# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=291 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 292 --- ## [Logstash failed to execute action](https://discuss.elastic.co/t/logstash-failed-to-execute-action/354852)
**Author:** [@shrm](https://discuss.elastic.co/u/shrm)\ **Replies:** 5\ **Last updated:** [March 7, 2024, 1:16pm UTC](https://discuss.elastic.co/t/logstash-failed-to-execute-action/354852 "2024-03-07T13:16:24Z")
I have a docker-compose controlled elk, with the following configs. logstash/logstash.conf : input { jdbc { jdbc\_driver\_library =\> "/home/user/extvol/elk/mysql-connector-j-8.2.0.jar" jdbc\_driver\_class =\> "com… --- ## [Cisco iOS integration - No data has been received from this module yet](https://discuss.elastic.co/t/cisco-ios-integration-no-data-has-been-received-from-this-module-yet/354947)
**Author:** [@diselkgd7](https://discuss.elastic.co/u/diselkgd7)\ **Replies:** 1\ **Last updated:** [March 7, 2024, 1:14pm UTC](https://discuss.elastic.co/t/cisco-ios-integration-no-data-has-been-received-from-this-module-yet/354947 "2024-03-07T13:14:36Z")
I tried adding the Cisco Logs integration to my existing one-node cluster but I can't see any Cisco logs and am unsure what I am doing wrong. It already had filebeat configured for other logs and working - can you also … --- ## [ELK ESXi Dashboard](https://discuss.elastic.co/t/elk-esxi-dashboard/354942)
**Author:** [@Leo2](https://discuss.elastic.co/u/Leo2)\ **Replies:** 0\ **Last updated:** [March 7, 2024, 10:47am UTC](https://discuss.elastic.co/t/elk-esxi-dashboard/354942 "2024-03-07T10:47:58Z")
Hello, I use Elastic Search, Kibana and Logstash I would like to create a dashboard that includes a pannel with: Successful connections on an Esxi with root from an IP that is not mine . Failed connections on an E… --- ## [Visualize network trafic in bits/s](https://discuss.elastic.co/t/visualize-network-trafic-in-bits-s/354718)
**Author:** [@Soan\_L](https://discuss.elastic.co/u/Soan_L)\ **Replies:** 2\ **Last updated:** [March 7, 2024, 10:30am UTC](https://discuss.elastic.co/t/visualize-network-trafic-in-bits-s/354718 "2024-03-07T10:30:52Z")
Hello, I installed metricbeat 8.9.2 on my server. I would like retreive the bandwith used from two servers in the same visualization and get the result in bits and not in bytes. So I created a TSVB like this : For in… --- ## [Elasticsearch index wildcard vs alias performance inpact](https://discuss.elastic.co/t/elasticsearch-index-wildcard-vs-alias-performance-inpact/354933)
**Author:** [@J\_Kit](https://discuss.elastic.co/u/J_Kit)\ **Replies:** 1\ **Last updated:** [March 7, 2024, 10:07am UTC](https://discuss.elastic.co/t/elasticsearch-index-wildcard-vs-alias-performance-inpact/354933 "2024-03-07T10:07:06Z")
Hi I currently manage daily indices such as day1, day2, day3, and so on. When performing queries, we use a wildcard like day\*/\_search. I'm considering converting these daily indices to an alias, let's call it DAY, whic… --- ## [Elasticsearch for Image Extraction](https://discuss.elastic.co/t/elasticsearch-for-image-extraction/354786)
**Author:** [@aisyaharifin](https://discuss.elastic.co/u/aisyaharifin)\ **Replies:** 3\ **Last updated:** [March 7, 2024, 10:05am UTC](https://discuss.elastic.co/t/elasticsearch-for-image-extraction/354786 "2024-03-07T10:05:16Z")
Hello Elastic, I want to ask, are we able to do image extraction in order to do searching for images in Elastic, for .jpg .png format? If we can do so, I need guidance for this. Thanks! --- ## [Field level security and visualisations](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826)
