# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=148 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 149 --- ## [Elasticsearch / Kibana tar.gz not available to download](https://discuss.elastic.co/t/elasticsearch-kibana-tar-gz-not-available-to-download/369268)
**Author:** [@ax-va](https://discuss.elastic.co/u/ax-va)\ **Replies:** 2\ **Last updated:** [October 23, 2024, 6:20pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-tar-gz-not-available-to-download/369268 "2024-10-23T18:20:25Z")
See pictures I come to these links from the pages Install Elasticsearch from archive on Linux or MacOS | Elasticsearch Guide \[8.15\] | Elastic -\> Download Elasticsearch Install Kibana from archive on Linux or mac… --- ## [What is the reason for not reading from the HDD storage disk?](https://discuss.elastic.co/t/what-is-the-reason-for-not-reading-from-the-hdd-storage-disk/369298)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 0\ **Last updated:** [October 23, 2024, 5:32pm UTC](https://discuss.elastic.co/t/what-is-the-reason-for-not-reading-from-the-hdd-storage-disk/369298 "2024-10-23T17:32:17Z")
hi I have a Linux environment in which there are two disks to store data, one SSD and the other HDD, and I installed elasticsearch on the SSD disk and made a data storage path to the HDD disk, and it was normal and serv… --- ## [Alert Rule with DSL finding if most recent value has a true property](https://discuss.elastic.co/t/alert-rule-with-dsl-finding-if-most-recent-value-has-a-true-property/369168)
**Author:** [@jeffabar](https://discuss.elastic.co/u/jeffabar)\ **Replies:** 1\ **Last updated:** [October 23, 2024, 4:24pm UTC](https://discuss.elastic.co/t/alert-rule-with-dsl-finding-if-most-recent-value-has-a-true-property/369168 "2024-10-23T16:24:59Z")
I am looking to build an alert rule where if the latest record for a module has an unexpected\_state == true trigger the rule and if the most recent state is not unexpected\_state == true generate no record which will allo… --- ## [Logstash: XML recursive split](https://discuss.elastic.co/t/logstash-xml-recursive-split/368554)
**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\ **Replies:** 2\ **Last updated:** [October 23, 2024, 3:41pm UTC](https://discuss.elastic.co/t/logstash-xml-recursive-split/368554 "2024-10-23T15:41:00Z")
Hello, everyone! I am attempting to parse a large XML file that looks like this: \ \ \ \ORG\_01\ \ \ **Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 3\ **Last updated:** [October 23, 2024, 2:39pm UTC](https://discuss.elastic.co/t/url-visualizations/369186 "2024-10-23T14:39:33Z") Hello, I have created HTTP monitors in Synthetics. I want to add a way to monitor and visualize this on a custom dashboard. How would I go about it? I have several URLs and I don't want to drilldown based on url, I jus… --- ## [Too many smaller indices. shards is creating issue](https://discuss.elastic.co/t/too-many-smaller-indices-shards-is-creating-issue/369271)
**Author:** [@Jay\_Timbadia](https://discuss.elastic.co/u/Jay_Timbadia)\ **Replies:** 20\ **Last updated:** [October 23, 2024, 12:35pm UTC](https://discuss.elastic.co/t/too-many-smaller-indices-shards-is-creating-issue/369271 "2024-10-23T12:35:17Z")
Hello all, I have a requirement where we have 10s of thousands of smaller indices (~10-20mb). Now the issue is each index is creating a 2 shard(1 primary & 1 replica). So for 10s of thousands of indexes, it will be a … --- ## [Using Function Score query with field weighting without Nest](https://discuss.elastic.co/t/using-function-score-query-with-field-weighting-without-nest/369244)
**Author:** [@Matt\_Shallow](https://discuss.elastic.co/u/Matt_Shallow)\ **Replies:** 3\ **Last updated:** [October 23, 2024, 10:48am UTC](https://discuss.elastic.co/t/using-function-score-query-with-field-weighting-without-nest/369244 "2024-10-23T10:48:49Z")
Hi There, I am trying to find an alternative to the 'WeightFunction' that Nest offers as I would rather stick with QueryDSL library for now. What is the best way to construct the following WeightFunction list using Que… --- ## [Fleet - Managing Elastic Agent Policies](https://discuss.elastic.co/t/fleet-managing-elastic-agent-policies/369267)
