# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=14 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 15 --- ## [Run Elasticsearch Docker 9.x on CPU without x86-64-v2 support?](https://discuss.elastic.co/t/run-elasticsearch-docker-9-x-on-cpu-without-x86-64-v2-support/385212)
**Author:** [@greenwoodma](https://discuss.elastic.co/u/greenwoodma)\ **Replies:** 1\ **Last updated:** [March 27, 2026, 2:32pm UTC](https://discuss.elastic.co/t/run-elasticsearch-docker-9-x-on-cpu-without-x86-64-v2-support/385212 "2026-03-27T14:32:01Z")
Is it at all possible to run the Elasticsearch 9.x docker containers on a machine with a CPU which doesn’t support x86-64-v2? The 8.x releases all ran fine on the machine but the new ones don’t start up as they just repo… --- ## [Change agent fingerprint / certificate](https://discuss.elastic.co/t/change-agent-fingerprint-certificate/385638)
**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\ **Replies:** 4\ **Last updated:** [March 27, 2026, 12:38pm UTC](https://discuss.elastic.co/t/change-agent-fingerprint-certificate/385638 "2026-03-27T12:38:06Z")
No - i am not an “elastic crack” but a stupid beginner. I am hosting my elastic - fleet managed - environment to better understand how SIEM is working. Well - after my certificates got invalid / got outdated i decided t… --- ## [How to remove/hide top elastic logo from kibana dashboard for embedding kibana dashboard in angular application iframe without top elastic logo header](https://discuss.elastic.co/t/how-to-remove-hide-top-elastic-logo-from-kibana-dashboard-for-embedding-kibana-dashboard-in-angular-application-iframe-without-top-elastic-logo-header/385649)
**Author:** [@Maneesha](https://discuss.elastic.co/u/Maneesha)\ **Replies:** 3\ **Last updated:** [March 27, 2026, 8:29am UTC](https://discuss.elastic.co/t/how-to-remove-hide-top-elastic-logo-from-kibana-dashboard-for-embedding-kibana-dashboard-in-angular-application-iframe-without-top-elastic-logo-header/385649 "2026-03-27T08:29:32Z")
how to remove/hide top elastic logo from kibana dashboard? my requirement is, need to load kibana dashboard in angular application iframe without top elastic logo header --- ## [Architecture Validation: Backing up ES Clusters to Local Disk without NAS (using S3 Gateway sidecar)](https://discuss.elastic.co/t/architecture-validation-backing-up-es-clusters-to-local-disk-without-nas-using-s3-gateway-sidecar/384020)
**Author:** [@Maciek\_Pilawski](https://discuss.elastic.co/u/Maciek_Pilawski)\ **Replies:** 7\ **Last updated:** [March 27, 2026, 6:24am UTC](https://discuss.elastic.co/t/architecture-validation-backing-up-es-clusters-to-local-disk-without-nas-using-s3-gateway-sidecar/384020 "2026-03-27T06:24:48Z")
The Context I am a C++ developer working on an on-premise Visual Analytics application. Our service (DocumentStore) manages an Elasticsearch cluster (handling logs, events, configuration). We need to implement a Backup & … --- ## [One Deata view @timestamp alarm](https://discuss.elastic.co/t/one-deata-view-timestamp-alarm/385624)
**Author:** [@Wing\_W](https://discuss.elastic.co/u/Wing_W)\ **Replies:** 3\ **Last updated:** [March 27, 2026, 6:10am UTC](https://discuss.elastic.co/t/one-deata-view-timestamp-alarm/385624 "2026-03-27T06:10:22Z")
This request queries Elasticsearch to fetch the documents. Search session id: d53c937d-ef25-4122-862c-9cc00f861186 Node c60fcARCT5m2jef2\_njmog Reason error fetching \[structured.@timestamp\]: Field \[structured.@timest… --- ## [Compatibility of Java Low Level REST Client 8.3.0 with ES 5.x and ES 7.x](https://discuss.elastic.co/t/compatibility-of-java-low-level-rest-client-8-3-0-with-es-5-x-and-es-7-x/385639)
