# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=28 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 29 --- ## [We are loading kibana dashboards in angular application using iframe and we found dashboards are taking more time for loading in iframe](https://discuss.elastic.co/t/we-are-loading-kibana-dashboards-in-angular-application-using-iframe-and-we-found-dashboards-are-taking-more-time-for-loading-in-iframe/383715)
**Author:** [@Maneesha](https://discuss.elastic.co/u/Maneesha)\ **Replies:** 0\ **Last updated:** [November 27, 2025, 7:39am UTC](https://discuss.elastic.co/t/we-are-loading-kibana-dashboards-in-angular-application-using-iframe-and-we-found-dashboards-are-taking-more-time-for-loading-in-iframe/383715 "2025-11-27T07:39:58Z")
we are loading kibana dashboards in angular application using iframe, and we found dashboards are taking more time for loading in iframe. Is there any approaches for reducing the dashboard loading time? any approaches f… --- ## [Json file input to and viewing in logstash console](https://discuss.elastic.co/t/json-file-input-to-and-viewing-in-logstash-console/383608)
**Author:** [@dashelastic](https://discuss.elastic.co/u/dashelastic)\ **Replies:** 7\ **Last updated:** [November 27, 2025, 5:33am UTC](https://discuss.elastic.co/t/json-file-input-to-and-viewing-in-logstash-console/383608 "2025-11-27T05:33:08Z")
logstash version : 8.17.2, installed on windows machine. Requirement : ingest json file into logstash json file (its bigger but for testing purpose, trimmed it to one entry only) {{"id":"ocid1.clem.oc1.iad.","compartm… --- ## [Unable to install Syslog Output Plugin](https://discuss.elastic.co/t/unable-to-install-syslog-output-plugin/383679)
**Author:** [@swarali\_vartak](https://discuss.elastic.co/u/swarali_vartak)\ **Replies:** 2\ **Last updated:** [November 27, 2025, 5:24am UTC](https://discuss.elastic.co/t/unable-to-install-syslog-output-plugin/383679 "2025-11-27T05:24:19Z")
Hi Team, Could you please guide me on installing the Syslog output plugin on our Logstash server? We tried installing it using the method mentioned on ruby.org, but it didn't work. Kindly share the correct steps or pro… --- ## [Strange Grok with message](https://discuss.elastic.co/t/strange-grok-with-message/383686)
**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\ **Replies:** 4\ **Last updated:** [November 26, 2025, 8:27pm UTC](https://discuss.elastic.co/t/strange-grok-with-message/383686 "2025-11-26T20:27:20Z")
Hello guys I have this logstash filter filter { if \[log\]\[file\]\[path\] == "/dwdwdosw/Top/log/services/uds-default-pippo.it" or \[log\]\[file\]\[path\] == "/aledwgosw/Top/log/services/uds-default-pluto.it" { mutate { … --- ## [Low level commands using .NET client 8.13](https://discuss.elastic.co/t/low-level-commands-using-net-client-8-13/362717)
**Author:** [@SoleusRex](https://discuss.elastic.co/u/SoleusRex)\ **Replies:** 5\ **Last updated:** [November 26, 2025, 6:26pm UTC](https://discuss.elastic.co/t/low-level-commands-using-net-client-8-13/362717 "2025-11-26T18:26:58Z")
I'm working on a project where our index settings and mappings are maintained as JSON, and I'm wondering if there's a way for the current .NET client to use these to setup our indices. I've found older posts (example he… --- ## [License inquiry regarding CSPM](https://discuss.elastic.co/t/license-inquiry-regarding-cspm/383674)
**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\ **Replies:** 3\ **Last updated:** [November 26, 2025, 4:56pm UTC](https://discuss.elastic.co/t/license-inquiry-regarding-cspm/383674 "2025-11-26T16:56:19Z")
I wanted to make sure if it was applicable or not to purchase individual features instead of the whole license. I was interested in trying CSPM integration only, without purchasing the whole Enterprise license. Thank yo… --- ## [Export Elasticsearch Data](https://discuss.elastic.co/t/export-elasticsearch-data/383692)
