# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=102 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 103 --- ## [File Upload - Kibana](https://discuss.elastic.co/t/file-upload-kibana/374459)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [February 12, 2025, 10:33pm UTC](https://discuss.elastic.co/t/file-upload-kibana/374459 "2025-02-12T22:33:23Z")
Hello, I was wondering if its possible to upload more than one file in the File Upload. For example., I added a file upload and did some custom parsing via ingest pipelines. Instead of trying to find a different way to… --- ## [Logstash not giving the expected output](https://discuss.elastic.co/t/logstash-not-giving-the-expected-output/374034)
**Author:** [@nkknkk](https://discuss.elastic.co/u/nkknkk)\ **Replies:** 37\ **Last updated:** [February 12, 2025, 6:16pm UTC](https://discuss.elastic.co/t/logstash-not-giving-the-expected-output/374034 "2025-02-12T18:16:14Z")
I am trying to parse my sample catalina.out file. here is my tomcat.conf file i am giving to the logstash ./logstash -f conf.d/tomcat.conf -r here is my tomcat.conf input { file { path =\> "/elkstack/logs/input… --- ## [PutIndexTemplateRequest and custom plugin](https://discuss.elastic.co/t/putindextemplaterequest-and-custom-plugin/373991)
**Author:** [@antoinelefloch](https://discuss.elastic.co/u/antoinelefloch)\ **Replies:** 7\ **Last updated:** [February 12, 2025, 5:12pm UTC](https://discuss.elastic.co/t/putindextemplaterequest-and-custom-plugin/373991 "2025-02-12T17:12:44Z")
Hello, About the Java client, I have the same problem as when I try to use the similarity that I defined in my plugin. I can create the index template using PUT with curl. But I have the same exception as #299 if I… --- ## [License for multiple output than the default](https://discuss.elastic.co/t/license-for-multiple-output-than-the-default/374436)
**Author:** [@kuldeep\_gupta](https://discuss.elastic.co/u/kuldeep_gupta)\ **Replies:** 1\ **Last updated:** [February 12, 2025, 4:50pm UTC](https://discuss.elastic.co/t/license-for-multiple-output-than-the-default/374436 "2025-02-12T16:50:40Z")
as per above query, can someone please tell which type of license is required for this feature --- ## [How to configure Daily Average Sum Calculation in Lens? ](https://discuss.elastic.co/t/how-to-configure-daily-average-sum-calculation-in-lens/374387)
**Author:** [@Rafael\_Mendonca](https://discuss.elastic.co/u/Rafael_Mendonca)\ **Replies:** 2\ **Last updated:** [February 12, 2025, 4:41pm UTC](https://discuss.elastic.co/t/how-to-configure-daily-average-sum-calculation-in-lens/374387 "2025-02-12T16:41:53Z")
I have a "Data Table" visualization configured, where I sum the daily average of a specific value, as shown in the image below. Now, I'm trying to recreate this view in Lens, but I can't achieve the same calculation,… --- ## [Is there SDK support for addin boosting in elasticsearch-java?](https://discuss.elastic.co/t/is-there-sdk-support-for-addin-boosting-in-elasticsearch-java/374416)
**Author:** [@Hans\_Kruse](https://discuss.elastic.co/u/Hans_Kruse)\ **Replies:** 1\ **Last updated:** [February 12, 2025, 3:05pm UTC](https://discuss.elastic.co/t/is-there-sdk-support-for-addin-boosting-in-elasticsearch-java/374416 "2025-02-12T15:05:34Z")
Is there SDK support for addin boosting in elasticsearch-java? In the 7.x SDK there was a field method on the MultiMatchQueryBuilder to set both the field name as wel as a boost value. In the following code Field is a … --- ## [\[DotNet Client\] Version 8.13 seems to have removed the ability to use the default index name of a document type?](https://discuss.elastic.co/t/dotnet-client-version-8-13-seems-to-have-removed-the-ability-to-use-the-default-index-name-of-a-document-type/357834)
