# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=109 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 110 --- ## ['Unable to process GET request to elasticsearch URL' in Zammad](https://discuss.elastic.co/t/unable-to-process-get-request-to-elasticsearch-url-in-zammad/373650)
**Author:** [@Laszlo\_Horvath](https://discuss.elastic.co/u/Laszlo_Horvath)\ **Replies:** 8\ **Last updated:** [January 25, 2025, 8:57pm UTC](https://discuss.elastic.co/t/unable-to-process-get-request-to-elasticsearch-url-in-zammad/373650 "2025-01-25T20:57:08Z")
Hello all, I am new to Elastic products, so forgive my ignorance. I've installed Zammad on a Debian server today, everything went well but the search indexing, even though Elasticsearch service is up and running. When… --- ## [Possible error in documentaion about creating an API key for central management](https://discuss.elastic.co/t/possible-error-in-documentaion-about-creating-an-api-key-for-central-management/373355)
**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\ **Replies:** 3\ **Last updated:** [January 25, 2025, 5:08pm UTC](https://discuss.elastic.co/t/possible-error-in-documentaion-about-creating-an-api-key-for-central-management/373355 "2025-01-25T17:08:35Z")
So i was reading the document:Secure your connection to Elasticsearch section:Create an API key for central management and when i try to run the provided example: POST /\_security/api\_key { "name": "logstash\_host001", … --- ## [Elasticsearch node http certificate expiration error](https://discuss.elastic.co/t/elasticsearch-node-http-certificate-expiration-error/373228)
**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\ **Replies:** 5\ **Last updated:** [January 25, 2025, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-node-http-certificate-expiration-error/373228 "2025-01-25T12:50:37Z")
While i try to connects the kibana to elasticsearch i get the following error in the kibana's logs and when i try to load the kibana i get the Kibana server is not ready yet. : \[ERROR\]\[elasticsearch-service\] Unable to … --- ## [Exact match in query](https://discuss.elastic.co/t/exact-match-in-query/373538)
**Author:** [@mariana.upcodes](https://discuss.elastic.co/u/mariana.upcodes)\ **Replies:** 12\ **Last updated:** [January 25, 2025, 8:29am UTC](https://discuss.elastic.co/t/exact-match-in-query/373538 "2025-01-25T08:29:42Z")
We currently use the following query: "query": { "bool": { "should": \[\], "must": \[ { "multi\_match": { "query": "but not both", "type": "phrase", "… --- ## [How do you set the orchestrator.cluster.name in Filebeat?](https://discuss.elastic.co/t/how-do-you-set-the-orchestrator-cluster-name-in-filebeat/373656)
**Author:** [@mridang](https://discuss.elastic.co/u/mridang)\ **Replies:** 0\ **Last updated:** [January 25, 2025, 4:00am UTC](https://discuss.elastic.co/t/how-do-you-set-the-orchestrator-cluster-name-in-filebeat/373656 "2025-01-25T04:00:59Z")
I'm using Filebeat in Kubernetes to ship the logs to Elasticsearch. I've noticed that the log messages are missing the orchestrator.cluster.name fields. None of the orchestrator fields are being set. Orchestrator Fields … --- ## [Tenable sc integration "write error: write length 1055365 exceeds maximum file size 104857"](https://discuss.elastic.co/t/tenable-sc-integration-write-error-write-length-1055365-exceeds-maximum-file-size-104857/371383)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 4\ **Last updated:** [January 24, 2025, 7:47pm UTC](https://discuss.elastic.co/t/tenable-sc-integration-write-error-write-length-1055365-exceeds-maximum-file-size-104857/371383 "2025-01-24T19:47:19Z")
