# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=225 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 226 --- ## [Kubernetes.container.cpu.usage.node.pct reports capacity rather than documented allocatable usage](https://discuss.elastic.co/t/kubernetes-container-cpu-usage-node-pct-reports-capacity-rather-than-documented-allocatable-usage/360962)
**Author:** [@kevinsmithwrs](https://discuss.elastic.co/u/kevinsmithwrs)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 12:43pm UTC](https://discuss.elastic.co/t/kubernetes-container-cpu-usage-node-pct-reports-capacity-rather-than-documented-allocatable-usage/360962 "2024-06-06T12:43:51Z")
Before opening a Bug, opening this issue as requested. According to the docs here: The kubernetes.container.cpu.usage.node.pct and kubernetes.container.memory.usage.node.pct are supposed to report the node allocatable … --- ## [Create array of objects in ruby](https://discuss.elastic.co/t/create-array-of-objects-in-ruby/360806)
**Author:** [@Armalyca](https://discuss.elastic.co/u/Armalyca)\ **Replies:** 2\ **Last updated:** [June 6, 2024, 12:36pm UTC](https://discuss.elastic.co/t/create-array-of-objects-in-ruby/360806 "2024-06-06T12:36:10Z")
Hello, I use logstash 7.17. I want to create an array of objects in ruby from my data, now I get a list of objects. I didn't success to implement a each loop, so there is a lot of duplicate ligns. Here is a snippet of … --- ## [Multiplexer with synonyms doesn't work as expected](https://discuss.elastic.co/t/multiplexer-with-synonyms-doesnt-work-as-expected/360959)
**Author:** [@NikKozh](https://discuss.elastic.co/u/NikKozh)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 12:25pm UTC](https://discuss.elastic.co/t/multiplexer-with-synonyms-doesnt-work-as-expected/360959 "2024-06-06T12:25:07Z")
Hello, I'm using almost latest Elastic 8.13 and currently trying to make analyzer with multiplexer, that uses synonym filter. However, I found out that results from simple filter-chaining (without multiplexer) differ fro… --- ## [Histograms not rendering after upgrade to 8.13.4](https://discuss.elastic.co/t/histograms-not-rendering-after-upgrade-to-8-13-4/360886)
**Author:** [@twilson](https://discuss.elastic.co/u/twilson)\ **Replies:** 2\ **Last updated:** [June 6, 2024, 12:17pm UTC](https://discuss.elastic.co/t/histograms-not-rendering-after-upgrade-to-8-13-4/360886 "2024-06-06T12:17:29Z")
After upgrading to 8.13.4 from 8.11.3 all histograms are failing to render. There is simply a red line that keeps scrolling across the top of the visualization, similar to the spinning hourglass when Windows is being sl… --- ## [LookUp Tables - Migrating from Splunk](https://discuss.elastic.co/t/lookup-tables-migrating-from-splunk/359711)
**Author:** [@DerTim](https://discuss.elastic.co/u/DerTim)\ **Replies:** 8\ **Last updated:** [June 6, 2024, 10:54am UTC](https://discuss.elastic.co/t/lookup-tables-migrating-from-splunk/359711 "2024-06-06T10:54:05Z")
Hi, we are currently in the process of migrating from Splunk to Elasticsearch. We have most of the data now in our ELK Cluster and are in the process of recreating the Dashboards and visualizations necessary. In Splu… --- ## [Winlogbeat unable to connect to elasticsearch](https://discuss.elastic.co/t/winlogbeat-unable-to-connect-to-elasticsearch/360757)
**Author:** [@sudharsanam132](https://discuss.elastic.co/u/sudharsanam132)\ **Replies:** 1\ **Last updated:** [June 6, 2024, 9:59am UTC](https://discuss.elastic.co/t/winlogbeat-unable-to-connect-to-elasticsearch/360757 "2024-06-06T09:59:12Z")
fail to import the dashboards in Kibana: Error importing directory C:\\Program Files\\winlogbeat-8.9.1-windows-x86\_64\\kibana: failed to import Kibana index pattern: 1 error: error loading index pattern: returned 403 to im… --- ## [Exiting: index management requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/360687)
