# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=48 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 49 --- ## [Using dense\_vector with script params](https://discuss.elastic.co/t/using-dense-vector-with-script-params/380908)
**Author:** [@joellupfer](https://discuss.elastic.co/u/joellupfer)\ **Replies:** 1\ **Last updated:** [August 8, 2025, 3:07pm UTC](https://discuss.elastic.co/t/using-dense-vector-with-script-params/380908 "2025-08-08T15:07:46Z")
Hello! I am currently developing a script that utilizes text embedding vectors. The relevant portion of the mapping is shown below (please disregard the remaining parts, as this is intended solely for testing purposes). … --- ## [Unable to renew Basic license for Elasticsearch 7.17.18 — need updated license URL](https://discuss.elastic.co/t/unable-to-renew-basic-license-for-elasticsearch-7-17-18-need-updated-license-url/380907)
**Author:** [@dawsonweb](https://discuss.elastic.co/u/dawsonweb)\ **Replies:** 1\ **Last updated:** [August 8, 2025, 2:37pm UTC](https://discuss.elastic.co/t/unable-to-renew-basic-license-for-elasticsearch-7-17-18-need-updated-license-url/380907 "2025-08-08T14:37:49Z")
Hi all, I’m running Elasticsearch 7.17.18 in a Docker container on \[your OS here, e.g., Ubuntu 20.04 LTS\]. Kibana version: 7.17.18. This cluster was originally deployed with the default 30-day trial license, but it ex… --- ## [Barracuda Cloudgen Integration / Agent possibly broken?](https://discuss.elastic.co/t/barracuda-cloudgen-integration-agent-possibly-broken/380785)
**Author:** [@cow\_on\_lsd](https://discuss.elastic.co/u/cow_on_lsd)\ **Replies:** 14\ **Last updated:** [August 8, 2025, 1:13pm UTC](https://discuss.elastic.co/t/barracuda-cloudgen-integration-agent-possibly-broken/380785 "2025-08-08T13:13:06Z")
Good Morning Everyone, I have the following situation: The Barracuda firewall is configured as described here The integration is configured as per default values The agent is enrolled with the right integration polic… --- ## [Rename fields name with Logstash](https://discuss.elastic.co/t/rename-fields-name-with-logstash/380861)
**Author:** [@yelinaung](https://discuss.elastic.co/u/yelinaung)\ **Replies:** 11\ **Last updated:** [August 8, 2025, 9:30am UTC](https://discuss.elastic.co/t/rename-fields-name-with-logstash/380861 "2025-08-08T09:30:48Z")
How to rename for clarity Can someone kindly help with this? Thank you. filter { mutate { rename =\> { "\[test\]\[rex-platform"\\\\" \]" =\> "\[test\]\[rex-platform\]" } } } Output Di… --- ## [Failed to create repository](https://discuss.elastic.co/t/failed-to-create-repository/380705)
**Author:** [@deepakraja](https://discuss.elastic.co/u/deepakraja)\ **Replies:** 3\ **Last updated:** [August 8, 2025, 8:52am UTC](https://discuss.elastic.co/t/failed-to-create-repository/380705 "2025-08-08T08:52:25Z")
Hi, I was trying to create a repository on elasticsearch for camunda backup. On the documentation it mentioned to add local mounted path into the yaml using path.repo parameter. kindly guide how to refer this parameter i… --- ## [Indices with ILM policies are not included in Snapshot and Restore Operations](https://discuss.elastic.co/t/indices-with-ilm-policies-are-not-included-in-snapshot-and-restore-operations/380454)
**Author:** [@Rajesh\_Kannan](https://discuss.elastic.co/u/Rajesh_Kannan)\ **Replies:** 7\ **Last updated:** [August 8, 2025, 5:20am UTC](https://discuss.elastic.co/t/indices-with-ilm-policies-are-not-included-in-snapshot-and-restore-operations/380454 "2025-08-08T05:20:40Z")
There are approximately 4,000 indices in Elasticsearch, all of which are in an open state. However, during the scheduled backup, only 1,660 indices were successfully backed up, while the remaining ones were ignored. Upon… --- ## [Filebeat causing high rate of invalid domain queries](https://discuss.elastic.co/t/filebeat-causing-high-rate-of-invalid-domain-queries/380883)
