# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=147 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 148 --- ## [SSO not working on ECK with Oracle cloud IDP](https://discuss.elastic.co/t/sso-not-working-on-eck-with-oracle-cloud-idp/369239)
**Author:** [@hsinha09](https://discuss.elastic.co/u/hsinha09)\ **Replies:** 2\ **Last updated:** [October 24, 2024, 7:48pm UTC](https://discuss.elastic.co/t/sso-not-working-on-eck-with-oracle-cloud-idp/369239 "2024-10-24T19:48:15Z")
Hi, I am trying to configure SSO on elasticsearch. While login, it is redirecting to the SSO auth page and asks for username and password, followed by auth code. Once the auth code is entered, I am getting 404 - not fo… --- ## [Pros & Cons For Single Index vs. Per-Device Index](https://discuss.elastic.co/t/pros-cons-for-single-index-vs-per-device-index/369381)
**Author:** [@Michael\_O\_Hara](https://discuss.elastic.co/u/Michael_O_Hara)\ **Replies:** 2\ **Last updated:** [October 24, 2024, 7:24pm UTC](https://discuss.elastic.co/t/pros-cons-for-single-index-vs-per-device-index/369381 "2024-10-24T19:24:57Z")
Can SME's for Beats-Elastic chime in on this: what are the pros/cons that would help decide whether to deploy a single index vs. per-device index? Effort required to set up on single vs. per-server? Risks of using a … --- ## [Return date fields as long numbers when using synthetic \_source and having format of date as epoch\_millis](https://discuss.elastic.co/t/return-date-fields-as-long-numbers-when-using-synthetic-source-and-having-format-of-date-as-epoch-millis/369383)
**Author:** [@dbenesj](https://discuss.elastic.co/u/dbenesj)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 6:57pm UTC](https://discuss.elastic.co/t/return-date-fields-as-long-numbers-when-using-synthetic-source-and-having-format-of-date-as-epoch-millis/369383 "2024-10-24T18:57:11Z")
We are using synthetic \_source and date fields with format defined as epoch\_millis. Our expectation would be to get such fields as long number but we get them as strings. As we understand it might be necessary when date… --- ## [Setting up Elastic - Failed to allocate closure](https://discuss.elastic.co/t/setting-up-elastic-failed-to-allocate-closure/369379)
**Author:** [@greenmachine](https://discuss.elastic.co/u/greenmachine)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 6:34pm UTC](https://discuss.elastic.co/t/setting-up-elastic-failed-to-allocate-closure/369379 "2024-10-24T18:34:28Z")
Getting the Failed to allocate closure error when trying to start elasticsearch. We've added Environment=ES\_TMPDIR=/usr/share/elasticsearch/tmp to the services file, but still getting the same error. --- ## [Forward Archived .evtx files](https://discuss.elastic.co/t/forward-archived-evtx-files/368650)
**Author:** [@turboz](https://discuss.elastic.co/u/turboz)\ **Replies:** 6\ **Last updated:** [October 24, 2024, 6:31pm UTC](https://discuss.elastic.co/t/forward-archived-evtx-files/368650 "2024-10-24T18:31:12Z")
I'm trying to use this winlogbeat config suggested by elastic to forward archived events, however I'm having issues. It paritially works I do receive events into Elastic however, randomly it will stop sending events and… --- ## [Elasticsearch service won't start on Ubuntu 22.04 after a reboot](https://discuss.elastic.co/t/elasticsearch-service-wont-start-on-ubuntu-22-04-after-a-reboot/369342)
**Author:** [@morgandally](https://discuss.elastic.co/u/morgandally)\ **Replies:** 1\ **Last updated:** [October 24, 2024, 6:11pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start-on-ubuntu-22-04-after-a-reboot/369342 "2024-10-24T18:11:54Z")
I installed Elasticsearch and Kibana yesterday and it worked fine, i rebooted the VM overnight and this morning it will not start the Elasticsearch service. When I go to the IP address I get the message that the Kibana S… --- ## [Logstash config reload not working](https://discuss.elastic.co/t/logstash-config-reload-not-working/369362)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 5\ **Last updated:** [October 24, 2024, 6:09pm UTC](https://discuss.elastic.co/t/logstash-config-reload-not-working/369362 "2024-10-24T18:09:52Z")
Hi All, We are having issues in our logstash were the config changes are not getting picked up untill the service is restarted. Tried the solutins given in:Reloading the Config File | Logstash Reference \[8.15\] | Elasti… --- ## [Kibana read-only role (8.15)](https://discuss.elastic.co/t/kibana-read-only-role-8-15/369377)
