# Top **URL:** https://discuss.elastic.co/top.md?page=955&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 956 --- ## [Elasticsearch memory requirements /tuning for zero down time indexing](https://discuss.elastic.co/t/elasticsearch-memory-requirements-tuning-for-zero-down-time-indexing/31286)
**Author:** [@sarya](https://discuss.elastic.co/u/sarya)\ **Replies:** 6\ **Last updated:** [September 29, 2015, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-memory-requirements-tuning-for-zero-down-time-indexing/31286 "2015-09-29T14:56:21Z")
We are trying to implement a zero down time indexing model in our elasticearch version 1.5 cluster (Five shards and one replica) . We are having multiple data sets of 250 million documents each about 700 fields which … --- ## [Lowercase normalizer not working](https://discuss.elastic.co/t/lowercase-normalizer-not-working/245286)
**Author:** [@AmitaS](https://discuss.elastic.co/u/AmitaS)\ **Replies:** 5\ **Last updated:** [August 18, 2020, 9:42am UTC](https://discuss.elastic.co/t/lowercase-normalizer-not-working/245286 "2020-08-18T09:42:31Z")
HI, m trying to do exact search , with case insensitve. I am able to exact search using "keyword" ,but even after adding normalizer. It does not work with case insenisitve.i have to give exact term to search. .Match(m … --- ## [Logstash not reading csv file](https://discuss.elastic.co/t/logstash-not-reading-csv-file/158512)
**Author:** [@fillic2002](https://discuss.elastic.co/u/fillic2002)\ **Replies:** 5\ **Last updated:** [November 28, 2018, 12:57pm UTC](https://discuss.elastic.co/t/logstash-not-reading-csv-file/158512 "2018-11-28T12:57:55Z")
I am not able to see any error on running the pipeline but the data is not read either on stdout or elasticsearch. here is my pipeline. I am using 6.5.0 input{ file{ path=\>"C:\\TR\\d\\Professional\\ELK\\Data\\test.csv" sta… --- ## [What is the probable release date for version 7.10?](https://discuss.elastic.co/t/what-is-the-probable-release-date-for-version-7-10/255007)
**Author:** [@Nikit\_Singh](https://discuss.elastic.co/u/Nikit_Singh)\ **Replies:** 4\ **Last updated:** [November 12, 2020, 5:19am UTC](https://discuss.elastic.co/t/what-is-the-probable-release-date-for-version-7-10/255007 "2020-11-12T05:19:03Z")
Hi I wanted to use the new Observability feature of capturing web-vitals logs. It's only available in 7.10 so wanted to know when will it be released? Thanks. --- ## [Bulk Partial Update in elasticsearch with Python](https://discuss.elastic.co/t/bulk-partial-update-in-elasticsearch-with-python/239575)
**Author:** [@johnny1](https://discuss.elastic.co/u/johnny1)\ **Replies:** 1\ **Last updated:** [July 2, 2020, 6:33am UTC](https://discuss.elastic.co/t/bulk-partial-update-in-elasticsearch-with-python/239575 "2020-07-02T06:33:30Z")
I want to perform a bulk partial update in python for elasticsearch because I don't want to update the whole documents but only specific fields. Can you please give an example? Best thanks in advance. --- ## [ECK - Kubernetes liveness and readiness probes](https://discuss.elastic.co/t/eck-kubernetes-liveness-and-readiness-probes/217663)
**Author:** [@JanKowalik](https://discuss.elastic.co/u/JanKowalik)\ **Replies:** 1\ **Last updated:** [February 4, 2020, 8:16am UTC](https://discuss.elastic.co/t/eck-kubernetes-liveness-and-readiness-probes/217663 "2020-02-04T08:16:37Z")
Is it recommended to provide custom livenessProbe and readinessProbe for services deployed using the ECK operator? I can see that the operator creates readiness probes by default. Is the default suitable for production … --- ## [Multi\_match fuzzy in filter](https://discuss.elastic.co/t/multi-match-fuzzy-in-filter/117122)
