# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=50

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 51

---

## [8.18 entitlement-search jar compatible with jre 17?](https://discuss.elastic.co/t/8-18-entitlement-search-jar-compatible-with-jre-17/379373)

<div class="topic-metadata">

**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\
**Replies:** 0\
**Last updated:** [June 20, 2025, 6:06pm UTC](https://discuss.elastic.co/t/8-18-entitlement-search-jar-compatible-with-jre-17/379373 "2025-06-20T18:06:54Z")

</div>

From Support Matrix | Elastic, 8.18.x is compatible with Java 17 and we are running an app in JRE 17 that uses the elasticsearch libraries. Our analysis tools showed that there are classes in here that are for Java 19, …

---

## [Elasticsearch server vs client sdk version and upgrade comparability matrix](https://discuss.elastic.co/t/elasticsearch-server-vs-client-sdk-version-and-upgrade-comparability-matrix/380372)

<div class="topic-metadata">

**Author:** [@kanamani92](https://discuss.elastic.co/u/kanamani92)\
**Replies:** 1\
**Last updated:** [August 1, 2025, 9:13am UTC](https://discuss.elastic.co/t/elasticsearch-server-vs-client-sdk-version-and-upgrade-comparability-matrix/380372 "2025-08-01T09:13:38Z")

</div>

dear all, i'm unable to find the elasticsearch server vs client sdk version comparability matrix and as well as version upgrade comparability path matrix have found only for go lang Installation | Go still it is also …

---

## [When request is forwared to replica in write?](https://discuss.elastic.co/t/when-request-is-forwared-to-replica-in-write/380645)

<div class="topic-metadata">

**Author:** [@maulik\_trapasiya](https://discuss.elastic.co/u/maulik_trapasiya)\
**Replies:** 1\
**Last updated:** [August 1, 2025, 7:44am UTC](https://discuss.elastic.co/t/when-request-is-forwared-to-replica-in-write/380645 "2025-08-01T07:44:11Z")

</div>

I need to know operation sequence in below 2 cases if index.translog.durability=request then what would be sequence of operations? (option1 - data written to RAM for primary -\> request forwarded to replica -\> data pers…

---

## [Logstash v8.14 compatibility with elastic search 8.19 , kibana 8.19 - RHEL 7](https://discuss.elastic.co/t/logstash-v8-14-compatibility-with-elastic-search-8-19-kibana-8-19-rhel-7/380650)

<div class="topic-metadata">

**Author:** [@Lakshmi1708](https://discuss.elastic.co/u/Lakshmi1708)\
**Replies:** 1\
**Last updated:** [August 1, 2025, 6:32am UTC](https://discuss.elastic.co/t/logstash-v8-14-compatibility-with-elastic-search-8-19-kibana-8-19-rhel-7/380650 "2025-08-01T06:32:42Z")

</div>

Does Logstash v8.14 works with Elastic search v8.19 and Kibana v8.19 all 3 hosted in RHEL 7 OS?

---

## [Elastic Certified Analyst Certification](https://discuss.elastic.co/t/elastic-certified-analyst-certification/380647)

<div class="topic-metadata">

**Author:** [@viktor1](https://discuss.elastic.co/u/viktor1)\
**Replies:** 0\
**Last updated:** [August 1, 2025, 3:59am UTC](https://discuss.elastic.co/t/elastic-certified-analyst-certification/380647 "2025-08-01T03:59:55Z")

</div>

Hi Team, Any recent takers of Elastic Certified Analyst Certification exam ? Can you help share your experience for someone planning to book a certification ? Appreciate. Thanks !

---

## [Watcher document](https://discuss.elastic.co/t/watcher-document/380635)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [August 1, 2025, 3:18am UTC](https://discuss.elastic.co/t/watcher-document/380635 "2025-08-01T03:18:08Z")

</div>

Hello Team, I want to show value of a document if there is hits . Below is the watcher script { "trigger": { "schedule": { "interval": "30m" } }, "input": { "search": { "request": { …

---

## [What is elasticsearch9.x default ca password?](https://discuss.elastic.co/t/what-is-elasticsearch9-x-default-ca-password/380616)

<div class="topic-metadata">

**Author:** [@wangchao732](https://discuss.elastic.co/u/wangchao732)\
**Replies:** 1\
**Last updated:** [July 31, 2025, 9:40pm UTC](https://discuss.elastic.co/t/what-is-elasticsearch9-x-default-ca-password/380616 "2025-07-31T21:40:13Z")

</div>

es is running normally, but the default ca password is unknown.