**Author:** [@hxx](https://discuss.elastic.co/u/hxx)\ **Replies:** 0\ **Last updated:** [March 26, 2026, 4:28pm UTC](https://discuss.elastic.co/t/compatibility-of-java-low-level-rest-client-8-3-0-with-es-5-x-and-es-7-x/385639 "2026-03-26T16:28:30Z")
Hi, We're upgrading the Elasticsearch Java Low Level REST Client from 6.2.4 to 8.3.0, and we need to continue accessing both ES 5.x and ES 7.x clusters (cluster upgrades are not on the table for now). Since we're using… --- ## [Query DSL alert configuration](https://discuss.elastic.co/t/query-dsl-alert-configuration/385538)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 4\ **Last updated:** [March 26, 2026, 4:04am UTC](https://discuss.elastic.co/t/query-dsl-alert-configuration/385538 "2026-03-26T04:04:44Z")
I am trying to use the Elasticsearch Query DSL to create an alert The query consist of LIMIT 100 but the actual output is actually less than 10. When I did run the test query . Query matched 852597 documents in the las… --- ## [How to ensure the integrity of filebeat output data during network fluctuations？](https://discuss.elastic.co/t/how-to-ensure-the-integrity-of-filebeat-output-data-during-network-fluctuations/385625)
**Author:** [@h123123123](https://discuss.elastic.co/u/h123123123)\ **Replies:** 0\ **Last updated:** [March 26, 2026, 2:03am UTC](https://discuss.elastic.co/t/how-to-ensure-the-integrity-of-filebeat-output-data-during-network-fluctuations/385625 "2026-03-26T02:03:20Z")
The version of Filebeat I am using is 9.3.1. I set max\_retries=-1, expecting that during network fluctuations, all data can be sent to Kafka. The actual test result: data is still lost during network fluctuations. I trie… --- ## [Making POST requests to external API through Kibana dashboard](https://discuss.elastic.co/t/making-post-requests-to-external-api-through-kibana-dashboard/378231)
**Author:** [@Mithun.mohan](https://discuss.elastic.co/u/Mithun.mohan)\ **Replies:** 2\ **Last updated:** [March 25, 2026, 9:16pm UTC](https://discuss.elastic.co/t/making-post-requests-to-external-api-through-kibana-dashboard/378231 "2026-03-25T21:16:49Z")
Hi ! I have a new requirement where I need to create a clickable url element (or a button) in a Kibana dashboard that'll trigger a POST request to an external api. The request body should include data from the dashboard… --- ## [Kibana Theme (again)](https://discuss.elastic.co/t/kibana-theme-again/385607)
**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\ **Replies:** 3\ **Last updated:** [March 25, 2026, 4:58pm UTC](https://discuss.elastic.co/t/kibana-theme-again/385607 "2026-03-25T16:58:36Z")
Only finding 9 year old topics for theming Kibana. I currently have 17 tabs open with Kibana for different clusters. It would be immensely useful to be able to have certain ones “blue”, some “green”, some “red” as a vis… --- ## [Elastic AI: Preconfigured LLM models data exposure](https://discuss.elastic.co/t/elastic-ai-preconfigured-llm-models-data-exposure/385605)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 1\ **Last updated:** [March 25, 2026, 12:57pm UTC](https://discuss.elastic.co/t/elastic-ai-preconfigured-llm-models-data-exposure/385605 "2026-03-25T12:57:07Z")
Hi Team, We are currently exploring the AI Assistant feature in our ELK stack (version 9.3.1) and plan to use the preconfigured LLM model connectors. We would like to understand whether using these preconfigured LLM mo… --- ## [Elastic Feedback: Hire Dashboard Designer](https://discuss.elastic.co/t/elastic-feedback-hire-dashboard-designer/385513)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [March 25, 2026, 12:21pm UTC](https://discuss.elastic.co/t/elastic-feedback-hire-dashboard-designer/385513 "2026-03-25T12:21:21Z")
