# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=264

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 265

---

## [Not getting output on Kibana while can see logs on logstash log screen on Docker](https://discuss.elastic.co/t/not-getting-output-on-kibana-while-can-see-logs-on-logstash-log-screen-on-docker/355519)

<div class="topic-metadata">

**Author:** [@LeetLee](https://discuss.elastic.co/u/LeetLee)\
**Replies:** 3\
**Last updated:** [April 12, 2024, 5:58pm UTC](https://discuss.elastic.co/t/not-getting-output-on-kibana-while-can-see-logs-on-logstash-log-screen-on-docker/355519 "2024-04-12T17:58:38Z")

</div>

I'm trying to send Airflow logs to Elasticsearch for monitoring on Kibana using Logstash and Filebeat. However, although I can see logs on the Docker Logstash log screen, those logs cannot be seen on Elasticsearch and Ki…

---

## [Cluster Health Yellow - "last\_allocation\_status" : "no\_attempt"](https://discuss.elastic.co/t/cluster-health-yellow-last-allocation-status-no-attempt/357167)

<div class="topic-metadata">

**Author:** [@joelswiatek](https://discuss.elastic.co/u/joelswiatek)\
**Replies:** 8\
**Last updated:** [April 12, 2024, 5:36pm UTC](https://discuss.elastic.co/t/cluster-health-yellow-last-allocation-status-no-attempt/357167 "2024-04-12T17:36:35Z")

</div>

Hi, we run several large Elasticsearch Clusters (v8.12.1) in Kubernetes (AWS EKS). We've had several clusters fail to assign a single replica shard during rolling restarts of datanodes. (There was a similar post for v8.8…

---

## [Type "dense\_vector" not set on properties](https://discuss.elastic.co/t/type-dense-vector-not-set-on-properties/357211)

<div class="topic-metadata">

**Author:** [@wnmills3](https://discuss.elastic.co/u/wnmills3)\
**Replies:** 1\
**Last updated:** [April 12, 2024, 5:27pm UTC](https://discuss.elastic.co/t/type-dense-vector-not-set-on-properties/357211 "2024-04-12T17:27:28Z")

</div>

I've tried defining a passage\_embedding using both: "passage\_embedding": { "type": "dense\_vector", "dims": 768, "similarity": "cosine", "index": "true" }, and as follows: "passage\_embedding.pr…

---

## [Alerting on no data with a specific rule](https://discuss.elastic.co/t/alerting-on-no-data-with-a-specific-rule/357306)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 0\
**Last updated:** [April 12, 2024, 3:38pm UTC](https://discuss.elastic.co/t/alerting-on-no-data-with-a-specific-rule/357306 "2024-04-12T15:38:39Z")

</div>

Hi, Im monitoring remote Postgres and MSSql databases with metricbeat, metricbeat is installed in a local server that get data from the remote sources and need to alert when I dont get data. In the module configuratio…

---

## [How to run Powershell Scripts with Elastic?](https://discuss.elastic.co/t/how-to-run-powershell-scripts-with-elastic/357224)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 9\
**Last updated:** [April 12, 2024, 2:14pm UTC](https://discuss.elastic.co/t/how-to-run-powershell-scripts-with-elastic/357224 "2024-04-12T14:14:10Z")

</div>

Hello, I was wondering if possible to automate a powershell script with Elastic. Perhaps a trigger can set off the script to run? I read that webhooks might be an option but is there better methods?

---

## [Creating index for list of strings](https://discuss.elastic.co/t/creating-index-for-list-of-strings/357258)

<div class="topic-metadata">

**Author:** [@Kyle\_Manuel](https://discuss.elastic.co/u/Kyle_Manuel)\
**Replies:** 3\
**Last updated:** [April 12, 2024, 2:05pm UTC](https://discuss.elastic.co/t/creating-index-for-list-of-strings/357258 "2024-04-12T14:05:56Z")

</div>

I'm using the Elastic.Clients.Elasticsearch NuGet package to migrate away from our existing Nest implementations. I am getting an error attempting to replicate the Nest mapping for a list of strings. If I remove the la…

