# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=284 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 285 --- ## [Logstash not started after change path.logs](https://discuss.elastic.co/t/logstash-not-started-after-change-path-logs/355616)
**Author:** [@Exdar](https://discuss.elastic.co/u/Exdar)\ **Replies:** 4\ **Last updated:** [March 18, 2024, 3:43pm UTC](https://discuss.elastic.co/t/logstash-not-started-after-change-path-logs/355616 "2024-03-18T15:43:49Z")
Hi all! I am newbie in ES\\logstash and etc. I installed ELK on Windows Server 2022 and if I not change logstash.yml - logstash starting and I got "Starting server on port..." But if I change section path log.level: w… --- ## [Index Search while using alias](https://discuss.elastic.co/t/index-search-while-using-alias/355035)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 17\ **Last updated:** [March 18, 2024, 3:24pm UTC](https://discuss.elastic.co/t/index-search-while-using-alias/355035 "2024-03-18T15:24:30Z")
Hi Team, We had below situation, where we created a alias (emp) on top of five index (employee\_01..employee\_05 which contains similar kind of data). While searching particualr key,value as mentioned below. We expect i… --- ## [How to configure direct\_max\_in\_bytes](https://discuss.elastic.co/t/how-to-configure-direct-max-in-bytes/355603)
**Author:** [@randomnamegenerator](https://discuss.elastic.co/u/randomnamegenerator)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 2:35pm UTC](https://discuss.elastic.co/t/how-to-configure-direct-max-in-bytes/355603 "2024-03-18T14:35:59Z")
Hello All, I am wanting to adjust the direct\_max\_in\_bytes value , the documentation I have read deals with how adjust the jvm heap size but not the off heap size? \*\* \*\* If anyone can advise that would be greatly… --- ## [Downgrade the license to basic](https://discuss.elastic.co/t/downgrade-the-license-to-basic/355509)
**Author:** [@vinholla](https://discuss.elastic.co/u/vinholla)\ **Replies:** 4\ **Last updated:** [March 18, 2024, 2:15pm UTC](https://discuss.elastic.co/t/downgrade-the-license-to-basic/355509 "2024-03-18T14:15:34Z")
how to downgrade license from - trial to basic as we are getting below error {"error":{"root\_cause":\[{"type":"security\_exception","reason":"current license is non-compliant for \[security\]","license.expired.feature":"sec… --- ## [Failed shard on node \[bnK31ibrRG6bSpw\_pYK2BA\]: shard failure, reason \[corrupt file (source: \[index id\[CTR0CY4BdvDW7Z2cSc8C\] origin\[PRIMARY\] seq#\[27209007\]\])\], failure org.apache.lucene.store.AlreadyClosedException: this IndexWriter is closed](https://discuss.elastic.co/t/failed-shard-on-node-bnk31ibrrg6bspw-pyk2ba-shard-failure-reason-corrupt-file-source-index-id-ctr0cy4bdvdw7z2csc8c-origin-primary-seq-27209007-failure-org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/354711)
**Author:** [@kishor1](https://discuss.elastic.co/u/kishor1)\ **Replies:** 8\ **Last updated:** [March 18, 2024, 2:00pm UTC](https://discuss.elastic.co/t/failed-shard-on-node-bnk31ibrrg6bspw-pyk2ba-shard-failure-reason-corrupt-file-source-index-id-ctr0cy4bdvdw7z2csc8c-origin-primary-seq-27209007-failure-org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/354711 "2024-03-18T14:00:03Z")
I have deployed my elasticsearch,kibana and filebeat in kuberntes 3 days before through ECK operator. i was able to access it through kibana dashboard. but now when i am trying to access this elasticsearch showing sta… --- ## [Incorrect ELASTIC\_HOSTS variable in Logstash container](https://discuss.elastic.co/t/incorrect-elastic-hosts-variable-in-logstash-container/355599)
