# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=279

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 280

---

## [Issue with Case Sensitivity and Double Quotes in PostgreSQL Query through Logstash](https://discuss.elastic.co/t/issue-with-case-sensitivity-and-double-quotes-in-postgresql-query-through-logstash/355990)

<div class="topic-metadata">

**Author:** [@Atakan](https://discuss.elastic.co/u/Atakan)\
**Replies:** 1\
**Last updated:** [March 22, 2024, 4:57pm UTC](https://discuss.elastic.co/t/issue-with-case-sensitivity-and-double-quotes-in-postgresql-query-through-logstash/355990 "2024-03-22T16:57:14Z")

</div>

Hello, I'm encountering an issue while trying to fetch data from a PostgreSQL database using Logstash's JDBC input. The problem seems to revolve around case sensitivity and the use of double quotes in column names. Desp…

---

## [Whether elastic is no longer opensource?](https://discuss.elastic.co/t/whether-elastic-is-no-longer-opensource/355975)

<div class="topic-metadata">

**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\
**Replies:** 4\
**Last updated:** [March 22, 2024, 4:48pm UTC](https://discuss.elastic.co/t/whether-elastic-is-no-longer-opensource/355975 "2024-03-22T16:48:28Z")

</div>

Sir..Recently i heard from one of the colleagues that the ELK stack is no longer the open source. Is this true? As of now we were using the 8.12 basic version package. whether basic license features will be continued or …

---

## [Debugging API Key authentications](https://discuss.elastic.co/t/debugging-api-key-authentications/356009)

<div class="topic-metadata">

**Author:** [@robjennings](https://discuss.elastic.co/u/robjennings)\
**Replies:** 0\
**Last updated:** [March 22, 2024, 4:42pm UTC](https://discuss.elastic.co/t/debugging-api-key-authentications/356009 "2024-03-22T16:42:40Z")

</div>

Hello, I have a 3 node Elastic cluster. Everthing is working fine, but I wen't to the Logs to debugg something else that I ended up fixing and I noticed these warnings: {"type": "server", "timestamp": "2024-03-22T16:33…

---

## [Elastic Agent using Docker: "failed version compatibility check with elasticsearch: dial tcp localhost:9200: connect: connection"](https://discuss.elastic.co/t/elastic-agent-using-docker-failed-version-compatibility-check-with-elasticsearch-dial-tcp-localhost-connect-connection/356003)

<div class="topic-metadata">

**Author:** [@NikoCosmico01](https://discuss.elastic.co/u/NikoCosmico01)\
**Replies:** 1\
**Last updated:** [March 22, 2024, 4:00pm UTC](https://discuss.elastic.co/t/elastic-agent-using-docker-failed-version-compatibility-check-with-elasticsearch-dial-tcp-localhost-connect-connection/356003 "2024-03-22T16:00:47Z")

</div>

Hi, I am struggling adding elastic agent on docker. All the times I try to docker run the agent this error appears: \< "failed version compatibility check with elasticsearch: dial tcp localhost:9200: connect: connection…

---

## [How to return a default string when no content matches](https://discuss.elastic.co/t/how-to-return-a-default-string-when-no-content-matches/355991)

<div class="topic-metadata">

**Author:** [@kurian\_mathew](https://discuss.elastic.co/u/kurian_mathew)\
**Replies:** 3\
**Last updated:** [March 22, 2024, 2:49pm UTC](https://discuss.elastic.co/t/how-to-return-a-default-string-when-no-content-matches/355991 "2024-03-22T14:49:47Z")

</div>

I am trying to search the content on elasticsearch which will match a text. I want to return an default string if nothing matches to my search criteria.

