# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=226 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 227 --- ## [The ECK data storage location](https://discuss.elastic.co/t/the-eck-data-storage-location/360853)
**Author:** [@dxygit1](https://discuss.elastic.co/u/dxygit1)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 1:04pm UTC](https://discuss.elastic.co/t/the-eck-data-storage-location/360853 "2024-06-05T13:04:40Z")
Can ECK data be directly stored in an Azure bucket in a Kubernetes environment with Helm installation? --- ## [Elastic search smart chinese plugin returns invalid tokens](https://discuss.elastic.co/t/elastic-search-smart-chinese-plugin-returns-invalid-tokens/360843)
**Author:** [@HARI\_RAM](https://discuss.elastic.co/u/HARI_RAM)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 10:46am UTC](https://discuss.elastic.co/t/elastic-search-smart-chinese-plugin-returns-invalid-tokens/360843 "2024-06-05T10:46:33Z")
ES version: 7.17.15 I was recently checking the smartcn plugin and the tokens that it returned does not look relevant. I used the config from here - Reimplementing and extending the analyzers | Elasticsearch Plugins an… --- ## [Garbage collection causing long queries](https://discuss.elastic.co/t/garbage-collection-causing-long-queries/360841)
**Author:** [@wwn\_or](https://discuss.elastic.co/u/wwn_or)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 10:15am UTC](https://discuss.elastic.co/t/garbage-collection-causing-long-queries/360841 "2024-06-05T10:15:11Z")
We have a tiny two-node Elasticsearch 6 cluster that during node garbage collection can result in query timeouts (the timeouts are at client end for UX reasons, not at Elasticsearch end). I'm not much of an ES expert - i… --- ## [Kibana Dashboard Error](https://discuss.elastic.co/t/kibana-dashboard-error/360076)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 4\ **Last updated:** [June 5, 2024, 10:13am UTC](https://discuss.elastic.co/t/kibana-dashboard-error/360076 "2024-06-05T10:13:12Z")
Hello, I'm getting errors in my dashboard since I upgraded from kibana v8.10.2 to v8.13.2. The above error keeps showing randomly for 3-4 seconds then dissappears and i don't know the cause of this. some other erro… --- ## [GCS repository creation times out on one node (starts working after restart)](https://discuss.elastic.co/t/gcs-repository-creation-times-out-on-one-node-starts-working-after-restart/360292)
**Author:** [@sumant-pangotra](https://discuss.elastic.co/u/sumant-pangotra)\ **Replies:** 11\ **Last updated:** [June 5, 2024, 9:44am UTC](https://discuss.elastic.co/t/gcs-repository-creation-times-out-on-one-node-starts-working-after-restart/360292 "2024-06-05T09:44:31Z")
GCS repository creation times out on one node (starts working after restart) { "name" : "elasticsearch-client-6fdc44747f-2h2md", "cluster\_name" : "es-123", "cluster\_uuid" : "dfQbgOeVTXieyW3JUWcEQw", "version" : … --- ## [How could I export a set of logs from ELK to another source, ideally in json format?](https://discuss.elastic.co/t/how-could-i-export-a-set-of-logs-from-elk-to-another-source-ideally-in-json-format/360817)
**Author:** [@Bulevine](https://discuss.elastic.co/u/Bulevine)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 3:10am UTC](https://discuss.elastic.co/t/how-could-i-export-a-set-of-logs-from-elk-to-another-source-ideally-in-json-format/360817 "2024-06-05T03:10:49Z")
To get a little more specific.. I am almost entirely new to ELK, so forgive my lack of knowledge. I am trying to export a set of logs for a given timeframe and matching tags over to DataDog. It would look something like… --- ## [Index template create automatically](https://discuss.elastic.co/t/index-template-create-automatically/360815)