**Author:** [@thibaut\_a](https://discuss.elastic.co/u/thibaut_a)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 1:54pm UTC](https://discuss.elastic.co/t/incorrect-elastic-hosts-variable-in-logstash-container/355599 "2024-03-18T13:54:57Z")
Hi, I have a docker compose file with which I start 3 ES nodes (+ 1 for the setup), 1 Kibana, and 1 Logstash. The 4th ones works well when I deploy, but Logstash crashes. Here is the error I get from logs: \[2024-03-18T1… --- ## [Node.js 1.1.9 vulnerability in elastic docker agent image CVE-2023-4228](https://discuss.elastic.co/t/node-js-1-1-9-vulnerability-in-elastic-docker-agent-image-cve-2023-4228/355605)
**Author:** [@miksonx](https://discuss.elastic.co/u/miksonx)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 1:39pm UTC](https://discuss.elastic.co/t/node-js-1-1-9-vulnerability-in-elastic-docker-agent-image-cve-2023-4228/355605 "2024-03-18T13:39:14Z")
This issue is related to docker image elastic-agent-complete (8.12.1, 8.12.2) According the CVE-2023-4228 the Node.js 1.1.9 version is vulnerable. Description The ip package before 1.1.9 for Node.js might allow SSRF be… --- ## [Can we have Elastic agent policy for Dev and Prod Environments](https://discuss.elastic.co/t/can-we-have-elastic-agent-policy-for-dev-and-prod-environments/355591)
**Author:** [@manukoli1986](https://discuss.elastic.co/u/manukoli1986)\ **Replies:** 2\ **Last updated:** [March 18, 2024, 12:49pm UTC](https://discuss.elastic.co/t/can-we-have-elastic-agent-policy-for-dev-and-prod-environments/355591 "2024-03-18T12:49:55Z")
We were using beat prior to elastic agent. Now our requirement is Elastic agent to provision on dev and prod instances. I have gone thru the documentation process of how to setup and configure Elastic agent on remote ho… --- ## [How do I create a composite aggregate in c#](https://discuss.elastic.co/t/how-do-i-create-a-composite-aggregate-in-c/355563)
**Author:** [@Eric\_Paul](https://discuss.elastic.co/u/Eric_Paul)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 11:47am UTC](https://discuss.elastic.co/t/how-do-i-create-a-composite-aggregate-in-c/355563 "2024-03-18T11:47:52Z")
I have been trying for days now to duplicate the following query in c# POST /traces-apm\*/\_async\_search { "size": 0, "query": { "bool": { "must": \[ { "wildcard": { "url.origina… --- ## [Special Character # search on Kibana Search Bar](https://discuss.elastic.co/t/special-character-search-on-kibana-search-bar/355147)
**Author:** [@nkf\_123](https://discuss.elastic.co/u/nkf_123)\ **Replies:** 4\ **Last updated:** [March 18, 2024, 10:54am UTC](https://discuss.elastic.co/t/special-character-search-on-kibana-search-bar/355147 "2024-03-18T10:54:49Z")
I have defined an analyzer "analyzer": { "special\_analyzer": { "filter": \[ "lowercase", "custom\_special\_char\_filter" \], "type": "custom", "tokenizer": "whitespace" } } }, and it analyzes the # value QUERY: … --- ## [TypeError: Failed to fetch](https://discuss.elastic.co/t/typeerror-failed-to-fetch/355575)
**Author:** [@CGH](https://discuss.elastic.co/u/CGH)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 10:35am UTC](https://discuss.elastic.co/t/typeerror-failed-to-fetch/355575 "2024-03-18T10:35:22Z")
我该如何解决这个问题 版本8.12 at fetch\_Fetch.fetchResponse (http:/localhost:5601/70281/bundles/core/core.entry.js:1:277296) at async http:/localhost:5601/70281/bundles/core/core.entry.js:1:275707 at async http:/localhost:5601/70… --- ## [I have problem](https://discuss.elastic.co/t/i-have-problem/355297)
