# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=144

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 145

---

## [Removing occurrences of repeated text Characters from title in Elastic cloud](https://discuss.elastic.co/t/removing-occurrences-of-repeated-text-characters-from-title-in-elastic-cloud/369775)

<div class="topic-metadata">

**Author:** [@DavidT\_Spark](https://discuss.elastic.co/u/DavidT_Spark)\
**Replies:** 4\
**Last updated:** [October 31, 2024, 12:17am UTC](https://discuss.elastic.co/t/removing-occurrences-of-repeated-text-characters-from-title-in-elastic-cloud/369775 "2024-10-31T00:17:56Z")

</div>

I would like to remove any "| Brand" occurrences in the title field in such results. What script should I use? I tried painless scripts String title = doc\['title'\].value; if (title != null) { // Use replaceAll to re…

---

## [Logstash delete all documents before http\_poller](https://discuss.elastic.co/t/logstash-delete-all-documents-before-http-poller/368470)

<div class="topic-metadata">

**Author:** [@dogee](https://discuss.elastic.co/u/dogee)\
**Replies:** 2\
**Last updated:** [October 30, 2024, 11:46pm UTC](https://discuss.elastic.co/t/logstash-delete-all-documents-before-http-poller/368470 "2024-10-30T23:46:23Z")

</div>

Hi, How can I remove old data of an index before http\_polling ? I call Jira API every day with http\_poller. Every call fetches data from Jira and creates documents. My problem is that I have finally too many duplicated…

---

## [Logstash writing to older index](https://discuss.elastic.co/t/logstash-writing-to-older-index/369754)

<div class="topic-metadata">

**Author:** [@devops\_training](https://discuss.elastic.co/u/devops_training)\
**Replies:** 5\
**Last updated:** [October 30, 2024, 10:59pm UTC](https://discuss.elastic.co/t/logstash-writing-to-older-index/369754 "2024-10-30T22:59:57Z")

</div>

Below is the error message from logstash. The Elasticsearch is designed with hot, warm and cold nodes. Index is created on daily basis. \[2024-10-29T11:14:22,632\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\]\[1dde6b9e906…

---

## [User can't generate CSV reports](https://discuss.elastic.co/t/user-cant-generate-csv-reports/369755)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 1\
**Last updated:** [October 30, 2024, 10:56pm UTC](https://discuss.elastic.co/t/user-cant-generate-csv-reports/369755 "2024-10-30T22:56:10Z")

</div>

User gets error: "Ask adminiatrator for reporting access". We are 8.15.3 cloud. The doc says in the Kibana access area, There is a line for Reporting and a check box for Generate CSV Reports. That line doesn't appear…

---

## [Grok from end of line](https://discuss.elastic.co/t/grok-from-end-of-line/369801)

<div class="topic-metadata">

**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\
**Replies:** 2\
**Last updated:** [October 30, 2024, 10:50pm UTC](https://discuss.elastic.co/t/grok-from-end-of-line/369801 "2024-10-30T22:50:15Z")

</div>

Hi I am struggling to extract the correct bit of a log message. what I want to extract is the AgentID which sits at the end of the string and comprises 8 alphanumerics, a hyphen and then 8 more alphnumerics. In this c…

---

## [ExceptionInInitializer and NoClassDefFound could not initialize class org.elasticsearch.client.RestClientBuilder](https://discuss.elastic.co/t/exceptionininitializer-and-noclassdeffound-could-not-initialize-class-org-elasticsearch-client-restclientbuilder/369813)

<div class="topic-metadata">

**Author:** [@Radha\_G](https://discuss.elastic.co/u/Radha_G)\
**Replies:** 4\
**Last updated:** [October 30, 2024, 6:39pm UTC](https://discuss.elastic.co/t/exceptionininitializer-and-noclassdeffound-could-not-initialize-class-org-elasticsearch-client-restclientbuilder/369813 "2024-10-30T18:39:25Z")

