# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=143 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 144 --- ## [Got response code '401' contacting Elasticsearch](https://discuss.elastic.co/t/got-response-code-401-contacting-elasticsearch/369890)
**Author:** [@aldosilva6](https://discuss.elastic.co/u/aldosilva6)\ **Replies:** 3\ **Last updated:** [November 1, 2024, 6:33pm UTC](https://discuss.elastic.co/t/got-response-code-401-contacting-elasticsearch/369890 "2024-11-01T18:33:51Z")
I was working with Logstash, Elasticsearch and Kibana without security and everything was working, but I needed to put a basic authentication on Elasticsearch to go to production, and Logstash stoped to send messages to… --- ## [Amazon Data Firehose integration stopped working](https://discuss.elastic.co/t/amazon-data-firehose-integration-stopped-working/369883)
**Author:** [@ppborfig](https://discuss.elastic.co/u/ppborfig)\ **Replies:** 6\ **Last updated:** [November 1, 2024, 4:06pm UTC](https://discuss.elastic.co/t/amazon-data-firehose-integration-stopped-working/369883 "2024-11-01T16:06:36Z")
The Amazon Data Firehose integration recently stopped working in all our Elastic Cloud environments. No configuration changes were made in AWS and Elastic. Firehose shows no errors and all deliveries are successful. R… --- ## [Documents failing to index with helpers.bulk](https://discuss.elastic.co/t/documents-failing-to-index-with-helpers-bulk/369834)
**Author:** [@tommycahir](https://discuss.elastic.co/u/tommycahir)\ **Replies:** 3\ **Last updated:** [November 1, 2024, 1:21pm UTC](https://discuss.elastic.co/t/documents-failing-to-index-with-helpers-bulk/369834 "2024-11-01T13:21:28Z")
Hey Everyone During some development work over the last few weeks release we noticed an issue with the Elasticsearch helper.bulk method we were using in the python scripts. Issue: When any docs fail to get uploaded to … --- ## [Migrate Fleet Agents From Onprem Cluster to Another](https://discuss.elastic.co/t/migrate-fleet-agents-from-onprem-cluster-to-another/369907)
**Author:** [@rz1027](https://discuss.elastic.co/u/rz1027)\ **Replies:** 1\ **Last updated:** [November 1, 2024, 1:15pm UTC](https://discuss.elastic.co/t/migrate-fleet-agents-from-onprem-cluster-to-another/369907 "2024-11-01T13:15:45Z")
Hello, I have a cluster with a setup Elasticfleet with several agents, and I am planning to migrate the cluster to another one. I also have the basic license. Is there a method to migrate the agents to the other cluste… --- ## [Not showing 8.15 version](https://discuss.elastic.co/t/not-showing-8-15-version/369901)
**Author:** [@Duong\_Quoc\_Khanh](https://discuss.elastic.co/u/Duong_Quoc_Khanh)\ **Replies:** 2\ **Last updated:** [November 1, 2024, 10:00am UTC](https://discuss.elastic.co/t/not-showing-8-15-version/369901 "2024-11-01T10:00:37Z")
I'm currently at the version of 8.10.4. When I click upgrade, I only see v8.14.3 the latest but not 8.15. Any idea guys? --- ## [Filebeat Script for Netflow data enrichment](https://discuss.elastic.co/t/filebeat-script-for-netflow-data-enrichment/369216)
**Author:** [@unniak](https://discuss.elastic.co/u/unniak)\ **Replies:** 2\ **Last updated:** [November 1, 2024, 9:28am UTC](https://discuss.elastic.co/t/filebeat-script-for-netflow-data-enrichment/369216 "2024-11-01T09:28:07Z")
Hi, I am using filebeat netflow module for traffic monitor. But the document don't have interface name. I want to add a python script for filebeat to process before it sends the data to elastc so that it takes interface… --- ## [ElasticSearch(8.15.0) Docker setup, ENV not able to reset built in user-elastic's password](https://discuss.elastic.co/t/elasticsearch-8-15-0-docker-setup-env-not-able-to-reset-built-in-user-elastics-password/369891)
