# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=100 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 101 --- ## [Login Issues](https://discuss.elastic.co/t/login-issues/374638)
**Author:** [@Steve\_Stefanovich](https://discuss.elastic.co/u/Steve_Stefanovich)\ **Replies:** 3\ **Last updated:** [February 17, 2025, 3:15pm UTC](https://discuss.elastic.co/t/login-issues/374638 "2025-02-17T15:15:24Z")
Anyone else unable to login via Elastic.co? Keep getting redirected to the serverless onboarding page with no way to cancel out. --- ## [Stale data bug in synthetic source loader on text fields](https://discuss.elastic.co/t/stale-data-bug-in-synthetic-source-loader-on-text-fields/374634)
**Author:** [@jeffgan96](https://discuss.elastic.co/u/jeffgan96)\ **Replies:** 0\ **Last updated:** [February 17, 2025, 2:29pm UTC](https://discuss.elastic.co/t/stale-data-bug-in-synthetic-source-loader-on-text-fields/374634 "2025-02-17T14:29:27Z")
\#112173 fixed an issue in synthetic source loader where stale data got loaded . this got reworked in #112480 but unfortunately looks like a bug got introduced where we dont reset values if values.size() is 1 . needed s… --- ## [Cannot checking in with fleet-server](https://discuss.elastic.co/t/cannot-checking-in-with-fleet-server/374627)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 0\ **Last updated:** [February 17, 2025, 12:43pm UTC](https://discuss.elastic.co/t/cannot-checking-in-with-fleet-server/374627 "2025-02-17T12:43:58Z")
Hello everyone, For a long time, I was running a Fleet server on a virtual machine. Recently, I switched to running the Fleet server in a container using the Elastic image: elastic/elastic-agent. Intermittently, agent… --- ## [Kaspersky Grok Pattern which is working fine at Grok Debugger is not parsing logs appropriately as expected](https://discuss.elastic.co/t/kaspersky-grok-pattern-which-is-working-fine-at-grok-debugger-is-not-parsing-logs-appropriately-as-expected/374498)
**Author:** [@Shreeraman](https://discuss.elastic.co/u/Shreeraman)\ **Replies:** 3\ **Last updated:** [February 17, 2025, 12:11pm UTC](https://discuss.elastic.co/t/kaspersky-grok-pattern-which-is-working-fine-at-grok-debugger-is-not-parsing-logs-appropriately-as-expected/374498 "2025-02-17T12:11:32Z")
I have created a Grok Pattern to parse Kaspersky logs. Kaspersky Grok Pattern which I've written is working fine at Grok Debugger In Dev Tools, but logs are not getting parsed in appropriate fields as expected and retu… --- ## [Alert is not showing in Kibana](https://discuss.elastic.co/t/alert-is-not-showing-in-kibana/374621)
**Author:** [@Kishor\_Kanade](https://discuss.elastic.co/u/Kishor_Kanade)\ **Replies:** 0\ **Last updated:** [February 17, 2025, 11:52am UTC](https://discuss.elastic.co/t/alert-is-not-showing-in-kibana/374621 "2025-02-17T11:52:43Z")
Hello Everyone, I have configured rules and connectors to display error logs of my application in kibana. But alert section not displaying anything. Please help me with this. Thanks --- ## [Why do the docs.count and docs.deleted of the generated segments change](https://discuss.elastic.co/t/why-do-the-docs-count-and-docs-deleted-of-the-generated-segments-change/374611)
**Author:** [@cgejian](https://discuss.elastic.co/u/cgejian)\ **Replies:** 4\ **Last updated:** [February 17, 2025, 11:36am UTC](https://discuss.elastic.co/t/why-do-the-docs-count-and-docs-deleted-of-the-generated-segments-change/374611 "2025-02-17T11:36:32Z")
Background: In version 7.6.0 of ES, an external client is continuously executing update\_by\_query on an index. Phenomenon: At this time, I found through /\_cat/segments that the docs.count and docs.deleted of many existin… --- ## [One Application Migration from Splunk to Elastic search?](https://discuss.elastic.co/t/one-application-migration-from-splunk-to-elastic-search/374619)
