# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=178

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 179

---

## [Dense vector disk size](https://discuss.elastic.co/t/dense-vector-disk-size/365705)

<div class="topic-metadata">

**Author:** [@amberry](https://discuss.elastic.co/u/amberry)\
**Replies:** 1\
**Last updated:** [August 28, 2024, 6:34pm UTC](https://discuss.elastic.co/t/dense-vector-disk-size/365705 "2024-08-28T18:34:01Z")

</div>

Hi there, We're attempting to index about 10,000,000 1536-dim vectors. Per the documentation, we've calculated this should take up 10M\*(4\*1536+4) = approximately 61.5GB. In reality, this index is taking up about 250GB. …

---

## [Exact-Knn with python api](https://discuss.elastic.co/t/exact-knn-with-python-api/365542)

<div class="topic-metadata">

**Author:** [@cazzz99](https://discuss.elastic.co/u/cazzz99)\
**Replies:** 7\
**Last updated:** [August 28, 2024, 5:18pm UTC](https://discuss.elastic.co/t/exact-knn-with-python-api/365542 "2024-08-28T17:18:40Z")

</div>

I've been using budy func + langchain retriever to conduct search in ES, my code is like below: \`\` def embed\_query(self,query\_text,k =30,candidate\_num = 45): if query\_text is not None and len(query\_text) == 0: …

---

## [Table in kibana doesn't show multiple keyword values when an array](https://discuss.elastic.co/t/table-in-kibana-doesnt-show-multiple-keyword-values-when-an-array/365622)

<div class="topic-metadata">

**Author:** [@cassius\_au\_bellona](https://discuss.elastic.co/u/cassius_au_bellona)\
**Replies:** 5\
**Last updated:** [August 28, 2024, 4:45pm UTC](https://discuss.elastic.co/t/table-in-kibana-doesnt-show-multiple-keyword-values-when-an-array/365622 "2024-08-28T16:45:19Z")

</div>

Gooday, I have a field named network\_impacts The field is mapped as a keyword and can have a single value or a list of values In the table view on kibana, I'm observing that the table will only display a single value …

---

## [Composite aggregation buckets not filtered as per the regexp query](https://discuss.elastic.co/t/composite-aggregation-buckets-not-filtered-as-per-the-regexp-query/365690)

<div class="topic-metadata">

**Author:** [@natraj.molala](https://discuss.elastic.co/u/natraj.molala)\
**Replies:** 0\
**Last updated:** [August 28, 2024, 11:06am UTC](https://discuss.elastic.co/t/composite-aggregation-buckets-not-filtered-as-per-the-regexp-query/365690 "2024-08-28T11:06:24Z")

</div>

Hi there, I have an aggregation query to get documents filtered by terms of a multi value filed and regexp matching. The buckets returned don't match the results returned as per regexp match criteria. Note: Elasticsear…

---

## [Ingesting America/Chicago timezone logs with no tz indicator](https://discuss.elastic.co/t/ingesting-america-chicago-timezone-logs-with-no-tz-indicator/365643)

<div class="topic-metadata">

**Author:** [@wmei](https://discuss.elastic.co/u/wmei)\
**Replies:** 3\
**Last updated:** [August 28, 2024, 3:45pm UTC](https://discuss.elastic.co/t/ingesting-america-chicago-timezone-logs-with-no-tz-indicator/365643 "2024-08-28T15:45:34Z")

</div>

Hi. I have the following log entries. The timestamp is local system time but not UTC. I currently do not have a way to adjust the logs to include a tz. D 2024-08-27T08:29:36,537 \[Library\] Logger - \[MESSAGE\] (1028445676…

---

## [Support for alias mapping in enterprise search application](https://discuss.elastic.co/t/support-for-alias-mapping-in-enterprise-search-application/365701)

<div class="topic-metadata">

**Author:** [@ravi\_kumar\_mvs](https://discuss.elastic.co/u/ravi_kumar_mvs)\
**Replies:** 1\
**Last updated:** [August 28, 2024, 2:37pm UTC](https://discuss.elastic.co/t/support-for-alias-mapping-in-enterprise-search-application/365701 "2024-08-28T14:37:44Z")

