# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=258 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 259 --- ## [How we can do monitorying for elasticsearch install as pod in k8s](https://discuss.elastic.co/t/how-we-can-do-monitorying-for-elasticsearch-install-as-pod-in-k8s/357912)
**Author:** [@pratik\_jain163](https://discuss.elastic.co/u/pratik_jain163)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 1:46pm UTC](https://discuss.elastic.co/t/how-we-can-do-monitorying-for-elasticsearch-install-as-pod-in-k8s/357912 "2024-04-22T13:46:57Z")
i am looking for some tool or anything that we use to monitor ES cluster which is install in k8s. and also how we can read hot\_threads --- ## [Elastic available online? ](https://discuss.elastic.co/t/elastic-available-online/357575)
**Author:** [@Kowek](https://discuss.elastic.co/u/Kowek)\ **Replies:** 4\ **Last updated:** [April 22, 2024, 11:51am UTC](https://discuss.elastic.co/t/elastic-available-online/357575 "2024-04-22T11:51:54Z")
Hello, I apologize in advance for my English, I hope it will be understandable. I'm working on my final year project using ELK Stack to centralize my logs and visualize them better with Kibana. Currently I have a publi… --- ## [Watcher: How to execute “condition” after “transform”?](https://discuss.elastic.co/t/watcher-how-to-execute-condition-after-transform/357906)
**Author:** [@ashish25](https://discuss.elastic.co/u/ashish25)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 11:07am UTC](https://discuss.elastic.co/t/watcher-how-to-execute-condition-after-transform/357906 "2024-04-22T11:07:12Z")
I saw this thread in past but not seeing any reply on that. I want to achieve the same thing, want to perform transformation before condition. Is it possible? --- ## [Elastic.Clients.Elasticsearch Support for Update without index name](https://discuss.elastic.co/t/elastic-clients-elasticsearch-support-for-update-without-index-name/357794)
**Author:** [@DdeM](https://discuss.elastic.co/u/DdeM)\ **Replies:** 3\ **Last updated:** [April 22, 2024, 11:05am UTC](https://discuss.elastic.co/t/elastic-clients-elasticsearch-support-for-update-without-index-name/357794 "2024-04-22T11:05:48Z")
Using the .Net client for elasticsearch I can do all actions using a generic contstraint, eg. return \_client.DeleteAsync\(id, cancellationToken); However, when I want to edit a document this doesn't work. Is there a … --- ## [Elastic search geo spatial search](https://discuss.elastic.co/t/elastic-search-geo-spatial-search/357904)
**Author:** [@Dhirendra\_Singh](https://discuss.elastic.co/u/Dhirendra_Singh)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 10:54am UTC](https://discuss.elastic.co/t/elastic-search-geo-spatial-search/357904 "2024-04-22T10:54:30Z")
When was Elasticsearch geosptial was intoduced. When I am trying to create mapping it alywas shows normal float type for lat long. I am unable to query back the documents using geo\_Distance keword. I am using Elasticsear… --- ## [Line chart - aggregation based - Can't choose "normal mode"](https://discuss.elastic.co/t/line-chart-aggregation-based-cant-choose-normal-mode/357711)
**Author:** [@JenniferL](https://discuss.elastic.co/u/JenniferL)\ **Replies:** 1\ **Last updated:** [April 22, 2024, 10:43am UTC](https://discuss.elastic.co/t/line-chart-aggregation-based-cant-choose-normal-mode/357711 "2024-04-22T10:43:28Z")
Hello, I'm actually using Stack Management 7.13.1. I'm trying to do an aggregation based line chart. I'm wondering if there is a way to select the mode "normal" in the metrics while I'm using the "Percentage Mode" on t… --- ## [Issue While Perfroming Query Search on Index](https://discuss.elastic.co/t/issue-while-perfroming-query-search-on-index/357900)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 10:10am UTC](https://discuss.elastic.co/t/issue-while-perfroming-query-search-on-index/357900 "2024-04-22T10:10:36Z")
