# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=180 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 181 --- ## [Nested Array Problem](https://discuss.elastic.co/t/nested-array-problem/365538)
**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\ **Replies:** 3\ **Last updated:** [August 26, 2024, 10:24am UTC](https://discuss.elastic.co/t/nested-array-problem/365538 "2024-08-26T10:24:49Z")
Hi Team, We have groups on article like this \[\[Group1, Group2\], \[Group3, Group4\]\] Suppose we have 3 users and groups of these users are like below User 1 Group \[Group1, Group4\] User 2 Group \[Group1, Group2\] User 3 … --- ## [Elasticsearch cluster new Node addition error](https://discuss.elastic.co/t/elasticsearch-cluster-new-node-addition-error/365429)
**Author:** [@saxena\_shk7](https://discuss.elastic.co/u/saxena_shk7)\ **Replies:** 8\ **Last updated:** [August 26, 2024, 10:21am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-new-node-addition-error/365429 "2024-08-26T10:21:57Z")
I am trying to add third node in my elasticsearch existing cluster, but is unable to do so. I have tried everything from uncommenting transport.host option and setting it to 0.0.0.0 also setting discovery.seed\_host to m… --- ## [Heat Map not working when Time zone set to default](https://discuss.elastic.co/t/heat-map-not-working-when-time-zone-set-to-default/364439)
**Author:** [@Fiza](https://discuss.elastic.co/u/Fiza)\ **Replies:** 8\ **Last updated:** [August 26, 2024, 9:34am UTC](https://discuss.elastic.co/t/heat-map-not-working-when-time-zone-set-to-default/364439 "2024-08-26T09:34:56Z")
Hello @everyone, I am trying to create heat map visualization which is not behaving as expected. The time zone is set to default. When creating heat map it works till selected timerange is Last 4 days. If I select ab… --- ## [Unable to disable "Apply custom time range" on visualization on canvas](https://discuss.elastic.co/t/unable-to-disable-apply-custom-time-range-on-visualization-on-canvas/365455)
**Author:** [@cjessing](https://discuss.elastic.co/u/cjessing)\ **Replies:** 2\ **Last updated:** [August 26, 2024, 9:34am UTC](https://discuss.elastic.co/t/unable-to-disable-apply-custom-time-range-on-visualization-on-canvas/365455 "2024-08-26T09:34:02Z")
I have a Vega-Lite visualization that I've added to a canvas. I've switched off "Show title" and "Apply custom time range" in settings but each time the page is reloaded, the "Apply custom time range" is switched back on… --- ## [HTTP Monitoring Liveness not activateable via Fleet](https://discuss.elastic.co/t/http-monitoring-liveness-not-activateable-via-fleet/365539)
**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\ **Replies:** 1\ **Last updated:** [August 26, 2024, 8:59am UTC](https://discuss.elastic.co/t/http-monitoring-liveness-not-activateable-via-fleet/365539 "2024-08-26T08:59:34Z")
After the new HTTP monitoring is configurable in the Fleet agent policy since 8.15. We wanted to use that for liveness/readiness probes in Kubernetes. However even if the ports are configured in the fleet agent policy. T… --- ## [Match query with only 2 word search in search query](https://discuss.elastic.co/t/match-query-with-only-2-word-search-in-search-query/365526)
**Author:** [@Mohan\_T](https://discuss.elastic.co/u/Mohan_T)\ **Replies:** 1\ **Last updated:** [August 26, 2024, 7:03am UTC](https://discuss.elastic.co/t/match-query-with-only-2-word-search-in-search-query/365526 "2024-08-26T07:03:37Z")
Document 1: { "id": 1, "title": "marble flooring" } Document 2: { "id": 2, "title": "flooring marble" } Document 3: { "id": 3, "title": "italian marble flooring" } Existing query which am us… --- ## [Unable to update elastic data](https://discuss.elastic.co/t/unable-to-update-elastic-data/365530)