**Author:** [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Replies:** 11\ **Last updated:** [March 7, 2024, 9:43am UTC](https://discuss.elastic.co/t/field-level-security-and-visualisations/354826 "2024-03-07T09:43:21Z")
We have implemented field level security to hide a sensitive field from a subset of users and this works as desired in discover etc. We had expected if a restricted user accesses a dashboard containing the field, the fi… --- ## [Elastic Stack](https://discuss.elastic.co/t/elastic-stack/354792)
**Author:** [@qu\_c\_th\_nguy\_n](https://discuss.elastic.co/u/qu_c_th_nguy_n)\ **Replies:** 2\ **Last updated:** [March 7, 2024, 9:35am UTC](https://discuss.elastic.co/t/elastic-stack/354792 "2024-03-07T09:35:05Z")
I'm a newbie, can someone introduce me where can i practice Elasticsearch --- ## [Cannot upgrade to Elasticsearch 8.12.1 directly from 7.12.0](https://discuss.elastic.co/t/cannot-upgrade-to-elasticsearch-8-12-1-directly-from-7-12-0/353553)
**Author:** [@Justo1982](https://discuss.elastic.co/u/Justo1982)\ **Replies:** 15\ **Last updated:** [March 7, 2024, 8:28am UTC](https://discuss.elastic.co/t/cannot-upgrade-to-elasticsearch-8-12-1-directly-from-7-12-0/353553 "2024-03-07T08:28:17Z")
Hi All, I'm trying to install ELK stack in QA environment but get the error below with Elasticsearch: 'java.lang.IllegalStateException: cannot upgrade a node from version \[7.12.0\] directly to version \[8.12.1\], upgrade … --- ## [Found cold tier replica in hot node](https://discuss.elastic.co/t/found-cold-tier-replica-in-hot-node/354907)
**Author:** [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\ **Replies:** 2\ **Last updated:** [March 7, 2024, 7:08am UTC](https://discuss.elastic.co/t/found-cold-tier-replica-in-hot-node/354907 "2024-03-07T07:08:22Z")
My ES cluster got 3 hot nodes and 1 cold node 1 primary shard and 1 replica for each index. I create a two tier ilm policy. Hot and Cold index move to cold node when it is in cold tier. However, I find my prirep: p i… --- ## [Search.max\_buckets](https://discuss.elastic.co/t/search-max-buckets/354910)
**Author:** [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\ **Replies:** 0\ **Last updated:** [March 7, 2024, 6:47am UTC](https://discuss.elastic.co/t/search-max-buckets/354910 "2024-03-07T06:47:24Z")
My cluster's setting is { "defaults": { "search": { "max\_buckets": "65536" } } } Trying to perform query it compliant ...the number of buckets was exceeded. In order to make the query work, is enla… --- ## [Use elastic search inside big database](https://discuss.elastic.co/t/use-elastic-search-inside-big-database/354893)
**Author:** [@vahid\_alvandi](https://discuss.elastic.co/u/vahid_alvandi)\ **Replies:** 1\ **Last updated:** [March 7, 2024, 2:32am UTC](https://discuss.elastic.co/t/use-elastic-search-inside-big-database/354893 "2024-03-07T02:32:29Z")
Following this link, I have decided to index all the information in elasticsearch in addition to the main database of the site, and then the information displayed to the users of the site will be taken from Elasticsearch… --- ## [Custom classic plugin plugin-security.policy - cannot access external REST](https://discuss.elastic.co/t/custom-classic-plugin-plugin-security-policy-cannot-access-external-rest/354783)
