# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=240 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 241 --- ## [Installation of custom integrations](https://discuss.elastic.co/t/installation-of-custom-integrations/359466)
**Author:** [@gscheidl](https://discuss.elastic.co/u/gscheidl)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 1:17pm UTC](https://discuss.elastic.co/t/installation-of-custom-integrations/359466 "2024-05-14T13:17:55Z")
Hi all, I'm currently writing a test integration using elastic-package in windows on a test stack directly installed in Windows. elastic-agent is used to display the Windows events and it's actually running fine. So my… --- ## [I'm trying to use the jdbc\_static plugin to join two tables from MySql and index it but I'm receiving this error (warning: already initialized constant Manticore::Client::ByteArrayEntity)](https://discuss.elastic.co/t/im-trying-to-use-the-jdbc-static-plugin-to-join-two-tables-from-mysql-and-index-it-but-im-receiving-this-error-warning-already-initialized-constant-manticore-bytearrayentity/359532)
**Author:** [@Danyal\_Danish](https://discuss.elastic.co/u/Danyal_Danish)\ **Replies:** 0\ **Last updated:** [May 15, 2024, 10:42am UTC](https://discuss.elastic.co/t/im-trying-to-use-the-jdbc-static-plugin-to-join-two-tables-from-mysql-and-index-it-but-im-receiving-this-error-warning-already-initialized-constant-manticore-bytearrayentity/359532 "2024-05-15T10:42:41Z")
I'm trying to use the jdbc\_static plugin to join two tables from MySql and index it but I'm receiving this error (warning: already initialized constant Manticore::Client::ByteArrayEntity) This is my pipeline: input { … --- ## [Elasticsearch client uses up all ephermeral ports](https://discuss.elastic.co/t/elasticsearch-client-uses-up-all-ephermeral-ports/359510)
**Author:** [@kasinaat007](https://discuss.elastic.co/u/kasinaat007)\ **Replies:** 3\ **Last updated:** [May 15, 2024, 10:17am UTC](https://discuss.elastic.co/t/elasticsearch-client-uses-up-all-ephermeral-ports/359510 "2024-05-15T10:17:35Z")
After upgrading Azul Zulu JRE to the latest version, ES client uses up all ephemeral ports, other applications are not able to get ports to make outbound connections. OLD JRE Version : 1.8\_0\_282 NEW JRE Version : 1.8\_0… --- ## [Logstash pipelines and multiple outputs](https://discuss.elastic.co/t/logstash-pipelines-and-multiple-outputs/359451)
**Author:** [@ISR\_FY](https://discuss.elastic.co/u/ISR_FY)\ **Replies:** 3\ **Last updated:** [May 15, 2024, 10:11am UTC](https://discuss.elastic.co/t/logstash-pipelines-and-multiple-outputs/359451 "2024-05-15T10:11:25Z")
Morning. I have an issue with the last version of elastic stack. When I try to use pipelines to send logs to 2 different outputs one it´s receiving but the other doesn´t have anything. There is no errors in logstash(debu… --- ## [“Kibana server is not ready yet” because failure during installation](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-because-failure-during-installation/359235)
**Author:** [@cariinaar](https://discuss.elastic.co/u/cariinaar)\ **Replies:** 2\ **Last updated:** [May 15, 2024, 10:06am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-because-failure-during-installation/359235 "2024-05-15T10:06:25Z")
Hi, im getting "Kibana server is not ready yet" on my dashboard and here's the status and my config. Can you help me figure this out? kibana log {"service":{"node":{"roles":\["background\_tasks","ui"\]}},"ecs":{"version":… --- ## [Winlogbeat data enrich with CSV lookup adding weird field](https://discuss.elastic.co/t/winlogbeat-data-enrich-with-csv-lookup-adding-weird-field/359475)
**Author:** [@s0p4L1n3](https://discuss.elastic.co/u/s0p4L1n3)\ **Replies:** 4\ **Last updated:** [May 15, 2024, 10:01am UTC](https://discuss.elastic.co/t/winlogbeat-data-enrich-with-csv-lookup-adding-weird-field/359475 "2024-05-15T10:01:48Z")
Hello, I'm currently using Winlogbeat to send logs to ELK with logstash output. I would like to create a new field based on the winlog.event\_id field. I have a CSV field for the lookup. This is to enrich data visuali… --- ## [Lens - Summary Data Table](https://discuss.elastic.co/t/lens-summary-data-table/359413)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [May 15, 2024, 8:33am UTC](https://discuss.elastic.co/t/lens-summary-data-table/359413 "2024-05-15T08:33:05Z")
