# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=123 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 124 --- ## [Elastic should offer more out of the box](https://discuss.elastic.co/t/elastic-should-offer-more-out-of-the-box/371926)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 4\ **Last updated:** [December 12, 2024, 7:42pm UTC](https://discuss.elastic.co/t/elastic-should-offer-more-out-of-the-box/371926 "2024-12-12T19:42:48Z")
Hello, How come Elastic doesn't target small use cases and build more out of box solutions and offer that as selling points. For example, Windows Event Logs are such a great resource of information. It can identify acc… --- ## [Enrichment Policy Execution getting stuck](https://discuss.elastic.co/t/enrichment-policy-execution-getting-stuck/371753)
**Author:** [@ankurl](https://discuss.elastic.co/u/ankurl)\ **Replies:** 0\ **Last updated:** [December 10, 2024, 11:54am UTC](https://discuss.elastic.co/t/enrichment-policy-execution-getting-stuck/371753 "2024-12-10T11:54:16Z")
Hi All, We are using enrichment policy to load data from one index to another and it works fine usually but some time our policy execution request is getting stuck without any response. Whenever it happens I check the … --- ## [Handling tags in elasticsearch documents and kibana visualisations](https://discuss.elastic.co/t/handling-tags-in-elasticsearch-documents-and-kibana-visualisations/371869)
**Author:** [@tommycahir](https://discuss.elastic.co/u/tommycahir)\ **Replies:** 10\ **Last updated:** [December 12, 2024, 5:30pm UTC](https://discuss.elastic.co/t/handling-tags-in-elasticsearch-documents-and-kibana-visualisations/371869 "2024-12-12T17:30:22Z")
Hey folks I have been asked to determine how we can leverage a set of tags that will be added to all documents being indexed in future and I am looking for guidance on best practices. Our clusters are primarily used as… --- ## [Current doc is in 8.17, but no tag release](https://discuss.elastic.co/t/current-doc-is-in-8-17-but-no-tag-release/371922)
**Author:** [@decima](https://discuss.elastic.co/u/decima)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 4:45pm UTC](https://discuss.elastic.co/t/current-doc-is-in-8-17-but-no-tag-release/371922 "2024-12-12T16:45:53Z")
I see that the "current" doc on elastic website is in 8.17 but can't see the release available on github --- ## [Add custom JavaScript to hide buttons in Kibana](https://discuss.elastic.co/t/add-custom-javascript-to-hide-buttons-in-kibana/363526)
**Author:** [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\ **Replies:** 4\ **Last updated:** [December 12, 2024, 4:12pm UTC](https://discuss.elastic.co/t/add-custom-javascript-to-hide-buttons-in-kibana/363526 "2024-12-12T16:12:54Z")
While creating a new Dashboard in Kibana, we can get below screen. I wish to hide the button i.e, "Controls" --- ## [Help pruning fields with "%{\[foo\]\[bar\]}" values](https://discuss.elastic.co/t/help-pruning-fields-with-foo-bar-values/371899)
**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\ **Replies:** 6\ **Last updated:** [December 12, 2024, 4:00pm UTC](https://discuss.elastic.co/t/help-pruning-fields-with-foo-bar-values/371899 "2024-12-12T16:00:05Z")
Hi there! I'm currently testing the latest PFelk with my firewall and I found a very specific situation which has only happened with a couple of log lines, but I would like to make it work. The problem is that due to so… --- ## [Roll over indices - mapping updates and reindexing requirements](https://discuss.elastic.co/t/roll-over-indices-mapping-updates-and-reindexing-requirements/371784)
**Author:** [@seshug](https://discuss.elastic.co/u/seshug)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 2:16pm UTC](https://discuss.elastic.co/t/roll-over-indices-mapping-updates-and-reindexing-requirements/371784 "2024-12-12T14:16:08Z")
Question, how do we better handle the rollover indices along with rollover alias when there is a requirement to update the mappings on the indices. We have a scenario where we implemented a rollover indices for one of t… --- ## [Create an ILM policy on basis of volumes](https://discuss.elastic.co/t/create-an-ilm-policy-on-basis-of-volumes/371312)
