# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=145 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 146 --- ## [Logstash: Could not locate field: logstash.host.name](https://discuss.elastic.co/t/logstash-could-not-locate-field-logstash-host-name/365884)
**Author:** [@Kaustub\_Gupta](https://discuss.elastic.co/u/Kaustub_Gupta)\ **Replies:** 2\ **Last updated:** [October 29, 2024, 12:03pm UTC](https://discuss.elastic.co/t/logstash-could-not-locate-field-logstash-host-name/365884 "2024-10-29T12:03:16Z")
I installed elastic-agent as a service to monitor my server, I then enrolled it with agent policy with various integration, my aim is to use the logstash integration to monitor the logs, in my system logstash is running … --- ## [How to use Kibana export API?](https://discuss.elastic.co/t/how-to-use-kibana-export-api/369717)
**Author:** [@nakb](https://discuss.elastic.co/u/nakb)\ **Replies:** 0\ **Last updated:** [October 29, 2024, 11:38am UTC](https://discuss.elastic.co/t/how-to-use-kibana-export-api/369717 "2024-10-29T11:38:53Z")
I am using Kibana export API to get the rule in dev tools, but it's throwing error. { "statusCode": 400, "error": "Bad Request", "message": "Trying to export object(s) with non-exportable types: rule:5f598262-6916… --- ## [Count of a particular value is different in dicover and in visulisation specially in line chart](https://discuss.elastic.co/t/count-of-a-particular-value-is-different-in-dicover-and-in-visulisation-specially-in-line-chart/369714)
**Author:** [@aman\_kumar4](https://discuss.elastic.co/u/aman_kumar4)\ **Replies:** 0\ **Last updated:** [October 29, 2024, 10:20am UTC](https://discuss.elastic.co/t/count-of-a-particular-value-is-different-in-dicover-and-in-visulisation-specially-in-line-chart/369714 "2024-10-29T10:20:29Z")
I'm using split processor that separate on the basis of "/' (light/moon) and create a new field that is a basically simple values like "sun" and arrays like \[light, bulb, sun\] type now the problem is lets suppose the fi… --- ## [Elastic Search node backup and restore](https://discuss.elastic.co/t/elastic-search-node-backup-and-restore/369709)
**Author:** [@mahi657](https://discuss.elastic.co/u/mahi657)\ **Replies:** 1\ **Last updated:** [October 29, 2024, 10:04am UTC](https://discuss.elastic.co/t/elastic-search-node-backup-and-restore/369709 "2024-10-29T10:04:18Z")
I have 2 unconnected nodes of Elasticsearch, one at 7.11 level and another at latest 8.15. I want to backup and restore all the data from 7.11 node to 8.15 node. I took a snapshot on 7.11 node. Moved (using another serve… --- ## [Removing master nodes from cluster after upgrade](https://discuss.elastic.co/t/removing-master-nodes-from-cluster-after-upgrade/369532)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 3\ **Last updated:** [October 29, 2024, 9:48am UTC](https://discuss.elastic.co/t/removing-master-nodes-from-cluster-after-upgrade/369532 "2024-10-29T09:48:51Z")
Hi, I have just upgraded my Elasticsearch from 8.3.3 to 8.8.0. Previously, I have 3 master nodes in this cluster, but I want to only have one master node after the upgrade (for testing purposes). However, after the upgr… --- ## [MySQL elastic agent dashboard](https://discuss.elastic.co/t/mysql-elastic-agent-dashboard/369300)
**Author:** [@vharish0596](https://discuss.elastic.co/u/vharish0596)\ **Replies:** 6\ **Last updated:** [October 29, 2024, 9:14am UTC](https://discuss.elastic.co/t/mysql-elastic-agent-dashboard/369300 "2024-10-29T09:14:07Z")
I have added MySQL integration to one of my agent policies. Now where can I see the slowlog, error logs dashboard. In the MySQL elastic agent integration page there were two dashboards mentioned attached here for referen… --- ## [Trouble in Composite aggregation in new ElasticSearchClient Library in dotnet](https://discuss.elastic.co/t/trouble-in-composite-aggregation-in-new-elasticsearchclient-library-in-dotnet/369705)
