# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=283 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 284 --- ## [Need help with grok](https://discuss.elastic.co/t/need-help-with-grok/355674)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 10:27am UTC](https://discuss.elastic.co/t/need-help-with-grok/355674 "2024-03-19T10:27:46Z")
I need to perform a grok on the directory field with example value: C:\\Users\\takuya\\Desktop\\\_Summary presentation\\references Where the Desktop value is pulled out and saved as a new field containing the Desktop value. --- ## [Docs count on migration - difference between \`\_count\` and \`\_stats\`](https://discuss.elastic.co/t/docs-count-on-migration-difference-between-count-and-stats/355620)
**Author:** [@maxxer](https://discuss.elastic.co/u/maxxer)\ **Replies:** 5\ **Last updated:** [March 19, 2024, 10:24am UTC](https://discuss.elastic.co/t/docs-count-on-migration-difference-between-count-and-stats/355620 "2024-03-19T10:24:33Z")
Hi. We're migrating from an on-premise Elasticsearch 7.17.10 to an Elastic-cloud 7.17.14 one. We are migrating using esm. Everything seems fine, but we noticed some high-volume indexes have a \_count very different from… --- ## [Custom hostname on managed Kibana?](https://discuss.elastic.co/t/custom-hostname-on-managed-kibana/355701)
**Author:** [@maxxer](https://discuss.elastic.co/u/maxxer)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 10:17am UTC](https://discuss.elastic.co/t/custom-hostname-on-managed-kibana/355701 "2024-03-19T10:17:17Z")
Hi. Is it possible to reach our managed Kibana instance with a custom URL, belonging to our company domain? Currently, we have whatever-production.kb.europe-west2.gcp.elastic-cloud.com, which is a CNAME to proxy-produc… --- ## [Need parameter based query Kibana Dashboard](https://discuss.elastic.co/t/need-parameter-based-query-kibana-dashboard/355687)
**Author:** [@Tqvenkata](https://discuss.elastic.co/u/Tqvenkata)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 9:53am UTC](https://discuss.elastic.co/t/need-parameter-based-query-kibana-dashboard/355687 "2024-03-19T09:53:47Z")
Hi, I want to create dashboard to view the data based on USERID as parameter from application Please find the Sample Mapping put /testindextest2 { "mappings" : { "properties" : { "first\_name" : { "type" … --- ## [ELK Migration](https://discuss.elastic.co/t/elk-migration/355698)
**Author:** [@Aniket\_Dubey](https://discuss.elastic.co/u/Aniket_Dubey)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 9:39am UTC](https://discuss.elastic.co/t/elk-migration/355698 "2024-03-19T09:39:40Z")
I have an Elasticsearch cluster on Elastic Cloud. I have another Elastic cluster on kubernetes (ECK). How do I take a snapshot from Elasticsearch cluster on Elastic Cloud and store it in S3 bucket and restore this on Ela… --- ## [Memory Usage Issues with Auditbeat](https://discuss.elastic.co/t/memory-usage-issues-with-auditbeat/355696)
**Author:** [@hassangongs](https://discuss.elastic.co/u/hassangongs)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 9:36am UTC](https://discuss.elastic.co/t/memory-usage-issues-with-auditbeat/355696 "2024-03-19T09:36:05Z")
Could you please ask our official developers at Elastic if it's normal for the memory range fluctuation in Auditbeat usage to be between 100MB and 300+MB? --- ## [This Elastic installation has strict security requirements enabled that your current browser does not meet](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/355298)
**Author:** [@nkf\_123](https://discuss.elastic.co/u/nkf_123)\ **Replies:** 5\ **Last updated:** [March 19, 2024, 9:22am UTC](https://discuss.elastic.co/t/this-elastic-installation-has-strict-security-requirements-enabled-that-your-current-browser-does-not-meet/355298 "2024-03-19T09:22:32Z")
I tried in Chrome, edge and Firefox after updating the browser version but not working. Please see the screenshot attached. Getting this : "This Elastic installation has strict security requirements enabled that your cu… --- ## [Nodejs update to 16.20.2 and above](https://discuss.elastic.co/t/nodejs-update-to-16-20-2-and-above/353833)
