# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=179 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 180 --- ## [Orphan indices on nodes with centos7 os](https://discuss.elastic.co/t/orphan-indices-on-nodes-with-centos7-os/365637)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [August 27, 2024, 6:46pm UTC](https://discuss.elastic.co/t/orphan-indices-on-nodes-with-centos7-os/365637 "2024-08-27T18:46:33Z")
Hi, please do you have experience and tips how to solve the problem with ORPHANS on elastic nodes installed on old Centos7 VM 8core/32GB RAM, 2TB SSD nodes we have elasticsearch version 8.12.1 new nodes are running on… --- ## [Elasticsearch migration and rollback strategy (snapshot and restore)](https://discuss.elastic.co/t/elasticsearch-migration-and-rollback-strategy-snapshot-and-restore/365577)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 7\ **Last updated:** [August 27, 2024, 6:05pm UTC](https://discuss.elastic.co/t/elasticsearch-migration-and-rollback-strategy-snapshot-and-restore/365577 "2024-08-27T18:05:46Z")
We are planning to migrate data of Elasticsearch cluster from AWS to new cluster set up in GCP (both clusters are self managed). Steps are as follows: Full snapshot AWS ES cluster Restore the full snapshot on GCP ES cl… --- ## [Higher number of active threads with elasticsearch-java dependency](https://discuss.elastic.co/t/higher-number-of-active-threads-with-elasticsearch-java-dependency/364385)
**Author:** [@sibasish.palo](https://discuss.elastic.co/u/sibasish.palo)\ **Replies:** 26\ **Last updated:** [August 27, 2024, 4:42pm UTC](https://discuss.elastic.co/t/higher-number-of-active-threads-with-elasticsearch-java-dependency/364385 "2024-08-27T16:42:00Z")
Hi we are currently migrating to Elasticsearch v8.12.0 and we have below code to create the Elasticsearch client to make the connections to Elasticsearch. we are using elasticsearch-java: v8.12.0 dependency @Provides … --- ## [Multiple Log Paths With Multiple Index](https://discuss.elastic.co/t/multiple-log-paths-with-multiple-index/365253)
**Author:** [@oseker](https://discuss.elastic.co/u/oseker)\ **Replies:** 9\ **Last updated:** [August 27, 2024, 3:42pm UTC](https://discuss.elastic.co/t/multiple-log-paths-with-multiple-index/365253 "2024-08-27T15:42:48Z")
Many log files are stored on the system in various locations. I'm attempting to use filestream input type to read log files and then send them straight to Elasticsearch. "Error loading template: error creating template i… --- ## [Index mapping problem](https://discuss.elastic.co/t/index-mapping-problem/365607)
**Author:** [@cazzz99](https://discuss.elastic.co/u/cazzz99)\ **Replies:** 3\ **Last updated:** [August 27, 2024, 2:59pm UTC](https://discuss.elastic.co/t/index-mapping-problem/365607 "2024-08-27T14:59:47Z")
My current mapping is like: self.es\_client.indices.create( index=self.index\_name, mappings={ "properties":{ text\_field: {"type": "text"}, … --- ## [Using Transform for document count when document updated](https://discuss.elastic.co/t/using-transform-for-document-count-when-document-updated/364924)
**Author:** [@Derek.X](https://discuss.elastic.co/u/Derek.X)\ **Replies:** 3\ **Last updated:** [August 27, 2024, 2:44pm UTC](https://discuss.elastic.co/t/using-transform-for-document-count-when-document-updated/364924 "2024-08-27T14:44:02Z")
There is an index that documents are updated with time. We are looking for some way to continuesly (every several minutes) provide count of documents grouped by some condition. Example: 2024/08/15 00:00:00, order1, new … --- ## [Elasticsearch cross cluster replication - bi-directional is not working](https://discuss.elastic.co/t/elasticsearch-cross-cluster-replication-bi-directional-is-not-working/365619)
