# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=192

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 193

---

## [Back up and elastic agent](https://discuss.elastic.co/t/back-up-and-elastic-agent/364393)

<div class="topic-metadata">

**Author:** [@mmttt](https://discuss.elastic.co/u/mmttt)\
**Replies:** 0\
**Last updated:** [August 5, 2024, 1:39pm UTC](https://discuss.elastic.co/t/back-up-and-elastic-agent/364393 "2024-08-05T13:39:51Z")

</div>

Hello. I want to back up my system using the Elasticsearch features. It is very important for me here to be able to return their agents without going to the endpoints and succeed in getting logs from them. Thanks

---

## [Setting up Integrations: Fortinet](https://discuss.elastic.co/t/setting-up-integrations-fortinet/359251)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 30\
**Last updated:** [August 5, 2024, 12:52pm UTC](https://discuss.elastic.co/t/setting-up-integrations-fortinet/359251 "2024-08-05T12:52:15Z")

</div>

Hello I want to try out the integration feature but Im kind of lost. Im gonna have my ELK stack all on one server. The reason I mention this is because there is a Fleek/Elastic Agent being talked about and Im not sure …

---

## [Elastic-Agent and Logstash Integration Issue: FortiGate Logs Not Correctly Parsed in Elasticsearch](https://discuss.elastic.co/t/elastic-agent-and-logstash-integration-issue-fortigate-logs-not-correctly-parsed-in-elasticsearch/364342)

<div class="topic-metadata">

**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\
**Replies:** 4\
**Last updated:** [August 5, 2024, 12:35pm UTC](https://discuss.elastic.co/t/elastic-agent-and-logstash-integration-issue-fortigate-logs-not-correctly-parsed-in-elasticsearch/364342 "2024-08-05T12:35:34Z")

</div>

I am currently trying to integrate Fortinet FortiGate Firewall logs through Elastic-Agent and Logstash, finally directing them into Elasticsearch. Here is my Logstash configuration: input { elastic\_agent { port =\> …

---

## [Filebeat creates indexes that do not respect the index\_template mapping](https://discuss.elastic.co/t/filebeat-creates-indexes-that-do-not-respect-the-index-template-mapping/364375)

<div class="topic-metadata">

**Author:** [@Terkea](https://discuss.elastic.co/u/Terkea)\
**Replies:** 0\
**Last updated:** [August 5, 2024, 11:29am UTC](https://discuss.elastic.co/t/filebeat-creates-indexes-that-do-not-respect-the-index-template-mapping/364375 "2024-08-05T11:29:31Z")

</div>

hello guys, I have an issue with filebeat where I have configured an index\_template and its mapping but the indices created in the filebeat do not follow the mapping of the index\_template. filebeat version is 7.17.22 f…

---

## [Enabled SSL for elasticsearch 8 docker using our own keystore and trustore](https://discuss.elastic.co/t/enabled-ssl-for-elasticsearch-8-docker-using-our-own-keystore-and-trustore/364371)

<div class="topic-metadata">

**Author:** [@cassper](https://discuss.elastic.co/u/cassper)\
**Replies:** 1\
**Last updated:** [August 5, 2024, 11:13am UTC](https://discuss.elastic.co/t/enabled-ssl-for-elasticsearch-8-docker-using-our-own-keystore-and-trustore/364371 "2024-08-05T11:13:59Z")

</div>

Hello, This is my elasticseach.yaml and I am using ES 8.13 docker. I have my own keystore and trustore files. cluster.name: "docker-cluster" network.host: 0.0.0.0 xpack.security.enabled: true xpack.security.transport.…

---

## [Variety of data in Y axis](https://discuss.elastic.co/t/variety-of-data-in-y-axis/363701)

<div class="topic-metadata">

**Author:** [@juandres117](https://discuss.elastic.co/u/juandres117)\
**Replies:** 3\
**Last updated:** [August 5, 2024, 8:41am UTC](https://discuss.elastic.co/t/variety-of-data-in-y-axis/363701 "2024-08-05T08:41:29Z")

