# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=146 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 147 --- ## [Failed to parse field \[host\] of type \[text\]](https://discuss.elastic.co/t/failed-to-parse-field-host-of-type-text/369320)
**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\ **Replies:** 4\ **Last updated:** [October 28, 2024, 5:35am UTC](https://discuss.elastic.co/t/failed-to-parse-field-host-of-type-text/369320 "2024-10-28T05:35:23Z")
Hello team, I'm using the Elasticsearch, Logstash, and Kibana stack version 8.15.3, which is configured using Docker. By using Logstash, I tried to insert a CSV file data into Elasticsearch. However, I encounter an err… --- ## [Confusede result from multilingual-e5-small](https://discuss.elastic.co/t/confusede-result-from-multilingual-e5-small/364398)
**Author:** [@Shell\_Dias](https://discuss.elastic.co/u/Shell_Dias)\ **Replies:** 4\ **Last updated:** [October 28, 2024, 4:18am UTC](https://discuss.elastic.co/t/confusede-result-from-multilingual-e5-small/364398 "2024-10-28T04:18:29Z")
I am currently working with multilingual-e5-small and using semantic search. However, when retrieving search results, they seem inconclusive compared to the search query. My actual question is how to evaluate the model … --- ## [Defender - Kibana Incidents Count](https://discuss.elastic.co/t/defender-kibana-incidents-count/369504)
**Author:** [@Sunny\_Sunny](https://discuss.elastic.co/u/Sunny_Sunny)\ **Replies:** 0\ **Last updated:** [October 28, 2024, 1:24am UTC](https://discuss.elastic.co/t/defender-kibana-incidents-count/369504 "2024-10-28T01:24:09Z")
I'm working on creating a visualization in Kibana that counts incidents by their m365\_defender.incident.alert.status. The statuses can be "new", "inProgress", or "resolved". However, I am encountering an issue where Kiba… --- ## [Elasticsearch Monitoring - Metricbeats](https://discuss.elastic.co/t/elasticsearch-monitoring-metricbeats/368874)
**Author:** [@digital-thought](https://discuss.elastic.co/u/digital-thought)\ **Replies:** 1\ **Last updated:** [October 28, 2024, 12:49am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-metricbeats/368874 "2024-10-28T00:49:43Z")
I am hoping for some clarification on the configuration of Metricbeat to monitor a cluster. The documentation states the following: I will set up a single instance of Metricbeat to monitor my cluster which is made u… --- ## [Metricbeat logging rotateonstartup not work](https://discuss.elastic.co/t/metricbeat-logging-rotateonstartup-not-work/369478)
**Author:** [@xiaotiger](https://discuss.elastic.co/u/xiaotiger)\ **Replies:** 2\ **Last updated:** [October 27, 2024, 7:29pm UTC](https://discuss.elastic.co/t/metricbeat-logging-rotateonstartup-not-work/369478 "2024-10-27T19:29:15Z")
metricbeat.yml logging.files: interval: 24h permissions: 0644 rotateonstartup: False metricbeat version:8.15 According to the above Settings, when metricbeat restarts, why does a new log file (metricbeat-yyyMMdd-1.… --- ## [Elastic Search can't been started without execute rights on /tmp](https://discuss.elastic.co/t/elastic-search-cant-been-started-without-execute-rights-on-tmp/369149)
**Author:** [@mscheepers](https://discuss.elastic.co/u/mscheepers)\ **Replies:** 11\ **Last updated:** [October 27, 2024, 6:43pm UTC](https://discuss.elastic.co/t/elastic-search-cant-been-started-without-execute-rights-on-tmp/369149 "2024-10-27T18:43:41Z")
Hi All, I noticed when starting the Elasticsearch services on our RHEL 9 machine is failing when it's been installed with RPM's. The startup is failing as its trying to execute files on the /tmp path. This is by defaul… --- ## [Trouble following the "Getting started" blog guide](https://discuss.elastic.co/t/trouble-following-the-getting-started-blog-guide/369480)