**Author:** [@navaneethan](https://discuss.elastic.co/u/navaneethan)\ **Replies:** 6\ **Last updated:** [August 27, 2024, 2:43pm UTC](https://discuss.elastic.co/t/elasticsearch-cross-cluster-replication-bi-directional-is-not-working/365619 "2024-08-27T14:43:12Z")
Hi We need to do the cross cluster replication to avoid the downtime in our environment It is working fine in the single/uni directional DR datacenter and the leader index is replicating fine the follower index but wh… --- ## [Create an alert based on moving time frame](https://discuss.elastic.co/t/create-an-alert-based-on-moving-time-frame/365626)
**Author:** [@kirankgummadi](https://discuss.elastic.co/u/kirankgummadi)\ **Replies:** 0\ **Last updated:** [August 27, 2024, 2:37pm UTC](https://discuss.elastic.co/t/create-an-alert-based-on-moving-time-frame/365626 "2024-08-27T14:37:33Z")
Hi - is there a way to create an alert based on an increase/decrease in average response time for the past 5 min compared to the last 30 mins? For example, if the average response time for past 30 mins is 300ms and the … --- ## [Filebeat Input for salesforce](https://discuss.elastic.co/t/filebeat-input-for-salesforce/365621)
**Author:** [@kkalwaysok](https://discuss.elastic.co/u/kkalwaysok)\ **Replies:** 0\ **Last updated:** [August 27, 2024, 1:56pm UTC](https://discuss.elastic.co/t/filebeat-input-for-salesforce/365621 "2024-08-27T13:56:41Z")
Hello, I'm trying to configure multiple salesforce objects using filebeat inputs and below is the example config. When I verified the logs I can see the query running but I can't see the data. Any help with how to confi… --- ## [Timestamp dayOfWeek](https://discuss.elastic.co/t/timestamp-dayofweek/365605)
**Author:** [@Alexandre\_CHERAMY](https://discuss.elastic.co/u/Alexandre_CHERAMY)\ **Replies:** 1\ **Last updated:** [August 27, 2024, 1:24pm UTC](https://discuss.elastic.co/t/timestamp-dayofweek/365605 "2024-08-27T13:24:10Z")
Hi, I'm trying to create a visualization in kibana by filtering on the timestamp field. I want to filter by day of the week. For the moment, I obtain the sum for a given month, but I would like to remove specific days f… --- ## [Working with Elastic-Agent for both Windows and Linux, unsure on how to change the SSL Certificate Authority](https://discuss.elastic.co/t/working-with-elastic-agent-for-both-windows-and-linux-unsure-on-how-to-change-the-ssl-certificate-authority/365606)
**Author:** [@Thomas\_Lee1](https://discuss.elastic.co/u/Thomas_Lee1)\ **Replies:** 1\ **Last updated:** [August 27, 2024, 12:29pm UTC](https://discuss.elastic.co/t/working-with-elastic-agent-for-both-windows-and-linux-unsure-on-how-to-change-the-ssl-certificate-authority/365606 "2024-08-27T12:29:16Z")
For my ELK Stack, I am using a self-Signed Certificate Authority. I have shared my CA certificate to all my linux agents and stored them under /etc/certs and they can work. However when I install them on my windows as a … --- ## [Conditional formatting for Metric (empty field)](https://discuss.elastic.co/t/conditional-formatting-for-metric-empty-field/365540)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 1\ **Last updated:** [August 27, 2024, 8:57am UTC](https://discuss.elastic.co/t/conditional-formatting-for-metric-empty-field/365540 "2024-08-27T08:57:52Z")
Hi, I'm creating a dashboard using Lens, and I'm reading the Last Value of a field that indicates the number of documents seen. Currently, I have set the visualization to be a Metric that shows the number of documents,… --- ## [Raise Elasticsearch field limit via config](https://discuss.elastic.co/t/raise-elasticsearch-field-limit-via-config/365602)
