# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=117

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 118

---

## [How to customize Returned Results in Kibana Search Applications](https://discuss.elastic.co/t/how-to-customize-returned-results-in-kibana-search-applications/372478)

<div class="topic-metadata">

**Author:** [@samer\_saleh](https://discuss.elastic.co/u/samer_saleh)\
**Replies:** 1\
**Last updated:** [January 7, 2025, 5:17pm UTC](https://discuss.elastic.co/t/how-to-customize-returned-results-in-kibana-search-applications/372478 "2025-01-07T17:17:30Z")

</div>

Hi, Is there a way to peform semantic search or vector search in Kibana? I tried creating views against certain indexes with embedding but It doesnt seem to allow it. For starters I want to be able to hide some of the f…

---

## [Error while setting up agent](https://discuss.elastic.co/t/error-while-setting-up-agent/372750)

<div class="topic-metadata">

**Author:** [@Ahmad3](https://discuss.elastic.co/u/Ahmad3)\
**Replies:** 3\
**Last updated:** [January 6, 2025, 10:33pm UTC](https://discuss.elastic.co/t/error-while-setting-up-agent/372750 "2025-01-06T22:33:27Z")

</div>

has anyone encountered this annoying error, i tried deleting re trying nothing seems to work.

---

## [How to get all the suggestions in completion query](https://discuss.elastic.co/t/how-to-get-all-the-suggestions-in-completion-query/372882)

<div class="topic-metadata">

**Author:** [@Capybara07](https://discuss.elastic.co/u/Capybara07)\
**Replies:** 1\
**Last updated:** [January 7, 2025, 12:16pm UTC](https://discuss.elastic.co/t/how-to-get-all-the-suggestions-in-completion-query/372882 "2025-01-07T12:16:08Z")

</div>

so here is my mapping "skills\_completion": { "type": "completion", "contexts": \[ { "name": "api\_key", "type": "category" } \] }, and below are my inserted data…

---

## [Way to align Text in Discovery View](https://discuss.elastic.co/t/way-to-align-text-in-discovery-view/372804)

<div class="topic-metadata">

**Author:** [@samer\_saleh](https://discuss.elastic.co/u/samer_saleh)\
**Replies:** 11\
**Last updated:** [January 7, 2025, 11:41am UTC](https://discuss.elastic.co/t/way-to-align-text-in-discovery-view/372804 "2025-01-07T11:41:06Z")

</div>

Hi, I have created a Discovery View that I would like to use in a dashboard , but I could not find a way to align text in certain columns. Is there a way to do it? I understand Discovery are just for looking up data wit…

---

## [Parameters to consider for sizing and setting up an elastic search cluster in on-premise environment?](https://discuss.elastic.co/t/parameters-to-consider-for-sizing-and-setting-up-an-elastic-search-cluster-in-on-premise-environment/372886)

<div class="topic-metadata">

**Author:** [@ganesh\_wf](https://discuss.elastic.co/u/ganesh_wf)\
**Replies:** 2\
**Last updated:** [January 7, 2025, 8:50am UTC](https://discuss.elastic.co/t/parameters-to-consider-for-sizing-and-setting-up-an-elastic-search-cluster-in-on-premise-environment/372886 "2025-01-07T08:50:45Z")

</div>

Documentation about deciding no. of cluster nodes, CPU, RAM, disks and high availability etc... is needed.

---

## [CVE-2023-21830,CVE-2023-21835,CVE-2023-21843](https://discuss.elastic.co/t/cve-2023-21830-cve-2023-21835-cve-2023-21843/372883)

<div class="topic-metadata">

**Author:** [@nishant\_goyal](https://discuss.elastic.co/u/nishant_goyal)\
**Replies:** 0\
**Last updated:** [January 7, 2025, 7:40am UTC](https://discuss.elastic.co/t/cve-2023-21830-cve-2023-21835-cve-2023-21843/372883 "2025-01-07T07:40:14Z")

</div>

"Plugin Output: Path : /usr/share/elasticsearch/jdk/ Installed version : 19.0.1 Fixed version : Upgrade to a version greater than 19.0.1"

---

## [ElasticSearch for OpenMetadata for multiple enviroments](https://discuss.elastic.co/t/elasticsearch-for-openmetadata-for-multiple-enviroments/372647)

