# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=215 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 216 --- ## [Improper access controll](https://discuss.elastic.co/t/improper-access-controll/361999)
**Author:** [@Muhammad\_Idris](https://discuss.elastic.co/u/Muhammad_Idris)\ **Replies:** 2\ **Last updated:** [June 25, 2024, 8:37am UTC](https://discuss.elastic.co/t/improper-access-controll/361999 "2024-06-25T08:37:47Z")
improper access controll --- ## [Fleet server on-prem resource requirements](https://discuss.elastic.co/t/fleet-server-on-prem-resource-requirements/361997)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 0\ **Last updated:** [June 25, 2024, 7:41am UTC](https://discuss.elastic.co/t/fleet-server-on-prem-resource-requirements/361997 "2024-06-25T07:41:12Z")
Hi, I am setting up a Fleet Server on-premises and need guidance on resource allocation. The Elastic Cloud documentation provides the following resource requirements based on the number of agents: Number of Agents F… --- ## [Filestream exclude\_lines doesn't appear to be working](https://discuss.elastic.co/t/filestream-exclude-lines-doesnt-appear-to-be-working/361759)
**Author:** [@Steve\_Foster](https://discuss.elastic.co/u/Steve_Foster)\ **Replies:** 8\ **Last updated:** [June 24, 2024, 9:41pm UTC](https://discuss.elastic.co/t/filestream-exclude-lines-doesnt-appear-to-be-working/361759 "2024-06-24T21:41:29Z")
I'm trying to stop the inclusion of healthcheck log lines from being sent to Elasticsearch. In the filestream docs there is the exclude\_lines option which is an array of regex. So if I want to filter out lines that con… --- ## [Timelion range with uniq count](https://discuss.elastic.co/t/timelion-range-with-uniq-count/361981)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 0\ **Last updated:** [June 24, 2024, 9:07pm UTC](https://discuss.elastic.co/t/timelion-range-with-uniq-count/361981 "2024-06-24T21:07:10Z")
I have sample with five min interval data is like this time host job# mem\_used (bytes) 00:05 host1 "123" 1,085,030,400 00:05 host2 "123" 1,085,030,500 00:05 host3 "1… --- ## [Is it possible to export graphics created in elastic to a bubble web app?](https://discuss.elastic.co/t/is-it-possible-to-export-graphics-created-in-elastic-to-a-bubble-web-app/361957)
**Author:** [@Viniyan](https://discuss.elastic.co/u/Viniyan)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 6:03pm UTC](https://discuss.elastic.co/t/is-it-possible-to-export-graphics-created-in-elastic-to-a-bubble-web-app/361957 "2024-06-24T18:03:58Z")
I am creating an app which includes 2 graphics. I tried to create those with Bubble, but with no success. I want to know if it is possible to create the graphic on elastic and then implement this on my frontend, in Bubbl… --- ## [Moving data streams to warm phase dowsampling](https://discuss.elastic.co/t/moving-data-streams-to-warm-phase-dowsampling/361596)
**Author:** [@Honestabe](https://discuss.elastic.co/u/Honestabe)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 4:46pm UTC](https://discuss.elastic.co/t/moving-data-streams-to-warm-phase-dowsampling/361596 "2024-06-24T16:46:48Z")
POST \_ilm/move/.ds-heartbeat-8.13.2-2024.04.29-000001 { "current\_step": { "phase": "warm", "action": "complete", "name": "complete" }, "next\_step": { "phase": "warm", "action": "downsample", … --- ## [Elastic APM WebSphere Servant differentiation](https://discuss.elastic.co/t/elastic-apm-websphere-servant-differentiation/361973)
**Author:** [@AP\_12](https://discuss.elastic.co/u/AP_12)\ **Replies:** 0\ **Last updated:** [June 24, 2024, 2:57pm UTC](https://discuss.elastic.co/t/elastic-apm-websphere-servant-differentiation/361973 "2024-06-24T14:57:24Z")
So we have Elastic Agent installed on our JVM but when we spin up multiple Servant servers which are essentially clones of the JVM where the agent is installed. So these clones also have the same logical name so whether … --- ## [Badly formatted index](https://discuss.elastic.co/t/badly-formatted-index/361709)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 4\ **Last updated:** [June 24, 2024, 2:56pm UTC](https://discuss.elastic.co/t/badly-formatted-index/361709 "2024-06-24T14:56:12Z")
Hi the team, I have a logstash pipeline which worked well sometimes for 2 or 3 weeks, but this time it worked for 2 days, and this morning it return this error : Badly formatted index, after interpolation still contain… --- ## [DNS processor does not work with Suricata integration](https://discuss.elastic.co/t/dns-processor-does-not-work-with-suricata-integration/361961)
