# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=174 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 175 --- ## [My groke pattern on elastic pipleline creation changes](https://discuss.elastic.co/t/my-groke-pattern-on-elastic-pipleline-creation-changes/365984)
**Author:** [@ermisma](https://discuss.elastic.co/u/ermisma)\ **Replies:** 2\ **Last updated:** [September 5, 2024, 1:56pm UTC](https://discuss.elastic.co/t/my-groke-pattern-on-elastic-pipleline-creation-changes/365984 "2024-09-05T13:56:24Z")
I am trying to create a Ingest pipeline with the below grok pattern (v 8.15.0): ".\*\\"msg\\"\\: \\"(?\\[^\\"\]+)\\"\\,.\*" sample source data as below: \[0;31mfatal: \[localhost\]: FAILED! =\> {"changed": false, "elapsed": … --- ## [Oracle Integeration with elastic-agent](https://discuss.elastic.co/t/oracle-integeration-with-elastic-agent/365384)
**Author:** [@Zaryab\_Shaikh](https://discuss.elastic.co/u/Zaryab_Shaikh)\ **Replies:** 1\ **Last updated:** [September 5, 2024, 1:40pm UTC](https://discuss.elastic.co/t/oracle-integeration-with-elastic-agent/365384 "2024-09-05T13:40:20Z")
Hello Community, I am trying to enable Oracle integration through the Fleet section. I have an Oracle EBS setup with the following configuration: OS: Red Hat Enterprise Linux OS Version: 7.6 DB: 19.11.0.0.0 EBS: R12.2… --- ## [KDL filter to exclude results with character?](https://discuss.elastic.co/t/kdl-filter-to-exclude-results-with-character/366100)
**Author:** [@randomnamegenerator](https://discuss.elastic.co/u/randomnamegenerator)\ **Replies:** 0\ **Last updated:** [September 5, 2024, 1:11pm UTC](https://discuss.elastic.co/t/kdl-filter-to-exclude-results-with-character/366100 "2024-09-05T13:11:46Z")
Hello people of the internet I am trying to create a field filter in kibana that excludes and results including the ? character After an application update we have log results for domain\\username? and domain\\username … --- ## [Index design for product with multi image and similarity search](https://discuss.elastic.co/t/index-design-for-product-with-multi-image-and-similarity-search/365976)
**Author:** [@rastin\_rastini](https://discuss.elastic.co/u/rastin_rastini)\ **Replies:** 2\ **Last updated:** [September 5, 2024, 11:49am UTC](https://discuss.elastic.co/t/index-design-for-product-with-multi-image-and-similarity-search/365976 "2024-09-05T11:49:06Z")
Hi im scrapping product pages where each product has a description and multi image. generate vector for each image. finally i want search similar images with a given image and return products similar with that image. w… --- ## [Why is the default value of \`xpack.security.http.ssl.enabled\` in ElasticSearch's Docker Image set to \`true\`?](https://discuss.elastic.co/t/why-is-the-default-value-of-xpack-security-http-ssl-enabled-in-elasticsearchs-docker-image-set-to-true/366089)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [September 5, 2024, 11:26am UTC](https://discuss.elastic.co/t/why-is-the-default-value-of-xpack-security-http-ssl-enabled-in-elasticsearchs-docker-image-set-to-true/366089 "2024-09-05T11:26:21Z")
Security settings in Elasticsearch | Elasticsearch Guide \[8.15\] | Elastic mentions that the default value of xpack.security.http.ssl.enabled is false. (Static) Used to enable or disable TLS/SSL on the HTTP networking … --- ## [Is there is a Version 8 32bit client for x86 windows 10 systems?](https://discuss.elastic.co/t/is-there-is-a-version-8-32bit-client-for-x86-windows-10-systems/366086)
**Author:** [@Joerg\_Kraemer](https://discuss.elastic.co/u/Joerg_Kraemer)\ **Replies:** 0\ **Last updated:** [September 5, 2024, 8:56am UTC](https://discuss.elastic.co/t/is-there-is-a-version-8-32bit-client-for-x86-windows-10-systems/366086 "2024-09-05T08:56:25Z")
Hello, is there is a Version 8 32bit client for x86 windows 10 systems? Or is it just not wanted that it works? We have a 8.14 Server and all x64 windows systems are conneted, but no way that I found that will get my … --- ## [Elasticsearch.Net 7.17.X unable to connect Elasticsearch 8.13.4 version](https://discuss.elastic.co/t/elasticsearch-net-7-17-x-unable-to-connect-elasticsearch-8-13-4-version/364184)
