# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=257 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 258 --- ## [Azure Blob Storage - Using Blobfuse2](https://discuss.elastic.co/t/azure-blob-storage-using-blobfuse2/357932)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 3\ **Last updated:** [April 23, 2024, 2:37pm UTC](https://discuss.elastic.co/t/azure-blob-storage-using-blobfuse2/357932 "2024-04-23T14:37:22Z")
Hello, We are currently running self-managed Elastic using Azure VMs. Due to vast amount of data ingested, 100TB+ we are leveraging Azure's premium disks for our cold and hot data nodes. We are trying to move away fro… --- ## [Elastic License Migration](https://discuss.elastic.co/t/elastic-license-migration/357985)
**Author:** [@ksaimohan2k](https://discuss.elastic.co/u/ksaimohan2k)\ **Replies:** 2\ **Last updated:** [April 23, 2024, 2:29pm UTC](https://discuss.elastic.co/t/elastic-license-migration/357985 "2024-04-23T14:29:32Z")
Is it possible to migrate the licenses from one cluster to another? For example, I have a DC cluster and a DR cluster. When DC goes down, I want to migrate the license from DC to DR. Is it possible? --- ## [Efficient Metadata Indexing for Large Filesystem in Elasticsearch](https://discuss.elastic.co/t/efficient-metadata-indexing-for-large-filesystem-in-elasticsearch/357981)
**Author:** [@geekahmed](https://discuss.elastic.co/u/geekahmed)\ **Replies:** 2\ **Last updated:** [April 23, 2024, 2:05pm UTC](https://discuss.elastic.co/t/efficient-metadata-indexing-for-large-filesystem-in-elasticsearch/357981 "2024-04-23T14:05:57Z")
Hello everyone, I'm working with a mounted network filesystem on Linux that contains a massive collection of files (text, images, videos, etc.). My goal is to index specific metadata from these files into Elasticsearch. … --- ## [Mapping error for rollover](https://discuss.elastic.co/t/mapping-error-for-rollover/358035)
**Author:** [@h.d.intodata](https://discuss.elastic.co/u/h.d.intodata)\ **Replies:** 0\ **Last updated:** [April 23, 2024, 1:51pm UTC](https://discuss.elastic.co/t/mapping-error-for-rollover/358035 "2024-04-23T13:51:46Z")
Hi team, I have a working ilm policy and template which rollsover the index. However, I cannot get the mappings to work in the policy, i a large list of errors such as: index\_template \[my-alias\] invalid, cause \[Validat… --- ## [Filebeat logs are not being send to logstash](https://discuss.elastic.co/t/filebeat-logs-are-not-being-send-to-logstash/358022)
**Author:** [@Andre172](https://discuss.elastic.co/u/Andre172)\ **Replies:** 5\ **Last updated:** [April 23, 2024, 1:24pm UTC](https://discuss.elastic.co/t/filebeat-logs-are-not-being-send-to-logstash/358022 "2024-04-23T13:24:53Z")
Hello, I'm new to Elastic Stack and I'm trying to send logs from Filebeat to logstash to Elasticsearch. But I'm not seeing an Index pattern in Opensearch and when I run filebeat i get Errors. My filebeat.yml looks like … --- ## [Addressing Filebeat's memory leak and performance issues with high log volume](https://discuss.elastic.co/t/addressing-filebeats-memory-leak-and-performance-issues-with-high-log-volume/354929)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 12\ **Last updated:** [April 23, 2024, 1:08pm UTC](https://discuss.elastic.co/t/addressing-filebeats-memory-leak-and-performance-issues-with-high-log-volume/354929 "2024-04-23T13:08:59Z")
Hello, Recently, we've encountered significant challenges with Filebeat's memory usage and performance, specifically after integrating additional netflow shippers. This led to Filebeat running out of memory just minutes… --- ## [Search query with aggregation and sorting](https://discuss.elastic.co/t/search-query-with-aggregation-and-sorting/358021)
**Author:** [@mananchhajer](https://discuss.elastic.co/u/mananchhajer)\ **Replies:** 0\ **Last updated:** [April 23, 2024, 12:37pm UTC](https://discuss.elastic.co/t/search-query-with-aggregation-and-sorting/358021 "2024-04-23T12:37:45Z")
in the below mentioned elasticsearch search query, I want to fetch the documents in a way that all have different variant ids and the product which is fetched from the variant group has the least sort order. { "from… --- ## [Filebeat not working with xpack Security enabled in Elasticsearch](https://discuss.elastic.co/t/filebeat-not-working-with-xpack-security-enabled-in-elasticsearch/358019)
