# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=262 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 263 --- ## [Elastic Agent Android](https://discuss.elastic.co/t/elastic-agent-android/357302)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 1\ **Last updated:** [April 16, 2024, 8:25am UTC](https://discuss.elastic.co/t/elastic-agent-android/357302 "2024-04-16T08:25:32Z")
Hey there, My name is Martin and I am a security engineer that had a bit too much free time....so I made a thing: It's called it Elastic Agent Android and it's a way to finally add your Android mobile devices into Flee… --- ## [When do we need dedicated coordinating node?](https://discuss.elastic.co/t/when-do-we-need-dedicated-coordinating-node/357473)
**Author:** [@Dylan\_Juan](https://discuss.elastic.co/u/Dylan_Juan)\ **Replies:** 5\ **Last updated:** [April 16, 2024, 8:21am UTC](https://discuss.elastic.co/t/when-do-we-need-dedicated-coordinating-node/357473 "2024-04-16T08:21:24Z")
Hi everyone, we're currenty facing an issue when we want to deploy our elasticstack deployment. I'm just wondering when do we need dedicated coordinating node, because as i search across elasticsearch documentation ther… --- ## [Upgrade docker elk-stack from 7.14.X to 8.13.2](https://discuss.elastic.co/t/upgrade-docker-elk-stack-from-7-14-x-to-8-13-2/357487)
**Author:** [@Aviel\_Bashari](https://discuss.elastic.co/u/Aviel_Bashari)\ **Replies:** 1\ **Last updated:** [April 16, 2024, 8:18am UTC](https://discuss.elastic.co/t/upgrade-docker-elk-stack-from-7-14-x-to-8-13-2/357487 "2024-04-16T08:18:22Z")
Hi, I installed elk-stack using docker-compose with version 7.14.1 I want to upgrade my stack to 8.13.2. what are the steps that I need to do? is it enough to change the version in my compose file and rebuild the imag… --- ## [Cannot access kibana from browser](https://discuss.elastic.co/t/cannot-access-kibana-from-browser/356234)
**Author:** [@Paras\_Madaan](https://discuss.elastic.co/u/Paras_Madaan)\ **Replies:** 6\ **Last updated:** [April 16, 2024, 8:06am UTC](https://discuss.elastic.co/t/cannot-access-kibana-from-browser/356234 "2024-04-16T08:06:01Z")
Trying to connect kibana (7.15.2) with Elasticsearch version 7.15.2 i have setup a cluster with 3 master nodes 2 data nodes(ebs attached) elasticsearch config for 1 of the master node (elasticsearch.yml) cluster.name:… --- ## [File input plugin , read file between to date using ignore older](https://discuss.elastic.co/t/file-input-plugin-read-file-between-to-date-using-ignore-older/357485)
**Author:** [@Leo23](https://discuss.elastic.co/u/Leo23)\ **Replies:** 0\ **Last updated:** [April 16, 2024, 8:05am UTC](https://discuss.elastic.co/t/file-input-plugin-read-file-between-to-date-using-ignore-older/357485 "2024-04-16T08:05:29Z")
Hello, i want to read file in logstash which are been modify between 80 and 50 weeks ago. How can I do that? input { file { path =\> "x./y/\*.log" start\_position =\> "beginning" ignore\_older =\>… --- ## [Kibana port listening after so much time](https://discuss.elastic.co/t/kibana-port-listening-after-so-much-time/356058)
**Author:** [@athul\_prasad](https://discuss.elastic.co/u/athul_prasad)\ **Replies:** 3\ **Last updated:** [April 16, 2024, 8:03am UTC](https://discuss.elastic.co/t/kibana-port-listening-after-so-much-time/356058 "2024-04-16T08:03:33Z")
Hi , iam new to ELK whenever i restart my kibana service it takes so much time to listen to its port.after service restart i checked that if port is listening or not it tkaes more than 15 min to listen ,could anyone hel… --- ## [Change the column name of a table on a dashboard](https://discuss.elastic.co/t/change-the-column-name-of-a-table-on-a-dashboard/356245)
