# Top

**URL:** https://discuss.elastic.co/top.md?page=940&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 941

---

## [Error with Elastic and Moloch](https://discuss.elastic.co/t/error-with-elastic-and-moloch/224232)

<div class="topic-metadata">

**Author:** [@pakjack79](https://discuss.elastic.co/u/pakjack79)\
**Replies:** 4\
**Last updated:** [March 19, 2020, 10:54am UTC](https://discuss.elastic.co/t/error-with-elastic-and-moloch/224232 "2020-03-19T10:54:53Z")

</div>

Hi all, i am get this error with this {"error":{"root\_cause":\[{"type":"remote\_transport\_exception","reason":"\[node-data\]\[10.0.xxx.6:9300\]\[indices:data/write/bulk\[s\]\[p\]\]"}\],"type":"es\_rejected\_execution\_exception","re…

---

## [Number of active threads for bulk thread\_pool is equal to number of shards to which write is happening and not a single bulk request](https://discuss.elastic.co/t/number-of-active-threads-for-bulk-thread-pool-is-equal-to-number-of-shards-to-which-write-is-happening-and-not-a-single-bulk-request/139723)

<div class="topic-metadata">

**Author:** [@vineeth\_mohan\_2](https://discuss.elastic.co/u/vineeth_mohan_2)\
**Replies:** 4\
**Last updated:** [July 12, 2018, 10:39am UTC](https://discuss.elastic.co/t/number-of-active-threads-for-bulk-thread-pool-is-equal-to-number-of-shards-to-which-write-is-happening-and-not-a-single-bulk-request/139723 "2018-07-12T10:39:54Z")

</div>

Number of active threads for bulk thread\_pool is equal to number of shards to which write is happening and not a single bulk request. My understanding was that , active threads in thread\_pool = number of concurrent bulk…

---

## [Kibana Log in disabled](https://discuss.elastic.co/t/kibana-log-in-disabled/132368)

<div class="topic-metadata">

**Author:** [@Joel\_Alcaraz\_Estragu](https://discuss.elastic.co/u/Joel_Alcaraz_Estragu)\
**Replies:** 4\
**Last updated:** [May 22, 2018, 2:54pm UTC](https://discuss.elastic.co/t/kibana-log-in-disabled/132368 "2018-05-22T14:54:37Z")

</div>

Hello there, I create a docker swarm with 2 stacks (1 with elasticsearch and 1 with kibana), once I deploy them and try to enter on kibana web (URL:5601) it says that the login is current disabled. Administrators shou…

---

## [NS\_ERROR\_FAILURE observed in Kibana dashboard in Firefox](https://discuss.elastic.co/t/ns-error-failure-observed-in-kibana-dashboard-in-firefox/111941)

<div class="topic-metadata">

**Author:** [@aaradhanas](https://discuss.elastic.co/u/aaradhanas)\
**Replies:** 4\
**Last updated:** [December 20, 2017, 10:58am UTC](https://discuss.elastic.co/t/ns-error-failure-observed-in-kibana-dashboard-in-firefox/111941 "2017-12-20T10:58:27Z")

</div>

Issue When Kibana dashboard is viewed in Firefox browser and a chart is viewed in an expanded mode and then back to the collapsed mode,the remaining charts are not rendered. Versions used Firefox: 52.4.1 (32-bit) Kiban…

---

## [Routing performance tuning](https://discuss.elastic.co/t/routing-performance-tuning/57594)

<div class="topic-metadata">

**Author:** [@es1024](https://discuss.elastic.co/u/es1024)\
**Replies:** 4\
**Last updated:** [August 10, 2016, 8:21pm UTC](https://discuss.elastic.co/t/routing-performance-tuning/57594 "2016-08-10T20:21:45Z")

</div>

I have a 10 node es cluster plus 3 masters. We are running 2.0. 8CPU, 64G Memory Virtual environment. We have about a billion records in the cluster. We are loading in the low hundred million per day and keep about…

---

## [Rubydebug codec not working](https://discuss.elastic.co/t/rubydebug-codec-not-working/44620)

<div class="topic-metadata">

**Author:** [@tetlika](https://discuss.elastic.co/u/tetlika)\
**Replies:** 4\
**Last updated:** [March 17, 2016, 11:31am UTC](https://discuss.elastic.co/t/rubydebug-codec-not-working/44620 "2016-03-17T11:31:19Z")

