# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=193 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 194 --- ## [Elasticsearch 8.14 max memory size](https://discuss.elastic.co/t/elasticsearch-8-14-max-memory-size/364211)
**Author:** [@elsgaard](https://discuss.elastic.co/u/elsgaard)\ **Replies:** 1\ **Last updated:** [August 2, 2024, 7:12pm UTC](https://discuss.elastic.co/t/elasticsearch-8-14-max-memory-size/364211 "2024-08-02T19:12:51Z")
Hi ! With Elasticsearch 8.14 on Ubuntu, is it still required to set the max memory size to half the amount og available memory, or will elasticsearch calculate it automatically ? If required to be set manually, where is… --- ## [Elasticsearch trained model inference not working](https://discuss.elastic.co/t/elasticsearch-trained-model-inference-not-working/364243)
**Author:** [@shwanlee](https://discuss.elastic.co/u/shwanlee)\ **Replies:** 1\ **Last updated:** [August 2, 2024, 7:08pm UTC](https://discuss.elastic.co/t/elasticsearch-trained-model-inference-not-working/364243 "2024-08-02T19:08:12Z")
Are there any bugs with the CPU ARM64 processor? I have installed Elasticsearch on three Amazon m7g.2xlarge instances, each running Linux aarch64 with version 8.14.3. Both the .elser\_model\_2 model and the .multilingual-e… --- ## [What User Role(s) Needed for Magento 2.4.6-p5 Access](https://discuss.elastic.co/t/what-user-role-s-needed-for-magento-2-4-6-p5-access/364178)
**Author:** [@MrHasu](https://discuss.elastic.co/u/MrHasu)\ **Replies:** 5\ **Last updated:** [August 2, 2024, 4:29pm UTC](https://discuss.elastic.co/t/what-user-role-s-needed-for-magento-2-4-6-p5-access/364178 "2024-08-02T16:29:10Z")
Totally new to Elasticsearch, so please be gentle. I have Elasticsearch v8.14.3 installed on Linux Mint v21.3 (Ubuntu base) and I am trying to find out what User Roles needs to be assigned to a user for my Magento v2.4.… --- ## [Kibana URL access header showing kbn-name](https://discuss.elastic.co/t/kibana-url-access-header-showing-kbn-name/363645)
**Author:** [@sameerpatel37](https://discuss.elastic.co/u/sameerpatel37)\ **Replies:** 7\ **Last updated:** [August 2, 2024, 3:23pm UTC](https://discuss.elastic.co/t/kibana-url-access-header-showing-kbn-name/363645 "2024-08-02T15:23:03Z")
When opening kibana URL in browser so in a inspect page header section kbn-name show the hostname of the server in response header. So is there anyway to remove kbn-name header from kibana. ES version = 7.17.0 Kibana v… --- ## [Check health of write index of alias?](https://discuss.elastic.co/t/check-health-of-write-index-of-alias/364267)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 2\ **Last updated:** [August 2, 2024, 1:27pm UTC](https://discuss.elastic.co/t/check-health-of-write-index-of-alias/364267 "2024-08-02T13:27:20Z")
Both data streams and Tutorial: Automate rollover with ILM | Elasticsearch Guide \[7.17\] | Elastic keep old index in alias on rollover. I want check by API my aliases are good for write (meaning health is green or yellow)… --- ## [After upgrading from Elasticsearch 7.4.0 to 7.17 .1, the queries are taking too long to return result](https://discuss.elastic.co/t/after-upgrading-from-elasticsearch-7-4-0-to-7-17-1-the-queries-are-taking-too-long-to-return-result/362159)
**Author:** [@RAHUL\_KUMAR12](https://discuss.elastic.co/u/RAHUL_KUMAR12)\ **Replies:** 2\ **Last updated:** [August 2, 2024, 11:40am UTC](https://discuss.elastic.co/t/after-upgrading-from-elasticsearch-7-4-0-to-7-17-1-the-queries-are-taking-too-long-to-return-result/362159 "2024-08-02T11:40:06Z")
Recently we have upgraded from Elasticsearch 7.4.0 to 7.17.1 and after the upgrade certain queries which were giving results immediately in 7.4.0, are now taking too long to return result. For reference a query which wa… --- ## [Best solution to visualize intermittend data of testruns?](https://discuss.elastic.co/t/best-solution-to-visualize-intermittend-data-of-testruns/364207)