**Author:** [@Mulee](https://discuss.elastic.co/u/Mulee)\ **Replies:** 3\ **Last updated:** [April 16, 2024, 7:46am UTC](https://discuss.elastic.co/t/change-the-column-name-of-a-table-on-a-dashboard/356245 "2024-04-16T07:46:19Z")
Hello, I wanted to customize the column name of a table on a dashboard. Eventhough I gave the column titel "update\_at", here "per day" came up automatically, which is the time interval of this column. However what I … --- ## [RabbitMQ output resume after reaching queue limit](https://discuss.elastic.co/t/rabbitmq-output-resume-after-reaching-queue-limit/355754)
**Author:** [@IvanRibakov](https://discuss.elastic.co/u/IvanRibakov)\ **Replies:** 3\ **Last updated:** [April 16, 2024, 7:43am UTC](https://discuss.elastic.co/t/rabbitmq-output-resume-after-reaching-queue-limit/355754 "2024-04-16T07:43:09Z")
I'm trying to generate backpressure from RabbitMQ to Logstash. The behaviour that I'm after is for Logstash to stop publishing if the queue is full and resume publishing once it freed up some slots. I've configured Rabb… --- ## [Kibana Login Issues](https://discuss.elastic.co/t/kibana-login-issues/357362)
**Author:** [@Rohan\_Nayak](https://discuss.elastic.co/u/Rohan_Nayak)\ **Replies:** 4\ **Last updated:** [April 16, 2024, 6:39am UTC](https://discuss.elastic.co/t/kibana-login-issues/357362 "2024-04-16T06:39:30Z")
I'm having trouble logging into Kibana. Previously, I was able to log in without any problems. I've entered all of my credentials correctly and have even tried using a different browser, but I still can't get in. --- ## [Timelion elasticsearch documentation](https://discuss.elastic.co/t/timelion-elasticsearch-documentation/357326)
**Author:** [@Rakrish](https://discuss.elastic.co/u/Rakrish)\ **Replies:** 4\ **Last updated:** [April 15, 2024, 9:38pm UTC](https://discuss.elastic.co/t/timelion-elasticsearch-documentation/357326 "2024-04-15T21:38:04Z")
Hello - Any good documentation reference for Kibana elastsearch timelion. Thx! --- ## [Reindex part of a datastream](https://discuss.elastic.co/t/reindex-part-of-a-datastream/357463)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 0\ **Last updated:** [April 15, 2024, 9:19pm UTC](https://discuss.elastic.co/t/reindex-part-of-a-datastream/357463 "2024-04-15T21:19:23Z")
I January I added a field to a datastream. I sent the type to integer as it was a number (but not a count). I recently realised that searches on that field were slow as were visualisation. I then made the mistake of c… --- ## [How to upload watcher in docker elastic search/Kibana?](https://discuss.elastic.co/t/how-to-upload-watcher-in-docker-elastic-search-kibana/357459)
**Author:** [@Ankita\_Mehta](https://discuss.elastic.co/u/Ankita_Mehta)\ **Replies:** 0\ **Last updated:** [April 15, 2024, 8:33pm UTC](https://discuss.elastic.co/t/how-to-upload-watcher-in-docker-elastic-search-kibana/357459 "2024-04-15T20:33:58Z")
I am uploading a custom watcher in Kibana. Now while using DevTools, its is acknowledging the json and everything is working fine: PUT \_watcher/watch/new\_test\_watcher { "trigger": { "schedule": { … --- ## [It is possible to use other stemmers for nonenglish languages?](https://discuss.elastic.co/t/it-is-possible-to-use-other-stemmers-for-nonenglish-languages/357456)
