# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=278 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 279 --- ## [Elasticsearch Indexing Performance Degradation](https://discuss.elastic.co/t/elasticsearch-indexing-performance-degradation/356035)
**Author:** [@joeroot](https://discuss.elastic.co/u/joeroot)\ **Replies:** 5\ **Last updated:** [March 25, 2024, 5:42am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-performance-degradation/356035 "2024-03-25T05:42:16Z")
I've been encountering some performance degradation issues with indexing in my Elasticsearch cluster and I'm seeking advice on how to troubleshoot and resolve this issue. Scenario: I have a moderately sized Elasticsear… --- ## [Elastic agent wont start fleet server after upgrade](https://discuss.elastic.co/t/elastic-agent-wont-start-fleet-server-after-upgrade/356072)
**Author:** [@jtrapozi](https://discuss.elastic.co/u/jtrapozi)\ **Replies:** 0\ **Last updated:** [March 25, 2024, 5:40am UTC](https://discuss.elastic.co/t/elastic-agent-wont-start-fleet-server-after-upgrade/356072 "2024-03-25T05:40:32Z")
I represent an Australian school that uses Elastic for logging and we really love the product. We have a single ELK server with a single ELK agent and Fleet server all on the same host running 8.10.1 After a recent upg… --- ## [Logstash pipeline did not handle exception](https://discuss.elastic.co/t/logstash-pipeline-did-not-handle-exception/356070)
**Author:** [@ThELocal\_GUiDE](https://discuss.elastic.co/u/ThELocal_GUiDE)\ **Replies:** 0\ **Last updated:** [March 25, 2024, 4:59am UTC](https://discuss.elastic.co/t/logstash-pipeline-did-not-handle-exception/356070 "2024-03-25T04:59:31Z")
Hello i am new to logstash. I was trying to send logs from filebeats to logstash then to my indexer. But after running the stack for sometime i ran into an error which im not sure of how to handle. I have used docker to … --- ## [Logstash 8.12.2 rubyTests are failing](https://discuss.elastic.co/t/logstash-8-12-2-rubytests-are-failing/356059)
**Author:** [@Nikhitha\_Karennagari](https://discuss.elastic.co/u/Nikhitha_Karennagari)\ **Replies:** 1\ **Last updated:** [March 25, 2024, 4:55am UTC](https://discuss.elastic.co/t/logstash-8-12-2-rubytests-are-failing/356059 "2024-03-25T04:55:52Z")
Hi all, LOgstash 8.12.2 rubyTests are failing with the following error: org.logstash.RSpecTests \> rspecTests\[core tests\] FAILED java.lang.AssertionError: RSpec test suite \`core tests\` saw at least one failure. -… --- ## [How to make our deployment URLs private only for our organization?](https://discuss.elastic.co/t/how-to-make-our-deployment-urls-private-only-for-our-organization/355220)
**Author:** [@surya\_dadi\_dhamarake](https://discuss.elastic.co/u/surya_dadi_dhamarake)\ **Replies:** 4\ **Last updated:** [March 25, 2024, 3:34am UTC](https://discuss.elastic.co/t/how-to-make-our-deployment-urls-private-only-for-our-organization/355220 "2024-03-25T03:34:49Z")
Hi Team, Currently our deployments are publicly accessible but I want to make it private only for our organization. Can you please tell me the procedure to do this activity? Thanks, Surya --- ## [Scaled\_float rounding oddly](https://discuss.elastic.co/t/scaled-float-rounding-oddly/356025)
**Author:** [@garethhumphriesgkc](https://discuss.elastic.co/u/garethhumphriesgkc)\ **Replies:** 1\ **Last updated:** [March 24, 2024, 10:03pm UTC](https://discuss.elastic.co/t/scaled-float-rounding-oddly/356025 "2024-03-24T22:03:12Z")
I thought I understood scaled float, and up until today they have worked as expected, but I indexed some new data and scaled\_float fields got rounded in a way I can't explain. Consider the below mapping - taken direct f… --- ## [Advice on howto best run filebeat once per log file collections](https://discuss.elastic.co/t/advice-on-howto-best-run-filebeat-once-per-log-file-collections/356054)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 1\ **Last updated:** [March 24, 2024, 12:53pm UTC](https://discuss.elastic.co/t/advice-on-howto-best-run-filebeat-once-per-log-file-collections/356054 "2024-03-24T12:53:00Z")
I'm planning to daily ingest thousand of Windows client log file sets from a single linux instance of filebeat. Our Citrix Users running a Java Client Application are logging to a Personal Windows Share mapped into thei… --- ## [Master not discovered or elected yet, an election requires a node with id \[F-Tn-Q6vQuKE0Fgi5qtUMg\] + 503 master not discovered exception](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-f-tn-q6vquke0fgi5qtumg-503-master-not-discovered-exception/355949)