</div>

Hi, We use search applications to wrap a bit of business logic and to reduce the network bandwidth usage. The scenario that we have is to sync some data that is coming from a graphql call and keep the indexes UpToDate. …

---

## [Fleet Server - Error - failed version compatibility check with elasticsearch: x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-server-error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/365646)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 1\
**Last updated:** [August 28, 2024, 2:25pm UTC](https://discuss.elastic.co/t/fleet-server-error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/365646 "2024-08-28T14:25:39Z")

</div>

Hello everyone, Once again I am asking for your valuable help. I have ELK installed for testing purposes before moving configurations to production, I am currently working with logstash, elasticsearch and kibana on the…

---

## [Java/kotlin ElasticSearchAsyncClient several issues to check priorities](https://discuss.elastic.co/t/java-kotlin-elasticsearchasyncclient-several-issues-to-check-priorities/363123)

<div class="topic-metadata">

**Author:** [@Youngsam\_Byun](https://discuss.elastic.co/u/Youngsam_Byun)\
**Replies:** 6\
**Last updated:** [August 28, 2024, 1:00pm UTC](https://discuss.elastic.co/t/java-kotlin-elasticsearchasyncclient-several-issues-to-check-priorities/363123 "2024-08-28T13:00:54Z")

</div>

Hi Thank you for your support This is related to Java/Kotlin Client library I am current using ElasticSearchAsyncClient , Kotlin 7.17.22 with Maven Can you please answer my below questions ? I want to know if you ha…

---

## [Invalid version of beats protocol - Filebeat to Logstash](https://discuss.elastic.co/t/invalid-version-of-beats-protocol-filebeat-to-logstash/365679)

<div class="topic-metadata">

**Author:** [@sellim](https://discuss.elastic.co/u/sellim)\
**Replies:** 2\
**Last updated:** [August 28, 2024, 1:41pm UTC](https://discuss.elastic.co/t/invalid-version-of-beats-protocol-filebeat-to-logstash/365679 "2024-08-28T13:41:51Z")

</div>

Hi, I'm trying to use rate\_limit in filebeat-7.11.x and send logs to logstash-6.8.x. I've checked the support matrix docs and it shouldn't have version problem But instead I'm getting this error in logstash, even after …

---

## [Sharing a dashboard selecting kibana filters didnt work](https://discuss.elastic.co/t/sharing-a-dashboard-selecting-kibana-filters-didnt-work/365697)

<div class="topic-metadata">

**Author:** [@MADPACISA](https://discuss.elastic.co/u/MADPACISA)\
**Replies:** 0\
**Last updated:** [August 28, 2024, 12:39pm UTC](https://discuss.elastic.co/t/sharing-a-dashboard-selecting-kibana-filters-didnt-work/365697 "2024-08-28T12:39:40Z")

</div>

When i share a panel with kibana 8.14 or 8.13.4 it didnt share just my dashboard, for that i need to put the parameters ?embed=true&show-top-menu=false&show-time-filter=true&hide-filter-bar=true to work. Parameters does…

---

## [Agent healthy but not sending logs](https://discuss.elastic.co/t/agent-healthy-but-not-sending-logs/364405)

<div class="topic-metadata">

**Author:** [@kirolosmena299](https://discuss.elastic.co/u/kirolosmena299)\
**Replies:** 2\
**Last updated:** [August 28, 2024, 12:29pm UTC](https://discuss.elastic.co/t/agent-healthy-but-not-sending-logs/364405 "2024-08-28T12:29:27Z")

</div>

I installed Elasticsearch on a server and Fleet on the same server, we I tried to install the agent to a server with the same subnet using a private IP it worked fine, but when I installed the agent to another server us…

---

## [Semantic search with ELSER using .NET client](https://discuss.elastic.co/t/semantic-search-with-elser-using-net-client/365568)

<div class="topic-metadata">

**Author:** [@sergey-tihon](https://discuss.elastic.co/u/sergey-tihon)\
**Replies:** 4\
**Last updated:** [August 28, 2024, 12:24pm UTC](https://discuss.elastic.co/t/semantic-search-with-elser-using-net-client/365568 "2024-08-28T12:24:28Z")