**Author:** [@Ali6](https://discuss.elastic.co/u/Ali6)\ **Replies:** 4\ **Last updated:** [March 19, 2024, 9:20am UTC](https://discuss.elastic.co/t/nodejs-update-to-16-20-2-and-above/353833 "2024-03-19T09:20:39Z")
Hi Team, I would like know that if NodeJS to be updated in Kibana v7.17 to 16.20.2 or later due to its vulnerability. CVE-2023-32559 --- ## [Standalone Elastic Agent Missing Authentication Credentials](https://discuss.elastic.co/t/standalone-elastic-agent-missing-authentication-credentials/355459)
**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 9:20am UTC](https://discuss.elastic.co/t/standalone-elastic-agent-missing-authentication-credentials/355459 "2024-03-19T09:20:08Z")
Dear Elastic Community, We're installing a standalone elastic agent as a fleet server on a server dedicated for it in an air-gapped environment. We use APIs instead of Kibana UI for creating a policy and a service token… --- ## [Classification of long text](https://discuss.elastic.co/t/classification-of-long-text/355324)
**Author:** [@tartiflette](https://discuss.elastic.co/u/tartiflette)\ **Replies:** 6\ **Last updated:** [March 19, 2024, 9:14am UTC](https://discuss.elastic.co/t/classification-of-long-text/355324 "2024-03-19T09:14:59Z")
Hey, I am using the ES machine learning classification feature trying to predict a category of a certain text. I have orientated myself on this blog post, but I believe I'm doing something wrong in preparing the data. I… --- ## [Dashboards sorting](https://discuss.elastic.co/t/dashboards-sorting/355285)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 8:19am UTC](https://discuss.elastic.co/t/dashboards-sorting/355285 "2024-03-19T08:19:42Z")
In Kibana 8.12 when I go to the dashboards page, the default sorting is by the "Last updated" field. How to set sorting by "Name" field by default? --- ## [Separate syslog](https://discuss.elastic.co/t/separate-syslog/355689)
**Author:** [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 8:13am UTC](https://discuss.elastic.co/t/separate-syslog/355689 "2024-03-19T08:13:06Z")
I need to receive syslog from different systems. All syslogs are using UDP 514 port and cannot be changed in the source Now I need to separate different syslogs in logstash. logstash system reserved port below 1024. S… --- ## [Certain fields in "drop\_fields" are not dropped](https://discuss.elastic.co/t/certain-fields-in-drop-fields-are-not-dropped/355679)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 6:07am UTC](https://discuss.elastic.co/t/certain-fields-in-drop-fields-are-not-dropped/355679 "2024-03-19T06:07:26Z")
Hi, I'm trying to drop certain fields using filebeat's drop\_fields processor, so that they will not be indexed to my Elasticsearch. I'm using version 8.8.0 for both filebeat and elasticsearch. Most of the fields specif… --- ## [RedHat elastic search image in openshift](https://discuss.elastic.co/t/redhat-elastic-search-image-in-openshift/353769)
**Author:** [@Sohaib\_El\_Mediouni](https://discuss.elastic.co/u/Sohaib_El_Mediouni)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 3:36am UTC](https://discuss.elastic.co/t/redhat-elastic-search-image-in-openshift/353769 "2024-03-19T03:36:56Z")
Hello i'm trying to setup an Elasticsearch and a kibana on openshift and i used a redhat image but when i go to the pod and i see what's inside elasticsearch.yml i find this : \*\*cat elasticsearch.yml\*\* \*\*cluster.name: … --- ## [Filebeat multinline don't work](https://discuss.elastic.co/t/filebeat-multinline-dont-work/355650)
**Author:** [@Exdar](https://discuss.elastic.co/u/Exdar)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 3:28am UTC](https://discuss.elastic.co/t/filebeat-multinline-dont-work/355650 "2024-03-19T03:28:48Z")
Hi all. I have a problem with filebeat multinline filebeat.yml Input - type: log id: onetest enabled: true tags: \["onetest"\] parsers: - multinline: type: pattern pattern: '(\\d\\d:\\d\\d)\\.(\\d+)-(\\… --- ## [No output from AWS integrations](https://discuss.elastic.co/t/no-output-from-aws-integrations/355494)
**Author:** [@Paul\_Wagner](https://discuss.elastic.co/u/Paul_Wagner)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 3:21am UTC](https://discuss.elastic.co/t/no-output-from-aws-integrations/355494 "2024-03-19T03:21:45Z")
I'm running Fleet server with multiple AWS integrations but I'm not getting any output from the integrations. Fleet server, which is running the integrations is outputting logs and metrics normally, the integrations are … --- ## [Monitor a containerized ReactJs Web Application (with Nginx) with Elastic APM](https://discuss.elastic.co/t/monitor-a-containerized-reactjs-web-application-with-nginx-with-elastic-apm/354997)
