# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=219

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 220

---

## [Sending logs to Elasticshearch](https://discuss.elastic.co/t/sending-logs-to-elasticshearch/359280)

<div class="topic-metadata">

**Author:** [@largado](https://discuss.elastic.co/u/largado)\
**Replies:** 2\
**Last updated:** [June 18, 2024, 5:23am UTC](https://discuss.elastic.co/t/sending-logs-to-elasticshearch/359280 "2024-06-18T05:23:03Z")

</div>

My server is opening high number of connections to send data to elasticsearch. Is there any way to send data to elasticsearch opening only one connection and sending all data by this only one connection.

---

## [How to remove ldap](https://discuss.elastic.co/t/how-to-remove-ldap/361590)

<div class="topic-metadata">

**Author:** [@Himsharma](https://discuss.elastic.co/u/Himsharma)\
**Replies:** 2\
**Last updated:** [June 18, 2024, 1:15am UTC](https://discuss.elastic.co/t/how-to-remove-ldap/361590 "2024-06-18T01:15:42Z")

</div>

Hi Team, I am using the elasticsearch version 7.17.9 with three nodes there I have configured the ldap but I am facing issue with ldap password so I want to remove it as I am not able to authenticate any user. Can you …

---

## [Issue Connecting Python to Elasticsearch in Docker Environment](https://discuss.elastic.co/t/issue-connecting-python-to-elasticsearch-in-docker-environment/361507)

<div class="topic-metadata">

**Author:** [@Julia\_Campolim](https://discuss.elastic.co/u/Julia_Campolim)\
**Replies:** 2\
**Last updated:** [June 17, 2024, 11:44pm UTC](https://discuss.elastic.co/t/issue-connecting-python-to-elasticsearch-in-docker-environment/361507 "2024-06-17T23:44:58Z")

</div>

Hi, I need help. I'm working on a college project where I need to use Elasticsearch and Kibana, and access them through Docker. Here is my problem: I created the Docker setup (using docker-compose) following the steps …

---

## [Winlogbeat clarification](https://discuss.elastic.co/t/winlogbeat-clarification/361605)

<div class="topic-metadata">

**Author:** [@JJ007](https://discuss.elastic.co/u/JJ007)\
**Replies:** 0\
**Last updated:** [June 17, 2024, 11:02pm UTC](https://discuss.elastic.co/t/winlogbeat-clarification/361605 "2024-06-17T23:02:46Z")

</div>

Hi, We have winlogbeat OSS installed and has been working great. Recently we upgraded to the latest version and instead of downloading the OSS version, we ended up downloading the Non-OSS version. What does this mean …

---

## [Elasticsearch 7.17 spamming INFO \[monitoring\] log/log.go:184 Non-zero metrics in the last 30s](https://discuss.elastic.co/t/elasticsearch-7-17-spamming-info-monitoring-log-log-go-184-non-zero-metrics-in-the-last-30s/361600)

<div class="topic-metadata">

**Author:** [@joeelasticsearch](https://discuss.elastic.co/u/joeelasticsearch)\
**Replies:** 1\
**Last updated:** [June 17, 2024, 9:52pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-spamming-info-monitoring-log-log-go-184-non-zero-metrics-in-the-last-30s/361600 "2024-06-17T21:52:48Z")

</div>

Hello, I am supporting a few barebones installations of Elasticsearch running on Kubernetes. Is there a way I can get this log to go away? I do not need to see it every 30s. I've tried using the following but it didn't d…

---

## [User authorized in KeyCloak rejected access to Kibana space](https://discuss.elastic.co/t/user-authorized-in-keycloak-rejected-access-to-kibana-space/357997)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 3\
**Last updated:** [June 17, 2024, 8:56pm UTC](https://discuss.elastic.co/t/user-authorized-in-keycloak-rejected-access-to-kibana-space/357997 "2024-06-17T20:56:31Z")

</div>

Hello @elasticcommunity Our use case is to giver external users access to specific spaces, dashboards and indices in an on-prem Elastic cluster. We are using OpenID Connect authorization and Keycloak as provider. We ha…

---

## [Kibana 8.8.0 won't start: Unable to complete saved object migrations for the \[.kibana\_analytics\]](https://discuss.elastic.co/t/kibana-8-8-0-wont-start-unable-to-complete-saved-object-migrations-for-the-kibana-analytics/361059)

