# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=175

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 176

---

## [\[AKS\] Failed to get additional AKS Cluster meta](https://discuss.elastic.co/t/aks-failed-to-get-additional-aks-cluster-meta/365932)

<div class="topic-metadata">

**Author:** [@iamp3](https://discuss.elastic.co/u/iamp3)\
**Replies:** 1\
**Last updated:** [September 4, 2024, 8:49am UTC](https://discuss.elastic.co/t/aks-failed-to-get-additional-aks-cluster-meta/365932 "2024-09-04T08:49:05Z")

</div>

After enabling kubernetes integration I got an errors on all agents: {"log.level":"warn","@timestamp":"2024-09-03T07:21:25.158Z","message":"Failed to get additional AKS Cluster meta: failed to get AKS cluster name and I…

---

## [Creating custom visualistion for Kibana](https://discuss.elastic.co/t/creating-custom-visualistion-for-kibana/365978)

<div class="topic-metadata">

**Author:** [@OAJ](https://discuss.elastic.co/u/OAJ)\
**Replies:** 1\
**Last updated:** [September 4, 2024, 8:03am UTC](https://discuss.elastic.co/t/creating-custom-visualistion-for-kibana/365978 "2024-09-04T08:03:12Z")

</div>

Hi All, I was wondering if I can create my own visuals using HTML/CSS then upload it the dashboard, is that possible because I can't find it in the docs? Thanks

---

## [RULES - how to manage scheduled execution time using API](https://discuss.elastic.co/t/rules-how-to-manage-scheduled-execution-time-using-api/365944)

<div class="topic-metadata">

**Author:** [@m-cd](https://discuss.elastic.co/u/m-cd)\
**Replies:** 0\
**Last updated:** [September 3, 2024, 11:10am UTC](https://discuss.elastic.co/t/rules-how-to-manage-scheduled-execution-time-using-api/365944 "2024-09-03T11:10:42Z")

</div>

Hi All, I'm trying to manage RULES using API endpoints. I'm using Elasticsearch version 8.14.3. I'm using Dev Console and "kbn:/api/alerting/rule" endpoint. I've different rules to set and my desired goal is to set t…

---

## [Getting gc and node disconnected from the cluster](https://discuss.elastic.co/t/getting-gc-and-node-disconnected-from-the-cluster/365997)

<div class="topic-metadata">

**Author:** [@navaneethan](https://discuss.elastic.co/u/navaneethan)\
**Replies:** 5\
**Last updated:** [September 4, 2024, 7:13am UTC](https://discuss.elastic.co/t/getting-gc-and-node-disconnected-from-the-cluster/365997 "2024-09-04T07:13:32Z")

</div>

we are getting GC like below, present in es log \[2024-09-03T22:53:06,159\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[es7-at-13\] \[gc\]\[1188424\] overhead, spent \[1.4s\] collecting in the last \[2.1s\] and we are facing situation l…

---

## [Fleet Server is not Healthy](https://discuss.elastic.co/t/fleet-server-is-not-healthy/364801)

<div class="topic-metadata">

**Author:** [@rastro](https://discuss.elastic.co/u/rastro)\
**Replies:** 5\
**Last updated:** [September 4, 2024, 3:56am UTC](https://discuss.elastic.co/t/fleet-server-is-not-healthy/364801 "2024-09-04T03:56:49Z")

</div>

This just started happening a few days ago. Neither pre-existing ("Cannot checkin in \[sic\] with fleet-server") nor new hosts ("Error: failed to enroll... 8220: connect: connection refused") can talk to fleet. Cannot c…

---

## [Search UI nested fields in disjunctive facets](https://discuss.elastic.co/t/search-ui-nested-fields-in-disjunctive-facets/365982)

<div class="topic-metadata">

**Author:** [@Samuel\_Sedivy](https://discuss.elastic.co/u/Samuel_Sedivy)\
**Replies:** 0\
**Last updated:** [September 3, 2024, 6:15pm UTC](https://discuss.elastic.co/t/search-ui-nested-fields-in-disjunctive-facets/365982 "2024-09-03T18:15:07Z")

</div>

A nested field in the disjunctiveFacets array doesn't behave the same way as a non-nested field. I have a non nested field, Race, and after checking one of the options all of the other options remain selectable which al…

