# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=139 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 140 --- ## [Elasticsearch Query match 100% with exact match](https://discuss.elastic.co/t/elasticsearch-query-match-100-with-exact-match/370361)
**Author:** [@Mohan\_T](https://discuss.elastic.co/u/Mohan_T)\ **Replies:** 3\ **Last updated:** [November 12, 2024, 7:48am UTC](https://discuss.elastic.co/t/elasticsearch-query-match-100-with-exact-match/370361 "2024-11-12T07:48:19Z")
Search term: wall clock Document 1 { "title": "wall clock" } Document 2 { "title": "clock wall" } Document 3 { "title": "wall clock in bangalore" } query which I have used { "\_source": \[ "… --- ## [Regexp is not working](https://discuss.elastic.co/t/regexp-is-not-working/369971)
**Author:** [@GopalaKrishnan\_Rathi](https://discuss.elastic.co/u/GopalaKrishnan_Rathi)\ **Replies:** 4\ **Last updated:** [November 12, 2024, 6:03am UTC](https://discuss.elastic.co/t/regexp-is-not-working/369971 "2024-11-12T06:03:16Z")
Hello, I am trying filter the data from kibana elastic using below query. I need output - hain \[ like below mentioned, localhost:3000 10.42.10.112 - hain \[01/Nov/2024:18:20:05 +0000\] Kindly help me out. Below quer… --- ## [What is the headers.content\_length filed in kibans](https://discuss.elastic.co/t/what-is-the-headers-content-length-filed-in-kibans/369357)
**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\ **Replies:** 2\ **Last updated:** [November 12, 2024, 5:36am UTC](https://discuss.elastic.co/t/what-is-the-headers-content-length-filed-in-kibans/369357 "2024-11-12T05:36:55Z")
Hi, I am using logstash http input plugin to get the logs from application team. In kibana i am getting "headers.content\_length" field with numaric value. I did not get what is the exact meaning of "headers.content\_leng… --- ## [ES Cluster stopped working](https://discuss.elastic.co/t/es-cluster-stopped-working/370147)
**Author:** [@Techiebee](https://discuss.elastic.co/u/Techiebee)\ **Replies:** 6\ **Last updated:** [November 12, 2024, 1:05am UTC](https://discuss.elastic.co/t/es-cluster-stopped-working/370147 "2024-11-12T01:05:12Z")
My ES cluster is a 3 node setup cluster running on ES 7.17 , lately its giving alot of issues, So i had to made a single node setup removing the nodes and re-indexed from the application console. Now if I revert back to … --- ## [How to install heartbeat on Elastic cloud](https://discuss.elastic.co/t/how-to-install-heartbeat-on-elastic-cloud/370349)
**Author:** [@pdorcas](https://discuss.elastic.co/u/pdorcas)\ **Replies:** 1\ **Last updated:** [November 11, 2024, 8:55pm UTC](https://discuss.elastic.co/t/how-to-install-heartbeat-on-elastic-cloud/370349 "2024-11-11T20:55:37Z")
We are using the Elastic cloud and wish to install Heartbeat to monitor uptime. When we go to the Uptime app, it provides a button Add monitors with Heartbeat. Then when we click on it, it takes us to the installation … --- ## [Configure a custom s3 repository](https://discuss.elastic.co/t/configure-a-custom-s3-repository/370342)
**Author:** [@mahdi\_darvishiyan](https://discuss.elastic.co/u/mahdi_darvishiyan)\ **Replies:** 5\ **Last updated:** [November 11, 2024, 7:58pm UTC](https://discuss.elastic.co/t/configure-a-custom-s3-repository/370342 "2024-11-11T19:58:53Z")
i have a custom s3 server that is not aws and although I write configs in elasticsearch.yml and store keys in elasticsearch keystore still not be able to connect to my s3 bucket --- ## [How does one track who made what changes to a kibana dashboard or viz?](https://discuss.elastic.co/t/how-does-one-track-who-made-what-changes-to-a-kibana-dashboard-or-viz/370319)
**Author:** [@bacony0atmeal](https://discuss.elastic.co/u/bacony0atmeal)\ **Replies:** 1\ **Last updated:** [November 11, 2024, 6:42pm UTC](https://discuss.elastic.co/t/how-does-one-track-who-made-what-changes-to-a-kibana-dashboard-or-viz/370319 "2024-11-11T18:42:05Z")
i have a wide variety of humans who are enabled to access and edit "their" kibana content ... e.g. dashboards, visualizations, etc. one of the humans is having issues finding a viz. are there any logs that i can inspec… --- ## [Removing New Line Characters in http output](https://discuss.elastic.co/t/removing-new-line-characters-in-http-output/370336)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 1\ **Last updated:** [November 11, 2024, 5:43pm UTC](https://discuss.elastic.co/t/removing-new-line-characters-in-http-output/370336 "2024-11-11T17:43:21Z")
