# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=241 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 242 --- ## [Remove Features for default space](https://discuss.elastic.co/t/remove-features-for-default-space/359461)
**Author:** [@alro](https://discuss.elastic.co/u/alro)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 12:51pm UTC](https://discuss.elastic.co/t/remove-features-for-default-space/359461 "2024-05-14T12:51:59Z")
Hi I'm new to Kibana and Elasticsearch. But I like to have some default settings on the default space when I create a new container. In detail, I like to disable some features, set other initials, and change the color. … --- ## [Working with multiline messages on Elastic Agent](https://discuss.elastic.co/t/working-with-multiline-messages-on-elastic-agent/359435)
**Author:** [@chad1st](https://discuss.elastic.co/u/chad1st)\ **Replies:** 3\ **Last updated:** [May 14, 2024, 12:49pm UTC](https://discuss.elastic.co/t/working-with-multiline-messages-on-elastic-agent/359435 "2024-05-14T12:49:05Z")
Hello fellow devs, i have a usecase to ingest a application log to the elastic using Elastic Agent on my Java application, right now I got a problem when the application caught an unhandled exception and it prints it to … --- ## [Variable in Request body - Fleet](https://discuss.elastic.co/t/variable-in-request-body-fleet/359457)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 12:21pm UTC](https://discuss.elastic.co/t/variable-in-request-body-fleet/359457 "2024-05-14T12:21:35Z")
Hi, I am using Elastic-Agent integration using Custom API to integrate with Teamviewer API to fetch events. Request URL: https://webapi.teamviewer.com/api/v1/EventLogging Request HTTP Method: POST Request Body: { … --- ## [Prometheus metrics and alerting](https://discuss.elastic.co/t/prometheus-metrics-and-alerting/359196)
**Author:** [@mislav.kuzmic](https://discuss.elastic.co/u/mislav.kuzmic)\ **Replies:** 2\ **Last updated:** [May 14, 2024, 12:13pm UTC](https://discuss.elastic.co/t/prometheus-metrics-and-alerting/359196 "2024-05-14T12:13:17Z")
Hello, we use Prometheus integration to ship metrics from our Kubernetes cluster via Elastic Agent (using Prometheus remote-write feature) and we're facing certain problems. There's two fields associated with metrics w… --- ## [Trunce events problem](https://discuss.elastic.co/t/trunce-events-problem/359455)
**Author:** [@masonlu2014](https://discuss.elastic.co/u/masonlu2014)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 11:47am UTC](https://discuss.elastic.co/t/trunce-events-problem/359455 "2024-05-14T11:47:44Z")
hello team, we have met auditbeat truncate events probem, would you pls help me share some idea how to fix that ?? \[root@rnotesting auditbeat\]# curl http://23123123214321421fasdsadasdsadasfasfsafagsgdsgsdgxxxxxxxxx1234… --- ## [Elastic Cloud warns when changing managed snapshot policy in Kibana](https://discuss.elastic.co/t/elastic-cloud-warns-when-changing-managed-snapshot-policy-in-kibana/359438)
**Author:** [@tommed](https://discuss.elastic.co/u/tommed)\ **Replies:** 4\ **Last updated:** [May 14, 2024, 10:30am UTC](https://discuss.elastic.co/t/elastic-cloud-warns-when-changing-managed-snapshot-policy-in-kibana/359438 "2024-05-14T10:30:24Z")
We have an Elastic Cloud instance which uses the default "cloud-snapshot-policy" for back-ups. We had a separate service running in GCP which manages data retention which was misconfigured and trimmed 9 months of data wh… --- ## [Fetching data from ElasticSearch Data Node removed from cluster](https://discuss.elastic.co/t/fetching-data-from-elasticsearch-data-node-removed-from-cluster/359337)