Hello is there a way to recreate this using Lens, The goal is to show a user with all instances of ip addresses and host name with last timestamp for each. --- ## [Kibana reverse proxy is not working and getting csp issue](https://discuss.elastic.co/t/kibana-reverse-proxy-is-not-working-and-getting-csp-issue/359459)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 1\ **Last updated:** [May 14, 2024, 12:47pm UTC](https://discuss.elastic.co/t/kibana-reverse-proxy-is-not-working-and-getting-csp-issue/359459 "2024-05-14T12:47:23Z")
Sir, we are getting the below error while configuring the reverse proxy for kibana. --- ## [JavaClientApi create SynonymsRule failed](https://discuss.elastic.co/t/javaclientapi-create-synonymsrule-failed/359501)
**Author:** [@yonghui](https://discuss.elastic.co/u/yonghui)\ **Replies:** 1\ **Last updated:** [May 15, 2024, 7:16am UTC](https://discuss.elastic.co/t/javaclientapi-create-synonymsrule-failed/359501 "2024-05-15T07:16:52Z")
PutSynonymRuleRequest.Builder builder = new PutSynonymRuleRequest.Builder(); builder.setId("my\_synonyms\_set") .ruleId("1") .synonyms("phone","苹果","华为"); return esSynonymsCl… --- ## [Reindex performance](https://discuss.elastic.co/t/reindex-performance/359362)
**Author:** [@post90](https://discuss.elastic.co/u/post90)\ **Replies:** 2\ **Last updated:** [May 15, 2024, 7:13am UTC](https://discuss.elastic.co/t/reindex-performance/359362 "2024-05-15T07:13:26Z")
I want to move subset of data from one index to another (could be same cluster or different). What are the advantages of using a \_reindex API instead of simply indexing the required data via logstash from the origin of d… --- ## [Field missing SBC - EgRFactor visualization on Elastic search v 7.7.0](https://discuss.elastic.co/t/field-missing-sbc-egrfactor-visualization-on-elastic-search-v-7-7-0/359365)
**Author:** [@melvinzoleta](https://discuss.elastic.co/u/melvinzoleta)\ **Replies:** 5\ **Last updated:** [May 15, 2024, 7:12am UTC](https://discuss.elastic.co/t/field-missing-sbc-egrfactor-visualization-on-elastic-search-v-7-7-0/359365 "2024-05-15T07:12:28Z")
Our company moved from version v 5.5.2 to Elastic search v 7.7.0 I am manually creating visualizations on Elastic search v 7.7.0 however the aggregation field SBC - EgRFactor is missing. Can somebody please advise wha… --- ## [Boolean query (should match) performance degradation after upgrading to 8.13.2 (from 8.7.1)](https://discuss.elastic.co/t/boolean-query-should-match-performance-degradation-after-upgrading-to-8-13-2-from-8-7-1/359373)
**Author:** [@shimpeko](https://discuss.elastic.co/u/shimpeko)\ **Replies:** 4\ **Last updated:** [May 15, 2024, 6:53am UTC](https://discuss.elastic.co/t/boolean-query-should-match-performance-degradation-after-upgrading-to-8-13-2-from-8-7-1/359373 "2024-05-15T06:53:40Z")
After upgrading from 8.7.1 to 8.13.2, some of our queries got slower. After digging, I've identified that a simple boolean query is getting slower on 8.13.2. It seems create\_weight step is taking about 5x duration as yo… --- ## [How can i create dashboard for openedr logs similare to openedr dashboard](https://discuss.elastic.co/t/how-can-i-create-dashboard-for-openedr-logs-similare-to-openedr-dashboard/359460)
**Author:** [@sandraimmaculate](https://discuss.elastic.co/u/sandraimmaculate)\ **Replies:** 1\ **Last updated:** [May 15, 2024, 5:05am UTC](https://discuss.elastic.co/t/how-can-i-create-dashboard-for-openedr-logs-similare-to-openedr-dashboard/359460 "2024-05-15T05:05:32Z")
hi, i parsed the logs from openedr to elk using filebeat it get parsing! \_id: Unique identifier for the log entry. \_index: Index name where the log entry is stored. \_score: Score of the log entry (typically used in s… --- ## [How to drop/create index in Logstash config?](https://discuss.elastic.co/t/how-to-drop-create-index-in-logstash-config/359496)
**Author:** [@dev8100](https://discuss.elastic.co/u/dev8100)\ **Replies:** 2\ **Last updated:** [May 15, 2024, 4:10am UTC](https://discuss.elastic.co/t/how-to-drop-create-index-in-logstash-config/359496 "2024-05-15T04:10:10Z")
We have a scenario where documents are still in the index that are no longer in the source data being fed into the index. Is there a way to delete the index and just re-create it with the latest data? Or is there a way… --- ## [Create script - convert date to weeknumber](https://discuss.elastic.co/t/create-script-convert-date-to-weeknumber/359047)