**Author:** [@svatopluk](https://discuss.elastic.co/u/svatopluk)\ **Replies:** 0\ **Last updated:** [June 24, 2024, 12:54pm UTC](https://discuss.elastic.co/t/dns-processor-does-not-work-with-suricata-integration/361961 "2024-06-24T12:54:17Z")
Hello community, I have a problem with dns processor. I am using Suricata integration and I need DNS reverse lookup, that's why I decided to use dns processor. I also created mapping for new fields. But this processor d… --- ## [Managing 10TB of Data in Elasticsearch with 30GB Heap: Best Practices and Considerations](https://discuss.elastic.co/t/managing-10tb-of-data-in-elasticsearch-with-30gb-heap-best-practices-and-considerations/361948)
**Author:** [@Prashant\_Rana](https://discuss.elastic.co/u/Prashant_Rana)\ **Replies:** 0\ **Last updated:** [June 24, 2024, 12:09pm UTC](https://discuss.elastic.co/t/managing-10tb-of-data-in-elasticsearch-with-30gb-heap-best-practices-and-considerations/361948 "2024-06-24T12:09:44Z")
I was very interested in frozen indices, but it seems like they are deprecated. According to the blog, You would now only need 2.5GB of heap memory to keep 10TB of geonames-like data indices open. I want to understa… --- ## [Search special characters in elastic-search](https://discuss.elastic.co/t/search-special-characters-in-elastic-search/361938)
**Author:** [@t-e-x](https://discuss.elastic.co/u/t-e-x)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 11:43am UTC](https://discuss.elastic.co/t/search-special-characters-in-elastic-search/361938 "2024-06-24T11:43:22Z")
How can I search a text in double quotes - "example":..... I want to look for example filed with double quotes I am using ES - 7.17 --- ## [Custom Index error](https://discuss.elastic.co/t/custom-index-error/361148)
**Author:** [@uhxqc](https://discuss.elastic.co/u/uhxqc)\ **Replies:** 4\ **Last updated:** [June 24, 2024, 11:16am UTC](https://discuss.elastic.co/t/custom-index-error/361148 "2024-06-24T11:16:36Z")
Hello, I am currently using Elastic Search and Kibana versions 8.11 along with Filebeat 8.11.2 on windows system. I have been able to send data to elastic through filebeat with the default filebeat\* index. I wanted my … --- ## [Canvas use of Gauge and drop down menus](https://discuss.elastic.co/t/canvas-use-of-gauge-and-drop-down-menus/361858)
**Author:** [@Mang0](https://discuss.elastic.co/u/Mang0)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 10:37am UTC](https://discuss.elastic.co/t/canvas-use-of-gauge-and-drop-down-menus/361858 "2024-06-24T10:37:38Z")
Hi ! I'm trying to use a gauge combined with a Drop-down Filter in Kibana Canvas Workpad. Both the drop down and the gauge work perfectly separately : i can update some meters with my drop down filter, and my gauge has… --- ## [Unable to upload JSON file via Kibana console](https://discuss.elastic.co/t/unable-to-upload-json-file-via-kibana-console/361910)
**Author:** [@Yazhiniyan\_D](https://discuss.elastic.co/u/Yazhiniyan_D)\ **Replies:** 2\ **Last updated:** [June 24, 2024, 10:25am UTC](https://discuss.elastic.co/t/unable-to-upload-json-file-via-kibana-console/361910 "2024-06-24T10:25:03Z")
I am unable to upload the JSON file in Kibana console, can anyone please guide me. PFA, Input file and error screenshot { "fruit": "Apple", "size": "Large", "color": "Red" } --- ## [Variable\_width\_histogram cannot be nested in sampler](https://discuss.elastic.co/t/variable-width-histogram-cannot-be-nested-in-sampler/361822)
**Author:** [@jewell](https://discuss.elastic.co/u/jewell)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 9:39am UTC](https://discuss.elastic.co/t/variable-width-histogram-cannot-be-nested-in-sampler/361822 "2024-06-24T09:39:24Z")
Greetings The variable\_width\_histogram works fine as the first aggregation GET ntsp\_dbas\_bfg/\_search { "query": { "term": { "name": { "value": "Valsartanic acid" } } }, "size": 0, "a… --- ## [How to ingest large files in ELK stack](https://discuss.elastic.co/t/how-to-ingest-large-files-in-elk-stack/361772)
**Author:** [@mradulag](https://discuss.elastic.co/u/mradulag)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 9:15am UTC](https://discuss.elastic.co/t/how-to-ingest-large-files-in-elk-stack/361772 "2024-06-24T09:15:50Z")
I have line separated JSON files in the order of 1 TB, I can split the files as per the requirement, I just want to efficiently ingest all the data in my ELK stack. I am trying to use Logstash for this purpose, and this … --- ## [Download osquery result](https://discuss.elastic.co/t/download-osquery-result/361884)