**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\ **Replies:** 1\ **Last updated:** [January 25, 2018, 9:30pm UTC](https://discuss.elastic.co/t/multi-match-fuzzy-in-filter/117122 "2018-01-25T21:30:19Z")
I am trying to execute an elasticsearch query (I am using 2.4.6) with a bool filter that includes a multimatch query over best\_fields with fuzziness set to 1 however the query only yields a match with exact spelling. As … --- ## [Clojure support in APM Java Agent?](https://discuss.elastic.co/t/clojure-support-in-apm-java-agent/152654)
**Author:** [@JamiK](https://discuss.elastic.co/u/JamiK)\ **Replies:** 2\ **Last updated:** [October 29, 2018, 11:10am UTC](https://discuss.elastic.co/t/clojure-support-in-apm-java-agent/152654 "2018-10-29T11:10:07Z")
Before debugging my problem further, does the APM Java Agent support Clojure applications at all? Can't seem to get any log output or anything when trying it with a project using Jetty and supported JVM. --- ## [Monthly backup and restore along with snapshot](https://discuss.elastic.co/t/monthly-backup-and-restore-along-with-snapshot/206734)
**Author:** [@Rajat\_Panwar](https://discuss.elastic.co/u/Rajat_Panwar)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 5:54am UTC](https://discuss.elastic.co/t/monthly-backup-and-restore-along-with-snapshot/206734 "2019-11-08T05:54:05Z")
Hi, We are pretty new to Elasticseach, so our question may look like something trivial, But really need your advise. We have Elasticsearch hosted on elastic cloud. We are using this to save our logs. At any given time… --- ## [Logstash hangs (CLOSE\_WAIT)](https://discuss.elastic.co/t/logstash-hangs-close-wait/201545)
**Author:** [@manunc](https://discuss.elastic.co/u/manunc)\ **Replies:** 2\ **Last updated:** [October 10, 2019, 9:58am UTC](https://discuss.elastic.co/t/logstash-hangs-close-wait/201545 "2019-10-10T09:58:06Z")
Hello, Logstash version 7.3.2-1 on CentOS 7.6.1810 Since several days I noticed that Logstash is frozen every 24h. When I check the server I found a lot of CLOSE\_WAIT (131). Nothing in the logstash-plain.log relevant… --- ## [Cannot GET \_source if \_id has spaces in it](https://discuss.elastic.co/t/cannot-get-source-if-id-has-spaces-in-it/201045)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [September 26, 2019, 8:48am UTC](https://discuss.elastic.co/t/cannot-get-source-if-id-has-spaces-in-it/201045 "2019-09-26T08:48:40Z")
We have a document indexed with the \_id field set to "STT -30247-010" (note the space). We are unable to retrieve this document via the API (documents without spaces in the \_id) work fine. With a \_search (q=\_id="STT -3… --- ## [How to create a kibana dashboard which could search through index relations?](https://discuss.elastic.co/t/how-to-create-a-kibana-dashboard-which-could-search-through-index-relations/315276)
**Author:** [@Ibrahim\_Z\_HIDIR](https://discuss.elastic.co/u/Ibrahim_Z_HIDIR)\ **Replies:** 8\ **Last updated:** [September 29, 2022, 8:25am UTC](https://discuss.elastic.co/t/how-to-create-a-kibana-dashboard-which-could-search-through-index-relations/315276 "2022-09-29T08:25:16Z")
Hi everybody I have 3 different indices, A, B and C A and B both sharing a field suppose F1 B and C also sharing another field suppose F2 I've added 3 different saved search to a dash board. So when I want to sear… --- ## [Confusions about how globlal checkpoint advances in es 7.6](https://discuss.elastic.co/t/confusions-about-how-globlal-checkpoint-advances-in-es-7-6/221698)