</div>

hi, we're using logstash 2.2.2, I have next simple config of logstash: input { file { path =\> "/var/log/logstash/logstash.log" codec =\> "rubydebug" } } output { stdout { codec =\> "…

---

## [Error loading config file: yaml: line 177: could not find expected ':'](https://discuss.elastic.co/t/error-loading-config-file-yaml-line-177-could-not-find-expected/274430)

<div class="topic-metadata">

**Author:** [@1234](https://discuss.elastic.co/u/1234)\
**Replies:** 2\
**Last updated:** [June 3, 2021, 5:32pm UTC](https://discuss.elastic.co/t/error-loading-config-file-yaml-line-177-could-not-find-expected/274430 "2021-06-03T17:32:49Z")

</div>

\# These settings simplify using Filebeat with the Elastic Cloud (https://cloud.elastic.co/) #The cloud.id setting overwrites the output.elasticsearch.hosts and setup.kibana.host options. You can find the cloud.id in…

---

## [Can't login with users created by FileRealm and secrets](https://discuss.elastic.co/t/cant-login-with-users-created-by-filerealm-and-secrets/229320)

<div class="topic-metadata">

**Author:** [@doctor](https://discuss.elastic.co/u/doctor)\
**Replies:** 7\
**Last updated:** [April 30, 2020, 2:31pm UTC](https://discuss.elastic.co/t/cant-login-with-users-created-by-filerealm-and-secrets/229320 "2020-04-30T14:31:41Z")

</div>

Hey, I'm trying to create a new user on ECK using secrets and FileRealm. I created the user like explained in the documentation: # create a folder with the 2 files mkdir filerealm touch filerealm/users filerealm/user…

---

## [Use date field to copy year to another field index](https://discuss.elastic.co/t/use-date-field-to-copy-year-to-another-field-index/184416)

<div class="topic-metadata">

**Author:** [@dlaprade](https://discuss.elastic.co/u/dlaprade)\
**Replies:** 7\
**Last updated:** [June 10, 2019, 1:37pm UTC](https://discuss.elastic.co/t/use-date-field-to-copy-year-to-another-field-index/184416 "2019-06-10T13:37:50Z")

</div>

Elasticsearch version: 6.3 Situation: I have a date field that contains a full date: "releaseDate" : { "type" : "date", "format" : "yyyy-MM-dd'T'HH:mm:ssZ" } I would like to copy the year out of a that field into an…

---

## ["\_jsonparsefailure"](https://discuss.elastic.co/t/-jsonparsefailure/75454)

<div class="topic-metadata">

**Author:** [@Brendao](https://discuss.elastic.co/u/Brendao)\
**Replies:** 6\
**Last updated:** [February 17, 2017, 10:21am UTC](https://discuss.elastic.co/t/-jsonparsefailure/75454 "2017-02-17T10:21:07Z")

</div>

Bonjour, On m'a demandé de supprimer les logs contenant le tag "\_jsonparsefailure", et j'ai lu dans un autre topic le conseil suivant : je pense qu'il faut seulement utiliser le codec json Or dès que je met ma co…

---

## [UI Filters in APM not Working](https://discuss.elastic.co/t/ui-filters-in-apm-not-working/236272)

<div class="topic-metadata">

**Author:** [@Vladimiro](https://discuss.elastic.co/u/Vladimiro)\
**Replies:** 8\
**Last updated:** [June 23, 2020, 4:04am UTC](https://discuss.elastic.co/t/ui-filters-in-apm-not-working/236272 "2020-06-23T04:04:43Z")

</div>

Hi, I am running Kibana 7.7.0. After upgrading to APM Server 7.7.1 (from 7.4.0) I noticed that UI filters in APM page do not work anymore: does not filter by environment, host etc. If I look at my browser (Chrome or Fi…

---

## [Logstash xml parsing problems](https://discuss.elastic.co/t/logstash-xml-parsing-problems/128115)

<div class="topic-metadata">

**Author:** [@povisx1](https://discuss.elastic.co/u/povisx1)\
**Replies:** 8\
**Last updated:** [May 16, 2018, 6:13am UTC](https://discuss.elastic.co/t/logstash-xml-parsing-problems/128115 "2018-05-16T06:13:06Z")

</div>

Hello, I have the problem with xml parsing, my parsed result looks like : {"newMSISDN":"%{parsedMSISDN}","offset":52307874,"host":"miram.int.bite.lt","prospector":{"type":"log"},"@version":"1","@timestamp":"2018-04-16T…

