# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=168 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 169 --- ## [Error: Invalid string. Length must be a multiple of 4](https://discuss.elastic.co/t/error-invalid-string-length-must-be-a-multiple-of-4/366714)
**Author:** [@lathif\_basha](https://discuss.elastic.co/u/lathif_basha)\ **Replies:** 3\ **Last updated:** [September 18, 2024, 8:28am UTC](https://discuss.elastic.co/t/error-invalid-string-length-must-be-a-multiple-of-4/366714 "2024-09-18T08:28:32Z")
Hi Can anyone help to resolve the issue, Any comment is much appreciated. kibana version 7.16.2 --- ## [Local Storage in Elastic/kibana/Logstash VM](https://discuss.elastic.co/t/local-storage-in-elastic-kibana-logstash-vm/366607)
**Author:** [@otortosa](https://discuss.elastic.co/u/otortosa)\ **Replies:** 6\ **Last updated:** [September 18, 2024, 6:37am UTC](https://discuss.elastic.co/t/local-storage-in-elastic-kibana-logstash-vm/366607 "2024-09-18T06:37:37Z")
Hello Team, Im concern about the storage utility in my Elastic/Kibana/Logstash instance, is only 4 months up and 40 fleet agents and already used 500gb, is a normal behaviour? How can I avoid the high storage utility? … --- ## [How to Fix Unstable Logstash Event Rate at High EPS?](https://discuss.elastic.co/t/how-to-fix-unstable-logstash-event-rate-at-high-eps/366707)
**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\ **Replies:** 0\ **Last updated:** [September 18, 2024, 5:08am UTC](https://discuss.elastic.co/t/how-to-fix-unstable-logstash-event-rate-at-high-eps/366707 "2024-09-18T05:08:44Z")
I am using logrun.pl to send 1000 log events per second from a CSV file to Elastic-agent, which then forwards them to Logstash When I set logrun.pl to send fewer than 100 events per second, the Event Received Rate in … --- ## [Syslog-Agent-How To Help](https://discuss.elastic.co/t/syslog-agent-how-to-help/366588)
**Author:** [@michael005](https://discuss.elastic.co/u/michael005)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 2:33am UTC](https://discuss.elastic.co/t/syslog-agent-how-to-help/366588 "2024-09-18T02:33:47Z")
Hi, I am trying to setup a centralized environment with syslog and use an agent, instead of using Logstash. Reading the Elastic site, the preferred method seems to be to use an agent on every host instead. I have searc… --- ## [Fingerprint processor allowing duplicates](https://discuss.elastic.co/t/fingerprint-processor-allowing-duplicates/366696)
**Author:** [@mgordon](https://discuss.elastic.co/u/mgordon)\ **Replies:** 5\ **Last updated:** [September 18, 2024, 1:53am UTC](https://discuss.elastic.co/t/fingerprint-processor-allowing-duplicates/366696 "2024-09-18T01:53:05Z")
I'm ingesting log files that have known duplicates, so have implemented a Fingerprint processor in the ingest pipeline and setting that to \_id to remove the duplicates, which works perfectly. However, when the index roll… --- ## [Result limitation](https://discuss.elastic.co/t/result-limitation/366648)
**Author:** [@HermannSamimi](https://discuss.elastic.co/u/HermannSamimi)\ **Replies:** 9\ **Last updated:** [September 18, 2024, 1:08am UTC](https://discuss.elastic.co/t/result-limitation/366648 "2024-09-18T01:08:14Z")
Hello, I created a dashboard in Kibana, and for a particular visualization, I want to limit the results to 500 documents. Is it possible to display only the last 500 documents? Thanks --- ## [Elastic agent -\> reverse proxy -\> ( fleet server & elasticsearch cluster )](https://discuss.elastic.co/t/elastic-agent-reverse-proxy-fleet-server-elasticsearch-cluster/366000)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 11\ **Last updated:** [September 17, 2024, 11:06pm UTC](https://discuss.elastic.co/t/elastic-agent-reverse-proxy-fleet-server-elasticsearch-cluster/366000 "2024-09-17T23:06:54Z")
hello, i want that my elastic agents (in company A) send logs to a reverse proxy in front of my fleet server (in company b) which Is connected directly to my elasticsearch cluster is there any guide to follow ? please… --- ## [TermsQuery class in elastic.clients.elasticsearch (8.x)](https://discuss.elastic.co/t/termsquery-class-in-elastic-clients-elasticsearch-8-x/366556)
