# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=120

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 121

---

## [Merge 2 indexes live](https://discuss.elastic.co/t/merge-2-indexes-live/372319)

<div class="topic-metadata">

**Author:** [@vahagg1](https://discuss.elastic.co/u/vahagg1)\
**Replies:** 0\
**Last updated:** [December 23, 2024, 10:43am UTC](https://discuss.elastic.co/t/merge-2-indexes-live/372319 "2024-12-23T10:43:48Z")

</div>

Hi I have 2 indexes with following names Cloudfront cfID Status Domain and .... ExtraLoggingCloudfront cfID extraHeaderCheck1 extraHeaderCheck2 In the 2 indexes i have different fields but there is 1 field whic…

---

## [Export Dataview](https://discuss.elastic.co/t/export-dataview/371944)

<div class="topic-metadata">

**Author:** [@madhavsankarg](https://discuss.elastic.co/u/madhavsankarg)\
**Replies:** 4\
**Last updated:** [December 23, 2024, 10:00am UTC](https://discuss.elastic.co/t/export-dataview/371944 "2024-12-23T10:00:34Z")

</div>

When I export data view from Kibana through Saved Objects the fields are not getting exported. When I import it I am not able to see the fields. Does anyone know why its happening like this? Kibana Version - 8.14.1

---

## [Removing fields in a Index template](https://discuss.elastic.co/t/removing-fields-in-a-index-template/372317)

<div class="topic-metadata">

**Author:** [@madhavsankarg](https://discuss.elastic.co/u/madhavsankarg)\
**Replies:** 0\
**Last updated:** [December 23, 2024, 9:50am UTC](https://discuss.elastic.co/t/removing-fields-in-a-index-template/372317 "2024-12-23T09:50:37Z")

</div>

When added new field through Kibana in the Index Template I opened Advanced Options in Mappings after that extra fields (Highlighted in the Image) came in the Index Template after adding the fields. If I remove th…

---

## [Ingesting AWS Glue Metrics into Elasticsearch](https://discuss.elastic.co/t/ingesting-aws-glue-metrics-into-elasticsearch/371629)

<div class="topic-metadata">

**Author:** [@mkirankumar](https://discuss.elastic.co/u/mkirankumar)\
**Replies:** 1\
**Last updated:** [December 23, 2024, 9:44am UTC](https://discuss.elastic.co/t/ingesting-aws-glue-metrics-into-elasticsearch/371629 "2024-12-23T09:44:52Z")

</div>

Hello Community, I have an Elastic integration with AWS, where the Elastic Agent (running on EC2) fetches metrics from AWS CloudWatch and stores them in an index. Metrics for various resources (EC2, RDS, DynamoDB, ECS, …

---

## [Unable to Map Float Fields to Double Using Dynamic Templates in Elasticsearch](https://discuss.elastic.co/t/unable-to-map-float-fields-to-double-using-dynamic-templates-in-elasticsearch/372316)

<div class="topic-metadata">

**Author:** [@SalehEska](https://discuss.elastic.co/u/SalehEska)\
**Replies:** 0\
**Last updated:** [December 23, 2024, 9:14am UTC](https://discuss.elastic.co/t/unable-to-map-float-fields-to-double-using-dynamic-templates-in-elasticsearch/372316 "2024-12-23T09:14:32Z")

</div>

When attempting to map float fields to double using dynamic templates in Elasticsearch, I've encountered an issue where the template does not work when match\_mapping\_type is set to float. While the template is successful…

---

## [Need Guidance: Setting Up Elasticsearch Cluster and Integrating with Spring Boot Application](https://discuss.elastic.co/t/need-guidance-setting-up-elasticsearch-cluster-and-integrating-with-spring-boot-application/372285)

<div class="topic-metadata">

**Author:** [@Zikou](https://discuss.elastic.co/u/Zikou)\
**Replies:** 3\
**Last updated:** [December 22, 2024, 5:03pm UTC](https://discuss.elastic.co/t/need-guidance-setting-up-elasticsearch-cluster-and-integrating-with-spring-boot-application/372285 "2024-12-22T17:03:27Z")