---

## [Snapshots for daily indices - best practice?](https://discuss.elastic.co/t/snapshots-for-daily-indices-best-practice/130732)

<div class="topic-metadata">

**Author:** [@AndreasB](https://discuss.elastic.co/u/AndreasB)\
**Replies:** 3\
**Last updated:** [May 6, 2018, 8:59am UTC](https://discuss.elastic.co/t/snapshots-for-daily-indices-best-practice/130732 "2018-05-06T08:59:42Z")

</div>

Hi There, we are currently searching for the best way to backup our ES-Cluster. Maybe the pros could give us some advice. Background: ES-Cluster (6.2.x) running on Azure VMs Repository target is a blob (using reposit…

---

## [Kibana custom field problem](https://discuss.elastic.co/t/kibana-custom-field-problem/28506)

<div class="topic-metadata">

**Author:** [@piebuo](https://discuss.elastic.co/u/piebuo)\
**Replies:** 3\
**Last updated:** [September 4, 2015, 11:03am UTC](https://discuss.elastic.co/t/kibana-custom-field-problem/28506 "2015-09-04T11:03:52Z")

</div>

Hi, i want to create a custom field in kibana, i tried to follow the instructions at https://www.elastic.co/blog/kibana-custom-field-formatters but when i start kiban launching bin/kibana --dev i get this error: S…

---

## [Ingest pipelines with Serial Difference aggregation](https://discuss.elastic.co/t/ingest-pipelines-with-serial-difference-aggregation/241511)

<div class="topic-metadata">

**Author:** [@dg1](https://discuss.elastic.co/u/dg1)\
**Replies:** 5\
**Last updated:** [August 9, 2020, 12:21pm UTC](https://discuss.elastic.co/t/ingest-pipelines-with-serial-difference-aggregation/241511 "2020-08-09T12:21:13Z")

</div>

I'm storing quality metrics in elastic. One of those metrics is code coverage (extracted from sonar). I want to calculate the difference in average code coverage for a project between weeks. So this week the average code…

---

## [Is it possible to run Logstash 7.6.2 on 2GB RAM and 2 Core CPU](https://discuss.elastic.co/t/is-it-possible-to-run-logstash-7-6-2-on-2gb-ram-and-2-core-cpu/234460)

<div class="topic-metadata">

**Author:** [@karthiknpy](https://discuss.elastic.co/u/karthiknpy)\
**Replies:** 5\
**Last updated:** [June 1, 2020, 1:48pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-logstash-7-6-2-on-2gb-ram-and-2-core-cpu/234460 "2020-06-01T13:48:00Z")

</div>

Hi Team, I have only one Linux server with 2GB RAM and 2 core CPUs. Is it possible to tune the JVM limit the memory and use logstash in this server. I have seen the optimization guide but it is some high level tech to …

---

## [Can't save multiple documents with same nested property into the same index: error says " object mapping can't be changed from nested to non-nested"](https://discuss.elastic.co/t/cant-save-multiple-documents-with-same-nested-property-into-the-same-index-error-says-object-mapping-cant-be-changed-from-nested-to-non-nested/105780)

<div class="topic-metadata">

**Author:** [@mwolfhoffman](https://discuss.elastic.co/u/mwolfhoffman)\
**Replies:** 5\
**Last updated:** [October 30, 2017, 5:10pm UTC](https://discuss.elastic.co/t/cant-save-multiple-documents-with-same-nested-property-into-the-same-index-error-says-object-mapping-cant-be-changed-from-nested-to-non-nested/105780 "2017-10-30T17:10:16Z")

</div>

I'm having an issue that I haven't seen on here yet. I am using the .net NEST client. I have multiple classes (ProductError and BatchError) with the same nested property (Error). When I save these documents individually…

---

## [CloudWatch input](https://discuss.elastic.co/t/cloudwatch-input/2652)

<div class="topic-metadata">

**Author:** [@jrgns](https://discuss.elastic.co/u/jrgns)\
**Replies:** 5\
**Last updated:** [December 4, 2015, 8:46am UTC](https://discuss.elastic.co/t/cloudwatch-input/2652 "2015-12-04T08:46:18Z")

</div>

Hey I created a CloudWatch input for Logstash. I'd like to get some feedback and guidance on how to properly write tests for it. The gem has been published (so you can install it on Logstash 1.5) and the code is availa…

