# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=204 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 205 --- ## [Set custom hostname for Elastic-Agent](https://discuss.elastic.co/t/set-custom-hostname-for-elastic-agent/363146)
**Author:** [@disi\_90](https://discuss.elastic.co/u/disi_90)\ **Replies:** 0\ **Last updated:** [July 15, 2024, 12:00pm UTC](https://discuss.elastic.co/t/set-custom-hostname-for-elastic-agent/363146 "2024-07-15T12:00:00Z")
Hello community, Is there a possibility to set a custom hostname for my Elastic host when installing Elastic Agent or after the installation in the configuration files? The reason is that we are using system aliases und… --- ## [HTTP Certificates when CA is a chain](https://discuss.elastic.co/t/http-certificates-when-ca-is-a-chain/362738)
**Author:** [@Nick5](https://discuss.elastic.co/u/Nick5)\ **Replies:** 12\ **Last updated:** [July 15, 2024, 8:22am UTC](https://discuss.elastic.co/t/http-certificates-when-ca-is-a-chain/362738 "2024-07-15T08:22:34Z")
I'm following the documentation here: Tutorial 2: Securing a self-managed Elastic Stack | Elastic Installation and Upgrade Guide \[8.14\] | Elastic and have got to Step 3. The CA I've exported from our Microsoft Enterpris… --- ## [ERROR: Skipping security auto configuration because it appears that the node is not starting up for the first time. The node might already be part of a cluster and this auto setup utility is designed to configure Security for new clusters only](https://discuss.elastic.co/t/error-skipping-security-auto-configuration-because-it-appears-that-the-node-is-not-starting-up-for-the-first-time-the-node-might-already-be-part-of-a-cluster-and-this-auto-setup-utility-is-designed-to-configure-security-for-new-clusters-only/362955)
**Author:** [@martianzz](https://discuss.elastic.co/u/martianzz)\ **Replies:** 4\ **Last updated:** [July 15, 2024, 9:35am UTC](https://discuss.elastic.co/t/error-skipping-security-auto-configuration-because-it-appears-that-the-node-is-not-starting-up-for-the-first-time-the-node-might-already-be-part-of-a-cluster-and-this-auto-setup-utility-is-designed-to-configure-security-for-new-clusters-only/362955 "2024-07-15T09:35:52Z")
ERROR: Skipping security auto configuration because it appears that the node is not starting up for the first time. The node might already be part of a cluster and this auto setup utility is designed to configure Securit… --- ## [Logstash JDBC input cannot determine timezone from nil](https://discuss.elastic.co/t/logstash-jdbc-input-cannot-determine-timezone-from-nil/362996)
**Author:** [@chun](https://discuss.elastic.co/u/chun)\ **Replies:** 4\ **Last updated:** [July 15, 2024, 8:55am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-cannot-determine-timezone-from-nil/362996 "2024-07-15T08:55:07Z")
I'm getting an error while running logstash " (ArgumentError) Cannot determine timezone from nil\\n(secs:1720605029.799,utc~:"2024-07-10 09:50:29.7990000247955322",ltz~:nil)" I have tried the solution from other threads… --- ## [How to get city,state, country using geoiplocation](https://discuss.elastic.co/t/how-to-get-city-state-country-using-geoiplocation/363128)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [July 15, 2024, 8:51am UTC](https://discuss.elastic.co/t/how-to-get-city-state-country-using-geoiplocation/363128 "2024-07-15T08:51:36Z")
Hi Team, I have CustomerGeoLocation field coming in document. Is there any way to get country, city , state. If I use geoip filter in source it will accept Ip. But in our case geolocation field is coming not Ip. --- ## [Issue with using the labs button in Kibana dashboard](https://discuss.elastic.co/t/issue-with-using-the-labs-button-in-kibana-dashboard/363121)
