# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=42 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 43 --- ## [Can i configure LDAP in BASIC License](https://discuss.elastic.co/t/can-i-configure-ldap-in-basic-license/381624)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 3\ **Last updated:** [September 6, 2025, 2:42am UTC](https://discuss.elastic.co/t/can-i-configure-ldap-in-basic-license/381624 "2025-09-06T02:42:51Z")
Hello We have Implemented , Elasticsearch version 7.8.0 cluster at our end. We are having this old version i understand and we are in process of upgrading same . Our Elasticsearch License TYPE is BASIC In mean while … --- ## [No id why I cannot access key "id"](https://discuss.elastic.co/t/no-id-why-i-cannot-access-key-id/381639)
**Author:** [@Salvatore\_Milano](https://discuss.elastic.co/u/Salvatore_Milano)\ **Replies:** 1\ **Last updated:** [September 5, 2025, 1:03pm UTC](https://discuss.elastic.co/t/no-id-why-i-cannot-access-key-id/381639 "2025-09-05T13:03:31Z")
Hello, sometimes it seems that Elasticsearch is not running as it should so I have tried to debug it using kibana. I cannot access the key “id” via: GET /trend\_meta/\_search { "query": { "co… --- ## [Alert throwing to fleet](https://discuss.elastic.co/t/alert-throwing-to-fleet/381637)
**Author:** [@GiorgioS13](https://discuss.elastic.co/u/GiorgioS13)\ **Replies:** 1\ **Last updated:** [September 5, 2025, 12:57pm UTC](https://discuss.elastic.co/t/alert-throwing-to-fleet/381637 "2025-09-05T12:57:23Z")
Unable to initialize Fleet illegal\_argument\_exception Root causes: illegal\_argument\_exception: node \[\*\*\*\*\] does not have the \[remote\_cluster\_client\] role I have one cluster: 3 master+hot 1 frozen Why I need remote c… --- ## [Error when adding vector data with Elastic.Clients.Elasticsearch version 9.0.0](https://discuss.elastic.co/t/error-when-adding-vector-data-with-elastic-clients-elasticsearch-version-9-0-0/379388)
**Author:** [@ppworks](https://discuss.elastic.co/u/ppworks)\ **Replies:** 5\ **Last updated:** [September 4, 2025, 10:11pm UTC](https://discuss.elastic.co/t/error-when-adding-vector-data-with-elastic-clients-elasticsearch-version-9-0-0/379388 "2025-09-04T22:11:50Z")
The code is as follows: /// \ /// Create an index /// \ /// \\ /// \\ protected async void Button1\_Click(object sender, EventArgs e) { // Connection … --- ## [Elastic agent with fleet no collect metric](https://discuss.elastic.co/t/elastic-agent-with-fleet-no-collect-metric/381626)
**Author:** [@hanhee](https://discuss.elastic.co/u/hanhee)\ **Replies:** 0\ **Last updated:** [September 5, 2025, 8:26am UTC](https://discuss.elastic.co/t/elastic-agent-with-fleet-no-collect-metric/381626 "2025-09-05T08:26:05Z")
We’re running Elastic Agent on Kubernetes as a DaemonSet and currently collecting metrics from kubelet. However, when pods get rescheduled or move, log collection stops and only some pods are picked up. If we restart the… --- ## [Elastic Watcher migration to Rules Issue's](https://discuss.elastic.co/t/elastic-watcher-migration-to-rules-issues/381617)
**Author:** [@Sarada](https://discuss.elastic.co/u/Sarada)\ **Replies:** 1\ **Last updated:** [September 5, 2025, 5:41am UTC](https://discuss.elastic.co/t/elastic-watcher-migration-to-rules-issues/381617 "2025-09-05T05:41:53Z")
Hi All, I migrating watchers to Rules, I do have a watcher that compares previous value from last entry and alerts if not same. This works perfectly in watcher as we wrote aggs and painless script but as we are migratin… --- ## [Elasticsearch span\_near query in greek text](https://discuss.elastic.co/t/elasticsearch-span-near-query-in-greek-text/381608)