**Author:** [@jleroux1](https://discuss.elastic.co/u/jleroux1)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 5:53pm UTC](https://discuss.elastic.co/t/kibana-read-only-role-8-15/369377 "2024-10-24T17:53:35Z")
I'm trying to to create a read-only role in kibana (8.15), and since the kibana\_user role is deprecated, and not really replaced with a new one. At the end In the documentation ' Required roles and privileges | Fleet an… --- ## [Agent log level sending info & debug, how to change level](https://discuss.elastic.co/t/agent-log-level-sending-info-debug-how-to-change-level/369370)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 8\ **Last updated:** [October 24, 2024, 5:48pm UTC](https://discuss.elastic.co/t/agent-log-level-sending-info-debug-how-to-change-level/369370 "2024-10-24T17:48:22Z")
I found that my busiest index was a logs-elastic\_agent.filebeat-default index, so I looked into what was being sent. I found a simple custom logs (filebeat) agent that was sending at debug level. Over 8 million events … --- ## [How to resume Elasticsearch log retrieval after partial write in .NET](https://discuss.elastic.co/t/how-to-resume-elasticsearch-log-retrieval-after-partial-write-in-net/369368)
**Author:** [@Mahesh\_Kumar\_S](https://discuss.elastic.co/u/Mahesh_Kumar_S)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 1:56pm UTC](https://discuss.elastic.co/t/how-to-resume-elasticsearch-log-retrieval-after-partial-write-in-net/369368 "2024-10-24T13:56:23Z")
Hello Elastic Community, I’m working on an application that fetches logs from Elasticsearch and writes them to an XML file. However, I’m running into an issue when managing large volumes of data, and I’m seeking advice … --- ## [XML some similare tags generate row for each](https://discuss.elastic.co/t/xml-some-similare-tags-generate-row-for-each/369339)
**Author:** [@Spiralium](https://discuss.elastic.co/u/Spiralium)\ **Replies:** 4\ **Last updated:** [October 24, 2024, 3:19pm UTC](https://discuss.elastic.co/t/xml-some-similare-tags-generate-row-for-each/369339 "2024-10-24T15:19:04Z")
Hello, I try to extract datas from a XML like : \ \ \ABC\ \FR\ \prevision\ \ \fiel… --- ## [MS Exchange integration field mapped incorrectly](https://discuss.elastic.co/t/ms-exchange-integration-field-mapped-incorrectly/368271)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 4\ **Last updated:** [October 24, 2024, 3:23pm UTC](https://discuss.elastic.co/t/ms-exchange-integration-field-mapped-incorrectly/368271 "2024-10-24T15:23:19Z")
I just started using the MS Exchange integration and found the message tracking field microsoft \> exchange \> relatedrecipientaddress is mapped as an IP, but contains email addresses like bugs@cartoons.fun. I think it's … --- ## [Plan Failed during restart of deployment](https://discuss.elastic.co/t/plan-failed-during-restart-of-deployment/368805)
**Author:** [@Marcelo\_Mendes](https://discuss.elastic.co/u/Marcelo_Mendes)\ **Replies:** 1\ **Last updated:** [October 15, 2024, 1:09am UTC](https://discuss.elastic.co/t/plan-failed-during-restart-of-deployment/368805 "2024-10-15T01:09:41Z")
I'm trying to restart Elasticsearch located on Azure deployment, but its showing an error "Plan Failed", any one can help my with any suggestion of troubleshooting? --- ## [Adding Secure Remote Clusters (OpenSearch Security and X-Pack Enabled Elasticsearch) in Kibana](https://discuss.elastic.co/t/adding-secure-remote-clusters-opensearch-security-and-x-pack-enabled-elasticsearch-in-kibana/369319)
**Author:** [@ejox](https://discuss.elastic.co/u/ejox)\ **Replies:** 4\ **Last updated:** [October 24, 2024, 1:39pm UTC](https://discuss.elastic.co/t/adding-secure-remote-clusters-opensearch-security-and-x-pack-enabled-elasticsearch-in-kibana/369319 "2024-10-24T13:39:31Z")
Hey, We are reaching out to seek guidance and support for integrating secure remote clusters (e.g., OpenSearch Security and X-Pack enabled Elasticsearch) within Kibana Our goal is to seamlessly connect and visualize dat… --- ## [Trying to connect Kibana to Elasticsearch](https://discuss.elastic.co/t/trying-to-connect-kibana-to-elasticsearch/369273)
**Author:** [@summoner](https://discuss.elastic.co/u/summoner)\ **Replies:** 5\ **Last updated:** [October 24, 2024, 1:15pm UTC](https://discuss.elastic.co/t/trying-to-connect-kibana-to-elasticsearch/369273 "2024-10-24T13:15:27Z")
Hello again, I'm trying to connect my locally installed Kibana to a port-forwarded elastic instance (K8s pod), both are versions 7.7.0. I've already port forwarded the pod to port 9200, am met with this error: FATAL … --- ## [Parse date field](https://discuss.elastic.co/t/parse-date-field/369294)
