# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=208

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 209

---

## [Unable to access new Azure ES cloud instance](https://discuss.elastic.co/t/unable-to-access-new-azure-es-cloud-instance/362472)

<div class="topic-metadata">

**Author:** [@vinholla](https://discuss.elastic.co/u/vinholla)\
**Replies:** 3\
**Last updated:** [July 8, 2024, 4:11pm UTC](https://discuss.elastic.co/t/unable-to-access-new-azure-es-cloud-instance/362472 "2024-07-08T16:11:20Z")

</div>

To access the resource \[r:/deployments/34886272522cadf7813eabf3b778e93a\], the user must have the required authorization.

---

## [OOTB Use of Visualizations](https://discuss.elastic.co/t/ootb-use-of-visualizations/362227)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 8\
**Last updated:** [July 8, 2024, 3:25pm UTC](https://discuss.elastic.co/t/ootb-use-of-visualizations/362227 "2024-07-08T15:25:39Z")

</div>

Hello, I was looking at Users Experience in Elastic APM. I noticed the visualizations can sometimes be better than Lens or any visualizations used in custom dashboards. For example this particular line chart: I…

---

## [Trouble enrolling Elastic Agent on Windows 2019](https://discuss.elastic.co/t/trouble-enrolling-elastic-agent-on-windows-2019/360990)

<div class="topic-metadata">

**Author:** [@hcherry](https://discuss.elastic.co/u/hcherry)\
**Replies:** 3\
**Last updated:** [July 8, 2024, 3:11pm UTC](https://discuss.elastic.co/t/trouble-enrolling-elastic-agent-on-windows-2019/360990 "2024-07-08T15:11:07Z")

</div>

Hello - While trying to install and enroll Elastic Agent on a Windows 2019 server, I am getting the following errors. Has anyone seen this before? I am finding no information about a cause or a solution. Thanks in advanc…

---

## [Error with details of a log entry since upgrade to 8.14](https://discuss.elastic.co/t/error-with-details-of-a-log-entry-since-upgrade-to-8-14/361498)

<div class="topic-metadata">

**Author:** [@Anywhere](https://discuss.elastic.co/u/Anywhere)\
**Replies:** 3\
**Last updated:** [July 8, 2024, 3:08pm UTC](https://discuss.elastic.co/t/error-with-details-of-a-log-entry-since-upgrade-to-8-14/361498 "2024-07-08T15:08:37Z")

</div>

Problem description I've been experiencing issues with my ELK stack since upgrading to version 8.14.0 from 8.13.4 In Kibana, under Observability \> Stream Logs \> Stream logs, when I attempt to view the details of a log e…

---

## [403 error from hetzner](https://discuss.elastic.co/t/403-error-from-hetzner/362718)

<div class="topic-metadata">

**Author:** [@mrrr\_cat](https://discuss.elastic.co/u/mrrr_cat)\
**Replies:** 1\
**Last updated:** [July 8, 2024, 2:14pm UTC](https://discuss.elastic.co/t/403-error-from-hetzner/362718 "2024-07-08T14:14:00Z")

</div>

Hello. I have a problem. can\`t install elasticsearch on hetzner server. ...: wget https://artifacts.elastic.co/ --2024-07-08 13:21:10-- https://artifacts.elastic.co/ Resolving artifacts.elastic.co (artifacts.elastic.co…

---

## [Elastic APM Agent for AIX OS](https://discuss.elastic.co/t/elastic-apm-agent-for-aix-os/362588)

<div class="topic-metadata">

**Author:** [@amolphp](https://discuss.elastic.co/u/amolphp)\
**Replies:** 4\
**Last updated:** [July 8, 2024, 1:10pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-for-aix-os/362588 "2024-07-08T13:10:46Z")

</div>

Is there any plan to introduce Elastic APM Agent for AIX operating system?

