# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=160 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 161 --- ## [Why is Kibana's Docker Image slow to access the \`Security\`'s \`Case\` UI when the \`XPACK\_ENCRYPTEDSAVEDOBJECTS\_ENCRYPTIONKEY\` environment variable is not set?](https://discuss.elastic.co/t/why-is-kibanas-docker-image-slow-to-access-the-security-s-case-ui-when-the-xpack-encryptedsavedobjects-encryptionkey-environment-variable-is-not-set/366093)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [October 2, 2024, 10:30am UTC](https://discuss.elastic.co/t/why-is-kibanas-docker-image-slow-to-access-the-security-s-case-ui-when-the-xpack-encryptedsavedobjects-encryptionkey-environment-variable-is-not-set/366093 "2024-10-02T10:30:34Z")
Assume that there is a Docker Compose file es01-docker.yaml as follows, name: test services: es01: image: docker.elastic.co/elasticsearch/elasticsearch:8.15.0 environment: - ELASTIC\_PASSWORD=es01Test … --- ## [Why is the non-existent \`elasticsearch.url\` mentioned in Kibana’s configuration documentation?](https://discuss.elastic.co/t/why-is-the-non-existent-elasticsearch-url-mentioned-in-kibana-s-configuration-documentation/366135)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [October 2, 2024, 10:29am UTC](https://discuss.elastic.co/t/why-is-the-non-existent-elasticsearch-url-mentioned-in-kibana-s-configuration-documentation/366135 "2024-10-02T10:29:47Z")
Why is the non-existent elasticsearch.url mentioned in Kibana’s configuration documentation? See Run Elasticsearch locally in Docker (without security) | Elasticsearch Guide \[8.15\] | Elastic . Start the Kibana contain… --- ## [Extract Elasticsearch data](https://discuss.elastic.co/t/extract-elasticsearch-data/368097)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 6\ **Last updated:** [October 2, 2024, 7:11am UTC](https://discuss.elastic.co/t/extract-elasticsearch-data/368097 "2024-10-02T07:11:13Z")
I have data in Elasticsearch and I want to back up and after doing the backup restore it in another Elasticsearch I do this to avoid problems that can occur similarly: Unintentionally delete data Or the failure of Ela… --- ## [Elk commercial support](https://discuss.elastic.co/t/elk-commercial-support/368114)
**Author:** [@pradeep-logstashuser](https://discuss.elastic.co/u/pradeep-logstashuser)\ **Replies:** 1\ **Last updated:** [October 2, 2024, 6:04am UTC](https://discuss.elastic.co/t/elk-commercial-support/368114 "2024-10-02T06:04:00Z")
Hi , We are new to ELK, can any one suggest commercial support for on demand basis is available? --- ## [Error deploying ELK on kubernettes: Defaulted container "elasticsearch" out of: elasticsearch, elastic-internal-init-filesystem (init), elastic-internal-suspend (init) java.nio.file.AccessDeniedException:](https://discuss.elastic.co/t/error-deploying-elk-on-kubernettes-defaulted-container-elasticsearch-out-of-elasticsearch-elastic-internal-init-filesystem-init-elastic-internal-suspend-init-java-nio-file-accessdeniedexception/368116)
**Author:** [@Anu3](https://discuss.elastic.co/u/Anu3)\ **Replies:** 0\ **Last updated:** [October 2, 2024, 6:02am UTC](https://discuss.elastic.co/t/error-deploying-elk-on-kubernettes-defaulted-container-elasticsearch-out-of-elasticsearch-elastic-internal-init-filesystem-init-elastic-internal-suspend-init-java-nio-file-accessdeniedexception/368116 "2024-10-02T06:02:46Z")
I was following the Elasticsearch documentation (Deploy an Elasticsearch cluster | Elastic Cloud on Kubernetes \[2.14\] | Elastic) I am getting the below error while deploying the elasticsearch cluster on kubernetes: De… --- ## [Seeking Assistance with Syncing and Search Latency Issues in Elasticsearch](https://discuss.elastic.co/t/seeking-assistance-with-syncing-and-search-latency-issues-in-elasticsearch/368045)
