# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=294

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 295

---

## [What is the recommended way to stream Elasticsearch index data](https://discuss.elastic.co/t/what-is-the-recommended-way-to-stream-elasticsearch-index-data/354426)

<div class="topic-metadata">

**Author:** [@orange.cold256](https://discuss.elastic.co/u/orange.cold256)\
**Replies:** 1\
**Last updated:** [February 29, 2024, 4:46pm UTC](https://discuss.elastic.co/t/what-is-the-recommended-way-to-stream-elasticsearch-index-data/354426 "2024-02-29T16:46:26Z")

</div>

Good afternoon! I have a single-node Elasticsearch cluster with a pair of indexes. I'm using Java Spring Boot backend that provides Elasticsearch queries via rest high level client, but I need to provide data streaming…

---

## [Elasticsearch and Lucene performances](https://discuss.elastic.co/t/elasticsearch-and-lucene-performances/354463)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 0\
**Last updated:** [February 29, 2024, 3:56pm UTC](https://discuss.elastic.co/t/elasticsearch-and-lucene-performances/354463 "2024-02-29T15:56:11Z")

</div>

Hey there, I am not really sure this is the correct place where to talk about it but I will try anyway. Starting from this article I discovered the nightly benchmark of Mike McCandless. I found it very interesting bu…

---

## [Logstash client authentication issue](https://discuss.elastic.co/t/logstash-client-authentication-issue/354452)

<div class="topic-metadata">

**Author:** [@mamoon2024](https://discuss.elastic.co/u/mamoon2024)\
**Replies:** 0\
**Last updated:** [February 29, 2024, 2:22pm UTC](https://discuss.elastic.co/t/logstash-client-authentication-issue/354452 "2024-02-29T14:22:45Z")

</div>

Hi I am trying to Collect logs from OCI Logging into Logstash using OCI Streaming as a Kafka server, I am getting an authentication error, this is log for your reference, please advise about this issue as I am new to log…

---

## [Data Visualizer CSV Upload drops leading zeros](https://discuss.elastic.co/t/data-visualizer-csv-upload-drops-leading-zeros/354433)

<div class="topic-metadata">

**Author:** [@dc\_3](https://discuss.elastic.co/u/dc_3)\
**Replies:** 2\
**Last updated:** [February 29, 2024, 2:12pm UTC](https://discuss.elastic.co/t/data-visualizer-csv-upload-drops-leading-zeros/354433 "2024-02-29T14:12:17Z")

</div>

Hi there, I've got a CSV I'm trying to upload via the Data Visualizer for analysis, and one of the columns contains data that has leading zeros. The CSV itself definitely contains the leading zeros, but somewhere betwe…

---

## [Access nested field array with scripted field](https://discuss.elastic.co/t/access-nested-field-array-with-scripted-field/354443)

<div class="topic-metadata">

**Author:** [@skouf](https://discuss.elastic.co/u/skouf)\
**Replies:** 1\
**Last updated:** [February 29, 2024, 1:10pm UTC](https://discuss.elastic.co/t/access-nested-field-array-with-scripted-field/354443 "2024-02-29T13:10:15Z")

</div>

Hello My developer created this field structure : "realization": { "id": 24188, "releasedOn": null, "isAnticipated": false, "reason": null, "realizationPeriods": \[ { "id"…

---

## [Creating a new visualization in Kibana v8 using React](https://discuss.elastic.co/t/creating-a-new-visualization-in-kibana-v8-using-react/354447)

<div class="topic-metadata">

**Author:** [@rcw](https://discuss.elastic.co/u/rcw)\
**Replies:** 0\
**Last updated:** [February 29, 2024, 12:49pm UTC](https://discuss.elastic.co/t/creating-a-new-visualization-in-kibana-v8-using-react/354447 "2024-02-29T12:49:49Z")

</div>

I am trying to create a custom visualization in Kibana v8.10.4 using React. I'll try to be brief, because there is already a lot of code required simply to register and display a basic visualization, but do let me know i…

---

## ["MM-dd" mapping is not working, throwing exception in leap year day (feb 29, 2024))](https://discuss.elastic.co/t/mm-dd-mapping-is-not-working-throwing-exception-in-leap-year-day-feb-29-2024/354436)