**Author:** [@Valerija](https://discuss.elastic.co/u/Valerija)\ **Replies:** 3\ **Last updated:** [May 14, 2024, 11:07pm UTC](https://discuss.elastic.co/t/create-script-convert-date-to-weeknumber/359047 "2024-05-14T23:07:33Z")
Hello, I have been trying to create scripted field tha twoul convert date into week number but w/o success. I tried with this. Does not work. doc\['planDate'\].value.getWeekNum() I would appreciate some help. Thanks! --- ## [Kibana - Listing Options in Dashboard](https://discuss.elastic.co/t/kibana-listing-options-in-dashboard/359494)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 10:01pm UTC](https://discuss.elastic.co/t/kibana-listing-options-in-dashboard/359494 "2024-05-14T22:01:15Z")
Hello, I have a dashboard and this dashboard has a focus on a specific set of data. The problem with the dashboard is that users don't know all available options to drill down to. For example, using event.type, I have 1… --- ## [Changing URL in alerts without updating server.publicBaseUrl](https://discuss.elastic.co/t/changing-url-in-alerts-without-updating-server-publicbaseurl/359491)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 8:51pm UTC](https://discuss.elastic.co/t/changing-url-in-alerts-without-updating-server-publicbaseurl/359491 "2024-05-14T20:51:22Z")
I am an Elastic Cloud user. For simplicity, our users access Kibana over port 443, rather than port 9243, and this is how our SSO solution is configured as well. We are setting up alerts in Elastic, and one of the field… --- ## [ElasticSearch docker swarm unreachable](https://discuss.elastic.co/t/elasticsearch-docker-swarm-unreachable/359485)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 3\ **Last updated:** [May 14, 2024, 7:26pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-swarm-unreachable/359485 "2024-05-14T19:26:54Z")
We have 3 cluster node elasticsearch setup via docker-compose in a swarm with node 01 as manager and 02 and 03 as worker nodes. I left the worker nodes 02 & 03 using docker swarm leave & node 01, It gave me an alert "y… --- ## [Is there anyone can be fix issue](https://discuss.elastic.co/t/is-there-anyone-can-be-fix-issue/359488)
**Author:** [@koae](https://discuss.elastic.co/u/koae)\ **Replies:** 1\ **Last updated:** [May 14, 2024, 7:12pm UTC](https://discuss.elastic.co/t/is-there-anyone-can-be-fix-issue/359488 "2024-05-14T19:12:18Z")
\[2024-05-15T02:04:32,499\]\[INFO \]\[logstash.outputs.opensearch\]\[main\] Cluster version determined (2.11.0) {:version=\>2} \[2024-05-15T02:04:32,734\]\[INFO \]\[logstash.outputs.opensearch\]\[main\] Using a default mapping template {… --- ## [SNMP input not working running Logstash as Service / detached](https://discuss.elastic.co/t/snmp-input-not-working-running-logstash-as-service-detached/359483)
**Author:** [@gergog](https://discuss.elastic.co/u/gergog)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 6:07pm UTC](https://discuss.elastic.co/t/snmp-input-not-working-running-logstash-as-service-detached/359483 "2024-05-14T18:07:33Z")
Hello there! I try to use snmp input plugin. I tried it with on simple VM installation run as Service. Without any luck. Logs shows that the pipeline starts. Debug messages show that the pipeline work, but the part, wh… --- ## [Syslog load balancing in front of Logstash?](https://discuss.elastic.co/t/syslog-load-balancing-in-front-of-logstash/359407)
**Author:** [@Craig\_Sharp](https://discuss.elastic.co/u/Craig_Sharp)\ **Replies:** 4\ **Last updated:** [May 14, 2024, 5:53pm UTC](https://discuss.elastic.co/t/syslog-load-balancing-in-front-of-logstash/359407 "2024-05-14T17:53:59Z")
I have a lot of syslogs flowing from multiple sources into four logstash nodes and then to Elastic. At this time I am just using DNS round robin to balance the Logstash nodes for the inbound syslog traffic. I want to us… --- ## [Elastic Search Internals](https://discuss.elastic.co/t/elastic-search-internals/359470)
**Author:** [@chotukv](https://discuss.elastic.co/u/chotukv)\ **Replies:** 4\ **Last updated:** [May 14, 2024, 5:44pm UTC](https://discuss.elastic.co/t/elastic-search-internals/359470 "2024-05-14T17:44:17Z")
Can anyone point me out to any advanced course or research paper that dives deep into Elastic Search internals and how the architecture works internally in ES? --- ## [Output to HDFS as Parquet files from Filebeat](https://discuss.elastic.co/t/output-to-hdfs-as-parquet-files-from-filebeat/359447)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 1\ **Last updated:** [May 14, 2024, 5:00pm UTC](https://discuss.elastic.co/t/output-to-hdfs-as-parquet-files-from-filebeat/359447 "2024-05-14T17:00:07Z")
