<div class="topic-metadata">

**Author:** [@Madala](https://discuss.elastic.co/u/Madala)\
**Replies:** 5\
**Last updated:** [November 7, 2019, 6:52am UTC](https://discuss.elastic.co/t/per-second-aggregation-across-documents/205661 "2019-11-07T06:52:05Z")

</div>

Hi Team, We are using ES as analytics engine for our video platform. Users watch videos and we capture what second of the video is watched in every session. We have a use case where we need to plot a retention graph for…

---

## [Cross cluster search stops working after some time. ES: 6.1.1 Kibana: 6.0](https://discuss.elastic.co/t/cross-cluster-search-stops-working-after-some-time-es-6-1-1-kibana-6-0/114334)

<div class="topic-metadata">

**Author:** [@dantete](https://discuss.elastic.co/u/dantete)\
**Replies:** 5\
**Last updated:** [January 10, 2018, 4:15pm UTC](https://discuss.elastic.co/t/cross-cluster-search-stops-working-after-some-time-es-6-1-1-kibana-6-0/114334 "2018-01-10T16:15:11Z")

</div>

I am testing Cross cluster search. I have 2 cluster with 2 nodes each one, but only works when i restart both clusters. I can see the results from both cluster in Kibana and console (throught search API). I can see th…

---

## [Strange errors while indexing documents](https://discuss.elastic.co/t/strange-errors-while-indexing-documents/24978)

<div class="topic-metadata">

**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\
**Replies:** 5\
**Last updated:** [July 12, 2015, 5:48pm UTC](https://discuss.elastic.co/t/strange-errors-while-indexing-documents/24978 "2015-07-12T17:48:51Z")

</div>

Hi, We've been observing some strange exceptions in our cluster. Some of the instances are throwing up exceptions like the ones below. We are running a 6 node cluster with ES 1.3.0. Data is being pushed to ES via a sto…

---

## [Routing with Nginx](https://discuss.elastic.co/t/routing-with-nginx/149310)

<div class="topic-metadata">

**Author:** [@Steve\_Westergaard](https://discuss.elastic.co/u/Steve_Westergaard)\
**Replies:** 4\
**Last updated:** [September 26, 2018, 4:15pm UTC](https://discuss.elastic.co/t/routing-with-nginx/149310 "2018-09-26T16:15:06Z")

</div>

Thanks for the product. I'm in the process of attempting to create a POC that will handle custom routing for the APM Agents. A couple of questions. I am trying to forward the secret token from the APM Agent =\> APM Serv…

---

## [Timelion queries for 5.3.1 version](https://discuss.elastic.co/t/timelion-queries-for-5-3-1-version/87904)

<div class="topic-metadata">

**Author:** [@amk](https://discuss.elastic.co/u/amk)\
**Replies:** 4\
**Last updated:** [June 8, 2017, 11:39am UTC](https://discuss.elastic.co/t/timelion-queries-for-5-3-1-version/87904 "2017-06-08T11:39:37Z")

</div>

Hi, I wanted to know different working example of timelion series. I am trying to check the unique login by client vs internal user(david,tom) ,Below visualization doesn't work if we change the time-period ( e.g. week …

---

## [Highlighting \_all fields](https://discuss.elastic.co/t/highlighting--all-fields/44777)

<div class="topic-metadata">

**Author:** [@Arvind\_Kumar\_Chigura](https://discuss.elastic.co/u/Arvind_Kumar_Chigura)\
**Replies:** 4\
**Last updated:** [March 18, 2016, 10:33pm UTC](https://discuss.elastic.co/t/highlighting--all-fields/44777 "2016-03-18T22:33:13Z")

</div>

I enabled store=true for my all fields. then I tried to highlight and I get below error. Please help "can't load global ordinals for reader of type: class org.apache.lucene.search.highlight.WeightedSpanTermExtractor$De…

---

## [Sequence numbers to write ops - split brain scenario](https://discuss.elastic.co/t/sequence-numbers-to-write-ops-split-brain-scenario/43748)

<div class="topic-metadata">

**Author:** [@rkonda](https://discuss.elastic.co/u/rkonda)\
**Replies:** 4\
**Last updated:** [March 11, 2016, 7:53am UTC](https://discuss.elastic.co/t/sequence-numbers-to-write-ops-split-brain-scenario/43748 "2016-03-11T07:53:59Z")