</div>

Hi everyone, I'm a DevOps intern, and my team is planning to integrate Elasticsearch with our application (built using Spring Boot). I've been tasked with setting up an Elasticsearch cluster and configuring it for the i…

---

## [How to configure filebeat to truly convert number (long) to string?](https://discuss.elastic.co/t/how-to-configure-filebeat-to-truly-convert-number-long-to-string/372250)

<div class="topic-metadata">

**Author:** [@helloworld4](https://discuss.elastic.co/u/helloworld4)\
**Replies:** 6\
**Last updated:** [December 22, 2024, 3:18pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-to-truly-convert-number-long-to-string/372250 "2024-12-22T15:18:08Z")

</div>

I need to configure filebeat to write a particular field as a string, even when it's a number. I'm trying to use the "convert" processor but it doesn't seem to be doing the job. I am not 100% sure I've added the convert …

---

## [How to have graphs overlapping in vega-lite](https://discuss.elastic.co/t/how-to-have-graphs-overlapping-in-vega-lite/372304)

<div class="topic-metadata">

**Author:** [@Meht-evaS](https://discuss.elastic.co/u/Meht-evaS)\
**Replies:** 0\
**Last updated:** [December 22, 2024, 3:11pm UTC](https://discuss.elastic.co/t/how-to-have-graphs-overlapping-in-vega-lite/372304 "2024-12-22T15:11:58Z")

</div>

Hi, I'm trying to create a single chart on Kibana via Vega visualization that allows me to show two overlapping charts. In input I take logs that come to me from wazuh in which the date (date\_id) is reported in the form …

---

## [Decryption of 3rd Party Logs Using Filebeat and Logstash](https://discuss.elastic.co/t/decryption-of-3rd-party-logs-using-filebeat-and-logstash/372302)

<div class="topic-metadata">

**Author:** [@Almog\_Salem](https://discuss.elastic.co/u/Almog_Salem)\
**Replies:** 1\
**Last updated:** [December 22, 2024, 2:17pm UTC](https://discuss.elastic.co/t/decryption-of-3rd-party-logs-using-filebeat-and-logstash/372302 "2024-12-22T14:17:28Z")

</div>

Hi, I need some help with configuration and design. I’ve created a Python application that integrates with a specific source and downloads files that do not change. These files are saved on my local Ubuntu machine in a…

---

## [Py Program to query using metadata. Error](https://discuss.elastic.co/t/py-program-to-query-using-metadata-error/372295)

<div class="topic-metadata">

**Author:** [@Afraim\_Joseph](https://discuss.elastic.co/u/Afraim_Joseph)\
**Replies:** 1\
**Last updated:** [December 21, 2024, 8:24pm UTC](https://discuss.elastic.co/t/py-program-to-query-using-metadata-error/372295 "2024-12-21T20:24:24Z")

</div>

Hi guys, i am trying to make a very simple program to query my index through python. this is the code query = { "query": { "bool": { "must": \[ {"match": {"metad…

---

## [Can not deploy ELSER to my ML cluster](https://discuss.elastic.co/t/can-not-deploy-elser-to-my-ml-cluster/372284)

<div class="topic-metadata">

**Author:** [@Ali\_B](https://discuss.elastic.co/u/Ali_B)\
**Replies:** 0\
**Last updated:** [December 20, 2024, 6:17pm UTC](https://discuss.elastic.co/t/can-not-deploy-elser-to-my-ml-cluster/372284 "2024-12-20T18:17:56Z")

</div>

I am trying to add ELSER to my existing ES index. When I run the below code following the docs: # Creates the ELSER model configuration. Automatically downloads the model if it doesn't exist. res = client.ml.put…

---

## [Importing Hugging Face Model into my Desktop](https://discuss.elastic.co/t/importing-hugging-face-model-into-my-desktop/372173)

<div class="topic-metadata">

**Author:** [@samer\_saleh](https://discuss.elastic.co/u/samer_saleh)\
**Replies:** 1\
**Last updated:** [December 20, 2024, 5:55pm UTC](https://discuss.elastic.co/t/importing-hugging-face-model-into-my-desktop/372173 "2024-12-20T17:55:29Z")