**Author:** [@sathish12](https://discuss.elastic.co/u/sathish12)\ **Replies:** 6\ **Last updated:** [September 5, 2024, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-net-7-17-x-unable-to-connect-elasticsearch-8-13-4-version/364184 "2024-09-05T07:59:23Z")
I have upgraded from elasticsearch 2.3.2 to 8.13.4. I have created a multi node cluster and I am trying to connect to elasticsearch through my .NET. I have heard that elastic.client.elasticsearch library is not providing… --- ## [Changing the status of a case when the status of an alert is change to "recovered"](https://discuss.elastic.co/t/changing-the-status-of-a-case-when-the-status-of-an-alert-is-change-to-recovered/366083)
**Author:** [@Danyal\_Danish](https://discuss.elastic.co/u/Danyal_Danish)\ **Replies:** 0\ **Last updated:** [September 5, 2024, 7:50am UTC](https://discuss.elastic.co/t/changing-the-status-of-a-case-when-the-status-of-an-alert-is-change-to-recovered/366083 "2024-09-05T07:50:16Z")
I want to update the status of my case from open to closed if the status of the corresponding alert that prompted the case opening is changed to "recovered". I'm using a webhook connector. Is there a way I can define in… --- ## [After upgrading from 7.x to 8.x, Elasticsearch cannot start](https://discuss.elastic.co/t/after-upgrading-from-7-x-to-8-x-elasticsearch-cannot-start/365842)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 5\ **Last updated:** [September 4, 2024, 8:27pm UTC](https://discuss.elastic.co/t/after-upgrading-from-7-x-to-8-x-elasticsearch-cannot-start/365842 "2024-09-04T20:27:41Z")
These are the errors in the logs: Aug 29 13:45:34 ELK-Stack.uhtasi.local systemd-entrypoint\[13266\]: Error occurred during initialization of boot layer Aug 29 13:45:34 ELK-Stack.uhtasi.local systemd-entrypoint\[13266\]: j… --- ## [Help with filter to create Latitude and Longitude fields](https://discuss.elastic.co/t/help-with-filter-to-create-latitude-and-longitude-fields/366075)
**Author:** [@Big-Edd](https://discuss.elastic.co/u/Big-Edd)\ **Replies:** 1\ **Last updated:** [September 5, 2024, 4:04am UTC](https://discuss.elastic.co/t/help-with-filter-to-create-latitude-and-longitude-fields/366075 "2024-09-05T04:04:17Z")
Hello, Can I please have some help with a filter for this sample data? { "took": 319, "timed\_out": false, "\_shards": { "total": 1, "successful": 1, "skipped": 0, "failed": 0 … --- ## [ES8.14 has 5 nodes. But master is down and reinstalled. How to join the new cluster?](https://discuss.elastic.co/t/es8-14-has-5-nodes-but-master-is-down-and-reinstalled-how-to-join-the-new-cluster/366025)
**Author:** [@hoover\_he](https://discuss.elastic.co/u/hoover_he)\ **Replies:** 1\ **Last updated:** [September 4, 2024, 11:48pm UTC](https://discuss.elastic.co/t/es8-14-has-5-nodes-but-master-is-down-and-reinstalled-how-to-join-the-new-cluster/366025 "2024-09-04T23:48:03Z")
ES8.14 has 5 nodes. But master was down and reinstalled. How to join the new cluster? ES8.14 has 5 nodes. But master\[node-04\] was down and reinstalled. The current es cluster is running well with new master\[node-05\]. I… --- ## [Add Jira Cloud issue type changes to custom dashboard](https://discuss.elastic.co/t/add-jira-cloud-issue-type-changes-to-custom-dashboard/365818)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 1\ **Last updated:** [September 4, 2024, 9:51pm UTC](https://discuss.elastic.co/t/add-jira-cloud-issue-type-changes-to-custom-dashboard/365818 "2024-09-04T21:51:48Z")
I have my self-hosted connector setup and successfully pulling from Jira Cloud. I am interested in pulling Issue Type changes to tickets to display on a KPI dashboard for my team but I'm only getting the initial creatio… --- ## [Logstash radius decoder](https://discuss.elastic.co/t/logstash-radius-decoder/366063)