**Author:** [@Haoke98](https://discuss.elastic.co/u/Haoke98)\ **Replies:** 22\ **Last updated:** [March 24, 2024, 10:52am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-f-tn-q6vquke0fgi5qtumg-503-master-not-discovered-exception/355949 "2024-03-24T10:52:41Z")
I have a elasticsearch cluster and it was work well before. But yesterday I accidentally deleted the Master node that has been elected. After this, the another master node cannot be elected by other nodes, at the same … --- ## [Replicate Data Asynchron](https://discuss.elastic.co/t/replicate-data-asynchron/354105)
**Author:** [@JonasPlaum](https://discuss.elastic.co/u/JonasPlaum)\ **Replies:** 1\ **Last updated:** [March 24, 2024, 9:49am UTC](https://discuss.elastic.co/t/replicate-data-asynchron/354105 "2024-03-24T09:49:58Z")
Hello, i have a question, about how i can design my data analysis. At the moment we have services that write a bunch of Events to mariaDB. MariaDB is replicating the data between 2 or more Database Nodes. There are mul… --- ## [Problem with data transformation for vega visualization](https://discuss.elastic.co/t/problem-with-data-transformation-for-vega-visualization/356051)
**Author:** [@Lynow](https://discuss.elastic.co/u/Lynow)\ **Replies:** 0\ **Last updated:** [March 24, 2024, 9:30am UTC](https://discuss.elastic.co/t/problem-with-data-transformation-for-vega-visualization/356051 "2024-03-24T09:30:29Z")
Hello, I'm trying to create a network graph that can display domains, IPs, subdomains, etc. and associated links. For this, I found a code sample that allows you to draw this kind of graph: LINK So I transformed my dat… --- ## [Elasticsearch parent breaker tripping during high indexing usage](https://discuss.elastic.co/t/elasticsearch-parent-breaker-tripping-during-high-indexing-usage/355066)
**Author:** [@dpitchford](https://discuss.elastic.co/u/dpitchford)\ **Replies:** 1\ **Last updated:** [March 24, 2024, 8:44am UTC](https://discuss.elastic.co/t/elasticsearch-parent-breaker-tripping-during-high-indexing-usage/355066 "2024-03-24T08:44:32Z")
I am debugging an ES 7.17.3 installation that is persistently running out of memory and tripping the parent circuit breaker. This is an example error: elasticsearch.exceptions.TransportError: TransportError(429, 'circui… --- ## [Index lifecyle management](https://discuss.elastic.co/t/index-lifecyle-management/355131)
**Author:** [@Satheesh\_Nehru](https://discuss.elastic.co/u/Satheesh_Nehru)\ **Replies:** 1\ **Last updated:** [March 24, 2024, 8:42am UTC](https://discuss.elastic.co/t/index-lifecyle-management/355131 "2024-03-24T08:42:16Z")
Consider i have index rollver enable with Ilm policy for every 1gb of data . index will have timestamp. current write index will have post\_write alias . now i want to query current index and previous index .How can th… --- ## [In k8s, which archtecture is better?](https://discuss.elastic.co/t/in-k8s-which-archtecture-is-better/355087)
**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\ **Replies:** 2\ **Last updated:** [March 24, 2024, 8:29am UTC](https://discuss.elastic.co/t/in-k8s-which-archtecture-is-better/355087 "2024-03-24T08:29:27Z")
i have two options. multiple Web application pods, each WAS pods have a filebeat as a sidecar (if 3 WAS exists, than totally 3 Filebeats exists, totally 3 Pods) multiple Web application pods, only one filebeat pod… --- ## [How can I get the query execution timeline?](https://discuss.elastic.co/t/how-can-i-get-the-query-execution-timeline/355673)
**Author:** [@sfireworks](https://discuss.elastic.co/u/sfireworks)\ **Replies:** 1\ **Last updated:** [March 24, 2024, 8:12am UTC](https://discuss.elastic.co/t/how-can-i-get-the-query-execution-timeline/355673 "2024-03-24T08:12:11Z")
we want to analysis the execution process of a query to see the time consumption on each shards, whether there is a longtai shards or not, and time consumption to fetch result from files on disks. The time we get from … --- ## [Elasticsearch Troubleshooting - Missing Documents](https://discuss.elastic.co/t/elasticsearch-troubleshooting-missing-documents/355910)
**Author:** [@jgeek](https://discuss.elastic.co/u/jgeek)\ **Replies:** 1\ **Last updated:** [March 24, 2024, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-troubleshooting-missing-documents/355910 "2024-03-24T08:10:36Z")
We are running elasticsearch 8.12.2 through docker-compose. We are seeing a weird issue where some documents are missing in elasticsearch. One of the third party java spring boot application (zeebe) exports its records t… --- ## [How to see the ID of a field created in elastic](https://discuss.elastic.co/t/how-to-see-the-id-of-a-field-created-in-elastic/356004)