**Author:** [@marcussjogren](https://discuss.elastic.co/u/marcussjogren)\ **Replies:** 0\ **Last updated:** [October 23, 2024, 8:06am UTC](https://discuss.elastic.co/t/fleet-managing-elastic-agent-policies/369267 "2024-10-23T08:06:55Z")
Hi! I am currently running a fleet of 5-6 agents, but my environment is not that huge, hence I need to apply various integrations to the agents. The issue that I am having, is that I must use one Agent Policy per serve… --- ## [Trial Extension and Sales Contact](https://discuss.elastic.co/t/trial-extension-and-sales-contact/368431)
**Author:** [@Noam\_Huri](https://discuss.elastic.co/u/Noam_Huri)\ **Replies:** 3\ **Last updated:** [October 23, 2024, 7:46am UTC](https://discuss.elastic.co/t/trial-extension-and-sales-contact/368431 "2024-10-23T07:46:20Z")
Hi Team, We recently started using the self-managed version of Elasticsearch and submitted the "Extend Your Trial" form. However, we haven't received any email confirmation or follow-up regarding the extension. Additio… --- ## [The target release date for ElasticSearch v8.15.4](https://discuss.elastic.co/t/the-target-release-date-for-elasticsearch-v8-15-4/369252)
**Author:** [@ufkl](https://discuss.elastic.co/u/ufkl)\ **Replies:** 4\ **Last updated:** [October 23, 2024, 6:21am UTC](https://discuss.elastic.co/t/the-target-release-date-for-elasticsearch-v8-15-4/369252 "2024-10-23T06:21:57Z")
Refer to subject above, there are some features/fixes I am looking, may I check when is the target release date for Elasticsearch v8.15.4? --- ## [Aggregation not working for nested objects](https://discuss.elastic.co/t/aggregation-not-working-for-nested-objects/369251)
**Author:** [@krishna\_kishore](https://discuss.elastic.co/u/krishna_kishore)\ **Replies:** 0\ **Last updated:** [October 23, 2024, 1:52am UTC](https://discuss.elastic.co/t/aggregation-not-working-for-nested-objects/369251 "2024-10-23T01:52:36Z")
Below is my request . In was getting aggregation for all except attributes i dont know where it was going wrong. Could you help me? { "min\_score": 0.5, "size": 500, "\_source": true, "query": { … --- ## [Agggreation is not working for nested objects](https://discuss.elastic.co/t/agggreation-is-not-working-for-nested-objects/369253)
**Author:** [@krishna\_kishore](https://discuss.elastic.co/u/krishna_kishore)\ **Replies:** 0\ **Last updated:** [October 23, 2024, 2:18am UTC](https://discuss.elastic.co/t/agggreation-is-not-working-for-nested-objects/369253 "2024-10-23T02:18:43Z")
@discobot could you help me . Getting aggregations for all except attributes. { "min\_score": 0.5, "size": 500, "\_source": true, "query": { "bool": { "must": \[ { … --- ## [Logstash-input-file version 4.4.6 sporadically fails to scan files in read mode](https://discuss.elastic.co/t/logstash-input-file-version-4-4-6-sporadically-fails-to-scan-files-in-read-mode/369248)
**Author:** [@Andreas\_Rulle1](https://discuss.elastic.co/u/Andreas_Rulle1)\ **Replies:** 0\ **Last updated:** [October 22, 2024, 11:22pm UTC](https://discuss.elastic.co/t/logstash-input-file-version-4-4-6-sporadically-fails-to-scan-files-in-read-mode/369248 "2024-10-22T23:22:56Z")
We use the following configuation input { file { sincedb\_path =\> "/usr/share/logstash/sincedb\_details" path =\> "/home/sportal/logstash/details\_3.0/\*.json" start\_po… --- ## [Can't get metrics delivered to elasticsearch](https://discuss.elastic.co/t/cant-get-metrics-delivered-to-elasticsearch/368954)
**Author:** [@gatos](https://discuss.elastic.co/u/gatos)\ **Replies:** 9\ **Last updated:** [October 22, 2024, 10:18pm UTC](https://discuss.elastic.co/t/cant-get-metrics-delivered-to-elasticsearch/368954 "2024-10-22T22:18:43Z")
I've been banging my head against this for a couple days. I have a local test environment set up via docker compose with Cassandra and an ELK stack. I've added a monitoring container that has the Cassandra logs mounted… --- ## [Mapping set to strict, dynamic introduction of \[person\] within \[contacts\] is not allowed](https://discuss.elastic.co/t/mapping-set-to-strict-dynamic-introduction-of-person-within-contacts-is-not-allowed/369172)