**Author:** [@aendk](https://discuss.elastic.co/u/aendk)\ **Replies:** 3\ **Last updated:** [August 2, 2024, 10:40am UTC](https://discuss.elastic.co/t/best-solution-to-visualize-intermittend-data-of-testruns/364207 "2024-08-02T10:40:43Z")
Hey All, I am currently encountering a problem how to best visualize test run data. Most test runs take no more than a few hours and run at random times. Each data point contains a timestamp. In my approaches so far, t… --- ## [RPA Monitoring in ELK](https://discuss.elastic.co/t/rpa-monitoring-in-elk/364264)
**Author:** [@hairyapple](https://discuss.elastic.co/u/hairyapple)\ **Replies:** 0\ **Last updated:** [August 2, 2024, 10:16am UTC](https://discuss.elastic.co/t/rpa-monitoring-in-elk/364264 "2024-08-02T10:16:36Z")
We use UiPath and Power Platform as automation tools but we don't currently invest in any monitoring tools. Has anyone got any experience of using ELK to validate things like: Checking to see if a process automation h… --- ## [No past data in Kibana](https://discuss.elastic.co/t/no-past-data-in-kibana/364254)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 2\ **Last updated:** [August 2, 2024, 10:08am UTC](https://discuss.elastic.co/t/no-past-data-in-kibana/364254 "2024-08-02T10:08:38Z")
Hi Team, After restart of cluster (2 data node + 1 master node) we are not able to see past data in Kibana. No spaces,dashboards, datavisuals,users etc.. In stack management 36 indices are showing but displaying only … --- ## [.kibana-event-log- index pollution (100+)](https://discuss.elastic.co/t/kibana-event-log-index-pollution-100/364259)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 0\ **Last updated:** [August 2, 2024, 9:47am UTC](https://discuss.elastic.co/t/kibana-event-log-index-pollution-100/364259 "2024-08-02T09:47:54Z")
Old problem not solved. Every version of kibana creates new index template .kibana-event-log-7.xx.y-template with kibana-event-log-policy ILM policy that delete index after 90 days, but also keep creating new index every… --- ## [Logstash elastic\_agent input connection reset](https://discuss.elastic.co/t/logstash-elastic-agent-input-connection-reset/364258)
**Author:** [@BlueNick](https://discuss.elastic.co/u/BlueNick)\ **Replies:** 0\ **Last updated:** [August 2, 2024, 9:38am UTC](https://discuss.elastic.co/t/logstash-elastic-agent-input-connection-reset/364258 "2024-08-02T09:38:24Z")
Hello, I'm trying to set up logstash to receive logs from elastic agents with output to elasticsearch. Everything goes well, elasticsearch receives correctly the logs but on logstash side I'm flooded of this type of wa… --- ## [401 Unauthorized on Kibana 8.13.2 when accessing canvas API](https://discuss.elastic.co/t/401-unauthorized-on-kibana-8-13-2-when-accessing-canvas-api/364257)
**Author:** [@pranat](https://discuss.elastic.co/u/pranat)\ **Replies:** 1\ **Last updated:** [August 2, 2024, 9:27am UTC](https://discuss.elastic.co/t/401-unauthorized-on-kibana-8-13-2-when-accessing-canvas-api/364257 "2024-08-02T09:27:01Z")
We have to deploy ECK and Elasticsearch 8.13.2 cluster on onpremise VM where K8S is installed. We have created the esadmin user on Elasticsearch with superuser privileges along with allow\_restricted-indices: true We ha… --- ## [Field stored as "text" though it was mapped to "keyword"](https://discuss.elastic.co/t/field-stored-as-text-though-it-was-mapped-to-keyword/364173)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 3\ **Last updated:** [August 2, 2024, 6:16am UTC](https://discuss.elastic.co/t/field-stored-as-text-though-it-was-mapped-to-keyword/364173 "2024-08-02T06:16:26Z")