---

## [Sending multiple events using a single POST with http output codec](https://discuss.elastic.co/t/sending-multiple-events-using-a-single-post-with-http-output-codec/365857)

<div class="topic-metadata">

**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\
**Replies:** 11\
**Last updated:** [September 3, 2024, 5:12pm UTC](https://discuss.elastic.co/t/sending-multiple-events-using-a-single-post-with-http-output-codec/365857 "2024-09-03T17:12:56Z")

</div>

Good Day, How do you send multiple events in a single POST using the http output codec? I can send the below events but they are sent as 2 individual POSTS and I need to send them as a single post due to restrictions o…

---

## [Elastic Search have index file and i can add it to Kibana but is said no data](https://discuss.elastic.co/t/elastic-search-have-index-file-and-i-can-add-it-to-kibana-but-is-said-no-data/365862)

<div class="topic-metadata">

**Author:** [@D\_Nang\_Kien](https://discuss.elastic.co/u/D_Nang_Kien)\
**Replies:** 8\
**Last updated:** [September 3, 2024, 2:58pm UTC](https://discuss.elastic.co/t/elastic-search-have-index-file-and-i-can-add-it-to-kibana-but-is-said-no-data/365862 "2024-09-03T14:58:07Z")

</div>

im using filebeat netflow module + Elasticsearch + kibana. I have succesfully collected netflow from my router cisco in GNS3 to filebeat and send it to Elasticsearch but when i use kibana i cant see any data.\[quote="D\_Na…

---

## [Upgrade Node.js version](https://discuss.elastic.co/t/upgrade-node-js-version/365925)

<div class="topic-metadata">

**Author:** [@Septianingrum.17](https://discuss.elastic.co/u/Septianingrum.17)\
**Replies:** 1\
**Last updated:** [September 3, 2024, 3:23pm UTC](https://discuss.elastic.co/t/upgrade-node-js-version/365925 "2024-09-03T15:23:27Z")

</div>

Dear All, I did a Vulnerability scan using Tenable and found the current node.js that must be updated to version 20.15.1. I have installed node version 20.15.1 on the kibana server and when executing node -v the version…

---

## [Fetch logs from MSSQL using logstash input plugin](https://discuss.elastic.co/t/fetch-logs-from-mssql-using-logstash-input-plugin/365807)

<div class="topic-metadata">

**Author:** [@Shivam\_Goyal](https://discuss.elastic.co/u/Shivam_Goyal)\
**Replies:** 2\
**Last updated:** [September 3, 2024, 3:19pm UTC](https://discuss.elastic.co/t/fetch-logs-from-mssql-using-logstash-input-plugin/365807 "2024-09-03T15:19:59Z")

</div>

Hello, I am using Logstash to fetch logs from MSSQL. We need to use domain account which can be used for authentication and to fetch the logs. Can anyone please help how we can use it in input plugin?

---

## [Unable to see beyond 500 traces records](https://discuss.elastic.co/t/unable-to-see-beyond-500-traces-records/364756)

<div class="topic-metadata">

**Author:** [@Harshul](https://discuss.elastic.co/u/Harshul)\
**Replies:** 10\
**Last updated:** [September 3, 2024, 2:42pm UTC](https://discuss.elastic.co/t/unable-to-see-beyond-500-traces-records/364756 "2024-09-03T14:42:41Z")

</div>

I have a node backend and I have setup Opentelemetry to export signals to Opentelemetry collector which further exports the signals (Traces, Metrics and Logs) to elastic. During the performance testing, an API was execut…

---

## [Pipeline aggregations: Sorting/Filtering after bucket\_script execution](https://discuss.elastic.co/t/pipeline-aggregations-sorting-filtering-after-bucket-script-execution/365786)

<div class="topic-metadata">

**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Replies:** 1\
**Last updated:** [September 3, 2024, 2:35pm UTC](https://discuss.elastic.co/t/pipeline-aggregations-sorting-filtering-after-bucket-script-execution/365786 "2024-09-03T14:35:52Z")

</div>

Hey, I am running an aggregation that groups by a terms aggregation and then runs the sum on a field for each bucket. Works of course. Now on top of that I have a bucket script aggregation running, that is doing a calc…