Good Day, Is there a way to remove a New Line Characters from the http\_output command when sending to a server via API. The system receiving the data has to accept the data as a single string of text and it has to be p… --- ## [Metricbeat: anyway to capture alternatives host.name in aws ec2?](https://discuss.elastic.co/t/metricbeat-anyway-to-capture-alternatives-host-name-in-aws-ec2/370328)
**Author:** [@Ruben\_Laguna](https://discuss.elastic.co/u/Ruben_Laguna)\ **Replies:** 0\ **Last updated:** [November 11, 2024, 3:31pm UTC](https://discuss.elastic.co/t/metricbeat-anyway-to-capture-alternatives-host-name-in-aws-ec2/370328 "2024-11-11T15:31:43Z")
I have an EC2 instance and metricbeat is setting host.name to i-xxxxxxxx.eu-north-1.compute.internal which is correct. But this machine has an alternative hostname for me "xxxxx.mycompany.com". What is the best way to … --- ## [Reindexing an index with 3000 fields](https://discuss.elastic.co/t/reindexing-an-index-with-3000-fields/370321)
**Author:** [@PopisanaOgrada](https://discuss.elastic.co/u/PopisanaOgrada)\ **Replies:** 0\ **Last updated:** [November 11, 2024, 2:15pm UTC](https://discuss.elastic.co/t/reindexing-an-index-with-3000-fields/370321 "2024-11-11T14:15:36Z")
Hello! Is it possible to reindex an index with 3000 fields (index.mapping.total\_fields.limit is already set to 3000) to an index with default index.mapping.total\_fields.limit of 1000? If yes, what are all the possible … --- ## [Running 3 queries in logstash](https://discuss.elastic.co/t/running-3-queries-in-logstash/370304)
**Author:** [@Santanu112](https://discuss.elastic.co/u/Santanu112)\ **Replies:** 1\ **Last updated:** [November 11, 2024, 1:26pm UTC](https://discuss.elastic.co/t/running-3-queries-in-logstash/370304 "2024-11-11T13:26:08Z")
HI , I want to use below sql queries :slight\_smile: select id form table 1 (it will give millions id) select id, name from table 2 select id , location from table 3 My doc should look like below : { id :1 name : a… --- ## [Logstash input plugin development - no examples found](https://discuss.elastic.co/t/logstash-input-plugin-development-no-examples-found/370312)
**Author:** [@DOkuwa](https://discuss.elastic.co/u/DOkuwa)\ **Replies:** 0\ **Last updated:** [November 11, 2024, 11:48am UTC](https://discuss.elastic.co/t/logstash-input-plugin-development-no-examples-found/370312 "2024-11-11T11:48:06Z")
Hello, I am writing my own plugin and when testing it is not showing any example in the code i will this text as BOLD as i am sending the .rb in the spec and lib directory \[root@Daley-DB-second inputs\]# bundle exec r… --- ## [Search term: should match 100 %](https://discuss.elastic.co/t/search-term-should-match-100/366001)
**Author:** [@Mohan\_T](https://discuss.elastic.co/u/Mohan_T)\ **Replies:** 6\ **Last updated:** [November 11, 2024, 8:16am UTC](https://discuss.elastic.co/t/search-term-should-match-100/366001 "2024-11-11T08:16:58Z")
Search term: italian marble flooring Document 1 { "s\_title": "italian marble flooring" } Document 2 { "s\_title": "italian marble floor" } Document 3 { "s\_title": "italian marble flooring in salem" } qu… --- ## [Fleet Dashboard Not Loading or Taking Too Long to Load](https://discuss.elastic.co/t/fleet-dashboard-not-loading-or-taking-too-long-to-load/366657)
**Author:** [@prabhuteja](https://discuss.elastic.co/u/prabhuteja)\ **Replies:** 26\ **Last updated:** [November 11, 2024, 4:24am UTC](https://discuss.elastic.co/t/fleet-dashboard-not-loading-or-taking-too-long-to-load/366657 "2024-11-11T04:24:15Z")
Hi all, I am experiencing an issue with my Fleet dashboard in Kibana. It is either not loading or taking an extremely long time to load. Here are the details of my setup: Elasticsearch is running on svr15 (Ubuntu) in … --- ## [Why I am getting this manage\_inference error when using the elasticsearch python library?](https://discuss.elastic.co/t/why-i-am-getting-this-manage-inference-error-when-using-the-elasticsearch-python-library/370289)
**Author:** [@977db4bf8694e7df28b0](https://discuss.elastic.co/u/977db4bf8694e7df28b0)\ **Replies:** 3\ **Last updated:** [November 10, 2024, 7:44pm UTC](https://discuss.elastic.co/t/why-i-am-getting-this-manage-inference-error-when-using-the-elasticsearch-python-library/370289 "2024-11-10T19:44:20Z")
I am using elasticsearch python library with api access to the cluster. The api has manage previliges for the indices I am processing but seems to fail for 8.15.1 cluster but works fine for all the others. I tried it wit… --- ## [Standard approach to having a cluster with separate master and data node](https://discuss.elastic.co/t/standard-approach-to-having-a-cluster-with-separate-master-and-data-node/370294)
