# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=55 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 56 --- ## [Sorting with case insensitive](https://discuss.elastic.co/t/sorting-with-case-insensitive/379905)
**Author:** [@nataly](https://discuss.elastic.co/u/nataly)\ **Replies:** 6\ **Last updated:** [July 13, 2025, 12:37pm UTC](https://discuss.elastic.co/t/sorting-with-case-insensitive/379905 "2025-07-13T12:37:23Z")
hello, currently i have an index - lets call it index1, that im doing a sorting on a specific property there, lets call it prop1, that is a keyword. for example if the values are ABCabc, it will sort it with ABCabc, but… --- ## [购买elasticsearch企业版](https://discuss.elastic.co/t/elasticsearch/380035)
**Author:** [@Lila\_Lila](https://discuss.elastic.co/u/Lila_Lila)\ **Replies:** 3\ **Last updated:** [July 12, 2025, 3:53pm UTC](https://discuss.elastic.co/t/elasticsearch/380035 "2025-07-12T15:53:24Z")
I need to find a sales representative for the Enterprise Edition, thanks --- ## [Need help with elastic/kibana ESET connect integration](https://discuss.elastic.co/t/need-help-with-elastic-kibana-eset-connect-integration/379896)
**Author:** [@Sainar](https://discuss.elastic.co/u/Sainar)\ **Replies:** 15\ **Last updated:** [July 12, 2025, 3:01pm UTC](https://discuss.elastic.co/t/need-help-with-elastic-kibana-eset-connect-integration/379896 "2025-07-12T15:01:41Z")
Hey people i am new to this forum, please help, I have a problem with ESET integration, i connect it via TCP to collect JSON logs from it, my elastic/kibana is on-premis and ESET connect is a cloud one, so all is workin… --- ## [Table visualization with array data](https://discuss.elastic.co/t/table-visualization-with-array-data/379945)
**Author:** [@richard2025](https://discuss.elastic.co/u/richard2025)\ **Replies:** 4\ **Last updated:** [July 12, 2025, 12:19pm UTC](https://discuss.elastic.co/t/table-visualization-with-array-data/379945 "2025-07-12T12:19:50Z")
Hi, I'm using table visualization in ELK 8.17. The doc format are as following: "\_source": { "service": "service1", "detail": \[ { "name": "microservice1", "duration\_time": 0.180120 }, … --- ## [Search in Kibana Watcher and Agent Fleet policies not working as it should](https://discuss.elastic.co/t/search-in-kibana-watcher-and-agent-fleet-policies-not-working-as-it-should/379989)
**Author:** [@PeterDK](https://discuss.elastic.co/u/PeterDK)\ **Replies:** 1\ **Last updated:** [July 12, 2025, 9:57am UTC](https://discuss.elastic.co/t/search-in-kibana-watcher-and-agent-fleet-policies-not-working-as-it-should/379989 "2025-07-12T09:57:30Z")
We are currently running Elasticsearch and Kibana at version 8.18.1 There are for the moment two annoying issue we discovered when searching in watcher or Agent Fleet Policies Watcher The search box states "Search b… --- ## [Adding an Expensive Field across Legacy data](https://discuss.elastic.co/t/adding-an-expensive-field-across-legacy-data/380044)
**Author:** [@Randall\_Hand](https://discuss.elastic.co/u/Randall_Hand)\ **Replies:** 5\ **Last updated:** [July 11, 2025, 9:52pm UTC](https://discuss.elastic.co/t/adding-an-expensive-field-across-legacy-data/380044 "2025-07-11T21:52:03Z")
I have about 2 years of data imported into my ELK stack, working great. It's logs from our native desktop application, regularly imported via LogStash twice a day. I would like to historically reprocess this data to ad… --- ## [Elasticsearch shut down (with Jupyter notebooks)](https://discuss.elastic.co/t/elasticsearch-shut-down-with-jupyter-notebooks/380037)
**Author:** [@ynaghibi](https://discuss.elastic.co/u/ynaghibi)\ **Replies:** 6\ **Last updated:** [July 11, 2025, 6:43pm UTC](https://discuss.elastic.co/t/elasticsearch-shut-down-with-jupyter-notebooks/380037 "2025-07-11T18:43:37Z")
I am trying to use Elasticsearch directly from Jupyter notebooks. The code that is launching it is import os from subprocess import Popen, PIPE, STDOUT # Run Elasticsearch as a background process !chown -R daemon:daemo… --- ## [How to use elasticsearch java api to apply aggregations on a query result](https://discuss.elastic.co/t/how-to-use-elasticsearch-java-api-to-apply-aggregations-on-a-query-result/378968)