---

## [How to reset password?](https://discuss.elastic.co/t/how-to-reset-password/365906)

<div class="topic-metadata">

**Author:** [@stephane\_chan](https://discuss.elastic.co/u/stephane_chan)\
**Replies:** 3\
**Last updated:** [September 3, 2024, 2:29pm UTC](https://discuss.elastic.co/t/how-to-reset-password/365906 "2024-09-03T14:29:13Z")

</div>

Hi , I forgot my password for my elasticsearch I configured my elasticsearch.yml with: network.host: 0.0.0.0 discovery.seed\_hosts: \[“127.0.0.1”, “\[::1\]”\] discovery.type: single-node xpack.security.enabled: true I ra…

---

## [\[INFO \]\[o.e.x.s.a.AuthenticationService\] \[sec-elastic-1\] Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/info-o-e-x-s-a-authenticationservice-sec-elastic-1-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/365967)

<div class="topic-metadata">

**Author:** [@EB\_Liang](https://discuss.elastic.co/u/EB_Liang)\
**Replies:** 0\
**Last updated:** [September 3, 2024, 1:59pm UTC](https://discuss.elastic.co/t/info-o-e-x-s-a-authenticationservice-sec-elastic-1-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/365967 "2024-09-03T13:59:20Z")

</div>

My version is 7.10, kibana upgrade failed to recover snapshots after connecting Elasticsearch encountered problems

---

## [Data table: How to create many columns from a field](https://discuss.elastic.co/t/data-table-how-to-create-many-columns-from-a-field/365534)

<div class="topic-metadata">

**Author:** [@JohanExpat](https://discuss.elastic.co/u/JohanExpat)\
**Replies:** 12\
**Last updated:** [September 3, 2024, 1:00pm UTC](https://discuss.elastic.co/t/data-table-how-to-create-many-columns-from-a-field/365534 "2024-09-03T13:00:43Z")

</div>

Hello, In index email\_stats i have a field called "event\_type" that can be equal to seven different values corresponding to the email status, i would like to create a column counting the occurence for each of them. I wo…

---

## [Sincedb and rsync - it's not a solution](https://discuss.elastic.co/t/sincedb-and-rsync-its-not-a-solution/365822)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 3\
**Last updated:** [September 3, 2024, 12:55pm UTC](https://discuss.elastic.co/t/sincedb-and-rsync-its-not-a-solution/365822 "2024-09-03T12:55:36Z")

</div>

Hi Is there any chance to config some parameters for sincedb for read file only for name, I have updated folder with the second server over rsync and after synchronization data structure are overwrite like inode and etc…

---

## [When Elastic search .NET client documentation for current version (8.9) will be available?](https://discuss.elastic.co/t/when-elastic-search-net-client-documentation-for-current-version-8-9-will-be-available/365958)

<div class="topic-metadata">

**Author:** [@ranauzairahmed](https://discuss.elastic.co/u/ranauzairahmed)\
**Replies:** 0\
**Last updated:** [September 3, 2024, 12:42pm UTC](https://discuss.elastic.co/t/when-elastic-search-net-client-documentation-for-current-version-8-9-will-be-available/365958 "2024-09-03T12:42:36Z")

</div>

I'm learning to use Elasticsearch in .NET Web APIs, but it is getting really difficult as I move forward because of no documentation of Elasticsearch client (current version: 8.9). There is only CRUD operations section a…

---

## [Make reusable Vega-Lite components?](https://discuss.elastic.co/t/make-reusable-vega-lite-components/365885)

<div class="topic-metadata">

**Author:** [@cjessing](https://discuss.elastic.co/u/cjessing)\
**Replies:** 5\
**Last updated:** [September 3, 2024, 10:51am UTC](https://discuss.elastic.co/t/make-reusable-vega-lite-components/365885 "2024-09-03T10:51:51Z")

</div>

Greetings all As a Vega n00b I'm faced with the task of creating a dashboard with a number of boxes, each listing some data for a given server (up/down, number of containers, name etc.). Alle the data is based on metric…

---

## [Number of documents in a Kibana search does not match Elasticsearch](https://discuss.elastic.co/t/number-of-documents-in-a-kibana-search-does-not-match-elasticsearch/365894)

<div class="topic-metadata">

**Author:** [@lostsoul352](https://discuss.elastic.co/u/lostsoul352)\
**Replies:** 5\
**Last updated:** [September 3, 2024, 10:05am UTC](https://discuss.elastic.co/t/number-of-documents-in-a-kibana-search-does-not-match-elasticsearch/365894 "2024-09-03T10:05:46Z")