Hi, I can't seem to find any information on this. Is it possible to write the output from filebeat to HDFS as parquet files? I'm currently writing from filebeat to ES, but would like to write to parquet files as well fo… --- ## [Kv processor and dynamic mapping](https://discuss.elastic.co/t/kv-processor-and-dynamic-mapping/359481)
**Author:** [@Kosmodrom](https://discuss.elastic.co/u/Kosmodrom)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 3:18pm UTC](https://discuss.elastic.co/t/kv-processor-and-dynamic-mapping/359481 "2024-05-14T15:18:02Z")
Hi, when I apply kv processor to an event all fields that are created from this are mapped as type keyword. Usually for example numbers are dynamically mapped as numbers by Elastic. Can it be that the kv processor beh… --- ## [Elastic Machine Learning need GPU?](https://discuss.elastic.co/t/elastic-machine-learning-need-gpu/359471)
**Author:** [@S\_n\_Ngo\_Hoang](https://discuss.elastic.co/u/S_n_Ngo_Hoang)\ **Replies:** 4\ **Last updated:** [May 14, 2024, 3:14pm UTC](https://discuss.elastic.co/t/elastic-machine-learning-need-gpu/359471 "2024-05-14T15:14:02Z")
Hello everyone, I want to ask about the resources to use when running Elastic Machine Learning. Will Elastic's ML feature when I deploy on-premises require a GPU? Or do I just need CPU and RAM? --- ## [Elastic stack with Fleet Server - certificate issue](https://discuss.elastic.co/t/elastic-stack-with-fleet-server-certificate-issue/322842)
**Author:** [@MBender](https://discuss.elastic.co/u/MBender)\ **Replies:** 3\ **Last updated:** [May 14, 2024, 2:13pm UTC](https://discuss.elastic.co/t/elastic-stack-with-fleet-server-certificate-issue/322842 "2024-05-14T14:13:33Z")
I'm trying to set up an all-in-one docker compose configuration for the Elastic Stack consisting of Elastic Search, Kibana, APM (I know it's being deprecated as a stand-alone service; for the time being this is for backw… --- ## [Percolate Knn queries](https://discuss.elastic.co/t/percolate-knn-queries/359070)
**Author:** [@edwineve](https://discuss.elastic.co/u/edwineve)\ **Replies:** 2\ **Last updated:** [May 14, 2024, 1:45pm UTC](https://discuss.elastic.co/t/percolate-knn-queries/359070 "2024-05-14T13:45:43Z")
When you try to percolate a knn query, it currently is not supported: "the \[knn\] query is unsupported inside a percolator query" It would be great to have this functionality. I do understand a vector query matches every… --- ## [Unable to run pipeline on logstash 8.13.4 version](https://discuss.elastic.co/t/unable-to-run-pipeline-on-logstash-8-13-4-version/359426)
**Author:** [@gadde36256](https://discuss.elastic.co/u/gadde36256)\ **Replies:** 6\ **Last updated:** [May 14, 2024, 1:10pm UTC](https://discuss.elastic.co/t/unable-to-run-pipeline-on-logstash-8-13-4-version/359426 "2024-05-14T13:10:07Z")
Hi, Getting below error while running the logstash pipe line with ing-bank cassandra jdbc driver. \[ERROR\] 2024-05-14 05:16:54.776 \[Converge PipelineAction::Create\\] agent - Failed to execute action {:id=\>:main, :a… --- ## [Kibana users monitoring](https://discuss.elastic.co/t/kibana-users-monitoring/359465)
**Author:** [@Aromal\_Thulazi](https://discuss.elastic.co/u/Aromal_Thulazi)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 1:09pm UTC](https://discuss.elastic.co/t/kibana-users-monitoring/359465 "2024-05-14T13:09:47Z")
Hi, I want to monitor Kibana and want to get the usage details such most visited dashboard, Top users, time spent on each dashboard Top visualizations etc. How can I achieve this ? I'm using Kibana Version 8.8.1 --- ## [Logstash Pipeline not eligible for data streams](https://discuss.elastic.co/t/logstash-pipeline-not-eligible-for-data-streams/359458)
**Author:** [@s0p4L1n3](https://discuss.elastic.co/u/s0p4L1n3)\ **Replies:** 2\ **Last updated:** [May 14, 2024, 12:58pm UTC](https://discuss.elastic.co/t/logstash-pipeline-not-eligible-for-data-streams/359458 "2024-05-14T12:58:31Z")
Hello, I'm using Winlogbeat and filebeat to ingest logs into ELK, the beats agents output is logstash. I've setup according this process order: Point winlogbeat to Elasticsearch run setup winlogbeat.exe setup -e Star… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=239) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=241)