**Author:** [@vikascateina](https://discuss.elastic.co/u/vikascateina)\ **Replies:** 7\ **Last updated:** [December 12, 2024, 2:10pm UTC](https://discuss.elastic.co/t/create-an-ilm-policy-on-basis-of-volumes/371312 "2024-12-12T14:10:28Z")
I have implemented an ILM (Index Lifecycle Management) policy with a time-based strategy, where indices such as my-data-index-api-dev-\* are automatically deleted after 7 days. Currently, this setup deletes indices after … --- ## [Elastic Frozen Storage](https://discuss.elastic.co/t/elastic-frozen-storage/371903)
**Author:** [@DVD\_MNC](https://discuss.elastic.co/u/DVD_MNC)\ **Replies:** 2\ **Last updated:** [December 12, 2024, 2:07pm UTC](https://discuss.elastic.co/t/elastic-frozen-storage/371903 "2024-12-12T14:07:10Z")
Hello everyone, a question regarding elastic architecture; I have 100 GB per day ingestion. If I want to keep the data 300 days in a frozen node without any replication; how should I estimate the disk storage? I don't… --- ## [Virus Detection While Downloading Kibana 8.16.1 from Official Site](https://discuss.elastic.co/t/virus-detection-while-downloading-kibana-8-16-1-from-official-site/371846)
**Author:** [@Rajani\_Kumar](https://discuss.elastic.co/u/Rajani_Kumar)\ **Replies:** 3\ **Last updated:** [December 12, 2024, 1:59pm UTC](https://discuss.elastic.co/t/virus-detection-while-downloading-kibana-8-16-1-from-official-site/371846 "2024-12-12T13:59:34Z")
Hello, I am trying to download Kibana 8.16.1 from the official Elastic website, but my laptop is detecting a virus during the download process. Has anyone else encountered this issue or have suggestions on how to safely… --- ## [Trojan's detected by ESET when extracting the contents of Kibana 8.16.1 for Windows](https://discuss.elastic.co/t/trojans-detected-by-eset-when-extracting-the-contents-of-kibana-8-16-1-for-windows/371896)
**Author:** [@Tomaz\_Ogris](https://discuss.elastic.co/u/Tomaz_Ogris)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 1:58pm UTC](https://discuss.elastic.co/t/trojans-detected-by-eset-when-extracting-the-contents-of-kibana-8-16-1-for-windows/371896 "2024-12-12T13:58:54Z")
I have downloaded the latest Kibana for Windows from the official webpage: Download Kibana Free | Get Started Now | Elastic. When extracting the contents of the downloaded archive kibana-8.16.1-windows-x86\_64.zip, ESET … --- ## [Date filter can't access nested field from jdbc input](https://discuss.elastic.co/t/date-filter-cant-access-nested-field-from-jdbc-input/371905)
**Author:** [@Ruben\_Laguna](https://discuss.elastic.co/u/Ruben_Laguna)\ **Replies:** 3\ **Last updated:** [December 12, 2024, 1:47pm UTC](https://discuss.elastic.co/t/date-filter-cant-access-nested-field-from-jdbc-input/371905 "2024-12-12T13:47:54Z")
I have a input { jdbc { target =\> "DataRow" } } filter { mutate { add\_field =\> { "rubentest" =\> "%{\[DataRow\]\[created\_at\]}" } } date { match =\> \[ "rubentest", "ISO8601"\] target =\> "rubentest2"… --- ## [Pipeline error](https://discuss.elastic.co/t/pipeline-error/371916)
**Author:** [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\ **Replies:** 0\ **Last updated:** [December 12, 2024, 1:19pm UTC](https://discuss.elastic.co/t/pipeline-error/371916 "2024-12-12T13:19:05Z")
Hi all, I've configured a custom pipeline. When the pipeline fails documents are not inserted in the data stream. No errors. No errors even though I have inserted a Failure processor that sets an 'error' field. Pipel… --- ## [Calculating log size](https://discuss.elastic.co/t/calculating-log-size/371739)
**Author:** [@Snow](https://discuss.elastic.co/u/Snow)\ **Replies:** 5\ **Last updated:** [December 12, 2024, 12:56pm UTC](https://discuss.elastic.co/t/calculating-log-size/371739 "2024-12-12T12:56:39Z")
Hi, How to calculate size of logs generated by elastic defend integration in kibana portal? also need to calculate, sum of data collected by agents per log type. which field (es field name) will have size of event ? if… --- ## [Can't access Kibana from the broswer](https://discuss.elastic.co/t/cant-access-kibana-from-the-broswer/371914)
**Author:** [@khaled1](https://discuss.elastic.co/u/khaled1)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 12:04pm UTC](https://discuss.elastic.co/t/cant-access-kibana-from-the-broswer/371914 "2024-12-12T12:04:31Z")
I installed the Elasticsearch and kibana on Ubuntu 20 on the same machine, at first everything was working very well but after restarting the Ubuntu cant open the Kibana from the broswers in the same time to services is … --- ## [Issue while starting elastic search service](https://discuss.elastic.co/t/issue-while-starting-elastic-search-service/371558)
