# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=272 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 273 --- ## [My IIS logs were sent by filebeat and Now I want to pras them with Logstash](https://discuss.elastic.co/t/my-iis-logs-were-sent-by-filebeat-and-now-i-want-to-pras-them-with-logstash/356484)
**Author:** [@Omid\_Mosayebi](https://discuss.elastic.co/u/Omid_Mosayebi)\ **Replies:** 5\ **Last updated:** [April 2, 2024, 7:17am UTC](https://discuss.elastic.co/t/my-iis-logs-were-sent-by-filebeat-and-now-i-want-to-pras-them-with-logstash/356484 "2024-04-02T07:17:53Z")
I cannot separate my IIS response code in Logstash --- ## [Prefix type Search which datatype should choose](https://discuss.elastic.co/t/prefix-type-search-which-datatype-should-choose/356592)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 1\ **Last updated:** [April 2, 2024, 7:34am UTC](https://discuss.elastic.co/t/prefix-type-search-which-datatype-should-choose/356592 "2024-04-02T07:34:32Z")
Hi Team, For prefix type query search in Elasticsearch which datatype we should choose. It is known that the prefix type search has the capability to support both text and keyword. We need your help in determining the… --- ## [How to Stop REST API Command triggered in Dev Tools in Kibana](https://discuss.elastic.co/t/how-to-stop-rest-api-command-triggered-in-dev-tools-in-kibana/356595)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 0\ **Last updated:** [April 2, 2024, 7:28am UTC](https://discuss.elastic.co/t/how-to-stop-rest-api-command-triggered-in-dev-tools-in-kibana/356595 "2024-04-02T07:28:28Z")
Hi Team, Is there anyway we can stop the REST API command which is triggered from DEV tools in Kibana UI. We do not want to shutdown the Elastic cluster to stop the command. Thanks, Debasis --- ## [Automatic Re-creation of Deleted Index in Wazuh System](https://discuss.elastic.co/t/automatic-re-creation-of-deleted-index-in-wazuh-system/355769)
**Author:** [@Mahdi\_Khezrabadi](https://discuss.elastic.co/u/Mahdi_Khezrabadi)\ **Replies:** 2\ **Last updated:** [April 2, 2024, 6:41am UTC](https://discuss.elastic.co/t/automatic-re-creation-of-deleted-index-in-wazuh-system/355769 "2024-04-02T06:41:28Z")
I deleted the index wazuh-alerts-4.x-2024.03.19 in the Wazuh system. However, this index is automatically recreated, what is the reason for this? --- ## [Need help on azure container apps](https://discuss.elastic.co/t/need-help-on-azure-container-apps/356590)
**Author:** [@Clynt\_Neiko\_Rupinta](https://discuss.elastic.co/u/Clynt_Neiko_Rupinta)\ **Replies:** 0\ **Last updated:** [April 2, 2024, 5:59am UTC](https://discuss.elastic.co/t/need-help-on-azure-container-apps/356590 "2024-04-02T05:59:00Z")
I am a complete beginner in es. Im having trouble deploying it on azure container apps. I have deployed 2 container apps for master and data nodes, i have problem connecting my data nodes to my master node. Master confi… --- ## [Is license required to implement SSO in ELK](https://discuss.elastic.co/t/is-license-required-to-implement-sso-in-elk/356588)
**Author:** [@Manjiri](https://discuss.elastic.co/u/Manjiri)\ **Replies:** 1\ **Last updated:** [April 2, 2024, 5:46am UTC](https://discuss.elastic.co/t/is-license-required-to-implement-sso-in-elk/356588 "2024-04-02T05:46:27Z")
Hi All, We are implementing the ELK 8.11.1 and we wanted to check with you, wheather license is required to implement SSO? --- ## [Kibana Reporting timeout errors](https://discuss.elastic.co/t/kibana-reporting-timeout-errors/356580)