<div class="topic-metadata">

**Author:** [@Jake\_K](https://discuss.elastic.co/u/Jake_K)\
**Replies:** 2\
**Last updated:** [January 7, 2025, 4:06am UTC](https://discuss.elastic.co/t/elasticsearch-for-openmetadata-for-multiple-enviroments/372647 "2025-01-07T04:06:35Z")

</div>

I would like to explore setting up Elasticsearch in Azure (Managed Service) to work with OpenMetadata. We will have 3 environments for OpenMetadata - Dev, QA and Prod. Question I have is whether we can use just one Ela…

---

## [When installing ElasticFlow 7.5, get fatal exception while bootstraping Elasticsearch](https://discuss.elastic.co/t/when-installing-elasticflow-7-5-get-fatal-exception-while-bootstraping-elasticsearch/372869)

<div class="topic-metadata">

**Author:** [@tallguy86](https://discuss.elastic.co/u/tallguy86)\
**Replies:** 5\
**Last updated:** [January 7, 2025, 2:46am UTC](https://discuss.elastic.co/t/when-installing-elasticflow-7-5-get-fatal-exception-while-bootstraping-elasticsearch/372869 "2025-01-07T02:46:40Z")

</div>

When following the install guide for Elasticsearch for Red Hat, Install Elasticsearch, 7. Edit elasticsearch.yml: I am being told that the config is enough to get started for a single node so I deleted all lines and pas…

---

## [Logstash JDBC\_INPUT does not push data upon it starts when there's scheduler in its config](https://discuss.elastic.co/t/logstash-jdbc-input-does-not-push-data-upon-it-starts-when-theres-scheduler-in-its-config/372870)

<div class="topic-metadata">

**Author:** [@mxu](https://discuss.elastic.co/u/mxu)\
**Replies:** 2\
**Last updated:** [January 7, 2025, 12:03am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-does-not-push-data-upon-it-starts-when-theres-scheduler-in-its-config/372870 "2025-01-07T00:03:18Z")

</div>

I have following jdbc\_input configured and expect it runs upon logstash starts AND as scheduled as well. However, it did not run upon logstash starts. I found following old post. It shall run. I have losgtash 8. 13.2. …

---

## [Best Practices for managing data sources](https://discuss.elastic.co/t/best-practices-for-managing-data-sources/372866)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 0\
**Last updated:** [January 6, 2025, 9:32pm UTC](https://discuss.elastic.co/t/best-practices-for-managing-data-sources/372866 "2025-01-06T21:32:34Z")

</div>

Hello, When using elastic, we essentially have different data pipelines from Elastic Agent Integrations, Logstash Pipelines, Scripts, etc. Although we have set up alerts when documents reach zero, is there other methods…

---

## [Kibana Shrink Index](https://discuss.elastic.co/t/kibana-shrink-index/372410)

<div class="topic-metadata">

**Author:** [@peter170805](https://discuss.elastic.co/u/peter170805)\
**Replies:** 7\
**Last updated:** [January 6, 2025, 7:46pm UTC](https://discuss.elastic.co/t/kibana-shrink-index/372410 "2025-01-06T19:46:24Z")

</div>

Good morning friends. I am a little new to the Elastic topic. The problem is that in the company we have a Kibana version 7.5.1, I know that the version is old, but for the moment it is impossible to change it. The index…

---

## [KIbana not showing error](https://discuss.elastic.co/t/kibana-not-showing-error/372864)

<div class="topic-metadata">

**Author:** [@Luca\_Ambrosi](https://discuss.elastic.co/u/Luca_Ambrosi)\
**Replies:** 1\
**Last updated:** [January 6, 2025, 7:39pm UTC](https://discuss.elastic.co/t/kibana-not-showing-error/372864 "2025-01-06T19:39:12Z")

</div>

Hi, i have sent some exception trought the java apm agent to es, i can see the documents have correctly the stacktrace on discovery panel: but on Kibana im not able to see the stacktrace that is present inside the d…

---

## [Creating Component Templates](https://discuss.elastic.co/t/creating-component-templates/372409)

<div class="topic-metadata">

**Author:** [@catn0b0t](https://discuss.elastic.co/u/catn0b0t)\
**Replies:** 1\
**Last updated:** [January 6, 2025, 7:11pm UTC](https://discuss.elastic.co/t/creating-component-templates/372409 "2025-01-06T19:11:34Z")

</div>

It would really help a lot if the forms for creating Component Templates would give you a warning before you try to close or refresh the browser tab. Been creating a template and have been wasting at least an hour or so …