---

## [TCP traffic limited - Zero windows](https://discuss.elastic.co/t/tcp-traffic-limited-zero-windows/357293)

<div class="topic-metadata">

**Author:** [@SilasMuniz1](https://discuss.elastic.co/u/SilasMuniz1)\
**Replies:** 0\
**Last updated:** [April 12, 2024, 1:14pm UTC](https://discuss.elastic.co/t/tcp-traffic-limited-zero-windows/357293 "2024-04-12T13:14:45Z")

</div>

Hi everyone, I had a scenario that I've segmented endpoint traffic in multiple TCP ports. Whether I use only one port I receive zerowin error and delay to input log at elasticsearch. When occour high traffic happening …

---

## [How to use logstash to send longs in real time](https://discuss.elastic.co/t/how-to-use-logstash-to-send-longs-in-real-time/357073)

<div class="topic-metadata">

**Author:** [@saywhat](https://discuss.elastic.co/u/saywhat)\
**Replies:** 14\
**Last updated:** [April 12, 2024, 12:56pm UTC](https://discuss.elastic.co/t/how-to-use-logstash-to-send-longs-in-real-time/357073 "2024-04-12T12:56:38Z")

</div>

Instead of running logstash manually and specify the configuration file and path with: /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf, how can I instruct logstash to run in the background and coll…

---

## [Remote eligible node for backup purposes?](https://discuss.elastic.co/t/remote-eligible-node-for-backup-purposes/357278)

<div class="topic-metadata">

**Author:** [@rgoerner](https://discuss.elastic.co/u/rgoerner)\
**Replies:** 5\
**Last updated:** [April 12, 2024, 12:33pm UTC](https://discuss.elastic.co/t/remote-eligible-node-for-backup-purposes/357278 "2024-04-12T12:33:38Z")

</div>

Hi, first, I want to thank the community for the help, assistance and ideas. We currently run a 3 master node cluster without any problem. I want to add a kind of 4th node, which is not running actively in the primary…

---

## [How to Get the Status of Reindex Task](https://discuss.elastic.co/t/how-to-get-the-status-of-reindex-task/357186)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 2\
**Last updated:** [April 12, 2024, 11:10am UTC](https://discuss.elastic.co/t/how-to-get-the-status-of-reindex-task/357186 "2024-04-12T11:10:36Z")

</div>

Hi Team, Is there anyway we can get the status of reindex task which I triggered by using (\_reindex) API. How we can kill the task if it is triggered with wrong configuration. Thanks, Debasis

---

## [Integration with Oracle cloud infrastructure](https://discuss.elastic.co/t/integration-with-oracle-cloud-infrastructure/357271)

<div class="topic-metadata">

**Author:** [@Ajay\_Kumar.S](https://discuss.elastic.co/u/Ajay_Kumar.S)\
**Replies:** 0\
**Last updated:** [April 12, 2024, 10:28am UTC](https://discuss.elastic.co/t/integration-with-oracle-cloud-infrastructure/357271 "2024-04-12T10:28:33Z")

</div>

Hi community, I want to forward metric logs from oracle cloud infrastructure to elasticsearch. Anyone please help me out with this integration.

---

## [How to add a new field mapping in my web access log](https://discuss.elastic.co/t/how-to-add-a-new-field-mapping-in-my-web-access-log/357198)

<div class="topic-metadata">

**Author:** [@hi\_hi](https://discuss.elastic.co/u/hi_hi)\
**Replies:** 2\
**Last updated:** [April 12, 2024, 10:11am UTC](https://discuss.elastic.co/t/how-to-add-a-new-field-mapping-in-my-web-access-log/357198 "2024-04-12T10:11:28Z")

</div>

The first entry in the web access log file: 112.181.246.27 12.12.181.2 - - \[03/Apr/2024:16:46:22 +0800\] "GET /icr/?mac\_address=005044567570&network\_type=4G&time=16:46:22.190 HTTP/1.1" 200 679 31248 "CX1UUCGAA01V.ixxx.pc…

---

## [Enable https on Elastic cluster node](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222)

<div class="topic-metadata">

**Author:** [@vidyasagar862](https://discuss.elastic.co/u/vidyasagar862)\
**Replies:** 5\
**Last updated:** [April 12, 2024, 10:11am UTC](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222 "2024-04-12T10:11:18Z")