---

## [Performance memory swapping Windows?](https://discuss.elastic.co/t/performance-memory-swapping-windows/23999)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 5\
**Last updated:** [June 23, 2015, 2:43am UTC](https://discuss.elastic.co/t/performance-memory-swapping-windows/23999 "2015-06-23T02:43:14Z")

</div>

Running ES 1.6.0 on Windows 2008 R2 Java 1.8\_45 G1GC Setup I have 4 nodes and each are: 32 cores 128GB RAM and 5TB Fusion IO ES\_HEAP\_SIZE=30GB per node 6 "monthly" indexes of 8 shards + 1 replica 1.3 Billion Docs 13T…

---

## [How to understand the APM data span.duration.us value](https://discuss.elastic.co/t/how-to-understand-the-apm-data-span-duration-us-value/318611)

<div class="topic-metadata">

**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\
**Replies:** 1\
**Last updated:** [November 10, 2022, 2:25pm UTC](https://discuss.elastic.co/t/how-to-understand-the-apm-data-span-duration-us-value/318611 "2022-11-10T14:25:53Z")

</div>

Hello, I am trying to prepare custom dashboard by using span.duration.us field. My query is what is the value inside span.duration.us field is value in microsecond? If it is microsecond how do i apply logic to see the…

---

## [Interactive Zoom in Kibana 7 dashboard](https://discuss.elastic.co/t/interactive-zoom-in-kibana-7-dashboard/210680)

<div class="topic-metadata">

**Author:** [@joaoantoniopereira2](https://discuss.elastic.co/u/joaoantoniopereira2)\
**Replies:** 4\
**Last updated:** [December 5, 2019, 11:57am UTC](https://discuss.elastic.co/t/interactive-zoom-in-kibana-7-dashboard/210680 "2019-12-05T11:57:29Z")

</div>

Hi, I recently upgraded from Kibana 5.5 to 7.x. I noticed I cannot zoom in dashboard visualizations with mouse pointer by default, which was possible in 5.5. Is there any setting I can choose to make this feature avai…

---

## [Passing input values to logstash from external file](https://discuss.elastic.co/t/passing-input-values-to-logstash-from-external-file/139766)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 4\
**Last updated:** [July 18, 2018, 2:23pm UTC](https://discuss.elastic.co/t/passing-input-values-to-logstash-from-external-file/139766 "2018-07-18T14:23:29Z")

</div>

Hi All, I have been trying to use logstash http\_poller method to fetch data from one of my source. The plan is to pull data from a restapi source which requires an URL, user ccredentials i was able to pass these two fi…

---

## [Problem with indexes - Logstash dont create filebeat indexes](https://discuss.elastic.co/t/problem-with-indexes-logstash-dont-create-filebeat-indexes/91117)

<div class="topic-metadata">

**Author:** [@rwagner](https://discuss.elastic.co/u/rwagner)\
**Replies:** 4\
**Last updated:** [June 29, 2017, 6:05pm UTC](https://discuss.elastic.co/t/problem-with-indexes-logstash-dont-create-filebeat-indexes/91117 "2017-06-29T18:05:20Z")

</div>

I am not able to create indexes using filebeat on windows. Apparently logstash is not even getting the logs. I disabled the firewalld and selinux on the server that is logstash + elasticsearch, I can also see the commu…

---

## [Different lines structure for same log](https://discuss.elastic.co/t/different-lines-structure-for-same-log/71779)

<div class="topic-metadata">

**Author:** [@przecie](https://discuss.elastic.co/u/przecie)\
**Replies:** 4\
**Last updated:** [January 20, 2017, 9:27am UTC](https://discuss.elastic.co/t/different-lines-structure-for-same-log/71779 "2017-01-20T09:27:50Z")

</div>

Hi I have a following lines in my log: -- - 2017-01-16 00:00:01,779 \[Thread-31:SpaceChangePollerTask(SpaceChangePollerTask-1121721-Space:MAIN)\] INFO (support.context.FrameworkSession) Using overridden system date:…

---

## [NGINX Log mapping](https://discuss.elastic.co/t/nginx-log-mapping/61638)

<div class="topic-metadata">

**Author:** [@dmitry1980](https://discuss.elastic.co/u/dmitry1980)\
**Replies:** 4\
**Last updated:** [October 12, 2016, 3:17pm UTC](https://discuss.elastic.co/t/nginx-log-mapping/61638 "2016-10-12T15:17:09Z")