**Author:** [@epistola](https://discuss.elastic.co/u/epistola)\ **Replies:** 2\ **Last updated:** [September 5, 2025, 5:06am UTC](https://discuss.elastic.co/t/elasticsearch-span-near-query-in-greek-text/381608 "2025-09-05T05:06:13Z")
Hello everyone, I have a problem with the following query: { "query": { "span\_near": { "clauses": \[ { "span\_near": { "clauses": \[ { "span\_term": { "text1": "word… --- ## [Filebeat with fortinet module not dropping logs in elastic](https://discuss.elastic.co/t/filebeat-with-fortinet-module-not-dropping-logs-in-elastic/381580)
**Author:** [@gari](https://discuss.elastic.co/u/gari)\ **Replies:** 2\ **Last updated:** [September 4, 2025, 5:45pm UTC](https://discuss.elastic.co/t/filebeat-with-fortinet-module-not-dropping-logs-in-elastic/381580 "2025-09-04T17:45:02Z")
Hello i’m having problems dropping logs from filebeat to elastic using the fortinet module. This is the yml i have in filebeat but i does not seem to be dropping any logs since I still see traffic and notice and informat… --- ## [Consistently high CPU usage on hot nodes](https://discuss.elastic.co/t/consistently-high-cpu-usage-on-hot-nodes/379948)
**Author:** [@maario](https://discuss.elastic.co/u/maario)\ **Replies:** 12\ **Last updated:** [September 4, 2025, 3:47pm UTC](https://discuss.elastic.co/t/consistently-high-cpu-usage-on-hot-nodes/379948 "2025-09-04T15:47:04Z")
Hi all We are encountering a consistently high CPU usage (around 80% on average) on our hot nodes (2 hot, 2 warm, 4 cold) since around 3 weeks. The CPU usage roughly doubled one day and has since not gone down again. So… --- ## [Fleet agent policies - low priority](https://discuss.elastic.co/t/fleet-agent-policies-low-priority/381599)
**Author:** [@aab163](https://discuss.elastic.co/u/aab163)\ **Replies:** 2\ **Last updated:** [September 4, 2025, 3:13pm UTC](https://discuss.elastic.co/t/fleet-agent-policies-low-priority/381599 "2025-09-04T15:13:51Z")
Agent 8.6.x. Just wondering if the elastic team just ran out of descriptive categories / headlines. The difference between “Agent logging number of files” and “Agent logging number of files” is for sure hard to guess ju… --- ## [Is there a way to determine what triggers shard movement?](https://discuss.elastic.co/t/is-there-a-way-to-determine-what-triggers-shard-movement/380047)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 10\ **Last updated:** [September 4, 2025, 2:47pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-determine-what-triggers-shard-movement/380047 "2025-09-04T14:47:57Z")
Our cluster all of a sudden starts to rebalance for no apparent reason. It's been going on for a day. I tweaked the setting "cluster.routing.allocation.balance.threshold" to 10 which means allow 10 shards difference be… --- ## [Adding Building Maps to elastic](https://discuss.elastic.co/t/adding-building-maps-to-elastic/381576)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [September 4, 2025, 12:39pm UTC](https://discuss.elastic.co/t/adding-building-maps-to-elastic/381576 "2025-09-04T12:39:43Z")
Hello, I was wondering if this possible already in Kibana? Being able to add buildings into Maps feature in Kibana? I see this Maps | Elastic Docs about embbedding your own map? --- ## [Custom analyzer synonym issue: Astoria → Queens also matches Queens Village](https://discuss.elastic.co/t/custom-analyzer-synonym-issue-astoria-queens-also-matches-queens-village/381543)