Hello to all, After configuring the integration I started to notice that the logs were not arriving steadily but with intervals of 3 to 12 hours which was strange to me. When reviewing the log presented by the agent… --- ## [Where is the filebeat event log?](https://discuss.elastic.co/t/where-is-the-filebeat-event-log/371789)
**Author:** [@helloworld4](https://discuss.elastic.co/u/helloworld4)\ **Replies:** 5\ **Last updated:** [January 24, 2025, 7:46pm UTC](https://discuss.elastic.co/t/where-is-the-filebeat-event-log/371789 "2025-01-24T19:46:34Z")
I'm getting this error when some log lines are sent to ES by filebeat: "message":"Cannot index event (status=400): dropping event! Look at the event log to view the event and cause." Where can I find that event log? I'… --- ## [\[BIG-IP ASM\] Could not index event to Elasticsearch](https://discuss.elastic.co/t/big-ip-asm-could-not-index-event-to-elasticsearch/373465)
**Author:** [@Plauda](https://discuss.elastic.co/u/Plauda)\ **Replies:** 11\ **Last updated:** [January 24, 2025, 4:42pm UTC](https://discuss.elastic.co/t/big-ip-asm-could-not-index-event-to-elasticsearch/373465 "2025-01-24T16:42:45Z")
Hi There, I try to put some F5 BIG-IP ASM logs in ELK. I configured a logstash syslog conf file and tried to , but I get an error during indexation step: Jan 21 17:12:17 cnclelk12 logstash\[162998\]: \[2025-01-21T17:12:1… --- ## [Question about Elasticsearch ILM Index Lifecycle Policies](https://discuss.elastic.co/t/question-about-elasticsearch-ilm-index-lifecycle-policies/373620)
**Author:** [@ibollman](https://discuss.elastic.co/u/ibollman)\ **Replies:** 2\ **Last updated:** [January 24, 2025, 3:50pm UTC](https://discuss.elastic.co/t/question-about-elasticsearch-ilm-index-lifecycle-policies/373620 "2025-01-24T15:50:24Z")
Good Day! We have the following question about the ILMs: In our Elasticsearch Instance we are using the predefined default logs-ILM to manage our data streams. It is configured to delete the logs-\* data streams after 9… --- ## [Different behavior in multi\_match after replacing NEST with Elastic.Clients.Elasticsearch](https://discuss.elastic.co/t/different-behavior-in-multi-match-after-replacing-nest-with-elastic-clients-elasticsearch/373495)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 2\ **Last updated:** [January 24, 2025, 3:33pm UTC](https://discuss.elastic.co/t/different-behavior-in-multi-match-after-replacing-nest-with-elastic-clients-elasticsearch/373495 "2025-01-24T15:33:37Z")
Hi! I just removed NEST and started to use Elastic.Clients.Elasticsearch I get a really strange behavior. The mulit\_match looks like this: "multi\_match": { "operator": "and", "query": "… --- ## [Need help with shipping Powershell transcripts files using filebeat](https://discuss.elastic.co/t/need-help-with-shipping-powershell-transcripts-files-using-filebeat/373640)
**Author:** [@Diffuser7](https://discuss.elastic.co/u/Diffuser7)\ **Replies:** 0\ **Last updated:** [January 24, 2025, 2:56pm UTC](https://discuss.elastic.co/t/need-help-with-shipping-powershell-transcripts-files-using-filebeat/373640 "2025-01-24T14:56:07Z")
Hello, I have a need to ship Powershell transcripts using filebeat but I can't for the life of me get multiline parsing to work. I want each transcript to be a single document in elastic. I looked at the documentation… --- ## [Visualizations: Unique Count is Inaccurate](https://discuss.elastic.co/t/visualizations-unique-count-is-inaccurate/373595)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 3\ **Last updated:** [January 24, 2025, 2:49pm UTC](https://discuss.elastic.co/t/visualizations-unique-count-is-inaccurate/373595 "2025-01-24T14:49:26Z")