</div>

Hi All, I have replaced org.elasticsearch.client.RestHighLevelClient to co.elastic.clients.elasticsearch.ElasticsearchClient . But, when mvn clean verify command is executed, the following exception is being thrown : \[…

---

## [Connectors deprecated?](https://discuss.elastic.co/t/connectors-deprecated/369746)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 4\
**Last updated:** [October 30, 2024, 5:56pm UTC](https://discuss.elastic.co/t/connectors-deprecated/369746 "2024-10-30T17:56:29Z")

</div>

Are connectors deprecated? I am trying to configure a PostgreSQL connector but the configuration instructions link to a GitHub page that no longer exists: https://github.com/elastic/connectors

---

## [Problem after making Tutorial 2: Securing a self-managed Elastic Stack (STEP 5)](https://discuss.elastic.co/t/problem-after-making-tutorial-2-securing-a-self-managed-elastic-stack-step-5/369823)

<div class="topic-metadata">

**Author:** [@Kuly2Fraise](https://discuss.elastic.co/u/Kuly2Fraise)\
**Replies:** 0\
**Last updated:** [October 30, 2024, 2:23pm UTC](https://discuss.elastic.co/t/problem-after-making-tutorial-2-securing-a-self-managed-elastic-stack-step-5/369823 "2024-10-30T14:23:53Z")

</div>

Hello, I have successfully completed the stack securing tutorial up to step 4. I did step 5 in its entirety, following all the steps, but kibana can no longer connect to elasticsearch. I get the error: Unable to retrie…

---

## [Migrating indices from one machine to another](https://discuss.elastic.co/t/migrating-indices-from-one-machine-to-another/369092)

<div class="topic-metadata">

**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\
**Replies:** 5\
**Last updated:** [October 30, 2024, 2:11pm UTC](https://discuss.elastic.co/t/migrating-indices-from-one-machine-to-another/369092 "2024-10-30T14:11:58Z")

</div>

Hello, I'm trying to migrate indices from a windows machine to a linux machine. For security reasons, I cannot use anything related to cloud. Is there a way to migrate indices using local file system? I tried copying th…

---

## [Elastic - Geo Enrichment](https://discuss.elastic.co/t/elastic-geo-enrichment/369756)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 6\
**Last updated:** [October 30, 2024, 1:16pm UTC](https://discuss.elastic.co/t/elastic-geo-enrichment/369756 "2024-10-30T13:16:16Z")

</div>

Is there a way to do enrichment of an area code. I am ingesting phone call data and would like to get more insights into the location (not provided within the actual data).

---

## [Generate certificates after expiring](https://discuss.elastic.co/t/generate-certificates-after-expiring/369689)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 2\
**Last updated:** [October 30, 2024, 12:43pm UTC](https://discuss.elastic.co/t/generate-certificates-after-expiring/369689 "2024-10-30T12:43:15Z")

</div>

What commands does the Ubuntu deb package installer script execute to generate HTTPS certificates? I would like to regenerate certificates, but the commands generate completely different file names etc. - I'm lost in thi…

---

## [Watcher - Mail ouput : send .csv from input](https://discuss.elastic.co/t/watcher-mail-ouput-send-csv-from-input/368121)

<div class="topic-metadata">

**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\
**Replies:** 1\
**Last updated:** [October 30, 2024, 12:37pm UTC](https://discuss.elastic.co/t/watcher-mail-ouput-send-csv-from-input/368121 "2024-10-30T12:37:22Z")

</div>

Hello, I've created a watcher that sends an email containing a list of items that the Input returns to me. The Watcher sends this list by mail, in the body of the mail. Is it possible to send this list in a .csv file? T…

---

## [Problem creating data views](https://discuss.elastic.co/t/problem-creating-data-views/369535)

<div class="topic-metadata">

**Author:** [@Michel\_Gbeleou](https://discuss.elastic.co/u/Michel_Gbeleou)\
**Replies:** 1\
**Last updated:** [October 30, 2024, 10:23am UTC](https://discuss.elastic.co/t/problem-creating-data-views/369535 "2024-10-30T10:23:56Z")