**Author:** [@ErroneousFatality](https://discuss.elastic.co/u/ErroneousFatality)\ **Replies:** 5\ **Last updated:** [February 12, 2025, 2:37pm UTC](https://discuss.elastic.co/t/dotnet-client-version-8-13-seems-to-have-removed-the-ability-to-use-the-default-index-name-of-a-document-type/357834 "2025-02-12T14:37:00Z")
Hello. I maintain a library built on top of the dotnet elasticsearch client which streamlines its usage which is used by 20+ engineers on different projects. The 8.13 version seems to have removed the ability to perform… --- ## [Elastic agent configuration for netflow traffic](https://discuss.elastic.co/t/elastic-agent-configuration-for-netflow-traffic/374431)
**Author:** [@kuldeep\_gupta](https://discuss.elastic.co/u/kuldeep_gupta)\ **Replies:** 0\ **Last updated:** [February 12, 2025, 2:07pm UTC](https://discuss.elastic.co/t/elastic-agent-configuration-for-netflow-traffic/374431 "2025-02-12T14:07:29Z")
below is my elastic-agent.yml file outputs: default: type: kafka hosts: \["192.168.x.x:9092"\] topic: netflow-test partition.round\_robin: reachable\_only: false required\_acks: 1 compression:… --- ## [Rank functions not showing](https://discuss.elastic.co/t/rank-functions-not-showing/374407)
**Author:** [@3isenHeiM](https://discuss.elastic.co/u/3isenHeiM)\ **Replies:** 3\ **Last updated:** [February 12, 2025, 1:13pm UTC](https://discuss.elastic.co/t/rank-functions-not-showing/374407 "2025-02-12T13:13:29Z")
Hi, Between 2 ELK instances of the same version (8.12.2), and the same data type (keyword), the ranking functions proposed are not the same. On the first one, I can ran the vertical axis of my bar graph percentage by A… --- ## [Replica shards unassigned issue: unavailable\_shards\_exception](https://discuss.elastic.co/t/replica-shards-unassigned-issue-unavailable-shards-exception/374422)
**Author:** [@bhavesh\_gujarati](https://discuss.elastic.co/u/bhavesh_gujarati)\ **Replies:** 0\ **Last updated:** [February 12, 2025, 12:16pm UTC](https://discuss.elastic.co/t/replica-shards-unassigned-issue-unavailable-shards-exception/374422 "2025-02-12T12:16:39Z")
Hello, I have the following issue: {"error":{"root\_cause":\[{"type":"unavailable\_shards\_exception","reason":"\[archival\_collection\]\[2\] primary shard is not active Timeout: \[1m\], request: \[delete {\[archival\_collection\]\[ob… --- ## [Cant use logstash with elasticsearch URL](https://discuss.elastic.co/t/cant-use-logstash-with-elasticsearch-url/374367)
**Author:** [@deaswe](https://discuss.elastic.co/u/deaswe)\ **Replies:** 3\ **Last updated:** [February 12, 2025, 12:00pm UTC](https://discuss.elastic.co/t/cant-use-logstash-with-elasticsearch-url/374367 "2025-02-12T12:00:00Z")
I am using Elasticsearch and Logstash as Docker containers (within the same network) for my Django project. Logstash fails to connect to Elasticsearch when using hosts =\> \["localhost:9200"\] in logstash.conf (error: "fai… --- ## [Rank customers by counter\_rate](https://discuss.elastic.co/t/rank-customers-by-counter-rate/374227)
**Author:** [@Annxii](https://discuss.elastic.co/u/Annxii)\ **Replies:** 1\ **Last updated:** [February 12, 2025, 11:36am UTC](https://discuss.elastic.co/t/rank-customers-by-counter-rate/374227 "2025-02-12T11:36:06Z")
Hi, I'm trying to make a tabular visualization of the top 10 customers measure on req/sec. I have a monotonically increasing counter with the customer as an attribute. My counter\_rate is working fine, my issue is that … --- ## [Visualize flattened fields in Kibana dashboard](https://discuss.elastic.co/t/visualize-flattened-fields-in-kibana-dashboard/368112)