**Author:** [@Miguel\_Caballero\_Pin](https://discuss.elastic.co/u/Miguel_Caballero_Pin)\ **Replies:** 6\ **Last updated:** [October 1, 2024, 8:52pm UTC](https://discuss.elastic.co/t/seeking-assistance-with-syncing-and-search-latency-issues-in-elasticsearch/368045 "2024-10-01T20:52:03Z")
Hi everyone, We’re currently facing some serious challenges with our Elasticsearch deployment, and we’re hoping to get some advice or suggestions from the community. Below is the technical context of our situation and w… --- ## [Why is the non-existent \`xpack.security.enabled\` mentioned in Kibana's configuration documentation?](https://discuss.elastic.co/t/why-is-the-non-existent-xpack-security-enabled-mentioned-in-kibanas-configuration-documentation/366131)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 2\ **Last updated:** [October 1, 2024, 7:49pm UTC](https://discuss.elastic.co/t/why-is-the-non-existent-xpack-security-enabled-mentioned-in-kibanas-configuration-documentation/366131 "2024-10-01T19:49:49Z")
Why is the non-existent xpack.security.enabled mentioned in Kibana's configuration documentation? See Run Elasticsearch locally in Docker (without security) | Elasticsearch Guide \[8.15\] | Elastic . Start the Kibana co… --- ## [How to change dataset name after duplicating agent policy](https://discuss.elastic.co/t/how-to-change-dataset-name-after-duplicating-agent-policy/368107)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 3\ **Last updated:** [October 1, 2024, 7:26pm UTC](https://discuss.elastic.co/t/how-to-change-dataset-name-after-duplicating-agent-policy/368107 "2024-10-01T19:26:14Z")
I've created an agent policy with 13 integrations, each specifying one of 2 "qa" datasets. I want to duplicate this policy and want to change the datasets to "prod" names, but they are grey and won't let me change. Ho… --- ## [KIBANA\_ status=217/USER](https://discuss.elastic.co/t/kibana-status-217-user/368105)
**Author:** [@Esley\_Magalhaes](https://discuss.elastic.co/u/Esley_Magalhaes)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 6:15pm UTC](https://discuss.elastic.co/t/kibana-status-217-user/368105 "2024-10-01T18:15:30Z")
● kibana.service - Kibana Loaded: loaded (/etc/systemd/system/kibana.service; enabled; preset: enabled) Active: activating (auto-restart) (Result: exit-code) since Tue 2024-10-01 18:01:40 UTC; 1s ago Docs: https://www… --- ## [Convert winlogbeat drop to integration custom config](https://discuss.elastic.co/t/convert-winlogbeat-drop-to-integration-custom-config/368102)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 5:39pm UTC](https://discuss.elastic.co/t/convert-winlogbeat-drop-to-integration-custom-config/368102 "2024-10-01T17:39:49Z")
I have what was a simple winlogbeat drop: drop\_event.when: and: - equals.event\_id: 4688 - contains.message: "New Process Name" - contains.message: "splunk" I can't figure out in the doc how to put the equivalent i… --- ## [Logstash deduplication with fingerprinting module drops unique data](https://discuss.elastic.co/t/logstash-deduplication-with-fingerprinting-module-drops-unique-data/368101)
**Author:** [@fffasttFGHb3t](https://discuss.elastic.co/u/fffasttFGHb3t)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 5:15pm UTC](https://discuss.elastic.co/t/logstash-deduplication-with-fingerprinting-module-drops-unique-data/368101 "2024-10-01T17:15:45Z")
Hello all, I have a pipeline with a jdbc connection to a mysql database pulling large documents with many values. I am have added a ruby filter \[1\] to remove padded zeroes from one of the fields and save the unpadded v… --- ## [\[node-frozen\] fatal exception while booting Elasticsearchjava.io.UncheckedIOException: java.io.IOException: Not enough free space \[55991361536\] for cache file of size \[131852140544\] in path \[/usr/bin/elasticsearch-node-frozen/elasticsearch-8.15.1/data\]](https://discuss.elastic.co/t/node-frozen-fatal-exception-while-booting-elasticsearchjava-io-uncheckedioexception-java-io-ioexception-not-enough-free-space-55991361536-for-cache-file-of-size-131852140544-in-path-usr-bin-elasticsearch-node-frozen-elasticsearch-8-15-1-data/368072)