**Author:** [@nobodyg](https://discuss.elastic.co/u/nobodyg)\ **Replies:** 4\ **Last updated:** [July 11, 2025, 1:21pm UTC](https://discuss.elastic.co/t/how-to-use-elasticsearch-java-api-to-apply-aggregations-on-a-query-result/378968 "2025-07-11T13:21:26Z")
I am using co.elastic.clients:elasticsearch-java:9.0.1 I am trying to apply a query and then apply aggregations the query is about to get the user name and visiting dates within a date range the result could be: user… --- ## [Translate filter is not working](https://discuss.elastic.co/t/translate-filter-is-not-working/379980)
**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\ **Replies:** 3\ **Last updated:** [July 11, 2025, 11:47am UTC](https://discuss.elastic.co/t/translate-filter-is-not-working/379980 "2025-07-11T11:47:56Z")
input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/logstash-core/lib/jars/postgresql-42.7.3.jar" jdbc\_driver\_class =\> "org.postgresql.Driver" jdbc\_connection\_string =\> "jdbc:postgresql://db\_ip:5432/… --- ## [About old version and security features](https://discuss.elastic.co/t/about-old-version-and-security-features/379977)
**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\ **Replies:** 1\ **Last updated:** [July 11, 2025, 11:34am UTC](https://discuss.elastic.co/t/about-old-version-and-security-features/379977 "2025-07-11T11:34:06Z")
Hi, I have an old cluster running in an old 6.7 version and I tried to setup SSL/TLS following the documentation I found here: With one node there's no problem I'm able to activate SSL/TLS at least my node boot and I… --- ## [Java REST Client - Refresh API and Default Refresh Index](https://discuss.elastic.co/t/java-rest-client-refresh-api-and-default-refresh-index/378829)
**Author:** [@enerijunior](https://discuss.elastic.co/u/enerijunior)\ **Replies:** 1\ **Last updated:** [July 11, 2025, 11:08am UTC](https://discuss.elastic.co/t/java-rest-client-refresh-api-and-default-refresh-index/378829 "2025-07-11T11:08:21Z")
Hello, everyone! I have a question about using the Java REST Client - Refresh API or the default refresh behavior in an Elasticsearch index. In a certain part of an application I'm maintaining, I have an implementation… --- ## [Converting JsonData to Map in new ES Java Client](https://discuss.elastic.co/t/converting-jsondata-to-map-in-new-es-java-client/379724)
**Author:** [@Sai\_Satwik\_Kuppili](https://discuss.elastic.co/u/Sai_Satwik_Kuppili)\ **Replies:** 1\ **Last updated:** [July 11, 2025, 10:15am UTC](https://discuss.elastic.co/t/converting-jsondata-to-map-in-new-es-java-client/379724 "2025-07-11T10:15:58Z")
Hello everyone, I'm working with the new Elasticsearch Java Client and need to convert a Hit 's \_source (provided as JsonData ) into a Map\ . The previous Rest High-Level Client offered SearchHit.getSourc… --- ## [Elastic search picking version of opensource](https://discuss.elastic.co/t/elastic-search-picking-version-of-opensource/380023)
**Author:** [@venkat\_Ratnam](https://discuss.elastic.co/u/venkat_Ratnam)\ **Replies:** 2\ **Last updated:** [July 11, 2025, 9:06am UTC](https://discuss.elastic.co/t/elastic-search-picking-version-of-opensource/380023 "2025-07-11T09:06:04Z")
Hi team , need opensearch Elasticsearch with out vulnerabilities pls suggest us --- ## [Elasticsearch will not start in Kubernetes if I mount a persistent volume to /usr/share/elasticsearch/data](https://discuss.elastic.co/t/elasticsearch-will-not-start-in-kubernetes-if-i-mount-a-persistent-volume-to-usr-share-elasticsearch-data/380015)
**Author:** [@chad.carson](https://discuss.elastic.co/u/chad.carson)\ **Replies:** 2\ **Last updated:** [July 10, 2025, 10:32pm UTC](https://discuss.elastic.co/t/elasticsearch-will-not-start-in-kubernetes-if-i-mount-a-persistent-volume-to-usr-share-elasticsearch-data/380015 "2025-07-10T22:32:12Z")
Hello, all, I have a very strange problem that I've been testing and working on for a couple of days. I am running elasticsearch in Kubernetes, trying to get the first pod up and running. I have it running fine, it st… --- ## [Finding Search bottlenecks outside Lucene](https://discuss.elastic.co/t/finding-search-bottlenecks-outside-lucene/379968)
**Author:** [@michlee1337](https://discuss.elastic.co/u/michlee1337)\ **Replies:** 0\ **Last updated:** [July 9, 2025, 9:30pm UTC](https://discuss.elastic.co/t/finding-search-bottlenecks-outside-lucene/379968 "2025-07-09T21:30:33Z")
Any idea how to find bottlenecks on Elasticsearch side outside Lucene? The actual profile breakdown is fast (\<1ms) but the total "took" time is slow (209ms). Example profile (redacted) below. { "took": 209, "t… --- ## [TCP input is not starting for logstash](https://discuss.elastic.co/t/tcp-input-is-not-starting-for-logstash/380002)