**Author:** [@Mani\_Manikanta](https://discuss.elastic.co/u/Mani_Manikanta)\ **Replies:** 1\ **Last updated:** [April 2, 2024, 5:30am UTC](https://discuss.elastic.co/t/kibana-reporting-timeout-errors/356580 "2024-04-02T05:30:14Z")
Hi Team, while creating PDF/PNG reports from the Kibana dashboard noticed the below error from the Kibana.log file can anyone look into this one? {"service":{"node":{"roles":\["background\_tasks","ui"\]}},"ecs":{"version"… --- ## [Issue with container creation](https://discuss.elastic.co/t/issue-with-container-creation/356587)
**Author:** [@LoganJFisher](https://discuss.elastic.co/u/LoganJFisher)\ **Replies:** 0\ **Last updated:** [April 2, 2024, 5:27am UTC](https://discuss.elastic.co/t/issue-with-container-creation/356587 "2024-04-02T05:27:53Z")
Synology ARM64 using Container Manager When I try to create a container using the Elasticsearch image on Docker hub, the resulting container crashes and produces the following log message: exec /docker-entrypoint.sh: e… --- ## [Index stuck in yellow unable to assign replica due to translog corruption](https://discuss.elastic.co/t/index-stuck-in-yellow-unable-to-assign-replica-due-to-translog-corruption/356556)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 5\ **Last updated:** [April 2, 2024, 5:15am UTC](https://discuss.elastic.co/t/index-stuck-in-yellow-unable-to-assign-replica-due-to-translog-corruption/356556 "2024-04-02T05:15:42Z")
Hi, We had some server issues in one node of our elasticsearch cluster (8.12.0). While resolving the issue, another node went down and consequently some indexes went into red. After the original failure was recovered, w… --- ## [Uninstalling Elastic Agent 8.8.2 on Windows Devices](https://discuss.elastic.co/t/uninstalling-elastic-agent-8-8-2-on-windows-devices/356224)
**Author:** [@KrisD](https://discuss.elastic.co/u/KrisD)\ **Replies:** 1\ **Last updated:** [April 2, 2024, 3:52am UTC](https://discuss.elastic.co/t/uninstalling-elastic-agent-8-8-2-on-windows-devices/356224 "2024-04-02T03:52:13Z")
I’m attempting to uninstall Elastic Agent version 8.8.2 from Windows devices using a script. While the script successfully uninstalls the software on the first attempt, it doesn’t delete the installation folder. I have t… --- ## [Kibana visualization dashboard support boolean operators AND, OR and NOT](https://discuss.elastic.co/t/kibana-visualization-dashboard-support-boolean-operators-and-or-and-not/356400)
**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\ **Replies:** 2\ **Last updated:** [April 2, 2024, 3:45am UTC](https://discuss.elastic.co/t/kibana-visualization-dashboard-support-boolean-operators-and-or-and-not/356400 "2024-04-02T03:45:28Z")
Hi, Does kibana visualization dashboard support boolean operators AND, OR and NOT? For example I want to extract data relevant to payment string and not payment-inquiry on kibana visualization dashboard search bar. P… --- ## [Error: Encountered non-2xx HTTP code 400](https://discuss.elastic.co/t/error-encountered-non-2xx-http-code-400/356378)
**Author:** [@syfwork](https://discuss.elastic.co/u/syfwork)\ **Replies:** 7\ **Last updated:** [April 2, 2024, 2:49am UTC](https://discuss.elastic.co/t/error-encountered-non-2xx-http-code-400/356378 "2024-04-02T02:49:27Z")
Hi, I'm using the HTTP output plugin to delete some documents by query. Here's my config file: input { jdbc { jdbc\_driver\_library =\> "/root/infr/logstash-8.12.2/connector/mysql-connector-j-8.3.0.jar" jdbc\_dr… --- ## [How to get traces for service which onboarded through dev tools](https://discuss.elastic.co/t/how-to-get-traces-for-service-which-onboarded-through-dev-tools/356577)