**Author:** [@moyerskd](https://discuss.elastic.co/u/moyerskd)\ **Replies:** 5\ **Last updated:** [September 17, 2024, 10:27pm UTC](https://discuss.elastic.co/t/termsquery-class-in-elastic-clients-elasticsearch-8-x/366556 "2024-09-17T22:27:58Z")
In a .NET app, I am migrating from NEST (7.x) to Elastic.Clients.Elasticsearch (8.x). In NEST, I am dynamically building a List\ called queries. One section determines the need of a Terms query and if so,… --- ## [Logstash Time Column Issue](https://discuss.elastic.co/t/logstash-time-column-issue/366693)
**Author:** [@dfir](https://discuss.elastic.co/u/dfir)\ **Replies:** 2\ **Last updated:** [September 17, 2024, 10:01pm UTC](https://discuss.elastic.co/t/logstash-time-column-issue/366693 "2024-09-17T22:01:55Z")
I am trying to get logstash to ingest the time column correctly into elasticsearch but it is not working. I am stuck and need help. in the csv I am trying to ingest the time looks like this: 2024-09-01 12:10:40.309 M… --- ## [Kibana 8.15.1 - taskManager degraded](https://discuss.elastic.co/t/kibana-8-15-1-taskmanager-degraded/366637)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 1\ **Last updated:** [September 17, 2024, 7:44pm UTC](https://discuss.elastic.co/t/kibana-8-15-1-taskmanager-degraded/366637 "2024-09-17T19:44:41Z")
Hi, I keep getting this kind of messages almost every minute. {"service":{"node":{"roles":\["background\_tasks","ui"\]}},"ecs":{"version":"8.11.0"},"@timestamp":"2024-09-16T17:32:25.290+01:00","message":"taskManager plugi… --- ## [Remove old index](https://discuss.elastic.co/t/remove-old-index/366694)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 0\ **Last updated:** [September 17, 2024, 6:05pm UTC](https://discuss.elastic.co/t/remove-old-index/366694 "2024-09-17T18:05:39Z")
If I am running 8.5.1 elastic version. can I remove old system index like .kibana\_task\_manager\_1... .kibana\_7.17.1\_001, 002 etc.. .kibana-event-log-7.17.1... .kibana\_task\_manager\_7.17.1\_001... .security-7 .monitor… --- ## [Kibana Watcher Alerts](https://discuss.elastic.co/t/kibana-watcher-alerts/366688)
**Author:** [@Eloy\_vasquez](https://discuss.elastic.co/u/Eloy_vasquez)\ **Replies:** 0\ **Last updated:** [September 17, 2024, 4:30pm UTC](https://discuss.elastic.co/t/kibana-watcher-alerts/366688 "2024-09-17T16:30:31Z")
Hello everyone, I am by no means an expert but i am trying my best to create a Watcher alert that checks for logs against an array list and reports when there is no logs identified. I keep getting errors with this watch… --- ## [Filebeats--Multiline pattern not working for Java GC output log, Need help](https://discuss.elastic.co/t/filebeats-multiline-pattern-not-working-for-java-gc-output-log-need-help/366680)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 2\ **Last updated:** [September 17, 2024, 4:19pm UTC](https://discuss.elastic.co/t/filebeats-multiline-pattern-not-working-for-java-gc-output-log-need-help/366680 "2024-09-17T16:19:56Z")
Hello, I have the below logfile which outputs from jvm GC verbose. Need to get individual GC's into different json messages. Like all GC(0) into 1 message dn all GC(1) into other message etc and send to logstash. Tryin… --- ## [Comparision of to server data](https://discuss.elastic.co/t/comparision-of-to-server-data/366684)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 0\ **Last updated:** [September 17, 2024, 3:43pm UTC](https://discuss.elastic.co/t/comparision-of-to-server-data/366684 "2024-09-17T15:43:32Z")
Hi All, I have to create a dashboard with two "swim-lanes". The left swimlane should contain the charts from the reference server, while the othe lane should contain the similar charts from the "server to compare". Bot… --- ## [Fleet with kubernetes integration ignore ssl.validation\_mode on kubelet](https://discuss.elastic.co/t/fleet-with-kubernetes-integration-ignore-ssl-validation-mode-on-kubelet/366682)
**Author:** [@julien\_4158](https://discuss.elastic.co/u/julien_4158)\ **Replies:** 0\ **Last updated:** [September 17, 2024, 2:03pm UTC](https://discuss.elastic.co/t/fleet-with-kubernetes-integration-ignore-ssl-validation-mode-on-kubelet/366682 "2024-09-17T14:03:46Z")
Hi, I have an issue with agents managed by fleets (version 8.15.1) Fleet policy has kubernetes integration (v1.67.0), on kubelet configurations, SSL Verification Mode is none. But after validation, if I check poilcy, … --- ## [Account privilege to access Kibana](https://discuss.elastic.co/t/account-privilege-to-access-kibana/366641)
