# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=157 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 158 --- ## [How to retain the time zone and nanoseconds in timestamp when migrating es through logstash](https://discuss.elastic.co/t/how-to-retain-the-time-zone-and-nanoseconds-in-timestamp-when-migrating-es-through-logstash/368002)
**Author:** [@baobaoda](https://discuss.elastic.co/u/baobaoda)\ **Replies:** 3\ **Last updated:** [October 8, 2024, 9:52am UTC](https://discuss.elastic.co/t/how-to-retain-the-time-zone-and-nanoseconds-in-timestamp-when-migrating-es-through-logstash/368002 "2024-10-08T09:52:32Z")
In the old cluster, the timestamp is "@timestamp": "2024-08-12T17:40:31.098422413+08:00". For stability reasons, I still want to keep it after migrating to the new cluster. I have tried many filters like behind, but none… --- ## [Unable to create ILM policy using version 6.8.8](https://discuss.elastic.co/t/unable-to-create-ilm-policy-using-version-6-8-8/368409)
**Author:** [@Pranathi\_Kodicherla](https://discuss.elastic.co/u/Pranathi_Kodicherla)\ **Replies:** 7\ **Last updated:** [October 8, 2024, 9:39am UTC](https://discuss.elastic.co/t/unable-to-create-ilm-policy-using-version-6-8-8/368409 "2024-10-08T09:39:24Z")
I am trying to hit the POST \_ilm/policy/test-policy API with the corresponding body. The version is 6.8.8 but the on prem elastic does not have the xpack plugin. The API throws the error: Invalid index name exception. I… --- ## [Metricbeat equivalent of prometheus container\_cpu\_cfs\_throttled\_seconds\_total](https://discuss.elastic.co/t/metricbeat-equivalent-of-prometheus-container-cpu-cfs-throttled-seconds-total/368419)
**Author:** [@Steve\_Foster](https://discuss.elastic.co/u/Steve_Foster)\ **Replies:** 1\ **Last updated:** [October 8, 2024, 9:15am UTC](https://discuss.elastic.co/t/metricbeat-equivalent-of-prometheus-container-cpu-cfs-throttled-seconds-total/368419 "2024-10-08T09:15:00Z")
Hi folks, I've been trying to find if there is the equivalent of container\_cpu\_cfs\_throttled\_seconds\_total from prometheus in metricbeat... Is my google foo failing me or is it not exposed/available? Cheerss --- ## [Is it possible to do ecs trace logging with rust?](https://discuss.elastic.co/t/is-it-possible-to-do-ecs-trace-logging-with-rust/368420)
**Author:** [@Mang-Joo](https://discuss.elastic.co/u/Mang-Joo)\ **Replies:** 0\ **Last updated:** [October 8, 2024, 8:28am UTC](https://discuss.elastic.co/t/is-it-possible-to-do-ecs-trace-logging-with-rust/368420 "2024-10-08T08:28:12Z")
Hello I want to create a single trace by integrating a Rust project with a Java Project and API. However, there is no library officially supported by Elasticsearch for Rust. (e.g., for Java: logback-ecs-encoder) Is the… --- ## [Kibana Upgrade Failed](https://discuss.elastic.co/t/kibana-upgrade-failed/368352)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 1\ **Last updated:** [October 8, 2024, 8:27am UTC](https://discuss.elastic.co/t/kibana-upgrade-failed/368352 "2024-10-08T08:27:31Z")
I have a single kibana instance. I just upgraded from 8.12 to 8.15 by stopping kibana with systemctl, dnf installed kibana, and then restarted kibana. Kibana is failing to start and is printing this error message: Task … --- ## [ Problem with fixed\_interval set to 1d for Run downsampling with ILM](https://discuss.elastic.co/t/problem-with-fixed-interval-set-to-1d-for-run-downsampling-with-ilm/368417)
