# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=358 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 359 --- ## [Multiselect values in Kibana Visualizations](https://discuss.elastic.co/t/multiselect-values-in-kibana-visualizations/346659)
**Author:** [@fniwes](https://discuss.elastic.co/u/fniwes)\ **Replies:** 3\ **Last updated:** [December 5, 2023, 9:50am UTC](https://discuss.elastic.co/t/multiselect-values-in-kibana-visualizations/346659 "2023-12-05T09:50:40Z")
Hi! I have several visualizations, some as pie chart with multiple values. I want to select multiple values from the visualization to filter and also to explore in detail using discovery. But I am only able to select on… --- ## [Index stat analyse to increase performance](https://discuss.elastic.co/t/index-stat-analyse-to-increase-performance/348624)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 0\ **Last updated:** [December 5, 2023, 9:39am UTC](https://discuss.elastic.co/t/index-stat-analyse-to-increase-performance/348624 "2023-12-05T09:39:54Z")
Hi Can You look at the statistic from one of index. From our observations, it seems that the longer this index is updated, the worse the performanc i.e. response time results come out. What to pay attention to? Is there… --- ## [ILM not working node does not match index setting \[index.routing.allocation.require\] filters \[data:\\"warm\\"\]](https://discuss.elastic.co/t/ilm-not-working-node-does-not-match-index-setting-index-routing-allocation-require-filters-data-warm/348617)
**Author:** [@esseti](https://discuss.elastic.co/u/esseti)\ **Replies:** 0\ **Last updated:** [December 5, 2023, 8:42am UTC](https://discuss.elastic.co/t/ilm-not-working-node-does-not-match-index-setting-index-routing-allocation-require-filters-data-warm/348617 "2023-12-05T08:42:41Z")
Hello i've setup an ILM but i noticed that indeces never leave the warm state, by checking \_cluster/allocation/ i get this message node does not match index setting \[index.routing.allocation.require\] filters \[data:\\"… --- ## [NEST and new elastic .net client](https://discuss.elastic.co/t/nest-and-new-elastic-net-client/348485)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 1\ **Last updated:** [December 5, 2023, 8:04am UTC](https://discuss.elastic.co/t/nest-and-new-elastic-net-client/348485 "2023-12-05T08:04:06Z")
New elastic net client is not compatible with old NEST, we have complex application build on old NEST and is very difficult to migrate and test to new client. Is NEST going to be supported in future elastic version in c… --- ## [Is it possible to get an alert when an index of certain pattern is rolled over](https://discuss.elastic.co/t/is-it-possible-to-get-an-alert-when-an-index-of-certain-pattern-is-rolled-over/348611)
**Author:** [@Krishna\_Teja](https://discuss.elastic.co/u/Krishna_Teja)\ **Replies:** 0\ **Last updated:** [December 5, 2023, 5:16am UTC](https://discuss.elastic.co/t/is-it-possible-to-get-an-alert-when-an-index-of-certain-pattern-is-rolled-over/348611 "2023-12-05T05:16:21Z")
I have an ILM policy setup to roll over a datastream when it reaches certain threshold values. Once a new index is created, I want to get notified so I can run a script to update some parameters in my backend. Is there a… --- ## [How to retrieve elastic data to import it in another instance with different version?](https://discuss.elastic.co/t/how-to-retrieve-elastic-data-to-import-it-in-another-instance-with-different-version/348608)
