# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=20 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 21 --- ## [Kibana visulaisatiion](https://discuss.elastic.co/t/kibana-visulaisatiion/384876)
**Author:** [@akmoharana](https://discuss.elastic.co/u/akmoharana)\ **Replies:** 1\ **Last updated:** [February 3, 2026, 11:23am UTC](https://discuss.elastic.co/t/kibana-visulaisatiion/384876 "2026-02-03T11:23:29Z")
Hi Everyone I want to create a Paid-to-Billed ratio visualization expressed as a percentage. Could someone please explain how to create this and what fields are required in the dataview? Thanks --- ## [Is there a workaround for view context which is not working post ugrade to 8.19.3](https://discuss.elastic.co/t/is-there-a-workaround-for-view-context-which-is-not-working-post-ugrade-to-8-19-3/383946)
**Author:** [@shinysap](https://discuss.elastic.co/u/shinysap)\ **Replies:** 2\ **Last updated:** [February 3, 2026, 9:13am UTC](https://discuss.elastic.co/t/is-there-a-workaround-for-view-context-which-is-not-working-post-ugrade-to-8-19-3/383946 "2026-02-03T09:13:41Z")
Is there a workaround for view context which is not working post ugrade to 8.19.3 --- ## [Encountering Elasticsearch Server Error while Percolating in 8.19.6](https://discuss.elastic.co/t/encountering-elasticsearch-server-error-while-percolating-in-8-19-6/384859)
**Author:** [@mserrato](https://discuss.elastic.co/u/mserrato)\ **Replies:** 1\ **Last updated:** [February 2, 2026, 4:44pm UTC](https://discuss.elastic.co/t/encountering-elasticsearch-server-error-while-percolating-in-8-19-6/384859 "2026-02-02T16:44:02Z")
Hello! After upgrading my cluster from 7.17 to 8.19, I’ve started encountering an intermittent server error: java.util.NoSuchElementException when performing percolation. I’ve opened up an issue on the elasticsearch rep… --- ## [Cannot Edit Monitor](https://discuss.elastic.co/t/cannot-edit-monitor/384846)
**Author:** [@lomar](https://discuss.elastic.co/u/lomar)\ **Replies:** 4\ **Last updated:** [February 2, 2026, 11:51am UTC](https://discuss.elastic.co/t/cannot-edit-monitor/384846 "2026-02-02T11:51:06Z")
When I try to delete via the Elasticsearch API, I get the same error code. I would appreciate your help. ELK Stack version: 9.2.4 Cluster status: green --- ## [OIDC integration with kibana without Elastic license](https://discuss.elastic.co/t/oidc-integration-with-kibana-without-elastic-license/374617)
**Author:** [@akmoharana](https://discuss.elastic.co/u/akmoharana)\ **Replies:** 6\ **Last updated:** [February 1, 2026, 1:57pm UTC](https://discuss.elastic.co/t/oidc-integration-with-kibana-without-elastic-license/374617 "2026-02-01T13:57:56Z")
Hi Team, I have deployed ELK on Kubernetes and am currently using OIDC integration for SSO with an Elastic Platinum license. However, the licensing cost is exceeding our budget. I’m exploring options to exclude the lice… --- ## [How to Increase the throughput for KNN in my ES cluster](https://discuss.elastic.co/t/how-to-increase-the-throughput-for-knn-in-my-es-cluster/384252)
**Author:** [@Esteban\_Velasquez](https://discuss.elastic.co/u/Esteban_Velasquez)\ **Replies:** 6\ **Last updated:** [January 31, 2026, 10:44am UTC](https://discuss.elastic.co/t/how-to-increase-the-throughput-for-knn-in-my-es-cluster/384252 "2026-01-31T10:44:11Z")
Hello! I created a track in ESrally with some queries that are normally done in my ES cluster and I replicated the big index (using snapshot) from the original cluster I have into a new one. I am doing an ESrally test f… --- ## [ELSER model loaded in ML node, but do I need it?](https://discuss.elastic.co/t/elser-model-loaded-in-ml-node-but-do-i-need-it/384835)