**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\ **Replies:** 0\ **Last updated:** [April 2, 2024, 1:00am UTC](https://discuss.elastic.co/t/how-to-get-traces-for-service-which-onboarded-through-dev-tools/356577 "2024-04-02T01:00:14Z")
Hello, I have tried below lines to get traces for last 1hr. GET \_search { "filter":{ "query":{ "range":{ "@timestamp":{ "get: " now -1h" } … --- ## [Filebeat multiline based on capture group](https://discuss.elastic.co/t/filebeat-multiline-based-on-capture-group/355267)
**Author:** [@Operate6423](https://discuss.elastic.co/u/Operate6423)\ **Replies:** 5\ **Last updated:** [April 1, 2024, 11:49pm UTC](https://discuss.elastic.co/t/filebeat-multiline-based-on-capture-group/355267 "2024-04-01T23:49:15Z")
I'm trying to group multiline messages belonging to the same event. Unfortunately they don't appear to match the style of the examples in multiline-examples.html#\_examples\_of\_multiline\_configuration. Each event has a un… --- ## [Missing required property 'Hit.index'](https://discuss.elastic.co/t/missing-required-property-hit-index/356564)
**Author:** [@Shai\_Bentin](https://discuss.elastic.co/u/Shai_Bentin)\ **Replies:** 0\ **Last updated:** [April 1, 2024, 3:27pm UTC](https://discuss.elastic.co/t/missing-required-property-hit-index/356564 "2024-04-01T15:27:13Z")
I've recently upgraded an on-premise Elastic 7.17.19 server to 8.13.0. Since I had problems with the java client I had (especially with digesting) I've decided to also upgrade by java client to 8.13 with jackson 2.17.0. … --- ## [Dynamic fields in CSV to be pushed to ES](https://discuss.elastic.co/t/dynamic-fields-in-csv-to-be-pushed-to-es/355892)
**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\ **Replies:** 7\ **Last updated:** [April 1, 2024, 7:07pm UTC](https://discuss.elastic.co/t/dynamic-fields-in-csv-to-be-pushed-to-es/355892 "2024-04-01T19:07:18Z")
input { file { path =\> "C:/logstash-7.16.2/Outbound/sample\_\*.csv" start\_position =\> "beginning" } } filter { csv { separator =\> "," skip\_empty\_rows=\>true skip\_header=\>true columns =\> \["pr… --- ## [Can i use ELSER and OpenAI Embeddings together in Elasticsearch?](https://discuss.elastic.co/t/can-i-use-elser-and-openai-embeddings-together-in-elasticsearch/356512)
**Author:** [@shakunvohra](https://discuss.elastic.co/u/shakunvohra)\ **Replies:** 1\ **Last updated:** [April 1, 2024, 1:17pm UTC](https://discuss.elastic.co/t/can-i-use-elser-and-openai-embeddings-together-in-elasticsearch/356512 "2024-04-01T13:17:40Z")
I was wondering if I can use ELSER Vectors and OpenAI Embeddings together in same mapping for a better RAG results. The thought behind this is - take top 3 results from ELSER and take top 3 from OpenAI embeddings and co… --- ## [\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. connect ETIMEDOUT](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-etimedout/356120)
**Author:** [@Devanshu\_Rastogi](https://discuss.elastic.co/u/Devanshu_Rastogi)\ **Replies:** 12\ **Last updated:** [April 1, 2024, 6:18pm UTC](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-etimedout/356120 "2024-04-01T18:18:19Z")
Hi I am new to Elasticsearch and kibana and today I ran into an error due to which my kibana is not starting. My kibana.yaml - # The Kibana server's name. This is used for display purposes. #server.name: "your-hostname… --- ## [Very First Elastic Install... Elastic fails to determine health](https://discuss.elastic.co/t/very-first-elastic-install-elastic-fails-to-determine-health/356469)