**Author:** [@AminulBD](https://discuss.elastic.co/u/AminulBD)\ **Replies:** 2\ **Last updated:** [October 22, 2024, 7:08pm UTC](https://discuss.elastic.co/t/mapping-set-to-strict-dynamic-introduction-of-person-within-contacts-is-not-allowed/369172 "2024-10-22T19:08:21Z")
I'm trying to index data with the following mapping: { "settings": { "analysis": { "normalizer": { "lowercase\_normalizer": { "type": "custom", … --- ## [Search-as-you-type vs matchPhasePrefix](https://discuss.elastic.co/t/search-as-you-type-vs-matchphaseprefix/369221)
**Author:** [@ritvij14](https://discuss.elastic.co/u/ritvij14)\ **Replies:** 1\ **Last updated:** [October 22, 2024, 5:49pm UTC](https://discuss.elastic.co/t/search-as-you-type-vs-matchphaseprefix/369221 "2024-10-22T17:49:56Z")
Hello ES community! I am a complete newbie to ES and learning on the go as I build functionalities for our company. I have synced my DB with Cloud firestore and the indices are all sorted out. i have also built a protot… --- ## [Delete Fleet Agent Policies via Dev Tools?](https://discuss.elastic.co/t/delete-fleet-agent-policies-via-dev-tools/369175)
**Author:** [@RedneckHutch](https://discuss.elastic.co/u/RedneckHutch)\ **Replies:** 2\ **Last updated:** [October 22, 2024, 5:34pm UTC](https://discuss.elastic.co/t/delete-fleet-agent-policies-via-dev-tools/369175 "2024-10-22T17:34:52Z")
Hey everyone! We are in the process of deploying a large number of agent policies, but recently decided to change multiple configurations about them. Since we are early on in our deployment, we would like to out right de… --- ## [Is there a way to create a dashboard and visualization via Kibana REST API in version 8.15.3?](https://discuss.elastic.co/t/is-there-a-way-to-create-a-dashboard-and-visualization-via-kibana-rest-api-in-version-8-15-3/369231)
**Author:** [@\_vk2](https://discuss.elastic.co/u/_vk2)\ **Replies:** 4\ **Last updated:** [October 22, 2024, 5:10pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-create-a-dashboard-and-visualization-via-kibana-rest-api-in-version-8-15-3/369231 "2024-10-22T17:10:23Z")
Is there a direct way to create a dashboard and visualization in Kibana using REST API? If not, why is that? If there is, could you give me an example please? Also, is there a way to fetch dashboard ids from Kibana using… --- ## [Search pattern in DQL](https://discuss.elastic.co/t/search-pattern-in-dql/368771)
**Author:** [@mika1](https://discuss.elastic.co/u/mika1)\ **Replies:** 4\ **Last updated:** [October 22, 2024, 5:02pm UTC](https://discuss.elastic.co/t/search-pattern-in-dql/368771 "2024-10-22T17:02:22Z")
i need to find the below pattern from my application logs, when i put the below string in my DQL as provide below . i'm not getting any results. What should be the correct search query. Sting to be searched : "Error -… --- ## [ElasticAgent enrolled with Fleet server - Connection failure Elastic Defend](https://discuss.elastic.co/t/elasticagent-enrolled-with-fleet-server-connection-failure-elastic-defend/369219)
**Author:** [@Fasertio](https://discuss.elastic.co/u/Fasertio)\ **Replies:** 8\ **Last updated:** [October 22, 2024, 3:05pm UTC](https://discuss.elastic.co/t/elasticagent-enrolled-with-fleet-server-connection-failure-elastic-defend/369219 "2024-10-22T15:05:37Z")
Dear all, I've installed Elasticsearch, kibana and a Fleet server on a Ubuntu machine for Security testing. The main goal is to install the elastic agent with the Defend integration for XDR on a Windows machine. The i… --- ## [Scheduled Email Reports - No Watcher](https://discuss.elastic.co/t/scheduled-email-reports-no-watcher/369234)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [October 22, 2024, 2:32pm UTC](https://discuss.elastic.co/t/scheduled-email-reports-no-watcher/369234 "2024-10-22T14:32:24Z")
Hello, I know you can currently create a scheduled CSV report by using watcher. Is there any kind of update to create a scheduled report outside of watcher? Or perhaps move out of CSV's and have business reports? --- ## [Watcher - Actions](https://discuss.elastic.co/t/watcher-actions/369169)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [October 22, 2024, 1:50pm UTC](https://discuss.elastic.co/t/watcher-actions/369169 "2024-10-22T13:50:35Z")
Hello, If I have an ITSM ServiceNow Connector, can I use it in Watcher? --- ## [Alerting based on different data sources](https://discuss.elastic.co/t/alerting-based-on-different-data-sources/369187)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [October 22, 2024, 1:45pm UTC](https://discuss.elastic.co/t/alerting-based-on-different-data-sources/369187 "2024-10-22T13:45:48Z")
