# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=129

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 130

---

## [Meaning of packages with underscore in elastic-search Java language-client](https://discuss.elastic.co/t/meaning-of-packages-with-underscore-in-elastic-search-java-language-client/371317)

<div class="topic-metadata">

**Author:** [@Hans\_Kruse](https://discuss.elastic.co/u/Hans_Kruse)\
**Replies:** 2\
**Last updated:** [December 2, 2024, 2:26pm UTC](https://discuss.elastic.co/t/meaning-of-packages-with-underscore-in-elastic-search-java-language-client/371317 "2024-12-02T14:26:19Z")

</div>

What is the meaning of the underscore in the package names of the elasticsearch-java language-client? We are migrating software that uses the Highlevel and low-level 7.x.y SDK's to the newer elasticsearch-java 8.x.y S…

---

## [Text Summarization as a processor in Elastic](https://discuss.elastic.co/t/text-summarization-as-a-processor-in-elastic/371296)

<div class="topic-metadata">

**Author:** [@Pavit\_Kaur1](https://discuss.elastic.co/u/Pavit_Kaur1)\
**Replies:** 3\
**Last updated:** [December 2, 2024, 2:07pm UTC](https://discuss.elastic.co/t/text-summarization-as-a-processor-in-elastic/371296 "2024-12-02T14:07:09Z")

</div>

Elastic Search Version: 8.11.0 Can anyone guide me on how to use sshleifer/distilbart-cnn-12-6 to summarize a long text field and save the summarized output in documents? Specifically, I want to use it as a processor wi…

---

## [Elastic Search Filters Are Not Stacking](https://discuss.elastic.co/t/elastic-search-filters-are-not-stacking/371280)

<div class="topic-metadata">

**Author:** [@jespin](https://discuss.elastic.co/u/jespin)\
**Replies:** 2\
**Last updated:** [December 2, 2024, 10:55am UTC](https://discuss.elastic.co/t/elastic-search-filters-are-not-stacking/371280 "2024-12-02T10:55:47Z")

</div>

Hi all, I am in the process of switching over to the new .net client for Elasticsearch. As part of this switchover, we are trying to rewrite our Elasticsearch implementation of faceted search on our website. For a long …

---

## [Creating lifecycle policies in default space](https://discuss.elastic.co/t/creating-lifecycle-policies-in-default-space/371287)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 9:59am UTC](https://discuss.elastic.co/t/creating-lifecycle-policies-in-default-space/371287 "2024-12-02T09:59:09Z")

</div>

Hello team! If I modify or create lifecycle policies in default space will they be accessible in my “engineering” space? In other words, is it a recommendation to make changes to policies in default space and then have …

---

## [SSL issue when running ESRally to ES hosted in a diff server](https://discuss.elastic.co/t/ssl-issue-when-running-esrally-to-es-hosted-in-a-diff-server/370881)

<div class="topic-metadata">

**Author:** [@hiilmiee](https://discuss.elastic.co/u/hiilmiee)\
**Replies:** 7\
**Last updated:** [December 2, 2024, 9:44am UTC](https://discuss.elastic.co/t/ssl-issue-when-running-esrally-to-es-hosted-in-a-diff-server/370881 "2024-12-02T09:44:26Z")

</div>

i am having difficulty runny ESrally Race. i have import the .crt and update-ca-certificates to pem. but when i run the command, i am getting ssl error. Commands tried: esrally race --track=acme --target-hosts=x.x.x.x:…

---

## [Fleet server missing config fleet.agent.id](https://discuss.elastic.co/t/fleet-server-missing-config-fleet-agent-id/369072)

<div class="topic-metadata">

**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 9:17am UTC](https://discuss.elastic.co/t/fleet-server-missing-config-fleet-agent-id/369072 "2024-12-02T09:17:53Z")

</div>

Hello, We are running fleet server in ECK environment. Recently we had to restart fleet server for tolerations related changes to make sure fleet server is not running on master node of our K8s cluster. But post that ch…