---

## [Metricbeat Upgrade from v7 to v8](https://discuss.elastic.co/t/metricbeat-upgrade-from-v7-to-v8/380556)

<div class="topic-metadata">

**Author:** [@hp12355](https://discuss.elastic.co/u/hp12355)\
**Replies:** 1\
**Last updated:** [July 31, 2025, 6:43pm UTC](https://discuss.elastic.co/t/metricbeat-upgrade-from-v7-to-v8/380556 "2025-07-31T18:43:46Z")

</div>

Hello, we want to upgrade our metricbeat to v8 from v7. We mainly use it to collect system and windows.perfmon data and send it to kafka. From the docs, syntax to config windows perfmon has chaged. I have translated it t…

---

## [29th July INDEX is in UNASSIGNED status and it didn't create for 30th and 31st July](https://discuss.elastic.co/t/29th-july-index-is-in-unassigned-status-and-it-didnt-create-for-30th-and-31st-july/380621)

<div class="topic-metadata">

**Author:** [@Sangram\_Dash](https://discuss.elastic.co/u/Sangram_Dash)\
**Replies:** 6\
**Last updated:** [July 31, 2025, 3:59pm UTC](https://discuss.elastic.co/t/29th-july-index-is-in-unassigned-status-and-it-didnt-create-for-30th-and-31st-july/380621 "2025-07-31T15:59:52Z")

</div>

myapp-2025.07.29 is in UNASSIGNED status This index is not created for last two days is there a way to fix without deleteing this messed up index. \[root@elkhost5 ~\]# grep -i translog /var/log/elk/es.log \[2025-07-31T07:…

---

## [Network Packet Capture integration does not show flow logs](https://discuss.elastic.co/t/network-packet-capture-integration-does-not-show-flow-logs/380631)

<div class="topic-metadata">

**Author:** [@ArgoAdvisory](https://discuss.elastic.co/u/ArgoAdvisory)\
**Replies:** 0\
**Last updated:** [July 31, 2025, 12:56pm UTC](https://discuss.elastic.co/t/network-packet-capture-integration-does-not-show-flow-logs/380631 "2025-07-31T12:56:09Z")

</div>

Good morning everyone, I'm opening this post because I have a problem: the Network Packet Capture integration isn't sending flow logs. I realize there could be many reasons, or maybe I'm forgetting something trivial. …

---

## [Filed names are not renaming in logstash pipeline](https://discuss.elastic.co/t/filed-names-are-not-renaming-in-logstash-pipeline/380583)

<div class="topic-metadata">

**Author:** [@upreddy253](https://discuss.elastic.co/u/upreddy253)\
**Replies:** 6\
**Last updated:** [July 31, 2025, 12:34pm UTC](https://discuss.elastic.co/t/filed-names-are-not-renaming-in-logstash-pipeline/380583 "2025-07-31T12:34:37Z")

</div>

Hi All, I am using mutate filter to rename the fields. But only one field is renamed remaining fields are not renamed. Below the logstash configuration. json { source =\> "jsonmessage" target =\> "\[x\]\[data\]" …

---

## [Embedding Kibana in Company Portal – CORS and Iframe Customization on Elastic Cloud](https://discuss.elastic.co/t/embedding-kibana-in-company-portal-cors-and-iframe-customization-on-elastic-cloud/380549)

<div class="topic-metadata">

**Author:** [@lithindj](https://discuss.elastic.co/u/lithindj)\
**Replies:** 2\
**Last updated:** [July 31, 2025, 11:16am UTC](https://discuss.elastic.co/t/embedding-kibana-in-company-portal-cors-and-iframe-customization-on-elastic-cloud/380549 "2025-07-31T11:16:50Z")

</div>

We’re currently working on embedding Kibana dashboards (hosted on Elastic Cloud) into our internal company portal via an iframe, and we’re running into a couple of key challenges: CORS issues: Kibana and our portal are…

---

## [Infoblox - index username to create Dashboard](https://discuss.elastic.co/t/infoblox-index-username-to-create-dashboard/380525)