**Author:** [@daniel90](https://discuss.elastic.co/u/daniel90)\ **Replies:** 2\ **Last updated:** [August 27, 2024, 8:13am UTC](https://discuss.elastic.co/t/raise-elasticsearch-field-limit-via-config/365602 "2024-08-27T08:13:38Z")
I tried the obvious, but that gives me the: "node settings must not contain any index level settings" Error So how do i do it? I want a permanent solution that does not involve a cronjob setting the limit to X every … --- ## [Elastic + OpenMetrics Inquiry](https://discuss.elastic.co/t/elastic-openmetrics-inquiry/365580)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [August 26, 2024, 10:38pm UTC](https://discuss.elastic.co/t/elastic-openmetrics-inquiry/365580 "2024-08-26T22:38:27Z")
Hello, I saw Metricbeat has an Open Metrics module but its beta. I was wondering if this is working for others? Also it seems like the output resembles Prometheus' /metric endpoint. Would it be possible to use Promethe… --- ## [Unable to edit custom Synthetics Alert in Kibana](https://discuss.elastic.co/t/unable-to-edit-custom-synthetics-alert-in-kibana/365576)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [August 26, 2024, 7:48pm UTC](https://discuss.elastic.co/t/unable-to-edit-custom-synthetics-alert-in-kibana/365576 "2024-08-26T19:48:45Z")
Elastic Cloud 8.15.0. I am creating a few custom Synthetics rules using monitor.tags in the Action query to do some specific alert routing by environment. However, I have an issue: When I create a custom Synthetics aler… --- ## [Using Logstash to read from a log file and then output each log lines to Kafka topic, cannot understand why it is not putting file content to kafka topic specified in conf file](https://discuss.elastic.co/t/using-logstash-to-read-from-a-log-file-and-then-output-each-log-lines-to-kafka-topic-cannot-understand-why-it-is-not-putting-file-content-to-kafka-topic-specified-in-conf-file/365499)
**Author:** [@pranchalm](https://discuss.elastic.co/u/pranchalm)\ **Replies:** 17\ **Last updated:** [August 26, 2024, 6:49pm UTC](https://discuss.elastic.co/t/using-logstash-to-read-from-a-log-file-and-then-output-each-log-lines-to-kafka-topic-cannot-understand-why-it-is-not-putting-file-content-to-kafka-topic-specified-in-conf-file/365499 "2024-08-26T18:49:57Z")
Details of the issue-: logstash version used-: 8.15.0 Kafka broker version - : 3.8.0- up at port 9092 Machine-: Windows Following is my logstash.conf-: input { file { path =\> "C:\\Users\\LENOVO\\Downloads\\ms1\\logs\\xe… --- ## [Unable to Split Large Index](https://discuss.elastic.co/t/unable-to-split-large-index/365233)
**Author:** [@Ian\_Simpson](https://discuss.elastic.co/u/Ian_Simpson)\ **Replies:** 1\ **Last updated:** [August 26, 2024, 6:21pm UTC](https://discuss.elastic.co/t/unable-to-split-large-index/365233 "2024-08-26T18:21:18Z")
I have an index with 21 primary shards and 2 replicas that has grown such that each shard is between 90-120 GB. This is spread between 9 nodes that sit at around 37-40% disk usage right now. I attempted a split operatio… --- ## [Monitoring elasticstack whit elastic agent](https://discuss.elastic.co/t/monitoring-elasticstack-whit-elastic-agent/365482)
**Author:** [@erickhillo](https://discuss.elastic.co/u/erickhillo)\ **Replies:** 1\ **Last updated:** [August 26, 2024, 5:35pm UTC](https://discuss.elastic.co/t/monitoring-elasticstack-whit-elastic-agent/365482 "2024-08-26T17:35:55Z")
Hi! I've a production elasticsatack deployment (elasticsearch, kibana, logstash) these are running in containers with docker, and at the same time I've anoher deploy in diferent server with just elasticsearch, kibana an… --- ## [Issue with otlp-collectors and elastic](https://discuss.elastic.co/t/issue-with-otlp-collectors-and-elastic/361584)
