# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=207 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 208 --- ## [kNN search support in elasticsearch7.17?](https://discuss.elastic.co/t/knn-search-support-in-elasticsearch7-17/362788)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 2\ **Last updated:** [July 9, 2024, 2:44pm UTC](https://discuss.elastic.co/t/knn-search-support-in-elasticsearch7-17/362788 "2024-07-09T14:44:34Z")
Hi Hi, OS : Ubuntu 22.04 elasticsearch version: 7.17 can anyone please let me know, Is kNN search supports elasticsearch7.17? --- ## [Nested aggregation for multiple nested fields](https://discuss.elastic.co/t/nested-aggregation-for-multiple-nested-fields/362804)
**Author:** [@Delagardi1](https://discuss.elastic.co/u/Delagardi1)\ **Replies:** 0\ **Last updated:** [July 9, 2024, 2:28pm UTC](https://discuss.elastic.co/t/nested-aggregation-for-multiple-nested-fields/362804 "2024-07-09T14:28:21Z")
Hello. I want to make Global nested aggregation with nested field inside nested field. And it doesn't works. I am not sure why. I have this kind of structure (mapping added down), where embellishmentMethodsData is neste… --- ## [Handle Error During Filebeat Ingestion](https://discuss.elastic.co/t/handle-error-during-filebeat-ingestion/362611)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 7\ **Last updated:** [July 9, 2024, 2:23pm UTC](https://discuss.elastic.co/t/handle-error-during-filebeat-ingestion/362611 "2024-07-09T14:23:21Z")
Hi Team, We had a requirement that when Filebeat reads the records from CSV files from the directory below, it should capture any records that encounter errors . Is there a method available to redirect all error-related… --- ## [ElasticSearch Certificate issue](https://discuss.elastic.co/t/elasticsearch-certificate-issue/362682)
**Author:** [@rash4ford](https://discuss.elastic.co/u/rash4ford)\ **Replies:** 2\ **Last updated:** [July 9, 2024, 1:39pm UTC](https://discuss.elastic.co/t/elasticsearch-certificate-issue/362682 "2024-07-09T13:39:38Z")
Hi Team, Our Elastis is complaining about certificate - I have checked all the cerficate assigned to elastic none of them are expired. Please advise any help is greatly appreciated io.netty.handler.codec.DecoderExcept… --- ## [Using ingest pipeline attachment processor with inference processor](https://discuss.elastic.co/t/using-ingest-pipeline-attachment-processor-with-inference-processor/362756)
**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\ **Replies:** 3\ **Last updated:** [July 9, 2024, 1:13pm UTC](https://discuss.elastic.co/t/using-ingest-pipeline-attachment-processor-with-inference-processor/362756 "2024-07-09T13:13:04Z")
Hello, i have a data that i would like to process through the attachment processor, then use elser inference processor to do semantic search. I created my index with mapings: PUT pdf { "mappings": { "properties":… --- ## [How setting vector database in elasticsearch](https://discuss.elastic.co/t/how-setting-vector-database-in-elasticsearch/362783)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 1\ **Last updated:** [July 9, 2024, 1:08pm UTC](https://discuss.elastic.co/t/how-setting-vector-database-in-elasticsearch/362783 "2024-07-09T13:08:05Z")
Hi, OS : Ubuntu 22.04 elasticsearch version: 7.17 we have to set up vector database in elasticsearch so can anyhelp here how to set up vector database in elasticsearch? what configurations are required from elasticse… --- ## [Fleet server agent with ECK operator in OpenShift deploying error](https://discuss.elastic.co/t/fleet-server-agent-with-eck-operator-in-openshift-deploying-error/362694)
**Author:** [@mohamedmahrous](https://discuss.elastic.co/u/mohamedmahrous)\ **Replies:** 1\ **Last updated:** [July 9, 2024, 8:41am UTC](https://discuss.elastic.co/t/fleet-server-agent-with-eck-operator-in-openshift-deploying-error/362694 "2024-07-09T08:41:05Z")
Error: preparing STATE\_PATH(/usr/share/elastic-agent/state) failed: mkdir /usr/share/elastic-agent/state/data: permission denied I got this error while the deploying of fleet server using this configuration in manifest … --- ## [Iterating through large datasets in various orders efficiently](https://discuss.elastic.co/t/iterating-through-large-datasets-in-various-orders-efficiently/362743)