</div>

I'm using an ELK stack, all components are version 7.10 I'm using /\_cat/indices/logset\* to query elasticsearch on how many docs I have in my index. This is the only index I have currently as below: health status inde…

---

## [Logstash doesnt send logs to elasticsearch OR filebeat doesnt send logs to logstash](https://discuss.elastic.co/t/logstash-doesnt-send-logs-to-elasticsearch-or-filebeat-doesnt-send-logs-to-logstash/365931)

<div class="topic-metadata">

**Author:** [@jakub0011](https://discuss.elastic.co/u/jakub0011)\
**Replies:** 1\
**Last updated:** [September 3, 2024, 9:37am UTC](https://discuss.elastic.co/t/logstash-doesnt-send-logs-to-elasticsearch-or-filebeat-doesnt-send-logs-to-logstash/365931 "2024-09-03T09:37:58Z")

</div>

Hi, i have elasticsearch cluster with: logstash 7.17.18 kibana 7.17.18 elasticsearch 7.17.18 filebeat 7.10 Everything worked fine for a month, but for the past 2 days not all logs are being sent to Elasticsearch fro…

---

## [Filter caching in complex query trees](https://discuss.elastic.co/t/filter-caching-in-complex-query-trees/365935)

<div class="topic-metadata">

**Author:** [@Sajad\_Soltanian](https://discuss.elastic.co/u/Sajad_Soltanian)\
**Replies:** 0\
**Last updated:** [September 3, 2024, 9:23am UTC](https://discuss.elastic.co/t/filter-caching-in-complex-query-trees/365935 "2024-09-03T09:23:58Z")

</div>

Generally it is mentioned that filter queries are open to be cached and the must ones not. but here I have some important questions from easy to complex ones. if any of my statements and deductions were false, it would …

---

## [Using two levels of nesting in knn vector search](https://discuss.elastic.co/t/using-two-levels-of-nesting-in-knn-vector-search/365754)

<div class="topic-metadata">

**Author:** [@jcodina](https://discuss.elastic.co/u/jcodina)\
**Replies:** 1\
**Last updated:** [September 3, 2024, 8:56am UTC](https://discuss.elastic.co/t/using-two-levels-of-nesting-in-knn-vector-search/365754 "2024-09-03T08:56:46Z")

</div>

If we have an index with at least two nesting levels (i know it is not optimal in ES, but we need to have it) , and the dense vectors are in the second level. I can get from the results, the top level fields (they are un…

---

## [Issue setting up Postgresql Connector](https://discuss.elastic.co/t/issue-setting-up-postgresql-connector/360906)

<div class="topic-metadata">

**Author:** [@Lim\_Rik](https://discuss.elastic.co/u/Lim_Rik)\
**Replies:** 1\
**Last updated:** [September 3, 2024, 8:48am UTC](https://discuss.elastic.co/t/issue-setting-up-postgresql-connector/360906 "2024-09-03T08:48:05Z")

</div>

I am trying to connect my local Postgresql Database to Elasticsearch via a connector on my Windows machine. I have set up Elasticsearch and Kibana via Docker. I am currently following this link Running from the source …

---

## [Help with MultiSearchAsync and MultisearchBody in v8 .NET client for Elasticsearch](https://discuss.elastic.co/t/help-with-multisearchasync-and-multisearchbody-in-v8-net-client-for-elasticsearch/365725)

<div class="topic-metadata">

**Author:** [@demet](https://discuss.elastic.co/u/demet)\
**Replies:** 0\
**Last updated:** [August 28, 2024, 11:44pm UTC](https://discuss.elastic.co/t/help-with-multisearchasync-and-multisearchbody-in-v8-net-client-for-elasticsearch/365725 "2024-08-28T23:44:09Z")

</div>

I am a new developer working with .NET and the elastic client. We are currently migrating the functionality to the new elastic client in version 8.10 but we have problems with the MultiSearchAsync method. Can you help …

---

## [Utilizing Elasticsearch's ELSER Model for Contextual Queries on SQL-Transformed Data](https://discuss.elastic.co/t/utilizing-elasticsearchs-elser-model-for-contextual-queries-on-sql-transformed-data/365891)

