# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=169 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 170 --- ## [The count of all nested objects and limit](https://discuss.elastic.co/t/the-count-of-all-nested-objects-and-limit/366634)
**Author:** [@Lei\_Yang](https://discuss.elastic.co/u/Lei_Yang)\ **Replies:** 0\ **Last updated:** [September 16, 2024, 4:25pm UTC](https://discuss.elastic.co/t/the-count-of-all-nested-objects-and-limit/366634 "2024-09-16T16:25:28Z")
Hi, I'm using nested objects, there are lot of nested objects inside a nested object, please view an example as following: 'transactions' =\> \[ 'type' =\> 'nested', 'properties' =\> \[ 'id' =\> \[ 'type' =\> 'keyword', \], … --- ## [Logstash plugin azure\_event\_hubs: undefined method \`getHostContext'](https://discuss.elastic.co/t/logstash-plugin-azure-event-hubs-undefined-method-gethostcontext/366500)
**Author:** [@Anca\_Linca](https://discuss.elastic.co/u/Anca_Linca)\ **Replies:** 1\ **Last updated:** [September 16, 2024, 4:10pm UTC](https://discuss.elastic.co/t/logstash-plugin-azure-event-hubs-undefined-method-gethostcontext/366500 "2024-09-16T16:10:28Z")
Logstash version: 8.15.1 OS: Amazon Linux 2 Steps to reproduce: rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch added repo in /etc/yum.repos.d/logstash.repo \[logstash-8.x\] name=Elastic repository for… --- ## [Impact of not upgrading to 7.17 first](https://discuss.elastic.co/t/impact-of-not-upgrading-to-7-17-first/366630)
**Author:** [@mang0wifi](https://discuss.elastic.co/u/mang0wifi)\ **Replies:** 0\ **Last updated:** [September 16, 2024, 3:21pm UTC](https://discuss.elastic.co/t/impact-of-not-upgrading-to-7-17-first/366630 "2024-09-16T15:21:33Z")
Please can anyone explain the impact of not upgrading to 7.17 for auditbeat and winlogbeat? I am trying to troubleshoot an ELK stack and the previous team have upgraded from 7.10 straight to 8.12 (even though all the do… --- ## [Elasticsearch huge amount of duplicate with logstash](https://discuss.elastic.co/t/elasticsearch-huge-amount-of-duplicate-with-logstash/366628)
**Author:** [@AVMOps](https://discuss.elastic.co/u/AVMOps)\ **Replies:** 0\ **Last updated:** [September 16, 2024, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-huge-amount-of-duplicate-with-logstash/366628 "2024-09-16T14:55:06Z")
Hello, I'm facing a duplicate data issue with Elasticsearch (3 nodes v8.5.2 - green state), coupled with Logstash (1 node v 8.5.2). So basically we have multiple apps servers sending logs with NLog to Logstash on port … --- ## [Change Kibana.yml settings from command line](https://discuss.elastic.co/t/change-kibana-yml-settings-from-command-line/366623)
**Author:** [@bnm908](https://discuss.elastic.co/u/bnm908)\ **Replies:** 0\ **Last updated:** [September 16, 2024, 2:28pm UTC](https://discuss.elastic.co/t/change-kibana-yml-settings-from-command-line/366623 "2024-09-16T14:28:59Z")
Hi, I just started learning Elastic and I was wondering how I change a specific .yml setting for kibana in the terminal? For example, let's say I wanted to change the server.port so I tried the following command below. s… --- ## [About ILM policy](https://discuss.elastic.co/t/about-ilm-policy/366243)
**Author:** [@Sandeep\_Mishra](https://discuss.elastic.co/u/Sandeep_Mishra)\ **Replies:** 6\ **Last updated:** [September 16, 2024, 2:07pm UTC](https://discuss.elastic.co/t/about-ilm-policy/366243 "2024-09-16T14:07:05Z")
I have a client requirement to store the 2 years of data in my production environment. So How many days of data I need to keep in Hot,Warm,Cold and Delete phase. Please explain briefly. --- ## [Unable to get the updated value of certain columns in logstash 8.6.1 version](https://discuss.elastic.co/t/unable-to-get-the-updated-value-of-certain-columns-in-logstash-8-6-1-version/366539)