Hey, I mean well when I say this, but could Elastic improve its out-of-the-box managed dashboards I did OpenTelemetry Docker, and this was the dashboard that came with it: I understand people have different tastes … --- ## [After reindexing. what needs to be done for alerts and dashboard?](https://discuss.elastic.co/t/after-reindexing-what-needs-to-be-done-for-alerts-and-dashboard/385599)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 0\ **Last updated:** [March 25, 2026, 6:59am UTC](https://discuss.elastic.co/t/after-reindexing-what-needs-to-be-done-for-alerts-and-dashboard/385599 "2026-03-25T06:59:32Z")
We are re-indexing our indices and giving it a new name lets say "indicies\_name\_v2" I suppose this will have impact to our alerts and dashboard Correct me if i am wrong. For alerts i suppose this is what we need to do … --- ## [Backup deployment during upgrade](https://discuss.elastic.co/t/backup-deployment-during-upgrade/385591)
**Author:** [@Elastic04](https://discuss.elastic.co/u/Elastic04)\ **Replies:** 0\ **Last updated:** [March 24, 2026, 10:33am UTC](https://discuss.elastic.co/t/backup-deployment-during-upgrade/385591 "2026-03-24T10:33:29Z")
We are using ech for ecommerce search application. We are planning to upgrade from 8.9.0 to 8.19.x. Before upgrading, should we already create the backup deployment with latest snapshot, or is it possible to create a ne… --- ## [Logs sorting out in Kibana](https://discuss.elastic.co/t/logs-sorting-out-in-kibana/385544)
**Author:** [@Anitha](https://discuss.elastic.co/u/Anitha)\ **Replies:** 8\ **Last updated:** [March 24, 2026, 4:07am UTC](https://discuss.elastic.co/t/logs-sorting-out-in-kibana/385544 "2026-03-24T04:07:50Z")
Hello, I am currently working on log ingestion and visualization in Kibana and have successfully configured multiple outputs. At present, I have four separate indices corresponding to different log sources: \* Firewall … --- ## [Palo Alto Ingest Pipeline: Audit Logs](https://discuss.elastic.co/t/palo-alto-ingest-pipeline-audit-logs/385588)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 1\ **Last updated:** [March 23, 2026, 9:49pm UTC](https://discuss.elastic.co/t/palo-alto-ingest-pipeline-audit-logs/385588 "2026-03-23T21:49:36Z")
The 2 Grok patterns supplied in the PANW ingest pipelines are not sufficient for parsing audit logs. I have created the grok pattern required to parse PANW audit logs and even submitted a merge request, but no one ever l… --- ## [Unable to find job message fields in ".ml-anomalies\*" index](https://discuss.elastic.co/t/unable-to-find-job-message-fields-in-ml-anomalies-index/385537)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 4\ **Last updated:** [March 23, 2026, 9:20am UTC](https://discuss.elastic.co/t/unable-to-find-job-message-fields-in-ml-anomalies-index/385537 "2026-03-23T09:20:57Z")
Machine Learning \>\> Anomaly Detection \>\> Jobs I am trying to come out with an ESQL query to consolidate all job messages that is non-info. warning or errors. Example of message Time Node Message 202X-XX-XX 16:24… --- ## [Find Related documents in graph/ES](https://discuss.elastic.co/t/find-related-documents-in-graph-es/385553)
**Author:** [@shambar](https://discuss.elastic.co/u/shambar)\ **Replies:** 0\ **Last updated:** [March 20, 2026, 7:55pm UTC](https://discuss.elastic.co/t/find-related-documents-in-graph-es/385553 "2026-03-20T19:55:01Z")
I have a technical question about elasticsearch and graph. Given the 2 documents below I have a couple of questions: Would graph find the second document if someone only searched on the phone number? Is there a regu… --- ## [Issue with Hashicorp Vault/Elastic agent integration](https://discuss.elastic.co/t/issue-with-hashicorp-vault-elastic-agent-integration/385550)