**Author:** [@zenkovac](https://discuss.elastic.co/u/zenkovac)\ **Replies:** 0\ **Last updated:** [September 4, 2024, 6:25pm UTC](https://discuss.elastic.co/t/logstash-radius-decoder/366063 "2024-09-04T18:25:13Z")
hi guys, im trying to decode radius udp packets, using udp input with plain codec i just see gibberish, y found this ruby gem can anyone tell me if it would be possible to decode packets using that ruby gem? or any other… --- ## [How to generate es ssl cert for Azure application gateway?](https://discuss.elastic.co/t/how-to-generate-es-ssl-cert-for-azure-application-gateway/366029)
**Author:** [@hoover\_he](https://discuss.elastic.co/u/hoover_he)\ **Replies:** 6\ **Last updated:** [September 4, 2024, 5:03pm UTC](https://discuss.elastic.co/t/how-to-generate-es-ssl-cert-for-azure-application-gateway/366029 "2024-09-04T17:03:26Z")
Recently we installed 5 nodes as an Elasticsearch 8.14 cluster in Azure virtual machine. Then initiated one Azure application gateway as load balancer for the Elasticsearch cluster. Need to upload es cluster ssl certific… --- ## [Spingboot upgrade from 2.x to 3.1.0 which is causing app failure due to elastic search dependency](https://discuss.elastic.co/t/spingboot-upgrade-from-2-x-to-3-1-0-which-is-causing-app-failure-due-to-elastic-search-dependency/366024)
**Author:** [@Rohit\_Rawat](https://discuss.elastic.co/u/Rohit_Rawat)\ **Replies:** 1\ **Last updated:** [September 4, 2024, 4:42pm UTC](https://discuss.elastic.co/t/spingboot-upgrade-from-2-x-to-3-1-0-which-is-causing-app-failure-due-to-elastic-search-dependency/366024 "2024-09-04T16:42:29Z")
org.springframework.boot:spring-boot-starter-data-elasticsearch:jar:3.1.0:compile \[INFO\] \\- org.springframework.data:spring-data-elasticsearch:jar:5.1.0:compile (version managed from 5.1.0) \[INFO\] \\- co.elastic.… --- ## [Elastic Cluster suddenly lost node](https://discuss.elastic.co/t/elastic-cluster-suddenly-lost-node/366039)
**Author:** [@namle](https://discuss.elastic.co/u/namle)\ **Replies:** 1\ **Last updated:** [September 4, 2024, 2:12pm UTC](https://discuss.elastic.co/t/elastic-cluster-suddenly-lost-node/366039 "2024-09-04T14:12:52Z")
Hi everyone, I have a cluster with 9 nodes: 3 master nodes and 6 data nodes. Elasticsearch version: 7.10.2 Nodes are hosted on: AWS EC2 instances Master node configuration: t4g.medium (2 vCPU, 4 GB RAM) Data node co… --- ## [How to use MultiSearchResponse of MultiSearchAsync in Client Elastic search for .NET v8.10](https://discuss.elastic.co/t/how-to-use-multisearchresponse-of-multisearchasync-in-client-elastic-search-for-net-v8-10/365990)
**Author:** [@demet](https://discuss.elastic.co/u/demet)\ **Replies:** 2\ **Last updated:** [September 4, 2024, 4:21pm UTC](https://discuss.elastic.co/t/how-to-use-multisearchresponse-of-multisearchasync-in-client-elastic-search-for-net-v8-10/365990 "2024-09-04T16:21:58Z")
I am currently using the Elasticsearch client for .NET, The version I am using is 8.10 the way I query the information with “MultiSearchAsync” is as follows: Query\[\] collectionQuerys = new Query\[\] { new… --- ## [Missing data in daily aggregate compared to source and 5min aggregate](https://discuss.elastic.co/t/missing-data-in-daily-aggregate-compared-to-source-and-5min-aggregate/364468)
**Author:** [@Cobraeti](https://discuss.elastic.co/u/Cobraeti)\ **Replies:** 7\ **Last updated:** [September 3, 2024, 2:24pm UTC](https://discuss.elastic.co/t/missing-data-in-daily-aggregate-compared-to-source-and-5min-aggregate/364468 "2024-09-03T14:24:53Z")
Hello, We noticed a miss-match in some daily aggregates compared to 5min aggregates based on the same source data: As you can see on the above charts, the 1day\_agg chart shows one day with a way lower value (not 0 t… --- ## [S3-plugin logstash “Exception: Aws::S3::Errors::NotFound plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/s3-plugin-logstash-exception-aws-notfound-plugin-had-an-unrecoverable-error-will-restart-this-plugin/366045)
