# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=151

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 152

---

## [Inquiry on Subscription and Separation Options for Cloned Engine](https://discuss.elastic.co/t/inquiry-on-subscription-and-separation-options-for-cloned-engine/369004)

<div class="topic-metadata">

**Author:** [@ritika.marwaha](https://discuss.elastic.co/u/ritika.marwaha)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 1:54pm UTC](https://discuss.elastic.co/t/inquiry-on-subscription-and-separation-options-for-cloned-engine/369004 "2024-10-17T13:54:12Z")

</div>

|a)|Is it possible to set up a separate subscription for a cloned engine? If so, how much does it cost?| |b)|If not possible to separate the subscriptions, is it possible to actually separate the engines entirely, and w…

---

## [Query to get all the children](https://discuss.elastic.co/t/query-to-get-all-the-children/368932)

<div class="topic-metadata">

**Author:** [@yulinxp](https://discuss.elastic.co/u/yulinxp)\
**Replies:** 2\
**Last updated:** [October 17, 2024, 1:38pm UTC](https://discuss.elastic.co/t/query-to-get-all-the-children/368932 "2024-10-17T13:38:43Z")

</div>

Here is mapping PUT my\_index { "mappings": { "properties": { "my\_join\_field": { "type": "join", "relations": { "parent": "child" } }, "name": { "type": "keyword"…

---

## [Problem with map visual](https://discuss.elastic.co/t/problem-with-map-visual/368849)

<div class="topic-metadata">

**Author:** [@HermannSamimi](https://discuss.elastic.co/u/HermannSamimi)\
**Replies:** 5\
**Last updated:** [October 17, 2024, 1:23pm UTC](https://discuss.elastic.co/t/problem-with-map-visual/368849 "2024-10-17T13:23:32Z")

</div>

Hello, I have a problem with map visual while i create some points in the map in Kibana, After a refreshment, The map went failed to show the points.\[Error message: Unable to create layer\]

---

## [How to calculate the standard deviation in a transform?](https://discuss.elastic.co/t/how-to-calculate-the-standard-deviation-in-a-transform/368845)

<div class="topic-metadata">

**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\
**Replies:** 4\
**Last updated:** [October 17, 2024, 1:05pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-standard-deviation-in-a-transform/368845 "2024-10-17T13:05:59Z")

</div>

I am trying to create a transform report, but I'm unable to create a range based on the avg(total). For example, I want to assign customers into a bucket based on their average total spend, like the range $0-$100. Can …

---

## [Calculate the similarity between two fields same doc](https://discuss.elastic.co/t/calculate-the-similarity-between-two-fields-same-doc/369000)

<div class="topic-metadata">

**Author:** [@pereyrdi](https://discuss.elastic.co/u/pereyrdi)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 12:56pm UTC](https://discuss.elastic.co/t/calculate-the-similarity-between-two-fields-same-doc/369000 "2024-10-17T12:56:01Z")

</div>

Hello, I trying during log ingestion calculate the percentage of similarity between two fields. For example, A=foobar B=barfoor I have read about this here: similarity | Elasticsearch Guide \[8.15\] | Elastic But I dont …

---

## [(Video)-Tutorials of old Kibana-Versions](https://discuss.elastic.co/t/video-tutorials-of-old-kibana-versions/368993)

<div class="topic-metadata">

**Author:** [@firen](https://discuss.elastic.co/u/firen)\
**Replies:** 1\
**Last updated:** [October 17, 2024, 12:48pm UTC](https://discuss.elastic.co/t/video-tutorials-of-old-kibana-versions/368993 "2024-10-17T12:48:07Z")

</div>

Hello, are there any (video-)tutorials for very old Kibana versions? We have 6.8. Regards

---

## [Is it possible to hide “Open in Discover” for a saved search in the embedded view of a Kibana dashboard?](https://discuss.elastic.co/t/is-it-possible-to-hide-open-in-discover-for-a-saved-search-in-the-embedded-view-of-a-kibana-dashboard/368925)

