# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=171 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 172 --- ## [Running Separate Instance under one elasticsearch](https://discuss.elastic.co/t/running-separate-instance-under-one-elasticsearch/366337)
**Author:** [@Raj\_Badhiwala](https://discuss.elastic.co/u/Raj_Badhiwala)\ **Replies:** 1\ **Last updated:** [September 11, 2024, 9:19pm UTC](https://discuss.elastic.co/t/running-separate-instance-under-one-elasticsearch/366337 "2024-09-11T21:19:49Z")
I have create ELK stack VM for my students and everything is working file except one thing. I sent logs from my VM through logstash in elasticsearch for analysis, created index in it. But if another student will do the s… --- ## [How to integrate cyble threat intelligence with ELK?](https://discuss.elastic.co/t/how-to-integrate-cyble-threat-intelligence-with-elk/366368)
**Author:** [@Rohit\_pol](https://discuss.elastic.co/u/Rohit_pol)\ **Replies:** 1\ **Last updated:** [September 11, 2024, 7:53pm UTC](https://discuss.elastic.co/t/how-to-integrate-cyble-threat-intelligence-with-elk/366368 "2024-09-11T19:53:06Z")
I am try to integrate cyble with ELK but there is no default integration present in kibana so how to integrate cyble with kibana? --- ## [ElasticSearch upgrade 7.17.23 -\> 8.15.0 (Upgrade Assistant)](https://discuss.elastic.co/t/elasticsearch-upgrade-7-17-23-8-15-0-upgrade-assistant/366430)
**Author:** [@GeiserX](https://discuss.elastic.co/u/GeiserX)\ **Replies:** 1\ **Last updated:** [September 11, 2024, 6:54pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-7-17-23-8-15-0-upgrade-assistant/366430 "2024-09-11T18:54:40Z")
Hi! I recently managed to get a 3-node ES cluster updated from 7.17.23 to 8.15.0 However, there are some search, transient errors after the upgrade. I followed all the upgrade guide, and checked for deprecations but the… --- ## [How to resolve "Http client did not trust this server’s certificate"](https://discuss.elastic.co/t/how-to-resolve-http-client-did-not-trust-this-server-s-certificate/365790)
**Author:** [@darius12](https://discuss.elastic.co/u/darius12)\ **Replies:** 8\ **Last updated:** [September 11, 2024, 4:13pm UTC](https://discuss.elastic.co/t/how-to-resolve-http-client-did-not-trust-this-server-s-certificate/365790 "2024-09-11T16:13:11Z")
i get this error, despite following documentation for configuring elasticsearch on windows for HTTPS. I did the following steps: STEP 1. Run CMD.EXE as ADMIN, Navigate to Elastic /BIN folder elasticsearch-certutil ca … --- ## [Elasticsearch 'xpack.security.transport.ssl' related error after upgrade to 8.x](https://discuss.elastic.co/t/elasticsearch-xpack-security-transport-ssl-related-error-after-upgrade-to-8-x/366387)
**Author:** [@kotsobot](https://discuss.elastic.co/u/kotsobot)\ **Replies:** 0\ **Last updated:** [September 11, 2024, 7:50am UTC](https://discuss.elastic.co/t/elasticsearch-xpack-security-transport-ssl-related-error-after-upgrade-to-8-x/366387 "2024-09-11T07:50:26Z")
Hi all, after upgrading elasticsearch (deployed in k8s) from 7.17.3 to 8.5, elasticsearch cannot start due to error: \[2024-09-11T07:22:27,949\]\[ERROR\]\[o.e.b.Elasticsearch \] \[a-elasticsearch-master-0\] fatal exception… --- ## [Unable to batch add lifecycle policy](https://discuss.elastic.co/t/unable-to-batch-add-lifecycle-policy/366413)
