# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=106

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 107

---

## [Reindex indices](https://discuss.elastic.co/t/reindex-indices/373992)

<div class="topic-metadata">

**Author:** [@Logistic\_dilated](https://discuss.elastic.co/u/Logistic_dilated)\
**Replies:** 2\
**Last updated:** [February 3, 2025, 10:42am UTC](https://discuss.elastic.co/t/reindex-indices/373992 "2025-02-03T10:42:57Z")

</div>

elastic: 8.15.1 kibana: 8.15.1 logstash: 8.15.1 Ubuntu 22.04LTS Hello folks, I've made a mistake with the way I ingest logstash pipelines, and now I've exhausted my maximum shard count (1000/1000 used). I deleted a …

---

## [Kibana Dashboard report Printable version](https://discuss.elastic.co/t/kibana-dashboard-report-printable-version/374009)

<div class="topic-metadata">

**Author:** [@amarasinghe.kaluarac](https://discuss.elastic.co/u/amarasinghe.kaluarac)\
**Replies:** 0\
**Last updated:** [February 3, 2025, 10:40am UTC](https://discuss.elastic.co/t/kibana-dashboard-report-printable-version/374009 "2025-02-03T10:40:13Z")

</div>

Hi all, So I tried to take a report using kibana but when I tried to take the printable option of PDF it failed with no error So I am at a lost now , I have tried with increasing the jvm heap and kibana ram KIBAN…

---

## [Cisco switch integration](https://discuss.elastic.co/t/cisco-switch-integration/373440)

<div class="topic-metadata">

**Author:** [@amarasinghe.kaluarac](https://discuss.elastic.co/u/amarasinghe.kaluarac)\
**Replies:** 2\
**Last updated:** [February 3, 2025, 10:33am UTC](https://discuss.elastic.co/t/cisco-switch-integration/373440 "2025-02-03T10:33:05Z")

</div>

Hi, I have a need to integrate a Cisco Catalyst 3850 switch with my Elastic cluster, so as I was browsing through the integration, I didn't see any integration for a Catalyst switch. Could anyone help me with this? Tha…

---

## [Using reindex to generate embeddings from nested field](https://discuss.elastic.co/t/using-reindex-to-generate-embeddings-from-nested-field/373957)

<div class="topic-metadata">

**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\
**Replies:** 1\
**Last updated:** [February 3, 2025, 10:03am UTC](https://discuss.elastic.co/t/using-reindex-to-generate-embeddings-from-nested-field/373957 "2025-02-03T10:03:41Z")

</div>

Hello! I was reading this: And I tried to apply the idea of using a reindex command together with an ingest pipeline to generate the embeddings of data already inside an elastic index. Now I defined the ingest pipeli…

---

## [Issue with embedded dashboard Anonymous authentication](https://discuss.elastic.co/t/issue-with-embedded-dashboard-anonymous-authentication/373972)

<div class="topic-metadata">

**Author:** [@roopeshetty](https://discuss.elastic.co/u/roopeshetty)\
**Replies:** 1\
**Last updated:** [February 3, 2025, 10:03am UTC](https://discuss.elastic.co/t/issue-with-embedded-dashboard-anonymous-authentication/373972 "2025-02-03T10:03:28Z")

</div>

Hi We have configured the Anonymous authentication for Kibana so that we can share the embedded dashboard link to the users. The problem we face is, this embedded dashboard link will open only one time (who ever opens …

---

## [Scheduling mail from logstash](https://discuss.elastic.co/t/scheduling-mail-from-logstash/373919)

<div class="topic-metadata">

**Author:** [@Hitesh\_Bhanderi](https://discuss.elastic.co/u/Hitesh_Bhanderi)\
**Replies:** 2\
**Last updated:** [February 3, 2025, 9:16am UTC](https://discuss.elastic.co/t/scheduling-mail-from-logstash/373919 "2025-02-03T09:16:41Z")

</div>

Hi this might be silly but I want to know that can i schedule mail from logstash using email-plugin as i want to schedule mail which contains error message from the logs .i had successfully implemented to mail error …