<div class="topic-metadata">

**Author:** [@Serhii\_samoilenko](https://discuss.elastic.co/u/Serhii_samoilenko)\
**Replies:** 2\
**Last updated:** [October 17, 2024, 10:40am UTC](https://discuss.elastic.co/t/is-it-possible-to-hide-open-in-discover-for-a-saved-search-in-the-embedded-view-of-a-kibana-dashboard/368925 "2024-10-17T10:40:18Z")

</div>

Hi, I’m embedding a Kibana dashboard that contains a saved search, but I’d like to hide or remove the “Open in Discover” link when the dashboard is viewed in embedded mode. Is there a way to achieve this through Kib…

---

## [Recieving exception on my worker nodes](https://discuss.elastic.co/t/recieving-exception-on-my-worker-nodes/368988)

<div class="topic-metadata">

**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 9:33am UTC](https://discuss.elastic.co/t/recieving-exception-on-my-worker-nodes/368988 "2024-10-17T09:33:37Z")

</div>

i am getting these kind of exception on my worker nodes \*\*\[node.id\](http://node.id/)\*\* \*\*":"eqCCF2S4TPG1jExPCtnbng","\*\* \*\*\[elasticsearch.node.name\](http://elasticsearch.node.name/)\*\* \*\*":"eck-master-and-worker-nodes-es-…

---

## [How to apply range using calculated metric field](https://discuss.elastic.co/t/how-to-apply-range-using-calculated-metric-field/368846)

<div class="topic-metadata">

**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\
**Replies:** 6\
**Last updated:** [October 17, 2024, 9:27am UTC](https://discuss.elastic.co/t/how-to-apply-range-using-calculated-metric-field/368846 "2024-10-17T09:27:09Z")

</div>

I wanted to create the buckets for the total sales on the basis of the calculated value form metric aggs in lens i have total field in doc so if use agg of avg in lens then i want to create the range built on top of th…

---

## [Elastic search behind nginx proxy - Node updates](https://discuss.elastic.co/t/elastic-search-behind-nginx-proxy-node-updates/368968)

<div class="topic-metadata">

**Author:** [@Deeraj\_Theepshi](https://discuss.elastic.co/u/Deeraj_Theepshi)\
**Replies:** 1\
**Last updated:** [October 17, 2024, 8:46am UTC](https://discuss.elastic.co/t/elastic-search-behind-nginx-proxy-node-updates/368968 "2024-10-17T08:46:17Z")

</div>

I have a setup such that I'm proxying requests over a custom domain that points to an nginx server to Elasticsearch cluster. I have noticed that nginx is caching the data node ips as per the ttl. Now, when a node goes d…

---

## [Problem in the operation of the snmp module in logstash](https://discuss.elastic.co/t/problem-in-the-operation-of-the-snmp-module-in-logstash/367222)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 2\
**Last updated:** [October 17, 2024, 8:27am UTC](https://discuss.elastic.co/t/problem-in-the-operation-of-the-snmp-module-in-logstash/367222 "2024-10-17T08:27:37Z")

</div>

After updating logstash to the latest version 8.15.1. the problems with the snmp module have been fixed. logs: Sep 27 08:39:17 lst01 logstash\[898\]: Error: Task java.util.concurrent.CompletableFuture$AsyncSupply@615d2…

---

## [Cant see option Grant read privileges to specific documents in kibana v 7.17.1](https://discuss.elastic.co/t/cant-see-option-grant-read-privileges-to-specific-documents-in-kibana-v-7-17-1/368982)

<div class="topic-metadata">

**Author:** [@Amol\_Nagotkar](https://discuss.elastic.co/u/Amol_Nagotkar)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 8:25am UTC](https://discuss.elastic.co/t/cant-see-option-grant-read-privileges-to-specific-documents-in-kibana-v-7-17-1/368982 "2024-10-17T08:25:07Z")

</div>

hi all, i cant see option Grant read privileges to specific documents in kibana v 7.17.1. inside apm services.. i want a specific user to see specific service, not all. And if this not then any other solution? i am us…

---

## [Nested object logstash not parsing correctlly](https://discuss.elastic.co/t/nested-object-logstash-not-parsing-correctlly/366762)