**Author:** [@MARYALA\_VINAY\_KUMAR](https://discuss.elastic.co/u/MARYALA_VINAY_KUMAR)\ **Replies:** 2\ **Last updated:** [October 29, 2024, 8:19am UTC](https://discuss.elastic.co/t/trouble-in-composite-aggregation-in-new-elasticsearchclient-library-in-dotnet/369705 "2024-10-29T08:19:47Z")
Hi, I am trying some aggregation code in C# code in dotnet8.0 using Elastic.Clients.Elasticsearch library version 8.15.10 Previously, when using NEST this was used as Composite aggregation, .Aggregations( a =\> a… --- ## [Kibana not starting after upgrade to version 15.3](https://discuss.elastic.co/t/kibana-not-starting-after-upgrade-to-version-15-3/369472)
**Author:** [@alrubaa](https://discuss.elastic.co/u/alrubaa)\ **Replies:** 1\ **Last updated:** [October 28, 2024, 5:57pm UTC](https://discuss.elastic.co/t/kibana-not-starting-after-upgrade-to-version-15-3/369472 "2024-10-28T17:57:28Z")
I am running a couple of Elastic clusters, both were running 8.13.2. Then I upgraded the larger cluster to version 15.3 using a rolling upgrade, switched all kibana nodes off and then upgraded kibana and all went well. T… --- ## [Elasticsearch Disk Space Issue](https://discuss.elastic.co/t/elasticsearch-disk-space-issue/369138)
**Author:** [@bagafoot](https://discuss.elastic.co/u/bagafoot)\ **Replies:** 13\ **Last updated:** [October 28, 2024, 5:31pm UTC](https://discuss.elastic.co/t/elasticsearch-disk-space-issue/369138 "2024-10-28T17:31:56Z")
Hello I have an elk and strugling with management disk space. "The indices on this server, with only 5 pages in total, do not even amount to 100GB, but the Elasticsearch data directory shows 1.4TB of usage. What is cons… --- ## [Como crear un desarrollo de Software en Elastic](https://discuss.elastic.co/t/como-crear-un-desarrollo-de-software-en-elastic/369464)
**Author:** [@pasarelasdepagos.com](https://discuss.elastic.co/u/pasarelasdepagos.com)\ **Replies:** 2\ **Last updated:** [October 28, 2024, 4:57pm UTC](https://discuss.elastic.co/t/como-crear-un-desarrollo-de-software-en-elastic/369464 "2024-10-28T16:57:12Z")
Hola Elastic Community! Hola soy un experto en el desarrollo de software a medida y estoy creando complementos para diferentes plataformas para una empresa de software, ahora quiero integrar una pasarela de pagos para u… --- ## [Logstash cannot connect to elasticsearch](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch/369510)
**Author:** [@saqibmushtaq](https://discuss.elastic.co/u/saqibmushtaq)\ **Replies:** 9\ **Last updated:** [October 28, 2024, 4:55pm UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch/369510 "2024-10-28T16:55:48Z")
I am not able to connect logstash with elasticsearch, below are my configuration files version: "1.0" services: elasticsearch: container\_name: elasticsearch-container image: docker.elastic.co/elasticsearch/ela… --- ## [Failed to parse field \[data\] of type \[text\]](https://discuss.elastic.co/t/failed-to-parse-field-data-of-type-text/369325)
**Author:** [@zerratriani](https://discuss.elastic.co/u/zerratriani)\ **Replies:** 2\ **Last updated:** [October 28, 2024, 4:19pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-data-of-type-text/369325 "2024-10-28T16:19:00Z")
Hi i have some issue, i find this error in logstash-plain.log how to solve it? "error"=\>{"type"=\>"document\_parsing\_exception", "reason"=\>"\[1:2532\] failed to parse field \[data\] of type \[text\] in document with id 'f-6ZvJI… --- ## [Hybrid search without RRF](https://discuss.elastic.co/t/hybrid-search-without-rrf/369280)