<div class="topic-metadata">

**Author:** [@wabd](https://discuss.elastic.co/u/wabd)\
**Replies:** 5\
**Last updated:** [July 31, 2025, 4:19am UTC](https://discuss.elastic.co/t/infoblox-index-username-to-create-dashboard/380525 "2025-07-31T04:19:57Z")

</div>

Hi, i am new user of the plateform, my teammate have implemented ELK and Kibana to get log from our appliances. I am creating dashboards but i have noticed that username is not indexed yet. as a consequence, i can't s…

---

## [Non-zero metrics in the last 30s](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s/380604)

<div class="topic-metadata">

**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\
**Replies:** 1\
**Last updated:** [July 30, 2025, 11:07pm UTC](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s/380604 "2025-07-30T23:07:30Z")

</div>

We are on ELK 8.18.3 We are seeing this log {"log.level":"info","@timestamp":"2025-07-13T19:01:06.799Z","log.logger":"monitoring","log.origin":{"file.name":"log/log.go","file.line":187},"message":"Non-zero metrics in t…

---

## [Filebeat: Collecting a Single-Line File that Gets Overwritten](https://discuss.elastic.co/t/filebeat-collecting-a-single-line-file-that-gets-overwritten/380601)

<div class="topic-metadata">

**Author:** [@clashley](https://discuss.elastic.co/u/clashley)\
**Replies:** 0\
**Last updated:** [July 30, 2025, 5:46pm UTC](https://discuss.elastic.co/t/filebeat-collecting-a-single-line-file-that-gets-overwritten/380601 "2025-07-30T17:46:31Z")

</div>

Our application write a single line to a file that gets updated while it runs. It's purpose is to track file openings and closings - the idea being that at the end of the run, if it's not 0, there's a problem. I am try…

---

## [Infinite extent for field “\<field name\>” : \[Infinity, -Infinity\]](https://discuss.elastic.co/t/infinite-extent-for-field-field-name-infinity-infinity/380597)

<div class="topic-metadata">

**Author:** [@Akshat1001](https://discuss.elastic.co/u/Akshat1001)\
**Replies:** 1\
**Last updated:** [July 30, 2025, 1:36pm UTC](https://discuss.elastic.co/t/infinite-extent-for-field-field-name-infinity-infinity/380597 "2025-07-30T13:36:12Z")

</div>

I am using opensearch Dashboard This is how my data look like when I run my script: Inspect \> View Request \> Vega debug \> Spec:

---

## [Why is beats 8.19.0 latest Version?](https://discuss.elastic.co/t/why-is-beats-8-19-0-latest-version/380592)

<div class="topic-metadata">

**Author:** [@ferdinandweiner](https://discuss.elastic.co/u/ferdinandweiner)\
**Replies:** 2\
**Last updated:** [July 30, 2025, 1:24pm UTC](https://discuss.elastic.co/t/why-is-beats-8-19-0-latest-version/380592 "2025-07-30T13:24:08Z")

</div>

Hello auditbeat team, I noticed that version 8.19.0 has the latest flag on GitHub. However, on the website it is 9.1.0. Is there a specific reason for this, or was the latest flag simply set incorrectly? Thanks, Ferd…

---

## [Maps tooltips when using ES|QL layer](https://discuss.elastic.co/t/maps-tooltips-when-using-es-ql-layer/380584)

<div class="topic-metadata">

**Author:** [@tallakh](https://discuss.elastic.co/u/tallakh)\
**Replies:** 2\
**Last updated:** [July 30, 2025, 1:17pm UTC](https://discuss.elastic.co/t/maps-tooltips-when-using-es-ql-layer/380584 "2025-07-30T13:17:28Z")

</div>

I'm using Kibana 9.0.3 and experimenting with the new ES|QL support in Maps. I'm running an ES|QL query that returns geo\_points (e.g., location) along with aggregated metrics (like total\_sales and pct\_diff), and I'm disp…

---

## [Kibana UI is not accessible, the cluster is broken after several data folders in \`/var/lib/elasticsearch/nodes/0/indices\` were deleted](https://discuss.elastic.co/t/kibana-ui-is-not-accessible-the-cluster-is-broken-after-several-data-folders-in-var-lib-elasticsearch-nodes-0-indices-were-deleted/380564)