</div>

Semantic search with ELSET guide mention sparce\_vector queries GET my-index/\_search { "query":{ "sparse\_vector":{ "field": "content\_embedding", "inference\_id": "my-elser-endpoint", "q…

---

## [Error when adding Windows integration](https://discuss.elastic.co/t/error-when-adding-windows-integration/364376)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 2\
**Last updated:** [August 28, 2024, 12:21pm UTC](https://discuss.elastic.co/t/error-when-adding-windows-integration/364376 "2024-08-28T12:21:41Z")

</div>

Hello I am trying to setup a Windows integration but I get this error message and I cannot add the Elastic Agent: Error installing windows 1.47.0: mapper\_parsing\_exception Caused by: illegal\_argument\_exception: analyze…

---

## [Kibana Fleet API for Logstash Output](https://discuss.elastic.co/t/kibana-fleet-api-for-logstash-output/365010)

<div class="topic-metadata">

**Author:** [@madra](https://discuss.elastic.co/u/madra)\
**Replies:** 1\
**Last updated:** [August 28, 2024, 11:40am UTC](https://discuss.elastic.co/t/kibana-fleet-api-for-logstash-output/365010 "2024-08-28T11:40:50Z")

</div>

Dear Community, we automise the Fleet deployment process. We want to add a logstash output to specify where the agent will send the data. What would be the proper API? Do you also have an example of the request-body. …

---

## [NEST syntax wild card search completion field](https://discuss.elastic.co/t/nest-syntax-wild-card-search-completion-field/365645)

<div class="topic-metadata">

**Author:** [@xef](https://discuss.elastic.co/u/xef)\
**Replies:** 2\
**Last updated:** [August 28, 2024, 11:30am UTC](https://discuss.elastic.co/t/nest-syntax-wild-card-search-completion-field/365645 "2024-08-28T11:30:23Z")

</div>

We ahve an index with a completion field for autocomplete look ups. Is there any way of using a wild card search as opposed to a prefix to search the index. Our index is very small (100,000 records). Thanks var searc…

---

## ["Saved Object conflict" adding System or Windows Integrations](https://discuss.elastic.co/t/saved-object-conflict-adding-system-or-windows-integrations/365407)

<div class="topic-metadata">

**Author:** [@Gord](https://discuss.elastic.co/u/Gord)\
**Replies:** 2\
**Last updated:** [August 28, 2024, 11:25am UTC](https://discuss.elastic.co/t/saved-object-conflict-adding-system-or-windows-integrations/365407 "2024-08-28T11:25:58Z")

</div>

Created a new cluster on Elastic Cloud running 8.14.3 (no agents deployed yet), but when creating new policy and leaving the "system" checkbox enabled, the policy gets created without the system integration. When trying …

---

## [How to bind IPv4 in fleet server](https://discuss.elastic.co/t/how-to-bind-ipv4-in-fleet-server/365289)

<div class="topic-metadata">

**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\
**Replies:** 2\
**Last updated:** [August 28, 2024, 11:02am UTC](https://discuss.elastic.co/t/how-to-bind-ipv4-in-fleet-server/365289 "2024-08-28T11:02:14Z")

</div>

Hello, I am trying to set up elastic agent with IPv4 bound. I set up like this: sudo elastic-agent enroll \\ --fleet-server-es=https://10.0.0.1:9200 \\ --fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rv…

---

## [Global aggregation with filters and term aggregation with latest elastic search client 8.13 and above](https://discuss.elastic.co/t/global-aggregation-with-filters-and-term-aggregation-with-latest-elastic-search-client-8-13-and-above/365687)

<div class="topic-metadata">

**Author:** [@Bhavyagc](https://discuss.elastic.co/u/Bhavyagc)\
**Replies:** 0\
**Last updated:** [August 28, 2024, 10:48am UTC](https://discuss.elastic.co/t/global-aggregation-with-filters-and-term-aggregation-with-latest-elastic-search-client-8-13-and-above/365687 "2024-08-28T10:48:09Z")

