# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=142 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 143 --- ## [Cannot read properties of undefined (reading ‘statusCode’) when trying to create an Elasticsearch query rule](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-statuscode-when-trying-to-create-an-elasticsearch-query-rule/370061)
**Author:** [@x271091-bce\_sangroup](https://discuss.elastic.co/u/x271091-bce_sangroup)\ **Replies:** 0\ **Last updated:** [November 5, 2024, 10:00am UTC](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-statuscode-when-trying-to-create-an-elasticsearch-query-rule/370061 "2024-11-05T10:00:58Z")
When I open the Elasticsearch query rule menu, I keep getting the same error: \*\*Error fetching fields for data view log-prep-\* (ID: 93f9403b-5153-5e38-a9ab-035d84a55566).\*\* Cannot read undefined properties (reading ‘st… --- ## [How to clear cache of keyword field in elastic search?](https://discuss.elastic.co/t/how-to-clear-cache-of-keyword-field-in-elastic-search/366026)
**Author:** [@Bhavyagc](https://discuss.elastic.co/u/Bhavyagc)\ **Replies:** 9\ **Last updated:** [November 5, 2024, 9:43am UTC](https://discuss.elastic.co/t/how-to-clear-cache-of-keyword-field-in-elastic-search/366026 "2024-11-05T09:43:41Z")
Hi , I am facing cache issue with keyword field in Elastic. I have a document with keyword field which is indexed with some value example : abc later the same document is reindexed again with some value abcd, old value … --- ## [What does the \_split api do internally when creating a new index](https://discuss.elastic.co/t/what-does-the-split-api-do-internally-when-creating-a-new-index/370050)
**Author:** [@techytushar](https://discuss.elastic.co/u/techytushar)\ **Replies:** 0\ **Last updated:** [November 5, 2024, 6:55am UTC](https://discuss.elastic.co/t/what-does-the-split-api-do-internally-when-creating-a-new-index/370050 "2024-11-05T06:55:29Z")
I have a few questions on the internal working of the split api: In the documentation it is mentioned that Hashes all documents again, after low level files are created, to delete documents that belong to a different … --- ## [Elasticsearch.service](https://discuss.elastic.co/t/elasticsearch-service/370049)
**Author:** [@charbel\_Bob](https://discuss.elastic.co/u/charbel_Bob)\ **Replies:** 2\ **Last updated:** [November 5, 2024, 7:37am UTC](https://discuss.elastic.co/t/elasticsearch-service/370049 "2024-11-05T07:37:13Z")
Hello; I install Elasticsearch on my Azure VM and I tried to start the service but it failed to start I only edit the network host and enable the port in elasticsearch.yml file nothing more so please find below the logs… --- ## [Logstash connectivity through TrustStore](https://discuss.elastic.co/t/logstash-connectivity-through-truststore/370052)
**Author:** [@ekta.thakur](https://discuss.elastic.co/u/ekta.thakur)\ **Replies:** 0\ **Last updated:** [November 5, 2024, 7:12am UTC](https://discuss.elastic.co/t/logstash-connectivity-through-truststore/370052 "2024-11-05T07:12:05Z")
Hi, I am connecting to logstash HTTP plugin of 8.12.0 version using java application where we are trying to pass a file to logstash and it will get collected from there and index it into elastcisearch as a output plugin… --- ## [Unable start logstash](https://discuss.elastic.co/t/unable-start-logstash/370048)