**Author:** [@william1349](https://discuss.elastic.co/u/william1349)\ **Replies:** 1\ **Last updated:** [September 4, 2025, 11:16am UTC](https://discuss.elastic.co/t/custom-analyzer-synonym-issue-astoria-queens-also-matches-queens-village/381543 "2025-09-04T11:16:31Z")
I am using a match search for a city called Astoria, and I am using a custom analyzer for cities. When I search for Astoria, the analyzer will return Queens. Queens is returning just fine. However, because it matches Que… --- ## [Winlogbeat 9.1.3 - agent logs floodinig with warnings](https://discuss.elastic.co/t/winlogbeat-9-1-3-agent-logs-floodinig-with-warnings/381577)
**Author:** [@novaksam](https://discuss.elastic.co/u/novaksam)\ **Replies:** 1\ **Last updated:** [September 4, 2025, 9:43am UTC](https://discuss.elastic.co/t/winlogbeat-9-1-3-agent-logs-floodinig-with-warnings/381577 "2025-09-04T09:43:29Z")
I recently upgraded my setup from 8.18.2 to 9.0.4, and upgraded my Winlogbeats to 9.1.3. Since doing that upgrade, the logs for my winlogbeat agents are being flooded with logs like {"log.level":"warn","@timestamp":"202… --- ## [Fleet server installation error](https://discuss.elastic.co/t/fleet-server-installation-error/381600)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 0\ **Last updated:** [September 4, 2025, 9:32am UTC](https://discuss.elastic.co/t/fleet-server-installation-error/381600 "2025-09-04T09:32:22Z")
Hello, I’m trying to install fleet server on windows but im running into an error Running on policy with Fleet Server integration: fleet-server-policy; missing config fleet.agent.id (expected during bootstrap process) … --- ## [Elastic search](https://discuss.elastic.co/t/elastic-search/381550)
**Author:** [@mayur\_khairnar](https://discuss.elastic.co/u/mayur_khairnar)\ **Replies:** 1\ **Last updated:** [September 4, 2025, 3:49am UTC](https://discuss.elastic.co/t/elastic-search/381550 "2025-09-04T03:49:50Z")
i am trying to create visualization of type data table , i want format one of column which shows date in this format Aug 22 10:05:00 2026 GMT , which is string type . i want to format column with condition “if expiry dat… --- ## [Elasticsearch-core plugin incompatibility](https://discuss.elastic.co/t/elasticsearch-core-plugin-incompatibility/381595)
**Author:** [@megha2](https://discuss.elastic.co/u/megha2)\ **Replies:** 0\ **Last updated:** [September 4, 2025, 2:06am UTC](https://discuss.elastic.co/t/elasticsearch-core-plugin-incompatibility/381595 "2025-09-04T02:06:40Z")
Using elasticseach bundled in arcgis, getting error below - where it fails as the elasticseach has no plugins. Has anyone seen or experienced this error before. CliToolLauncher.configureLoggingWithoutConfig(CliToolLaunc… --- ## [Elastic logging plugin for docker fails to start containers](https://discuss.elastic.co/t/elastic-logging-plugin-for-docker-fails-to-start-containers/381592)
**Author:** [@shabeebk](https://discuss.elastic.co/u/shabeebk)\ **Replies:** 0\ **Last updated:** [September 4, 2025, 1:54am UTC](https://discuss.elastic.co/t/elastic-logging-plugin-for-docker-fails-to-start-containers/381592 "2025-09-04T01:54:28Z")
Hello, After upgrading the Elasticsearch to 9.1.3, the docker containers cannot start due to issue with elastic logging plugin. Background: We have been using Elasticsearch 8.15.4 with docker plugin elastic/elastic-l… --- ## [Salesforce Real time events Monitoring using Elasticsearch](https://discuss.elastic.co/t/salesforce-real-time-events-monitoring-using-elasticsearch/381587)