**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\ **Replies:** 0\ **Last updated:** [November 10, 2024, 6:42pm UTC](https://discuss.elastic.co/t/standard-approach-to-having-a-cluster-with-separate-master-and-data-node/370294 "2024-11-10T18:42:49Z")
Lets say i want to have a cluster with 3 master only nodes and a data only node. What is the best practice to build such a cluster. Is there a way to to make it happen without having at least a node that is both master … --- ## [Reindexing a datastream after changed mappings : best practice?](https://discuss.elastic.co/t/reindexing-a-datastream-after-changed-mappings-best-practice/370275)
**Author:** [@gpineda\_dev](https://discuss.elastic.co/u/gpineda_dev)\ **Replies:** 0\ **Last updated:** [November 10, 2024, 1:04am UTC](https://discuss.elastic.co/t/reindexing-a-datastream-after-changed-mappings-best-practice/370275 "2024-11-10T01:04:13Z")
Before writing this post, I started by gathering available information on this platform, official documentation, related articles. Examples to reindex basic indices are easy to find but when it comes to datastream, then… --- ## [No idea how to setup pipeline for the xml parsing](https://discuss.elastic.co/t/no-idea-how-to-setup-pipeline-for-the-xml-parsing/370243)
**Author:** [@Nevov21](https://discuss.elastic.co/u/Nevov21)\ **Replies:** 4\ **Last updated:** [November 10, 2024, 2:29am UTC](https://discuss.elastic.co/t/no-idea-how-to-setup-pipeline-for-the-xml-parsing/370243 "2024-11-10T02:29:42Z")
Hello, I know theres a lot of the same topics because i was trying to figure out from these how to parse logs from xml to the Elastic. What im trying to do is: \ \2024-11-08T18:32:56.379787054Z\ \ **Author:** [@holobolo0815](https://discuss.elastic.co/u/holobolo0815)\ **Replies:** 1\ **Last updated:** [November 9, 2024, 10:23pm UTC](https://discuss.elastic.co/t/mutate-lowercase-example-uses-array-list/370265 "2024-11-09T22:23:46Z") Hello, Concerning In the example it tells you to use a list as the argument. However that makes a list out of what might just be a string. In my case what worked as expected is: add\_field =\> { "qname\_lc" =\> "%{qn… --- ## [Node fails but cluster holds no election and no failover occurs](https://discuss.elastic.co/t/node-fails-but-cluster-holds-no-election-and-no-failover-occurs/369391)
**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\ **Replies:** 23\ **Last updated:** [November 9, 2024, 7:51pm UTC](https://discuss.elastic.co/t/node-fails-but-cluster-holds-no-election-and-no-failover-occurs/369391 "2024-11-09T19:51:54Z")
I have a 3 node cluster where one Node-1 has a hardware failure and the other two nodes detect the disconnect but do not hold an election and no failover occurs. Timeline: 11:44:00 Node-1 is the master and has a hardw… --- ## [Distributed environment best practices](https://discuss.elastic.co/t/distributed-environment-best-practices/370263)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 0\ **Last updated:** [November 9, 2024, 6:10pm UTC](https://discuss.elastic.co/t/distributed-environment-best-practices/370263 "2024-11-09T18:10:57Z")
What are the best practices for several dozen/several hundred Linux servers running ELK Stack? Most separate, but some connected. What is the best practice for maintaining this - e.g. ELK in docker, ansible. So that you … --- ## [Outdated Osquery version - Latest 5.12.1](https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852)
**Author:** [@daniel-san](https://discuss.elastic.co/u/daniel-san)\ **Replies:** 5\ **Last updated:** [November 9, 2024, 6:03pm UTC](https://discuss.elastic.co/t/outdated-osquery-version-latest-5-12-1/363852 "2024-11-09T18:03:20Z")
Hello there, hope you're all doing fine! first of all the official elastic FAQ regarding Osquery says the following: (Osquery FAQ | Kibana Guide \[8.14\] | Elastic) How often is Osquery updated for Osquery Manager?edi… --- ## [Why log are not saving in Elasticsearch using Elastic.NLog.Targets lib](https://discuss.elastic.co/t/why-log-are-not-saving-in-elasticsearch-using-elastic-nlog-targets-lib/370260)