Hi Team, We are perfroming a multiple field combination search on a Index and we observe some abnormal behavior during search . The data is present in Index but it is returning null value but if we rerun the same REST A… --- ## [Finding frequently occuring logs to check heavy logging?](https://discuss.elastic.co/t/finding-frequently-occuring-logs-to-check-heavy-logging/357899)
**Author:** [@t-e-x](https://discuss.elastic.co/u/t-e-x)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 9:49am UTC](https://discuss.elastic.co/t/finding-frequently-occuring-logs-to-check-heavy-logging/357899 "2024-04-22T09:49:51Z")
P.S - I need to find the top N log messages which are commonly occuring. The reason I can't use 'term' aggregation is that the log message contain some different types of IDs in between them and that too many. So, it be… --- ## [ES7.17.5 All nodes BKD readDeltaVInt](https://discuss.elastic.co/t/es7-17-5-all-nodes-bkd-readdeltavint/357882)
**Author:** [@yangchenyu1997](https://discuss.elastic.co/u/yangchenyu1997)\ **Replies:** 11\ **Last updated:** [April 22, 2024, 8:46am UTC](https://discuss.elastic.co/t/es7-17-5-all-nodes-bkd-readdeltavint/357882 "2024-04-22T08:46:06Z")
--- ## [How do I run ELSER locally?](https://discuss.elastic.co/t/how-do-i-run-elser-locally/355998)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 2\ **Last updated:** [April 22, 2024, 8:29am UTC](https://discuss.elastic.co/t/how-do-i-run-elser-locally/355998 "2024-04-22T08:29:46Z")
Hello, I am currently interested in having ELSER run locally, meaning outside of elastic. I have ran it in a local elastic environment through docker (and ofcourse also in the cloud) but I am assuming this might be slo… --- ## [Pipe \[unique\] is not supported](https://discuss.elastic.co/t/pipe-unique-is-not-supported/357886)
**Author:** [@VellayLoket](https://discuss.elastic.co/u/VellayLoket)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 5:23am UTC](https://discuss.elastic.co/t/pipe-unique-is-not-supported/357886 "2024-04-22T05:23:03Z")
I'm trying to search event with EQL. Here is my query: network where true | unique destination.address And i got an error: Pipe \[unique\] is not supported --- ## [Kibana change/translate web UI](https://discuss.elastic.co/t/kibana-change-translate-web-ui/357605)
**Author:** [@belutak](https://discuss.elastic.co/u/belutak)\ **Replies:** 3\ **Last updated:** [April 22, 2024, 8:20am UTC](https://discuss.elastic.co/t/kibana-change-translate-web-ui/357605 "2024-04-22T08:20:22Z")
I've been attempting to translate my instance of Kibana 7.17 and have encountered a problem that I couldn't resolve for a week, so I'm hoping someone can assist me. There are two main tasks I'm trying to accomplish: To… --- ## [Help Needed with Elastic Search Integration for Multiple Wordpress sites Search](https://discuss.elastic.co/t/help-needed-with-elastic-search-integration-for-multiple-wordpress-sites-search/357875)