**Author:** [@mj22manish](https://discuss.elastic.co/u/mj22manish)\ **Replies:** 1\ **Last updated:** [September 16, 2024, 1:41pm UTC](https://discuss.elastic.co/t/unable-to-get-the-updated-value-of-certain-columns-in-logstash-8-6-1-version/366539 "2024-09-16T13:41:16Z")
Why is the below query not getting the updated value of some columns even after there is an updated value for couple of columns ? Here is my logstash pipeline. input { jdbc { jdbc\_driver\_library =\> "mysql-connecto… --- ## [New user created with API has admin role not recognized](https://discuss.elastic.co/t/new-user-created-with-api-has-admin-role-not-recognized/366551)
**Author:** [@ismael\_mv](https://discuss.elastic.co/u/ismael_mv)\ **Replies:** 6\ **Last updated:** [September 16, 2024, 1:16pm UTC](https://discuss.elastic.co/t/new-user-created-with-api-has-admin-role-not-recognized/366551 "2024-09-16T13:16:47Z")
Hi, I'm trying to create a user for Kibana (elastic is reserved so I can't use it). I had executed these API call to do so, but admin role seems not beeing recognized. Do you have any clue ? (user and password are temp… --- ## [Filebeat 8.15.1 connection error when writing monitoring data](https://discuss.elastic.co/t/filebeat-8-15-1-connection-error-when-writing-monitoring-data/366188)
**Author:** [@memir](https://discuss.elastic.co/u/memir)\ **Replies:** 3\ **Last updated:** [September 16, 2024, 12:35pm UTC](https://discuss.elastic.co/t/filebeat-8-15-1-connection-error-when-writing-monitoring-data/366188 "2024-09-16T12:35:29Z")
Hello everyone! Yesterday, on a test system, we have installed the Elastic Stack at version 8.15.1. After the procedure was concluded, we saw the following error in the filebeat logs and in particular we saw that no mo… --- ## [How to search for text within text?](https://discuss.elastic.co/t/how-to-search-for-text-within-text/366576)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 18\ **Last updated:** [September 16, 2024, 7:39am UTC](https://discuss.elastic.co/t/how-to-search-for-text-within-text/366576 "2024-09-16T07:39:41Z")
Hi I have an index in which there is data, including the email, and I want to search in this field (email) for specific data, for example mary.smith@sakilacustomer.org I want to look for fields that contain smith from… --- ## [How to parse fields that contain commas for a JSON Formatted response?](https://discuss.elastic.co/t/how-to-parse-fields-that-contain-commas-for-a-json-formatted-response/366593)
**Author:** [@bradleysb](https://discuss.elastic.co/u/bradleysb)\ **Replies:** 2\ **Last updated:** [September 16, 2024, 7:00am UTC](https://discuss.elastic.co/t/how-to-parse-fields-that-contain-commas-for-a-json-formatted-response/366593 "2024-09-16T07:00:41Z")
Hi community, I'm having somewhat of a hard time trying to correctly parse Json formatted data from an API call I'm doing using the Custom API integration within the Kibana UI. Example of my data im trying to parse in … --- ## [Query\_string phrase search with regex](https://discuss.elastic.co/t/query-string-phrase-search-with-regex/366604)
**Author:** [@sonofmun](https://discuss.elastic.co/u/sonofmun)\ **Replies:** 0\ **Last updated:** [September 16, 2024, 6:58am UTC](https://discuss.elastic.co/t/query-string-phrase-search-with-regex/366604 "2024-09-16T06:58:12Z")
I am trying to search for a multi-word phrase using regular expressions. I would prefer to use the FVH because the unified highlighter tends to break highlighting chunks between the words within a phrase. So I would pref… --- ## [Need to give read access .fleet-artifacts system index to non admin user(Developer Role)](https://discuss.elastic.co/t/need-to-give-read-access-fleet-artifacts-system-index-to-non-admin-user-developer-role/366082)