**Author:** [@ravitejavemula333](https://discuss.elastic.co/u/ravitejavemula333)\ **Replies:** 1\ **Last updated:** [October 28, 2024, 4:09pm UTC](https://discuss.elastic.co/t/hybrid-search-without-rrf/369280 "2024-10-28T16:09:20Z")
Hi team, I want to do match Phrase and and also do a semantic search that means hybrid search , my current plan do not have rrf scoring mechanism, so i want to get scoring by customising it, along with i have additional… --- ## [Beats Output Metrics](https://discuss.elastic.co/t/beats-output-metrics/369421)
**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\ **Replies:** 6\ **Last updated:** [October 28, 2024, 3:59pm UTC](https://discuss.elastic.co/t/beats-output-metrics/369421 "2024-10-28T15:59:15Z")
Hi, I've been trying to tune my filebeat cluster for optimum performance and I have a question with some of the metrics. The docs show this: But I'm a little confused about .output.events.total, for me it is always… --- ## [Plot time shift line from 4 previous week](https://discuss.elastic.co/t/plot-time-shift-line-from-4-previous-week/369297)
**Author:** [@gueri](https://discuss.elastic.co/u/gueri)\ **Replies:** 1\ **Last updated:** [October 28, 2024, 3:15pm UTC](https://discuss.elastic.co/t/plot-time-shift-line-from-4-previous-week/369297 "2024-10-28T15:15:23Z")
Hello See my viz below: The shaded blue area is the count of 15 window time shifted 1 week ago Now I want the average count from 4 previous week. For example , the April 2 12:15pm: the green line is the cou… --- ## [Any tool avail for reading/analysis hot threads](https://discuss.elastic.co/t/any-tool-avail-for-reading-analysis-hot-threads/368862)
**Author:** [@pratik\_jain163](https://discuss.elastic.co/u/pratik_jain163)\ **Replies:** 1\ **Last updated:** [October 28, 2024, 2:42pm UTC](https://discuss.elastic.co/t/any-tool-avail-for-reading-analysis-hot-threads/368862 "2024-10-28T14:42:10Z")
i am looking how we can read and analysis ES hot threads , by reading thread things are not clear. please help. --- ## [How to populate each user ping directory deletion operations data in logging server](https://discuss.elastic.co/t/how-to-populate-each-user-ping-directory-deletion-operations-data-in-logging-server/369679)
**Author:** [@Subhasmita](https://discuss.elastic.co/u/Subhasmita)\ **Replies:** 0\ **Last updated:** [October 28, 2024, 2:30pm UTC](https://discuss.elastic.co/t/how-to-populate-each-user-ping-directory-deletion-operations-data-in-logging-server/369679 "2024-10-28T14:30:54Z")
How to populate each user ping directory deletion operations data in logging server. --- ## [Enrich policy not working in logstash pipeline](https://discuss.elastic.co/t/enrich-policy-not-working-in-logstash-pipeline/368026)
**Author:** [@Seemant\_Bind](https://discuss.elastic.co/u/Seemant_Bind)\ **Replies:** 3\ **Last updated:** [October 28, 2024, 1:43pm UTC](https://discuss.elastic.co/t/enrich-policy-not-working-in-logstash-pipeline/368026 "2024-10-28T13:43:20Z")
Hi, I am trying to use enrich policy for indexing the data. I have 2 indices, one is emp\_master and another emp\_salary. My emp\_salary sheet will be updated frequently and logstash pipline will capture the information an… --- ## [Reindexing due to index incompatibility gone wrong, can't find task result](https://discuss.elastic.co/t/reindexing-due-to-index-incompatibility-gone-wrong-cant-find-task-result/369675)