**Author:** [@Kumar\_Dudekula](https://discuss.elastic.co/u/Kumar_Dudekula)\ **Replies:** 0\ **Last updated:** [February 17, 2025, 11:25am UTC](https://discuss.elastic.co/t/one-application-migration-from-splunk-to-elastic-search/374619 "2025-02-17T11:25:32Z")
What steps should we take to migrate an application from Splunk to Elastic Search? Process with Defined Steps --- ## [To use the full set of free features, please update ES to the default dist](https://discuss.elastic.co/t/to-use-the-full-set-of-free-features-please-update-es-to-the-default-dist/374334)
**Author:** [@tnjeff](https://discuss.elastic.co/u/tnjeff)\ **Replies:** 15\ **Last updated:** [February 17, 2025, 9:54am UTC](https://discuss.elastic.co/t/to-use-the-full-set-of-free-features-please-update-es-to-the-default-dist/374334 "2025-02-17T09:54:00Z")
Older version of elasticsearch on VM, self-managed, Kibana is 8.17.1., Logstash 8.17.1, Elasticsearch 8.17.1. These run on plain old Ubuntu 20.04. 1 Kibana node, 1 Logstash node & 3 Elastic Seach (ES) nodes. All I did is… --- ## [Can not get Kibana Security ](https://discuss.elastic.co/t/can-not-get-kibana-security/374605)
**Author:** [@malikovazadyra9](https://discuss.elastic.co/u/malikovazadyra9)\ **Replies:** 5\ **Last updated:** [February 17, 2025, 9:30am UTC](https://discuss.elastic.co/t/can-not-get-kibana-security/374605 "2025-02-17T09:30:51Z")
I don't have the "security" tab in Kibana as shown in the second screenshot, even though all the configuration files are the same. I tried reinstalling Kibana, but nothing changed. --- ## [Minimum Hardware Requirement for Kibana](https://discuss.elastic.co/t/minimum-hardware-requirement-for-kibana/374536)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 3\ **Last updated:** [February 17, 2025, 6:30am UTC](https://discuss.elastic.co/t/minimum-hardware-requirement-for-kibana/374536 "2025-02-17T06:30:03Z")
Hi Team, We search in official documentation of Elastic Search for minimum HW to get install Kibana but not able to found any relevant docs. Could you please share the documentation link. Thanks, Debasis --- ## [How to set up conversion tracking from query that's click through](https://discuss.elastic.co/t/how-to-set-up-conversion-tracking-from-query-thats-click-through/374601)
**Author:** [@DavidT\_Spark](https://discuss.elastic.co/u/DavidT_Spark)\ **Replies:** 0\ **Last updated:** [February 17, 2025, 4:46am UTC](https://discuss.elastic.co/t/how-to-set-up-conversion-tracking-from-query-thats-click-through/374601 "2025-02-17T04:46:40Z")
I'd like to know how or if its possible to track if a specific search query click led to a conversion in Elasticsearch? --- ## [\_dateparsefailure while using JDBC plugin](https://discuss.elastic.co/t/dateparsefailure-while-using-jdbc-plugin/374595)
**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\ **Replies:** 3\ **Last updated:** [February 16, 2025, 1:33pm UTC](https://discuss.elastic.co/t/dateparsefailure-while-using-jdbc-plugin/374595 "2025-02-16T13:33:34Z")
I am trying to read some data from a database, but when i try to parse a date field i get \_dateparsefailure while the field i am trying to convert is in ISO8601 format. Here is my full logstash config: input { jdbc {… --- ## [Bug with displaying a NULL value in dense\_vector field in elasticsearch web UI](https://discuss.elastic.co/t/bug-with-displaying-a-null-value-in-dense-vector-field-in-elasticsearch-web-ui/374593)
