# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=132 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 133 --- ## [What is the largest size that one node can hold?](https://discuss.elastic.co/t/what-is-the-largest-size-that-one-node-can-hold/370851)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 38\ **Last updated:** [November 25, 2024, 6:05am UTC](https://discuss.elastic.co/t/what-is-the-largest-size-that-one-node-can-hold/370851 "2024-11-25T06:05:04Z")
Hello I have a lot of data and I want to store it in elasticsearch What is the largest size that one node can hold? --- ## [Cannot create index for web crawler on the console](https://discuss.elastic.co/t/cannot-create-index-for-web-crawler-on-the-console/371005)
**Author:** [@Soumarshi](https://discuss.elastic.co/u/Soumarshi)\ **Replies:** 0\ **Last updated:** [November 25, 2024, 4:12am UTC](https://discuss.elastic.co/t/cannot-create-index-for-web-crawler-on-the-console/371005 "2024-11-25T04:12:03Z")
Hello, I am not able to create an index for web crawler. It always throws "Search encountered an error. Check Kibana Server logs for details.". I am not able to get any logs for Kibana. Can you please guide me --- ## [License Concerns About Winlogbeat](https://discuss.elastic.co/t/license-concerns-about-winlogbeat/370921)
**Author:** [@chhu0830](https://discuss.elastic.co/u/chhu0830)\ **Replies:** 3\ **Last updated:** [November 25, 2024, 3:18am UTC](https://discuss.elastic.co/t/license-concerns-about-winlogbeat/370921 "2024-11-25T03:18:01Z")
We have some concerns regarding the licensing of the elastic/beats project. From what we understand, winlogbeat is licensed under Apache-2.0. However, one of its dependencies, github.com/elastic/elastic-agent-client/v7/… --- ## [Custom pipeline settings with Centralised Pipeline Management](https://discuss.elastic.co/t/custom-pipeline-settings-with-centralised-pipeline-management/371001)
**Author:** [@garethhumphriesgkc](https://discuss.elastic.co/u/garethhumphriesgkc)\ **Replies:** 0\ **Last updated:** [November 25, 2024, 1:58am UTC](https://discuss.elastic.co/t/custom-pipeline-settings-with-centralised-pipeline-management/371001 "2024-11-25T01:58:30Z")
Hi, We're looking at moving our existing pipelines from git to to Kibana, using "Centralised Pipeline Management". I tried replicating them in Kibana, but only very basic settings were present - I couldn't set any of o… --- ## [Meaning of the columns in the output of API: GET \_cat/indices?v](https://discuss.elastic.co/t/meaning-of-the-columns-in-the-output-of-api-get-cat-indices-v/370810)
**Author:** [@ChatLee](https://discuss.elastic.co/u/ChatLee)\ **Replies:** 4\ **Last updated:** [November 25, 2024, 12:35am UTC](https://discuss.elastic.co/t/meaning-of-the-columns-in-the-output-of-api-get-cat-indices-v/370810 "2024-11-25T00:35:36Z")
Hi teams, When using the API: GET \_cat/indices?v, the output would includes columns here: health status index uuid pri rep docs.count do… --- ## [How to create visualization of field values](https://discuss.elastic.co/t/how-to-create-visualization-of-field-values/370899)
**Author:** [@i.k](https://discuss.elastic.co/u/i.k)\ **Replies:** 2\ **Last updated:** [November 24, 2024, 4:20pm UTC](https://discuss.elastic.co/t/how-to-create-visualization-of-field-values/370899 "2024-11-24T16:20:55Z")
Hi there, I’m new to the platform, and I’m already pulling my hair out over what should be a ridiculously simple task—yet I can’t figure it out. Something as basic as visualizing field values seems completely elusive. H… --- ## [Getting timeout exception while inserting data to elastic index](https://discuss.elastic.co/t/getting-timeout-exception-while-inserting-data-to-elastic-index/370973)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [November 24, 2024, 2:03pm UTC](https://discuss.elastic.co/t/getting-timeout-exception-while-inserting-data-to-elastic-index/370973 "2024-11-24T14:03:31Z")
Hello All, From past 1 week I am getting below exception for elastic index and unable ti find RCA. It showing timeout and not able to find what could be reason for timeout while inserting data to index Even in elastic … --- ## [How to View In Context using Logs Explorer?](https://discuss.elastic.co/t/how-to-view-in-context-using-logs-explorer/370993)