**Author:** [@jackal713](https://discuss.elastic.co/u/jackal713)\ **Replies:** 4\ **Last updated:** [October 27, 2024, 6:41pm UTC](https://discuss.elastic.co/t/trouble-following-the-getting-started-blog-guide/369480 "2024-10-27T18:41:33Z")
Hello Everyone, I'm trying to follow the "Getting started with the Elastic Stack and Docker Compose" blog guide. (I'm not allowed to post the actual URL.) I'm running into an issue following the directions and I'm hopin… --- ## [Filter documents based on their Guid\[\] array property to only retrieve those containing all the values from an incoming Guid\[\] array or more](https://discuss.elastic.co/t/filter-documents-based-on-their-guid-array-property-to-only-retrieve-those-containing-all-the-values-from-an-incoming-guid-array-or-more/369484)
**Author:** [@ali101](https://discuss.elastic.co/u/ali101)\ **Replies:** 2\ **Last updated:** [October 27, 2024, 11:18am UTC](https://discuss.elastic.co/t/filter-documents-based-on-their-guid-array-property-to-only-retrieve-those-containing-all-the-values-from-an-incoming-guid-array-or-more/369484 "2024-10-27T11:18:06Z")
Hello, I'm using .NET 6.0 and Elastic.Clients.Elasticsearch V8.15.10. I have a title index with a property Guid\[\] Genres that is an array of Guids. In my incoming query I expect the same, an array of Guids (query.Genr… --- ## [Are \`Auditbeat\` and \`Logstash - OSS only\` equivalent?](https://discuss.elastic.co/t/are-auditbeat-and-logstash-oss-only-equivalent/369488)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [October 27, 2024, 5:54am UTC](https://discuss.elastic.co/t/are-auditbeat-and-logstash-oss-only-equivalent/369488 "2024-10-27T05:54:18Z")
At Download Logstash Free | Get Started Now | Elastic , I noticed there was a hyperlink that took me to Download Logstash Free | Get Started Now | Elastic . I tried clicking on Docker at Download Logstash Free | Get St… --- ## [Alert Rules - doesn't seem to process query](https://discuss.elastic.co/t/alert-rules-doesnt-seem-to-process-query/369433)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 2\ **Last updated:** [October 26, 2024, 5:45am UTC](https://discuss.elastic.co/t/alert-rules-doesnt-seem-to-process-query/369433 "2024-10-26T05:45:19Z")
Hi I have some basic alerts configured to alert when log sources stop sending. One example is monitoring logs from a number of firewalls; I simply want an alert if one fails to generate logs. I have created the follow… --- ## [Elasticsearch logs coming slow in index from file beat to logstash](https://discuss.elastic.co/t/elasticsearch-logs-coming-slow-in-index-from-file-beat-to-logstash/369420)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 0\ **Last updated:** [October 25, 2024, 11:22am UTC](https://discuss.elastic.co/t/elasticsearch-logs-coming-slow-in-index-from-file-beat-to-logstash/369420 "2024-10-25T11:22:25Z")
Whenever I am doing Get \_cat/nodes from kibana getting this: stausCode:502, Error:”bad gateway”, “Message”: client request timeout” Also logs are coming in elastic index slow and in elastic logs it’s showing continuo… --- ## [ignoreFilterIfFieldNotInIndex does not work?](https://discuss.elastic.co/t/ignorefilteriffieldnotinindex-does-not-work/369382)
**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\ **Replies:** 2\ **Last updated:** [October 25, 2024, 7:06pm UTC](https://discuss.elastic.co/t/ignorefilteriffieldnotinindex-does-not-work/369382 "2024-10-25T19:06:44Z")
Hi there! I enabled "ignoreFilterIfFieldNotInIndex" option in Kibana Advanced Settings, since I am using 2 data views and I would like to avoid filtering out documents if some field does not exist in the data view Howe… --- ## [What about the Scroll API makes it a bad choice for paging large result sets?](https://discuss.elastic.co/t/what-about-the-scroll-api-makes-it-a-bad-choice-for-paging-large-result-sets/368704)