**Author:** [@Mandara](https://discuss.elastic.co/u/Mandara)\ **Replies:** 4\ **Last updated:** [December 12, 2024, 10:25am UTC](https://discuss.elastic.co/t/issue-while-starting-elastic-search-service/371558 "2024-12-12T10:25:45Z")
Hi All , I am getting below error while starting up elastic service . May I know how to fix this issue as I am new to Elasticsearch . systemd-entrypoint\[62417\]: CompileCommand: dontinline java/lang/invoke/MethodHan… --- ## [Logstash in docker plugin install error : G1ParScanThreadState::steal\_and\_trim\_queue](https://discuss.elastic.co/t/logstash-in-docker-plugin-install-error-g1parscanthreadstate-steal-and-trim-queue/371898)
**Author:** [@liubin95](https://discuss.elastic.co/u/liubin95)\ **Replies:** 0\ **Last updated:** [December 12, 2024, 8:31am UTC](https://discuss.elastic.co/t/logstash-in-docker-plugin-install-error-g1parscanthreadstate-steal-and-trim-queue/371898 "2024-12-12T08:31:01Z")
This is Dockerfile # # docker build-t logstash-sts:8.16.0 --platform linux/amd64 . # FROM logstash:8.16.0 ENV LS\_JAVA\_OPT "-Xms4g -Xmx4g" RUN logstash-plugin install logstash-input-sls ADD opt/logstash/config/logstas… --- ## [Elastic APM issue - co elastic.apm agent.impl.error.RedactedException: The stacktrace corresponds to where elastic APM detected the exception](https://discuss.elastic.co/t/elastic-apm-issue-co-elastic-apm-agent-impl-error-redactedexception-the-stacktrace-corresponds-to-where-elastic-apm-detected-the-exception/371845)
**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 7:09am UTC](https://discuss.elastic.co/t/elastic-apm-issue-co-elastic-apm-agent-impl-error-redactedexception-the-stacktrace-corresponds-to-where-elastic-apm-detected-the-exception/371845 "2024-12-12T07:09:16Z")
Hello Team, We have onboarded Java application which is spring boot and on React. Once application onboarded under APM - Errors - we see exception : Elastic APM issue - co elastic.apm agent.impl.error.RedactedExceptio… --- ## [Enrichement process not consistently enrching](https://discuss.elastic.co/t/enrichement-process-not-consistently-enrching/371270)
**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\ **Replies:** 16\ **Last updated:** [December 12, 2024, 7:04am UTC](https://discuss.elastic.co/t/enrichement-process-not-consistently-enrching/371270 "2024-12-12T07:04:04Z")
Enrichment is not consistent. I have source index from where i am enriching the a field on the basis of the destination ip. enrichemnt is working but sometime its not enriching the field even the same destination.ip is t… --- ## [Cost Optimization with Generative AI Using Elasticsearch](https://discuss.elastic.co/t/cost-optimization-with-generative-ai-using-elasticsearch/371890)
**Author:** [@yominosekai](https://discuss.elastic.co/u/yominosekai)\ **Replies:** 0\ **Last updated:** [December 12, 2024, 5:46am UTC](https://discuss.elastic.co/t/cost-optimization-with-generative-ai-using-elasticsearch/371890 "2024-12-12T05:46:04Z")
Hello Elastic Community, I am conducting research on cost optimization strategies for generative AI systems. Specifically, I am exploring how Elasticsearch can be used to store user queries, model responses, and their v… --- ## [We need to bring shards size in Grafana via exporter](https://discuss.elastic.co/t/we-need-to-bring-shards-size-in-grafana-via-exporter/371888)
**Author:** [@MaryES](https://discuss.elastic.co/u/MaryES)\ **Replies:** 0\ **Last updated:** [December 12, 2024, 5:27am UTC](https://discuss.elastic.co/t/we-need-to-bring-shards-size-in-grafana-via-exporter/371888 "2024-12-12T05:27:19Z")
Hi We need to check the size of shards from Grafana , we need to get the metrics via exporter. Is there any way to get the data? --- ## [Swapping out nodes in the cluster](https://discuss.elastic.co/t/swapping-out-nodes-in-the-cluster/371882)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 4:49am UTC](https://discuss.elastic.co/t/swapping-out-nodes-in-the-cluster/371882 "2024-12-12T04:49:46Z")
Hello, I am swapping out some old nodes in Elasticsearch 5.6.3 cluster with new ones. I don’t have a lot of indices/shards in it at the moment. If were to stop the old node, and start the new node (provided I don’t hav… --- ## [Enrich Index Auto updation](https://discuss.elastic.co/t/enrich-index-auto-updation/371885)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 0\ **Last updated:** [December 12, 2024, 4:45am UTC](https://discuss.elastic.co/t/enrich-index-auto-updation/371885 "2024-12-12T04:45:50Z")