---

## [Aggregations/Statistics queries running slower for us on ES8 compared to ES1.7.3](https://discuss.elastic.co/t/aggregations-statistics-queries-running-slower-for-us-on-es8-compared-to-es1-7-3/371304)

<div class="topic-metadata">

**Author:** [@sachin\_pv](https://discuss.elastic.co/u/sachin_pv)\
**Replies:** 0\
**Last updated:** [December 2, 2024, 9:15am UTC](https://discuss.elastic.co/t/aggregations-statistics-queries-running-slower-for-us-on-es8-compared-to-es1-7-3/371304 "2024-12-02T09:15:08Z")

</div>

Dear Team, We recently migrated from Elasticsearch 1.7.3 to Elasticsearch 8 (using version 8.12 for testing). Our application connects to Elasticsearch using the Java API client to search and fetch data. During load te…

---

## [Agent logs and metrics](https://discuss.elastic.co/t/agent-logs-and-metrics/369373)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 9:06am UTC](https://discuss.elastic.co/t/agent-logs-and-metrics/369373 "2024-12-02T09:06:56Z")

</div>

In Fleet (cloud, 8.15.3) agent policy settings has options . Collect agent logs . Collect agent metrics There is also the Elastic Agent integration, which seems to do the same thing. What is the difference? Which to…

---

## [Fleet server installation issue with TLS and certificates](https://discuss.elastic.co/t/fleet-server-installation-issue-with-tls-and-certificates/369728)

<div class="topic-metadata">

**Author:** [@arcsons](https://discuss.elastic.co/u/arcsons)\
**Replies:** 1\
**Last updated:** [December 2, 2024, 9:01am UTC](https://discuss.elastic.co/t/fleet-server-installation-issue-with-tls-and-certificates/369728 "2024-12-02T09:01:17Z")

</div>

Hello Elastic I have some issue with a new Fleet installation. I'm trying to add the fleet server into my Kibana. I have scp over the http\_ca.crt from the Elastic to my Fleet server. But there is something I have mis…

---

## [Relevant products](https://discuss.elastic.co/t/relevant-products/371252)

<div class="topic-metadata">

**Author:** [@Gaurav\_Purohit](https://discuss.elastic.co/u/Gaurav_Purohit)\
**Replies:** 4\
**Last updated:** [December 2, 2024, 8:53am UTC](https://discuss.elastic.co/t/relevant-products/371252 "2024-12-02T08:53:05Z")

</div>

I want to display products that are relevant to their query using Elasticsearch. I created system but failing to get products like iPhone 15 and all bcoz in my implementation I am trying to find the closeness of user's …

---

## [Combine two index in one using Kibana](https://discuss.elastic.co/t/combine-two-index-in-one-using-kibana/370673)

<div class="topic-metadata">

**Author:** [@amity.nidhi](https://discuss.elastic.co/u/amity.nidhi)\
**Replies:** 9\
**Last updated:** [December 2, 2024, 2:46am UTC](https://discuss.elastic.co/t/combine-two-index-in-one-using-kibana/370673 "2024-12-02T02:46:15Z")

</div>

Hello, I have a requirement to combine two index in Elasticsearch on basis of below criteria - index1: Record1: {"service": "abc", "opened\_at":"2024-11-04T16:48:04.000Z","closed\_at":"2024-11-05T18:00:10.000Z") Record…

---

## [Elastic agent 8.15.4 and 3 not installing wpcap/npcap.dll](https://discuss.elastic.co/t/elastic-agent-8-15-4-and-3-not-installing-wpcap-npcap-dll/370854)

<div class="topic-metadata">

**Author:** [@DJMogens](https://discuss.elastic.co/u/DJMogens)\
**Replies:** 2\
**Last updated:** [December 1, 2024, 8:32pm UTC](https://discuss.elastic.co/t/elastic-agent-8-15-4-and-3-not-installing-wpcap-npcap-dll/370854 "2024-12-01T20:32:00Z")

</div>

Just tried to upgrade my lab to elastic 8.15.4 and the elastic-agent doesn't install the wpcap.dll automatically. I had to manually install npcap to get packetbeat to start on the agents (via the network packet inspectio…

---

## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/371275)

