# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=128

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 129

---

## [Unable to get kubernetes metrics using metric beat in kibana](https://discuss.elastic.co/t/unable-to-get-kubernetes-metrics-using-metric-beat-in-kibana/371411)

<div class="topic-metadata">

**Author:** [@Sam96](https://discuss.elastic.co/u/Sam96)\
**Replies:** 1\
**Last updated:** [December 3, 2024, 7:44pm UTC](https://discuss.elastic.co/t/unable-to-get-kubernetes-metrics-using-metric-beat-in-kibana/371411 "2024-12-03T19:44:59Z")

</div>

I have installed the Elasticsearch(8.16) and kibana(8.16) using RPMs in Centos vm.Also installed Metricbeats (8.16) in the centos vm using RPMS. In the same vm i have kubernetes cluster and our application is running in…

---

## [Logstash - Slow data processing](https://discuss.elastic.co/t/logstash-slow-data-processing/371115)

<div class="topic-metadata">

**Author:** [@Harsh08](https://discuss.elastic.co/u/Harsh08)\
**Replies:** 19\
**Last updated:** [December 3, 2024, 3:02pm UTC](https://discuss.elastic.co/t/logstash-slow-data-processing/371115 "2024-12-03T15:02:52Z")

</div>

I am using Filebeat and Logstash to set up a logging system for handling logs from around 35 servers. Currently, I have large volume of logs, and Logstash is not able to process the data quickly enough. As a result, the…

---

## [Fleet error updating policy settings](https://discuss.elastic.co/t/fleet-error-updating-policy-settings/371332)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 1\
**Last updated:** [December 3, 2024, 11:50am UTC](https://discuss.elastic.co/t/fleet-error-updating-policy-settings/371332 "2024-12-03T11:50:17Z")

</div>

I'm getting this error after 8.16.0 in Fleet when changing anything on the Settings tab: \[request body.monitoring\_http.enabled\]: expected value of type \[boolean\] but got \[undefined\] It looks like "monitoring\_http" is…

---

## [Stream Log , log details issue since upgrade to 8.14.x - Error while searching the log entry](https://discuss.elastic.co/t/stream-log-log-details-issue-since-upgrade-to-8-14-x-error-while-searching-the-log-entry/361384)

<div class="topic-metadata">

**Author:** [@MathieuMRI](https://discuss.elastic.co/u/MathieuMRI)\
**Replies:** 6\
**Last updated:** [December 3, 2024, 1:50pm UTC](https://discuss.elastic.co/t/stream-log-log-details-issue-since-upgrade-to-8-14-x-error-while-searching-the-log-entry/361384 "2024-12-03T13:50:29Z")

</div>

Hello, I'm having issue with an ELK stack, ever since upgrading it to 8.14.1. In Kibana, in the Observability \> Stream Logs \> Stream logs, when trying to see the details of a log entry, I'm getting the following error…

---

## [Amazon linux 2023 log issue](https://discuss.elastic.co/t/amazon-linux-2023-log-issue/371360)

<div class="topic-metadata">

**Author:** [@rahulm](https://discuss.elastic.co/u/rahulm)\
**Replies:** 1\
**Last updated:** [December 3, 2024, 12:52pm UTC](https://discuss.elastic.co/t/amazon-linux-2023-log-issue/371360 "2024-12-03T12:52:05Z")

</div>

I have two agents that are Amazon linux 2023. since AL2023 stopped traditional logging and uses journald for a centralized logging, their logs are not being populated into siem. what is a better option? to install rsy…

---

## [Composite aggregation total bucket count after bucket selector](https://discuss.elastic.co/t/composite-aggregation-total-bucket-count-after-bucket-selector/364652)

<div class="topic-metadata">

**Author:** [@Senol\_Kurt](https://discuss.elastic.co/u/Senol_Kurt)\
**Replies:** 1\
**Last updated:** [December 3, 2024, 12:29pm UTC](https://discuss.elastic.co/t/composite-aggregation-total-bucket-count-after-bucket-selector/364652 "2024-12-03T12:29:50Z")

</div>

Hi, Elasticsearch: 8.3.3 Below i use composite aggregation, then filtered aggregation and finally bucket selector. It returns all the buckets in a paginated way. But what I need is total count of buckets, not the bucke…