</div>

Hi! I have downloaded the data from: Democracy index - Our World in Data Which has the democracy index for countries and different years. I would like to represent something similar like this photo However I cannot …

---

## [Elasticsearch and Magento 2.4.1 “No mapping found for position category”](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/364357)

<div class="topic-metadata">

**Author:** [@MageComp\_Product\_Tea](https://discuss.elastic.co/u/MageComp_Product_Tea)\
**Replies:** 1\
**Last updated:** [August 5, 2024, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-and-magento-2-4-1-no-mapping-found-for-position-category/364357 "2024-08-05T08:22:54Z")

</div>

\[2024-08-05T05:11:45.779144+00:00\] main.CRITICAL: Elasticsearch\\Common\\Exceptions\\BadRequest400Exception: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Text fields are not optimised for operation…

---

## [Understanding Storage Overhead in Elasticsearch for Vector Data](https://discuss.elastic.co/t/understanding-storage-overhead-in-elasticsearch-for-vector-data/364319)

<div class="topic-metadata">

**Author:** [@Andy\_Cong](https://discuss.elastic.co/u/Andy_Cong)\
**Replies:** 3\
**Last updated:** [August 5, 2024, 7:52am UTC](https://discuss.elastic.co/t/understanding-storage-overhead-in-elasticsearch-for-vector-data/364319 "2024-08-05T07:52:12Z")

</div>

Problem Description: This is the Elasticsearch index mapping. Theoretically, storing a vector with float32 values should take up 4KB of storage. Therefore, each document record should occupy approximately 4KB. However,…

---

## [Falling short on CPU memory](https://discuss.elastic.co/t/falling-short-on-cpu-memory/364353)

<div class="topic-metadata">

**Author:** [@Thunder1245](https://discuss.elastic.co/u/Thunder1245)\
**Replies:** 0\
**Last updated:** [August 5, 2024, 7:49am UTC](https://discuss.elastic.co/t/falling-short-on-cpu-memory/364353 "2024-08-05T07:49:00Z")

</div>

I am falling short on CPU memory while starting KIbana. My RAM:8GB. Can someone help me?

---

## [Struggling to Upsert only one field of a document](https://discuss.elastic.co/t/struggling-to-upsert-only-one-field-of-a-document/364351)

<div class="topic-metadata">

**Author:** [@sicarius\_noidea](https://discuss.elastic.co/u/sicarius_noidea)\
**Replies:** 0\
**Last updated:** [August 5, 2024, 7:16am UTC](https://discuss.elastic.co/t/struggling-to-upsert-only-one-field-of-a-document/364351 "2024-08-05T07:16:24Z")

</div>

Hello, I'm using Elasticsearch to store billions of data points, each with four key fields: value type date\_first\_seen date\_last\_seen I use Logstash to calculate an mmh3 ID for each document based on the type and val…

---

## [Expose Kibana externally using NLB with AWS LoadBalancer Controller](https://discuss.elastic.co/t/expose-kibana-externally-using-nlb-with-aws-loadbalancer-controller/364347)

<div class="topic-metadata">

**Author:** [@toduythienluong](https://discuss.elastic.co/u/toduythienluong)\
**Replies:** 0\
**Last updated:** [August 5, 2024, 6:37am UTC](https://discuss.elastic.co/t/expose-kibana-externally-using-nlb-with-aws-loadbalancer-controller/364347 "2024-08-05T06:37:22Z")

</div>

Hi, I am following this guide to have ECK then Elastic Search and Kibana installed on EKS. Everything is just fine, I have Kabana up and run with port-forwarding as documented, however when I expose the service with ty…

---

## [Remove Indices Folder in elasticsearch, how to connect back kibana and logstash?](https://discuss.elastic.co/t/remove-indices-folder-in-elasticsearch-how-to-connect-back-kibana-and-logstash/364281)

<div class="topic-metadata">

**Author:** [@kam89](https://discuss.elastic.co/u/kam89)\
**Replies:** 4\
**Last updated:** [August 5, 2024, 3:12am UTC](https://discuss.elastic.co/t/remove-indices-folder-in-elasticsearch-how-to-connect-back-kibana-and-logstash/364281 "2024-08-05T03:12:51Z")