**Author:** [@Kliwon\_Zervaloski](https://discuss.elastic.co/u/Kliwon_Zervaloski)\ **Replies:** 0\ **Last updated:** [December 5, 2023, 3:56am UTC](https://discuss.elastic.co/t/how-to-retrieve-elastic-data-to-import-it-in-another-instance-with-different-version/348608 "2023-12-05T03:56:06Z")
Hi Everyone, I want to migrate all the data from my old elastic instance which i installed on my local VM(the version is 7.16.3) and i want to send the data do my new instance on cloud vm with the latest version, is ther… --- ## [Problem on memory leak on auditbeat pod](https://discuss.elastic.co/t/problem-on-memory-leak-on-auditbeat-pod/348606)
**Author:** [@masonlu2014](https://discuss.elastic.co/u/masonlu2014)\ **Replies:** 0\ **Last updated:** [December 5, 2023, 3:06am UTC](https://discuss.elastic.co/t/problem-on-memory-leak-on-auditbeat-pod/348606 "2023-12-05T03:06:19Z")
hello guys, would you pls help me take a look memory leak problem on auditbeat , i am using v7.7.15 version of auditbeat , and i also have patched libbeat/processors/add\_process\_metadata: implement a process cache evic… --- ## [Clone api Bad Gateway error](https://discuss.elastic.co/t/clone-api-bad-gateway-error/348604)
**Author:** [@Krishna94](https://discuss.elastic.co/u/Krishna94)\ **Replies:** 0\ **Last updated:** [December 5, 2023, 2:27am UTC](https://discuss.elastic.co/t/clone-api-bad-gateway-error/348604 "2023-12-05T02:27:54Z")
Hi team, I tried to do a reindexing of my data but its taking more than 10 days so I tried to clone my index which is of 816GB and when I run clone api I am getting the following error, {"statusCode":502,"error":"Bad G… --- ## [How to use a dropdown filter in Canvas with graphics loaded from Visuallize Library](https://discuss.elastic.co/t/how-to-use-a-dropdown-filter-in-canvas-with-graphics-loaded-from-visuallize-library/348427)
**Author:** [@ajogonpez](https://discuss.elastic.co/u/ajogonpez)\ **Replies:** 1\ **Last updated:** [December 4, 2023, 10:42pm UTC](https://discuss.elastic.co/t/how-to-use-a-dropdown-filter-in-canvas-with-graphics-loaded-from-visuallize-library/348427 "2023-12-04T22:42:31Z")
Hello, I am working with the Canvas part, i have several dashboards in which I use different graphics that I have saved in the Visualize Library section to create these Dashes. Now I want to create a Canvas with these g… --- ## [Winlogbeats xml\_query support for new line chars](https://discuss.elastic.co/t/winlogbeats-xml-query-support-for-new-line-chars/348005)
**Author:** [@grants](https://discuss.elastic.co/u/grants)\ **Replies:** 6\ **Last updated:** [December 4, 2023, 10:41pm UTC](https://discuss.elastic.co/t/winlogbeats-xml-query-support-for-new-line-chars/348005 "2023-12-04T22:41:53Z")
Running winlogbeat version 8.11.1 and trying to use a custom xml\_query for the event logs. My issue is the data I need to match contains a new line sequence that is proving difficult to filter for. Provided here in an i… --- ## [Unable to generate pdf report from canvas](https://discuss.elastic.co/t/unable-to-generate-pdf-report-from-canvas/348513)
**Author:** [@BIMWash](https://discuss.elastic.co/u/BIMWash)\ **Replies:** 1\ **Last updated:** [December 4, 2023, 10:07pm UTC](https://discuss.elastic.co/t/unable-to-generate-pdf-report-from-canvas/348513 "2023-12-04T22:07:52Z")
I am attempting to create a report using Canvas but keep running in to the same issues "Error Error: Max attempts reached (3). Queue timeout reached." I have updated the Kibana.yml to increase the timeout xpack.repor… --- ## [How seriously Elastic takes the topic of product safety / software quality](https://discuss.elastic.co/t/how-seriously-elastic-takes-the-topic-of-product-safety-software-quality/348582)
