# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=125 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 126 --- ## [Certificate error in logstash](https://discuss.elastic.co/t/certificate-error-in-logstash/371731)
**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\ **Replies:** 0\ **Last updated:** [December 10, 2024, 2:02am UTC](https://discuss.elastic.co/t/certificate-error-in-logstash/371731 "2024-12-10T02:02:09Z")
I have configured elastic and logstash couple of years ago and now I am getting certificate expired error. This is happening when logstash is trying to connect to elastic. The error seen in logsatsh is as below : \[202… --- ## [Issues with allocating kibana\_task\_manager index](https://discuss.elastic.co/t/issues-with-allocating-kibana-task-manager-index/371688)
**Author:** [@envycz](https://discuss.elastic.co/u/envycz)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 9:57pm UTC](https://discuss.elastic.co/t/issues-with-allocating-kibana-task-manager-index/371688 "2024-12-09T21:57:46Z")
Hello, I have multiple ECK clusters (3 node) deployed the same way on different Azure AKS clusters. On all of them there a reoccurring events of failed allocation of one specific index .kibana\_task\_manager\_8.14.1\_001. It… --- ## [Slow log doesn't capture](https://discuss.elastic.co/t/slow-log-doesnt-capture/371715)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 9:49pm UTC](https://discuss.elastic.co/t/slow-log-doesnt-capture/371715 "2024-12-09T21:49:23Z")
Hi I have noticed that most of the log words are not recorded despite the setting of precise parameters, have you met with such a situation. I need to know what type of request search takes more resources. PUT /prod\_in… --- ## [Fortinet FortiGate Firewall Logs Integration apply ILM 1 day](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration-apply-ilm-1-day/371724)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 9:13pm UTC](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration-apply-ilm-1-day/371724 "2024-12-09T21:13:37Z")
Hello I have installed the “Fortinet FortiGate Firewall Logs” integration. I did the respective configuration The datastream was created and I am receiving logs normally. My problem is that it took a poli… --- ## [Connection issues between Elastic Agent (Filebeat) and Logstash: connection reset by peer](https://discuss.elastic.co/t/connection-issues-between-elastic-agent-filebeat-and-logstash-connection-reset-by-peer/371536)
**Author:** [@philippsautter](https://discuss.elastic.co/u/philippsautter)\ **Replies:** 4\ **Last updated:** [December 9, 2024, 8:42pm UTC](https://discuss.elastic.co/t/connection-issues-between-elastic-agent-filebeat-and-logstash-connection-reset-by-peer/371536 "2024-12-09T20:42:16Z")
Hello everyone, I am currently facing an issue where I keep encountering errors in the connection between the Elastic Agents (Filebeat) and Logstash. There are always two related errors, and the target is always Logsta… --- ## [ML multimetric job](https://discuss.elastic.co/t/ml-multimetric-job/371387)
**Author:** [@Naina\_Sharma](https://discuss.elastic.co/u/Naina_Sharma)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 6:54pm UTC](https://discuss.elastic.co/t/ml-multimetric-job/371387 "2024-12-09T18:54:03Z")
Hi, I am creating a multi metric job- because I want to check if there are no application data sent. We send the application directly to Elasticsearch in form of Datastreams. The logs have different fields like applicat… --- ## [The number of queries exceeds 10000](https://discuss.elastic.co/t/the-number-of-queries-exceeds-10000/371660)
