# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=202 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 203 --- ## [Upgrade from 6.8.23 to 7.3.2 fails with master not discovered yet](https://discuss.elastic.co/t/upgrade-from-6-8-23-to-7-3-2-fails-with-master-not-discovered-yet/363250)
**Author:** [@elastic\_noob1](https://discuss.elastic.co/u/elastic_noob1)\ **Replies:** 4\ **Last updated:** [July 18, 2024, 8:03am UTC](https://discuss.elastic.co/t/upgrade-from-6-8-23-to-7-3-2-fails-with-master-not-discovered-yet/363250 "2024-07-18T08:03:17Z")
I am testing upgrading our cluster from 6.8.23 to 7.3.2 but the ingest nodes fail the upgrade. Both master & data work fine. As per the documentation, this upgrade only needs rolling restart and doesn't require cluster.i… --- ## [Formatting Enriched field in Java](https://discuss.elastic.co/t/formatting-enriched-field-in-java/363135)
**Author:** [@always\_improving123](https://discuss.elastic.co/u/always_improving123)\ **Replies:** 5\ **Last updated:** [July 18, 2024, 7:24am UTC](https://discuss.elastic.co/t/formatting-enriched-field-in-java/363135 "2024-07-18T07:24:16Z")
Hello, I have implemented an enrich processor and I am trying to properly format the enrich index’s docs. For example, I have a source index with a nationality and an average height. I want to enrich an index that only … --- ## [Load JSON files to Elasticsearch Index](https://discuss.elastic.co/t/load-json-files-to-elasticsearch-index/363269)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 3\ **Last updated:** [July 18, 2024, 7:20am UTC](https://discuss.elastic.co/t/load-json-files-to-elasticsearch-index/363269 "2024-07-18T07:20:21Z")
Hi Team, Could you please share me how we can ingest json files to a Elasticsearch Index. Thanks, Debasis --- ## [Data\_stream.dataset: kubernetes.state\_node produce empty fields](https://discuss.elastic.co/t/data-stream-dataset-kubernetes-state-node-produce-empty-fields/363318)
**Author:** [@Mihai-CMM](https://discuss.elastic.co/u/Mihai-CMM)\ **Replies:** 0\ **Last updated:** [July 18, 2024, 6:01am UTC](https://discuss.elastic.co/t/data-stream-dataset-kubernetes-state-node-produce-empty-fields/363318 "2024-07-18T06:01:33Z")
Hello - I've deployed ECK with a standalone elastic agent. In the Kubernetes integration configuration i've set kube-state-metrics.monitoring:8080 as the host Then if i do a curl i can see the metrics exposed. But on th… --- ## [Kibana Internal Indices](https://discuss.elastic.co/t/kibana-internal-indices/363305)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [July 18, 2024, 1:04am UTC](https://discuss.elastic.co/t/kibana-internal-indices/363305 "2024-07-18T01:04:17Z")
Hello, I want to copy a field to a new field from .Kibana\_Analytics index. There seems to be no ingest pipeline associated with this index. How can I configure this index? --- ## [Inconsistent behavor of Kubernetes Metadata even within the same deployment/pods](https://discuss.elastic.co/t/inconsistent-behavor-of-kubernetes-metadata-even-within-the-same-deployment-pods/363301)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 0\ **Last updated:** [July 17, 2024, 8:09pm UTC](https://discuss.elastic.co/t/inconsistent-behavor-of-kubernetes-metadata-even-within-the-same-deployment-pods/363301 "2024-07-17T20:09:25Z")
Hi, Runing Filebeat 8.9.0 I'm using the Kubernetes metadata processor to split the logs in 2 separate kafka topics. Basically all my deployments I add a bit of metadata to indicate it belongs to my organization so thos… --- ## [Kafka output in Logstash with authentification password and username](https://discuss.elastic.co/t/kafka-output-in-logstash-with-authentification-password-and-username/363285)