**Author:** [@Amit\_Shukla](https://discuss.elastic.co/u/Amit_Shukla)\ **Replies:** 2\ **Last updated:** [May 14, 2024, 10:13am UTC](https://discuss.elastic.co/t/fetching-data-from-elasticsearch-data-node-removed-from-cluster/359337 "2024-05-14T10:13:19Z")
I am dealing with a scenario where i need to access data from Elasticsearch Data node which is not part of cluster. Here is complete scenario: Elasticsearch cluster with 5 data node, 3 master node is running in health… --- ## [Understanding Memory Discrepancy in Elasticsearch](https://discuss.elastic.co/t/understanding-memory-discrepancy-in-elasticsearch/359295)
**Author:** [@524186aa](https://discuss.elastic.co/u/524186aa)\ **Replies:** 4\ **Last updated:** [May 14, 2024, 9:35am UTC](https://discuss.elastic.co/t/understanding-memory-discrepancy-in-elasticsearch/359295 "2024-05-14T09:35:48Z")
Hi everyone, I'm relatively new to Elasticsearch and I'm encountering some issues with memory management. Specifically, I've noticed that Elasticsearch frequently triggers circuit breaking due to high JVM heap usage, pa… --- ## [\[threatintel Filebeat module\] MISP , not filtering attributes. How can I solve it?](https://discuss.elastic.co/t/threatintel-filebeat-module-misp-not-filtering-attributes-how-can-i-solve-it/359431)
**Author:** [@fabiodanzetta](https://discuss.elastic.co/u/fabiodanzetta)\ **Replies:** 2\ **Last updated:** [May 14, 2024, 9:03am UTC](https://discuss.elastic.co/t/threatintel-filebeat-module-misp-not-filtering-attributes-how-can-i-solve-it/359431 "2024-05-14T09:03:03Z")
Hi everyone, I've been struggling with the problem indicated in question for several days and I haven't been able to find a solution. I did a lot of research online and finally came across this link but unfortunately t… --- ## [Circuit break exception after upgrading from ES 7.16.2 to ES 8.11.4](https://discuss.elastic.co/t/circuit-break-exception-after-upgrading-from-es-7-16-2-to-es-8-11-4/359080)
**Author:** [@elaj](https://discuss.elastic.co/u/elaj)\ **Replies:** 4\ **Last updated:** [May 14, 2024, 7:53am UTC](https://discuss.elastic.co/t/circuit-break-exception-after-upgrading-from-es-7-16-2-to-es-8-11-4/359080 "2024-05-14T07:53:30Z")
Hello, After upgrading ES 7.16.2 --\> ES 8.11.4, search queries which were running fine on ES7 failed in ES8. This is unexpected for me, especially when a new cluster has better resources :thinking: The setup of data no… --- ## [Kibana: Observability-Uptime-Monitors ignores digits in search](https://discuss.elastic.co/t/kibana-observability-uptime-monitors-ignores-digits-in-search/358657)
**Author:** [@mbby](https://discuss.elastic.co/u/mbby)\ **Replies:** 3\ **Last updated:** [May 14, 2024, 5:55am UTC](https://discuss.elastic.co/t/kibana-observability-uptime-monitors-ignores-digits-in-search/358657 "2024-05-14T05:55:46Z")
When I go to Observability-Uptime-Monitors and I type in a name in the search, the search ignores digits in the search. Example: abc1234def abcdef abcdef56 78abcdef all give the same search result. Why is the sear… --- ## [Prepare the aggregation query according to the first occurence of the events](https://discuss.elastic.co/t/prepare-the-aggregation-query-according-to-the-first-occurence-of-the-events/359424)
**Author:** [@vish\_anand](https://discuss.elastic.co/u/vish_anand)\ **Replies:** 2\ **Last updated:** [May 14, 2024, 5:16am UTC](https://discuss.elastic.co/t/prepare-the-aggregation-query-according-to-the-first-occurence-of-the-events/359424 "2024-05-14T05:16:41Z")
I have the the data of the access logs of the users in opensearch index, this data track the information of the users like at what time users access the door and got the arrival, but one user can swipe multiple time in a… --- ## [Datehistogram aggregation query using java api client](https://discuss.elastic.co/t/datehistogram-aggregation-query-using-java-api-client/359000)