**Author:** [@Steph\_van\_Schalkwyk](https://discuss.elastic.co/u/Steph_van_Schalkwyk)\ **Replies:** 3\ **Last updated:** [March 6, 2024, 10:38pm UTC](https://discuss.elastic.co/t/custom-classic-plugin-plugin-security-policy-cannot-access-external-rest/354783 "2024-03-06T22:38:39Z")
I have this in my plugin-security.policy: grant { permission java.net.SocketPermission "\*", "connect,resolve,accept,listen"; The file is "picked up" by the plugin installer, as it is warning me about other required p… --- ## [CSV files slow input/fitering comparing to python script](https://discuss.elastic.co/t/csv-files-slow-input-fitering-comparing-to-python-script/354886)
**Author:** [@Benjamin\_Lin](https://discuss.elastic.co/u/Benjamin_Lin)\ **Replies:** 0\ **Last updated:** [March 6, 2024, 10:06pm UTC](https://discuss.elastic.co/t/csv-files-slow-input-fitering-comparing-to-python-script/354886 "2024-03-06T22:06:03Z")
Hi I have a 4 columns csv data to be proceed by Logstash and aggregating before sending to Elasticsearch. However, from my testing, I tune the JVM heap size up along with batch size to 50k, batch delay 1m. It stil took 1… --- ## [How do you know how fast Logstash processing a csv file?](https://discuss.elastic.co/t/how-do-you-know-how-fast-logstash-processing-a-csv-file/354875)
**Author:** [@Benjamin\_Lin](https://discuss.elastic.co/u/Benjamin_Lin)\ **Replies:** 2\ **Last updated:** [March 6, 2024, 9:57pm UTC](https://discuss.elastic.co/t/how-do-you-know-how-fast-logstash-processing-a-csv-file/354875 "2024-03-06T21:57:49Z")
I am testing a processing performance of Logstash and Elasticsearch injection, does anyone know is there any log or measurement data you can check to see how fast Logstash processing one single CSV file and how fast the … --- ## [Elasticsearch template confusion](https://discuss.elastic.co/t/elasticsearch-template-confusion/354884)
**Author:** [@eirik](https://discuss.elastic.co/u/eirik)\ **Replies:** 0\ **Last updated:** [March 6, 2024, 9:22pm UTC](https://discuss.elastic.co/t/elasticsearch-template-confusion/354884 "2024-03-06T21:22:00Z")
I'm new to elasticsearch and have fond some strange behaviour, at least in my opinion. The thing is that I created the index template in the first code example below, and then inserted the test document in the second co… --- ## [Lens or Aggs query to group by having count \> X](https://discuss.elastic.co/t/lens-or-aggs-query-to-group-by-having-count-x/354264)
**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\ **Replies:** 5\ **Last updated:** [March 6, 2024, 8:05pm UTC](https://discuss.elastic.co/t/lens-or-aggs-query-to-group-by-having-count-x/354264 "2024-03-06T20:05:23Z")
I'm drawing a blank on how to accomplish this in Kibana or Elastic. Prefer to have this in a Lens visual so I can add to a dashboard, but minimally I can do it with an aggregate API query in Kibana dev tools. I'm dumbi… --- ## [Ubuntu 20.04 ELK 8.10.2 Consuming all the RAM](https://discuss.elastic.co/t/ubuntu-20-04-elk-8-10-2-consuming-all-the-ram/354769)
**Author:** [@RobertC1](https://discuss.elastic.co/u/RobertC1)\ **Replies:** 6\ **Last updated:** [March 6, 2024, 6:20pm UTC](https://discuss.elastic.co/t/ubuntu-20-04-elk-8-10-2-consuming-all-the-ram/354769 "2024-03-06T18:20:30Z")
There are 241 threads of /usr/share/elasticsearch/jdk/bin/java and this is consumig the RAM progressively. The ingestion process is executed every hour. root@SRV-ELK:/etc/elasticsearch# ps -feaL | grep '/usr/share/… --- ## [Tracking user activity in Elastic Cloud](https://discuss.elastic.co/t/tracking-user-activity-in-elastic-cloud/354535)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 3\ **Last updated:** [March 6, 2024, 3:38pm UTC](https://discuss.elastic.co/t/tracking-user-activity-in-elastic-cloud/354535 "2024-03-06T15:38:08Z")