---

## [Enable Geo data in kibana without Logstash?](https://discuss.elastic.co/t/enable-geo-data-in-kibana-without-logstash/372818)

<div class="topic-metadata">

**Author:** [@elastirroot](https://discuss.elastic.co/u/elastirroot)\
**Replies:** 10\
**Last updated:** [January 6, 2025, 3:48am UTC](https://discuss.elastic.co/t/enable-geo-data-in-kibana-without-logstash/372818 "2025-01-06T03:48:49Z")

</div>

I found this tutorial regarding how to configure logstash to include geo data. But per what I was recommended, to try filebeat directly to Elasticsearch which is now working for my new setup, I do not have Logstash. I…

---

## [Elastic agent is not able to read files defined in configuration file](https://discuss.elastic.co/t/elastic-agent-is-not-able-to-read-files-defined-in-configuration-file/372843)

<div class="topic-metadata">

**Author:** [@Eshwar\_K](https://discuss.elastic.co/u/Eshwar_K)\
**Replies:** 3\
**Last updated:** [January 6, 2025, 4:00pm UTC](https://discuss.elastic.co/t/elastic-agent-is-not-able-to-read-files-defined-in-configuration-file/372843 "2025-01-06T16:00:36Z")

</div>

Hi Community, I am trying to integrate Symantec endpoint protection with elastic stack but not able to fetch Symantec data into elastic. I had tried with log input file option which elastic agent read the file in the g…

---

## [Not enough Privileges Elastic\_agent.metricbeat logs errors on Windows](https://discuss.elastic.co/t/not-enough-privileges-elastic-agent-metricbeat-logs-errors-on-windows/372321)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 5\
**Last updated:** [January 6, 2025, 3:46pm UTC](https://discuss.elastic.co/t/not-enough-privileges-elastic-agent-metricbeat-logs-errors-on-windows/372321 "2025-01-06T15:46:15Z")

</div>

Hello, The elastic\_agent.metricbeat contains a lot of errors such as: Error fetching data for metricset system.process\_summary: Not enough privileges to fetch information: Not enough privileges to fetch information: Ge…

---

## [Do I have to update mappings in existing indices after adding new fields in the index template?](https://discuss.elastic.co/t/do-i-have-to-update-mappings-in-existing-indices-after-adding-new-fields-in-the-index-template/372811)

<div class="topic-metadata">

**Author:** [@Richard\_Zhang](https://discuss.elastic.co/u/Richard_Zhang)\
**Replies:** 2\
**Last updated:** [January 6, 2025, 3:02pm UTC](https://discuss.elastic.co/t/do-i-have-to-update-mappings-in-existing-indices-after-adding-new-fields-in-the-index-template/372811 "2025-01-06T15:02:03Z")

</div>

Hi everyone, I have an index template and have already a lot of indices created based on this template. Now I'm going to add new fields in the index template. Will these new fields be added to existing indices automat…

---

## [How to update only a single setting in cluster settings?](https://discuss.elastic.co/t/how-to-update-only-a-single-setting-in-cluster-settings/372810)

<div class="topic-metadata">

**Author:** [@Richard\_Zhang](https://discuss.elastic.co/u/Richard_Zhang)\
**Replies:** 2\
**Last updated:** [January 6, 2025, 2:59pm UTC](https://discuss.elastic.co/t/how-to-update-only-a-single-setting-in-cluster-settings/372810 "2025-01-06T14:59:58Z")

</div>

Hi everyone, this page says we can update cluster settings with a PUT request, like below PUT /\_cluster/settings { "persistent" : { "indices.recovery.max\_bytes\_per\_sec" : "50mb" } } link to the page Since it'…

---

## [ILM is failing to delete closed indices](https://discuss.elastic.co/t/ilm-is-failing-to-delete-closed-indices/372755)

<div class="topic-metadata">

**Author:** [@GustavoSantos](https://discuss.elastic.co/u/GustavoSantos)\
**Replies:** 8\
**Last updated:** [January 6, 2025, 2:44pm UTC](https://discuss.elastic.co/t/ilm-is-failing-to-delete-closed-indices/372755 "2025-01-06T14:44:46Z")

</div>

ILM is failing to delete a few closed indices. We are getting the following issue: policy \[\<policyName\>\] for index \[\<indexName\>\] on an error step due to a transient error, moving back to the failed step \[wait-for-shard-…