**Author:** [@wender](https://discuss.elastic.co/u/wender)\ **Replies:** 3\ **Last updated:** [December 9, 2024, 6:37pm UTC](https://discuss.elastic.co/t/the-number-of-queries-exceeds-10000/371660 "2024-12-09T18:37:33Z")
Hi I have a question about search, how to query over 10000 item, I know some api about search after, scroll, from size, but I want to achieve the ability to select the page I want after querying 10000 items, like this … --- ## [Problem with Prometheus Integration](https://discuss.elastic.co/t/problem-with-prometheus-integration/353876)
**Author:** [@Lukasz\_Skrzat](https://discuss.elastic.co/u/Lukasz_Skrzat)\ **Replies:** 0\ **Last updated:** [February 22, 2024, 11:10am UTC](https://discuss.elastic.co/t/problem-with-prometheus-integration/353876 "2024-02-22T11:10:05Z")
Hi I use Prometheus Integration in my ECK stack 8.12.1 version Using with spring-boot java application and working good. But now i add kotlin app and have little problem {"log.level":"error","@timestamp":"2024-02-22T… --- ## [How to migrate older logs stored in one elasticsearch cluster to another new one?](https://discuss.elastic.co/t/how-to-migrate-older-logs-stored-in-one-elasticsearch-cluster-to-another-new-one/360912)
**Author:** [@kriti\_dabas](https://discuss.elastic.co/u/kriti_dabas)\ **Replies:** 10\ **Last updated:** [December 9, 2024, 6:00pm UTC](https://discuss.elastic.co/t/how-to-migrate-older-logs-stored-in-one-elasticsearch-cluster-to-another-new-one/360912 "2024-12-09T18:00:14Z")
I don't have any paid features of elasticsearch. Older elasticsearch cluster version is 7.17 and the new one is 8.12. --- ## [Filebeat fails to start on Linux server](https://discuss.elastic.co/t/filebeat-fails-to-start-on-linux-server/370504)
**Author:** [@nitesh.srivastava](https://discuss.elastic.co/u/nitesh.srivastava)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 5:36pm UTC](https://discuss.elastic.co/t/filebeat-fails-to-start-on-linux-server/370504 "2024-12-09T17:36:22Z")
Hi, We are trying to install Filebeat 8.11 on a RHEL server. The installation was successful. However, the filebeat service fails to start. Can someone help me troubleshoot the issue. Any pointers will be greatly apprec… --- ## [Elastic Agent for Android devices](https://discuss.elastic.co/t/elastic-agent-for-android-devices/371716)
**Author:** [@Jesus\_Arellano](https://discuss.elastic.co/u/Jesus_Arellano)\ **Replies:** 0\ **Last updated:** [December 9, 2024, 5:00pm UTC](https://discuss.elastic.co/t/elastic-agent-for-android-devices/371716 "2024-12-09T17:00:11Z")
Hi everyone! A while ago, I posted here asking if there was an Elastic agent for Android devices. The idea was to have an agent similar to Metricbeat that could monitor CPU, RAM, processes, battery usage, etc., and send… --- ## [How to reset elasticsearch "elastic" user password?](https://discuss.elastic.co/t/how-to-reset-elasticsearch-elastic-user-password/371673)
**Author:** [@aalaskapedh](https://discuss.elastic.co/u/aalaskapedh)\ **Replies:** 5\ **Last updated:** [December 9, 2024, 3:52pm UTC](https://discuss.elastic.co/t/how-to-reset-elasticsearch-elastic-user-password/371673 "2024-12-09T15:52:57Z")
install-elasticsearch.sh sudo dnf install -y java-17-openjdk java-17-openjdk-devel sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch cat \<\< EOF \> /etc/yum.repos.d/elasticsearch.repo \[elasticsearch\] na… --- ## [Does the combination of lambda with a builder have known name as a Design Pattern?](https://discuss.elastic.co/t/does-the-combination-of-lambda-with-a-builder-have-known-name-as-a-design-pattern/371710)