<div class="topic-metadata">

**Author:** [@galuh\_tirta](https://discuss.elastic.co/u/galuh_tirta)\
**Replies:** 6\
**Last updated:** [July 30, 2025, 12:08pm UTC](https://discuss.elastic.co/t/kibana-ui-is-not-accessible-the-cluster-is-broken-after-several-data-folders-in-var-lib-elasticsearch-nodes-0-indices-were-deleted/380564 "2025-07-30T12:08:27Z")

</div>

I encountered an issue when the Elasticsearch cluster experienced full disk usage. At that time, the only option was to delete some log folders from the path /var/lib/elasticsearch/nodes/0/indices. Specifically, I delet…

---

## [Data Tiers on 3 nodes](https://discuss.elastic.co/t/data-tiers-on-3-nodes/380554)

<div class="topic-metadata">

**Author:** [@JSElasticDiscuss](https://discuss.elastic.co/u/JSElasticDiscuss)\
**Replies:** 1\
**Last updated:** [July 30, 2025, 9:32am UTC](https://discuss.elastic.co/t/data-tiers-on-3-nodes/380554 "2025-07-30T09:32:52Z")

</div>

Hello, My current setup is 3 nodes that are all master eligible, and have all roles assigned to them. As I am reading up on data tiers, and looking at setting up an ILM policy, I noticed that the settings for warm and c…

---

## [\[v8.17.1\] Bug in Semantic Reranking using Vertex AI?](https://discuss.elastic.co/t/v8-17-1-bug-in-semantic-reranking-using-vertex-ai/380389)

<div class="topic-metadata">

**Author:** [@ik-southpole](https://discuss.elastic.co/u/ik-southpole)\
**Replies:** 2\
**Last updated:** [July 30, 2025, 7:53am UTC](https://discuss.elastic.co/t/v8-17-1-bug-in-semantic-reranking-using-vertex-ai/380389 "2025-07-30T07:53:21Z")

</div>

Good day, I am implementing a semantic ranking in v8.17.1 using Vertex AI (model semantic-ranker-default@latest) and I am facing some potentially strange behaviour. Context I followed Semantic reranking in Elasticsearc…

---

## [.monitoring-es-7\* indexes on newly installed cluster with version 8.17.6](https://discuss.elastic.co/t/monitoring-es-7-indexes-on-newly-installed-cluster-with-version-8-17-6/380529)

<div class="topic-metadata">

**Author:** [@amrit\_singh](https://discuss.elastic.co/u/amrit_singh)\
**Replies:** 2\
**Last updated:** [July 30, 2025, 4:59am UTC](https://discuss.elastic.co/t/monitoring-es-7-indexes-on-newly-installed-cluster-with-version-8-17-6/380529 "2025-07-30T04:59:25Z")

</div>

I have newly installed cluster with elasticsearch and kibana over version 8.17.6. When enabling self-monitoring over it, it creates .monitoring-es-7\* indexes instead of .monitoring-es-8-mb indexes. Tried reinstalling an…

---

## [Issue with Rollover Index Using Same Date After ELK Upgrade (8.14 -\> 8.16)](https://discuss.elastic.co/t/issue-with-rollover-index-using-same-date-after-elk-upgrade-8-14-8-16/375688)

<div class="topic-metadata">

**Author:** [@Monika1](https://discuss.elastic.co/u/Monika1)\
**Replies:** 1\
**Last updated:** [July 30, 2025, 3:41am UTC](https://discuss.elastic.co/t/issue-with-rollover-index-using-same-date-after-elk-upgrade-8-14-8-16/375688 "2025-07-30T03:41:33Z")

</div>

After upgrading ELK from 8.14 to 8.16, I noticed an issue with the rollover index. Even after performing a rollover, the new index retains the same date as the previous one—only the number is incrementing.

---

## [Elasticsearch deleting 10 days old index every day automatically](https://discuss.elastic.co/t/elasticsearch-deleting-10-days-old-index-every-day-automatically/380365)

<div class="topic-metadata">

**Author:** [@leo-lee](https://discuss.elastic.co/u/leo-lee)\
**Replies:** 21\
**Last updated:** [July 30, 2025, 2:36am UTC](https://discuss.elastic.co/t/elasticsearch-deleting-10-days-old-index-every-day-automatically/380365 "2025-07-30T02:36:13Z")

</div>

elasticsearch installed on aks, deleting 10 days old index automatically everyday at the same time. version: elasticsearch: 8.17.1 kibana: 8.17.1 current ilm policy is set to 30days warm, 180day delete. xpack.securi…