**Author:** [@wanghuasuzhou](https://discuss.elastic.co/u/wanghuasuzhou)\ **Replies:** 0\ **Last updated:** [October 8, 2024, 8:19am UTC](https://discuss.elastic.co/t/problem-with-fixed-interval-set-to-1d-for-run-downsampling-with-ilm/368417 "2024-10-08T08:19:56Z")
My time zone here is GMT+8, and I encountered a problem running downsampling with ILM: the value in the timestamp @ timestamp field after downsampling has been using the index start\_time (with hours, minutes, and seconds… --- ## [Storage issues in es vectorized retrieval](https://discuss.elastic.co/t/storage-issues-in-es-vectorized-retrieval/368343)
**Author:** [@chao\_xi](https://discuss.elastic.co/u/chao_xi)\ **Replies:** 4\ **Last updated:** [October 8, 2024, 8:19am UTC](https://discuss.elastic.co/t/storage-issues-in-es-vectorized-retrieval/368343 "2024-10-08T08:19:47Z")
When I searched for similarity again, I found the following problem. I matched the content with the highest similarity displayed by es's vector cosine similarity. I manually compared the question vector with the vector o… --- ## [I am unable to log in to the Kibana dashboard. After providing the credentials, it keeps redirecting me back to the login page](https://discuss.elastic.co/t/i-am-unable-to-log-in-to-the-kibana-dashboard-after-providing-the-credentials-it-keeps-redirecting-me-back-to-the-login-page/368186)
**Author:** [@Athen](https://discuss.elastic.co/u/Athen)\ **Replies:** 6\ **Last updated:** [October 4, 2024, 12:26pm UTC](https://discuss.elastic.co/t/i-am-unable-to-log-in-to-the-kibana-dashboard-after-providing-the-credentials-it-keeps-redirecting-me-back-to-the-login-page/368186 "2024-10-04T12:26:50Z")
Hello Everyone, I am new to the ELK stack and have successfully deployed it in a Kubernetes environment using MetalLB and NGINX Ingress Controller to access the services. However, I am encountering an issue when trying … --- ## [Unable to Change elastic super user password](https://discuss.elastic.co/t/unable-to-change-elastic-super-user-password/368412)
**Author:** [@Opi](https://discuss.elastic.co/u/Opi)\ **Replies:** 0\ **Last updated:** [October 8, 2024, 7:45am UTC](https://discuss.elastic.co/t/unable-to-change-elastic-super-user-password/368412 "2024-10-08T07:45:33Z")
Hi Team, we have an elastic cluster running 3 elastic pods in AKS, also we have a pod running kibana. both Kibana and elastic make use of credentials stored in kubernetes secrets. however there is the need to urgently ch… --- ## [OAuth2 Support in Logstash http input plugin](https://discuss.elastic.co/t/oauth2-support-in-logstash-http-input-plugin/368413)
**Author:** [@Marcin\_Miklasz](https://discuss.elastic.co/u/Marcin_Miklasz)\ **Replies:** 0\ **Last updated:** [October 8, 2024, 7:47am UTC](https://discuss.elastic.co/t/oauth2-support-in-logstash-http-input-plugin/368413 "2024-10-08T07:47:38Z")
As per Logstash reference docs 8.15 and http input \* Plugin version: v3.8.1 only http basic authentication is supported. Please add support for OAuth2 Bearer tokens, otherwise http input plugin is little/no use with any… --- ## [Elasticsearch - Changing Master-eligible nodes to dedicated Master nodes](https://discuss.elastic.co/t/elasticsearch-changing-master-eligible-nodes-to-dedicated-master-nodes/368387)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 5\ **Last updated:** [October 8, 2024, 1:45am UTC](https://discuss.elastic.co/t/elasticsearch-changing-master-eligible-nodes-to-dedicated-master-nodes/368387 "2024-10-08T01:45:13Z")
Hi All, We have a Elasticsearch 8.12.2 cluster that was very recently set up. This cluster has 3 "Master Eligible" and 5 "Data" nodes. When I run curl command to check cluster health it shows it as green with 8 data n… --- ## [Logstash Pipeline Erro](https://discuss.elastic.co/t/logstash-pipeline-erro/368388)
