# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=260 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 261 --- ## [Current Date in watcher](https://discuss.elastic.co/t/current-date-in-watcher/357681)
**Author:** [@ashish25](https://discuss.elastic.co/u/ashish25)\ **Replies:** 6\ **Last updated:** [April 18, 2024, 12:17pm UTC](https://discuss.elastic.co/t/current-date-in-watcher/357681 "2024-04-18T12:17:22Z")
Hi, I have below index which will create everyday - POST /test\_index-2024-04-17/\_doc { "field\_to\_check": "old\_value", "field\_to\_update": "old\_value" } POST /test\_index-2024-04-18/\_doc { "field\_to\_check": "old\_va… --- ## [org.janusgraph.diskstorage.es.ElasticSearchIndex.checkClusterHealth](https://discuss.elastic.co/t/org-janusgraph-diskstorage-es-elasticsearchindex-checkclusterhealth/357693)
**Author:** [@shivam\_raj](https://discuss.elastic.co/u/shivam_raj)\ **Replies:** 2\ **Last updated:** [April 18, 2024, 11:35am UTC](https://discuss.elastic.co/t/org-janusgraph-diskstorage-es-elasticsearchindex-checkclusterhealth/357693 "2024-04-18T11:35:55Z")
org.janusgraph.diskstorage.es.ElasticSearchIndex.checkClusterHealth(ElasticSearchIndex.java:412) URI \[/\_cluster/health?timeout=30s&wait\_for\_status=yellow\], status line \[HTTP/1.1 401 Unauthorized\] {"error":{"root\_cause"… --- ## [Closed indices are included in snapshot policy](https://discuss.elastic.co/t/closed-indices-are-included-in-snapshot-policy/357697)
**Author:** [@vishalk663](https://discuss.elastic.co/u/vishalk663)\ **Replies:** 1\ **Last updated:** [April 18, 2024, 11:34am UTC](https://discuss.elastic.co/t/closed-indices-are-included-in-snapshot-policy/357697 "2024-04-18T11:34:51Z")
We are using the elasticsearch 7.13.3 version using eck operator in our openshift cluster. When we are using below snapshot policy it did not include the closed indices in a snapshot. PUT \_slm/policy/elastic-snapshot {… --- ## [Dynamic mapping of dense\_vector](https://discuss.elastic.co/t/dynamic-mapping-of-dense-vector/357559)
**Author:** [@dhrchatt](https://discuss.elastic.co/u/dhrchatt)\ **Replies:** 6\ **Last updated:** [April 18, 2024, 9:42am UTC](https://discuss.elastic.co/t/dynamic-mapping-of-dense-vector/357559 "2024-04-18T09:42:19Z")
I have a float which I want to map to dense\_vector type field. I want to use dynamic mapping but it is dynamically always mapped to float type. Is there a way to map to dense\_vector type when I am using dynamic mapping f… --- ## [Custom labels not used in CSV export](https://discuss.elastic.co/t/custom-labels-not-used-in-csv-export/357542)
**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\ **Replies:** 3\ **Last updated:** [April 18, 2024, 7:57am UTC](https://discuss.elastic.co/t/custom-labels-not-used-in-csv-export/357542 "2024-04-18T07:57:03Z")
Title pretty much says it all. In Kibana, have some custom labels in a Data View. In the results from a search the column headers use the custom labels. Export to CSV those results and the column names are the origina… --- ## [Elastic Client 8.x Histogram Extended Bounds](https://discuss.elastic.co/t/elastic-client-8-x-histogram-extended-bounds/357664)
**Author:** [@Kyle\_Manuel](https://discuss.elastic.co/u/Kyle_Manuel)\ **Replies:** 1\ **Last updated:** [April 18, 2024, 6:43am UTC](https://discuss.elastic.co/t/elastic-client-8-x-histogram-extended-bounds/357664 "2024-04-18T06:43:04Z")
I'm using the Elastic.Clients.Elasticsearch NuGet package to migrate away from our existing Nest implementations. I have been unable to find histogram in the new docs or source. We have searches that utilize the histog… --- ## [Parsing XML attributes](https://discuss.elastic.co/t/parsing-xml-attributes/357665)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 0\ **Last updated:** [April 18, 2024, 4:09am UTC](https://discuss.elastic.co/t/parsing-xml-attributes/357665 "2024-04-18T04:09:39Z")
Hi, I'm hoping there's a simple solution to this. I need to parse the attribute name and their associated values from the XML below: \ \127.127.127.127\ \ **Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\ **Replies:** 2\ **Last updated:** [April 18, 2024, 1:46am UTC](https://discuss.elastic.co/t/entreprise-elastic-license/357585 "2024-04-18T01:46:26Z") Hello, I received the Elastic Enterprise license with two JSON files (production environment and non-production environment). So, I installed the production license in my production environment and the other one in my l… --- ## [Where's the docs for us "mere mortals"?](https://discuss.elastic.co/t/wheres-the-docs-for-us-mere-mortals/357660)