**Author:** [@sweller](https://discuss.elastic.co/u/sweller)\ **Replies:** 1\ **Last updated:** [October 25, 2024, 7:04pm UTC](https://discuss.elastic.co/t/what-about-the-scroll-api-makes-it-a-bad-choice-for-paging-large-result-sets/368704 "2024-10-25T19:04:15Z")
The fact that the Scroll API is not recommended for deep pagination in ES 8 is well-documented. I'm currently updating some legacy code which uses it to page through a result set much larger than 10k hits, and from what … --- ## [Large data node memory issues on write](https://discuss.elastic.co/t/large-data-node-memory-issues-on-write/369454)
**Author:** [@gpremo](https://discuss.elastic.co/u/gpremo)\ **Replies:** 0\ **Last updated:** [October 25, 2024, 7:00pm UTC](https://discuss.elastic.co/t/large-data-node-memory-issues-on-write/369454 "2024-10-25T19:00:19Z")
Hello, we are seeing some memory issues in our cluster, and data nodes will sometimes crash when running out of memory. Some quick background of our elasticsearch cluster running in GKE with the following nodes: 3x Ma… --- ## [How to remove empty fields from filebeat-8.15.1](https://discuss.elastic.co/t/how-to-remove-empty-fields-from-filebeat-8-15-1/369353)
**Author:** [@rahuldastidar](https://discuss.elastic.co/u/rahuldastidar)\ **Replies:** 3\ **Last updated:** [October 25, 2024, 5:52pm UTC](https://discuss.elastic.co/t/how-to-remove-empty-fields-from-filebeat-8-15-1/369353 "2024-10-25T17:52:47Z")
I have installed and configured filebeat-8.15 on Windows 2019 host, and in the Kibana 'Discover' section in the , customized 'Data Views' which I have created by editing "Index Template" , and dropping the unwanted empty… --- ## [How does Elasticsearch propagate index mappings to all primary and replica shards?](https://discuss.elastic.co/t/how-does-elasticsearch-propagate-index-mappings-to-all-primary-and-replica-shards/369432)
**Author:** [@Hamza\_Belmellouki](https://discuss.elastic.co/u/Hamza_Belmellouki)\ **Replies:** 1\ **Last updated:** [October 25, 2024, 5:27pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-propagate-index-mappings-to-all-primary-and-replica-shards/369432 "2024-10-25T17:27:25Z")
Hello, I'm trying to understand how Elasticsearch ensures consistency of index mappings across all primary and replica shards. Specifically: When an index is created with mappings, does the master node propagate these… --- ## [Graph API Query with multiple hops](https://discuss.elastic.co/t/graph-api-query-with-multiple-hops/369309)
**Author:** [@Jennifer\_Klemisch](https://discuss.elastic.co/u/Jennifer_Klemisch)\ **Replies:** 6\ **Last updated:** [October 25, 2024, 5:10pm UTC](https://discuss.elastic.co/t/graph-api-query-with-multiple-hops/369309 "2024-10-25T17:10:38Z")
Hi I have data that looks like this: PUT g\_explore/\_doc/0 { "lot\_num":"A1", "out\_batch": "BATCH940","input\_batch": "BATCH770","produce\_consume": "BATCH770 BATCH940"} PUT g\_explore/\_doc/1 { "lot\_num":"A2-0", "out\_batch… --- ## [8.15 MySQL connector how to sync using a sql statement](https://discuss.elastic.co/t/8-15-mysql-connector-how-to-sync-using-a-sql-statement/369312)
**Author:** [@Gertjan](https://discuss.elastic.co/u/Gertjan)\ **Replies:** 3\ **Last updated:** [October 25, 2024, 4:38pm UTC](https://discuss.elastic.co/t/8-15-mysql-connector-how-to-sync-using-a-sql-statement/369312 "2024-10-25T16:38:42Z")
Greetings, I'm using the 8.15 free trial and want to retrieve data from MySQL. I'm using the MySQL connector and in the Configuration, I add some tables under Comma-separated list of tables. On sync, all the rows of t… --- ## [Unable to run CEL program due to error](https://discuss.elastic.co/t/unable-to-run-cel-program-due-to-error/369441)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 0\ **Last updated:** [October 25, 2024, 4:11pm UTC](https://discuss.elastic.co/t/unable-to-run-cel-program-due-to-error/369441 "2024-10-25T16:11:59Z")