**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\ **Replies:** 0\ **Last updated:** [November 24, 2024, 10:59am UTC](https://discuss.elastic.co/t/how-to-view-in-context-using-logs-explorer/370993 "2024-11-24T10:59:26Z")
Hi, it seems like Logs Stream is disabled by default in Kibana 8.16. If it is going away in future release, how can we View In Context using Logs Explorer? Thanks. --- ## [Alerts for rules and alerts status](https://discuss.elastic.co/t/alerts-for-rules-and-alerts-status/370987)
**Author:** [@HermannSamimi](https://discuss.elastic.co/u/HermannSamimi)\ **Replies:** 0\ **Last updated:** [November 23, 2024, 11:18pm UTC](https://discuss.elastic.co/t/alerts-for-rules-and-alerts-status/370987 "2024-11-23T23:18:03Z")
Hello, I want to create an alert to check the rules and alerts health. for example i created an alert for a ML rule, i want to check the latest status(enable, disable) and other relevant data. is there any way to get s… --- ## [Significance of @timestamp in Index Patterns](https://discuss.elastic.co/t/significance-of-timestamp-in-index-patterns/370982)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 10\ **Last updated:** [November 23, 2024, 10:33pm UTC](https://discuss.elastic.co/t/significance-of-timestamp-in-index-patterns/370982 "2024-11-23T22:33:54Z")
Hi All, What is the significance of @timestamp field that populates by default in all indices in Kibana? I ask this question as this time differs with the recvdTime field that is set in the application and gets displ… --- ## [Kibana Canvas - Download data tables as CSV](https://discuss.elastic.co/t/kibana-canvas-download-data-tables-as-csv/370981)
**Author:** [@bjornbear](https://discuss.elastic.co/u/bjornbear)\ **Replies:** 2\ **Last updated:** [November 23, 2024, 3:26pm UTC](https://discuss.elastic.co/t/kibana-canvas-download-data-tables-as-csv/370981 "2024-11-23T15:26:02Z")
How can I download the results of a data table as CSV using Canvas? --- ## [Elastic Agent (Security Onion)](https://discuss.elastic.co/t/elastic-agent-security-onion/370611)
**Author:** [@chamara\_sandun](https://discuss.elastic.co/u/chamara_sandun)\ **Replies:** 11\ **Last updated:** [November 23, 2024, 1:41pm UTC](https://discuss.elastic.co/t/elastic-agent-security-onion/370611 "2024-11-23T13:41:27Z")
I installed Security Onion to enhance my knowledge. I followed the documentation for the setup but faced several issues. After setting it up, my main goal was to get Windows event logs into Security Onion. I installed… --- ## [Simple scenario where Filebeat transfers log lines into Elastic search - does not work](https://discuss.elastic.co/t/simple-scenario-where-filebeat-transfers-log-lines-into-elastic-search-does-not-work/370940)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 5\ **Last updated:** [November 22, 2024, 7:55pm UTC](https://discuss.elastic.co/t/simple-scenario-where-filebeat-transfers-log-lines-into-elastic-search-does-not-work/370940 "2024-11-22T19:55:47Z")
Hi, my goal is to load Tshark logs into Elasticsearch using Filebeat. So here is my test file (for some lines port column is empty): 2024-11-21 19:29:28 192.168.1.144 142.250.186.196 52873\\443 2024-11-21 19:29:28 142.2… --- ## [Elastic search look up filter is not working when the fields has special characters](https://discuss.elastic.co/t/elastic-search-look-up-filter-is-not-working-when-the-fields-has-special-characters/370960)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 3\ **Last updated:** [November 22, 2024, 6:40pm UTC](https://discuss.elastic.co/t/elastic-search-look-up-filter-is-not-working-when-the-fields-has-special-characters/370960 "2024-11-22T18:40:51Z")
Hi Team, I am trying to compare data in two indexes using a common key which has special character "/" in the value. For example: Common\_key: pr/01/1235678 When i use Elasticsearch filter in logstash to look up using … --- ## [Mimecast SIEM Backlog](https://discuss.elastic.co/t/mimecast-siem-backlog/370795)
**Author:** [@DiFi](https://discuss.elastic.co/u/DiFi)\ **Replies:** 2\ **Last updated:** [November 22, 2024, 6:22pm UTC](https://discuss.elastic.co/t/mimecast-siem-backlog/370795 "2024-11-22T18:22:50Z")
Hi hoping someone could help point me in the right direction. I just setup the mimecast integration and pulling data in. The problem is with mimecast, and the vast amount of logs it needs to ingest, i am about 7 days b… --- ## [Semantic Search while maintaining the contextual Information](https://discuss.elastic.co/t/semantic-search-while-maintaining-the-contextual-information/370967)