<div class="topic-metadata">

**Author:** [@Aaron\_C\_de\_Bruyn](https://discuss.elastic.co/u/Aaron_C_de_Bruyn)\
**Replies:** 2\
**Last updated:** [June 17, 2024, 8:03pm UTC](https://discuss.elastic.co/t/kibana-8-8-0-wont-start-unable-to-complete-saved-object-migrations-for-the-kibana-analytics/361059 "2024-06-17T20:03:30Z")

</div>

Just tried to upgrade to 8.8.0 and Kibana won't start. Logs: 2024-06-07T12:45:06-07:00 \[2024-06-07T19:45:06.172+00:00\]\[INFO \]\[root\] Kibana is shutting down 2024-06-07T12:45:06-07:00 \[2024-06-07T19:45:06.172+00:00\]\[FATA…

---

## [Provided Grok expressions do not match field value](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value/361595)

<div class="topic-metadata">

**Author:** [@djarami726](https://discuss.elastic.co/u/djarami726)\
**Replies:** 0\
**Last updated:** [June 17, 2024, 6:53pm UTC](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value/361595 "2024-06-17T18:53:02Z")

</div>

Getting this error when ingesting HAProxy logs: Provided Grok expressions do not match field value: \[Jun 13 19:08:46 xxx-xxxxxx-mysql-lb-oltp-01 haproxy\[991739\]: Connect from 127.0.0.1:18714 to 127.0.0.1:3306 (mysql-cl…

---

## [Kibana's Demo Welcome Page](https://discuss.elastic.co/t/kibanas-demo-welcome-page/361430)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 4\
**Last updated:** [June 17, 2024, 6:47pm UTC](https://discuss.elastic.co/t/kibanas-demo-welcome-page/361430 "2024-06-17T18:47:03Z")

</div>

Hello, I been trying to find a better way to show all dashboards in Kibana. I know UX Team is working on improving dashboard navigation as they have recent efforts in Links. I was wondering how does the demo enviroment…

---

## [How to change the @timestamp format in the Filebeat](https://discuss.elastic.co/t/how-to-change-the-timestamp-format-in-the-filebeat/361575)

<div class="topic-metadata">

**Author:** [@Greeshma1](https://discuss.elastic.co/u/Greeshma1)\
**Replies:** 2\
**Last updated:** [June 17, 2024, 1:42pm UTC](https://discuss.elastic.co/t/how-to-change-the-timestamp-format-in-the-filebeat/361575 "2024-06-17T13:42:19Z")

</div>

I configured below processor to change the @timestamp format. processors: - timestamp: field: '@timestamp' layouts: - '2006-01-02T15:04:05.999+07:00' Filebe…

---

## [Cloud ID key](https://discuss.elastic.co/t/cloud-id-key/361582)

<div class="topic-metadata">

**Author:** [@Guilherme\_Porto\_da\_C](https://discuss.elastic.co/u/Guilherme_Porto_da_C)\
**Replies:** 1\
**Last updated:** [June 17, 2024, 1:05pm UTC](https://discuss.elastic.co/t/cloud-id-key/361582 "2024-06-17T13:05:35Z")

</div>

Hello, I encountered a problem while following the tutorial, specifically in the part regarding the Cloud ID. Could you please provide instructions on how to obtain the key?

---

## [Fatal level logs are not processing in Logstash](https://discuss.elastic.co/t/fatal-level-logs-are-not-processing-in-logstash/358308)

<div class="topic-metadata">

**Author:** [@ErGeek](https://discuss.elastic.co/u/ErGeek)\
**Replies:** 1\
**Last updated:** [June 17, 2024, 12:46pm UTC](https://discuss.elastic.co/t/fatal-level-logs-are-not-processing-in-logstash/358308 "2024-06-17T12:46:57Z")

</div>

Hi All, We have an architecture where the log-flow process starts from Beats -\> AWS MSK (Kafka) -\> Logstash (Self hosted)-\> Elasticsearch -\> Kibana. But we are facing a challenge where the FATAL level logs are coming t…

---

## [How to hide options in each panel in a dashboard in Kibana](https://discuss.elastic.co/t/how-to-hide-options-in-each-panel-in-a-dashboard-in-kibana/361576)

<div class="topic-metadata">

**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\
**Replies:** 1\
**Last updated:** [June 17, 2024, 10:55am UTC](https://discuss.elastic.co/t/how-to-hide-options-in-each-panel-in-a-dashboard-in-kibana/361576 "2024-06-17T10:55:42Z")

</div>

I have created a dashboard with several panels. Is there a way to display only a limited set of options to users for all panels after embedding the dashboard into my application?