**Author:** [@zefferno](https://discuss.elastic.co/u/zefferno)\ **Replies:** 0\ **Last updated:** [August 7, 2025, 8:40pm UTC](https://discuss.elastic.co/t/filebeat-causing-high-rate-of-invalid-domain-queries/380883 "2025-08-07T20:40:05Z")
Hello all, While investigating a problem with high DNS request rate on Core DNS, I started notice DNS requests from Filebeat to a domain with duplicated .svc in the name, e.g. eck-orchestration-app-elasticsearch-es-http… --- ## [Elastic webhook is showing ssl error](https://discuss.elastic.co/t/elastic-webhook-is-showing-ssl-error/380680)
**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\ **Replies:** 7\ **Last updated:** [August 7, 2025, 8:18pm UTC](https://discuss.elastic.co/t/elastic-webhook-is-showing-ssl-error/380680 "2025-08-07T20:18:41Z")
Hi , I am trying to send health check up through watcher to splunk but getting ssl exception while executing watcher { "trigger": { "schedule": { "cron": "0 0 9 ? \* \*" } }, "input": { "http": { … --- ## [How to use Integrations on onenode ELK Instance](https://discuss.elastic.co/t/how-to-use-integrations-on-onenode-elk-instance/380699)
**Author:** [@Elasticisti](https://discuss.elastic.co/u/Elasticisti)\ **Replies:** 7\ **Last updated:** [August 7, 2025, 4:16pm UTC](https://discuss.elastic.co/t/how-to-use-integrations-on-onenode-elk-instance/380699 "2025-08-07T16:16:48Z")
Hi There, we have set up a small ELK instance with one Stand Alone Agent on a JIRA Testserver. The agent reports the logs of the hosts correctly, we would however need the JIRA Logs as well. We should use a JIRA Connec… --- ## [Title: Implementing S3 Buffer Layer for Elasticsearch - Looking for Community Feedback](https://discuss.elastic.co/t/title-implementing-s3-buffer-layer-for-elasticsearch-looking-for-community-feedback/380778)
**Author:** [@Hadj\_Hassine\_Younes](https://discuss.elastic.co/u/Hadj_Hassine_Younes)\ **Replies:** 11\ **Last updated:** [August 7, 2025, 4:02pm UTC](https://discuss.elastic.co/t/title-implementing-s3-buffer-layer-for-elasticsearch-looking-for-community-feedback/380778 "2025-08-07T16:02:43Z")
Hi everyone, We're evaluating an S3-based buffer architecture to address circuit breaker issues and reduce costs in our ECK deployment. Would really appreciate insights from anyone who's implemented similar patterns. T… --- ## [Errors with filebeat when trying to integrate any windows integration logs with the agent](https://discuss.elastic.co/t/errors-with-filebeat-when-trying-to-integrate-any-windows-integration-logs-with-the-agent/380768)
**Author:** [@v\_i\_x\_x](https://discuss.elastic.co/u/v_i_x_x)\ **Replies:** 26\ **Last updated:** [August 7, 2025, 1:50pm UTC](https://discuss.elastic.co/t/errors-with-filebeat-when-trying-to-integrate-any-windows-integration-logs-with-the-agent/380768 "2025-08-07T13:50:18Z")
Hello everyone, I need some help regarding what's going on I setup my Elasticsearch + fleet server + kibana with a ubuntu machine. I added a windows machine with elastic agent. (Interation ElasticDefend =\> I can see al… --- ## [CorruptIndexException after boot](https://discuss.elastic.co/t/corruptindexexception-after-boot/380805)
**Author:** [@Oozza](https://discuss.elastic.co/u/Oozza)\ **Replies:** 5\ **Last updated:** [August 7, 2025, 1:24pm UTC](https://discuss.elastic.co/t/corruptindexexception-after-boot/380805 "2025-08-07T13:24:23Z")
Hi, I should have done some snapshots, but I have to ask. Is it possible to recover from this error? ES doesn´t start. ES version is 7.17.24. One-node cluster. Thank you \[2025-08-06T10:25:59,213\]\[ERROR\]\[o.e.b.Bootstrap… --- ## [Unable to send logs from Filebeat to Logstash – EOF on TCP connection](https://discuss.elastic.co/t/unable-to-send-logs-from-filebeat-to-logstash-eof-on-tcp-connection/380791)
