# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=250 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 251 --- ## [One kibana instance can connect with multiple elasticsaerch cluster](https://discuss.elastic.co/t/one-kibana-instance-can-connect-with-multiple-elasticsaerch-cluster/358637)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 1\ **Last updated:** [May 2, 2024, 1:44pm UTC](https://discuss.elastic.co/t/one-kibana-instance-can-connect-with-multiple-elasticsaerch-cluster/358637 "2024-05-02T13:44:52Z")
Hi, Cluster : 2 kibana : 1 Elasticsearch version: 8.12 on both cluster. OS: 22.04 linux we have made 2 separate elasticsearch clusters and we want to connect with both cluster with single kibana node. Is it possib… --- ## [Percentage display inside the bar chart (aggregation based) doesn't appears correctly](https://discuss.elastic.co/t/percentage-display-inside-the-bar-chart-aggregation-based-doesnt-appears-correctly/358173)
**Author:** [@JenniferL](https://discuss.elastic.co/u/JenniferL)\ **Replies:** 8\ **Last updated:** [May 2, 2024, 1:22pm UTC](https://discuss.elastic.co/t/percentage-display-inside-the-bar-chart-aggregation-based-doesnt-appears-correctly/358173 "2024-05-02T13:22:51Z")
Hi guys! I don't know why my visualisation looks this way: some of the percentage display inside the bars don't appear correctly: Have you seen that before and do you have any idea how to fix it? Thanks in advance … --- ## [Stable ELK version from 7.11.2 to what next?](https://discuss.elastic.co/t/stable-elk-version-from-7-11-2-to-what-next/358639)
**Author:** [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\ **Replies:** 2\ **Last updated:** [May 2, 2024, 12:46pm UTC](https://discuss.elastic.co/t/stable-elk-version-from-7-11-2-to-what-next/358639 "2024-05-02T12:46:38Z")
We have ELK stack version 7.11.2 with Enterprise license.. Planning to upgrade and I wish to know what should be ELK version we need to upgrade into. Since, we have customers with ELK features, SSO, ElastAlert, Visualiz… --- ## [Invalid\_index\_template\_exception](https://discuss.elastic.co/t/invalid-index-template-exception/358285)
**Author:** [@DaddyYusk](https://discuss.elastic.co/u/DaddyYusk)\ **Replies:** 2\ **Last updated:** [May 2, 2024, 12:37pm UTC](https://discuss.elastic.co/t/invalid-index-template-exception/358285 "2024-05-02T12:37:10Z")
Hi, Today I've added a new integration "Custom Windows Event Logs" but with a custom Dataset name. Sadly I've made a mistake and put some capitalisation in it (winlog.TerminalServices) and the integration didn't go w… --- ## [Query multiple indexes](https://discuss.elastic.co/t/query-multiple-indexes/358633)
**Author:** [@Monica\_Andhare](https://discuss.elastic.co/u/Monica_Andhare)\ **Replies:** 1\ **Last updated:** [May 2, 2024, 10:53am UTC](https://discuss.elastic.co/t/query-multiple-indexes/358633 "2024-05-02T10:53:48Z")
As a beginner in ELK . I want ask how can I query on multiple indexes. I have below 2 indexes. 1)Product index -id -DisplayName ProductAssociation index -id -SourceAssociationId -DestinationAssociationId Product… --- ## [Index design in a multitenant application](https://discuss.elastic.co/t/index-design-in-a-multitenant-application/358565)
**Author:** [@Jimmy\_nilsson](https://discuss.elastic.co/u/Jimmy_nilsson)\ **Replies:** 3\ **Last updated:** [May 2, 2024, 9:35am UTC](https://discuss.elastic.co/t/index-design-in-a-multitenant-application/358565 "2024-05-02T09:35:19Z")
I need some help validating my idea of index design. We are in the planning stages of moving from version 5.6 to 8.x. Background: We got a postgres database that is the source of truth, we've split this postgres databa… --- ## [Stack Monitoring index .monitoring-es\* kept 7 days](https://discuss.elastic.co/t/stack-monitoring-index-monitoring-es-kept-7-days/358621)