**Author:** [@iamorchid](https://discuss.elastic.co/u/iamorchid)\ **Replies:** 8\ **Last updated:** [March 3, 2020, 7:47am UTC](https://discuss.elastic.co/t/confusions-about-how-globlal-checkpoint-advances-in-es-7-6/221698 "2020-03-03T07:47:19Z")
In es 7.6, I see that we introduced persisted local checkpoint and processed local checkpoint. After each update replication, replicas return their persisted local checkpoint to primary shard. And based on these checkpoi… --- ## [I cant index microsoft office files and pdf in elisticsearch](https://discuss.elastic.co/t/i-cant-index-microsoft-office-files-and-pdf-in-elisticsearch/121377)
**Author:** [@sara2](https://discuss.elastic.co/u/sara2)\ **Replies:** 3\ **Last updated:** [February 25, 2018, 4:39pm UTC](https://discuss.elastic.co/t/i-cant-index-microsoft-office-files-and-pdf-in-elisticsearch/121377 "2018-02-25T16:39:23Z")
hello , i use elisticsearch 2.0.0 and i try to index and search for pdf files or word files but it always failed because content inserted on it like encoded text and when use file\_get\_content it also failed and i sear… --- ## [Extracting IP address pattern from string](https://discuss.elastic.co/t/extracting-ip-address-pattern-from-string/104409)
**Author:** [@simbarashe\_Barry\_Mak](https://discuss.elastic.co/u/simbarashe_Barry_Mak)\ **Replies:** 3\ **Last updated:** [October 18, 2017, 2:44pm UTC](https://discuss.elastic.co/t/extracting-ip-address-pattern-from-string/104409 "2017-10-18T14:44:17Z")
How can I extract an IP address pattern from a long string like this using regular expressions ? Oct 18 16:01:56 Server1 Sshd\[207769\]: Failed Password For Invalid User Music From 107.150.42.106 Port 63668 Ssh… --- ## [Filter timestamp range on es5](https://discuss.elastic.co/t/filter-timestamp-range-on-es5/89292)
**Author:** [@procipher](https://discuss.elastic.co/u/procipher)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 10:05am UTC](https://discuss.elastic.co/t/filter-timestamp-range-on-es5/89292 "2017-06-16T10:05:02Z")
Hello @all, I have this mapping: "@timestamp" : { "type" : "date", "format" : "strict\_date\_optional\_time||epoch\_millis" } And this structure: "@timestamp" :"2017-06-09T05:38:09+00:00" Now, I want to filter b… --- ## [How do I create a global date based on file header](https://discuss.elastic.co/t/how-do-i-create-a-global-date-based-on-file-header/60928)
**Author:** [@TaylorSanchez](https://discuss.elastic.co/u/TaylorSanchez)\ **Replies:** 8\ **Last updated:** [September 20, 2016, 8:59pm UTC](https://discuss.elastic.co/t/how-do-i-create-a-global-date-based-on-file-header/60928 "2016-09-20T20:59:30Z")
I am parsing some sysstat (Linux sar commands) files. They sysstat files start with a header of the Linux kernel, hostname, date, and architecture. I was able to parse out what I wanted with this grok filter: patterns\_… --- ## [Logstash time parsing error](https://discuss.elastic.co/t/logstash-time-parsing-error/52765)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 3\ **Last updated:** [June 15, 2016, 5:43am UTC](https://discuss.elastic.co/t/logstash-time-parsing-error/52765 "2016-06-15T05:43:03Z")
I have come across with logstash date parsing error like the follow. ←\[33mFailed parsing date from field {:field=\>"Date", :value=\>"Sep 19, 2015 10:16:36 PM HKT", :exception=\>"Invalid format : "Sep 19, 2015 10:16:36 PM… --- ## ["node is locked into cluster" message](https://discuss.elastic.co/t/node-is-locked-into-cluster-message/342200)