Hi, I'm running Elasticsearch version 8.8.0, and I want to map source.as.organization.name and destination.as.organization.name as keyword fields. This is data sent to ES using Filebeat, that is automatically getting IP… --- ## [Finding Filepath for Filebeat findings](https://discuss.elastic.co/t/finding-filepath-for-filebeat-findings/364241)
**Author:** [@STDHat\_IT](https://discuss.elastic.co/u/STDHat_IT)\ **Replies:** 0\ **Last updated:** [August 2, 2024, 4:32am UTC](https://discuss.elastic.co/t/finding-filepath-for-filebeat-findings/364241 "2024-08-02T04:32:16Z")
Hey together, I am quit new to Elastic/Filebeat. We have a couple of days findings via LOGBEAT of abusech.malware findings. I am quit wondering. I did not find ANY points of Malware infections with offline scanner or i… --- ## [What can the manage token privilege to? can it update some cluster settings, like security, or some other stuff?](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920)
**Author:** [@ChatLee](https://discuss.elastic.co/u/ChatLee)\ **Replies:** 6\ **Last updated:** [August 2, 2024, 3:19am UTC](https://discuss.elastic.co/t/what-can-the-manage-token-privilege-to-can-it-update-some-cluster-settings-like-security-or-some-other-stuff/362920 "2024-08-02T03:19:10Z")
in the ES guidelines, there does not have too much talks about what the "manage tokne" privilege can be used do. I want to know whether the manage token privilege can be used to update cluster settings, such as security,… --- ## [Enriching Data with Custom Index](https://discuss.elastic.co/t/enriching-data-with-custom-index/364084)
**Author:** [@FlyNavy](https://discuss.elastic.co/u/FlyNavy)\ **Replies:** 28\ **Last updated:** [August 1, 2024, 10:34pm UTC](https://discuss.elastic.co/t/enriching-data-with-custom-index/364084 "2024-08-01T22:34:41Z")
I'm trying to enrich an alert generating event with a user name. The alert generating event only currently contains the SID of the account and it's randomly generated. I created a custom index to contain the SID and ac… --- ## [Need a way to check if field is null](https://discuss.elastic.co/t/need-a-way-to-check-if-field-is-null/362636)
**Author:** [@mg77345](https://discuss.elastic.co/u/mg77345)\ **Replies:** 2\ **Last updated:** [August 1, 2024, 9:00pm UTC](https://discuss.elastic.co/t/need-a-way-to-check-if-field-is-null/362636 "2024-08-01T21:00:56Z")
New to elasticsearch. I'm trying to re-index old data into a new index to push it through an updated ingest pipeline. This includes data that's already been through that pipeline, which i want to add to the new index to… --- ## [Replace an ES node](https://discuss.elastic.co/t/replace-an-es-node/364199)
**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\ **Replies:** 5\ **Last updated:** [August 1, 2024, 7:06pm UTC](https://discuss.elastic.co/t/replace-an-es-node/364199 "2024-08-01T19:06:42Z")
Hi, we have a simple ES cluster consisting of 3 master-eligible nodes, which are also data nodes: node-1: master node-2: replica with shards allocated node-3: empty replica with no shards Now we need to replace node-… --- ## [Logstash port 514 input error](https://discuss.elastic.co/t/logstash-port-514-input-error/364215)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 6\ **Last updated:** [August 1, 2024, 5:18pm UTC](https://discuss.elastic.co/t/logstash-port-514-input-error/364215 "2024-08-01T17:18:09Z")