**Author:** [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\ **Replies:** 0\ **Last updated:** [May 2, 2024, 9:26am UTC](https://discuss.elastic.co/t/stack-monitoring-index-monitoring-es-kept-7-days/358621 "2024-05-02T09:26:40Z")
It is found the index .monitoring-es\* only kept 7 days. How can I extend to let's say 40days --- ## [TSVB dashboard - Performance issue with huge data](https://discuss.elastic.co/t/tsvb-dashboard-performance-issue-with-huge-data/357949)
**Author:** [@david89](https://discuss.elastic.co/u/david89)\ **Replies:** 13\ **Last updated:** [May 2, 2024, 9:16am UTC](https://discuss.elastic.co/t/tsvb-dashboard-performance-issue-with-huge-data/357949 "2024-05-02T09:16:06Z")
I have a performance issue with TSVB dashboard with 70 millions records and more (TSVB | Kibana Guide \[8.13\] | Elastic) I have applied rollover index in ILM, so caching can be used for normal query (request\_cache = true… --- ## [Netflow Cisco IOSv no data complet data in elasticsearch](https://discuss.elastic.co/t/netflow-cisco-iosv-no-data-complet-data-in-elasticsearch/358534)
**Author:** [@Compte\_Personnel](https://discuss.elastic.co/u/Compte_Personnel)\ **Replies:** 4\ **Last updated:** [May 2, 2024, 8:59am UTC](https://discuss.elastic.co/t/netflow-cisco-iosv-no-data-complet-data-in-elasticsearch/358534 "2024-05-02T08:59:42Z")
Hello everyone, I'm currently setting up NetFlow data collection on my machine, but I'm encountering some issues. I'm able to receive data in Filebeat, but I'm not getting all the NetFlow information I expect. NetFlow … --- ## [Ecommerce attribute mapping and performance](https://discuss.elastic.co/t/ecommerce-attribute-mapping-and-performance/358616)
**Author:** [@cem1835](https://discuss.elastic.co/u/cem1835)\ **Replies:** 0\ **Last updated:** [May 2, 2024, 8:54am UTC](https://discuss.elastic.co/t/ecommerce-attribute-mapping-and-performance/358616 "2024-05-02T08:54:51Z")
Hello, I have been working to map database-based products to elastic index. Our current database is based on Nopcommerce. And all other e-commerce structures, We have dynamic attributes too. That's why for mapping attri… --- ## [Getting results with duplicate sort values when searching with \_doc as the sort field](https://discuss.elastic.co/t/getting-results-with-duplicate-sort-values-when-searching-with-doc-as-the-sort-field/358606)
**Author:** [@Neeraj\_Kumar](https://discuss.elastic.co/u/Neeraj_Kumar)\ **Replies:** 0\ **Last updated:** [May 2, 2024, 7:31am UTC](https://discuss.elastic.co/t/getting-results-with-duplicate-sort-values-when-searching-with-doc-as-the-sort-field/358606 "2024-05-02T07:31:24Z")
I wish to understand what exactly happens when one uses the \_doc field for sorting while doing a search. I have an index on 4 shards and when I do search operation on it, with \_doc as the sort field then I get different … --- ## [Using tinymath in TSVB to find remainder](https://discuss.elastic.co/t/using-tinymath-in-tsvb-to-find-remainder/358590)
**Author:** [@Kepernicus](https://discuss.elastic.co/u/Kepernicus)\ **Replies:** 1\ **Last updated:** [May 2, 2024, 7:20am UTC](https://discuss.elastic.co/t/using-tinymath-in-tsvb-to-find-remainder/358590 "2024-05-02T07:20:02Z")
Howdy! I'm looking at trying to find the remainder of an integer with value after a decimal using the mod function in tinymath. I cannot for the life of me get it to work. I've tried 30 different ways of writing params.… --- ## [Drill down option not visible for Bar chart on kibana dashboard for version v 7.10.2](https://discuss.elastic.co/t/drill-down-option-not-visible-for-bar-chart-on-kibana-dashboard-for-version-v-7-10-2/358602)
