# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=135 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 136 --- ## [Elasticsearch upgrade from 7.9 to 8.14.3](https://discuss.elastic.co/t/elasticsearch-upgrade-from-7-9-to-8-14-3/370717)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 1\ **Last updated:** [November 18, 2024, 8:21pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-7-9-to-8-14-3/370717 "2024-11-18T20:21:26Z")
Hi All, We are currently running version 7.9.3 cluster in our environments. We need to upgrade to 8.14.3. I believe its a 2 step process where we migrate from 7.9.3 to 7.17.25 and from there use "Upgrade Assistant" to… --- ## [/tmp filling up with core dumps in Elastic Synthetics](https://discuss.elastic.co/t/tmp-filling-up-with-core-dumps-in-elastic-synthetics/370713)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [November 18, 2024, 6:08pm UTC](https://discuss.elastic.co/t/tmp-filling-up-with-core-dumps-in-elastic-synthetics/370713 "2024-11-18T18:08:30Z")
I am using Elastic Agent in our EKS cluster. Today I was notified by the cluster admin that the Synthetics nodes, which currently run elastic-agent-complete:8.15.3 are periodically filling the available disk space on the… --- ## [Conditional formatting in tabular cells using CSS](https://discuss.elastic.co/t/conditional-formatting-in-tabular-cells-using-css/370711)
**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\ **Replies:** 0\ **Last updated:** [November 18, 2024, 5:51pm UTC](https://discuss.elastic.co/t/conditional-formatting-in-tabular-cells-using-css/370711 "2024-11-18T17:51:40Z")
Hi team, I am currently building a Canvas workpad and using a Data Table visualization. I’ve successfully constructed the table using Elastic SQL. However, I have two queries regarding the table in Canvas: Is it possi… --- ## [Logstash rereading the files even after since\_db has that file entry which was already read](https://discuss.elastic.co/t/logstash-rereading-the-files-even-after-since-db-has-that-file-entry-which-was-already-read/370675)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 7\ **Last updated:** [November 18, 2024, 5:48pm UTC](https://discuss.elastic.co/t/logstash-rereading-the-files-even-after-since-db-has-that-file-entry-which-was-already-read/370675 "2024-11-18T17:48:36Z")
Hi Team, I am trying to read the files from a particular path using logstash file input plugin and i am using file\_completed\_path and since\_db path to track the list of files which are processed. It was working fine and… --- ## [Kibana Dashboard Login without login credentials](https://discuss.elastic.co/t/kibana-dashboard-login-without-login-credentials/370449)
**Author:** [@baskarsp](https://discuss.elastic.co/u/baskarsp)\ **Replies:** 3\ **Last updated:** [November 18, 2024, 5:32pm UTC](https://discuss.elastic.co/t/kibana-dashboard-login-without-login-credentials/370449 "2024-11-18T17:32:46Z")
Hello Team, We are using the latest version of ECK (open source). We have an admin portal application where our users log in using our own authentication provider credentials. I would like to allow users to access the K… --- ## [How to make facet search by multiple nested fields in Elasticsearch Java API Client?](https://discuss.elastic.co/t/how-to-make-facet-search-by-multiple-nested-fields-in-elasticsearch-java-api-client/370655)
**Author:** [@AssHands](https://discuss.elastic.co/u/AssHands)\ **Replies:** 2\ **Last updated:** [November 17, 2024, 10:51am UTC](https://discuss.elastic.co/t/how-to-make-facet-search-by-multiple-nested-fields-in-elasticsearch-java-api-client/370655 "2024-11-17T10:51:09Z")
There are my example documents "id" : "1", "title" : "test", "description" : "test", "price" : 100.0, "category\_id" : "1", "characteristics" : \[ { "characteristic\_id" : "1", "text\_value" : "red" }, { "… --- ## [Encrypting Logstash pipeline output](https://discuss.elastic.co/t/encrypting-logstash-pipeline-output/370613)