Hello, As I been exploring the use of ES|QL , I found inconsistencies with metric visualizations using unique count. I have a dataset with 6,929 unique host.name values and for the sake of this it will only show up as 6… --- ## [Elastic APM cloud allowing request from a dev env localhost](https://discuss.elastic.co/t/elastic-apm-cloud-allowing-request-from-a-dev-env-localhost/373536)
**Author:** [@Andre\_Pereira1](https://discuss.elastic.co/u/Andre_Pereira1)\ **Replies:** 5\ **Last updated:** [January 24, 2025, 2:44pm UTC](https://discuss.elastic.co/t/elastic-apm-cloud-allowing-request-from-a-dev-env-localhost/373536 "2025-01-24T14:44:32Z")
I'm using elastic cloud. I am requesting assistance enabling Cross-Origin Resource Sharing (CORS) for http://localhost:8080 on our APM server. how can I configure the APM server to allow requests from a test localhost … --- ## [Heatmap for test cases overview](https://discuss.elastic.co/t/heatmap-for-test-cases-overview/373604)
**Author:** [@Fabian\_Sturm](https://discuss.elastic.co/u/Fabian_Sturm)\ **Replies:** 4\ **Last updated:** [January 24, 2025, 2:21pm UTC](https://discuss.elastic.co/t/heatmap-for-test-cases-overview/373604 "2025-01-24T14:21:00Z")
Hello community, I thought I have a fairly easy problem but I somehow always struggle with the Kibana visualizations. What I have is an index with test case execution records. Where each document in the index has a fil… --- ## [Filebeat 'replace' processor cant be empty](https://discuss.elastic.co/t/filebeat-replace-processor-cant-be-empty/365926)
**Author:** [@GEownt](https://discuss.elastic.co/u/GEownt)\ **Replies:** 1\ **Last updated:** [January 24, 2025, 2:10pm UTC](https://discuss.elastic.co/t/filebeat-replace-processor-cant-be-empty/365926 "2025-01-24T14:10:52Z")
Hey, I just upgraded to filebeat 8.15.0 and now my filebeat config isn´t working anymore. If the replacement is an empty string, filebeat wont start. - replace: fields: - field: "host.hostna… --- ## [DNS filter - unfrequent but regular error](https://discuss.elastic.co/t/dns-filter-unfrequent-but-regular-error/372975)
**Author:** [@Po-temkin](https://discuss.elastic.co/u/Po-temkin)\ **Replies:** 1\ **Last updated:** [January 24, 2025, 1:47pm UTC](https://discuss.elastic.co/t/dns-filter-unfrequent-but-regular-error/372975 "2025-01-24T13:47:46Z")
Hello to everyone! Not long ago I started to use Logstash to collect syslog from various devices in our infrastructure. To solve this problem, I created some amount of pipelines (now about 40) that help me route syslog… --- ## [How to avoid duplicate fields?](https://discuss.elastic.co/t/how-to-avoid-duplicate-fields/373457)
**Author:** [@gorano79](https://discuss.elastic.co/u/gorano79)\ **Replies:** 8\ **Last updated:** [January 24, 2025, 1:22pm UTC](https://discuss.elastic.co/t/how-to-avoid-duplicate-fields/373457 "2025-01-24T13:22:24Z")
I am new to elasticsearch so forgive me if this question is stupid. We have millions of json documents in Azure blob storage that we would like to index in Elastic. After importing just a thousand we've reached the defau… --- ## [New datanode join ES cluster cpu high](https://discuss.elastic.co/t/new-datanode-join-es-cluster-cpu-high/373505)
**Author:** [@anders\_larsson](https://discuss.elastic.co/u/anders_larsson)\ **Replies:** 4\ **Last updated:** [January 24, 2025, 1:02pm UTC](https://discuss.elastic.co/t/new-datanode-join-es-cluster-cpu-high/373505 "2025-01-24T13:02:01Z")
Im adding a new data node in ES running version 6.8.21 and i cant update due to other realated dependencies. when join the new datanode the reroute start of shards works fine for around 30-50 min then the server starts … --- ## [Kibana user metrics](https://discuss.elastic.co/t/kibana-user-metrics/373397)