**Author:** [@vincentm](https://discuss.elastic.co/u/vincentm)\ **Replies:** 0\ **Last updated:** [September 4, 2024, 3:23pm UTC](https://discuss.elastic.co/t/s3-plugin-logstash-exception-aws-notfound-plugin-had-an-unrecoverable-error-will-restart-this-plugin/366045 "2024-09-04T15:23:09Z")
Hi all, i have exactly the same error than this topic : Then i want to have some information about this problem and how to resolve it. Because, even if my logstash process restart alone, the problem is that just after… --- ## [Automating Elastic Agent Policies](https://discuss.elastic.co/t/automating-elastic-agent-policies/357246)
**Author:** [@Sheperd403](https://discuss.elastic.co/u/Sheperd403)\ **Replies:** 2\ **Last updated:** [September 4, 2024, 1:39pm UTC](https://discuss.elastic.co/t/automating-elastic-agent-policies/357246 "2024-09-04T13:39:07Z")
I have been experimenting with attempting to automate the ECK elastic agent policy in fleet. Currently, my fleet server set up is this with these two policies defined: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana m… --- ## [Basic Elastic with AWS Integration](https://discuss.elastic.co/t/basic-elastic-with-aws-integration/366015)
**Author:** [@Camilo\_Rios](https://discuss.elastic.co/u/Camilo_Rios)\ **Replies:** 2\ **Last updated:** [September 4, 2024, 12:47pm UTC](https://discuss.elastic.co/t/basic-elastic-with-aws-integration/366015 "2024-09-04T12:47:35Z")
Hi everyone, I have Elastic deployed in containers, and I've been trying to integrate it with AWS services using keys to monitor AWS Health metrics, but I haven't had any success so far. My setup includes containers for… --- ## [Half\_float for dens\_vector](https://discuss.elastic.co/t/half-float-for-dens-vector/366008)
**Author:** [@Pierre\_Rathier](https://discuss.elastic.co/u/Pierre_Rathier)\ **Replies:** 1\ **Last updated:** [September 4, 2024, 12:29pm UTC](https://discuss.elastic.co/t/half-float-for-dens-vector/366008 "2024-09-04T12:29:15Z")
Hello, Reading the documentation it looks like half\_vector type is not supported for dense\_vector.element\_type. Can you confirm ? --- ## [How to disable add\_cloud\_metadata processing in elastic-agents](https://discuss.elastic.co/t/how-to-disable-add-cloud-metadata-processing-in-elastic-agents/357613)
**Author:** [@Toony](https://discuss.elastic.co/u/Toony)\ **Replies:** 3\ **Last updated:** [September 4, 2024, 11:27am UTC](https://discuss.elastic.co/t/how-to-disable-add-cloud-metadata-processing-in-elastic-agents/357613 "2024-09-04T11:27:04Z")
Hi everybody, Is there a way to disable the default processing of the add\_cloud\_metadata from the "elastic-agent.yml" configuration file ? This is very annoying as at each start of the agent it sends a lot of agent err… --- ## [Edit a default HTML / add a HTML component for all pages in Kibana](https://discuss.elastic.co/t/edit-a-default-html-add-a-html-component-for-all-pages-in-kibana/365962)
**Author:** [@Neeecu](https://discuss.elastic.co/u/Neeecu)\ **Replies:** 4\ **Last updated:** [September 4, 2024, 10:37am UTC](https://discuss.elastic.co/t/edit-a-default-html-add-a-html-component-for-all-pages-in-kibana/365962 "2024-09-04T10:37:33Z")
Hello! I was developing in Kibana and I wanted to add the following chat assistant option (GitHub - langflow-ai/langflow-embedded-chat: The Langflow Embedded Chat is a powerful web component that enables seamless commun… --- ## [{"@timestamp":"2024-09-04T06:48:11.792Z", "log.level":"ERROR", "message":"fatal exception while booting Elasticsearch", "ecs.version": "1.2.0","service.name":"ES\_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.el](https://discuss.elastic.co/t/timestamp-2024-09-04t0611-792z-log-level-error-message-fatal-exception-while-booting-elasticsearch-ecs-version-1-2-0-service-name-es-ecs-event-dataset-elasticsearch-server-process-thread-name-main-log-logger-org-el/366019)