**Author:** [@rex656](https://discuss.elastic.co/u/rex656)\ **Replies:** 0\ **Last updated:** [March 20, 2026, 6:32pm UTC](https://discuss.elastic.co/t/issue-with-hashicorp-vault-elastic-agent-integration/385550 "2026-03-20T18:32:09Z")
I have the Hashicorp Vault integration assigned to all of my Vault servers. I seem to be collecting the operational and audit logs with no issue, but there are gaps in the metric data. For example, the agent is not pick… --- ## [Logstash.outputs.elasticsearch - Failed to perform request: Connection refused](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-failed-to-perform-request-connection-refused/385421)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 11\ **Last updated:** [March 20, 2026, 1:25pm UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-failed-to-perform-request-connection-refused/385421 "2026-03-20T13:25:13Z")
I am using an on-prem 8.11.3 elastic+logstash stack. logstash uses elasticsearch output plugin to post events to elastic. current set-up uses 2 servers. elasticsearch { hosts =\> \[ "srv1:9200", "srv2:9200" \] data\_str… --- ## [Does .ml shared and custom falls under system indices](https://discuss.elastic.co/t/does-ml-shared-and-custom-falls-under-system-indices/385547)
**Author:** [@residual-07](https://discuss.elastic.co/u/residual-07)\ **Replies:** 1\ **Last updated:** [March 20, 2026, 1:08pm UTC](https://discuss.elastic.co/t/does-ml-shared-and-custom-falls-under-system-indices/385547 "2026-03-20T13:08:06Z")
Hi, I would like to get some help about understanding hidden and system indices. In our company we are using elasticsearch and kibana 8.19.9. We ended up in dilemma whether the .ml-anomalies-custom and .ml-anomalies-sh… --- ## [Cluster keeps getting into yellow state and hitting throttled for initializing shards (max rebalance)](https://discuss.elastic.co/t/cluster-keeps-getting-into-yellow-state-and-hitting-throttled-for-initializing-shards-max-rebalance/385392)
**Author:** [@carlosmg1](https://discuss.elastic.co/u/carlosmg1)\ **Replies:** 8\ **Last updated:** [March 20, 2026, 12:26pm UTC](https://discuss.elastic.co/t/cluster-keeps-getting-into-yellow-state-and-hitting-throttled-for-initializing-shards-max-rebalance/385392 "2026-03-20T12:26:40Z")
Hi, we have a cluster with this info: { "status": "yellow", "timed\_out": false, "number\_of\_nodes": 59, "number\_of\_data\_nodes": 54, "active\_primary\_shards": 6205, "active\_shards": 12409, "relocating\_shards": 7, … --- ## [Is APM required for Elasticsearch 8.19.8?](https://discuss.elastic.co/t/is-apm-required-for-elasticsearch-8-19-8/385522)
**Author:** [@winter\_crescents](https://discuss.elastic.co/u/winter_crescents)\ **Replies:** 3\ **Last updated:** [March 20, 2026, 9:59am UTC](https://discuss.elastic.co/t/is-apm-required-for-elasticsearch-8-19-8/385522 "2026-03-20T09:59:36Z")
I am trying to reduce the number of modules to the minimum number required. However, I find that when apm module is being removed, I get an error that says “ERROR: Expected to find \[apm\] module” and this got me confused,… --- ## [Azure Cloud collect k8s logs](https://discuss.elastic.co/t/azure-cloud-collect-k8s-logs/385512)
**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\ **Replies:** 2\ **Last updated:** [March 19, 2026, 10:23pm UTC](https://discuss.elastic.co/t/azure-cloud-collect-k8s-logs/385512 "2026-03-19T22:23:47Z")
Hey guys! What is the recommended way to collect logs from Azure Cloud AKS and deliver them to the desired Elastic instance deployed outside Azure Cloud? I have already checked this page: and corresponding integrati… --- ## [(Email) Notifications for Agent Status Change](https://discuss.elastic.co/t/email-notifications-for-agent-status-change/385528)