**Author:** [@lemospt](https://discuss.elastic.co/u/lemospt)\ **Replies:** 3\ **Last updated:** [October 24, 2024, 1:04pm UTC](https://discuss.elastic.co/t/parse-date-field/369294 "2024-10-24T13:04:43Z")
Hi guys, i'm injecting data from an oracle database with jdbc plugin. But i'm having trouble parsing date from a field. Below is a data example, { "data" =\> 2024-10-22T16:07:54Z, "transaction… --- ## [Performance search ES 7.17 vs 8.14](https://discuss.elastic.co/t/performance-search-es-7-17-vs-8-14/369358)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 12:21pm UTC](https://discuss.elastic.co/t/performance-search-es-7-17-vs-8-14/369358 "2024-10-24T12:21:18Z")
Hi Can You describe in details {summary} what is the sensitive diff between ES 7.17 vs 8.14 in search engine perspective. Anyone from You have any experience? --- ## [Define different ILM policyes for each elasticAgent integration](https://discuss.elastic.co/t/define-different-ilm-policyes-for-each-elasticagent-integration/369327)
**Author:** [@fabry\_00](https://discuss.elastic.co/u/fabry_00)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 7:06am UTC](https://discuss.elastic.co/t/define-different-ilm-policyes-for-each-elasticagent-integration/369327 "2024-10-24T07:06:32Z")
I have an ELK cluster with a fleetServer and some elasticAgents. As for now, I've added 2 prometheus integration to scrape the metrics from 2 different applications: The namespace of both prometheus package\_polices is:… --- ## [Is semantic search on multiple fields possible with text\_similarity\_reranker retriever?](https://discuss.elastic.co/t/is-semantic-search-on-multiple-fields-possible-with-text-similarity-reranker-retriever/369352)
**Author:** [@JdKock](https://discuss.elastic.co/u/JdKock)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 11:20am UTC](https://discuss.elastic.co/t/is-semantic-search-on-multiple-fields-possible-with-text-similarity-reranker-retriever/369352 "2024-10-24T11:20:52Z")
I have an index with document with the fields "title", "description" and "Content". With this index I did a pilot with semantic search on all 3 fields with the rff retriever. This works fine. Now I saw the new "text\_si… --- ## [Apm logs (transactions) not showing in kibana](https://discuss.elastic.co/t/apm-logs-transactions-not-showing-in-kibana/369336)
**Author:** [@Karan-J\_g](https://discuss.elastic.co/u/Karan-J_g)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 8:48am UTC](https://discuss.elastic.co/t/apm-logs-transactions-not-showing-in-kibana/369336 "2024-10-24T08:48:04Z")
Hi everyone, I'm encountering an issue with APM logs (transactions) not showing up in Kibana after upgrading from elastic-apm==6.10.1. My current setup includes: FastAPI Using \[elasticapm.capture\_span(...)\] to capture… --- ## [How to add textbox in data table for user comments](https://discuss.elastic.co/t/how-to-add-textbox-in-data-table-for-user-comments/369334)
**Author:** [@Sudheer\_Kumar](https://discuss.elastic.co/u/Sudheer_Kumar)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 8:41am UTC](https://discuss.elastic.co/t/how-to-add-textbox-in-data-table-for-user-comments/369334 "2024-10-24T08:41:10Z")
Hi, I’m currently integrating ELK with our tools. For any reported issues, I need to add a textbox in each row of the data table in the Kibana dashboard for users to comment, acknowledge, or share the status. Could you … --- ## [Sync between multiple indices](https://discuss.elastic.co/t/sync-between-multiple-indices/369331)
**Author:** [@prempatell](https://discuss.elastic.co/u/prempatell)\ **Replies:** 1\ **Last updated:** [October 24, 2024, 8:36am UTC](https://discuss.elastic.co/t/sync-between-multiple-indices/369331 "2024-10-24T08:36:55Z")
Hi, I got a requirement of indexing a document in multiple indices each having their own ingestion pipeline. Constraint: the API call to add a document will only be done to primary index. Need to build a sync such tha… --- ## [Trouble using new .order() on datehistogram after upgrading](https://discuss.elastic.co/t/trouble-using-new-order-on-datehistogram-after-upgrading/369224)