</div>

Continuing the discussion from github issue. The current strategy, which seq# will keep enforcing but in easier/faster way, is that all replicas are "reset" to be an exact copy of the primary currently chosen by the…

---

## [Scoring autcomplete (edgeNGram) results](https://discuss.elastic.co/t/scoring-autcomplete-edgengram-results/25239)

<div class="topic-metadata">

**Author:** [@miloconway](https://discuss.elastic.co/u/miloconway)\
**Replies:** 4\
**Last updated:** [July 10, 2015, 12:12am UTC](https://discuss.elastic.co/t/scoring-autcomplete-edgengram-results/25239 "2015-07-10T00:12:53Z")

</div>

I have a name field where I am applying the following filter and analyzer: "filter": { "autocomplete\_filter": { "min\_gram": "1", "type": "edgeNGram", "max\_gram": "50" }, ... } ... "…

---

## [Shield with Java Client](https://discuss.elastic.co/t/shield-with-java-client/21887)

<div class="topic-metadata">

**Author:** [@Jettro\_Coenradie](https://discuss.elastic.co/u/Jettro_Coenradie)\
**Replies:** 4\
**Last updated:** [March 10, 2015, 8:48pm UTC](https://discuss.elastic.co/t/shield-with-java-client/21887 "2015-03-10T20:48:59Z")

</div>

Hi, trying to get Shield working with a java client. When setting the header token on the client, there is no problem. But when I try to use the header of a request there is no succes. I am trying this code, which i…

---

## [Index life cycle policy not deleting the index when reached the defined size](https://discuss.elastic.co/t/index-life-cycle-policy-not-deleting-the-index-when-reached-the-defined-size/328475)

<div class="topic-metadata">

**Author:** [@breakandfix](https://discuss.elastic.co/u/breakandfix)\
**Replies:** 7\
**Last updated:** [March 24, 2023, 8:56pm UTC](https://discuss.elastic.co/t/index-life-cycle-policy-not-deleting-the-index-when-reached-the-defined-size/328475 "2023-03-24T20:56:08Z")

</div>

Hello I have vector agent running on a k8s. it creates a data stream and indexes. I created ILM with only hot and delete phase. It should keep the index in hot phase until it reaches the defined size \[100MB\] and then r…

---

## [ElasticSearch scroll over all documents always returns same 10 results](https://discuss.elastic.co/t/elasticsearch-scroll-over-all-documents-always-returns-same-10-results/107315)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 1\
**Last updated:** [November 17, 2017, 11:15pm UTC](https://discuss.elastic.co/t/elasticsearch-scroll-over-all-documents-always-returns-same-10-results/107315 "2017-11-17T23:15:36Z")

</div>

I have index and type with, lets say, 1000 documents. I would like to retrieve all documents using SCROLL API and then perform some action on them. I created query to get scroll id. Then in the loop, I am using scroll i…

---

## [Box-plot on Vega issue](https://discuss.elastic.co/t/box-plot-on-vega-issue/127261)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 2\
**Last updated:** [April 10, 2018, 7:47am UTC](https://discuss.elastic.co/t/box-plot-on-vega-issue/127261 "2018-04-10T07:47:02Z")

</div>

Hi! I am using Vega in order to draw a boxplot. I have an indicator which I aggregate by device types. Using percentile and min max aggregations. But box-plot is drawn incomplete, it doesnt show that straight line from …

---

## [Headers not being forwarded by Kibana 5.0.1](https://discuss.elastic.co/t/headers-not-being-forwarded-by-kibana-5-0-1/68370)

<div class="topic-metadata">

**Author:** [@max777](https://discuss.elastic.co/u/max777)\
**Replies:** 2\
**Last updated:** [December 8, 2016, 1:39am UTC](https://discuss.elastic.co/t/headers-not-being-forwarded-by-kibana-5-0-1/68370 "2016-12-08T01:39:20Z")

</div>

I am tasked with developing an elasticsearch plugin that depends on some headers being passed through by Kibana. I configured Kibana to do so with: elasticsearch.requestHeadersWhitelist: \[ authorization, pernisculous \] …

---

## [Change Date format from yyyy-MM-dd hh:mm:ss to yyyy-MM-dd](https://discuss.elastic.co/t/change-date-format-from-yyyy-mm-dd-hhss-to-yyyy-mm-dd/162306)