<div class="topic-metadata">

**Author:** [@navaneethan](https://discuss.elastic.co/u/navaneethan)\
**Replies:** 1\
**Last updated:** [February 29, 2024, 12:34pm UTC](https://discuss.elastic.co/t/mm-dd-mapping-is-not-working-throwing-exception-in-leap-year-day-feb-29-2024/354436 "2024-02-29T12:34:13Z")

</div>

Hi Team, We have the below mapping for saving the date of birth and date of joining with the below format ("MM-dd"), but the system is taking the year 1970 (not a leap year) and throwing the exception Mapping : "dob"…

---

## [Filebeat error](https://discuss.elastic.co/t/filebeat-error/354434)

<div class="topic-metadata">

**Author:** [@Mrudula](https://discuss.elastic.co/u/Mrudula)\
**Replies:** 0\
**Last updated:** [February 29, 2024, 11:12am UTC](https://discuss.elastic.co/t/filebeat-error/354434 "2024-02-29T11:12:37Z")

</div>

We are seeing error in filebeat "ERROR \[publisher\_pipeline\_output\] pipeline/output.go:180 failed to publish events: write tcp xxx.xx.xx:36240-\>xxx.xx.xx:5045: write: connection reset by peer" in openshift filebeat pod an…

---

## [Problem with filebeat, it does not process multiline correctly](https://discuss.elastic.co/t/problem-with-filebeat-it-does-not-process-multiline-correctly/354425)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 1\
**Last updated:** [February 29, 2024, 10:58am UTC](https://discuss.elastic.co/t/problem-with-filebeat-it-does-not-process-multiline-correctly/354425 "2024-02-29T10:58:09Z")

</div>

Hello. I have a problem setting up the filebeat agnet. The logs consist of several lines and I would like to send them as one message. I prepared the config, but for some reason it doesn’t work. tell me what the probl…

---

## [Only display lines with a specific value range in one of the column in Kibana](https://discuss.elastic.co/t/only-display-lines-with-a-specific-value-range-in-one-of-the-column-in-kibana/354108)

<div class="topic-metadata">

**Author:** [@DidierB](https://discuss.elastic.co/u/DidierB)\
**Replies:** 1\
**Last updated:** [February 29, 2024, 10:02am UTC](https://discuss.elastic.co/t/only-display-lines-with-a-specific-value-range-in-one-of-the-column-in-kibana/354108 "2024-02-29T10:02:14Z")

</div>

Hello guys, In a Kibana dashboard, I have a table like this: | Object.name |Count of unique Object.status | | A | 2 | | B | 1 | with, in the index two times the object A like this: { "name":"A", "status":"status1…

---

## [Updated from Kibana 7.17.17 \> 7.17.18 and now fails to Start](https://discuss.elastic.co/t/updated-from-kibana-7-17-17-7-17-18-and-now-fails-to-start/354417)

<div class="topic-metadata">

**Author:** [@tonybfj](https://discuss.elastic.co/u/tonybfj)\
**Replies:** 3\
**Last updated:** [February 29, 2024, 9:41am UTC](https://discuss.elastic.co/t/updated-from-kibana-7-17-17-7-17-18-and-now-fails-to-start/354417 "2024-02-29T09:41:19Z")

</div>

I upgraded my Kibana from 7.17.17-\> 7.17.18 and now on startup received: FATAL Error: EACCES: permission denied, stat '/nonexistent/.config/puppeteer'. If i downgrade to 7.17.17 , no issues. Any ideas ?

---

## [Is there any way to restrict the size of the java heap dump in Elasticsearch](https://discuss.elastic.co/t/is-there-any-way-to-restrict-the-size-of-the-java-heap-dump-in-elasticsearch/353718)

<div class="topic-metadata">

**Author:** [@KunwarAkanksha](https://discuss.elastic.co/u/KunwarAkanksha)\
**Replies:** 3\
**Last updated:** [February 29, 2024, 9:41am UTC](https://discuss.elastic.co/t/is-there-any-way-to-restrict-the-size-of-the-java-heap-dump-in-elasticsearch/353718 "2024-02-29T09:41:26Z")

</div>

Disabling Java Heap Dump is not a good practice for Debugging the Error for later stage. But large Java Heap Dump leads to the Elasticsearch Service Failure . Can we somehow restrict the size of Heap Dumps , or the only …

