# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=238 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 239 --- ## [TermQuery upgrade](https://discuss.elastic.co/t/termquery-upgrade/358110)
**Author:** [@ajt001](https://discuss.elastic.co/u/ajt001)\ **Replies:** 4\ **Last updated:** [May 18, 2024, 5:04am UTC](https://discuss.elastic.co/t/termquery-upgrade/358110 "2024-05-18T05:04:03Z")
Hi, I'm working through an upgrade and have an existing function using List for values in a TermQueryBuilder. I've found online a method to convert the values into a FieldValue, but I'm not sure how to handle the case w… --- ## [High Amount of Document Deletes on Elastic Search Version Upgrade](https://discuss.elastic.co/t/high-amount-of-document-deletes-on-elastic-search-version-upgrade/359738)
**Author:** [@luv](https://discuss.elastic.co/u/luv)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 9:59pm UTC](https://discuss.elastic.co/t/high-amount-of-document-deletes-on-elastic-search-version-upgrade/359738 "2024-05-17T21:59:37Z")
I have a small Elasticsearch cluster having 3 master nodes(2core,2gb t3.small ec2) and 2 data nodes data-0 and data-1 (2core 8GB m6a.large ec2 4gb max heap for data nodes). Cluster runs in an EKS cluster. Cluster has on… --- ## [Configuration user name and rol from Azure AD](https://discuss.elastic.co/t/configuration-user-name-and-rol-from-azure-ad/359735)
**Author:** [@POR16734](https://discuss.elastic.co/u/POR16734)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 8:55pm UTC](https://discuss.elastic.co/t/configuration-user-name-and-rol-from-azure-ad/359735 "2024-05-17T20:55:03Z")
Hello everyone, I have a question I am configuring all access to ElasticCloud at kibana level with the active directory of Azure already have connection and this all perfect the doubt is the following: how can I assign… --- ## [Can an elasticsearch cluster create indices in two different data directories](https://discuss.elastic.co/t/can-an-elasticsearch-cluster-create-indices-in-two-different-data-directories/359731)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 2\ **Last updated:** [May 17, 2024, 7:45pm UTC](https://discuss.elastic.co/t/can-an-elasticsearch-cluster-create-indices-in-two-different-data-directories/359731 "2024-05-17T19:45:53Z")
Hi All, We are running Elasticsearch (ES) v8.7.0 There are various feeds coming into ES from various sources via Logstash. I want to configure ES to create indices for one particular feed into a data directory which i… --- ## [Getting "Failed to index document for reason failed to parse field rank\_feature .elser\_model\_1](https://discuss.elastic.co/t/getting-failed-to-index-document-for-reason-failed-to-parse-field-rank-feature-elser-model-1/359662)
**Author:** [@wnmills3](https://discuss.elastic.co/u/wnmills3)\ **Replies:** 2\ **Last updated:** [May 17, 2024, 7:11pm UTC](https://discuss.elastic.co/t/getting-failed-to-index-document-for-reason-failed-to-parse-field-rank-feature-elser-model-1/359662 "2024-05-17T19:11:48Z")
I have mappings and processors in line with other examples here. However, during the index generation, I get an error like: {"date":"2024-05-16 14:53:43,147", "type":"ERROR", "class":"com.ibm.dp.datastore.utilities.ESUt… --- ## [How to prevent must clause not being added into bool query if it has null value in Java API Client](https://discuss.elastic.co/t/how-to-prevent-must-clause-not-being-added-into-bool-query-if-it-has-null-value-in-java-api-client/359729)