**Author:** [@lifer](https://discuss.elastic.co/u/lifer)\ **Replies:** 1\ **Last updated:** [September 3, 2023, 6:41pm UTC](https://discuss.elastic.co/t/node-is-locked-into-cluster-message/342200 "2023-09-03T18:41:38Z")
Hi! We have a 6 nodes ES cluster, self-hosted on AWS. There are three dedicated master nodes, and three data nodes. Please help me to understand this message: \[2023-09-03T08:32:18,239\]\[WARN \]\[o.e.c.c.ClusterBootstrapS… --- ## [Will es nodes connect with each other in 9200?](https://discuss.elastic.co/t/will-es-nodes-connect-with-each-other-in-9200/300421)
**Author:** [@JohnPhilip](https://discuss.elastic.co/u/JohnPhilip)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 9:53am UTC](https://discuss.elastic.co/t/will-es-nodes-connect-with-each-other-in-9200/300421 "2022-03-23T09:53:26Z")
Hi, there. The official doc said, Each Elasticsearch node has two different network interfaces. Clients send requests to Elasticsearch’s REST APIs using its HTTP interface, but nodes communicate with other nodes using… --- ## [Kibana Dashboards: The request for this panel failed](https://discuss.elastic.co/t/kibana-dashboards-the-request-for-this-panel-failed/130838)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 4\ **Last updated:** [May 10, 2018, 4:23pm UTC](https://discuss.elastic.co/t/kibana-dashboards-the-request-for-this-panel-failed/130838 "2018-05-10T16:23:18Z")
Elastic Stack 6.2.4. I get this error while loading metricbeat dashboards: \[image\] \[image\] --- ## [Can't get slowlog output](https://discuss.elastic.co/t/cant-get-slowlog-output/7972)
**Author:** [@Colin\_Dellow](https://discuss.elastic.co/u/Colin_Dellow)\ **Replies:** 4\ **Last updated:** [June 5, 2012, 4:35pm UTC](https://discuss.elastic.co/t/cant-get-slowlog-output/7972 "2012-06-05T16:35:16Z")
I think I must be doing something wrong. I'm trying to log every query to the system just so I can see what my software is sending over the wire. In elasticsearch.yml I have: path.logs: /home/colin/src/elasticsea… --- ## [How to include metrics for a specific process when using process.include\_top\_n](https://discuss.elastic.co/t/how-to-include-metrics-for-a-specific-process-when-using-process-include-top-n/118483)
**Author:** [@Vishnu59](https://discuss.elastic.co/u/Vishnu59)\ **Replies:** 1\ **Last updated:** [February 5, 2018, 4:06pm UTC](https://discuss.elastic.co/t/how-to-include-metrics-for-a-specific-process-when-using-process-include-top-n/118483 "2018-02-05T16:06:56Z")
Hi, I have a requirement, where I will need to collect data for top 10 resource consuming processes on the VM along with having to collect resource utilization data for metricbeat. First part was pretty simple, but when… --- ## [Avoid certain search terms (Blacklist)](https://discuss.elastic.co/t/avoid-certain-search-terms-blacklist/86718)
**Author:** [@Matthias-Hess](https://discuss.elastic.co/u/Matthias-Hess)\ **Replies:** 1\ **Last updated:** [May 24, 2017, 9:53am UTC](https://discuss.elastic.co/t/avoid-certain-search-terms-blacklist/86718 "2017-05-24T09:53:45Z")
My customer wants to block certain search terms. If these terms appear in query, these terms should be ignored. We do not want to blacklist the documents. It would be perfectly possible to retrieve a document containing… --- ## [Different indexes with different number of shards](https://discuss.elastic.co/t/different-indexes-with-different-number-of-shards/79790)
**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\ **Replies:** 7\ **Last updated:** [March 25, 2017, 12:24pm UTC](https://discuss.elastic.co/t/different-indexes-with-different-number-of-shards/79790 "2017-03-25T12:24:54Z")
Hi, Can we have different indexes with different number of shards within the same setup? like index1 with 5 shards, index2 with 3 shards etc ? On a separate note, can a node have different shards from different index… --- ## [Balancing logs flowing from multiple services](https://discuss.elastic.co/t/balancing-logs-flowing-from-multiple-services/35706)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 7\ **Last updated:** [November 27, 2015, 9:56am UTC](https://discuss.elastic.co/t/balancing-logs-flowing-from-multiple-services/35706 "2015-11-27T09:56:26Z")