**Author:** [@Hans\_Kruse](https://discuss.elastic.co/u/Hans_Kruse)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 3:28pm UTC](https://discuss.elastic.co/t/does-the-combination-of-lambda-with-a-builder-have-known-name-as-a-design-pattern/371710 "2024-12-09T15:28:50Z")
The elasticsearch-java client SDK uses the combination of a lambda with a builder a lot, e.g.: esClient.something(somethingBuilder -\> somethingBuilder .propertyA(valueA) .propertyB(valueB) )....; Is there an establish… --- ## [Correct way to search with a PIT using the elasticsearch-java](https://discuss.elastic.co/t/correct-way-to-search-with-a-pit-using-the-elasticsearch-java/371650)
**Author:** [@Hans\_Kruse](https://discuss.elastic.co/u/Hans_Kruse)\ **Replies:** 3\ **Last updated:** [December 9, 2024, 2:39pm UTC](https://discuss.elastic.co/t/correct-way-to-search-with-a-pit-using-the-elasticsearch-java/371650 "2024-12-09T14:39:27Z")
In the context of converting from the high level client to the newer elasticsearch-java SDK, how should I provide a PIT when searching with the elasticsearch-java client? I cannot find any guidance. I think I am doing it… --- ## [Elastic search nested aggrigation](https://discuss.elastic.co/t/elastic-search-nested-aggrigation/371709)
**Author:** [@Abhay\_Pratap\_Singh](https://discuss.elastic.co/u/Abhay_Pratap_Singh)\ **Replies:** 0\ **Last updated:** [December 9, 2024, 2:28pm UTC](https://discuss.elastic.co/t/elastic-search-nested-aggrigation/371709 "2024-12-09T14:28:23Z")
I am try to get final price of each product of orders bu not able to calculate. The Document sample : Order Index : ------------- { "order\_id": "123", "customer": "John Doe", "deliveryFee": 40, "items": \[ … --- ## [Unassigned shards node left no attempt](https://discuss.elastic.co/t/unassigned-shards-node-left-no-attempt/370423)
**Author:** [@elasticexpert2](https://discuss.elastic.co/u/elasticexpert2)\ **Replies:** 3\ **Last updated:** [December 9, 2024, 1:42pm UTC](https://discuss.elastic.co/t/unassigned-shards-node-left-no-attempt/370423 "2024-12-09T13:42:55Z")
Alot of times when node disconnect and reconnect, I left with 1 or 2 unassigned shards. When I use \_cluster/allocation/explain, I get reason: "NODE\_LEFT" and last\_allocation\_status: "no\_attempt". When doing GET \_interna… --- ## [Logstash File Naming Issue with Timezone (Attempting with Other Timezone)](https://discuss.elastic.co/t/logstash-file-naming-issue-with-timezone-attempting-with-other-timezone/371645)
**Author:** [@blitzkrieg330](https://discuss.elastic.co/u/blitzkrieg330)\ **Replies:** 3\ **Last updated:** [December 9, 2024, 11:34am UTC](https://discuss.elastic.co/t/logstash-file-naming-issue-with-timezone-attempting-with-other-timezone/371645 "2024-12-09T11:34:15Z")
Hello, I am using Logstash to process PAN-OS syslog data and I'm facing an issue with the file name timestamp. I want the output file names to be in the format YYYY-MM-DD with the time zone set to "Europe/Berlin" (Germa… --- ## [Remove index from alias using elasticsearch-java client SDK](https://discuss.elastic.co/t/remove-index-from-alias-using-elasticsearch-java-client-sdk/371605)
**Author:** [@Hans\_Kruse](https://discuss.elastic.co/u/Hans_Kruse)\ **Replies:** 4\ **Last updated:** [December 9, 2024, 11:00am UTC](https://discuss.elastic.co/t/remove-index-from-alias-using-elasticsearch-java-client-sdk/371605 "2024-12-09T11:00:11Z")
How do I remove indices from an alias using the elasticsearch-java client? The API does not seem to have a method to specify the alias. I cannot find an examples nor documentation. I am busy converting code from the o… --- ## [Kibana dashboard login with encrypted username and password](https://discuss.elastic.co/t/kibana-dashboard-login-with-encrypted-username-and-password/371526)