</div>

to be able to use the predefined kibqnq dashboards for the nginx module while sending the log output of the nginx module from filbeat to logstash I specified the application of the pipeline in the elasticsearch output /…

---

## [Ingestion Pipeline](https://discuss.elastic.co/t/ingestion-pipeline/369676)

<div class="topic-metadata">

**Author:** [@Jay\_Timbadia](https://discuss.elastic.co/u/Jay_Timbadia)\
**Replies:** 2\
**Last updated:** [October 30, 2024, 9:52am UTC](https://discuss.elastic.co/t/ingestion-pipeline/369676 "2024-10-30T09:52:23Z")

</div>

Hello All, I have been using ingestion pipellne on PDFs. I need to pass entire PDF encoded and in return I get a response (which is PDF text) in one "content" field. How can I get page-wise content for a single PDF us…

---

## [ES|QL panel doesn't refresh every n seconds](https://discuss.elastic.co/t/es-ql-panel-doesnt-refresh-every-n-seconds/369673)

<div class="topic-metadata">

**Author:** [@edgarmat1964](https://discuss.elastic.co/u/edgarmat1964)\
**Replies:** 3\
**Last updated:** [October 30, 2024, 9:35am UTC](https://discuss.elastic.co/t/es-ql-panel-doesnt-refresh-every-n-seconds/369673 "2024-10-30T09:35:34Z")

</div>

Hello, I'm using ES8.15 and Kibana 8.15 and I've made a dashboard containing a single ES|QL panel which contains this query: FROM myIndex | WHERE message.keyword RLIKE ".\*\[Ee\]\[Rr\]\[Rr\]\[Oo\]\[Rr\].\*" | EVAL Time = date\_form…

---

## [Elasticsearch集群热升级](https://discuss.elastic.co/t/elasticsearch/369337)

<div class="topic-metadata">

**Author:** [@lianmeng0](https://discuss.elastic.co/u/lianmeng0)\
**Replies:** 2\
**Last updated:** [October 30, 2024, 7:09am UTC](https://discuss.elastic.co/t/elasticsearch/369337 "2024-10-30T07:09:20Z")

</div>

Hi! 各位好！ 请问es集群是否可以进行热升级，就是在原集群上添加高版本的新节点，然后再去退役集群上的旧版本的节点

---

## [Kuma Service mesh support with elasticsearch?](https://discuss.elastic.co/t/kuma-service-mesh-support-with-elasticsearch/369777)

<div class="topic-metadata">

**Author:** [@chahatagarwal](https://discuss.elastic.co/u/chahatagarwal)\
**Replies:** 1\
**Last updated:** [October 30, 2024, 7:25am UTC](https://discuss.elastic.co/t/kuma-service-mesh-support-with-elasticsearch/369777 "2024-10-30T07:25:27Z")

</div>

Are there any limitation for Kuma Service Mesh with elasticsearch? As we can see only istio and Linkerd from the official documentation

---

## [Apply Label Template in URL format for field not null](https://discuss.elastic.co/t/apply-label-template-in-url-format-for-field-not-null/369783)

<div class="topic-metadata">

**Author:** [@trungyutu](https://discuss.elastic.co/u/trungyutu)\
**Replies:** 2\
**Last updated:** [October 30, 2024, 7:17am UTC](https://discuss.elastic.co/t/apply-label-template-in-url-format-for-field-not-null/369783 "2024-10-30T07:17:35Z")

</div>

Hi, I have a field name Issue Link which contain either a url or empty. My url is quite long so i want to shorter it, i use Url format in data view and set custom label to "Bug". And the output in kibana: It also …