---

## [Download Reports as CSV Failed to export the Hyperlink text with URL](https://discuss.elastic.co/t/download-reports-as-csv-failed-to-export-the-hyperlink-text-with-url/361859)

<div class="topic-metadata">

**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\
**Replies:** 4\
**Last updated:** [July 4, 2024, 1:44pm UTC](https://discuss.elastic.co/t/download-reports-as-csv-failed-to-export-the-hyperlink-text-with-url/361859 "2024-07-04T13:44:46Z")

</div>

I am trying to export the report in csv of the tables that are created using lens. where i have the hyperlink field . When i download the report as CSV then its just download as text instead of the hyperlink with la…

---

## [Snapshot restore is too slow in Elasticsearch 7.17 in FIPS enabled Redhat OS](https://discuss.elastic.co/t/snapshot-restore-is-too-slow-in-elasticsearch-7-17-in-fips-enabled-redhat-os/362703)

<div class="topic-metadata">

**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\
**Replies:** 0\
**Last updated:** [July 8, 2024, 12:10pm UTC](https://discuss.elastic.co/t/snapshot-restore-is-too-slow-in-elasticsearch-7-17-in-fips-enabled-redhat-os/362703 "2024-07-08T12:10:17Z")

</div>

we are snapshotting the the data from the ES veriosn 7.17 and we stored in GCS plugin and restoring the snapshot in same server but different cluster. But 5GB data takes 48 hrs to restore. The server is Redhat OS with …

---

## [Issues while search results having special charecters](https://discuss.elastic.co/t/issues-while-search-results-having-special-charecters/362687)

<div class="topic-metadata">

**Author:** [@NSGokul](https://discuss.elastic.co/u/NSGokul)\
**Replies:** 3\
**Last updated:** [July 8, 2024, 11:04am UTC](https://discuss.elastic.co/t/issues-while-search-results-having-special-charecters/362687 "2024-07-08T11:04:44Z")

</div>

I'm working on an Elasticsearch application for searching person data, including names in both English and French. I've completed the data indexing process. Current Issue: Case Sensitivity: Searching for "Francois" do…

---

## [Convert fields from text into date format using in Logstash config file](https://discuss.elastic.co/t/convert-fields-from-text-into-date-format-using-in-logstash-config-file/362621)

<div class="topic-metadata">

**Author:** [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\
**Replies:** 2\
**Last updated:** [July 8, 2024, 10:09am UTC](https://discuss.elastic.co/t/convert-fields-from-text-into-date-format-using-in-logstash-config-file/362621 "2024-07-08T10:09:07Z")

</div>

Logstash conf file: filter { json { source =\> "message" } } output { elasticsearch { hosts =\>"http://xx.xx.xx.xx.com" index =\> "sample\_data\_%{+YYYY.MM.dd}" user =\> "elastic" password =\> "xxxxxxxxx" } } Inde…

---

## [Sub-millisecond aggregation in ElasticSearch](https://discuss.elastic.co/t/sub-millisecond-aggregation-in-elasticsearch/361924)

<div class="topic-metadata">

**Author:** [@Varun\_Tokas](https://discuss.elastic.co/u/Varun_Tokas)\
**Replies:** 2\
**Last updated:** [July 8, 2024, 9:49am UTC](https://discuss.elastic.co/t/sub-millisecond-aggregation-in-elasticsearch/361924 "2024-07-08T09:49:23Z")

</div>

We are using Elasticsearch to store some time series data which has nano-second precision time stamps. Through use of the date\_nanos datatype we are able to ingest the data into Elasticsearch and plot it in Kibana. Howev…

---

## [Empty events after last update](https://discuss.elastic.co/t/empty-events-after-last-update/362508)

<div class="topic-metadata">

**Author:** [@Arthur\_Gordon\_Pym](https://discuss.elastic.co/u/Arthur_Gordon_Pym)\
**Replies:** 1\
**Last updated:** [July 8, 2024, 5:59am UTC](https://discuss.elastic.co/t/empty-events-after-last-update/362508 "2024-07-08T05:59:04Z")

</div>

Hello. Yesterday i did a CentOS Stream update. ELK updated to 8.14.1, now i can't send events from Filebeat to Elasticsearch anymore, events arrive EMPTY :thinking: ... using Logstash in the middle, events are ok …