**Author:** [@Leo23](https://discuss.elastic.co/u/Leo23)\ **Replies:** 1\ **Last updated:** [July 17, 2024, 3:20pm UTC](https://discuss.elastic.co/t/kafka-output-in-logstash-with-authentification-password-and-username/363285 "2024-07-17T15:20:45Z")
I see that we can specify username and password in the output Kafka of Filebeat but these fields are not present in the Kafka output of Logstash. What can I do to specify username and password ? The exemple of input in … --- ## [Configuring "consumer\_threads" for a Kafka input with multiple Logstash instances](https://discuss.elastic.co/t/configuring-consumer-threads-for-a-kafka-input-with-multiple-logstash-instances/363279)
**Author:** [@mmfsilva](https://discuss.elastic.co/u/mmfsilva)\ **Replies:** 4\ **Last updated:** [July 17, 2024, 3:08pm UTC](https://discuss.elastic.co/t/configuring-consumer-threads-for-a-kafka-input-with-multiple-logstash-instances/363279 "2024-07-17T15:08:28Z")
I'm analysing the way a logging stack has been configured and am facing a particular issue. We have 2 Logstash instances. In those two instances, we have two pipelines which are consuming from Kafka. See the input secti… --- ## [Trying to setup Kibana behind a proxy](https://discuss.elastic.co/t/trying-to-setup-kibana-behind-a-proxy/362825)
**Author:** [@moondc](https://discuss.elastic.co/u/moondc)\ **Replies:** 5\ **Last updated:** [July 17, 2024, 3:06pm UTC](https://discuss.elastic.co/t/trying-to-setup-kibana-behind-a-proxy/362825 "2024-07-17T15:06:25Z")
I'm trying to setup Kibana through a reverse proxy but am running into security\_exception Root causes: security\_exception: missing authentication credentials for REST request \[/\_security/user/\_has\_privileges\] I have a … --- ## [What pillars of Zero Trust have been implemented in Elastic?](https://discuss.elastic.co/t/what-pillars-of-zero-trust-have-been-implemented-in-elastic/363088)
**Author:** [@mzm1370](https://discuss.elastic.co/u/mzm1370)\ **Replies:** 4\ **Last updated:** [July 17, 2024, 2:49pm UTC](https://discuss.elastic.co/t/what-pillars-of-zero-trust-have-been-implemented-in-elastic/363088 "2024-07-17T14:49:03Z")
Strong document of zero trust pillars being implemented in Elastic --- ## [Elasticsearch huge amount of duplicate with logstash](https://discuss.elastic.co/t/elasticsearch-huge-amount-of-duplicate-with-logstash/362085)
**Author:** [@AVMOps](https://discuss.elastic.co/u/AVMOps)\ **Replies:** 1\ **Last updated:** [July 15, 2024, 7:51am UTC](https://discuss.elastic.co/t/elasticsearch-huge-amount-of-duplicate-with-logstash/362085 "2024-07-15T07:51:18Z")
Hello, I'm facing a duplicate data issue with Elasticsearch (3 nodes v8.5.2 - green state), coupled with Logstash (1 node v 8.5.2). So basically we have multiple apps servers sending logs with NLog to Logstash on port … --- ## [Gitlab Elastic Integrations](https://discuss.elastic.co/t/gitlab-elastic-integrations/363259)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 2\ **Last updated:** [July 17, 2024, 1:48pm UTC](https://discuss.elastic.co/t/gitlab-elastic-integrations/363259 "2024-07-17T13:48:29Z")
Hello, Is someone already import one of these kibana dashboards : integrations/packages/elasticsearch/kibana/dashboard at main · elastic/integrations · GitHub How do you import them in kibana ? I tried to save into a… --- ## [Issue while indexing with custom analyzers](https://discuss.elastic.co/t/issue-while-indexing-with-custom-analyzers/363265)