**Author:** [@Chervine\_Majeri](https://discuss.elastic.co/u/Chervine_Majeri)\ **Replies:** 4\ **Last updated:** [July 9, 2024, 12:12pm UTC](https://discuss.elastic.co/t/iterating-through-large-datasets-in-various-orders-efficiently/362743 "2024-07-09T12:12:07Z")
Hello, I'm extremely new to the world of elasticsearch, but even after reading a bit of the material, I'm still quite unsure how elasticsearch actually works under the hood. I understand that all of it essentially revo… --- ## [\[need help\] Securing cluster's node communication with let's encrypt, nodes in different machines in the cloud](https://discuss.elastic.co/t/need-help-securing-clusters-node-communication-with-lets-encrypt-nodes-in-different-machines-in-the-cloud/362747)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 2\ **Last updated:** [July 9, 2024, 11:57am UTC](https://discuss.elastic.co/t/need-help-securing-clusters-node-communication-with-lets-encrypt-nodes-in-different-machines-in-the-cloud/362747 "2024-07-09T11:57:49Z")
usually to secure an elasticsearch cluster (especially communication in between nodes or between nodes or a cluster and kibana or anything else through https) and if all nodes and kibana are in the same infrastructure we… --- ## [Combine regex with match\_phrase](https://discuss.elastic.co/t/combine-regex-with-match-phrase/362771)
**Author:** [@Eldan\_Vaknin](https://discuss.elastic.co/u/Eldan_Vaknin)\ **Replies:** 3\ **Last updated:** [July 9, 2024, 10:05am UTC](https://discuss.elastic.co/t/combine-regex-with-match-phrase/362771 "2024-07-09T10:05:55Z")
Hey all! I ran into a problem with my elasticsearch query. I try to match log patterns of different tests, ran on a specific app. My goal is to match all of the patterns, in any of the tests. The full query I built i… --- ## [Need help in appending SevOne logs to logstash](https://discuss.elastic.co/t/need-help-in-appending-sevone-logs-to-logstash/362787)
**Author:** [@keerthi12](https://discuss.elastic.co/u/keerthi12)\ **Replies:** 0\ **Last updated:** [July 9, 2024, 9:57am UTC](https://discuss.elastic.co/t/need-help-in-appending-sevone-logs-to-logstash/362787 "2024-07-09T09:57:01Z")
Hi Team We have installed ELK on premises, and we were trying to append Sevone(An IBM network performance monitoring tool) logs to logstash, does anyone have done the same, we need procedure to append sevone logs to Log… --- ## [ELK installation on-premises](https://discuss.elastic.co/t/elk-installation-on-premises/362605)
**Author:** [@keerthi12](https://discuss.elastic.co/u/keerthi12)\ **Replies:** 2\ **Last updated:** [July 9, 2024, 9:55am UTC](https://discuss.elastic.co/t/elk-installation-on-premises/362605 "2024-07-09T09:55:19Z")
Hi Team, We have successfully installed Elasticsearch and it is running in port 9200. Also, installed kibana but unable to face the kibana ui, facing the below issue. Kindly help in resolving this issue. Failed to fet… --- ## [On the advantage of search\_after under the hood](https://discuss.elastic.co/t/on-the-advantage-of-search-after-under-the-hood/362744)
**Author:** [@Chervine\_Majeri](https://discuss.elastic.co/u/Chervine_Majeri)\ **Replies:** 2\ **Last updated:** [July 9, 2024, 8:55am UTC](https://discuss.elastic.co/t/on-the-advantage-of-search-after-under-the-hood/362744 "2024-07-09T08:55:14Z")
Hello, Unless we're reading from a sorted index, it seems like elasticsearch will always read all matching rows into memory and then sort through them. Essentially, this makes it so the main advantage of using search\_a… --- ## [Fleet Server Unhealthy when first Launched](https://discuss.elastic.co/t/fleet-server-unhealthy-when-first-launched/361850)
**Author:** [@mid\_city](https://discuss.elastic.co/u/mid_city)\ **Replies:** 1\ **Last updated:** [July 9, 2024, 7:40am UTC](https://discuss.elastic.co/t/fleet-server-unhealthy-when-first-launched/361850 "2024-07-09T07:40:40Z")
Whenever I launch a fleet server it has a status of unhealthy. The system integration had warnings and I found the following when looking through my log diagnostic. {"log.level":"error","@timestamp":"2024-06-21T11:10:06… --- ## [Fleet Server Error : enroll command failed for unknown reason: exit status 2](https://discuss.elastic.co/t/fleet-server-error-enroll-command-failed-for-unknown-reason-exit-status-2/362518)
**Author:** [@Tola-Tole](https://discuss.elastic.co/u/Tola-Tole)\ **Replies:** 1\ **Last updated:** [July 9, 2024, 7:35am UTC](https://discuss.elastic.co/t/fleet-server-error-enroll-command-failed-for-unknown-reason-exit-status-2/362518 "2024-07-09T07:35:38Z")
Hello, i've problem to add fleet server, Error : enroll command failed for unknown reason: exit status 2. any help aboud this? --- ## [Plugin in the list but I can't use in the pipeline \[ERROR\]](https://discuss.elastic.co/t/plugin-in-the-list-but-i-cant-use-in-the-pipeline-error/362683)