**Author:** [@lkh14341](https://discuss.elastic.co/u/lkh14341)\ **Replies:** 0\ **Last updated:** [July 15, 2024, 6:58am UTC](https://discuss.elastic.co/t/issue-with-using-the-labs-button-in-kibana-dashboard/363121 "2024-07-15T06:58:40Z")
I am using Elasticsearch service and Kibana (v8.6.1). I turned on the 'Enable labs button in Dashboard' in Advanced Settings, but when I click the labs button in the Kibana dashboard, the following error occurs: Error: … --- ## [Internal Indexes replication settings best practices](https://discuss.elastic.co/t/internal-indexes-replication-settings-best-practices/363115)
**Author:** [@mkkkksim](https://discuss.elastic.co/u/mkkkksim)\ **Replies:** 0\ **Last updated:** [July 15, 2024, 3:22am UTC](https://discuss.elastic.co/t/internal-indexes-replication-settings-best-practices/363115 "2024-07-15T03:22:19Z")
Whats the best way to manage number\_of\_replicas index setting for indexes that are managed by Elasticsearch. Before we used legacy template that matches \* and sets number\_of\_replicas = 0. But since 8.14 version Data Stre… --- ## [Kibana container: permission denied error related to /var/log/kibana.log](https://discuss.elastic.co/t/kibana-container-permission-denied-error-related-to-var-log-kibana-log/363086)
**Author:** [@Dan567](https://discuss.elastic.co/u/Dan567)\ **Replies:** 1\ **Last updated:** [July 14, 2024, 5:06pm UTC](https://discuss.elastic.co/t/kibana-container-permission-denied-error-related-to-var-log-kibana-log/363086 "2024-07-14T17:06:01Z")
Hello community, running Kibana v8.14.1 in its own Docker container. Issue: configuring Kibana to write its log file to /var/log/kibana.log, following the guidance in the Kibana logging settings documentation: I enc… --- ## [Cold tiers and platinum/enterprise licencing](https://discuss.elastic.co/t/cold-tiers-and-platinum-enterprise-licencing/362870)
**Author:** [@cscott](https://discuss.elastic.co/u/cscott)\ **Replies:** 4\ **Last updated:** [July 14, 2024, 9:28pm UTC](https://discuss.elastic.co/t/cold-tiers-and-platinum-enterprise-licencing/362870 "2024-07-14T21:28:04Z")
Trying to get my head round tiering and platinum/enterprise licencing We're a FE college in the UK (very small budget) implementing Elastic Security as our SIEM, running on Elastic Cloud. Currently running a 2 zone ho… --- ## [To pinpoint the exact time when connectivity was lost and restored, even if logs are backfilled upon reconnection](https://discuss.elastic.co/t/to-pinpoint-the-exact-time-when-connectivity-was-lost-and-restored-even-if-logs-are-backfilled-upon-reconnection/363095)
**Author:** [@Muhammad\_Bilal](https://discuss.elastic.co/u/Muhammad_Bilal)\ **Replies:** 1\ **Last updated:** [July 14, 2024, 11:50am UTC](https://discuss.elastic.co/t/to-pinpoint-the-exact-time-when-connectivity-was-lost-and-restored-even-if-logs-are-backfilled-upon-reconnection/363095 "2024-07-14T11:50:35Z")
Hi, Any one help me regarding how to know in elastic the exact time when connectivity was lost and restored to elastic, even if logs are backfilled upon reconnection --- ## [Powershell events not collected by Windows Agent?](https://discuss.elastic.co/t/powershell-events-not-collected-by-windows-agent/363105)
**Author:** [@hotcobra](https://discuss.elastic.co/u/hotcobra)\ **Replies:** 0\ **Last updated:** [July 14, 2024, 7:08pm UTC](https://discuss.elastic.co/t/powershell-events-not-collected-by-windows-agent/363105 "2024-07-14T19:08:19Z")
Windows 11Pro 23H2 Integration?. Windows has the Endpoints-Initial Agent Policy including windows-endpoints (v1.38.0) and windows-defender integrations. Powershell events are not being collected in the Window Elastic Ag… --- ## [Mappings (Ignore\_above)](https://discuss.elastic.co/t/mappings-ignore-above/363076)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 15\ **Last updated:** [July 14, 2024, 2:55pm UTC](https://discuss.elastic.co/t/mappings-ignore-above/363076 "2024-07-14T14:55:56Z")