**Author:** [@Richard\_LaRoche](https://discuss.elastic.co/u/Richard_LaRoche)\ **Replies:** 5\ **Last updated:** [November 18, 2024, 4:10pm UTC](https://discuss.elastic.co/t/encrypting-logstash-pipeline-output/370613 "2024-11-18T16:10:02Z")
I am doing something new with my logstash collectors that I recently built and are working quite well. I need to start encrypting the data I am sending to another part of my organization. I have been looking at pretty … --- ## [I am trying to use debezium in a setup where each table is its own index. I want to create a merged index](https://discuss.elastic.co/t/i-am-trying-to-use-debezium-in-a-setup-where-each-table-is-its-own-index-i-want-to-create-a-merged-index/370700)
**Author:** [@randomuser24](https://discuss.elastic.co/u/randomuser24)\ **Replies:** 4\ **Last updated:** [November 18, 2024, 4:02pm UTC](https://discuss.elastic.co/t/i-am-trying-to-use-debezium-in-a-setup-where-each-table-is-its-own-index-i-want-to-create-a-merged-index/370700 "2024-11-18T16:02:51Z")
In the debezium setup i'll have an index for each table. Lets say I have the three sources indicies an Owner index, a pets index, treats index that each pet eats. How can I have a merged index where it will include a own… --- ## [Can Visualizations be open in view mode?](https://discuss.elastic.co/t/can-visualizations-be-open-in-view-mode/370676)
**Author:** [@Sinchana\_P](https://discuss.elastic.co/u/Sinchana_P)\ **Replies:** 1\ **Last updated:** [November 18, 2024, 2:56pm UTC](https://discuss.elastic.co/t/can-visualizations-be-open-in-view-mode/370676 "2024-11-18T14:56:18Z")
I see in Kibana, whenever visualization is opened. it opens in edit mode. The url is https://host:port/app/visualize#/edit/693397f0-99b5-11e9-a464-ff522372e30f? Dashboards are open in view mode Url: https://host:port/a… --- ## [Filebeat: add\_cloud\_metadata: hosting provider type not detected](https://discuss.elastic.co/t/filebeat-add-cloud-metadata-hosting-provider-type-not-detected/365395)
**Author:** [@sebagarayco](https://discuss.elastic.co/u/sebagarayco)\ **Replies:** 2\ **Last updated:** [November 18, 2024, 2:37pm UTC](https://discuss.elastic.co/t/filebeat-add-cloud-metadata-hosting-provider-type-not-detected/365395 "2024-11-18T14:37:17Z")
We are having issues while trying to use add\_cloud\_metadata in AKS clusters. Filebeat version is 8.15 and it's running AKS 1.28 clusters. Our config looks like this: processors: - add\_cloud\_metadata: p… --- ## [Check Point integration incompatible with data streams, resulting in version\_conflict\_engine\_exception](https://discuss.elastic.co/t/check-point-integration-incompatible-with-data-streams-resulting-in-version-conflict-engine-exception/361173)
**Author:** [@brynjar](https://discuss.elastic.co/u/brynjar)\ **Replies:** 6\ **Last updated:** [November 18, 2024, 10:16am UTC](https://discuss.elastic.co/t/check-point-integration-incompatible-with-data-streams-resulting-in-version-conflict-engine-exception/361173 "2024-11-18T10:16:52Z")
Hi, Ever since migrating from an in-house developed Check Point integration to the official Check Point integration for Elastic Agent, we've been getting millions of version\_conflict\_engine\_exception errors every day. P… --- ## [Index Doesnt move to DELETE Phase](https://discuss.elastic.co/t/index-doesnt-move-to-delete-phase/370214)