<div class="topic-metadata">

**Author:** [@Het\_Test](https://discuss.elastic.co/u/Het_Test)\
**Replies:** 1\
**Last updated:** [September 3, 2024, 7:58am UTC](https://discuss.elastic.co/t/utilizing-elasticsearchs-elser-model-for-contextual-queries-on-sql-transformed-data/365891 "2024-09-03T07:58:17Z")

</div>

Hi, I encountered an interesting challenge and was curious whether Elasticsearch's ELSER model could be leveraged to address it. I've migrated data from SQL to Elasticsearch, where each SQL field is now represented as …

---

## [Elasticsearch Cluster, cluster red, error cluster](https://discuss.elastic.co/t/elasticsearch-cluster-cluster-red-error-cluster/365108)

<div class="topic-metadata">

**Author:** [@fered](https://discuss.elastic.co/u/fered)\
**Replies:** 1\
**Last updated:** [September 3, 2024, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-cluster-red-error-cluster/365108 "2024-09-03T07:57:08Z")

</div>

I have a cluster that has 3 main and 6 data nodes (2 hot, 1 g, 1 cold and 2 data content, 1 fleet, 1 ml) I got the master log from the car and it has these errors 1-Authentication using apikey failed caught exception whi…

---

## [What values are non-acceptable while making inverted index of a field?](https://discuss.elastic.co/t/what-values-are-non-acceptable-while-making-inverted-index-of-a-field/365893)

<div class="topic-metadata">

**Author:** [@ayaan604](https://discuss.elastic.co/u/ayaan604)\
**Replies:** 1\
**Last updated:** [September 3, 2024, 7:50am UTC](https://discuss.elastic.co/t/what-values-are-non-acceptable-while-making-inverted-index-of-a-field/365893 "2024-09-03T07:50:19Z")

</div>

I have a field 'request' which contains values which are just URL endpoints. Example "/context-root/url-pattern/endpoint" I have a case where the value of my field is : "/bankingnet/rltxn?sXML=%3C?xmlversion=%271.0%27%2…

---

## [Zero-downtime upgrade using the Ruby client](https://discuss.elastic.co/t/zero-downtime-upgrade-using-the-ruby-client/365913)

<div class="topic-metadata">

**Author:** [@pdfrod](https://discuss.elastic.co/u/pdfrod)\
**Replies:** 0\
**Last updated:** [September 2, 2024, 4:21pm UTC](https://discuss.elastic.co/t/zero-downtime-upgrade-using-the-ruby-client/365913 "2024-09-02T16:21:28Z")

</div>

I have an that app that uses the Ruby client to connect to an Elasticsearch v7 cluster, and I would like upgrade the cluster to v8 without downtime. I know that the cluster itself can be upgrade without downtime, but it…

---

## [Logstash Access Denied Error Encountered with AWS S3](https://discuss.elastic.co/t/logstash-access-denied-error-encountered-with-aws-s3/365929)

<div class="topic-metadata">

**Author:** [@rui\_1](https://discuss.elastic.co/u/rui_1)\
**Replies:** 0\
**Last updated:** [September 3, 2024, 6:56am UTC](https://discuss.elastic.co/t/logstash-access-denied-error-encountered-with-aws-s3/365929 "2024-09-03T06:56:58Z")

</div>

Hi can anyone please help to see what is possibly causing this error? I have not changed any of my AWS user or role policy, neither is there any explicit deny nor changes to logstash config. The error suddenly came aft…

---

## [Logstash input Salesforce still alive? Process for abandoned plugin projects?](https://discuss.elastic.co/t/logstash-input-salesforce-still-alive-process-for-abandoned-plugin-projects/361928)

<div class="topic-metadata">

**Author:** [@frans-wtax](https://discuss.elastic.co/u/frans-wtax)\
**Replies:** 6\
**Last updated:** [September 3, 2024, 6:55am UTC](https://discuss.elastic.co/t/logstash-input-salesforce-still-alive-process-for-abandoned-plugin-projects/361928 "2024-09-03T06:55:27Z")

</div>

Hi all, There's a PR on the logstash-input-salesforce plugin that I would really love to be merged and included into the main release of that plugin, but the project seems to have been abandoned: no changes have happene…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=174)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=176)