**Author:** [@irajeshr](https://discuss.elastic.co/u/irajeshr)\ **Replies:** 0\ **Last updated:** [August 26, 2024, 6:52am UTC](https://discuss.elastic.co/t/unable-to-update-elastic-data/365530 "2024-08-26T06:52:17Z")
i am trying to update elastic data based on ID, but the error is failing with bad request/data missing error. Code: Dim testIndex1 = New testIndex With { .id = txtId.Text.Trim, .User = txtUserid.Text.Trim, … --- ## [Sort on Elastic Search .NET API](https://discuss.elastic.co/t/sort-on-elastic-search-net-api/365527)
**Author:** [@irajeshr](https://discuss.elastic.co/u/irajeshr)\ **Replies:** 0\ **Last updated:** [August 26, 2024, 6:43am UTC](https://discuss.elastic.co/t/sort-on-elastic-search-net-api/365527 "2024-08-26T06:43:47Z")
can anyone pls share object initializer syntax for sort requests instead of lambdas? i tried couple of things but they are not working Code: Dim req = New SearchRequest(Of testIndex)(txtIndex2.Text.Trim) With { .… --- ## [Exiting: error loading config file: yaml: line 32: did not find expected '-' indicator](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-32-did-not-find-expected-indicator/365513)
**Author:** [@Vivek\_Chaturvedi](https://discuss.elastic.co/u/Vivek_Chaturvedi)\ **Replies:** 2\ **Last updated:** [August 26, 2024, 5:43am UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-32-did-not-find-expected-indicator/365513 "2024-08-26T05:43:02Z")
\################### Heartbeat Configuration Example ######################### # This file is an example configuration file highlighting only some common options. # The heartbeat.reference.yml file in the same directory … --- ## [Winlogbeat error connecting to ElasticSearch](https://discuss.elastic.co/t/winlogbeat-error-connecting-to-elasticsearch/365316)
**Author:** [@Edzel\_Severino](https://discuss.elastic.co/u/Edzel_Severino)\ **Replies:** 10\ **Last updated:** [August 26, 2024, 12:58am UTC](https://discuss.elastic.co/t/winlogbeat-error-connecting-to-elasticsearch/365316 "2024-08-26T00:58:22Z")
Hello, can someone help me? I am having a problem after winlogbeat installation. when i run .\\winlogbeat.exe setup -e is show error: Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error… --- ## [I have trial subscription - No ML nodes exist in the cluster](https://discuss.elastic.co/t/i-have-trial-subscription-no-ml-nodes-exist-in-the-cluster/365504)
**Author:** [@Rahul\_Chandra](https://discuss.elastic.co/u/Rahul_Chandra)\ **Replies:** 1\ **Last updated:** [August 26, 2024, 1:08am UTC](https://discuss.elastic.co/t/i-have-trial-subscription-no-ml-nodes-exist-in-the-cluster/365504 "2024-08-26T01:08:59Z")
I have trial subscription When creating an inference endpoint I get following error Could not start deployment because no suitable nodes were found, allocation explanation \[No ML nodes exist in the cluster\]". How can … --- ## [Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused/364710)
**Author:** [@Edzel\_Severino](https://discuss.elastic.co/u/Edzel_Severino)\ **Replies:** 6\ **Last updated:** [August 25, 2024, 11:48am UTC](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused/364710 "2024-08-25T11:48:06Z")
Can someone help me? I followed a link on installing elastic,kibana and logstash and i was able to successfully installed elastic. However, when i try to netstat and look for the port 9200, it wasnt there. Also I can't … --- ## [Filebeat error when setting up data stream with working index](https://discuss.elastic.co/t/filebeat-error-when-setting-up-data-stream-with-working-index/365254)