</div>

I have three nodes cluster and i am using 8.11.4 version. I am trying to enable https on the each node , below is my configuration and when i access the cluster with https it is throwing ERR\_SSL\_PROTOCOL\_ERROR error , Pl…

---

## [Critical warning about use of inline in scripts, but I can't find where](https://discuss.elastic.co/t/critical-warning-about-use-of-inline-in-scripts-but-i-cant-find-where/357270)

<div class="topic-metadata">

**Author:** [@yawo](https://discuss.elastic.co/u/yawo)\
**Replies:** 0\
**Last updated:** [April 12, 2024, 10:03am UTC](https://discuss.elastic.co/t/critical-warning-about-use-of-inline-in-scripts-but-i-cant-find-where/357270 "2024-04-12T10:03:41Z")

</div>

Hello, I am using elastic/helm\_charts to deploy ELK stack on kubernetes. I've been trying to upgrade from version 7.17.8 to version 8.5.3 by fixing this kibana critical warning I get in my elasticsearch logs: {"type":…

---

## [Could not find org.elasticsearch.gradle:build-tools:8.12.0-SNAPSHOT](https://discuss.elastic.co/t/could-not-find-org-elasticsearch-gradle8-12-0-snapshot/357210)

<div class="topic-metadata">

**Author:** [@yunfei](https://discuss.elastic.co/u/yunfei)\
**Replies:** 2\
**Last updated:** [April 12, 2024, 9:34am UTC](https://discuss.elastic.co/t/could-not-find-org-elasticsearch-gradle8-12-0-snapshot/357210 "2024-04-12T09:34:10Z")

</div>

when i enter into ~/elasticsearch-8.12.0/plugins/examples/rescore, and use command gradle bundlePlugin to compile the plugin, there are some wrong: FAILURE: Build failed with an exception. What went wrong: A problem …

---

## [How do I forward elasticsearch data to SevOne NMS?](https://discuss.elastic.co/t/how-do-i-forward-elasticsearch-data-to-sevone-nms/357264)

<div class="topic-metadata">

**Author:** [@cinnaahml](https://discuss.elastic.co/u/cinnaahml)\
**Replies:** 0\
**Last updated:** [April 12, 2024, 8:09am UTC](https://discuss.elastic.co/t/how-do-i-forward-elasticsearch-data-to-sevone-nms/357264 "2024-04-12T08:09:05Z")

</div>

Hi, English is not my first language, please excuse me. I have installed elasticsearch, logstash, kibana. but I am unsure how to forward elasticsearch log data to Sevone (NMS) I have edited logstash config output:sy…

---

## [Elasticsearch Upgrade from Version 7.17.4 to 8.12.0](https://discuss.elastic.co/t/elasticsearch-upgrade-from-version-7-17-4-to-8-12-0/357253)

<div class="topic-metadata">

**Author:** [@DannyDuo](https://discuss.elastic.co/u/DannyDuo)\
**Replies:** 3\
**Last updated:** [April 12, 2024, 5:47am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-version-7-17-4-to-8-12-0/357253 "2024-04-12T05:47:41Z")

</div>

Hello everyone, I got 6 old version 7.17 nodes and 6 new version 8.12 nodes in the stack now. I am trying to remove old nodes. But some shards recovery failed. Is it just impossible to recovery from a 7.17 node to an …

---

## [Preventing document update based on field values](https://discuss.elastic.co/t/preventing-document-update-based-on-field-values/356858)

<div class="topic-metadata">

**Author:** [@ashish25](https://discuss.elastic.co/u/ashish25)\
**Replies:** 9\
**Last updated:** [April 12, 2024, 5:22am UTC](https://discuss.elastic.co/t/preventing-document-update-based-on-field-values/356858 "2024-04-12T05:22:17Z")

</div>

Is there anyway to prevent updating document based on some field? Eg- Below documents already present in elastic: { "business\_address" : "660 Sacramento St", "business\_city" : "San Francisco", "business\_id" : 22 } …

---

## [Help on Configuring Kibana with ElasticSearch, Filebeat and Logstash](https://discuss.elastic.co/t/help-on-configuring-kibana-with-elasticsearch-filebeat-and-logstash/357013)