</div>

Hi All, Im trying to follow the code for chunking and indexing large documents . My problem right now is that I dont know how to import the semantic\_search model as specified in the ingest pipeline processor : { …

---

## [Indexing is getting slower and slower as it progresses](https://discuss.elastic.co/t/indexing-is-getting-slower-and-slower-as-it-progresses/371802)

<div class="topic-metadata">

**Author:** [@Raja95](https://discuss.elastic.co/u/Raja95)\
**Replies:** 30\
**Last updated:** [December 20, 2024, 4:25pm UTC](https://discuss.elastic.co/t/indexing-is-getting-slower-and-slower-as-it-progresses/371802 "2024-12-20T16:25:33Z")

</div>

I am trying to index 114mil rows of data with 150mil attachments from a PeopleSoft application to ES 6.1 (due to compatibility with PeopleSoft, can't upgrade to higher versions). Elastic Configuration: A single node (C…

---

## [Enrich Processor Usability](https://discuss.elastic.co/t/enrich-processor-usability/372279)

<div class="topic-metadata">

**Author:** [@jmello31](https://discuss.elastic.co/u/jmello31)\
**Replies:** 0\
**Last updated:** [December 20, 2024, 3:49pm UTC](https://discuss.elastic.co/t/enrich-processor-usability/372279 "2024-12-20T15:49:27Z")

</div>

Hello! I am dealing with a large data set that is configured with multiple data-streams and 0 concrete indices that I use. I am trying to use an enrich processor to grab information residing in some of the logs in one da…

---

## [After upgrading Elasticsearch from 5.3 to 5.6, do I need to reindex for schema updates](https://discuss.elastic.co/t/after-upgrading-elasticsearch-from-5-3-to-5-6-do-i-need-to-reindex-for-schema-updates/372267)

<div class="topic-metadata">

**Author:** [@Maelito](https://discuss.elastic.co/u/Maelito)\
**Replies:** 3\
**Last updated:** [December 20, 2024, 3:36pm UTC](https://discuss.elastic.co/t/after-upgrading-elasticsearch-from-5-3-to-5-6-do-i-need-to-reindex-for-schema-updates/372267 "2024-12-20T15:36:15Z")

</div>

Hello, I recently upgraded my Elasticsearch cluster from version 5.3 to 5.6. I’m now updating my schema to address deprecations introduced in 5.6. Below is the diff of the schema updates I intend to make: { "properti…

---

## [Elastic Agent is not getting configured properly](https://discuss.elastic.co/t/elastic-agent-is-not-getting-configured-properly/372034)

<div class="topic-metadata">

**Author:** [@ErGeek](https://discuss.elastic.co/u/ErGeek)\
**Replies:** 5\
**Last updated:** [December 20, 2024, 4:47am UTC](https://discuss.elastic.co/t/elastic-agent-is-not-getting-configured-properly/372034 "2024-12-20T04:47:27Z")

</div>

Hi Team, We have installed a standalone Elastic Agent on our machine to capture logs from the ForgeRock API. The logs are expected to be sent to a Kafka topic. While the Elastic Agent installation was successful , these…

---

## [Filebeat delay sending event and wait for kubernetes api data to be available on first time start up](https://discuss.elastic.co/t/filebeat-delay-sending-event-and-wait-for-kubernetes-api-data-to-be-available-on-first-time-start-up/372179)

<div class="topic-metadata">

**Author:** [@Shaishav](https://discuss.elastic.co/u/Shaishav)\
**Replies:** 1\
**Last updated:** [December 20, 2024, 4:22am UTC](https://discuss.elastic.co/t/filebeat-delay-sending-event-and-wait-for-kubernetes-api-data-to-be-available-on-first-time-start-up/372179 "2024-12-20T04:22:35Z")

</div>

Filebeat Version: 8.16.2 We have currently configured filebeat to read logs from a custom location and enrich it with kubernetes metadata Repro: Create log files that would be pushed out Start filebeat (Start after l…

---

## [Elasticsearch Audit Logs are Incomplete and lacks important information](https://discuss.elastic.co/t/elasticsearch-audit-logs-are-incomplete-and-lacks-important-information/372189)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 1\
**Last updated:** [December 20, 2024, 4:21am UTC](https://discuss.elastic.co/t/elasticsearch-audit-logs-are-incomplete-and-lacks-important-information/372189 "2024-12-20T04:21:23Z")