**Author:** [@sdadi](https://discuss.elastic.co/u/sdadi)\ **Replies:** 1\ **Last updated:** [April 22, 2024, 8:18am UTC](https://discuss.elastic.co/t/help-needed-with-elastic-search-integration-for-multiple-wordpress-sites-search/357875 "2024-04-22T08:18:37Z")
Hello folks, We have a requirement to integrate Elastic Search with our 15 Wordpress sites, and we're hoping someone can guide us on the best practices to achieve this. Our client would like to index the content of the… --- ## [Could not connect to Elasticsearch: Could not create SSL/TLS secure channel](https://discuss.elastic.co/t/could-not-connect-to-elasticsearch-could-not-create-ssl-tls-secure-channel/357877)
**Author:** [@hiilmiee](https://discuss.elastic.co/u/hiilmiee)\ **Replies:** 1\ **Last updated:** [April 22, 2024, 7:27am UTC](https://discuss.elastic.co/t/could-not-connect-to-elasticsearch-could-not-create-ssl-tls-secure-channel/357877 "2024-04-22T07:27:17Z")
Hi Team, I am unable to connect to my elasticsearch URL using .NET runtime is 4.6.2 ES .NET client is 8.13.8 Elasticsearch 8.12.2 Kibana 8.12.2 The error i got is Invalid Elasticsearch response built from a unsucc… --- ## [Elasticsearch isn’t allowed to allocate this shard to any of the nodes in the cluster as a result logs are not store into elasticsearch](https://discuss.elastic.co/t/elasticsearch-isn-t-allowed-to-allocate-this-shard-to-any-of-the-nodes-in-the-cluster-as-a-result-logs-are-not-store-into-elasticsearch/357885)
**Author:** [@abhishekacharya828](https://discuss.elastic.co/u/abhishekacharya828)\ **Replies:** 4\ **Last updated:** [April 22, 2024, 7:10am UTC](https://discuss.elastic.co/t/elasticsearch-isn-t-allowed-to-allocate-this-shard-to-any-of-the-nodes-in-the-cluster-as-a-result-logs-are-not-store-into-elasticsearch/357885 "2024-04-22T07:10:20Z")
when i check cluster allocation explain it shows that curl -u elastic:Apmosys@123 -X GET "http://my\_ip:9200/\_cluster/allocation/explain" {"note":"No shard was specified in the explain API request, so this response expl… --- ## [How to set allow\_insecure\_settings to enable repository-s3](https://discuss.elastic.co/t/how-to-set-allow-insecure-settings-to-enable-repository-s3/357771)
**Author:** [@dove-young](https://discuss.elastic.co/u/dove-young)\ **Replies:** 8\ **Last updated:** [April 22, 2024, 6:42am UTC](https://discuss.elastic.co/t/how-to-set-allow-insecure-settings-to-enable-repository-s3/357771 "2024-04-22T06:42:29Z")
I installed elastic 8.13.0 in OCP 4.15. I attach to a elastic pod and tried to register a S3 repository to minio sh-5.0$ curl -X PUT "http://instana-es-http:9200/\_snapshot/my\_s3\_repository?pretty" -H 'Content-Type: appl… --- ## [I'm inquiring about enabling the \_source flag for the code index on the ElasticSearch](https://discuss.elastic.co/t/im-inquiring-about-enabling-the-source-flag-for-the-code-index-on-the-elasticsearch/357881)
**Author:** [@ramsankar](https://discuss.elastic.co/u/ramsankar)\ **Replies:** 1\ **Last updated:** [April 22, 2024, 5:50am UTC](https://discuss.elastic.co/t/im-inquiring-about-enabling-the-source-flag-for-the-code-index-on-the-elasticsearch/357881 "2024-04-22T05:50:27Z")
I'm attempting an in-place reindex, aiming to transfer data from an existing index to a new one. However, I'm encountering difficulties because the indices have the \_source flag set to false by default. Note: I'm utilizi… --- ## [Metricsbeat sends bad request to kibana at /api/saved\_objects/\_find](https://discuss.elastic.co/t/metricsbeat-sends-bad-request-to-kibana-at-api-saved-objects-find/357865)
**Author:** [@Moemad-711](https://discuss.elastic.co/u/Moemad-711)\ **Replies:** 1\ **Last updated:** [April 22, 2024, 1:12am UTC](https://discuss.elastic.co/t/metricsbeat-sends-bad-request-to-kibana-at-api-saved-objects-find/357865 "2024-04-22T01:12:30Z")
I've setup elastic cloud for k8s on my cluster and I have deployed metricbeat using Beats CRD with daemonset My Cluster is on version 8.13.0 Kibana's logs: Upon debugging I found these requests are coming from metr… --- ## [No hits field at all in search results](https://discuss.elastic.co/t/no-hits-field-at-all-in-search-results/357870)