<div class="topic-metadata">

**Author:** [@vsingh](https://discuss.elastic.co/u/vsingh)\
**Replies:** 3\
**Last updated:** [January 2, 2019, 7:28am UTC](https://discuss.elastic.co/t/change-date-format-from-yyyy-mm-dd-hhss-to-yyyy-mm-dd/162306 "2019-01-02T07:28:29Z")

</div>

Hello there, I am using logstash logstash-6.4.0. I have mysql req\_date column which format is yyyy-MM-dd hh:mm:ss. i want to change this format into yyyy-MM-dd. Input (mysql req\_date column): 2017-05-31 00:00:00.000 …

---

## [Create ES Client without port in Java](https://discuss.elastic.co/t/create-es-client-without-port-in-java/107436)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 3\
**Last updated:** [November 13, 2017, 6:02pm UTC](https://discuss.elastic.co/t/create-es-client-without-port-in-java/107436 "2017-11-13T18:02:19Z")

</div>

I have ES endpoint on AWS for my ElasticSearch String endPoint = "https://.........amazonaws.com"; I would like to create Client using Java. https://www.elastic.co/guide/en/elasticsearch/client/java-api/1.7/transport…

---

## [Indexing structured documents using Logstash JDBC plugin](https://discuss.elastic.co/t/indexing-structured-documents-using-logstash-jdbc-plugin/39192)

<div class="topic-metadata">

**Author:** [@oshai](https://discuss.elastic.co/u/oshai)\
**Replies:** 3\
**Last updated:** [January 17, 2016, 4:24pm UTC](https://discuss.elastic.co/t/indexing-structured-documents-using-logstash-jdbc-plugin/39192 "2016-01-17T16:24:27Z")

</div>

Hi, I'm new to Logstash and i have a simple scenario that I'm trying to execute. Using the Logstash JDBC plugin I'm fetching data from MySQL and Indexing it in ES. Before using Logstash I've used the elasticsearch …

---

## [Logstash CSV Output Vulnerability - CVE pending](https://discuss.elastic.co/t/logstash-csv-output-vulnerability-cve-pending/40777)

<div class="topic-metadata">

**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Replies:** 0\
**Last updated:** [February 2, 2016, 6:32pm UTC](https://discuss.elastic.co/t/logstash-csv-output-vulnerability-cve-pending/40777 "2016-02-02T18:32:09Z")

</div>

Summary: Logstash 2.2 and prior versions are vulnerable to a formula based injection, when using the CSV output plugin. This plugin allows users to export data in comma separated values and is susceptible to an attack i…

---

## [Calculating percentage in visualization per a specific field and not the regular one](https://discuss.elastic.co/t/calculating-percentage-in-visualization-per-a-specific-field-and-not-the-regular-one/334153)

<div class="topic-metadata">

**Author:** [@Halfon](https://discuss.elastic.co/u/Halfon)\
**Replies:** 6\
**Last updated:** [May 30, 2023, 11:08am UTC](https://discuss.elastic.co/t/calculating-percentage-in-visualization-per-a-specific-field-and-not-the-regular-one/334153 "2023-05-30T11:08:59Z")

</div>

Greetings! Apologies for the subject, I could not find a better way to summerize my question. I'm using Kibana for analysis, and I have tried to create a visualization that shows the percentage of each HTTP method per d…

---

## [Warning metricCollector (net5.0 Windows)](https://discuss.elastic.co/t/warning-metriccollector-net5-0-windows/281233)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 6\
**Last updated:** [September 13, 2021, 9:34pm UTC](https://discuss.elastic.co/t/warning-metriccollector-net5-0-windows/281233 "2021-09-13T21:34:54Z")

</div>

Good morning, I have a service in .NetCore 5.0 and windows (IIS) and I'm using the package of elasticAllApm and now in production I have seen the next warning: \[Warning\] {"MetricsCollector"} Failed reading "CgroupMetri…

---

## [Elasticsearch says it fails to start, but actually starts up](https://discuss.elastic.co/t/elasticsearch-says-it-fails-to-start-but-actually-starts-up/88317)

<div class="topic-metadata">

**Author:** [@bennett](https://discuss.elastic.co/u/bennett)\
**Replies:** 6\
**Last updated:** [June 12, 2017, 7:44am UTC](https://discuss.elastic.co/t/elasticsearch-says-it-fails-to-start-but-actually-starts-up/88317 "2017-06-12T07:44:20Z")