**Author:** [@HermannSamimi](https://discuss.elastic.co/u/HermannSamimi)\ **Replies:** 3\ **Last updated:** [February 12, 2025, 8:35am UTC](https://discuss.elastic.co/t/visualize-flattened-fields-in-kibana-dashboard/368112 "2025-02-12T08:35:03Z")
Hello, I was wondering if there is a possibility to visualize flattened fields in a simple table in Lens. --- ## [Why empty in esql](https://discuss.elastic.co/t/why-empty-in-esql/374053)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 3\ **Last updated:** [February 12, 2025, 8:08am UTC](https://discuss.elastic.co/t/why-empty-in-esql/374053 "2025-02-12T08:08:19Z")
Hi I have issues with my esql queries, something with the index More than 10K entries Then I press the Try ES|QL: None. If I go back the index is empty: I have to explicitly re-select it from the index pull… --- ## [\[Integrations\] Centreon logs integration](https://discuss.elastic.co/t/integrations-centreon-logs-integration/374329)
**Author:** [@marrc.rousseau](https://discuss.elastic.co/u/marrc.rousseau)\ **Replies:** 0\ **Last updated:** [February 10, 2025, 5:22pm UTC](https://discuss.elastic.co/t/integrations-centreon-logs-integration/374329 "2025-02-10T17:22:11Z")
Hello, I made a post on Centreon forum to ingest all centreon logs: -audit logs (Administration Logs) -event logs (Monitoring \> Event Logs \> Event Logs) -system logs (Monitoring \> Event Logs \> System Logs) I hope… --- ## [Http communication failure connection refused](https://discuss.elastic.co/t/http-communication-failure-connection-refused/374208)
**Author:** [@Jecks\_Speed](https://discuss.elastic.co/u/Jecks_Speed)\ **Replies:** 7\ **Last updated:** [February 12, 2025, 7:15am UTC](https://discuss.elastic.co/t/http-communication-failure-connection-refused/374208 "2025-02-12T07:15:32Z")
Is there a way to keep the http port open in logstash? --- ## [Does elastic agent store logs if elasticsearch go down for some time](https://discuss.elastic.co/t/does-elastic-agent-store-logs-if-elasticsearch-go-down-for-some-time/374354)
**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\ **Replies:** 3\ **Last updated:** [February 12, 2025, 5:38am UTC](https://discuss.elastic.co/t/does-elastic-agent-store-logs-if-elasticsearch-go-down-for-some-time/374354 "2025-02-12T05:38:18Z")
I want to confirm it , logs temporarily saved in a file when Elasticsearch go down due to some issue and when elasticsearch is UP , it is automatically send stored logs to elasticsearch? It is the feature in elasticagent … --- ## [Snapshot on s3 compatible cloud object storage](https://discuss.elastic.co/t/snapshot-on-s3-compatible-cloud-object-storage/374201)
**Author:** [@ragc007](https://discuss.elastic.co/u/ragc007)\ **Replies:** 13\ **Last updated:** [February 11, 2025, 11:01pm UTC](https://discuss.elastic.co/t/snapshot-on-s3-compatible-cloud-object-storage/374201 "2025-02-11T23:01:13Z")
receiving error : { "error": { "root\_cause": \[ { "type": "repository\_verification\_exception", "reason": "\[es\_repo\] path is not accessible on master node" … --- ## [How to migrate from elastic VM to kubernetes](https://discuss.elastic.co/t/how-to-migrate-from-elastic-vm-to-kubernetes/374116)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 0\ **Last updated:** [February 5, 2025, 10:25am UTC](https://discuss.elastic.co/t/how-to-migrate-from-elastic-vm-to-kubernetes/374116 "2025-02-05T10:25:14Z")
