# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=232

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 233

---

## [Jakarta EE10 support](https://discuss.elastic.co/t/jakarta-ee10-support/360057)

<div class="topic-metadata">

**Author:** [@tmonov-jug](https://discuss.elastic.co/u/tmonov-jug)\
**Replies:** 5\
**Last updated:** [May 27, 2024, 10:01am UTC](https://discuss.elastic.co/t/jakarta-ee10-support/360057 "2024-05-27T10:01:19Z")

</div>

Do you have any plans to support Jakarta EE10 for elasticsearch-java? The latest artifact in Maven with GAV 'co.elastic.clients:elasticsearch-java:8.13.4' shows that has dependency to 'javax.annotation' but jakarta-pla…

---

## [Issue with the data ingestion/index creation using logstash](https://discuss.elastic.co/t/issue-with-the-data-ingestion-index-creation-using-logstash/360270)

<div class="topic-metadata">

**Author:** [@JimboSimbo](https://discuss.elastic.co/u/JimboSimbo)\
**Replies:** 0\
**Last updated:** [May 27, 2024, 9:57am UTC](https://discuss.elastic.co/t/issue-with-the-data-ingestion-index-creation-using-logstash/360270 "2024-05-27T09:57:18Z")

</div>

Hello Team, I am new to using this platform, hence posting my query here. I have a logstash conf file which is taking input from a csv file and I am parsing the data using csv filter plugin. Now the issue is I am using…

---

## [Retraining in Elastic Machine learning Jobs](https://discuss.elastic.co/t/retraining-in-elastic-machine-learning-jobs/359589)

<div class="topic-metadata">

**Author:** [@Akhil\_Sharma](https://discuss.elastic.co/u/Akhil_Sharma)\
**Replies:** 2\
**Last updated:** [May 27, 2024, 9:00am UTC](https://discuss.elastic.co/t/retraining-in-elastic-machine-learning-jobs/359589 "2024-05-27T09:00:28Z")

</div>

Hi all, I was wondering how we can set up retraining time-period for Elastic Machine Learning Job? Suppose, I want to train my model in 10 days data and want to retrain my model every after every 11 days taking 10 days…

---

## [Logs about each transaction](https://discuss.elastic.co/t/logs-about-each-transaction/360268)

<div class="topic-metadata">

**Author:** [@jeannshuti](https://discuss.elastic.co/u/jeannshuti)\
**Replies:** 0\
**Last updated:** [May 27, 2024, 8:52am UTC](https://discuss.elastic.co/t/logs-about-each-transaction/360268 "2024-05-27T08:52:41Z")

</div>

Hello everyone. Is there a way to get logs about each or important transactions made in Elasticsearch? Things like the files indexed, deleted, on which index, etc? The index already has documents. Also, if not possible, …

---

## [Can't join cluster after changing node role](https://discuss.elastic.co/t/cant-join-cluster-after-changing-node-role/360263)

<div class="topic-metadata">

**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\
**Replies:** 0\
**Last updated:** [May 27, 2024, 8:04am UTC](https://discuss.elastic.co/t/cant-join-cluster-after-changing-node-role/360263 "2024-05-27T08:04:27Z")

</div>

Hi, I had cluster with 1 master + 2 data hot + 1 data content. After changing node role of data hot node to data\_hot, data\_content and performing restart, the node is not joining the cluster due: master not discovere…

---

## [Elasticsearch(version7)とElasticsearch-PHPクライアント(version8)間の通信について](https://discuss.elastic.co/t/elasticsearch-version7-elasticsearch-php-version8/360261)

<div class="topic-metadata">

**Author:** [@Totsuka](https://discuss.elastic.co/u/Totsuka)\
**Replies:** 0\
**Last updated:** [May 27, 2024, 7:38am UTC](https://discuss.elastic.co/t/elasticsearch-version7-elasticsearch-php-version8/360261 "2024-05-27T07:38:04Z")

</div>

お世話になっております。 Elasticsearch(version7)とElasticsearch-PHPクライアント(version8)間の通信についてご質問いたします。 ＜状況＞ ・Elasticsearch：バージョン7.17.9 ・Elasticsearch-PHPクライアント：バージョン8.0.0 ・Elasticsearchがインストールされているサーバと、Elasticsearch-PHPクライアントによる通信…

