# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=292

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 293

---

## [Embedding Images in Data Ingestion](https://discuss.elastic.co/t/embedding-images-in-data-ingestion/353188)

<div class="topic-metadata">

**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\
**Replies:** 2\
**Last updated:** [March 6, 2024, 12:06pm UTC](https://discuss.elastic.co/t/embedding-images-in-data-ingestion/353188 "2024-03-06T12:06:57Z")

</div>

Hello, Recently I attended a Vector & AI workshop where I delved into the intricacies of vector embeddings. However, a demo on image relevance search caught my attention. Now, my goal is to embed images directly into ou…

---

## [$ sign infornt of value for user.name](https://discuss.elastic.co/t/sign-infornt-of-value-for-user-name/354836)

<div class="topic-metadata">

**Author:** [@Nouman\_Ahmed](https://discuss.elastic.co/u/Nouman_Ahmed)\
**Replies:** 1\
**Last updated:** [March 6, 2024, 11:47am UTC](https://discuss.elastic.co/t/sign-infornt-of-value-for-user-name/354836 "2024-03-06T11:47:12Z")

</div>

Hello everyone, Can someone please tell why i am getting $ for a user.name value i.e. user.name : Hoby$. Is this something issue with mapping? Like i am getting two username hoby$ and hoby.

---

## [How to get long link of dashboards (link containing embeddable configs) in kibana 8.8.0 And other latest versions](https://discuss.elastic.co/t/how-to-get-long-link-of-dashboards-link-containing-embeddable-configs-in-kibana-8-8-0-and-other-latest-versions/354818)

<div class="topic-metadata">

**Author:** [@brusque.sowers](https://discuss.elastic.co/u/brusque.sowers)\
**Replies:** 1\
**Last updated:** [March 6, 2024, 9:56am UTC](https://discuss.elastic.co/t/how-to-get-long-link-of-dashboards-link-containing-embeddable-configs-in-kibana-8-8-0-and-other-latest-versions/354818 "2024-03-06T09:56:22Z")

</div>

In older versions of kibana , we used to have option while sharing the dashboard link to either have a shorter link or a complete link containing the details of each and every visualisation in form of embeddableConfigs i…

---

## [Simple JWT authentication example with Docker](https://discuss.elastic.co/t/simple-jwt-authentication-example-with-docker/352786)

<div class="topic-metadata">

**Author:** [@Lasra\_Bilaj](https://discuss.elastic.co/u/Lasra_Bilaj)\
**Replies:** 5\
**Last updated:** [March 6, 2024, 8:19am UTC](https://discuss.elastic.co/t/simple-jwt-authentication-example-with-docker/352786 "2024-03-06T08:19:23Z")

</div>

I want to find a simple example of JWT based authentication for Elasticsearch with docker. I am using the the docker-compose.yml file provided by Elastic here at: Is there a resource where I can set that up with the …

---

## [Disable sniffer in ElasticsearchRestClientHealthIndicator](https://discuss.elastic.co/t/disable-sniffer-in-elasticsearchrestclienthealthindicator/354811)

<div class="topic-metadata">

**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\
**Replies:** 0\
**Last updated:** [March 6, 2024, 7:51am UTC](https://discuss.elastic.co/t/disable-sniffer-in-elasticsearchrestclienthealthindicator/354811 "2024-03-06T07:51:50Z")

</div>

Hi, When we create our own ES rest client we are able to turn off the sniffer. Spring actuator creates its own ES rest client apparently with the sniffer enabled by default. Does anyone know if it's possible to turn i…

---

## [Wiremock split response message in Kibana logs](https://discuss.elastic.co/t/wiremock-split-response-message-in-kibana-logs/354810)

<div class="topic-metadata">

**Author:** [@chtivo108](https://discuss.elastic.co/u/chtivo108)\
**Replies:** 0\
**Last updated:** [March 6, 2024, 7:49am UTC](https://discuss.elastic.co/t/wiremock-split-response-message-in-kibana-logs/354810 "2024-03-06T07:49:40Z")

</div>

The response from wiremock does not come to kibana in one message, but is split into several. Wiremock is deployed in a test environment. I'm using com.github.tomakehurst.wiremock.wiremock.client.WireMock How to receiv…