**Author:** [@pranchalm](https://discuss.elastic.co/u/pranchalm)\ **Replies:** 5\ **Last updated:** [November 1, 2024, 6:00am UTC](https://discuss.elastic.co/t/elasticsearch-8-15-0-docker-setup-env-not-able-to-reset-built-in-user-elastics-password/369891 "2024-11-01T06:00:48Z")
Hi team, trying to create a custom elasticsearch docker image base image is set as 8.15.0, following is my Dockerfile which is getting built-: # Use the official Elasticsearch 8.15 base image FROM docker.elastic.co/ela… --- ## [Auditbeat not work in Ubuntu 22.04 after a reboot or shutdown](https://discuss.elastic.co/t/auditbeat-not-work-in-ubuntu-22-04-after-a-reboot-or-shutdown/369785)
**Author:** [@L1ghtsou1](https://discuss.elastic.co/u/L1ghtsou1)\ **Replies:** 6\ **Last updated:** [November 1, 2024, 2:05am UTC](https://discuss.elastic.co/t/auditbeat-not-work-in-ubuntu-22-04-after-a-reboot-or-shutdown/369785 "2024-11-01T02:05:23Z")
I installed Elasticsearch and Auditbeat service version 8.15.2 for Ubuntu Server 22.04. After host reboot, auditbeat inactive and not send log to ELK node. service auditbeat status ○ auditbeat.service - Audit the activi… --- ## [Avaya CDR Data in Elastic](https://discuss.elastic.co/t/avaya-cdr-data-in-elastic/369837)
**Author:** [@nitesh.srivastava](https://discuss.elastic.co/u/nitesh.srivastava)\ **Replies:** 8\ **Last updated:** [October 31, 2024, 10:47pm UTC](https://discuss.elastic.co/t/avaya-cdr-data-in-elastic/369837 "2024-10-31T22:47:25Z")
Hello everyone, We are ingesting some Avaya CDR data in our Elastic 8.11 and this is how the data looks like: \\u0001\\u0001\\u0001\\u0002\\a\\u0001\\u0000\\u0006\\u0001\\u0001\\u0002\\u0001\\u0006\\b\\u0001\\u001E\\x81 I see the belo… --- ## [Kibana - Line Graph - Time Aggregation](https://discuss.elastic.co/t/kibana-line-graph-time-aggregation/369885)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [October 31, 2024, 9:50pm UTC](https://discuss.elastic.co/t/kibana-line-graph-time-aggregation/369885 "2024-10-31T21:50:30Z")
Hello, I have this line graph. It looking at @timestamp and counting the records. I was asked if there is a way to do an aggregation of the graph by showing only records after 4pm, and allowing to see that through … --- ## [Create two Elasticsearch hosts in Docker](https://discuss.elastic.co/t/create-two-elasticsearch-hosts-in-docker/369694)
**Author:** [@louisdeveloper](https://discuss.elastic.co/u/louisdeveloper)\ **Replies:** 3\ **Last updated:** [October 31, 2024, 9:39pm UTC](https://discuss.elastic.co/t/create-two-elasticsearch-hosts-in-docker/369694 "2024-10-31T21:39:44Z")
I tried creating two elasticsearch 8 virtual machines in Docker, but I end up having two problems: One of the machines always stops The server always has a high CPU consumption I did it this way: docker pull docker.e… --- ## [Kibana behind App Gateway](https://discuss.elastic.co/t/kibana-behind-app-gateway/368464)
**Author:** [@aldosilva6](https://discuss.elastic.co/u/aldosilva6)\ **Replies:** 1\ **Last updated:** [October 31, 2024, 8:52pm UTC](https://discuss.elastic.co/t/kibana-behind-app-gateway/368464 "2024-10-31T20:52:08Z")
Is there any example on how to configure Kibana behind an App Gateway as reverse proxy? I'm trying to achieve using https://my.domain/kibana but I'm in 302 loop. I've changed the basePath to "/kibana" server.basePath: … --- ## [Kibana Looks Different in Different Monitors](https://discuss.elastic.co/t/kibana-looks-different-in-different-monitors/369884)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 3\ **Last updated:** [October 31, 2024, 7:05pm UTC](https://discuss.elastic.co/t/kibana-looks-different-in-different-monitors/369884 "2024-10-31T19:05:44Z")