**Author:** [@udl](https://discuss.elastic.co/u/udl)\ **Replies:** 0\ **Last updated:** [April 15, 2024, 8:13pm UTC](https://discuss.elastic.co/t/it-is-possible-to-use-other-stemmers-for-nonenglish-languages/357456 "2024-04-15T20:13:13Z")
Well, I am working in a proyect with Spanish text, summing up, none of the stemmers that I have seen in the documentation for Spanish give me good results (only 2, snowball and the normal one), to give an example. { "… --- ## [How to determine best practice to deploy ES cluster](https://discuss.elastic.co/t/how-to-determine-best-practice-to-deploy-es-cluster/356604)
**Author:** [@Dylan\_Juan](https://discuss.elastic.co/u/Dylan_Juan)\ **Replies:** 2\ **Last updated:** [April 15, 2024, 7:42pm UTC](https://discuss.elastic.co/t/how-to-determine-best-practice-to-deploy-es-cluster/356604 "2024-04-15T19:42:06Z")
Hi everyone we're currently running ES version 7.10. Currently we only has 2 VM for powering this deployment (Master and Data Nodes) and we're seperating our nodes by using different port number on each virtual node. We… --- ## [Incorrect behaviour of fuzzing parameters with completion suggester](https://discuss.elastic.co/t/incorrect-behaviour-of-fuzzing-parameters-with-completion-suggester/357455)
**Author:** [@pigeon\_gcc](https://discuss.elastic.co/u/pigeon_gcc)\ **Replies:** 0\ **Last updated:** [April 15, 2024, 7:23pm UTC](https://discuss.elastic.co/t/incorrect-behaviour-of-fuzzing-parameters-with-completion-suggester/357455 "2024-04-15T19:23:08Z")
I use fuzzing in my quries to completion suggester. It seems like min\_length and fuzziness parameters of the query can't agree between each other. The parameters are described in the docs Example 1: "min\_length": 5, "f… --- ## [2 ESQL requests in one request](https://discuss.elastic.co/t/2-esql-requests-in-one-request/357453)
**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\ **Replies:** 0\ **Last updated:** [April 15, 2024, 6:52pm UTC](https://discuss.elastic.co/t/2-esql-requests-in-one-request/357453 "2024-04-15T18:52:05Z")
Hi all. Has anyone already dived into ES|QL? I'm interested in how to build two queries in one general query. To then calculate the % ratio based on the results of these queries. For example A/(B+A)\*100 A - is the … --- ## [Scheduler for reconciliation](https://discuss.elastic.co/t/scheduler-for-reconciliation/357451)
**Author:** [@ashish25](https://discuss.elastic.co/u/ashish25)\ **Replies:** 0\ **Last updated:** [April 15, 2024, 6:04pm UTC](https://discuss.elastic.co/t/scheduler-for-reconciliation/357451 "2024-04-15T18:04:59Z")
Hi, I am having 2 indices transaction and event. transaction doc: POST transaction/\_doc/1234 { "status": "Initiate", "payload": "data", "correlationId": "1234" } event doc: POST event/\_doc/1 { "eventStatus": … --- ## [Zoom on Kibana Dashboards](https://discuss.elastic.co/t/zoom-on-kibana-dashboards/357217)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 4\ **Last updated:** [April 15, 2024, 4:05pm UTC](https://discuss.elastic.co/t/zoom-on-kibana-dashboards/357217 "2024-04-15T16:05:57Z")
Hello, I tend to feel like there's not enough space to display visualizations on dashboard. I decreased my browser zoom to 75% and everything looks way better in terms of space. The 75% zoom does distort the text or mak… --- ## [Forcemerge of index with vectors takes long, many hours or forever](https://discuss.elastic.co/t/forcemerge-of-index-with-vectors-takes-long-many-hours-or-forever/356818)