**Author:** [@Krikkits](https://discuss.elastic.co/u/Krikkits)\ **Replies:** 1\ **Last updated:** [October 24, 2024, 8:26am UTC](https://discuss.elastic.co/t/trouble-using-new-order-on-datehistogram-after-upgrading/369224 "2024-10-24T08:26:04Z")
I recently upgraded to Spring 3 which means there were small adjustments needed for some of my queries/aggregations written in elasticsearch java. I cannot figure out how to get the .order(SortOrder.Asc) to work again in… --- ## [Unable to add two or more Elasticsearch index for each layer in Kibana Vega-lite visualization](https://discuss.elastic.co/t/unable-to-add-two-or-more-elasticsearch-index-for-each-layer-in-kibana-vega-lite-visualization/369322)
**Author:** [@Anandhu\_R\_K](https://discuss.elastic.co/u/Anandhu_R_K)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 6:20am UTC](https://discuss.elastic.co/t/unable-to-add-two-or-more-elasticsearch-index-for-each-layer-in-kibana-vega-lite-visualization/369322 "2024-10-24T06:20:50Z")
Hi, I am trying to create a custom ,multi-layered visualization in Kibana using Vega-lite. I was able to create the spec for my first two layers sharing the same data source( My 1st Elasticsearch Index). While I was t… --- ## [One INPUT and simultaneously stream logs to 2 OUTPUTS](https://discuss.elastic.co/t/one-input-and-simultaneously-stream-logs-to-2-outputs/369304)
**Author:** [@Richard\_LaRoche](https://discuss.elastic.co/u/Richard_LaRoche)\ **Replies:** 1\ **Last updated:** [October 23, 2024, 10:56pm UTC](https://discuss.elastic.co/t/one-input-and-simultaneously-stream-logs-to-2-outputs/369304 "2024-10-23T22:56:01Z")
Collecting meraki netflow logs on my logstash collectors but would like in the same pipleline to send the logs to 2 different (OUTPUT) destinations. Does logstash OUTPUT support this ? New to the logstash product. --- ## [Yarn kbn bootstrap fails， A few "Permission denied" errors occurred！](https://discuss.elastic.co/t/yarn-kbn-bootstrap-fails-a-few-permission-denied-errors-occurred/366866)
**Author:** [@hash-yang](https://discuss.elastic.co/u/hash-yang)\ **Replies:** 2\ **Last updated:** [October 23, 2024, 9:53pm UTC](https://discuss.elastic.co/t/yarn-kbn-bootstrap-fails-a-few-permission-denied-errors-occurred/366866 "2024-10-23T21:53:15Z")
hi, i fork the kibana respository and pull it from GitHub,and then try to build kibana on windows10 with WSL2. I referred to the document : Kibana Guide.(8.15). My environment： Linux WIN-20230627BHI 5.15.153.1-microso… --- ## [Export Logs](https://discuss.elastic.co/t/export-logs/369306)
**Author:** [@Marwan1](https://discuss.elastic.co/u/Marwan1)\ **Replies:** 1\ **Last updated:** [October 23, 2024, 9:52pm UTC](https://discuss.elastic.co/t/export-logs/369306 "2024-10-23T21:52:28Z")
hello everyone, i want ask about how to Export logs from elastics , I have labs of internet sending logs on ip address like 192.168.1.1 and me want Export this logs how to? --- ## ['no\_http\_response\_exception' Issue With Watcher](https://discuss.elastic.co/t/no-http-response-exception-issue-with-watcher/369289)
**Author:** [@ameindel](https://discuss.elastic.co/u/ameindel)\ **Replies:** 1\ **Last updated:** [October 23, 2024, 6:50pm UTC](https://discuss.elastic.co/t/no-http-response-exception-issue-with-watcher/369289 "2024-10-23T18:50:53Z")
Hello! I'm having an issue with a Watcher that I'm try to create that will call the ES /\_cluster/health API endpoint. I'm using the Watcher example from the documentation here pretty much verbatim and am getting a 'no\_… --- ## [Fleet server y elasticsearch cluster](https://discuss.elastic.co/t/fleet-server-y-elasticsearch-cluster/368150)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 0\ **Last updated:** [October 2, 2024, 8:47pm UTC](https://discuss.elastic.co/t/fleet-server-y-elasticsearch-cluster/368150 "2024-10-02T20:47:01Z")
I have this configuration for fleet server where the servers 172.26.6.36, 172.26.6.37 and 172.26.6.38 are the Elasticsearch cluster. 172.26.6.41 is the fleet server. Everything has been working correctly until I identi… --- ## [Kibana getting hanged, and getting Wait response or Kill page](https://discuss.elastic.co/t/kibana-getting-hanged-and-getting-wait-response-or-kill-page/369194)
**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\ **Replies:** 4\ **Last updated:** [October 23, 2024, 6:27pm UTC](https://discuss.elastic.co/t/kibana-getting-hanged-and-getting-wait-response-or-kill-page/369194 "2024-10-23T18:27:25Z")
Hi Team, I am using 8.14 version of Kibana, and when I am trying to do changes in a LENS tabular dashboard, my dashboard is becoming too slow. Sometimes it even take 2-3 mins to load even loading data for last 4 hours … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=146) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=148)