---

## [Unable to get the \[Metricbeat Kubernetes\] Overview Data in Kibana](https://discuss.elastic.co/t/unable-to-get-the-metricbeat-kubernetes-overview-data-in-kibana/371379)

<div class="topic-metadata">

**Author:** [@Sam96](https://discuss.elastic.co/u/Sam96)\
**Replies:** 0\
**Last updated:** [December 3, 2024, 11:46am UTC](https://discuss.elastic.co/t/unable-to-get-the-metricbeat-kubernetes-overview-data-in-kibana/371379 "2024-12-03T11:46:10Z")

</div>

I have installed the Elasticsearch(8.16) and kibana(8.16) using RPMs in Centos vm.Also installed Metricbeats (8.16) in the centos vm using RPMS. In the same vm i have kubernetes cluster and our application is running in…

---

## [Triggering external API from Kibana APM dashboards](https://discuss.elastic.co/t/triggering-external-api-from-kibana-apm-dashboards/371374)

<div class="topic-metadata">

**Author:** [@mat-bro](https://discuss.elastic.co/u/mat-bro)\
**Replies:** 0\
**Last updated:** [December 3, 2024, 11:22am UTC](https://discuss.elastic.co/t/triggering-external-api-from-kibana-apm-dashboards/371374 "2024-12-03T11:22:34Z")

</div>

Hi, I have a managed ELK cluster on AWS with a Platinum license (version 8.13.4). I wanted to know if it would be possible to integrate into the ‘APM/Services//Errors/’ boards a button that calls an external web API. T…

---

## [Creating signal drop down using vega chart in kibana](https://discuss.elastic.co/t/creating-signal-drop-down-using-vega-chart-in-kibana/371372)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 0\
**Last updated:** [December 3, 2024, 11:04am UTC](https://discuss.elastic.co/t/creating-signal-drop-down-using-vega-chart-in-kibana/371372 "2024-12-03T11:04:41Z")

</div>

hi i am trying to create dropdown form kibana fill with some transaction id which coming from index , this is how my vega script look like { "$schema": "https://vega.github.io/schema/vega/v5.json", "width": 500, "…

---

## [Filebeat not able to connect to kibana hosted in another server](https://discuss.elastic.co/t/filebeat-not-able-to-connect-to-kibana-hosted-in-another-server/370391)

<div class="topic-metadata">

**Author:** [@Nanditha](https://discuss.elastic.co/u/Nanditha)\
**Replies:** 8\
**Last updated:** [December 3, 2024, 9:19am UTC](https://discuss.elastic.co/t/filebeat-not-able-to-connect-to-kibana-hosted-in-another-server/370391 "2024-12-03T09:19:58Z")

</div>

Hi, I have hosted elasticsearch and kibana in one server and filebeat and my application in another server. I want to send my application logs to elasticsearch via filebeat. I have configured my filebeat.yml to IP of ela…

---

## [Access nested fields in canvas markdown](https://discuss.elastic.co/t/access-nested-fields-in-canvas-markdown/371362)

<div class="topic-metadata">

**Author:** [@Stephen\_IAnson](https://discuss.elastic.co/u/Stephen_IAnson)\
**Replies:** 0\
**Last updated:** [December 3, 2024, 9:08am UTC](https://discuss.elastic.co/t/access-nested-fields-in-canvas-markdown/371362 "2024-12-03T09:08:47Z")

</div>

Hi, I'm able to use the text element on a canvas and use ES SQL to query to retrieve my document content. Basically I have a single 'health report' document from another source and I'd like to create a simple dashboard…

---

## [EXCEPTION\_ACCESS\_VIOLATION in Elasticsearch 8.16.1 Running on Java 17](https://discuss.elastic.co/t/exception-access-violation-in-elasticsearch-8-16-1-running-on-java-17/371277)

<div class="topic-metadata">

**Author:** [@SalehEska](https://discuss.elastic.co/u/SalehEska)\
**Replies:** 14\
**Last updated:** [December 2, 2024, 7:51am UTC](https://discuss.elastic.co/t/exception-access-violation-in-elasticsearch-8-16-1-running-on-java-17/371277 "2024-12-02T07:51:16Z")

</div>

Error Summary: I'm encountering a fatal error when running Elasticsearch 8.16.1 on Windows Server 2016. The process crashes with an access violation. Below are the details: System Configuration: -OS: Windows Server 201…