---

## [Connection Reset when settinng up Filebeat to Elastic Cloud](https://discuss.elastic.co/t/connection-reset-when-settinng-up-filebeat-to-elastic-cloud/373721)

<div class="topic-metadata">

**Author:** [@danae-panagiot](https://discuss.elastic.co/u/danae-panagiot)\
**Replies:** 4\
**Last updated:** [February 3, 2025, 7:22am UTC](https://discuss.elastic.co/t/connection-reset-when-settinng-up-filebeat-to-elastic-cloud/373721 "2025-02-03T07:22:13Z")

</div>

Hello, I have a deployment with an Elasticsearch cluster and I am trying to send some logs using Filebeat. I created a user and gave him the roles necessary. I use the user-password base authentication but when I try to …

---

## [Palo Alto Cortex XDR Update](https://discuss.elastic.co/t/palo-alto-cortex-xdr-update/373968)

<div class="topic-metadata">

**Author:** [@x\_deee](https://discuss.elastic.co/u/x_deee)\
**Replies:** 8\
**Last updated:** [February 3, 2025, 4:50am UTC](https://discuss.elastic.co/t/palo-alto-cortex-xdr-update/373968 "2025-02-03T04:50:30Z")

</div>

Recently, Cortex XDR by Palo Alto updated their api endpoint URLs from v1 to v2. This small change prevents data from entering our Elasticstack. So far, I have attempted to change elastic-agent.yml and change the httpjso…

---

## [Proxy in front of OIDC configuration Azure Entra App](https://discuss.elastic.co/t/proxy-in-front-of-oidc-configuration-azure-entra-app/373871)

<div class="topic-metadata">

**Author:** [@tdvo1996](https://discuss.elastic.co/u/tdvo1996)\
**Replies:** 1\
**Last updated:** [February 3, 2025, 4:39am UTC](https://discuss.elastic.co/t/proxy-in-front-of-oidc-configuration-azure-entra-app/373871 "2025-02-03T04:39:46Z")

</div>

Hi, We are running Elastic with an ECK Operator in Openshift. The namespace that Elastic is running on has strict network access in and out. Let's say we have an OIDC configuration with an Azure Entra App. Is it poss…

---

## [Huge segments (should I worry?)](https://discuss.elastic.co/t/huge-segments-should-i-worry/373879)

<div class="topic-metadata">

**Author:** [@teodor.zvezdov](https://discuss.elastic.co/u/teodor.zvezdov)\
**Replies:** 7\
**Last updated:** [February 2, 2025, 7:28pm UTC](https://discuss.elastic.co/t/huge-segments-should-i-worry/373879 "2025-02-02T19:28:45Z")

</div>

Hi, recently I have been tasked to maintain an existing ES cluster consisting of 3 nodes (3 data nodes). 12 GB heap per node. After observing the segments of the index "beneficiary2" I saw the following : 2 very big se…

---

## [Upgrade elasticsearch from version 7.16 to 7.17](https://discuss.elastic.co/t/upgrade-elasticsearch-from-version-7-16-to-7-17/373837)

<div class="topic-metadata">

**Author:** [@p\_alavi](https://discuss.elastic.co/u/p_alavi)\
**Replies:** 12\
**Last updated:** [February 2, 2025, 12:56pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-version-7-16-to-7-17/373837 "2025-02-02T12:56:16Z")

</div>

Hi all, I recently upgraded my Elasticsearch cluster from version 7.16 to 7.17 and encountered several issues. Kibana is not loading properly, and I am receiving license-related errors and missing authentication credent…

---

## [Rate limit in elastic image pull?](https://discuss.elastic.co/t/rate-limit-in-elastic-image-pull/373733)

<div class="topic-metadata">

**Author:** [@Gopu](https://discuss.elastic.co/u/Gopu)\
**Replies:** 1\
**Last updated:** [February 1, 2025, 6:47pm UTC](https://discuss.elastic.co/t/rate-limit-in-elastic-image-pull/373733 "2025-02-01T18:47:29Z")