**Author:** [@ezaydler](https://discuss.elastic.co/u/ezaydler)\ **Replies:** 3\ **Last updated:** [January 24, 2025, 12:52pm UTC](https://discuss.elastic.co/t/kibana-user-metrics/373397 "2025-01-24T12:52:11Z")
Hello, our company uses Kibana, and we want to track user metrics such as the requested date range, applied filters, and other relevant data. Is there a solution to achieve this? --- ## [Elasticsearch 8.17 on windows server start problem when es7.16 starts fine](https://discuss.elastic.co/t/elasticsearch-8-17-on-windows-server-start-problem-when-es7-16-starts-fine/373324)
**Author:** [@Maki\_Pa](https://discuss.elastic.co/u/Maki_Pa)\ **Replies:** 3\ **Last updated:** [January 24, 2025, 12:47pm UTC](https://discuss.elastic.co/t/elasticsearch-8-17-on-windows-server-start-problem-when-es7-16-starts-fine/373324 "2025-01-24T12:47:59Z")
Could you please, help me overcome this problem. I cannot start ES8.17 on this windows server from folder via elsticsearch.bat, when es7.17 works fine locally, from the his folder via elsticsearch.bat. Another es7.14 is … --- ## [Elasticsearch-reset-password returns error code 69](https://discuss.elastic.co/t/elasticsearch-reset-password-returns-error-code-69/373477)
**Author:** [@jimou](https://discuss.elastic.co/u/jimou)\ **Replies:** 14\ **Last updated:** [January 24, 2025, 12:44pm UTC](https://discuss.elastic.co/t/elasticsearch-reset-password-returns-error-code-69/373477 "2025-01-24T12:44:38Z")
I have installed elasticsearch-8.15.3-1.x86\_64 by following Install Elasticsearch with RPM | Elasticsearch Guide \[8.17\] | Elastic and I verified it is installed properly by $ sudo curl --cacert /etc/elasticsearch/certs… --- ## [IBMMQ Logstash](https://discuss.elastic.co/t/ibmmq-logstash/373624)
**Author:** [@adis3421](https://discuss.elastic.co/u/adis3421)\ **Replies:** 0\ **Last updated:** [January 24, 2025, 10:24am UTC](https://discuss.elastic.co/t/ibmmq-logstash/373624 "2025-01-24T10:24:30Z")
Hi, I have a problem with logstash performance when I download xml from IBMMQ queue. If I do not set logstash I cannot exceed 15k eps. It works best on default settings and heap 8gb my system under logstash 32vcp, 64gb … --- ## [ES|QL Visualizations: Filtering](https://discuss.elastic.co/t/es-ql-visualizations-filtering/373590)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [January 24, 2025, 12:12pm UTC](https://discuss.elastic.co/t/es-ql-visualizations-filtering/373590 "2025-01-24T12:12:20Z")
Hello, I created a nice ES|QL visualization, nothing crazy, its just grouping by version number found in the raw data. I wanted to filter on one of the version numbers to apply to the whole dashboard but it doesn't let… --- ## [Table dashboard in Kibana is not showing every events](https://discuss.elastic.co/t/table-dashboard-in-kibana-is-not-showing-every-events/373562)
**Author:** [@roopeshetty](https://discuss.elastic.co/u/roopeshetty)\ **Replies:** 1\ **Last updated:** [January 24, 2025, 11:32am UTC](https://discuss.elastic.co/t/table-dashboard-in-kibana-is-not-showing-every-events/373562 "2025-01-24T11:32:26Z")
Hi, Some how we are able to create a basic TABLE dashboard to visualize the list of alerts events in table format. But what its missing is, Its not showing every alert events, for example at 13:35 there are multiple ale… --- ## [Kibana Update field on dashboard](https://discuss.elastic.co/t/kibana-update-field-on-dashboard/373516)