---

## [Kibana v.8.14.1 - Canvas Filters not getting applied to VEGA & VEGA panels getting refreshed back to 15mins in Canvas](https://discuss.elastic.co/t/kibana-v-8-14-1-canvas-filters-not-getting-applied-to-vega-vega-panels-getting-refreshed-back-to-15mins-in-canvas/371293)

<div class="topic-metadata">

**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\
**Replies:** 2\
**Last updated:** [December 3, 2024, 6:11am UTC](https://discuss.elastic.co/t/kibana-v-8-14-1-canvas-filters-not-getting-applied-to-vega-vega-panels-getting-refreshed-back-to-15mins-in-canvas/371293 "2024-12-03T06:11:47Z")

</div>

Hello Team, I am currently working on building a Canvas in Kibana (v8.14.1) and encountering the following challenges: When applying filters (Dropdown Select or Timefilter), they are not being applied to the VEGA visu…

---

## [indexes created by jaeger collector not linked to jaeger-span template hence not following index lifecycle policy](https://discuss.elastic.co/t/indexes-created-by-jaeger-collector-not-linked-to-jaeger-span-template-hence-not-following-index-lifecycle-policy/371354)

<div class="topic-metadata">

**Author:** [@Jose\_Ramirez](https://discuss.elastic.co/u/Jose_Ramirez)\
**Replies:** 0\
**Last updated:** [December 3, 2024, 2:37am UTC](https://discuss.elastic.co/t/indexes-created-by-jaeger-collector-not-linked-to-jaeger-span-template-hence-not-following-index-lifecycle-policy/371354 "2024-12-03T02:37:23Z")

</div>

Hello, I am trying to troubleshoot a data retention issue for our jaeger-span-\* indexes. This is a pre-existing installation that I parachuted into so I apologize of I can't provide all the details. The indexes jaege…

---

## [Socks proxy support for Elasticsearch java client](https://discuss.elastic.co/t/socks-proxy-support-for-elasticsearch-java-client/371352)

<div class="topic-metadata">

**Author:** [@ramazangirgin](https://discuss.elastic.co/u/ramazangirgin)\
**Replies:** 0\
**Last updated:** [December 3, 2024, 2:37am UTC](https://discuss.elastic.co/t/socks-proxy-support-for-elasticsearch-java-client/371352 "2024-12-03T02:37:13Z")

</div>

Socks proxy support for Elasticsearch java client Hi, We are using elasticsearch java client and we need to configure SOCKS proxy for our application. Unfortunately http proxy is not an option for us. I see some pos…

---

## [I have error in Elasticsearch when I install elastic and I went to use or checking it is show as a problems can helping me to solve this problems](https://discuss.elastic.co/t/i-have-error-in-elasticsearch-when-i-install-elastic-and-i-went-to-use-or-checking-it-is-show-as-a-problems-can-helping-me-to-solve-this-problems/371279)

<div class="topic-metadata">

**Author:** [@Abdiqani\_Mohamed](https://discuss.elastic.co/u/Abdiqani_Mohamed)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 10:17pm UTC](https://discuss.elastic.co/t/i-have-error-in-elasticsearch-when-i-install-elastic-and-i-went-to-use-or-checking-it-is-show-as-a-problems-can-helping-me-to-solve-this-problems/371279 "2024-12-02T22:17:26Z")

</div>

I have error in Elasticsearch when I install elastic and I went to use or checking it is show as a problems can helping me to solve this problems Dec 01 07:58:38 ecs-elastic-db-node3.cbs.so systemd\[1\]: Failed to start E…

---

## [No netflow module installed but still server still listening on port2055 udp](https://discuss.elastic.co/t/no-netflow-module-installed-but-still-server-still-listening-on-port2055-udp/371185)

<div class="topic-metadata">

**Author:** [@ahsan0331](https://discuss.elastic.co/u/ahsan0331)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 10:12pm UTC](https://discuss.elastic.co/t/no-netflow-module-installed-but-still-server-still-listening-on-port2055-udp/371185 "2024-12-02T22:12:51Z")

</div>

Hi I was trying to fiddle with elastic NetFlow. i had installed a NetFlow filebeat and then it started to work. now i removed that in ny ubutnu netstat tbale its still listening on port 2055. how to fully remove that. a…