</div>

Hi all, Good day, recently I have setup a new ELKStack server, and the D: drive is full, so I have removed the indices folder from the elasticsearch\\data folder. After that only I realised I should not remove the indice…

---

## [S3-repository plugin complaining missing "/nonexistent/.aws/config" "read"](https://discuss.elastic.co/t/s3-repository-plugin-complaining-missing-nonexistent-aws-config-read/364272)

<div class="topic-metadata">

**Author:** [@Abhishek\_Soni1](https://discuss.elastic.co/u/Abhishek_Soni1)\
**Replies:** 3\
**Last updated:** [August 4, 2024, 8:05pm UTC](https://discuss.elastic.co/t/s3-repository-plugin-complaining-missing-nonexistent-aws-config-read/364272 "2024-08-04T20:05:55Z")

</div>

Hi Elastic community, I am facing an issue during start of elasticsearch, it failed to read configurations of S3-repository plugin. We have recently upgraded to 8.14 from 7.17. Since it is a part core plugins, and I und…

---

## [Cutoff data from source index to destination index](https://discuss.elastic.co/t/cutoff-data-from-source-index-to-destination-index/364333)

<div class="topic-metadata">

**Author:** [@abhadauria](https://discuss.elastic.co/u/abhadauria)\
**Replies:** 1\
**Last updated:** [August 4, 2024, 2:15pm UTC](https://discuss.elastic.co/t/cutoff-data-from-source-index-to-destination-index/364333 "2024-08-04T14:15:49Z")

</div>

We are re-indexing data in ES cluster 7.17 from a live source index to newly created target index, is there a way to copy the entire data till the endtime of re-indexing API? so that while switching to the new index all …

---

## [Data node JVM Heap not stable](https://discuss.elastic.co/t/data-node-jvm-heap-not-stable/364328)

<div class="topic-metadata">

**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\
**Replies:** 1\
**Last updated:** [August 4, 2024, 9:10am UTC](https://discuss.elastic.co/t/data-node-jvm-heap-not-stable/364328 "2024-08-04T09:10:36Z")

</div>

Hi I Have cluster with 3 data nodes + 1 master node. I noticed that in Idle the JVM heap of data node is not stable and jumping between 16GB to 25GB. Please see below. Why it is happening? Is it normal behavior?

---

## [Kubernetes providers cannot find right current index or log.file.path](https://discuss.elastic.co/t/kubernetes-providers-cannot-find-right-current-index-or-log-file-path/364326)

<div class="topic-metadata">

**Author:** [@farhad\_kh](https://discuss.elastic.co/u/farhad_kh)\
**Replies:** 0\
**Last updated:** [August 4, 2024, 7:13am UTC](https://discuss.elastic.co/t/kubernetes-providers-cannot-find-right-current-index-or-log-file-path/364326 "2024-08-04T07:13:36Z")

</div>

hi, used kubernetes provider for filebeat.and get %{\[kubernetes.namespace\]} for index ,but in documents for special namespace i see other namespace logs and filed log.file.path is incorrect. In fact, in an index related…

---

## [Elasticsearch Hot-Warm-Cold](https://discuss.elastic.co/t/elasticsearch-hot-warm-cold/364320)

<div class="topic-metadata">

**Author:** [@Atefeh](https://discuss.elastic.co/u/Atefeh)\
**Replies:** 1\
**Last updated:** [August 4, 2024, 6:49am UTC](https://discuss.elastic.co/t/elasticsearch-hot-warm-cold/364320 "2024-08-04T06:49:44Z")

</div>

If I have sufficient SSD storage to maintain all my data, and I can afford the associated costs, I still need to implement a multi-tier architecture.