**Author:** [@SachinJoshi](https://discuss.elastic.co/u/SachinJoshi)\ **Replies:** 17\ **Last updated:** [September 16, 2024, 4:07am UTC](https://discuss.elastic.co/t/need-to-give-read-access-fleet-artifacts-system-index-to-non-admin-user-developer-role/366082 "2024-09-16T04:07:00Z")
I want to give read access to .fleet-artifacts index to non admin users, these users having developer role. I have given the permission but i am getting following error when i try to access via api. "type": "security\_ex… --- ## [Logstash filter - match line pattern](https://discuss.elastic.co/t/logstash-filter-match-line-pattern/366598)
**Author:** [@Mark\_V](https://discuss.elastic.co/u/Mark_V)\ **Replies:** 0\ **Last updated:** [September 16, 2024, 3:56am UTC](https://discuss.elastic.co/t/logstash-filter-match-line-pattern/366598 "2024-09-16T03:56:21Z")
Hi, i have an input that is sending data in two different formats. format 1 16-Sep-2024 03:21:53.421 INFO \[pool-13-thread-18\] c.r.s.f.p.PropertyFacadeImpl \[PropertyFacadeImpl.java:209\] Getting PropertyList for client … --- ## ["How to Create Index and Search with Azerbaijani Character Normalization in Elasticsearch?"](https://discuss.elastic.co/t/how-to-create-index-and-search-with-azerbaijani-character-normalization-in-elasticsearch/366594)
**Author:** [@karim\_mirzaguliyev](https://discuss.elastic.co/u/karim_mirzaguliyev)\ **Replies:** 0\ **Last updated:** [September 15, 2024, 9:17pm UTC](https://discuss.elastic.co/t/how-to-create-index-and-search-with-azerbaijani-character-normalization-in-elasticsearch/366594 "2024-09-15T21:17:57Z")
Hello Elasticsearch community, I am working on an Elasticsearch implementation to support searches in Azerbaijani, where users can input transliterated versions of words (e.g., "sixmemmedov") and still match documents c… --- ## [Kibana dev wont startup](https://discuss.elastic.co/t/kibana-dev-wont-startup/366488)
**Author:** [@OAJ](https://discuss.elastic.co/u/OAJ)\ **Replies:** 2\ **Last updated:** [September 15, 2024, 5:15pm UTC](https://discuss.elastic.co/t/kibana-dev-wont-startup/366488 "2024-09-15T17:15:33Z")
Hi all, So after running yarn build for my custom plugin. Only localhost:9200 works. But localhost:5601 wont startup for kibana dev --- ## [Base64 in WrapperBuilder. co.elastic.clients](https://discuss.elastic.co/t/base64-in-wrapperbuilder-co-elastic-clients/365930)
**Author:** [@S\_R](https://discuss.elastic.co/u/S_R)\ **Replies:** 2\ **Last updated:** [September 14, 2024, 11:38am UTC](https://discuss.elastic.co/t/base64-in-wrapperbuilder-co-elastic-clients/365930 "2024-09-14T11:38:22Z")
Hi Community, I encountered strange behavior with a new Elasticsearch Java client. Before, I used org.elasticsearch:elasticsearch:7:8:1 WrapperQueryBuilder wrapperQueryBuilder = new WrapperQueryBuilder("string") to g… --- ## [Error in fleet-server, kibana, elastic search](https://discuss.elastic.co/t/error-in-fleet-server-kibana-elastic-search/366362)
**Author:** [@soularius](https://discuss.elastic.co/u/soularius)\ **Replies:** 13\ **Last updated:** [September 14, 2024, 7:49am UTC](https://discuss.elastic.co/t/error-in-fleet-server-kibana-elastic-search/366362 "2024-09-14T07:49:40Z")
Issue when trying to connect Fleet Server with Elasticsearch in Docker I am setting up an Elastic Stack environment in Docker, including containers for Elasticsearch, Kibana, and Elastic Agent with Fleet Server enabled.… --- ## [Logstash - Parsing Error](https://discuss.elastic.co/t/logstash-parsing-error/366564)
