# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=137 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 138 --- ## [Tune elasticsearch for searching speed](https://discuss.elastic.co/t/tune-elasticsearch-for-searching-speed/370506)
**Author:** [@aldoorozco](https://discuss.elastic.co/u/aldoorozco)\ **Replies:** 4\ **Last updated:** [November 14, 2024, 6:17pm UTC](https://discuss.elastic.co/t/tune-elasticsearch-for-searching-speed/370506 "2024-11-14T18:17:03Z")
Hi community, Looking for some ideas on ways to improve searching performance of vector searches on Elasticsearch v8.15.0. The index I'm running searches on contains 150M documents (they are only loaded once, and never… --- ## [Error when accessing watcher execution results in ELK 8.15.0](https://discuss.elastic.co/t/error-when-accessing-watcher-execution-results-in-elk-8-15-0/370488)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 1\ **Last updated:** [November 14, 2024, 6:15pm UTC](https://discuss.elastic.co/t/error-when-accessing-watcher-execution-results-in-elk-8-15-0/370488 "2024-11-14T18:15:00Z")
We are releasing to a customer soon and would like to know if there is a patch or workaround for this issue. In Kibana 18.15.0 and 8.15.3 Navigate to Stack Management -\> Watcher Under Watcher click Create and then "Cr… --- ## [Kibana dashboards not loading](https://discuss.elastic.co/t/kibana-dashboards-not-loading/370462)
**Author:** [@shay\_abergil](https://discuss.elastic.co/u/shay_abergil)\ **Replies:** 3\ **Last updated:** [November 14, 2024, 6:11pm UTC](https://discuss.elastic.co/t/kibana-dashboards-not-loading/370462 "2024-11-14T18:11:02Z")
Hey there, 2 of my dashboards stopped loading in the last few days without notable reason. The page layout and controllers do not load/respond and I can't edit the page or add new visualizations. The data view works w… --- ## [Windows Event pipelines - beats vs agent](https://discuss.elastic.co/t/windows-event-pipelines-beats-vs-agent/370420)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 2\ **Last updated:** [November 14, 2024, 5:37pm UTC](https://discuss.elastic.co/t/windows-event-pipelines-beats-vs-agent/370420 "2024-11-14T17:37:44Z")
When a new version of winlogbeat is setup, it loads 5 pipelines with some having a lot of processors (44-93). Looking at the logs-winlog pipelines for the agents, there are only the stubs for the optional @custom pipeli… --- ## [Lucene vulnerability in elastic search](https://discuss.elastic.co/t/lucene-vulnerability-in-elastic-search/370563)
**Author:** [@Monica\_Muraliprakash](https://discuss.elastic.co/u/Monica_Muraliprakash)\ **Replies:** 2\ **Last updated:** [November 14, 2024, 3:07pm UTC](https://discuss.elastic.co/t/lucene-vulnerability-in-elastic-search/370563 "2024-11-14T15:07:06Z")
We are seeing that Vulnerable version of Apache Lucene\[8.11.3\] is consumed in Elasticsearch. It is related to the Apache Lucene replicator. Here it is recommended to upgrade to 9.12.0 of Lucene but the elasticsearch high… --- ## [Get last modification timestamp of file](https://discuss.elastic.co/t/get-last-modification-timestamp-of-file/370477)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [November 14, 2024, 2:45pm UTC](https://discuss.elastic.co/t/get-last-modification-timestamp-of-file/370477 "2024-11-14T14:45:48Z")
is there a way I can only get modified timestamp of a file and sent out via filebeat? What I need is from dir like this "/dir1/dir\*/\*.log" send modification time of this log file every few min to kafka. multiple dir w… --- ## [Property \[name\] is missing for plugin \[plugin-descriptor.properties\] while starting](https://discuss.elastic.co/t/property-name-is-missing-for-plugin-plugin-descriptor-properties-while-starting/370525)
**Author:** [@AlexeiKlimenko](https://discuss.elastic.co/u/AlexeiKlimenko)\ **Replies:** 11\ **Last updated:** [November 14, 2024, 2:36pm UTC](https://discuss.elastic.co/t/property-name-is-missing-for-plugin-plugin-descriptor-properties-while-starting/370525 "2024-11-14T14:36:09Z")
Hello. Installed ES ii elasticsearch 8.15.2 amd64 Distributed RESTful search engine built for the cloud When configured as a first node for future cluster: cluster.name: … --- ## [Help Needed: Converting Numeric Aggregation Output to Boolean ("Up"/"Down") in Watcher Email Template](https://discuss.elastic.co/t/help-needed-converting-numeric-aggregation-output-to-boolean-up-down-in-watcher-email-template/370512)