**Author:** [@sanketchaure](https://discuss.elastic.co/u/sanketchaure)\ **Replies:** 1\ **Last updated:** [May 2, 2024, 7:19am UTC](https://discuss.elastic.co/t/drill-down-option-not-visible-for-bar-chart-on-kibana-dashboard-for-version-v-7-10-2/358602 "2024-05-02T07:19:08Z")
Hi Team, I am trying to drill down from one panel on dashboard to open another dashboard but when i open edit mode of the panel of Bar chart, i don't see any Drill down option. Can you please help me with this. Kibana v… --- ## [TSVB - Can not edit the request / query](https://discuss.elastic.co/t/tsvb-can-not-edit-the-request-query/358385)
**Author:** [@david89](https://discuss.elastic.co/u/david89)\ **Replies:** 7\ **Last updated:** [May 2, 2024, 7:15am UTC](https://discuss.elastic.co/t/tsvb-can-not-edit-the-request-query/358385 "2024-05-02T07:15:03Z")
Dear everyone I am trying to edit the query/request of TSVB board, but it is readonly Do you know how can I edit it? --- ## [Data count mismatch between DB and Metricbeat](https://discuss.elastic.co/t/data-count-mismatch-between-db-and-metricbeat/358604)
**Author:** [@Pravinkumar555](https://discuss.elastic.co/u/Pravinkumar555)\ **Replies:** 0\ **Last updated:** [May 2, 2024, 7:00am UTC](https://discuss.elastic.co/t/data-count-mismatch-between-db-and-metricbeat/358604 "2024-05-02T07:00:29Z")
Select ITEM, LOC, DIFF\_DATE, nvl(t.bod\_soh\_rms,0) - nvl(t.bod\_soh\_sim,0) BOD\_Diff , nvl(t.eod\_soh\_rms,0) - nvl(t.eod\_soh\_sim,0) EOD\_diff , (nvl(t.bod\_soh\_rms,0) - nvl(t.bod\_soh\_sim,0)) -(nvl(t.eod\_soh\_rms,0) - nvl(t.eod… --- ## [Auditbeat memory usage gradually increases](https://discuss.elastic.co/t/auditbeat-memory-usage-gradually-increases/358600)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 0\ **Last updated:** [May 2, 2024, 6:27am UTC](https://discuss.elastic.co/t/auditbeat-memory-usage-gradually-increases/358600 "2024-05-02T06:27:17Z")
Hi, I am running auditbeat-8.12.1 across a number of hosts. After restarting the service, I am seeing the memory usage grow from 0.6% to 13% over a period of 8 hours. It will continue until OOM. I assumed this may be… --- ## [Installation error](https://discuss.elastic.co/t/installation-error/358588)
**Author:** [@Manav\_Desai](https://discuss.elastic.co/u/Manav_Desai)\ **Replies:** 3\ **Last updated:** [May 1, 2024, 8:20pm UTC](https://discuss.elastic.co/t/installation-error/358588 "2024-05-01T20:20:04Z")
I was trying to install logstash for development contribution. While I was trying to see if it is installed properly, I ran bin/logstash -e 'input { stdin { } } output { stdout {} }' I am now getting the following err… --- ## [How does the reindex api handle failure in specific documents?](https://discuss.elastic.co/t/how-does-the-reindex-api-handle-failure-in-specific-documents/358586)
**Author:** [@Emma\_Vaiserfirov](https://discuss.elastic.co/u/Emma_Vaiserfirov)\ **Replies:** 0\ **Last updated:** [May 1, 2024, 7:38pm UTC](https://discuss.elastic.co/t/how-does-the-reindex-api-handle-failure-in-specific-documents/358586 "2024-05-01T19:38:28Z")
We successfully completed a migration, but are missing a bunch of documents in a specific index. I think we know the cause, but I want to confirm. In the old index, we had some old documents with a parameter that we did… --- ## [Elastic-agent \> nginx \> logstash -- nginx proxy error](https://discuss.elastic.co/t/elastic-agent-nginx-logstash-nginx-proxy-error/358387)