**Author:** [@PodarcisMuralis](https://discuss.elastic.co/u/PodarcisMuralis)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 5:42pm UTC](https://discuss.elastic.co/t/how-to-prevent-must-clause-not-being-added-into-bool-query-if-it-has-null-value-in-java-api-client/359729 "2024-05-17T17:42:15Z")
I have a simple SearchRequest using the new elasticsearch Java API Client Library. return SearchRequest.of(sr -\> sr .index("myIndex") .query(q -\> q .bool(b -\> b … --- ## [Auditbeat to Logstash SSL errors with "Not an SSL/TLS record"](https://discuss.elastic.co/t/auditbeat-to-logstash-ssl-errors-with-not-an-ssl-tls-record/359211)
**Author:** [@ken.harvey](https://discuss.elastic.co/u/ken.harvey)\ **Replies:** 13\ **Last updated:** [May 17, 2024, 5:28pm UTC](https://discuss.elastic.co/t/auditbeat-to-logstash-ssl-errors-with-not-an-ssl-tls-record/359211 "2024-05-17T17:28:02Z")
My goal is connect Auditbeat to Logstash and encrypt the communication. I am not worried about having Logstash verify the client. I do have client certificates on some servers, but I would prefer not to use them, as I do… --- ## [Issues with Elasticsearch clustering](https://discuss.elastic.co/t/issues-with-elasticsearch-clustering/359724)
**Author:** [@cisco-oops](https://discuss.elastic.co/u/cisco-oops)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 3:04pm UTC](https://discuss.elastic.co/t/issues-with-elasticsearch-clustering/359724 "2024-05-17T15:04:11Z")
Hello, We're attempting to build a 3-node Elastic cluster and were looking to get some assistance. We have a master node that we're trying to join two other Elastic nodes to. We were able to generate an enrollment toke… --- ## [Logstash pipeline error during parsing of Logs](https://discuss.elastic.co/t/logstash-pipeline-error-during-parsing-of-logs/359697)
**Author:** [@viera120](https://discuss.elastic.co/u/viera120)\ **Replies:** 1\ **Last updated:** [May 17, 2024, 3:05pm UTC](https://discuss.elastic.co/t/logstash-pipeline-error-during-parsing-of-logs/359697 "2024-05-17T15:05:31Z")
Hi, We are having an Elastic cluster for storing logs from various security devices. We are trying to ingest Logs from an Endpoint server through Logstash to elastic cluster. The sample log format is as below. "messag… --- ## [Cloudflare Logpush Integration issue](https://discuss.elastic.co/t/cloudflare-logpush-integration-issue/359716)
**Author:** [@Gregg\_Douglas](https://discuss.elastic.co/u/Gregg_Douglas)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 1:43pm UTC](https://discuss.elastic.co/t/cloudflare-logpush-integration-issue/359716 "2024-05-17T13:43:04Z")
Hi, I have setup a self hosted environment and I am trying to get the Cloudflare Logpush working, but I keep running into the same issue. When I run the curl command to enable the logpush against the Cloudflare API, I … --- ## [Cross-cluster security](https://discuss.elastic.co/t/cross-cluster-security/359712)
**Author:** [@gbL2k](https://discuss.elastic.co/u/gbL2k)\ **Replies:** 2\ **Last updated:** [May 17, 2024, 1:18pm UTC](https://discuss.elastic.co/t/cross-cluster-security/359712 "2024-05-17T13:18:33Z")
Hello everyone! I am setting up cross-cluster search between a local cluster and two remote clusters. Each cluster has three Elasticsearch nodes and a Fleet server, and the local cluster also includes a Kibana instance.… --- ## [Yarn kbn bootstrap failing for Kibana version 8.5.1](https://discuss.elastic.co/t/yarn-kbn-bootstrap-failing-for-kibana-version-8-5-1/359588)
**Author:** [@Sunil\_Jagtap](https://discuss.elastic.co/u/Sunil_Jagtap)\ **Replies:** 4\ **Last updated:** [May 17, 2024, 12:47pm UTC](https://discuss.elastic.co/t/yarn-kbn-bootstrap-failing-for-kibana-version-8-5-1/359588 "2024-05-17T12:47:36Z")
I am getting below error while "yarn kbn bootstrap" for kibana version 8.5.1 \[bazel\] Traceback (most recent call last): \[bazel\] File "/Users/sunil/Documents/workspace/kibana/node\_modules/node-gyp/gyp/gyp\_main.py", li… --- ## [Searchng through 4 index fields with different clauses](https://discuss.elastic.co/t/searchng-through-4-index-fields-with-different-clauses/359710)