---

## [Data Modifications Following ElasticSearch Upgrade](https://discuss.elastic.co/t/data-modifications-following-elasticsearch-upgrade/360259)

<div class="topic-metadata">

**Author:** [@paaraj](https://discuss.elastic.co/u/paaraj)\
**Replies:** 0\
**Last updated:** [May 27, 2024, 7:15am UTC](https://discuss.elastic.co/t/data-modifications-following-elasticsearch-upgrade/360259 "2024-05-27T07:15:10Z")

</div>

Hello All, I have Elasticsearch Enterprise version 8.10 and I am considering upgrading to version 8.13.x. However, during our previous upgrade, we faced a significant issue where all our rules were automatically disable…

---

## [\[Elasticsearch\]\[ILM\] Set readonly for warn phase is not working](https://discuss.elastic.co/t/elasticsearch-ilm-set-readonly-for-warn-phase-is-not-working/360230)

<div class="topic-metadata">

**Author:** [@david89](https://discuss.elastic.co/u/david89)\
**Replies:** 1\
**Last updated:** [May 26, 2024, 8:13pm UTC](https://discuss.elastic.co/t/elasticsearch-ilm-set-readonly-for-warn-phase-is-not-working/360230 "2024-05-26T20:13:59Z")

</div>

Dear Bro, I am trying to set readonly for index in warn phase, using ILM but it is not readonly This is my setting "warm": { "min\_age": "2d", "actions": { "readonly": {} } }, P…

---

## [Can I do HA if my source of logs is kinesis for logstash](https://discuss.elastic.co/t/can-i-do-ha-if-my-source-of-logs-is-kinesis-for-logstash/360244)

<div class="topic-metadata">

**Author:** [@Drua\_Malik](https://discuss.elastic.co/u/Drua_Malik)\
**Replies:** 0\
**Last updated:** [May 26, 2024, 3:13pm UTC](https://discuss.elastic.co/t/can-i-do-ha-if-my-source-of-logs-is-kinesis-for-logstash/360244 "2024-05-26T15:13:02Z")

</div>

Please help me out

---

## [Filebeat support](https://discuss.elastic.co/t/filebeat-support/360218)

<div class="topic-metadata">

**Author:** [@srini\_dk](https://discuss.elastic.co/u/srini_dk)\
**Replies:** 2\
**Last updated:** [May 26, 2024, 2:19pm UTC](https://discuss.elastic.co/t/filebeat-support/360218 "2024-05-26T14:19:55Z")

</div>

Hi all, do we get customer support if we are using only Filebeat in an enterprise? Please advise.

---

## [Create a mapping for an unmapped field in a data](https://discuss.elastic.co/t/create-a-mapping-for-an-unmapped-field-in-a-data/360237)

<div class="topic-metadata">

**Author:** [@PavanSatya](https://discuss.elastic.co/u/PavanSatya)\
**Replies:** 0\
**Last updated:** [May 26, 2024, 1:04pm UTC](https://discuss.elastic.co/t/create-a-mapping-for-an-unmapped-field-in-a-data/360237 "2024-05-26T13:04:59Z")

</div>

Dear Team, We are having a APM integration in our Elasticsearch instance, where we are having some of the unmapped fields as highlighted in the above Screenshot (please consider the field names which are highlighted)…

---

## [Elastic sink data for new index with ingest pipeline](https://discuss.elastic.co/t/elastic-sink-data-for-new-index-with-ingest-pipeline/360236)

<div class="topic-metadata">

**Author:** [@PavanSatya](https://discuss.elastic.co/u/PavanSatya)\
**Replies:** 0\
**Last updated:** [May 26, 2024, 12:23pm UTC](https://discuss.elastic.co/t/elastic-sink-data-for-new-index-with-ingest-pipeline/360236 "2024-05-26T12:23:33Z")

</div>

Dear Team, We are having data coming from the elastic sink kafka topics \>\>elastic Sink \>\> Elastic Search When we get data to Elasticsearch, there are some fields in which we want to transform data. Example : LastMod…

---

## [Converting Query DSL into human readable format](https://discuss.elastic.co/t/converting-query-dsl-into-human-readable-format/360234)