**Author:** [@Santanu112](https://discuss.elastic.co/u/Santanu112)\ **Replies:** 0\ **Last updated:** [November 5, 2024, 6:19am UTC](https://discuss.elastic.co/t/unable-start-logstash/370048 "2024-11-05T06:19:01Z")
PFB my configuration file : input { dead\_letter\_queue { path =\> "E:\\elk-8.14\\elkerrors\\QA\\FullIndex" commit\_offsets =\> true pipeline\_id =\> "main" } dead\_letter\_queue { path =\> "E:\\elk-8.14\\elkerrors\\QA\\Incrementa… --- ## [Filebeat cannot start](https://discuss.elastic.co/t/filebeat-cannot-start/369992)
**Author:** [@Xavier\_24314](https://discuss.elastic.co/u/Xavier_24314)\ **Replies:** 5\ **Last updated:** [November 5, 2024, 5:40am UTC](https://discuss.elastic.co/t/filebeat-cannot-start/369992 "2024-11-05T05:40:07Z")
I'm trying to connect filebeat to elasticsearch through logstash but filebeat always fails to start. It works if I connect filebeat directly to elasticsearch. filebeat.yml filebeat.inputs: - type: log enabled: true … --- ## [Elasticsearch.slowlog.id is null when sending X-Opaque-Id header](https://discuss.elastic.co/t/elasticsearch-slowlog-id-is-null-when-sending-x-opaque-id-header/369826)
**Author:** [@margaretp](https://discuss.elastic.co/u/margaretp)\ **Replies:** 2\ **Last updated:** [November 4, 2024, 10:12pm UTC](https://discuss.elastic.co/t/elasticsearch-slowlog-id-is-null-when-sending-x-opaque-id-header/369826 "2024-11-04T22:12:07Z")
Hello, I have been using slowlogs for awhile, and now I'm trying to get X-Opaque-Id to show up in slowlogs so I can trace slow queries to their source. I believe that if it is set, the header should appear in the output… --- ## [\_cat/indices returns hidden indices](https://discuss.elastic.co/t/cat-indices-returns-hidden-indices/365020)
**Author:** [@Andy0708](https://discuss.elastic.co/u/Andy0708)\ **Replies:** 4\ **Last updated:** [November 4, 2024, 7:03pm UTC](https://discuss.elastic.co/t/cat-indices-returns-hidden-indices/365020 "2024-11-04T19:03:50Z")
Hi, On a fresh setup of version 8.15.0, I run the following query: GET /\_cat/indices?v It returns a bunch of internal indices: health status index uuid … --- ## [HTTPS and HTTP](https://discuss.elastic.co/t/https-and-http/370012)
**Author:** [@chenchen40](https://discuss.elastic.co/u/chenchen40)\ **Replies:** 1\ **Last updated:** [November 4, 2024, 2:03pm UTC](https://discuss.elastic.co/t/https-and-http/370012 "2024-11-04T14:03:54Z")
Is it possible to run Elasticsearch with both HTTP on port 9200 and HTTPS on port 9201 simultaneously? --- ## [Help optimizing slow knn query](https://discuss.elastic.co/t/help-optimizing-slow-knn-query/369910)
**Author:** [@Iliyan\_Tanev](https://discuss.elastic.co/u/Iliyan_Tanev)\ **Replies:** 7\ **Last updated:** [November 4, 2024, 1:19pm UTC](https://discuss.elastic.co/t/help-optimizing-slow-knn-query/369910 "2024-11-04T13:19:36Z")
Hi, I'm running into a problem with the hybrid search ( keyword + vector ). As far as I can tell the performance bottleneck comes from the vector part for which I use the knn query. Bellow, I'll share: The query I'm … --- ## [In kibana there are indices with 0 documents](https://discuss.elastic.co/t/in-kibana-there-are-indices-with-0-documents/370007)
**Author:** [@daniela09](https://discuss.elastic.co/u/daniela09)\ **Replies:** 0\ **Last updated:** [November 4, 2024, 12:51pm UTC](https://discuss.elastic.co/t/in-kibana-there-are-indices-with-0-documents/370007 "2024-11-04T12:51:59Z")
Hi, I have ECK on Kubernetes and I am using fluentd for collecting logs. In the fluentd configuration I have set from which namespaces and containers to get logs and everything works fine, except for the logs of Keycloak… --- ## [Read elastic rate limit headers from response](https://discuss.elastic.co/t/read-elastic-rate-limit-headers-from-response/369411)