**Author:** [@Sathishkumar\_Kanda](https://discuss.elastic.co/u/Sathishkumar_Kanda)\ **Replies:** 1\ **Last updated:** [November 14, 2024, 2:34pm UTC](https://discuss.elastic.co/t/help-needed-converting-numeric-aggregation-output-to-boolean-up-down-in-watcher-email-template/370512 "2024-11-14T14:34:03Z")
I’m configuring a watcher and email action in Elasticsearch to monitor the health status of multiple services and send email notifications with the status. Specifically, I need the status to display as either "Up" or "Do… --- ## [What kind of query would cause the data node's cpuload to increase while cpuused remains constant?](https://discuss.elastic.co/t/what-kind-of-query-would-cause-the-data-nodes-cpuload-to-increase-while-cpuused-remains-constant/362444)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 6\ **Last updated:** [November 14, 2024, 1:35pm UTC](https://discuss.elastic.co/t/what-kind-of-query-would-cause-the-data-nodes-cpuload-to-increase-while-cpuused-remains-constant/362444 "2024-11-14T13:35:13Z")
I noticed that the monitoring chart of my Elasticsearch data node looks a bit strange, as the cpuload keeps increasing at regular intervals, while cpuused remains stable. Additionally, when cpuload increases, metrics tha… --- ## [How to set multi\_match default to phrase instead of best\_fields in Kibana?](https://discuss.elastic.co/t/how-to-set-multi-match-default-to-phrase-instead-of-best-fields-in-kibana/370555)
**Author:** [@Leonardo\_Santos](https://discuss.elastic.co/u/Leonardo_Santos)\ **Replies:** 0\ **Last updated:** [November 14, 2024, 1:24pm UTC](https://discuss.elastic.co/t/how-to-set-multi-match-default-to-phrase-instead-of-best-fields-in-kibana/370555 "2024-11-14T13:24:56Z")
Hi there, I've observed that most of my users are searching in Kibana with queries like my nice query, which expands to a multi\_match search with type: best\_fields, triggering separate searches for each token in the phr… --- ## [Testing package contents](https://discuss.elastic.co/t/testing-package-contents/370551)
**Author:** [@nahuel978](https://discuss.elastic.co/u/nahuel978)\ **Replies:** 0\ **Last updated:** [November 14, 2024, 12:55pm UTC](https://discuss.elastic.co/t/testing-package-contents/370551 "2024-11-14T12:55:01Z")
Hi everyone! Could you help me resolve the following error generated during the creation of a package for filebeat 7.10.2: \>\> Testing package contents --- FAIL: TestDocker (2.66s) package\_test.go:188: error reading … --- ## [New Elastic Cluster Sizing/Data-Tiering](https://discuss.elastic.co/t/new-elastic-cluster-sizing-data-tiering/370547)
**Author:** [@Jan3124](https://discuss.elastic.co/u/Jan3124)\ **Replies:** 0\ **Last updated:** [November 14, 2024, 12:18pm UTC](https://discuss.elastic.co/t/new-elastic-cluster-sizing-data-tiering/370547 "2024-11-14T12:18:28Z")
Hello everyone, I work in a medium-sized company and have been responsible for optimizing and expanding the internal, on-premises elastic stack cluster since this year. The cluster has been in operation for years, but h… --- ## [Help with sizing](https://discuss.elastic.co/t/help-with-sizing/370543)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 1\ **Last updated:** [November 14, 2024, 11:52am UTC](https://discuss.elastic.co/t/help-with-sizing/370543 "2024-11-14T11:52:20Z")
This is my current set up. How does licensing work if I want to go with platinum or enterprise license? Current ELK Setup: Elasticsearch: 3 nodes Logstash:1 node Kibana:1 node ELK stack deployed Docker containers.… --- ## [How to update Index using "script" in logstash output](https://discuss.elastic.co/t/how-to-update-index-using-script-in-logstash-output/370535)
**Author:** [@vijay117](https://discuss.elastic.co/u/vijay117)\ **Replies:** 1\ **Last updated:** [November 14, 2024, 11:20am UTC](https://discuss.elastic.co/t/how-to-update-index-using-script-in-logstash-output/370535 "2024-11-14T11:20:11Z")
I want to update an Index based on session id present in the data i'm reading so in the current data i would be reading transaction number, createdate and also session id, if this session id matches with the session id … --- ## [Fleet - agent unhealthy](https://discuss.elastic.co/t/fleet-agent-unhealthy/370224)