**Author:** [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 2:49am UTC](https://discuss.elastic.co/t/index-template-create-automatically/360815 "2024-06-05T02:49:06Z")
I would like to setup the index lifecycle by using index template to create a new index (test\_index-yyyy.MM.dd) every 30 days My log will send form filebeat --\> logstash --\> Elasticsearch. configuration a policy (tes… --- ## [Massive index creation after conditional indexing](https://discuss.elastic.co/t/massive-index-creation-after-conditional-indexing/360427)
**Author:** [@Samuel\_Ruiz\_Garcia](https://discuss.elastic.co/u/Samuel_Ruiz_Garcia)\ **Replies:** 12\ **Last updated:** [June 4, 2024, 9:34pm UTC](https://discuss.elastic.co/t/massive-index-creation-after-conditional-indexing/360427 "2024-06-04T21:34:17Z")
We have a server, where we had previously configured a filebeat for a simple monitoring of log files. A month ago we were asked to ingest the record of a containered docker application, but this had to be recorded in a s… --- ## [Elastic API returns 401 from browser client (CORS)](https://discuss.elastic.co/t/elastic-api-returns-401-from-browser-client-cors/360686)
**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\ **Replies:** 1\ **Last updated:** [June 4, 2024, 3:41pm UTC](https://discuss.elastic.co/t/elastic-api-returns-401-from-browser-client-cors/360686 "2024-06-04T15:41:16Z")
I have followed the documentation and enabled CORS on Elastic cluster (hosted in Azure), so edited the elastic YAML via the cloud portal. Shown below. Calling Elastic APIs from ObservableHQ as the client and getting COR… --- ## [Parameter timestamp is not working](https://discuss.elastic.co/t/parameter-timestamp-is-not-working/360805)
**Author:** [@noe.gonza](https://discuss.elastic.co/u/noe.gonza)\ **Replies:** 1\ **Last updated:** [June 4, 2024, 4:30pm UTC](https://discuss.elastic.co/t/parameter-timestamp-is-not-working/360805 "2024-06-04T16:30:31Z")
Hello everyone, I have problems with the timestamp parameter because when an alert is triggered in the email I get a time that doesn't correspond (they are 4 hours apart) but in the log itself it shows the correct inform… --- ## [Elastic 7 : unable to do simple Min/Max agg with date\_range type](https://discuss.elastic.co/t/elastic-7-unable-to-do-simple-min-max-agg-with-date-range-type/360731)
**Author:** [@jeanpl](https://discuss.elastic.co/u/jeanpl)\ **Replies:** 3\ **Last updated:** [June 4, 2024, 3:53pm UTC](https://discuss.elastic.co/t/elastic-7-unable-to-do-simple-min-max-agg-with-date-range-type/360731 "2024-06-04T15:53:11Z")
My index document is as simple as (end\_date and start\_date are long) : { "\_index" : "myindex\_1639524591", "\_type" : "\_doc", "\_id" : "UwtsvH0BFRn\_76fpoFuN", "\_score" : 1.0, "fields" : { "end\_date" : \[ … --- ## [Used split API, resulting index is much, much larger than the source index](https://discuss.elastic.co/t/used-split-api-resulting-index-is-much-much-larger-than-the-source-index/360792)
**Author:** [@daviddawson](https://discuss.elastic.co/u/daviddawson)\ **Replies:** 1\ **Last updated:** [June 4, 2024, 3:00pm UTC](https://discuss.elastic.co/t/used-split-api-resulting-index-is-much-much-larger-than-the-source-index/360792 "2024-06-04T15:00:24Z")
An index in our cluster was created by accident with a single shard. We looked at various ways to expand the shards, as performance is suffering. It's currently about 280gb. We tried the split API to generate a new ind… --- ## [Kibana refreshes upon tab switch](https://discuss.elastic.co/t/kibana-refreshes-upon-tab-switch/360734)