<div class="topic-metadata">

**Author:** [@miiroslavkardos](https://discuss.elastic.co/u/miiroslavkardos)\
**Replies:** 6\
**Last updated:** [October 17, 2024, 8:11am UTC](https://discuss.elastic.co/t/nested-object-logstash-not-parsing-correctlly/366762 "2024-10-17T08:11:59Z")

</div>

Hello , can u help me solve the issue. I have nested object "host" =\> { "name" =\> "myserver" } like below "cluster" =\> "xxx-logs", "name" =\> "xxx2", "component" =\> "xxx", \*\*"host" =\> {\*\* \*\* "n…

---

## [Any information on creating a logstash plugin offline](https://discuss.elastic.co/t/any-information-on-creating-a-logstash-plugin-offline/368979)

<div class="topic-metadata">

**Author:** [@DOkuwa](https://discuss.elastic.co/u/DOkuwa)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 8:07am UTC](https://discuss.elastic.co/t/any-information-on-creating-a-logstash-plugin-offline/368979 "2024-10-17T08:07:20Z")

</div>

Hello, I want to create a logstash plugin in my lab that has no internet or actually has anyone created an offline logstash plugin (input,filter and output ) for grpc Thanks

---

## [Filebeat - Log Processing Issues/Delay/Data Loss](https://discuss.elastic.co/t/filebeat-log-processing-issues-delay-data-loss/368934)

<div class="topic-metadata">

**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\
**Replies:** 0\
**Last updated:** [October 16, 2024, 4:25pm UTC](https://discuss.elastic.co/t/filebeat-log-processing-issues-delay-data-loss/368934 "2024-10-16T16:25:44Z")

</div>

Hi, We are currently experiencing significant challenges with log processing on three of our hosts. Each of these hosts runs nine services, generating between 30,000 to 72,000 events per minute per log file. The server …

---

## [Elastic prisma cloud integeration](https://discuss.elastic.co/t/elastic-prisma-cloud-integeration/368970)

<div class="topic-metadata">

**Author:** [@Zaryab\_Shaikh](https://discuss.elastic.co/u/Zaryab_Shaikh)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 6:08am UTC](https://discuss.elastic.co/t/elastic-prisma-cloud-integeration/368970 "2024-10-17T06:08:01Z")

</div>

I have single node ELK on prem setup with green health version is 8.15.0. I wanted to add Elastic prisma cloud integeration in it. My fleet is green in health and other integeration run perfectly fine. But i am facing pr…

---

## [ErrImagePull Error with a message authenticationrequired](https://discuss.elastic.co/t/errimagepull-error-with-a-message-authenticationrequired/368964)

<div class="topic-metadata">

**Author:** [@zakhan](https://discuss.elastic.co/u/zakhan)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 4:21am UTC](https://discuss.elastic.co/t/errimagepull-error-with-a-message-authenticationrequired/368964 "2024-10-17T04:21:57Z")

</div>

Elasticsearch operator is installed on Openshift. While creating the elasticsearch cluster, below error is seen: Normal Pulling 5s (x2 over 27s) kubelet Pulling image "docker.elastic…

---

## [Stability Issues at 10k EPS in Elastic-Agent + Logstash – Elasticsearch Bottleneck?](https://discuss.elastic.co/t/stability-issues-at-10k-eps-in-elastic-agent-logstash-elasticsearch-bottleneck/368960)

<div class="topic-metadata">

**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 3:31am UTC](https://discuss.elastic.co/t/stability-issues-at-10k-eps-in-elastic-agent-logstash-elasticsearch-bottleneck/368960 "2024-10-17T03:31:49Z")

</div>

I am currently using Elastic-Agent for log collection and Logstash for log forwarding. I am conducting a stress test to evaluate the hardware requirements and costs of the collector setup (Elastic-Agent + Logstash). I…

---

## [Multiple Aggregations/UI Filters are not applied in ES|QL Visualizations](https://discuss.elastic.co/t/multiple-aggregations-ui-filters-are-not-applied-in-es-ql-visualizations/368952)