**Author:** [@Eshwar\_K](https://discuss.elastic.co/u/Eshwar_K)\ **Replies:** 7\ **Last updated:** [July 10, 2025, 5:16pm UTC](https://discuss.elastic.co/t/tcp-input-is-not-starting-for-logstash/380002 "2025-07-10T17:16:13Z")
Hi Elastic experts, I am configuring logstash configuration file with tcp input as per below. Since, I haven't configure ssl certificate. So, I have disabled secure ssl mode. tcp { port =\> 5244 tags =\> \["proxy… --- ## [Query and Index use question](https://discuss.elastic.co/t/query-and-index-use-question/379963)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [July 10, 2025, 2:08pm UTC](https://discuss.elastic.co/t/query-and-index-use-question/379963 "2025-07-10T14:08:15Z")
If I have a index like below index-2022 index-2023 index-2024 index-2025 dataview is "index-\*" ( @timestamp is date field) if I run a query with index-\* and @timestamp \> now() - interval 30 day will it hit all the… --- ## [Does CVE-2024-43706 affect to 7.x versions?](https://discuss.elastic.co/t/does-cve-2024-43706-affect-to-7-x-versions/379994)
**Author:** [@cruizba](https://discuss.elastic.co/u/cruizba)\ **Replies:** 0\ **Last updated:** [July 10, 2025, 10:36am UTC](https://discuss.elastic.co/t/does-cve-2024-43706-affect-to-7-x-versions/379994 "2025-07-10T10:36:18Z")
Regarding CVE-2024-43706, are 7.x versions affected by this? The announcement is not clear on that. If it is not, it would be good to add it in the announcement! Regards. --- ## [Incorrect relative end date filter interpretation](https://discuss.elastic.co/t/incorrect-relative-end-date-filter-interpretation/379991)
**Author:** [@allatrue](https://discuss.elastic.co/u/allatrue)\ **Replies:** 0\ **Last updated:** [July 10, 2025, 8:47am UTC](https://discuss.elastic.co/t/incorrect-relative-end-date-filter-interpretation/379991 "2025-07-10T08:47:17Z")
Hi everyone, I use Kibana 9.0.1 and having trouble when storing rounded end time with dashboard. For example I want my dashboard to filter the last X full weeks, when I open the dashboard. If I select 2 "Weeks ago" an… --- ## [TLS certificate expiring](https://discuss.elastic.co/t/tls-certificate-expiring/379189)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 8\ **Last updated:** [July 10, 2025, 8:40am UTC](https://discuss.elastic.co/t/tls-certificate-expiring/379189 "2025-07-10T08:40:41Z")
Hi Team, We are running elastic cluster from past 8 years and tls certificate is expiring. The current certificate i don't know the password and i don't know the CA certificate it is using. Can i create new TLS certifi… --- ## [Elastic version upgrade to 9.0.3](https://discuss.elastic.co/t/elastic-version-upgrade-to-9-0-3/379987)
**Author:** [@Bhavyagc](https://discuss.elastic.co/u/Bhavyagc)\ **Replies:** 0\ **Last updated:** [July 10, 2025, 7:17am UTC](https://discuss.elastic.co/t/elastic-version-upgrade-to-9-0-3/379987 "2025-07-10T07:17:35Z")
Hi All, We have recently upgraded the elastic version from 8.15 to 9.0.3. However, we are seeing very high JVM memory consumption mainly for free text searches, earlier with 8.15/8.18 was fine, searches were fine and fa… --- ## [Not able to update security index settings](https://discuss.elastic.co/t/not-able-to-update-security-index-settings/379886)
**Author:** [@kuldeep\_gupta](https://discuss.elastic.co/u/kuldeep_gupta)\ **Replies:** 8\ **Last updated:** [July 10, 2025, 3:23am UTC](https://discuss.elastic.co/t/not-able-to-update-security-index-settings/379886 "2025-07-10T03:23:08Z")
Hello all, I am using elasticsearch version 8.9.0. i want to configure security index to have replica on every node. I am using kibana console for running below command PUT /\_security/settings { "security": { … --- ## [Logstash “bad\_certificate” Handshake Failure on port 5055](https://discuss.elastic.co/t/logstash-bad-certificate-handshake-failure-on-port-5055/379950)
**Author:** [@RyanW](https://discuss.elastic.co/u/RyanW)\ **Replies:** 13\ **Last updated:** [July 9, 2025, 7:00pm UTC](https://discuss.elastic.co/t/logstash-bad-certificate-handshake-failure-on-port-5055/379950 "2025-07-09T19:00:39Z")
Environment Item Version / Detail Security Onion 2.4.160 Host role so-manager (10.10.0.13) Standalone Network install on Rocky Linux 9 Elastic Agent endpoint Windows host winwork01 (10.10.0.4) Beats/Elastic… --- ## [Drilldown to a Discover Session/Saved Search?](https://discuss.elastic.co/t/drilldown-to-a-discover-session-saved-search/379923)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 4\ **Last updated:** [July 9, 2025, 2:25pm UTC](https://discuss.elastic.co/t/drilldown-to-a-discover-session-saved-search/379923 "2025-07-09T14:25:05Z")