<div class="topic-metadata">

**Author:** [@SalehEska](https://discuss.elastic.co/u/SalehEska)\
**Replies:** 1\
**Last updated:** [December 1, 2024, 2:30pm UTC](https://discuss.elastic.co/t/elasticsearch/371275 "2024-12-01T14:30:02Z")

</div>

I have installed Elasticsearch version 8.16 with JDK 17, but I have encountered an error and I'm stuck on it: A fatal error has been detected by the Java Runtime Environment: EXCEPTION\_ACCESS\_VIOLATION (0xc0000005) at…

---

## [New .Net client fails to synchronise GeoLocation as geo\_point in index](https://discuss.elastic.co/t/new-net-client-fails-to-synchronise-geolocation-as-geo-point-in-index/371187)

<div class="topic-metadata">

**Author:** [@jespin](https://discuss.elastic.co/u/jespin)\
**Replies:** 4\
**Last updated:** [December 1, 2024, 1:56pm UTC](https://discuss.elastic.co/t/new-net-client-fails-to-synchronise-geolocation-as-geo-point-in-index/371187 "2024-12-01T13:56:01Z")

</div>

Hi all, We are currently in the process of migrating away from NEST given the new .Net Client seems to be the way to go going forwards however, the whole process has been nothing but painful so far. The examples and do…

---

## [What are ilm-history and slm-history indices used for?](https://discuss.elastic.co/t/what-are-ilm-history-and-slm-history-indices-used-for/305711)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 2\
**Last updated:** [November 30, 2024, 9:49pm UTC](https://discuss.elastic.co/t/what-are-ilm-history-and-slm-history-indices-used-for/305711 "2024-11-30T21:49:10Z")

</div>

I'm doing some cleanup on my cluster and saw that there are a couple of small system indices that I'm not sure for what they are used. Those indices are mostly ilm-history-\* , .ds-ilm-history-\* , .slm-history-\* and .ds-…

---

## [What approach should I take to visualize next-day user retention?](https://discuss.elastic.co/t/what-approach-should-i-take-to-visualize-next-day-user-retention/371263)

<div class="topic-metadata">

**Author:** [@NealJ](https://discuss.elastic.co/u/NealJ)\
**Replies:** 0\
**Last updated:** [November 30, 2024, 3:05pm UTC](https://discuss.elastic.co/t/what-approach-should-i-take-to-visualize-next-day-user-retention/371263 "2024-11-30T15:05:51Z")

</div>

Hello everyone, I’m new to Elastic, and I’d like to ask a question. In Analytics -\> Dashboard, when creating a visualization panel, how can I view the next-day user retention rate?Assume I have the following data: \`us…

---

## [Question about parallel updates](https://discuss.elastic.co/t/question-about-parallel-updates/371244)

<div class="topic-metadata">

**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\
**Replies:** 1\
**Last updated:** [November 29, 2024, 7:38pm UTC](https://discuss.elastic.co/t/question-about-parallel-updates/371244 "2024-11-29T19:38:46Z")

</div>

Hi team, What is the expected behaviour if one client sends a batch request with the same document ID but different content? Does Elasticsearch execute them in the order it received it, or does it do any deduplication? …

---

## [How to sort results with a term](https://discuss.elastic.co/t/how-to-sort-results-with-a-term/371250)

<div class="topic-metadata">

**Author:** [@orlenkoda5](https://discuss.elastic.co/u/orlenkoda5)\
**Replies:** 1\
**Last updated:** [November 30, 2024, 9:36am UTC](https://discuss.elastic.co/t/how-to-sort-results-with-a-term/371250 "2024-11-30T09:36:27Z")

</div>

Hi everyone, I'm interested in searching docs with term and sorting them in the order: all docs should be sorted by field "date"; first should come results where the field "isPerpetual": true and then all other fi…

---

## [Logstash preventing system shutdown](https://discuss.elastic.co/t/logstash-preventing-system-shutdown/371129)

<div class="topic-metadata">

**Author:** [@ahsan0331](https://discuss.elastic.co/u/ahsan0331)\
**Replies:** 8\
**Last updated:** [November 29, 2024, 11:37pm UTC](https://discuss.elastic.co/t/logstash-preventing-system-shutdown/371129 "2024-11-29T23:37:10Z")