**Author:** [@flatlander](https://discuss.elastic.co/u/flatlander)\ **Replies:** 1\ **Last updated:** [April 17, 2024, 11:36pm UTC](https://discuss.elastic.co/t/wheres-the-docs-for-us-mere-mortals/357660 "2024-04-17T23:36:11Z")
Hello, First time poster. Please don't bite my head off, or tell me to Let Me Google That For You! I've genuinely struggled finding a good source of documentation for ingest pipeline syntax that's actually helpful to … --- ## [Index in filebeat.yml doesn't match index in elasticsearch dataview](https://discuss.elastic.co/t/index-in-filebeat-yml-doesnt-match-index-in-elasticsearch-dataview/357543)
**Author:** [@Vickistan](https://discuss.elastic.co/u/Vickistan)\ **Replies:** 3\ **Last updated:** [April 17, 2024, 10:38pm UTC](https://discuss.elastic.co/t/index-in-filebeat-yml-doesnt-match-index-in-elasticsearch-dataview/357543 "2024-04-17T22:38:15Z")
I added filebeat to a Linux Mint system in an attempt to upload logs from it to my elk stack. The index is set to this in filebeat.yml: index: "vicki-desktop-filestream" When I started filebeat, I guess it created the … --- ## [Disabling Elasticsearch Index compression version 7.10+](https://discuss.elastic.co/t/disabling-elasticsearch-index-compression-version-7-10/357648)
**Author:** [@tommyd](https://discuss.elastic.co/u/tommyd)\ **Replies:** 6\ **Last updated:** [April 17, 2024, 10:03pm UTC](https://discuss.elastic.co/t/disabling-elasticsearch-index-compression-version-7-10/357648 "2024-04-17T22:03:11Z")
Hi, I am new to Elasticsearch and I have a question around Elasticsearch compression. I know it uses the codec default and best\_compression when creating an index but since my backend storage already provides LZ4 compre… --- ## [Set higher index.priority for high ingest throughput indices?](https://discuss.elastic.co/t/set-higher-index-priority-for-high-ingest-throughput-indices/357282)
**Author:** [@tronboto](https://discuss.elastic.co/u/tronboto)\ **Replies:** 2\ **Last updated:** [April 17, 2024, 9:33pm UTC](https://discuss.elastic.co/t/set-higher-index-priority-for-high-ingest-throughput-indices/357282 "2024-04-17T21:33:32Z")
Hey, Does anyone know if it makes sense to set a higher index.priority value for indices which have a high ingest throughput? My thinking is that during a rolling restart or just some node maintenance, we don't want to… --- ## [Http\_compression Set 'compression\_level' instead](https://discuss.elastic.co/t/http-compression-set-compression-level-instead/356419)
**Author:** [@mdurvesh](https://discuss.elastic.co/u/mdurvesh)\ **Replies:** 5\ **Last updated:** [April 17, 2024, 9:17pm UTC](https://discuss.elastic.co/t/http-compression-set-compression-level-instead/356419 "2024-04-17T21:17:24Z")
"http\_compression" set in elasticsearch. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Set 'compression\_level' instead. Getting error after updating compression\_l… --- ## [Update document and concatenate field with Logstash](https://discuss.elastic.co/t/update-document-and-concatenate-field-with-logstash/357642)
**Author:** [@CDBSSG](https://discuss.elastic.co/u/CDBSSG)\ **Replies:** 1\ **Last updated:** [April 17, 2024, 9:02pm UTC](https://discuss.elastic.co/t/update-document-and-concatenate-field-with-logstash/357642 "2024-04-17T21:02:14Z")
Hello, We would like to update a document using Logstash but one of our field should be concatenante and not replace by the new one. Example, if we have two lines to insert : {"state" =\> "created", "data" =\> "firstDat… --- ## [Elastic Agent exclude\_files error parsing regexp invalid nested repetition operator](https://discuss.elastic.co/t/elastic-agent-exclude-files-error-parsing-regexp-invalid-nested-repetition-operator/357649)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 1\ **Last updated:** [April 17, 2024, 7:30pm UTC](https://discuss.elastic.co/t/elastic-agent-exclude-files-error-parsing-regexp-invalid-nested-repetition-operator/357649 "2024-04-17T19:30:16Z")
When using the exclude\_files processor I'm seeing the error: \[elastic\_agent\]\[error\] Unit state changed (CONFIGURING-\>FAILED): error parsing regexp: invalid nested repetition operator: \*\* accessing 'exclude\_files.0' T… --- ## [How to create SubAggregation in new JAVA API Client](https://discuss.elastic.co/t/how-to-create-subaggregation-in-new-java-api-client/357529)