**Author:** [@ax-va](https://discuss.elastic.co/u/ax-va)\ **Replies:** 9\ **Last updated:** [October 1, 2024, 3:27pm UTC](https://discuss.elastic.co/t/node-frozen-fatal-exception-while-booting-elasticsearchjava-io-uncheckedioexception-java-io-ioexception-not-enough-free-space-55991361536-for-cache-file-of-size-131852140544-in-path-usr-bin-elasticsearch-node-frozen-elasticsearch-8-15-1-data/368072 "2024-10-01T15:27:18Z")
I have a problem with adding a new frozen node. At first, I have installed Elasticsearch of version 8.15.1 on my local machine by extracting tar.gz on Ubuntu 22.04. LTS. It is working fine. Then, I have added a cold nod… --- ## [Uptime Metric - Recreate Visualization](https://discuss.elastic.co/t/uptime-metric-recreate-visualization/368040)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 4\ **Last updated:** [October 1, 2024, 3:10pm UTC](https://discuss.elastic.co/t/uptime-metric-recreate-visualization/368040 "2024-10-01T15:10:35Z")
Hello, How can I recreate this in a custom dashboard: Using Heartbeat/Synthetics data. I can't seem to make the Metric visualization be dynamic for text or keywords. --- ## [Filtering Labels for Larger Buckets Not working](https://discuss.elastic.co/t/filtering-labels-for-larger-buckets-not-working/365222)
**Author:** [@rawgandalf14](https://discuss.elastic.co/u/rawgandalf14)\ **Replies:** 1\ **Last updated:** [October 1, 2024, 3:08pm UTC](https://discuss.elastic.co/t/filtering-labels-for-larger-buckets-not-working/365222 "2024-10-01T15:08:16Z")
Hi, It seems as though the filtering of larger buckets for a triggered pull of the graphs is not working. It still gives the labels as a timestamp instead of that of just the hour. Is there anyway around this? --- ## [Values above column](https://discuss.elastic.co/t/values-above-column/368064)
**Author:** [@Dainiuss](https://discuss.elastic.co/u/Dainiuss)\ **Replies:** 2\ **Last updated:** [October 1, 2024, 2:24pm UTC](https://discuss.elastic.co/t/values-above-column/368064 "2024-10-01T14:24:28Z")
Possible to show data values ​​above column? My goal is to prepare dashboard with needed data and graphics and copy all to PowerPoint presentation. --- ## [Unvalid certification path](https://discuss.elastic.co/t/unvalid-certification-path/368093)
**Author:** [@Hugo\_RIVIERE](https://discuss.elastic.co/u/Hugo_RIVIERE)\ **Replies:** 1\ **Last updated:** [October 1, 2024, 1:33pm UTC](https://discuss.elastic.co/t/unvalid-certification-path/368093 "2024-10-01T13:33:19Z")
I have a Spring Boot application running on Azure and I'm trying to access my Elastic endpoint via micrometer-registry-elastic. Unfortunately, when deployed, I have an error each time the app tries to export the metrics… --- ## [CURL command with java ProcessBuilder errors for curl option usage](https://discuss.elastic.co/t/curl-command-with-java-processbuilder-errors-for-curl-option-usage/366721)
**Author:** [@RSaravanaPrasad](https://discuss.elastic.co/u/RSaravanaPrasad)\ **Replies:** 1\ **Last updated:** [October 1, 2024, 1:27pm UTC](https://discuss.elastic.co/t/curl-command-with-java-processbuilder-errors-for-curl-option-usage/366721 "2024-10-01T13:27:12Z")
Processing Elastic API's change user password curl command with a java client. mentions adding -H'Content-Type: application/json' for requests with body. There is no space between -H option and the ' ( quote ) But w… --- ## [Micrometer registry elastic : no handler found for uri and method POST](https://discuss.elastic.co/t/micrometer-registry-elastic-no-handler-found-for-uri-and-method-post/368084)