**Author:** [@taprove](https://discuss.elastic.co/u/taprove)\ **Replies:** 0\ **Last updated:** [January 30, 2026, 7:46pm UTC](https://discuss.elastic.co/t/elser-model-loaded-in-ml-node-but-do-i-need-it/384835 "2026-01-30T19:46:50Z")
My questions: Do ML nodes have to have a Trained Model assigned? Does adding a Trained Model for other features (AI Assistant, KB functionality) cause it to automatically deploy to ML nodes? Is there anyway to remove i… --- ## [Share discovery session time picker issue](https://discuss.elastic.co/t/share-discovery-session-time-picker-issue/384809)
**Author:** [@mcdaidh](https://discuss.elastic.co/u/mcdaidh)\ **Replies:** 4\ **Last updated:** [January 30, 2026, 5:19pm UTC](https://discuss.elastic.co/t/share-discovery-session-time-picker-issue/384809 "2026-01-30T17:19:13Z")
I have a discover session that I am trying share, I have the time picker set to a relative option (1 hour), yet when I try and share the view, it’s saying it will share it using the current time (it’s specifying the star… --- ## [Impact of CVE-2025-68161 on Elasticsearch v7.17.28](https://discuss.elastic.co/t/impact-of-cve-2025-68161-on-elasticsearch-v7-17-28/384825)
**Author:** [@amolrm](https://discuss.elastic.co/u/amolrm)\ **Replies:** 4\ **Last updated:** [January 30, 2026, 4:31pm UTC](https://discuss.elastic.co/t/impact-of-cve-2025-68161-on-elasticsearch-v7-17-28/384825 "2026-01-30T16:31:48Z")
Hi, Kindly let know if Elasticsearch v7.17.28 is impacted by CVE-2025-68161 CVE Details as follows - Description: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostna… --- ## [Ingestion pipeline: setting @timestamp](https://discuss.elastic.co/t/ingestion-pipeline-setting-timestamp/384804)
**Author:** [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\ **Replies:** 3\ **Last updated:** [January 30, 2026, 4:30pm UTC](https://discuss.elastic.co/t/ingestion-pipeline-setting-timestamp/384804 "2026-01-30T16:30:20Z")
Hi, I'd like to set the @timestamp field to the value of event.ingested. It doesn't seem to be possible. My ingestion pipeline: { "processors": \[ { "set": { "ignore\_empty\_value": true, "fiel… --- ## [Kibana embedded dashboard in iframe returns 401 Unauthorized loop - anonymous auth works directly but not in iframe](https://discuss.elastic.co/t/kibana-embedded-dashboard-in-iframe-returns-401-unauthorized-loop-anonymous-auth-works-directly-but-not-in-iframe/384815)
**Author:** [@Oscar\_NT](https://discuss.elastic.co/u/Oscar_NT)\ **Replies:** 1\ **Last updated:** [January 30, 2026, 7:58am UTC](https://discuss.elastic.co/t/kibana-embedded-dashboard-in-iframe-returns-401-unauthorized-loop-anonymous-auth-works-directly-but-not-in-iframe/384815 "2026-01-30T07:58:17Z")
Environment: Elastic Cloud (Hosted) Kibana version: 8.x (Cloud managed) Browser: Chrome / Safari Frontend: Next.js app running on https://localhost:3000 (HTTPS with mkcert) Problem: I'm trying to embed a Kibana dash… --- ## [Removing alias fields from index but making sure dashboards are not broken](https://discuss.elastic.co/t/removing-alias-fields-from-index-but-making-sure-dashboards-are-not-broken/384797)
**Author:** [@MH2026](https://discuss.elastic.co/u/MH2026)\ **Replies:** 1\ **Last updated:** [January 30, 2026, 3:45am UTC](https://discuss.elastic.co/t/removing-alias-fields-from-index-but-making-sure-dashboards-are-not-broken/384797 "2026-01-30T03:45:12Z")
I have to remove alias fields from Index but those are being used in different dashboards, so how would I ensure that the dashboards don't break with my plan of removing alias fields --- ## [Upgrading from 7.x to 8.x with soft deletes disabled](https://discuss.elastic.co/t/upgrading-from-7-x-to-8-x-with-soft-deletes-disabled/384722)