**Author:** [@viera120](https://discuss.elastic.co/u/viera120)\ **Replies:** 0\ **Last updated:** [April 23, 2024, 12:18pm UTC](https://discuss.elastic.co/t/filebeat-not-working-with-xpack-security-enabled-in-elasticsearch/358019 "2024-04-23T12:18:42Z")
Hi, We are running a 3 node elastic cluster to index logs from a firewall. For monitoring the cluster health, we are trying to collect the elastic cluster logs through filebeat and visualize these logs in kibana. For t… --- ## [User authorized in KeyCloak rejected access to Kibana space](https://discuss.elastic.co/t/user-authorized-in-keycloak-rejected-access-to-kibana-space/357990)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 0\ **Last updated:** [April 23, 2024, 7:26am UTC](https://discuss.elastic.co/t/user-authorized-in-keycloak-rejected-access-to-kibana-space/357990 "2024-04-23T07:26:34Z")
Hello @elasticcommunity Our use case is to giver external users access to specific spaces, dashboards and indices in an on-prem Elastic cluster. We are using OpenID Connect authorization and Keycloak as provider. We ha… --- ## [Replica Use In Elasticsearch](https://discuss.elastic.co/t/replica-use-in-elasticsearch/357684)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 10\ **Last updated:** [April 23, 2024, 8:23am UTC](https://discuss.elastic.co/t/replica-use-in-elasticsearch/357684 "2024-04-23T08:23:28Z")
Hi Team, I had generic question on Elasticsearch replica. Is the replica main purpose is to provide HA to the docs which are stored in Elastic or any other benefits. My questions is suppose we are querying a index with… --- ## [Runtime field script error](https://discuss.elastic.co/t/runtime-field-script-error/357901)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 2\ **Last updated:** [April 23, 2024, 8:55am UTC](https://discuss.elastic.co/t/runtime-field-script-error/357901 "2024-04-23T08:55:29Z")
Hi, On a cross cluster, using kibana, I'm trying to add a runtime field in a dataview pointing to a remote index. In the preview section, a "script error" message is displayed. My script code: emit('TEST'); Did I forg… --- ## [File integrity monitoring integration to get current filesystem state](https://discuss.elastic.co/t/file-integrity-monitoring-integration-to-get-current-filesystem-state/356277)
**Author:** [@pstmps](https://discuss.elastic.co/u/pstmps)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 11:58am UTC](https://discuss.elastic.co/t/file-integrity-monitoring-integration-to-get-current-filesystem-state/356277 "2024-03-27T11:58:28Z")
I am using elastic agent and the file integrity monitoring integration (1.14.1) to watch a folder and its subfolders for changes. This works fine but in order to get the true state of the filesystem I have to condense t… --- ## [Data doesn't transfer](https://discuss.elastic.co/t/data-doesnt-transfer/357972)
**Author:** [@m\_pahlevanzadeh](https://discuss.elastic.co/u/m_pahlevanzadeh)\ **Replies:** 1\ **Last updated:** [April 23, 2024, 7:18am UTC](https://discuss.elastic.co/t/data-doesnt-transfer/357972 "2024-04-23T07:18:24Z")
I have two machine: 1. Fortigate appliance and 2. ELK machine In my ELK I have the following services : filebeat with the following input and output: filebeat.input: -type: udp host: "172.16.57.222:5044" ## thi… --- ## [While searching how are shards picked for cluster with index.routing\_partition\_size](https://discuss.elastic.co/t/while-searching-how-are-shards-picked-for-cluster-with-index-routing-partition-size/357957)
**Author:** [@ktech007](https://discuss.elastic.co/u/ktech007)\ **Replies:** 1\ **Last updated:** [April 23, 2024, 6:26am UTC](https://discuss.elastic.co/t/while-searching-how-are-shards-picked-for-cluster-with-index-routing-partition-size/357957 "2024-04-23T06:26:26Z")
Let's say my cluster is set up with index.routing\_partition\_size of 20. For a routing key abc, it can then route documents to max 20 shards. Here is a scenario: Suppose a document comes with routing key abc and it is r… --- ## [Delete API without without any write](https://discuss.elastic.co/t/delete-api-without-without-any-write/357973)
**Author:** [@Sajad\_Soltanian](https://discuss.elastic.co/u/Sajad_Soltanian)\ **Replies:** 1\ **Last updated:** [April 23, 2024, 6:02am UTC](https://discuss.elastic.co/t/delete-api-without-without-any-write/357973 "2024-04-23T06:02:57Z")
We have an index which has been rolloverd many time using an ILM, which also force merge the rollovered indices. We will never update or write any new document to those rollovers, though we want to delete some documents… --- ## [What is the different between parameters, primaries and new\_primaries of index setting index.routing.allocation.enable](https://discuss.elastic.co/t/what-is-the-different-between-parameters-primaries-and-new-primaries-of-index-setting-index-routing-allocation-enable/357975)