---

## [Runtime field script error: Cannot cast from \[java.lang.String\] to \[void\] in Kibana 8.17](https://discuss.elastic.co/t/runtime-field-script-error-cannot-cast-from-java-lang-string-to-void-in-kibana-8-17/380517)

<div class="topic-metadata">

**Author:** [@Hendrawns](https://discuss.elastic.co/u/Hendrawns)\
**Replies:** 2\
**Last updated:** [July 30, 2025, 2:10am UTC](https://discuss.elastic.co/t/runtime-field-script-error-cannot-cast-from-java-lang-string-to-void-in-kibana-8-17/380517 "2025-07-30T02:10:15Z")

</div>

Hi everyone, I'm working with Kibana 8.17 and trying to create a runtime field using a Painless script to tag http.request.referrer into sectors based on domains. I followed the docs here: Goal: Create a runtime field…

---

## [Certificate not accepted by logstash](https://discuss.elastic.co/t/certificate-not-accepted-by-logstash/380509)

<div class="topic-metadata">

**Author:** [@Tesla\_User](https://discuss.elastic.co/u/Tesla_User)\
**Replies:** 3\
**Last updated:** [July 29, 2025, 7:46pm UTC](https://discuss.elastic.co/t/certificate-not-accepted-by-logstash/380509 "2025-07-29T19:46:24Z")

</div>

Hi I am getting the below error while configuring a new certificate with Logstash. My old cert is working fine but the new one is not. Error: failed to perform request {:message=\>"certificate for \<10.10.x.x\> doesn't m…

---

## [Problem inserting Logstash process chain after setting up Filebeat-\>Elasticsearch-\>Kibana](https://discuss.elastic.co/t/problem-inserting-logstash-process-chain-after-setting-up-filebeat-elasticsearch-kibana/380542)

<div class="topic-metadata">

**Author:** [@dapig](https://discuss.elastic.co/u/dapig)\
**Replies:** 4\
**Last updated:** [July 29, 2025, 4:51pm UTC](https://discuss.elastic.co/t/problem-inserting-logstash-process-chain-after-setting-up-filebeat-elasticsearch-kibana/380542 "2025-07-29T16:51:48Z")

</div>

Hi all, This is my first time using Elasticsearch stack, I initially set up Filebeat, Elasticsearch, and Kibana to ingest the original free OSSEC alert.json file. However, the information was showing up in the message f…

---

## [Using Custom Filestream Integration Elastic Agent](https://discuss.elastic.co/t/using-custom-filestream-integration-elastic-agent/380550)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 0\
**Last updated:** [July 29, 2025, 4:27pm UTC](https://discuss.elastic.co/t/using-custom-filestream-integration-elastic-agent/380550 "2025-07-29T16:27:26Z")

</div>

Hello, I have a 1 file, sample.txt file. This file gets overwritten every 15 minutes by a script. I been struggling a bit, how can I ingest this file continously every 15 minutes? I tried "resend on touch" due to the fi…

---

## [Problems sending .json w filebeat](https://discuss.elastic.co/t/problems-sending-json-w-filebeat/380547)

<div class="topic-metadata">

**Author:** [@Flozkel](https://discuss.elastic.co/u/Flozkel)\
**Replies:** 0\
**Last updated:** [July 29, 2025, 2:49pm UTC](https://discuss.elastic.co/t/problems-sending-json-w-filebeat/380547 "2025-07-29T14:49:32Z")

</div>

Hi guys, For a while I have been trying to setup IDS on my RPI5. I'm rather new on this and experimenting for a homelab. The RPI does run a bit slow when everything is on, but again, its only for training. I have been …

---

## [Unable to configure Elastic APM on .NET 4.8](https://discuss.elastic.co/t/unable-to-configure-elastic-apm-on-net-4-8/377418)

<div class="topic-metadata">

**Author:** [@rahulsamsung](https://discuss.elastic.co/u/rahulsamsung)\
**Replies:** 9\
**Last updated:** [July 29, 2025, 2:09pm UTC](https://discuss.elastic.co/t/unable-to-configure-elastic-apm-on-net-4-8/377418 "2025-07-29T14:09:11Z")

</div>

Dear All, We are trying to setup Elastic APM on one of our application running on the .NET 4.8. And completed the below configuration on the application side. But the service is still not showing on the ELK APM dashboa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=49)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=51)