**Author:** [@miladmohabati](https://discuss.elastic.co/u/miladmohabati)\ **Replies:** 7\ **Last updated:** [March 18, 2024, 10:22am UTC](https://discuss.elastic.co/t/i-have-problem/355297 "2024-03-18T10:22:22Z")
I use netflow and filebeat But after a few weeks I saw this error in Discovery --- ## [Error : no handler found for uri](https://discuss.elastic.co/t/error-no-handler-found-for-uri/355588)
**Author:** [@1\_1](https://discuss.elastic.co/u/1_1)\ **Replies:** 0\ **Last updated:** [March 18, 2024, 10:11am UTC](https://discuss.elastic.co/t/error-no-handler-found-for-uri/355588 "2024-03-18T10:11:17Z")
I have error when try to get data from elastic. MacBook Pro 16 M1Pro JetBrains Rider 2023.3.3 project: net6.0 c#10 using Nest client version: 7.13.2 remote elastic version: "version" : { "7.17.8" } Invalid NEST response… --- ## [Refreshes happening due to the Update API](https://discuss.elastic.co/t/refreshes-happening-due-to-the-update-api/355423)
**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Replies:** 4\ **Last updated:** [March 18, 2024, 9:13am UTC](https://discuss.elastic.co/t/refreshes-happening-due-to-the-update-api/355423 "2024-03-18T09:13:53Z")
Hey, I have found a case where an unintended refresh happens, when you try to update a document, that has not been refreshed yet. Take the following example: DELETE test PUT test {"settings":{"refresh\_interval":"1h"}… --- ## [Nginx-ingress-controller-access, \_geoip\_database\_unavailable\_GeoLite2-City.mmdb, \_geoip\_database\_unavailable\_GeoLite2-ASN.mmdb](https://discuss.elastic.co/t/nginx-ingress-controller-access-geoip-database-unavailable-geolite2-city-mmdb-geoip-database-unavailable-geolite2-asn-mmdb/353325)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 30\ **Last updated:** [March 18, 2024, 8:48am UTC](https://discuss.elastic.co/t/nginx-ingress-controller-access-geoip-database-unavailable-geolite2-city-mmdb-geoip-database-unavailable-geolite2-asn-mmdb/353325 "2024-03-18T08:48:27Z")
Hi sir, Enabled the nginx ingress controller integration on elastic agent (kubernetes env) but the tags related to geo locations which were populated earlier are now not coming. kindly guide on this part. tags \[nginx-… --- ## [How to properly map fields from a CSV file in Elastic Custom Log Integration?](https://discuss.elastic.co/t/how-to-properly-map-fields-from-a-csv-file-in-elastic-custom-log-integration/355578)
**Author:** [@TEllegaard](https://discuss.elastic.co/u/TEllegaard)\ **Replies:** 0\ **Last updated:** [March 18, 2024, 6:54am UTC](https://discuss.elastic.co/t/how-to-properly-map-fields-from-a-csv-file-in-elastic-custom-log-integration/355578 "2024-03-18T06:54:35Z")
In Elastic, I have created a "Custom log integration", installed it on the agent and everything is working as it should. I have custom programme that dumps status information into a csv-file. Example data is: "@timestam… --- ## [ElasticSearch 7.17 FIPS (BouncyCastle)](https://discuss.elastic.co/t/elasticsearch-7-17-fips-bouncycastle/355499)
**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 5:17am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-fips-bouncycastle/355499 "2024-03-18T05:17:45Z")
Hi Team, I need to FIPS enable for our Elasticsearch. may i know the clear steps to enable the FIPS for the Elasticsearch --- ## [Stop Filebeat Log Rotation](https://discuss.elastic.co/t/stop-filebeat-log-rotation/355461)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 4:35am UTC](https://discuss.elastic.co/t/stop-filebeat-log-rotation/355461 "2024-03-18T04:35:14Z")