**Author:** [@Cyanat](https://discuss.elastic.co/u/Cyanat)\ **Replies:** 0\ **Last updated:** [September 11, 2024, 1:55pm UTC](https://discuss.elastic.co/t/unable-to-batch-add-lifecycle-policy/366413 "2024-09-11T13:55:42Z")
Hello, On Index management page: when selecting a single index, under "Manage Index" button, I have option to "Add a lifecycle policy" when selecting several indexes, this option isn't proposed anymore Can't see any … --- ## [Adding a custom field in alerts](https://discuss.elastic.co/t/adding-a-custom-field-in-alerts/366216)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [September 11, 2024, 1:54pm UTC](https://discuss.elastic.co/t/adding-a-custom-field-in-alerts/366216 "2024-09-11T13:54:53Z")
Hello team, I am trying to create new rule in kibana for cpu utilization is more than 80 %. I am monitoring 3 host in my community version of Kibana. When it meet threshold criteare i am creating index and data is gett… --- ## [Delete csv reports from Elasticsearch 8.15](https://discuss.elastic.co/t/delete-csv-reports-from-elasticsearch-8-15/366411)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 0\ **Last updated:** [September 11, 2024, 1:28pm UTC](https://discuss.elastic.co/t/delete-csv-reports-from-elasticsearch-8-15/366411 "2024-09-11T13:28:45Z")
Hi team, I usually delete .reporting-yyyy-mm-dd indices from curl command. After I upgrade ELK to 8.15 version, I cannot find this index. Do you have any other alternative method? Thanks --- ## [Logstash grok pattern not \_grokparsefailure](https://discuss.elastic.co/t/logstash-grok-pattern-not-grokparsefailure/366355)
**Author:** [@wmei](https://discuss.elastic.co/u/wmei)\ **Replies:** 3\ **Last updated:** [September 11, 2024, 1:18pm UTC](https://discuss.elastic.co/t/logstash-grok-pattern-not-grokparsefailure/366355 "2024-09-11T13:18:49Z")
Hi. I have a log that I am trying to parse with grok. I tested it on grokconstructor.appspot.com and it groks like i want but when I use the same snippet in my logstash grok it fails. log: I 2024-09-10T14:38:33,45… --- ## [Elastic Defend integration failing on eck-agent helm chart pods](https://discuss.elastic.co/t/elastic-defend-integration-failing-on-eck-agent-helm-chart-pods/366264)
**Author:** [@cmarkulin](https://discuss.elastic.co/u/cmarkulin)\ **Replies:** 2\ **Last updated:** [September 11, 2024, 1:11pm UTC](https://discuss.elastic.co/t/elastic-defend-integration-failing-on-eck-agent-helm-chart-pods/366264 "2024-09-11T13:11:43Z")
I've installed the ECK-Stack helm charts in order to use the Elastic security features. I have Elasticsearch, Kibana, Fleet, and 3 Agents installed, all on version 8.15.0. I've got my security rules working for most int… --- ## [Handle concurrency while updating different records of the same id from json file](https://discuss.elastic.co/t/handle-concurrency-while-updating-different-records-of-the-same-id-from-json-file/366318)
**Author:** [@vvavad](https://discuss.elastic.co/u/vvavad)\ **Replies:** 5\ **Last updated:** [September 11, 2024, 12:50pm UTC](https://discuss.elastic.co/t/handle-concurrency-while-updating-different-records-of-the-same-id-from-json-file/366318 "2024-09-11T12:50:55Z")
I am loading employee data from json files to elasticSearch using logstash The json file can have multiple records for an employee with different data e.g. addresses, languages etc. Each of these records can have same … --- ## [Filestream monitorization issue](https://discuss.elastic.co/t/filestream-monitorization-issue/366406)
**Author:** [@Samuel\_Ruiz\_Garcia](https://discuss.elastic.co/u/Samuel_Ruiz_Garcia)\ **Replies:** 1\ **Last updated:** [September 11, 2024, 12:33pm UTC](https://discuss.elastic.co/t/filestream-monitorization-issue/366406 "2024-09-11T12:33:43Z")
We have a monitoring on some logs of an application. This monitoring was already done since version 7.17.9 with filestream (because of the log deprecation issue). A few weeks ago we upgraded the whole cluster to version … --- ## [JWT Authentication](https://discuss.elastic.co/t/jwt-authentication/366409)