---

## [elastic\_transport.ConnectionError: Connection error caused by: ConnectionError(Connection error caused by: NewConnectionError(\<urllib3.connection.HTTPConnection object at 0x7fab5b67c950\>: Failed to establish a new connection: \[Errno 111\] Connection refuse](https://discuss.elastic.co/t/elastic-transport-connectionerror-connection-error-caused-by-connectionerror-connection-error-caused-by-newconnectionerror-urllib3-connection-httpconnection-object-at-0x7fab5b67c950-failed-to-establish-a-new-connection-errno-111-connection-refuse/361545)

<div class="topic-metadata">

**Author:** [@red\_beast](https://discuss.elastic.co/u/red_beast)\
**Replies:** 2\
**Last updated:** [June 17, 2024, 10:40am UTC](https://discuss.elastic.co/t/elastic-transport-connectionerror-connection-error-caused-by-connectionerror-connection-error-caused-by-newconnectionerror-urllib3-connection-httpconnection-object-at-0x7fab5b67c950-failed-to-establish-a-new-connection-errno-111-connection-refuse/361545 "2024-06-17T10:40:25Z")

</div>

Hello , I am trying to connect to Elasticsearch using docker but I keep getting connection refused error while elasticsearch is running on localhost:9200 This is my docker-compose file version: '3.8' services: api:…

---

## [When i import a map to my dashboard it loses some of the details](https://discuss.elastic.co/t/when-i-import-a-map-to-my-dashboard-it-loses-some-of-the-details/361127)

<div class="topic-metadata">

**Author:** [@thomas4](https://discuss.elastic.co/u/thomas4)\
**Replies:** 12\
**Last updated:** [June 17, 2024, 10:29am UTC](https://discuss.elastic.co/t/when-i-import-a-map-to-my-dashboard-it-loses-some-of-the-details/361127 "2024-06-17T10:29:58Z")

</div>

Morning all, Hoping you can help me with this, when I create a map and I then move it into a dashboard I lose a lot of the detail when I zoom in, see screen shots. Before I move to a dashboard: After i move to dash…

---

## [A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/361261)

<div class="topic-metadata">

**Author:** [@thami](https://discuss.elastic.co/u/thami)\
**Replies:** 3\
**Last updated:** [June 17, 2024, 9:52am UTC](https://discuss.elastic.co/t/a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/361261 "2024-06-17T09:52:36Z")

</div>

\[2024-06-11T15:18:52,306\]\[ERROR\]\[logstash.javapipeline \]\[main\]\[426367acac36cefc65edfdc25912c990f3c7b8ca6c411d526967d63232a012e3\] A plugin had an unrecoverable error. Will restart this plugin. ", "i-"\]}, id=\>"426367ac…

---

## [Kibana produces data view incrementally](https://discuss.elastic.co/t/kibana-produces-data-view-incrementally/361402)

<div class="topic-metadata">

**Author:** [@iamp3](https://discuss.elastic.co/u/iamp3)\
**Replies:** 3\
**Last updated:** [June 17, 2024, 9:43am UTC](https://discuss.elastic.co/t/kibana-produces-data-view-incrementally/361402 "2024-06-17T09:43:10Z")

</div>

Hi, It looks like smth block search/view of metric data in real-time mode (from otel-collectors) and produces this data incrementally. For example, on 12 June I could check data till 01:00, but today at 13 June I could s…

---

## [Magento How to add custom indexes](https://discuss.elastic.co/t/magento-how-to-add-custom-indexes/361569)

<div class="topic-metadata">

**Author:** [@tonysar](https://discuss.elastic.co/u/tonysar)\
**Replies:** 0\
**Last updated:** [June 17, 2024, 8:57am UTC](https://discuss.elastic.co/t/magento-how-to-add-custom-indexes/361569 "2024-06-17T08:57:32Z")

</div>

Hello. I am new to Elasticsearch . I been using Magento 2 and have installed Elasticsearch and is working . Issue is as follow. within magento 2 , I have many configurable products , each configurable product set as sim…