We have ELK deployment in which multiple logstash-forwarders (from multiple service logs) pushes log to logstash which then sends it to Kafka and then one more logstash pulls those logs from Kafka and indexes them in Ela… --- ## [Graphing apache requests over time](https://discuss.elastic.co/t/graphing-apache-requests-over-time/29607)
**Author:** [@knightsg](https://discuss.elastic.co/u/knightsg)\ **Replies:** 1\ **Last updated:** [September 19, 2015, 2:02am UTC](https://discuss.elastic.co/t/graphing-apache-requests-over-time/29607 "2015-09-19T02:02:20Z")
I have a saved query that finds all the apache access logs in my ES cluster, and I want to graph these as "requests per minute, every minute, for the past hour". I played around with the line graph visualization in Kiban… --- ## [Fields in Index but not in Discover or JSON output](https://discuss.elastic.co/t/fields-in-index-but-not-in-discover-or-json-output/199454)
**Author:** [@necrolingus](https://discuss.elastic.co/u/necrolingus)\ **Replies:** 6\ **Last updated:** [September 13, 2019, 6:54pm UTC](https://discuss.elastic.co/t/fields-in-index-but-not-in-discover-or-json-output/199454 "2019-09-13T18:54:51Z")
Hi all ELK version: 6.2.4 Platform: Windows Server 2012 I am using the IIS module which is working perfectly. I added 2 headers to my log file in IIS and they are showing in the log file. I then updated my IIS grok p… --- ## [Absolute values in cluster.routing.allocation.disk.watermark are not honored?](https://discuss.elastic.co/t/absolute-values-in-cluster-routing-allocation-disk-watermark-are-not-honored/62285)
**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\ **Replies:** 6\ **Last updated:** [October 6, 2016, 11:49am UTC](https://discuss.elastic.co/t/absolute-values-in-cluster-routing-allocation-disk-watermark-are-not-honored/62285 "2016-10-06T11:49:16Z")
We run ES 2.3.3 on 6 data nodes with 1TB of disk space each. The cluster.routing.allocation.disk.watermark settings are "low": "20gb", "high": "10gb" (the full cluster settings are here) We also have Marvel plugin ins… --- ## [How could I set "mapping type" via "put mapping API"?](https://discuss.elastic.co/t/how-could-i-set-mapping-type-via-put-mapping-api/7569)
**Author:** [@Yang](https://discuss.elastic.co/u/Yang)\ **Replies:** 6\ **Last updated:** [May 7, 2012, 4:59pm UTC](https://discuss.elastic.co/t/how-could-i-set-mapping-type-via-put-mapping-api/7569 "2012-05-07T16:59:35Z")
Dear all, I'm playing with facet of ES, it's very convenience for my sub navigation. But here I meet a problem: my data just like: {"username":"jacky sun", "mname":"abc1.mp4", "mtype":"mp4"} {"username":"jac… --- ## [Exclude files from wildcard path](https://discuss.elastic.co/t/exclude-files-from-wildcard-path/35580)
**Author:** [@danieljamesscott](https://discuss.elastic.co/u/danieljamesscott)\ **Replies:** 2\ **Last updated:** [November 27, 2015, 11:30am UTC](https://discuss.elastic.co/t/exclude-files-from-wildcard-path/35580 "2015-11-27T11:30:32Z")
Hi, Is it possible to exclude files which would otherwise be included in a filebeat path? i.e. I want to include all files in a directory (/var/log/apps/\*), but exclude those that have been rotated and zipped (\*.gz) … --- ## [Haproxy not working properly](https://discuss.elastic.co/t/haproxy-not-working-properly/32343)
