# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=56

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 57

---

## [Looking for a Reporting Solution for Elasticsearch + PostgreSQL Integration](https://discuss.elastic.co/t/looking-for-a-reporting-solution-for-elasticsearch-postgresql-integration/379900)

<div class="topic-metadata">

**Author:** [@farazjahanmanesh](https://discuss.elastic.co/u/farazjahanmanesh)\
**Replies:** 2\
**Last updated:** [July 9, 2025, 6:44am UTC](https://discuss.elastic.co/t/looking-for-a-reporting-solution-for-elasticsearch-postgresql-integration/379900 "2025-07-09T06:44:33Z")

</div>

I need a reporting solution that works with both Elasticsearch and PostgreSQL. My keys are stored in Elasticsearch, while the main data resides in PostgreSQL. I do not want to handle the integration or data conversion w…

---

## [Could I implement a new script engine in my plugin but limit the access only in the plugin](https://discuss.elastic.co/t/could-i-implement-a-new-script-engine-in-my-plugin-but-limit-the-access-only-in-the-plugin/379930)

<div class="topic-metadata">

**Author:** [@gaobinlong](https://discuss.elastic.co/u/gaobinlong)\
**Replies:** 0\
**Last updated:** [July 9, 2025, 3:33am UTC](https://discuss.elastic.co/t/could-i-implement-a-new-script-engine-in-my-plugin-but-limit-the-access-only-in-the-plugin/379930 "2025-07-09T03:33:02Z")

</div>

I have a custom plugin with a custom script engine, how could I limit the access scope of the script engine only in my plugin? How to make other plugins in Elasticsearch not able to submit the new type of script?

---

## [How to use ES|QL control value as a filter](https://discuss.elastic.co/t/how-to-use-es-ql-control-value-as-a-filter/379716)

<div class="topic-metadata">

**Author:** [@tallakh](https://discuss.elastic.co/u/tallakh)\
**Replies:** 4\
**Last updated:** [July 9, 2025, 4:20am UTC](https://discuss.elastic.co/t/how-to-use-es-ql-control-value-as-a-filter/379716 "2025-07-09T04:20:27Z")

</div>

Hi! I'm testing out ES|QL controls in a dashboard, but I'm not able to use it as I expected. I've created a control with static values, but using the variable name in the query fails. According to this documentati…

---

## [Support for Text Templates in Inference Rerank Endpoint](https://discuss.elastic.co/t/support-for-text-templates-in-inference-rerank-endpoint/379928)

<div class="topic-metadata">

**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\
**Replies:** 0\
**Last updated:** [July 9, 2025, 2:52am UTC](https://discuss.elastic.co/t/support-for-text-templates-in-inference-rerank-endpoint/379928 "2025-07-09T02:52:54Z")

</div>

Hi Elasticsearch team, I am currently working with reranker models such as Qwen3-Reranker, and I noticed that in the vLLM community, the rerank API supports custom text templates for queries and documents. This is cruci…

---

## [About the support plan for multi-sink and multi-pipeline mode in Filebeat](https://discuss.elastic.co/t/about-the-support-plan-for-multi-sink-and-multi-pipeline-mode-in-filebeat/379801)

<div class="topic-metadata">

**Author:** [@skipper](https://discuss.elastic.co/u/skipper)\
**Replies:** 3\
**Last updated:** [July 9, 2025, 2:52am UTC](https://discuss.elastic.co/t/about-the-support-plan-for-multi-sink-and-multi-pipeline-mode-in-filebeat/379801 "2025-07-09T02:52:07Z")

</div>

Hello, I have recently been evaluating Filebeat and Vector as log collectors for gateway logs. Filebeat has strong performance, but the only issue is that it does not support multi-pipeline or multi-sink modes. If I want…

---

## [.Net Elasticsearch LowLevel Client migration path to ES 9.x](https://discuss.elastic.co/t/net-elasticsearch-lowlevel-client-migration-path-to-es-9-x/379840)

<div class="topic-metadata">

**Author:** [@askids](https://discuss.elastic.co/u/askids)\
**Replies:** 1\
**Last updated:** [July 8, 2025, 8:14pm UTC](https://discuss.elastic.co/t/net-elasticsearch-lowlevel-client-migration-path-to-es-9-x/379840 "2025-07-08T20:14:23Z")

</div>

hi, Currently we are using low level client in .Net on 7.17.x to perform bulk operation, where we are preparing NDJSON format and call the Bulk method. What will be equivalent of this when we migrate to new .Net client …

---

## [Find out who is running task](https://discuss.elastic.co/t/find-out-who-is-running-task/379786)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [July 8, 2025, 8:07pm UTC](https://discuss.elastic.co/t/find-out-who-is-running-task/379786 "2025-07-08T20:07:18Z")

</div>

I am trying to find out who is running a task in elasticsearch I did use \_task api with different options like GET /\_tasks/oYXgEVBgQoGToxFxhVoA3g:198142212 GET /\_tasks/oYXgEVBgQoGToxFxhVoA3g:198143553 GET \_cat/tasks?d…

---

## [Snowflake RSA Key for jdbc auth in Logstash](https://discuss.elastic.co/t/snowflake-rsa-key-for-jdbc-auth-in-logstash/379920)