**Author:** [@Leomar.V](https://discuss.elastic.co/u/Leomar.V)\ **Replies:** 1\ **Last updated:** [March 24, 2024, 8:01am UTC](https://discuss.elastic.co/t/how-to-see-the-id-of-a-field-created-in-elastic/356004 "2024-03-24T08:01:48Z")
Good afternoon, I have an error in a script of No field found for \[Time Step 1\] in mapping, but the field exists, I wanted to know if there is a way to get the id of this field to give the correct data for the field scri… --- ## [Elastic, kibana alerting](https://discuss.elastic.co/t/elastic-kibana-alerting/356049)
**Author:** [@Marek\_Galbavy](https://discuss.elastic.co/u/Marek_Galbavy)\ **Replies:** 0\ **Last updated:** [March 24, 2024, 7:20am UTC](https://discuss.elastic.co/t/elastic-kibana-alerting/356049 "2024-03-24T07:20:39Z")
Hi, i try to find way how to manage security alerts in kibana. Only option right now is just open case or close a alerts. Case system is really complicated and waste of time its a fault positive. I need something like:… --- ## [New index pattern does not have ability to select time range](https://discuss.elastic.co/t/new-index-pattern-does-not-have-ability-to-select-time-range/356023)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 1\ **Last updated:** [March 24, 2024, 7:15am UTC](https://discuss.elastic.co/t/new-index-pattern-does-not-have-ability-to-select-time-range/356023 "2024-03-24T07:15:03Z")
I have created a new sysmon-\* index pattern for my Sysmon logs. The Sysmon logs were previously grouped in my winlogbeat-\* index pattern and I had no issues. However now the new sysmon-\* doesn't seem to have a Time assig… --- ## [Logstash unnest nested components using ruby](https://discuss.elastic.co/t/logstash-unnest-nested-components-using-ruby/356044)
**Author:** [@chowpay](https://discuss.elastic.co/u/chowpay)\ **Replies:** 0\ **Last updated:** [March 24, 2024, 12:19am UTC](https://discuss.elastic.co/t/logstash-unnest-nested-components-using-ruby/356044 "2024-03-24T00:19:22Z")
I have fields that come into the system with nested components. Using this code in logstash: if \[receivers\] { split { field =\> "receivers" } } ruby { … --- ## [Rally max execution time and timeseries throughput metric](https://discuss.elastic.co/t/rally-max-execution-time-and-timeseries-throughput-metric/354278)
**Author:** [@OmidS](https://discuss.elastic.co/u/OmidS)\ **Replies:** 4\ **Last updated:** [March 23, 2024, 8:23pm UTC](https://discuss.elastic.co/t/rally-max-execution-time-and-timeseries-throughput-metric/354278 "2024-03-23T20:23:24Z")
Hello, I have been looking into the docs but have not been able to find information on two potential options I want from Rally. First, does rally have a max execution time parameter? Some of these tests run for a long … --- ## [Fingerprint no consistent on combination of same type of value](https://discuss.elastic.co/t/fingerprint-no-consistent-on-combination-of-same-type-of-value/356038)
**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\ **Replies:** 10\ **Last updated:** [March 23, 2024, 7:23pm UTC](https://discuss.elastic.co/t/fingerprint-no-consistent-on-combination-of-same-type-of-value/356038 "2024-03-23T19:23:09Z")
Hello Everyone , i am trying to create a unique fingerprint figure print according to upc + displayName and upc + selectedModifiersCombined with the conditions Here are 4 orders after splitting in logstash { orderId: … --- ## [Logstash filter http body with boolean values error](https://discuss.elastic.co/t/logstash-filter-http-body-with-boolean-values-error/355852)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 1\ **Last updated:** [March 23, 2024, 5:43pm UTC](https://discuss.elastic.co/t/logstash-filter-http-body-with-boolean-values-error/355852 "2024-03-23T17:43:09Z")
Having issues dealing with a value that needs to be a boolean in the body. Errors body\_format json errors {"type":"/request/invalid","title":"Bad Request","status":400,"detail":"Format of field article is invalid"}"} … --- ## [FileBeat not scrapping log lines](https://discuss.elastic.co/t/filebeat-not-scrapping-log-lines/355943)