**Author:** [@toduythienluong](https://discuss.elastic.co/u/toduythienluong)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 3:16am UTC](https://discuss.elastic.co/t/monitor-a-containerized-reactjs-web-application-with-nginx-with-elastic-apm/354997 "2024-03-19T03:16:05Z")
Hi, I have a frontend application with ReactJs, containerized with nginx, my dockerfile as below, this is supposed to be be deployed on k8s. I want to integrate the web application with Elastic APM, could you help a gui… --- ## [Kibana visualization filter issue in 8.12.1](https://discuss.elastic.co/t/kibana-visualization-filter-issue-in-8-12-1/355597)
**Author:** [@siva0030](https://discuss.elastic.co/u/siva0030)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 2:02am UTC](https://discuss.elastic.co/t/kibana-visualization-filter-issue-in-8-12-1/355597 "2024-03-19T02:02:48Z")
Hello Team, I recently upgraded my monitoring ELK setup to version 8.12.1 . Following the upgrade, I encountered an issue in Kibana. Whenever I create a visualization with various filters and add it to the dashboard, th… --- ## [Basic Semantic Search or Semantic Search with ELSER](https://discuss.elastic.co/t/basic-semantic-search-or-semantic-search-with-elser/353845)
**Author:** [@9d224d4833094bd482cf](https://discuss.elastic.co/u/9d224d4833094bd482cf)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 11:29pm UTC](https://discuss.elastic.co/t/basic-semantic-search-or-semantic-search-with-elser/353845 "2024-03-18T23:29:47Z")
I want to understand difference between Creating simple vector search by importing model (may be from hugging face) versus Using ELSER Any guidelines or recommendations on choosing approach? What are the use cases fo… --- ## [Search after| Same request return different results](https://discuss.elastic.co/t/search-after-same-request-return-different-results/355665)
**Author:** [@amladenovic](https://discuss.elastic.co/u/amladenovic)\ **Replies:** 0\ **Last updated:** [March 18, 2024, 10:56pm UTC](https://discuss.elastic.co/t/search-after-same-request-return-different-results/355665 "2024-03-18T22:56:08Z")
Hello. I have 2 instances and index with 3 shards. For my deep search im using search after. Search after uses doc id of document as sort parameter, with the following options "\_source":false , stored\_fields":\["none"\] . … --- ## [Unexpected behavior with date fields in Elasticsearch](https://discuss.elastic.co/t/unexpected-behavior-with-date-fields-in-elasticsearch/355527)
**Author:** [@victor\_gonzalez](https://discuss.elastic.co/u/victor_gonzalez)\ **Replies:** 5\ **Last updated:** [March 18, 2024, 10:00pm UTC](https://discuss.elastic.co/t/unexpected-behavior-with-date-fields-in-elasticsearch/355527 "2024-03-18T22:00:42Z")
I'm encountering an unexpected behavior with date fields in Elasticsearch. After converting date fields to text fields in SQL Server and indexing them in Elasticsearch, we noticed that Elasticsearch seems to adjust the d… --- ## [Logstash filter aggregate with 2 nested fields](https://discuss.elastic.co/t/logstash-filter-aggregate-with-2-nested-fields/355548)
**Author:** [@Lucas\_Giusti](https://discuss.elastic.co/u/Lucas_Giusti)\ **Replies:** 4\ **Last updated:** [March 18, 2024, 9:23pm UTC](https://discuss.elastic.co/t/logstash-filter-aggregate-with-2-nested-fields/355548 "2024-03-18T21:23:22Z")
Goodnight. Could you help me with the problem below? I have the mysql table below: productId productName categoryId categoryName locationId locationPrice --------------------------------------------… --- ## [Field count v. performance](https://discuss.elastic.co/t/field-count-v-performance/355439)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 10\ **Last updated:** [March 18, 2024, 8:50pm UTC](https://discuss.elastic.co/t/field-count-v-performance/355439 "2024-03-18T20:50:22Z")