**Author:** [@iamp3](https://discuss.elastic.co/u/iamp3)\ **Replies:** 3\ **Last updated:** [August 26, 2024, 5:24pm UTC](https://discuss.elastic.co/t/issue-with-otlp-collectors-and-elastic/361584 "2024-08-26T17:24:06Z")
Hi, It looks like smth block search/view of metric data in real-time mode (from otel-collectors) and produces this data incrementally. For example, on 12 June I could check data till 01:00, but at 13 June I could see dat… --- ## [ERROR: Failed to determine the health of the cluster. , with exit code 69](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/365522)
**Author:** [@17HungLe02](https://discuss.elastic.co/u/17HungLe02)\ **Replies:** 7\ **Last updated:** [August 26, 2024, 4:56pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/365522 "2024-08-26T16:56:55Z")
I run the command to create token but the result is like this, what should I do? --- ## [Query string search with \`allow\_leading\_wildcard\` set to false does not throws](https://discuss.elastic.co/t/query-string-search-with-allow-leading-wildcard-set-to-false-does-not-throws/365564)
**Author:** [@darshan\_v](https://discuss.elastic.co/u/darshan_v)\ **Replies:** 0\ **Last updated:** [August 26, 2024, 4:11pm UTC](https://discuss.elastic.co/t/query-string-search-with-allow-leading-wildcard-set-to-false-does-not-throws/365564 "2024-08-26T16:11:55Z")
Hey! I was testing some query\_string search queries on Elasticsearch 8.14.0 where I had set allow\_leading\_wildcard to false but the actual query contained a leading wildcard. Instead of throwing an exception, ES returns … --- ## [Elasticsearch Python client: Global timeout configuration?](https://discuss.elastic.co/t/elasticsearch-python-client-global-timeout-configuration/365536)
**Author:** [@Imad\_Saddik](https://discuss.elastic.co/u/Imad_Saddik)\ **Replies:** 0\ **Last updated:** [August 26, 2024, 7:50am UTC](https://discuss.elastic.co/t/elasticsearch-python-client-global-timeout-configuration/365536 "2024-08-26T07:50:28Z")
I'm working with multiple indices using the Elasticsearch Python client API and have a question about timeout configuration. When creating the Elasticsearch client, we can specify a timeout: client = Elasticsearch( … --- ## [How can I use multiline for this log](https://discuss.elastic.co/t/how-can-i-use-multiline-for-this-log/365551)
**Author:** [@sumantapakira](https://discuss.elastic.co/u/sumantapakira)\ **Replies:** 3\ **Last updated:** [August 26, 2024, 3:49pm UTC](https://discuss.elastic.co/t/how-can-i-use-multiline-for-this-log/365551 "2024-08-26T15:49:20Z")
Log file - 25.08.2024 13:28:50.972 \*DEBUG\* \[127.0.0.1 \[1724326130527\] GET /content/smple/global/locations.html HTTP/1.1\] com.custom.global.core.models.impl.LocationCFListImpl damContentFragment name : em 25.08.2024 10:… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/365518)
**Author:** [@hassan\_developer](https://discuss.elastic.co/u/hassan_developer)\ **Replies:** 3\ **Last updated:** [August 26, 2024, 3:27pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/365518 "2024-08-26T15:27:53Z")
Hi ! I am new to Elasticsearch . I tried installing it on Cloud instance all worked well. Until I tird installing Plugin for windows event logs it asked me to add these 2 lines to elasticsearch.yml file - xpack.securi… --- ## [Use knn inside functional\_score query](https://discuss.elastic.co/t/use-knn-inside-functional-score-query/365554)