**Author:** [@gennadii](https://discuss.elastic.co/u/gennadii)\ **Replies:** 0\ **Last updated:** [February 16, 2025, 2:20am UTC](https://discuss.elastic.co/t/bug-with-displaying-a-null-value-in-dense-vector-field-in-elasticsearch-web-ui/374593 "2025-02-16T02:20:21Z")
Hello! I noticed something that looks like a bug in elasticsearch web UI. When creating a document with dense\_vector field set to null, I cannot expand the document details at elasticsearch web UI documents page (vecto… --- ## [Custom Plugin Error](https://discuss.elastic.co/t/custom-plugin-error/366589)
**Author:** [@OAJ](https://discuss.elastic.co/u/OAJ)\ **Replies:** 1\ **Last updated:** [February 16, 2025, 2:06am UTC](https://discuss.elastic.co/t/custom-plugin-error/366589 "2025-02-16T02:06:43Z")
Hi all, I developing a custom plugin to embed a simple webview into kibana dashboard. The build is successful but when i startup kibana i get these errors in console: Refused to execute inline script because it violate… --- ## ["Estimating Resources for an Elasticsearch Cluster with 10,000 EPS Log Ingestion"](https://discuss.elastic.co/t/estimating-resources-for-an-elasticsearch-cluster-with-10-000-eps-log-ingestion/374487)
**Author:** [@MH\_D](https://discuss.elastic.co/u/MH_D)\ **Replies:** 7\ **Last updated:** [February 15, 2025, 7:03pm UTC](https://discuss.elastic.co/t/estimating-resources-for-an-elasticsearch-cluster-with-10-000-eps-log-ingestion/374487 "2025-02-15T19:03:51Z")
I have a system that includes Elasticsearch, Logstash, and Kibana, with the following architecture: Logs are collected using Beats (Filebeat, Packetbeat, etc.) and sent to Elasticsearch via Logstash. I want to run Elast… --- ## [Clarification on vCPU Credit Calculation for Coordinating Node](https://discuss.elastic.co/t/clarification-on-vcpu-credit-calculation-for-coordinating-node/374583)
**Author:** [@Wallyson\_Silva](https://discuss.elastic.co/u/Wallyson_Silva)\ **Replies:** 1\ **Last updated:** [February 15, 2025, 2:49am UTC](https://discuss.elastic.co/t/clarification-on-vcpu-credit-calculation-for-coordinating-node/374583 "2025-02-15T02:49:36Z")
I’m reaching out to seek clarification on how vCPU credits are calculated in the Elastic Cloud UI. Specifically, we noticed that our coordinating node, which has 1GB of RAM, shows only 257 credits. Given the node size, w… --- ## [Not able to parse the incoming msg to json structure](https://discuss.elastic.co/t/not-able-to-parse-the-incoming-msg-to-json-structure/374504)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 8\ **Last updated:** [February 15, 2025, 2:43am UTC](https://discuss.elastic.co/t/not-able-to-parse-the-incoming-msg-to-json-structure/374504 "2025-02-15T02:43:23Z")
Hello, Below is the message content: # HELP Embargo\_Index\_seconds Time taken for Embargo Index\\n# TYPE Embargo\_Index\_seconds summary\\nEmbargo\_Index\_seconds\_count{CUST=\\"RPS\\",ENV=\\"DEV\\",PRODUCT=\\"GTM\\",class=\\"com.e2o… --- ## [Strategy for rolling restart with ECK?](https://discuss.elastic.co/t/strategy-for-rolling-restart-with-eck/374576)
**Author:** [@blunckr](https://discuss.elastic.co/u/blunckr)\ **Replies:** 0\ **Last updated:** [February 14, 2025, 7:29pm UTC](https://discuss.elastic.co/t/strategy-for-rolling-restart-with-eck/374576 "2025-02-14T19:29:48Z")
Hello, I'm wondering what the proper strategy is for performing rolling restarts when running Elasticsearch in K8S with ECK? Before we ran in k8s, we followed this guide: Full-cluster restart and rolling restart | Elast… --- ## [Collect O365 logs over a longer period of time](https://discuss.elastic.co/t/collect-o365-logs-over-a-longer-period-of-time/374552)