</div>

Hi, I'm trying to figure out why when i restart the elasticsearch service, it says in the console it fails to start, but in the logs, there are no errors and it starts up. When I put the log in debug mode, i still do…

---

## [Elasticsearch docker-entrypoint.sh script overwrite](https://discuss.elastic.co/t/elasticsearch-docker-entrypoint-sh-script-overwrite/259414)

<div class="topic-metadata">

**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\
**Replies:** 0\
**Last updated:** [December 22, 2020, 6:07pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-entrypoint-sh-script-overwrite/259414 "2020-12-22T18:07:08Z")

</div>

Hi, I need to run few commands when container starts, so I would like add those commands in docker-entrypoint.sh script. I am using Elasticsearch version 7.9.2, I tried to create the cluster without adding my custom co…

---

## [Heap / GC Issues](https://discuss.elastic.co/t/heap-gc-issues/18740)

<div class="topic-metadata">

**Author:** [@Ned\_Campion](https://discuss.elastic.co/u/Ned_Campion)\
**Replies:** 8\
**Last updated:** [July 19, 2014, 6:54pm UTC](https://discuss.elastic.co/t/heap-gc-issues/18740 "2014-07-19T18:54:39Z")

</div>

Hey All, I've got a cluster with 5 data nodes (2 master nodes). The cluster has ~100 indices, w/ doc counts in the 1k - 50k range. There is a low/medium amount of index load going into the cluster via the bulk api…

---

## [How to calculate distance between two points](https://discuss.elastic.co/t/how-to-calculate-distance-between-two-points/4955)

<div class="topic-metadata">

**Author:** [@harshyadav](https://discuss.elastic.co/u/harshyadav)\
**Replies:** 1\
**Last updated:** [July 26, 2011, 12:04pm UTC](https://discuss.elastic.co/t/how-to-calculate-distance-between-two-points/4955 "2011-07-26T12:04:08Z")

</div>

Hello Sir, I want to find distance between two geo points by elastic search but i haven't find any query regarding it.If there is any option to calculate distance between two points .Please let me know…

---

## [LSASS Memory Dump Handle Access & poqexec.exe?](https://discuss.elastic.co/t/lsass-memory-dump-handle-access-poqexec-exe/359194)

<div class="topic-metadata">

**Author:** [@GuruLee](https://discuss.elastic.co/u/GuruLee)\
**Replies:** 2\
**Last updated:** [May 23, 2024, 9:03pm UTC](https://discuss.elastic.co/t/lsass-memory-dump-handle-access-poqexec-exe/359194 "2024-05-23T21:03:57Z")

</div>

We are seeing Elastic security rule triggering alerts for LSASS Memory Dump Handle Access for the 'C:\\Windows\\System32\\poqexec.exe' process (Primitive Operations Queue Executor) on several endpoints with the computer acc…

---

## [Kibana setting "week start" should perhaps control the date picker view also](https://discuss.elastic.co/t/kibana-setting-week-start-should-perhaps-control-the-date-picker-view-also/196714)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 11:00am UTC](https://discuss.elastic.co/t/kibana-setting-week-start-should-perhaps-control-the-date-picker-view-also/196714 "2019-08-26T11:00:03Z")

</div>

Hi Kibana 6.8.2 In kibana settings, we have this option to change the day when week starts. Default is Sunday. In our country, this setting differs, so I have changed it to Monday. Wouldn't it be nice, if this sett…

---

## [Something like min\_doc\_count, but for maximum document count](https://discuss.elastic.co/t/something-like-min-doc-count-but-for-maximum-document-count/162976)

<div class="topic-metadata">

**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 5:48am UTC](https://discuss.elastic.co/t/something-like-min-doc-count-but-for-maximum-document-count/162976 "2019-01-07T05:48:44Z")

</div>

I have to create a visualization (Data Table) based on the it sec logs. The requirement is to summarize the branches where were less than 3 logins per day. So I have created a Metric(Count), added split row with timest…

---

## [Snooze or Dismiss Watcher Alert](https://discuss.elastic.co/t/snooze-or-dismiss-watcher-alert/44406)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 2\
**Last updated:** [March 15, 2016, 6:50pm UTC](https://discuss.elastic.co/t/snooze-or-dismiss-watcher-alert/44406 "2016-03-15T18:50:23Z")

