# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=275 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 276 --- ## [Is it any Elasticsearch storage optimization applicable?](https://discuss.elastic.co/t/is-it-any-elasticsearch-storage-optimization-applicable/356362)
**Author:** [@merson](https://discuss.elastic.co/u/merson)\ **Replies:** 7\ **Last updated:** [March 28, 2024, 8:39am UTC](https://discuss.elastic.co/t/is-it-any-elasticsearch-storage-optimization-applicable/356362 "2024-03-28T08:39:24Z")
Hi Team, For my issues is per 15mins 24000hits happen in my elasticsearch so it easily filled the storage so, Is there any alternate way to optimize or compress tha data and storage in ELK? --- ## [Number formatting of Gauge legend](https://discuss.elastic.co/t/number-formatting-of-gauge-legend/355834)
**Author:** [@bianca\_s](https://discuss.elastic.co/u/bianca_s)\ **Replies:** 3\ **Last updated:** [March 28, 2024, 7:09am UTC](https://discuss.elastic.co/t/number-formatting-of-gauge-legend/355834 "2024-03-28T07:09:57Z")
Hi all, I am trying to create a Gauge visalization but wasn't able to achieve nicely formatted numbers in the legend. The problem is, that the ranges we use are quite high numbers and hence without any formatting quite … --- ## [Logstash cannot connect to Elasticsearch](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch/356307)
**Author:** [@fclmkz](https://discuss.elastic.co/u/fclmkz)\ **Replies:** 13\ **Last updated:** [March 28, 2024, 6:51am UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch/356307 "2024-03-28T06:51:42Z")
Logstash cannot connect to Elasticsearch Logstash version is 8.12.2. Elasticsearch version the same. JVM: 21.0.2 when I launch logstash i get this message: Mar 27 16:42:07 elk.kaztoll.kz logstash\[9567\]: \[2024-03-27T1… --- ## [16 hours (56658224ms) were not queried between this rule execution and the last execution, so signals may have been missed. Consider increasing your look behind time or adding more Kibana instances](https://discuss.elastic.co/t/16-hours-56658224ms-were-not-queried-between-this-rule-execution-and-the-last-execution-so-signals-may-have-been-missed-consider-increasing-your-look-behind-time-or-adding-more-kibana-instances/356351)
**Author:** [@Abylay\_Kusogao](https://discuss.elastic.co/u/Abylay_Kusogao)\ **Replies:** 0\ **Last updated:** [March 28, 2024, 5:02am UTC](https://discuss.elastic.co/t/16-hours-56658224ms-were-not-queried-between-this-rule-execution-and-the-last-execution-so-signals-may-have-been-missed-consider-increasing-your-look-behind-time-or-adding-more-kibana-instances/356351 "2024-03-28T05:02:14Z")
idk whats going on,but I have been receiving such errors since yesterday. First thought was that smth is wrong with exactly one rule, but just disabling didnt helped. Then thought smth is wrong with virtual machine an… --- ## [Update by Query in the Background](https://discuss.elastic.co/t/update-by-query-in-the-background/356342)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 1\ **Last updated:** [March 28, 2024, 3:26am UTC](https://discuss.elastic.co/t/update-by-query-in-the-background/356342 "2024-03-28T03:26:01Z")
Is there any possiblity/features that we can use in Elasticsearch to run an update by query on millions of records but in a background process so that it does not affect the normal search and query performance. --- ## [Kibana Iframe login working in Firefox but not in chrome](https://discuss.elastic.co/t/kibana-iframe-login-working-in-firefox-but-not-in-chrome/356348)
**Author:** [@ShreyanshPrakash](https://discuss.elastic.co/u/ShreyanshPrakash)\ **Replies:** 0\ **Last updated:** [March 28, 2024, 3:22am UTC](https://discuss.elastic.co/t/kibana-iframe-login-working-in-firefox-but-not-in-chrome/356348 "2024-03-28T03:22:48Z")
My use case is to integrate Kibana dashboard into our Web Application. I am able to make the changes and kibana login page is loading. once user submits the login form, chrome seems to fail login with 401 error while t… --- ## [Inotify leak](https://discuss.elastic.co/t/inotify-leak/356080)
**Author:** [@masonlu2014](https://discuss.elastic.co/u/masonlu2014)\ **Replies:** 4\ **Last updated:** [March 28, 2024, 12:58am UTC](https://discuss.elastic.co/t/inotify-leak/356080 "2024-03-28T00:58:36Z")
hello team, we found auditbeat consumer a lot inotify recently, and we are using the latest auditbeat version We find that auditbeat pods created many inotify instances \> 2000, but most of them are not used, i.e. no i… --- ## [\[v 7.17\] Component Template Alias not working](https://discuss.elastic.co/t/v-7-17-component-template-alias-not-working/356331)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 7:46pm UTC](https://discuss.elastic.co/t/v-7-17-component-template-alias-not-working/356331 "2024-03-27T19:46:35Z")