**Author:** [@anhtaw](https://discuss.elastic.co/u/anhtaw)\ **Replies:** 1\ **Last updated:** [August 7, 2025, 1:09pm UTC](https://discuss.elastic.co/t/unable-to-send-logs-from-filebeat-to-logstash-eof-on-tcp-connection/380791 "2025-08-07T13:09:44Z")
I'm deploying Logstash on EKS and trying to expose it on port 443 using HAProxy Ingress. I'm using Filebeat to send logs to Logstash via the Beats protocol (Lumberjack), but I’m getting the following errors: Failed to c… --- ## [How do I migrate Elasticsearch Data Nodes by Moving Virtual Disks Between VMs](https://discuss.elastic.co/t/how-do-i-migrate-elasticsearch-data-nodes-by-moving-virtual-disks-between-vms/379539)
**Author:** [@KimuDesign](https://discuss.elastic.co/u/KimuDesign)\ **Replies:** 9\ **Last updated:** [August 7, 2025, 1:06pm UTC](https://discuss.elastic.co/t/how-do-i-migrate-elasticsearch-data-nodes-by-moving-virtual-disks-between-vms/379539 "2025-08-07T13:06:24Z")
Hi all, I have a production Elasticsearch cluster v 7.10.2 with 4 data nodes and 3 master nodes. Most of our indices have 4 shards and 1 replica. We perform a rollup of indices nightly at 3 AM. I’m planning to migrate … --- ## [Elastisearch Start : java.nio.file.AccessDeniedException: /etc/elasticsearch/elasticsearch.keystore](https://discuss.elastic.co/t/elastisearch-start-java-nio-file-accessdeniedexception-etc-elasticsearch-elasticsearch-keystore/380864)
**Author:** [@Elasticisti](https://discuss.elastic.co/u/Elasticisti)\ **Replies:** 1\ **Last updated:** [August 7, 2025, 11:56am UTC](https://discuss.elastic.co/t/elastisearch-start-java-nio-file-accessdeniedexception-etc-elasticsearch-elasticsearch-keystore/380864 "2025-08-07T11:56:47Z")
Just now I am resinstalling ELk with this If I would like to start Elasticsearch, I receives the follwing error: Aug 07 12:34:26 ESXELX1300 systemd-entrypoint\[6090\]: java.nio.file.AccessDeniedException: /etc/elastics… --- ## [Get agent event logs via Elastic Agent Integration](https://discuss.elastic.co/t/get-agent-event-logs-via-elastic-agent-integration/372860)
**Author:** [@edemir](https://discuss.elastic.co/u/edemir)\ **Replies:** 8\ **Last updated:** [August 7, 2025, 11:47am UTC](https://discuss.elastic.co/t/get-agent-event-logs-via-elastic-agent-integration/372860 "2025-08-07T11:47:27Z")
After the 8.15.0 update, with the separation of event logs belonging to filebeat and metricbeat, we can no longer monitor the event logs belonging to the agent via Kibana with the Elastic Agent integration. There is only… --- ## [ELK Compatibility with Debian 13](https://discuss.elastic.co/t/elk-compatibility-with-debian-13/380745)
**Author:** [@tammyt](https://discuss.elastic.co/u/tammyt)\ **Replies:** 2\ **Last updated:** [August 7, 2025, 10:39am UTC](https://discuss.elastic.co/t/elk-compatibility-with-debian-13/380745 "2025-08-07T10:39:02Z")
With the release of debian 13 on August 9 (Debian 13 Set to Launch on August 9), is it safe for me to update my servers to this latest version? or will I have compatibility issues between ELK 8.19 (Emphasis on Kibana, as… --- ## [Can I add a custom control in a dashboard?](https://discuss.elastic.co/t/can-i-add-a-custom-control-in-a-dashboard/380808)
**Author:** [@Migoz\_ELH](https://discuss.elastic.co/u/Migoz_ELH)\ **Replies:** 2\ **Last updated:** [August 7, 2025, 7:03am UTC](https://discuss.elastic.co/t/can-i-add-a-custom-control-in-a-dashboard/380808 "2025-08-07T07:03:23Z")
I want to add a control on a dashboard but the field that I am using has IP of some instances but instead of the IP I want to rewrite each IP with a custom name. Can I do that from dashboard? --- ## [Cannot Edit Dashboards in Kibana After Initial Successful Setup (Vega-Lite Dashboards Affected)](https://discuss.elastic.co/t/cannot-edit-dashboards-in-kibana-after-initial-successful-setup-vega-lite-dashboards-affected/380787)