**Author:** [@mosaadshaikh1998](https://discuss.elastic.co/u/mosaadshaikh1998)\ **Replies:** 0\ **Last updated:** [September 4, 2025, 12:41am UTC](https://discuss.elastic.co/t/salesforce-real-time-events-monitoring-using-elasticsearch/381587 "2025-09-04T00:41:49Z")
Hello Team, Wanted to understand if Salesforce integration in Kibana can monitor real time events from salesforce (Not the EventLogFile object). I can see in “Kibana \> Integrations \> Salesforce \> Overview tab” that it i… --- ## [Is there any way to update documents using the ingest pipeline?](https://discuss.elastic.co/t/is-there-any-way-to-update-documents-using-the-ingest-pipeline/381466)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 2\ **Last updated:** [September 3, 2025, 11:31pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-update-documents-using-the-ingest-pipeline/381466 "2025-09-03T23:31:59Z")
We are using NEST and using the Ingest Pipeline when indexing a new document as follows: await ElasticSearchConfig.GetClient().IndexAsync(o, idx =\> idx.Index($"{index}-{user.Country.ToLower()}").Pipeline("agent-pipeline… --- ## [Questions about OpenAI connectors](https://discuss.elastic.co/t/questions-about-openai-connectors/381367)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [September 3, 2025, 5:49pm UTC](https://discuss.elastic.co/t/questions-about-openai-connectors/381367 "2025-09-03T17:49:02Z")
Hello, Today I was playing with OpenAI connector settings in Elastic Security Serverless and I have some questions for which I didn’t found an answer in the documentation. What connector to use? “OpenAI” =\> OpenAI co… --- ## [Elasticsearch WARN message after upgrade 8.19.2 to 8.19.3](https://discuss.elastic.co/t/elasticsearch-warn-message-after-upgrade-8-19-2-to-8-19-3/381460)
**Author:** [@kalai](https://discuss.elastic.co/u/kalai)\ **Replies:** 6\ **Last updated:** [September 3, 2025, 5:33pm UTC](https://discuss.elastic.co/t/elasticsearch-warn-message-after-upgrade-8-19-2-to-8-19-3/381460 "2025-09-03T17:33:01Z")
After upgrade the Elasticsearch version 8.19.2 to 8.19.3 the below message is rollover Not entitled: component \[(unknown)\], module \[ALL-UNNAMED\], class \[class com.dynatrace.agent.casp.thirdparty.io.UrlUtils\], operation … --- ## [PostgreSQL Functionality Equivalent to Elasticsearch Painless Scripts](https://discuss.elastic.co/t/postgresql-functionality-equivalent-to-elasticsearch-painless-scripts/381559)
**Author:** [@samrinkomai](https://discuss.elastic.co/u/samrinkomai)\ **Replies:** 3\ **Last updated:** [September 3, 2025, 1:21pm UTC](https://discuss.elastic.co/t/postgresql-functionality-equivalent-to-elasticsearch-painless-scripts/381559 "2025-09-03T13:21:28Z")
In elasticsearch I often use painless script inside searches to calculate values dynamically ay query time, for example by manipulating a timestamp field or deriving custom numeric values. Now I am working on a project w… --- ## [Apt raises warning for repo on Debian 13](https://discuss.elastic.co/t/apt-raises-warning-for-repo-on-debian-13/381567)
**Author:** [@kcp](https://discuss.elastic.co/u/kcp)\ **Replies:** 0\ **Last updated:** [September 3, 2025, 12:20pm UTC](https://discuss.elastic.co/t/apt-raises-warning-for-repo-on-debian-13/381567 "2025-09-03T12:20:30Z")
The Elastic 8 repo causes apt to raise a warning on Debian 13 (aka Trixie). root@charly-dev13:~# apt-get update ... Get:9 https://artifacts.elastic.co/packages/oss-8.x/apt stable InRelease \[3248 B\] Get:10 https://artifa… --- ## [How to change ILM policy?](https://discuss.elastic.co/t/how-to-change-ilm-policy/381161)