New RHEL 9 box trying to get logstash to listen on 514 but it fails out \[2024-08-01T10:45:37,012\]\[ERROR\]\[logstash.javapipeline \]\[main\]\[input-tcp-514\] A plugin had an unrecoverable error. Will restart this plugin. … --- ## [Adding \_size field to index template](https://discuss.elastic.co/t/adding-size-field-to-index-template/363884)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 2\ **Last updated:** [August 1, 2024, 4:54pm UTC](https://discuss.elastic.co/t/adding-size-field-to-index-template/363884 "2024-08-01T16:54:17Z")
I'm running ES 8.13.4, attempting to add the \_size field to an index template. I have successfully installed the \_size plugin on all nodes on the cluster, confirmed by issuing GET /\_cat/plugins When I issue: PUT /\_in… --- ## [Exiting: error connecting to Kibana: fail to get the Kibana version: fail to parse kibana version (): passed version is not semver:](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-fail-to-parse-kibana-version-passed-version-is-not-semver/364216)
**Author:** [@ppagano91](https://discuss.elastic.co/u/ppagano91)\ **Replies:** 0\ **Last updated:** [August 1, 2024, 2:55pm UTC](https://discuss.elastic.co/t/exiting-error-connecting-to-kibana-fail-to-get-the-kibana-version-fail-to-parse-kibana-version-passed-version-is-not-semver/364216 "2024-08-01T14:55:58Z")
Hi! I'm getting the follow error when I try to execute .\\packetbeat -c packetbeat.yml: Exiting: error connecting to Kibana: fail to get the Kibana version: fail to parse kibana version (): passed version is not semver: … --- ## [PostgreSQL Fleet integration](https://discuss.elastic.co/t/postgresql-fleet-integration/364073)
**Author:** [@yar](https://discuss.elastic.co/u/yar)\ **Replies:** 1\ **Last updated:** [August 1, 2024, 2:35pm UTC](https://discuss.elastic.co/t/postgresql-fleet-integration/364073 "2024-08-01T14:35:07Z")
Hi! I installed postgresql integration, added path to the csvlog, however, the logs are not parsed properly. Also I updated postgresql configuration in accordance with this. The main problem is that postgresql query whi… --- ## [Rules and connectors, description is not dynamic which is from the alert](https://discuss.elastic.co/t/rules-and-connectors-description-is-not-dynamic-which-is-from-the-alert/364212)
**Author:** [@Johnson\_will](https://discuss.elastic.co/u/Johnson_will)\ **Replies:** 0\ **Last updated:** [August 1, 2024, 2:30pm UTC](https://discuss.elastic.co/t/rules-and-connectors-description-is-not-dynamic-which-is-from-the-alert/364212 "2024-08-01T14:30:30Z")
In Watcher the description is dynamic, which is from alert message "description": " {{ctx.payload.hits.hits}}" }""" But in Rules and conectors, unable to find description same as watcher --- ## [Security\_exception: action \[indices:admin/create\] is unauthorized for user \[elasticsearch\] with effective roles \[superuser\] on restricted indices \[.kibana\_analytics\_8.13.4\_001\], this action is granted by the index privileges \[create\_index,manage,all\]'](https://discuss.elastic.co/t/security-exception-action-indices-admin-create-is-unauthorized-for-user-elasticsearch-with-effective-roles-superuser-on-restricted-indices-kibana-analytics-8-13-4-001-this-action-is-granted-by-the-index-privileges-create-index-manage-all/363865)
**Author:** [@ppagano91](https://discuss.elastic.co/u/ppagano91)\ **Replies:** 2\ **Last updated:** [August 1, 2024, 2:29pm UTC](https://discuss.elastic.co/t/security-exception-action-indices-admin-create-is-unauthorized-for-user-elasticsearch-with-effective-roles-superuser-on-restricted-indices-kibana-analytics-8-13-4-001-this-action-is-granted-by-the-index-privileges-create-index-manage-all/363865 "2024-08-01T14:29:54Z")
Hi there, I have been looking at similar topics, but I haven't been able to resolve this error. First of all, I wanted to mention that I faced some problems when I installed Elasticsearch, because the default user "elas… --- ## [Data stream with "managed" tag](https://discuss.elastic.co/t/data-stream-with-managed-tag/364209)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 0\ **Last updated:** [August 1, 2024, 2:16pm UTC](https://discuss.elastic.co/t/data-stream-with-managed-tag/364209 "2024-08-01T14:16:52Z")