**Author:** [@Rohini1](https://discuss.elastic.co/u/Rohini1)\ **Replies:** 5\ **Last updated:** [May 14, 2024, 5:20am UTC](https://discuss.elastic.co/t/datehistogram-aggregation-query-using-java-api-client/359000 "2024-05-14T05:20:11Z")
Need to convert this to java api client code "aggregations":{"dateHistogram":{"date\_histogram":{"field":"createTime","interval":"6h","offset":0,"order":{"\_key":"asc"},"keyed":false,"min\_doc\_count":0,"extended\_bounds":{"… --- ## [Filebeat can't manage multiline message with office example](https://discuss.elastic.co/t/filebeat-cant-manage-multiline-message-with-office-example/359420)
**Author:** [@Fodesu](https://discuss.elastic.co/u/Fodesu)\ **Replies:** 1\ **Last updated:** [May 14, 2024, 3:50am UTC](https://discuss.elastic.co/t/filebeat-cant-manage-multiline-message-with-office-example/359420 "2024-05-14T03:50:39Z")
I tried using this config (multiline-examples), but logstash doesn't output anymore, if i remove parsers section， it can output filebeat.yml filebeat.inputs: - type: filestream id: my-filestream-id enabled: true … --- ## [Need help in kibana plugin development project to know how to fetch json data object send from kibana coreStart http post method(Client Side) to kibana irouter post method (at server end)](https://discuss.elastic.co/t/need-help-in-kibana-plugin-development-project-to-know-how-to-fetch-json-data-object-send-from-kibana-corestart-http-post-method-client-side-to-kibana-irouter-post-method-at-server-end/359309)
**Author:** [@Sunil\_Jagtap](https://discuss.elastic.co/u/Sunil_Jagtap)\ **Replies:** 2\ **Last updated:** [May 14, 2024, 3:38am UTC](https://discuss.elastic.co/t/need-help-in-kibana-plugin-development-project-to-know-how-to-fetch-json-data-object-send-from-kibana-corestart-http-post-method-client-side-to-kibana-irouter-post-method-at-server-end/359309 "2024-05-14T03:38:47Z")
Trying to fetch JSON data sent from client (React JS) - kibana coreStart http post method(Client Side) to kibana irouter post method (at server end) My code looks like below : Client Side : const dataToSend = { t… --- ## [\[Elasticsearch .NET 8.13\] Manually mapping response to own data model](https://discuss.elastic.co/t/elasticsearch-net-8-13-manually-mapping-response-to-own-data-model/359416)
**Author:** [@hiilmiee](https://discuss.elastic.co/u/hiilmiee)\ **Replies:** 0\ **Last updated:** [May 13, 2024, 11:58pm UTC](https://discuss.elastic.co/t/elasticsearch-net-8-13-manually-mapping-response-to-own-data-model/359416 "2024-05-13T23:58:57Z")
Hi, are there any way for me to manually map data to my model ? for example my body got this { "\_index": "search-search-ntlm", "\_id": "ae7be893-6ced-4b0c-9230-b6bc168dcddd", "\_score": 1, "\_source": { "creati… --- ## [Mimecast Integration](https://discuss.elastic.co/t/mimecast-integration/359406)
**Author:** [@garretth210](https://discuss.elastic.co/u/garretth210)\ **Replies:** 3\ **Last updated:** [May 13, 2024, 8:43pm UTC](https://discuss.elastic.co/t/mimecast-integration/359406 "2024-05-13T20:43:41Z")
I am trying to integrate Mimecast into elastic using the integration setup in elastic. The url in the API call however defaults to "eu-api.mimecast" and I need to change it to "us-api.mimecast". How would I go about chan… --- ## [Email Alert should include post & prior logs to quickly trace the issue](https://discuss.elastic.co/t/email-alert-should-include-post-prior-logs-to-quickly-trace-the-issue/359077)
**Author:** [@Roshan\_Joel](https://discuss.elastic.co/u/Roshan_Joel)\ **Replies:** 2\ **Last updated:** [May 13, 2024, 7:27pm UTC](https://discuss.elastic.co/t/email-alert-should-include-post-prior-logs-to-quickly-trace-the-issue/359077 "2024-05-13T19:27:34Z")
Currently we are able to added a single line of the log to email alerts. However that is not of much value as we have to again navigate to log location, open the file and trace what caused the issue. It would be better i… --- ## [Convert the MongoDB query to Opensearch](https://discuss.elastic.co/t/convert-the-mongodb-query-to-opensearch/359402)