**Author:** [@MagnusTHN](https://discuss.elastic.co/u/MagnusTHN)\ **Replies:** 3\ **Last updated:** [September 3, 2025, 12:15pm UTC](https://discuss.elastic.co/t/how-to-change-ilm-policy/381161 "2025-09-03T12:15:07Z")
Hi everyone, I’m using Elasticsearch (8.15.1) for logging in my server environment, and Fleet to distribute agents across the servers. The indices created are currently using the logs index lifecycle policy, which acco… --- ## [Logstash Pod JVM Usage is almost 100% after 7.17.x to 8.18.x upgrade](https://discuss.elastic.co/t/logstash-pod-jvm-usage-is-almost-100-after-7-17-x-to-8-18-x-upgrade/381566)
**Author:** [@srinivas974](https://discuss.elastic.co/u/srinivas974)\ **Replies:** 0\ **Last updated:** [September 3, 2025, 12:04pm UTC](https://discuss.elastic.co/t/logstash-pod-jvm-usage-is-almost-100-after-7-17-x-to-8-18-x-upgrade/381566 "2025-09-03T12:04:32Z")
Using logstash 8.18.14 We are running logstash on Dev and QA environments with the same version and we observed JVM usage of almost 100%. We process approximately 3000 logs/sec and of size ~1.5KB. Here are the logstash… --- ## [Restart Elastic search without data loss single node cluster](https://discuss.elastic.co/t/restart-elastic-search-without-data-loss-single-node-cluster/381540)
**Author:** [@Sudhir\_Takale1](https://discuss.elastic.co/u/Sudhir_Takale1)\ **Replies:** 5\ **Last updated:** [September 3, 2025, 11:29am UTC](https://discuss.elastic.co/t/restart-elastic-search-without-data-loss-single-node-cluster/381540 "2025-09-03T11:29:54Z")
I want to restart my Elasticsearch service which is running on EC2, data stored on EFS mounted on EC2. As in current yml file there is no security related configurations present, I want add these and restart Elasticsearc… --- ## [How to set process alerts in kibana using rules](https://discuss.elastic.co/t/how-to-set-process-alerts-in-kibana-using-rules/381556)
**Author:** [@sreya\_14](https://discuss.elastic.co/u/sreya_14)\ **Replies:** 2\ **Last updated:** [September 3, 2025, 10:38am UTC](https://discuss.elastic.co/t/how-to-set-process-alerts-in-kibana-using-rules/381556 "2025-09-03T10:38:43Z")
I have installed ELK 8.18 and use elastic agent to pull data from several application servers. Now I want to set alert for application processes using rule . can any one guide me on this ? --- ## [Failure Store Released?](https://discuss.elastic.co/t/failure-store-released/362313)
**Author:** [@jsheely](https://discuss.elastic.co/u/jsheely)\ **Replies:** 2\ **Last updated:** [September 3, 2025, 1:52am UTC](https://discuss.elastic.co/t/failure-store-released/362313 "2025-09-03T01:52:02Z")
I have been seeing several commits, PR, and change log release notes, discussions around failure\_store. But I can't find anything in the documentation about it and when I try and utilize it based on the examples I am ge… --- ## [Vertex AI Gemini Embeddings Task Type Support in Inference API](https://discuss.elastic.co/t/vertex-ai-gemini-embeddings-task-type-support-in-inference-api/381533)
**Author:** [@Jared\_Gray](https://discuss.elastic.co/u/Jared_Gray)\ **Replies:** 0\ **Last updated:** [September 2, 2025, 8:32pm UTC](https://discuss.elastic.co/t/vertex-ai-gemini-embeddings-task-type-support-in-inference-api/381533 "2025-09-02T20:32:58Z")
I'm working on implementing semantic search using Vertex AI Gemini embedding models (gemini-embedding-001) through the Inference API. While the Create a Google Vertex AI inference endpoint | Elasticsearch API documentat… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=41) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=43)