<div class="topic-metadata">

**Author:** [@KibanaUser2247](https://discuss.elastic.co/u/KibanaUser2247)\
**Replies:** 0\
**Last updated:** [October 16, 2024, 10:16pm UTC](https://discuss.elastic.co/t/multiple-aggregations-ui-filters-are-not-applied-in-es-ql-visualizations/368952 "2024-10-16T22:16:55Z")

</div>

I have an index that is of the form: | event | hall | date | average\_attendees | |---------|----------|------------|-------------------| | Event A | visitors | 2022-01-01 | 150 | | Event A | ma…

---

## [What happens when synchronization between the primary and replica shards is lost?](https://discuss.elastic.co/t/what-happens-when-synchronization-between-the-primary-and-replica-shards-is-lost/366120)

<div class="topic-metadata">

**Author:** [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\
**Replies:** 5\
**Last updated:** [October 16, 2024, 9:31pm UTC](https://discuss.elastic.co/t/what-happens-when-synchronization-between-the-primary-and-replica-shards-is-lost/366120 "2024-10-16T21:31:00Z")

</div>

What happens when synchronization between the primary and replica shards is lost in Elasticsearch? :thinking: For example, a node is disconnected and a replica is unassigned. The indexing is persist to the primary shard…

---

## [Transform with two input indices with different unique ids](https://discuss.elastic.co/t/transform-with-two-input-indices-with-different-unique-ids/368475)

<div class="topic-metadata">

**Author:** [@Phil\_McLachlan](https://discuss.elastic.co/u/Phil_McLachlan)\
**Replies:** 3\
**Last updated:** [October 16, 2024, 9:11pm UTC](https://discuss.elastic.co/t/transform-with-two-input-indices-with-different-unique-ids/368475 "2024-10-16T21:11:18Z")

</div>

Hi, we have a transform with two input indices with different unique ids. One input index has a unique id of product\_pk, and another has product\_pk combined with catalog\_type. There are two possible catalog\_types: cata…

---

## [Fleet Nginx integration for customized log format](https://discuss.elastic.co/t/fleet-nginx-integration-for-customized-log-format/368358)

<div class="topic-metadata">

**Author:** [@dominique.bejean](https://discuss.elastic.co/u/dominique.bejean)\
**Replies:** 4\
**Last updated:** [October 16, 2024, 9:00pm UTC](https://discuss.elastic.co/t/fleet-nginx-integration-for-customized-log-format/368358 "2024-10-16T21:00:42Z")

</div>

Hi, With Nginx integration, I need to ingest customized logs (log\_format). I need to define a custom Grok processor rule. It is not possible to modify the " logs-nginx.access-1.23.0" pipeline so I want to define a new…

---

## [Bootstrap check failure in 8.15.2](https://discuss.elastic.co/t/bootstrap-check-failure-in-8-15-2/368660)

<div class="topic-metadata">

**Author:** [@mousumis](https://discuss.elastic.co/u/mousumis)\
**Replies:** 2\
**Last updated:** [October 16, 2024, 8:07pm UTC](https://discuss.elastic.co/t/bootstrap-check-failure-in-8-15-2/368660 "2024-10-16T20:07:20Z")

</div>

I am trying to upgrade an elasticsearch deployment from 8.14.1 to 8.15.2. It is not able to start up due to the following bootstrap check failure. \[ERROR\]\[org.elasticsearch.bootstrap.Elasticsearch\] \[server-deployment\] n…

---

## [Elastic Nest 7 , unknown from: POST /\_reindex?wait\_for\_completion=true](https://discuss.elastic.co/t/elastic-nest-7-unknown-from-post-reindex-wait-for-completion-true/368903)

<div class="topic-metadata">

**Author:** [@blqck](https://discuss.elastic.co/u/blqck)\
**Replies:** 3\
**Last updated:** [October 16, 2024, 7:36pm UTC](https://discuss.elastic.co/t/elastic-nest-7-unknown-from-post-reindex-wait-for-completion-true/368903 "2024-10-16T19:36:49Z")