**Author:** [@Niranjan\_Prasanth](https://discuss.elastic.co/u/Niranjan_Prasanth)\ **Replies:** 1\ **Last updated:** [September 4, 2024, 9:40am UTC](https://discuss.elastic.co/t/timestamp-2024-09-04t0611-792z-log-level-error-message-fatal-exception-while-booting-elasticsearch-ecs-version-1-2-0-service-name-es-ecs-event-dataset-elasticsearch-server-process-thread-name-main-log-logger-org-el/366019 "2024-09-04T09:40:14Z")
This category relates to the Enterprise Search set of products - App Search, Site Search and Workplace Search. If your question relates to core Elasticsearch functionality, please head over to the Elasticsearch category… --- ## [Use AWS IAM roles for service accounts (IRSA) to shedule backups in elasticsearch and store to s3](https://discuss.elastic.co/t/use-aws-iam-roles-for-service-accounts-irsa-to-shedule-backups-in-elasticsearch-and-store-to-s3/366017)
**Author:** [@sheteshruti](https://discuss.elastic.co/u/sheteshruti)\ **Replies:** 0\ **Last updated:** [September 4, 2024, 9:35am UTC](https://discuss.elastic.co/t/use-aws-iam-roles-for-service-accounts-irsa-to-shedule-backups-in-elasticsearch-and-store-to-s3/366017 "2024-09-04T09:35:40Z")
we want to schedule backup of elasticsearch indexes at regular interval and store the backup to s3 repo. For this we have configured a service account and created isra role and associated this role to the service accoun… --- ## [How to connect my api directly to kibana?](https://discuss.elastic.co/t/how-to-connect-my-api-directly-to-kibana/365971)
**Author:** [@OAJ](https://discuss.elastic.co/u/OAJ)\ **Replies:** 3\ **Last updated:** [September 4, 2024, 9:35am UTC](https://discuss.elastic.co/t/how-to-connect-my-api-directly-to-kibana/365971 "2024-09-04T09:35:21Z")
Hi, there I'm new to Kibana. I was wondering if I have an API link such as api.sampleapis.com/switch/games how can I connect it to Kibana directly so that I may use it in my dashboard. The only way I found is to upload… --- ## [Ingestion flow resource consumption limit in Filebeat and/or Logstash](https://discuss.elastic.co/t/ingestion-flow-resource-consumption-limit-in-filebeat-and-or-logstash/366013)
**Author:** [@rrodrmal](https://discuss.elastic.co/u/rrodrmal)\ **Replies:** 0\ **Last updated:** [September 4, 2024, 9:33am UTC](https://discuss.elastic.co/t/ingestion-flow-resource-consumption-limit-in-filebeat-and-or-logstash/366013 "2024-09-04T09:33:54Z")
Hello, We have an ecosystem consisting on several Filebeat services configured in several virtual machines, having every of them ingesting events either from files or from Azure EventHubs. Then those Filebeat services s… --- ## [Queue.disk not working with auditbeat](https://discuss.elastic.co/t/queue-disk-not-working-with-auditbeat/366012)
**Author:** [@Joshua\_Koch](https://discuss.elastic.co/u/Joshua_Koch)\ **Replies:** 0\ **Last updated:** [September 4, 2024, 9:14am UTC](https://discuss.elastic.co/t/queue-disk-not-working-with-auditbeat/366012 "2024-09-04T09:14:45Z")
According to these instructions, the disk queue should work with auditbeat. beats/auditbeat/current/configuring-internal-queue.html According to the documentation, the folder defined under path should be created when t… --- ## [Automatic slicing in search queries](https://discuss.elastic.co/t/automatic-slicing-in-search-queries/365658)
**Author:** [@abhadauria](https://discuss.elastic.co/u/abhadauria)\ **Replies:** 3\ **Last updated:** [September 4, 2024, 8:52am UTC](https://discuss.elastic.co/t/automatic-slicing-in-search-queries/365658 "2024-09-04T08:52:44Z")
is there a documentation for implementing automatic slicing at the search end? like we have in the re-index API documentation. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=173) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=175)