Hello, How can I alert based on conditions across a variety of different data sources. For example, I want to be alert if log.level: error x 3 from logs-\* AND system.filesystem.used.pct \>= 80% from metrics-\* Thanks, --- ## [Scaling ElasticSearch for many indexes](https://discuss.elastic.co/t/scaling-elasticsearch-for-many-indexes/369212)
**Author:** [@JanGoAutonomous](https://discuss.elastic.co/u/JanGoAutonomous)\ **Replies:** 2\ **Last updated:** [October 22, 2024, 1:08pm UTC](https://discuss.elastic.co/t/scaling-elasticsearch-for-many-indexes/369212 "2024-10-22T13:08:41Z")
TL;DR: How can I remediate running out of shards when using many indexes? My application creates separate Elasticsearch indexes for each user of the app. This separation ensures that each mapping can be different, and… --- ## [Open Dashboard by Title](https://discuss.elastic.co/t/open-dashboard-by-title/369223)
**Author:** [@DrMxxxxx](https://discuss.elastic.co/u/DrMxxxxx)\ **Replies:** 0\ **Last updated:** [October 22, 2024, 12:46pm UTC](https://discuss.elastic.co/t/open-dashboard-by-title/369223 "2024-10-22T12:46:08Z")
Hey there, in my Dashboards I use links within Markdown and Runtime fields. These Links are pointing to the Dashboard IDs. However, when I now copy these Dashboards to another space, these IDs change to a new random va… --- ## [Issue while upgrading elasticsearch from 7.17.3 to 8.5.1](https://discuss.elastic.co/t/issue-while-upgrading-elasticsearch-from-7-17-3-to-8-5-1/368214)
**Author:** [@VR29](https://discuss.elastic.co/u/VR29)\ **Replies:** 13\ **Last updated:** [October 22, 2024, 12:54pm UTC](https://discuss.elastic.co/t/issue-while-upgrading-elasticsearch-from-7-17-3-to-8-5-1/368214 "2024-10-22T12:54:32Z")
I'm trying to upgrade elasticsearch from 7.17.3 to 8.5.1, but it is throwing an error: "error.type":"java.lang.IllegalArgumentException". This is my yaml: Full Error: {"@timestamp":"2024-09-27T04:37:48.833Z", "log.… --- ## [Error in text search in ELK](https://discuss.elastic.co/t/error-in-text-search-in-elk/368946)
**Author:** [@Vladimir\_Fomin1](https://discuss.elastic.co/u/Vladimir_Fomin1)\ **Replies:** 6\ **Last updated:** [October 22, 2024, 11:54am UTC](https://discuss.elastic.co/t/error-in-text-search-in-elk/368946 "2024-10-22T11:54:12Z")
I have a problem, I can't do a text search in Elasticsearch. I need to find something like "Text to find". When I try to search, an error occurs. I tried to change the indices.query.bool.max\_clause\_count from 1024 to 40… --- ## [What is the stable version of Elasticsearch?](https://discuss.elastic.co/t/what-is-the-stable-version-of-elasticsearch/369192)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 5\ **Last updated:** [October 22, 2024, 8:30am UTC](https://discuss.elastic.co/t/what-is-the-stable-version-of-elasticsearch/369192 "2024-10-22T08:30:52Z")
What is the stable version of Elasticserg? --- ## [The use of if ... in \[array\]](https://discuss.elastic.co/t/the-use-of-if-in-array/369112)
**Author:** [@NgDinhNamEtiis](https://discuss.elastic.co/u/NgDinhNamEtiis)\ **Replies:** 2\ **Last updated:** [October 22, 2024, 6:13am UTC](https://discuss.elastic.co/t/the-use-of-if-in-array/369112 "2024-10-22T06:13:48Z")
Hi When using if ... in \[array\] for Logstash with version 8.15.0: input { generator { count =\> 1 } } filter { if "a" in \["a","b"\] { mutate { add\_field =\> { "test\_field" =\> "1" } } } } output { st… --- ## [Workaround for Dashboard short Share Link on Kibana v8.15.1](https://discuss.elastic.co/t/workaround-for-dashboard-short-share-link-on-kibana-v8-15-1/368061)
**Author:** [@cisupport-zkb](https://discuss.elastic.co/u/cisupport-zkb)\ **Replies:** 6\ **Last updated:** [October 22, 2024, 5:41am UTC](https://discuss.elastic.co/t/workaround-for-dashboard-short-share-link-on-kibana-v8-15-1/368061 "2024-10-22T05:41:42Z")
Hi everyone, Since Kibana v8.15 and of course in v8.15.1 the Dashboard short Share Link doesn't work as expected, one user opened an issue, although has been improved. Is there a workaround to get in Kibana v8.15.1 Das… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=147) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=149)