**Author:** [@NSGokul](https://discuss.elastic.co/u/NSGokul)\ **Replies:** 3\ **Last updated:** [July 17, 2024, 1:10pm UTC](https://discuss.elastic.co/t/issue-while-indexing-with-custom-analyzers/363265 "2024-07-17T13:10:52Z")
I've created an Elasticsearch index with custom settings and analyzers to handle various text transformations. Here are the settings for my index: "settings": { "index": { "analysis": { "filter": { "… --- ## ["UnsatisfiedLinkError: libzstd.so" upon es v8.14.1 startup](https://discuss.elastic.co/t/unsatisfiedlinkerror-libzstd-so-upon-es-v8-14-1-startup/363234)
**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\ **Replies:** 1\ **Last updated:** [July 17, 2024, 12:56pm UTC](https://discuss.elastic.co/t/unsatisfiedlinkerror-libzstd-so-upon-es-v8-14-1-startup/363234 "2024-07-17T12:56:29Z")
Sometimes and not always, upon startup, I see the following error message, complaining that libzstd.so is not present. Indeed it is not on the image. However, what confuses me is that a) I don't see any installation requ… --- ## [Issue with Nested Sorting in Opensearch Query](https://discuss.elastic.co/t/issue-with-nested-sorting-in-opensearch-query/363264)
**Author:** [@Bhushan\_Kakulte](https://discuss.elastic.co/u/Bhushan_Kakulte)\ **Replies:** 1\ **Last updated:** [July 17, 2024, 12:49pm UTC](https://discuss.elastic.co/t/issue-with-nested-sorting-in-opensearch-query/363264 "2024-07-17T12:49:44Z")
Hi everyone, I’m encountering an issue with sorting nested fields in an Elasticsearch query. Despite following the documentation, the sorting doesn’t seem to work as expected. I’m hoping someone can point out what I’m d… --- ## [Connect to AZURE SQL PAAS DB is getting failed](https://discuss.elastic.co/t/connect-to-azure-sql-paas-db-is-getting-failed/363033)
**Author:** [@krishna58](https://discuss.elastic.co/u/krishna58)\ **Replies:** 6\ **Last updated:** [July 17, 2024, 12:10pm UTC](https://discuss.elastic.co/t/connect-to-azure-sql-paas-db-is-getting-failed/363033 "2024-07-17T12:10:03Z")
Hi I am using the below script to connect to AZURE SQL PAAS DB from the logstash script. Service principal is created and added the RBAC role for both Service principal and SQL PAAS sever as a reader role. Please help on… --- ## [\[Error\]Remote reindex connect\_exception with Timeout](https://discuss.elastic.co/t/error-remote-reindex-connect-exception-with-timeout/363276)
**Author:** [@unumed-umbo](https://discuss.elastic.co/u/unumed-umbo)\ **Replies:** 0\ **Last updated:** [July 17, 2024, 11:33am UTC](https://discuss.elastic.co/t/error-remote-reindex-connect-exception-with-timeout/363276 "2024-07-17T11:33:59Z")
I'm trying to reindex from a remote from Self Manged instance to an Elastic cloud instance. But I'm getting a timeout error: {"error":{"root\_cause":\[{"type":"connect\_exception","reason":"Timeout connecting to \[XXXX.el… --- ## [Dashboard to monitor my clusters](https://discuss.elastic.co/t/dashboard-to-monitor-my-clusters/363008)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 8\ **Last updated:** [July 17, 2024, 8:52am UTC](https://discuss.elastic.co/t/dashboard-to-monitor-my-clusters/363008 "2024-07-17T08:52:11Z")
Hi guys, This time, I have no issues to submit to you :smile: I have a classic ELK architecture, i mean : filebeat, metricbeat =\> kafka \<=\> logstash =\> elasticsearch. I was wondering what would be the best informatio… --- ## [\[elastic\_agent\]\[error\] Cannot checkin in with fleet-server, retrying](https://discuss.elastic.co/t/elastic-agent-error-cannot-checkin-in-with-fleet-server-retrying/363046)