**Author:** [@ascalonking](https://discuss.elastic.co/u/ascalonking)\ **Replies:** 8\ **Last updated:** [June 6, 2024, 9:57am UTC](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/360687 "2024-06-06T09:57:23Z")
Hello! I have a problem, I installed a new ELK stack (Elasticsearch, Logstash, Kibana). On the client server I installed filebit to monitor auditd. When I run the command "filebit setup -e" I get the following error \[… --- ## [Vertex ID for logstash monitoring using metricbeat](https://discuss.elastic.co/t/vertex-id-for-logstash-monitoring-using-metricbeat/360885)
**Author:** [@akasegaonkar](https://discuss.elastic.co/u/akasegaonkar)\ **Replies:** 1\ **Last updated:** [June 6, 2024, 9:32am UTC](https://discuss.elastic.co/t/vertex-id-for-logstash-monitoring-using-metricbeat/360885 "2024-06-06T09:32:29Z")
I have attached a screenshot of the logstash.node.stats.pipelines.vertices stats I am receiving from metricbeat currently, which should indicate the in/out stats for each of the plugins (input/output/filter). However, … --- ## [Can't start any pivot transform - getting allocation explanation error without reason](https://discuss.elastic.co/t/cant-start-any-pivot-transform-getting-allocation-explanation-error-without-reason/360849)
**Author:** [@Django](https://discuss.elastic.co/u/Django)\ **Replies:** 4\ **Last updated:** [June 6, 2024, 9:21am UTC](https://discuss.elastic.co/t/cant-start-any-pivot-transform-getting-allocation-explanation-error-without-reason/360849 "2024-06-06T09:21:09Z")
Hi! Something strange happened with our Elasticsearch v7.17 cluster - I can't start pivot transforms due to an error {"root\_cause":\[{"type":"status\_exception","reason":"Could not start transform, allocation explanation… --- ## [Date range query returns different results in ES7 vs. ES8 - does not respect include\_lower](https://discuss.elastic.co/t/date-range-query-returns-different-results-in-es7-vs-es8-does-not-respect-include-lower/360844)
**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\ **Replies:** 4\ **Last updated:** [June 6, 2024, 9:08am UTC](https://discuss.elastic.co/t/date-range-query-returns-different-results-in-es7-vs-es8-does-not-respect-include-lower/360844 "2024-06-06T09:08:26Z")
Using a date range query with include\_lower set to false is not working as expected in ES8. In ES7 a doc with a date of 1969-12-31 with date range query set to 1969-12-31 as the lower bound and include\_lower=false would … --- ## [Elastic stuck while starting](https://discuss.elastic.co/t/elastic-stuck-while-starting/360931)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 1\ **Last updated:** [June 6, 2024, 8:23am UTC](https://discuss.elastic.co/t/elastic-stuck-while-starting/360931 "2024-06-06T08:23:44Z")
Hi there, Have you guys ever experienced this while running Elastic? the log is stuck at this point. currently, my elastic node is using LUN storage and I'm using the 7.17.0 version --- ## [ElasticSearch 7.x index mapping update performance](https://discuss.elastic.co/t/elasticsearch-7-x-index-mapping-update-performance/360934)
**Author:** [@Jakentop](https://discuss.elastic.co/u/Jakentop)\ **Replies:** 1\ **Last updated:** [June 6, 2024, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-x-index-mapping-update-performance/360934 "2024-06-06T08:22:49Z")
We have about 2000w of data in a single index in a production environment, we are not currently deploying a cluster and only have a single slice. How long does it take to add a non-existing field using update mapping in … --- ## [Is there a option to limit how deep the JSON parsing would go?](https://discuss.elastic.co/t/is-there-a-option-to-limit-how-deep-the-json-parsing-would-go/360930)