**Author:** [@yevsh1](https://discuss.elastic.co/u/yevsh1)\ **Replies:** 3\ **Last updated:** [March 23, 2024, 4:18pm UTC](https://discuss.elastic.co/t/filebeat-not-scrapping-log-lines/355943 "2024-03-23T16:18:03Z")
Hello! I am new to FileBeat, trying to scrap INFO log lines from log files and send to kafka. filebeat.inputs: - type: log enabled: true tags: - myservice paths: - /usr/share/services/myservice/\*.log in… --- ## [Configure Metricbeat for RabbitMQ cluster to avoid duplication per node](https://discuss.elastic.co/t/configure-metricbeat-for-rabbitmq-cluster-to-avoid-duplication-per-node/354732)
**Author:** [@JorenThijs](https://discuss.elastic.co/u/JorenThijs)\ **Replies:** 1\ **Last updated:** [March 23, 2024, 1:32pm UTC](https://discuss.elastic.co/t/configure-metricbeat-for-rabbitmq-cluster-to-avoid-duplication-per-node/354732 "2024-03-23T13:32:17Z")
Hi we are using metricbeat v7.17.18 to gather information about our kubernetes cluster and send it too our Kibana cloud instance. In kubernetes we are also running a RabbitMQ Servicebus cluster meaning we have 3 RabbitM… --- ## [How can we use BoolenTermsAggregate in Asp.net](https://discuss.elastic.co/t/how-can-we-use-boolentermsaggregate-in-asp-net/356029)
**Author:** [@Jahanzaib](https://discuss.elastic.co/u/Jahanzaib)\ **Replies:** 0\ **Last updated:** [March 23, 2024, 11:31am UTC](https://discuss.elastic.co/t/how-can-we-use-boolentermsaggregate-in-asp-net/356029 "2024-03-23T11:31:25Z")
var searchRequest = new SearchRequest\(indexName) { Size = 0, Query = new BoolQuery { Must = mustQueries }, Aggregations = new AggregationDictionary { { … --- ## [Span\_or not applying higher score when matching multiple unique terms](https://discuss.elastic.co/t/span-or-not-applying-higher-score-when-matching-multiple-unique-terms/356027)
**Author:** [@robmartin11](https://discuss.elastic.co/u/robmartin11)\ **Replies:** 0\ **Last updated:** [March 23, 2024, 9:34am UTC](https://discuss.elastic.co/t/span-or-not-applying-higher-score-when-matching-multiple-unique-terms/356027 "2024-03-23T09:34:53Z")
Normally when applying multiple terms clauses, the relevancy scoring is applied to each term and then summed together, meaning matches on multiple unique terms get higher scores than multiple matches on the same term (be… --- ## [Dynamic Templates: path\_match with regex matching producing unintentional results](https://discuss.elastic.co/t/dynamic-templates-path-match-with-regex-matching-producing-unintentional-results/356016)
**Author:** [@nkachami](https://discuss.elastic.co/u/nkachami)\ **Replies:** 2\ **Last updated:** [March 22, 2024, 9:43pm UTC](https://discuss.elastic.co/t/dynamic-templates-path-match-with-regex-matching-producing-unintentional-results/356016 "2024-03-22T21:43:48Z")
Below is a mock index that contains a dynamic template utilizing path\_match with regex to index specifically named objects into an Elasticsearch schema. { "settings": {# settings }, "mappings": { "d… --- ## [HTTP 502 into APM service metrics](https://discuss.elastic.co/t/http-502-into-apm-service-metrics/356015)
**Author:** [@miguel.longo](https://discuss.elastic.co/u/miguel.longo)\ **Replies:** 0\ **Last updated:** [March 22, 2024, 6:03pm UTC](https://discuss.elastic.co/t/http-502-into-apm-service-metrics/356015 "2024-03-22T18:03:51Z")
Hello guys. I have an elastic apm implemented in my environment. When I try to get metrics on service with time range, like one week, after waiting time, I got a 502 error on kibana. This error don't happen in time ran… --- ## [GCS Snapshot restoration not working](https://discuss.elastic.co/t/gcs-snapshot-restoration-not-working/355937)
**Author:** [@Maxime\_Beaudry](https://discuss.elastic.co/u/Maxime_Beaudry)\ **Replies:** 6\ **Last updated:** [March 22, 2024, 5:55pm UTC](https://discuss.elastic.co/t/gcs-snapshot-restoration-not-working/355937 "2024-03-22T17:55:01Z")
Hi! I inherited an elastic cluster set up before my time. Current taking a daily snapshot into GCS successfully, as far as I can see when navigating the GCS bucket. In fact, I see no error logs and no cause to believe t… --- ## [Index Space Utilization On Elastic Nodes](https://discuss.elastic.co/t/index-space-utilization-on-elastic-nodes/355323)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 13\ **Last updated:** [March 22, 2024, 5:01pm UTC](https://discuss.elastic.co/t/index-space-utilization-on-elastic-nodes/355323 "2024-03-22T17:01:05Z")
Hi Team, In one of our elastic cluster having two nodes, created index with shards 6 and replica 0. In that index we had loaded a file of size is 1.1 GB. While checking the index size by using OS command in two nodes … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=277) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=279)