---

## [Re-install Kibana](https://discuss.elastic.co/t/re-install-kibana/355993)

<div class="topic-metadata">

**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\
**Replies:** 0\
**Last updated:** [March 22, 2024, 2:24pm UTC](https://discuss.elastic.co/t/re-install-kibana/355993 "2024-03-22T14:24:25Z")

</div>

I have a working Elasticsearch installation with Logstash-fed data. I am having problems with Kibana and am at the point where I want to reinstall it from scratch. I've read that I can delete all .kibana\* indexes, and a …

---

## [Elastic Replica and Unassigned Shards](https://discuss.elastic.co/t/elastic-replica-and-unassigned-shards/353486)

<div class="topic-metadata">

**Author:** [@ntex](https://discuss.elastic.co/u/ntex)\
**Replies:** 11\
**Last updated:** [March 22, 2024, 2:14pm UTC](https://discuss.elastic.co/t/elastic-replica-and-unassigned-shards/353486 "2024-03-22T14:14:41Z")

</div>

Hi First time posting here, I've start managing a recently created onprem cluster, so far I'm having "fun" with all the issues popping in, but I'm far to dominate all concepts. This cluster is hot-warm-cold tier and we…

---

## [Want to show URL'S status code wise Uptime percentage in Visualization](https://discuss.elastic.co/t/want-to-show-urls-status-code-wise-uptime-percentage-in-visualization/355987)

<div class="topic-metadata">

**Author:** [@2328943\_dc](https://discuss.elastic.co/u/2328943_dc)\
**Replies:** 0\
**Last updated:** [March 22, 2024, 12:47pm UTC](https://discuss.elastic.co/t/want-to-show-urls-status-code-wise-uptime-percentage-in-visualization/355987 "2024-03-22T12:47:23Z")

</div>

In One visualization we are monitoring URLs with different status code. Ex: status code 200/400, we want to add such visualization in our dashboard which will display status code wise uptime percentage of these URLs. …

---

## [Regarding the logstash cacerts issue](https://discuss.elastic.co/t/regarding-the-logstash-cacerts-issue/355961)

<div class="topic-metadata">

**Author:** [@HSc](https://discuss.elastic.co/u/HSc)\
**Replies:** 1\
**Last updated:** [March 22, 2024, 12:24pm UTC](https://discuss.elastic.co/t/regarding-the-logstash-cacerts-issue/355961 "2024-03-22T12:24:08Z")

</div>

Hi, I am new to ELK. As i am using beats to send logs to logstash and then to elasticsearch but the issue is when i run the logstash as service then the status is running but when i went to logs of logstash it shows.. e…

---

## [Request circuit breaker](https://discuss.elastic.co/t/request-circuit-breaker/355956)

<div class="topic-metadata">

**Author:** [@bugb](https://discuss.elastic.co/u/bugb)\
**Replies:** 1\
**Last updated:** [March 22, 2024, 10:52am UTC](https://discuss.elastic.co/t/request-circuit-breaker/355956 "2024-03-22T10:52:58Z")

</div>

We are running several Elasticsearch version 7.x clusters with a total of more than 100 data nodes. Each data node has 32 GB of memory and 8 vCPUs. I have some questions about the request circuit breaker: Link to docume…

---

## [Understanding "Maximum memory permitted for ML native processes"](https://discuss.elastic.co/t/understanding-maximum-memory-permitted-for-ml-native-processes/355911)

<div class="topic-metadata">

**Author:** [@sparrowt](https://discuss.elastic.co/u/sparrowt)\
**Replies:** 2\
**Last updated:** [March 22, 2024, 10:27am UTC](https://discuss.elastic.co/t/understanding-maximum-memory-permitted-for-ml-native-processes/355911 "2024-03-22T10:27:41Z")

</div>

At /app/ml/memory\_usage I see a marker "Maximum memory permitted for ML native processes" like this at 200MB: Hovering over anywhere else apart from that marker shows the breakdown like this: Why is the "Maximum m…

---

## [Custom API Integration Pagination](https://discuss.elastic.co/t/custom-api-integration-pagination/355978)

<div class="topic-metadata">

**Author:** [@Jiawei\_Cheah](https://discuss.elastic.co/u/Jiawei_Cheah)\
**Replies:** 1\
**Last updated:** [March 22, 2024, 10:09am UTC](https://discuss.elastic.co/t/custom-api-integration-pagination/355978 "2024-03-22T10:09:27Z")

</div>

Hi, i am running issues when i am trying to achieve pagination within this API. In this case, I have indicated that if the offset is not equal to the total, the offset number will increment by 100 for the next call. Th…

---

## [.fleet-enrollment-api-keys-7 damaged / health red .fleet](https://discuss.elastic.co/t/fleet-enrollment-api-keys-7-damaged-health-red-fleet/355973)