Hello, On a monitor using display resolution: 1920 x 1200 This is how a dashboard appears: The same computer but different monitor with 1920 x 1080: This has become an issue because our end users might find the… --- ## [Getting bounds for the expected values from ML](https://discuss.elastic.co/t/getting-bounds-for-the-expected-values-from-ml/369292)
**Author:** [@gueri](https://discuss.elastic.co/u/gueri)\ **Replies:** 2\ **Last updated:** [October 31, 2024, 6:48pm UTC](https://discuss.elastic.co/t/getting-bounds-for-the-expected-values-from-ml/369292 "2024-10-31T18:48:16Z")
Hello See this ML example from Elastic documentation : I'm creating my own custom viz mixing data with ml results from .ml-anomalies-\* index. I would like to retireve the bounds for all the expected values (the sha… --- ## [Nested Query](https://discuss.elastic.co/t/nested-query/369752)
**Author:** [@palkema](https://discuss.elastic.co/u/palkema)\ **Replies:** 1\ **Last updated:** [October 31, 2024, 6:45pm UTC](https://discuss.elastic.co/t/nested-query/369752 "2024-10-31T18:45:40Z")
Hi, I have an elastic query where I would like to filter on the property userData where the windowsId = 'palkema', so I can retrieve those through the inner\_hits response, however this is impacting my overall result. F… --- ## [\[Resolved\] Question: Using AppSearch/ Search UI to query an EXACT text string with special character '/'](https://discuss.elastic.co/t/resolved-question-using-appsearch-search-ui-to-query-an-exact-text-string-with-special-character/369882)
**Author:** [@wh0lesome](https://discuss.elastic.co/u/wh0lesome)\ **Replies:** 3\ **Last updated:** [October 31, 2024, 3:54pm UTC](https://discuss.elastic.co/t/resolved-question-using-appsearch-search-ui-to-query-an-exact-text-string-with-special-character/369882 "2024-10-31T15:54:03Z")
Hi, I can not find my solution anywhere, so I am writing my own topic. I am using Search UI that has its data from an engine that is based on an index created by my own logstash pipeline. Now, everything works fine, j… --- ## [Is there a way to develop my owner filebeat to collect data via calling Restful API](https://discuss.elastic.co/t/is-there-a-way-to-develop-my-owner-filebeat-to-collect-data-via-calling-restful-api/368958)
**Author:** [@Eorchid](https://discuss.elastic.co/u/Eorchid)\ **Replies:** 2\ **Last updated:** [October 31, 2024, 2:52pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-develop-my-owner-filebeat-to-collect-data-via-calling-restful-api/368958 "2024-10-31T14:52:36Z")
I want to develop my own filebeat which receives data by regularly calling Restful API provided by other services. Similar to the way AWS module pulls data from S3 or VPC flows. It'd be deeply appreciated if anyone can … --- ## [Logstash TCP input not being processed?](https://discuss.elastic.co/t/logstash-tcp-input-not-being-processed/369871)
**Author:** [@pselvini](https://discuss.elastic.co/u/pselvini)\ **Replies:** 2\ **Last updated:** [October 31, 2024, 1:35pm UTC](https://discuss.elastic.co/t/logstash-tcp-input-not-being-processed/369871 "2024-10-31T13:35:03Z")
Hi there, I have a very simple pipeline in logstash: input { tcp { port =\> 4560 codec =\> json\_lines } } output { stdout { codec =\> rubydebug } } I am sending JSON lines to Logstash from… --- ## [Migrate existing elasticsearch cluster running as a java process in linux vms to Kubernetes cluster](https://discuss.elastic.co/t/migrate-existing-elasticsearch-cluster-running-as-a-java-process-in-linux-vms-to-kubernetes-cluster/369875)