**Author:** [@lehu](https://discuss.elastic.co/u/lehu)\ **Replies:** 0\ **Last updated:** [September 11, 2024, 12:29pm UTC](https://discuss.elastic.co/t/jwt-authentication/366409 "2024-09-11T12:29:52Z")
I really want to setup JWT authentication for my Elastic Cloud instance so that one of my applications, which gets a jwt token assigned, can use that token to log data to Elastic. And I used the example from the documen… --- ## [Occasional spike in data indexing of Elasticsearch](https://discuss.elastic.co/t/occasional-spike-in-data-indexing-of-elasticsearch/366288)
**Author:** [@Priyansh\_Maheshwari](https://discuss.elastic.co/u/Priyansh_Maheshwari)\ **Replies:** 11\ **Last updated:** [September 11, 2024, 11:11am UTC](https://discuss.elastic.co/t/occasional-spike-in-data-indexing-of-elasticsearch/366288 "2024-09-11T11:11:35Z")
Hi, we are currently working with a single node ES instance, to which we connect with our application using ESJavaClient. Recently we re-indexed all our indexes after enabling search on a time based field. Post migration… --- ## [Kibana auto login](https://discuss.elastic.co/t/kibana-auto-login/366251)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 1\ **Last updated:** [September 9, 2024, 3:21pm UTC](https://discuss.elastic.co/t/kibana-auto-login/366251 "2024-09-09T15:21:59Z")
Hi OS - 22.04 Elasticsearch - 7.17.0 kibana - 7.17.23 we have enabled auto login feature with below code in kibana. xpack.security.authc.providers: anonymous.anonymous1: order: 0 credentials: username: "test" p… --- ## [Sizing and identification of the ressources](https://discuss.elastic.co/t/sizing-and-identification-of-the-ressources/366399)
**Author:** [@akabigsmokee](https://discuss.elastic.co/u/akabigsmokee)\ **Replies:** 0\ **Last updated:** [September 11, 2024, 9:30am UTC](https://discuss.elastic.co/t/sizing-and-identification-of-the-ressources/366399 "2024-09-11T09:30:11Z")
Hello community, I hope you are doing well, I'm trying to make the sizing and identify the resources to make a POC for a customer and wondering how many vm box i need and how can i identify the ressources for each box … --- ## [Retaining Logstash Keystore Password Across Upgrades Without Repeated Commands](https://discuss.elastic.co/t/retaining-logstash-keystore-password-across-upgrades-without-repeated-commands/366392)
**Author:** [@Michael\_Mathan\_S](https://discuss.elastic.co/u/Michael_Mathan_S)\ **Replies:** 0\ **Last updated:** [September 11, 2024, 8:34am UTC](https://discuss.elastic.co/t/retaining-logstash-keystore-password-across-upgrades-without-repeated-commands/366392 "2024-09-11T08:34:51Z")
Hi, my requirement is as follows: I installed Logstash on my server, and I successfully ran the commands logstash-keystore create and logstash-keystore add ES\_PWD to set the keystore password. After this, I backed up th… --- ## [Unable to create or save Data Views, even as Superuser in Elasticsearch](https://discuss.elastic.co/t/unable-to-create-or-save-data-views-even-as-superuser-in-elasticsearch/366296)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 2\ **Last updated:** [September 11, 2024, 7:13am UTC](https://discuss.elastic.co/t/unable-to-create-or-save-data-views-even-as-superuser-in-elasticsearch/366296 "2024-09-11T07:13:09Z")
Hello, I am encountering an issue where, even when using the Elastic user with the superuser role, I am unable to create or save Data Views in Elasticsearch 8.14.1. The superuser role is a default role and, as expected,… --- ## [Cancel block write, throw exception: unknown setting \[archived.index.merge.policy.auto\_merge\_enabled\]](https://discuss.elastic.co/t/cancel-block-write-throw-exception-unknown-setting-archived-index-merge-policy-auto-merge-enabled/366377)