</div>

Is there a way to disable watcher alerts A use case will be like Initially alert set based on one month worth of logs 1. Alert came in 2. Read the alert 3. Take note of the alert and read the relevant logs 4. Ignore t…

---

## [Embedded Kibana dashboard login page keeps reloading back to the same page](https://discuss.elastic.co/t/embedded-kibana-dashboard-login-page-keeps-reloading-back-to-the-same-page/293028)

<div class="topic-metadata">

**Author:** [@Arrick](https://discuss.elastic.co/u/Arrick)\
**Replies:** 4\
**Last updated:** [January 3, 2022, 3:52am UTC](https://discuss.elastic.co/t/embedded-kibana-dashboard-login-page-keeps-reloading-back-to-the-same-page/293028 "2022-01-03T03:52:02Z")

</div>

I'm still new to Kibana and when I try to embed my Kibana dashboard by giving it anonymous access, it keeps refreshing itself without me doing anything. Gif below for illustration. This is the code I used in my kibana…

---

## [Trying to calculate differences between 2 timestamps](https://discuss.elastic.co/t/trying-to-calculate-differences-between-2-timestamps/242443)

<div class="topic-metadata">

**Author:** [@windowsrefund\_refund](https://discuss.elastic.co/u/windowsrefund_refund)\
**Replies:** 4\
**Last updated:** [July 24, 2020, 5:19am UTC](https://discuss.elastic.co/t/trying-to-calculate-differences-between-2-timestamps/242443 "2020-07-24T05:19:27Z")

</div>

input { generator { message =\> "Jul 24 03:35:03 myhost metricbeat: 2020-07-24T03:35:03.788Z#011INFO#011\[publisher\]#011pipeline/retry.go:225#011 done" count =\> 1 } } filter { grok { match =\> { "messag…

---

## [Kibana does not show apache logs](https://discuss.elastic.co/t/kibana-does-not-show-apache-logs/235236)

<div class="topic-metadata">

**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\
**Replies:** 4\
**Last updated:** [June 3, 2020, 7:57pm UTC](https://discuss.elastic.co/t/kibana-does-not-show-apache-logs/235236 "2020-06-03T19:57:04Z")

</div>

I am using Filebeat modules (apache) to load some apache logs and view them in kibana. I have loaded the logs but I do not see them in Kibana. Both elasticsearch and Kibana are running on the same server. Filebeat.yml c…

---

## [UDP input plugin monitoring and elasticsearch output](https://discuss.elastic.co/t/udp-input-plugin-monitoring-and-elasticsearch-output/93540)

<div class="topic-metadata">

**Author:** [@Mr.Flakes](https://discuss.elastic.co/u/Mr.Flakes)\
**Replies:** 4\
**Last updated:** [July 25, 2017, 8:49am UTC](https://discuss.elastic.co/t/udp-input-plugin-monitoring-and-elasticsearch-output/93540 "2017-07-25T08:49:51Z")

</div>

Hello Logstash GURUS, so I have a logstash running live and basically the guy who set it up quit his job :frowning: Since I am totally new to this and have a system running live already that I need to take care of some …

---

## [Minimum should match with filter does not work properly](https://discuss.elastic.co/t/minimum-should-match-with-filter-does-not-work-properly/78116)

<div class="topic-metadata">

**Author:** [@jlp1](https://discuss.elastic.co/u/jlp1)\
**Replies:** 4\
**Last updated:** [March 14, 2017, 2:11pm UTC](https://discuss.elastic.co/t/minimum-should-match-with-filter-does-not-work-properly/78116 "2017-03-14T14:11:21Z")

</div>

Here is my query which used to work in 2.3.3 and stopped working in 5.2 POST test/\_search { "query": { "bool": { "filter": \[ { "term": { "deleted": false …

---

## [Elasticsearch message format](https://discuss.elastic.co/t/elasticsearch-message-format/73856)

<div class="topic-metadata">

**Author:** [@Oleksii\_Mazilov](https://discuss.elastic.co/u/Oleksii_Mazilov)\
**Replies:** 4\
**Last updated:** [February 3, 2017, 3:37pm UTC](https://discuss.elastic.co/t/elasticsearch-message-format/73856 "2017-02-03T15:37:28Z")