**Author:** [@azno](https://discuss.elastic.co/u/azno)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 8:54am UTC](https://discuss.elastic.co/t/download-osquery-result/361884 "2024-06-24T08:54:01Z")
Does anyone know how to download the osquery result to an CSV file? --- ## [Okta apps validation](https://discuss.elastic.co/t/okta-apps-validation/361895)
**Author:** [@brother\_info](https://discuss.elastic.co/u/brother_info)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 8:47am UTC](https://discuss.elastic.co/t/okta-apps-validation/361895 "2024-06-24T08:47:57Z")
I have 3 okta apps setup. Okta app for backend Okta spa app Okta web app The Okta spa app is able to use the access token it got and pass to Okta app for backend and the token is validated. However, the Okta web app a… --- ## [How do I get Internal original IP addresses of the devices from router logs](https://discuss.elastic.co/t/how-do-i-get-internal-original-ip-addresses-of-the-devices-from-router-logs/361934)
**Author:** [@Md\_Wahid\_Sadiq\_Ratul](https://discuss.elastic.co/u/Md_Wahid_Sadiq_Ratul)\ **Replies:** 0\ **Last updated:** [June 24, 2024, 8:19am UTC](https://discuss.elastic.co/t/how-do-i-get-internal-original-ip-addresses-of-the-devices-from-router-logs/361934 "2024-06-24T08:19:09Z")
I am a new learner of the ELK stack. I am taking logs from the router using SNMP and UDP protocol. But I am only getting Post Nat IPV4 addresses. I am including the config code here. input { snmptrap { port =\> 162… --- ## [Lens Visualization not editable after upload via API](https://discuss.elastic.co/t/lens-visualization-not-editable-after-upload-via-api/361790)
**Author:** [@tarkin67](https://discuss.elastic.co/u/tarkin67)\ **Replies:** 3\ **Last updated:** [June 24, 2024, 7:17am UTC](https://discuss.elastic.co/t/lens-visualization-not-editable-after-upload-via-api/361790 "2024-06-24T07:17:47Z")
Hi, we have the issue that lens visualizations that have been loaded to Kibana via saved objects API are not editable via the UI afterwards. For example on this dashboard, it's the "CarryPick - Picks per Workstation" vi… --- ## [Missing fields to aggregate in maps](https://discuss.elastic.co/t/missing-fields-to-aggregate-in-maps/361888)
**Author:** [@idan\_amar](https://discuss.elastic.co/u/idan_amar)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 7:03am UTC](https://discuss.elastic.co/t/missing-fields-to-aggregate-in-maps/361888 "2024-06-24T07:03:32Z")
hello, i have an MTR running between nodes around the worlds and they are sending JSON logs of the MTR report to elastic. in maps i use Point to Point with the intention of drawing lines between them and on each line wi… --- ## [Authentication using apikey failed - apikey authentication for id encountered a failure org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\]](https://discuss.elastic.co/t/authentication-using-apikey-failed-apikey-authentication-for-id-encountered-a-failure-org-elasticsearch-cluster-block-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/361830)
**Author:** [@Cyber\_Labs](https://discuss.elastic.co/u/Cyber_Labs)\ **Replies:** 2\ **Last updated:** [June 21, 2024, 8:28am UTC](https://discuss.elastic.co/t/authentication-using-apikey-failed-apikey-authentication-for-id-encountered-a-failure-org-elasticsearch-cluster-block-clusterblockexception-blocked-by-service-unavailable-1-state-not-recovered-initialized/361830 "2024-06-21T08:28:27Z")
I am running a 3 node cluster, but last week i was constantly getting the kibana server not ready error, but on looking at it, my kibana\_system user was not able to authenticate to the cluster neither any of my users cre… --- ## [Logstash not ingesting fast moving log](https://discuss.elastic.co/t/logstash-not-ingesting-fast-moving-log/361807)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 10\ **Last updated:** [June 24, 2024, 2:36am UTC](https://discuss.elastic.co/t/logstash-not-ingesting-fast-moving-log/361807 "2024-06-24T02:36:22Z")
Hi All, We have a very fast moving/ rolling log file on our Linux server. This log moves very quickly and a job gzips it every hour. I enabled filebeat output to console using the following in filebeat.yml: output.co… --- ## [Filebeat is not sending logs to Logstash](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-logstash/361913)