**Author:** [@DVD\_MNC](https://discuss.elastic.co/u/DVD_MNC)\ **Replies:** 0\ **Last updated:** [November 26, 2025, 4:17pm UTC](https://discuss.elastic.co/t/export-elasticsearch-data/383692 "2025-11-26T16:17:34Z")
Hello guys, i’m working on a solution which use Elasticsearch as DataLake and export data on an external SIEM. As first requirement I want leverage elasticsearch capabilities as integration and enrichment, so I cannot … --- ## [PII security with Elastic.Clients.Elasticsearch 9.2.1](https://discuss.elastic.co/t/pii-security-with-elastic-clients-elasticsearch-9-2-1/383609)
**Author:** [@Davyd\_McColl](https://discuss.elastic.co/u/Davyd_McColl)\ **Replies:** 10\ **Last updated:** [November 26, 2025, 3:09pm UTC](https://discuss.elastic.co/t/pii-security-with-elastic-clients-elasticsearch-9-2-1/383609 "2025-11-26T15:09:06Z")
Good day I’m not sure if I’m posting this in the right place, but here goes. I’m trying to implement an ES index with an object that has mainly numeric fields, and some text fields. I want to be able to search by any f… --- ## [Contacting Sales](https://discuss.elastic.co/t/contacting-sales/383656)
**Author:** [@hying](https://discuss.elastic.co/u/hying)\ **Replies:** 3\ **Last updated:** [November 26, 2025, 12:01pm UTC](https://discuss.elastic.co/t/contacting-sales/383656 "2025-11-26T12:01:15Z")
Hello everyone! I’ve been trying to get in touch with the sales team of Elastic for a couple of weeks now, because my company is considering a platinum license. I’ve filled out the contact form with my contact details t… --- ## [Active Directory Entity Analytics integration](https://discuss.elastic.co/t/active-directory-entity-analytics-integration/382910)
**Author:** [@Marek\_Galbavy](https://discuss.elastic.co/u/Marek_Galbavy)\ **Replies:** 1\ **Last updated:** [November 26, 2025, 11:47am UTC](https://discuss.elastic.co/t/active-directory-entity-analytics-integration/382910 "2025-11-26T11:47:53Z")
Hi everyone, I’m having a problem with the Active Directory Entity Analytics integration. Everything used to work perfectly — and it still works fine on another cluster where I’m still running version 0.15. However, on… --- ## [Guide to Start a single-node cluster in Docker](https://discuss.elastic.co/t/guide-to-start-a-single-node-cluster-in-docker/383560)
**Author:** [@RobinSteil](https://discuss.elastic.co/u/RobinSteil)\ **Replies:** 5\ **Last updated:** [November 26, 2025, 11:08am UTC](https://discuss.elastic.co/t/guide-to-start-a-single-node-cluster-in-docker/383560 "2025-11-26T11:08:49Z")
I found this: Start a single-node cluster in Docker | Elastic Docs but I am probably misunderstanding something. The container does not work. The guide never discovery.type to single-node which is necessary by my unders… --- ## [Search is very slow in multilingual setup](https://discuss.elastic.co/t/search-is-very-slow-in-multilingual-setup/383666)
**Author:** [@manohar\_chowdary](https://discuss.elastic.co/u/manohar_chowdary)\ **Replies:** 9\ **Last updated:** [November 26, 2025, 10:53am UTC](https://discuss.elastic.co/t/search-is-very-slow-in-multilingual-setup/383666 "2025-11-26T10:53:53Z")
Hello, We currently have english, french, spanish and 7 other languages supported in search and search has become too slow now, even sometimes it timeout, one of bottle necks i think is to do with multilingual support ,… --- ## [Probable Bug in HyperLogLogPlusPlus](https://discuss.elastic.co/t/probable-bug-in-hyperloglogplusplus/383620)