**Author:** [@orlenkoda5](https://discuss.elastic.co/u/orlenkoda5)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 11:35am UTC](https://discuss.elastic.co/t/searchng-through-4-index-fields-with-different-clauses/359710 "2024-05-17T11:35:20Z")
Hi everyone. I have a question of using script for searching query phrasy through 4 index fields with several different cluases in script. Each script will have it's own clauses. Script for searching through 4 fields: P… --- ## [Hide empty fields imported from Filebeat & winlogbeat template](https://discuss.elastic.co/t/hide-empty-fields-imported-from-filebeat-winlogbeat-template/359631)
**Author:** [@s0p4L1n3](https://discuss.elastic.co/u/s0p4L1n3)\ **Replies:** 4\ **Last updated:** [May 17, 2024, 11:32am UTC](https://discuss.elastic.co/t/hide-empty-fields-imported-from-filebeat-winlogbeat-template/359631 "2024-05-17T11:32:07Z")
Hello, I'm using filebeat and winlogbeat 8.13.2 and have run the setup command for both to import the templates, but it seems to have imported the empty fields and thus kibana is showing them. It was discussed years ag… --- ## [I have a misunderstanding problem](https://discuss.elastic.co/t/i-have-a-misunderstanding-problem/359657)
**Author:** [@sossoulokoariel](https://discuss.elastic.co/u/sossoulokoariel)\ **Replies:** 2\ **Last updated:** [May 17, 2024, 11:04am UTC](https://discuss.elastic.co/t/i-have-a-misunderstanding-problem/359657 "2024-05-17T11:04:42Z")
Hi community I view the data on my Ubuntu client machine, and then on another Windows machine thanks to the same ELK supervision server, but I wonder why I also find the data processed on the Ubuntu machine on the Windo… --- ## [Metricbeat dashboards incomplete?](https://discuss.elastic.co/t/metricbeat-dashboards-incomplete/359705)
**Author:** [@Bruno\_S](https://discuss.elastic.co/u/Bruno_S)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 10:49am UTC](https://discuss.elastic.co/t/metricbeat-dashboards-incomplete/359705 "2024-05-17T10:49:29Z")
Why metricbeat detects 158 running containers at one dashboard but i cant see the metrics of all of them on the others? I already changed the bucket standard size of 5 to 1000 but only around 70 containers can be seen… --- ## [Backup over 7.17.4 and restoring on 8.x version. Is it possible?](https://discuss.elastic.co/t/backup-over-7-17-4-and-restoring-on-8-x-version-is-it-possible/359704)
**Author:** [@amrit\_singh](https://discuss.elastic.co/u/amrit_singh)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 10:47am UTC](https://discuss.elastic.co/t/backup-over-7-17-4-and-restoring-on-8-x-version-is-it-possible/359704 "2024-05-17T10:47:43Z")
I am currently running on 7.17.4 version in containerized environment. Cluster has some heavy indexes so cant go with re-indexing as it may take days to transfer data. Can i restore backup taken over 7.17.4 directly over… --- ## [Dealy in sending logs with fielbeat 8.12.1 with multiple exclusion filters are enabled](https://discuss.elastic.co/t/dealy-in-sending-logs-with-fielbeat-8-12-1-with-multiple-exclusion-filters-are-enabled/359703)
**Author:** [@sasikiranvaddi](https://discuss.elastic.co/u/sasikiranvaddi)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 10:47am UTC](https://discuss.elastic.co/t/dealy-in-sending-logs-with-fielbeat-8-12-1-with-multiple-exclusion-filters-are-enabled/359703 "2024-05-17T10:47:43Z")
Example filebeat configuration used. filebeat.inputs: type: stdin json.keys\_under\_root: true processors: drop\_event: when: !java.util.LinkedHashMap or: !java.util.LinkedHashMap equals: !java.util.LinkedHashMap … --- ## [Ignore\_older concept is not working](https://discuss.elastic.co/t/ignore-older-concept-is-not-working/359531)