---

## [Migration VM in cluster server](https://discuss.elastic.co/t/migration-vm-in-cluster-server/354803)

<div class="topic-metadata">

**Author:** [@Septianingrum.17](https://discuss.elastic.co/u/Septianingrum.17)\
**Replies:** 0\
**Last updated:** [March 6, 2024, 6:32am UTC](https://discuss.elastic.co/t/migration-vm-in-cluster-server/354803 "2024-03-06T06:32:21Z")

</div>

Hi All, i plan to migrate a VM from VMWare gen9 to gen10, and that means the Machine ID will change. Does the ELK license read the Machine ID? What are the impacts if the Machine ID changes? Do I need to re-enter my l…

---

## [Monitor cpu of hot nodes, enterprise search nodes](https://discuss.elastic.co/t/monitor-cpu-of-hot-nodes-enterprise-search-nodes/354800)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 0\
**Last updated:** [March 6, 2024, 5:47am UTC](https://discuss.elastic.co/t/monitor-cpu-of-hot-nodes-enterprise-search-nodes/354800 "2024-03-06T05:47:46Z")

</div>

How to monitor cpu, jvm, number of requests for hot nodes as well as app search nodes in elastic? something similar to cloudwatch in AWS. i see performance section but that only gives a 24 hour peek Please help!

---

## [Agent Policy only allowed to feed to one namespace?](https://discuss.elastic.co/t/agent-policy-only-allowed-to-feed-to-one-namespace/354795)

<div class="topic-metadata">

**Author:** [@jjwallaby](https://discuss.elastic.co/u/jjwallaby)\
**Replies:** 0\
**Last updated:** [March 6, 2024, 5:33am UTC](https://discuss.elastic.co/t/agent-policy-only-allowed-to-feed-to-one-namespace/354795 "2024-03-06T05:33:53Z")

</div>

Hi, is it possible if an agent can feed into different multiple namespaces ? What I would like to do is feed different logs to different namespaces from a different app logs. The app logs are already have a prefix nam…

---

## [Logstash collecting logs from the switch](https://discuss.elastic.co/t/logstash-collecting-logs-from-the-switch/354788)

<div class="topic-metadata">

**Author:** [@Yogesh\_AS](https://discuss.elastic.co/u/Yogesh_AS)\
**Replies:** 0\
**Last updated:** [March 6, 2024, 3:17am UTC](https://discuss.elastic.co/t/logstash-collecting-logs-from-the-switch/354788 "2024-03-06T03:17:00Z")

</div>

Hi , I am not getting any logs from the switch tough it is currently configured in switch level also and please find my below code input { udp { port =\> 5145 type =\> syslog } } filter { if \[type\] == "syslog" and…

---

## [Exception while enabling the xpack in es7.17](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636)

<div class="topic-metadata">

**Author:** [@navaneethan](https://discuss.elastic.co/u/navaneethan)\
**Replies:** 6\
**Last updated:** [March 6, 2024, 12:09am UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636 "2024-03-06T00:09:30Z")

</div>

Hi While enabling the xpack in elasticsearch 7.17, we are facing the below issue ElasticsearchSecurityException\[failed to load SSL configuration \[xpack.security.transport.ssl\]\]; nested: ElasticsearchException\[failed to…

---

## [Problem to run Elasticsearch](https://discuss.elastic.co/t/problem-to-run-elasticsearch/354674)

<div class="topic-metadata">

**Author:** [@AnatoliiR](https://discuss.elastic.co/u/AnatoliiR)\
**Replies:** 3\
**Last updated:** [March 5, 2024, 11:47pm UTC](https://discuss.elastic.co/t/problem-to-run-elasticsearch/354674 "2024-03-05T23:47:43Z")

</div>

Hello, I have installed Elasticsearch and Kibana on my system, but I encounter an error when I try to run them. The error message is as follows: Does anyone have any suggestions on how to fix this issue? I appreciat…

---

## [Lossing the rest documents when BulkIndexError occured](https://discuss.elastic.co/t/lossing-the-rest-documents-when-bulkindexerror-occured/354776)

