# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=164 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 165 --- ## [Elasticsearch 8.8.2 vulnerabilities issue](https://discuss.elastic.co/t/elasticsearch-8-8-2-vulnerabilities-issue/367086)
**Author:** [@Sandeep6](https://discuss.elastic.co/u/Sandeep6)\ **Replies:** 1\ **Last updated:** [September 25, 2024, 7:28am UTC](https://discuss.elastic.co/t/elasticsearch-8-8-2-vulnerabilities-issue/367086 "2024-09-25T07:28:55Z")
Hi Team, We have elasticsearch version 8.8.2, and it is in this version that we discovered the vulnerability issue. So, how can I avoid this issue? And what is the new updated version where there are no vulnerabilities… --- ## [Kibana is not connecting with elasticsearch of 8.15.0](https://discuss.elastic.co/t/kibana-is-not-connecting-with-elasticsearch-of-8-15-0/367082)
**Author:** [@vikascateina](https://discuss.elastic.co/u/vikascateina)\ **Replies:** 0\ **Last updated:** [September 25, 2024, 6:06am UTC](https://discuss.elastic.co/t/kibana-is-not-connecting-with-elasticsearch-of-8-15-0/367082 "2024-09-25T06:06:44Z")
Hi, My elasticsearch is not connecting with kibana because we are using 8.15.0 version.It is giving error \[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. security\_exceptio… --- ## [Joining two documents with a unique session Id](https://discuss.elastic.co/t/joining-two-documents-with-a-unique-session-id/367066)
**Author:** [@sintim](https://discuss.elastic.co/u/sintim)\ **Replies:** 1\ **Last updated:** [September 25, 2024, 6:02am UTC](https://discuss.elastic.co/t/joining-two-documents-with-a-unique-session-id/367066 "2024-09-25T06:02:02Z")
Is it possible to join two documents in Elasticsearch based on the same session ID? The goal is to create a visualization that shows the field in one of the documents together with another field from the other document. … --- ## [Elastic Cloud Licensing](https://discuss.elastic.co/t/elastic-cloud-licensing/367078)
**Author:** [@Dasher](https://discuss.elastic.co/u/Dasher)\ **Replies:** 1\ **Last updated:** [September 25, 2024, 5:16am UTC](https://discuss.elastic.co/t/elastic-cloud-licensing/367078 "2024-09-25T05:16:44Z")
Hi All, I wanted to know whether the elastic stack offering on elastic cloud is same as elastic cloud offering on azure marketplace. If so, can I use the same license from elastic cloud to spin up cluster in elastic cl… --- ## [Sql\_last\_value wrong timestamp](https://discuss.elastic.co/t/sql-last-value-wrong-timestamp/367075)
**Author:** [@thien.nguyen](https://discuss.elastic.co/u/thien.nguyen)\ **Replies:** 0\ **Last updated:** [September 25, 2024, 2:24am UTC](https://discuss.elastic.co/t/sql-last-value-wrong-timestamp/367075 "2024-09-25T02:24:28Z")
Hi, I used logstash jbdc to get data from oracle db for a year. Last week, my company change db server and my jdbc pipeline does not work correctly anymore. As you see, I set my pipeline start at 8 a.m and run every 5 m… --- ## [Script field could not run in the visualize](https://discuss.elastic.co/t/script-field-could-not-run-in-the-visualize/366852)
**Author:** [@xiaofei\_lu](https://discuss.elastic.co/u/xiaofei_lu)\ **Replies:** 1\ **Last updated:** [September 25, 2024, 1:48am UTC](https://discuss.elastic.co/t/script-field-could-not-run-in-the-visualize/366852 "2024-09-25T01:48:24Z")
I create a script field as follwing if (params.\_source.containsKey('datav1') && params.\_source.datav1.containsKey('messageHistory')) { def firstElement = params.\_source.datav1.messageHistory\[0\]; if (firstElement… --- ## [Very poor elastic-agent performance with SQS/S3 for Cloudtrail logs](https://discuss.elastic.co/t/very-poor-elastic-agent-performance-with-sqs-s3-for-cloudtrail-logs/367055)