I need to find a way to track user activity inside the Elastic Cloud. So in case the user hasn't logged in for a certain time we may get a sort of alert about it. So far I've found this auditing article but not only I'm… --- ## [How can I migrate our application's Elasticsearch DB to a Postgresql DB?](https://discuss.elastic.co/t/how-can-i-migrate-our-applications-elasticsearch-db-to-a-postgresql-db/354856)
**Author:** [@Shahrik](https://discuss.elastic.co/u/Shahrik)\ **Replies:** 0\ **Last updated:** [March 6, 2024, 3:34pm UTC](https://discuss.elastic.co/t/how-can-i-migrate-our-applications-elasticsearch-db-to-a-postgresql-db/354856 "2024-03-06T15:34:16Z")
I have to migrate our web application's Elasticsearch Database to a Postgresql Database. The web application is in AngularJS and the backend is in Nodejs. Our application interacts with our Elasticsearch Database and use… --- ## [Elastic Agent Is Failed to Start in Windows Server and Not Sending Data to Elastic Search](https://discuss.elastic.co/t/elastic-agent-is-failed-to-start-in-windows-server-and-not-sending-data-to-elastic-search/354456)
**Author:** [@nkreddyp](https://discuss.elastic.co/u/nkreddyp)\ **Replies:** 6\ **Last updated:** [March 6, 2024, 2:25pm UTC](https://discuss.elastic.co/t/elastic-agent-is-failed-to-start-in-windows-server-and-not-sending-data-to-elastic-search/354456 "2024-03-06T14:25:44Z")
Dear Team, I'm trying to integrate the windows server to ElK stack using fleet server , I have followed the steps as per the elk docs I have generated selfsigned certificate for fleet server and from kibana --\> Fleet -… --- ## [Kibana visualization table control](https://discuss.elastic.co/t/kibana-visualization-table-control/354709)
**Author:** [@jyoti\_panse](https://discuss.elastic.co/u/jyoti_panse)\ **Replies:** 1\ **Last updated:** [March 6, 2024, 1:54pm UTC](https://discuss.elastic.co/t/kibana-visualization-table-control/354709 "2024-03-06T13:54:22Z")
I have created one table control in kibana visualization. The table has three column. I want to create fourth column which will be having row wise % of 3rd column value. Ex. 44.4 is 40.3% of 100.8 Ex. 11.8 is 10.7% … --- ## [Is there a way where we can choose a particular color from the given color pallet for data comparision in a pie chart?](https://discuss.elastic.co/t/is-there-a-way-where-we-can-choose-a-particular-color-from-the-given-color-pallet-for-data-comparision-in-a-pie-chart/354402)
**Author:** [@varshii](https://discuss.elastic.co/u/varshii)\ **Replies:** 1\ **Last updated:** [March 6, 2024, 1:49pm UTC](https://discuss.elastic.co/t/is-there-a-way-where-we-can-choose-a-particular-color-from-the-given-color-pallet-for-data-comparision-in-a-pie-chart/354402 "2024-03-06T13:49:47Z")
We only have a specific forms of color pallet in kibana for data comparision (like positive, negative, neutral, grey etc). Can we atleast choose the exact color that we need from the given color pallet? --- ## [Elastic Agent Logs from UNC Path?](https://discuss.elastic.co/t/elastic-agent-logs-from-unc-path/354847)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [March 6, 2024, 1:46pm UTC](https://discuss.elastic.co/t/elastic-agent-logs-from-unc-path/354847 "2024-03-06T13:46:14Z")
I am using Elastic Agent 8.12.1 on a Windows host. I have a requirement to ingest logs for an application which writes them directly to a share referenced UNC path from the host (e.g., \\\\myshare\\myapp\\logs\\log.json). Tha… --- ## [Is it possible to make Tag cloud value as clickable link?](https://discuss.elastic.co/t/is-it-possible-to-make-tag-cloud-value-as-clickable-link/354721)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [March 6, 2024, 1:44pm UTC](https://discuss.elastic.co/t/is-it-possible-to-make-tag-cloud-value-as-clickable-link/354721 "2024-03-06T13:44:26Z")
