# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=259 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 260 --- ## [Just downloaded elastic search version 8.13.2 and ran the elasticsearch.bat. it return with this error. Elasticsearch died while starting up, with exit code 1](https://discuss.elastic.co/t/just-downloaded-elastic-search-version-8-13-2-and-ran-the-elasticsearch-bat-it-return-with-this-error-elasticsearch-died-while-starting-up-with-exit-code-1/357752)
**Author:** [@Duke\_tlam](https://discuss.elastic.co/u/Duke_tlam)\ **Replies:** 9\ **Last updated:** [April 20, 2024, 2:07am UTC](https://discuss.elastic.co/t/just-downloaded-elastic-search-version-8-13-2-and-ran-the-elasticsearch-bat-it-return-with-this-error-elasticsearch-died-while-starting-up-with-exit-code-1/357752 "2024-04-20T02:07:56Z")
\[2024-04-18T16:13:57,555\]\[INFO \]\[o.e.n.NativeAccess \] \[DCAP919WAS905DB\] Using \[jdk\] native provider and native methods for \[Windows\] \[2024-04-18T16:13:57,937\]\[ERROR\]\[o.e.b.Elasticsearch \] \[DCAP919WAS905DB\] fa… --- ## [Why one string field sometime not creating.keyword field](https://discuss.elastic.co/t/why-one-string-field-sometime-not-creating-keyword-field/357757)
**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\ **Replies:** 3\ **Last updated:** [April 19, 2024, 4:56pm UTC](https://discuss.elastic.co/t/why-one-string-field-sometime-not-creating-keyword-field/357757 "2024-04-19T16:56:24Z")
Hi Team, I have one field with the name of "result". This field value is not constant. Sometimes this value is above 256 char. This field creating.keyword field for some values and for some values it is not creating. We… --- ## [Shipping Cloud Appliction API Logs using Logsatsh](https://discuss.elastic.co/t/shipping-cloud-appliction-api-logs-using-logsatsh/357814)
**Author:** [@Zain\_Zafar1](https://discuss.elastic.co/u/Zain_Zafar1)\ **Replies:** 0\ **Last updated:** [April 19, 2024, 4:52pm UTC](https://discuss.elastic.co/t/shipping-cloud-appliction-api-logs-using-logsatsh/357814 "2024-04-19T16:52:23Z")
Hello, I'm using Cloud Application and now I want to ship its logs using API with Logsatsh. Can someone guide , how can i do that? --- ## [Curl: (51) Unable to communicate securely with peer: requested domain name does not match the server's certificate](https://discuss.elastic.co/t/curl-51-unable-to-communicate-securely-with-peer-requested-domain-name-does-not-match-the-servers-certificate/357756)
**Author:** [@Septianingrum.17](https://discuss.elastic.co/u/Septianingrum.17)\ **Replies:** 1\ **Last updated:** [April 19, 2024, 4:40pm UTC](https://discuss.elastic.co/t/curl-51-unable-to-communicate-securely-with-peer-requested-domain-name-does-not-match-the-servers-certificate/357756 "2024-04-19T16:40:03Z")
Dear All, currently I have 2 clusters, I want to move data from cluster A to cluster B using the "reindex remote cluster" method. but it happens when running. and when running curl on the local server and trying to … --- ## [Why is the product of average latency and average throughput greater than the number of clients (Little's Law)?](https://discuss.elastic.co/t/why-is-the-product-of-average-latency-and-average-throughput-greater-than-the-number-of-clients-littles-law/357811)
**Author:** [@icyclv](https://discuss.elastic.co/u/icyclv)\ **Replies:** 0\ **Last updated:** [April 19, 2024, 4:17pm UTC](https://discuss.elastic.co/t/why-is-the-product-of-average-latency-and-average-throughput-greater-than-the-number-of-clients-littles-law/357811 "2024-04-19T16:17:25Z")
Hello, I have recently studied Little's law, and I want to verify my understanding through the data from Rally, envisioning that the number of clients = average latency x average throughput. I have selected the track a… --- ## [CEL integration: Resource timeout does not work](https://discuss.elastic.co/t/cel-integration-resource-timeout-does-not-work/357806)