**Author:** [@Birendra\_Singh](https://discuss.elastic.co/u/Birendra_Singh)\ **Replies:** 0\ **Last updated:** [November 22, 2024, 4:07pm UTC](https://discuss.elastic.co/t/semantic-search-while-maintaining-the-contextual-information/370967 "2024-11-22T16:07:10Z")
Hi Team, Currently i am working on a POC wherein I am using Elasticsearch for vector search. I am getting good results for all the queries but when I tried to change the query a bit like changing the subject in query I … --- ## [Querying All Text/Keyword Fields, Including Nested Fields](https://discuss.elastic.co/t/querying-all-text-keyword-fields-including-nested-fields/370720)
**Author:** [@jalex](https://discuss.elastic.co/u/jalex)\ **Replies:** 5\ **Last updated:** [November 22, 2024, 3:19pm UTC](https://discuss.elastic.co/t/querying-all-text-keyword-fields-including-nested-fields/370720 "2024-11-22T15:19:01Z")
Hello, I am looking for a way to search across all text and keyword fields, including nested fields, in an index for keyword matches and then retrieve which field it hit on. I don’t necessarily know which field the keyw… --- ## [Total storage of Elasticsearch index grows abnormally](https://discuss.elastic.co/t/total-storage-of-elasticsearch-index-grows-abnormally/370936)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 3\ **Last updated:** [November 22, 2024, 3:05pm UTC](https://discuss.elastic.co/t/total-storage-of-elasticsearch-index-grows-abnormally/370936 "2024-11-22T15:05:37Z")
We are facing the following problem: We have seeded an index ~6 months ago. Back then the total space occupied was roughly 7TB of data. Over the last 6 months we have been updating the index to keep it synced with the … --- ## [Forward logstash logs to another SIEM](https://discuss.elastic.co/t/forward-logstash-logs-to-another-siem/370959)
**Author:** [@Bantou0](https://discuss.elastic.co/u/Bantou0)\ **Replies:** 2\ **Last updated:** [November 22, 2024, 2:52pm UTC](https://discuss.elastic.co/t/forward-logstash-logs-to-another-siem/370959 "2024-11-22T14:52:57Z")
Hi everyone, I am facing issues with our new servers which can only have one syslog server configured. We are using two SIEM to send logs (logstash and FSIEM). So I would like to configure the logstash virtual IP as the… --- ## [Questions about DNS filter and multiple pipelines](https://discuss.elastic.co/t/questions-about-dns-filter-and-multiple-pipelines/370952)
**Author:** [@Po-temkin](https://discuss.elastic.co/u/Po-temkin)\ **Replies:** 2\ **Last updated:** [November 22, 2024, 2:42pm UTC](https://discuss.elastic.co/t/questions-about-dns-filter-and-multiple-pipelines/370952 "2024-11-22T14:42:35Z")
Hello to everyone! I plan to use Logstash to transform syslog messages into info files To achieve, it I decided to use multi-pipeline configuration: pipelines.yml - pipeline.id: ans\_file\_syslog path.config: "C:/Pro… --- ## [Time for shard size to decrease after forcemerge](https://discuss.elastic.co/t/time-for-shard-size-to-decrease-after-forcemerge/370951)
**Author:** [@Emil](https://discuss.elastic.co/u/Emil)\ **Replies:** 0\ **Last updated:** [November 22, 2024, 1:08pm UTC](https://discuss.elastic.co/t/time-for-shard-size-to-decrease-after-forcemerge/370951 "2024-11-22T13:08:03Z")
When I do a forcemerge, I noticed shard size at first increases (as expected), and then later on decrease. However, after the forcemerge task is finished, some of the shards are still larger; it takes some time for them… --- ## [After Update 0365 Integration different types of datafields](https://discuss.elastic.co/t/after-update-0365-integration-different-types-of-datafields/370950)
**Author:** [@helldunkel](https://discuss.elastic.co/u/helldunkel)\ **Replies:** 0\ **Last updated:** [November 22, 2024, 12:27pm UTC](https://discuss.elastic.co/t/after-update-0365-integration-different-types-of-datafields/370950 "2024-11-22T12:27:07Z")
Hi, after Update and new roleout from the o365 integrationen we have diverent missmatches in the datafields. old is was: source.geo.location new is: source.geo.location.lat source.geo.location.lon some more datafi… --- ## [Custom log output to Kafka using Elastic Agent](https://discuss.elastic.co/t/custom-log-output-to-kafka-using-elastic-agent/366031)