**Author:** [@Leo23](https://discuss.elastic.co/u/Leo23)\ **Replies:** 0\ **Last updated:** [July 8, 2024, 9:06am UTC](https://discuss.elastic.co/t/plugin-in-the-list-but-i-cant-use-in-the-pipeline-error/362683 "2024-07-08T09:06:03Z")
Hello, I have installed a filter-plugin that I have created in a machine A, I have pack this plugin in a zip file to install it on a machine B that don't have access to Internet. When I install thix plugin with zip I don… --- ## [Bsearch API timeout (internal server error - 500)](https://discuss.elastic.co/t/bsearch-api-timeout-internal-server-error-500/361477)
**Author:** [@Priyanka\_Narne](https://discuss.elastic.co/u/Priyanka_Narne)\ **Replies:** 2\ **Last updated:** [July 9, 2024, 6:51am UTC](https://discuss.elastic.co/t/bsearch-api-timeout-internal-server-error-500/361477 "2024-07-09T06:51:35Z")
We are trying to implement Histogram for displaying data ingestion similar to Kibana Discover page using bsearch API. Sometimes we are getting ID, but data is empty in the response. When we try to refetch the data witho… --- ## [Ideal number of max\_num\_segments for forcemerge](https://discuss.elastic.co/t/ideal-number-of-max-num-segments-for-forcemerge/362753)
**Author:** [@HyebinHong](https://discuss.elastic.co/u/HyebinHong)\ **Replies:** 0\ **Last updated:** [July 9, 2024, 3:11am UTC](https://discuss.elastic.co/t/ideal-number-of-max-num-segments-for-forcemerge/362753 "2024-07-09T03:11:26Z")
Hello. I'm considering to change the indexing logic a bit. My situation: Now my full-indxing batch runs once or twice a month, cause it takes too long to run more frequently(definately it needs to be refactored). Hol… --- ## [I am getting in kibana while loading second index sources](https://discuss.elastic.co/t/i-am-getting-in-kibana-while-loading-second-index-sources/362758)
**Author:** [@Hellboy1](https://discuss.elastic.co/u/Hellboy1)\ **Replies:** 1\ **Last updated:** [July 9, 2024, 5:13am UTC](https://discuss.elastic.co/t/i-am-getting-in-kibana-while-loading-second-index-sources/362758 "2024-07-09T05:13:31Z")
Edit 'microsoft-unified-audit-logs-2024.07.09' Changing this data view can break other objects that depend on it. When I clicked on "confirm" it loaded previous index data but not the new index data that I added? --- ## [Problem In last\_value](https://discuss.elastic.co/t/problem-in-last-value/362755)
**Author:** [@nway.onm](https://discuss.elastic.co/u/nway.onm)\ **Replies:** 0\ **Last updated:** [July 9, 2024, 3:39am UTC](https://discuss.elastic.co/t/problem-in-last-value/362755 "2024-07-09T03:39:19Z")
i have some math function using lens formula, and when i use last\_value function when it's doesn't match my filter i want some default value like 0. but now it's return nothing and all the result for my formula become … --- ## [Error when running race](https://discuss.elastic.co/t/error-when-running-race/362681)
**Author:** [@Hank.S](https://discuss.elastic.co/u/Hank.S)\ **Replies:** 2\ **Last updated:** [July 9, 2024, 2:32am UTC](https://discuss.elastic.co/t/error-when-running-race/362681 "2024-07-09T02:32:13Z")
I'm new to rally and want to test my elastic cluster's performance. I have a 3-node elastic cluster set in docker. I'm in China mainland, so it could be a network issue. I installed esrally in a virtual venv of python… --- ## [\[Solved\] All nodes are offline in the kibana dashboard despite nodes working actually](https://discuss.elastic.co/t/solved-all-nodes-are-offline-in-the-kibana-dashboard-despite-nodes-working-actually/362619)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 2\ **Last updated:** [July 9, 2024, 12:14am UTC](https://discuss.elastic.co/t/solved-all-nodes-are-offline-in-the-kibana-dashboard-despite-nodes-working-actually/362619 "2024-07-09T00:14:40Z")
hello, i'm currently learning about ELK stack and i'm in love with this solution background: my goal is Understanding and setting up a comprehensive security monitoring and incident response environment in my home lab… --- ## [Case\_insensitive filter in Search UI](https://discuss.elastic.co/t/case-insensitive-filter-in-search-ui/362740)