**Author:** [@niuchaoyang0520](https://discuss.elastic.co/u/niuchaoyang0520)\ **Replies:** 0\ **Last updated:** [April 23, 2024, 5:59am UTC](https://discuss.elastic.co/t/what-is-the-different-between-parameters-primaries-and-new-primaries-of-index-setting-index-routing-allocation-enable/357975 "2024-04-23T05:59:01Z")
what is the different between parameters, primaries and new\_primaries of index setting index.routing.allocation.enable --- ## [Inquiry on Logstash Performance Metrics](https://discuss.elastic.co/t/inquiry-on-logstash-performance-metrics/357969)
**Author:** [@Suvidha\_Malaviya](https://discuss.elastic.co/u/Suvidha_Malaviya)\ **Replies:** 0\ **Last updated:** [April 23, 2024, 5:29am UTC](https://discuss.elastic.co/t/inquiry-on-logstash-performance-metrics/357969 "2024-04-23T05:29:03Z")
Hi Logstash Community, I'm currently working on optimizing our Logstash deployment and would like to gather some insights on the performance metrics of Logstash. Transfer Time for Data Transmission: I'm interested in … --- ## [I'm trying to install logstash as part of an requirement for wazuh](https://discuss.elastic.co/t/im-trying-to-install-logstash-as-part-of-an-requirement-for-wazuh/357892)
**Author:** [@satiswaran](https://discuss.elastic.co/u/satiswaran)\ **Replies:** 3\ **Last updated:** [April 23, 2024, 5:17am UTC](https://discuss.elastic.co/t/im-trying-to-install-logstash-as-part-of-an-requirement-for-wazuh/357892 "2024-04-23T05:17:34Z")
I'm trying to install logstash to forward logs to my wazuh server from the wazuh agent for windows, i followed the guide given here: -documentation.wazuh.com/current/cloud-service/your-environment/send-syslog-data After… --- ## [Elastic Agent Installation for Elastic Observability Engineer Certification Lab](https://discuss.elastic.co/t/elastic-agent-installation-for-elastic-observability-engineer-certification-lab/357953)
**Author:** [@sujay](https://discuss.elastic.co/u/sujay)\ **Replies:** 0\ **Last updated:** [April 23, 2024, 2:07am UTC](https://discuss.elastic.co/t/elastic-agent-installation-for-elastic-observability-engineer-certification-lab/357953 "2024-04-23T02:07:45Z")
I need help with installing/uninstalling EA in Lab 2.1 Its giving my option to first install Fleet Server and then configure Agent, however the course Lab material says other wise I also need help to delete the content… --- ## [Restart Elastic Agent from Fleet Server](https://discuss.elastic.co/t/restart-elastic-agent-from-fleet-server/357946)
**Author:** [@Ather\_Imam\_Danish](https://discuss.elastic.co/u/Ather_Imam_Danish)\ **Replies:** 4\ **Last updated:** [April 23, 2024, 1:45am UTC](https://discuss.elastic.co/t/restart-elastic-agent-from-fleet-server/357946 "2024-04-23T01:45:11Z")
I want to restart Elastic Agent from Fleet server, because many time elastic agent gets in offline state and every time I restart it manually, --- ## [Elasticsearch 7.10.2 End of Support Date and End of Life Date](https://discuss.elastic.co/t/elasticsearch-7-10-2-end-of-support-date-and-end-of-life-date/357941)
**Author:** [@zhangyifei](https://discuss.elastic.co/u/zhangyifei)\ **Replies:** 1\ **Last updated:** [April 22, 2024, 8:05pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-2-end-of-support-date-and-end-of-life-date/357941 "2024-04-22T20:05:45Z")
Hi Team, Are there any documents specifying the End of Support Date and End of Life Date for Elasticsearch 7.10.2? The website currently only provides this information for version 7.17.x. Thanks. --- ## [Need to create a Line Graph and Bar Graph on the same visualisation in the kibana](https://discuss.elastic.co/t/need-to-create-a-line-graph-and-bar-graph-on-the-same-visualisation-in-the-kibana/357938)
**Author:** [@Lokesh\_s](https://discuss.elastic.co/u/Lokesh_s)\ **Replies:** 1\ **Last updated:** [April 22, 2024, 8:00pm UTC](https://discuss.elastic.co/t/need-to-create-a-line-graph-and-bar-graph-on-the-same-visualisation-in-the-kibana/357938 "2024-04-22T20:00:54Z")
Hell All, I Need to create a Line Graph and Bar Graph on the same visualisation in the kibana, Do we have the possibility to do the same on kibana 7 version --- ## [No logs being sent by Winlogbeat](https://discuss.elastic.co/t/no-logs-being-sent-by-winlogbeat/357936)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 6:33pm UTC](https://discuss.elastic.co/t/no-logs-being-sent-by-winlogbeat/357936 "2024-04-22T18:33:18Z")