I was not able to find details online but how do I migrate from elastic VM to Kuberbetes? does the usual snapshot restore work? --- ## [Kibana Alerts to index is giving me a JSON with key/value instead of just the value](https://discuss.elastic.co/t/kibana-alerts-to-index-is-giving-me-a-json-with-key-value-instead-of-just-the-value/374385)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [February 11, 2025, 8:49pm UTC](https://discuss.elastic.co/t/kibana-alerts-to-index-is-giving-me-a-json-with-key-value-instead-of-just-the-value/374385 "2025-02-11T20:49:16Z")
Kibana version 8.17.0 Hi, I set up an index to store the alerts, Im using metric threshold and when I use the variable {{context.metric}} y get a JSON instead of just the value of the metric: {"condition0":"gcp.compute… --- ## [Metricbeat mongodb replstatus metricset causing high cpu usage](https://discuss.elastic.co/t/metricbeat-mongodb-replstatus-metricset-causing-high-cpu-usage/363455)
**Author:** [@jay-dba](https://discuss.elastic.co/u/jay-dba)\ **Replies:** 4\ **Last updated:** [February 11, 2025, 8:44pm UTC](https://discuss.elastic.co/t/metricbeat-mongodb-replstatus-metricset-causing-high-cpu-usage/363455 "2025-02-11T20:44:21Z")
Hi All, We recently upgraded to metricbeat 8.14.3 so we could support our mongodb 5.0 upgrade. Since the upgrade, we noticed high cpu usage. Traced it to the mongodb replstatus metricset. It is running this expensive q… --- ## [MetricBeat Elastic Stack on Kubernetes no Working](https://discuss.elastic.co/t/metricbeat-elastic-stack-on-kubernetes-no-working/374381)
**Author:** [@Bruno\_Macedo](https://discuss.elastic.co/u/Bruno_Macedo)\ **Replies:** 0\ **Last updated:** [February 11, 2025, 7:33pm UTC](https://discuss.elastic.co/t/metricbeat-elastic-stack-on-kubernetes-no-working/374381 "2025-02-11T19:33:05Z")
I'm trying to get metrics in my elastic running in kubernetes, but metrics doesn't seem to appear in Kibana, it shows that it doesn't have metric beat configured, but I see the sidecar: apiVersion: elasticsearch.k8s.ela… --- ## [Error running kibana 8.14 in AL 2023 ARM](https://discuss.elastic.co/t/error-running-kibana-8-14-in-al-2023-arm/374336)
**Author:** [@Tara\_John](https://discuss.elastic.co/u/Tara_John)\ **Replies:** 9\ **Last updated:** [February 11, 2025, 5:20pm UTC](https://discuss.elastic.co/t/error-running-kibana-8-14-in-al-2023-arm/374336 "2025-02-11T17:20:35Z")
Seeing an error during the install: /usr/share/kibana/bin/kibana-keystore: line 29: 374498 Illegal instruction (core dumped) NODE\_OPTIONS="$KBN\_NODE\_OPTS $NODE\_OPTIONS" NODE\_ENV=production "${NODE}" "${DIR}/src/cli\_… --- ## [Kibana - create field using painless (doc doesn't have a value for a field)](https://discuss.elastic.co/t/kibana-create-field-using-painless-doc-doesnt-have-a-value-for-a-field/374376)
**Author:** [@Pavel\_Duda](https://discuss.elastic.co/u/Pavel_Duda)\ **Replies:** 0\ **Last updated:** [February 11, 2025, 4:26pm UTC](https://discuss.elastic.co/t/kibana-create-field-using-painless-doc-doesnt-have-a-value-for-a-field/374376 "2025-02-11T16:26:02Z")
I'm trying to add field for the data view in Kibana UI and I'm (trying) using painless script to do that (set value). The document in the index has "start\_time" and "close\_time" fields (date format) and I'm trying to ca… --- ## [ESQL to compare data in two indexes based on a unique key](https://discuss.elastic.co/t/esql-to-compare-data-in-two-indexes-based-on-a-unique-key/369211)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 1\ **Last updated:** [February 11, 2025, 2:38pm UTC](https://discuss.elastic.co/t/esql-to-compare-data-in-two-indexes-based-on-a-unique-key/369211 "2025-02-11T14:38:30Z")