**Author:** [@sranda.zitra](https://discuss.elastic.co/u/sranda.zitra)\ **Replies:** 3\ **Last updated:** [November 14, 2024, 11:37am UTC](https://discuss.elastic.co/t/fleet-agent-unhealthy/370224 "2024-11-14T11:37:00Z")
Hello, I am running Elastic cluster on version 8.15.3. I am trying to deploy fleet server on one of the nodes and I go through the setup of fleet server as advised by Kibana. The CLI installation of fleet is done via th… --- ## [Elastic Dashboard](https://discuss.elastic.co/t/elastic-dashboard/370316)
**Author:** [@Rafael\_Vitor](https://discuss.elastic.co/u/Rafael_Vitor)\ **Replies:** 11\ **Last updated:** [November 14, 2024, 11:07am UTC](https://discuss.elastic.co/t/elastic-dashboard/370316 "2024-11-14T11:07:40Z")
I need to create a custom dashboard, I would like to do something within ELK like the image below. --- ## [Error upgrading the selected agent Cannot read existing Message Signing Key pair](https://discuss.elastic.co/t/error-upgrading-the-selected-agent-cannot-read-existing-message-signing-key-pair/370537)
**Author:** [@Arianit](https://discuss.elastic.co/u/Arianit)\ **Replies:** 0\ **Last updated:** [November 14, 2024, 10:09am UTC](https://discuss.elastic.co/t/error-upgrading-the-selected-agent-cannot-read-existing-message-signing-key-pair/370537 "2024-11-14T10:09:52Z")
Hi, When i try to upgrade an Agent it shows us this error: --- ## [The destination index is not updated by continuous transform](https://discuss.elastic.co/t/the-destination-index-is-not-updated-by-continuous-transform/370526)
**Author:** [@realvie](https://discuss.elastic.co/u/realvie)\ **Replies:** 0\ **Last updated:** [November 14, 2024, 7:47am UTC](https://discuss.elastic.co/t/the-destination-index-is-not-updated-by-continuous-transform/370526 "2024-11-14T07:47:09Z")
Hi Team, I have created a transform by api as follows: PUT /\_transform/product\_transform { "source": { "index": "all\_requests" }, "dest": { "index": "product\_transform\_index" }, "pivot": { "group\_b… --- ## [connecting filebeat with stream API](https://discuss.elastic.co/t/connecting-filebeat-with-stream-api/370513)
**Author:** [@masber1](https://discuss.elastic.co/u/masber1)\ **Replies:** 1\ **Last updated:** [November 14, 2024, 2:45am UTC](https://discuss.elastic.co/t/connecting-filebeat-with-stream-api/370513 "2024-11-14T02:45:30Z")
Dear filebeat community, I am new to elastic and filebeat and need some help. I am trying to make filebeat to get log events from a hashicorp Nomad server stream api (Events - HTTP API | Nomad | HashiCorp Developer) th… --- ## [Line Break Not Working](https://discuss.elastic.co/t/line-break-not-working/370505)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 3\ **Last updated:** [November 13, 2024, 11:50pm UTC](https://discuss.elastic.co/t/line-break-not-working/370505 "2024-11-13T23:50:58Z")
Good Day, How do you output new line with a break within Logstash. I am currently trying to do this with the following line from my filter: event.set('sender\_domain', sender\_domain.join('\\n')) I want to the output of… --- ## [Output to elasticsearch hitting error 409](https://discuss.elastic.co/t/output-to-elasticsearch-hitting-error-409/370483)
**Author:** [@tbrettinger](https://discuss.elastic.co/u/tbrettinger)\ **Replies:** 4\ **Last updated:** [November 13, 2024, 11:17pm UTC](https://discuss.elastic.co/t/output-to-elasticsearch-hitting-error-409/370483 "2024-11-13T23:17:55Z")
Hi, i'm rather new to elasticsearch, so I guess I am missing something obvious. I am trying to migrate data from opensearch to elasticsearch, following allong this article: After some fiddling, I got logstash to read… --- ## [Multi Language Detection & Query Translation](https://discuss.elastic.co/t/multi-language-detection-query-translation/370497)
**Author:** [@Manasa4](https://discuss.elastic.co/u/Manasa4)\ **Replies:** 0\ **Last updated:** [November 13, 2024, 4:54pm UTC](https://discuss.elastic.co/t/multi-language-detection-query-translation/370497 "2024-11-13T16:54:47Z")
Hi Team, We have a scenario where we have entityname field with some data in different languages (eg : Chinese, English, Hebrew, French). If we try searching for a field data with English related content, do we have a m… --- ## [Watcher Email CSV Issue](https://discuss.elastic.co/t/watcher-email-csv-issue/370174)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 4\ **Last updated:** [November 13, 2024, 4:47pm UTC](https://discuss.elastic.co/t/watcher-email-csv-issue/370174 "2024-11-13T16:47:15Z")