**Author:** [@babudurairaji](https://discuss.elastic.co/u/babudurairaji)\ **Replies:** 3\ **Last updated:** [May 17, 2024, 10:35am UTC](https://discuss.elastic.co/t/ignore-older-concept-is-not-working/359531 "2024-05-17T10:35:17Z")
Hi, ignore\_older concept is not working in our use case. Please find the below our use case : We took a backup of the Elasticsearch folder installed on your Windows server at 10 AM on May 15, 2024. Elasticsearch (ES)… --- ## [Not getting whole response when I search using java api client](https://discuss.elastic.co/t/not-getting-whole-response-when-i-search-using-java-api-client/359425)
**Author:** [@Rohini1](https://discuss.elastic.co/u/Rohini1)\ **Replies:** 13\ **Last updated:** [May 17, 2024, 9:37am UTC](https://discuss.elastic.co/t/not-getting-whole-response-when-i-search-using-java-api-client/359425 "2024-05-17T09:37:10Z")
I am using below code to search using java api client, SearchResponse searchResponse = esClient.search(searchRequest,Object.class); When I test it using postman - I am getting below response {"took":4,"timed\_out":fals… --- ## [Error 302 after Configuration alert msteam in watcher elasticsearch](https://discuss.elastic.co/t/error-302-after-configuration-alert-msteam-in-watcher-elasticsearch/358781)
**Author:** [@vanhaiit90](https://discuss.elastic.co/u/vanhaiit90)\ **Replies:** 2\ **Last updated:** [May 17, 2024, 8:48am UTC](https://discuss.elastic.co/t/error-302-after-configuration-alert-msteam-in-watcher-elasticsearch/358781 "2024-05-17T08:48:01Z")
hi everyone ! Last week I have complete configure alert Microsoft Teams integration to watcher send\_to\_teams": { "webhook": { "scheme": "https", "host": "xxx.webhook.office.com", "port": 443, "method": "post", "… --- ## [Multiple filter (OR) in Lucene](https://discuss.elastic.co/t/multiple-filter-or-in-lucene/359645)
**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\ **Replies:** 4\ **Last updated:** [May 17, 2024, 7:00am UTC](https://discuss.elastic.co/t/multiple-filter-or-in-lucene/359645 "2024-05-17T07:00:46Z")
hi all ! i'm trying to filter data with Lucene. I wish filtered the data having 2 fields exists. I tried with this code but it doesn't work : { "query": { "bool" : { "must": { "exists": { "field": "tota… --- ## [ElasticSearch renew certificate errors](https://discuss.elastic.co/t/elasticsearch-renew-certificate-errors/359452)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 2\ **Last updated:** [May 17, 2024, 5:57am UTC](https://discuss.elastic.co/t/elasticsearch-renew-certificate-errors/359452 "2024-05-17T05:57:03Z")
Our SSL self signed elasticsearch certificates setup on docker had expired. Now Client application(Oracle Webcenter) is unable to make connection with Elasticsearch 7.17.6. Also trying to access elasticsearch cluster hea… --- ## [Why is security setup so ridiculously awkward?](https://discuss.elastic.co/t/why-is-security-setup-so-ridiculously-awkward/359587)
**Author:** [@jimmymacGA](https://discuss.elastic.co/u/jimmymacGA)\ **Replies:** 1\ **Last updated:** [May 17, 2024, 5:52am UTC](https://discuss.elastic.co/t/why-is-security-setup-so-ridiculously-awkward/359587 "2024-05-17T05:52:47Z")
With each release of Elasticsearch, the security setup process gets more and more complex and less and less stable. Anytime the ES server is restarted, Kibana loses its ability to authenticate without generating a new to… --- ## [Beats and Elastic Agent data streams](https://discuss.elastic.co/t/beats-and-elastic-agent-data-streams/359670)