<div class="topic-metadata">

**Author:** [@mAngelo-dev](https://discuss.elastic.co/u/mAngelo-dev)\
**Replies:** 2\
**Last updated:** [April 11, 2024, 8:38pm UTC](https://discuss.elastic.co/t/help-on-configuring-kibana-with-elasticsearch-filebeat-and-logstash/357013 "2024-04-11T20:38:27Z")

</div>

Hi, I'm currently having some troubles on how to properly configure Kibana and others products that composes the Elastic Stack (Elastic Search, Kibana, Logstash and Filebeat), I'm a junior developer and I was challenged …

---

## [Can an host be enrolled in multiple agent policies on fleet](https://discuss.elastic.co/t/can-an-host-be-enrolled-in-multiple-agent-policies-on-fleet/357232)

<div class="topic-metadata">

**Author:** [@Fantaunix](https://discuss.elastic.co/u/Fantaunix)\
**Replies:** 1\
**Last updated:** [April 11, 2024, 6:06pm UTC](https://discuss.elastic.co/t/can-an-host-be-enrolled-in-multiple-agent-policies-on-fleet/357232 "2024-04-11T18:06:39Z")

</div>

Hi all, i would know if is possible to enroll an host within 2 different agent policies in fleet. E.G myserver is a windows server and also a DNS server so i would apply a windows server agent policy with 3 integration …

---

## [Adding new data to existing index pattern](https://discuss.elastic.co/t/adding-new-data-to-existing-index-pattern/356915)

<div class="topic-metadata">

**Author:** [@thomas4](https://discuss.elastic.co/u/thomas4)\
**Replies:** 7\
**Last updated:** [April 11, 2024, 4:28pm UTC](https://discuss.elastic.co/t/adding-new-data-to-existing-index-pattern/356915 "2024-04-11T16:28:25Z")

</div>

Hi all, i have created a new index pattern, i used the 'Data Visualizer' to upload my data. Because you can only upload 100mb of data i could not upload all my data. Is there a way to add data to an existing index patt…

---

## [How to set up the deletion phase in an ILM policy](https://discuss.elastic.co/t/how-to-set-up-the-deletion-phase-in-an-ilm-policy/357233)

<div class="topic-metadata">

**Author:** [@Raul\_Anastacio](https://discuss.elastic.co/u/Raul_Anastacio)\
**Replies:** 0\
**Last updated:** [April 11, 2024, 4:27pm UTC](https://discuss.elastic.co/t/how-to-set-up-the-deletion-phase-in-an-ilm-policy/357233 "2024-04-11T16:27:45Z")

</div>

I've configured my ILM policy; however, the deletion phase isn't functioning as expected. While indices transition through the warm, hot, and cold phases seamlessly, they aren't being deleted afterward. Do I need to esta…

---

## [REST request tracer](https://discuss.elastic.co/t/rest-request-tracer/357228)

<div class="topic-metadata">

**Author:** [@sebastianboelling](https://discuss.elastic.co/u/sebastianboelling)\
**Replies:** 0\
**Last updated:** [April 11, 2024, 3:40pm UTC](https://discuss.elastic.co/t/rest-request-tracer/357228 "2024-04-11T15:40:15Z")

</div>

Hi, I try to trace all HTTP REST recuests for debugging purpose. I am indexing documents using an ingest pipeline on an Elasticsearch node which was deployed by ECK operator. I followed the guide here: Networking | Ela…

---

## [How to add calander option in discover tab](https://discuss.elastic.co/t/how-to-add-calander-option-in-discover-tab/357184)

<div class="topic-metadata">

**Author:** [@virat22](https://discuss.elastic.co/u/virat22)\
**Replies:** 3\
**Last updated:** [April 11, 2024, 3:09pm UTC](https://discuss.elastic.co/t/how-to-add-calander-option-in-discover-tab/357184 "2024-04-11T15:09:16Z")

</div>

I see the calander option in dashboard option but not in discovery page how to enable it please let me know kibana version is 7.12.0

---

## [Inquiry about load balancing of elasticsearch cluster](https://discuss.elastic.co/t/inquiry-about-load-balancing-of-elasticsearch-cluster/357187)