<div class="topic-metadata">

**Author:** [@Simon7](https://discuss.elastic.co/u/Simon7)\
**Replies:** 0\
**Last updated:** [March 22, 2024, 9:12am UTC](https://discuss.elastic.co/t/fleet-enrollment-api-keys-7-damaged-health-red-fleet/355973 "2024-03-22T09:12:27Z")

</div>

Hi, i have some problems with my one Node "Cluster". I did a mistake. I had very much UNASSIGNED indices. I deleted and repair some of them. The problem was that the indices had the value of "index.number\_of\_replicas": …

---

## [Kibana - Aggregation based - "Show values on chart" doesn't work correctly](https://discuss.elastic.co/t/kibana-aggregation-based-show-values-on-chart-doesnt-work-correctly/355969)

<div class="topic-metadata">

**Author:** [@JenniferL](https://discuss.elastic.co/u/JenniferL)\
**Replies:** 2\
**Last updated:** [March 22, 2024, 8:52am UTC](https://discuss.elastic.co/t/kibana-aggregation-based-show-values-on-chart-doesnt-work-correctly/355969 "2024-03-22T08:52:48Z")

</div>

Hi evryone :blush: I'm using the "aggregation based" visualisation on my Dashboard, specifically the Vertical bar chart and I have something very strange which is happening: I'm using the "Show values on chart" button o…

---

## [Default token in Aanlyzer if emitted tokens are empty](https://discuss.elastic.co/t/default-token-in-aanlyzer-if-emitted-tokens-are-empty/355971)

<div class="topic-metadata">

**Author:** [@Sumanth](https://discuss.elastic.co/u/Sumanth)\
**Replies:** 0\
**Last updated:** [March 22, 2024, 8:50am UTC](https://discuss.elastic.co/t/default-token-in-aanlyzer-if-emitted-tokens-are-empty/355971 "2024-03-22T08:50:40Z")

</div>

Hello Experts, The requirement is - when firing a query on index, we have one big Elastic Query DSL query built to run a a search on the index. For one of the property field, we have applied a custom analyzer. One of…

---

## [Need to install Filebeat on Single instance for multiple servers](https://discuss.elastic.co/t/need-to-install-filebeat-on-single-instance-for-multiple-servers/355117)

<div class="topic-metadata">

**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\
**Replies:** 3\
**Last updated:** [March 22, 2024, 8:10am UTC](https://discuss.elastic.co/t/need-to-install-filebeat-on-single-instance-for-multiple-servers/355117 "2024-03-22T08:10:01Z")

</div>

Hi All, We have multiple servers and I want to install the Filebeat on single instance for all servers. Can anyone suggest the way to achieve this. Thanks, Nitin Bisht

---

## [Imported Grafana csv to CPU Dashboard?](https://discuss.elastic.co/t/imported-grafana-csv-to-cpu-dashboard/355835)

<div class="topic-metadata">

**Author:** [@Bit\_Addict](https://discuss.elastic.co/u/Bit_Addict)\
**Replies:** 1\
**Last updated:** [March 22, 2024, 8:01am UTC](https://discuss.elastic.co/t/imported-grafana-csv-to-cpu-dashboard/355835 "2024-03-22T08:01:04Z")

</div>

Hi guys, I need some help on this one: I exported a csv file from Grafana, only fields are "time" and "cpu", delimited by a comma, example lines: 2024-03-13 12:15:00,38% 2024-03-13 12:30:00,34% 2024-03-13 12:45:00,35%…

---

## [Scripted field - script doesn't runs all the keys in my document](https://discuss.elastic.co/t/scripted-field-script-doesnt-runs-all-the-keys-in-my-document/355585)

<div class="topic-metadata">

**Author:** [@JenniferL](https://discuss.elastic.co/u/JenniferL)\
**Replies:** 8\
**Last updated:** [March 22, 2024, 7:53am UTC](https://discuss.elastic.co/t/scripted-field-script-doesnt-runs-all-the-keys-in-my-document/355585 "2024-03-22T07:53:42Z")

</div>

Hey All! I'm new here, I hope I will be clear on my request :nerd\_face: So I'm creating a scripted field on my index Pattern. I have multiple documents and in each documents there are multiple keys. What I want is: if …

---

## [Elasticsearch upgraded to 8.11.3](https://discuss.elastic.co/t/elasticsearch-upgraded-to-8-11-3/355954)

<div class="topic-metadata">

**Author:** [@SZShaoLiang](https://discuss.elastic.co/u/SZShaoLiang)\
**Replies:** 1\
**Last updated:** [March 22, 2024, 5:46am UTC](https://discuss.elastic.co/t/elasticsearch-upgraded-to-8-11-3/355954 "2024-03-22T05:46:08Z")

</div>

elasticsearch upgraded to 8.11.3, is the java client currently 7.10.1 compatible, do I need to upgrade to 8.11.3?