<div class="topic-metadata">

**Author:** [@Josh19](https://discuss.elastic.co/u/Josh19)\
**Replies:** 0\
**Last updated:** [March 5, 2024, 8:44pm UTC](https://discuss.elastic.co/t/lossing-the-rest-documents-when-bulkindexerror-occured/354776 "2024-03-05T20:44:54Z")

</div>

I wanna know process of the rest documents when BulkIndexError occured. official document says bulk process is indexing documents by each so there is no problem with rest docs, even if there is some indexerror on some d…

---

## [Trouble with string interpolation in datastream naming](https://discuss.elastic.co/t/trouble-with-string-interpolation-in-datastream-naming/354770)

<div class="topic-metadata">

**Author:** [@Magister-Machinis](https://discuss.elastic.co/u/Magister-Machinis)\
**Replies:** 3\
**Last updated:** [March 5, 2024, 8:37pm UTC](https://discuss.elastic.co/t/trouble-with-string-interpolation-in-datastream-naming/354770 "2024-03-05T20:37:22Z")

</div>

Hello all, Hoping someone more knowledgeable than I can suggest what I am missing. Attempting to use the below conf file to ingest results and am getting the (also) below error. Is this something that can only be done w…

---

## [Logstash-input-imap SSL Error for Logstash 8.12](https://discuss.elastic.co/t/logstash-input-imap-ssl-error-for-logstash-8-12/354712)

<div class="topic-metadata">

**Author:** [@krissemmy](https://discuss.elastic.co/u/krissemmy)\
**Replies:** 3\
**Last updated:** [March 5, 2024, 7:59pm UTC](https://discuss.elastic.co/t/logstash-input-imap-ssl-error-for-logstash-8-12/354712 "2024-03-05T19:59:10Z")

</div>

Hello there, i have a logstash v8.12 and Imap input plugin v3.2.1. And I use Ubuntu 22.04 Below is my Logstash file: input{ imap { type =\> mail host =\> "imap.gmail.com" user =\> "forgcp24@gma…

---

## [Java client 8 can't DELETE document](https://discuss.elastic.co/t/java-client-8-cant-delete-document/354744)

<div class="topic-metadata">

**Author:** [@nicolasduminil](https://discuss.elastic.co/u/nicolasduminil)\
**Replies:** 1\
**Last updated:** [March 5, 2024, 6:46pm UTC](https://discuss.elastic.co/t/java-client-8-cant-delete-document/354744 "2024-03-05T18:46:08Z")

</div>

Using Java client version provided as Quarkus 3.7.1 extension. The following request ran in Kibana: DELETE customers/\_doc/69wID44Bdp9hpkBkyZ2a works as expected. However, the code below: client.delete(DeleteReques…

---

## [Filebeat adding incorrect kubernetes metadata to events going to logstash](https://discuss.elastic.co/t/filebeat-adding-incorrect-kubernetes-metadata-to-events-going-to-logstash/354486)

<div class="topic-metadata">

**Author:** [@mmasseo](https://discuss.elastic.co/u/mmasseo)\
**Replies:** 4\
**Last updated:** [March 5, 2024, 6:26pm UTC](https://discuss.elastic.co/t/filebeat-adding-incorrect-kubernetes-metadata-to-events-going-to-logstash/354486 "2024-03-05T18:26:54Z")

</div>

Greetings, We have filebeat deployed to a kubernetes cluster (our QA instance). Filebeat is picking up logs for the containers and sending them to our logstash server, which ends up in our elasticsearch. However, the …

---

## [Users access to console](https://discuss.elastic.co/t/users-access-to-console/354756)

<div class="topic-metadata">

**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\
**Replies:** 1\
**Last updated:** [March 5, 2024, 5:21pm UTC](https://discuss.elastic.co/t/users-access-to-console/354756 "2024-03-05T17:21:39Z")

</div>

Hi all, Is it possible to allow a specific team of users to access Kibana's console (Management -\> Dev Tools), using native role-based access control mechanism, so that users can only have permission to query "their own…