**Author:** [@marlonws](https://discuss.elastic.co/u/marlonws)\ **Replies:** 22\ **Last updated:** [May 1, 2024, 7:15pm UTC](https://discuss.elastic.co/t/elastic-agent-nginx-logstash-nginx-proxy-error/358387 "2024-05-01T19:15:42Z")
I configured the fleet server perfectly, the policy that makes the elastic-agent output directly to elasticsearch works normally. I configured a logstash, without errors, it connects normally to elasticsearch. Logstash … --- ## [Set up basic security for the Elastic Stack plus secured HTTPS traffic](https://discuss.elastic.co/t/set-up-basic-security-for-the-elastic-stack-plus-secured-https-traffic/358506)
**Author:** [@tneto](https://discuss.elastic.co/u/tneto)\ **Replies:** 1\ **Last updated:** [May 1, 2024, 6:17pm UTC](https://discuss.elastic.co/t/set-up-basic-security-for-the-elastic-stack-plus-secured-https-traffic/358506 "2024-05-01T18:17:49Z")
Hello all. For the past few days, I have been trying to add the correct certificates to our Elasticsearch and Kibana, but without success. Long story short, this was not setup by me. Neither I was aware of the certifi… --- ## [Logstash Aggregate plugin is passing by some events](https://discuss.elastic.co/t/logstash-aggregate-plugin-is-passing-by-some-events/358571)
**Author:** [@Delvin](https://discuss.elastic.co/u/Delvin)\ **Replies:** 4\ **Last updated:** [May 1, 2024, 4:34pm UTC](https://discuss.elastic.co/t/logstash-aggregate-plugin-is-passing-by-some-events/358571 "2024-05-01T16:34:19Z")
Good day everyone! I need some help, because I can't understand, why aggregate function is not working properly. The thing is, that some events are not just aggregated, though IDs are the same (in my case ID is web.trac… --- ## [Why Fleet server is not healthy?](https://discuss.elastic.co/t/why-fleet-server-is-not-healthy/358368)
**Author:** [@Intruder](https://discuss.elastic.co/u/Intruder)\ **Replies:** 9\ **Last updated:** [May 1, 2024, 3:44pm UTC](https://discuss.elastic.co/t/why-fleet-server-is-not-healthy/358368 "2024-05-01T15:44:16Z")
I am super new to ealstic , and I followed the instruction (Quick start) to start a fleet server and enroll the policy . It is healthy about 20mins ? But when I restart Kibana , and after 20 mins , it became unhealthy ,… --- ## [Debugging plugins: how can I generate sourcemaps for a plugin?](https://discuss.elastic.co/t/debugging-plugins-how-can-i-generate-sourcemaps-for-a-plugin/358573)
**Author:** [@rcw](https://discuss.elastic.co/u/rcw)\ **Replies:** 0\ **Last updated:** [May 1, 2024, 3:40pm UTC](https://discuss.elastic.co/t/debugging-plugins-how-can-i-generate-sourcemaps-for-a-plugin/358573 "2024-05-01T15:40:15Z")
I have a plugin (targeting Kibana v8.13.2). I am seeing an ambiguous error when using the plugin, but it only seems to be happening in production. I would like to generate javascript source maps alongside the plugin when… --- ## [Unable to run Diagnostic tool](https://discuss.elastic.co/t/unable-to-run-diagnostic-tool/358561)
**Author:** [@Vivekchander](https://discuss.elastic.co/u/Vivekchander)\ **Replies:** 4\ **Last updated:** [May 1, 2024, 3:30pm UTC](https://discuss.elastic.co/t/unable-to-run-diagnostic-tool/358561 "2024-05-01T15:30:51Z")
Hi All, I'm pretty new to Elastic. I installed Elasticsearch on a cluster and I was able to port forward and access elastic cluster locally from the browser localhost:9200 just fine. Now from a different command prompt… --- ## [Problem encrypting logs to logstash with TCP input](https://discuss.elastic.co/t/problem-encrypting-logs-to-logstash-with-tcp-input/358546)