---

## [Change kibana from 8.13.4 to 8.14.0](https://discuss.elastic.co/t/change-kibana-from-8-13-4-to-8-14-0/361386)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 2\
**Last updated:** [June 17, 2024, 8:42am UTC](https://discuss.elastic.co/t/change-kibana-from-8-13-4-to-8-14-0/361386 "2024-06-17T08:42:47Z")

</div>

Hi Maybe You can find something wrong, in the log of kibana docker I didn't find any entry with start server on http I've changed kibana from 8.13.4 to 8.14.0 and after that step I have a problem with start kibana serv…

---

## [Setting Agent Binary Download in kibana.yml](https://discuss.elastic.co/t/setting-agent-binary-download-in-kibana-yml/360958)

<div class="topic-metadata">

**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\
**Replies:** 2\
**Last updated:** [June 17, 2024, 7:40am UTC](https://discuss.elastic.co/t/setting-agent-binary-download-in-kibana-yml/360958 "2024-06-17T07:40:32Z")

</div>

Hey Everyone, Is it possible to set the Agent Binary Download through an option in the kibana.yml? Pretty much everything fleet related can be configured that way aside from this. As is seen in the documentation, it i…

---

## [Index template "logs-jde.access" already exist and is not managed by this package, force flag is required](https://discuss.elastic.co/t/index-template-logs-jde-access-already-exist-and-is-not-managed-by-this-package-force-flag-is-required/361558)

<div class="topic-metadata">

**Author:** [@kelvins](https://discuss.elastic.co/u/kelvins)\
**Replies:** 0\
**Last updated:** [June 17, 2024, 5:53am UTC](https://discuss.elastic.co/t/index-template-logs-jde-access-already-exist-and-is-not-managed-by-this-package-force-flag-is-required/361558 "2024-06-17T05:53:48Z")

</div>

I have ES 8.12.2. I have looked at subsequent release notes and cannot see that this has been rectified. I have created my own index template with composable components. Lets say the index is logs-jde.access-\*. I am …

---

## [Logstash geopif time out](https://discuss.elastic.co/t/logstash-geopif-time-out/361557)

<div class="topic-metadata">

**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\
**Replies:** 0\
**Last updated:** [June 17, 2024, 5:49am UTC](https://discuss.elastic.co/t/logstash-geopif-time-out/361557 "2024-06-17T05:49:49Z")

</div>

\[2024-06-13T11:02:33,820\]\[INFO \]\[logstash.filters.geoip.downloadmanager\] new database version detected? true \[2024-06-13T11:02:36,516\]\[INFO \]\[logstash.filters.geoip.databasemanager\] geoip plugin will use database /usr/sh…

---

## [I have custom kibana system index like ".abc-kibana", want to upgrate to 8](https://discuss.elastic.co/t/i-have-custom-kibana-system-index-like-abc-kibana-want-to-upgrate-to-8/361540)

<div class="topic-metadata">

**Author:** [@haopv](https://discuss.elastic.co/u/haopv)\
**Replies:** 2\
**Last updated:** [June 17, 2024, 5:10am UTC](https://discuss.elastic.co/t/i-have-custom-kibana-system-index-like-abc-kibana-want-to-upgrate-to-8/361540 "2024-06-17T05:10:20Z")

</div>

Currently I'm using kibana v7 I have custom kibana system index like ".abc-kibana" what should I do when upgrade from 7.17 to 8.14 ? Is kibana 8 automatically detect old index to migrate ??

---

## [The Eland how to support type Keras Pre trained](https://discuss.elastic.co/t/the-eland-how-to-support-type-keras-pre-trained/361555)

<div class="topic-metadata">

**Author:** [@1057888035](https://discuss.elastic.co/u/1057888035)\
**Replies:** 0\
**Last updated:** [June 17, 2024, 3:23am UTC](https://discuss.elastic.co/t/the-eland-how-to-support-type-keras-pre-trained/361555 "2024-06-17T03:23:04Z")

</div>

I want make this pre trained : lingbionlp/AIONER-0415 at main. It contains a file : PubmedBERT-CRF-AIONER.h5, I copied to my model: cc12138/cctestAIONER at main. Run command: docker run -it --rm docker.elastic.co/eland…