**Author:** [@amjad](https://discuss.elastic.co/u/amjad)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 10:38am UTC](https://discuss.elastic.co/t/kibana-dashboard-login-with-encrypted-username-and-password/371526 "2024-12-09T10:38:15Z")
Hi All, Hope all are doing well. we are using Kibana for visualizing of our usage data, we are sharing the dashboard embedded I frame URLs to another application team, these URLs are integrated at their end and users a… --- ## [Elastic Security Rule Error "failed to parse field \[\_index\]"](https://discuss.elastic.co/t/elastic-security-rule-error-failed-to-parse-field-index/371684)
**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\ **Replies:** 0\ **Last updated:** [December 9, 2024, 8:43am UTC](https://discuss.elastic.co/t/elastic-security-rule-error-failed-to-parse-field-index/371684 "2024-12-09T08:43:38Z")
I tried to set up a rule called “Excessive Firewall or ACL Denies from Single Source IP,” but it failed with the following error: failed to parse field \[\_index\] of type \[\_index\] in document with id ... Here are the det… --- ## [Can the depth be specified in the json of inputs](https://discuss.elastic.co/t/can-the-depth-be-specified-in-the-json-of-inputs/371679)
**Author:** [@debuggedme](https://discuss.elastic.co/u/debuggedme)\ **Replies:** 0\ **Last updated:** [December 9, 2024, 7:43am UTC](https://discuss.elastic.co/t/can-the-depth-be-specified-in-the-json-of-inputs/371679 "2024-12-09T07:43:27Z")
in the processors, the decode\_json\_fields supports specifying the depth. can the depth be specified in the json of inputs filebeat.inputs: - type: stdin json.message\_key: "" processors: - decode\_json\_fields: … --- ## [How to Set Up Rules and Policies for Alerts in Wazuh with Elasticsearch Integration?](https://discuss.elastic.co/t/how-to-set-up-rules-and-policies-for-alerts-in-wazuh-with-elasticsearch-integration/371676)
**Author:** [@214\_7B11](https://discuss.elastic.co/u/214_7B11)\ **Replies:** 0\ **Last updated:** [December 9, 2024, 6:51am UTC](https://discuss.elastic.co/t/how-to-set-up-rules-and-policies-for-alerts-in-wazuh-with-elasticsearch-integration/371676 "2024-12-09T06:51:59Z")
Hello, I’ve integrated my Wazuh deployment with Elasticsearch, and I’m looking to configure custom rules and policies for managing alerts. Could someone guide me through the process or point me to relevant documentation… --- ## [How to set default lifecycle deletion phase for filebeat & metricbeat post installation of ES node?](https://discuss.elastic.co/t/how-to-set-default-lifecycle-deletion-phase-for-filebeat-metricbeat-post-installation-of-es-node/371600)
**Author:** [@Vijaykumar\_sanganala](https://discuss.elastic.co/u/Vijaykumar_sanganala)\ **Replies:** 3\ **Last updated:** [December 9, 2024, 5:53am UTC](https://discuss.elastic.co/t/how-to-set-default-lifecycle-deletion-phase-for-filebeat-metricbeat-post-installation-of-es-node/371600 "2024-12-09T05:53:16Z")
Hi, I am newbee to ES, I wanted to set default lifecycle deletion phase for filebeat and metricbeat lifecycle policy. I could see that by default the host phase already enabled in kibana. Same way i want delete phase a… --- ## [Point in time Expiry!](https://discuss.elastic.co/t/point-in-time-expiry/371670)
**Author:** [@Mohammad\_Saif](https://discuss.elastic.co/u/Mohammad_Saif)\ **Replies:** 0\ **Last updated:** [December 9, 2024, 6:07am UTC](https://discuss.elastic.co/t/point-in-time-expiry/371670 "2024-12-09T06:07:14Z")
I created a point in time with expiry set as 15 min, and i have observed that if the query(this query is not extending the pit ,i.e. keep-alive ) using the pit is running close to the expiry, then this pit is not getting… --- ## [How to create Kibana panel with network metrics](https://discuss.elastic.co/t/how-to-create-kibana-panel-with-network-metrics/371453)