---

## [Kibana base path](https://discuss.elastic.co/t/kibana-base-path/362615)

<div class="topic-metadata">

**Author:** [@Louw\_Claassens](https://discuss.elastic.co/u/Louw_Claassens)\
**Replies:** 2\
**Last updated:** [July 8, 2024, 5:57am UTC](https://discuss.elastic.co/t/kibana-base-path/362615 "2024-07-08T05:57:21Z")

</div>

I set an ingress for Kibana for the route /kibana on my k3s cluster. I also set the following environment variables for Kibana: \</\> extraEnvVars: name: "SERVER\_BASEPATH" value: "/kibana" name: "SERVER\_REWRITEBASEPA…

---

## [How to use JSON input in Kibana](https://discuss.elastic.co/t/how-to-use-json-input-in-kibana/362673)

<div class="topic-metadata">

**Author:** [@mradulag](https://discuss.elastic.co/u/mradulag)\
**Replies:** 0\
**Last updated:** [July 8, 2024, 5:41am UTC](https://discuss.elastic.co/t/how-to-use-json-input-in-kibana/362673 "2024-07-08T05:41:19Z")

</div>

Hi, I want to add a field in my JSON query for a field in KIbana like this: "load\_time\_outlier": { "percentiles": { "field": "load\_time", "tdigest": { "execution\_hint": "high\_accuracy…

---

## [Proper shard and replica settings](https://discuss.elastic.co/t/proper-shard-and-replica-settings/362433)

<div class="topic-metadata">

**Author:** [@HyebinHong](https://discuss.elastic.co/u/HyebinHong)\
**Replies:** 4\
**Last updated:** [July 8, 2024, 5:19am UTC](https://discuss.elastic.co/t/proper-shard-and-replica-settings/362433 "2024-07-08T05:19:54Z")

</div>

Hello, Elastic! I'm planning to modify shard and replica settings cause mine is not resonable. I have 5 types of indices which sized 30MB, 2GB, 25GB, 35GB, 200GB and each of them have 2 sets(live and indexing indices p…

---

## [Why my price summary is different than other users](https://discuss.elastic.co/t/why-my-price-summary-is-different-than-other-users/362664)

<div class="topic-metadata">

**Author:** [@JasonREC](https://discuss.elastic.co/u/JasonREC)\
**Replies:** 1\
**Last updated:** [July 8, 2024, 4:44am UTC](https://discuss.elastic.co/t/why-my-price-summary-is-different-than-other-users/362664 "2024-07-08T04:44:15Z")

</div>

Hi, I found out that my price summary is a bit different than others, I wonder if there is a way to adjust so that I can have better understanding what is the money that I am paying for. Others price summary: My pri…

---

## [ILM and moving shards across nodes](https://discuss.elastic.co/t/ilm-and-moving-shards-across-nodes/362585)

<div class="topic-metadata">

**Author:** [@Nau79](https://discuss.elastic.co/u/Nau79)\
**Replies:** 4\
**Last updated:** [July 8, 2024, 4:37am UTC](https://discuss.elastic.co/t/ilm-and-moving-shards-across-nodes/362585 "2024-07-08T04:37:57Z")

</div>

Hi There, I have a environment with multi nodes. 3 Master with with master and remote\_cluster\_client role 3 Data with data role 3 Warm nodes with data\_warm role 3 Cold nodes with data\_cold role 1 ML nodes with ml r…

---

## [Issues restarting kibana](https://discuss.elastic.co/t/issues-restarting-kibana/362650)

<div class="topic-metadata">

**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\
**Replies:** 7\
**Last updated:** [July 8, 2024, 3:33am UTC](https://discuss.elastic.co/t/issues-restarting-kibana/362650 "2024-07-08T03:33:34Z")

</div>

I forgot to power off the computer running elastic and kibana prior to turning off the house power. When I turned it back on, logstash and elastic were fine but kibana is complaining about some migration error. This setu…

---

## [Extracting substring from a field](https://discuss.elastic.co/t/extracting-substring-from-a-field/362656)

<div class="topic-metadata">

**Author:** [@SUMANTA\_ROY](https://discuss.elastic.co/u/SUMANTA_ROY)\
**Replies:** 5\
**Last updated:** [July 7, 2024, 9:22pm UTC](https://discuss.elastic.co/t/extracting-substring-from-a-field/362656 "2024-07-07T21:22:42Z")