**Author:** [@slarosa89](https://discuss.elastic.co/u/slarosa89)\ **Replies:** 0\ **Last updated:** [September 14, 2024, 1:17am UTC](https://discuss.elastic.co/t/logstash-parsing-error/366564 "2024-09-14T01:17:20Z")
Hello, I am working on parsing manually imported office 365 audit logs for times when exporting a CSV manually (versus configuring the ELK integration) is necessarry. There is one column of the CSV called AuditData tha… --- ## [Logstash configuration parsing error](https://discuss.elastic.co/t/logstash-configuration-parsing-error/366543)
**Author:** [@temp\_data](https://discuss.elastic.co/u/temp_data)\ **Replies:** 4\ **Last updated:** [September 13, 2024, 5:15pm UTC](https://discuss.elastic.co/t/logstash-configuration-parsing-error/366543 "2024-09-13T17:15:52Z")
Hi, I'm new with Logstash and getting the error below, I think it's not parsing the json properly, does anyone see the problem in my Logstash config . test1.json \[ { "upsert": { "reference": "https://www.a… --- ## [SNMP output and ES|QL](https://discuss.elastic.co/t/snmp-output-and-es-ql/364546)
**Author:** [@Gaston\_Beltramelli](https://discuss.elastic.co/u/Gaston_Beltramelli)\ **Replies:** 3\ **Last updated:** [September 13, 2024, 6:34pm UTC](https://discuss.elastic.co/t/snmp-output-and-es-ql/364546 "2024-09-13T18:34:16Z")
Hello community, i want to know if any of you have knowledge of ES|QL Im trying to do some viwes for a dashboard and i think this new feature can help but i was unable to do so. this is an example of the data but a… --- ## [Duplicate fields with different names](https://discuss.elastic.co/t/duplicate-fields-with-different-names/366504)
**Author:** [@FF\_E4](https://discuss.elastic.co/u/FF_E4)\ **Replies:** 3\ **Last updated:** [September 13, 2024, 5:58pm UTC](https://discuss.elastic.co/t/duplicate-fields-with-different-names/366504 "2024-09-13T17:58:12Z")
I was working on my filebeat indexes in a local install of Elastic stack 7.17. While trying to sovle a problem, I added some aliases to these indexes, and then regretted it, so deleted the aliases. At some point the da… --- ## [Create a Boxplot with Elastic Index](https://discuss.elastic.co/t/create-a-boxplot-with-elastic-index/366344)
**Author:** [@brettmwerner](https://discuss.elastic.co/u/brettmwerner)\ **Replies:** 2\ **Last updated:** [September 13, 2024, 4:29pm UTC](https://discuss.elastic.co/t/create-a-boxplot-with-elastic-index/366344 "2024-09-13T16:29:26Z")
I'm trying to use Vega to create a boxplot with my elastic index data. My Vega code is here. { "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "height": 400, "width": 100 "title": "Bootstrapped Mo… --- ## [Restore Snapshot from Deployment-A to Deployment-B](https://discuss.elastic.co/t/restore-snapshot-from-deployment-a-to-deployment-b/362044)
**Author:** [@ryans](https://discuss.elastic.co/u/ryans)\ **Replies:** 7\ **Last updated:** [September 13, 2024, 3:24pm UTC](https://discuss.elastic.co/t/restore-snapshot-from-deployment-a-to-deployment-b/362044 "2024-09-13T15:24:44Z")
Hi there. In Elastic Cloud, I'm trying to do the following: From my local server (I want to automate it): issue a curl call of the Elastic API that tells Deployment-A to create a snapshot then issue a curl call of th… --- ## [Vega visualization sankey examples](https://discuss.elastic.co/t/vega-visualization-sankey-examples/365281)