**Author:** [@Ansh\_Kumar](https://discuss.elastic.co/u/Ansh_Kumar)\ **Replies:** 1\ **Last updated:** [April 17, 2024, 4:30pm UTC](https://discuss.elastic.co/t/how-to-create-subaggregation-in-new-java-api-client/357529 "2024-04-17T16:30:47Z")
Hii community , upgrading our application from JavaAPIClient version 7.x to 8.10 , aggregation is not working Neither i am able to find suitable example which i can consider in our application we are creating aggrega… --- ## [No such input type exist: 'etw'](https://discuss.elastic.co/t/no-such-input-type-exist-etw/357621)
**Author:** [@oed-brosentd](https://discuss.elastic.co/u/oed-brosentd)\ **Replies:** 1\ **Last updated:** [April 17, 2024, 3:54pm UTC](https://discuss.elastic.co/t/no-such-input-type-exist-etw/357621 "2024-04-17T15:54:00Z")
Hey there, I was trying to test out the new ETW input in filebeat, but am only getting the following error message: {"log.level":"error","@timestamp":"2024-04-17T14:37:11.214+0200","log.origin":{"function":"github.com/… --- ## [Setting Up Latest Elasticsearch Cluster](https://discuss.elastic.co/t/setting-up-latest-elasticsearch-cluster/356992)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 2\ **Last updated:** [April 17, 2024, 3:31pm UTC](https://discuss.elastic.co/t/setting-up-latest-elasticsearch-cluster/356992 "2024-04-17T15:31:30Z")
Hello, I'm working on setting up a completely new ES Cluster. I will be setting up from scratch so we won't be "Upgrading" the older "Test" cluster we have (Version 6). The data is stored on SAN storage, so we will ju… --- ## [How create agent policy for openshift env without integration](https://discuss.elastic.co/t/how-create-agent-policy-for-openshift-env-without-integration/357638)
**Author:** [@Fantaunix](https://discuss.elastic.co/u/Fantaunix)\ **Replies:** 0\ **Last updated:** [April 17, 2024, 2:55pm UTC](https://discuss.elastic.co/t/how-create-agent-policy-for-openshift-env-without-integration/357638 "2024-04-17T14:55:41Z")
Hi all, i saw there is not an agent integration for openshift, so could you suggest how to create a policy for that env? i tried to import that logs with a pipeline but that logs are not readable or not in json format,… --- ## [Parsing Exception on Mapped Type Object Enabled False](https://discuss.elastic.co/t/parsing-exception-on-mapped-type-object-enabled-false/357633)
**Author:** [@maxfriz](https://discuss.elastic.co/u/maxfriz)\ **Replies:** 0\ **Last updated:** [April 17, 2024, 2:15pm UTC](https://discuss.elastic.co/t/parsing-exception-on-mapped-type-object-enabled-false/357633 "2024-04-17T14:15:42Z")
One of our fields in our field mapping is mapped as type object with enabled set to false. It is our understanding this is stored in \_source, but not parsed or indexed. "payload": { "type": "object", "enabled": false },… --- ## [Accessing Security Alert Flat Field in Watcher Action Body fails](https://discuss.elastic.co/t/accessing-security-alert-flat-field-in-watcher-action-body-fails/357632)
**Author:** [@CC-89829](https://discuss.elastic.co/u/CC-89829)\ **Replies:** 0\ **Last updated:** [April 17, 2024, 2:15pm UTC](https://discuss.elastic.co/t/accessing-security-alert-flat-field-in-watcher-action-body-fails/357632 "2024-04-17T14:15:27Z")
I have a more complex issue. With a watcher checking the alert index for assigned and open alerts I want to forward the alert id, index and assignee id to an external webhook. The issue is that I can't resolve the indiv… --- ## [ElasticSearch And Kibana With SSL Connect Refused(Kibana always connect to 127.0.0.1:9200)](https://discuss.elastic.co/t/elasticsearch-and-kibana-with-ssl-connect-refused-kibana-always-connect-to-127-0-0-1-9200/357627)
**Author:** [@LAIguapi](https://discuss.elastic.co/u/LAIguapi)\ **Replies:** 0\ **Last updated:** [April 17, 2024, 2:01pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-with-ssl-connect-refused-kibana-always-connect-to-127-0-0-1-9200/357627 "2024-04-17T14:01:10Z")
I built my ES and Kibana through docker-compose File like this And my question is: my Kibana service cant connect to my Es, whether I change my docker-compose file or kibana.yml , kibana always connect to 127.0.0.1:9200 … --- ## [job for elasticsearch.service failed because of unavailable resources or another system error.](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-of-unavailable-resources-or-another-system-error/357625)