---

## [Elasticsearch Monitoring](https://discuss.elastic.co/t/elasticsearch-monitoring/354395)

<div class="topic-metadata">

**Author:** [@Cruz](https://discuss.elastic.co/u/Cruz)\
**Replies:** 0\
**Last updated:** [February 29, 2024, 2:11am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring/354395 "2024-02-29T02:11:36Z")

</div>

Hello all, Can someone explain to me what is happening here? Based on my observation, every 10 minutes the utilization is cut off. Sorry for the noob post, I am just a student learning how to use ELK

---

## [Index migration from one elasticsearch cluster to another](https://discuss.elastic.co/t/index-migration-from-one-elasticsearch-cluster-to-another/354290)

<div class="topic-metadata">

**Author:** [@Frances\_Chu](https://discuss.elastic.co/u/Frances_Chu)\
**Replies:** 3\
**Last updated:** [February 29, 2024, 1:13am UTC](https://discuss.elastic.co/t/index-migration-from-one-elasticsearch-cluster-to-another/354290 "2024-02-29T01:13:20Z")

</div>

I would like to copy/move indexA from ES cluster A to ES cluster B. Is it possible to do that? I am using free version.

---

## [Deprecated settings for logstash](https://discuss.elastic.co/t/deprecated-settings-for-logstash/353320)

<div class="topic-metadata">

**Author:** [@mdurvesh](https://discuss.elastic.co/u/mdurvesh)\
**Replies:** 3\
**Last updated:** [February 29, 2024, 12:42am UTC](https://discuss.elastic.co/t/deprecated-settings-for-logstash/353320 "2024-02-29T00:42:30Z")

</div>

getting msg \[logstash.outputs.elasticsearch\] You are using a deprecated config setting "truststore\_password" set in elasticsearch. Deprecated settings will continue to work, but are scheduled for removal from logstash i…

---

## [Vulnerability github.com/hashicorp/nomad 0.0.0-20201203164818-6318a8ac7bf8](https://discuss.elastic.co/t/vulnerability-github-com-hashicorp-nomad-0-0-0-20201203164818-6318a8ac7bf8/354373)

<div class="topic-metadata">

**Author:** [@Weiyu\_Fang1](https://discuss.elastic.co/u/Weiyu_Fang1)\
**Replies:** 1\
**Last updated:** [February 29, 2024, 12:16am UTC](https://discuss.elastic.co/t/vulnerability-github-com-hashicorp-nomad-0-0-0-20201203164818-6318a8ac7bf8/354373 "2024-02-29T00:16:55Z")

</div>

Hi I was using filebeat 8.6.0 and the docker scan found the vulnerability, however, even after updating to the latest 8.12.2, the vulnerability still exists, is there any plan to fix this vulnerability? Thanks

---

## [Cluster Migration to Different Geo Location](https://discuss.elastic.co/t/cluster-migration-to-different-geo-location/354383)

<div class="topic-metadata">

**Author:** [@fvegaucr1](https://discuss.elastic.co/u/fvegaucr1)\
**Replies:** 2\
**Last updated:** [February 28, 2024, 10:55pm UTC](https://discuss.elastic.co/t/cluster-migration-to-different-geo-location/354383 "2024-02-28T22:55:45Z")

</div>

Hi I would like to request your help with few questions regarding a cluster migration. Our company recently move to a different Datacenter, we had a cluster of about 35 servers running Elasticsearch, additionally we ha…

---

## [Heartbeat/Synthetics - Network Discovery](https://discuss.elastic.co/t/heartbeat-synthetics-network-discovery/353403)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 2\
**Last updated:** [February 28, 2024, 10:47pm UTC](https://discuss.elastic.co/t/heartbeat-synthetics-network-discovery/353403 "2024-02-28T22:47:56Z")

</div>

Hello, Is there any plans for Elastic to incorporate network discovery in their Heartbeat/Synthetics? The current method would be we would have to create icmp monitors manually to create a monitor in Heartbeat/Syntheti…

---

## [Logstash-input-snmp-1.3.2 modify max\_repetitions](https://discuss.elastic.co/t/logstash-input-snmp-1-3-2-modify-max-repetitions/354392)

<div class="topic-metadata">

**Author:** [@KikeI](https://discuss.elastic.co/u/KikeI)\
**Replies:** 0\
**Last updated:** [February 28, 2024, 10:28pm UTC](https://discuss.elastic.co/t/logstash-input-snmp-1-3-2-modify-max-repetitions/354392 "2024-02-28T22:28:58Z")