**Author:** [@CTO\_Servefast](https://discuss.elastic.co/u/CTO_Servefast)\ **Replies:** 4\ **Last updated:** [November 4, 2024, 12:43pm UTC](https://discuss.elastic.co/t/read-elastic-rate-limit-headers-from-response/369411 "2024-11-04T12:43:17Z")
Hi,, we are using provided code const response = await client.app.indexDocuments({ engine\_name: engineName, documents: snakeCaseDocuments, }); We are hitting API requests limits and we would like to … --- ## [High JVM heap during upsert](https://discuss.elastic.co/t/high-jvm-heap-during-upsert/369999)
**Author:** [@Farhaan](https://discuss.elastic.co/u/Farhaan)\ **Replies:** 0\ **Last updated:** [November 4, 2024, 11:35am UTC](https://discuss.elastic.co/t/high-jvm-heap-during-upsert/369999 "2024-11-04T11:35:38Z")
We are using 4Gb memory Storage optimized (dense) instance in elastic cloud for storing millions of token with embeddings. We do an upsert operation to index embeddings. We follow two set process 1- Index tokens in El… --- ## [How do used asp.net mvc core](https://discuss.elastic.co/t/how-do-used-asp-net-mvc-core/369909)
**Author:** [@MohMehrnia](https://discuss.elastic.co/u/MohMehrnia)\ **Replies:** 1\ **Last updated:** [November 4, 2024, 10:02am UTC](https://discuss.elastic.co/t/how-do-used-asp-net-mvc-core/369909 "2024-11-04T10:02:14Z")
I used Nest in my app and I can not any sample for migrating from Nest to the new package --- ## [Filebeat cannot collect the first few log lines](https://discuss.elastic.co/t/filebeat-cannot-collect-the-first-few-log-lines/369988)
**Author:** [@zhangli178](https://discuss.elastic.co/u/zhangli178)\ **Replies:** 1\ **Last updated:** [November 4, 2024, 8:44am UTC](https://discuss.elastic.co/t/filebeat-cannot-collect-the-first-few-log-lines/369988 "2024-11-04T08:44:45Z")
I have a script to create a batch of pods to run on my k8s cluster. On each node, ECK beat deamon of type filebeat is running, they collect the logs from paths /var/log/containers/\*.log and send to logstash for further p… --- ## [Inventory showing elasticagent name instead of actual cluster instance name](https://discuss.elastic.co/t/inventory-showing-elasticagent-name-instead-of-actual-cluster-instance-name/369987)
**Author:** [@sruthi.sattiraju](https://discuss.elastic.co/u/sruthi.sattiraju)\ **Replies:** 0\ **Last updated:** [November 4, 2024, 8:14am UTC](https://discuss.elastic.co/t/inventory-showing-elasticagent-name-instead-of-actual-cluster-instance-name/369987 "2024-11-04T08:14:08Z")
Hi Team, For the agents installed on Azure Kubernetes, Currently in the inventory list I see elastic agent names listing, I would like to see the actual workernode names listed. I see the host.name has elastic agent na… --- ## [Incorrect Aggregation count vs Search Query results](https://discuss.elastic.co/t/incorrect-aggregation-count-vs-search-query-results/369977)
**Author:** [@suma](https://discuss.elastic.co/u/suma)\ **Replies:** 1\ **Last updated:** [November 4, 2024, 6:37am UTC](https://discuss.elastic.co/t/incorrect-aggregation-count-vs-search-query-results/369977 "2024-11-04T06:37:12Z")
When performing Aggregation on a query the count is mismatching with results coming from a simple search query. The query used in Aggregation is same as the Search query. --- ## [What are the potential drawbacks of changing ( "ignore\_above": 4000) and is there a better way to recommend it?](https://discuss.elastic.co/t/what-are-the-potential-drawbacks-of-changing-ignore-above-4000-and-is-there-a-better-way-to-recommend-it/369951)