I have a field with data of numbers, letters, symbols, and the length of this dystrophy is more than 255, and I want to use term to return the data accurately, but it does not return anything, and when I use match, it re… --- ## [Convert embede xml in log to json in logstash](https://discuss.elastic.co/t/convert-embede-xml-in-log-to-json-in-logstash/363094)
**Author:** [@alex\_petrov](https://discuss.elastic.co/u/alex_petrov)\ **Replies:** 5\ **Last updated:** [July 14, 2024, 1:09pm UTC](https://discuss.elastic.co/t/convert-embede-xml-in-log-to-json-in-logstash/363094 "2024-07-14T13:09:25Z")
logs sent from filebeat to logstash and I write a pattern to parse them.developers added logs that have embeded xml inside logs and here is a sample : 2024-07-08 15:18:35,608 INFO |body=\ **Author:** [@jzarei1996](https://discuss.elastic.co/u/jzarei1996)\ **Replies:** 0\ **Last updated:** [July 14, 2024, 8:54am UTC](https://discuss.elastic.co/t/insert-validation-schema-for-one-field-based-on-another-field/363092 "2024-07-14T08:54:30Z") Hi everyone. I have a structure like below which I want to validate according to what I will explain to you later. router.post( { path: \`${PLUGIN\_API\_PATH}/add\`, validate: { body: schema.object(… --- ## [Mapping Apache HTTPD log output to ECS Schema?](https://discuss.elastic.co/t/mapping-apache-httpd-log-output-to-ecs-schema/363082)
**Author:** [@greenbeans](https://discuss.elastic.co/u/greenbeans)\ **Replies:** 3\ **Last updated:** [July 14, 2024, 1:40am UTC](https://discuss.elastic.co/t/mapping-apache-httpd-log-output-to-ecs-schema/363082 "2024-07-14T01:40:54Z")
Has anyone mapped the various Apache HTTPD logging variables/output to the Elastic Common Schema? Seems like it should be pretty straightforward but tedious, and really useful. If you've done any of this, please share! … --- ## [Elasticsearch Scoring Documents to be able to fetch specific number of document per page](https://discuss.elastic.co/t/elasticsearch-scoring-documents-to-be-able-to-fetch-specific-number-of-document-per-page/363068)
**Author:** [@jahe.book](https://discuss.elastic.co/u/jahe.book)\ **Replies:** 2\ **Last updated:** [July 13, 2024, 7:18pm UTC](https://discuss.elastic.co/t/elasticsearch-scoring-documents-to-be-able-to-fetch-specific-number-of-document-per-page/363068 "2024-07-13T19:18:58Z")
I have an index as books, and the structure of the document is as follows: { "category\_ids": \[1,2,3\], "title": "Book Title", "description": "some long description", "entity\_type": "regular", //regular,featu… --- ## [Index Lifecycle Policies](https://discuss.elastic.co/t/index-lifecycle-policies/363069)
**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\ **Replies:** 5\ **Last updated:** [July 13, 2024, 3:14pm UTC](https://discuss.elastic.co/t/index-lifecycle-policies/363069 "2024-07-13T15:14:19Z")
How do I change the field value Maximum docs in the primary shard? --- ## [Is there a way to set in the config of the search provider which URL it should listen to to trigger the search](https://discuss.elastic.co/t/is-there-a-way-to-set-in-the-config-of-the-search-provider-which-url-it-should-listen-to-to-trigger-the-search/363074)
**Author:** [@kudumine](https://discuss.elastic.co/u/kudumine)\ **Replies:** 0\ **Last updated:** [July 13, 2024, 1:40pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-set-in-the-config-of-the-search-provider-which-url-it-should-listen-to-to-trigger-the-search/363074 "2024-07-13T13:40:23Z")
I have a frontend app using Elasticsearch UI, React, NextJS, and with a custom connector. Originally I had the search page on the root '/' and now I have a task to make a '/search' route instead. Is there a way to provi… --- ## [Error Publishing event](https://discuss.elastic.co/t/error-publishing-event/363061)