**Author:** [@Tom\_N](https://discuss.elastic.co/u/Tom_N)\ **Replies:** 9\ **Last updated:** [August 24, 2024, 3:06pm UTC](https://discuss.elastic.co/t/filebeat-error-when-setting-up-data-stream-with-working-index/365254 "2024-08-24T15:06:26Z")
I am using filebeat version 7.17.22. At the start, my filebeat works and sends data to Elasticsearch, which can be seen using Kibana. It sends data to the index. I have been trying to setup a datastream, so I did so by… --- ## [Apparently I need to edit a Filebeat 'data stream template'. Such a thing does not exist!](https://discuss.elastic.co/t/apparently-i-need-to-edit-a-filebeat-data-stream-template-such-a-thing-does-not-exist/364495)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 5\ **Last updated:** [August 24, 2024, 3:04pm UTC](https://discuss.elastic.co/t/apparently-i-need-to-edit-a-filebeat-data-stream-template-such-a-thing-does-not-exist/364495 "2024-08-24T15:04:47Z")
We're using Filebeat 8.14.3 to index network logs. We'd like to enable the \_size field for all Filebeat data streams. (My previous thread on this topic). Here's the attempt to enable the "\_size" field: PUT /\_index\_temp… --- ## [Save custom logs with logstash](https://discuss.elastic.co/t/save-custom-logs-with-logstash/365490)
**Author:** [@sandra\_a](https://discuss.elastic.co/u/sandra_a)\ **Replies:** 1\ **Last updated:** [August 24, 2024, 12:51pm UTC](https://discuss.elastic.co/t/save-custom-logs-with-logstash/365490 "2024-08-24T12:51:38Z")
I'm new to ELK. I have many containers from which I want to collect logs using Logstash. My custom log looks like this: {'agent\_id': 99, 'name': 'Cora', 'timestamp': '2024-08-21 06:26:09', 'operation\_name': 'Do\_smthin… --- ## [Ingest pipelines 7.17.9](https://discuss.elastic.co/t/ingest-pipelines-7-17-9/365492)
**Author:** [@tegerei](https://discuss.elastic.co/u/tegerei)\ **Replies:** 0\ **Last updated:** [August 24, 2024, 2:16pm UTC](https://discuss.elastic.co/t/ingest-pipelines-7-17-9/365492 "2024-08-24T14:16:18Z")
Hello, I have the following haproxy log as shown in Kibana: {"log":"\\u003c150\\u003eApr 10 19:00:56 haproxy\[51\]: 172.69.63.101:63258 \[24/Apr/2024:19:00:56.284\] ha~ stat/\\u003cNOSRV\\u003e 0/-1/-1/-1/0 503 217 - - SCNN 3/… --- ## [Problem in editing @timestamp through ingest pipeline](https://discuss.elastic.co/t/problem-in-editing-timestamp-through-ingest-pipeline/365491)
**Author:** [@fardadmh](https://discuss.elastic.co/u/fardadmh)\ **Replies:** 2\ **Last updated:** [August 24, 2024, 1:37pm UTC](https://discuss.elastic.co/t/problem-in-editing-timestamp-through-ingest-pipeline/365491 "2024-08-24T13:37:04Z")
Hello there. I've been trying to manipulate @timestamp through a script in a ingest pipeline (substract 8 hours). I tried referencing @timestamp using this syntax: ctx.\_source\['@timestamp'\] = ctx.\_source\['@timestamp'\].… --- ## [Zero-Downtime Split Operation](https://discuss.elastic.co/t/zero-downtime-split-operation/365161)
**Author:** [@Ian\_Simpson](https://discuss.elastic.co/u/Ian_Simpson)\ **Replies:** 1\ **Last updated:** [August 24, 2024, 12:06pm UTC](https://discuss.elastic.co/t/zero-downtime-split-operation/365161 "2024-08-24T12:06:36Z")
I'm trying to figure out the best way to perform a zero-downtime split operation. I have a few questions: Is it possible for writes to go into the new index while the split is ongoing? Or should I shut down write opera… --- ## [Auto-generated deafult password hash error](https://discuss.elastic.co/t/auto-generated-deafult-password-hash-error/365401)