**Author:** [@Hugo\_RIVIERE](https://discuss.elastic.co/u/Hugo_RIVIERE)\ **Replies:** 4\ **Last updated:** [October 1, 2024, 1:06pm UTC](https://discuss.elastic.co/t/micrometer-registry-elastic-no-handler-found-for-uri-and-method-post/368084 "2024-10-01T13:06:19Z")
I have a simple Spring Boot application using micrometer-registry-elastic and I can't seem to export metrics any longer. I have this error when I run the app : ERROR i.m.elastic.ElasticMeterRegistry : failed to send me… --- ## [Elastic - Integrations - VMWare - multisite log acquisition](https://discuss.elastic.co/t/elastic-integrations-vmware-multisite-log-acquisition/368088)
**Author:** [@sranda.zitra](https://discuss.elastic.co/u/sranda.zitra)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 11:29am UTC](https://discuss.elastic.co/t/elastic-integrations-vmware-multisite-log-acquisition/368088 "2024-10-01T11:29:34Z")
Hi, I already have ELK server with Fleet server and agent. Now my goal is to onboard VMware vSphere integration and start collecting logs and metrics from multiple sites. Once this is set-up, my aim is to create per-site… --- ## ['source\_ip\_fieldname' is user customized, please check is has an ECS compatible name](https://discuss.elastic.co/t/source-ip-fieldname-is-user-customized-please-check-is-has-an-ecs-compatible-name/368078)
**Author:** [@Mahesh\_Kumar\_S](https://discuss.elastic.co/u/Mahesh_Kumar_S)\ **Replies:** 1\ **Last updated:** [October 1, 2024, 11:24am UTC](https://discuss.elastic.co/t/source-ip-fieldname-is-user-customized-please-check-is-has-an-ecs-compatible-name/368078 "2024-10-01T11:24:07Z")
Hello Elastic community, After migrating to Logstash 8 i have found a new warning message like \[WARN \]\[logstash.inputs.udp \] 'source\_ip\_fieldname' is user customized, please check is has an ECS compatible name … --- ## [scaleio storage and its archive data at backend ECS storage i want to make visibility of this storage sizing difference at ELK dashboard](https://discuss.elastic.co/t/scaleio-storage-and-its-archive-data-at-backend-ecs-storage-i-want-to-make-visibility-of-this-storage-sizing-difference-at-elk-dashboard/368085)
**Author:** [@sonali\_dive](https://discuss.elastic.co/u/sonali_dive)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 11:02am UTC](https://discuss.elastic.co/t/scaleio-storage-and-its-archive-data-at-backend-ecs-storage-i-want-to-make-visibility-of-this-storage-sizing-difference-at-elk-dashboard/368085 "2024-10-01T11:02:48Z")
i have use case of storage like scaleio storage and its archive data at backend ECS storage i want to make visibility of this storage sizing difference at ELK dashboard --- ## [Warning Message in Logstash 8: Redundant Nested Repeat Operator in Regular Expression](https://discuss.elastic.co/t/warning-message-in-logstash-8-redundant-nested-repeat-operator-in-regular-expression/368015)
**Author:** [@Mahesh\_Kumar\_S](https://discuss.elastic.co/u/Mahesh_Kumar_S)\ **Replies:** 2\ **Last updated:** [October 1, 2024, 9:29am UTC](https://discuss.elastic.co/t/warning-message-in-logstash-8-redundant-nested-repeat-operator-in-regular-expression/368015 "2024-10-01T09:29:46Z")
Hello Elastic community, I've encountered an issue after migrating to Logstash version 8. I'm seeing a new warning message related to a regular expression. Here are the details: Issue: After the migration, I'm receivi… --- ## [HTML Sanitization](https://discuss.elastic.co/t/html-sanitization/368077)
**Author:** [@xtruthx](https://discuss.elastic.co/u/xtruthx)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 9:29am UTC](https://discuss.elastic.co/t/html-sanitization/368077 "2024-10-01T09:29:12Z")
Hello Community, one Question about HTML sanitization described in: Is this only for watcher or also for Alerts? As far as I read and understand, this is rather a setting that affects the xpack. item notificactions. … --- ## [Kibana data normalization](https://discuss.elastic.co/t/kibana-data-normalization/368036)