**Author:** [@weily2](https://discuss.elastic.co/u/weily2)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 7:50am UTC](https://discuss.elastic.co/t/is-there-a-option-to-limit-how-deep-the-json-parsing-would-go/360930 "2024-06-06T07:50:53Z")
For a case where there are multiple applications going through an ingest pipeline with many unique nested fields multiple levels deep, it would be helpful if there was an option just like max\_depth to limit how deep the … --- ## [Boosting source engine inside meta engine](https://discuss.elastic.co/t/boosting-source-engine-inside-meta-engine/360925)
**Author:** [@Ashok\_Vadya](https://discuss.elastic.co/u/Ashok_Vadya)\ **Replies:** 1\ **Last updated:** [June 6, 2024, 7:25am UTC](https://discuss.elastic.co/t/boosting-source-engine-inside-meta-engine/360925 "2024-06-06T07:25:25Z")
Do we have any api to boost source engine insid the meta engine? if so then please share some details. --- ## [Could you confirm if changes made to the index will be consistently reflected in the associated data view?](https://discuss.elastic.co/t/could-you-confirm-if-changes-made-to-the-index-will-be-consistently-reflected-in-the-associated-data-view/360820)
**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\ **Replies:** 5\ **Last updated:** [June 6, 2024, 6:16am UTC](https://discuss.elastic.co/t/could-you-confirm-if-changes-made-to-the-index-will-be-consistently-reflected-in-the-associated-data-view/360820 "2024-06-06T06:16:40Z")
If I link an index to a data view, will updates made to the index be automatically reflected in the data view, ensuring that my visualizations always display the latest data? --- ## [Elastic agent can not read multi-aggregation metrics from Azure Monitor](https://discuss.elastic.co/t/elastic-agent-can-not-read-multi-aggregation-metrics-from-azure-monitor/360911)
**Author:** [@minhtranes](https://discuss.elastic.co/u/minhtranes)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 4:59am UTC](https://discuss.elastic.co/t/elastic-agent-can-not-read-multi-aggregation-metrics-from-azure-monitor/360911 "2024-06-06T04:59:45Z")
I am using Elastic Agent to collect Azure Monitor metrics using Azure Resource Metrics Integration My configuration is as bellow: - resource\_query: resourceType eq 'Microsoft.ServiceBus/Namespaces' metrics: - nam… --- ## [Elasticsearch: update existing document by inserting elements to its array fields](https://discuss.elastic.co/t/elasticsearch-update-existing-document-by-inserting-elements-to-its-array-fields/360905)
**Author:** [@Satyam\_Kaushik](https://discuss.elastic.co/u/Satyam_Kaushik)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 4:20am UTC](https://discuss.elastic.co/t/elasticsearch-update-existing-document-by-inserting-elements-to-its-array-fields/360905 "2024-06-06T04:20:56Z")
Consider the following document { "title": "My first blog entry", "text": "Starting to get the hang of this...", "tags": \[ "testing" \], "views": 0 } I need to run kind of an upsert operation. If I encount… --- ## [Set\_upgrade\_mode?enabled=false failed on 7.17](https://discuss.elastic.co/t/set-upgrade-mode-enabled-false-failed-on-7-17/360897)
**Author:** [@dove-young](https://discuss.elastic.co/u/dove-young)\ **Replies:** 1\ **Last updated:** [June 6, 2024, 4:11am UTC](https://discuss.elastic.co/t/set-upgrade-mode-enabled-false-failed-on-7-17/360897 "2024-06-06T04:11:14Z")
I am doing an entire cluster restore. After index restore, I am resetting \_ml/set\_upgrade\_mode, but it did not work sh-5.1$ curl -X POST 'http://instana-es-http:9200/\_ml/set\_upgrade\_mode?enabled=false' -u elastic:$ELAS… --- ## [How to install Elasticsearch in Kubernetes by Helm?](https://discuss.elastic.co/t/how-to-install-elasticsearch-in-kubernetes-by-helm/360136)