**Author:** [@Denis\_Pudov](https://discuss.elastic.co/u/Denis_Pudov)\ **Replies:** 0\ **Last updated:** [April 19, 2024, 3:32pm UTC](https://discuss.elastic.co/t/cel-integration-resource-timeout-does-not-work/357806 "2024-04-19T15:32:21Z")
Hi I have a kibana custom resource with CEL integration like this: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: kibana namespace: kibana spec: version: 8.13.2 ... config: ... xpack.flee… --- ## [Custom API intergration - Response Pagination](https://discuss.elastic.co/t/custom-api-intergration-response-pagination/356396)
**Author:** [@rrensen](https://discuss.elastic.co/u/rrensen)\ **Replies:** 1\ **Last updated:** [April 19, 2024, 2:55pm UTC](https://discuss.elastic.co/t/custom-api-intergration-response-pagination/356396 "2024-04-19T14:55:01Z")
Hi, i am trying to achieve pagination with the Custom API. The response header of the original call has the following information Date: Wed, 27 Mar 2024 14:51:36 GMT Content-Type: application/json; charset=utf-8 Transf… --- ## [Unable to download csv from kibana dashboard, "we couldn't generate your csv at this time"](https://discuss.elastic.co/t/unable-to-download-csv-from-kibana-dashboard-we-couldnt-generate-your-csv-at-this-time/356991)
**Author:** [@robocop](https://discuss.elastic.co/u/robocop)\ **Replies:** 7\ **Last updated:** [April 19, 2024, 2:44pm UTC](https://discuss.elastic.co/t/unable-to-download-csv-from-kibana-dashboard-we-couldnt-generate-your-csv-at-this-time/356991 "2024-04-19T14:44:21Z")
Kibana 7.6.2 csv download failed we couldn't generate your csv at this time. I checked kibana.yml but there is no xpack.reporting.csv.maxSizeBytes mentioned in the settings. Also, I checked with a very small sample too … --- ## [Get unique documents based on 3 fields](https://discuss.elastic.co/t/get-unique-documents-based-on-3-fields/357785)
**Author:** [@akhil\_reddy](https://discuss.elastic.co/u/akhil_reddy)\ **Replies:** 0\ **Last updated:** [April 19, 2024, 12:02pm UTC](https://discuss.elastic.co/t/get-unique-documents-based-on-3-fields/357785 "2024-04-19T12:02:13Z")
Hi, I have an index with lot of data. Is there a way to get the unique documents from the index based on 3 fields. I tried collapse and aggregates collapse allows to get unique documents based on 1 field aggregate giv… --- ## [Cannot register a fs snapshot repository in elastic 8.13.0](https://discuss.elastic.co/t/cannot-register-a-fs-snapshot-repository-in-elastic-8-13-0/357774)
**Author:** [@dove-young](https://discuss.elastic.co/u/dove-young)\ **Replies:** 9\ **Last updated:** [April 19, 2024, 11:52am UTC](https://discuss.elastic.co/t/cannot-register-a-fs-snapshot-repository-in-elastic-8-13-0/357774 "2024-04-19T11:52:19Z")
I installed elastic 8.13.0 in OCP 4.15. I defined path.repo to \["/usr/share/elasticsearch/data/backup"\]inelasticsearch.yml, but when I try to register a FS repository, I got error like"master\_not\_discovered\_exception"\` … --- ## [Empty buckets in composite aggregation](https://discuss.elastic.co/t/empty-buckets-in-composite-aggregation/357784)
**Author:** [@Mehmet\_Ali\_Candemiro](https://discuss.elastic.co/u/Mehmet_Ali_Candemiro)\ **Replies:** 0\ **Last updated:** [April 19, 2024, 11:25am UTC](https://discuss.elastic.co/t/empty-buckets-in-composite-aggregation/357784 "2024-04-19T11:25:44Z")
I use composite aggregation, some buckets are empty , can i break for loop if bucket is empty . My data set is big, I don't want aggregate the empty buckets. I change the question a little bit, can I get only bucket th… --- ## [WinRM Polling vs Beats](https://discuss.elastic.co/t/winrm-polling-vs-beats/357637)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [April 19, 2024, 11:25am UTC](https://discuss.elastic.co/t/winrm-polling-vs-beats/357637 "2024-04-19T11:25:07Z")