**Author:** [@vitor\_soprano](https://discuss.elastic.co/u/vitor_soprano)\ **Replies:** 3\ **Last updated:** [October 7, 2024, 11:00pm UTC](https://discuss.elastic.co/t/logstash-pipeline-erro/368388 "2024-10-07T23:00:55Z")
Hi there, first time trying to use logstash to capture logs from PfSense. This is what im using in the pipeline: input { syslog { port =\> 5514 type =\> "syslog" } } filter { if \[type\] == "sy… --- ## [Bitbucket Datacenter search user cluster privileges](https://discuss.elastic.co/t/bitbucket-datacenter-search-user-cluster-privileges/368380)
**Author:** [@gampuero](https://discuss.elastic.co/u/gampuero)\ **Replies:** 0\ **Last updated:** [October 7, 2024, 7:39pm UTC](https://discuss.elastic.co/t/bitbucket-datacenter-search-user-cluster-privileges/368380 "2024-10-07T19:39:42Z")
Im setting up Bitbucket Datacenter user for my elasticsearch cluster to be used as a search server. However I cant seem to find any documentation of what the minimum level of cluster and indice permissions it needs? An… --- ## [Creating a task with ‘slices’ gives a null result on GET \_tasks/\](https://discuss.elastic.co/t/creating-a-task-with-slices-gives-a-null-result-on-get-tasks-taskid/368370)
**Author:** [@Julien\_Moulin](https://discuss.elastic.co/u/Julien_Moulin)\ **Replies:** 0\ **Last updated:** [October 7, 2024, 6:46pm UTC](https://discuss.elastic.co/t/creating-a-task-with-slices-gives-a-null-result-on-get-tasks-taskid/368370 "2024-10-07T18:46:53Z")
Hi, Context: I'm using Elasticsearch 7.17 with the Node.js package @elastic/elasticsearch. I have created a ‘migration’ package to automate the update of ILM, SLM, etc. For a migration, I need to re-index the old ind… --- ## [nginx lua log ingestion with fluent](https://discuss.elastic.co/t/nginx-lua-log-ingestion-with-fluent/368368)
**Author:** [@Pablo\_Martinez](https://discuss.elastic.co/u/Pablo_Martinez)\ **Replies:** 1\ **Last updated:** [October 7, 2024, 6:53pm UTC](https://discuss.elastic.co/t/nginx-lua-log-ingestion-with-fluent/368368 "2024-10-07T18:53:05Z")
I have nginx applications with lua scripts in the log output that have lua statements. I also have pure nginx and .net deployments. Fluent sends the serilog and nginx logs but not the lua outputs. I have the following f… --- ## [Logstash-output-mongodb not work](https://discuss.elastic.co/t/logstash-output-mongodb-not-work/368363)
**Author:** [@yi.xin](https://discuss.elastic.co/u/yi.xin)\ **Replies:** 2\ **Last updated:** [October 7, 2024, 6:28pm UTC](https://discuss.elastic.co/t/logstash-output-mongodb-not-work/368363 "2024-10-07T18:28:40Z")
I'm having trouble with the logstash-output-mongodb plugin; it’s not working at all. I need to know if this plugin is still being maintained. If not, please confirm so I can look for alternatives. --- ## [Error: org.apache.http.ProtocolException: Not a valid protocol version: 0](https://discuss.elastic.co/t/error-org-apache-http-protocolexception-not-a-valid-protocol-version-0/368212)
**Author:** [@jaykadambi](https://discuss.elastic.co/u/jaykadambi)\ **Replies:** 5\ **Last updated:** [October 7, 2024, 4:54pm UTC](https://discuss.elastic.co/t/error-org-apache-http-protocolexception-not-a-valid-protocol-version-0/368212 "2024-10-07T16:54:39Z")
We recently upgraded our development environment from Elasticsearch cluster version 8.6.2 to 8.15.1 We are using the High Level Rest Client with apiCompatibilityMode=true After the upgrade, we started seeing spor… --- ## [No output to stdout/stderr from Docker image after upgrading to v8.15.x](https://discuss.elastic.co/t/no-output-to-stdout-stderr-from-docker-image-after-upgrading-to-v8-15-x/366805)