---

## [I am encountering an issue while attempting to verify a snapshot repository in Elasticsearch. The repository is named old-indices. Below is the relevant log entry from the Elasticsearch cluster:](https://discuss.elastic.co/t/i-am-encountering-an-issue-while-attempting-to-verify-a-snapshot-repository-in-elasticsearch-the-repository-is-named-old-indices-below-is-the-relevant-log-entry-from-the-elasticsearch-cluster/372658)

<div class="topic-metadata">

**Author:** [@abdelkriem](https://discuss.elastic.co/u/abdelkriem)\
**Replies:** 9\
**Last updated:** [January 6, 2025, 2:12pm UTC](https://discuss.elastic.co/t/i-am-encountering-an-issue-while-attempting-to-verify-a-snapshot-repository-in-elasticsearch-the-repository-is-named-old-indices-below-is-the-relevant-log-entry-from-the-elasticsearch-cluster/372658 "2025-01-06T14:12:07Z")

</div>

\[2024-12-31T17:06:04,282\] \[WARN \] \[r.suppressed \] \[Elastic-Master-1\] path: /\_snapshot/old-indices/\_verify, params: {repository=old-indices}, status: 500org.elasticsearch.repositories.RepositoryVerificationException: \[old…

---

## [Creating rules in different spaces through API](https://discuss.elastic.co/t/creating-rules-in-different-spaces-through-api/372841)

<div class="topic-metadata">

**Author:** [@Joey\_Visbeen](https://discuss.elastic.co/u/Joey_Visbeen)\
**Replies:** 2\
**Last updated:** [January 6, 2025, 1:27pm UTC](https://discuss.elastic.co/t/creating-rules-in-different-spaces-through-api/372841 "2025-01-06T13:27:40Z")

</div>

When creating a rule in kibana it shows in the developer tools that the end point of the specific space is used to create the rule within the space. Request URL: {kibana\_url}/s/{space\_name}/api/alerting/rule But when w…

---

## [How to build a sidebar navigation in our plugin generated by script based on kibana8.14.3](https://discuss.elastic.co/t/how-to-build-a-sidebar-navigation-in-our-plugin-generated-by-script-based-on-kibana8-14-3/369290)

<div class="topic-metadata">

**Author:** [@hash-yang](https://discuss.elastic.co/u/hash-yang)\
**Replies:** 1\
**Last updated:** [January 6, 2025, 12:36pm UTC](https://discuss.elastic.co/t/how-to-build-a-sidebar-navigation-in-our-plugin-generated-by-script-based-on-kibana8-14-3/369290 "2025-01-06T12:36:52Z")

</div>

version current: kibana 8.14.3; elasticsearch 8.13.4 I follow the guideline run\_kibana\_with\_your\_plugin\_in\_dev\_mode. My Plugin is running normally, and it can be shown in the kibana nivagation. Now, i want to build…

---

## [Dont count sources bytes and destinations bytes in filebeat netflow](https://discuss.elastic.co/t/dont-count-sources-bytes-and-destinations-bytes-in-filebeat-netflow/372822)

<div class="topic-metadata">

**Author:** [@Komeyl\_Pouya](https://discuss.elastic.co/u/Komeyl_Pouya)\
**Replies:** 4\
**Last updated:** [January 6, 2025, 4:16am UTC](https://discuss.elastic.co/t/dont-count-sources-bytes-and-destinations-bytes-in-filebeat-netflow/372822 "2025-01-06T04:16:27Z")

</div>

hi everyone PLZ help me i have ELK 8.17 (elasticsearch-logstech-kibana-filebeat) and send netflow from router to filebeat and recive all of netflow in ELK but dont count sources bytes and destinations bytes!!! and ju…

---

## [Route Logstash ES output plugin bulk Indexing request to Co-ordinating only vs Data nodes](https://discuss.elastic.co/t/route-logstash-es-output-plugin-bulk-indexing-request-to-co-ordinating-only-vs-data-nodes/372820)

<div class="topic-metadata">

**Author:** [@MChat](https://discuss.elastic.co/u/MChat)\
**Replies:** 0\
**Last updated:** [January 6, 2025, 2:15am UTC](https://discuss.elastic.co/t/route-logstash-es-output-plugin-bulk-indexing-request-to-co-ordinating-only-vs-data-nodes/372820 "2025-01-06T02:15:52Z")