**Author:** [@vish\_anand](https://discuss.elastic.co/u/vish_anand)\ **Replies:** 2\ **Last updated:** [May 13, 2024, 6:43pm UTC](https://discuss.elastic.co/t/convert-the-mongodb-query-to-opensearch/359402 "2024-05-13T18:43:20Z")
I have the aggregation query in mongoDB which is working properly. THis query finds the count of the users hour-wise but only consider the first arrival of the user. For example if user arrives at 11 AM and then again at… --- ## [Saved Search but change the field names](https://discuss.elastic.co/t/saved-search-but-change-the-field-names/359396)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [May 13, 2024, 6:42pm UTC](https://discuss.elastic.co/t/saved-search-but-change-the-field-names/359396 "2024-05-13T18:42:05Z")
Hello, I am trying to create a saved search to add to a dashboard. The issue is I don't like the field names to display. I would prefer them to rename them without renaming the field in the data view. I am trying to sho… --- ## [How to calculate percentage and show on panel or visualisation on dashboard](https://discuss.elastic.co/t/how-to-calculate-percentage-and-show-on-panel-or-visualisation-on-dashboard/359338)
**Author:** [@swtg](https://discuss.elastic.co/u/swtg)\ **Replies:** 1\ **Last updated:** [May 13, 2024, 6:18pm UTC](https://discuss.elastic.co/t/how-to-calculate-percentage-and-show-on-panel-or-visualisation-on-dashboard/359338 "2024-05-13T18:18:07Z")
Hi All, I have got an index where all my maillogs are getting uploaded. There is a dashboard where we have got different panels showing count of mails being sent, deferred or bounced. Its being done with panels. What I… --- ## [High number of new connections from Filebeats to Elasticsearch after upgrade to 8.13.2](https://discuss.elastic.co/t/high-number-of-new-connections-from-filebeats-to-elasticsearch-after-upgrade-to-8-13-2/359394)
**Author:** [@orion-ua](https://discuss.elastic.co/u/orion-ua)\ **Replies:** 0\ **Last updated:** [May 13, 2024, 4:45pm UTC](https://discuss.elastic.co/t/high-number-of-new-connections-from-filebeats-to-elasticsearch-after-upgrade-to-8-13-2/359394 "2024-05-13T16:45:46Z")
Hi there! We are using Elasticsearch and Filebeat to collect logs from our services and servers. Recently we upgraded Elasticsearch from v8.11.3 to v8.13.2. But after we upgraded Filebeat to the same version we noticed… --- ## [Detecting entries causing mapping conflict](https://discuss.elastic.co/t/detecting-entries-causing-mapping-conflict/359275)
**Author:** [@AmyMCollins](https://discuss.elastic.co/u/AmyMCollins)\ **Replies:** 12\ **Last updated:** [May 13, 2024, 4:03pm UTC](https://discuss.elastic.co/t/detecting-entries-causing-mapping-conflict/359275 "2024-05-13T16:03:06Z")
Hi, In my index pattern, I am getting a warning on one of my fields that it is defined as multiple types (text, float, long) and so it causing a mapping conflict. I do know how to solve it by re-indexing. I am wonderi… --- ## [Trouble Sorting by Geodistance in Elasticsearch with Nested Geo\_location Field](https://discuss.elastic.co/t/trouble-sorting-by-geodistance-in-elasticsearch-with-nested-geo-location-field/359366)
**Author:** [@Riad\_BENRABEH](https://discuss.elastic.co/u/Riad_BENRABEH)\ **Replies:** 2\ **Last updated:** [May 13, 2024, 3:04pm UTC](https://discuss.elastic.co/t/trouble-sorting-by-geodistance-in-elasticsearch-with-nested-geo-location-field/359366 "2024-05-13T15:04:47Z")
Hello community! I'm encountering an issue with sorting by geodistance in Elasticsearch and could use some guidance. I have set up an index with a nested geo\_location field, and my intention is to sort the search result… --- ## [We want to define authority for our software developer friends to create indexes within Elastic Searc Kibana](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369)