**Author:** [@Scott\_Hiemstra](https://discuss.elastic.co/u/Scott_Hiemstra)\ **Replies:** 6\ **Last updated:** [September 25, 2024, 1:28am UTC](https://discuss.elastic.co/t/very-poor-elastic-agent-performance-with-sqs-s3-for-cloudtrail-logs/367055 "2024-09-25T01:28:59Z")
I've read the July blog post claiming 8 x t3.micro instances can process \> 40,000 events/second using SQS/S3. That comes out to \> 5,000 events/second/host. I currently have 1 x m6a.large and 1 x t3a.small running 8.15.… --- ## [Kibana script "plugin\_helpers" returns 0 even when failure is encountered](https://discuss.elastic.co/t/kibana-script-plugin-helpers-returns-0-even-when-failure-is-encountered/364701)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 3\ **Last updated:** [September 24, 2024, 9:08pm UTC](https://discuss.elastic.co/t/kibana-script-plugin-helpers-returns-0-even-when-failure-is-encountered/364701 "2024-09-24T21:08:41Z")
The Kibana script "scripts/plugin\_helpers" returns 0 even when failure is encountered. This is not optimal has we want our build to fail if there is an error. yarn build yarn run v1.22.21 $ yarn plugin-helpers build --d… --- ## [How to specify "wait several N seconds before retry" in Elastic Python Client?](https://discuss.elastic.co/t/how-to-specify-wait-several-n-seconds-before-retry-in-elastic-python-client/360726)
**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\ **Replies:** 6\ **Last updated:** [September 24, 2024, 5:29pm UTC](https://discuss.elastic.co/t/how-to-specify-wait-several-n-seconds-before-retry-in-elastic-python-client/360726 "2024-09-24T17:29:51Z")
Hello guys! I found that I can specify the number of attempts to retry a request if the connection is lost (below example for Python Client): from elasticsearch import Elasticsearch es = Elasticsearch(url, basic\_auth=(… --- ## [External Certificate configuration](https://discuss.elastic.co/t/external-certificate-configuration/366891)
**Author:** [@Santanu112](https://discuss.elastic.co/u/Santanu112)\ **Replies:** 6\ **Last updated:** [September 24, 2024, 5:07pm UTC](https://discuss.elastic.co/t/external-certificate-configuration/366891 "2024-09-24T17:07:31Z")
Hi Team, I am trying to add my org certificate (.pfx) to elastic security so we can securely access it from other servers. i am not able to import it in existing CA cert. Could any one please tell me how to add it in … --- ## [Beats Netflow](https://discuss.elastic.co/t/beats-netflow/366746)
**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\ **Replies:** 1\ **Last updated:** [September 24, 2024, 3:42pm UTC](https://discuss.elastic.co/t/beats-netflow/366746 "2024-09-24T15:42:22Z")
Hi all, I've added Fleet Keycloak integration and deployed the policy to some Keycloak servers. I can see the logs in discovery, but the Keycloak integration doesn't include the GeoIP processor, so the reported source.i… --- ## [After upgrading from 7.7.18 to 8.15.1 I DO NOT see nodes folder](https://discuss.elastic.co/t/after-upgrading-from-7-7-18-to-8-15-1-i-do-not-see-nodes-folder/367058)
**Author:** [@devin](https://discuss.elastic.co/u/devin)\ **Replies:** 2\ **Last updated:** [September 24, 2024, 3:10pm UTC](https://discuss.elastic.co/t/after-upgrading-from-7-7-18-to-8-15-1-i-do-not-see-nodes-folder/367058 "2024-09-24T15:10:51Z")
Hello, Hoping some one can help solve me this puzzle, I was previously on ES-7.7.18 and I just upgraded to 8.15.1 but as opposed to ES-7.7.18 I do not see nodes folder created in ES-8.15.1 and Instead all I see is a nod… --- ## [Assigning Different Data Tier to Indices on a Same Node](https://discuss.elastic.co/t/assigning-different-data-tier-to-indices-on-a-same-node/367054)