<div class="topic-metadata">

**Author:** [@Venkateshan\_Niladri](https://discuss.elastic.co/u/Venkateshan_Niladri)\
**Replies:** 0\
**Last updated:** [May 26, 2024, 11:45am UTC](https://discuss.elastic.co/t/converting-query-dsl-into-human-readable-format/360234 "2024-05-26T11:45:00Z")

</div>

Is there a way / predefined API to convert the Query DSL into human readable format (URL encoded query string) ? For example, this Query DSL - { "bool": { "should": \[ { "term": { "status":…

---

## [Outlook connector integration](https://discuss.elastic.co/t/outlook-connector-integration/360232)

<div class="topic-metadata">

**Author:** [@John\_Ivon](https://discuss.elastic.co/u/John_Ivon)\
**Replies:** 0\
**Last updated:** [May 26, 2024, 10:46am UTC](https://discuss.elastic.co/t/outlook-connector-integration/360232 "2024-05-26T10:46:58Z")

</div>

Hello team, i run version 8.13.0 of the ELK. I m trying to configure the outlook connector but i m having this error: Application Not Found No application was found at this URL. Try going back or choosing an app from …

---

## [Having difficulty changing field type](https://discuss.elastic.co/t/having-difficulty-changing-field-type/360203)

<div class="topic-metadata">

**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\
**Replies:** 1\
**Last updated:** [May 25, 2024, 7:57pm UTC](https://discuss.elastic.co/t/having-difficulty-changing-field-type/360203 "2024-05-25T19:57:13Z")

</div>

In Index Template I am trying to change my file field from type Text to type Keyword, however when I do this and save the settings I get this error: Unable to create template Failed to parse mapping \[\_doc\]: Unknown valu…

---

## [Elastic timestamp ingest via logstash](https://discuss.elastic.co/t/elastic-timestamp-ingest-via-logstash/359924)

<div class="topic-metadata">

**Author:** [@dfir](https://discuss.elastic.co/u/dfir)\
**Replies:** 24\
**Last updated:** [May 25, 2024, 4:29pm UTC](https://discuss.elastic.co/t/elastic-timestamp-ingest-via-logstash/359924 "2024-05-25T16:29:53Z")

</div>

I have a CSV file I am ingesting. The 'timestamp' field shows the time like this: 2024-03-14 09:30:58.000. In Logstash my Date Filter is show below. When the ingest runs the elastic index shows the timestamp field as …

---

## [Getting \`Query contains too many nested clauses; maxClauseCount is set to 252061\` in ES8](https://discuss.elastic.co/t/getting-query-contains-too-many-nested-clauses-maxclausecount-is-set-to-252061-in-es8/358798)

<div class="topic-metadata">

**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\
**Replies:** 2\
**Last updated:** [May 25, 2024, 1:58pm UTC](https://discuss.elastic.co/t/getting-query-contains-too-many-nested-clauses-maxclausecount-is-set-to-252061-in-es8/358798 "2024-05-25T13:58:41Z")

</div>

Hi, We are migrating from ES7 to ES8 and while running a query on ES7 and ES8 respectively, I am getting Query contains too many nested clauses; maxClauseCount is set to 252061 error in ES8 while it is working in ES7. …

---

## [Task Manager is unhealthy - Reason: setting HealthStatus.Error because assumedRequired Throughput PerMinutePerKibana](https://discuss.elastic.co/t/task-manager-is-unhealthy-reason-setting-healthstatus-error-because-assumedrequired-throughput-perminuteperkibana/360070)

<div class="topic-metadata">

**Author:** [@laale1](https://discuss.elastic.co/u/laale1)\
**Replies:** 1\
**Last updated:** [May 25, 2024, 11:59am UTC](https://discuss.elastic.co/t/task-manager-is-unhealthy-reason-setting-healthstatus-error-because-assumedrequired-throughput-perminuteperkibana/360070 "2024-05-25T11:59:25Z")

</div>

Hello Comuninty, I'm facing this issue in my kibana after upgrading it from 8.9 to 8.13 here is the error i,m facing Task Manager is unhealthy - Reason: setting HealthStatus.Error because assumedRequiredThroughputPerM…