**Author:** [@Technolust1](https://discuss.elastic.co/u/Technolust1)\ **Replies:** 10\ **Last updated:** [April 1, 2024, 5:31pm UTC](https://discuss.elastic.co/t/very-first-elastic-install-elastic-fails-to-determine-health/356469 "2024-04-01T17:31:05Z")
I'm new to ELK.. When I get to the step for checking if Elastic is running properly I get an error unable to authenticate. I realized I forgot to write down the password during the install... Now I'm trying to run elasti… --- ## [ELASTICSEARCH HTTPS ok internally, but bad gateway 502 externally. KIBANA ok both over HTTP](https://discuss.elastic.co/t/elasticsearch-https-ok-internally-but-bad-gateway-502-externally-kibana-ok-both-over-http/356572)
**Author:** [@marlonws](https://discuss.elastic.co/u/marlonws)\ **Replies:** 0\ **Last updated:** [April 1, 2024, 5:01pm UTC](https://discuss.elastic.co/t/elasticsearch-https-ok-internally-but-bad-gateway-502-externally-kibana-ok-both-over-http/356572 "2024-04-01T17:01:13Z")
Hi everyone, I'm just coming here after almost 3 whole days of trying to make it work and not going. I have the following schema: AZURE AKS \> NGINX CONTROLLER (which creates a loadbalancer when it has an ingress) \> APP… --- ## [Painless script issue with putAll() and add() methods](https://discuss.elastic.co/t/painless-script-issue-with-putall-and-add-methods/356076)
**Author:** [@Neeraj10](https://discuss.elastic.co/u/Neeraj10)\ **Replies:** 8\ **Last updated:** [April 1, 2024, 4:24pm UTC](https://discuss.elastic.co/t/painless-script-issue-with-putall-and-add-methods/356076 "2024-04-01T16:24:21Z")
I have written a painless script to update a nested field named "workflowassociated" in which I have fields "teamroleids", "userid", "workflowid", etc. I have written some required conditions in the script to update the "… --- ## [Processors for specific input](https://discuss.elastic.co/t/processors-for-specific-input/356405)
**Author:** [@Gabao-Farias](https://discuss.elastic.co/u/Gabao-Farias)\ **Replies:** 2\ **Last updated:** [April 1, 2024, 2:56pm UTC](https://discuss.elastic.co/t/processors-for-specific-input/356405 "2024-04-01T14:56:14Z")
Is it possible to use specific processors on specific inputs, and not on all of them? --- ## [Can't install Elastic on CentOS 8](https://discuss.elastic.co/t/cant-install-elastic-on-centos-8/356507)
**Author:** [@JuliePrist](https://discuss.elastic.co/u/JuliePrist)\ **Replies:** 10\ **Last updated:** [April 1, 2024, 1:51pm UTC](https://discuss.elastic.co/t/cant-install-elastic-on-centos-8/356507 "2024-04-01T13:51:47Z")
Hello - I installed Elastic for trying it out in a simple local server. Based on the instructions here: My /etc/elasticsearch/elasticsearch.yml file is as follows: node.name: "My First Node" cluster.name: clusteruzi … --- ## [How to get term position in sort script](https://discuss.elastic.co/t/how-to-get-term-position-in-sort-script/356555)
**Author:** [@skaccer](https://discuss.elastic.co/u/skaccer)\ **Replies:** 0\ **Last updated:** [April 1, 2024, 12:29pm UTC](https://discuss.elastic.co/t/how-to-get-term-position-in-sort-script/356555 "2024-04-01T12:29:23Z")
In Elasticsearch 8, I have the following index: { "settings": { "analysis": { "analyzer": { "default": { "type": "whitespace" }, … --- ## [Sudden rollover of apm indices](https://discuss.elastic.co/t/sudden-rollover-of-apm-indices/355473)