Hi Team, I am having two indexes one is orders index(Stores Orders information) and other one is items index(Store the information related to each order with list of items) and i wanted to enrich my orders index with th… --- ## [Docker.elastic.co/beats/elastic-agent:8.16.1 wouldn't listen on UDP 9528](https://discuss.elastic.co/t/docker-elastic-co-beats-elastic-agent-8-16-1-wouldnt-listen-on-udp-9528/371881)
**Author:** [@AlexKulikovsky](https://discuss.elastic.co/u/AlexKulikovsky)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 2:38am UTC](https://discuss.elastic.co/t/docker-elastic-co-beats-elastic-agent-8-16-1-wouldnt-listen-on-udp-9528/371881 "2024-12-12T02:38:47Z")
Hi Trying to enable the WatchGuard Firebox integration at the Elastic Cloud. The docker Agent is connected to Fleet, but doesn't start listening on port 9528/udp. I am getting the following error in the container's log… --- ## [Elastic tools won't connect in simple docker-compose config](https://discuss.elastic.co/t/elastic-tools-wont-connect-in-simple-docker-compose-config/371783)
**Author:** [@csteffen](https://discuss.elastic.co/u/csteffen)\ **Replies:** 7\ **Last updated:** [December 12, 2024, 2:17am UTC](https://discuss.elastic.co/t/elastic-tools-wont-connect-in-simple-docker-compose-config/371783 "2024-12-12T02:17:07Z")
I'm using docker compose to put together some containers running code that my team has built, plus rabbitmq, and also an elk stack to monitor the rabbitmq logs and queues. I'm attempting to follow the configuration in: … --- ## [How to increase the archive of .monitoring-es-6 indices?](https://discuss.elastic.co/t/how-to-increase-the-archive-of-monitoring-es-6-indices/371879)
**Author:** [@jijihyo](https://discuss.elastic.co/u/jijihyo)\ **Replies:** 0\ **Last updated:** [December 12, 2024, 12:43am UTC](https://discuss.elastic.co/t/how-to-increase-the-archive-of-monitoring-es-6-indices/371879 "2024-12-12T00:43:02Z")
We are currently using versions 6.5 of elasticsearch and kibana. Since I need to monitor the server, I want to set the storage period of monitoring indices to 30 days. \[ kibana dev-tools\] PUT \_cluster/settings { "per… --- ## [Using Relative Time in the rule to create alerts](https://discuss.elastic.co/t/using-relative-time-in-the-rule-to-create-alerts/371877)
**Author:** [@Aryaman\_Singh](https://discuss.elastic.co/u/Aryaman_Singh)\ **Replies:** 0\ **Last updated:** [December 12, 2024, 12:22am UTC](https://discuss.elastic.co/t/using-relative-time-in-the-rule-to-create-alerts/371877 "2024-12-12T00:22:03Z")
Hi, I wanted to understand a way where We can use relative timestamps inside a rule to generate alerts in respect to the time we have received a certain kind of log. Not generate an alert for the logs whose vulnerabil… --- ## [Nested Fields in an Index](https://discuss.elastic.co/t/nested-fields-in-an-index/371311)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 8\ **Last updated:** [December 11, 2024, 11:39pm UTC](https://discuss.elastic.co/t/nested-fields-in-an-index/371311 "2024-12-11T23:39:04Z")
We have an Index with a Nested field. Most of the documents will have their nested field null but some will have it populated. What would the most efficient way of querying such index so that if there are no docs with n… --- ## [Elastic Alerting + Ansible Tower](https://discuss.elastic.co/t/elastic-alerting-ansible-tower/371865)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [December 11, 2024, 8:09pm UTC](https://discuss.elastic.co/t/elastic-alerting-ansible-tower/371865 "2024-12-11T20:09:16Z")
Is there a way to send an alert to Ansible Tower which will trigger an ansible playbook? I was considering the webhook connector but it appears that Ansible Tower currently provides webhook integration with GitHub and G… --- ## [Compile Error When Watcher Defination](https://discuss.elastic.co/t/compile-error-when-watcher-defination/371782)
**Author:** [@Mevlut\_Soner](https://discuss.elastic.co/u/Mevlut_Soner)\ **Replies:** 3\ **Last updated:** [December 11, 2024, 7:50pm UTC](https://discuss.elastic.co/t/compile-error-when-watcher-defination/371782 "2024-12-11T19:50:16Z")
Hello, When i want to create below watcher definition, i get compile error. Is there any idea why i get compile error and how can i fix it ? { "trigger": { "schedule": { "interval": "10m" } }, "inpu… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=122) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=124)