Hi Team, I am having two indexes in elasticsearch/kibana and wanted to write a ESQL query which will fetch the documents based on a unique field where the documents are there in index1 but not in index2. Could you pleas… --- ## [Why ESQL so slow compared to KQL - Please inform how to optimize](https://discuss.elastic.co/t/why-esql-so-slow-compared-to-kql-please-inform-how-to-optimize/373514)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 3\ **Last updated:** [February 11, 2025, 2:27pm UTC](https://discuss.elastic.co/t/why-esql-so-slow-compared-to-kql-please-inform-how-to-optimize/373514 "2025-02-11T14:27:10Z")
Hi I convert lots of old KQL to ESQL, mainly because it is easier to understand and I'm and old Splunker used to the pipeline there :slight\_smile: but ESQL queries are so much slower, How can I optimize?, I tried adding… --- ## [Very old jopt-simple package used in elasticsearch-rest-high-level-client](https://discuss.elastic.co/t/very-old-jopt-simple-package-used-in-elasticsearch-rest-high-level-client/374363)
**Author:** [@shadyiscrazy](https://discuss.elastic.co/u/shadyiscrazy)\ **Replies:** 1\ **Last updated:** [February 11, 2025, 2:05pm UTC](https://discuss.elastic.co/t/very-old-jopt-simple-package-used-in-elasticsearch-rest-high-level-client/374363 "2025-02-11T14:05:15Z")
Hi, Is it on agenda to remove dependency of this old package, or implement internally as it is giving sonarqube violations. Thanks --- ## [Ingest Pipeline Processor error - Input field \[text\_field\] does not exist in the source](https://discuss.elastic.co/t/ingest-pipeline-processor-error-input-field-text-field-does-not-exist-in-the-source/374332)
**Author:** [@mark16](https://discuss.elastic.co/u/mark16)\ **Replies:** 0\ **Last updated:** [February 10, 2025, 6:49pm UTC](https://discuss.elastic.co/t/ingest-pipeline-processor-error-input-field-text-field-does-not-exist-in-the-source/374332 "2025-02-10T18:49:56Z")
Hi I'm working on a RAG project and i'm using elastic-search to search for relevant documents and index it, upon trying to move the documents from the initial upload index into a new index with reference pipeline , I'm g… --- ## [What happens to existing documents during a crawl?](https://discuss.elastic.co/t/what-happens-to-existing-documents-during-a-crawl/374366)
**Author:** [@jkyeusun](https://discuss.elastic.co/u/jkyeusun)\ **Replies:** 1\ **Last updated:** [February 11, 2025, 1:53pm UTC](https://discuss.elastic.co/t/what-happens-to-existing-documents-during-a-crawl/374366 "2025-02-11T13:53:56Z")
For the current version of Enterprise Search (8.17), I can't find any documentation on how already indexed documents are managed in a web crawler index, so here are my questions regarding that. So far I've been looking … --- ## [Issues with task status of enrichment policy execution](https://discuss.elastic.co/t/issues-with-task-status-of-enrichment-policy-execution/374360)
**Author:** [@SharonB](https://discuss.elastic.co/u/SharonB)\ **Replies:** 0\ **Last updated:** [February 11, 2025, 12:17pm UTC](https://discuss.elastic.co/t/issues-with-task-status-of-enrichment-policy-execution/374360 "2025-02-11T12:17:08Z")
I'm trying to create an enrichment policy that looks something like { "match": { "indices": "index\_name", "match\_field": "unique\_id", "enrich\_fields": \["extra\_properties"\] } } Where extr… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=101) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=103)