</div>

I need to remove several fields before pushing data to Elasticsearch. I can't use mutate filter because in aggregate filter I'm using field which I need to remove Conf example: input { jdbc { bla\_bla\_bla } } filte…

---

## [What is the best configuration to run on linux VPS server without crashing?](https://discuss.elastic.co/t/what-is-the-best-configuration-to-run-on-linux-vps-server-without-crashing/22778)

<div class="topic-metadata">

**Author:** [@yashin](https://discuss.elastic.co/u/yashin)\
**Replies:** 4\
**Last updated:** [March 31, 2015, 6:10am UTC](https://discuss.elastic.co/t/what-is-the-best-configuration-to-run-on-linux-vps-server-without-crashing/22778 "2015-03-31T06:10:18Z")

</div>

Hello guys, I am trying to run elasticsearch on a VPS server running CentOS with 4GB of RAM. It starts successfully but with the following errors and warning message below. # sudo service elasticsearch start e…

---

## [Problem with word-separators in bool search with standard tokenizer](https://discuss.elastic.co/t/problem-with-word-separators-in-bool-search-with-standard-tokenizer/19883)

<div class="topic-metadata">

**Author:** [@Ankush\_Jhalani](https://discuss.elastic.co/u/Ankush_Jhalani)\
**Replies:** 4\
**Last updated:** [September 23, 2014, 2:03pm UTC](https://discuss.elastic.co/t/problem-with-word-separators-in-bool-search-with-standard-tokenizer/19883 "2014-09-23T14:03:23Z")

</div>

In our search we have configured text with 2 analyzers, english and standard so we can match phrases on the standard-analyzer. We break the keywords by space, and create a bool query for each word. This is workin…

---

## [The documents deleted while the size of the index kremains the same after using delete by query?](https://discuss.elastic.co/t/the-documents-deleted-while-the-size-of-the-index-kremains-the-same-after-using-delete-by-query/12893)

<div class="topic-metadata">

**Author:** [@Jingang\_Wang](https://discuss.elastic.co/u/Jingang_Wang)\
**Replies:** 4\
**Last updated:** [July 24, 2013, 5:53am UTC](https://discuss.elastic.co/t/the-documents-deleted-while-the-size-of-the-index-kremains-the-same-after-using-delete-by-query/12893 "2013-07-24T05:53:12Z")

</div>

Dear all, I found that after I conducted a delete by query operation, the matched documents in the index have been deleted, while the size of the index remains the same. Could anybody tell me why? Thanks in adv…

---

## [Boosting on geo data](https://discuss.elastic.co/t/boosting-on-geo-data/7350)

<div class="topic-metadata">

**Author:** [@Peter\_Schroder](https://discuss.elastic.co/u/Peter_Schroder)\
**Replies:** 4\
**Last updated:** [April 17, 2012, 6:09am UTC](https://discuss.elastic.co/t/boosting-on-geo-data/7350 "2012-04-17T06:09:11Z")

</div>

is it possible to provide some filter or query that allows me to boost on geo-distance? i.e. if there is a document with a location that is within 100km i want to boost it to the top. if it isn't within the range,…

---

## [Is index.merge.scheduler.max\_thread\_count per node or per index setting?](https://discuss.elastic.co/t/is-index-merge-scheduler-max-thread-count-per-node-or-per-index-setting/100572)

<div class="topic-metadata">

**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\
**Replies:** 1\
**Last updated:** [September 14, 2017, 4:06pm UTC](https://discuss.elastic.co/t/is-index-merge-scheduler-max-thread-count-per-node-or-per-index-setting/100572 "2017-09-14T16:06:30Z")

</div>

I'm confused by this setting. I used to set this in elasticsearch.yml in v1.7 but now the setting move to index level setting. Does that means: Per index can have a different value? Let's say index abc put 1 and index …

---

## [Healthcheck based on recent log entries](https://discuss.elastic.co/t/healthcheck-based-on-recent-log-entries/278679)

<div class="topic-metadata">

**Author:** [@ag\_joeb](https://discuss.elastic.co/u/ag_joeb)\
**Replies:** 5\
**Last updated:** [July 16, 2021, 2:55pm UTC](https://discuss.elastic.co/t/healthcheck-based-on-recent-log-entries/278679 "2021-07-16T14:55:46Z")