**Author:** [@priyesh](https://discuss.elastic.co/u/priyesh)\ **Replies:** 2\ **Last updated:** [October 17, 2015, 2:10am UTC](https://discuss.elastic.co/t/haproxy-not-working-properly/32343 "2015-10-17T02:10:39Z")
This is my config file (/etc/haproxy/haproxy.cfg) http://haproxy\_ip:80 is not opening the kibana dashboard listen stats :9090 balance mode http stats enable stats auth admin:admin list… --- ## [Move a one node index to a different machine](https://discuss.elastic.co/t/move-a-one-node-index-to-a-different-machine/10985)
**Author:** [@Josh\_Cutler](https://discuss.elastic.co/u/Josh_Cutler)\ **Replies:** 2\ **Last updated:** [March 4, 2013, 6:41pm UTC](https://discuss.elastic.co/t/move-a-one-node-index-to-a-different-machine/10985 "2013-03-04T18:41:34Z")
I currently have a one node ES index that resides on a machine at engineyard. I want to move this index elsewhere but the indexing task could take upward of 24 hours so I was hoping that I could just move the fil… --- ## [Solutions for when a sort field doesn't exist in the mapping](https://discuss.elastic.co/t/solutions-for-when-a-sort-field-doesnt-exist-in-the-mapping/6122)
**Author:** [@Bryan\_Green](https://discuss.elastic.co/u/Bryan_Green)\ **Replies:** 2\ **Last updated:** [December 12, 2011, 12:49pm UTC](https://discuss.elastic.co/t/solutions-for-when-a-sort-field-doesnt-exist-in-the-mapping/6122 "2011-12-12T12:49:45Z")
Hiya, When a field cannot be found in the mapping during the sort operation, is there a way to have the system not throw an exception? It would be nice if the field at fault is ignored from the sort fields. Is th… --- ## [Автосоздание индекса по полю](https://discuss.elastic.co/t/topic/122730)
**Author:** [@akaNightmare](https://discuss.elastic.co/u/akaNightmare)\ **Replies:** 5\ **Last updated:** [March 6, 2018, 6:47pm UTC](https://discuss.elastic.co/t/topic/122730 "2018-03-06T18:47:30Z")
Здравствуйте, у меня есть индексы типа logs-2015, logs-2016, logs-2017, logs-2018 которые хранят логи. Все эти индексы были созданы полу-автоматически или вручную и писались логи каждый в свой индекс базируясь от поля c… --- ## [Elasticsearch 1.5 -\> 5.5 performance degradation](https://discuss.elastic.co/t/elasticsearch-1-5-5-5-performance-degradation/105797)
**Author:** [@jesushernandez](https://discuss.elastic.co/u/jesushernandez)\ **Replies:** 5\ **Last updated:** [November 6, 2017, 9:09pm UTC](https://discuss.elastic.co/t/elasticsearch-1-5-5-5-performance-degradation/105797 "2017-11-06T21:09:03Z")
Hello, Elasticsearch has been a core part of the infrastructure where I work for a few years. We use the AWS managed version, which unfortunately has few configuration options and also a few APIs closed. Recently we tr… --- ## [Scripted field: Get difference of between alternate occurrences of an event](https://discuss.elastic.co/t/scripted-field-get-difference-of-between-alternate-occurrences-of-an-event/77641)
**Author:** [@Ruthu\_Ramya](https://discuss.elastic.co/u/Ruthu_Ramya)\ **Replies:** 5\ **Last updated:** [March 8, 2017, 8:09am UTC](https://discuss.elastic.co/t/scripted-field-get-difference-of-between-alternate-occurrences-of-an-event/77641 "2017-03-08T08:09:27Z")
Hi, I have a field in ES which holds timestamp like below: Nov 30,14:49:56.785 INFO Plane 1A landed Nov 30,14:49:57.099 INFO Plane 2B landed Nov 30,14:49:57.368 INFO Plane 2C landed Nov 30,14:49:57.620 INFO Plane 2… --- ## [Installing metricbeat on vsphere](https://discuss.elastic.co/t/installing-metricbeat-on-vsphere/119789)