</div>

Elasticsearch.Net version - 8.0: Elasticsearch version - 8.13: - upgraded from version 8.11 to 8.13 .NET runtime version - 8.0: Operating system version - win11: Description of the problem including expected versus a…

---

## [How to bring up 3rd master in Elastic search cluster, 2 Masters are up but third master is not comming up](https://discuss.elastic.co/t/how-to-bring-up-3rd-master-in-elastic-search-cluster-2-masters-are-up-but-third-master-is-not-comming-up/365684)

<div class="topic-metadata">

**Author:** [@gaurav671](https://discuss.elastic.co/u/gaurav671)\
**Replies:** 0\
**Last updated:** [August 28, 2024, 10:41am UTC](https://discuss.elastic.co/t/how-to-bring-up-3rd-master-in-elastic-search-cluster-2-masters-are-up-but-third-master-is-not-comming-up/365684 "2024-08-28T10:41:27Z")

</div>

Running the Elastic search in Kubernetes cluster, we have tried to increase the size , which could not be implemented and then we tried to delete the existing PV, and created new PV, but due to that 3rd master is not co…

---

## [‘filebeat-7.11.1’ exists, but it is not an alias'](https://discuss.elastic.co/t/filebeat-7-11-1-exists-but-it-is-not-an-alias/365676)

<div class="topic-metadata">

**Author:** [@swarali\_vartak](https://discuss.elastic.co/u/swarali_vartak)\
**Replies:** 0\
**Last updated:** [August 28, 2024, 9:53am UTC](https://discuss.elastic.co/t/filebeat-7-11-1-exists-but-it-is-not-an-alias/365676 "2024-08-28T09:53:51Z")

</div>

Hi, I'm encountering an issue with Filebeat 7.11.1 after a recent restart of our Elasticsearch cluster. Prior to the restart, everything was functioning smoothly, but since then, Filebeat has stopped sending data to Ela…

---

## [Azure Blob Storage connector](https://discuss.elastic.co/t/azure-blob-storage-connector/360400)

<div class="topic-metadata">

**Author:** [@Levinux](https://discuss.elastic.co/u/Levinux)\
**Replies:** 1\
**Last updated:** [August 28, 2024, 9:24am UTC](https://discuss.elastic.co/t/azure-blob-storage-connector/360400 "2024-08-28T09:24:54Z")

</div>

I am configuring Azure Blob Storage connector according to the following procedures: connectors/config.yml.example at main · elastic/connectors · GitHub Running from a Docker container | Enterprise Search documentation…

---

## [PostgreSQL Connector unable to connect to elasticsearch server](https://discuss.elastic.co/t/postgresql-connector-unable-to-connect-to-elasticsearch-server/365029)

<div class="topic-metadata">

**Author:** [@juki1245](https://discuss.elastic.co/u/juki1245)\
**Replies:** 2\
**Last updated:** [August 28, 2024, 9:10am UTC](https://discuss.elastic.co/t/postgresql-connector-unable-to-connect-to-elasticsearch-server/365029 "2024-08-28T09:10:37Z")

</div>

I am currently trying to get my PostgreSQL data into elasticsearch to get use of its searching capabilities. I've tryed it by using the PostgreSQL connector without luck. For running elasticsearch, kibana and the connect…

---

## [Elasticsearch "close connection exception caught on transport layer ... disconnecting from relevant node: Connection reset](https://discuss.elastic.co/t/elasticsearch-close-connection-exception-caught-on-transport-layer-disconnecting-from-relevant-node-connection-reset/359040)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 10\
**Last updated:** [August 28, 2024, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-close-connection-exception-caught-on-transport-layer-disconnecting-from-relevant-node-connection-reset/359040 "2024-08-28T07:26:54Z")

</div>

Unstable operation of the elastic cluster. In the logs I see that the ingest nodes (I have two of them) are disconnected from the master in a chaotic manner after a certain time. Because of this problem, I can't transfer…