</div>

Hello, We recently configured the Audit logs on our on-prem cluster and configured an Elastic Agent to collect it, the goal is to build some custom dashboards and maybe some security rules on this data. While doing som…

---

## [How to Handle "null" Values in Visualizations in Kibana 8?](https://discuss.elastic.co/t/how-to-handle-null-values-in-visualizations-in-kibana-8/372006)

<div class="topic-metadata">

**Author:** [@ms.zerone](https://discuss.elastic.co/u/ms.zerone)\
**Replies:** 1\
**Last updated:** [December 19, 2024, 7:45pm UTC](https://discuss.elastic.co/t/how-to-handle-null-values-in-visualizations-in-kibana-8/372006 "2024-12-19T19:45:04Z")

</div>

Hi everyone, I’m facing an issue in Kibana 8 related to how fields with no data are handled in visualizations (e.g., Enhanced Table). In Kibana 7, when a field had no data, it would return 0 if the field was set to num…

---

## [Rolling Restart and Tasks](https://discuss.elastic.co/t/rolling-restart-and-tasks/372242)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 0\
**Last updated:** [December 19, 2024, 8:04pm UTC](https://discuss.elastic.co/t/rolling-restart-and-tasks/372242 "2024-12-19T20:04:24Z")

</div>

Hello, I was wondering, if a I have ongoing tasks and I decide to do a rolling restart on the nodes in our elastic cluster. Would those tasks be dropped or continue back up to where they last left off?

---

## [Migrating from .net Nest client to v8.\* Elastic.Clients.Elasticsearch .net client](https://discuss.elastic.co/t/migrating-from-net-nest-client-to-v8-elastic-clients-elasticsearch-net-client/371465)

<div class="topic-metadata">

**Author:** [@utkarsh-007](https://discuss.elastic.co/u/utkarsh-007)\
**Replies:** 0\
**Last updated:** [December 4, 2024, 12:59pm UTC](https://discuss.elastic.co/t/migrating-from-net-nest-client-to-v8-elastic-clients-elasticsearch-net-client/371465 "2024-12-04T12:59:38Z")

</div>

I’m migrating an API codebase from the .net v7.\* Nest client to the newer v8 .net client The API codebase using the Nest client makes frequent use of QueryDescriptors with logic operators that derive QueryContainer obje…

---

## [The indexs doesn't shown in kibana](https://discuss.elastic.co/t/the-indexs-doesnt-shown-in-kibana/372239)

<div class="topic-metadata">

**Author:** [@Yasmine\_Ghorbel](https://discuss.elastic.co/u/Yasmine_Ghorbel)\
**Replies:** 1\
**Last updated:** [December 19, 2024, 5:07pm UTC](https://discuss.elastic.co/t/the-indexs-doesnt-shown-in-kibana/372239 "2024-12-19T17:07:04Z")

</div>

input { gelf { port =\> 12201 } } filter { mutate { add\_field =\> { "environment" =\> "${ENVIRONMENT}" } add\_tag =\> \[ "%{tag}" \] } if "backend" in \[tags\] { json { …

---

## [ERROR: Elasticsearch died while starting up, with exit code 78](https://discuss.elastic.co/t/error-elasticsearch-died-while-starting-up-with-exit-code-78/365295)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [December 19, 2024, 3:33pm UTC](https://discuss.elastic.co/t/error-elasticsearch-died-while-starting-up-with-exit-code-78/365295 "2024-12-19T15:33:36Z")

</div>

hello world :wink: i'm trying to start the elasticsearch, yet running into the following error: elk1-es01-1 | {"@timestamp":"2024-08-21T15:06:11.078Z", "log.level": "INFO", "message":"Native controller process has sto…

---

## [Clickhouse](https://discuss.elastic.co/t/clickhouse/372227)

<div class="topic-metadata">

**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\
**Replies:** 0\
**Last updated:** [December 19, 2024, 2:46pm UTC](https://discuss.elastic.co/t/clickhouse/372227 "2024-12-19T14:46:41Z")

</div>

Have anyone been able to monitor clickhouse? perhaps an input in logstash to query the state?