**Author:** [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\ **Replies:** 1\ **Last updated:** [December 4, 2023, 6:29pm UTC](https://discuss.elastic.co/t/how-seriously-elastic-takes-the-topic-of-product-safety-software-quality/348582 "2023-12-04T18:29:10Z")
Hi there, Two weeks ago i opened a ticket for a memory leak at Metricbeat. The memory leak was highly risky for productive environments. It took several days until the problem was recognized, understood and fixed. … --- ## [Accessing nested aggregations in a watcher's action](https://discuss.elastic.co/t/accessing-nested-aggregations-in-a-watchers-action/348592)
**Author:** [@Wave](https://discuss.elastic.co/u/Wave)\ **Replies:** 0\ **Last updated:** [December 4, 2023, 7:17pm UTC](https://discuss.elastic.co/t/accessing-nested-aggregations-in-a-watchers-action/348592 "2023-12-04T19:17:59Z")
This isn't a question, but just wanted to share something I've learned. There are similar posts that talk about nested aggregations, but nothing that quite explained what I was looking for. Creating advanced watchers in… --- ## [Elastic Snapshot Restore from S3 Strangeness](https://discuss.elastic.co/t/elastic-snapshot-restore-from-s3-strangeness/348583)
**Author:** [@datencio](https://discuss.elastic.co/u/datencio)\ **Replies:** 1\ **Last updated:** [December 4, 2023, 6:11pm UTC](https://discuss.elastic.co/t/elastic-snapshot-restore-from-s3-strangeness/348583 "2023-12-04T18:11:04Z")
I am testing out the Elasticsearch Snapshot & Restore feature in my Lab environment. I ran into a strange situation where on a particular cluster the restore seems to complete but seeing strange behavior. For instance, a… --- ## [Inconsistent fields in Kibana 8 Connector / Rule APIs -- connector\_type\_id](https://discuss.elastic.co/t/inconsistent-fields-in-kibana-8-connector-rule-apis-connector-type-id/348590)
**Author:** [@jwhitby](https://discuss.elastic.co/u/jwhitby)\ **Replies:** 0\ **Last updated:** [December 4, 2023, 6:10pm UTC](https://discuss.elastic.co/t/inconsistent-fields-in-kibana-8-connector-rule-apis-connector-type-id/348590 "2023-12-04T18:10:24Z")
Tested using Elastic / Kibana Version 8.11.1 docker containers. The Kibana 8 connector / rule APIs documentation notes that the field actionTypeId has been updated to connector\_type\_id. This field is accepted when you … --- ## [Change Index Ingestion method](https://discuss.elastic.co/t/change-index-ingestion-method/348242)
**Author:** [@RodAndTom](https://discuss.elastic.co/u/RodAndTom)\ **Replies:** 2\ **Last updated:** [December 4, 2023, 4:49pm UTC](https://discuss.elastic.co/t/change-index-ingestion-method/348242 "2023-12-04T16:49:01Z")
Hi, I finally managed to setup a MongoDB connector integration with Elastic through Kibana, but it create a index and I can't change the settings and mappings for this Index (Ingestion method is shown as "Connector". S… --- ## [Anomaly Job - implications of low cardinality in population analysis](https://discuss.elastic.co/t/anomaly-job-implications-of-low-cardinality-in-population-analysis/348584)
**Author:** [@marmai16](https://discuss.elastic.co/u/marmai16)\ **Replies:** 0\ **Last updated:** [December 4, 2023, 4:41pm UTC](https://discuss.elastic.co/t/anomaly-job-implications-of-low-cardinality-in-population-analysis/348584 "2023-12-04T16:41:06Z")
Hello everybody, i'am testing an anomaly job. At creation, it warned me that the cardinality is below 10 and it might not be suitable for population analysis. I was asking myself, under which circumstances it might be … --- ## [The highlight is not returned when using prefixing query](https://discuss.elastic.co/t/the-highlight-is-not-returned-when-using-prefixing-query/348581)