**Author:** [@willymathew](https://discuss.elastic.co/u/willymathew)\ **Replies:** 1\ **Last updated:** [November 10, 2024, 2:20am UTC](https://discuss.elastic.co/t/index-doesnt-move-to-delete-phase/370214 "2024-11-10T02:20:51Z")
Hello everyone I have problems with ILMs My index doesn't move to from HOT Phase to DELETE Phase this is my ilm policy which I expect to being rolled over either 30 days old or 15gb limit { "30d-rollover-50d-delete… --- ## [Permission problem when starting logstash with systemd on suse](https://discuss.elastic.co/t/permission-problem-when-starting-logstash-with-systemd-on-suse/370219)
**Author:** [@STOV](https://discuss.elastic.co/u/STOV)\ **Replies:** 8\ **Last updated:** [November 18, 2024, 8:32am UTC](https://discuss.elastic.co/t/permission-problem-when-starting-logstash-with-systemd-on-suse/370219 "2024-11-18T08:32:37Z")
Hello all, I'm having trouble getting a logstash instance to work sending events to Elasticsearch. I've troubleshooted quite far and narrowed it down to a problem somehow related to permissions but let me get into the s… --- ## [Elastic Agent : Rename agent names or add a field to differentiate them](https://discuss.elastic.co/t/elastic-agent-rename-agent-names-or-add-a-field-to-differentiate-them/357491)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 3\ **Last updated:** [November 18, 2024, 8:30am UTC](https://discuss.elastic.co/t/elastic-agent-rename-agent-names-or-add-a-field-to-differentiate-them/357491 "2024-11-18T08:30:25Z")
Hello, I'd like to deploy several agents on client servers, in fleet mode. The problem is that the agent name comes from the host machine name, and these names are often unknown to our teams. Of course, it's impossible … --- ## [Error when saving Geo Shape defined in multiple fields](https://discuss.elastic.co/t/error-when-saving-geo-shape-defined-in-multiple-fields/370559)
**Author:** [@johanjaicariph](https://discuss.elastic.co/u/johanjaicariph)\ **Replies:** 1\ **Last updated:** [November 18, 2024, 7:44am UTC](https://discuss.elastic.co/t/error-when-saving-geo-shape-defined-in-multiple-fields/370559 "2024-11-18T07:44:17Z")
Hello, I have this index geo-test with this mapping: { "mappings": { "properties": { "elasticSearchRequestList": { "type": "nested", "include\_in\_parent": true, "properties": { … --- ## [Inconsistent hybrid search hits total results lead to incorrect aggregations](https://discuss.elastic.co/t/inconsistent-hybrid-search-hits-total-results-lead-to-incorrect-aggregations/370196)
**Author:** [@andrewquang512](https://discuss.elastic.co/u/andrewquang512)\ **Replies:** 2\ **Last updated:** [November 18, 2024, 7:38am UTC](https://discuss.elastic.co/t/inconsistent-hybrid-search-hits-total-results-lead-to-incorrect-aggregations/370196 "2024-11-18T07:38:45Z")
Hi All, My team is working on system using hybrid search combining knn search and full-text queries. There is a usecase that we need to count a tag field data which we are using Term Aggregation and display these counts… --- ## [Kinaba pattern or using a machine learning?](https://discuss.elastic.co/t/kinaba-pattern-or-using-a-machine-learning/370596)
**Author:** [@FJT](https://discuss.elastic.co/u/FJT)\ **Replies:** 0\ **Last updated:** [November 15, 2024, 9:14am UTC](https://discuss.elastic.co/t/kinaba-pattern-or-using-a-machine-learning/370596 "2024-11-15T09:14:38Z")
Hello Everyone, I am evaluating the Machine Learning capabilities in Kibana for our error log analysis and visualization. If the system can handle our requirements, we plan to purchase a subscription for the company. I'… --- ## [Can the Elasticsearch release version, such as 8.16, be used for commercial purposes without modifying the source code?](https://discuss.elastic.co/t/can-the-elasticsearch-release-version-such-as-8-16-be-used-for-commercial-purposes-without-modifying-the-source-code/370671)