**Author:** [@Paf](https://discuss.elastic.co/u/Paf)\ **Replies:** 5\ **Last updated:** [February 14, 2025, 5:38pm UTC](https://discuss.elastic.co/t/collect-o365-logs-over-a-longer-period-of-time/374552 "2025-02-14T17:38:58Z")
Hello, I use fleet integration for collect o365 audit logs and i want to collect 1 month of logs. The "Initial Interval" parameter has maximum value of 7 days. Is it possible to extend this duration or is there a way … --- ## [How to run elasticsearch for local development after upgrading from 7.17 to 8.17](https://discuss.elastic.co/t/how-to-run-elasticsearch-for-local-development-after-upgrading-from-7-17-to-8-17/374562)
**Author:** [@mon4our](https://discuss.elastic.co/u/mon4our)\ **Replies:** 0\ **Last updated:** [February 14, 2025, 2:30pm UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-for-local-development-after-upgrading-from-7-17-to-8-17/374562 "2025-02-14T14:30:07Z")
I am currently upgrading my codebase from elasticsearch 7.17 to 8.17. I am using the elasticsearch python client. For 7.17 we used this code to create an elasticsearch instance: ES = elasticsearch.Elasticsearch( ('%… --- ## [JDBC for linux- adapter class not registered](https://discuss.elastic.co/t/jdbc-for-linux-adapter-class-not-registered/374430)
**Author:** [@JosephR](https://discuss.elastic.co/u/JosephR)\ **Replies:** 2\ **Last updated:** [February 14, 2025, 12:32pm UTC](https://discuss.elastic.co/t/jdbc-for-linux-adapter-class-not-registered/374430 "2025-02-14T12:32:57Z")
Hello I am having an issue when I go to run a conf file to connect to a mssql instance it is giving me the following error. {:message=\>"Could not load jdbc/mssql adapter: adapter class not registered in ADAPTER\_MAP", :e… --- ## [Input Kafka avro - registry authentication](https://discuss.elastic.co/t/input-kafka-avro-registry-authentication/374555)
**Author:** [@joaosf](https://discuss.elastic.co/u/joaosf)\ **Replies:** 0\ **Last updated:** [February 14, 2025, 12:30pm UTC](https://discuss.elastic.co/t/input-kafka-avro-registry-authentication/374555 "2025-02-14T12:30:19Z")
Olá, I have some issues related with registry authentication. My conf: input { kafka { id =\> "kafka\_xxx" bootstrap\_servers =\> "xxxxx:9094" topics =\> \["XXX\_XX\_XXX\_XX"\] auto\_offset\_reset =\> "earliest"… --- ## [Elasticsearch license expired before the assigned expiry date](https://discuss.elastic.co/t/elasticsearch-license-expired-before-the-assigned-expiry-date/374548)
**Author:** [@ahsanraza](https://discuss.elastic.co/u/ahsanraza)\ **Replies:** 3\ **Last updated:** [February 14, 2025, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-license-expired-before-the-assigned-expiry-date/374548 "2025-02-14T11:58:35Z")
Hello, I had upgraded Elasticsearch license on 31st January 2025 through the end point POST /\_license/start\_trial?acknowledgement=true. With this, the license was upgraded from basic to trial. The validity of this licen… --- ## [Renew http\_ca.crt CA certificate of the elasticsearch cluster](https://discuss.elastic.co/t/renew-http-ca-crt-ca-certificate-of-the-elasticsearch-cluster/374526)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [February 14, 2025, 11:30am UTC](https://discuss.elastic.co/t/renew-http-ca-crt-ca-certificate-of-the-elasticsearch-cluster/374526 "2025-02-14T11:30:41Z")
Hello, Can anyone help me understand on how to renew the http CA certificate for an autoconfigured on-prem cluster? This certificate was being used in the logstash's elasticsearch output section's cacert setting, howeve… --- ## [Logstash java heap memory causing delay to pushing events to elasticsearch](https://discuss.elastic.co/t/logstash-java-heap-memory-causing-delay-to-pushing-events-to-elasticsearch/374423)