**Author:** [@eric\_liu2007](https://discuss.elastic.co/u/eric_liu2007)\ **Replies:** 0\ **Last updated:** [December 4, 2023, 4:05pm UTC](https://discuss.elastic.co/t/the-highlight-is-not-returned-when-using-prefixing-query/348581 "2023-12-04T16:05:01Z")
hi all i am searching by using prefix query, the highlight was return on old version (tested 7.6.2, 7.10.3), but not in latest versions (tested 7.11.0, 7.17.5, 8.10.2, 8.10.4, 8.11.1). if ""index\_prefixes" sub-field … --- ## [Moving Averages In Kibana](https://discuss.elastic.co/t/moving-averages-in-kibana/348580)
**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\ **Replies:** 0\ **Last updated:** [December 4, 2023, 3:59pm UTC](https://discuss.elastic.co/t/moving-averages-in-kibana/348580 "2023-12-04T15:59:39Z")
Trying to do a moving average visualisation of 92 objects specific fault occurrence using a 7-day window Want to clarify about Window Size i can't seem to infer the unit of measurement. Days Hours Mins weeks? How can… --- ## [Rally eventdata track combined-indexing-and-querying challenge - results](https://discuss.elastic.co/t/rally-eventdata-track-combined-indexing-and-querying-challenge-results/348579)
**Author:** [@jelliott1](https://discuss.elastic.co/u/jelliott1)\ **Replies:** 0\ **Last updated:** [December 4, 2023, 3:59pm UTC](https://discuss.elastic.co/t/rally-eventdata-track-combined-indexing-and-querying-challenge-results/348579 "2023-12-04T15:59:07Z")
Hello, I ran some tests on my Elasticsearch cluster with rally, using the eventdata track and the combined-indexing-and-querying challenge, and am hoping to get some help interpreting the results. I'm interested in the… --- ## [Drop event does not work for specific field](https://discuss.elastic.co/t/drop-event-does-not-work-for-specific-field/348535)
**Author:** [@s0p4L1n3](https://discuss.elastic.co/u/s0p4L1n3)\ **Replies:** 1\ **Last updated:** [December 4, 2023, 3:34pm UTC](https://discuss.elastic.co/t/drop-event-does-not-work-for-specific-field/348535 "2023-12-04T15:34:41Z")
Hello, I'm using Winlogbeat 7.17.13.0. I want to monitor File/folder activities on the computers and servers. And I want to drop on the client side all useless/not needed events. As monitoring files activites generat… --- ## [Selinux Restrictions](https://discuss.elastic.co/t/selinux-restrictions/348566)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 6\ **Last updated:** [December 4, 2023, 3:24pm UTC](https://discuss.elastic.co/t/selinux-restrictions/348566 "2023-12-04T15:24:14Z")
I am installing ELK 8.7.1 on an Oracle Linux version. I was able to install ELK without any problems and the services are in active state without any errors. When I try to access Kibana through port 5601 from the brows… --- ## [Deleting and index data with two params is not allowing - 8.11.0](https://discuss.elastic.co/t/deleting-and-index-data-with-two-params-is-not-allowing-8-11-0/348571)
**Author:** [@Rubsy](https://discuss.elastic.co/u/Rubsy)\ **Replies:** 1\ **Last updated:** [December 4, 2023, 3:23pm UTC](https://discuss.elastic.co/t/deleting-and-index-data-with-two-params-is-not-allowing-8-11-0/348571 "2023-12-04T15:23:37Z")
Here is my data PUT dynamicasset/\_doc/E3EBDC84-9281-46D3-9DA1-31672642C7D3 { "CustomerId":"E3EBDC84-9281-46D3-9DA1-31672642C7D3", "InvoiceNumber": "301", "InvoiceAmount": 450, "Description": "Test Sample for deleting ba… --- ## [Connect Logstash 8.10 to Elasticsearch 8.10](https://discuss.elastic.co/t/connect-logstash-8-10-to-elasticsearch-8-10/348564)
**Author:** [@Abdeljalil\_El\_Yousso](https://discuss.elastic.co/u/Abdeljalil_El_Yousso)\ **Replies:** 1\ **Last updated:** [December 4, 2023, 3:20pm UTC](https://discuss.elastic.co/t/connect-logstash-8-10-to-elasticsearch-8-10/348564 "2023-12-04T15:20:28Z")
Can anyone please provide an example to connect Logstash with elasticsearch runing on docker on a debian environement , the connection using SSL "very important" i followed the documentation but i guess im missing somet… --- ## [Sorting script with tiebreaker](https://discuss.elastic.co/t/sorting-script-with-tiebreaker/348528)