**Author:** [@ahmedasadi](https://discuss.elastic.co/u/ahmedasadi)\ **Replies:** 6\ **Last updated:** [January 29, 2026, 6:34pm UTC](https://discuss.elastic.co/t/upgrading-from-7-x-to-8-x-with-soft-deletes-disabled/384722 "2026-01-29T18:34:21Z")
Hi, We use Elasticsearch as a lightweight index rather than a primary data store. The actual documents live elsewhere, and ES is only used to retrieve matching document IDs. Our current Elasticsearch 7.x setup includes… --- ## [See Fleet Policies and Agents across all Spaces](https://discuss.elastic.co/t/see-fleet-policies-and-agents-across-all-spaces/384806)
**Author:** [@cconard.kcsr](https://discuss.elastic.co/u/cconard.kcsr)\ **Replies:** 0\ **Last updated:** [January 29, 2026, 6:12pm UTC](https://discuss.elastic.co/t/see-fleet-policies-and-agents-across-all-spaces/384806 "2026-01-29T18:12:23Z")
We have a number of Kibana Spaces defined for our users, including Fleet Agents defined by Spaces. This is great functionality to allow our users some access to their agents. However, as general admins and SMEs (Subject … --- ## [Issues with mapping conflicts at scale](https://discuss.elastic.co/t/issues-with-mapping-conflicts-at-scale/384780)
**Author:** [@logalicious](https://discuss.elastic.co/u/logalicious)\ **Replies:** 2\ **Last updated:** [January 29, 2026, 4:59pm UTC](https://discuss.elastic.co/t/issues-with-mapping-conflicts-at-scale/384780 "2026-01-29T16:59:28Z")
We ingest data with Elastic’s integrations. What we have found over the years is that Elastic will release an integration and make changes to the field mappings over time. This is understandable, but we eventually run in… --- ## [Upgrade to 9x preparation: migrate watches](https://discuss.elastic.co/t/upgrade-to-9x-preparation-migrate-watches/384793)
**Author:** [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Replies:** 1\ **Last updated:** [January 29, 2026, 3:10pm UTC](https://discuss.elastic.co/t/upgrade-to-9x-preparation-migrate-watches/384793 "2026-01-29T15:10:21Z")
Hello I am going through the upgrade assistant on my QA cluster in preparation for the upgrade from 8.19.4 to 9.2.x The assistant marks the following index as critical block for the upgrade: .reindexed-v7-watches-6 T… --- ## [Filebeat Unable to Handle Single Large Event (~5GB)](https://discuss.elastic.co/t/filebeat-unable-to-handle-single-large-event-5gb/384782)
**Author:** [@Thirupathi](https://discuss.elastic.co/u/Thirupathi)\ **Replies:** 1\ **Last updated:** [January 29, 2026, 1:57pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-handle-single-large-event-5gb/384782 "2026-01-29T13:57:18Z")
We are facing an issue where Filebeat is not able to process or hold a single large event of approximately 5 GB . Due to this limitation, the event is not being shipped successfully to Elasticsearch. This appears to be … --- ## [Upgrade from 8.19.1 to 9.2.3 failed because of .security-7 index](https://discuss.elastic.co/t/upgrade-from-8-19-1-to-9-2-3-failed-because-of-security-7-index/384755)
**Author:** [@Balait4](https://discuss.elastic.co/u/Balait4)\ **Replies:** 5\ **Last updated:** [January 29, 2026, 1:48pm UTC](https://discuss.elastic.co/t/upgrade-from-8-19-1-to-9-2-3-failed-because-of-security-7-index/384755 "2026-01-29T13:48:42Z")
Hi, I upgrade the cluster from 7.16.1 to 8.19.1 as per the upgrade guide. The kibana ugprade assistant did’t report anything. Now I’m upgrading to version 9.2.3 where getting the below issue for security index. The inde… --- ## [Maximum Scroll Context](https://discuss.elastic.co/t/maximum-scroll-context/384754)