Hello, I am on ES/Kibana 8.15.3 I attempted to create a watcher using the POST URL for saved searches. The issue is that its not working, its saying its an SSL Handshake exception: This is very confusing because K… --- ## [How to stop Filebeat from shipping incorrect JSON to Elastic?](https://discuss.elastic.co/t/how-to-stop-filebeat-from-shipping-incorrect-json-to-elastic/369162)
**Author:** [@andreycha](https://discuss.elastic.co/u/andreycha)\ **Replies:** 2\ **Last updated:** [November 13, 2024, 3:46pm UTC](https://discuss.elastic.co/t/how-to-stop-filebeat-from-shipping-incorrect-json-to-elastic/369162 "2024-11-13T15:46:14Z")
Hi, Our applications emit logs in ECS format, a log entry per line. In Filebeat config we have a parser defined: parsers: - ndjson: target: '' expand\_keys: true overwrite\_keys: true add\_error\_… --- ## [Vulnerabilities found in JDK 22.0.1, ELK 8.15.3](https://discuss.elastic.co/t/vulnerabilities-found-in-jdk-22-0-1-elk-8-15-3/370489)
**Author:** [@Jonathan\_Gurumendi](https://discuss.elastic.co/u/Jonathan_Gurumendi)\ **Replies:** 1\ **Last updated:** [November 13, 2024, 3:42pm UTC](https://discuss.elastic.co/t/vulnerabilities-found-in-jdk-22-0-1-elk-8-15-3/370489 "2024-11-13T15:42:32Z")
I found some vulnerabilities in the java jdk 22.0.1 version included in my version of ELK 8.15.3, I want to know how to correctly upgrade the version of java jdk included in ELK, or alternatively, know if these vulnerabi… --- ## [Can't connect from another pc](https://discuss.elastic.co/t/cant-connect-from-another-pc/370466)
**Author:** [@Manuele\_Orlandi](https://discuss.elastic.co/u/Manuele_Orlandi)\ **Replies:** 2\ **Last updated:** [November 13, 2024, 3:42pm UTC](https://discuss.elastic.co/t/cant-connect-from-another-pc/370466 "2024-11-13T15:42:19Z")
Hi all, i'm neewbi with Elasticsearch. I'm trying ton install the service on a windows machine. The service should be reachable from the firewall. With the basic setup the service is reacheable only from the same PC. I… --- ## [Elasticsearch service is going down](https://discuss.elastic.co/t/elasticsearch-service-is-going-down/369154)
**Author:** [@moazam](https://discuss.elastic.co/u/moazam)\ **Replies:** 2\ **Last updated:** [November 13, 2024, 3:42pm UTC](https://discuss.elastic.co/t/elasticsearch-service-is-going-down/369154 "2024-11-13T15:42:04Z")
I have xpack disabled but yet it's complaining about xpack. I have reinstalled Elasticsearch server on Almalinux 9 but still no luck. Any help will be greatly appreciated. Error log: \[2024-10-20T21:40:53,068\]\[ERROR\]\[o.e… --- ## [Disabled filter on a panel](https://discuss.elastic.co/t/disabled-filter-on-a-panel/370168)
**Author:** [@johngregg](https://discuss.elastic.co/u/johngregg)\ **Replies:** 3\ **Last updated:** [November 13, 2024, 3:32pm UTC](https://discuss.elastic.co/t/disabled-filter-on-a-panel/370168 "2024-11-13T15:32:02Z")
This is related to a question I asked last year. I have a dashboard panel showing GC count (jvm.gc.count.) I have it broken down by labels.name, which is how I get separate counts for young and old GCs. However the le… --- ## [Logstash 8.15.2 Error :exception=\>#\ **Author:** [@carellevbt](https://discuss.elastic.co/u/carellevbt)\ **Replies:** 2\ **Last updated:** [November 13, 2024, 3:01pm UTC](https://discuss.elastic.co/t/logstash-8-15-2-error-exception-errno-no-such-file-or-directory-no-such-file-or-directory-tmp-logstash-applog-iq-42dac6d2-4c55-4e75-93d8-044b9f04e1ab/370146 "2024-11-13T15:01:50Z") Hello, We recently split up one big pipeline we had into 7 pipelines. Ever since we did that, we get the below error when doing a deployment. Pipeline error {:pipeline\_id=\>"applog-iq", :exception=\>#\ **Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 4\ **Last updated:** [November 13, 2024, 2:09pm UTC](https://discuss.elastic.co/t/minimum-license-purchase-requirement-for-elastic-stack/370463 "2024-11-13T14:09:46Z") Hi, I'm looking for clarification on Elastic's license purchasing requirements. Specifically, is there a minimum number of licenses that must be purchased? For example, can I purchase just 1 or 2 licenses, or is there a… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=136) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=138)