</div>

A field called message contains a lot of information as below. message: xxxxxxxx /app/rest/abc 200 500ms xxxxxxxx. -\> is there a way to extract the api names and the response time only and put them in a table (without…

---

## [MIB to YAML Conversion issue](https://discuss.elastic.co/t/mib-to-yaml-conversion-issue/362652)

<div class="topic-metadata">

**Author:** [@vijjigani](https://discuss.elastic.co/u/vijjigani)\
**Replies:** 5\
**Last updated:** [July 7, 2024, 2:57pm UTC](https://discuss.elastic.co/t/mib-to-yaml-conversion-issue/362652 "2024-07-07T14:57:10Z")

</div>

Hello Experts, When i am converting the MIB to YAML files , i am getting the below error,Can you please help me on this .

---

## [Filebeat UDP listener is configured but not receiving expected data, even though Wireshark shows logs being transmitted](https://discuss.elastic.co/t/filebeat-udp-listener-is-configured-but-not-receiving-expected-data-even-though-wireshark-shows-logs-being-transmitted/362653)

<div class="topic-metadata">

**Author:** [@randv](https://discuss.elastic.co/u/randv)\
**Replies:** 0\
**Last updated:** [July 7, 2024, 8:19am UTC](https://discuss.elastic.co/t/filebeat-udp-listener-is-configured-but-not-receiving-expected-data-even-though-wireshark-shows-logs-being-transmitted/362653 "2024-07-07T08:19:11Z")

</div>

Hi Team I have really weird issue. I have Filebeat configured to except logs on port 514, here is the input configurations: filebeat.inputs: -type: udp enabled: true max\_message\_size: 64KiB host: "0.0.0.0:514" He…

---

## [Metricbeat forcing to use manually created template](https://discuss.elastic.co/t/metricbeat-forcing-to-use-manually-created-template/362634)

<div class="topic-metadata">

**Author:** [@Ronaldo\_Lanhellas](https://discuss.elastic.co/u/Ronaldo_Lanhellas)\
**Replies:** 13\
**Last updated:** [July 6, 2024, 9:44pm UTC](https://discuss.elastic.co/t/metricbeat-forcing-to-use-manually-created-template/362634 "2024-07-06T21:44:34Z")

</div>

Hi Folks, I have an APIKey in my Elasticsearch which allows only index creation with specific patterns such as "app-abc-\*". It does not allow index template creations. The company has a default-template which is applied…

---

## [Filebeat autodiscover filter by namespace or container labels](https://discuss.elastic.co/t/filebeat-autodiscover-filter-by-namespace-or-container-labels/362550)

<div class="topic-metadata">

**Author:** [@Andrea\_Bertanzon](https://discuss.elastic.co/u/Andrea_Bertanzon)\
**Replies:** 2\
**Last updated:** [July 6, 2024, 4:01pm UTC](https://discuss.elastic.co/t/filebeat-autodiscover-filter-by-namespace-or-container-labels/362550 "2024-07-06T16:01:44Z")

</div>

Hello, I deployed Filebeats in my kubernetes cluster. The cluster uses CRI-O not Docker or Containerd (this is helpful for log folder path). The idea I am trying to implement is to make so that Filebeats only collects …

---

## [Why my elasticsearch request a lot of cache size when it's starting?](https://discuss.elastic.co/t/why-my-elasticsearch-request-a-lot-of-cache-size-when-its-starting/362300)

<div class="topic-metadata">

**Author:** [@wwwryuwww](https://discuss.elastic.co/u/wwwryuwww)\
**Replies:** 2\
**Last updated:** [July 6, 2024, 4:02pm UTC](https://discuss.elastic.co/t/why-my-elasticsearch-request-a-lot-of-cache-size-when-its-starting/362300 "2024-07-06T16:02:10Z")

</div>

Hi, there. I'm configuring elastic stack with 3 nodes using Virtual Box. Each of VMs has 5GB memories, 4 CPUs and 30GB of space. Once I finished creating cluster, at some point in time, I faced a fatal exception every…