Hello, I needed to update a legacy template to add an alias, but the operation fails (legacy template are deprecated). I created a set of components to replicate the existing template then included them in a new in… --- ## [Unable to enroll elastic agent on windows devices](https://discuss.elastic.co/t/unable-to-enroll-elastic-agent-on-windows-devices/356326)
**Author:** [@Patrick.kirk](https://discuss.elastic.co/u/Patrick.kirk)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 6:53pm UTC](https://discuss.elastic.co/t/unable-to-enroll-elastic-agent-on-windows-devices/356326 "2024-03-27T18:53:36Z")
Elastic agent and on-prem cluster on 8.12.1. I'm trying to enroll the agent on windows devices and am getting failures "error starting tcp listener for runtime manger: listen tcp 127.0.0.1:6789: bind". "Error: failed to … --- ## [My watcher runs twice](https://discuss.elastic.co/t/my-watcher-runs-twice/355612)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 3\ **Last updated:** [March 27, 2024, 6:03pm UTC](https://discuss.elastic.co/t/my-watcher-runs-twice/355612 "2024-03-27T18:03:18Z")
Hi everyone, i'm trying to figure out what happens with my watcher. since i upgrade my elasticsearch cluster from 7.x to 8.8.2, its runs twice. First time with a success result, the second time error state with this exc… --- ## [Sorting Get Aliases with new Java client](https://discuss.elastic.co/t/sorting-get-aliases-with-new-java-client/356302)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 3:18pm UTC](https://discuss.elastic.co/t/sorting-get-aliases-with-new-java-client/356302 "2024-03-27T15:18:05Z")
Hi, I am looking way to execute cat in the new Java client GET \_cat/aliases/bbb\*/?format=json&s=is\_write\_index:desc I found this way: AliasesRequest request = AliasesRequest.of(ar -\> ar.name(pattern)); var re… --- ## [Kibana Dashboards disappear on default space](https://discuss.elastic.co/t/kibana-dashboards-disappear-on-default-space/356306)
**Author:** [@ShimonB](https://discuss.elastic.co/u/ShimonB)\ **Replies:** 1\ **Last updated:** [March 27, 2024, 4:56pm UTC](https://discuss.elastic.co/t/kibana-dashboards-disappear-on-default-space/356306 "2024-03-27T16:56:35Z")
Hello, I'm using Elastic-Kibana stack (v8.7.1) configured by docker-compose. After upgrade to version 8.8.0 - all the dashboards I configured were disappeared. Does anyone knows how to fix this ? Thanks ! Shimon. … --- ## [Add componentTemplate with mapping with new Java client](https://discuss.elastic.co/t/add-componenttemplate-with-mapping-with-new-java-client/356252)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 7\ **Last updated:** [March 27, 2024, 4:25pm UTC](https://discuss.elastic.co/t/add-componenttemplate-with-mapping-with-new-java-client/356252 "2024-03-27T16:25:37Z")
Hi, I have started using new Java client. I want to add new componentTemplate with mapping. What is the approach with the new client? This was the approach on 7.17: java-rest-high-put-index-template-v2.html --- ## [ElasticClient unable to connect to Elasticsearch server running on k8s](https://discuss.elastic.co/t/elasticclient-unable-to-connect-to-elasticsearch-server-running-on-k8s/356283)
**Author:** [@roamik](https://discuss.elastic.co/u/roamik)\ **Replies:** 1\ **Last updated:** [March 27, 2024, 4:21pm UTC](https://discuss.elastic.co/t/elasticclient-unable-to-connect-to-elasticsearch-server-running-on-k8s/356283 "2024-03-27T16:21:54Z")
Hi I have deployed Elasticsearch locally to Docker Desktop Kubernetes as following: install operator: kubectl create -f {linktoEck}/eck/2.11.1/crds.yaml kubectl apply -f {linktoEck}/eck/2.11.1/operator.yaml then I d… --- ## [Best Way to Ensure Elasticsearch Optimal Performance](https://discuss.elastic.co/t/best-way-to-ensure-elasticsearch-optimal-performance/356290)