</div>

I'm looking to visualize the following in one my my dashboards. The healthcheck of one of my services would be based on the amount of log entries in the past few seconds; i.e. if there were more than 5 new log entries (…

---

## [APM java agent causes my service memory to be full and the service crashes](https://discuss.elastic.co/t/apm-java-agent-causes-my-service-memory-to-be-full-and-the-service-crashes/233654)

<div class="topic-metadata">

**Author:** [@topstargogo](https://discuss.elastic.co/u/topstargogo)\
**Replies:** 5\
**Last updated:** [May 21, 2020, 2:09pm UTC](https://discuss.elastic.co/t/apm-java-agent-causes-my-service-memory-to-be-full-and-the-service-crashes/233654 "2020-05-21T14:09:48Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.7.…

---

## [S3 output plugin behaviour on shutdown?](https://discuss.elastic.co/t/s3-output-plugin-behaviour-on-shutdown/2532)

<div class="topic-metadata">

**Author:** [@Sam\_Barham](https://discuss.elastic.co/u/Sam_Barham)\
**Replies:** 5\
**Last updated:** [October 17, 2016, 3:12am UTC](https://discuss.elastic.co/t/s3-output-plugin-behaviour-on-shutdown/2532 "2016-10-17T03:12:40Z")

</div>

I want to use the S3 plugin to archive all our logs in an S3 bucket. As I understand it, I can use the size\_file or time\_file options to make it upload to S3 when the file reaches a certain size or age. The issue is t…

---

## [Logstash does not support one to many](https://discuss.elastic.co/t/logstash-does-not-support-one-to-many/60644)

<div class="topic-metadata">

**Author:** [@Syed\_Ather](https://discuss.elastic.co/u/Syed_Ather)\
**Replies:** 5\
**Last updated:** [September 17, 2016, 9:00pm UTC](https://discuss.elastic.co/t/logstash-does-not-support-one-to-many/60644 "2016-09-17T21:00:20Z")

</div>

Hi , does logstash support 1-\* relationships ? if yes , does can it not be done without the use of ruby /filters..

---

## [Same Field name with different mappings](https://discuss.elastic.co/t/same-field-name-with-different-mappings/43797)

<div class="topic-metadata">

**Author:** [@Benyamin\_Dvoskin](https://discuss.elastic.co/u/Benyamin_Dvoskin)\
**Replies:** 5\
**Last updated:** [March 10, 2016, 7:59am UTC](https://discuss.elastic.co/t/same-field-name-with-different-mappings/43797 "2016-03-10T07:59:48Z")

</div>

Hi, we have a system sending documents to ES with several fields having the same name, under different types, using different mappings. all in the same daily logstash index. when we were running on 1.x all was working …

---

## [Metricbeat - resource 'metricbeat-7.10.0' exists, but it is not an alias](https://discuss.elastic.co/t/metricbeat-resource-metricbeat-7-10-0-exists-but-it-is-not-an-alias/258311)

<div class="topic-metadata">

**Author:** [@madhan0618](https://discuss.elastic.co/u/madhan0618)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 6:20pm UTC](https://discuss.elastic.co/t/metricbeat-resource-metricbeat-7-10-0-exists-but-it-is-not-an-alias/258311 "2020-12-10T18:20:34Z")

</div>

Please help me understand this error message. I have metricbeat with kafka module running on each of my three kafka cluster nodes this is my metricbeat.yml file # =========================== Modules configuration ===…

---

## [Unable to restore kibana index from snapshot](https://discuss.elastic.co/t/unable-to-restore-kibana-index-from-snapshot/239213)

<div class="topic-metadata">

**Author:** [@dRm42](https://discuss.elastic.co/u/dRm42)\
**Replies:** 1\
**Last updated:** [July 5, 2020, 9:39pm UTC](https://discuss.elastic.co/t/unable-to-restore-kibana-index-from-snapshot/239213 "2020-07-05T21:39:03Z")

</div>

Hi There, I have upgraded our Elastic Stack from 7.6.1 to 7.7 a couple of days after 7.7 came out. I have literally upgraded everything, Elasticsearch, Kibana, Logstash and all Beats. About a week ago I have set up snap…

[Previous page](https://discuss.elastic.co/top.md?page=929&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=931&per_page=50&period=all)