</div>

i'm reindexing docs from one index to another and usually i got this exception which i dont know what cause it, in my local pc i didnt have it but in az pipeline it happens frequently . this is the code i'm using to do t…

---

## [ILM rollover problem](https://discuss.elastic.co/t/ilm-rollover-problem/368940)

<div class="topic-metadata">

**Author:** [@idadash](https://discuss.elastic.co/u/idadash)\
**Replies:** 0\
**Last updated:** [October 16, 2024, 7:21pm UTC](https://discuss.elastic.co/t/ilm-rollover-problem/368940 "2024-10-16T19:21:58Z")

</div>

Hi. I have a problem with index lifecycle management - rollout that is my ILM policy { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": {} }, "delete": { "mi…

---

## [It shows sucessfully run but unable to access it](https://discuss.elastic.co/t/it-shows-sucessfully-run-but-unable-to-access-it/368937)

<div class="topic-metadata">

**Author:** [@shamir](https://discuss.elastic.co/u/shamir)\
**Replies:** 1\
**Last updated:** [October 16, 2024, 6:59pm UTC](https://discuss.elastic.co/t/it-shows-sucessfully-run-but-unable-to-access-it/368937 "2024-10-16T18:59:54Z")

</div>

This category relates to the Enterprise Search set of products - App Search, Site Search and Workplace Search. If your question relates to core Elasticsearch functionality, please head over to the Elasticsearch category…

---

## [Using Logstash aggregate filter with only start and continuation events](https://discuss.elastic.co/t/using-logstash-aggregate-filter-with-only-start-and-continuation-events/368933)

<div class="topic-metadata">

**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\
**Replies:** 1\
**Last updated:** [October 16, 2024, 6:48pm UTC](https://discuss.elastic.co/t/using-logstash-aggregate-filter-with-only-start-and-continuation-events/368933 "2024-10-16T18:48:00Z")

</div>

Hey there, I am attempting to merge the "message" field for syslog logs using the aggregate pipeline, and have been beating my head against a wall trying to get this scenario to work. I'm on the verge of giving up and i…

---

## [RequestCancelledException](https://discuss.elastic.co/t/requestcancelledexception/368936)

<div class="topic-metadata">

**Author:** [@kaly](https://discuss.elastic.co/u/kaly)\
**Replies:** 0\
**Last updated:** [October 16, 2024, 5:32pm UTC](https://discuss.elastic.co/t/requestcancelledexception/368936 "2024-10-16T17:32:22Z")

</div>

Elasticsearch 8.12 java client api with GetRequest and IndexRequest gives RequestCancelledException.

---

## [Read timeout errors](https://discuss.elastic.co/t/read-timeout-errors/366820)

<div class="topic-metadata">

**Author:** [@dpitchford](https://discuss.elastic.co/u/dpitchford)\
**Replies:** 9\
**Last updated:** [October 16, 2024, 4:43pm UTC](https://discuss.elastic.co/t/read-timeout-errors/366820 "2024-10-16T16:43:55Z")

</div>

A single-threaded script I'm working on is experiencing repeated read timeout errors from Elasticsearch. This is happening when trying to bulk-index data to an index with 12 primary and 0 replicas shards across 4 nodes. …

---

## [how is Answer document related to tags in the Question document in Elasticsearch documentation example](https://discuss.elastic.co/t/how-is-answer-document-related-to-tags-in-the-question-document-in-elasticsearch-documentation-example/368930)

<div class="topic-metadata">

**Author:** [@yulinxp](https://discuss.elastic.co/u/yulinxp)\
**Replies:** 0\
**Last updated:** [October 16, 2024, 4:05pm UTC](https://discuss.elastic.co/t/how-is-answer-document-related-to-tags-in-the-question-document-in-elasticsearch-documentation-example/368930 "2024-10-16T16:05:19Z")

</div>

I am reading Elasticsearch documentation 8.15. Parent 1 has tags array. PUT child\_example/\_doc/1 { "join": { "name": "question" }, "body": "\<p\>I have Windows 2003 server and i bought a ne…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=150)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=152)