---

## [Intervals query with or operator](https://discuss.elastic.co/t/intervals-query-with-or-operator/365225)

<div class="topic-metadata">

**Author:** [@Kushikawa](https://discuss.elastic.co/u/Kushikawa)\
**Replies:** 1\
**Last updated:** [August 28, 2024, 7:25am UTC](https://discuss.elastic.co/t/intervals-query-with-or-operator/365225 "2024-08-28T07:25:54Z")

</div>

Hello, is it possible to use intervals query with an OR operator logic without using a list of match queries with any\_of rule? I want to use the intervals positional score for a set of terms, but without the need to lo…

---

## [Elasticsearch Sql CLI Not working](https://discuss.elastic.co/t/elasticsearch-sql-cli-not-working/365589)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 3\
**Last updated:** [August 28, 2024, 6:34am UTC](https://discuss.elastic.co/t/elasticsearch-sql-cli-not-working/365589 "2024-08-28T06:34:14Z")

</div>

Hi Team, I am trying to connect elastic sql through below command but not able to connect. \[root@cb-1 bin\]# ./elasticsearch-sql-cli https://xx.xx.xx.xx:9200 ERROR: Cannot communicate with the server https://xx.xx.xx.xx…

---

## [How to recycle the file after reading with logstash-input-file plugin](https://discuss.elastic.co/t/how-to-recycle-the-file-after-reading-with-logstash-input-file-plugin/365586)

<div class="topic-metadata">

**Author:** [@chun](https://discuss.elastic.co/u/chun)\
**Replies:** 3\
**Last updated:** [August 28, 2024, 4:23am UTC](https://discuss.elastic.co/t/how-to-recycle-the-file-after-reading-with-logstash-input-file-plugin/365586 "2024-08-28T04:23:15Z")

</div>

Hi, I have a logstash configuration as below. I'm expecting the json file is moved to archive path when reading is completed, but the json file is always there, and archive path is empty. Do I miss out anything in confi…

---

## [Date first occurrence of latest value](https://discuss.elastic.co/t/date-first-occurrence-of-latest-value/365557)

<div class="topic-metadata">

**Author:** [@apenootje](https://discuss.elastic.co/u/apenootje)\
**Replies:** 3\
**Last updated:** [August 27, 2024, 9:22pm UTC](https://discuss.elastic.co/t/date-first-occurrence-of-latest-value/365557 "2024-08-27T21:22:11Z")

</div>

Hello, i like to have the date of the first occurence of the latest value. Is this possible? I can use the latest value in metric but i like to have the date of the first occurence of this latest value

---

## [Anonymous user cannot log in](https://discuss.elastic.co/t/anonymous-user-cannot-log-in/365632)

<div class="topic-metadata">

**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\
**Replies:** 1\
**Last updated:** [August 27, 2024, 7:32pm UTC](https://discuss.elastic.co/t/anonymous-user-cannot-log-in/365632 "2024-08-27T19:32:50Z")

</div>

Hi Team, I added an anonymous user "development", but it cannot log in due to security error. \[security\_exception Root causes: security\_exception: unable to authenticate user \[development\] for REST request \[/\_security/…

---

## [Optimize the replica restore](https://discuss.elastic.co/t/optimize-the-replica-restore/365640)

<div class="topic-metadata">

**Author:** [@jhonsouza](https://discuss.elastic.co/u/jhonsouza)\
**Replies:** 0\
**Last updated:** [August 27, 2024, 7:05pm UTC](https://discuss.elastic.co/t/optimize-the-replica-restore/365640 "2024-08-27T19:05:37Z")

</div>

Hello everyone! I would like to know if there is a method to boost the restoration of replicas? When my cluster needs to restore many replicas, it takes a long time for the cluster health to turn green. If someone can …

---

## [Kibana - Amount of Rules](https://discuss.elastic.co/t/kibana-amount-of-rules/365639)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 0\
**Last updated:** [August 27, 2024, 6:57pm UTC](https://discuss.elastic.co/t/kibana-amount-of-rules/365639 "2024-08-27T18:57:57Z")

</div>

Hello, I am wondering how much rules is considered too much for kibana? Based off documentation: By default, each Kibana instance polls for work at three second intervals, and can run a maximum of ten concurrent tasks…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=177)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=179)