**Author:** [@Yolga.Ai](https://discuss.elastic.co/u/Yolga.Ai)\ **Replies:** 2\ **Last updated:** [April 15, 2024, 4:05pm UTC](https://discuss.elastic.co/t/forcemerge-of-index-with-vectors-takes-long-many-hours-or-forever/356818 "2024-04-15T16:05:42Z")
I have two big problems where we try to index \>100mln ob documents with vector field: big problems with forcemerge in indices with dense\_vector field inside it. Sometimes it takes to forcmerge from 15-20 segments to 5 … --- ## [Unable to install Elastic-search on SLES12 SP5 linux server](https://discuss.elastic.co/t/unable-to-install-elastic-search-on-sles12-sp5-linux-server/357444)
**Author:** [@sjothili](https://discuss.elastic.co/u/sjothili)\ **Replies:** 0\ **Last updated:** [April 15, 2024, 2:48pm UTC](https://discuss.elastic.co/t/unable-to-install-elastic-search-on-sles12-sp5-linux-server/357444 "2024-04-15T14:48:16Z")
Hi, I am trying to install Elastic search service on SLES12 SP5 server using zypper. I am following this link to create repo and run the 'zypper' cmd to install the elasticsearch service. But the installation fails as i… --- ## [How to update filebeat windows client without processing already processed logs?](https://discuss.elastic.co/t/how-to-update-filebeat-windows-client-without-processing-already-processed-logs/357417)
**Author:** [@elk1985](https://discuss.elastic.co/u/elk1985)\ **Replies:** 0\ **Last updated:** [April 15, 2024, 11:02am UTC](https://discuss.elastic.co/t/how-to-update-filebeat-windows-client-without-processing-already-processed-logs/357417 "2024-04-15T11:02:15Z")
Hello. I have lately updated my cluster to newer version. I have also updated Filebeat clients to same version as the cluster. Originally I was installing it from zip file using PowerShell script. How to update filebe… --- ## [Watcher - Only Alert Once Based on Specific Field](https://discuss.elastic.co/t/watcher-only-alert-once-based-on-specific-field/357004)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 3\ **Last updated:** [April 15, 2024, 2:10pm UTC](https://discuss.elastic.co/t/watcher-only-alert-once-based-on-specific-field/357004 "2024-04-15T14:10:53Z")
Hello, So I understand scheduling a csv report is only possible currently with Watcher. My use case is I want to send a csv report based on user.name when a condition has been met. The issue is the condition will be m… --- ## [Does anyone know if the doc \_id field has to follow a standard or pattern?](https://discuss.elastic.co/t/does-anyone-know-if-the-doc-id-field-has-to-follow-a-standard-or-pattern/357178)
**Author:** [@Diego\_Sanchez](https://discuss.elastic.co/u/Diego_Sanchez)\ **Replies:** 1\ **Last updated:** [April 15, 2024, 1:56pm UTC](https://discuss.elastic.co/t/does-anyone-know-if-the-doc-id-field-has-to-follow-a-standard-or-pattern/357178 "2024-04-15T13:56:00Z")
We have a system that uses the path of the URL as doc ID. Everything ran ok until this week when we received a couple of bad requests and transportation errors coming from URLs like this one ../../../example or .. We use… --- ## [Nested Vector Search -\> Retrieve k chunks](https://discuss.elastic.co/t/nested-vector-search-retrieve-k-chunks/357311)
**Author:** [@anuj99](https://discuss.elastic.co/u/anuj99)\ **Replies:** 1\ **Last updated:** [April 15, 2024, 1:52pm UTC](https://discuss.elastic.co/t/nested-vector-search-retrieve-k-chunks/357311 "2024-04-15T13:52:14Z")
Following is my use case to store data in Elasticsearch for workspace search connecting different data sources. Text from file is chunked and stored in different document used to vector and keyword search chunk. Howeve… --- ## [How can I save this aggregated results under a new index](https://discuss.elastic.co/t/how-can-i-save-this-aggregated-results-under-a-new-index/357299)