**Author:** [@Lakshya\_Gupta](https://discuss.elastic.co/u/Lakshya_Gupta)\ **Replies:** 5\ **Last updated:** [January 29, 2026, 1:07pm UTC](https://discuss.elastic.co/t/maximum-scroll-context/384754 "2026-01-29T13:07:35Z")
Hi guys, I was wondering that the maximum scroll context is a node level property across all the indices right? If that’s true, then does it mean that any elastic cluster wherein let’s assume number of primary shards = n… --- ## [Error dialing x509: certificate signed by unknown authority Kubernetes integration](https://discuss.elastic.co/t/error-dialing-x509-certificate-signed-by-unknown-authority-kubernetes-integration/370859)
**Author:** [@clockard](https://discuss.elastic.co/u/clockard)\ **Replies:** 11\ **Last updated:** [January 29, 2026, 1:49am UTC](https://discuss.elastic.co/t/error-dialing-x509-certificate-signed-by-unknown-authority-kubernetes-integration/370859 "2026-01-29T01:49:56Z")
I know there is allot on info about this, but I'm not grokking what needs to be done. The agents for the integration with kubernetes deploys in the kube-system namespace. i am using the quickstart fyi. What do i need to… --- ## [There is insufficient memory for the Java Runtime Environment to continue](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/383614)
**Author:** [@Aysel\_Guliyeva](https://discuss.elastic.co/u/Aysel_Guliyeva)\ **Replies:** 45\ **Last updated:** [January 28, 2026, 8:50pm UTC](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/383614 "2026-01-28T20:50:23Z")
Hello. I need help. In our system, there are 8 data nodes. And my Elasticsearch VM RAM is 16GB. Normally, Elasticsearch data nodes use 60-65% of RAM. I check via the command “top” on Ubuntu. Unfourtunately, once in a mo… --- ## [Logstash Grok filter Not working](https://discuss.elastic.co/t/logstash-grok-filter-not-working/384762)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 6\ **Last updated:** [January 28, 2026, 7:41pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-not-working/384762 "2026-01-28T19:41:41Z")
\<181\>Jan 28 14:49:00 cisco CISE\_RADIUS\_Accounting 0001444968 1 0 2026-01-28 14:49:00.791 +00:00 0794387998 3002 NOTICE Radius-Accounting: RADIUS Accounting watchdog update, ConfigVersionId=312, Device IP Address=1.1.1.1,… --- ## [Need help in understanding architecture of cloud hosted and cloud serverless](https://discuss.elastic.co/t/need-help-in-understanding-architecture-of-cloud-hosted-and-cloud-serverless/384773)
**Author:** [@jatin3101](https://discuss.elastic.co/u/jatin3101)\ **Replies:** 2\ **Last updated:** [January 28, 2026, 3:43pm UTC](https://discuss.elastic.co/t/need-help-in-understanding-architecture-of-cloud-hosted-and-cloud-serverless/384773 "2026-01-28T15:43:45Z")
hello everyone ! i have just started my journey with elastic and i have some question which i am not able to understand through documentation Que. briefly explain dif in architecture of cloud hosted and cloud serverles… --- ## [How to migrate Milvus data to Elasticsearch](https://discuss.elastic.co/t/how-to-migrate-milvus-data-to-elasticsearch/384775)
**Author:** [@midon\_king](https://discuss.elastic.co/u/midon_king)\ **Replies:** 1\ **Last updated:** [January 28, 2026, 3:32pm UTC](https://discuss.elastic.co/t/how-to-migrate-milvus-data-to-elasticsearch/384775 "2026-01-28T15:32:54Z")
I have a Milvus cluster. Now I want to transfer all the data within this Milvus cluster to Elasticsearch. What steps need to be taken for this? Are there any available migration tools or solutions that can be used? --- ## [Upgrading kibana from 8.18.4 to 8.19.4](https://discuss.elastic.co/t/upgrading-kibana-from-8-18-4-to-8-19-4/384668)