</div>

Hi, I am migrating services from prometheus snmp\_exporter to logstash-input-snmp-1.3.2. In snmp\_exporter the value of max\_repetitions is default "25" and gives the option to modify it. In logstash-input-snmp-1.3.2 the d…

---

## [Aggregation Based Data Tables - Hide the Metric Column](https://discuss.elastic.co/t/aggregation-based-data-tables-hide-the-metric-column/354003)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 4\
**Last updated:** [February 28, 2024, 9:59pm UTC](https://discuss.elastic.co/t/aggregation-based-data-tables-hide-the-metric-column/354003 "2024-02-28T21:59:30Z")

</div>

Hello, I am using aggregation based data table, instead of lens. My aggregation based table looks great but I want to hide the metric column. Is there a way to do this? Note: I don't want to use Lens because of in m…

---

## [Save search results as a file. Which is continually updated](https://discuss.elastic.co/t/save-search-results-as-a-file-which-is-continually-updated/354261)

<div class="topic-metadata">

**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\
**Replies:** 8\
**Last updated:** [February 28, 2024, 8:16pm UTC](https://discuss.elastic.co/t/save-search-results-as-a-file-which-is-continually-updated/354261 "2024-02-28T20:16:13Z")

</div>

Hello, i capture logs from a Docker container according to the following pattern. routes: - multiline+logstash+tcp://logstash.intern.example.com:50000 env: - name: SYSLOG\_HOSTNAME value: homeassistant - name:…

---

## [Dont see any logs in logstash-json.log](https://discuss.elastic.co/t/dont-see-any-logs-in-logstash-json-log/354377)

<div class="topic-metadata">

**Author:** [@Pooort](https://discuss.elastic.co/u/Pooort)\
**Replies:** 0\
**Last updated:** [February 28, 2024, 6:17pm UTC](https://discuss.elastic.co/t/dont-see-any-logs-in-logstash-json-log/354377 "2024-02-28T18:17:05Z")

</div>

My log4j2.properties setup: appender.rolling.type = RollingFile appender.rolling.name = plain\_rolling appender.rolling.fileName = ${sys:ls.logs}/logstash-plain.log appender.rolling.filePattern = ${sys:ls.logs}/logstash-…

---

## [How to see what logstash version a plugin version supports](https://discuss.elastic.co/t/how-to-see-what-logstash-version-a-plugin-version-supports/354362)

<div class="topic-metadata">

**Author:** [@tylersiemers](https://discuss.elastic.co/u/tylersiemers)\
**Replies:** 1\
**Last updated:** [February 28, 2024, 5:58pm UTC](https://discuss.elastic.co/t/how-to-see-what-logstash-version-a-plugin-version-supports/354362 "2024-02-28T17:58:07Z")

</div>

logstash 7.17.2 I am looking to update the logstash-integration-kafka logstash-integration-kafka (10.9.0) to a newer version that supports Kafka 3.X Where do I see in the README or docs what version logstash I need f…

---

## [java.lang.RuntimeException: unable to install test security manager running ES Tests](https://discuss.elastic.co/t/java-lang-runtimeexception-unable-to-install-test-security-manager-running-es-tests/354372)

<div class="topic-metadata">

**Author:** [@Steph\_van\_Schalkwyk](https://discuss.elastic.co/u/Steph_van_Schalkwyk)\
**Replies:** 0\
**Last updated:** [February 28, 2024, 4:31pm UTC](https://discuss.elastic.co/t/java-lang-runtimeexception-unable-to-install-test-security-manager-running-es-tests/354372 "2024-02-28T16:31:05Z")

</div>

Using Gradle 8.6. Any fix for this? Occurs when building Elasticsearch 8.x.y from the Github repo. Apparently not a bug. JDK 11, etc. etc. Caused by: java.lang.RuntimeException: unable to install test security manage…

---

## [I want to migrate an index from a cluster to another index in the another cluster but I get error](https://discuss.elastic.co/t/i-want-to-migrate-an-index-from-a-cluster-to-another-index-in-the-another-cluster-but-i-get-error/354314)