Hello everyone, thanks in advance to anyone who can solve my doubt. Could someone explain me what is the difference between the data streams that have the "Managed" tag and the ones that don't have it. How can I remove… --- ## [How to set password for built-in user kibana\_system through environment variable for docker container](https://discuss.elastic.co/t/how-to-set-password-for-built-in-user-kibana-system-through-environment-variable-for-docker-container/364200)
**Author:** [@ACoder](https://discuss.elastic.co/u/ACoder)\ **Replies:** 3\ **Last updated:** [August 1, 2024, 1:10pm UTC](https://discuss.elastic.co/t/how-to-set-password-for-built-in-user-kibana-system-through-environment-variable-for-docker-container/364200 "2024-08-01T13:10:39Z")
I have no problem set password for elastic user through ELASTIC\_PASSWORD. I hope I can also set password for built-in users like kibana\_system. I tried KIBANA\_SYSTEM\_PASSWORD but it doesn't work. I have not found useful … --- ## [Multiple events all end up with the same result from an http filter query](https://discuss.elastic.co/t/multiple-events-all-end-up-with-the-same-result-from-an-http-filter-query/364071)
**Author:** [@Maeris](https://discuss.elastic.co/u/Maeris)\ **Replies:** 9\ **Last updated:** [August 1, 2024, 1:08pm UTC](https://discuss.elastic.co/t/multiple-events-all-end-up-with-the-same-result-from-an-http-filter-query/364071 "2024-08-01T13:08:16Z")
Hi, I'm having trouble with checking for a new IP for a user login with an HTTP filter query against my OpenSearch node. My filter code looks like: if \[event\_type\] == "user\_logged\_in" { http { url =\> "https:… --- ## [Counting amount of buckets in aggregation](https://discuss.elastic.co/t/counting-amount-of-buckets-in-aggregation/363786)
**Author:** [@Zful](https://discuss.elastic.co/u/Zful)\ **Replies:** 2\ **Last updated:** [August 1, 2024, 1:00pm UTC](https://discuss.elastic.co/t/counting-amount-of-buckets-in-aggregation/363786 "2024-08-01T13:00:00Z")
Hi! I have an index holding connection events. I want to group them by 3 of their fields: src.ip, dst.ip and port. I'm using composite aggregation for the grouping, but I also need the total amount of buckets. Current… --- ## [Kibana globaly change discover:sampleSize](https://discuss.elastic.co/t/kibana-globaly-change-discover-samplesize/364126)
**Author:** [@elkuser1234](https://discuss.elastic.co/u/elkuser1234)\ **Replies:** 2\ **Last updated:** [August 1, 2024, 11:17am UTC](https://discuss.elastic.co/t/kibana-globaly-change-discover-samplesize/364126 "2024-08-01T11:17:40Z")
Hello I need to change globally one setting in Kibana "discover:sampleSize" I don't want to give users access to advanced options for fear of damaging something How can I do this? --- ## [Elastic did not load properly](https://discuss.elastic.co/t/elastic-did-not-load-properly/364197)
**Author:** [@Gizaw](https://discuss.elastic.co/u/Gizaw)\ **Replies:** 1\ **Last updated:** [August 1, 2024, 10:49am UTC](https://discuss.elastic.co/t/elastic-did-not-load-properly/364197 "2024-08-01T10:49:09Z")
" Elastic did not load properly." This problem is stopping me from installing the ES and Kibana. Please help me [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=192) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=194)