**Author:** [@Fernando\_Oliveira](https://discuss.elastic.co/u/Fernando_Oliveira)\ **Replies:** 2\ **Last updated:** [September 17, 2024, 1:56pm UTC](https://discuss.elastic.co/t/account-privilege-to-access-kibana/366641 "2024-09-17T13:56:18Z")
Hello. I am using version 8.4.13 of Elastic and Kibana. I currently access Kibana using the Elastic account. Is it possible to create/use another credential to access Kibana that only has access to view the dashboards… --- ## [Math filter plugin](https://discuss.elastic.co/t/math-filter-plugin/366676)
**Author:** [@Pavlo\_Pylypiv](https://discuss.elastic.co/u/Pavlo_Pylypiv)\ **Replies:** 1\ **Last updated:** [September 17, 2024, 1:38pm UTC](https://discuss.elastic.co/t/math-filter-plugin/366676 "2024-09-17T13:38:29Z")
Hello! I was searching for ability to perform arithmetic operations in logstash, found old topic about it - Arithmetic Operations in logstash - where where the math plugin was mentioned, but I haven't found any documenta… --- ## [Fleet Server is not healthy](https://discuss.elastic.co/t/fleet-server-is-not-healthy/365992)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 2\ **Last updated:** [September 17, 2024, 1:15pm UTC](https://discuss.elastic.co/t/fleet-server-is-not-healthy/365992 "2024-09-17T13:15:10Z")
Hi Team, We have 2 fleet servers running in our cluster, and one of the fleet nodes is flapping between healthy and down, we did check all the logs but could not find any error messages(all are mostly debug logs), also … --- ## [Logstash installation paused in ubuntu server](https://discuss.elastic.co/t/logstash-installation-paused-in-ubuntu-server/366671)
**Author:** [@Raquel\_N\_Souza](https://discuss.elastic.co/u/Raquel_N_Souza)\ **Replies:** 2\ **Last updated:** [September 17, 2024, 12:37pm UTC](https://discuss.elastic.co/t/logstash-installation-paused-in-ubuntu-server/366671 "2024-09-17T12:37:10Z")
Hello, I'm installing logstash on the Ubuntu server, but when I get to this point, the terminal simply stops and I don't know what to do, could anyone help me? the command I'm using: sudo bin/logstash -f /etc/logstas… --- ## [Transforms Movement If Node Goes Down](https://discuss.elastic.co/t/transforms-movement-if-node-goes-down/365974)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [September 17, 2024, 12:31pm UTC](https://discuss.elastic.co/t/transforms-movement-if-node-goes-down/365974 "2024-09-17T12:31:33Z")
Hi Team, I have a small query regarding transform, if the node running a transform goes down, will it get moved to another node that has the transform role assigned. I am using ELK stack version 8.13.4. --- ## [Hit.id() nullable in newer java libs?](https://discuss.elastic.co/t/hit-id-nullable-in-newer-java-libs/366635)
**Author:** [@MChambers](https://discuss.elastic.co/u/MChambers)\ **Replies:** 2\ **Last updated:** [September 17, 2024, 11:16am UTC](https://discuss.elastic.co/t/hit-id-nullable-in-newer-java-libs/366635 "2024-09-17T11:16:26Z")
Updating to 8.15.1 form 8.12.1 and I've noticed the Hit class is id field is now nullable? Why? Is it possible to have docs without and ID? How does that even work? --- ## [Enable tls logstash](https://discuss.elastic.co/t/enable-tls-logstash/366665)
**Author:** [@devops\_training](https://discuss.elastic.co/u/devops_training)\ **Replies:** 0\ **Last updated:** [September 17, 2024, 10:27am UTC](https://discuss.elastic.co/t/enable-tls-logstash/366665 "2024-09-17T10:27:23Z")
if \[type\] == "traffic" { elasticsearch { ecs\_compatibility =\> disabled hosts =\> \["https://\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*:443"\] index =\> "${NODE\_ROLE}-traffic-%{+YYYY.MM.dd}" ssl =\> true… --- ## [My elastic cloud deployment is not replicating the indices after it got filled up 100%](https://discuss.elastic.co/t/my-elastic-cloud-deployment-is-not-replicating-the-indices-after-it-got-filled-up-100/366659)
**Author:** [@surya\_dadi\_dhamarake](https://discuss.elastic.co/u/surya_dadi_dhamarake)\ **Replies:** 0\ **Last updated:** [September 17, 2024, 9:30am UTC](https://discuss.elastic.co/t/my-elastic-cloud-deployment-is-not-replicating-the-indices-after-it-got-filled-up-100/366659 "2024-09-17T09:30:06Z")
Hi Team, I recently upgraded the elastic cloud deployment to 8.15 version. After I made that all the new templates are unlinked with the lifecycle policy and data was keep on growing in the replica node. since it reache… --- ## [How do I center a "rect"?](https://discuss.elastic.co/t/how-do-i-center-a-rect/366655)