---

## [Grouping similar fields but with different parents](https://discuss.elastic.co/t/grouping-similar-fields-but-with-different-parents/371339)

<div class="topic-metadata">

**Author:** [@CalvinHobbes](https://discuss.elastic.co/u/CalvinHobbes)\
**Replies:** 0\
**Last updated:** [December 2, 2024, 8:56pm UTC](https://discuss.elastic.co/t/grouping-similar-fields-but-with-different-parents/371339 "2024-12-02T20:56:49Z")

</div>

I am trying to group similar fields but from different parents: Is this possible in Lens? e.g. I have documents with: groupa.name groupb.name Can I group on the field name which should then include values from the pa…

---

## [Field value factor FunctionScore doesn't change score](https://discuss.elastic.co/t/field-value-factor-functionscore-doesnt-change-score/371265)

<div class="topic-metadata">

**Author:** [@sashaepstein2](https://discuss.elastic.co/u/sashaepstein2)\
**Replies:** 0\
**Last updated:** [November 30, 2024, 4:33pm UTC](https://discuss.elastic.co/t/field-value-factor-functionscore-doesnt-change-score/371265 "2024-11-30T16:33:04Z")

</div>

I added FunctionScore with the FieldValueFactor function to my KNN query, but the search hits scores don't get influenced by the numeric value in the fieldValueFactor.field. I can see the scale of the scores changing whe…

---

## [Can I copy values from different field to a single field in Elastic](https://discuss.elastic.co/t/can-i-copy-values-from-different-field-to-a-single-field-in-elastic/371335)

<div class="topic-metadata">

**Author:** [@Bhavyagc](https://discuss.elastic.co/u/Bhavyagc)\
**Replies:** 4\
**Last updated:** [December 2, 2024, 8:41pm UTC](https://discuss.elastic.co/t/can-i-copy-values-from-different-field-to-a-single-field-in-elastic/371335 "2024-12-02T20:41:01Z")

</div>

Hi, I want to copy values from multiple fields into single field using split pipeline. Below is the pipeline I have created, I am copying field values from title and abstract to suggest field. \[ { "split": { …

---

## [Elastic Agent install rosetta error](https://discuss.elastic.co/t/elastic-agent-install-rosetta-error/371211)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 17\
**Last updated:** [December 2, 2024, 8:10pm UTC](https://discuss.elastic.co/t/elastic-agent-install-rosetta-error/371211 "2024-12-02T20:10:32Z")

</div>

hey there, I have to be honest and admit that I have several doubt about Elastic Agent and Fleet so I was trying to monitor a production-fake Elasticsearch cluster using Elastic Agent enrolled by Fleet Server. I follow…

---

## [Netflow integration not listening on port 2055](https://discuss.elastic.co/t/netflow-integration-not-listening-on-port-2055/371283)

<div class="topic-metadata">

**Author:** [@ahsan0331](https://discuss.elastic.co/u/ahsan0331)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 7:11pm UTC](https://discuss.elastic.co/t/netflow-integration-not-listening-on-port-2055/371283 "2024-12-02T19:11:13Z")

</div>

hi i have installed elastic 8 and kibana 8. I have installed the netflow from integration but when i check for open ports on server i do not see port 2055 open. when installing the integration it says to use elastica…

---

## [Kibana Dashboard issue](https://discuss.elastic.co/t/kibana-dashboard-issue/371058)

<div class="topic-metadata">

**Author:** [@CM\_Liotta](https://discuss.elastic.co/u/CM_Liotta)\
**Replies:** 7\
**Last updated:** [December 2, 2024, 6:50pm UTC](https://discuss.elastic.co/t/kibana-dashboard-issue/371058 "2024-12-02T18:50:58Z")

</div>

Hello all, I am using a Lens to try and display the "Last value" of some data based on two included keys "processing" and "awaiting\_processing". I am using simple default formulas like last\_value(extra.processing) and …

---

## [Nodes not electing mater when master goes down](https://discuss.elastic.co/t/nodes-not-electing-mater-when-master-goes-down/371257)

<div class="topic-metadata">

**Author:** [@Wajahat\_Iqbal](https://discuss.elastic.co/u/Wajahat_Iqbal)\
**Replies:** 11\
**Last updated:** [December 2, 2024, 6:26pm UTC](https://discuss.elastic.co/t/nodes-not-electing-mater-when-master-goes-down/371257 "2024-12-02T18:26:54Z")

