# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=134 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 135 --- ## [Elastic search REST client get a 15 minute timeouts on random occasions](https://discuss.elastic.co/t/elastic-search-rest-client-get-a-15-minute-timeouts-on-random-occasions/370710)
**Author:** [@Pavan\_Kumar\_Nallam](https://discuss.elastic.co/u/Pavan_Kumar_Nallam)\ **Replies:** 2\ **Last updated:** [November 20, 2024, 12:38pm UTC](https://discuss.elastic.co/t/elastic-search-rest-client-get-a-15-minute-timeouts-on-random-occasions/370710 "2024-11-20T12:38:06Z")
Hi we are using Elasticsearch to store business data for Sportsbook events, and its a critical cluster in our stack, we have atleast 4-5 Elasticsearch clusters in multiple projects in our Company. but only in 2 clusters … --- ## [BulkIngester not reliably executing afterBulk handlers](https://discuss.elastic.co/t/bulkingester-not-reliably-executing-afterbulk-handlers/364838)
**Author:** [@blackwinter](https://discuss.elastic.co/u/blackwinter)\ **Replies:** 5\ **Last updated:** [November 20, 2024, 11:31am UTC](https://discuss.elastic.co/t/bulkingester-not-reliably-executing-afterbulk-handlers/364838 "2024-11-20T11:31:46Z")
We're having difficulties adjusting to the new listener thread pool (see pull request #830) with elasticsearch-java version 8.15.0 on Java 17. We're relying on afterBulk handlers for statistics gathering and error handli… --- ## [Elastic Agent - logged-in user and model](https://discuss.elastic.co/t/elastic-agent-logged-in-user-and-model/370689)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 1\ **Last updated:** [November 19, 2024, 8:27am UTC](https://discuss.elastic.co/t/elastic-agent-logged-in-user-and-model/370689 "2024-11-19T08:27:14Z")
Hello, I'm asking here because I couldn't find a definitive answer in the documentation. I am running an Elastic Agent on workstations. Does the agent have the capability to collect the currently logged-in user and the… --- ## [Option to raise a Ticket for Kibana Table Dashboard Data](https://discuss.elastic.co/t/option-to-raise-a-ticket-for-kibana-table-dashboard-data/370808)
**Author:** [@Sudheer\_Kumar](https://discuss.elastic.co/u/Sudheer_Kumar)\ **Replies:** 2\ **Last updated:** [November 20, 2024, 10:18am UTC](https://discuss.elastic.co/t/option-to-raise-a-ticket-for-kibana-table-dashboard-data/370808 "2024-11-20T10:18:53Z")
Hi, I’m currently integrating ELK with our internal tools. For the Kibana dashboard table data, I would like to integrate it with our ticketing tool and have an option to "Raise a ticket." When I click on "Raise a ticket… --- ## [How create a role for creating index and ingest on it](https://discuss.elastic.co/t/how-create-a-role-for-creating-index-and-ingest-on-it/359144)
**Author:** [@sandra\_a](https://discuss.elastic.co/u/sandra_a)\ **Replies:** 1\ **Last updated:** [November 20, 2024, 7:35am UTC](https://discuss.elastic.co/t/how-create-a-role-for-creating-index-and-ingest-on-it/359144 "2024-11-20T07:35:50Z")
Hi; I want to create a role with these privileges in "Index privileges" section: \[ create\_index , create, create\_doc, index\] There is a box to select which index the role can have access: I have some agents with t… --- ## [Stack monitoring stuck at fetching data](https://discuss.elastic.co/t/stack-monitoring-stuck-at-fetching-data/370013)
**Author:** [@sandra\_a](https://discuss.elastic.co/u/sandra_a)\ **Replies:** 1\ **Last updated:** [November 20, 2024, 7:18am UTC](https://discuss.elastic.co/t/stack-monitoring-stuck-at-fetching-data/370013 "2024-11-20T07:18:24Z")
Hi. I want to use "set up with self monitoring" in stack monitoring. after enabling xpack.monitoring.collection.enabled, it cannot understand the cluster: This loop is running, but no data will be found. At the … --- ## [Distributed nodes](https://discuss.elastic.co/t/distributed-nodes/370256)
**Author:** [@sandra\_a](https://discuss.elastic.co/u/sandra_a)\ **Replies:** 3\ **Last updated:** [November 20, 2024, 7:14am UTC](https://discuss.elastic.co/t/distributed-nodes/370256 "2024-11-20T07:14:10Z")
Hi, I have an Elasticsearch cluster with 6 nodes on a single system, and it contains some data. Now, I want to add more nodes on different systems. For example, nodes 3-6 will be in VMs 3-6 (each VM should have one data… --- ## [500 Kibana API responses resulting from 403 epr.elastic.co responses when trying to add integrations](https://discuss.elastic.co/t/500-kibana-api-responses-resulting-from-403-epr-elastic-co-responses-when-trying-to-add-integrations/370763)