**Author:** [@QingHao](https://discuss.elastic.co/u/QingHao)\ **Replies:** 0\ **Last updated:** [April 17, 2024, 2:01pm UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-of-unavailable-resources-or-another-system-error/357625 "2024-04-17T14:01:00Z")
--- ## [Aggregation: Custom score for ordering via sub aggregation](https://discuss.elastic.co/t/aggregation-custom-score-for-ordering-via-sub-aggregation/356663)
**Author:** [@Martin\_Berlin](https://discuss.elastic.co/u/Martin_Berlin)\ **Replies:** 1\ **Last updated:** [April 17, 2024, 1:21pm UTC](https://discuss.elastic.co/t/aggregation-custom-score-for-ordering-via-sub-aggregation/356663 "2024-04-17T13:21:56Z")
I have an Array of Objects with keywords: "keywords":\[ { "name":"Testing Equipment", "score":0.999 }, { "name":"Film Shrinkage Tester", "score":0.666 }, { "name":"Universal T… --- ## [Ingesting data from laptop through Logstash: Nothing happens](https://discuss.elastic.co/t/ingesting-data-from-laptop-through-logstash-nothing-happens/357617)
**Author:** [@rvenkat](https://discuss.elastic.co/u/rvenkat)\ **Replies:** 1\ **Last updated:** [April 17, 2024, 1:03pm UTC](https://discuss.elastic.co/t/ingesting-data-from-laptop-through-logstash-nothing-happens/357617 "2024-04-17T13:03:56Z")
I want to use OpenSearch to analyze data. I have started OpenSearch through docker-compose, and it seems to be running fine as per the messages I see in console. I have configured the logstash.conf file with input point… --- ## [Cannot see the production cluster data on the monitoring cluster](https://discuss.elastic.co/t/cannot-see-the-production-cluster-data-on-the-monitoring-cluster/357422)
**Author:** [@My\_Google\_Account](https://discuss.elastic.co/u/My_Google_Account)\ **Replies:** 13\ **Last updated:** [April 17, 2024, 12:52pm UTC](https://discuss.elastic.co/t/cannot-see-the-production-cluster-data-on-the-monitoring-cluster/357422 "2024-04-17T12:52:48Z")
Hi there! I've 2 elk clusters version 7.6.1 "Basic license", 1st -production which have 3nodes (elastic, kibana, logstash and metricbeat agents on each node) and 2nd - monitoring cluster which have 1 node (elastic, kiban… --- ## [Using lookup fields in Runtime mappings with nested fields](https://discuss.elastic.co/t/using-lookup-fields-in-runtime-mappings-with-nested-fields/357612)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 0\ **Last updated:** [April 17, 2024, 12:40pm UTC](https://discuss.elastic.co/t/using-lookup-fields-in-runtime-mappings-with-nested-fields/357612 "2024-04-17T12:40:10Z")
I saw in the documentation that there is support for lookup type in runtime\_mappings . I have tried it, and it seems to work. However, I have the following issue: I have some nested field called members , and I would … --- ## [Failed to connect to backoff(elasticsearch(http://172.18.158.52:9200))](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-172-18-158-52-9200/357433)
**Author:** [@Chadi\_SHWADA](https://discuss.elastic.co/u/Chadi_SHWADA)\ **Replies:** 5\ **Last updated:** [April 17, 2024, 11:59am UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-172-18-158-52-9200/357433 "2024-04-17T11:59:21Z")
I currently have two servers which are as follows: 172.18.158.52 where I installed elasticsearch and kibana 172.18.158.49 where I installed filebeat Filebeat is able to recover the data except that I have this error i… --- ## [Default value for number of workers missing in Logstash output documentation](https://discuss.elastic.co/t/default-value-for-number-of-workers-missing-in-logstash-output-documentation/357608)
**Author:** [@bunste](https://discuss.elastic.co/u/bunste)\ **Replies:** 0\ **Last updated:** [April 17, 2024, 11:43am UTC](https://discuss.elastic.co/t/default-value-for-number-of-workers-missing-in-logstash-output-documentation/357608 "2024-04-17T11:43:09Z")
Do I understand correctly that the number of workers for a Logstash output is 1 by default? Let's take Filebeat as an example: The default value is documented for the Elasticsearch output: The default value is 1 . … --- ## [Archiving of Index data](https://discuss.elastic.co/t/archiving-of-index-data/357571)
**Author:** [@amjad](https://discuss.elastic.co/u/amjad)\ **Replies:** 3\ **Last updated:** [April 17, 2024, 11:12am UTC](https://discuss.elastic.co/t/archiving-of-index-data/357571 "2024-04-17T11:12:05Z")
Hi All, Is there any option to archive the document level data of the Index which is created in the cloud level, Please guide me if any possibility is there to archive the data in cloud level. Thanks in advance. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=259) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=261)