**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\ **Replies:** 4\ **Last updated:** [November 26, 2025, 6:09am UTC](https://discuss.elastic.co/t/probable-bug-in-hyperloglogplusplus/383620 "2025-11-26T06:09:14Z")
Hello everyone, Somehow I am facing an issue while running certain aggregation query when cardinality is high. The thread seems to be stuck at trace: "elasticsearch\[es-data-pz-listening4-es7-125-1b\]\[search\]\[T#12\]" #1… --- ## [Grok doesn't work on Elastic but on dubugger yes](https://discuss.elastic.co/t/grok-doesnt-work-on-elastic-but-on-dubugger-yes/383641)
**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\ **Replies:** 5\ **Last updated:** [November 25, 2025, 8:09pm UTC](https://discuss.elastic.co/t/grok-doesnt-work-on-elastic-but-on-dubugger-yes/383641 "2025-11-25T20:09:01Z")
Hi, i’m running a pipeline with Grok filter and date filter. The date filter is running good. Even if my grok matches the logs, on elastic I don't see them parsed, it's like it ignores my grok filter. This is the pipeli… --- ## [DC-DR setup of elasticsearch](https://discuss.elastic.co/t/dc-dr-setup-of-elasticsearch/383633)
**Author:** [@Sahana15](https://discuss.elastic.co/u/Sahana15)\ **Replies:** 5\ **Last updated:** [November 25, 2025, 6:36pm UTC](https://discuss.elastic.co/t/dc-dr-setup-of-elasticsearch/383633 "2025-11-25T18:36:21Z")
Hi Community, I have a few questions regarding a DC–DR setup for Elasticsearch, Kibana, and Logstash. Your insights would be greatly appreciated. We plan to configure Hot and Warm nodes in the primary DC. Can the same … --- ## [ES|QL dashboard table visualization displays time fields in UTC time zone](https://discuss.elastic.co/t/es-ql-dashboard-table-visualization-displays-time-fields-in-utc-time-zone/382245)
**Author:** [@allatrue](https://discuss.elastic.co/u/allatrue)\ **Replies:** 5\ **Last updated:** [November 25, 2025, 2:00pm UTC](https://discuss.elastic.co/t/es-ql-dashboard-table-visualization-displays-time-fields-in-utc-time-zone/382245 "2025-11-25T14:00:30Z")
Hello everyone, is there a way to make ES|QL visualization to display time fields in local time zone, like Lens it does? Discover converts times automatically to local time, as well as Lens dashboard visualizations. Bu… --- ## [Alternative to CAT shards API](https://discuss.elastic.co/t/alternative-to-cat-shards-api/383600)
**Author:** [@pingo](https://discuss.elastic.co/u/pingo)\ **Replies:** 3\ **Last updated:** [November 25, 2025, 12:13pm UTC](https://discuss.elastic.co/t/alternative-to-cat-shards-api/383600 "2025-11-25T12:13:21Z")
Hey! All of the CAT APIs come with this disclaimer: IMPORTANT: cat APIs are only intended for human consumption using the command line or Kibana console. They are not intended for use by applications. Is there an alt… --- ## [Some agent API keys get invalidated then deleted](https://discuss.elastic.co/t/some-agent-api-keys-get-invalidated-then-deleted/383631)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [November 25, 2025, 4:00am UTC](https://discuss.elastic.co/t/some-agent-api-keys-get-invalidated-then-deleted/383631 "2025-11-25T04:00:50Z")
I noticed errors “Unable to authenticate - apikey not found”. For a few apikeys. They are frequently repeated. This is an Elastic cloud hosted stack. These seem to have started with the prior version update, then mor… --- ## [Request for enhancement: Messages like "Authentication using apikey failed" need source IP address](https://discuss.elastic.co/t/request-for-enhancement-messages-like-authentication-using-apikey-failed-need-source-ip-address/383629)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [November 24, 2025, 6:42pm UTC](https://discuss.elastic.co/t/request-for-enhancement-messages-like-authentication-using-apikey-failed-need-source-ip-address/383629 "2025-11-24T18:42:28Z")