**Author:** [@mibeyki](https://discuss.elastic.co/u/mibeyki)\ **Replies:** 3\ **Last updated:** [March 27, 2024, 2:56pm UTC](https://discuss.elastic.co/t/best-way-to-ensure-elasticsearch-optimal-performance/356290 "2024-03-27T14:56:34Z")
Hello, I am writing to seek guidance on how to ensure optimal performance of Elasticsearch cluster. I am running a three node ES cluster with huge resources (16vCPUs, 128GB RAM, 10 TB Disk) on each node. However, i am… --- ## [Kibana Dashboard elastic controls show "error not found"](https://discuss.elastic.co/t/kibana-dashboard-elastic-controls-show-error-not-found/356304)
**Author:** [@raveh](https://discuss.elastic.co/u/raveh)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 3:44pm UTC](https://discuss.elastic.co/t/kibana-dashboard-elastic-controls-show-error-not-found/356304 "2024-03-27T15:44:21Z")
I'm experiencing the same issue as Elastic Controls show error - Not Found Which was closed. Was there a fix implemented? --- ## [Issues with elastic 8.x yum repository](https://discuss.elastic.co/t/issues-with-elastic-8-x-yum-repository/356184)
**Author:** [@kunalyadav](https://discuss.elastic.co/u/kunalyadav)\ **Replies:** 6\ **Last updated:** [March 27, 2024, 2:39pm UTC](https://discuss.elastic.co/t/issues-with-elastic-8-x-yum-repository/356184 "2024-03-27T14:39:56Z")
Hi, we've been experiencing issues with the elastic 8.x yum repository since this morning (UTC). The yum update command is failing with the following error $ sudo yum -y update-minimal --security --skip-broken Loaded p… --- ## [Fuzzy query using Levenshtein distance in Simple\_query\_string doesn't work on Chinese/Japanese words](https://discuss.elastic.co/t/fuzzy-query-using-levenshtein-distance-in-simple-query-string-doesnt-work-on-chinese-japanese-words/356296)
**Author:** [@sudo](https://discuss.elastic.co/u/sudo)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 2:32pm UTC](https://discuss.elastic.co/t/fuzzy-query-using-levenshtein-distance-in-simple-query-string-doesnt-work-on-chinese-japanese-words/356296 "2024-03-27T14:32:43Z")
I have been using simple\_query\_string and it works well with english words/chars: { "simple\_query\_string": { "default\_operator": "OR", "analyze\_wildcard": true, "fields": \[ "d.c.a… --- ## [SSL issues with the Docker setup](https://discuss.elastic.co/t/ssl-issues-with-the-docker-setup/356156)
**Author:** [@Sensanaty](https://discuss.elastic.co/u/Sensanaty)\ **Replies:** 6\ **Last updated:** [March 27, 2024, 1:41pm UTC](https://discuss.elastic.co/t/ssl-issues-with-the-docker-setup/356156 "2024-03-27T13:41:03Z")
I'm on: MacOS 14.2.1 (Sonoma on an M1 Macbook Pro) OpenSSL 3.2.1 Docker Desktop has 8GB of RAM allocated to it I'm following this guide to setup Elasticsearch + Kibana locally for development purposes, but am encounte… --- ## [Please provide official logstash-output-jdbc plugin](https://discuss.elastic.co/t/please-provide-official-logstash-output-jdbc-plugin/356259)
**Author:** [@Jasmine\_Blooms](https://discuss.elastic.co/u/Jasmine_Blooms)\ **Replies:** 3\ **Last updated:** [March 27, 2024, 1:56pm UTC](https://discuss.elastic.co/t/please-provide-official-logstash-output-jdbc-plugin/356259 "2024-03-27T13:56:20Z")
Hi, My use case is to transfer data from Elasticsearch to Postgres. While exploring, I could find logstash-ouput-jdbc plugin(GitHub - theangryangel/logstash-output-jdbc: JDBC output for Logstash) but it does not seem to… --- ## [Query Assistance Needed](https://discuss.elastic.co/t/query-assistance-needed/356198)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [March 27, 2024, 1:32pm UTC](https://discuss.elastic.co/t/query-assistance-needed/356198 "2024-03-27T13:32:49Z")
Hi, I have a need to search our log indices to: find documents containing fields with names prefixed with a specific string return those fields return the field "application.name", which is a standard field How might… --- ## [Best way to remove docs from index](https://discuss.elastic.co/t/best-way-to-remove-docs-from-index/356271)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 1\ **Last updated:** [March 27, 2024, 12:59pm UTC](https://discuss.elastic.co/t/best-way-to-remove-docs-from-index/356271 "2024-03-27T12:59:50Z")
Hi everyone, I want to clean an index and remove some docs related to a specific filter. Notice that this index is used by several logstash pipelines... I have about 5639694 docs to remove, and a total docs count abou… --- ## [Bash syslog\_history --\> rsyslog --\> Elastic](https://discuss.elastic.co/t/bash-syslog-history-rsyslog-elastic/354854)