**Author:** [@modnakapsula](https://discuss.elastic.co/u/modnakapsula)\ **Replies:** 1\ **Last updated:** [January 24, 2025, 10:28am UTC](https://discuss.elastic.co/t/kibana-update-field-on-dashboard/373516 "2025-01-24T10:28:53Z")
Hi, I am showing a list of the top 10 documents in kibana table visualisation and I need the end user to be able to "mark" if the document/row is relevant or not for him. Is it possible to do it on the dashboard? --- ## [Frequent GetObject Requests to S3 in Elasticsearch Snapshot Repository](https://discuss.elastic.co/t/frequent-getobject-requests-to-s3-in-elasticsearch-snapshot-repository/373602)
**Author:** [@Abasha](https://discuss.elastic.co/u/Abasha)\ **Replies:** 1\ **Last updated:** [January 24, 2025, 9:42am UTC](https://discuss.elastic.co/t/frequent-getobject-requests-to-s3-in-elasticsearch-snapshot-repository/373602 "2025-01-24T09:42:36Z")
Hello, I’m encountering an issue with GET Object operations while using Elasticsearch snapshots, in aws s3 bucker repository and I’d appreciate some guidance. Currently, I’m trying to snapshot an index that has a size… --- ## [Metricbeat - Fetching azure billing data for each service restart](https://discuss.elastic.co/t/metricbeat-fetching-azure-billing-data-for-each-service-restart/373622)
**Author:** [@Razby](https://discuss.elastic.co/u/Razby)\ **Replies:** 0\ **Last updated:** [January 24, 2025, 9:41am UTC](https://discuss.elastic.co/t/metricbeat-fetching-azure-billing-data-for-each-service-restart/373622 "2025-01-24T09:41:12Z")
Azure billing metricset. With every Metricbeat service restart, fetching billing data is executed despite the period being set to 24 hours. As a result, the daily cost is calculated based on duplicated data, which is a… --- ## [Field sorting in discover](https://discuss.elastic.co/t/field-sorting-in-discover/373530)
**Author:** [@venxxx](https://discuss.elastic.co/u/venxxx)\ **Replies:** 7\ **Last updated:** [January 24, 2025, 9:25am UTC](https://discuss.elastic.co/t/field-sorting-in-discover/373530 "2025-01-24T09:25:02Z")
i am trying to sort on the 'field' column but the sorting is disabled somehow. i checked the dataview and it shows 38 fields available, but in discover there are only 18 fields. --- ## [Unable to get logstash listening on custom port](https://discuss.elastic.co/t/unable-to-get-logstash-listening-on-custom-port/373239)
**Author:** [@Plauda](https://discuss.elastic.co/u/Plauda)\ **Replies:** 18\ **Last updated:** [January 21, 2025, 9:47am UTC](https://discuss.elastic.co/t/unable-to-get-logstash-listening-on-custom-port/373239 "2025-01-21T09:47:02Z")
Hello, I need your help in order to get logstash listening on a custom port. Context : I'm trying to install an ELK stack in order to push syslog on it. For tests purpose, I installed elasticsearch and logstash on the… --- ## [How does Kibana's timestamp-based filtering work?](https://discuss.elastic.co/t/how-does-kibanas-timestamp-based-filtering-work/373224)
**Author:** [@Harshali\_Zode](https://discuss.elastic.co/u/Harshali_Zode)\ **Replies:** 4\ **Last updated:** [January 24, 2025, 6:07am UTC](https://discuss.elastic.co/t/how-does-kibanas-timestamp-based-filtering-work/373224 "2025-01-24T06:07:34Z")
Hello, everyone. I have a question about filtering data from Elasticsearch based on the UTC timestamp. The requirement is to display the date and time details in the local time zone after retrieving the data from elast… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=108) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=110)