Hello, As I noticed competitors are leveraging WinRM to retrieve data from hosts. It seems like this is mostly covered by Metricbeat and Winlogbeat but I wanted to confirm that all these are possible with Elastic. Wi… --- ## [How to plot a time field on the y-axis of a date histogram?](https://discuss.elastic.co/t/how-to-plot-a-time-field-on-the-y-axis-of-a-date-histogram/357286)
**Author:** [@JamesBoustead](https://discuss.elastic.co/u/JamesBoustead)\ **Replies:** 2\ **Last updated:** [April 19, 2024, 11:22am UTC](https://discuss.elastic.co/t/how-to-plot-a-time-field-on-the-y-axis-of-a-date-histogram/357286 "2024-04-19T11:22:50Z")
I currently have the completion time for a date field showing as end\_time Apr 30, 2024 @ 05:37:25.908 Is there a way to convert this field to show time only (05:37:25.908) and plot this data on the y-axis of a date his… --- ## [The SHA1 fingerprints generated by Logstash differ from those generated using the API](https://discuss.elastic.co/t/the-sha1-fingerprints-generated-by-logstash-differ-from-those-generated-using-the-api/357577)
**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\ **Replies:** 6\ **Last updated:** [April 19, 2024, 11:13am UTC](https://discuss.elastic.co/t/the-sha1-fingerprints-generated-by-logstash-differ-from-those-generated-using-the-api/357577 "2024-04-19T11:13:37Z")
In our API, we are concatenating the order id and fingerprint to get the hashed value for orderKey. Given the id/fingerprint of the items: id: '7542b27c-c255-4b18-8321-06c9d65aca7f' fingerprint: '28d68c4f04f487f514db3… --- ## [How to create nested object when transfering data from one index to another via logstash](https://discuss.elastic.co/t/how-to-create-nested-object-when-transfering-data-from-one-index-to-another-via-logstash/357779)
**Author:** [@Kaustub\_Gupta](https://discuss.elastic.co/u/Kaustub_Gupta)\ **Replies:** 0\ **Last updated:** [April 19, 2024, 9:07am UTC](https://discuss.elastic.co/t/how-to-create-nested-object-when-transfering-data-from-one-index-to-another-via-logstash/357779 "2024-04-19T09:07:19Z")
The original index has a mapping: "GTIN": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } … --- ## [Metric Beat version 8.9.1 get stopped automatically after 3 hours](https://discuss.elastic.co/t/metric-beat-version-8-9-1-get-stopped-automatically-after-3-hours/357770)
**Author:** [@kasecen637](https://discuss.elastic.co/u/kasecen637)\ **Replies:** 0\ **Last updated:** [April 19, 2024, 7:31am UTC](https://discuss.elastic.co/t/metric-beat-version-8-9-1-get-stopped-automatically-after-3-hours/357770 "2024-04-19T07:31:51Z")
HI, when i run my metricbeat and send the data to Elasticsearch it get started and after some time it get stopped after 2 to 3 hours below is the logs {"log.level":"info","@timestamp":"2024-04-18T21:00:28.052+0530","l… --- ## [Operation not permitted when install Elastic Repository S3 plugin in version 7.17.15](https://discuss.elastic.co/t/operation-not-permitted-when-install-elastic-repository-s3-plugin-in-version-7-17-15/357758)
**Author:** [@dove-young](https://discuss.elastic.co/u/dove-young)\ **Replies:** 2\ **Last updated:** [April 19, 2024, 7:07am UTC](https://discuss.elastic.co/t/operation-not-permitted-when-install-elastic-repository-s3-plugin-in-version-7-17-15/357758 "2024-04-19T07:07:27Z")
I tried to install repository-s3 plugin to a elastic installed in openshift cluster. I got Operation not permitted error. I have no idea whether this is because of Licensed: false or any other problems? sh-5.1$ bash -… --- ## [Replace the @timestamp of the dashboard with the time at which the event get logged in the file](https://discuss.elastic.co/t/replace-the-timestamp-of-the-dashboard-with-the-time-at-which-the-event-get-logged-in-the-file/357729)