**Author:** [@brynjar](https://discuss.elastic.co/u/brynjar)\ **Replies:** 3\ **Last updated:** [October 7, 2024, 3:54pm UTC](https://discuss.elastic.co/t/no-output-to-stdout-stderr-from-docker-image-after-upgrading-to-v8-15-x/366805 "2024-10-07T15:54:44Z")
Filebeat has a command line option named --environment (in filebeat --help) or -environment (in the online command reference): -environment For logging purposes, specifies the environment that Filebeat is running in. … --- ## [A number followed by a dot is considered a word break?](https://discuss.elastic.co/t/a-number-followed-by-a-dot-is-considered-a-word-break/368333)
**Author:** [@Hrusha](https://discuss.elastic.co/u/Hrusha)\ **Replies:** 3\ **Last updated:** [October 7, 2024, 3:47pm UTC](https://discuss.elastic.co/t/a-number-followed-by-a-dot-is-considered-a-word-break/368333 "2024-10-07T15:47:28Z")
I am looking at very strange (to me at least) behavior and am unable to find clear documentation for it. GET \_analyze { "analyzer": "standard", "text": "server.mycopany.com" } Produces { "tokens": \[ { … --- ## [V8.12.0 ILM - maximum primary shard size not working](https://discuss.elastic.co/t/v8-12-0-ilm-maximum-primary-shard-size-not-working/368356)
**Author:** [@plus](https://discuss.elastic.co/u/plus)\ **Replies:** 0\ **Last updated:** [October 7, 2024, 3:18pm UTC](https://discuss.elastic.co/t/v8-12-0-ilm-maximum-primary-shard-size-not-working/368356 "2024-10-07T15:18:38Z")
Hello My ILM policy has a maximum primary shard size= 50gb There are 2 linked indices to this policy: but my indexes are bigger than 100 Gb (there is primary and replica) Why is not working this configured o… --- ## [Elastic fleet issue- it takes long time to load](https://discuss.elastic.co/t/elastic-fleet-issue-it-takes-long-time-to-load/368311)
**Author:** [@Mahmoud0x](https://discuss.elastic.co/u/Mahmoud0x)\ **Replies:** 15\ **Last updated:** [October 7, 2024, 3:35pm UTC](https://discuss.elastic.co/t/elastic-fleet-issue-it-takes-long-time-to-load/368311 "2024-10-07T15:35:04Z")
There is a problem with fleet section in kibana takes so mush time loading --- ## [Want to configure Elastic Search on http with user name and Password](https://discuss.elastic.co/t/want-to-configure-elastic-search-on-http-with-user-name-and-password/368348)
**Author:** [@JyotiPrakash](https://discuss.elastic.co/u/JyotiPrakash)\ **Replies:** 5\ **Last updated:** [October 7, 2024, 1:36pm UTC](https://discuss.elastic.co/t/want-to-configure-elastic-search-on-http-with-user-name-and-password/368348 "2024-10-07T13:36:33Z")
"Apologies" if this is a repetitive question I am trying to configure "8.15.2" on Windows on http. I want to configure with user name and password. I am not seeing any proper document for it. Could you please help me to… --- ## [Activate timeSlider option in kibana 8.14](https://discuss.elastic.co/t/activate-timeslider-option-in-kibana-8-14/368340)
**Author:** [@eran2](https://discuss.elastic.co/u/eran2)\ **Replies:** 5\ **Last updated:** [October 7, 2024, 1:07pm UTC](https://discuss.elastic.co/t/activate-timeslider-option-in-kibana-8-14/368340 "2024-10-07T13:07:34Z")
Hi, how can I activate the time slider in Kibana 8.14.1? I didn't find a setting for it in Advanced Settings, although the time slider is available when im editing the map. Thanks. --- ## [In any case, Kibana always prompts that it is using \`APM Server binary\` instead of \`Elastic Agent\`](https://discuss.elastic.co/t/in-any-case-kibana-always-prompts-that-it-is-using-apm-server-binary-instead-of-elastic-agent/366306)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [October 7, 2024, 12:32pm UTC](https://discuss.elastic.co/t/in-any-case-kibana-always-prompts-that-it-is-using-apm-server-binary-instead-of-elastic-agent/366306 "2024-10-07T12:32:54Z")