---

## [Custom analyzer and phrase search](https://discuss.elastic.co/t/custom-analyzer-and-phrase-search/361486)

<div class="topic-metadata">

**Author:** [@nestor1](https://discuss.elastic.co/u/nestor1)\
**Replies:** 1\
**Last updated:** [June 17, 2024, 12:17am UTC](https://discuss.elastic.co/t/custom-analyzer-and-phrase-search/361486 "2024-06-17T00:17:27Z")

</div>

I have some encrypted text and I need to search on it. Every character in a word consists of 3 sets of 3 characters, and some random 3 characters in between. Example: Character "O" contains of \[\*A1B\*C1E\*D5X\] Character …

---

## [Occurrence of NullPointerException and role not assigned when using elasticsearch-users command in Windows](https://discuss.elastic.co/t/occurrence-of-nullpointerexception-and-role-not-assigned-when-using-elasticsearch-users-command-in-windows/361280)

<div class="topic-metadata">

**Author:** [@mousumis](https://discuss.elastic.co/u/mousumis)\
**Replies:** 2\
**Last updated:** [June 16, 2024, 8:07pm UTC](https://discuss.elastic.co/t/occurrence-of-nullpointerexception-and-role-not-assigned-when-using-elasticsearch-users-command-in-windows/361280 "2024-06-16T20:07:12Z")

</div>

I am attempting to use the elasticsearch-users.bat utility on a windows machine (Windows Server 2022) to create a user. I am running the following command: elasticsearch-users.bat useradd admin\_user -p "testpassword" -r…

---

## [Writing data to Elasticsearch 8 over NGINX reverse proxy fails when Python code running on Ubuntu](https://discuss.elastic.co/t/writing-data-to-elasticsearch-8-over-nginx-reverse-proxy-fails-when-python-code-running-on-ubuntu/360665)

<div class="topic-metadata">

**Author:** [@alrubaa](https://discuss.elastic.co/u/alrubaa)\
**Replies:** 3\
**Last updated:** [June 16, 2024, 7:42pm UTC](https://discuss.elastic.co/t/writing-data-to-elasticsearch-8-over-nginx-reverse-proxy-fails-when-python-code-running-on-ubuntu/360665 "2024-06-16T19:42:58Z")

</div>

I have an Elasticsearch 8.12 cluster on an internal network. I use self certified certificates and everything is running well, I push data into it all the time using Python, no errors and no warnings. I also have an Ngi…

---

## [How can i get the Attachment content from my search](https://discuss.elastic.co/t/how-can-i-get-the-attachment-content-from-my-search/361543)

<div class="topic-metadata">

**Author:** [@Shubham\_007](https://discuss.elastic.co/u/Shubham_007)\
**Replies:** 0\
**Last updated:** [June 16, 2024, 10:28am UTC](https://discuss.elastic.co/t/how-can-i-get-the-attachment-content-from-my-search/361543 "2024-06-16T10:28:06Z")

</div>

Hi everyone i was going through Elastic.Client.Elasticsearch 8.13 and came accross an issue of getting the attachments from my search results This is my Model public class ElasticDocument : IEntity { Analyzers Com…

---

## [Problem install \\\\.\\pipe\\elastic-agent-system not found](https://discuss.elastic.co/t/problem-install-pipe-elastic-agent-system-not-found/361541)

<div class="topic-metadata">

**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\
**Replies:** 0\
**Last updated:** [June 16, 2024, 9:15am UTC](https://discuss.elastic.co/t/problem-install-pipe-elastic-agent-system-not-found/361541 "2024-06-16T09:15:03Z")

</div>

hello, i want to report about install problems on windows server. The install failed until i removed "Windows Syubsystem for linux" from the computer. Guess the setup mixed up environments. The error message was: d…

---

## [I am getting an 403](https://discuss.elastic.co/t/i-am-getting-an-403/361524)

<div class="topic-metadata">

**Author:** [@Poojan\_Mehta](https://discuss.elastic.co/u/Poojan_Mehta)\
**Replies:** 2\
**Last updated:** [June 16, 2024, 8:19am UTC](https://discuss.elastic.co/t/i-am-getting-an-403/361524 "2024-06-16T08:19:11Z")

</div>

Hello, I am getting below error can someone pls guide Failed to install template {:message=\>"Got response code '403' contacting Elasticsearch at URL \<es\_host\>/\_index\_template/ecs-logstash'", :exception=\>LogStash::Outpu…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=218)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=220)