**Author:** [@seikyo-cho-lvgs](https://discuss.elastic.co/u/seikyo-cho-lvgs)\ **Replies:** 1\ **Last updated:** [June 6, 2024, 4:03am UTC](https://discuss.elastic.co/t/how-to-install-elasticsearch-in-kubernetes-by-helm/360136 "2024-06-06T04:03:33Z")
I installed Elasticsearch on Kubernetes in Rancher Desktop by this guide: https://artifacthub.io/packages/helm/elastic/elasticsearch#installing helm repo add elastic https://helm.elastic.co helm install elasticsearch e… --- ## [Filter query is quite slow in 8.11 compared to 7.13](https://discuss.elastic.co/t/filter-query-is-quite-slow-in-8-11-compared-to-7-13/360524)
**Author:** [@vjgorla](https://discuss.elastic.co/u/vjgorla)\ **Replies:** 3\ **Last updated:** [June 5, 2024, 11:55pm UTC](https://discuss.elastic.co/t/filter-query-is-quite-slow-in-8-11-compared-to-7-13/360524 "2024-06-05T23:55:04Z")
There seems to be a big performance difference for a bool query between 7.13 and 8.11 when there are no matches. The query in question has two terms filters, one of them very selective and the other is very broad. In 7… --- ## [Filebeat failed to connect to backoff error](https://discuss.elastic.co/t/filebeat-failed-to-connect-to-backoff-error/360892)
**Author:** [@mealbert23](https://discuss.elastic.co/u/mealbert23)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 10:42pm UTC](https://discuss.elastic.co/t/filebeat-failed-to-connect-to-backoff-error/360892 "2024-06-05T22:42:36Z")
Hi, I am very new to the world of elastic but have learned a lot via trial and error over the last few weeks. I have setup elastic/kibana on a AWS EKS system. Elasticsearch and kibana reside in a private subnet and ki… --- ## [Fleet Server Intergrations not working on Self Hosted Cluster w/ Self Signed Certs](https://discuss.elastic.co/t/fleet-server-intergrations-not-working-on-self-hosted-cluster-w-self-signed-certs/360889)
**Author:** [@mstark\_mw](https://discuss.elastic.co/u/mstark_mw)\ **Replies:** 2\ **Last updated:** [June 5, 2024, 9:29pm UTC](https://discuss.elastic.co/t/fleet-server-intergrations-not-working-on-self-hosted-cluster-w-self-signed-certs/360889 "2024-06-05T21:29:26Z")
I set up an elastic stack using elastic 8.12. It was working fine and fleet was working as expected. One my elasticsearch server unfortunately died. There were no back ups... I recreated the entire Elastic, Kibana, and … --- ## [ElasticSearch Terms Query not working correctly on text with mixed case](https://discuss.elastic.co/t/elasticsearch-terms-query-not-working-correctly-on-text-with-mixed-case/358825)
**Author:** [@jash\_edcast](https://discuss.elastic.co/u/jash_edcast)\ **Replies:** 1\ **Last updated:** [June 5, 2024, 6:50pm UTC](https://discuss.elastic.co/t/elasticsearch-terms-query-not-working-correctly-on-text-with-mixed-case/358825 "2024-06-05T18:50:04Z")
Running a query on text field with Below is my index mapping { "users\_index": { "settings": { "index": { "provided\_name": "users\_index", "number\_of\_replicas": "1", "uuid": "IpNHWSiDSb… --- ## [S3 Multiple outputs using Logstash and Winlogbeat](https://discuss.elastic.co/t/s3-multiple-outputs-using-logstash-and-winlogbeat/360813)