**Author:** [@jimmy0](https://discuss.elastic.co/u/jimmy0)\ **Replies:** 0\ **Last updated:** [September 11, 2024, 7:04am UTC](https://discuss.elastic.co/t/cancel-block-write-throw-exception-unknown-setting-archived-index-merge-policy-auto-merge-enabled/366377 "2024-09-11T07:04:51Z")
I'm to clone a index, follow the steps: block write. PUT /question\_answer\_v2/\_block/write clone. POST /question\_answer\_v2/\_clone/question\_answer\_v2\_20240823 cancel block write. PUT /question\_answer\_v2/\_settings … --- ## [How to paging with elasticsearch sql](https://discuss.elastic.co/t/how-to-paging-with-elasticsearch-sql/364433)
**Author:** [@jimmy0](https://discuss.elastic.co/u/jimmy0)\ **Replies:** 2\ **Last updated:** [September 11, 2024, 6:55am UTC](https://discuss.elastic.co/t/how-to-paging-with-elasticsearch-sql/364433 "2024-09-11T06:55:39Z")
The document offers "limit", but without "offset". I'm using elasticsearch 7.10.1. --- ## [Reindex Approach with zero downtime but with minimum delay](https://discuss.elastic.co/t/reindex-approach-with-zero-downtime-but-with-minimum-delay/366005)
**Author:** [@shanay\_20](https://discuss.elastic.co/u/shanay_20)\ **Replies:** 3\ **Last updated:** [September 11, 2024, 5:38am UTC](https://discuss.elastic.co/t/reindex-approach-with-zero-downtime-but-with-minimum-delay/366005 "2024-09-11T05:38:49Z")
Hi Team, I want to reindex the multiple indexes that have a lot of data in them. To reduce CPU usage, I am using the Reindex API POST \_reindex with the parameter request\_per\_second. But during the reindexing, if some ne… --- ## [Multiple indexes not being created for multiple log files](https://discuss.elastic.co/t/multiple-indexes-not-being-created-for-multiple-log-files/358817)
**Author:** [@developer\_cloud](https://discuss.elastic.co/u/developer_cloud)\ **Replies:** 25\ **Last updated:** [September 11, 2024, 5:27am UTC](https://discuss.elastic.co/t/multiple-indexes-not-being-created-for-multiple-log-files/358817 "2024-09-11T05:27:34Z")
Hello, I've been trying to create multiple indexes for multiple log files that get created within a server. I'm quite new to filebeat so wanted to know what I might be doing wrong within the code. The use case requires … --- ## [Response time spike at fixed interval of every ~10 minutes](https://discuss.elastic.co/t/response-time-spike-at-fixed-interval-of-every-10-minutes/366300)
**Author:** [@sibasish.palo](https://discuss.elastic.co/u/sibasish.palo)\ **Replies:** 5\ **Last updated:** [September 11, 2024, 5:16am UTC](https://discuss.elastic.co/t/response-time-spike-at-fixed-interval-of-every-10-minutes/366300 "2024-09-11T05:16:09Z")
we are seeing one weird issue where the response time spike around every 10 minutes and same time the GC is getting triggered. any help or information i can share would very helpful. we are using version 8.12 Please l… --- ## [Block Mapping Updates](https://discuss.elastic.co/t/block-mapping-updates/366330)
**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\ **Replies:** 3\ **Last updated:** [September 11, 2024, 5:02am UTC](https://discuss.elastic.co/t/block-mapping-updates/366330 "2024-09-11T05:02:36Z")
Do Elasticsearch gives an option to block mapping updates for a while and re enable them afterwards. Usecase: While doing rolling upgrade, due to incoming writes I am getting mapping updates not allowed exception. So i… --- ## [How to perform filter with condition?](https://discuss.elastic.co/t/how-to-perform-filter-with-condition/366295)