I apologise for not having a more appropriate title. I hope the members of the community are safe and healthy. I have a host where Winlogbeat is not sending any logs. The host has extensive ongoing application, system… --- ## [Elasticsearch Agent Issue](https://discuss.elastic.co/t/elasticsearch-agent-issue/357935)
**Author:** [@Amadavus](https://discuss.elastic.co/u/Amadavus)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 6:21pm UTC](https://discuss.elastic.co/t/elasticsearch-agent-issue/357935 "2024-04-22T18:21:52Z")
Apologies if this is the incorrect section to ask this. Currently the Fleet server and the agent are both Windows Servers. I have recently started in a new environment where Elasticsearch was already set up. when I jo… --- ## [Vega Sankey diagram gradient in Kibana](https://discuss.elastic.co/t/vega-sankey-diagram-gradient-in-kibana/357867)
**Author:** [@ty80517](https://discuss.elastic.co/u/ty80517)\ **Replies:** 3\ **Last updated:** [April 22, 2024, 6:19pm UTC](https://discuss.elastic.co/t/vega-sankey-diagram-gradient-in-kibana/357867 "2024-04-22T18:19:31Z")
Anyone having an idea on how to create Sankey diagrams that the edges has gradient color from left rect's color to right rect's color? This is sample Sankey diagram in Kibana: And this is my code: vega · GitHub (I'm… --- ## [Elastic Search, Docker and max virtual memory areas error](https://discuss.elastic.co/t/elastic-search-docker-and-max-virtual-memory-areas-error/357907)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 1\ **Last updated:** [April 22, 2024, 1:36pm UTC](https://discuss.elastic.co/t/elastic-search-docker-and-max-virtual-memory-areas-error/357907 "2024-04-22T13:36:25Z")
Hello, My YAML file is as follows: services: es01: image: elasticsearch:8.13.0 container\_name: Elasticsearch01 environment: - node.name=es01 - cluster.name=es-docker-cluster - discovery.… --- ## [Move some file detection logs to info loglevel to make troubleshooting easier](https://discuss.elastic.co/t/move-some-file-detection-logs-to-info-loglevel-to-make-troubleshooting-easier/357923)
**Author:** [@jori-be](https://discuss.elastic.co/u/jori-be)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 4:33pm UTC](https://discuss.elastic.co/t/move-some-file-detection-logs-to-info-loglevel-to-make-troubleshooting-easier/357923 "2024-04-22T16:33:59Z")
Is it possible to switch the follow logs in filebeat from debug to info loglevel? It would make troubleshooting a bit easier because debug loglevel is very verbose if you are harvesting multiple logs files. File \[file\]… --- ## [Check point elastic agent integration not receiving traffic](https://discuss.elastic.co/t/check-point-elastic-agent-integration-not-receiving-traffic/357922)
**Author:** [@Fantaunix](https://discuss.elastic.co/u/Fantaunix)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 3:46pm UTC](https://discuss.elastic.co/t/check-point-elastic-agent-integration-not-receiving-traffic/357922 "2024-04-22T15:46:12Z")
hi all, i've installed an elastic agent on an host where checkpoint firewall sends logs but after several checks all is configured as well but the integration is not receiving anything. could someone share his configur… --- ## [Getting user group path](https://discuss.elastic.co/t/getting-user-group-path/357920)
**Author:** [@theanesky](https://discuss.elastic.co/u/theanesky)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 2:52pm UTC](https://discuss.elastic.co/t/getting-user-group-path/357920 "2024-04-22T14:52:54Z")
Hello everyone, I have a task: I need to add information about the path to the group to which the user from. And in the event i see only domain/host names. Can I do this using winlogbeat or it depends on OS audit setting… --- ## [Restart node after 15 mins](https://discuss.elastic.co/t/restart-node-after-15-mins/357911)
**Author:** [@mukularora89](https://discuss.elastic.co/u/mukularora89)\ **Replies:** 1\ **Last updated:** [April 22, 2024, 1:54pm UTC](https://discuss.elastic.co/t/restart-node-after-15-mins/357911 "2024-04-22T13:54:41Z")
Hi, We want to put the node offline for 15 mins and then bring back into the cluster. So the approach we are following is mentioned below disable shard allocation except for primaries Perform flush Shutdown Elasticsea… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=256) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=258)