</div>

ERROR THIS \[2024-11-30T10:19:13,234\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[node-3\] master not discovered yet: have discovered \[{node-3}{CpTTLncQTpq2jmzKCp6BfQ}{OdGCenkKT52GKc75CphmxQ}{10.0.0.6}{10.0.0.6:9300}{c…

---

## [Update\_tsdb\_data\_stream\_end\_times task stuck pending](https://discuss.elastic.co/t/update-tsdb-data-stream-end-times-task-stuck-pending/370580)

<div class="topic-metadata">

**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 5:22pm UTC](https://discuss.elastic.co/t/update-tsdb-data-stream-end-times-task-stuck-pending/370580 "2024-12-02T17:22:42Z")

</div>

I have a pending task named update\_tsdb\_data\_stream\_end\_times and don't know what it is or what effect it may have. Seems to be a task created from UpdateTimeSeriesRangeService.java. Any idea why this might've gotten stu…

---

## [Lens - Dotted Lines](https://discuss.elastic.co/t/lens-dotted-lines/371152)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 6\
**Last updated:** [December 2, 2024, 4:05pm UTC](https://discuss.elastic.co/t/lens-dotted-lines/371152 "2024-12-02T16:05:26Z")

</div>

Hello, I was wondering how I can create something like this: Where it just connects the points and creates like a cohesive dotted line. Is there a way I can just enable , if the data points are far apart make it a …

---

## [.Net Client - Nested aggregations always returning 0](https://discuss.elastic.co/t/net-client-nested-aggregations-always-returning-0/371314)

<div class="topic-metadata">

**Author:** [@jespin](https://discuss.elastic.co/u/jespin)\
**Replies:** 2\
**Last updated:** [December 2, 2024, 3:40pm UTC](https://discuss.elastic.co/t/net-client-nested-aggregations-always-returning-0/371314 "2024-12-02T15:40:44Z")

</div>

Hi all, I am using the new .net client and I am trying to perform aggregations on some nested documents but the count is always being returned as 0. Consider the following class structure: public class Venue { …

---

## [Fleet server restarting frequently](https://discuss.elastic.co/t/fleet-server-restarting-frequently/369140)

<div class="topic-metadata">

**Author:** [@sruthi.sattiraju](https://discuss.elastic.co/u/sruthi.sattiraju)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 3:36pm UTC](https://discuss.elastic.co/t/fleet-server-restarting-frequently/369140 "2024-12-02T15:36:17Z")

</div>

we have Elastic Cluster installed on Kubernetes, I have the elastic agents managed by fleet installed on the wokernodes and data is getting pushed to elasticsearch. But I see fleet server getting restarted frequently. k…

---

## [Getting error while parsing logs from one server to another](https://discuss.elastic.co/t/getting-error-while-parsing-logs-from-one-server-to-another/371300)

<div class="topic-metadata">

**Author:** [@Monica\_D](https://discuss.elastic.co/u/Monica_D)\
**Replies:** 0\
**Last updated:** [December 2, 2024, 8:24am UTC](https://discuss.elastic.co/t/getting-error-while-parsing-logs-from-one-server-to-another/371300 "2024-12-02T08:24:27Z")

</div>

I have a setup with two Logstash servers, where the sender Logstash server takes input from a Python script and sends it to the receiving Logstash server. The port connectivity is fine, but I am still facing issues while…

---

## [Optimizing Elastic-Agent: How to Reliably Handle 20,000 EPS and Beyond](https://discuss.elastic.co/t/optimizing-elastic-agent-how-to-reliably-handle-20-000-eps-and-beyond/371273)

<div class="topic-metadata">

**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 2:53pm UTC](https://discuss.elastic.co/t/optimizing-elastic-agent-how-to-reliably-handle-20-000-eps-and-beyond/371273 "2024-12-02T14:53:43Z")

</div>

First Test Scenario Setup: Apache JMeter (192.168.4.171) generates 20,000 EPS -\> Elastic-Agent (192.168.4.1:514) -\> Logstash (192.168.4.1:5044). Observation: Logs are not being forwarded from Logstash to Elasticsearc…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=127)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=129)