**Author:** [@Guillaume\_Ayad1](https://discuss.elastic.co/u/Guillaume_Ayad1)\ **Replies:** 4\ **Last updated:** [June 4, 2024, 2:55pm UTC](https://discuss.elastic.co/t/kibana-refreshes-upon-tab-switch/360734 "2024-06-04T14:55:04Z")
3 weeks into using Kibana, I started to have this weird issue... Everytime I switch tab focus into a Kibana page, the whole page reloads. It is quite frustrating and also data and time consuming. Do you know what's wr… --- ## [ECK stack with Fluentd](https://discuss.elastic.co/t/eck-stack-with-fluentd/360793)
**Author:** [@daniela09](https://discuss.elastic.co/u/daniela09)\ **Replies:** 0\ **Last updated:** [June 4, 2024, 2:13pm UTC](https://discuss.elastic.co/t/eck-stack-with-fluentd/360793 "2024-06-04T14:13:40Z")
Hi, I have deployed ECK on Kubernetes and now I want to use fluentd to collect logs from other applications on Kubernetes and Kafka topic, it collected logs from the other application I want but not from Kafka topic. Thi… --- ## [Issue with forced shard allocation awareness](https://discuss.elastic.co/t/issue-with-forced-shard-allocation-awareness/360770)
**Author:** [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Replies:** 3\ **Last updated:** [June 4, 2024, 1:46pm UTC](https://discuss.elastic.co/t/issue-with-forced-shard-allocation-awareness/360770 "2024-06-04T13:46:53Z")
I recently set up a small test cluster on docker in order to show how forced shard allocation awareness works and was surprised to find that my configuration is not working as expected. As this is old and trusted functio… --- ## [Problems with Fortigate integration](https://discuss.elastic.co/t/problems-with-fortigate-integration/360784)
**Author:** [@Rackhage](https://discuss.elastic.co/u/Rackhage)\ **Replies:** 0\ **Last updated:** [June 4, 2024, 12:23pm UTC](https://discuss.elastic.co/t/problems-with-fortigate-integration/360784 "2024-06-04T12:23:45Z")
Hi, As the titel suggests, I have some problems with the integration of Fortigate. Right now I receive logs from a fortigate through logstash. I did find the integration from Fortinet for the fortigate, but it seems li… --- ## [How to integrate the datadog output in the logstash](https://discuss.elastic.co/t/how-to-integrate-the-datadog-output-in-the-logstash/360772)
**Author:** [@Pravinz123](https://discuss.elastic.co/u/Pravinz123)\ **Replies:** 3\ **Last updated:** [June 4, 2024, 1:12pm UTC](https://discuss.elastic.co/t/how-to-integrate-the-datadog-output-in-the-logstash/360772 "2024-06-04T13:12:42Z")
Greetings, I have deployed only Logstash using helm chart in the Anthos Bare metal cluster. I want to integrate the Logstash with Datadog platform, for which plugin is installed using offline plugin management. Since ou… --- ## [java.security.AccessControlException: access denied (\\”java.net.SocketPermission\\” \\”localhost:0\\” \\”listen,resolve\\”)](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-java-net-socketpermission-localhost-0-listen-resolve/360476)
**Author:** [@logicr](https://discuss.elastic.co/u/logicr)\ **Replies:** 7\ **Last updated:** [June 4, 2024, 12:14pm UTC](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-java-net-socketpermission-localhost-0-listen-resolve/360476 "2024-06-04T12:14:19Z")
hi all, I have configured SocketPermission ("localhost: 0", "listen, resolve"), but this error will still be reported. Please help me solve it. Thanks! --- ## [Logstash pipeline terminated with logstash salesforce input plugin without any error logs](https://discuss.elastic.co/t/logstash-pipeline-terminated-with-logstash-salesforce-input-plugin-without-any-error-logs/359551)