Hello, I added a drilldown to open in Discover: But in discover it just adds the filter, no preset of columns added. Is there a way to point the drilldown to a Discover Session/Saved Search so that the user can hav… --- ## [Search with Synonyms do not to work](https://discuss.elastic.co/t/search-with-synonyms-do-not-to-work/379912)
**Author:** [@AndreAT](https://discuss.elastic.co/u/AndreAT)\ **Replies:** 7\ **Last updated:** [July 9, 2025, 2:17pm UTC](https://discuss.elastic.co/t/search-with-synonyms-do-not-to-work/379912 "2025-07-09T14:17:30Z")
Hi, with great assistence I was able to add own synonym file to my search. After updating the template I delete the index and use -restart to initial (as David mentioned). The settings now looking like this: { "com… --- ## [Is there a way to interleave (round-robin) search results in Elasticsearch?](https://discuss.elastic.co/t/is-there-a-way-to-interleave-round-robin-search-results-in-elasticsearch/379943)
**Author:** [@Rafaela\_Machado](https://discuss.elastic.co/u/Rafaela_Machado)\ **Replies:** 1\ **Last updated:** [July 9, 2025, 2:15pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-interleave-round-robin-search-results-in-elasticsearch/379943 "2025-07-09T14:15:30Z")
Hi Elasticsearch team and community, I’m working on a app where I need to: Sort products primarily by a priority field (priority), descending. But also interleave (round-robin) results from different groups, so that n… --- ## [Error message in elasticsearch](https://discuss.elastic.co/t/error-message-in-elasticsearch/379946)
**Author:** [@DOkuwa](https://discuss.elastic.co/u/DOkuwa)\ **Replies:** 1\ **Last updated:** [July 9, 2025, 1:00pm UTC](https://discuss.elastic.co/t/error-message-in-elasticsearch/379946 "2025-07-09T13:00:39Z")
When i go to kibana from the webaddress http://xxxx:5601 i get this error message {"statusCode":503,"error":"Service Unavailable","message":"License information could not be obtained from Elasticsearch. Please check the… --- ## [Manual certificate configuratio for fleet-server and elastic-agent](https://discuss.elastic.co/t/manual-certificate-configuratio-for-fleet-server-and-elastic-agent/378071)
**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\ **Replies:** 2\ **Last updated:** [July 9, 2025, 10:41am UTC](https://discuss.elastic.co/t/manual-certificate-configuratio-for-fleet-server-and-elastic-agent/378071 "2025-07-09T10:41:51Z")
I have a cluster and i was trying to add a fleet-server and then enroll one elastic-agent but i kinda stuck and could not make it work. I read the documentation and i have some questions which is not clear so i though i… --- ## [Cluster currently at 1000/1000 shards open, but \_nodes/stats shows only 526 used?](https://discuss.elastic.co/t/cluster-currently-at-1000-1000-shards-open-but-nodes-stats-shows-only-526-used/379893)
**Author:** [@PMF](https://discuss.elastic.co/u/PMF)\ **Replies:** 17\ **Last updated:** [July 9, 2025, 10:13am UTC](https://discuss.elastic.co/t/cluster-currently-at-1000-1000-shards-open-but-nodes-stats-shows-only-526-used/379893 "2025-07-09T10:13:44Z")
We recently started to get messages from logstash stating that "Could not index event to Elasticsearch... Validation failed: 1: this action would add \[2\] shards, but this cluster currently has \[1000\]/\[1000\] maximum norma… --- ## [Reg issue while connecting to kafka using kafka input plugin](https://discuss.elastic.co/t/reg-issue-while-connecting-to-kafka-using-kafka-input-plugin/379937)
**Author:** [@pradeep-logstashuser](https://discuss.elastic.co/u/pradeep-logstashuser)\ **Replies:** 0\ **Last updated:** [July 9, 2025, 9:22am UTC](https://discuss.elastic.co/t/reg-issue-while-connecting-to-kafka-using-kafka-input-plugin/379937 "2025-07-09T09:22:29Z")
I am using logstash-9.0 version and I try to consume records from kafka using kafka input plugin using sasl\_jaas OAUTHBAREEER method I got an issue in below and I have given logstash kafka-input plugin config also Log … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=54) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=56)