**Author:** [@Mark\_Collins](https://discuss.elastic.co/u/Mark_Collins)\ **Replies:** 1\ **Last updated:** [February 14, 2018, 2:30pm UTC](https://discuss.elastic.co/t/installing-metricbeat-on-vsphere/119789 "2018-02-14T14:30:44Z")
Hi All, I am quite new to elastic and also vsphere and would like make use of the vsphere module of metricbeat a quick question is how do I install metricbeat on esxi vsphere thanks mark --- ## [Elasticsearch Reindex API - reindex only missing docs](https://discuss.elastic.co/t/elasticsearch-reindex-api-reindex-only-missing-docs/83154)
**Author:** [@Dom\_Sie](https://discuss.elastic.co/u/Dom_Sie)\ **Replies:** 1\ **Last updated:** [April 21, 2017, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-reindex-api-reindex-only-missing-docs/83154 "2017-04-21T13:47:04Z")
Hi together, we try to reindex big Indices ( about 10 million docs per index ) with the curl command: curl -XPOST 'http://localhost:9200/\_reindex?slices=5&refresh' -d '{ "conflicts": "proceed", "source": { "i… --- ## [Elastic Security Rules Analytics](https://discuss.elastic.co/t/elastic-security-rules-analytics/326890)
**Author:** [@Alexander\_A](https://discuss.elastic.co/u/Alexander_A)\ **Replies:** 2\ **Last updated:** [March 10, 2023, 9:38pm UTC](https://discuss.elastic.co/t/elastic-security-rules-analytics/326890 "2023-03-10T21:38:13Z")
Is there a way to get how much time it gets to execute all security rules. In "Stack Management" -\> "Rules and Connectors" analytics available per each rule but summary analytics seems to be missing. For example all rule… --- ## [ElasticSearch at scale](https://discuss.elastic.co/t/elasticsearch-at-scale/5008)
**Author:** [@TheDeveloper1](https://discuss.elastic.co/u/TheDeveloper1)\ **Replies:** 3\ **Last updated:** [July 31, 2011, 10:00pm UTC](https://discuss.elastic.co/t/elasticsearch-at-scale/5008 "2011-07-31T22:00:27Z")
Can someone give me an idea of the upper limits to which ElasticSearch is able to scale? In terms of factors like document size, number of items indexed, and the performance impact at scale. For example, what kind o… --- ## [Can we store two Elastic search indices in different data directory](https://discuss.elastic.co/t/can-we-store-two-elastic-search-indices-in-different-data-directory/256221)
**Author:** [@Vivek\_Sagar](https://discuss.elastic.co/u/Vivek_Sagar)\ **Replies:** 4\ **Last updated:** [November 23, 2020, 6:20am UTC](https://discuss.elastic.co/t/can-we-store-two-elastic-search-indices-in-different-data-directory/256221 "2020-11-23T06:20:06Z")
Can we have multiple indices in different data paths in elastic search? In my application, I want to separate index to keep sensitive data in dm-crypted volume and others on non encrypted volume. So separate indices for … --- ## [Medical Data and elasticsearch](https://discuss.elastic.co/t/medical-data-and-elasticsearch/146544)
**Author:** [@Michael5](https://discuss.elastic.co/u/Michael5)\ **Replies:** 4\ **Last updated:** [August 31, 2018, 9:31am UTC](https://discuss.elastic.co/t/medical-data-and-elasticsearch/146544 "2018-08-31T09:31:16Z")
I am trying to find a clever approach to screen / index / search / connect all kinds of data that go throug my company's Enterprise Service Bus (WSO2). The files are mostly HL7, XML and JSON. Sometimes there are Scans (P… --- ## [Why packetbeat not capture this http request?](https://discuss.elastic.co/t/why-packetbeat-not-capture-this-http-request/70016)
**Author:** [@shell.b2t](https://discuss.elastic.co/u/shell.b2t)\ **Replies:** 4\ **Last updated:** [December 29, 2016, 2:59am UTC](https://discuss.elastic.co/t/why-packetbeat-not-capture-this-http-request/70016 "2016-12-29T02:59:56Z")
Hi : my env is packetbeat 5.1.1,include\_body\_for config as as follows： include\_body\_for: \['image/webp','application/x-javascript','\*/\*','application/octet-stream','text/xml','application/xml','application/xhtml+x… --- ## [ES is rounding keyword values](https://discuss.elastic.co/t/es-is-rounding-keyword-values/143012)