**Author:** [@kunal\_foundit](https://discuss.elastic.co/u/kunal_foundit)\ **Replies:** 2\ **Last updated:** [August 26, 2024, 2:20pm UTC](https://discuss.elastic.co/t/use-knn-inside-functional-score-query/365554 "2024-08-26T14:20:20Z")
I am using elasticsearch-java client (co.elastic.clients) v8.11 I need to create a knn query inside functional\_score query similar to query shared below. { "size": 3, "query": { "function\_score": { "query": {… --- ## [When Rolling upgrades from Elasticsearch 6.8 to 7.x, The Kibana likely be unavailable](https://discuss.elastic.co/t/when-rolling-upgrades-from-elasticsearch-6-8-to-7-x-the-kibana-likely-be-unavailable/365016)
**Author:** [@yunpeng.jiangyp](https://discuss.elastic.co/u/yunpeng.jiangyp)\ **Replies:** 2\ **Last updated:** [August 26, 2024, 12:59pm UTC](https://discuss.elastic.co/t/when-rolling-upgrades-from-elasticsearch-6-8-to-7-x-the-kibana-likely-be-unavailable/365016 "2024-08-26T12:59:35Z")
When Rolling upgrades from Elasticsearch 6.8 to 7.x, The Kibana likely be unavailable. I prepared to roll upgrade from Elasticsearch 6.8 to 7.x, But i found the kiabana likely be unavailable. If i used kiabana 6.8.23 ,… --- ## [Info about CVE-2024-37287](https://discuss.elastic.co/t/info-about-cve-2024-37287/364587)
**Author:** [@lorepas](https://discuss.elastic.co/u/lorepas)\ **Replies:** 7\ **Last updated:** [August 26, 2024, 12:51pm UTC](https://discuss.elastic.co/t/info-about-cve-2024-37287/364587 "2024-08-26T12:51:22Z")
Hi all, I noticed the following security update regarding the CVE-2024-37287. I would like to understand if it could be affected also an on-prem installation of Kibana (v7.17.7) made with rpm, so without docker. I'm a … --- ## [Elasticsearch HTTPS and Adding to Java Rest Client](https://discuss.elastic.co/t/elasticsearch-https-and-adding-to-java-rest-client/365477)
**Author:** [@GoldNotepad](https://discuss.elastic.co/u/GoldNotepad)\ **Replies:** 1\ **Last updated:** [August 26, 2024, 12:07pm UTC](https://discuss.elastic.co/t/elasticsearch-https-and-adding-to-java-rest-client/365477 "2024-08-26T12:07:58Z")
I'm attempting to enable HTTPS for elasticsearch. First I create the elasticsearch certificate authority. elasticsearch-certutil ca Then I generate the certificate. elasticsearch-certutil cert --ca elastic-stack-ca.p… --- ## [How to show the correct count in table visualization](https://discuss.elastic.co/t/how-to-show-the-correct-count-in-table-visualization/365445)
**Author:** [@chun](https://discuss.elastic.co/u/chun)\ **Replies:** 9\ **Last updated:** [August 26, 2024, 11:34am UTC](https://discuss.elastic.co/t/how-to-show-the-correct-count-in-table-visualization/365445 "2024-08-26T11:34:20Z")
I have a index file with single document ID, 2 items under the single document: "hits": \[ { "\_index": "dremio\_sys\_jobs", "\_id": "sys\_jobs", "\_score": 1, "\_ignored": \[ "dre… --- ## [Unable to retrieve version information from Elasticsearch nodes. connect ETIMEDOUT 10.10.51.229:9200](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-etimedout-10-10-51-229-9200/363239)
**Author:** [@Thejashree\_TU](https://discuss.elastic.co/u/Thejashree_TU)\ **Replies:** 1\ **Last updated:** [August 26, 2024, 11:21am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-etimedout-10-10-51-229-9200/363239 "2024-08-26T11:21:20Z")
I try to open localhost:5601 but for 2sec it is trying open the Kibana server is not ready yet. I am not getting what to do I tried many things [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=178) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=180)