**Author:** [@Anjali3](https://discuss.elastic.co/u/Anjali3)\ **Replies:** 4\ **Last updated:** [January 28, 2026, 10:50am UTC](https://discuss.elastic.co/t/upgrading-kibana-from-8-18-4-to-8-19-4/384668 "2026-01-28T10:50:01Z")
Hi Team, Need quick help! I am upgrading elasticsearch from 8.18.4 to 8.19.4 but getting below errors: at org.elasticsearch.server.cli.JvmOption.flagsFinal(JvmOption.java:125) at org.elasticsearch.server.cli.JvmOption.… --- ## [EDOT running in Gateway mode - "sending queue is full"](https://discuss.elastic.co/t/edot-running-in-gateway-mode-sending-queue-is-full/384639)
**Author:** [@kazagz](https://discuss.elastic.co/u/kazagz)\ **Replies:** 1\ **Last updated:** [January 27, 2026, 7:32am UTC](https://discuss.elastic.co/t/edot-running-in-gateway-mode-sending-queue-is-full/384639 "2026-01-27T07:32:43Z")
When using recommended elastic/elastic-agent image running in OTEL Gateway mode it shows errors when ingesting 10m and 60m aggregated data. Example setup Start Elastic server using elasticsearch/elasticsearch:9.2.3 D… --- ## [Use filebeat processor to concatenate string](https://discuss.elastic.co/t/use-filebeat-processor-to-concatenate-string/384725)
**Author:** [@mistrhanky1](https://discuss.elastic.co/u/mistrhanky1)\ **Replies:** 2\ **Last updated:** [January 26, 2026, 3:15pm UTC](https://discuss.elastic.co/t/use-filebeat-processor-to-concatenate-string/384725 "2026-01-26T15:15:49Z")
I have a situation where a customer has a custom syslog file for the Citrix ADC Netscaler. I would like to use the fleet integration for this but it doesn’t support the header format they have. I would like to modify tha… --- ## [Elasticsearch discovery seed\_hosts](https://discuss.elastic.co/t/elasticsearch-discovery-seed-hosts/384733)
**Author:** [@varun\_vetrivendan](https://discuss.elastic.co/u/varun_vetrivendan)\ **Replies:** 4\ **Last updated:** [January 26, 2026, 2:15pm UTC](https://discuss.elastic.co/t/elasticsearch-discovery-seed-hosts/384733 "2026-01-26T14:15:05Z")
The Current Master ensures that the cluster state is present in all the nodes inclusive of the data nodes. Which means the datanodes know the cluster state and who the current master is and which nodes are master eligibl… --- ## [Recoverability from node replacement on a 2-node cluster](https://discuss.elastic.co/t/recoverability-from-node-replacement-on-a-2-node-cluster/384685)
**Author:** [@crazyzhou](https://discuss.elastic.co/u/crazyzhou)\ **Replies:** 3\ **Last updated:** [January 26, 2026, 10:32am UTC](https://discuss.elastic.co/t/recoverability-from-node-replacement-on-a-2-node-cluster/384685 "2026-01-26T10:32:57Z")
We are using eck-operator and running Elasticsearch cluster on Kubernetes. We have a 3 master-eligible nodes and several worker nodes in the cluster. In the case for running the cluster on 2 physical nodes, if a node go… --- ## [Where can I find Dutch word lists](https://discuss.elastic.co/t/where-can-i-find-dutch-word-lists/384649)
**Author:** [@jberkvens](https://discuss.elastic.co/u/jberkvens)\ **Replies:** 1\ **Last updated:** [January 25, 2026, 2:39am UTC](https://discuss.elastic.co/t/where-can-i-find-dutch-word-lists/384649 "2026-01-25T02:39:20Z")
I’m trying to make my pages searchable by indexing the page contents in Elasticsearch, but currently it can’t find a page that talks about “koffiekopjes” when I search for “koffie” (Dutch compound words). I found this ar… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=19) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=21)