---

## [Suricata logs are not visible](https://discuss.elastic.co/t/suricata-logs-are-not-visible/354733)

<div class="topic-metadata">

**Author:** [@Dhia\_Said](https://discuss.elastic.co/u/Dhia_Said)\
**Replies:** 3\
**Last updated:** [March 5, 2024, 4:21pm UTC](https://discuss.elastic.co/t/suricata-logs-are-not-visible/354733 "2024-03-05T16:21:27Z")

</div>

hello i have this problem , i just configured the elk stack on my windows machine and i added a suricata integration but it doesn't work , it showed me no results , what should i do in this case

---

## [Upgrading Kibana 7.17.15 -\> 7.17.18 FATAL ERROR](https://discuss.elastic.co/t/upgrading-kibana-7-17-15-7-17-18-fatal-error/353299)

<div class="topic-metadata">

**Author:** [@jasonperrone](https://discuss.elastic.co/u/jasonperrone)\
**Replies:** 9\
**Last updated:** [March 5, 2024, 4:16pm UTC](https://discuss.elastic.co/t/upgrading-kibana-7-17-15-7-17-18-fatal-error/353299 "2024-03-05T16:16:48Z")

</div>

I upgraded my Kibana from 7.17.15 -\> 7.17.18. On startup received: FATAL Error: EACCES: permission denied, stat '/nonexistent/.config/puppeteer'. Downgraded back to 7.17.15 =\> Problem disappeared.

---

## [Setting domain name in session cookies](https://discuss.elastic.co/t/setting-domain-name-in-session-cookies/354743)

<div class="topic-metadata">

**Author:** [@Antim\_K](https://discuss.elastic.co/u/Antim_K)\
**Replies:** 0\
**Last updated:** [March 5, 2024, 2:03pm UTC](https://discuss.elastic.co/t/setting-domain-name-in-session-cookies/354743 "2024-03-05T14:03:24Z")

</div>

I'm working on a project where I need more granular control over the session cookies used by Kibana. I need to set a specific domain name for Kibana session cookies. But haven't found any official way to set domain name …

---

## [Error while starting logstash](https://discuss.elastic.co/t/error-while-starting-logstash/354631)

<div class="topic-metadata">

**Author:** [@Dhia\_Said](https://discuss.elastic.co/u/Dhia_Said)\
**Replies:** 7\
**Last updated:** [March 5, 2024, 12:03pm UTC](https://discuss.elastic.co/t/error-while-starting-logstash/354631 "2024-03-05T12:03:26Z")

</div>

hello i am new to logstash and i had this error while launching logstash , i didn't know the cause of it, btw i am using it on windows : \[2024-03-04T12:04:49,450\]\[ERROR\]\[logstash.agent \] Failed to execute ac…

---

## [Define default index pattern from a yml file](https://discuss.elastic.co/t/define-default-index-pattern-from-a-yml-file/354334)

<div class="topic-metadata">

**Author:** [@Amir\_Dar](https://discuss.elastic.co/u/Amir_Dar)\
**Replies:** 11\
**Last updated:** [March 5, 2024, 12:01pm UTC](https://discuss.elastic.co/t/define-default-index-pattern-from-a-yml-file/354334 "2024-03-05T12:01:32Z")

</div>

Hi All we are running ELK (version 8.7.0) over docker containers. Whenever we are doing a restart to those containers (manually or due to some failure) the index pattern we defined in the kibana is getting reset and th…

---

## [No service found for solr in logstash](https://discuss.elastic.co/t/no-service-found-for-solr-in-logstash/354720)

<div class="topic-metadata">

**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\
**Replies:** 2\
**Last updated:** [March 5, 2024, 11:17am UTC](https://discuss.elastic.co/t/no-service-found-for-solr-in-logstash/354720 "2024-03-05T11:17:23Z")

</div>

I am trying to index some logs to Elasticsearch and Solr by using output plugin but giving error while starting it 1709560467682,"\[2024-03-04T13:54:27,680\]\[ERROR\]\[logstash.javapipeline \]\[main\] Pipeline aborted due to…