**Author:** [@Habib\_Khan](https://discuss.elastic.co/u/Habib_Khan)\ **Replies:** 0\ **Last updated:** [November 9, 2024, 5:49pm UTC](https://discuss.elastic.co/t/why-log-are-not-saving-in-elasticsearch-using-elastic-nlog-targets-lib/370260 "2024-11-09T17:49:26Z")
image|690x341 Hi, I am working in Asp net core 6 and i want to save the logs in elastics so for that i am using Elastic.NLog.Targets packeges ... But my logs are not getting save in elasticsearch. i run the Elasticsea… --- ## [Expected resolution for some vulnerabilities found](https://discuss.elastic.co/t/expected-resolution-for-some-vulnerabilities-found/370223)
**Author:** [@Natalia\_Mellino](https://discuss.elastic.co/u/Natalia_Mellino)\ **Replies:** 1\ **Last updated:** [November 9, 2024, 3:05pm UTC](https://discuss.elastic.co/t/expected-resolution-for-some-vulnerabilities-found/370223 "2024-11-09T15:05:14Z")
Hi! We are currently in production using Kibana and Elasticsearch with the 8.15.3 version (both of them). We were reported with some vulnerabilities that we'd need to fix as soon as possible: KIbana: CVE-2024-7774 CVE… --- ## [Reindex from Int4\_hnsw to normal](https://discuss.elastic.co/t/reindex-from-int4-hnsw-to-normal/370250)
**Author:** [@sandra\_a](https://discuss.elastic.co/u/sandra_a)\ **Replies:** 2\ **Last updated:** [November 9, 2024, 6:57am UTC](https://discuss.elastic.co/t/reindex-from-int4-hnsw-to-normal/370250 "2024-11-09T06:57:07Z")
Hi. If i have a dense vector with int4\_hnsw can i reindex it to default indexing? should i specify any option for it? --- ## [Dense vectors taking up much more space than expected](https://discuss.elastic.co/t/dense-vectors-taking-up-much-more-space-than-expected/370034)
**Author:** [@Justin\_Porter](https://discuss.elastic.co/u/Justin_Porter)\ **Replies:** 2\ **Last updated:** [November 8, 2024, 9:28pm UTC](https://discuss.elastic.co/t/dense-vectors-taking-up-much-more-space-than-expected/370034 "2024-11-08T21:28:53Z")
Hi, We are going to be storing embeddings for upwards of 100s of millions of documents, and so every bit of storage counts (as things get quite expensive at this scale). We are using a 1024 size dense vector field and … --- ## [Logs are not getting save using NLog](https://discuss.elastic.co/t/logs-are-not-getting-save-using-nlog/370241)
**Author:** [@Habib\_Khan](https://discuss.elastic.co/u/Habib_Khan)\ **Replies:** 1\ **Last updated:** [November 8, 2024, 6:15pm UTC](https://discuss.elastic.co/t/logs-are-not-getting-save-using-nlog/370241 "2024-11-08T18:15:29Z")
Hi, i am using Elasticsearch 8 version every thing is correct but my logs are not getting save on Elasticsearch. please help me if anyone know about this . Below is my nlog.config --- ## [Cloud active directory auth (Not SAML)](https://discuss.elastic.co/t/cloud-active-directory-auth-not-saml/370190)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 3\ **Last updated:** [November 8, 2024, 4:46pm UTC](https://discuss.elastic.co/t/cloud-active-directory-auth-not-saml/370190 "2024-11-08T16:46:08Z")
Cloud 8.15.3, using SAML auth now, moving from on-prem using Active Directory. SAML works for interactive users, but apparently won't work for things like ingest and scripts. API keys work for scripts, but I get grumbl… --- ## [What is \`.output.write.latency\`?](https://discuss.elastic.co/t/what-is-output-write-latency/370236)
**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\ **Replies:** 1\ **Last updated:** [November 8, 2024, 3:55pm UTC](https://discuss.elastic.co/t/what-is-output-write-latency/370236 "2024-11-08T15:55:21Z")
The docs don't seem to render properly for me, and I can't find the source for this in GitHub. Could someone please explain what output.write.latency means? And the implications of having some? Running version 8.15… --- ## [Elasticsearch appends object fields on update instead of overwriting](https://discuss.elastic.co/t/elasticsearch-appends-object-fields-on-update-instead-of-overwriting/370125)
**Author:** [@lukasz.p](https://discuss.elastic.co/u/lukasz.p)\ **Replies:** 4\ **Last updated:** [November 8, 2024, 3:15pm UTC](https://discuss.elastic.co/t/elasticsearch-appends-object-fields-on-update-instead-of-overwriting/370125 "2024-11-08T15:15:00Z")
I have a problem when trying to overwrite value of field of object type in ES document. I use update request with the following document: { "uid": "911e50cf-7ff6-48e2-999c-313490a0748e", "name": "name1", … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=138) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=140)