**Author:** [@Jingyi\_Wang](https://discuss.elastic.co/u/Jingyi_Wang)\ **Replies:** 6\ **Last updated:** [April 15, 2024, 1:36pm UTC](https://discuss.elastic.co/t/how-can-i-save-this-aggregated-results-under-a-new-index/357299 "2024-04-15T13:36:32Z")
I run the aggregation script in elastic dev tool: GET copper\_scan\_username\_index,fibre\_scan\_username\_index/\_search { "size": 0, "aggs": { "unique\_username": { "terms": { "field": "username", … --- ## [Get Cluster Indexing Rate/Second via Rest API](https://discuss.elastic.co/t/get-cluster-indexing-rate-second-via-rest-api/357296)
**Author:** [@jscheitel](https://discuss.elastic.co/u/jscheitel)\ **Replies:** 1\ **Last updated:** [April 15, 2024, 1:23pm UTC](https://discuss.elastic.co/t/get-cluster-indexing-rate-second-via-rest-api/357296 "2024-04-15T13:23:49Z")
Hello - we have cluster monitoring enabled, and can see the Search and Indexing Rates and Latencies graphs on the Cluster Overview page. We need to query some indication of indexing rate or ingestion rate for display in… --- ## [Search docs not return 0 hits](https://discuss.elastic.co/t/search-docs-not-return-0-hits/357309)
**Author:** [@JPXotox](https://discuss.elastic.co/u/JPXotox)\ **Replies:** 9\ **Last updated:** [April 15, 2024, 1:23pm UTC](https://discuss.elastic.co/t/search-docs-not-return-0-hits/357309 "2024-04-15T13:23:09Z")
Hi, I´m trying to search some docs, in Kibana using discover i have 2 hits with the following timestamp: @timestamp Apr 3, 2024 @ 03:27:23.000 and Apr 3, 2024 @ 03:26:56.000 for a doc with a field "sender": "TEED-NEC45… --- ## [Want to highlight count for today If it increased by 25% of average count of last week](https://discuss.elastic.co/t/want-to-highlight-count-for-today-if-it-increased-by-25-of-average-count-of-last-week/357279)
**Author:** [@2328943\_dc](https://discuss.elastic.co/u/2328943_dc)\ **Replies:** 1\ **Last updated:** [April 15, 2024, 1:01pm UTC](https://discuss.elastic.co/t/want-to-highlight-count-for-today-if-it-increased-by-25-of-average-count-of-last-week/357279 "2024-04-15T13:01:57Z")
Hi, We have created two different visualization in Kibana . In first visualization i.e. Critical Policy Bazar Average Count for last 7 days : we are showing whole week counts average for each hour as attached in below … --- ## [Prefix query returns results with empty value](https://discuss.elastic.co/t/prefix-query-returns-results-with-empty-value/357432)
**Author:** [@maheshkumar\_janakira](https://discuss.elastic.co/u/maheshkumar_janakira)\ **Replies:** 0\ **Last updated:** [April 15, 2024, 1:01pm UTC](https://discuss.elastic.co/t/prefix-query-returns-results-with-empty-value/357432 "2024-04-15T13:01:19Z")
I am running a simple prefix query against a field , the query returns results even thought I dont send any values (Empty input value) returns everything in the index, How to prevent this from happening? . If there is n… --- ## [KnnQuery in java client](https://discuss.elastic.co/t/knnquery-in-java-client/356645)
**Author:** [@aj\_stor](https://discuss.elastic.co/u/aj_stor)\ **Replies:** 5\ **Last updated:** [April 15, 2024, 11:36am UTC](https://discuss.elastic.co/t/knnquery-in-java-client/356645 "2024-04-15T11:36:30Z")
I am trying to execute a KnnQuery (Knn query | Elasticsearch Guide \[8.13\] | Elastic) in my java application (So not the knn search: k-nearest neighbor (kNN) search | Elasticsearch Guide \[8.13\] | Elastic). When you use … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=261) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=263)