**Author:** [@47bit](https://discuss.elastic.co/u/47bit)\ **Replies:** 1\ **Last updated:** [October 1, 2024, 9:20am UTC](https://discuss.elastic.co/t/kibana-data-normalization/368036 "2024-10-01T09:20:58Z")
I have a dataset that contains data like this: IP, event type, ... IP1, EventType1, ... IP2, EventType2, ... IP1, EventType2, ... IP1, EventType1, ... IP3, EventType2, ... I want to show count events of every eve… --- ## [How to add a field to the rule-action variable 'context'](https://discuss.elastic.co/t/how-to-add-a-field-to-the-rule-action-variable-context/368075)
**Author:** [@hpz](https://discuss.elastic.co/u/hpz)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 9:19am UTC](https://discuss.elastic.co/t/how-to-add-a-field-to-the-rule-action-variable-context/368075 "2024-10-01T09:19:30Z")
Hi, anybody knows if it is possible to add a field value from the rule filter to the context variable as part of the rule-action variables. I would like to print some field values in my action message, like e.g. '{{con… --- ## [SSL/TLS connection problem between logstash and Elasticsearch](https://discuss.elastic.co/t/ssl-tls-connection-problem-between-logstash-and-elasticsearch/368071)
**Author:** [@Asmaa\_Oufkir](https://discuss.elastic.co/u/Asmaa_Oufkir)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 8:24am UTC](https://discuss.elastic.co/t/ssl-tls-connection-problem-between-logstash-and-elasticsearch/368071 "2024-10-01T08:24:33Z")
I have a connection problem between elasticsearch and logstash in fact logstash cannot connect to elasticsearch I tried several solutions but it does not work I can connect to elasticsearch in https by .p12 Kibana also… --- ## [Help! How to implement a third-party logged-in system jump to elasticsearch without logging in](https://discuss.elastic.co/t/help-how-to-implement-a-third-party-logged-in-system-jump-to-elasticsearch-without-logging-in/367986)
**Author:** [@zhangmuxijie](https://discuss.elastic.co/u/zhangmuxijie)\ **Replies:** 1\ **Last updated:** [October 1, 2024, 6:38am UTC](https://discuss.elastic.co/t/help-how-to-implement-a-third-party-logged-in-system-jump-to-elasticsearch-without-logging-in/367986 "2024-10-01T06:38:01Z")
Help! How to implement a third-party logged-in system jump to elasticsearch without logging in --- ## [Input as elasticsearch and output to logstash](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214)
**Author:** [@shailendra1](https://discuss.elastic.co/u/shailendra1)\ **Replies:** 7\ **Last updated:** [October 1, 2024, 5:41am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214 "2024-10-01T05:41:46Z")
Hello All, i have a use case where i need to use my elastic indices to use and dumps to the another logstash clusters (graylog opensearch indices) system is it worthy to use the logstash and get input as my elasticsea… --- ## [Optimizing Logstash Performance: Troubleshooting Instability at 10,000 EPS During Stress Tests](https://discuss.elastic.co/t/optimizing-logstash-performance-troubleshooting-instability-at-10-000-eps-during-stress-tests/368054)
**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\ **Replies:** 4\ **Last updated:** [October 1, 2024, 4:01am UTC](https://discuss.elastic.co/t/optimizing-logstash-performance-troubleshooting-instability-at-10-000-eps-during-stress-tests/368054 "2024-10-01T04:01:48Z")
I am currently using an architecture with Elastic-Agent for log collection and Logstash for log forwarding. I am conducting stress testing to evaluate the hardware requirements and costs for my collector setup (Elastic-A… --- ## [Is this even Possible?](https://discuss.elastic.co/t/is-this-even-possible/367256)
**Author:** [@Gisselle-Guzman](https://discuss.elastic.co/u/Gisselle-Guzman)\ **Replies:** 1\ **Last updated:** [September 30, 2024, 8:17pm UTC](https://discuss.elastic.co/t/is-this-even-possible/367256 "2024-09-30T20:17:29Z")
Hi all ! I have been a pentester but now I'm working on the blue side of things. So anyways I know all the malicious commands, the programs, and what an attacker will type, say into powershell or into their attack machin… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=159) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=161)