---

## [Connect ECONNREFUSED 192.168.138.12:9200](https://discuss.elastic.co/t/connect-econnrefused-192-168-138-12-9200/364322)

<div class="topic-metadata">

**Author:** [@g0nz0](https://discuss.elastic.co/u/g0nz0)\
**Replies:** 0\
**Last updated:** [August 4, 2024, 6:41am UTC](https://discuss.elastic.co/t/connect-econnrefused-192-168-138-12-9200/364322 "2024-08-04T06:41:10Z")

</div>

Hello, This is odd, I got this working on an old Ubuntu VM and old Docker/Compose, it might not be this, but I've build a new Ubunutu server and with all the latest versions and can't get Elastisearch/Kibana to work. I…

---

## [elasticsearc](https://discuss.elastic.co/t/elasticsearc/364315)

<div class="topic-metadata">

**Author:** [@Abdurauf\_Adhamjanov](https://discuss.elastic.co/u/Abdurauf_Adhamjanov)\
**Replies:** 1\
**Last updated:** [August 4, 2024, 5:13am UTC](https://discuss.elastic.co/t/elasticsearc/364315 "2024-08-04T05:13:43Z")

</div>

Dear Elasticsearch Support Team, I am reaching out to seek guidance regarding an ongoing issue we are experiencing with our Elasticsearch deployment. Despite several troubleshooting efforts, we are unable to resolve the…

---

## [Custom branding License](https://discuss.elastic.co/t/custom-branding-license/364305)

<div class="topic-metadata">

**Author:** [@Rutuja\_More](https://discuss.elastic.co/u/Rutuja_More)\
**Replies:** 1\
**Last updated:** [August 3, 2024, 4:16pm UTC](https://discuss.elastic.co/t/custom-branding-license/364305 "2024-08-03T16:16:12Z")

</div>

Do the Platinum, Gold, and Enterprise licenses all include custom branding ?

---

## [Custom Branding for Gold license](https://discuss.elastic.co/t/custom-branding-for-gold-license/364299)

<div class="topic-metadata">

**Author:** [@Rutuja\_More](https://discuss.elastic.co/u/Rutuja_More)\
**Replies:** 1\
**Last updated:** [August 3, 2024, 2:52pm UTC](https://discuss.elastic.co/t/custom-branding-for-gold-license/364299 "2024-08-03T14:52:03Z")

</div>

Is custom branding available with the Gold license for ELK ?

---

## [Does match\_only\_text data type really requires a license on Elastic Cloud?](https://discuss.elastic.co/t/does-match-only-text-data-type-really-requires-a-license-on-elastic-cloud/364301)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 1\
**Last updated:** [August 3, 2024, 1:09pm UTC](https://discuss.elastic.co/t/does-match-only-text-data-type-really-requires-a-license-on-elastic-cloud/364301 "2024-08-03T13:09:46Z")

</div>

Hello, I'm planning on doing some tests using Elastic cloud and to make it cheaper I would use the Standard tier, I was then checking the difference between the tiers and in the subscription page it says that match\_only…

---

## [Elasticsearch Force Restart taking a really long time](https://discuss.elastic.co/t/elasticsearch-force-restart-taking-a-really-long-time/364295)

<div class="topic-metadata">

**Author:** [@vsabado](https://discuss.elastic.co/u/vsabado)\
**Replies:** 0\
**Last updated:** [August 2, 2024, 10:11pm UTC](https://discuss.elastic.co/t/elasticsearch-force-restart-taking-a-really-long-time/364295 "2024-08-02T22:11:31Z")

</div>

I hit a lot of issues while updating my deployment of Elasticsearch today. Reducing the RAM from 4GB down resulted in the JVM pressure getting really high. I've re-adjusted some of those changes but my Elasticsearch inst…

---

## [Kibana UX Background](https://discuss.elastic.co/t/kibana-ux-background/364294)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 1\
**Last updated:** [August 2, 2024, 10:06pm UTC](https://discuss.elastic.co/t/kibana-ux-background/364294 "2024-08-02T22:06:08Z")

</div>

Hello, This is very random but it peaked my curiousity. I noticed the preview of a dashboard has a different background format: Versus what I am seeing: Keep in mind, I am not talking about the data and the err…