**Author:** [@tcalvillo](https://discuss.elastic.co/u/tcalvillo)\ **Replies:** 3\ **Last updated:** [June 5, 2024, 5:26pm UTC](https://discuss.elastic.co/t/s3-multiple-outputs-using-logstash-and-winlogbeat/360813 "2024-06-05T17:26:47Z")
Hello everybody, I'm using AWS with a Windows EC2 instance and I collect logs by using Logstash and Winlogbeat. I'm able to collect all logs if I keep all together. However, I would like to separate logs according if a… --- ## [Logstash JDBC missing many documents](https://discuss.elastic.co/t/logstash-jdbc-missing-many-documents/360875)
**Author:** [@darrylds](https://discuss.elastic.co/u/darrylds)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 5:17pm UTC](https://discuss.elastic.co/t/logstash-jdbc-missing-many-documents/360875 "2024-06-05T17:17:01Z")
Moving search from postgres full text index to Elasticsearch. Using Logstash JDBC to input documents into index. Index about 3 million documents a year roughly 3K to 10K documents a day. ElasticSeach has increase sear… --- ## [Elastic Map Server with PKI Auth](https://discuss.elastic.co/t/elastic-map-server-with-pki-auth/360873)
**Author:** [@m.hanna](https://discuss.elastic.co/u/m.hanna)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 4:13pm UTC](https://discuss.elastic.co/t/elastic-map-server-with-pki-auth/360873 "2024-06-05T16:13:52Z")
We are running an Elastic Maps Server (EMS) in a docker swarm. I am wondering if it possible to configure EMS to use PKI authentication to Elasticsearch instead of username/password. I have configured PKI certificates a… --- ## [Can we change the language from kibana ui?](https://discuss.elastic.co/t/can-we-change-the-language-from-kibana-ui/360847)
**Author:** [@matheuslimx](https://discuss.elastic.co/u/matheuslimx)\ **Replies:** 2\ **Last updated:** [June 5, 2024, 2:41pm UTC](https://discuss.elastic.co/t/can-we-change-the-language-from-kibana-ui/360847 "2024-06-05T14:41:33Z")
Hi There is a way to change the language from kibana for portuguese, for example ? can we do that by developing a plugin, or kibana have packages for that ? thank you ! --- ## [Use Epoch Format with Nanoseconds (19 digits)](https://discuss.elastic.co/t/use-epoch-format-with-nanoseconds-19-digits/360632)
**Author:** [@andre\_bx](https://discuss.elastic.co/u/andre_bx)\ **Replies:** 2\ **Last updated:** [June 5, 2024, 2:22pm UTC](https://discuss.elastic.co/t/use-epoch-format-with-nanoseconds-19-digits/360632 "2024-06-05T14:22:52Z")
Hi, i am beginner with elastic, but i would use elastic for our Bluecat DNS Server. The Server send the time as Unix epoche format with 19 digits, so i checked it and it is in nanoseconds like google search told me. I… --- ## [How to remove hits after aggregation](https://discuss.elastic.co/t/how-to-remove-hits-after-aggregation/360735)
**Author:** [@p4charu](https://discuss.elastic.co/u/p4charu)\ **Replies:** 5\ **Last updated:** [June 5, 2024, 2:00pm UTC](https://discuss.elastic.co/t/how-to-remove-hits-after-aggregation/360735 "2024-06-05T14:00:41Z")
Hello, I'm trying to do an aggregate query to get issues at their highest state but if the highest state is 'closed' then I want to completely ignore the issue. For example, docId action issue Doc1 raised issue1… --- ## [Elastic search master issue](https://discuss.elastic.co/t/elastic-search-master-issue/360861)
**Author:** [@gedrasaknagufum.com](https://discuss.elastic.co/u/gedrasaknagufum.com)\ **Replies:** 1\ **Last updated:** [June 5, 2024, 1:35pm UTC](https://discuss.elastic.co/t/elastic-search-master-issue/360861 "2024-06-05T13:35:29Z")
Jun 05 13:00:53 ip-172-31-43-63 elasticsearch\[505\]: \[2024-06-05T13:00:53,419\]\[INFO \]\[o.e.x.s.a.AuthenticationService\] \[es\_euwest\_prd\_ec2\_2\] Authentication of \[elastic\] was terminated by realm \[rese rved\] - failed to aut… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=224) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=226)