<div class="topic-metadata">

**Author:** [@wwwryuwww](https://discuss.elastic.co/u/wwwryuwww)\
**Replies:** 2\
**Last updated:** [April 11, 2024, 2:45pm UTC](https://discuss.elastic.co/t/inquiry-about-load-balancing-of-elasticsearch-cluster/357187 "2024-04-11T14:45:52Z")

</div>

Hi, guys. I am configuring an elastic stack with multiple servers and would like to know how load balancing is implemented for each connection to each component. elastic agent -\> multiple elasticsearch or logstash no…

---

## [Purge elasticsearch data older than 1month](https://discuss.elastic.co/t/purge-elasticsearch-data-older-than-1month/356909)

<div class="topic-metadata">

**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\
**Replies:** 4\
**Last updated:** [April 11, 2024, 2:44pm UTC](https://discuss.elastic.co/t/purge-elasticsearch-data-older-than-1month/356909 "2024-04-11T14:44:41Z")

</div>

Hi, I am running ELK on Red Hat Enterprise Linux release 8.9 (Ootpa) elasticsearch-8.13.1-1.x86\_64 logstash-8.13.1-1.x86\_64 kibana-8.13.1-1.x86\_64 filebeat-8.13.1-1.x86\_64 Is there a way to purge elasticsearch data…

---

## [Logstash V7.17.16 and JDK Version Compatibility](https://discuss.elastic.co/t/logstash-v7-17-16-and-jdk-version-compatibility/357221)

<div class="topic-metadata">

**Author:** [@DJorgensen](https://discuss.elastic.co/u/DJorgensen)\
**Replies:** 0\
**Last updated:** [April 11, 2024, 2:16pm UTC](https://discuss.elastic.co/t/logstash-v7-17-16-and-jdk-version-compatibility/357221 "2024-04-11T14:16:37Z")

</div>

We are currently running Logstash 7.17.16 and we are being asked to update JDK to version 11.0.21 the current version installed by logstash is 11.0.20+8. Does Logstash 7.17.16 support JDK version 11.0.21 If so how do y…

---

## [How to search documents with "empty" nested array using SQL](https://discuss.elastic.co/t/how-to-search-documents-with-empty-nested-array-using-sql/357145)

<div class="topic-metadata">

**Author:** [@vinitp](https://discuss.elastic.co/u/vinitp)\
**Replies:** 2\
**Last updated:** [April 11, 2024, 12:58pm UTC](https://discuss.elastic.co/t/how-to-search-documents-with-empty-nested-array-using-sql/357145 "2024-04-11T12:58:01Z")

</div>

Our custom application builds Elasticsearch SQL dynamically based on the criteria provided in the request. The document has a few nested arrays. e.g. "Person" may have an array of nested "addresses". I could build a SQL…

---

## [Logstash - JDBC input timeout error](https://discuss.elastic.co/t/logstash-jdbc-input-timeout-error/357206)

<div class="topic-metadata">

**Author:** [@baskarcyber](https://discuss.elastic.co/u/baskarcyber)\
**Replies:** 0\
**Last updated:** [April 11, 2024, 12:46pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-timeout-error/357206 "2024-04-11T12:46:53Z")

</div>

Hi, Logstash -version-7.6.1 I am tring to move 10 million rows from Azure SQL to Elasticsearch using logstash JDBC plugin. I haven't set the querytimeout in the connectionstring. it should be infinitie. But after 10 t…

---

## [Unknown domain contacted in air-gapped environment](https://discuss.elastic.co/t/unknown-domain-contacted-in-air-gapped-environment/356950)

<div class="topic-metadata">

**Author:** [@popeio](https://discuss.elastic.co/u/popeio)\
**Replies:** 3\
**Last updated:** [April 11, 2024, 12:23pm UTC](https://discuss.elastic.co/t/unknown-domain-contacted-in-air-gapped-environment/356950 "2024-04-11T12:23:46Z")

</div>

Hey Community! In one of our air-gapped environments we've recently observed some firewall logs pointing to cloud.security.elastic.co. To me, it smells a lot like artifacts.security.elastic.co, so it would be a pretty i…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=263)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=265)