<div class="topic-metadata">

**Author:** [@Hatef\_Alipour](https://discuss.elastic.co/u/Hatef_Alipour)\
**Replies:** 9\
**Last updated:** [February 28, 2024, 4:11pm UTC](https://discuss.elastic.co/t/i-want-to-migrate-an-index-from-a-cluster-to-another-index-in-the-another-cluster-but-i-get-error/354314 "2024-02-28T16:11:46Z")

</div>

Hi, I want to migrate an index to another cluster. I can't use reindex because source IP is not whitelisted. also I can't use snapshot I decided to do this task by writing a logstash pipeline you can see my pipeline be…

---

## [Deleting Agent Permanently from Cosnole](https://discuss.elastic.co/t/deleting-agent-permanently-from-cosnole/354367)

<div class="topic-metadata">

**Author:** [@Nouman\_Ahmed](https://discuss.elastic.co/u/Nouman_Ahmed)\
**Replies:** 1\
**Last updated:** [February 28, 2024, 4:03pm UTC](https://discuss.elastic.co/t/deleting-agent-permanently-from-cosnole/354367 "2024-02-28T16:03:55Z")

</div>

How can i permanently delete agent from fleet? I can see its showing offline. I have uninstalled it by navigating to /usr/bin and running "./elastic-agent uninstall" command. How can i delete it so it no longer shows in…

---

## [In Elasticsearch client for .NET v8.x, how to check if SearchRequest object contains an index to target?](https://discuss.elastic.co/t/in-elasticsearch-client-for-net-v8-x-how-to-check-if-searchrequest-object-contains-an-index-to-target/354357)

<div class="topic-metadata">

**Author:** [@yansklyarenko](https://discuss.elastic.co/u/yansklyarenko)\
**Replies:** 0\
**Last updated:** [February 28, 2024, 3:03pm UTC](https://discuss.elastic.co/t/in-elasticsearch-client-for-net-v8-x-how-to-check-if-searchrequest-object-contains-an-index-to-target/354357 "2024-02-28T15:03:40Z")

</div>

When creating a SearchRequest object, there's an option to provide an index name. However, it is optional, and if not provided, a default index is taken, etc. In my code, I need to be absolutely sure the object is creat…

---

## [Agents upgradeable or not](https://discuss.elastic.co/t/agents-upgradeable-or-not/354354)

<div class="topic-metadata">

**Author:** [@Balu](https://discuss.elastic.co/u/Balu)\
**Replies:** 0\
**Last updated:** [February 28, 2024, 2:34pm UTC](https://discuss.elastic.co/t/agents-upgradeable-or-not/354354 "2024-02-28T14:34:59Z")

</div>

Hello everyone, I have just upgraded my cluster to 8.12.2, now some of my agents are upgradeable, others (including the fleet server) are not. All of them are installed from tarballs and were able to be upgraded before…

---

## [Cannot create map layer with GEOIP with KIBANA 8.12.1](https://discuss.elastic.co/t/cannot-create-map-layer-with-geoip-with-kibana-8-12-1/353996)

<div class="topic-metadata">

**Author:** [@jlbassereau](https://discuss.elastic.co/u/jlbassereau)\
**Replies:** 3\
**Last updated:** [February 28, 2024, 1:26pm UTC](https://discuss.elastic.co/t/cannot-create-map-layer-with-geoip-with-kibana-8-12-1/353996 "2024-02-28T13:26:55Z")

</div>

Hello, I´m trying to create a map from GEOIP coordinate retrieved from a log file. My workflow goes this way : logfile -\> filebeat -\> logstash -\> es That workflow worked as expected with ELK stack version 7 In versi…

---

## [Filebeat not loading one index in Kibana Dataview](https://discuss.elastic.co/t/filebeat-not-loading-one-index-in-kibana-dataview/354238)

<div class="topic-metadata">

**Author:** [@FileFile](https://discuss.elastic.co/u/FileFile)\
**Replies:** 3\
**Last updated:** [February 28, 2024, 1:22pm UTC](https://discuss.elastic.co/t/filebeat-not-loading-one-index-in-kibana-dataview/354238 "2024-02-28T13:22:00Z")

</div>

Hello I have the following Index and pipeline created from a csv { "mappings": { "\_meta": { "created\_by": "file-data-visualizer" }, "properties": { "@timestamp": { "type": "date" …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=293)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=295)