**Author:** [@aydin\_yilmaz](https://discuss.elastic.co/u/aydin_yilmaz)\ **Replies:** 7\ **Last updated:** [May 13, 2024, 2:41pm UTC](https://discuss.elastic.co/t/we-want-to-define-authority-for-our-software-developer-friends-to-create-indexes-within-elastic-searc-kibana/359369 "2024-05-13T14:41:11Z")
Hello friends We want to define authority for our software developer friends to create indexes within Elastic Searc Kibana, but this authority should never be superuser because we do the resource management. How can we … --- ## [Java-Spring Boot org.elasticsearch.client.ResponseException: method \[PUT\], host \[http://localhost:9200\], URI \[/x\], status line \[HTTP/1.1 406 Not Acceptable\] {"error":"Content-Type header \[application/vnd.elasticsearch+json;compatible-with=8\] is not suppor](https://discuss.elastic.co/t/java-spring-boot-org-elasticsearch-client-responseexception-method-put-host-http-localhost-9200-uri-x-status-line-http-1-1-406-not-acceptable-error-content-type-header-application-vnd-elasticsearch-json-compatible-with-8-is-not-suppor/359372)
**Author:** [@fsk](https://discuss.elastic.co/u/fsk)\ **Replies:** 6\ **Last updated:** [May 13, 2024, 1:50pm UTC](https://discuss.elastic.co/t/java-spring-boot-org-elasticsearch-client-responseexception-method-put-host-http-localhost-9200-uri-x-status-line-http-1-1-406-not-acceptable-error-content-type-header-application-vnd-elasticsearch-json-compatible-with-8-is-not-suppor/359372 "2024-05-13T13:50:08Z")
Hello, I am developing a project using postgresql elasticsearch and spring boot. When i run my code, i get an error like below. Caused by: org.springframework.dao.DataAccessResourceFailureException: method \[PUT\], host … --- ## [Snapshot missing Exception- No snapshot information](https://discuss.elastic.co/t/snapshot-missing-exception-no-snapshot-information/358091)
**Author:** [@Anushree](https://discuss.elastic.co/u/Anushree)\ **Replies:** 3\ **Last updated:** [May 13, 2024, 1:38pm UTC](https://discuss.elastic.co/t/snapshot-missing-exception-no-snapshot-information/358091 "2024-05-13T13:38:02Z")
Each week, our automated system is scheduled to remove existing snapshots and upload new ones to the Azure blob storage containers. However, once the fresh snapshots are uploaded, the Kibana dashboard displays 'No snapsh… --- ## [Http\_poller](https://discuss.elastic.co/t/http-poller/358763)
**Author:** [@ACHQUE](https://discuss.elastic.co/u/ACHQUE)\ **Replies:** 6\ **Last updated:** [May 13, 2024, 1:33pm UTC](https://discuss.elastic.co/t/http-poller/358763 "2024-05-13T13:33:22Z")
Hi there. Http\_poller found here: Http\_poller input plugin | Logstash Reference \[8.13\] | Elastic I have tried using keystore and truststore, converting .pem to .p12 and importing them. Reference: IBM Documentation an… --- ## [Elasticsearch and metricbeat](https://discuss.elastic.co/t/elasticsearch-and-metricbeat/359340)
**Author:** [@Sarfaraz\_Shaikh](https://discuss.elastic.co/u/Sarfaraz_Shaikh)\ **Replies:** 3\ **Last updated:** [May 13, 2024, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-and-metricbeat/359340 "2024-05-13T12:50:32Z")
I need help to know the server specs to collect metrics from 1000 client server. How we can setup. --- ## [Conditional Sorting based on specific field values](https://discuss.elastic.co/t/conditional-sorting-based-on-specific-field-values/359374)
**Author:** [@mpst-el](https://discuss.elastic.co/u/mpst-el)\ **Replies:** 0\ **Last updated:** [May 13, 2024, 11:55am UTC](https://discuss.elastic.co/t/conditional-sorting-based-on-specific-field-values/359374 "2024-05-13T11:55:09Z")
I am working on optimizing the sorting of our search results, especially the sorting by Name (A-Z), Name (Z-A). This is the relevant part of the mapping: "roles": { "type": "nested", "properties": { … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=240) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=242)