</div>

I setup ELK server (kibana-4.6.1,logstash-2.4,elasticsearch-2.4) I have setup one index pattern (logstash-\*) and using one time-field name (@timestamp) NGUSERNAME \[a-zA-Z.@-+\_%\]+ NGUSER %{NGUSERNAME} NGINXACCESS %{IPO…

---

## [Visualize apache logs strange](https://discuss.elastic.co/t/visualize-apache-logs-strange/58094)

<div class="topic-metadata">

**Author:** [@emperor](https://discuss.elastic.co/u/emperor)\
**Replies:** 4\
**Last updated:** [August 22, 2016, 6:11am UTC](https://discuss.elastic.co/t/visualize-apache-logs-strange/58094 "2016-08-22T06:11:13Z")

</div>

i have succefully configured apache logs to elk servers,but when i use the visualize (Vertical bar chart mode) to show the apache request url , it shows like this\_\_ the correct result should like this it seems when i …

---

## [Anyone have an easy way to make Metricbeat use Time Series Data Streams (TSDS)?](https://discuss.elastic.co/t/anyone-have-an-easy-way-to-make-metricbeat-use-time-series-data-streams-tsds/342375)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 4\
**Last updated:** [September 12, 2023, 3:17pm UTC](https://discuss.elastic.co/t/anyone-have-an-easy-way-to-make-metricbeat-use-time-series-data-streams-tsds/342375 "2023-09-12T15:17:44Z")

</div>

Long story short, we need to shrink our resource usage with our Elastic Stack. Part of my attempts at that has been implementing down sampling. But, after finally reading the docs carefully enough, I found out that we ne…

---

## [Exclude null containing key (records) while executing range Query in Elastic search JAVA Rest client](https://discuss.elastic.co/t/exclude-null-containing-key-records-while-executing-range-query-in-elastic-search-java-rest-client/213705)

<div class="topic-metadata">

**Author:** [@Aswini\_Kumar\_Rout](https://discuss.elastic.co/u/Aswini_Kumar_Rout)\
**Replies:** 2\
**Last updated:** [January 6, 2020, 6:48am UTC](https://discuss.elastic.co/t/exclude-null-containing-key-records-while-executing-range-query-in-elastic-search-java-rest-client/213705 "2020-01-06T06:48:17Z")

</div>

Let, I have below six records in my index. { "min": "300", "max": "350", "contentName": "Dabangg 5" }, { "min": "150", "max": "200", "contentName": "Dabangg 2" …

---

## [Create array with only one element](https://discuss.elastic.co/t/create-array-with-only-one-element/170572)

<div class="topic-metadata">

**Author:** [@Idar\_Lund](https://discuss.elastic.co/u/Idar_Lund)\
**Replies:** 2\
**Last updated:** [March 2, 2019, 8:33am UTC](https://discuss.elastic.co/t/create-array-with-only-one-element/170572 "2019-03-02T08:33:34Z")

</div>

Hi, I'm trying to create an array with only one element, so that I can add more elements to it later with elasticsearch action update and script. When adding an array with two elements like this: filter { mutate { a…

---

## [Kibana - skip login page](https://discuss.elastic.co/t/kibana-skip-login-page/167323)

<div class="topic-metadata">

**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\
**Replies:** 2\
**Last updated:** [February 7, 2019, 9:27am UTC](https://discuss.elastic.co/t/kibana-skip-login-page/167323 "2019-02-07T09:27:13Z")

</div>

Hello, I have x-pack and I want to embed my dashboards in another webpage. I tried to do a POST request with login credentials to get my cookie, but I got no sucess. There is any other way? I have already implemented ng…

---

## [X-Pack Security :: Role Index Restriction with Regexp](https://discuss.elastic.co/t/x-pack-security-role-index-restriction-with-regexp/112908)

<div class="topic-metadata">

**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\
**Replies:** 2\
**Last updated:** [December 22, 2017, 5:20pm UTC](https://discuss.elastic.co/t/x-pack-security-role-index-restriction-with-regexp/112908 "2017-12-22T17:20:16Z")

</div>

We have an ES cluster we're using for logs. We have many indexes that are prefixed with "log-". I'm trying to create two roles, one which has access to all log indexes which is easy enough, but another that has access to…

---

## [Definitions of Logstash Collector, Processor and Shipper](https://discuss.elastic.co/t/definitions-of-logstash-collector-processor-and-shipper/95429)