**Author:** [@UPPERCASE](https://discuss.elastic.co/u/UPPERCASE)\ **Replies:** 2\ **Last updated:** [March 27, 2024, 12:31pm UTC](https://discuss.elastic.co/t/bash-syslog-history-rsyslog-elastic/354854 "2024-03-27T12:31:26Z")
I want to do the following. I want to enable the native Bash history logging with syslog: shopt -s syslog\_history. Then I want rsyslog to relay the logs to a central server over TLS and then from that central server rela… --- ## [DATA\_FROZEN](https://discuss.elastic.co/t/data-frozen/356280)
**Author:** [@bouzeghoub](https://discuss.elastic.co/u/bouzeghoub)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 12:18pm UTC](https://discuss.elastic.co/t/data-frozen/356280 "2024-03-27T12:18:36Z")
Hello, When I put node.roles: \[ data\_frozen \] on /etc/elasticsearch/elasticsearch.yml file I can't start service elasticsearch Elasticsearch v 8 Thank you --- ## [Failed to process cluster event (put-lifecycle-fb\_test) within 30s](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-lifecycle-fb-test-within-30s/356180)
**Author:** [@tegerei](https://discuss.elastic.co/u/tegerei)\ **Replies:** 5\ **Last updated:** [March 27, 2024, 12:11pm UTC](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-lifecycle-fb-test-within-30s/356180 "2024-03-27T12:11:14Z")
I am running a 3 node cluster for Elasticsearch. I get the error below when I try to create an ILM policy org.elasticsearch.transport.RemoteTransportException: \[es3\]\[192.168.10.52:9300\]\[cluster:admin/ilm/put\] Caused by:… --- ## [Hide Elastic managed dashboards](https://discuss.elastic.co/t/hide-elastic-managed-dashboards/356279)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 12:10pm UTC](https://discuss.elastic.co/t/hide-elastic-managed-dashboards/356279 "2024-03-27T12:10:50Z")
Starting release 8.13.0 Elastic managed dashboards can no longer be deleted (listed in the release notes). We don't use any and personally I find that annoying. Is there an option to at least hide the managed dashboard… --- ## [Unable to establish the connection between two clusters](https://discuss.elastic.co/t/unable-to-establish-the-connection-between-two-clusters/354499)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 14\ **Last updated:** [March 27, 2024, 12:06pm UTC](https://discuss.elastic.co/t/unable-to-establish-the-connection-between-two-clusters/354499 "2024-03-27T12:06:51Z")
Hi sir, im trying to establish the connection between the two clusters (local and remote) and i have used the same CA of local cluster to generate the certificates of the remote cluster node. In kibana remote clusters, … --- ## [Slow queries - is ES waiting for resources?](https://discuss.elastic.co/t/slow-queries-is-es-waiting-for-resources/356273)
**Author:** [@pgala](https://discuss.elastic.co/u/pgala)\ **Replies:** 3\ **Last updated:** [March 27, 2024, 11:56am UTC](https://discuss.elastic.co/t/slow-queries-is-es-waiting-for-resources/356273 "2024-03-27T11:56:28Z")
Hello, I run the simple query with one term filter. During the heavy indexing into ES, the search took: for 40 shards - 0.2s for 80 shards - \>10s My elastic setup: Elastic 8.5 Node: 5 x 16vCPU, 64GB 5 data nodes … --- ## [Elastic SQL - exclude documents based on nested objects](https://discuss.elastic.co/t/elastic-sql-exclude-documents-based-on-nested-objects/356272)
**Author:** [@elichai](https://discuss.elastic.co/u/elichai)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 11:19am UTC](https://discuss.elastic.co/t/elastic-sql-exclude-documents-based-on-nested-objects/356272 "2024-03-27T11:19:42Z")
Hi, I need to filter out documents that meet a condition in one of its nested objects. For example, if there is at least one nested object that has a code of 708 the document should not match. However, when I specify "A… --- ## [Unable to send logs to elasticsearch from .Net 8 using serilog when security is enabled](https://discuss.elastic.co/t/unable-to-send-logs-to-elasticsearch-from-net-8-using-serilog-when-security-is-enabled/356263)
**Author:** [@Shahid\_Hussain](https://discuss.elastic.co/u/Shahid_Hussain)\ **Replies:** 2\ **Last updated:** [March 27, 2024, 11:01am UTC](https://discuss.elastic.co/t/unable-to-send-logs-to-elasticsearch-from-net-8-using-serilog-when-security-is-enabled/356263 "2024-03-27T11:01:48Z")
Hello, I am unable to send logs to elasticsearch 8.12.2 when security is enabled on elasticsearch server. However, when I disable the security I can see the logs on elasticsearch server. Below are the settings from ela… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=274) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=276)