**Author:** [@cjessing](https://discuss.elastic.co/u/cjessing)\ **Replies:** 0\ **Last updated:** [September 17, 2024, 7:24am UTC](https://discuss.elastic.co/t/how-do-i-center-a-rect/366655 "2024-09-17T07:24:55Z")
I have this snippet rendering a circle: { "mark": { "type": "circle", "size": 200, "fillOpacity": 0.7, "stroke": "white", "strokeWidth": 1, … --- ## [Synonyms API: Synonyms set not updating](https://discuss.elastic.co/t/synonyms-api-synonyms-set-not-updating/366647)
**Author:** [@SoleusRex](https://discuss.elastic.co/u/SoleusRex)\ **Replies:** 2\ **Last updated:** [September 17, 2024, 7:36am UTC](https://discuss.elastic.co/t/synonyms-api-synonyms-set-not-updating/366647 "2024-09-17T07:36:38Z")
I've been trying to use the synonyms API, by way of a short curl script, to add to our synonyms set in Elastic Cloud. One thing I've found is that, when I go to the Dev Tools console to verify the updates, they don't see… --- ## [Cluster.initial\_master\_nodes setting needs more info and future of this setting](https://discuss.elastic.co/t/cluster-initial-master-nodes-setting-needs-more-info-and-future-of-this-setting/366616)
**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\ **Replies:** 3\ **Last updated:** [September 17, 2024, 7:26am UTC](https://discuss.elastic.co/t/cluster-initial-master-nodes-setting-needs-more-info-and-future-of-this-setting/366616 "2024-09-17T07:26:20Z")
I followed - Bootstrapping a cluster | Elasticsearch Guide \[8.15\] | Elastic Below are my questions and suggestions: 1). I was asked to remove this setting once cluster is up even from data or master nodes. Now if I n… --- ## [Suppressing Elasticsearch 8 deprecation warnings](https://discuss.elastic.co/t/suppressing-elasticsearch-8-deprecation-warnings/366485)
**Author:** [@s0r1n](https://discuss.elastic.co/u/s0r1n)\ **Replies:** 1\ **Last updated:** [September 17, 2024, 6:35am UTC](https://discuss.elastic.co/t/suppressing-elasticsearch-8-deprecation-warnings/366485 "2024-09-17T06:35:19Z")
In Elasticsearch 7.17 is possible to suppress the deprecation warnings by configuring logger.deprecation.level = off in the /usr/share/elasticsearch/config/log4j2.properties file, but in Elasticsearch 8.15 with the same … --- ## [ELK stack on a standalone machine?](https://discuss.elastic.co/t/elk-stack-on-a-standalone-machine/366603)
**Author:** [@karankamat\_21](https://discuss.elastic.co/u/karankamat_21)\ **Replies:** 1\ **Last updated:** [September 17, 2024, 4:55am UTC](https://discuss.elastic.co/t/elk-stack-on-a-standalone-machine/366603 "2024-09-17T04:55:02Z")
Hello, Is it a good practice to run ELK stack on a standalone machine? My concerns: The search dataset I'm trying to load is huge Minimum requirement to run Elastic Search, Logstash, Kibana, Elastic Agent Suggestion… --- ## [ES, KIBANA AND SNAPSHOT cluster with two machines (nodes) - ES version 8.15](https://discuss.elastic.co/t/es-kibana-and-snapshot-cluster-with-two-machines-nodes-es-version-8-15/366559)
**Author:** [@Alexander\_Santos](https://discuss.elastic.co/u/Alexander_Santos)\ **Replies:** 1\ **Last updated:** [September 16, 2024, 4:52pm UTC](https://discuss.elastic.co/t/es-kibana-and-snapshot-cluster-with-two-machines-nodes-es-version-8-15/366559 "2024-09-16T16:52:51Z")
Hi, i have a cluster with two nodes. machine one - master - roles - "master", "data", "ml", "remote\_cluster\_client" machine two - second - data - roles - "data" machine tree - kibana - snapshot - this machine don't ha… --- ## [Hostname/IP does not match certificate’s altnames](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificate-s-altnames/366636)
**Author:** [@hassan\_developer](https://discuss.elastic.co/u/hassan_developer)\ **Replies:** 0\ **Last updated:** [September 16, 2024, 4:33pm UTC](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificate-s-altnames/366636 "2024-09-16T16:33:33Z")
Hi everyone I a stuck on kibana issue for the last 4 days . Read thru all resolutions however I am still stuck. Installed ELK on AWS instance Elasticsearch working fine seeing this - However stuck on issue with kiba… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=167) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=169)