<div class="topic-metadata">

**Author:** [@sebastus](https://discuss.elastic.co/u/sebastus)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 9:40am UTC](https://discuss.elastic.co/t/definitions-of-logstash-collector-processor-and-shipper/95429 "2017-08-03T09:40:51Z")

</div>

I have seen reference to collectors, processors and shippers in various places, but I can’t find a definition of either one. Have they always existed? Did they exist for a while as important artifacts and no longer are s…

---

## [Best approach to find points within radius](https://discuss.elastic.co/t/best-approach-to-find-points-within-radius/36998)

<div class="topic-metadata">

**Author:** [@Alexey\_Danilov](https://discuss.elastic.co/u/Alexey_Danilov)\
**Replies:** 2\
**Last updated:** [December 16, 2015, 10:20am UTC](https://discuss.elastic.co/t/best-approach-to-find-points-within-radius/36998 "2015-12-16T10:20:22Z")

</div>

Hi guys. I would like to get you insight on what is the best approach to use radius filtering - i.e. get points which are within a given range from the specified center. In Java API there are two ways, based on the for…

---

## [Node Stats API Failing - "Values less than -1 bytes are not supported: -4b"](https://discuss.elastic.co/t/node-stats-api-failing-values-less-than-1-bytes-are-not-supported-4b/201048)

<div class="topic-metadata">

**Author:** [@pjaikumar](https://discuss.elastic.co/u/pjaikumar)\
**Replies:** 1\
**Last updated:** [September 25, 2019, 2:28pm UTC](https://discuss.elastic.co/t/node-stats-api-failing-values-less-than-1-bytes-are-not-supported-4b/201048 "2019-09-25T14:28:10Z")

</div>

We are trying to call \_nodes/stats API from our monitoring systems to monitor ES cluster & nodes and its throwing up the below error but \_nodes//stats works fine. Can anybody throw some light on why this is happening ? …

---

## [LDAPBindException/SSLHandshakeException setting Active Directory User Authentication](https://discuss.elastic.co/t/ldapbindexception-sslhandshakeexception-setting-active-directory-user-authentication/119325)

<div class="topic-metadata">

**Author:** [@jfreeman](https://discuss.elastic.co/u/jfreeman)\
**Replies:** 7\
**Last updated:** [February 13, 2018, 1:58am UTC](https://discuss.elastic.co/t/ldapbindexception-sslhandshakeexception-setting-active-directory-user-authentication/119325 "2018-02-13T01:58:28Z")

</div>

Hi, I am trying to setup AD user authentication with Elasticsearch 6.0 installed on Windows Server 2016. Any ideas how to solve this issue? The configuration in elasticsearch.yml file is xpack: security: authc: rea…

---

## [Why is ascending geo distance sorting faster than descending geo distance sorting](https://discuss.elastic.co/t/why-is-ascending-geo-distance-sorting-faster-than-descending-geo-distance-sorting/173328)

<div class="topic-metadata">

**Author:** [@gemo1011](https://discuss.elastic.co/u/gemo1011)\
**Replies:** 6\
**Last updated:** [March 22, 2019, 1:22pm UTC](https://discuss.elastic.co/t/why-is-ascending-geo-distance-sorting-faster-than-descending-geo-distance-sorting/173328 "2019-03-22T13:22:34Z")

</div>

I'm using Elasticsearch 6.6 and have an index (1 shard, 1 replica) with the geonames (https://www.geonames.org/) dataset indexed (indexsize =1.3 gb, 11.8 mio geopoints). I was playing around a bit with the geo distance …

---

## [Return only needed fields in response without metadata](https://discuss.elastic.co/t/return-only-needed-fields-in-response-without-metadata/250639)

<div class="topic-metadata">

**Author:** [@Nick\_Name](https://discuss.elastic.co/u/Nick_Name)\
**Replies:** 3\
**Last updated:** [October 1, 2020, 1:24pm UTC](https://discuss.elastic.co/t/return-only-needed-fields-in-response-without-metadata/250639 "2020-10-01T13:24:37Z")

</div>

Can I specify my SearchSourceBuilder or SearchRequest for return in SearchResponse only fields without metadata? Include fields and Exclude don't work. I want to return only code.keyword and id.keyword fields in response…

---

## [Adding non-elastic plugins to Elasticsearch & Kibana](https://discuss.elastic.co/t/adding-non-elastic-plugins-to-elasticsearch-kibana/99142)