Even if I deploy Elastic Agent with APM integration enabled, Kibana still prompts that it is using APM Server binary instead of Elastic Agent. The following screenshots are from a Kibana 8.15.1 instance deployed from a… --- ## [Dangling search tasks which are even few days old](https://discuss.elastic.co/t/dangling-search-tasks-which-are-even-few-days-old/368350)
**Author:** [@sreekanth\_makam](https://discuss.elastic.co/u/sreekanth_makam)\ **Replies:** 0\ **Last updated:** [October 7, 2024, 12:20pm UTC](https://discuss.elastic.co/t/dangling-search-tasks-which-are-even-few-days-old/368350 "2024-10-07T12:20:38Z")
Elastic Search version: 8 We are passing timeout to search query and query is timing out properly if it cross that time. But I see a active task still running in /\_tasks output. few tasks are like days old and eating u… --- ## [Unable configure ELK stack on Single Node](https://discuss.elastic.co/t/unable-configure-elk-stack-on-single-node/368329)
**Author:** [@PJ111288](https://discuss.elastic.co/u/PJ111288)\ **Replies:** 1\ **Last updated:** [October 7, 2024, 11:56am UTC](https://discuss.elastic.co/t/unable-configure-elk-stack-on-single-node/368329 "2024-10-07T11:56:06Z")
Caused by: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 3 -Config : No xpack secuirty enabled cd /etc/logstash/conf.d/ output { elasticsearch { hosts =\> \["localhost:9200"\] s… --- ## [Logstash Json Data processing issue](https://discuss.elastic.co/t/logstash-json-data-processing-issue/368309)
**Author:** [@sai\_ravi\_shankar](https://discuss.elastic.co/u/sai_ravi_shankar)\ **Replies:** 6\ **Last updated:** [October 7, 2024, 10:55am UTC](https://discuss.elastic.co/t/logstash-json-data-processing-issue/368309 "2024-10-07T10:55:01Z")
Hi ELK Community, I need your help with an issue I'm encountering. In my JSON data processing pipeline, some fields are coming in two formats: as an array and as a keyword. When I set the mapping for "field\_name" as a… --- ## [Data node CPU fluctuating with no change in traffic or shards rebalancing](https://discuss.elastic.co/t/data-node-cpu-fluctuating-with-no-change-in-traffic-or-shards-rebalancing/368137)
**Author:** [@kunalyadav](https://discuss.elastic.co/u/kunalyadav)\ **Replies:** 6\ **Last updated:** [October 7, 2024, 10:12am UTC](https://discuss.elastic.co/t/data-node-cpu-fluctuating-with-no-change-in-traffic-or-shards-rebalancing/368137 "2024-10-07T10:12:37Z")
We have an Elasticsearch cluster where a data node randomly becomes hot which results in an increase in its CPU and reduction in its search rate (no. of queries processed per second by the node). There is no considerable… --- ## [Warning: already initialized constant Manticore::Client::HttpPost](https://discuss.elastic.co/t/warning-already-initialized-constant-manticore-httppost/368327)
**Author:** [@Jone132231](https://discuss.elastic.co/u/Jone132231)\ **Replies:** 0\ **Last updated:** [October 7, 2024, 7:31am UTC](https://discuss.elastic.co/t/warning-already-initialized-constant-manticore-httppost/368327 "2024-10-07T07:31:46Z")
its shows this Issue When I Try to Upload index its show this : I clear the cash and still not fixed client.rb:284: warning: already initialized constant Manticore::Client::HttpPost client.rb:284: warning: already in… --- ## [Problems logging into elastic](https://discuss.elastic.co/t/problems-logging-into-elastic/368251)
**Author:** [@Mauro\_929292](https://discuss.elastic.co/u/Mauro_929292)\ **Replies:** 3\ **Last updated:** [October 7, 2024, 8:02am UTC](https://discuss.elastic.co/t/problems-logging-into-elastic/368251 "2024-10-07T08:02:31Z")
I enter the correct username and password and it gives me the output 'we couldn't log you in'. How can I solve it? Please help me.... [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=156) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=158)