Is indexing speed affected by the total number of fields in an index? I understand there are costs from a few areas: cluster state size disk efficiency Lucene resources And the "Mappings limit settings" doc says many… --- ## [Is there a way to create an index to look up the names of saved object IDs](https://discuss.elastic.co/t/is-there-a-way-to-create-an-index-to-look-up-the-names-of-saved-object-ids/355653)
**Author:** [@abertolli](https://discuss.elastic.co/u/abertolli)\ **Replies:** 0\ **Last updated:** [March 18, 2024, 7:42pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-create-an-index-to-look-up-the-names-of-saved-object-ids/355653 "2024-03-18T19:42:16Z")
Is there any way to make the information about saved objects (primarily dashboards) available to another cluster? We were hoping to be able to use cross-cluster search on the .kibana index, but it appears that the infor… --- ## [Field name limitations](https://discuss.elastic.co/t/field-name-limitations/355522)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 2\ **Last updated:** [March 18, 2024, 7:08pm UTC](https://discuss.elastic.co/t/field-name-limitations/355522 "2024-03-18T19:08:34Z")
I'm wondering what the limitations are for field names. I've seen some crazy things in our dynamic mappings, so I bet Lucene and ES are super flexible. For example, can you use a leading underscore? I notice that ES m… --- ## [Searching dashboards](https://discuss.elastic.co/t/searching-dashboards/355649)
**Author:** [@griffer98](https://discuss.elastic.co/u/griffer98)\ **Replies:** 0\ **Last updated:** [March 18, 2024, 6:40pm UTC](https://discuss.elastic.co/t/searching-dashboards/355649 "2024-03-18T18:40:57Z")
I have a production cluster and a monitoring cluster. I have set up cross cluster search but I can only search indices it seems and want I want to use in the get object api. I have logs on the monitoring that tell me the… --- ## [Built-in superuser role grants access to Kibana despite UI saying it does not?](https://discuss.elastic.co/t/built-in-superuser-role-grants-access-to-kibana-despite-ui-saying-it-does-not/355417)
**Author:** [@sparrowt](https://discuss.elastic.co/u/sparrowt)\ **Replies:** 5\ **Last updated:** [March 18, 2024, 5:23pm UTC](https://discuss.elastic.co/t/built-in-superuser-role-grants-access-to-kibana-despite-ui-saying-it-does-not/355417 "2024-03-18T17:23:59Z")
I'm a bit confused and wondering if there is a UI bug, as well as perhaps clearer documentation. On /app/management/security/roles/edit/superuser it says at the bottom: This role does not grant access to Kibana Howe… --- ## [Cloud metadata](https://discuss.elastic.co/t/cloud-metadata/355634)
**Author:** [@tegerei](https://discuss.elastic.co/u/tegerei)\ **Replies:** 0\ **Last updated:** [March 18, 2024, 4:46pm UTC](https://discuss.elastic.co/t/cloud-metadata/355634 "2024-03-18T16:46:45Z")
Hello, I am collecting logs using filebeat from a VM in proxmox I created using generic cloud images for Debian. The issue I have is the fields are not properly populated on Kibana, such as the image attached. How do … --- ## [Image signature on elasticsearch images](https://discuss.elastic.co/t/image-signature-on-elasticsearch-images/355630)
**Author:** [@Vijeya\_Nidhi](https://discuss.elastic.co/u/Vijeya_Nidhi)\ **Replies:** 0\ **Last updated:** [March 18, 2024, 4:12pm UTC](https://discuss.elastic.co/t/image-signature-on-elasticsearch-images/355630 "2024-03-18T16:12:34Z")
Is it possible to add some signature when the docker image is built so that when the image is consumed from docker hub, we can verify the image to ensure it is the image built by elastic team and then use it in our syste… --- ## [Custom document scoring with a secondary 'penalization' query](https://discuss.elastic.co/t/custom-document-scoring-with-a-secondary-penalization-query/355541)
**Author:** [@ChapterSevenSeeds](https://discuss.elastic.co/u/ChapterSevenSeeds)\ **Replies:** 2\ **Last updated:** [March 18, 2024, 4:08pm UTC](https://discuss.elastic.co/t/custom-document-scoring-with-a-secondary-penalization-query/355541 "2024-03-18T16:08:14Z")
I recently heard about a rather unique method that a company is using to rank documents from a query. First, the queries that this company uses control the scoring down to a T by replacing the document scores with the in… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=282) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=284)