**Author:** [@NICK\_NASIROV](https://discuss.elastic.co/u/NICK_NASIROV)\ **Replies:** 2\ **Last updated:** [April 21, 2024, 9:41pm UTC](https://discuss.elastic.co/t/no-hits-field-at-all-in-search-results/357870 "2024-04-21T21:41:38Z")
I have products index, and when I run a query in Dev Tools like so I see results: GET /products/\_search { "query": { "bool": { "must": \[ { "match": { "merchant.id": "1" … --- ## [Elastic integration with slack](https://discuss.elastic.co/t/elastic-integration-with-slack/357857)
**Author:** [@yashar.ansari76](https://discuss.elastic.co/u/yashar.ansari76)\ **Replies:** 3\ **Last updated:** [April 21, 2024, 4:45pm UTC](https://discuss.elastic.co/t/elastic-integration-with-slack/357857 "2024-04-21T16:45:14Z")
Hi everyone I have installed Elasticsearch with Kibana and fluentd. now I want to send my logs to slack and I follow this doc (Watcher Slack Action | Elasticsearch Guide \[8.13\] | Elastic). when I add "actions" : { … --- ## [Elasticsearch snapshot restore from 8.6.2 to 8.6.0](https://discuss.elastic.co/t/elasticsearch-snapshot-restore-from-8-6-2-to-8-6-0/357863)
**Author:** [@sh\_kh\_9](https://discuss.elastic.co/u/sh_kh_9)\ **Replies:** 4\ **Last updated:** [April 21, 2024, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-restore-from-8-6-2-to-8-6-0/357863 "2024-04-21T16:13:28Z")
I am in a dilemma, We have elasticsearch 8.6.2 deployed and the cluster is working fine since a year now but due to a mishap, the elasticsearch version that was supposed to be deployed was 8.6.0, I am thinking of perform… --- ## [How to extract log from .BZ2 input file? Logstash](https://discuss.elastic.co/t/how-to-extract-log-from-bz2-input-file-logstash/357402)
**Author:** [@Leo23](https://discuss.elastic.co/u/Leo23)\ **Replies:** 1\ **Last updated:** [April 21, 2024, 3:58pm UTC](https://discuss.elastic.co/t/how-to-extract-log-from-bz2-input-file-logstash/357402 "2024-04-21T15:58:25Z")
Hello, I want to extract logs from compress file in .bz2 do there is a way to do that ? I do it from .gz but seems to don't work with bz2 files. --- ## [Execute enrich policy automatically](https://discuss.elastic.co/t/execute-enrich-policy-automatically/357449)
**Author:** [@ashish25](https://discuss.elastic.co/u/ashish25)\ **Replies:** 2\ **Last updated:** [April 21, 2024, 3:45pm UTC](https://discuss.elastic.co/t/execute-enrich-policy-automatically/357449 "2024-04-21T15:45:08Z")
Hi, I am having below enrichment policy and want to execute automatically. Is there anyway to achieve it and also I want to execute it every second is there any impact overall if I execute every second? POST /\_enrich/… --- ## [Allowing size to be max \[possibly inifinity\]](https://discuss.elastic.co/t/allowing-size-to-be-max-possibly-inifinity/357594)
**Author:** [@Vivek\_Burman](https://discuss.elastic.co/u/Vivek_Burman)\ **Replies:** 4\ **Last updated:** [April 21, 2024, 3:20pm UTC](https://discuss.elastic.co/t/allowing-size-to-be-max-possibly-inifinity/357594 "2024-04-21T15:20:14Z")
Hi, I've the below an aggregate query response: As you can see "sum\_other\_doc\_count": 399 and only 10 buckets are returned. I would like sum\_other\_doc\_count to be always 0 and return all buckets, irrespective of time it… --- ## [Unable to restore indices from snapshot](https://discuss.elastic.co/t/unable-to-restore-indices-from-snapshot/357856)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 0\ **Last updated:** [April 21, 2024, 12:32pm UTC](https://discuss.elastic.co/t/unable-to-restore-indices-from-snapshot/357856 "2024-04-21T12:32:00Z")