---

## [Self host cluster no geoip data](https://discuss.elastic.co/t/self-host-cluster-no-geoip-data/360193)

<div class="topic-metadata">

**Author:** [@Honestabe](https://discuss.elastic.co/u/Honestabe)\
**Replies:** 5\
**Last updated:** [May 24, 2024, 11:25pm UTC](https://discuss.elastic.co/t/self-host-cluster-no-geoip-data/360193 "2024-05-24T23:25:08Z")

</div>

I haven been trying to get geoip data but logs show attempt to download database \[GeoLite2-Country.mmdb\] failed I suspect it is a authentication issue and that I need to add them to the domain list. How Is this acc…

---

## [Stdout cause syslog file to be to big](https://discuss.elastic.co/t/stdout-cause-syslog-file-to-be-to-big/360107)

<div class="topic-metadata">

**Author:** [@Honestabe](https://discuss.elastic.co/u/Honestabe)\
**Replies:** 8\
**Last updated:** [May 24, 2024, 10:38pm UTC](https://discuss.elastic.co/t/stdout-cause-syslog-file-to-be-to-big/360107 "2024-05-24T22:38:24Z")

</div>

sometime I have to use stdout { codec =\> rubydebug { metadata =\> true } } to do some troubleshooting on a pipeline. I noticed that when I do the syslog file is taking up GB of storage. is there a way to have it writ…

---

## [Logs cannot be written and doesn't work basic auth after setting OIDC](https://discuss.elastic.co/t/logs-cannot-be-written-and-doesnt-work-basic-auth-after-setting-oidc/360190)

<div class="topic-metadata">

**Author:** [@cass1ope1a](https://discuss.elastic.co/u/cass1ope1a)\
**Replies:** 1\
**Last updated:** [May 24, 2024, 6:26pm UTC](https://discuss.elastic.co/t/logs-cannot-be-written-and-doesnt-work-basic-auth-after-setting-oidc/360190 "2024-05-24T18:26:40Z")

</div>

I need to switch Kibana to OIDC auth through keycloak I have default user dev with basic auth and logs writing by vector (with username logstash) to elasticsearch When i switch on OIDC, i cannot auth with that dev user…

---

## [Can we have two java web applications inside the same JVM loggin in different service names?](https://discuss.elastic.co/t/can-we-have-two-java-web-applications-inside-the-same-jvm-loggin-in-different-service-names/360200)

<div class="topic-metadata">

**Author:** [@Rubens\_Do\_Nascimento](https://discuss.elastic.co/u/Rubens_Do_Nascimento)\
**Replies:** 0\
**Last updated:** [May 24, 2024, 5:57pm UTC](https://discuss.elastic.co/t/can-we-have-two-java-web-applications-inside-the-same-jvm-loggin-in-different-service-names/360200 "2024-05-24T17:57:41Z")

</div>

Hello people! Is there any way to have two different Java web applications logging into two different service names while being inside the same JVM? I have tried, but one of the configurations got suppressed and was log…

---

## [How create raw logstash output file with daily file rollver](https://discuss.elastic.co/t/how-create-raw-logstash-output-file-with-daily-file-rollver/358491)

<div class="topic-metadata">

**Author:** [@amoghbarve](https://discuss.elastic.co/u/amoghbarve)\
**Replies:** 3\
**Last updated:** [May 24, 2024, 5:44pm UTC](https://discuss.elastic.co/t/how-create-raw-logstash-output-file-with-daily-file-rollver/358491 "2024-05-24T17:44:18Z")

</div>

Hi All I have clients file beats who will send me logs to my logstash . I want to create raw log file with daily rollover like stdout . Kindly help. Thanks in advance.

---

## [Regex for a large text (book paragraphs)](https://discuss.elastic.co/t/regex-for-a-large-text-book-paragraphs/360192)

<div class="topic-metadata">

**Author:** [@Hugh\_Dancy](https://discuss.elastic.co/u/Hugh_Dancy)\
**Replies:** 1\
**Last updated:** [May 24, 2024, 5:05pm UTC](https://discuss.elastic.co/t/regex-for-a-large-text-book-paragraphs/360192 "2024-05-24T17:05:20Z")

</div>

I am taking singular paragraphs from a book and inserting them as text fields. I want to be able to run regexp expressions across multiple words, like "night.\*sky" to find sentences like The midnight sky cracked opened…