</div>

I am encountering an issue while trying to pull the docker.elastic.co/elasticsearch/elasticsearch:8.4.3 image in my Kubernetes cluster. The error I am seeing is: Failed to authorize: failed to fetch anonymous token: Get…

---

## [Syslog Output only transferring the "message" field](https://discuss.elastic.co/t/syslog-output-only-transferring-the-message-field/353396)

<div class="topic-metadata">

**Author:** [@Grimlock](https://discuss.elastic.co/u/Grimlock)\
**Replies:** 15\
**Last updated:** [January 31, 2025, 8:31pm UTC](https://discuss.elastic.co/t/syslog-output-only-transferring-the-message-field/353396 "2025-01-31T20:31:37Z")

</div>

Hi, I am using the Syslog Output plugin to transfer data to another host: syslog { host =\> "IP" port =\> Port } However, the target host only receives the content of the message fields. My input looks like this: …

---

## [Why is TSVB being depricated](https://discuss.elastic.co/t/why-is-tsvb-being-depricated/373678)

<div class="topic-metadata">

**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\
**Replies:** 8\
**Last updated:** [January 31, 2025, 7:30pm UTC](https://discuss.elastic.co/t/why-is-tsvb-being-depricated/373678 "2025-01-31T19:30:43Z")

</div>

well the main question what is the main reason behind deprecation of TSVB and what will be going to be the alternative solution? TSVB is such a nice feature, it would give the opportunity to search on your data in one…

---

## [Counting agents in Dasboard](https://discuss.elastic.co/t/counting-agents-in-dasboard/373960)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 4\
**Last updated:** [January 31, 2025, 7:26pm UTC](https://discuss.elastic.co/t/counting-agents-in-dasboard/373960 "2025-01-31T19:26:36Z")

</div>

Hello everyone, I have a question, when I enter in the administration part in the “Fleet” option I get the list of agents and their status, in total it tells me that I have X amount of agents. I was asked to crea…

---

## [How to get host.name reporting uniformity?](https://discuss.elastic.co/t/how-to-get-host-name-reporting-uniformity/373953)

<div class="topic-metadata">

**Author:** [@catn0b0t](https://discuss.elastic.co/u/catn0b0t)\
**Replies:** 1\
**Last updated:** [January 31, 2025, 5:50pm UTC](https://discuss.elastic.co/t/how-to-get-host-name-reporting-uniformity/373953 "2025-01-31T17:50:34Z")

</div>

We see a lot of variation in how different fleet agent integrations report the hostname. Although we have configured our agent policies to report the FQDN. Some integrations still just report the hostname instead of the …

---

## [How can I trigger an email alert that includes all alerts, instead of sending each alert live? Urgent! Please help](https://discuss.elastic.co/t/how-can-i-trigger-an-email-alert-that-includes-all-alerts-instead-of-sending-each-alert-live-urgent-please-help/373943)

<div class="topic-metadata">

**Author:** [@evangelin](https://discuss.elastic.co/u/evangelin)\
**Replies:** 1\
**Last updated:** [January 31, 2025, 4:02pm UTC](https://discuss.elastic.co/t/how-can-i-trigger-an-email-alert-that-includes-all-alerts-instead-of-sending-each-alert-live-urgent-please-help/373943 "2025-01-31T16:02:01Z")

</div>

Hello team, I have installed Elastalert2 and configured it with elk i want to trigger an email alert that includes all alerts, instead of sending each alert live? Like custom rule anything? How can i do that please he…

---

## [Is it possible to run Fleet & Elastic Agent locally?](https://discuss.elastic.co/t/is-it-possible-to-run-fleet-elastic-agent-locally/360502)

<div class="topic-metadata">

**Author:** [@ffamous](https://discuss.elastic.co/u/ffamous)\
**Replies:** 2\
**Last updated:** [January 31, 2025, 3:08pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-fleet-elastic-agent-locally/360502 "2025-01-31T15:08:17Z")

</div>

Hello. I run Kibana and Elasticsearch in docker and trying to configurate Fleet with Elastic agent on the same system just for test/learning purpose, but cannot figure it out how to do that. Is it even possible to config…