**Author:** [@savemetenminutes](https://discuss.elastic.co/u/savemetenminutes)\ **Replies:** 5\ **Last updated:** [November 20, 2024, 6:21am UTC](https://discuss.elastic.co/t/500-kibana-api-responses-resulting-from-403-epr-elastic-co-responses-when-trying-to-add-integrations/370763 "2024-11-20T06:21:58Z")
I keep getting { "statusCode": 500, "error": "Internal Server Error", "message": "'403 Forbidden' error response from package registry at https://epr.elastic.co/categories?kibana.version=8.16.0" } while try… --- ## [Kibana pattern](https://discuss.elastic.co/t/kibana-pattern/370682)
**Author:** [@FJT](https://discuss.elastic.co/u/FJT)\ **Replies:** 6\ **Last updated:** [November 20, 2024, 5:46am UTC](https://discuss.elastic.co/t/kibana-pattern/370682 "2024-11-20T05:46:43Z")
Please help this poor guy. Another day of upping this. hoping someone can help me. This is what it looks like in my visualization. I cannot create a pattern in my logstash cause as you know error logs have so many. So I… --- ## [How to increase max\_clause\_count in Elasticsearch 8.0.1 without using deprecated settings?](https://discuss.elastic.co/t/how-to-increase-max-clause-count-in-elasticsearch-8-0-1-without-using-deprecated-settings/370721)
**Author:** [@Sahil\_Kapoor](https://discuss.elastic.co/u/Sahil_Kapoor)\ **Replies:** 0\ **Last updated:** [November 18, 2024, 9:45pm UTC](https://discuss.elastic.co/t/how-to-increase-max-clause-count-in-elasticsearch-8-0-1-without-using-deprecated-settings/370721 "2024-11-18T21:45:10Z")
I recently upgraded Elasticsearch from version 7.5.1 to 8.0.1, and I encountered an issue with my queries that require around 20k boolean clauses. In Elasticsearch 7, I manually updated the persistent settings to increas… --- ## [Parsing JSON format with filebeat](https://discuss.elastic.co/t/parsing-json-format-with-filebeat/370732)
**Author:** [@mromeo](https://discuss.elastic.co/u/mromeo)\ **Replies:** 5\ **Last updated:** [November 20, 2024, 12:27am UTC](https://discuss.elastic.co/t/parsing-json-format-with-filebeat/370732 "2024-11-20T00:27:19Z")
Hi I am having a little trouble understanding how the parsing of JSON format works, when using filebeat as a collector. I have gone through a few forum posts and docs and can't seem to get things looking right. Current… --- ## [Apache Module - log.level](https://discuss.elastic.co/t/apache-module-log-level/369861)
**Author:** [@mniel0](https://discuss.elastic.co/u/mniel0)\ **Replies:** 1\ **Last updated:** [November 19, 2024, 11:26pm UTC](https://discuss.elastic.co/t/apache-module-log-level/369861 "2024-11-19T23:26:15Z")
Hi there! We are currently using Apache Module for collecting access and error log events from our apache web servers. We need to put a log.level on it (mostly INFO and ERROR). Is this possible? I've read the documenta… --- ## [Strange Overall Average Behavior](https://discuss.elastic.co/t/strange-overall-average-behavior/370179)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 3\ **Last updated:** [November 19, 2024, 11:17pm UTC](https://discuss.elastic.co/t/strange-overall-average-behavior/370179 "2024-11-19T23:17:23Z")
I've got a line chart that displays the average of a certain value and the Average of the Averages. This seems to display correctly. However, if I add an additional filter to the overall average line to exclude zero … --- ## [How to calculate unique contact duplicates using different fields](https://discuss.elastic.co/t/how-to-calculate-unique-contact-duplicates-using-different-fields/370716)
**Author:** [@andreyshiryaev13](https://discuss.elastic.co/u/andreyshiryaev13)\ **Replies:** 2\ **Last updated:** [November 19, 2024, 9:00pm UTC](https://discuss.elastic.co/t/how-to-calculate-unique-contact-duplicates-using-different-fields/370716 "2024-11-19T21:00:04Z")
Hi, I am trying to find an effective way to count unique contacts. Elastic 8.15 Index structure { id, email, phone, first, last } Data Example { 1, user@gmail.com, 1111111, Tom, Hanks }, { 2, user2@gmail.com, 1111111… --- ## [Analyse logs RNmessagesending transport message](https://discuss.elastic.co/t/analyse-logs-rnmessagesending-transport-message/370790)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 8:35pm UTC](https://discuss.elastic.co/t/analyse-logs-rnmessagesending-transport-message/370790 "2024-11-19T20:35:45Z")