It’s difficult to find where these bad API keys are coming from. The only suggestion is to enable audit, which is overkill and uses a lot of resources logging 99% of the audit events that are good. If the x\_forwarded\_f… --- ## [Unable to connect the logtash](https://discuss.elastic.co/t/unable-to-connect-the-logtash/383628)
**Author:** [@Kyu\_Kazami](https://discuss.elastic.co/u/Kyu_Kazami)\ **Replies:** 0\ **Last updated:** [November 24, 2025, 6:38pm UTC](https://discuss.elastic.co/t/unable-to-connect-the-logtash/383628 "2025-11-24T18:38:35Z")
Hi, im kinda new in this ELK Stack things, i’do have a problem with connectiong nginx to logstash =\> ES. the ELK stack is perfectly run but when im running the logstash to connect logstash and ES it just like this kyuka… --- ## [Custom rules parameter](https://discuss.elastic.co/t/custom-rules-parameter/383337)
**Author:** [@Le\_Philosophe](https://discuss.elastic.co/u/Le_Philosophe)\ **Replies:** 4\ **Last updated:** [November 22, 2025, 5:08pm UTC](https://discuss.elastic.co/t/custom-rules-parameter/383337 "2025-11-22T17:08:25Z")
Hello, I have some data i collected and visualizing in Kibana.Now I have defined a ML job to monitor high/low filerate but I want the ML analysis to stop outside the range the data is collected(eg: 7 to 9pm data are not… --- ## [Winlogbeat 9.2.1 Fails to Ingest Specific Windows Application Event (Winlogon Event ID 6000)](https://discuss.elastic.co/t/winlogbeat-9-2-1-fails-to-ingest-specific-windows-application-event-winlogon-event-id-6000/383593)
**Author:** [@banksmt](https://discuss.elastic.co/u/banksmt)\ **Replies:** 1\ **Last updated:** [November 22, 2025, 8:37am UTC](https://discuss.elastic.co/t/winlogbeat-9-2-1-fails-to-ingest-specific-windows-application-event-winlogon-event-id-6000/383593 "2025-11-22T08:37:15Z")
We are experiencing an issue where Winlogbeat successfully ingests all Windows log channels (Application/System/Security/Sysmon) except for one very specific event type: Microsoft-Windows-Winlogon — Event ID 6000 ("The … --- ## [Unable to remove extra fields when using filebeat](https://discuss.elastic.co/t/unable-to-remove-extra-fields-when-using-filebeat/383579)
**Author:** [@Zhi\_Yang](https://discuss.elastic.co/u/Zhi_Yang)\ **Replies:** 1\ **Last updated:** [November 21, 2025, 6:43pm UTC](https://discuss.elastic.co/t/unable-to-remove-extra-fields-when-using-filebeat/383579 "2025-11-21T18:43:16Z")
so i had a very simple ELK install with a very simple filebeat install as well elk works fine, however with filebeat i get a bunch of fields that i do not want like nginx.error.message mongodb.log.message and a bunch… --- ## [What's the expected behaviour when a document is updated and deleted in the same bulk request?](https://discuss.elastic.co/t/whats-the-expected-behaviour-when-a-document-is-updated-and-deleted-in-the-same-bulk-request/383566)
**Author:** [@js\_herbert](https://discuss.elastic.co/u/js_herbert)\ **Replies:** 2\ **Last updated:** [November 21, 2025, 5:29pm UTC](https://discuss.elastic.co/t/whats-the-expected-behaviour-when-a-document-is-updated-and-deleted-in-the-same-bulk-request/383566 "2025-11-21T17:29:26Z")
Hi all, A quick question about bulk requests. We have some code that we suspect is occasionally including an index and a delete operation for the same document in the same bulk request. The order of the operations dicta… --- ## [No of buckets creation for composite aggregation](https://discuss.elastic.co/t/no-of-buckets-creation-for-composite-aggregation/383350)