</div>

hi whenever i reboot or shut my machine it hangs at this message job logstash.service/stop running it takes forever .. its a test lab and hardly one device is sending a netflow and winlog beat to it. last time i left…

---

## [GeoIP processor/ geoip database update certificate issue](https://discuss.elastic.co/t/geoip-processor-geoip-database-update-certificate-issue/371230)

<div class="topic-metadata">

**Author:** [@duckasylum](https://discuss.elastic.co/u/duckasylum)\
**Replies:** 1\
**Last updated:** [November 29, 2024, 11:03pm UTC](https://discuss.elastic.co/t/geoip-processor-geoip-database-update-certificate-issue/371230 "2024-11-29T23:03:57Z")

</div>

Hi, I am trying to get the GeoIP processor working with a custom endpoint. I have added the configuration to the nodes but now I see that elasticsearch has issues with the chain certification path: “exception during geoi…

---

## [Specify multiple beat types in eck-beats helm chart](https://discuss.elastic.co/t/specify-multiple-beat-types-in-eck-beats-helm-chart/371247)

<div class="topic-metadata">

**Author:** [@Nezuko\_Chan](https://discuss.elastic.co/u/Nezuko_Chan)\
**Replies:** 0\
**Last updated:** [November 29, 2024, 8:23pm UTC](https://discuss.elastic.co/t/specify-multiple-beat-types-in-eck-beats-helm-chart/371247 "2024-11-29T20:23:49Z")

</div>

Is there a way to specify multiple beats in values.yaml for eck-stack. I have checked the default elastic/eck-beats helm chart on artifacthub but unable to find an example for setting up two beat ex. filebeat and metricb…

---

## [How to use fields for searching through translations?](https://discuss.elastic.co/t/how-to-use-fields-for-searching-through-translations/371239)

<div class="topic-metadata">

**Author:** [@Yoann\_Buzenet](https://discuss.elastic.co/u/Yoann_Buzenet)\
**Replies:** 1\
**Last updated:** [November 29, 2024, 4:57pm UTC](https://discuss.elastic.co/t/how-to-use-fields-for-searching-through-translations/371239 "2024-11-29T16:57:15Z")

</div>

Hello, I have text fields in my database that are translated. I would like to use an analyzer adapted for each language to get the best results. I thought about using fields like this: PUT my-index-000001 { "mapping…

---

## [My Elastic Search .Net Client is not working?](https://discuss.elastic.co/t/my-elastic-search-net-client-is-not-working/370828)

<div class="topic-metadata">

**Author:** [@naiqiu.zhao](https://discuss.elastic.co/u/naiqiu.zhao)\
**Replies:** 6\
**Last updated:** [November 29, 2024, 3:11pm UTC](https://discuss.elastic.co/t/my-elastic-search-net-client-is-not-working/370828 "2024-11-29T15:11:48Z")

</div>

Code using Elastic.Clients.Elasticsearch; using Elastic.Transport; using System; using System.Threading.Tasks; namespace ESTest { internal class Program { static void Main(string\[\] args) { …

---

## [Static Pie Chart](https://discuss.elastic.co/t/static-pie-chart/371202)

<div class="topic-metadata">

**Author:** [@Hannah\_J\_Swystun](https://discuss.elastic.co/u/Hannah_J_Swystun)\
**Replies:** 10\
**Last updated:** [November 29, 2024, 3:06pm UTC](https://discuss.elastic.co/t/static-pie-chart/371202 "2024-11-29T15:06:12Z")

</div>

Hi, I am using KIBANA 7.8.0 : Index type : app-YYYY-MM-DD which means an index is created every day Visualization : Pie Chart Data from a CSV files with logstash example : TIMESTAMP;APP1;PASSED;5.6 TIMESTAMP;APP2;PA…

---

## [Compare two logstash pipeline code and highlight differences](https://discuss.elastic.co/t/compare-two-logstash-pipeline-code-and-highlight-differences/371227)