**Author:** [@PopisanaOgrada](https://discuss.elastic.co/u/PopisanaOgrada)\ **Replies:** 3\ **Last updated:** [October 28, 2024, 1:38pm UTC](https://discuss.elastic.co/t/reindexing-due-to-index-incompatibility-gone-wrong-cant-find-task-result/369675 "2024-10-28T13:38:41Z")
Hello! Just for context, my mission is to “migrate” a cluster from ES 7.7.1 to OS 2.15 via snapshot restore. The main issue I encountered is the index version incompatibility, because several indices were created in ES … --- ## [Auditing User Queries](https://discuss.elastic.co/t/auditing-user-queries/369502)
**Author:** [@digital-thought](https://discuss.elastic.co/u/digital-thought)\ **Replies:** 1\ **Last updated:** [October 28, 2024, 1:15pm UTC](https://discuss.elastic.co/t/auditing-user-queries/369502 "2024-10-28T13:15:21Z")
Has anyone come up with a good way to record for later auditing the queries that are run by users within the Elasticsearch environment? I know you can record queries using the Slow Log feature, however, I thought that t… --- ## [Difficulty to perform search operation in an array of items in new Elasticsearchclient library in dotnet](https://discuss.elastic.co/t/difficulty-to-perform-search-operation-in-an-array-of-items-in-new-elasticsearchclient-library-in-dotnet/369513)
**Author:** [@MARYALA\_VINAY\_KUMAR](https://discuss.elastic.co/u/MARYALA_VINAY_KUMAR)\ **Replies:** 7\ **Last updated:** [October 28, 2024, 11:16am UTC](https://discuss.elastic.co/t/difficulty-to-perform-search-operation-in-an-array-of-items-in-new-elasticsearchclient-library-in-dotnet/369513 "2024-10-28T11:16:25Z")
Hi, I am trying to run this C# code in dotnet8.0 using Elastic.Clients.Elasticsearch library version 8.15.10 var searchResult = await \_elasticsearchClient.SearchAsync\(s =\> s .Index("products") // Name of … --- ## [Discover in kibana shows blank](https://discuss.elastic.co/t/discover-in-kibana-shows-blank/369457)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [October 28, 2024, 11:22am UTC](https://discuss.elastic.co/t/discover-in-kibana-shows-blank/369457 "2024-10-28T11:22:48Z")
This is how discover is showing, weird, until yesterday everything was fine. can see dshboards with visual but not doscover. When switching to different space then there its showing normal discover with data. Any su… --- ## [Elastic stack installation issue with NFS](https://discuss.elastic.co/t/elastic-stack-installation-issue-with-nfs/369414)
**Author:** [@bminano](https://discuss.elastic.co/u/bminano)\ **Replies:** 5\ **Last updated:** [October 28, 2024, 10:30am UTC](https://discuss.elastic.co/t/elastic-stack-installation-issue-with-nfs/369414 "2024-10-28T10:30:30Z")
Hi, I installed a basic self-managed Elastic Stack successfully. But I was trying to change path.data to use a NFS mounted path in the server. When I try to start the elasticsearch service I get the following error: j… --- ## [Why is the Filebeat that I built myself more than 50 MB smaller than the one provided by Elastic?](https://discuss.elastic.co/t/why-is-the-filebeat-that-i-built-myself-more-than-50-mb-smaller-than-the-one-provided-by-elastic/369531)
**Author:** [@liu78778](https://discuss.elastic.co/u/liu78778)\ **Replies:** 0\ **Last updated:** [October 28, 2024, 10:08am UTC](https://discuss.elastic.co/t/why-is-the-filebeat-that-i-built-myself-more-than-50-mb-smaller-than-the-one-provided-by-elastic/369531 "2024-10-28T10:08:53Z")
Hello everyone, I followed the Building Beats from the Source documentation in the Beats repository. After building, I ended up with a Filebeat binary around 90 MB, but the Filebeat binary downloaded from GitHub is abou… --- ## [Importing data to Machine Learning](https://discuss.elastic.co/t/importing-data-to-machine-learning/369416)