---

## [NEST to ElasticSearch.net migration issue with DeleteMany](https://discuss.elastic.co/t/nest-to-elasticsearch-net-migration-issue-with-deletemany/355174)

<div class="topic-metadata">

**Author:** [@sudheer26](https://discuss.elastic.co/u/sudheer26)\
**Replies:** 0\
**Last updated:** [March 11, 2024, 4:52pm UTC](https://discuss.elastic.co/t/nest-to-elasticsearch-net-migration-issue-with-deletemany/355174 "2024-03-11T16:52:51Z")

</div>

I have an issue while migaring the code from NEST to ES client 8.9 and I could not find right solution. Can anyone help on this? NEST logic: Person myobject; public class Persons { public Person\[\] persons {…

---

## [Ruby for loop logstash](https://discuss.elastic.co/t/ruby-for-loop-logstash/355946)

<div class="topic-metadata">

**Author:** [@Johnson\_will](https://discuss.elastic.co/u/Johnson_will)\
**Replies:** 4\
**Last updated:** [March 22, 2024, 3:27am UTC](https://discuss.elastic.co/t/ruby-for-loop-logstash/355946 "2024-03-22T03:27:18Z")

</div>

I am trying to convert the epoch timestamps which comes in an array. "steps": \[ { "number": 1, "status": "COMPLETE", "doRetry": null, "progress": null, "startTime": 1710431698…

---

## [Is it okay add new field or change data type for new documents in an existing index pattern?](https://discuss.elastic.co/t/is-it-okay-add-new-field-or-change-data-type-for-new-documents-in-an-existing-index-pattern/355869)

<div class="topic-metadata">

**Author:** [@basiltitus](https://discuss.elastic.co/u/basiltitus)\
**Replies:** 2\
**Last updated:** [March 21, 2024, 11:16pm UTC](https://discuss.elastic.co/t/is-it-okay-add-new-field-or-change-data-type-for-new-documents-in-an-existing-index-pattern/355869 "2024-03-21T23:16:54Z")

</div>

Hi, We having a requirement to change one field data type from text to some numeric and also adding a new field. We are using logstash with day rotation for indexes. Is it okay to change the data type as well as new fie…

---

## [Exception while enabling fips in es7.17](https://discuss.elastic.co/t/exception-while-enabling-fips-in-es7-17/354642)

<div class="topic-metadata">

**Author:** [@navaneethan](https://discuss.elastic.co/u/navaneethan)\
**Replies:** 7\
**Last updated:** [March 21, 2024, 11:37pm UTC](https://discuss.elastic.co/t/exception-while-enabling-fips-in-es7-17/354642 "2024-03-21T23:37:02Z")

</div>

While enabling the fips with the below config param we are facing xpack.security.fips\_mode.enabled: true xpack.security.authc.password\_hashing.algorithm: pbkdf2\_10000 xpack.security.enabled: true xpack.security.transpo…

---

## [Does index.mapping.total\_fields.limit include fields that have indexing disabled?](https://discuss.elastic.co/t/does-index-mapping-total-fields-limit-include-fields-that-have-indexing-disabled/355951)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 0\
**Last updated:** [March 21, 2024, 10:40pm UTC](https://discuss.elastic.co/t/does-index-mapping-total-fields-limit-include-fields-that-have-indexing-disabled/355951 "2024-03-21T22:40:50Z")

</div>

Title said it all. Thanks. The documentation doesn't specify this.