Hello, I'm facing an issue while trying to restore snapshot after upgrade. (previous : 8.10.2, current : 8.13.2) Not all indices were recovered, most indices have "0b" size, although the snapshot succeeded when creatin… --- ## [Fortigate appliance and ELK syslog server](https://discuss.elastic.co/t/fortigate-appliance-and-elk-syslog-server/357855)
**Author:** [@m\_pahlevanzadeh](https://discuss.elastic.co/u/m_pahlevanzadeh)\ **Replies:** 0\ **Last updated:** [April 21, 2024, 11:22am UTC](https://discuss.elastic.co/t/fortigate-appliance-and-elk-syslog-server/357855 "2024-04-21T11:22:30Z")
Scenario: I want to create a syslog server for CISCO‌ SW and Fortigate Firewall, I configured my FG to send log to ELK server. I tested with tcpdump and data recieved on the given port. I found two way and I don't know… --- ## [Support for other HNSW engines](https://discuss.elastic.co/t/support-for-other-hnsw-engines/357848)
**Author:** [@mingmasplace](https://discuss.elastic.co/u/mingmasplace)\ **Replies:** 0\ **Last updated:** [April 20, 2024, 7:47pm UTC](https://discuss.elastic.co/t/support-for-other-hnsw-engines/357848 "2024-04-20T19:47:19Z")
Elastic relies on lucene's implementation of HNSW. Per GitHub - erikbern/ann-benchmarks: Benchmarks of approximate nearest neighbor libraries in Python, there are several fast HNSW implementations such as nmslib. Is ther… --- ## [Kibana Sankey Diagram](https://discuss.elastic.co/t/kibana-sankey-diagram/357840)
**Author:** [@ty80517](https://discuss.elastic.co/u/ty80517)\ **Replies:** 0\ **Last updated:** [April 20, 2024, 3:15pm UTC](https://discuss.elastic.co/t/kibana-sankey-diagram/357840 "2024-04-20T15:15:29Z")
Hi Everyone, I want to show the branch's size of node's size percent. what should I do? For example： There are 320 data in OSX and 55 data go to IN. 55/320 = 17.18% I want display 17% or 17.1% or 17.18% rather than 3.… --- ## [failed to open store 'filebeat: remove /mnt/overlay/am-data/regist ry/filebeat/checkpoint.new: bad address](https://discuss.elastic.co/t/failed-to-open-store-filebeat-remove-mnt-overlay-am-data-regist-ry-filebeat-checkpoint-new-bad-address/357836)
**Author:** [@neeraj-trellix](https://discuss.elastic.co/u/neeraj-trellix)\ **Replies:** 0\ **Last updated:** [April 20, 2024, 1:55pm UTC](https://discuss.elastic.co/t/failed-to-open-store-filebeat-remove-mnt-overlay-am-data-regist-ry-filebeat-checkpoint-new-bad-address/357836 "2024-04-20T13:55:13Z")
Setting up watches. Watches established. 2024-04-12T09:57:58.723Z WARN \[cfgwarn\] t1 scommon/config.go:100 DEPRECATED: Treating the CommonName field on X.509 certificates as host name when no Subject Alternative Names… --- ## [Integrate EFK with altermanager](https://discuss.elastic.co/t/integrate-efk-with-altermanager/357828)
**Author:** [@yashar.ansari76](https://discuss.elastic.co/u/yashar.ansari76)\ **Replies:** 0\ **Last updated:** [April 20, 2024, 5:59am UTC](https://discuss.elastic.co/t/integrate-efk-with-altermanager/357828 "2024-04-20T05:59:36Z")
Hi everyone I have installed Elasticsearch with Kibana and Fluentd that collects logs from my containers. now I want to send logs that are in error state to Prometheus and alter manager, is there any way or other solut… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=257) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=259)