**Author:** [@tapiojaa](https://discuss.elastic.co/u/tapiojaa)\ **Replies:** 7\ **Last updated:** [November 22, 2024, 12:11pm UTC](https://discuss.elastic.co/t/custom-log-output-to-kafka-using-elastic-agent/366031 "2024-11-22T12:11:16Z")
We have Elasticstack 8.15 in use so that client Filebeat output goes to the Kafka and from there to the Elasticsearch. Filebeat sends different logs to separate Kafka topics. We are using following configuration in "file… --- ## [Use host IP (or dns) in the output file path](https://discuss.elastic.co/t/use-host-ip-or-dns-in-the-output-file-path/370944)
**Author:** [@Po-temkin](https://discuss.elastic.co/u/Po-temkin)\ **Replies:** 2\ **Last updated:** [November 22, 2024, 11:21am UTC](https://discuss.elastic.co/t/use-host-ip-or-dns-in-the-output-file-path/370944 "2024-11-22T11:21:57Z")
Hello to everyone! My question looks like obvious, but I missed something basic and stuck =) I have a UDP input that I want to output as a file My desired output file path is: E:/logstash/log/$host\_ip$/$date$.log It… --- ## [Debian repository checksum mismatch](https://discuss.elastic.co/t/debian-repository-checksum-mismatch/370425)
**Author:** [@lisuml](https://discuss.elastic.co/u/lisuml)\ **Replies:** 20\ **Last updated:** [November 22, 2024, 10:19am UTC](https://discuss.elastic.co/t/debian-repository-checksum-mismatch/370425 "2024-11-22T10:19:31Z")
I'm getting the following error when trying to add the elastic repository to my Debian 12 box: E: Failed to fetch https://artifacts.elastic.co/packages/8.x/apt/dists/stable/main/binary-amd64/Packages.bz2 File has unexp… --- ## [Erreur de démarrage d'Elasticsearch avec le code de sortie 137 dans le déploiement datamulti -nœudsmaster](https://discuss.elastic.co/t/erreur-de-demarrage-delasticsearch-avec-le-code-de-sortie-137-dans-le-deploiement-datamulti-noeudsmaster/370938)
**Author:** [@mayanza\_mpanzou\_arna](https://discuss.elastic.co/u/mayanza_mpanzou_arna)\ **Replies:** 0\ **Last updated:** [November 22, 2024, 9:27am UTC](https://discuss.elastic.co/t/erreur-de-demarrage-delasticsearch-avec-le-code-de-sortie-137-dans-le-deploiement-datamulti-noeudsmaster/370938 "2024-11-22T09:27:27Z")
Hello, I am currently encountering an issue with deploying two Elasticsearch nodes, a data nodemaster ERROR: Elasticsearch died while starting up, with exit code 137 I have set up the jvm.options file to define JVM pa… --- ## [Display another field as the result of a Lens formula](https://discuss.elastic.co/t/display-another-field-as-the-result-of-a-lens-formula/370932)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 1\ **Last updated:** [November 22, 2024, 8:55am UTC](https://discuss.elastic.co/t/display-another-field-as-the-result-of-a-lens-formula/370932 "2024-11-22T08:55:43Z")
Hello, Assume an index which contains entries with a version field, something like: "version": { "properties": { "id": { "type": "keyword" }, "major": { "type": "keyword" }, "minor": {… --- ## [V7.10 Build failed on my apple silicon macbook](https://discuss.elastic.co/t/v7-10-build-failed-on-my-apple-silicon-macbook/370927)
**Author:** [@kingswan](https://discuss.elastic.co/u/kingswan)\ **Replies:** 5\ **Last updated:** [November 22, 2024, 8:53am UTC](https://discuss.elastic.co/t/v7-10-build-failed-on-my-apple-silicon-macbook/370927 "2024-11-22T08:53:02Z")
Hi folk, when I try to build v7.10 on my apple m2 macbook, I got error: \> Task :buildSrc:check UP-TO-DATE \> Task :buildSrc:build UP-TO-DATE FAILURE: Build failed with an exception. \* What went wrong: A problem occurr… --- ## [Missing logs cluster green to yellow](https://discuss.elastic.co/t/missing-logs-cluster-green-to-yellow/370931)
**Author:** [@Nicoletta](https://discuss.elastic.co/u/Nicoletta)\ **Replies:** 0\ **Last updated:** [November 22, 2024, 7:41am UTC](https://discuss.elastic.co/t/missing-logs-cluster-green-to-yellow/370931 "2024-11-22T07:41:49Z")
Hi, in the Observability \> Logs section I am filtering all the logs containing "Cluster health status changed" string (I also tried "YELLOW" or just "Cluster health status"). I get these results: I was wondering wh… --- ## [ELSER for long texts](https://discuss.elastic.co/t/elser-for-long-texts/370928)
**Author:** [@Sarah2](https://discuss.elastic.co/u/Sarah2)\ **Replies:** 0\ **Last updated:** [November 22, 2024, 6:59am UTC](https://discuss.elastic.co/t/elser-for-long-texts/370928 "2024-11-22T06:59:57Z")
I am using Elastic Search 8.11 and want to use ELSER to incorporate semantic search. But fields I have to perform search is long text fields. I found this link saying If your data set contains long documents, divide t… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=131) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=133)