</div>

I have a ES cluster (Total 10 nodes) set up as below: 2 - Co-ordinating nodes 3 - Dedicated master only nodes 5 - Data only nodes we do have multiple logstash pipelines (running at a schedule of every 1 sec) which pe…

---

## [Migration from 5.x to 8.x](https://discuss.elastic.co/t/migration-from-5-x-to-8-x/372772)

<div class="topic-metadata">

**Author:** [@kri](https://discuss.elastic.co/u/kri)\
**Replies:** 2\
**Last updated:** [January 5, 2025, 3:27pm UTC](https://discuss.elastic.co/t/migration-from-5-x-to-8-x/372772 "2025-01-05T15:27:57Z")

</div>

I am new here, I am trying to migrate from elastic 5.x to 8.x. I have a couple indexes including parent child relation as well.can anyone provide guidance on where to start ? I have created separate indexes from exisitng…

---

## [Unable to use tail in cel ymp.hbs for integration package data stream agent](https://discuss.elastic.co/t/unable-to-use-tail-in-cel-ymp-hbs-for-integration-package-data-stream-agent/372801)

<div class="topic-metadata">

**Author:** [@RAVIKUMAR\_IGHARE](https://discuss.elastic.co/u/RAVIKUMAR_IGHARE)\
**Replies:** 0\
**Last updated:** [January 5, 2025, 2:39am UTC](https://discuss.elastic.co/t/unable-to-use-tail-in-cel-ymp-hbs-for-integration-package-data-stream-agent/372801 "2025-01-05T02:39:59Z")

</div>

Elastic search integration development Data stream - agent - cel yml.hbs I am trying to use tail(\[1,2,3,4\]) inside cel.yml.hbs file Which is supposed to return \[2,3,4\] But I'm getting error - failed to check program:…

---

## [User can view reports created by other users](https://discuss.elastic.co/t/user-can-view-reports-created-by-other-users/372778)

<div class="topic-metadata">

**Author:** [@JesusGM](https://discuss.elastic.co/u/JesusGM)\
**Replies:** 1\
**Last updated:** [January 4, 2025, 3:54pm UTC](https://discuss.elastic.co/t/user-can-view-reports-created-by-other-users/372778 "2025-01-04T15:54:26Z")

</div>

Hi, I've noticed that I can only view the reports I've created. Is there a way to access reports created by other users in Kibana?

---

## [\[Metricbeat\]\[Elasticsearch module\] "basepath" configuration field is not working properly. Bug ?](https://discuss.elastic.co/t/metricbeat-elasticsearch-module-basepath-configuration-field-is-not-working-properly-bug/372776)

<div class="topic-metadata">

**Author:** [@jeremy\_f](https://discuss.elastic.co/u/jeremy_f)\
**Replies:** 0\
**Last updated:** [January 3, 2025, 10:46pm UTC](https://discuss.elastic.co/t/metricbeat-elasticsearch-module-basepath-configuration-field-is-not-working-properly-bug/372776 "2025-01-03T22:46:01Z")

</div>

Hello, Scenario : I try to retrieve metrics from an Elasticsearch service through an Nginx reverse proxy. Elasticsearch endpoint is https :// FQDN:443 /elasticsearch. Metricbeat version is 8.15.2 This is the reason wh…

---

## [Which elastic agent integration to be used for custom logs?](https://discuss.elastic.co/t/which-elastic-agent-integration-to-be-used-for-custom-logs/372752)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 3\
**Last updated:** [January 3, 2025, 7:30pm UTC](https://discuss.elastic.co/t/which-elastic-agent-integration-to-be-used-for-custom-logs/372752 "2025-01-03T19:30:34Z")

</div>

Hello, I am wanting to ingest logs but I am a bit confused on which integration to use:

---

## [Unable to install new version of agent (fleet managed)](https://discuss.elastic.co/t/unable-to-install-new-version-of-agent-fleet-managed/372742)

<div class="topic-metadata">

**Author:** [@jay29300](https://discuss.elastic.co/u/jay29300)\
**Replies:** 1\
**Last updated:** [January 3, 2025, 6:54pm UTC](https://discuss.elastic.co/t/unable-to-install-new-version-of-agent-fleet-managed/372742 "2025-01-03T18:54:29Z")

</div>

Hello. I try to install agent with fleet integration but i don't understand why it doesn't work. in fleet i have this script: $ProgressPreference = 'SilentlyContinue' Invoke-WebRequest -Uri http://srv-ansible:8088/end…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=116)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=118)