<div class="topic-metadata">

**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\
**Replies:** 1\
**Last updated:** [November 29, 2024, 3:04pm UTC](https://discuss.elastic.co/t/compare-two-logstash-pipeline-code-and-highlight-differences/371227 "2024-11-29T15:04:19Z")

</div>

Hello Team, As part of my work has to compare two logstash pipelines. One pipeline in UAT and other one at PROD cluster. There is no sync of logstash pipelines between clusters. In the same there were near 15 to 20 logs…

---

## [Kibana dashboard for span metrics](https://discuss.elastic.co/t/kibana-dashboard-for-span-metrics/371229)

<div class="topic-metadata">

**Author:** [@Kenzi007220](https://discuss.elastic.co/u/Kenzi007220)\
**Replies:** 0\
**Last updated:** [November 29, 2024, 11:45am UTC](https://discuss.elastic.co/t/kibana-dashboard-for-span-metrics/371229 "2024-11-29T11:45:16Z")

</div>

Good day, we have, based on apm metrics, "time spent by span type" dashboard. Can you please provide a calculation or formula for this dashboard? We would like to have it also in grafana. Thanks in advance.

---

## [Need to calculate a single value event rate and visualize it](https://discuss.elastic.co/t/need-to-calculate-a-single-value-event-rate-and-visualize-it/371076)

<div class="topic-metadata">

**Author:** [@mbby](https://discuss.elastic.co/u/mbby)\
**Replies:** 7\
**Last updated:** [November 29, 2024, 10:29am UTC](https://discuss.elastic.co/t/need-to-calculate-a-single-value-event-rate-and-visualize-it/371076 "2024-11-29T10:29:52Z")

</div>

I need to calculate the event rate and show it as a single value (metric). E.g. I've the following documents: Column 1 Column 2 Timestamp Data 1.2.2024 15:30 Event 1 1.2.2024 15:45 Event 2 2.2.2024 10:30 …

---

## [Is it possible to create a graph from a non array key/par object or transform it?](https://discuss.elastic.co/t/is-it-possible-to-create-a-graph-from-a-non-array-key-par-object-or-transform-it/371125)

<div class="topic-metadata">

**Author:** [@pontual](https://discuss.elastic.co/u/pontual)\
**Replies:** 0\
**Last updated:** [November 27, 2024, 8:56am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-graph-from-a-non-array-key-par-object-or-transform-it/371125 "2024-11-27T08:56:48Z")

</div>

Hi I'm using elastisearch 8.12 and I'm trying to create a graph that shows "the most used query string paramenters". I have a field in my index called "query" that has each possible value (query string paramenter) as a p…

---

## [Error syslog5424\_sd](https://discuss.elastic.co/t/error-syslog5424-sd/371221)

<div class="topic-metadata">

**Author:** [@Virtual\_Box](https://discuss.elastic.co/u/Virtual_Box)\
**Replies:** 0\
**Last updated:** [November 29, 2024, 6:15am UTC](https://discuss.elastic.co/t/error-syslog5424-sd/371221 "2024-11-29T06:15:10Z")

</div>

Hello everyone! I would be very grateful for your help! Now I am trying to integrate the Checkpoint firewall with ELK. I receive logs, but they are not parsed. I get the following error when parsing logs from the Checkp…

---

## [Capturing Comprehensive Kibana Audit Logs for User Activities](https://discuss.elastic.co/t/capturing-comprehensive-kibana-audit-logs-for-user-activities/370954)

<div class="topic-metadata">

**Author:** [@Akarsh\_Shaw](https://discuss.elastic.co/u/Akarsh_Shaw)\
**Replies:** 8\
**Last updated:** [November 29, 2024, 6:09am UTC](https://discuss.elastic.co/t/capturing-comprehensive-kibana-audit-logs-for-user-activities/370954 "2024-11-29T06:09:47Z")

</div>

Hello Elastic Community, I am looking to implement comprehensive Kibana audit logging to monitor user activities effectively. Specifically, I want to capture the following events: User Login and Logout: I need to log …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=128)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=130)