---

## [How to filter the visualization on unique values of a field?](https://discuss.elastic.co/t/how-to-filter-the-visualization-on-unique-values-of-a-field/373714)

<div class="topic-metadata">

**Author:** [@Priyanka\_Rajpal](https://discuss.elastic.co/u/Priyanka_Rajpal)\
**Replies:** 6\
**Last updated:** [January 31, 2025, 3:06pm UTC](https://discuss.elastic.co/t/how-to-filter-the-visualization-on-unique-values-of-a-field/373714 "2025-01-31T15:06:26Z")

</div>

I have a visualization to plot the sum of item quantity's over the span of a period. I need to add a filter to only sum item's having unique item id. How can I do that? I tried using the below query, but it gives me th…

---

## [Replace processor does not allow replacement: "" anymore](https://discuss.elastic.co/t/replace-processor-does-not-allow-replacement-anymore/365664)

<div class="topic-metadata">

**Author:** [@Zeillons](https://discuss.elastic.co/u/Zeillons)\
**Replies:** 1\
**Last updated:** [January 31, 2025, 2:31pm UTC](https://discuss.elastic.co/t/replace-processor-does-not-allow-replacement-anymore/365664 "2025-01-31T14:31:07Z")

</div>

Hello, It seems that starting from version 8.15, with the addition of the replace processor validation (Add config check to replace processor by fearful-symmetry · Pull Request #40047 · elastic/beats · GitHub), it is no…

---

## [Using managed integration assets with different lifecycle policy/rollover alias](https://discuss.elastic.co/t/using-managed-integration-assets-with-different-lifecycle-policy-rollover-alias/373951)

<div class="topic-metadata">

**Author:** [@smashley](https://discuss.elastic.co/u/smashley)\
**Replies:** 0\
**Last updated:** [January 31, 2025, 2:28pm UTC](https://discuss.elastic.co/t/using-managed-integration-assets-with-different-lifecycle-policy-rollover-alias/373951 "2025-01-31T14:28:05Z")

</div>

I'm running ES 8.17.0 on basic subscription, ingesting logs from Cloudwatch. Note we are not using the Agent to pull these logs, but rather send them to \_bulk with a lambda function. We had been ingesting these to an in…

---

## [Logstash email image problem](https://discuss.elastic.co/t/logstash-email-image-problem/373713)

<div class="topic-metadata">

**Author:** [@Hannah\_J\_Swystun](https://discuss.elastic.co/u/Hannah_J_Swystun)\
**Replies:** 11\
**Last updated:** [January 31, 2025, 1:52pm UTC](https://discuss.elastic.co/t/logstash-email-image-problem/373713 "2025-01-31T13:52:28Z")

</div>

Hi everybody, i try to send email from logstash version 7.8.0 but, images are never shown! however attachments are added to email and can be opened! i used different kind of images, none of them work ? can someone he…

---

## [Remove all tags at one time?](https://discuss.elastic.co/t/remove-all-tags-at-one-time/373931)

<div class="topic-metadata">

**Author:** [@sbocquet](https://discuss.elastic.co/u/sbocquet)\
**Replies:** 5\
**Last updated:** [January 31, 2025, 1:33pm UTC](https://discuss.elastic.co/t/remove-all-tags-at-one-time/373931 "2025-01-31T13:33:03Z")

</div>

Hi, Is it possible to remove all tags in the \[tags\] field at one time ? I have this filter : # Transfert junk to the garbage datastream if \[Severity\] == "DEBUG" { mutate { update =\> { "\[data\_stre…

---

## [LinkedTransferQueue is blocking threads i dont know why this issue occurs](https://discuss.elastic.co/t/linkedtransferqueue-is-blocking-threads-i-dont-know-why-this-issue-occurs/373691)

<div class="topic-metadata">

**Author:** [@Mani\_Kandan](https://discuss.elastic.co/u/Mani_Kandan)\
**Replies:** 3\
**Last updated:** [January 31, 2025, 1:02pm UTC](https://discuss.elastic.co/t/linkedtransferqueue-is-blocking-threads-i-dont-know-why-this-issue-occurs/373691 "2025-01-31T13:02:47Z")