---

## [Can ELK Dashboard have different filters in visualizations for same Dashboard](https://discuss.elastic.co/t/can-elk-dashboard-have-different-filters-in-visualizations-for-same-dashboard/362618)

<div class="topic-metadata">

**Author:** [@Aditya\_Macherla](https://discuss.elastic.co/u/Aditya_Macherla)\
**Replies:** 3\
**Last updated:** [July 6, 2024, 2:03pm UTC](https://discuss.elastic.co/t/can-elk-dashboard-have-different-filters-in-visualizations-for-same-dashboard/362618 "2024-07-06T14:03:09Z")

</div>

I am pretty new to ELK Ecosystem. I have a requirement to filter data to only one view in the dashboard. Others views should not be impacted by the filter applied at the top in the Dashboard. All are associated to same I…

---

## [Sorry for the trouble - Some guidance is needed in the initial stages of contribution](https://discuss.elastic.co/t/sorry-for-the-trouble-some-guidance-is-needed-in-the-initial-stages-of-contribution/362644)

<div class="topic-metadata">

**Author:** [@shreedaddy](https://discuss.elastic.co/u/shreedaddy)\
**Replies:** 0\
**Last updated:** [July 6, 2024, 10:52am UTC](https://discuss.elastic.co/t/sorry-for-the-trouble-some-guidance-is-needed-in-the-initial-stages-of-contribution/362644 "2024-07-06T10:52:37Z")

</div>

I have just started on Elastic Search 1 week ago. I am very much eager to starting contributing to the number of issues in regards to Elastic Search. After initial setup on my local machine to contribute productively I b…

---

## [Client request timeout](https://discuss.elastic.co/t/client-request-timeout/362622)

<div class="topic-metadata">

**Author:** [@shrm](https://discuss.elastic.co/u/shrm)\
**Replies:** 3\
**Last updated:** [July 6, 2024, 7:15am UTC](https://discuss.elastic.co/t/client-request-timeout/362622 "2024-07-06T07:15:14Z")

</div>

I have an index with wrong datatype in an attribute "vjid" I tried to convert "vjid" values from string to integer using this command: POST vjdb/\_update\_by\_query { "script": { "source": "ctx.\_source.vjid = Intege…

---

## [No handler found](https://discuss.elastic.co/t/no-handler-found/362560)

<div class="topic-metadata">

**Author:** [@edgarmat1964](https://discuss.elastic.co/u/edgarmat1964)\
**Replies:** 2\
**Last updated:** [July 5, 2024, 7:32pm UTC](https://discuss.elastic.co/t/no-handler-found/362560 "2024-07-05T19:32:27Z")

</div>

Hi list, I've got an issue where I get a "no handler found" error. I've started a trial license which is still active. My relevant elasticsearch.yml: path.data: /data/elasticsearch path.logs: /var/log/elasticsearch net…

---

## [Export elastic logs to an external syslog](https://discuss.elastic.co/t/export-elastic-logs-to-an-external-syslog/362629)

<div class="topic-metadata">

**Author:** [@Gabriel\_Cunha](https://discuss.elastic.co/u/Gabriel_Cunha)\
**Replies:** 4\
**Last updated:** [July 5, 2024, 6:35pm UTC](https://discuss.elastic.co/t/export-elastic-logs-to-an-external-syslog/362629 "2024-07-05T18:35:54Z")

</div>

Hello, I have a setup with elasticsearch + kibana + elasticagent and logstash. I am ingesting CloudFlare logs and I need to sent this logs through syslog for another internal host I have. I have installed the logstash …

---

## [Email Connector](https://discuss.elastic.co/t/email-connector/362627)

<div class="topic-metadata">

**Author:** [@narayanaitrecruiter](https://discuss.elastic.co/u/narayanaitrecruiter)\
**Replies:** 1\
**Last updated:** [July 5, 2024, 6:22pm UTC](https://discuss.elastic.co/t/email-connector/362627 "2024-07-05T18:22:23Z")

</div>

Hi Team, i am trying to create Email connector using the gmail which has 2 factor authentication enabled. What need to be done in this case? no option to enable app password.

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=207)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=209)