**Author:** [@monther](https://discuss.elastic.co/u/monther)\ **Replies:** 4\ **Last updated:** [November 4, 2024, 4:30am UTC](https://discuss.elastic.co/t/what-are-the-potential-drawbacks-of-changing-ignore-above-4000-and-is-there-a-better-way-to-recommend-it/369951 "2024-11-04T04:30:16Z")
I have a field in which I store very textual data that may reach 4000 characters, which are symbols, numbers, and (/,\*,-,\_,.). When I store this data in the default state, it is normal and receives the data, but when I s… --- ## [Getting invalid protocol error on install kibana (8.5.1)](https://discuss.elastic.co/t/getting-invalid-protocol-error-on-install-kibana-8-5-1/361335)
**Author:** [@Sunita\_Rajput](https://discuss.elastic.co/u/Sunita_Rajput)\ **Replies:** 9\ **Last updated:** [November 4, 2024, 5:48am UTC](https://discuss.elastic.co/t/getting-invalid-protocol-error-on-install-kibana-8-5-1/361335 "2024-11-04T05:48:15Z")
Creating a new Elasticsearch token for Kibana Cleaning previous token TypeError \[ERR\_INVALID\_PROTOCOL\]: Protocol "http:" not supported. Expected "https:" at new NodeError (node:internal/errors:387:5) at new ClientReq… --- ## [Logstash doesn't parse message into separate parts](https://discuss.elastic.co/t/logstash-doesnt-parse-message-into-separate-parts/369958)
**Author:** [@Xavier\_24314](https://discuss.elastic.co/u/Xavier_24314)\ **Replies:** 5\ **Last updated:** [November 3, 2024, 4:56pm UTC](https://discuss.elastic.co/t/logstash-doesnt-parse-message-into-separate-parts/369958 "2024-11-03T16:56:12Z")
I'm trying to parse my error.log file through logstash into elasticsearch but the message shows up in kibana as a whole without being split. I am not sure if my logstash conf file is wrong or if the error is elsewhere. … --- ## [Unsigned\_long value is not precise](https://discuss.elastic.co/t/unsigned-long-value-is-not-precise/369967)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 1\ **Last updated:** [November 3, 2024, 4:07pm UTC](https://discuss.elastic.co/t/unsigned-long-value-is-not-precise/369967 "2024-11-03T16:07:57Z")
We are using elasticsearch v.8.12.2. We defined in some of our fields with type of unsigned\_long. In large numbers we see that the number we want to store is not the number actually stored in elastic. For example: We … --- ## [Elastic index option doesn't accept int4\_hnsw](https://discuss.elastic.co/t/elastic-index-option-doesnt-accept-int4-hnsw/369961)
**Author:** [@sandra\_a](https://discuss.elastic.co/u/sandra_a)\ **Replies:** 4\ **Last updated:** [November 3, 2024, 1:41pm UTC](https://discuss.elastic.co/t/elastic-index-option-doesnt-accept-int4-hnsw/369961 "2024-11-03T13:41:03Z")
Hi I want to create a dense vector index with int4\_hnsw option as said in document (Automatically quantize vectors for kNN search) but after running the same example i got this error: { "error": { "root\_cause": \[… --- ## [Create complex panels using saved objects API](https://discuss.elastic.co/t/create-complex-panels-using-saved-objects-api/368444)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 1\ **Last updated:** [November 3, 2024, 11:07am UTC](https://discuss.elastic.co/t/create-complex-panels-using-saved-objects-api/368444 "2024-11-03T11:07:26Z")
Hello, Im trying to create panels using saved objects APIs, though the documents are not really helpful on this topic. Is there a way to create a panel using another one as a reference? like clone and rename title or s… --- ## [Ingest Pipeline processing issue in for loop](https://discuss.elastic.co/t/ingest-pipeline-processing-issue-in-for-loop/369954)