**Author:** [@\_baba](https://discuss.elastic.co/u/_baba)\ **Replies:** 1\ **Last updated:** [December 4, 2023, 3:08pm UTC](https://discuss.elastic.co/t/sorting-script-with-tiebreaker/348528 "2023-12-04T15:08:25Z")
Hi, We have multiple documents in an index with duplicate field value (product\_id). I want to sort based on product\_id with a condition that for 2 records having same product\_id, sort based on product\_cost. Recreation … --- ## [Elasticsearch Connection Error](https://discuss.elastic.co/t/elasticsearch-connection-error/348536)
**Author:** [@Burak\_Karatay](https://discuss.elastic.co/u/Burak_Karatay)\ **Replies:** 1\ **Last updated:** [December 4, 2023, 3:08pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-error/348536 "2023-12-04T15:08:08Z")
I have physical server with elasticsearch installed and from another computer I try to connect the elasticsearch with this code: const esClient = new Client({node: 'https://my-ip-address:5621', auth: {username: 'elastic… --- ## [Visualización de logs en kibana, desde aplicaciones alojadas en azure kubernetes](https://discuss.elastic.co/t/visualizacion-de-logs-en-kibana-desde-aplicaciones-alojadas-en-azure-kubernetes/348568)
**Author:** [@Wilson\_Monsalve](https://discuss.elastic.co/u/Wilson_Monsalve)\ **Replies:** 0\ **Last updated:** [December 4, 2023, 2:57pm UTC](https://discuss.elastic.co/t/visualizacion-de-logs-en-kibana-desde-aplicaciones-alojadas-en-azure-kubernetes/348568 "2023-12-04T14:57:36Z")
Hola buen día, mi escenario y problema es el siguiente: Tengo un servidor en azure Linux donde instale elastic-kibana por medio de docker, con las imágenes 8.6.1; elasticsearh y kibana lo tengo implementado con tls, cer… --- ## [Need to send data from .log file to AWS opensearch](https://discuss.elastic.co/t/need-to-send-data-from-log-file-to-aws-opensearch/348555)
**Author:** [@anupvtr](https://discuss.elastic.co/u/anupvtr)\ **Replies:** 5\ **Last updated:** [December 4, 2023, 2:43pm UTC](https://discuss.elastic.co/t/need-to-send-data-from-log-file-to-aws-opensearch/348555 "2023-12-04T14:43:32Z")
Hello all, Could you please help me on this. I am quite new to the Elasticsearch ocean. My requirement is, I need to send data from .log file to AWS opensearch. Whether the below option will work for me. Download t… --- ## [Similarity field in KNN](https://discuss.elastic.co/t/similarity-field-in-knn/348552)
**Author:** [@Sai\_Krishna\_D](https://discuss.elastic.co/u/Sai_Krishna_D)\ **Replies:** 4\ **Last updated:** [December 4, 2023, 2:30pm UTC](https://discuss.elastic.co/t/similarity-field-in-knn/348552 "2023-12-04T14:30:06Z")
When using the Similarity field in KNN Query, The response is not expected, The similarity value I gave was 0.6 and the boost as 1. Even though there are more than 30 documents which have score greater than 0.7 only one … --- ## [Null pointer exception for explain with boost mode replace](https://discuss.elastic.co/t/null-pointer-exception-for-explain-with-boost-mode-replace/348545)
**Author:** [@elvanja](https://discuss.elastic.co/u/elvanja)\ **Replies:** 2\ **Last updated:** [December 4, 2023, 2:06pm UTC](https://discuss.elastic.co/t/null-pointer-exception-for-explain-with-boost-mode-replace/348545 "2023-12-04T14:06:46Z")
We seem to have odd situation for requesting explanation when boost mode is set to replace, the stack returns null pointer exception. Running on Version: 8.7.1, Build: docker/f229ed3f893a515d590d0f39b05f68913e2d9b53/2023… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=357) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=359)