**Author:** [@Pavani\_Reddy](https://discuss.elastic.co/u/Pavani_Reddy)\ **Replies:** 5\ **Last updated:** [June 4, 2024, 12:05pm UTC](https://discuss.elastic.co/t/logstash-pipeline-terminated-with-logstash-salesforce-input-plugin-without-any-error-logs/359551 "2024-06-04T12:05:06Z")
Hello I am trying to integrate salesforce logs to ELK platform. I used logstash salesforce input plugin to load the logs and output to a file. The logstash pipeline is getting terminated within within seconds without a… --- ## [Elastalert Not sending Alerts](https://discuss.elastic.co/t/elastalert-not-sending-alerts/360777)
**Author:** [@Amritpal](https://discuss.elastic.co/u/Amritpal)\ **Replies:** 1\ **Last updated:** [June 4, 2024, 11:46am UTC](https://discuss.elastic.co/t/elastalert-not-sending-alerts/360777 "2024-06-04T11:46:23Z")
I have Setup Elastalert but it is not sending any alerts in elastalert logs I am keep getting : INFO:elastalert:Ran ELK Rules from 2024-06-04 10:59 UTC to 2024-06-04 11:14 UTC: 0 query hits (0 already seen), 0 matches, 0… --- ## [System indices closed, not able to do anything](https://discuss.elastic.co/t/system-indices-closed-not-able-to-do-anything/360725)
**Author:** [@albertino87](https://discuss.elastic.co/u/albertino87)\ **Replies:** 6\ **Last updated:** [June 4, 2024, 11:04am UTC](https://discuss.elastic.co/t/system-indices-closed-not-able-to-do-anything/360725 "2024-06-04T11:04:34Z")
Hi, by mistake I closed all the indices (even the system indices) of my cluster and now i cannot do anything, not even log into kibana or open them with curl, the credentials (even if correct) are not recognized. how ca… --- ## [Ingestion Failure with ML inference for E5 model](https://discuss.elastic.co/t/ingestion-failure-with-ml-inference-for-e5-model/359188)
**Author:** [@Sanjay\_Samanaboina](https://discuss.elastic.co/u/Sanjay_Samanaboina)\ **Replies:** 3\ **Last updated:** [June 4, 2024, 10:51am UTC](https://discuss.elastic.co/t/ingestion-failure-with-ml-inference-for-e5-model/359188 "2024-06-04T10:51:11Z")
I have a use case where I need to reindex my documents to use Machine Learning capabilities for my data. Hence, I have been E5 Text Embedding model with body\_content field chunked using Ingest pipeline and also using Inf… --- ## [Receiving nested exception "java.lang.NoClassDefFoundError: jakarta/json/JsonException" when trying to use ElasticsearchClient with SpringBoot in Java](https://discuss.elastic.co/t/receiving-nested-exception-java-lang-noclassdeffounderror-jakarta-json-jsonexception-when-trying-to-use-elasticsearchclient-with-springboot-in-java/360742)
**Author:** [@Priyansh\_Maheshwari](https://discuss.elastic.co/u/Priyansh_Maheshwari)\ **Replies:** 1\ **Last updated:** [June 4, 2024, 8:28am UTC](https://discuss.elastic.co/t/receiving-nested-exception-java-lang-noclassdeffounderror-jakarta-json-jsonexception-when-trying-to-use-elasticsearchclient-with-springboot-in-java/360742 "2024-06-04T08:28:17Z")
Hi, I am new to Elasticsearch and trying to implement ElasticsearchClient in an already existing SpringBoot application. However, I am receiving the error "java.lang.NoClassDefFoundError: jakarta/json/JsonException" when… --- ## [Kibana Distinct Count](https://discuss.elastic.co/t/kibana-distinct-count/360727)
**Author:** [@dfir](https://discuss.elastic.co/u/dfir)\ **Replies:** 5\ **Last updated:** [June 4, 2024, 7:42am UTC](https://discuss.elastic.co/t/kibana-distinct-count/360727 "2024-06-04T07:42:48Z")
I am using Elastic with Kibana. What is the best way to get a Distinct count ? I want effectively a "distinct count of IP by Account" --- ## [How to suggest words instead of exact data match in suggestions?](https://discuss.elastic.co/t/how-to-suggest-words-instead-of-exact-data-match-in-suggestions/360763)