**Author:** [@Vm\_Elastic](https://discuss.elastic.co/u/Vm_Elastic)\ **Replies:** 0\ **Last updated:** [July 12, 2024, 11:51pm UTC](https://discuss.elastic.co/t/error-publishing-event/363061 "2024-07-12T23:51:14Z")
Need guidance...On Agent info metrics, on the agent where abusech integration is installed, we have been getting thousands of errors logs everyday that says Message: error Publishing Events, error.message: context cancel… --- ## [Unassaigned shards on .apm-agent-configuration](https://discuss.elastic.co/t/unassaigned-shards-on-apm-agent-configuration/363057)
**Author:** [@Milad\_Akhlaghi](https://discuss.elastic.co/u/Milad_Akhlaghi)\ **Replies:** 0\ **Last updated:** [July 12, 2024, 8:54pm UTC](https://discuss.elastic.co/t/unassaigned-shards-on-apm-agent-configuration/363057 "2024-07-12T20:54:29Z")
Hi , i have a strange problem there is .apm-agent-configuration unassigned shards when I use GET \_cat/shards and my cluster health is red ! but everything works fine! any idea how can I resolve it?? --- ## [Trying to set up a standalone agent, but no data showing up](https://discuss.elastic.co/t/trying-to-set-up-a-standalone-agent-but-no-data-showing-up/363056)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 0\ **Last updated:** [July 12, 2024, 8:52pm UTC](https://discuss.elastic.co/t/trying-to-set-up-a-standalone-agent-but-no-data-showing-up/363056 "2024-07-12T20:52:31Z")
We're running ES 8.14.2. I'm trying to set up a standalone agent (running Windows) for testing. I successfully installed the agent, and used the config file generated by the ES GUI (after populating the credentials). I c… --- ## [Fleet Server Output Settings](https://discuss.elastic.co/t/fleet-server-output-settings/363047)
**Author:** [@Vm\_Elastic](https://discuss.elastic.co/u/Vm_Elastic)\ **Replies:** 6\ **Last updated:** [July 12, 2024, 6:20pm UTC](https://discuss.elastic.co/t/fleet-server-output-settings/363047 "2024-07-12T18:20:30Z")
Help Please ...Hi Teams, we have a 4 nodes cluster, 3 dimr and one lrt role nodes , we have set the output of fleet server to the one with lrt role, is it recommended to set the output to all data nodes or is there no pr… --- ## [The value in this field is too long and cannot be searched or filtered](https://discuss.elastic.co/t/the-value-in-this-field-is-too-long-and-cannot-be-searched-or-filtered/360699)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 1\ **Last updated:** [July 12, 2024, 5:00pm UTC](https://discuss.elastic.co/t/the-value-in-this-field-is-too-long-and-cannot-be-searched-or-filtered/360699 "2024-07-12T17:00:44Z")
In the kibana discover the sql\_query field is there which is of type keyword and it is not displaying in the dashboard and when i checked in the discover it is showing as ignored value. How to resolve this issue? Kindly … --- ## [Uptime monitor TV Mode or Full Screen](https://discuss.elastic.co/t/uptime-monitor-tv-mode-or-full-screen/362603)
**Author:** [@SRAJ](https://discuss.elastic.co/u/SRAJ)\ **Replies:** 6\ **Last updated:** [July 12, 2024, 4:15pm UTC](https://discuss.elastic.co/t/uptime-monitor-tv-mode-or-full-screen/362603 "2024-07-12T16:15:52Z")
Hi all, I've setup correctly Heartbeat for Uptime monitor. Now I would like to share Uptime view in a TV but I don't want view the rest of Kibana menu, just the monitor. Is there a TV mode? --- ## [Error while running transform \`task encountered irrecoverable failure\`](https://discuss.elastic.co/t/error-while-running-transform-task-encountered-irrecoverable-failure/362479)