Hello, I've values from tag cloud visual and want to make them clickable as url routing? Is it possible? --- ## [How to manage the displayed date when weekly time interval is selected?](https://discuss.elastic.co/t/how-to-manage-the-displayed-date-when-weekly-time-interval-is-selected/354742)
**Author:** [@nnikushkin](https://discuss.elastic.co/u/nnikushkin)\ **Replies:** 1\ **Last updated:** [March 6, 2024, 1:41pm UTC](https://discuss.elastic.co/t/how-to-manage-the-displayed-date-when-weekly-time-interval-is-selected/354742 "2024-03-06T13:41:49Z")
Hello! I have weekly Sunday reports and would like to visulize them I've noticed that when selecting a weekly time interval in any time diagram in Kibana Lens, every bucket displays the first day of the week interval. … --- ## [ElasticSearch Langchain retreive embedding based on particular threshold](https://discuss.elastic.co/t/elasticsearch-langchain-retreive-embedding-based-on-particular-threshold/354794)
**Author:** [@Tanzeel\_Abbas](https://discuss.elastic.co/u/Tanzeel_Abbas)\ **Replies:** 1\ **Last updated:** [March 6, 2024, 1:38pm UTC](https://discuss.elastic.co/t/elasticsearch-langchain-retreive-embedding-based-on-particular-threshold/354794 "2024-03-06T13:38:11Z")
why similarity\_score\_threshold is not working. When i changed search\_type to similarity then it is worked but retreiverdocument not based on score threshold. retriever = db.as\_retriever( search\_type="similarity\_score\_t… --- ## [Remove master nodes from elasticsearch cluster](https://discuss.elastic.co/t/remove-master-nodes-from-elasticsearch-cluster/354821)
**Author:** [@mukularora89](https://discuss.elastic.co/u/mukularora89)\ **Replies:** 3\ **Last updated:** [March 6, 2024, 1:20pm UTC](https://discuss.elastic.co/t/remove-master-nodes-from-elasticsearch-cluster/354821 "2024-03-06T13:20:14Z")
Hi, We have a requirement where we need to upgrade OS and for that Elasticsearch will be fresh installed on the nodes. I have a question related to master nodes removal. We have 3 master nodes as part of the cluster. W… --- ## [@timestamp value for syslog input not in UTC](https://discuss.elastic.co/t/timestamp-value-for-syslog-input-not-in-utc/354840)
**Author:** [@d14](https://discuss.elastic.co/u/d14)\ **Replies:** 1\ **Last updated:** [March 6, 2024, 1:07pm UTC](https://discuss.elastic.co/t/timestamp-value-for-syslog-input-not-in-utc/354840 "2024-03-06T13:07:08Z")
I'm using the syslog input to parse data from a syslog producer like this: input { syslog { port =\> 5000 } } The output of stdout { codec =\> rubydebug } shows that @timestamp is NOT in UTC but rather ES… --- ## [How to write this query using Composite aggregation using Terms with the new Elastic.Clients.Elasticsearch client in c#](https://discuss.elastic.co/t/how-to-write-this-query-using-composite-aggregation-using-terms-with-the-new-elastic-clients-elasticsearch-client-in-c/354832)
**Author:** [@Patrice\_MARIN](https://discuss.elastic.co/u/Patrice_MARIN)\ **Replies:** 2\ **Last updated:** [March 6, 2024, 12:36pm UTC](https://discuss.elastic.co/t/how-to-write-this-query-using-composite-aggregation-using-terms-with-the-new-elastic-clients-elasticsearch-client-in-c/354832 "2024-03-06T12:36:32Z")
Hi, Hope you will be able to help me on this. I have the following query GET /catalog-20240302194411/\_search { "aggs": { "filtered\_aggregations": { "aggs": { "paginated\_unique\_products": { … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=290) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=292)