Hi Can You check together with me what could be the root cause What I have already check from this log. I didn't observe also any CPU throttling on that node it was used 3 core from 13 available. Node consists 26 heap … --- ## [Data View name disappears](https://discuss.elastic.co/t/data-view-name-disappears/370788)
**Author:** [@TimDotZero](https://discuss.elastic.co/u/TimDotZero)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 7:32pm UTC](https://discuss.elastic.co/t/data-view-name-disappears/370788 "2024-11-19T19:32:24Z")
At random, I've noticed that the name of certain Data Views disappear and leave only the pattern as the name. I'm running ES 8.15.1. I haven't been able to pinpoint a specific time when it occurs, nor a cause. --- ## [Fleet UI - Runtime Field](https://discuss.elastic.co/t/fleet-ui-runtime-field/370701)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [November 19, 2024, 6:11pm UTC](https://discuss.elastic.co/t/fleet-ui-runtime-field/370701 "2024-11-19T18:11:09Z")
Hello, I am working on my own fleet custom dashboard and noticed that the Status field like "Unhealthy" , "Healthy", "Offline", etc are not added to the .fleet-agents-\* index. Is there any logic or perhaps a runtime fi… --- ## [Unnecessary(?) shard reallocation upon adding warm nodes](https://discuss.elastic.co/t/unnecessary-shard-reallocation-upon-adding-warm-nodes/370782)
**Author:** [@Matt\_Field](https://discuss.elastic.co/u/Matt_Field)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 5:26pm UTC](https://discuss.elastic.co/t/unnecessary-shard-reallocation-upon-adding-warm-nodes/370782 "2024-11-19T17:26:36Z")
On my elastic.co hosted cluster, i had 3 hot nodes with around 80% disk usage. I decided to add 2 warm nodes with no modification to the hot nodes configuration(i still have 3). Before creating the new warm nodes, elas… --- ## [Incorrect HTTP method for uri: 405 Method Not Allowed](https://discuss.elastic.co/t/incorrect-http-method-for-uri-405-method-not-allowed/370661)
**Author:** [@racitup](https://discuss.elastic.co/u/racitup)\ **Replies:** 3\ **Last updated:** [November 19, 2024, 4:09pm UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri-405-method-not-allowed/370661 "2024-11-19T16:09:17Z")
It appears ILM is creating an invalid uri for creating an alias. Here's part of a trace from tshark. Are the triangle brackets supposed to be there? If not, how do I configure filebeat to work properly? I can't see anyw… --- ## [Document not found error while updating document](https://discuss.elastic.co/t/document-not-found-error-while-updating-document/370735)
**Author:** [@Saanchita\_V](https://discuss.elastic.co/u/Saanchita_V)\ **Replies:** 1\ **Last updated:** [November 19, 2024, 4:17pm UTC](https://discuss.elastic.co/t/document-not-found-error-while-updating-document/370735 "2024-11-19T16:17:59Z")
Hi so when I want to update an already existing document it throws a document\_missing\_exception backend: ==========ERROR========= ResponseError: document\_missing\_exception: \[document\_missing\_exception\] Reason: \[\_doc\]\[d… --- ## [Error fetching Cgroup controller](https://discuss.elastic.co/t/error-fetching-cgroup-controller/370773)
**Author:** [@TS27](https://discuss.elastic.co/u/TS27)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 3:17pm UTC](https://discuss.elastic.co/t/error-fetching-cgroup-controller/370773 "2024-11-19T15:17:50Z")
I just installed elastic agent (8.14.3) managed by fleet on my kubernetes environment and I get the following error: {"log.level":"error","@timestamp":"2024-11-19T14:50:35.380Z","message":"error determining cgroups vers… --- ## [How to read UTF-16LE encoded CSV files using file input plugin](https://discuss.elastic.co/t/how-to-read-utf-16le-encoded-csv-files-using-file-input-plugin/370765)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 1\ **Last updated:** [November 19, 2024, 3:17pm UTC](https://discuss.elastic.co/t/how-to-read-utf-16le-encoded-csv-files-using-file-input-plugin/370765 "2024-11-19T15:17:40Z")
Hi Team, I wanted to read the CSV files which are encoded in UTF-16LE or UTF-8 in logstash. Could you please help me how i can achieve it. I have tried like this which is failing. input { file { id =\> "nasapmena… --- ## [Control filter and VEGA lite not working](https://discuss.elastic.co/t/control-filter-and-vega-lite-not-working/370370)