---

## [Can I get the datepicker parameters to use in a KQL query in Kibana](https://discuss.elastic.co/t/can-i-get-the-datepicker-parameters-to-use-in-a-kql-query-in-kibana/372224)

<div class="topic-metadata">

**Author:** [@bjornbear](https://discuss.elastic.co/u/bjornbear)\
**Replies:** 0\
**Last updated:** [December 19, 2024, 1:41pm UTC](https://discuss.elastic.co/t/can-i-get-the-datepicker-parameters-to-use-in-a-kql-query-in-kibana/372224 "2024-12-19T13:41:43Z")

</div>

Is it possible yet to use the Datepicker parameters in a KQL or filter since I have several time fields that I would want to link to the selected time range.

---

## [API key definition](https://discuss.elastic.co/t/api-key-definition/372212)

<div class="topic-metadata">

**Author:** [@Joey\_Visbeen](https://discuss.elastic.co/u/Joey_Visbeen)\
**Replies:** 0\
**Last updated:** [December 19, 2024, 9:46am UTC](https://discuss.elastic.co/t/api-key-definition/372212 "2024-12-19T09:46:04Z")

</div>

I was hoping to start this discussion with somebody from Elastic. Currently, the team I work with have been actively using the REST API's from Kibana and Elasticsearch allot, but have come across the difficulty of settin…

---

## [Elastic 8.17 and \_source](https://discuss.elastic.co/t/elastic-8-17-and-source/372181)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [December 19, 2024, 1:13pm UTC](https://discuss.elastic.co/t/elastic-8-17-and-source/372181 "2024-12-19T13:13:20Z")

</div>

I was reading through 8.17.0 release note. first thing it says \_source is no longer available without subscription. is this means if you create index it won't have \_source and this means not able to update, update\_by\_q…

---

## [Elasticsearch Configuration for 220 Million Records (400 GB Data)](https://discuss.elastic.co/t/elasticsearch-configuration-for-220-million-records-400-gb-data/372148)

<div class="topic-metadata">

**Author:** [@dhanunjayavarma](https://discuss.elastic.co/u/dhanunjayavarma)\
**Replies:** 3\
**Last updated:** [December 19, 2024, 12:18pm UTC](https://discuss.elastic.co/t/elasticsearch-configuration-for-220-million-records-400-gb-data/372148 "2024-12-19T12:18:07Z")

</div>

Hi, I am planning to develop a full-text search engine using Elasticsearch 8.x to handle approximately 220 million records, totaling around 400 GB of data. Each document consists of a mix of full-text fields and filter …

---

## [Parsing text and object](https://discuss.elastic.co/t/parsing-text-and-object/372219)

<div class="topic-metadata">

**Author:** [@vahagg1](https://discuss.elastic.co/u/vahagg1)\
**Replies:** 3\
**Last updated:** [December 19, 2024, 11:11am UTC](https://discuss.elastic.co/t/parsing-text-and-object/372219 "2024-12-19T11:11:05Z")

</div>

The problem which i face is like this: I have a single field like message which i want to parse it with json parser but sometimes the value which come to it is text and sometimes is json, I try to use regex like "^{.}\[\\…

---

## [Migrating from Elastic NEST v7 to .NET Elastic Client v8: Bulk indexing issue](https://discuss.elastic.co/t/migrating-from-elastic-nest-v7-to-net-elastic-client-v8-bulk-indexing-issue/371929)

<div class="topic-metadata">

**Author:** [@trubs](https://discuss.elastic.co/u/trubs)\
**Replies:** 4\
**Last updated:** [December 19, 2024, 8:59am UTC](https://discuss.elastic.co/t/migrating-from-elastic-nest-v7-to-net-elastic-client-v8-bulk-indexing-issue/371929 "2024-12-19T08:59:21Z")

</div>

I'm new to web development and working with Elastic, and I'm currently migrating a project from Elastic NEST v7 to the .NET Elastic Client v8. I've encountered an issue with bulk indexing in one of the projects. What wo…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=119)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=121)