**Author:** [@Gelinski](https://discuss.elastic.co/u/Gelinski)\ **Replies:** 3\ **Last updated:** [May 17, 2024, 2:08am UTC](https://discuss.elastic.co/t/beats-and-elastic-agent-data-streams/359670 "2024-05-17T02:08:01Z")
Hello folks, I am researching a little bit about how to send Beats data to Elasticsearch using a Logstash and data streams instead of indexes. Beats -\> Logstash (data stream config) -\> Elasticsearch I know that some B… --- ## [\[Elasticsearch .NET\] Suggestions and Autocomplete](https://discuss.elastic.co/t/elasticsearch-net-suggestions-and-autocomplete/359676)
**Author:** [@hiilmiee](https://discuss.elastic.co/u/hiilmiee)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 2:07am UTC](https://discuss.elastic.co/t/elasticsearch-net-suggestions-and-autocomplete/359676 "2024-05-17T02:07:19Z")
Does Elasticsearch .NET client supports suggestions and search-as -you-type ? saw this link but not sure if supported in the .NET client. --- ## [Continuous transform of a transform destination index](https://discuss.elastic.co/t/continuous-transform-of-a-transform-destination-index/359577)
**Author:** [@vstokarev](https://discuss.elastic.co/u/vstokarev)\ **Replies:** 1\ **Last updated:** [May 16, 2024, 9:48pm UTC](https://discuss.elastic.co/t/continuous-transform-of-a-transform-destination-index/359577 "2024-05-16T21:48:22Z")
I need to create a transform that will process the data from another transform's destination index to further aggregate the aggregated data. It works fine as a one-time job, but can it work continuously? Considering tha… --- ## [Allow\_auto\_create set to false in all templates after uprgade to 8.12.0](https://discuss.elastic.co/t/allow-auto-create-set-to-false-in-all-templates-after-uprgade-to-8-12-0/359654)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 1\ **Last updated:** [May 16, 2024, 4:29pm UTC](https://discuss.elastic.co/t/allow-auto-create-set-to-false-in-all-templates-after-uprgade-to-8-12-0/359654 "2024-05-16T16:29:32Z")
Hi, I have seen another "Other thread with no answer" where the "allow\_auto\_create" is not working properly. In my cluster the setting is true by default: GET \_cluster/settings { "persistent": { "action": { … --- ## [Error Using AWS Built-in Fluent Bit to Send Logs to Elastic Cloud from EKS Fargate](https://discuss.elastic.co/t/error-using-aws-built-in-fluent-bit-to-send-logs-to-elastic-cloud-from-eks-fargate/359653)
**Author:** [@leohoang](https://discuss.elastic.co/u/leohoang)\ **Replies:** 0\ **Last updated:** [May 16, 2024, 3:54pm UTC](https://discuss.elastic.co/t/error-using-aws-built-in-fluent-bit-to-send-logs-to-elastic-cloud-from-eks-fargate/359653 "2024-05-16T15:54:21Z")
Hello everyone, I am using EKS Fargate and trying to use AWS built-in Fluent Bit to send logs to Elastic Cloud, but I am encountering the following error: { "log": "\[2024/05/16 14:35:17\] \[error\] \[output:es:es.0\] HT… --- ## [Installation métrique sous ESXi 8.0](https://discuss.elastic.co/t/installation-metrique-sous-esxi-8-0/359646)
**Author:** [@florian.tricard](https://discuss.elastic.co/u/florian.tricard)\ **Replies:** 0\ **Last updated:** [May 16, 2024, 3:19pm UTC](https://discuss.elastic.co/t/installation-metrique-sous-esxi-8-0/359646 "2024-05-16T15:19:36Z")
I would like to install metricbeat on an ESXi 8.0. I already have a Kibana server and I have an ESXi 8.0 but I'm a beginner on both. I would like to know how to install and set up monitoring for the ESXi server. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=237) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=239)