**Author:** [@Jay\_Timbadia](https://discuss.elastic.co/u/Jay_Timbadia)\ **Replies:** 6\ **Last updated:** [November 3, 2024, 7:38am UTC](https://discuss.elastic.co/t/ingest-pipeline-processing-issue-in-for-loop/369954 "2024-11-03T07:38:13Z")
I am running ingest pipeline in loop for an array of PDF files. I am creating new index for each file. But sometimes the pipeline gives 201 and sometimes it gives 200. In 201, it just creates the index but does not pro… --- ## [Auditbeat-\* index no data showing](https://discuss.elastic.co/t/auditbeat-index-no-data-showing/369950)
**Author:** [@acrme123](https://discuss.elastic.co/u/acrme123)\ **Replies:** 0\ **Last updated:** [November 2, 2024, 8:22pm UTC](https://discuss.elastic.co/t/auditbeat-index-no-data-showing/369950 "2024-11-02T20:22:31Z")
I installed and followed the instructions to integrate Auditbeat into Kibana. Configured the yml file to output to my elasticsearch host and kibana. using curl I am able to reach it just fine. It created the dashboard an… --- ## [Not able to connect docker logstash to docker elasticsearch using basic-auth using docker-compose](https://discuss.elastic.co/t/not-able-to-connect-docker-logstash-to-docker-elasticsearch-using-basic-auth-using-docker-compose/369941)
**Author:** [@pranchalm](https://discuss.elastic.co/u/pranchalm)\ **Replies:** 11\ **Last updated:** [November 2, 2024, 7:02pm UTC](https://discuss.elastic.co/t/not-able-to-connect-docker-logstash-to-docker-elasticsearch-using-basic-auth-using-docker-compose/369941 "2024-11-02T19:02:07Z")
Hi team, facing the following issue-: While running the following docker-compose.yml, rest of the containers apart from logstash container are up and running , logstash-container fails and is exited, while trying to con… --- ## [Logstash agent failed to execute action](https://discuss.elastic.co/t/logstash-agent-failed-to-execute-action/369943)
**Author:** [@Xavier\_24314](https://discuss.elastic.co/u/Xavier_24314)\ **Replies:** 2\ **Last updated:** [November 2, 2024, 3:31pm UTC](https://discuss.elastic.co/t/logstash-agent-failed-to-execute-action/369943 "2024-11-02T15:31:15Z")
I'm trying to configure logstash to take in logs from my apache error.log file but it keeps throwing this error \[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id… --- ## [Could not communicate with the node on any of the addresses from the enrollment token](https://discuss.elastic.co/t/could-not-communicate-with-the-node-on-any-of-the-addresses-from-the-enrollment-token/369927)
**Author:** [@germebl](https://discuss.elastic.co/u/germebl)\ **Replies:** 0\ **Last updated:** [November 2, 2024, 1:09am UTC](https://discuss.elastic.co/t/could-not-communicate-with-the-node-on-any-of-the-addresses-from-the-enrollment-token/369927 "2024-11-02T01:09:39Z")
Hey everyone, actually doing my very first steps with elastic and want to use it with the full ELK Stack. I decided for a testing cluster of 3 elastic nodes and one kibana nodes. The node-1 is running fine with this el… --- ## [Possible to break down Filebeat Kubernetes Manifest File into smaller files?](https://discuss.elastic.co/t/possible-to-break-down-filebeat-kubernetes-manifest-file-into-smaller-files/360812)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 2\ **Last updated:** [November 1, 2024, 8:56pm UTC](https://discuss.elastic.co/t/possible-to-break-down-filebeat-kubernetes-manifest-file-into-smaller-files/360812 "2024-11-01T20:56:44Z")
We have Filebeat running on K8, collecting logs from multiple inputs on 2 namespaces. I am now working with another team, which has applications also deployed to Kubernetes under a different namespace. We went ahead wi… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=141) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=143)