<div class="topic-metadata">

**Author:** [@Wes\_F](https://discuss.elastic.co/u/Wes_F)\
**Replies:** 3\
**Last updated:** [September 1, 2017, 6:52pm UTC](https://discuss.elastic.co/t/adding-non-elastic-plugins-to-elasticsearch-kibana/99142 "2017-09-01T18:52:01Z")

</div>

I was trying to figure out the best way to add a plugin that is not in the list of pre-loaded plugins. And I saw that in Elastic Cloud you can upload plugins but not in Elastic Cloud Enterprise. Is there a way to add pl…

---

## [Long GC on Elasticsearch master nodes](https://discuss.elastic.co/t/long-gc-on-elasticsearch-master-nodes/75112)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 3\
**Last updated:** [February 16, 2017, 8:55am UTC](https://discuss.elastic.co/t/long-gc-on-elasticsearch-master-nodes/75112 "2017-02-16T08:55:33Z")

</div>

Since I upgraded to ES 2.4.2 I have been noticing the master servers falling off and rejoining the cluster due to long GC . They are master only nodes with 16gb memory. I even increased the ES\_HEAP\_SIZE from 8g to 10g (…

---

## [Why X-Pack required to install with Elasticsearch & Kibana](https://discuss.elastic.co/t/why-x-pack-required-to-install-with-elasticsearch-kibana/56231)

<div class="topic-metadata">

**Author:** [@gupta.yuvraj](https://discuss.elastic.co/u/gupta.yuvraj)\
**Replies:** 3\
**Last updated:** [July 24, 2016, 10:43am UTC](https://discuss.elastic.co/t/why-x-pack-required-to-install-with-elasticsearch-kibana/56231 "2016-07-24T10:43:54Z")

</div>

Why do we need to install X-Pack separately for Elasticsearch & Kibana. Can't we provide a single installation which will install the components with Elastisearch & Kibana? Also, what is the need of having X-Pack inst…

---

## [Create log Dashboard using Postgresql Template - Kibana](https://discuss.elastic.co/t/create-log-dashboard-using-postgresql-template-kibana/164184)

<div class="topic-metadata">

**Author:** [@zolthar-z](https://discuss.elastic.co/u/zolthar-z)\
**Replies:** 2\
**Last updated:** [January 15, 2019, 8:01pm UTC](https://discuss.elastic.co/t/create-log-dashboard-using-postgresql-template-kibana/164184 "2019-01-15T20:01:02Z")

</div>

Hi All Currenlty I'm creating a new dashboard for PostgreSQL log (Using filebeat as a client) but after pass the "Check Data" option for module status with an Ok I clicked on "PostgreSQL logs dashboard" but I received …

---

## [Conditional output](https://discuss.elastic.co/t/conditional-output/47014)

<div class="topic-metadata">

**Author:** [@canadatom](https://discuss.elastic.co/u/canadatom)\
**Replies:** 2\
**Last updated:** [April 12, 2016, 4:19pm UTC](https://discuss.elastic.co/t/conditional-output/47014 "2016-04-12T16:19:39Z")

</div>

I am trying to use prospector to include some log patterns and output it to file, and another prospector filter to include some other log patterns and output to logstash, is this doable?

---

## [JDBC River for mysql](https://discuss.elastic.co/t/jdbc-river-for-mysql/38847)

<div class="topic-metadata">

**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\
**Replies:** 2\
**Last updated:** [January 13, 2016, 11:46am UTC](https://discuss.elastic.co/t/jdbc-river-for-mysql/38847 "2016-01-13T11:46:27Z")

</div>

Hi, My operating system: Linux Centos. My platform: Elasticsearch 2.1.0.0 marvel plugin My JDBC River plugin: elasticsearch-jdbc-2.1.0.0 My Mysql database : admin\_ihale My table: tbl\_ihale \*\*I tried. My codes : PUT…

---

## [Troubshooting mapping conflicts after 7.2 upgrade, event id's](https://discuss.elastic.co/t/troubshooting-mapping-conflicts-after-7-2-upgrade-event-ids/189383)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 5\
**Last updated:** [July 10, 2019, 1:54am UTC](https://discuss.elastic.co/t/troubshooting-mapping-conflicts-after-7-2-upgrade-event-ids/189383 "2019-07-10T01:54:49Z")