**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\ **Replies:** 4\ **Last updated:** [August 24, 2024, 11:45am UTC](https://discuss.elastic.co/t/auto-generated-deafult-password-hash-error/365401 "2024-08-24T11:45:19Z")
so as i am following Tutorial 1: Installing a self-managed Elastic Stack at the end of step 3 i should be able to run curl command and see some sort of default message that indicate my set up was fine but instead i get t… --- ## [ElasticSearch sorting by text length and huge ignore\_above](https://discuss.elastic.co/t/elasticsearch-sorting-by-text-length-and-huge-ignore-above/365462)
**Author:** [@sukhoy94](https://discuss.elastic.co/u/sukhoy94)\ **Replies:** 2\ **Last updated:** [August 24, 2024, 7:27am UTC](https://discuss.elastic.co/t/elasticsearch-sorting-by-text-length-and-huge-ignore-above/365462 "2024-08-24T07:27:04Z")
I need to sort my elasticsearch documents by length of a text field. However, this field can sometimes contain a very large amount of text (up to 15000 characters). I am aware that the ignore\_above parameter, which defau… --- ## [Unable to create extensions in managed elastic gold tier](https://discuss.elastic.co/t/unable-to-create-extensions-in-managed-elastic-gold-tier/365484)
**Author:** [@gsk6](https://discuss.elastic.co/u/gsk6)\ **Replies:** 1\ **Last updated:** [August 24, 2024, 6:09am UTC](https://discuss.elastic.co/t/unable-to-create-extensions-in-managed-elastic-gold-tier/365484 "2024-08-24T06:09:59Z")
I am trying to create an extension in elasticsearch using the UI, but under the extensions page, the "Upload extension" option is disabled for me. I could not find a similar case online, can someone help on this? I read… --- ## [I do not see Log out option](https://discuss.elastic.co/t/i-do-not-see-log-out-option/365468)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 1\ **Last updated:** [August 24, 2024, 3:16am UTC](https://discuss.elastic.co/t/i-do-not-see-log-out-option/365468 "2024-08-24T03:16:16Z")
I try to log out this account, but I do not see Log out option. How can I log out and log in with another account? Thanks --- ## [Runtime fields not generated](https://discuss.elastic.co/t/runtime-fields-not-generated/364623)
**Author:** [@jonathan.wong](https://discuss.elastic.co/u/jonathan.wong)\ **Replies:** 4\ **Last updated:** [August 23, 2024, 6:37pm UTC](https://discuss.elastic.co/t/runtime-fields-not-generated/364623 "2024-08-23T18:37:25Z")
We're trying to set up a runtime field for certain index or data stream that has the same field from another index. We've tried to run the following on the Dev Console and different alteration of it, but every attempt do… --- ## [Self-Monitoring in Elasticsearch 8.11 stopped working](https://discuss.elastic.co/t/self-monitoring-in-elasticsearch-8-11-stopped-working/365412)
**Author:** [@nitesh.srivastava](https://discuss.elastic.co/u/nitesh.srivastava)\ **Replies:** 2\ **Last updated:** [August 23, 2024, 5:04pm UTC](https://discuss.elastic.co/t/self-monitoring-in-elasticsearch-8-11-stopped-working/365412 "2024-08-23T17:04:18Z")
Hello All, The Self-Monitoring in our Elasticsearch 8.11 environment all of a sudden has stopped working. This is how it used to look last week: But, it looks like this now: And, I get this error when I go to t… --- ## [Data ingestion error](https://discuss.elastic.co/t/data-ingestion-error/365467)