**Author:** [@arunp77](https://discuss.elastic.co/u/arunp77)\ **Replies:** 4\ **Last updated:** [August 7, 2025, 6:51am UTC](https://discuss.elastic.co/t/cannot-edit-dashboards-in-kibana-after-initial-successful-setup-vega-lite-dashboards-affected/380787 "2025-08-07T06:51:31Z")
Hi Kibana team, I'm encountering an issue where I can no longer edit dashboards in Kibana, despite having been able to do so previously. Here’s a detailed description of the situation: Elasticsearch Version: 8.17.3 Ki… --- ## [Fortigate Integration - Separation of logs datastream based on a field value](https://discuss.elastic.co/t/fortigate-integration-separation-of-logs-datastream-based-on-a-field-value/380767)
**Author:** [@Knight7](https://discuss.elastic.co/u/Knight7)\ **Replies:** 10\ **Last updated:** [August 6, 2025, 7:10pm UTC](https://discuss.elastic.co/t/fortigate-integration-separation-of-logs-datastream-based-on-a-field-value/380767 "2025-08-06T19:10:38Z")
Hello, We have integrated Fortinet Fortigate Firewall logs to our SIEM ELK using the Elastic Agent integration. We created also a custom ingest pipeline that separates the logs (for example forward) and send them to a d… --- ## [Issues upgrading Elasticsearch from 8 to 9 due to old 7.x indices and restricted Kibana indices](https://discuss.elastic.co/t/issues-upgrading-elasticsearch-from-8-to-9-due-to-old-7-x-indices-and-restricted-kibana-indices/379133)
**Author:** [@axvfvv79zcx57xv7k](https://discuss.elastic.co/u/axvfvv79zcx57xv7k)\ **Replies:** 17\ **Last updated:** [August 6, 2025, 6:29pm UTC](https://discuss.elastic.co/t/issues-upgrading-elasticsearch-from-8-to-9-due-to-old-7-x-indices-and-restricted-kibana-indices/379133 "2025-08-06T18:29:48Z")
Hello, I’m currently upgrading our Elasticsearch cluster from version 8 to 9. During the process, I still had some old indices created with version 7. Using the Upgrade Assistant, I marked all the old 7.x indices as re… --- ## [Shard Reallocation While Indexing](https://discuss.elastic.co/t/shard-reallocation-while-indexing/380779)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 14\ **Last updated:** [August 6, 2025, 6:29pm UTC](https://discuss.elastic.co/t/shard-reallocation-while-indexing/380779 "2025-08-06T18:29:30Z")
We have 20 indexes with 490 shards. The shards size are vary from 35GB to 180GB and the ES cluster size is 35 data nodes. Each data node has 5 disk each disk has size 500GB. While indexing we noticed that shards are star… --- ## [Needed explanation for keystore's PrivateKey entries](https://discuss.elastic.co/t/needed-explanation-for-keystores-privatekey-entries/380600)
**Author:** [@HarimbolaSantatra](https://discuss.elastic.co/u/HarimbolaSantatra)\ **Replies:** 7\ **Last updated:** [August 6, 2025, 3:45pm UTC](https://discuss.elastic.co/t/needed-explanation-for-keystores-privatekey-entries/380600 "2025-08-06T15:45:09Z")
I encountered the following issue when I try to enroll a token for Kibana: $ ./bin/elasticsearch-create-enrollment-token --scope kibana Unable to create enrollment token for scope \[kibana\] ERROR: Unable to create an en… --- ## [Configuring Permissions and Index in elastic-agent.yml](https://discuss.elastic.co/t/configuring-permissions-and-index-in-elastic-agent-yml/380802)
**Author:** [@Elasticisti](https://discuss.elastic.co/u/Elasticisti)\ **Replies:** 2\ **Last updated:** [August 6, 2025, 1:15pm UTC](https://discuss.elastic.co/t/configuring-permissions-and-index-in-elastic-agent-yml/380802 "2025-08-06T13:15:17Z")
Hello, I have a testagent sending successfully host metrics to ELK. It is however not able to send logs, as well. elastic-agent.yml: id: b77b2ba4-ce32-40ae-8d6c-5595a53134ca revision: 2 outputs: default: type: … --- ## [Need to Ingest Small Log Files in Real-Time ](https://discuss.elastic.co/t/need-to-ingest-small-log-files-in-real-time/380826)