---

## [Monitor Windows Filesystem changes](https://discuss.elastic.co/t/monitor-windows-filesystem-changes/354723)

<div class="topic-metadata">

**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\
**Replies:** 0\
**Last updated:** [March 5, 2024, 11:03am UTC](https://discuss.elastic.co/t/monitor-windows-filesystem-changes/354723 "2024-03-05T11:03:42Z")

</div>

Hello, i want to monitor windows filesystem changes with elastic. I want to see what files are created and deleted by which user. First i tried using auditbeat, which has the event.action which shows update, deletes, c…

---

## [Snapshot/Restore VS ReIndexing - Missing documents, zero failures](https://discuss.elastic.co/t/snapshot-restore-vs-reindexing-missing-documents-zero-failures/354448)

<div class="topic-metadata">

**Author:** [@Joao\_Barreto](https://discuss.elastic.co/u/Joao_Barreto)\
**Replies:** 26\
**Last updated:** [March 5, 2024, 10:38am UTC](https://discuss.elastic.co/t/snapshot-restore-vs-reindexing-missing-documents-zero-failures/354448 "2024-03-05T10:38:04Z")

</div>

Hi everyone. A few weeks ago I created a post regarding a data migration I have to do in a customer with a Platinum License. The conclusion was that I needed to go from elastic 6 to 7 then to 8.12 in order to have the d…

---

## [Why only one REST wrapper exists and not nested?](https://discuss.elastic.co/t/why-only-one-rest-wrapper-exists-and-not-nested/354719)

<div class="topic-metadata">

**Author:** [@BadLemon](https://discuss.elastic.co/u/BadLemon)\
**Replies:** 0\
**Last updated:** [March 5, 2024, 10:05am UTC](https://discuss.elastic.co/t/why-only-one-rest-wrapper-exists-and-not-nested/354719 "2024-03-05T10:05:54Z")

</div>

Hello everyone, Elasticsearch reports a error when I installed ranger elasticsearch plugin and restarted Elasticsearch: "Cannot have more than one plugin implementing a REST wrapper". Later, I found that there is a cl…

---

## [What impact will the SSL certificate expiration in the file elastic-certificates.p12 have?](https://discuss.elastic.co/t/what-impact-will-the-ssl-certificate-expiration-in-the-file-elastic-certificates-p12-have/353966)

<div class="topic-metadata">

**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\
**Replies:** 8\
**Last updated:** [March 5, 2024, 8:54am UTC](https://discuss.elastic.co/t/what-impact-will-the-ssl-certificate-expiration-in-the-file-elastic-certificates-p12-have/353966 "2024-03-05T08:54:02Z")

</div>

Version: 7.5.2 License: basic configuration about security in elasticsearch.yml xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack…

---

## [Filebeat Ignore command](https://discuss.elastic.co/t/filebeat-ignore-command/354637)

<div class="topic-metadata">

**Author:** [@amjad](https://discuss.elastic.co/u/amjad)\
**Replies:** 2\
**Last updated:** [March 5, 2024, 8:38am UTC](https://discuss.elastic.co/t/filebeat-ignore-command/354637 "2024-03-05T08:38:13Z")

</div>

Hi Elastic community. Hope every one is doing well. I really need your help, I couldn't understand how the ignore\_older works in filebeat. i will explain my doubt , below is the line of command how i kept in Filebeat.…

---

## [Does autoscaling in elastic cloud deployments only work on the data size and not the memory?](https://discuss.elastic.co/t/does-autoscaling-in-elastic-cloud-deployments-only-work-on-the-data-size-and-not-the-memory/354691)

<div class="topic-metadata">

**Author:** [@surya\_dadi\_dhamarake](https://discuss.elastic.co/u/surya_dadi_dhamarake)\
**Replies:** 2\
**Last updated:** [March 5, 2024, 8:27am UTC](https://discuss.elastic.co/t/does-autoscaling-in-elastic-cloud-deployments-only-work-on-the-data-size-and-not-the-memory/354691 "2024-03-05T08:27:27Z")

</div>

Hi Team, I just want to know what are the rules we have on the auto scaling in elastic cloud deployments. We have enabled auto scaling but it is not scaling the instances even if the memory is in critical state. Can any…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=291)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=293)