**Author:** [@kdwolf](https://discuss.elastic.co/u/kdwolf)\ **Replies:** 0\ **Last updated:** [September 24, 2024, 2:42pm UTC](https://discuss.elastic.co/t/assigning-different-data-tier-to-indices-on-a-same-node/367054 "2024-09-24T14:42:54Z")
Hello, All I understand a concept of different tiers for various types of indices (content data, Hot, Cold, etc.) but I cannot find any reference / documentation if there is a practical benefit to assign different indic… --- ## [Elastic agent with Ingest pipeline](https://discuss.elastic.co/t/elastic-agent-with-ingest-pipeline/362400)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 18\ **Last updated:** [September 24, 2024, 2:20pm UTC](https://discuss.elastic.co/t/elastic-agent-with-ingest-pipeline/362400 "2024-09-24T14:20:24Z")
Hi Team, We are using fleet-managed elastic agents to send log events to elasticsearch. The custom log integration has been done as part of this process and the log events are passed through an ingest pipeline before th… --- ## [How can I query many indexes based on a particular field value?](https://discuss.elastic.co/t/how-can-i-query-many-indexes-based-on-a-particular-field-value/367026)
**Author:** [@\_Zhang](https://discuss.elastic.co/u/_Zhang)\ **Replies:** 3\ **Last updated:** [September 24, 2024, 2:08pm UTC](https://discuss.elastic.co/t/how-can-i-query-many-indexes-based-on-a-particular-field-value/367026 "2024-09-24T14:08:57Z")
Background: Indexes: index-apple, index-banana, index-orange, etc. Each of them has a field called type. I wanna query "apple" and "banana": POST /index-apple,index-banana/\_search { "query": { "terms": { … --- ## [ES 8.14.1 throwing java exception for zstd on s390x platform](https://discuss.elastic.co/t/es-8-14-1-throwing-java-exception-for-zstd-on-s390x-platform/367036)
**Author:** [@asati](https://discuss.elastic.co/u/asati)\ **Replies:** 1\ **Last updated:** [September 24, 2024, 2:08pm UTC](https://discuss.elastic.co/t/es-8-14-1-throwing-java-exception-for-zstd-on-s390x-platform/367036 "2024-09-24T14:08:25Z")
We have upgraded elasticsearch in our env which is on s390x platform from 8.13.3 to 8.14.1. We started getting java exceptions for zstd , saying not supported on s390x arch. tried adding zstd package using dnf install i… --- ## [/\_count don't return valid result](https://discuss.elastic.co/t/count-dont-return-valid-result/367052)
**Author:** [@Daniel\_M\_Oliveira](https://discuss.elastic.co/u/Daniel_M_Oliveira)\ **Replies:** 0\ **Last updated:** [September 24, 2024, 2:07pm UTC](https://discuss.elastic.co/t/count-dont-return-valid-result/367052 "2024-09-24T14:07:26Z")
Hi, First of all, sorry for my question. I recently started to work with elastic. I think it is a simple question, but I can't found an explation for it. I have this indexes. When I run /prd-pdl-core-labels/\_count… --- ## [Elastic/Kibana data exportaion (over 1b hits)](https://discuss.elastic.co/t/elastic-kibana-data-exportaion-over-1b-hits/366402)
**Author:** [@yzaritskyi](https://discuss.elastic.co/u/yzaritskyi)\ **Replies:** 3\ **Last updated:** [September 24, 2024, 2:06pm UTC](https://discuss.elastic.co/t/elastic-kibana-data-exportaion-over-1b-hits/366402 "2024-09-24T14:06:50Z")
Hello. I have the assignment to export specific client data from the elastic to any compatible format (csv, json, ndjson, etc.) There is an option to generate a CSV Report from Kibana by a saved query. However, this… --- ## [Read S3 data and index using Elastic Agent](https://discuss.elastic.co/t/read-s3-data-and-index-using-elastic-agent/367040)