---

## [Java Heap logstash](https://discuss.elastic.co/t/java-heap-logstash/365601)

<div class="topic-metadata">

**Author:** [@devops\_training](https://discuss.elastic.co/u/devops_training)\
**Replies:** 3\
**Last updated:** [October 30, 2024, 5:20am UTC](https://discuss.elastic.co/t/java-heap-logstash/365601 "2024-10-30T05:20:57Z")

</div>

\[2024-08-16T07:54:27,150\]\[FATAL\]\[org.logstash.Logstash \] uncaught error (in thread pool-701-thread-1) java.lang.OutOfMemoryError: Java heap space I will be running one pipeline. Haven't changed any default settings. …

---

## [Rule Recovery Functionality](https://discuss.elastic.co/t/rule-recovery-functionality/369771)

<div class="topic-metadata">

**Author:** [@jeffabar](https://discuss.elastic.co/u/jeffabar)\
**Replies:** 0\
**Last updated:** [October 29, 2024, 10:55pm UTC](https://discuss.elastic.co/t/rule-recovery-functionality/369771 "2024-10-29T22:55:23Z")

</div>

I have a DSL query which finds the latest record grouped by a field Module and if that latest record has another field unexpected\_state set to true it matches. I have the rule set for "FOR THE LAST 5 minutes" and it run…

---

## [How can I receive e-mail notifications about new available cloud versions?](https://discuss.elastic.co/t/how-can-i-receive-e-mail-notifications-about-new-available-cloud-versions/369715)

<div class="topic-metadata">

**Author:** [@helmj](https://discuss.elastic.co/u/helmj)\
**Replies:** 3\
**Last updated:** [October 29, 2024, 8:19pm UTC](https://discuss.elastic.co/t/how-can-i-receive-e-mail-notifications-about-new-available-cloud-versions/369715 "2024-10-29T20:19:58Z")

</div>

Hi everybody, I’m new to Elastic Cloud and have subscribed to the announcement channel here. However, I’m still not receiving email notifications about new versions. I haven’t found any other option to configure this in…

---

## [Moving the Search UI autocomplete results container](https://discuss.elastic.co/t/moving-the-search-ui-autocomplete-results-container/369760)

<div class="topic-metadata">

**Author:** [@rlebreto](https://discuss.elastic.co/u/rlebreto)\
**Replies:** 0\
**Last updated:** [October 29, 2024, 6:42pm UTC](https://discuss.elastic.co/t/moving-the-search-ui-autocomplete-results-container/369760 "2024-10-29T18:42:40Z")

</div>

I'm implementing Search UI (React) on a site, and it's working well for the most part, but due to the way the site is structured and styled, I'm running into trouble with existing site elements overlapping and obscuring …

---

## [Autoscaling based on CPU](https://discuss.elastic.co/t/autoscaling-based-on-cpu/369707)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 7\
**Last updated:** [October 29, 2024, 5:08pm UTC](https://discuss.elastic.co/t/autoscaling-based-on-cpu/369707 "2024-10-29T17:08:40Z")

</div>

I see there is no direct way to autoscale based on CPU and autoscaling is available only for ML and storage. Is there an alternative way to scale out or scale up my cluster based on cpu? Say, CPU utilisation goes from 5…

---

## [Github.com/elastic/beats is missing - 404](https://discuss.elastic.co/t/github-com-elastic-beats-is-missing-404/369744)

<div class="topic-metadata">

**Author:** [@C0rn3j](https://discuss.elastic.co/u/C0rn3j)\
**Replies:** 1\
**Last updated:** [October 29, 2024, 5:10pm UTC](https://discuss.elastic.co/t/github-com-elastic-beats-is-missing-404/369744 "2024-10-29T17:10:44Z")

</div>

Where hath the repo gone? Currently it's 404 and I cannot find any replacement github.com/elastic/beats EDIT: Somehow missed this thread - Was the elasticsearch-php repository deleted? - #2 by dadoonet