**Author:** [@Nourgr21](https://discuss.elastic.co/u/Nourgr21)\ **Replies:** 1\ **Last updated:** [August 6, 2025, 1:40pm UTC](https://discuss.elastic.co/t/need-to-ingest-small-log-files-in-real-time/380826 "2025-08-06T13:40:57Z")
Hello everyone, I am currently working with Elasticsearch v8.17.3 using the Custom Logs (Filestream) integration via Elastic Agent. I have encountered a problem: Filestream only starts ingesting a file when it is lar… --- ## [How to send logs from Azure service bus to Elasticsearch through Logstash](https://discuss.elastic.co/t/how-to-send-logs-from-azure-service-bus-to-elasticsearch-through-logstash/380801)
**Author:** [@Farheen](https://discuss.elastic.co/u/Farheen)\ **Replies:** 1\ **Last updated:** [August 6, 2025, 10:30am UTC](https://discuss.elastic.co/t/how-to-send-logs-from-azure-service-bus-to-elasticsearch-through-logstash/380801 "2025-08-06T10:30:21Z")
How to send logs from Azure service bus to Elasticsearch through Logstash --- ## [AbuseCH integration failing after updating to version 3.2.0](https://discuss.elastic.co/t/abusech-integration-failing-after-updating-to-version-3-2-0/380792)
**Author:** [@EvanL](https://discuss.elastic.co/u/EvanL)\ **Replies:** 1\ **Last updated:** [August 6, 2025, 9:35am UTC](https://discuss.elastic.co/t/abusech-integration-failing-after-updating-to-version-3-2-0/380792 "2025-08-06T09:35:21Z")
Previously running fine on 3.1.0 but since I installed latest version 3.2.0 of the the AbuseCH integration, the agent is "yellow". with following error status: -- cel-default-cel-ti\_abusech-0a8a7b9d-7de6-414a-8ae9-ac77c… --- ## [How to create ingress TCP for logstash beats](https://discuss.elastic.co/t/how-to-create-ingress-tcp-for-logstash-beats/380790)
**Author:** [@anhtaw](https://discuss.elastic.co/u/anhtaw)\ **Replies:** 0\ **Last updated:** [August 6, 2025, 8:10am UTC](https://discuss.elastic.co/t/how-to-create-ingress-tcp-for-logstash-beats/380790 "2025-08-06T08:10:54Z")
I'm deploying Logstash on EKS and trying to expose it on port 443 using HAProxy Ingress. I'm using Filebeat to send logs to Logstash via the Beats protocol (Lumberjack), but I’m getting the following errors: Failed to c… --- ## [Need an help for two indices configuration in filebeat for both OS and DB](https://discuss.elastic.co/t/need-an-help-for-two-indices-configuration-in-filebeat-for-both-os-and-db/380782)
**Author:** [@Priya\_Das](https://discuss.elastic.co/u/Priya_Das)\ **Replies:** 2\ **Last updated:** [August 6, 2025, 7:21am UTC](https://discuss.elastic.co/t/need-an-help-for-two-indices-configuration-in-filebeat-for-both-os-and-db/380782 "2025-08-06T07:21:25Z")
Hi Everyone, We are trying to configure filebeat to collect logs for both OS and DB on the server, but we found that OS logs are collecting database logs are not recieving. Can someone Please help on it. filebeat.input… --- ## [Failed to create fleet server elastic agent in Ubuntu](https://discuss.elastic.co/t/failed-to-create-fleet-server-elastic-agent-in-ubuntu/380713)
**Author:** [@Adib\_Aulia\_Rahmansya](https://discuss.elastic.co/u/Adib_Aulia_Rahmansya)\ **Replies:** 9\ **Last updated:** [August 6, 2025, 4:01am UTC](https://discuss.elastic.co/t/failed-to-create-fleet-server-elastic-agent-in-ubuntu/380713 "2025-08-06T04:01:12Z")
i have download the .tar.gz elastic agent version 9.1 after extract it, i got error when running the installation sudo ./elastic-agent install \\ --fleet-server-es=https://redacted \\ --fleet-server-service-token=red… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=47) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=49)