**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\ **Replies:** 1\ **Last updated:** [September 13, 2024, 3:19pm UTC](https://discuss.elastic.co/t/vega-visualization-sankey-examples/365281 "2024-09-13T15:19:41Z")
We have added to the elastiflow\_for\_elasticsearch repository some sankey diagram examples based on Kibana's Vega visualization. You may find these a useful starting point for creating sankey diagrams for your own data. I… --- ## [Issues encountered for zip files](https://discuss.elastic.co/t/issues-encountered-for-zip-files/365071)
**Author:** [@saifstech26](https://discuss.elastic.co/u/saifstech26)\ **Replies:** 2\ **Last updated:** [September 13, 2024, 2:04pm UTC](https://discuss.elastic.co/t/issues-encountered-for-zip-files/365071 "2024-09-13T14:04:03Z")
Hi @dadoonet, I have come up with an issue of zip files. My config is pretty straight forward. --- name: "test" fs: url: "\" update\_rate: "15h" excludes: - "\*/~\*" - "\*.zip/\*.html" … --- ## [\_geo\_distance sort always returning Infinity](https://discuss.elastic.co/t/geo-distance-sort-always-returning-infinity/366523)
**Author:** [@sircameron](https://discuss.elastic.co/u/sircameron)\ **Replies:** 5\ **Last updated:** [September 13, 2024, 2:00pm UTC](https://discuss.elastic.co/t/geo-distance-sort-always-returning-infinity/366523 "2024-09-13T14:00:31Z")
I have an index: { index: 'discoveries', mappings: { properties: { id: { type: 'integer' }, description: { type: 'text' }, location: { type: 'geo\_point' }, }, … --- ## [Ruby event.cancel causing pipeline termination post processing 1000 events](https://discuss.elastic.co/t/ruby-event-cancel-causing-pipeline-termination-post-processing-1000-events/366540)
**Author:** [@vvavad](https://discuss.elastic.co/u/vvavad)\ **Replies:** 0\ **Last updated:** [September 13, 2024, 1:43pm UTC](https://discuss.elastic.co/t/ruby-event-cancel-causing-pipeline-termination-post-processing-1000-events/366540 "2024-09-13T13:43:27Z")
I am using logstash to read from an Elasticsearch index. I have to write custom correlation login in filter ruby code, which accumulates 100 records, does some processing and then goes for next records. For unknown rea… --- ## [Ignore stopwords inside double quotes](https://discuss.elastic.co/t/ignore-stopwords-inside-double-quotes/366496)
**Author:** [@ryans](https://discuss.elastic.co/u/ryans)\ **Replies:** 3\ **Last updated:** [September 13, 2024, 1:41pm UTC](https://discuss.elastic.co/t/ignore-stopwords-inside-double-quotes/366496 "2024-09-13T13:41:09Z")
I am using the standard stopwords file for my index. But I would like to NOT remove stopwords when they are within double quotes, since that is exactly what the user is searching for. For example, if someone searches "… --- ## [Logstash getting stopped with error asNo space left on device - /usr/share/logstash/data/plugins/inputs/google\_cloud\_storage/d](https://discuss.elastic.co/t/logstash-getting-stopped-with-error-asno-space-left-on-device-usr-share-logstash-data-plugins-inputs-google-cloud-storage-d/366453)
**Author:** [@Deepa\_Karthika](https://discuss.elastic.co/u/Deepa_Karthika)\ **Replies:** 3\ **Last updated:** [September 13, 2024, 12:46pm UTC](https://discuss.elastic.co/t/logstash-getting-stopped-with-error-asno-space-left-on-device-usr-share-logstash-data-plugins-inputs-google-cloud-storage-d/366453 "2024-09-13T12:46:36Z")
Hi My elasticsearch taking input from google\_cloud\_storage and indexing to Elasticsearch index stops consistently with below error \[2024-09-12T07:09:16,306\]\[ERROR\]\[logstash.javapipeline \] A plugin had an unrecover… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=168) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=170)