---

## [How to reindex an index that is being actively modified](https://discuss.elastic.co/t/how-to-reindex-an-index-that-is-being-actively-modified/369745)

<div class="topic-metadata">

**Author:** [@PopisanaOgrada](https://discuss.elastic.co/u/PopisanaOgrada)\
**Replies:** 0\
**Last updated:** [October 29, 2024, 2:52pm UTC](https://discuss.elastic.co/t/how-to-reindex-an-index-that-is-being-actively-modified/369745 "2024-10-29T14:52:34Z")

</div>

Hello! I need to reindex an index that is being actively modified (docs added and updated) and searched via an alias. What is the best way to do that while minimizing the data gap in the new index due to the old index b…

---

## [Was the elasticsearch-php repository deleted?](https://discuss.elastic.co/t/was-the-elasticsearch-php-repository-deleted/369723)

<div class="topic-metadata">

**Author:** [@d0tt](https://discuss.elastic.co/u/d0tt)\
**Replies:** 5\
**Last updated:** [October 29, 2024, 3:29pm UTC](https://discuss.elastic.co/t/was-the-elasticsearch-php-repository-deleted/369723 "2024-10-29T15:29:58Z")

</div>

https://github.com/elastic/elasticsearch-php returns 404, our builds are failing etc.. Accident or what is going on? :smiley:

---

## [SNMP input plugin integration with logstash](https://discuss.elastic.co/t/snmp-input-plugin-integration-with-logstash/369702)

<div class="topic-metadata">

**Author:** [@Mohan.k](https://discuss.elastic.co/u/Mohan.k)\
**Replies:** 1\
**Last updated:** [October 29, 2024, 3:20pm UTC](https://discuss.elastic.co/t/snmp-input-plugin-integration-with-logstash/369702 "2024-10-29T15:20:56Z")

</div>

Hi All, I am new to the ELK monitoring system. I have requirement to implement SNMP input plugin integration with one of logstash server. I referred the document and unfortunately I am not able to understand how can I…

---

## [Cannot Access localhost:9200 when xpack.security.http.ssl.enabled is true](https://discuss.elastic.co/t/cannot-access-localhost-9200-when-xpack-security-http-ssl-enabled-is-true/369302)

<div class="topic-metadata">

**Author:** [@Jerome\_Escamilla](https://discuss.elastic.co/u/Jerome_Escamilla)\
**Replies:** 4\
**Last updated:** [October 29, 2024, 9:45am UTC](https://discuss.elastic.co/t/cannot-access-localhost-9200-when-xpack-security-http-ssl-enabled-is-true/369302 "2024-10-29T09:45:24Z")

</div>

Hi Team, I'm a newbie for ElasticStack and I'm trying to run Kibana and MetricBeat with my Elasticsearch on my Windows Local Machine, I have both Elasticsearch and Kibana Running and I'm installing MetricBeat which requ…

---

## [Kibana - Phone Format](https://discuss.elastic.co/t/kibana-phone-format/369734)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 2\
**Last updated:** [October 29, 2024, 1:30pm UTC](https://discuss.elastic.co/t/kibana-phone-format/369734 "2024-10-29T13:30:48Z")

</div>

Hello is there a way to format a keyword into a phone number? For example I have: 2221110000 But I would want something like this 222-111-0000

---

## [Elastic/elasticsearch-php is gone](https://discuss.elastic.co/t/elastic-elasticsearch-php-is-gone/369722)

<div class="topic-metadata">

**Author:** [@Marwan\_Mustafa\_Fikra](https://discuss.elastic.co/u/Marwan_Mustafa_Fikra)\
**Replies:** 2\
**Last updated:** [October 29, 2024, 12:29pm UTC](https://discuss.elastic.co/t/elastic-elasticsearch-php-is-gone/369722 "2024-10-29T12:29:26Z")

</div>

The elastic/elasticsearch-php repository is gone with no obvious announcements or mentions of it anywhere. What happened?

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=143)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=145)