**Author:** [@reach](https://discuss.elastic.co/u/reach)\ **Replies:** 4\ **Last updated:** [April 18, 2024, 9:13pm UTC](https://discuss.elastic.co/t/replace-the-timestamp-of-the-dashboard-with-the-time-at-which-the-event-get-logged-in-the-file/357729 "2024-04-18T21:13:12Z")
Hi there, I wanted to replace the @timestamp value with the log time. I am using logstash as a logs collector. This is not working for me and it still adds my local time stamp to the logs parsed. Here is my configurati… --- ## [Creating Elasticsearch Indexes from JSON with Elastic.Clients.Elasticsearch in .NET](https://discuss.elastic.co/t/creating-elasticsearch-indexes-from-json-with-elastic-clients-elasticsearch-in-net/357580)
**Author:** [@Jacques\_du\_Plessis](https://discuss.elastic.co/u/Jacques_du_Plessis)\ **Replies:** 2\ **Last updated:** [April 18, 2024, 8:16pm UTC](https://discuss.elastic.co/t/creating-elasticsearch-indexes-from-json-with-elastic-clients-elasticsearch-in-net/357580 "2024-04-18T20:16:50Z")
I'm currently updating my NEST client, which is deprecated, to the latest Elasticsearch client, Elastic.Clients.Elasticsearch. Previously, with NEST, I utilized the low-level client to create indexes from a JSON file con… --- ## [Unable to do lucene regex query ending with backslash](https://discuss.elastic.co/t/unable-to-do-lucene-regex-query-ending-with-backslash/357745)
**Author:** [@fortnite](https://discuss.elastic.co/u/fortnite)\ **Replies:** 0\ **Last updated:** [April 18, 2024, 7:56pm UTC](https://discuss.elastic.co/t/unable-to-do-lucene-regex-query-ending-with-backslash/357745 "2024-04-18T19:56:28Z")
Hello, It seems I am unable to combine queries if one of them ends with a backslash. This lucene query fails: field:(/a\\\\/ OR /b/) But these are just fine: field:(/a\\\\/) field:(/b/) field:(/a/ OR /b/) field:(/b/ OR … --- ## [Aggregation for Kibana Visuals](https://discuss.elastic.co/t/aggregation-for-kibana-visuals/357659)
**Author:** [@pixelberry](https://discuss.elastic.co/u/pixelberry)\ **Replies:** 3\ **Last updated:** [April 18, 2024, 7:46pm UTC](https://discuss.elastic.co/t/aggregation-for-kibana-visuals/357659 "2024-04-18T19:46:33Z")
Currently running into this issue when trying to create a boxplot. Thinking this is an aggregation problem but I don't know how to fix this. --- ## [How can I hunt down this Java error: "a fault occurred in an unsafe memory access operation"](https://discuss.elastic.co/t/how-can-i-hunt-down-this-java-error-a-fault-occurred-in-an-unsafe-memory-access-operation/357656)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 6\ **Last updated:** [April 18, 2024, 7:07pm UTC](https://discuss.elastic.co/t/how-can-i-hunt-down-this-java-error-a-fault-occurred-in-an-unsafe-memory-access-operation/357656 "2024-04-18T19:07:21Z")
I have a two-node Elasticsearch cluster with both nodes running 8.13.2. Since I added the second node to the cluster, the master node has been crashing regularly. The logs show: \[2024-04-17T15:57:09,258\]\[ERROR\]\[o.e.b.El… --- ## [Action \[indices:admin/auto\_create\] is unauthorized for user](https://discuss.elastic.co/t/action-indices-admin-auto-create-is-unauthorized-for-user/357742)
**Author:** [@Pooort](https://discuss.elastic.co/u/Pooort)\ **Replies:** 0\ **Last updated:** [April 18, 2024, 7:03pm UTC](https://discuss.elastic.co/t/action-indices-admin-auto-create-is-unauthorized-for-user/357742 "2024-04-18T19:03:47Z")
I'm trying to make \_sql request and get: action \[indices:admin/auto\_create\] is unauthorized for user \[some\_user\] with roles \[some\_role\], this action is granted by the index privileges \[auto\_configure,create\_index,manag… --- ## [Update timestamp of documents](https://discuss.elastic.co/t/update-timestamp-of-documents/357739)