</div>

As i am new to Elasticsearch.In my server elasticsearch datanode is running and this has a issue of JAVA\_TOO\_MANY\_THREADS so in stack trace Stack Trace at jdk.internal.misc.Unsafe.park(java.base@17.0.13/Native Method) …

---

## [Java Elastic query not returning results](https://discuss.elastic.co/t/java-elastic-query-not-returning-results/373933)

<div class="topic-metadata">

**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\
**Replies:** 4\
**Last updated:** [January 31, 2025, 12:10pm UTC](https://discuss.elastic.co/t/java-elastic-query-not-returning-results/373933 "2025-01-31T12:10:44Z")

</div>

I have an application which uses java HLRC client fetching results from Elasticsearch cluster. I am facing a peculiar problem in which I am not able to get certain results from Java client side. But the catch is when i a…

---

## [Apm server configuration](https://discuss.elastic.co/t/apm-server-configuration/373925)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 0\
**Last updated:** [January 31, 2025, 9:14am UTC](https://discuss.elastic.co/t/apm-server-configuration/373925 "2025-01-31T09:14:18Z")

</div>

Hi Team! I understand apm server has to be private. I can place it behind a nginx load balancer. How do I ensure my apm server is secure. If I go to dev tools on my webpage, I can see the request to apm endpoint. what …

---

## [Elasticsearch build Unable to tunnel through proxy](https://discuss.elastic.co/t/elasticsearch-build-unable-to-tunnel-through-proxy/373844)

<div class="topic-metadata">

**Author:** [@Thomas\_Varley](https://discuss.elastic.co/u/Thomas_Varley)\
**Replies:** 1\
**Last updated:** [January 31, 2025, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-build-unable-to-tunnel-through-proxy/373844 "2025-01-31T08:07:55Z")

</div>

Hi, we are building elasticsearch v8.13.4 using an internal maven repository. During the build process we are seeing this error: java.io.IOException: Unable to tunnel through proxy. Proxy returns "HTTP/1.1 403 Forbidden …

---

## [\[8.x\] \[8.17.1\] Confidential Computing Elastic native system call filters](https://discuss.elastic.co/t/8-x-8-17-1-confidential-computing-elastic-native-system-call-filters/373924)

<div class="topic-metadata">

**Author:** [@nmwael](https://discuss.elastic.co/u/nmwael)\
**Replies:** 0\
**Last updated:** [January 31, 2025, 8:08am UTC](https://discuss.elastic.co/t/8-x-8-17-1-confidential-computing-elastic-native-system-call-filters/373924 "2025-01-31T08:08:46Z")

</div>

I am looking into securing and guarding Elastic search with Intel SGX hardware and a middleware called Gramine which are utilized as an libos. End goal are to protect Elastic against attackers that might do memory dumps,…

---

## [Dashboard API](https://discuss.elastic.co/t/dashboard-api/373834)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 2\
**Last updated:** [January 30, 2025, 7:32pm UTC](https://discuss.elastic.co/t/dashboard-api/373834 "2025-01-30T19:32:20Z")

</div>

Hello, Is there a way to automate or programmatically create dashboards/visualizations using an API?

---

## [How to Run Logstash Immediately and Maintain a Scheduled Execution?](https://discuss.elastic.co/t/how-to-run-logstash-immediately-and-maintain-a-scheduled-execution/373889)

<div class="topic-metadata">

**Author:** [@Zikou](https://discuss.elastic.co/u/Zikou)\
**Replies:** 3\
**Last updated:** [January 30, 2025, 5:50pm UTC](https://discuss.elastic.co/t/how-to-run-logstash-immediately-and-maintain-a-scheduled-execution/373889 "2025-01-30T17:50:14Z")

</div>

I'm using Logstash to fetch data from a database and index it into Elasticsearch. My Logstash configuration includes a schedule to run every 50 minutes like this: input { jdbc { jdbc\_connection\_string =\> "jdbc:mys…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=105)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=107)