**Author:** [@samy\_guest](https://discuss.elastic.co/u/samy_guest)\ **Replies:** 4\ **Last updated:** [July 17, 2024, 8:38am UTC](https://discuss.elastic.co/t/elastic-agent-error-cannot-checkin-in-with-fleet-server-retrying/363046 "2024-07-17T08:38:22Z")
I have an elk on-promise cluster on which I have deployed fleet server and elastic agent nodes following an upgrade of ELK from 8.12.1 to 8.14.1 then .2 I had a problem with elastic agent managed by fleet the problem … --- ## [Please help: Fleetserver reinstall is not working after 8.14.0 upgrade](https://discuss.elastic.co/t/please-help-fleetserver-reinstall-is-not-working-after-8-14-0-upgrade/360995)
**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\ **Replies:** 2\ **Last updated:** [July 17, 2024, 8:16am UTC](https://discuss.elastic.co/t/please-help-fleetserver-reinstall-is-not-working-after-8-14-0-upgrade/360995 "2024-07-17T08:16:16Z")
This is the correspondig Github issue: Fleet server tries elasticsearch connection via localhost instead of configured elasticsearch url. · Issue #4873 · elastic/elastic-agent · GitHub --- ## [Search for a a list of phrases in Elasticsearch](https://discuss.elastic.co/t/search-for-a-a-list-of-phrases-in-elasticsearch/363251)
**Author:** [@jahedi](https://discuss.elastic.co/u/jahedi)\ **Replies:** 4\ **Last updated:** [July 17, 2024, 7:50am UTC](https://discuss.elastic.co/t/search-for-a-a-list-of-phrases-in-elasticsearch/363251 "2024-07-17T07:50:45Z")
Hi, I was looking for a solution that I can search for a list of phrases. for example consider this list: \["foo", "bar", "the baz"\] if a give this search words as a search query in the Elasticsearch query, it will sepa… --- ## [Logstash JDBC input plugin skips few scheduled runs](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-skips-few-scheduled-runs/363021)
**Author:** [@forabraham1](https://discuss.elastic.co/u/forabraham1)\ **Replies:** 6\ **Last updated:** [July 17, 2024, 7:24am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-skips-few-scheduled-runs/363021 "2024-07-17T07:24:37Z")
Hi All, We're using JDBC input plugin to load data from Oracle 19c DB. Totally 55 separate config files ( each per client ) . Each file having 4 different sections for JDBC input, scheduled to run every 10 secs. Some t… --- ## [Node not able to be a master node in case elastic search service stopped on another master node](https://discuss.elastic.co/t/node-not-able-to-be-a-master-node-in-case-elastic-search-service-stopped-on-another-master-node/363255)
**Author:** [@Bipindra.1.s](https://discuss.elastic.co/u/Bipindra.1.s)\ **Replies:** 1\ **Last updated:** [July 17, 2024, 7:07am UTC](https://discuss.elastic.co/t/node-not-able-to-be-a-master-node-in-case-elastic-search-service-stopped-on-another-master-node/363255 "2024-07-17T07:07:37Z")
For a poc purpose we have created a 2 node Elasticsearch cluster on windows machines. Cluster is working fine when both nodes are running. To test failure scenario we stopped elasticSearch on one machine we are expectin… --- ## [Snapshot and Restore of an index](https://discuss.elastic.co/t/snapshot-and-restore-of-an-index/363253)