---

## [Hardware recomendations](https://discuss.elastic.co/t/hardware-recomendations/364079)

<div class="topic-metadata">

**Author:** [@\_james](https://discuss.elastic.co/u/_james)\
**Replies:** 3\
**Last updated:** [August 2, 2024, 9:17pm UTC](https://discuss.elastic.co/t/hardware-recomendations/364079 "2024-08-02T21:17:04Z")

</div>

We have an Elasticsearch cluster which needs a hardware refresh, we currently have 5 servers each of "AMD EPYC 7702P 64-Core Processor" and 512GB of RAM, these machines are sitting around 60-80 % busy and this is why the…

---

## [Accessing elasticsearch api url](https://discuss.elastic.co/t/accessing-elasticsearch-api-url/363877)

<div class="topic-metadata">

**Author:** [@mealbert23](https://discuss.elastic.co/u/mealbert23)\
**Replies:** 2\
**Last updated:** [August 2, 2024, 9:03pm UTC](https://discuss.elastic.co/t/accessing-elasticsearch-api-url/363877 "2024-08-02T21:03:30Z")

</div>

Hi, I have recently setup an elasticsearch and kibana system on aws eks. Everything seems to be running without issues. fleet server/agents and elastic agents are running, kibana is accessible from a public url, and e…

---

## [Fatal exception while booting Elasticsearch](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/364033)

<div class="topic-metadata">

**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\
**Replies:** 1\
**Last updated:** [August 2, 2024, 8:08pm UTC](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/364033 "2024-08-02T20:08:58Z")

</div>

Hello I want to run elasticsearch shows me the following error \[error\]\[o.e.b.Elasticsearch \] \[nodename\] fatal exception while booting Elasticsearch java.lang.illegalStateExcption: failed to obtain node locks,tride\[/…

---

## [Indexing performance on indices with vector fields](https://discuss.elastic.co/t/indexing-performance-on-indices-with-vector-fields/359135)

<div class="topic-metadata">

**Author:** [@Sorin\_Panduru](https://discuss.elastic.co/u/Sorin_Panduru)\
**Replies:** 1\
**Last updated:** [August 2, 2024, 8:01pm UTC](https://discuss.elastic.co/t/indexing-performance-on-indices-with-vector-fields/359135 "2024-08-02T20:01:09Z")

</div>

We are using Elasticsearch version 8.11.3 self hosted, in a cluster with 11 nodes (16 gb ram 16 cpu each). We have an index with ~140k documents that contain fields of various types (mostly keywords and a few text ones)…

---

## [Need advice: How to index/search for people with skills that match a single job description?](https://discuss.elastic.co/t/need-advice-how-to-index-search-for-people-with-skills-that-match-a-single-job-description/364177)

<div class="topic-metadata">

**Author:** [@bgadoury](https://discuss.elastic.co/u/bgadoury)\
**Replies:** 1\
**Last updated:** [August 2, 2024, 7:33pm UTC](https://discuss.elastic.co/t/need-advice-how-to-index-search-for-people-with-skills-that-match-a-single-job-description/364177 "2024-08-02T19:33:27Z")

</div>

I am in the "we're definitely using Elasticsearch and now we just have to figure out exactly how to do this with Elasticsearch" phase of a project for a bootstrapped start-up. Use Case: I have a single job description a…

---

## [Cannot create analyzer that has more than 2 synonym\_graph filters](https://discuss.elastic.co/t/cannot-create-analyzer-that-has-more-than-2-synonym-graph-filters/364169)

<div class="topic-metadata">

**Author:** [@dat\_boi](https://discuss.elastic.co/u/dat_boi)\
**Replies:** 1\
**Last updated:** [August 2, 2024, 7:26pm UTC](https://discuss.elastic.co/t/cannot-create-analyzer-that-has-more-than-2-synonym-graph-filters/364169 "2024-08-02T19:26:43Z")

</div>

while trying to switch from synonym type to synonym\_graph i had these settings : "settings": { "analysis": { "filter": { "synonyms\_filter\_ar": { "type": "synonym", "updateable": t…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=191)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=193)