---

## [JSON parse failure](https://discuss.elastic.co/t/json-parse-failure/355821)

<div class="topic-metadata">

**Author:** [@Johnson\_will](https://discuss.elastic.co/u/Johnson_will)\
**Replies:** 2\
**Last updated:** [March 21, 2024, 9:10pm UTC](https://discuss.elastic.co/t/json-parse-failure/355821 "2024-03-21T21:10:46Z")

</div>

Error parsing json {:source=\>"message", :raw=\>"Error running job", :exception=\>#\<LogStash::Json::ParserError: Unrecognized token 'Error': was expecting ('true', 'false' or 'null') at \[Source: (byte\[\])"Error running job…

---

## [keystore error in elastic helm chart](https://discuss.elastic.co/t/keystore-error-in-elastic-helm-chart/355939)

<div class="topic-metadata">

**Author:** [@Ahmed102](https://discuss.elastic.co/u/Ahmed102)\
**Replies:** 0\
**Last updated:** [March 21, 2024, 8:01pm UTC](https://discuss.elastic.co/t/keystore-error-in-elastic-helm-chart/355939 "2024-03-21T20:01:52Z")

</div>

Hi, I was trying to use the Elasticsearch helm chart here (elasticsearch 8.5.1 · elastic/elastic) I created a secret called s3-creds-pass, with my username and pass apiVersion: v1 data: s3.client.default.access\_key:…

---

## [Unable to use elasticsearch 2.3.3 docker image](https://discuss.elastic.co/t/unable-to-use-elasticsearch-2-3-3-docker-image/355846)

<div class="topic-metadata">

**Author:** [@mateusdeap](https://discuss.elastic.co/u/mateusdeap)\
**Replies:** 5\
**Last updated:** [March 21, 2024, 7:23pm UTC](https://discuss.elastic.co/t/unable-to-use-elasticsearch-2-3-3-docker-image/355846 "2024-03-21T19:23:09Z")

</div>

Hi there! I'm working on a client project where their app uses the docker image for elasticsearch 2.3.3. My issue is that I'm currently unable to build the client's containers. When I run their setup script, or if I tr…

---

## [Does running two pipelines update the same events?](https://discuss.elastic.co/t/does-running-two-pipelines-update-the-same-events/355933)

<div class="topic-metadata">

**Author:** [@Lucas\_Giusti](https://discuss.elastic.co/u/Lucas_Giusti)\
**Replies:** 1\
**Last updated:** [March 21, 2024, 6:56pm UTC](https://discuss.elastic.co/t/does-running-two-pipelines-update-the-same-events/355933 "2024-03-21T18:56:58Z")

</div>

Good afternoon friends, I'm new to logstash and I have the following question: I have two pipelines that I created separately. They are different processes. I'm using Docker and, when I up logstash with just one of th…

---

## [Encountering an Issue with Newly Created Index File in Elastic Search](https://discuss.elastic.co/t/encountering-an-issue-with-newly-created-index-file-in-elastic-search/355648)

<div class="topic-metadata">

**Author:** [@Dinesh\_Raj](https://discuss.elastic.co/u/Dinesh_Raj)\
**Replies:** 13\
**Last updated:** [March 21, 2024, 6:15pm UTC](https://discuss.elastic.co/t/encountering-an-issue-with-newly-created-index-file-in-elastic-search/355648 "2024-03-21T18:15:05Z")

</div>

When reading the text data from a PDF document and saving it into the content field of an Elasticsearch document, I encountered an issue where the first saved index file did not return results when searched. However, cre…

---

## [How to show data from multiple K8s clusters on Kibana Kubernetes dashboard (using metricbeat deployed on each cluster)?](https://discuss.elastic.co/t/how-to-show-data-from-multiple-k8s-clusters-on-kibana-kubernetes-dashboard-using-metricbeat-deployed-on-each-cluster/355919)

<div class="topic-metadata">

**Author:** [@ioannisgk](https://discuss.elastic.co/u/ioannisgk)\
**Replies:** 0\
**Last updated:** [March 21, 2024, 3:37pm UTC](https://discuss.elastic.co/t/how-to-show-data-from-multiple-k8s-clusters-on-kibana-kubernetes-dashboard-using-metricbeat-deployed-on-each-cluster/355919 "2024-03-21T15:37:46Z")

</div>

Hello, I have 2 K8s clusters, Cluster A and Cluster B. I deployed Metricbeat on each cluster by using this yaml file: beats/deploy/kubernetes/metricbeat-kubernetes.yaml at v8.12.2 · elastic/beats · GitHub For metricbeat…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=278)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=280)