**Author:** [@Abhishek\_Sen](https://discuss.elastic.co/u/Abhishek_Sen)\ **Replies:** 1\ **Last updated:** [April 18, 2024, 6:53pm UTC](https://discuss.elastic.co/t/update-timestamp-of-documents/357739 "2024-04-18T18:53:20Z")
I want to know when a particular document in an index was created, and when it was last modified. Is there a way or do we have to keep track of this manually? --- ## [How can I automate looping through an index and running a pipeline against each document?](https://discuss.elastic.co/t/how-can-i-automate-looping-through-an-index-and-running-a-pipeline-against-each-document/357719)
**Author:** [@Jingyi\_Wang](https://discuss.elastic.co/u/Jingyi_Wang)\ **Replies:** 1\ **Last updated:** [April 18, 2024, 6:38pm UTC](https://discuss.elastic.co/t/how-can-i-automate-looping-through-an-index-and-running-a-pipeline-against-each-document/357719 "2024-04-18T18:38:34Z")
I have index with documents like: \[ { "\_index" : "converted-user", "\_type" : "\_doc", "\_id" : "dTXSY0KNxU08jKDnZcc-nbkAAAAAAAAA", "\_score" : 1.0, "\_source" : { "use… --- ## [Failing to start issue](https://discuss.elastic.co/t/failing-to-start-issue/357735)
**Author:** [@Ali\_A](https://discuss.elastic.co/u/Ali_A)\ **Replies:** 1\ **Last updated:** [April 18, 2024, 6:05pm UTC](https://discuss.elastic.co/t/failing-to-start-issue/357735 "2024-04-18T18:05:07Z")
everything was working fine until I changed the IP for my virtual machine, when I tried to open the localhost it was saying kibana server is not ready yet, after that I tried some solutions but ended up facing this frus… --- ## [Searchable snapshots how it works?](https://discuss.elastic.co/t/searchable-snapshots-how-it-works/357674)
**Author:** [@Aliya\_Khalel](https://discuss.elastic.co/u/Aliya_Khalel)\ **Replies:** 4\ **Last updated:** [April 18, 2024, 3:38pm UTC](https://discuss.elastic.co/t/searchable-snapshots-how-it-works/357674 "2024-04-18T15:38:54Z")
I'm new at Elastic and I need help with understanding how searchable snapshots works. we planing a cluster with 2 hot and 2 cold nodes on prem. In hot we plan to store data 30 days and then move to cold and use searc… --- ## [Can multiple index-templates from diferent metricbeats cohexist?](https://discuss.elastic.co/t/can-multiple-index-templates-from-diferent-metricbeats-cohexist/357721)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [April 18, 2024, 2:38pm UTC](https://discuss.elastic.co/t/can-multiple-index-templates-from-diferent-metricbeats-cohexist/357721 "2024-04-18T14:38:22Z")
Hello, I am reviewing a client’s cluster and I noticed that it has several index templates from different versions of Metricbeat: metricbeat-7.17.13 metricbeat-7.17.5 metricbeat-7.17.9 Some metrics come with values t… --- ## [Filebeat with container type input uses image digest instead of tag (or both) when sending the logs](https://discuss.elastic.co/t/filebeat-with-container-type-input-uses-image-digest-instead-of-tag-or-both-when-sending-the-logs/357687)
**Author:** [@ppetrics](https://discuss.elastic.co/u/ppetrics)\ **Replies:** 1\ **Last updated:** [April 18, 2024, 2:28pm UTC](https://discuss.elastic.co/t/filebeat-with-container-type-input-uses-image-digest-instead-of-tag-or-both-when-sending-the-logs/357687 "2024-04-18T14:28:09Z")
Hi! We are facing an issue with pod logs collected from k8s via Filebeat. The field "container.image.name" only contains the digest, the tag is missing. Not sure wether its a bug, or inteded feature, but we would like… --- ## [Logstash high load and CPU usage](https://discuss.elastic.co/t/logstash-high-load-and-cpu-usage/357079)
**Author:** [@pk92](https://discuss.elastic.co/u/pk92)\ **Replies:** 8\ **Last updated:** [April 18, 2024, 1:42pm UTC](https://discuss.elastic.co/t/logstash-high-load-and-cpu-usage/357079 "2024-04-18T13:42:30Z")
Hi, I am running an Elastic Stack with multiple Logstash servers in different networks to aggregate, filter and forward the logs. For some time now I have the problem that some of these Logstash nodes regularly have a v… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=258) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=260)