**Author:** [@devops\_training](https://discuss.elastic.co/u/devops_training)\ **Replies:** 6\ **Last updated:** [February 14, 2025, 11:22am UTC](https://discuss.elastic.co/t/logstash-java-heap-memory-causing-delay-to-pushing-events-to-elasticsearch/374423 "2025-02-14T11:22:13Z")
Recently we made changes to java heap memory from 1G to 4G. Sometime it was stopped as it was not possible to process the event. when we increased the java heap memory logstash is processing the log events but elasticse… --- ## [Error using time in Vega](https://discuss.elastic.co/t/error-using-time-in-vega/374169)
**Author:** [@MattiHatem](https://discuss.elastic.co/u/MattiHatem)\ **Replies:** 1\ **Last updated:** [February 14, 2025, 10:22am UTC](https://discuss.elastic.co/t/error-using-time-in-vega/374169 "2025-02-14T10:22:34Z")
When I use below I got the following error, and I am just trying to use the time range from the dashboard, anyone can help ? (EsError: failed to parse date field \[1738832413539\] with format \[strict\_date\_optional\_time\]: … --- ## [ES and LUN](https://discuss.elastic.co/t/es-and-lun/374544)
**Author:** [@Payal\_r](https://discuss.elastic.co/u/Payal_r)\ **Replies:** 3\ **Last updated:** [February 14, 2025, 9:45am UTC](https://discuss.elastic.co/t/es-and-lun/374544 "2025-02-14T09:45:56Z")
I have a 6 node cluster(6.8.5). I need to change the storage and therefore the LUN of my linux server for three nodes. I am thinking to follow the steps: 1- exclude these nodes and shift the shards to the other nodes. … --- ## [Only able to setup Metricbeat with ILM and a custom index template going against the documentation](https://discuss.elastic.co/t/only-able-to-setup-metricbeat-with-ilm-and-a-custom-index-template-going-against-the-documentation/374546)
**Author:** [@d3jolly](https://discuss.elastic.co/u/d3jolly)\ **Replies:** 0\ **Last updated:** [February 14, 2025, 8:51am UTC](https://discuss.elastic.co/t/only-able-to-setup-metricbeat-with-ilm-and-a-custom-index-template-going-against-the-documentation/374546 "2025-02-14T08:51:43Z")
Hi, I'll try to be succint, but will provide context if anyone is interested! Currently running ELK v8.17.1 and fiddling with Beats using the same version. According to the index section for the metricbeat configurati… --- ## [Problem installing the elasticsearch ingest processor plugin](https://discuss.elastic.co/t/problem-installing-the-elasticsearch-ingest-processor-plugin/374484)
**Author:** [@vsekap](https://discuss.elastic.co/u/vsekap)\ **Replies:** 1\ **Last updated:** [February 14, 2025, 2:44am UTC](https://discuss.elastic.co/t/problem-installing-the-elasticsearch-ingest-processor-plugin/374484 "2025-02-14T02:44:16Z")
Have a problem with plugin installation 8.14.3. Gradle Build tools used for compiling the java plugin project. Expected the output while installing the plugin: elasticsearch@9769694eb777:~$ bin/elasticsearch-plugin inst… --- ## [Curator 7.0.1 fails because of closed indices](https://discuss.elastic.co/t/curator-7-0-1-fails-because-of-closed-indices/373190)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 5\ **Last updated:** [February 14, 2025, 12:40am UTC](https://discuss.elastic.co/t/curator-7-0-1-fails-because-of-closed-indices/373190 "2025-02-14T00:40:30Z")
Elasticsearch version: 7.17.1 (yes, I know.) Curator version: 7.0.1 I find myself in the position of having to replace every server in our Elasticsearch cluster to replace them with ones running RHEL 9. As part of th… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=99) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=101)