</div>

Upgraded to elasticstack/Winlogbeats 7.2 and it's great! But I seem to have some conflicts in mapping somewhere and I'm not sure how to troubleshoot. In the past I could simply got to 'Index Patterns' hit the 'refresh …

---

## [Nested has\_child query](https://discuss.elastic.co/t/nested-has-child-query/10228)

<div class="topic-metadata">

**Author:** [@Przemek](https://discuss.elastic.co/u/Przemek)\
**Replies:** 5\
**Last updated:** [January 5, 2013, 10:55am UTC](https://discuss.elastic.co/t/nested-has-child-query/10228 "2013-01-05T10:55:34Z")

</div>

Hello, I have an index, in which there are 3 types of document, call them parent -\> child -\> grandchild. So every grandchild's \_parent is some child, and every child's \_parent is some parent. Performing these two…

---

## [Are sorted indexes supported with index templates?](https://discuss.elastic.co/t/are-sorted-indexes-supported-with-index-templates/110484)

<div class="topic-metadata">

**Author:** [@aoeuid](https://discuss.elastic.co/u/aoeuid)\
**Replies:** 0\
**Last updated:** [December 6, 2017, 9:46am UTC](https://discuss.elastic.co/t/are-sorted-indexes-supported-with-index-templates/110484 "2017-12-06T09:46:25Z")

</div>

I've tried to combine them (even with pre-declared fields as the sort keys) but I get the following error: {"type":"illegal\_argument\_exception","reason":"unknown index sort field:\[my\_field\]"} Thank you!

---

## [Elasticsearch curator restoring ".security" index during restore action](https://discuss.elastic.co/t/elasticsearch-curator-restoring-security-index-during-restore-action/285648)

<div class="topic-metadata">

**Author:** [@163satish](https://discuss.elastic.co/u/163satish)\
**Replies:** 8\
**Last updated:** [October 4, 2021, 5:45am UTC](https://discuss.elastic.co/t/elasticsearch-curator-restoring-security-index-during-restore-action/285648 "2021-10-04T05:45:41Z")

</div>

I am using Elasticsearch curator 5.8 to take snapshot on region1 and restore on region2. Recently, cluster was upgraded to 7.14, and I needed to upgrade curator to 5.8 (min 5.7 is needed). Now, when I am restoring a sna…

---

## [Bulk processor: Cannot find bulk threads while profiling](https://discuss.elastic.co/t/bulk-processor-cannot-find-bulk-threads-while-profiling/186188)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 8\
**Last updated:** [June 26, 2019, 6:52am UTC](https://discuss.elastic.co/t/bulk-processor-cannot-find-bulk-threads-while-profiling/186188 "2019-06-26T06:52:33Z")

</div>

We are using BulkProcessor for indexing data. We have set the ConcurrentRequest parameter to 5. I am profiling my application and expect that i could see 5 bulk request threads in the live thread monitoring. But i cann…

---

## [\[elasticsearch-hadoop\] How to specify es.mapping.id value from inside a map?](https://discuss.elastic.co/t/elasticsearch-hadoop-how-to-specify-es-mapping-id-value-from-inside-a-map/112562)

<div class="topic-metadata">

**Author:** [@akshru](https://discuss.elastic.co/u/akshru)\
**Replies:** 1\
**Last updated:** [December 20, 2017, 7:03am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-how-to-specify-es-mapping-id-value-from-inside-a-map/112562 "2017-12-20T07:03:11Z")

</div>

Hi, I am working using elasticsearch-hadoop dependency for uploading dataframes to AWS ES service. I want to specify \_id for every document that has to be uploaded. However the document id resides inside a map in my do…

---

## [Php client can't connect to different port localhost](https://discuss.elastic.co/t/php-client-cant-connect-to-different-port-localhost/41115)

<div class="topic-metadata">

**Author:** [@DrunkUnicorn](https://discuss.elastic.co/u/DrunkUnicorn)\
**Replies:** 1\
**Last updated:** [February 6, 2016, 12:09pm UTC](https://discuss.elastic.co/t/php-client-cant-connect-to-different-port-localhost/41115 "2016-02-06T12:09:46Z")

</div>

I've installed last ElasticSearch version (2.2.0) to my vagrant, ant forwarded ports like 62000 host goes to 9200 guest, and everything works fine, localhost:62000 on my host machine returns me default information about …

[Previous page](https://discuss.elastic.co/top.md?page=939&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=941&per_page=50&period=all)