**Author:** [@\_Zhang](https://discuss.elastic.co/u/_Zhang)\ **Replies:** 2\ **Last updated:** [September 11, 2024, 2:13am UTC](https://discuss.elastic.co/t/how-to-perform-filter-with-condition/366295 "2024-09-11T02:13:29Z")
In SQL: select \* from my\_index where type in ('a', 'b') and (type \<\> 'a' or value\_field = 'sth') Filter by field value\_field when type is 'a'. Using script: { "query": { "bool": { "filter": \[ … --- ## [Run Fleet server as a http service](https://discuss.elastic.co/t/run-fleet-server-as-a-http-service/366361)
**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\ **Replies:** 0\ **Last updated:** [September 10, 2024, 8:36pm UTC](https://discuss.elastic.co/t/run-fleet-server-as-a-http-service/366361 "2024-09-10T20:36:47Z")
Hello Team, We are installing fleet server in K8s cluster using yamls. We noticed fleet service by default is running as a https service in K8s cluster upon installation. Is there any way we can run Fleet server as just… --- ## [Mapping track path on local disk under docker](https://discuss.elastic.co/t/mapping-track-path-on-local-disk-under-docker/366349)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 4\ **Last updated:** [September 10, 2024, 6:51pm UTC](https://discuss.elastic.co/t/mapping-track-path-on-local-disk-under-docker/366349 "2024-09-10T18:51:32Z")
Hi I'm strangling how to change repo for track to local track. I'm trying to load rally benchmark on simply test "--track-path=/rally/.rally/nyc\_taxis" so I've mapped volume with above patch and changed path in track.j… --- ## [Elasticsearch 7.17.6 can't be started as root](https://discuss.elastic.co/t/elasticsearch-7-17-6-cant-be-started-as-root/366274)
**Author:** [@ch101495](https://discuss.elastic.co/u/ch101495)\ **Replies:** 5\ **Last updated:** [September 10, 2024, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-6-cant-be-started-as-root/366274 "2024-09-10T17:33:58Z")
Hello, I'm using RHEL 7.6 Maipo and I'm trying to start the elasticsearch service in a single node instance as root, but I'm receiving this error after i try to start the service using ./elasticsearch -d Error meesage: … --- ## [Clarification On escaping characters witch MATCHES operator in Rule Exclusions](https://discuss.elastic.co/t/clarification-on-escaping-characters-witch-matches-operator-in-rule-exclusions/366350)
**Author:** [@Jakub\_Mihalov](https://discuss.elastic.co/u/Jakub_Mihalov)\ **Replies:** 0\ **Last updated:** [September 10, 2024, 5:04pm UTC](https://discuss.elastic.co/t/clarification-on-escaping-characters-witch-matches-operator-in-rule-exclusions/366350 "2024-09-10T17:04:35Z")
Hello Elastic Community, I’m working on creating rule exclusions in Kibana using the MATCHES operator. While reviewing the official documentation, I found this explanation: ---Add and manage exceptions | Elastic Securi… --- ## [Multi Tenancy Single Sign on with Microsoft Entra](https://discuss.elastic.co/t/multi-tenancy-single-sign-on-with-microsoft-entra/366345)
**Author:** [@adamwood](https://discuss.elastic.co/u/adamwood)\ **Replies:** 0\ **Last updated:** [September 10, 2024, 4:48pm UTC](https://discuss.elastic.co/t/multi-tenancy-single-sign-on-with-microsoft-entra/366345 "2024-09-10T16:48:41Z")
HI Folks, we are using Elastic Cloud, and would like to set up Single Sign on using Microsoft Entra, with the addition of using multiple (any) Microsoft Azure Tenants. I would like to achieve this without needing to regi… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=170) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=172)