**Author:** [@Jeet\_Patel1](https://discuss.elastic.co/u/Jeet_Patel1)\ **Replies:** 1\ **Last updated:** [October 31, 2024, 1:14pm UTC](https://discuss.elastic.co/t/migrate-existing-elasticsearch-cluster-running-as-a-java-process-in-linux-vms-to-kubernetes-cluster/369875 "2024-10-31T13:14:40Z")
Hello, I am trying to migrate an existing Elasticsearch cluster, which is currently running as a process on Linux VMs, to a Kubernetes cluster. What I did: I created a new Elasticsearch data node pod in the Kubernetes … --- ## [How to remove sort in aggs in Kibana stacked bar chart](https://discuss.elastic.co/t/how-to-remove-sort-in-aggs-in-kibana-stacked-bar-chart/369878)
**Author:** [@Nikita\_Obukhov](https://discuss.elastic.co/u/Nikita_Obukhov)\ **Replies:** 0\ **Last updated:** [October 31, 2024, 12:58pm UTC](https://discuss.elastic.co/t/how-to-remove-sort-in-aggs-in-kibana-stacked-bar-chart/369878 "2024-10-31T12:58:16Z")
Hello, I have a really huge index with logs and I want to visualize some of them with a Bar Horizontal Stacked Kibana lens. I add timestamp on Y-axis (1h interval), unique count of \_id on X-axis, and i choose my url fie… --- ## [X Index lifecycle error illegal\_argument\_exception: index name \[X\] does not match pattern "^\*-\\d+$"](https://discuss.elastic.co/t/x-index-lifecycle-error-illegal-argument-exception-index-name-x-does-not-match-pattern-d/369873)
**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\ **Replies:** 0\ **Last updated:** [October 31, 2024, 11:26am UTC](https://discuss.elastic.co/t/x-index-lifecycle-error-illegal-argument-exception-index-name-x-does-not-match-pattern-d/369873 "2024-10-31T11:26:27Z")
I have a rollup job set up to send logs from system metrics to a standard index called rolled-metrics-system-rollup. I encountered an error during the lifecycle rollover process and, upon investigation, found the followi… --- ## [Elastic Agent/Fleet Server Error: "Access is denied" on Named Pipe](https://discuss.elastic.co/t/elastic-agent-fleet-server-error-access-is-denied-on-named-pipe/369703)
**Author:** [@YTS](https://discuss.elastic.co/u/YTS)\ **Replies:** 2\ **Last updated:** [October 31, 2024, 10:39am UTC](https://discuss.elastic.co/t/elastic-agent-fleet-server-error-access-is-denied-on-named-pipe/369703 "2024-10-31T10:39:15Z")
Hi, I set up Elasticsearch and Kibana via Docker. I am reaching out regarding an issue I encountered with the Elastic Agent on my setup. The agent fails to start the HTTP server for the API, resulting in an error that re… --- ## [The same search statement multiple times gets different total results](https://discuss.elastic.co/t/the-same-search-statement-multiple-times-gets-different-total-results/368688)
**Author:** [@deserts](https://discuss.elastic.co/u/deserts)\ **Replies:** 9\ **Last updated:** [October 31, 2024, 9:41am UTC](https://discuss.elastic.co/t/the-same-search-statement-multiple-times-gets-different-total-results/368688 "2024-10-31T09:41:46Z")
I am not sure if there is a teacher who is familiar with the elasticsearch source code to help me look at this issue I raised on github. At present, I cannot get stable query results using the same conditions. The reason… --- ## [Slow SQL with timestamp on Oracle](https://discuss.elastic.co/t/slow-sql-with-timestamp-on-oracle/369819)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 2\ **Last updated:** [October 31, 2024, 8:44am UTC](https://discuss.elastic.co/t/slow-sql-with-timestamp-on-oracle/369819 "2024-10-31T08:44:10Z")
Hello all, We have a Logstash Pipeline with jdbc input that ran really slow. I investigated and found something where I am not sure if this could be improved on Logstash side or if this is something we need to handle so… --- ## [Unexpected floating-point precision issue with scaled\_float field](https://discuss.elastic.co/t/unexpected-floating-point-precision-issue-with-scaled-float-field/369865)