**Author:** [@ITGUY](https://discuss.elastic.co/u/ITGUY)\ **Replies:** 1\ **Last updated:** [May 1, 2024, 3:28pm UTC](https://discuss.elastic.co/t/problem-encrypting-logs-to-logstash-with-tcp-input/358546 "2024-05-01T15:28:12Z")
Hello, I'm using logstash to receive logs from some equipments, I'm using these 3 input : UDP, TCP and beats. TCP will replace UDP to encrypt logs trafic but I have a problem with the TCP input : tcp { type =\>… --- ## [Repository-s3 plugin does not support IMDSv2 for EC2](https://discuss.elastic.co/t/repository-s3-plugin-does-not-support-imdsv2-for-ec2/358570)
**Author:** [@parinitha.nagaraja](https://discuss.elastic.co/u/parinitha.nagaraja)\ **Replies:** 0\ **Last updated:** [May 1, 2024, 3:16pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-does-not-support-imdsv2-for-ec2/358570 "2024-05-01T15:16:07Z")
We are using repository-s3 plugin to create/restore snapshots in AWS S3. But the plugin does not support IMDSv2 metadata version. There is already an open issue to fix this. See below. Is there any update or timeline … --- ## [Filebeat setup reports missing module/suricata](https://discuss.elastic.co/t/filebeat-setup-reports-missing-module-suricata/356661)
**Author:** [@Jamo](https://discuss.elastic.co/u/Jamo)\ **Replies:** 9\ **Last updated:** [May 1, 2024, 11:41am UTC](https://discuss.elastic.co/t/filebeat-setup-reports-missing-module-suricata/356661 "2024-05-01T11:41:42Z")
Hey folks! :wave: It's my first post here, so please excuse any mistakes I might make. I've started to set up Filebeat, Elastic and Kibana to connect Suricata to Grafana two days ago. Yesterday night at 3am I finally t… --- ## [Can Someone help with writing a javascript processor in filebeat configuration file](https://discuss.elastic.co/t/can-someone-help-with-writing-a-javascript-processor-in-filebeat-configuration-file/358416)
**Author:** [@saxena\_shk7](https://discuss.elastic.co/u/saxena_shk7)\ **Replies:** 1\ **Last updated:** [May 1, 2024, 8:55am UTC](https://discuss.elastic.co/t/can-someone-help-with-writing-a-javascript-processor-in-filebeat-configuration-file/358416 "2024-05-01T08:55:41Z")
Can Someone help with writing a java-script processor in a filebeat configuration file. I want to index all documents of a JSON response from a URL endpoint which do not have a field value "name" equals to 'PG3' in it. i… --- ## [Likely root cause: java.nio.file.FileSystemException: /usr/share/elasticsearch/data/nodes/0: Not a directory](https://discuss.elastic.co/t/likely-root-cause-java-nio-file-filesystemexception-usr-share-elasticsearch-data-nodes-0-not-a-directory/358531)
**Author:** [@wuming1](https://discuss.elastic.co/u/wuming1)\ **Replies:** 2\ **Last updated:** [May 1, 2024, 8:16am UTC](https://discuss.elastic.co/t/likely-root-cause-java-nio-file-filesystemexception-usr-share-elasticsearch-data-nodes-0-not-a-directory/358531 "2024-05-01T08:16:29Z")
I don't know why this mistake happened. Read a lot of posts on the internet, rarely find the same mistakes as me. Because I just started learning to use this, but the simple first step can not run. This is the command… --- ## [Logstash refused connect on port 5044](https://discuss.elastic.co/t/logstash-refused-connect-on-port-5044/358544)
**Author:** [@qu\_c\_th\_nguy\_n](https://discuss.elastic.co/u/qu_c_th_nguy_n)\ **Replies:** 0\ **Last updated:** [May 1, 2024, 8:02am UTC](https://discuss.elastic.co/t/logstash-refused-connect-on-port-5044/358544 "2024-05-01T08:02:50Z")
I'm attempting to integrate Zeek into my ELK server, but I'm encountering an issue when running Filebeat setup. It's reporting a connection refusal on port 5044. Upon further investigation, attempting to connect to port … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=249) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=251)