**Author:** [@bduane](https://discuss.elastic.co/u/bduane)\ **Replies:** 0\ **Last updated:** [July 8, 2024, 8:55pm UTC](https://discuss.elastic.co/t/case-insensitive-filter-in-search-ui/362740 "2024-07-08T20:55:46Z")
Is there a way to set the case\_insensitive parameter for a filter in Search UI? I have a keyword field that I need to filter by, but it is only working for case sensitive matches. I see there is a case\_insensitive param… --- ## [Machine Learning model issue](https://discuss.elastic.co/t/machine-learning-model-issue/362143)
**Author:** [@Marwan\_Ezz](https://discuss.elastic.co/u/Marwan_Ezz)\ **Replies:** 2\ **Last updated:** [July 8, 2024, 8:55pm UTC](https://discuss.elastic.co/t/machine-learning-model-issue/362143 "2024-07-08T20:55:35Z")
I'm using Elasticsearch machine learning advanced model to detect anomalies in the trend of our failures. I'm having an issue that the failure count is increasing everyday at the same time so the model have learnt that … --- ## [Nodes do not find the initial master node](https://discuss.elastic.co/t/nodes-do-not-find-the-initial-master-node/362405)
**Author:** [@jhonsouza](https://discuss.elastic.co/u/jhonsouza)\ **Replies:** 12\ **Last updated:** [July 8, 2024, 8:54pm UTC](https://discuss.elastic.co/t/nodes-do-not-find-the-initial-master-node/362405 "2024-07-08T20:54:50Z")
Hi, guys! I'm trying to run the Elasticsearch on AWS ECS. I have a problem at the moment, the nodes try to join the cluster. When the other nodes are in the same instance that the initial master node, they can to join t… --- ## [Population Job Use case](https://discuss.elastic.co/t/population-job-use-case/362443)
**Author:** [@Septianingrum.17](https://discuss.elastic.co/u/Septianingrum.17)\ **Replies:** 2\ **Last updated:** [July 8, 2024, 8:53pm UTC](https://discuss.elastic.co/t/population-job-use-case/362443 "2024-07-08T20:53:28Z")
Dear All, Currently I want to optimize the machine learning that I have, but I am still very confused about how to optimize the use of population jobs for my logs, is there a use case that I can use? and under what cond… --- ## [Filebeat is not creating indices for each pod name](https://discuss.elastic.co/t/filebeat-is-not-creating-indices-for-each-pod-name/362715)
**Author:** [@nandeesh\_b](https://discuss.elastic.co/u/nandeesh_b)\ **Replies:** 4\ **Last updated:** [July 8, 2024, 8:45pm UTC](https://discuss.elastic.co/t/filebeat-is-not-creating-indices-for-each-pod-name/362715 "2024-07-08T20:45:37Z")
Please help on this and stuck in this from last 5 days and not able to create index for each pod in Elasticsearch using filebeat. Elastic search version: 7.10.1 AWS Filebeat version: 7.12.1 apiVersion: v1 kind: Config… --- ## [Deploy and run Powershellscripts with Elastic Agent](https://discuss.elastic.co/t/deploy-and-run-powershellscripts-with-elastic-agent/362725)
**Author:** [@disi\_90](https://discuss.elastic.co/u/disi_90)\ **Replies:** 1\ **Last updated:** [July 8, 2024, 6:22pm UTC](https://discuss.elastic.co/t/deploy-and-run-powershellscripts-with-elastic-agent/362725 "2024-07-08T18:22:08Z")
Hello community, We are using Splunk in our environment and are considering migrating to Elasticsearch. I am totally new to the Elastic topic. The capabilities of the Splunk Universal Forwarder and Splunk Heavy Forward… --- ## [Jumpcloud setup saml integration with Kibana for Authentication](https://discuss.elastic.co/t/jumpcloud-setup-saml-integration-with-kibana-for-authentication/362693)
**Author:** [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\ **Replies:** 3\ **Last updated:** [July 8, 2024, 6:12pm UTC](https://discuss.elastic.co/t/jumpcloud-setup-saml-integration-with-kibana-for-authentication/362693 "2024-07-08T18:12:11Z")
Hi All, We are planning to implement Jumpcloud integration with Kibana for Authentication. Configuration we added in kibana.yml: xpack.security.authc.providers: saml.saml1: order: 0 realm: saml1 descript… --- ## [Long message not showing in dashboard but shows in Edit Mode of its own](https://discuss.elastic.co/t/long-message-not-showing-in-dashboard-but-shows-in-edit-mode-of-its-own/362489)
**Author:** [@Chris\_Mai](https://discuss.elastic.co/u/Chris_Mai)\ **Replies:** 1\ **Last updated:** [July 8, 2024, 4:30pm UTC](https://discuss.elastic.co/t/long-message-not-showing-in-dashboard-but-shows-in-edit-mode-of-its-own/362489 "2024-07-08T16:30:56Z")
Hi all, I'm trying to achieve the same appearance of my chart in Edit mode and for some reasons, my bar always disappears when I add it to the dashboard. I try everything even with different charts like Pie. It still do… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=206) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=208)