**Author:** [@Mateo\_Zambrano](https://discuss.elastic.co/u/Mateo_Zambrano)\ **Replies:** 0\ **Last updated:** [June 23, 2024, 6:56pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-logstash/361913 "2024-06-23T18:56:26Z")
I've set up my lab with two servers. On Server A, I have ELK installed using Docker Compose on a Linux server, and on Server B, I have Filebeat running on Windows 10, all in version 8.14.1. I want to send logs from Fileb… --- ## [Elastic and Sec Onion manger not getting Zeek logs](https://discuss.elastic.co/t/elastic-and-sec-onion-manger-not-getting-zeek-logs/361683)
**Author:** [@farmertom](https://discuss.elastic.co/u/farmertom)\ **Replies:** 1\ **Last updated:** [June 23, 2024, 3:49pm UTC](https://discuss.elastic.co/t/elastic-and-sec-onion-manger-not-getting-zeek-logs/361683 "2024-06-23T15:49:27Z")
Hello, I have setup a Sec onion search manager and a sec onion sensor setup in esxi. The manager has accepted the sensor into the grid and its says everything is working. But when I go to hunt in the sec onion web inter… --- ## [Unable to generate a enrollement token with scope level to node ERROR: Failed to determine the health of the cluster. , with exit code 69](https://discuss.elastic.co/t/unable-to-generate-a-enrollement-token-with-scope-level-to-node-error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/361887)
**Author:** [@arunraj](https://discuss.elastic.co/u/arunraj)\ **Replies:** 2\ **Last updated:** [June 23, 2024, 1:44pm UTC](https://discuss.elastic.co/t/unable-to-generate-a-enrollement-token-with-scope-level-to-node-error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/361887 "2024-06-23T13:44:25Z")
my elasticsearch config file content # ======================== Elasticsearch Configuration ========================= # # NOTE: Elasticsearch comes with reasonable defaults for most settings. # Before you set out to … --- ## [8.14.1-amd64 Kubernetes Manifest deploy auto security Cert Generation](https://discuss.elastic.co/t/8-14-1-amd64-kubernetes-manifest-deploy-auto-security-cert-generation/361817)
**Author:** [@clockard](https://discuss.elastic.co/u/clockard)\ **Replies:** 1\ **Last updated:** [June 23, 2024, 1:18pm UTC](https://discuss.elastic.co/t/8-14-1-amd64-kubernetes-manifest-deploy-auto-security-cert-generation/361817 "2024-06-23T13:18:04Z")
Essentially I'm trying to deploy an elk-stack into Kubernetes. I'm trying to learn Kubernetes so I'm doing it the hard way I've written my own manifests (kompose). I try to use the latest version my understanding that 18… --- ## [Missing some logs](https://discuss.elastic.co/t/missing-some-logs/361536)
**Author:** [@Milad\_Akhlaghi](https://discuss.elastic.co/u/Milad_Akhlaghi)\ **Replies:** 4\ **Last updated:** [June 23, 2024, 10:01am UTC](https://discuss.elastic.co/t/missing-some-logs/361536 "2024-06-23T10:01:30Z")
Hi friends , I have elk stack ( version 8.14 )that shipped my app log( json ) with filebeat to logstash and then to elasticsearch.i have 13million logs every 30 minutes , Logs are shipped and shown in kibana but some … --- ## [Logstash - Invalid version of beats error](https://discuss.elastic.co/t/logstash-invalid-version-of-beats-error/361698)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 7\ **Last updated:** [June 23, 2024, 7:41am UTC](https://discuss.elastic.co/t/logstash-invalid-version-of-beats-error/361698 "2024-06-23T07:41:44Z")
Hello everyone, I have a Logstash server that receives data from Elastic agents and writes it to Elasticsearch. For testing purposes, I have one standalone agent running on a Linux server and one agent managed by a flee… --- ## [Shard Count and Index Splitting Strategies about PB-Level Storage in Elasticsearch](https://discuss.elastic.co/t/shard-count-and-index-splitting-strategies-about-pb-level-storage-in-elasticsearch/361880)
**Author:** [@Andy\_Cong](https://discuss.elastic.co/u/Andy_Cong)\ **Replies:** 3\ **Last updated:** [June 22, 2024, 1:32pm UTC](https://discuss.elastic.co/t/shard-count-and-index-splitting-strategies-about-pb-level-storage-in-elasticsearch/361880 "2024-06-22T13:32:00Z")
Quick description： I'm dealing with a scenario where we have over 10 billion records, requiring storage at the petabyte level. Following the Elasticsearch official best practices, which recommend keeping each shard betwe… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=214) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=216)