**Author:** [@Harsh\_Jain](https://discuss.elastic.co/u/Harsh_Jain)\ **Replies:** 5\ **Last updated:** [April 1, 2024, 12:26pm UTC](https://discuss.elastic.co/t/sudden-rollover-of-apm-indices/355473 "2024-04-01T12:26:39Z")
Hi, I am new to elastic apm and have been facing issue with ilm policies. Following tasks are done: Edited metrics-apm.app\_metrics-default\_policy and saved as custom-metrics-apm.app\_metrics-default\_policy Updated ilm… --- ## [exception=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::NoConnectionAvailableError](https://discuss.elastic.co/t/exception-logstash-noconnectionavailableerror/356549)
**Author:** [@KARTHIKEYANI](https://discuss.elastic.co/u/KARTHIKEYANI)\ **Replies:** 0\ **Last updated:** [April 1, 2024, 11:51am UTC](https://discuss.elastic.co/t/exception-logstash-noconnectionavailableerror/356549 "2024-04-01T11:51:15Z")
Hi Team, Elasticsearch connection is up and running. We have total 260000 documents. In this 30K copied after that we get the error Attempted to send a bulk request but there are no living connections in the pool (perh… --- ## [How to Modify Default Scoring Calculation When Using Multiple knn Mixed Searches](https://discuss.elastic.co/t/how-to-modify-default-scoring-calculation-when-using-multiple-knn-mixed-searches/356513)
**Author:** [@yuangen\_yu](https://discuss.elastic.co/u/yuangen_yu)\ **Replies:** 1\ **Last updated:** [April 1, 2024, 11:47am UTC](https://discuss.elastic.co/t/how-to-modify-default-scoring-calculation-when-using-multiple-knn-mixed-searches/356513 "2024-04-01T11:47:12Z")
POST image-index/\_search { "query": { "match": { "title": { "query": "mountain lake", "boost": 0.9 } } }, "knn": \[ { "field": "image-vector", "query\_vector": \[54, 10, -2\]… --- ## [Top hits not is parsing with java api client](https://discuss.elastic.co/t/top-hits-not-is-parsing-with-java-api-client/356530)
**Author:** [@conandc11](https://discuss.elastic.co/u/conandc11)\ **Replies:** 3\ **Last updated:** [April 1, 2024, 11:37am UTC](https://discuss.elastic.co/t/top-hits-not-is-parsing-with-java-api-client/356530 "2024-04-01T11:37:14Z")
I stumbled onto this discussion while I was writing aggregation with limiting response to limited number of fields. SearchRequest searchRequest = new SearchRequest.Builder() .index("idx\_name") .query(query) … --- ## [Elastic Query unexcepted aggregations doc\_count](https://discuss.elastic.co/t/elastic-query-unexcepted-aggregations-doc-count/356482)
**Author:** [@Vivek\_Burman](https://discuss.elastic.co/u/Vivek_Burman)\ **Replies:** 3\ **Last updated:** [April 1, 2024, 10:10am UTC](https://discuss.elastic.co/t/elastic-query-unexcepted-aggregations-doc-count/356482 "2024-04-01T10:10:45Z")
Question: If you look at the ES Response the hits count is 22 but the aggregations doc\_count is 663. I didn't understand the reason behind it. I was expecting that each doc from the hit will participate in one of the bu… --- ## [Sharing dashboard links (markdown widget) across spaces](https://discuss.elastic.co/t/sharing-dashboard-links-markdown-widget-across-spaces/354618)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 3\ **Last updated:** [April 1, 2024, 9:15am UTC](https://discuss.elastic.co/t/sharing-dashboard-links-markdown-widget-across-spaces/354618 "2024-04-01T09:15:57Z")
I'm using the metricbeat generated dashboard "\[Metricbeat System\] Overview ECS", but I need to make copies of this dashboard to monitor machines related to each team separately. After adjusting the dashboard IDs in the … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=271) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=273)