Hi Team, Is there any way we can stop filebeat log rotation. I had changed the parameter rotateeverybytes to 1GB but still log folder I can see it is creating 1 KB file and getting difficulties to trace the error during… --- ## [Upgrading OS version](https://discuss.elastic.co/t/upgrading-os-version/355571)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 0\ **Last updated:** [March 18, 2024, 3:44am UTC](https://discuss.elastic.co/t/upgrading-os-version/355571 "2024-03-18T03:44:34Z")
Hello guys, does anyone have experience upgrading the OS version on the Elk server? how's the upgrade? can you tell me the method? my cluster consists of 3 data nodes and 2 logstash Thanks --- ## [How to include "+" as part of search in Kibana](https://discuss.elastic.co/t/how-to-include-as-part-of-search-in-kibana/355295)
**Author:** [@willie\_0983](https://discuss.elastic.co/u/willie_0983)\ **Replies:** 4\ **Last updated:** [March 18, 2024, 2:47am UTC](https://discuss.elastic.co/t/how-to-include-as-part-of-search-in-kibana/355295 "2024-03-18T02:47:36Z")
Hi friends, I'm trying to find docs that have timestamps of a particular time zone e.g. +13:00 but having trouble matching it properly. It is matching times without the "+" in front. I have a text field called message… --- ## [Logstash conf file error](https://discuss.elastic.co/t/logstash-conf-file-error/355566)
**Author:** [@deathofangel](https://discuss.elastic.co/u/deathofangel)\ **Replies:** 1\ **Last updated:** [March 17, 2024, 11:36pm UTC](https://discuss.elastic.co/t/logstash-conf-file-error/355566 "2024-03-17T23:36:27Z")
Hello I need to constantly listen to a port and direct the json format logs coming there to elastic. I created a logstash.conf for this situation. But I always get the same error. logstash verison 8.12.2 input { tcp … --- ## [Cost by indicies](https://discuss.elastic.co/t/cost-by-indicies/355558)
**Author:** [@rreknar](https://discuss.elastic.co/u/rreknar)\ **Replies:** 3\ **Last updated:** [March 17, 2024, 10:41pm UTC](https://discuss.elastic.co/t/cost-by-indicies/355558 "2024-03-17T22:41:33Z")
Hello, I a working with one of the use cases where in I need to know what is the actual cost I am paying to elastic based on indices. For example, if I have 5 indices Index1,Index2,index3,index4 and index5 I would like … --- ## [Logging into elk stack brings me to elasticsearch json page](https://discuss.elastic.co/t/logging-into-elk-stack-brings-me-to-elasticsearch-json-page/355488)
**Author:** [@Vickistan](https://discuss.elastic.co/u/Vickistan)\ **Replies:** 4\ **Last updated:** [March 17, 2024, 10:08pm UTC](https://discuss.elastic.co/t/logging-into-elk-stack-brings-me-to-elasticsearch-json-page/355488 "2024-03-17T22:08:29Z")
I set up an elk stack, and I initially got to kibana by browsing to my FQDN. Now it takes me to a json block like this: { "name" : "ubuntu-elk", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "UVOrZ8a3T669Ft2\_… --- ## [How to fix the issue Master node not identified during the Elk upgrade from 6.8 to 7.13.2](https://discuss.elastic.co/t/how-to-fix-the-issue-master-node-not-identified-during-the-elk-upgrade-from-6-8-to-7-13-2/355562)
**Author:** [@arun.natha](https://discuss.elastic.co/u/arun.natha)\ **Replies:** 1\ **Last updated:** [March 17, 2024, 9:18pm UTC](https://discuss.elastic.co/t/how-to-fix-the-issue-master-node-not-identified-during-the-elk-upgrade-from-6-8-to-7-13-2/355562 "2024-03-17T21:18:52Z")
Hello everyone, I need a help. During the elastic migration from ELK 6.8 to 7.13.2 The problem that we are facing is that when the data is present cluster unique id is not present that's why it cannot connect. --- ## [Unable to extract PDF content](https://discuss.elastic.co/t/unable-to-extract-pdf-content/354481)