**Author:** [@Tomzhuiowewie](https://discuss.elastic.co/u/Tomzhuiowewie)\ **Replies:** 1\ **Last updated:** [November 18, 2024, 6:17am UTC](https://discuss.elastic.co/t/can-the-elasticsearch-release-version-such-as-8-16-be-used-for-commercial-purposes-without-modifying-the-source-code/370671 "2024-11-18T06:17:30Z")
"Can the Elasticsearch release version, such as 8.16, be used for commercial purposes without modifying the source code?" --- ## [Securing self-managed ELK (Keystore file does not exist)](https://discuss.elastic.co/t/securing-self-managed-elk-keystore-file-does-not-exist/366169)
**Author:** [@raiden](https://discuss.elastic.co/u/raiden)\ **Replies:** 2\ **Last updated:** [November 18, 2024, 6:09am UTC](https://discuss.elastic.co/t/securing-self-managed-elk-keystore-file-does-not-exist/366169 "2024-11-18T06:09:06Z")
Hi new to the forum. I'm trying to implement a self-managed Elastic Stack using this guide: But when i arrive at Step 1 part 6, I am able to run the command and receive a "Certificate was added to the keystore" but wh… --- ## [Logstash filter for slow query logs](https://discuss.elastic.co/t/logstash-filter-for-slow-query-logs/370586)
**Author:** [@FJT](https://discuss.elastic.co/u/FJT)\ **Replies:** 2\ **Last updated:** [November 18, 2024, 5:06am UTC](https://discuss.elastic.co/t/logstash-filter-for-slow-query-logs/370586 "2024-11-18T05:06:18Z")
Hello can you help me and I am new to ELK. I am using a filebeat to send to logstash. and i am trying to parse my slow query log can you help me in creating a grok pattern. So what I want to achieve was to have a separa… --- ## [Api key management unresponsive - 502 Bad Gateway](https://discuss.elastic.co/t/api-key-management-unresponsive-502-bad-gateway/370667)
**Author:** [@Cashmay0r](https://discuss.elastic.co/u/Cashmay0r)\ **Replies:** 0\ **Last updated:** [November 18, 2024, 3:03am UTC](https://discuss.elastic.co/t/api-key-management-unresponsive-502-bad-gateway/370667 "2024-11-18T03:03:57Z")
Hey, I'm having issues creating and deleting api keys. When I go to create an api key, either through the kibana interface or dev tools, after a minute or so, I eventually get a 502 Bad Gateway response. All other … --- ## [Is it possible to using \_id in elasticsearch sql](https://discuss.elastic.co/t/is-it-possible-to-using-id-in-elasticsearch-sql/369859)
**Author:** [@jimmy0](https://discuss.elastic.co/u/jimmy0)\ **Replies:** 4\ **Last updated:** [November 18, 2024, 1:35am UTC](https://discuss.elastic.co/t/is-it-possible-to-using-id-in-elasticsearch-sql/369859 "2024-11-18T01:35:31Z")
When i use \_id in a elasticsearch sql， GET /\_sql { "query": """ select \* from question where \_id='RzSIwnABg0jflGUtAmBx' """ } i get an error. { "error": { "root\_cause": \[ { "type": "verificat… --- ## [Pipeline error reader unacceptable code point ' ' (0x0) special characters are not allowed](https://discuss.elastic.co/t/pipeline-error-reader-unacceptable-code-point-0x0-special-characters-are-not-allowed/370546)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 3\ **Last updated:** [November 17, 2024, 1:58pm UTC](https://discuss.elastic.co/t/pipeline-error-reader-unacceptable-code-point-0x0-special-characters-are-not-allowed/370546 "2024-11-17T13:58:48Z")
Hello, I have a pipeline that was working for almost a year, then 4 days ago we restarted elasticsearch as it was taking so much RAM (exceeding jvm.heap size) and the pipeline stopped working and the below error popped … --- ## [I want to recreate the java heap memory issue which is happening in production](https://discuss.elastic.co/t/i-want-to-recreate-the-java-heap-memory-issue-which-is-happening-in-production/370616)