**Author:** [@RalphDibney](https://discuss.elastic.co/u/RalphDibney)\ **Replies:** 0\ **Last updated:** [March 19, 2026, 2:50pm UTC](https://discuss.elastic.co/t/email-notifications-for-agent-status-change/385528 "2026-03-19T14:50:38Z")
Elastic Onprem 8.19.12 We are currently preparing to rollout Elastic Defend on all our systems. Since this makes the Elastic installation on the agent absolutly security critical, we want to be informed about the status… --- ## [Filebeat to Elastic-Agent Swap](https://discuss.elastic.co/t/filebeat-to-elastic-agent-swap/385490)
**Author:** [@kamandohl](https://discuss.elastic.co/u/kamandohl)\ **Replies:** 6\ **Last updated:** [March 19, 2026, 11:30am UTC](https://discuss.elastic.co/t/filebeat-to-elastic-agent-swap/385490 "2026-03-19T11:30:17Z")
We currently are utilizing Filebeat 8.13.x to ship sensor data for Zeek and Suricata via Kafka and utilizing Logstash to subscribe from Kafka and push to Elasticsearch. We are in the mist of moving from filebeat to ela… --- ## [Need help with Visualisation - highest percentage of PQ current size FOR THE LAST 60 mins](https://discuss.elastic.co/t/need-help-with-visualisation-highest-percentage-of-pq-current-size-for-the-last-60-mins/385462)
**Author:** [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Replies:** 15\ **Last updated:** [March 19, 2026, 9:10am UTC](https://discuss.elastic.co/t/need-help-with-visualisation-highest-percentage-of-pq-current-size-for-the-last-60-mins/385462 "2026-03-19T09:10:15Z")
We need help in the following. This is what we have configure below. However how can we see the top 10 records in a table ORDER BY highest percentage of PQ current size FOR THE LAST 60 mins Data View Records host.hos… --- ## [Understand the impact on the document writing process after setting index.translog.durability=true](https://discuss.elastic.co/t/understand-the-impact-on-the-document-writing-process-after-setting-index-translog-durability-true/385517)
**Author:** [@mloine](https://discuss.elastic.co/u/mloine)\ **Replies:** 1\ **Last updated:** [March 19, 2026, 6:17am UTC](https://discuss.elastic.co/t/understand-the-impact-on-the-document-writing-process-after-setting-index-translog-durability-true/385517 "2026-03-19T06:17:51Z")
After setting index.translog.durability=true, the time to successfully respond to the client is whether to respond to the client as long as the primary shard is successful without shutting down the replicas, or to respon… --- ## [Export result to clipboard in Kibana with ES|QL](https://discuss.elastic.co/t/export-result-to-clipboard-in-kibana-with-es-ql/385507)
**Author:** [@dot-mike](https://discuss.elastic.co/u/dot-mike)\ **Replies:** 2\ **Last updated:** [March 18, 2026, 5:05pm UTC](https://discuss.elastic.co/t/export-result-to-clipboard-in-kibana-with-es-ql/385507 "2026-03-18T17:05:19Z")
Dear community, I am wondering if there exists a way to copy data from result table to clipboard so it's formatted in markdown or similar syntax? Lets take this ES|QL below it will generate up to maximum 20 rows. I wo… --- ## [How to use opentelemetry for search analytics](https://discuss.elastic.co/t/how-to-use-opentelemetry-for-search-analytics/385509)
**Author:** [@Elastic04](https://discuss.elastic.co/u/Elastic04)\ **Replies:** 0\ **Last updated:** [March 18, 2026, 4:29pm UTC](https://discuss.elastic.co/t/how-to-use-opentelemetry-for-search-analytics/385509 "2026-03-18T16:29:48Z")
How to use opentelemetry for search analytics with java client [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=13) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=15)