**Author:** [@lizozom](https://discuss.elastic.co/u/lizozom)\ **Replies:** 5\ **Last updated:** [July 12, 2024, 4:05pm UTC](https://discuss.elastic.co/t/error-while-running-transform-task-encountered-irrecoverable-failure/362479 "2024-07-12T16:05:57Z")
Hey team, I'm running ELK 8.13 I have a transform that occasionally fails to run. If I restart it - the failure persists. If I recreate it - the error goes away for a few days and that returns. It fails with this er… --- ## [Manage the connection pool size in Java client](https://discuss.elastic.co/t/manage-the-connection-pool-size-in-java-client/362762)
**Author:** [@Priyansh\_Maheshwari](https://discuss.elastic.co/u/Priyansh_Maheshwari)\ **Replies:** 2\ **Last updated:** [July 12, 2024, 4:04pm UTC](https://discuss.elastic.co/t/manage-the-connection-pool-size-in-java-client/362762 "2024-07-12T16:04:42Z")
Hi, I am currently utilizing the ElasticsearchClient library in java for connecting to Elasticsearch. As per the docs the library manages its own connection pool and its not required to create a separate client with eac… --- ## [GeoIP - Elasticsearch](https://discuss.elastic.co/t/geoip-elasticsearch/363035)
**Author:** [@DFIR\_Cap](https://discuss.elastic.co/u/DFIR_Cap)\ **Replies:** 10\ **Last updated:** [July 12, 2024, 2:18pm UTC](https://discuss.elastic.co/t/geoip-elasticsearch/363035 "2024-07-12T14:18:55Z")
Hi: I have an Elasticsearch installed in Ubuntu. What are the proper steps to setup Geoip so that every time I ingest data it is enriched with geolocation data? Thanks --- ## [KQL Inline Comments?](https://discuss.elastic.co/t/kql-inline-comments/362977)
**Author:** [@jscheitel](https://discuss.elastic.co/u/jscheitel)\ **Replies:** 4\ **Last updated:** [July 12, 2024, 2:17pm UTC](https://discuss.elastic.co/t/kql-inline-comments/362977 "2024-07-12T14:17:44Z")
Does anyone know any tricks to let you have an inline comment in search dialog of Discover? For instance for a "Firewall Drops" saved search I want to have something like this: panw.panos.sub\_type : ("drop" or "deny") /… --- ## [ERROR: Aborting enrolling to cluster. Could not communicate with the node on any of the addresses from the enrollment token. All of \[10.0.30.94:9200\] were attempted., with exit code 69](https://discuss.elastic.co/t/error-aborting-enrolling-to-cluster-could-not-communicate-with-the-node-on-any-of-the-addresses-from-the-enrollment-token-all-of-10-0-30-94-9200-were-attempted-with-exit-code-69/363019)
**Author:** [@martianzz](https://discuss.elastic.co/u/martianzz)\ **Replies:** 0\ **Last updated:** [July 12, 2024, 10:17am UTC](https://discuss.elastic.co/t/error-aborting-enrolling-to-cluster-could-not-communicate-with-the-node-on-any-of-the-addresses-from-the-enrollment-token-all-of-10-0-30-94-9200-were-attempted-with-exit-code-69/363019 "2024-07-12T10:17:51Z")
ERROR: Aborting enrolling to cluster. Could not communicate with the node on any of the addresses from the enrollment token. All of \[10.0.30.94:9200\] were attempted., with exit code 69. Please --- ## [Cannot build v8.4.2](https://discuss.elastic.co/t/cannot-build-v8-4-2/362985)
**Author:** [@sc-ahn](https://discuss.elastic.co/u/sc-ahn)\ **Replies:** 2\ **Last updated:** [July 12, 2024, 7:56am UTC](https://discuss.elastic.co/t/cannot-build-v8-4-2/362985 "2024-07-12T07:56:15Z")
wget https://github.com/elastic/elasticsearch/archive/refs/tags/v8.4.2.tar.gz tar -xvf v8.4.2.tar.gz cd elasticsearch-8.4.2 ... \[user001@host elasticsearch-8.4.2\]$ ./gradlew localDistro \> Task :build-tools:compileJava… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=203) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=205)