**Author:** [@piotrskowron](https://discuss.elastic.co/u/piotrskowron)\ **Replies:** 8\ **Last updated:** [August 8, 2018, 12:51pm UTC](https://discuss.elastic.co/t/es-is-rounding-keyword-values/143012 "2018-08-08T12:51:37Z")
Got an issue with field keyword. Mapping for it looks like: "user\_id": { "type": "keyword" } value for user\_id is: 9221662934816997716 but ES is returning it in kibana our even in cur… --- ## [Logstash won't initialize (Security Onion)](https://discuss.elastic.co/t/logstash-wont-initialize-security-onion/172737)
**Author:** [@Svenson10](https://discuss.elastic.co/u/Svenson10)\ **Replies:** 0\ **Last updated:** [March 18, 2019, 9:48am UTC](https://discuss.elastic.co/t/logstash-wont-initialize-security-onion/172737 "2019-03-18T09:48:32Z")
Hi there Logstash on my storage node is in a WARN state, but I dont know why. sudo so-status output is below. Additional information: - installation from Security Onion 16.04.5.6 ISO image - Distributed deployment (M… --- ## [\[Solved\] Wrong time zone modification](https://discuss.elastic.co/t/solved-wrong-time-zone-modification/98372)
**Author:** [@Napsty](https://discuss.elastic.co/u/Napsty)\ **Replies:** 0\ **Last updated:** [August 25, 2017, 1:33pm UTC](https://discuss.elastic.co/t/solved-wrong-time-zone-modification/98372 "2017-08-25T13:33:32Z")
I have a strange case where a Docker container (system time runs in timezone UTC) sends HAProxy logs to a remote syslog server and from there into logstash. On the remote syslog server the log arrives: Aug 25 11:38:00 … --- ## [How to construct geo\_point field from separate fields of latitude and longitude for Kibana 7.6?](https://discuss.elastic.co/t/how-to-construct-geo-point-field-from-separate-fields-of-latitude-and-longitude-for-kibana-7-6/225847)
**Author:** [@yassine\_belhajali](https://discuss.elastic.co/u/yassine_belhajali)\ **Replies:** 2\ **Last updated:** [April 1, 2020, 5:23pm UTC](https://discuss.elastic.co/t/how-to-construct-geo-point-field-from-separate-fields-of-latitude-and-longitude-for-kibana-7-6/225847 "2020-04-01T17:23:44Z")
From input csv data I have 2 fields of location - lat and long. How can I construct a geo\_point location field to create map visualization in logstash config (version 7.6)? Thank you. ' ' ' ' filter { csv{ separator… --- ## [Cardinality Aggregation across Intervals in TSVB](https://discuss.elastic.co/t/cardinality-aggregation-across-intervals-in-tsvb/116191)
**Author:** [@jswiesner](https://discuss.elastic.co/u/jswiesner)\ **Replies:** 2\ **Last updated:** [January 19, 2018, 5:13pm UTC](https://discuss.elastic.co/t/cardinality-aggregation-across-intervals-in-tsvb/116191 "2018-01-19T17:13:49Z")
Hello. I am working with the TSVB to create metric visualizations. I find the TSVB much more configurable than the generic metric visualization, so I’m able to get nicer looking metrics. There is one particular metric th… --- ## [Can not show table in Markdown](https://discuss.elastic.co/t/can-not-show-table-in-markdown/103591)
**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\ **Replies:** 2\ **Last updated:** [October 12, 2017, 7:10am UTC](https://discuss.elastic.co/t/can-not-show-table-in-markdown/103591 "2017-10-12T07:10:03Z")
When I try to create a table in Markdown editor, I got the followed: \[15\] How to show the table in here? [Previous page](https://discuss.elastic.co/top.md?page=954&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=956&per_page=50&period=all)