**Author:** [@Naresh\_Kumar1](https://discuss.elastic.co/u/Naresh_Kumar1)\ **Replies:** 0\ **Last updated:** [September 24, 2024, 12:43pm UTC](https://discuss.elastic.co/t/read-s3-data-and-index-using-elastic-agent/367040 "2024-09-24T12:43:09Z")
Hi, Currently, I am pushing the lambda logs to the S3 bucket using the AWS firehose extension and it was working fine and logs are available in the S3 bucket. id: aws-s3-aws.s3access type: aws-s3 data\_stream: datas… --- ## [Editing jvm.options in cloud environment](https://discuss.elastic.co/t/editing-jvm-options-in-cloud-environment/367038)
**Author:** [@Joey\_Visbeen](https://discuss.elastic.co/u/Joey_Visbeen)\ **Replies:** 0\ **Last updated:** [September 24, 2024, 12:18pm UTC](https://discuss.elastic.co/t/editing-jvm-options-in-cloud-environment/367038 "2024-09-24T12:18:28Z")
I would like to change the logging level of the garbage collector on the hosted elastic cloud. Is this possible? If so, then please explain how, If not, what was the reasoning behind not making it possible? --- ## [Filebeat version 8.15.1 \[logging problem/question\]](https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992)
**Author:** [@robertos1232](https://discuss.elastic.co/u/robertos1232)\ **Replies:** 5\ **Last updated:** [September 24, 2024, 12:16pm UTC](https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992 "2024-09-24T12:16:57Z")
Hello Guys!, I'm messaging you because I am confused about filebeat and monitoring. My config: logging.level: info logging.to\_files: true logging.to\_syslog: false logging.to\_stderr: false logging.metrics.enabled: fals… --- ## [Search not working when adding special characters in query](https://discuss.elastic.co/t/search-not-working-when-adding-special-characters-in-query/366872)
**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\ **Replies:** 7\ **Last updated:** [September 24, 2024, 12:04pm UTC](https://discuss.elastic.co/t/search-not-working-when-adding-special-characters-in-query/366872 "2024-09-24T12:04:46Z")
I have a cluster which stores device logs and I use a java client to fetch data into my application. The device logs contain special characters. So as per the documents the special characters do not get analyzed and I am… --- ## [Unable to bulk insert JSON object with no error message](https://discuss.elastic.co/t/unable-to-bulk-insert-json-object-with-no-error-message/367020)
**Author:** [@MANLW-Vestas](https://discuss.elastic.co/u/MANLW-Vestas)\ **Replies:** 4\ **Last updated:** [September 24, 2024, 11:52am UTC](https://discuss.elastic.co/t/unable-to-bulk-insert-json-object-with-no-error-message/367020 "2024-09-24T11:52:01Z")
Hi! I've set up a small local docker instance, where I'm trying to run a POC for my project. Though it has been quite intuitive and easy to set it up, and getting started with inserting data into the indices, I still hav… --- ## [Multilevel Vega Sankey Paths Not Lining Up](https://discuss.elastic.co/t/multilevel-vega-sankey-paths-not-lining-up/308691)
**Author:** [@m.hanna](https://discuss.elastic.co/u/m.hanna)\ **Replies:** 2\ **Last updated:** [September 22, 2024, 3:39pm UTC](https://discuss.elastic.co/t/multilevel-vega-sankey-paths-not-lining-up/308691 "2024-09-22T15:39:46Z")
I am trying to create some multilevel sankey diagrams in Kibana using Vega. I have it almost done, but the paths do not align on the center stack when highlighting one of the outside stacks. See image. I don't know i… --- ## [hello Do you know how I could remove or bypass this block from CloudFront? Thanks a lot for your help](https://discuss.elastic.co/t/hello-do-you-know-how-i-could-remove-or-bypass-this-block-from-cloudfront-thanks-a-lot-for-your-help/367023)