Hello, We want to utilize filebeat CEL input to pull the data from Qualys API however when running a simple program: get("API Notification") we are getting an error: $ mito cel.go failed eval: ERROR: :1:4: http: rea… --- ## [Is it possible to hide the header and top menu on the reporting page in embedded mode?](https://discuss.elastic.co/t/is-it-possible-to-hide-the-header-and-top-menu-on-the-reporting-page-in-embedded-mode/369431)
**Author:** [@Serhii\_samoilenko](https://discuss.elastic.co/u/Serhii_samoilenko)\ **Replies:** 0\ **Last updated:** [October 25, 2024, 2:19pm UTC](https://discuss.elastic.co/t/is-it-possible-to-hide-the-header-and-top-menu-on-the-reporting-page-in-embedded-mode/369431 "2024-10-25T14:19:08Z")
Hi, I have shared a dashboard in embedded mode. This dashboard contains a saved search with the option to download a CSV report. After generating the CSV report, Kibana provides a link to the reporting page for downlo… --- ## [Conflit index template managed by fleet](https://discuss.elastic.co/t/conflit-index-template-managed-by-fleet/360360)
**Author:** [@ahmed\_charafouddine](https://discuss.elastic.co/u/ahmed_charafouddine)\ **Replies:** 3\ **Last updated:** [October 25, 2024, 1:07pm UTC](https://discuss.elastic.co/t/conflit-index-template-managed-by-fleet/360360 "2024-10-25T13:07:01Z")
Hello, After upgrading our Elastic cluster from 8.11 to 8.13.4, we encountered an issue related to the index template. The followin error has appeared : illegal\_argument\_exception Root causes: illegal\_argument\_exceptio… --- ## [Elasticsearch multi cluster set up](https://discuss.elastic.co/t/elasticsearch-multi-cluster-set-up/369410)
**Author:** [@vinodmb](https://discuss.elastic.co/u/vinodmb)\ **Replies:** 2\ **Last updated:** [October 25, 2024, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-multi-cluster-set-up/369410 "2024-10-25T10:47:50Z")
We want to use multiple Elasticsearch cluster in our service, is there any way to automatically data is injected to specific cluster based on some parameter in bulk api without manually calling bulk api separately for ea… --- ## [Do very large segments lead to a significant increase in slow logs?](https://discuss.elastic.co/t/do-very-large-segments-lead-to-a-significant-increase-in-slow-logs/369409)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 0\ **Last updated:** [October 25, 2024, 9:35am UTC](https://discuss.elastic.co/t/do-very-large-segments-lead-to-a-significant-increase-in-slow-logs/369409 "2024-10-25T09:35:44Z")
I have an Elasticsearch index that continuously receives new data, along with a certain proportion of update and delete operations. As a result, the docs.deleted count for this index is gradually increasing, and after a … --- ## [GraphQL Connector Object to ID mapping rookie question](https://discuss.elastic.co/t/graphql-connector-object-to-id-mapping-rookie-question/369406)
**Author:** [@hairyJerry](https://discuss.elastic.co/u/hairyJerry)\ **Replies:** 0\ **Last updated:** [October 25, 2024, 9:28am UTC](https://discuss.elastic.co/t/graphql-connector-object-to-id-mapping-rookie-question/369406 "2024-10-25T09:28:10Z")
Hello, I am trying to index a small test GraphQL data as a proof of concept. Having no better Ideas, I decided to map over the edges, i.e. the response I am trying to map looks like this: { "data": { "getIt… --- ## [Regenerate certificates](https://discuss.elastic.co/t/regenerate-certificates/368238)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [October 25, 2024, 7:17am UTC](https://discuss.elastic.co/t/regenerate-certificates/368238 "2024-10-25T07:17:41Z")