**Author:** [@jaime\_solas](https://discuss.elastic.co/u/jaime_solas)\ **Replies:** 3\ **Last updated:** [August 23, 2024, 4:16pm UTC](https://discuss.elastic.co/t/data-ingestion-error/365467 "2024-08-23T16:16:12Z")
When I perform the ingestion everything seems to be fine, the information is displayed correctly in kibana but during the process the following errors appear \[ERROR\] 2024-08-23 15:08:25.370 \[\[main\]\>worker2\] ruby - Ruby … --- ## [Shard activity always happening in ElasticSearch 8.12 version](https://discuss.elastic.co/t/shard-activity-always-happening-in-elasticsearch-8-12-version/364906)
**Author:** [@Amit\_Shukla](https://discuss.elastic.co/u/Amit_Shukla)\ **Replies:** 7\ **Last updated:** [August 23, 2024, 3:54pm UTC](https://discuss.elastic.co/t/shard-activity-always-happening-in-elasticsearch-8-12-version/364906 "2024-08-23T15:54:46Z")
We have upgraded Elasticsearch to 8.12 and changed index level settings to have shards per node as 4 , which was earlier 2. Somehow everytime some shard recovery is happening and shards are moving from one node to anoth… --- ## [Logstash timezone is not work](https://discuss.elastic.co/t/logstash-timezone-is-not-work/365466)
**Author:** [@Magali\_Romero](https://discuss.elastic.co/u/Magali_Romero)\ **Replies:** 2\ **Last updated:** [August 23, 2024, 3:26pm UTC](https://discuss.elastic.co/t/logstash-timezone-is-not-work/365466 "2024-08-23T15:26:09Z")
Hi, I have this configuration in logstash.conf, however the alerts continue to arrive in UTC filter { if "his-vm" in \[tags\] { # Agregar campos debug\_alert\_id y formatted\_timestamp mutate { add\_field =\> { "debug\_alert… --- ## [Logstash pulling in Date as a Timestamp](https://discuss.elastic.co/t/logstash-pulling-in-date-as-a-timestamp/365329)
**Author:** [@Vaesive](https://discuss.elastic.co/u/Vaesive)\ **Replies:** 8\ **Last updated:** [August 23, 2024, 3:01pm UTC](https://discuss.elastic.co/t/logstash-pulling-in-date-as-a-timestamp/365329 "2024-08-23T15:01:26Z")
I'm losing my mind here so I'm hoping someone can point out where I'm being dumb. My DB view has a date field and the dates are formatted "yyyy-MM-dd" (2023-08-15). However, when ingesting the data from the view with Lo… --- ## [Alternatives to old .kibana indices to retrieve dashboards title](https://discuss.elastic.co/t/alternatives-to-old-kibana-indices-to-retrieve-dashboards-title/364925)
**Author:** [@plcharl](https://discuss.elastic.co/u/plcharl)\ **Replies:** 3\ **Last updated:** [August 23, 2024, 2:55pm UTC](https://discuss.elastic.co/t/alternatives-to-old-kibana-indices-to-retrieve-dashboards-title/364925 "2024-08-23T14:55:12Z")
Hello all ! My client just migrated from ELK7 -\> ELK8. We have a logstash pipeline indexing some kibana audit logs to make statistics over defined spaces/dashboard on our Kibana, which was using .kibana indexes to retr… --- ## [Filter Lens components in Canvas using a Timerange Filter](https://discuss.elastic.co/t/filter-lens-components-in-canvas-using-a-timerange-filter/364134)
**Author:** [@DataBjorn](https://discuss.elastic.co/u/DataBjorn)\ **Replies:** 1\ **Last updated:** [August 23, 2024, 11:40am UTC](https://discuss.elastic.co/t/filter-lens-components-in-canvas-using-a-timerange-filter/364134 "2024-08-23T11:40:47Z")
I am using Lens components in my Canvas board, and these have local time ranges. How can I use the time range filter of the Canvas board to filter these? I have disabled the "Apply Custom Time Range", but when setting t… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=179) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=181)