**Author:** [@abhadauria](https://discuss.elastic.co/u/abhadauria)\ **Replies:** 3\ **Last updated:** [July 17, 2024, 6:14am UTC](https://discuss.elastic.co/t/snapshot-and-restore-of-an-index/363253 "2024-07-17T06:14:19Z")
Hi Team, we want to upgrade the older version of index(6.x) to newer version(7.x) in the ES cluster with version 7.17. However the new index which is getting created as part of snapshot restore is getting created with ol… --- ## [ElastAlert2 vs Kibana Alerting](https://discuss.elastic.co/t/elastalert2-vs-kibana-alerting/363167)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 4\ **Last updated:** [July 16, 2024, 7:29pm UTC](https://discuss.elastic.co/t/elastalert2-vs-kibana-alerting/363167 "2024-07-16T19:29:37Z")
Hello I was wondering if people who are leveraging ElastAlert, can share why they chose it over Kibana OOTB alerts? --- ## [Retrieve array sizein script](https://discuss.elastic.co/t/retrieve-array-sizein-script/363108)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 7\ **Last updated:** [July 16, 2024, 4:25pm UTC](https://discuss.elastic.co/t/retrieve-array-sizein-script/363108 "2024-07-16T16:25:11Z")
We are trying to execute a script :slight\_smile: "if (ctx.\_source.repliesList == null) {ctx.\_source.repliesList = new ArrayList();}" + "if(ctx.\_source.repliesList.size()\<10) { ctx.\_source.repliesList.add('" + proid + "'… --- ## [My EFK is setupd on EKS cluster and index size is too much](https://discuss.elastic.co/t/my-efk-is-setupd-on-eks-cluster-and-index-size-is-too-much/363233)
**Author:** [@VISHAL\_SAXENA](https://discuss.elastic.co/u/VISHAL_SAXENA)\ **Replies:** 0\ **Last updated:** [July 16, 2024, 4:19pm UTC](https://discuss.elastic.co/t/my-efk-is-setupd-on-eks-cluster-and-index-size-is-too-much/363233 "2024-07-16T16:19:16Z")
Facing log index size too much issue --- ## [\--insecure flag in fleet/elastic agent deployment to solve X509: certificate signed by unknown authority](https://discuss.elastic.co/t/insecure-flag-in-fleet-elastic-agent-deployment-to-solve-x509-certificate-signed-by-unknown-authority/363122)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 8\ **Last updated:** [July 16, 2024, 3:45pm UTC](https://discuss.elastic.co/t/insecure-flag-in-fleet-elastic-agent-deployment-to-solve-x509-certificate-signed-by-unknown-authority/363122 "2024-07-16T15:45:04Z")
hello everyone, hope you're doing well i really love the elk stack and its community, much love to you guys !! i have a question : while deploying fleet or elastic agents i get this error message x509 to solved it I f… --- ## [BULK API RFC - multi-objects POST](https://discuss.elastic.co/t/bulk-api-rfc-multi-objects-post/363228)
**Author:** [@Adrien\_WATTEZ](https://discuss.elastic.co/u/Adrien_WATTEZ)\ **Replies:** 1\ **Last updated:** [July 16, 2024, 3:42pm UTC](https://discuss.elastic.co/t/bulk-api-rfc-multi-objects-post/363228 "2024-07-16T15:42:46Z")
Hi Elastic Community, I am currently exploring the Bulk API and seeking some clarification and guidance regarding the submission of multiple objects in a single REST POST request. Specifically, I have the following ques… --- ## [Is Custom domain for kibana endpoint supported in managed elk environment](https://discuss.elastic.co/t/is-custom-domain-for-kibana-endpoint-supported-in-managed-elk-environment/363226)
**Author:** [@siniya](https://discuss.elastic.co/u/siniya)\ **Replies:** 1\ **Last updated:** [July 16, 2024, 2:54pm UTC](https://discuss.elastic.co/t/is-custom-domain-for-kibana-endpoint-supported-in-managed-elk-environment/363226 "2024-07-16T14:54:51Z")
I am using cloud.elastic.co instance but it provides you long URL to access ES like XXXXXXXXXXXXXX.us-east-xx.aws.found.io How is possible to use your own domain name with the managed environment elastic cloud instanc… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=201) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=203)