**Author:** [@devops\_training](https://discuss.elastic.co/u/devops_training)\ **Replies:** 2\ **Last updated:** [November 17, 2024, 11:14am UTC](https://discuss.elastic.co/t/i-want-to-recreate-the-java-heap-memory-issue-which-is-happening-in-production/370616 "2024-11-17T11:14:10Z")
Testing in windows instance C:\\monitoring\\logstash\\logstash-8.15.1\\config\\jvm.options Change the below parameters JVM configuration Xms represents the initial size of total heap space Xmx represents the maximum size o… --- ## [Elasticsearch Log4j File Producing an error](https://discuss.elastic.co/t/elasticsearch-log4j-file-producing-an-error/370623)
**Author:** [@ESuleman](https://discuss.elastic.co/u/ESuleman)\ **Replies:** 3\ **Last updated:** [November 17, 2024, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-log4j-file-producing-an-error/370623 "2024-11-17T10:43:59Z")
Hello. I have 3 cluster Elasticsearch node running on version 8.6.2- at the moment our nodes are constantly going down due to the errors taken from the log files below. Is anyone familiar with these messages? ERROR: El… --- ## [Streaming in ai assistant](https://discuss.elastic.co/t/streaming-in-ai-assistant/370650)
**Author:** [@Vajihe\_Nikkhah](https://discuss.elastic.co/u/Vajihe_Nikkhah)\ **Replies:** 3\ **Last updated:** [November 17, 2024, 10:10am UTC](https://discuss.elastic.co/t/streaming-in-ai-assistant/370650 "2024-11-17T10:10:47Z")
I connected elastic ai assistant to my local llm. when I active streaming control in ai assistant settings, this error is shown: Error: Response from LLM API is empty or undefined. I check the request which is sent to l… --- ## [SLO screen report generation](https://discuss.elastic.co/t/slo-screen-report-generation/370649)
**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\ **Replies:** 0\ **Last updated:** [November 17, 2024, 5:44am UTC](https://discuss.elastic.co/t/slo-screen-report-generation/370649 "2024-11-17T05:44:31Z")
In elasticstack version 8.15 , Option SLO screen has any report generation functionality. we have requirement to send the history report SLI to application owners. Regards, Vijay --- ## [Filebeat package 7.10.2](https://discuss.elastic.co/t/filebeat-package-7-10-2/370495)
**Author:** [@nahuel978](https://discuss.elastic.co/u/nahuel978)\ **Replies:** 1\ **Last updated:** [November 16, 2024, 7:56pm UTC](https://discuss.elastic.co/t/filebeat-package-7-10-2/370495 "2024-11-16T19:56:49Z")
Hello everyone! I am trying to generate the packages for Filebeat version 7.10.2, specifically for amd64 and arm64 architectures, and deb and rpm package types. To do this, I ran the following command inside the Filebea… --- ## [Logstash doesn't send the logs to Elastic Cloud](https://discuss.elastic.co/t/logstash-doesnt-send-the-logs-to-elastic-cloud/370426)
**Author:** [@sevbans](https://discuss.elastic.co/u/sevbans)\ **Replies:** 1\ **Last updated:** [November 16, 2024, 5:04pm UTC](https://discuss.elastic.co/t/logstash-doesnt-send-the-logs-to-elastic-cloud/370426 "2024-11-16T17:04:52Z")
I'm trying to send some index dedicated elasticsearch cluster to elasticsearch cloud. sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash-sample.conf Using bundled JDK: /usr/share/logstash/jdk WARNI… --- ## [Keyword with lowercase , text with raw case content](https://discuss.elastic.co/t/keyword-with-lowercase-text-with-raw-case-content/370643)
**Author:** [@Rz2024](https://discuss.elastic.co/u/Rz2024)\ **Replies:** 0\ **Last updated:** [November 16, 2024, 2:57pm UTC](https://discuss.elastic.co/t/keyword-with-lowercase-text-with-raw-case-content/370643 "2024-11-16T14:57:55Z")
the text field publisher the mapping and the index setting for books "publisher": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_above"… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=134) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=136)