**Author:** [@furkangulec](https://discuss.elastic.co/u/furkangulec)\ **Replies:** 0\ **Last updated:** [June 4, 2024, 7:27am UTC](https://discuss.elastic.co/t/how-to-suggest-words-instead-of-exact-data-match-in-suggestions/360763 "2024-06-04T07:27:36Z")
For example, I have 5 products Samsung Galaxy S24 Phone Samsung Galaxy Phone S23 Samsung Smart TV HD 4K Smart TV Samsung Full HD 4K Samsung Smart Phone S20FE 64GB etc. etc. When I type something using edge ngram o… --- ## [There is a problem with the blank fields in the exported csv file](https://discuss.elastic.co/t/there-is-a-problem-with-the-blank-fields-in-the-exported-csv-file/360761)
**Author:** [@youyyyyz](https://discuss.elastic.co/u/youyyyyz)\ **Replies:** 0\ **Last updated:** [June 4, 2024, 6:55am UTC](https://discuss.elastic.co/t/there-is-a-problem-with-the-blank-fields-in-the-exported-csv-file/360761 "2024-06-04T06:55:45Z")
After exporting the data queried by Kibana as a CSV file and opening it, the column for values obtained through case judgment is empty (the query has values). The report prompts (The report contains characters that can b… --- ## [Reason for the warning](https://discuss.elastic.co/t/reason-for-the-warning/360759)
**Author:** [@thisisnew](https://discuss.elastic.co/u/thisisnew)\ **Replies:** 0\ **Last updated:** [June 4, 2024, 6:29am UTC](https://discuss.elastic.co/t/reason-for-the-warning/360759 "2024-06-04T06:29:50Z")
I have an logstash conf file like input { s3 { access\_key\_id =\> "redacted" secret\_access\_key =\> "redacted" bucket =\> "aws-cloudtrail-logs-905418385260-a48e6842" delete =\> false interval =\> 30 # sec… --- ## [Is it possible to use terraform to create cluster privileges and roles?](https://discuss.elastic.co/t/is-it-possible-to-use-terraform-to-create-cluster-privileges-and-roles/360752)
**Author:** [@wshao12](https://discuss.elastic.co/u/wshao12)\ **Replies:** 0\ **Last updated:** [June 4, 2024, 1:34am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-terraform-to-create-cluster-privileges-and-roles/360752 "2024-06-04T01:34:16Z")
Hi Support, I want to do cross cluster replication. The prerequisites of this process need manager privilege and master node role, as documented here: ccr prerequisites Is it possible to use terraform to manage it? I d… --- ## [Sysmon for Linux on Standalone Elastic-Agent to Logstash without Kibana](https://discuss.elastic.co/t/sysmon-for-linux-on-standalone-elastic-agent-to-logstash-without-kibana/360748)
**Author:** [@julia.navarro](https://discuss.elastic.co/u/julia.navarro)\ **Replies:** 0\ **Last updated:** [June 3, 2024, 10:39pm UTC](https://discuss.elastic.co/t/sysmon-for-linux-on-standalone-elastic-agent-to-logstash-without-kibana/360748 "2024-06-03T22:39:58Z")
I'm trying to configure Sysmon for Linux to send data/logs using a Standalone Elastic-Agent to send the data to Logstash, which will then send the data to Elasticsearch. I want to set this up without having to go into Ki… --- ## [Seeing performance issues and time outs in elasticsearch but not finding much useful in the logs](https://discuss.elastic.co/t/seeing-performance-issues-and-time-outs-in-elasticsearch-but-not-finding-much-useful-in-the-logs/360743)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 0\ **Last updated:** [June 3, 2024, 6:50pm UTC](https://discuss.elastic.co/t/seeing-performance-issues-and-time-outs-in-elasticsearch-but-not-finding-much-useful-in-the-logs/360743 "2024-06-03T18:50:21Z")
We have been having issues lately with our production cluster. All of our grafana alerts will trigger with an error like so: Error = \[sse.dataQueryError\] failed to execute query \[A\]: Post "https://elastic.prod2-obsv-ea… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=225) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=227)