**Author:** [@kangquanzhou](https://discuss.elastic.co/u/kangquanzhou)\ **Replies:** 0\ **Last updated:** [October 31, 2024, 7:17am UTC](https://discuss.elastic.co/t/unexpected-floating-point-precision-issue-with-scaled-float-field/369865 "2024-10-31T07:17:04Z")
Description: I'm experiencing an unexpected floating-point precision issue when performing aggregations on a scaled\_float field in Elasticsearch. I have defined a field with scaled\_float type and a scaling\_factor of 100… --- ## [Kibana - Need help on MS SQL connector configuration](https://discuss.elastic.co/t/kibana-need-help-on-ms-sql-connector-configuration/369335)
**Author:** [@Jerome\_Escamilla](https://discuss.elastic.co/u/Jerome_Escamilla)\ **Replies:** 2\ **Last updated:** [October 31, 2024, 7:09am UTC](https://discuss.elastic.co/t/kibana-need-help-on-ms-sql-connector-configuration/369335 "2024-10-31T07:09:51Z")
Hi Everyone, I'm trying do MS SQL connector configuration in Kibana using Docker but I can't continue because I can't run it in Docker and here is the instruction I'm following: config.yml after editing ## ====… --- ## [Divide by 0 / wheel in canvas](https://discuss.elastic.co/t/divide-by-0-wheel-in-canvas/369862)
**Author:** [@jfsardon](https://discuss.elastic.co/u/jfsardon)\ **Replies:** 0\ **Last updated:** [October 31, 2024, 6:41am UTC](https://discuss.elastic.co/t/divide-by-0-wheel-in-canvas/369862 "2024-10-31T06:41:42Z")
Hi, I compute a simple ratio and send it to a wheel, In case of divide by 0 I get an error (ok)... but how can I manage this error and simply get "0"" instead an error. Merci ! essql query={string "SELECT \\"jobName… --- ## [Aggregation contains old values](https://discuss.elastic.co/t/aggregation-contains-old-values/369805)
**Author:** [@Bhavyagc](https://discuss.elastic.co/u/Bhavyagc)\ **Replies:** 1\ **Last updated:** [October 31, 2024, 6:30am UTC](https://discuss.elastic.co/t/aggregation-contains-old-values/369805 "2024-10-31T06:30:26Z")
Can someone please help on the below request? Please find the below example and the exact issue I am facing.... I'm having some problems with aggregations returning old data. When I query directly using bool/must/term … --- ## [Found an invalid configuration for xpack.ml.model\_repository. Illegal character in authority at index 9:](https://discuss.elastic.co/t/found-an-invalid-configuration-for-xpack-ml-model-repository-illegal-character-in-authority-at-index-9/369858)
**Author:** [@vin2008](https://discuss.elastic.co/u/vin2008)\ **Replies:** 0\ **Last updated:** [October 31, 2024, 3:40am UTC](https://discuss.elastic.co/t/found-an-invalid-configuration-for-xpack-ml-model-repository-illegal-character-in-authority-at-index-9/369858 "2024-10-31T03:40:48Z")
Found an invalid configuration for xpack.ml.model\_repository. Illegal character in authority at index 9: file://G:\\elasticsearch-8.15.3-windows-x86\_64\\elasticsearch-8.15.3/config/models/ See ELSER – Elastic Learned Sp… --- ## [Elasticsearch 7.17 and logstash7.17 have security issues with snakeyaml low versions and need to be upgraded to 2.0 or higher](https://discuss.elastic.co/t/elasticsearch-7-17-and-logstash7-17-have-security-issues-with-snakeyaml-low-versions-and-need-to-be-upgraded-to-2-0-or-higher/369855)
**Author:** [@wb\_he](https://discuss.elastic.co/u/wb_he)\ **Replies:** 1\ **Last updated:** [October 31, 2024, 3:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-and-logstash7-17-have-security-issues-with-snakeyaml-low-versions-and-need-to-be-upgraded-to-2-0-or-higher/369855 "2024-10-31T03:22:21Z")
I am currently using Elasticsearch 7.17.14 and Logstash7.17.14. Scanning shows that both of these applications are using the snakeyaml 1.0 version jar package, and there are security issues with snakeyaml versions smalle… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=142) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=144)