**Author:** [@tapiojaa](https://discuss.elastic.co/u/tapiojaa)\ **Replies:** 2\ **Last updated:** [October 28, 2024, 9:58am UTC](https://discuss.elastic.co/t/importing-data-to-machine-learning/369416 "2024-10-28T09:58:23Z")
Hi, I'm studying Machine Learning and trying to import sample data to the Elasticsearch witch can be found here Machine-Learning-with-Elastic-Stack-Second-Edition/Chapter12 at main · PacktPublishing/Machine-Learning-wi… --- ## [How Elastic handles frequently changing data](https://discuss.elastic.co/t/how-elastic-handles-frequently-changing-data/369471)
**Author:** [@Moni\_Hazarika](https://discuss.elastic.co/u/Moni_Hazarika)\ **Replies:** 5\ **Last updated:** [October 28, 2024, 9:24am UTC](https://discuss.elastic.co/t/how-elastic-handles-frequently-changing-data/369471 "2024-10-28T09:24:20Z")
Hello Team, I have a usecase where I will make an API call to some 3rd party system, then download the dataset to a mounted volume in our kubernetes pod where our service is running. This data will then be index to Elas… --- ## [2 server 2 node each architecture for elastic not working](https://discuss.elastic.co/t/2-server-2-node-each-architecture-for-elastic-not-working/369284)
**Author:** [@Amol\_Nagotkar](https://discuss.elastic.co/u/Amol_Nagotkar)\ **Replies:** 12\ **Last updated:** [October 28, 2024, 8:45am UTC](https://discuss.elastic.co/t/2-server-2-node-each-architecture-for-elastic-not-working/369284 "2024-10-28T08:45:22Z")
Hi all, server 1- 10.40.7.134 ----------------docker-compose.yml file---------------- version: '2.2' services: elasticsearch-1: image: docker.elastic.co/elasticsearch/elasticsearch:7.17.1 container\_name: ela… --- ## [Accessing Kibana using hostname](https://discuss.elastic.co/t/accessing-kibana-using-hostname/369520)
**Author:** [@jayjayy](https://discuss.elastic.co/u/jayjayy)\ **Replies:** 0\ **Last updated:** [October 28, 2024, 8:24am UTC](https://discuss.elastic.co/t/accessing-kibana-using-hostname/369520 "2024-10-28T08:24:35Z")
I have an ELK setup on Ubuntu and I am trying to access the Kibana Web through hostname. I can access Kibana with my IP address but not hostname despite setting the server.publicBaseUrl: "https://:5601". I am enable to… --- ## [Syslog\\UDP\\TCP as inputs and files as output](https://discuss.elastic.co/t/syslog-udp-tcp-as-inputs-and-files-as-output/369422)
**Author:** [@Po-temkin](https://discuss.elastic.co/u/Po-temkin)\ **Replies:** 4\ **Last updated:** [October 28, 2024, 7:47am UTC](https://discuss.elastic.co/t/syslog-udp-tcp-as-inputs-and-files-as-output/369422 "2024-10-28T07:47:24Z")
Hello to everyone! First of all, I'm an infant in using logstash and just briefly read some parts of logstash docs. So do not blame me for stupid questions, please! =) Now, let's look into my question. Preface: My f… --- ## [We are using 6.8 version ELK stack, WE are using below dev tools syntax to take 9 months snaphots manually. PLease help me with code to automate it](https://discuss.elastic.co/t/we-are-using-6-8-version-elk-stack-we-are-using-below-dev-tools-syntax-to-take-9-months-snaphots-manually-please-help-me-with-code-to-automate-it/369516)
**Author:** [@namya\_k](https://discuss.elastic.co/u/namya_k)\ **Replies:** 0\ **Last updated:** [October 28, 2024, 7:30am UTC](https://discuss.elastic.co/t/we-are-using-6-8-version-elk-stack-we-are-using-below-dev-tools-syntax-to-take-9-months-snaphots-manually-please-help-me-with-code-to-automate-it/369516 "2024-10-28T07:30:53Z")
PUT /\_snapshot/cold\_storage/snapshot\_2024.06.21 { "indices": \[ "unix-syslog-2024.05.13", "av-log-2024.05.13", "filebeat-2024.06.04", "ad-server-logs-2024.05.13", "winlog-2024.05.13", "nice-audit-2024.05.13", "un… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=144) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=146)