**Author:** [@KrishnaVardhan\_Reddy](https://discuss.elastic.co/u/KrishnaVardhan_Reddy)\ **Replies:** 1\ **Last updated:** [November 21, 2025, 5:25pm UTC](https://discuss.elastic.co/t/no-of-buckets-creation-for-composite-aggregation/383350 "2025-11-21T17:25:08Z")
lets say, I have 40000 unique buckets, can i use composite aggregation to fetch 1000 buckets at once, repeat the call until i fetch all the buckets --- ## [Migrating from Elastic NEST v7 to .NET Elastic Client v8: Index alias search](https://discuss.elastic.co/t/migrating-from-elastic-nest-v7-to-net-elastic-client-v8-index-alias-search/383574)
**Author:** [@zoey\_L](https://discuss.elastic.co/u/zoey_L)\ **Replies:** 4\ **Last updated:** [November 21, 2025, 4:28pm UTC](https://discuss.elastic.co/t/migrating-from-elastic-nest-v7-to-net-elastic-client-v8-index-alias-search/383574 "2025-11-21T16:28:42Z")
while migrating .net package from NEST to Elastic.Clients.Elasticsearch. Observed one issue of double search indexes if they have the same alias. We have a time rollover index created once a week. every week, there wil… --- ## [Snapshot disaster recovery settings only](https://discuss.elastic.co/t/snapshot-disaster-recovery-settings-only/383589)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 2\ **Last updated:** [November 21, 2025, 3:41pm UTC](https://discuss.elastic.co/t/snapshot-disaster-recovery-settings-only/383589 "2025-11-21T15:41:53Z")
Thanks to the valuable help of @leandrojmp I was able to successfully configure what was necessary to use the “Snapshot and restore” feature. I have another question: I don't have enough space for the snapshot to save… --- ## [Repository\_verification\_exception](https://discuss.elastic.co/t/repository-verification-exception/383588)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 3\ **Last updated:** [November 21, 2025, 2:23pm UTC](https://discuss.elastic.co/t/repository-verification-exception/383588 "2025-11-21T14:23:43Z")
I am in the process of configuring the “Snapshot and restore” functionality. I have a cluster of 3 servers for Elasticsearch. From the available options, “Shared File System” has been selected. I took one of the se… --- ## [Using winlogbeat 9.2.0 to import event logs from a client for analysis. The Dashboard fields are not matching the records](https://discuss.elastic.co/t/using-winlogbeat-9-2-0-to-import-event-logs-from-a-client-for-analysis-the-dashboard-fields-are-not-matching-the-records/383583)
**Author:** [@mmopwcdk](https://discuss.elastic.co/u/mmopwcdk)\ **Replies:** 2\ **Last updated:** [November 21, 2025, 1:19pm UTC](https://discuss.elastic.co/t/using-winlogbeat-9-2-0-to-import-event-logs-from-a-client-for-analysis-the-dashboard-fields-are-not-matching-the-records/383583 "2025-11-21T13:19:16Z")
Hi there. I am trying to analyze some Windows security logs (as that is all I was given) from a client, using Elastic Stack and the security features and dashboards it provides. I have managed to have winlogbeat create… --- ## [Error creating runner from config: can not convert 'object' into 'string' accessing 'diskio.include\_devices.0'](https://discuss.elastic.co/t/error-creating-runner-from-config-can-not-convert-object-into-string-accessing-diskio-include-devices-0/383533)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [November 21, 2025, 1:17pm UTC](https://discuss.elastic.co/t/error-creating-runner-from-config-can-not-convert-object-into-string-accessing-diskio-include-devices-0/383533 "2025-11-21T13:17:35Z")
Hello, As I noticed a lot of ”Could not return any performance counter values for \\.\\Y: .Error: Incorrect function.” For the diskio dataset, I tried setting: But this results in: Error creating runner from config… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=27) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=29)