**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\ **Replies:** 4\ **Last updated:** [November 19, 2024, 2:58pm UTC](https://discuss.elastic.co/t/control-filter-and-vega-lite-not-working/370370 "2024-11-19T14:58:54Z")
Hello Team, I am using v8.14 of Kibana, and building tabular dashboard using VEGA-lite, however I want to use external Kibana controls for filtering option, however its not working. What changes are required in VEGA lit… --- ## [Kerberos Authentication checksum failed error](https://discuss.elastic.co/t/kerberos-authentication-checksum-failed-error/370771)
**Author:** [@Maretti](https://discuss.elastic.co/u/Maretti)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 2:33pm UTC](https://discuss.elastic.co/t/kerberos-authentication-checksum-failed-error/370771 "2024-11-19T14:33:38Z")
Hi all, I'm trying to setup Kerberos authentication on Kibana, when logging in I get the following error \[2024-11-19T14:13:25.734+00:00\]\[INFO \]\[plugins.security.authentication\] Performing login attempt with "kerb1" pro… --- ## [Different between http\_ca.crt file and http.p12](https://discuss.elastic.co/t/different-between-http-ca-crt-file-and-http-p12/370769)
**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 2:15pm UTC](https://discuss.elastic.co/t/different-between-http-ca-crt-file-and-http-p12/370769 "2024-11-19T14:15:41Z")
When elasticsearch is initially installed it generate 3 files namely http\_ca.crt http.p12 transport.p12 http\_ca.crt seems to be a certificate in PEM format, is this the certificate elasticsearch provide when other com… --- ## [What could be the problem here trying to connect logstash to ElasticSearch 7.5 for the first time?](https://discuss.elastic.co/t/what-could-be-the-problem-here-trying-to-connect-logstash-to-elasticsearch-7-5-for-the-first-time/370714)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 9\ **Last updated:** [November 19, 2024, 12:41pm UTC](https://discuss.elastic.co/t/what-could-be-the-problem-here-trying-to-connect-logstash-to-elasticsearch-7-5-for-the-first-time/370714 "2024-11-19T12:41:22Z")
What could be the problem here trying to connect logstash to Elasticsearch 7.5 for the first time? Nov 18 11:55:34 srLogStash001 run\_tviLogStash.sh\[98904\]: \[2024-11-18T11:55:34,362\]\[WARN \]\[logstash.outputs.elasticsearch… --- ## [Elastic installation broken](https://discuss.elastic.co/t/elastic-installation-broken/370760)
**Author:** [@Rom\_Pe](https://discuss.elastic.co/u/Rom_Pe)\ **Replies:** 3\ **Last updated:** [November 19, 2024, 10:57am UTC](https://discuss.elastic.co/t/elastic-installation-broken/370760 "2024-11-19T10:57:03Z")
Hey there, after trying to install the Elastic agent the Powershell gave me this error: I cas see that the archive had been installed but he cannot communicate with the server. What can I do do in order to fix it? --- ## [Kibana doesn't load integrations, and gets stuck loading them](https://discuss.elastic.co/t/kibana-doesnt-load-integrations-and-gets-stuck-loading-them/368913)
**Author:** [@slapjackuser](https://discuss.elastic.co/u/slapjackuser)\ **Replies:** 7\ **Last updated:** [November 19, 2024, 10:54am UTC](https://discuss.elastic.co/t/kibana-doesnt-load-integrations-and-gets-stuck-loading-them/368913 "2024-11-19T10:54:08Z")
Hey I have a problem that has been bothering me for sometime now and I would really use some help here. I am running elk stack using docker on an amazon ec2 instance (ubuntu 22.04) as a siem, the problem is when I try t… --- ## [Logstash RabbitMQ Output Plugin](https://discuss.elastic.co/t/logstash-rabbitmq-output-plugin/370757)
**Author:** [@Kris9](https://discuss.elastic.co/u/Kris9)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 9:30am UTC](https://discuss.elastic.co/t/logstash-rabbitmq-output-plugin/370757 "2024-11-19T09:30:58Z")
Hello, I am using Logstash with the JDBC input plugin to query for the top entries in a database table and then push them into RabbitMQ using the RabbitMQ output plugin. I have noticed that when the queue is down, Logst… --- ## [Filebeat jounald input paths parameter issue](https://discuss.elastic.co/t/filebeat-jounald-input-paths-parameter-issue/370668)
**Author:** [@huanghaiqing1](https://discuss.elastic.co/u/huanghaiqing1)\ **Replies:** 1\ **Last updated:** [November 19, 2024, 2:21am UTC](https://discuss.elastic.co/t/filebeat-jounald-input-paths-parameter-issue/370668 "2024-11-19T02:21:27Z")
Hello, here we are using journald input within filebeat. And regarding to paths parameter, it works for define journald log filename list. But it doesn't work well when switch to a folder. Is there a detail example about… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=133) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=135)