**Author:** [@Aditya\_Choudhari](https://discuss.elastic.co/u/Aditya_Choudhari)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 5:53am UTC](https://discuss.elastic.co/t/how-to-create-kibana-panel-with-network-metrics/371453 "2024-12-09T05:53:05Z")
Hi Team, We are working on creating Application Networking Kibana Panels based on the following raw data: # HELP http\_request\_duration\_seconds Request duration histogram # TYPE http\_request\_duration\_seconds histogra… --- ## [Filebeat is not attaching lifecycle policy to indexes created](https://discuss.elastic.co/t/filebeat-is-not-attaching-lifecycle-policy-to-indexes-created/371525)
**Author:** [@Saif\_Ali](https://discuss.elastic.co/u/Saif_Ali)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 5:46am UTC](https://discuss.elastic.co/t/filebeat-is-not-attaching-lifecycle-policy-to-indexes-created/371525 "2024-12-09T05:46:25Z")
I use filebeat as a docker container in our eks cluster, which travels through private DNS to our another eks cluster which hosts ECK stack, i have setup everything the indexes are created the logs are pushing , data str… --- ## [Finding similiar products by name](https://discuss.elastic.co/t/finding-similiar-products-by-name/371656)
**Author:** [@chung](https://discuss.elastic.co/u/chung)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 5:15am UTC](https://discuss.elastic.co/t/finding-similiar-products-by-name/371656 "2024-12-09T05:15:15Z")
Gven a list of products and each is assign to some categories( Mobile, Apple, iPhone) assigned to it. iPhone 16 Pro 6.3-inch display iPhone 16 Pro Max 6.9-inch display iPhone 16 6.1-inch display iPhone 16 Plus 6.7-inch … --- ## [Filebeat SSL enabled logs reporting ‘ tls: failed to send closeNotify alert (but connection was closed anyway)](https://discuss.elastic.co/t/filebeat-ssl-enabled-logs-reporting-tls-failed-to-send-closenotify-alert-but-connection-was-closed-anyway/371578)
**Author:** [@vikas271019](https://discuss.elastic.co/u/vikas271019)\ **Replies:** 0\ **Last updated:** [December 6, 2024, 9:03am UTC](https://discuss.elastic.co/t/filebeat-ssl-enabled-logs-reporting-tls-failed-to-send-closenotify-alert-but-connection-was-closed-anyway/371578 "2024-12-06T09:03:23Z")
please confirm the exact cause of so many occurrences of frequent disconnection occurring while filbeat trying to communicate with the logstash with the following exception. For every 5mins when beats trying to close th… --- ## [Specify timezone when trigger watchers](https://discuss.elastic.co/t/specify-timezone-when-trigger-watchers/215222)
**Author:** [@robinmhj](https://discuss.elastic.co/u/robinmhj)\ **Replies:** 3\ **Last updated:** [December 9, 2024, 12:05am UTC](https://discuss.elastic.co/t/specify-timezone-when-trigger-watchers/215222 "2024-12-09T00:05:08Z")
Hi there, I am using watcher to aggregate data, our elasticsearch instance is using utc time zone. Is it possible to specify the time based on timezone, the reason I am asking it because that there are day light saving… --- ## [How to Retrieve Events or Logs Associated with a Triggered Alert in Elastic?](https://discuss.elastic.co/t/how-to-retrieve-events-or-logs-associated-with-a-triggered-alert-in-elastic/371648)
**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\ **Replies:** 0\ **Last updated:** [December 8, 2024, 8:42am UTC](https://discuss.elastic.co/t/how-to-retrieve-events-or-logs-associated-with-a-triggered-alert-in-elastic/371648 "2024-12-08T08:42:58Z")
When an alert is triggered in Elastic, is there a way to directly use the alert ID to query all events or logs associated with that specific alert? I know it’s possible to query using the rule conditions, but this appro… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=124) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=126)