How can I regenerate certificates same as Ubuntu package is doing it after install? How this installation script looks like / where can I found it? I need extend certificate (regenerate) after 2 years. Looks like there i… --- ## [How to sync only updated data from mysql table with logstash is it possible?](https://discuss.elastic.co/t/how-to-sync-only-updated-data-from-mysql-table-with-logstash-is-it-possible/369397)
**Author:** [@Hardik\_Patel1](https://discuss.elastic.co/u/Hardik_Patel1)\ **Replies:** 1\ **Last updated:** [October 25, 2024, 7:01am UTC](https://discuss.elastic.co/t/how-to-sync-only-updated-data-from-mysql-table-with-logstash-is-it-possible/369397 "2024-10-25T07:01:24Z")
how to sync only updated data from mysql table with logstash is it possible with logstash configuration --- ## [Elasticsearch Overview metrics visualizations (search/indexing rate)](https://discuss.elastic.co/t/elasticsearch-overview-metrics-visualizations-search-indexing-rate/369387)
**Author:** [@s.buksa](https://discuss.elastic.co/u/s.buksa)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 10:32pm UTC](https://discuss.elastic.co/t/elasticsearch-overview-metrics-visualizations-search-indexing-rate/369387 "2024-10-24T22:32:41Z")
Hello, Could someone, please, explain how metrics in Elasticsearch Overview dashboard visualizations are calculated? I am trying to understand what are functions behind the following visualizations: Search Rate (/s) S… --- ## [A way to reduce mapping fields](https://discuss.elastic.co/t/a-way-to-reduce-mapping-fields/369363)
**Author:** [@913043599](https://discuss.elastic.co/u/913043599)\ **Replies:** 3\ **Last updated:** [October 25, 2024, 2:17am UTC](https://discuss.elastic.co/t/a-way-to-reduce-mapping-fields/369363 "2024-10-25T02:17:50Z")
Hi all: I have discovered a method for reducing the elasticsearch fields. For instance, if there are three keyword fields in an index and they are solely utilized for term queries, then I directly employ a single keywor… --- ## [ILM Downsample Failed with logs containing a lot of "Duplicate field 'min'" messages](https://discuss.elastic.co/t/ilm-downsample-failed-with-logs-containing-a-lot-of-duplicate-field-min-messages/360395)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 2\ **Last updated:** [October 24, 2024, 10:44pm UTC](https://discuss.elastic.co/t/ilm-downsample-failed-with-logs-containing-a-lot-of-duplicate-field-min-messages/360395 "2024-10-24T22:44:56Z")
Hey all, I have a bunch of indices stuck when they try to downsample. They're all elasticsearch monitor related indices coming from the Elastic Agent Elasticsearch integration. When I manually tell ILM to try again, I … --- ## [Just now downloaded Elasticsearch 8.15.3, Getting the following error](https://discuss.elastic.co/t/just-now-downloaded-elasticsearch-8-15-3-getting-the-following-error/369351)
**Author:** [@ajaytavva](https://discuss.elastic.co/u/ajaytavva)\ **Replies:** 1\ **Last updated:** [October 24, 2024, 10:25pm UTC](https://discuss.elastic.co/t/just-now-downloaded-elasticsearch-8-15-3-getting-the-following-error/369351 "2024-10-24T22:25:47Z")
So, I was getting this error. After the first time I tried running the elasticsearch.bat file Any help is appreciated warning: ignoring JAVA\_HOME=C:\\Program Files\\Java\\jdk-17; using bundled JDK Oct 24, 2024 3:52:55 AM … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=145) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=147)