**Author:** [@NitzaAg](https://discuss.elastic.co/u/NitzaAg)\ **Replies:** 4\ **Last updated:** [March 12, 2024, 10:41pm UTC](https://discuss.elastic.co/t/unable-to-extract-pdf-content/354481 "2024-03-12T22:41:40Z")
I'm trying to extract text from a pdf, but I get the following: Unable to extract PDF content -\> Unable to end a page -\> I regret that I couldn't find an OCR parser to handle image/ocr-png.Please set the OCR\_STRATEGY to… --- ## [Plugins Instllation](https://discuss.elastic.co/t/plugins-instllation/355550)
**Author:** [@fatima1](https://discuss.elastic.co/u/fatima1)\ **Replies:** 3\ **Last updated:** [March 17, 2024, 12:10pm UTC](https://discuss.elastic.co/t/plugins-instllation/355550 "2024-03-17T12:10:43Z")
How can I correctly install Elasticsearch plugins in Elasticsearch 7.17.9?please some one guide me --- ## [When i use "systemctl start elasticsearch.service", don't work](https://discuss.elastic.co/t/when-i-use-systemctl-start-elasticsearch-service-dont-work/355530)
**Author:** [@nperez51](https://discuss.elastic.co/u/nperez51)\ **Replies:** 9\ **Last updated:** [March 17, 2024, 1:27am UTC](https://discuss.elastic.co/t/when-i-use-systemctl-start-elasticsearch-service-dont-work/355530 "2024-03-17T01:27:16Z")
Hello, i can't start elasticsearch in a ubuntu 22.04 vm in azure, there is the output of comands, thank you. systemctl status elasticsearch.service hive@TheHiveVM:~$ systemctl status elasticsearch.service × elasticsear… --- ## [Alerts generation when geo-points of two index intersects](https://discuss.elastic.co/t/alerts-generation-when-geo-points-of-two-index-intersects/355468)
**Author:** [@Rupa123](https://discuss.elastic.co/u/Rupa123)\ **Replies:** 1\ **Last updated:** [March 16, 2024, 9:24pm UTC](https://discuss.elastic.co/t/alerts-generation-when-geo-points-of-two-index-intersects/355468 "2024-03-16T21:24:09Z")
Hello, I want to show alerts on the map. This thing is possible if, I create index from kibana \> maps \> add layers \> create index zone and then draw bounding box and these bounding box are stored in index zone ; and … --- ## [Logstash ERROR: (NameError) cannot initialize Java class org.logstash.plugins.AliasRegistry (java.lang.ExceptionInInitializerError)](https://discuss.elastic.co/t/logstash-error-nameerror-cannot-initialize-java-class-org-logstash-plugins-aliasregistry-java-lang-exceptionininitializererror/355350)
**Author:** [@Abdulberk](https://discuss.elastic.co/u/Abdulberk)\ **Replies:** 14\ **Last updated:** [March 16, 2024, 2:25pm UTC](https://discuss.elastic.co/t/logstash-error-nameerror-cannot-initialize-java-class-org-logstash-plugins-aliasregistry-java-lang-exceptionininitializererror/355350 "2024-03-16T14:25:46Z")
I just got both Kibana and Elasticsearch up and running as a windows service and now i want to build a very basic logstash pipeline to figure how it will perform sending the results to Elasticsearch so that i can make su… --- ## [Netflow codec: how to decode and define a field outside a flowset?](https://discuss.elastic.co/t/netflow-codec-how-to-decode-and-define-a-field-outside-a-flowset/355538)
**Author:** [@Catwoolfii](https://discuss.elastic.co/u/Catwoolfii)\ **Replies:** 0\ **Last updated:** [March 16, 2024, 2:15pm UTC](https://discuss.elastic.co/t/netflow-codec-how-to-decode-and-define-a-field-outside-a-flowset/355538 "2024-03-16T14:15:26Z")
Hello everyone! I'm decoding a netflow stream, here's an example: СпойлерCisco NetFlow/IPFIX Version: 10 Length: 380 Timestamp: Jan 2, 2024 14:21:25.000000000 RTZ 2 (winter) ExportTime: 1704194485 FlowSequence: 2… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=283) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=285)