---

## [Kibana anonymous access "TypeError: Cannot read properties of null (reading 'statusCode')"](https://discuss.elastic.co/t/kibana-anonymous-access-typeerror-cannot-read-properties-of-null-reading-statuscode/359267)

<div class="topic-metadata">

**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\
**Replies:** 1\
**Last updated:** [May 24, 2024, 3:49pm UTC](https://discuss.elastic.co/t/kibana-anonymous-access-typeerror-cannot-read-properties-of-null-reading-statuscode/359267 "2024-05-24T15:49:38Z")

</div>

Hello guys! I faced the issue that my dashbaords and data views break How I reproduce my issue: Deployed Elastic and Kibana 8.13.3 and logged in under elastic superuser to Kibana Added "Sample eCommerce orders" sampl…

---

## [what this？](https://discuss.elastic.co/t/what-this/360184)

<div class="topic-metadata">

**Author:** [@rjs520](https://discuss.elastic.co/u/rjs520)\
**Replies:** 3\
**Last updated:** [May 24, 2024, 3:13pm UTC](https://discuss.elastic.co/t/what-this/360184 "2024-05-24T15:13:33Z")

</div>

\[2024-05-24T22:37:28,865\]\[INFO \]\[o.e.n.NativeAccess \] \[RJS\] Using \[jdk\] native provider and native methods for \[Windows\] \[2024-05-24T22:37:28,943\]\[ERROR\]\[o.e.b.Elasticsearch \] \[RJS\] fatal exception while boot…

---

## [Restrict access to my Azure blob container from Elastic Cloud static IPs](https://discuss.elastic.co/t/restrict-access-to-my-azure-blob-container-from-elastic-cloud-static-ips/360188)

<div class="topic-metadata">

**Author:** [@Hrusha](https://discuss.elastic.co/u/Hrusha)\
**Replies:** 0\
**Last updated:** [May 24, 2024, 3:09pm UTC](https://discuss.elastic.co/t/restrict-access-to-my-azure-blob-container-from-elastic-cloud-static-ips/360188 "2024-05-24T15:09:02Z")

</div>

I have a working Elastic Cloud deployment (as an ISV) on my Azure subscription. I am using the platforms' Azure blob connector to sync documents from a Blob container to Elasticsearch. Since the ES deployment is not on …

---

## [Managemant Firewall](https://discuss.elastic.co/t/managemant-firewall/360170)

<div class="topic-metadata">

**Author:** [@adis3421](https://discuss.elastic.co/u/adis3421)\
**Replies:** 0\
**Last updated:** [May 24, 2024, 2:18pm UTC](https://discuss.elastic.co/t/managemant-firewall/360170 "2024-05-24T14:18:08Z")

</div>

Hello, I am raising an inquiry as in the case below.

---

## [Not able to send dynamic content(log messages) in Kibana Alerts ( v 8.13.2)](https://discuss.elastic.co/t/not-able-to-send-dynamic-content-log-messages-in-kibana-alerts-v-8-13-2/360068)

<div class="topic-metadata">

**Author:** [@Satyajeet\_Singh](https://discuss.elastic.co/u/Satyajeet_Singh)\
**Replies:** 0\
**Last updated:** [May 23, 2024, 10:25am UTC](https://discuss.elastic.co/t/not-able-to-send-dynamic-content-log-messages-in-kibana-alerts-v-8-13-2/360068 "2024-05-23T10:25:55Z")

</div>

we are sending alerts to overture from kibana logs. Every matching log should create an alert and we want to see the log message in alert. below is the alert body, I have tried several things but could not get the error…

---

## [Term query with empty string and case\_insensitive setting become invalid](https://discuss.elastic.co/t/term-query-with-empty-string-and-case-insensitive-setting-become-invalid/359961)

<div class="topic-metadata">

**Author:** [@DannyDuo](https://discuss.elastic.co/u/DannyDuo)\
**Replies:** 5\
**Last updated:** [May 24, 2024, 1:51pm UTC](https://discuss.elastic.co/t/term-query-with-empty-string-and-case-insensitive-setting-become-invalid/359961 "2024-05-24T13:51:50Z")

</div>

Hello, everyone Here is my search request and response, I filter oceanchannelid to empty value, but I still get oceanchannelid with empty value. { "bool" : { "must\_not" : \[ { "term" : { "o…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=231)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=233)