**Author:** [@Ngocnguyen](https://discuss.elastic.co/u/Ngocnguyen)\ **Replies:** 1\ **Last updated:** [September 24, 2024, 9:22am UTC](https://discuss.elastic.co/t/hello-do-you-know-how-i-could-remove-or-bypass-this-block-from-cloudfront-thanks-a-lot-for-your-help/367023 "2024-09-24T09:22:44Z")
403 Forbidden "\\n\\\nERROR: The request could not be satisfied\\n\\n 403 ERROR\\nThe request could not be satisfied.\\n\
\\nRequest bl… --- ## [Assistance with Querying CVEs in Elasticsearch](https://discuss.elastic.co/t/assistance-with-querying-cves-in-elasticsearch/367001)
**Author:** [@Youi](https://discuss.elastic.co/u/Youi)\ **Replies:** 0\ **Last updated:** [September 24, 2024, 2:43am UTC](https://discuss.elastic.co/t/assistance-with-querying-cves-in-elasticsearch/367001 "2024-09-24T02:43:04Z")
Hello everyone, I hope this message finds you well. I am fairly new to Elasticsearch and I am encountering some difficulties with querying. On a computer with MariaDB 10.11.1 installed, the CPE ID is as follows: cpe:… --- ## [Inconsistent data](https://discuss.elastic.co/t/inconsistent-data/366608)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 5\ **Last updated:** [September 24, 2024, 8:33am UTC](https://discuss.elastic.co/t/inconsistent-data/366608 "2024-09-24T08:33:43Z")
Hello, I'm getting different count of records when switching between lens and discover, the only explanation I could think of is due to duplicates but after extracting a CSV file, i did not find any duplicates. Lens co… --- ## [Elasticsearch dense\_vector is taking up too much storage space！Help](https://discuss.elastic.co/t/elasticsearch-dense-vector-is-taking-up-too-much-storage-space-help/366046)
**Author:** [@Andy\_Cong](https://discuss.elastic.co/u/Andy_Cong)\ **Replies:** 8\ **Last updated:** [September 24, 2024, 7:39am UTC](https://discuss.elastic.co/t/elasticsearch-dense-vector-is-taking-up-too-much-storage-space-help/366046 "2024-09-24T07:39:06Z")
I'm having an issue with Elasticsearch where my dense\_vector data is taking up significantly more storage space than expected. ES Version 8.2.3 Data Model: vector field: Type is dense\_vector with a dimension of 1024… --- ## [How to increase the speed of response?](https://discuss.elastic.co/t/how-to-increase-the-speed-of-response/366190)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 31\ **Last updated:** [September 24, 2024, 7:25am UTC](https://discuss.elastic.co/t/how-to-increase-the-speed-of-response/366190 "2024-09-24T07:25:13Z")
Hi I have a lot of data up to 10 billion and in order to be quick I made 7 contracts and it was still very slow What is the best practice in order to be a quick response? --- ## [Timestamp per Hour/Day getting automatically](https://discuss.elastic.co/t/timestamp-per-hour-day-getting-automatically/366970)
**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\ **Replies:** 1\ **Last updated:** [September 24, 2024, 7:16am UTC](https://discuss.elastic.co/t/timestamp-per-hour-day-getting-automatically/366970 "2024-09-24T07:16:55Z")
I am using 8.14 version. When I am preparing a tabular dashboard, and selecting Timestamp aggregated at Hour or Day. the naming automatically changed from Timestamp per Hour or Timestamp per Day. However I Need only Time… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=163) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=165)