<div class="topic-metadata">

**Author:** [@random\_cauliflower](https://discuss.elastic.co/u/random_cauliflower)\
**Replies:** 1\
**Last updated:** [July 8, 2025, 2:46pm UTC](https://discuss.elastic.co/t/snowflake-rsa-key-for-jdbc-auth-in-logstash/379920 "2025-07-08T14:46:55Z")

</div>

Hello! I'm trying to use jdbc input plugin to connect to snowflake. The snowflake jdbc driver has a private\_key\_file parameter to specify an RSA key. This seems to be missing from the jdbc input configuration options at …

---

## [Winlogbeat Agent shut down unexpectedly and is not starting](https://discuss.elastic.co/t/winlogbeat-agent-shut-down-unexpectedly-and-is-not-starting/379903)

<div class="topic-metadata">

**Author:** [@DBuchukuri](https://discuss.elastic.co/u/DBuchukuri)\
**Replies:** 3\
**Last updated:** [July 8, 2025, 1:52pm UTC](https://discuss.elastic.co/t/winlogbeat-agent-shut-down-unexpectedly-and-is-not-starting/379903 "2025-07-08T13:52:27Z")

</div>

Hello, Winlogbeat Agent unexpectedly got shut down on one of the servers and now i cannot start it. when i start it in foreground it works normally but once i try to start it normally it does not show any output. If i st…

---

## [Button in kibana with dynamic payload](https://discuss.elastic.co/t/button-in-kibana-with-dynamic-payload/379918)

<div class="topic-metadata">

**Author:** [@tommycahir](https://discuss.elastic.co/u/tommycahir)\
**Replies:** 0\
**Last updated:** [July 8, 2025, 1:43pm UTC](https://discuss.elastic.co/t/button-in-kibana-with-dynamic-payload/379918 "2025-07-08T13:43:15Z")

</div>

Hi All I have the below use case and I am at a loss as to whether it can be acheived in Kibana and I want to know if anyone here has any experience or thoughts on how to achieve it. Use Case: Triggering ITSM Change Requ…

---

## [What is the best practices for index mapping nested under nested](https://discuss.elastic.co/t/what-is-the-best-practices-for-index-mapping-nested-under-nested/379917)

<div class="topic-metadata">

**Author:** [@ikarahan47](https://discuss.elastic.co/u/ikarahan47)\
**Replies:** 0\
**Last updated:** [July 8, 2025, 1:38pm UTC](https://discuss.elastic.co/t/what-is-the-best-practices-for-index-mapping-nested-under-nested/379917 "2025-07-08T13:38:36Z")

</div>

Hi everyone, We want to index delivery area-specific data in Elasticsearch. Each deliveryArea is a unique object, and inside it we need to store segment-specific data like minimumBasketPrice per segment (e.g., "a", "b",…

---

## [RAG Playground not available in on-premise Elasticsearch 9.0.1](https://discuss.elastic.co/t/rag-playground-not-available-in-on-premise-elasticsearch-9-0-1/379910)

<div class="topic-metadata">

**Author:** [@username456](https://discuss.elastic.co/u/username456)\
**Replies:** 1\
**Last updated:** [July 8, 2025, 12:12pm UTC](https://discuss.elastic.co/t/rag-playground-not-available-in-on-premise-elasticsearch-9-0-1/379910 "2025-07-08T12:12:47Z")

</div>

Hi I’m using an on-premise instance of Elasticsearch version 9.0.1, and I wanted to test out the RAG Playground feature. However, it seems not visible or accessible in the UI. Does anyone else have this problem or knows…

---

## [Trying to create a filter in Kibana, there is no proposal](https://discuss.elastic.co/t/trying-to-create-a-filter-in-kibana-there-is-no-proposal/379850)

<div class="topic-metadata">

**Author:** [@pchanas](https://discuss.elastic.co/u/pchanas)\
**Replies:** 14\
**Last updated:** [July 8, 2025, 11:33am UTC](https://discuss.elastic.co/t/trying-to-create-a-filter-in-kibana-there-is-no-proposal/379850 "2025-07-08T11:33:29Z")

</div>

Hi We have a 8.6.2 stack release. When creating a filter, either with the UI or with the text field, we don't have any proposal. This is occuring since we reinstall the stack on a other platform. Maybe we forgot t…

---

## [Field data type is 'ip' but still fielddata is load during query](https://discuss.elastic.co/t/field-data-type-is-ip-but-still-fielddata-is-load-during-query/379833)

<div class="topic-metadata">

**Author:** [@kuldeep\_gupta](https://discuss.elastic.co/u/kuldeep_gupta)\
**Replies:** 2\
**Last updated:** [July 8, 2025, 5:56am UTC](https://discuss.elastic.co/t/field-data-type-is-ip-but-still-fielddata-is-load-during-query/379833 "2025-07-08T05:56:30Z")

</div>

Hello everyone, I have data stored in elasticsearch. In documents i have multiple fields in which i have source and destination field with datatype ip.Please find below output of GET index-name/\_mapping/ Sorry can…

---

## [Anonymous login not working in Kibana 9.0.2](https://discuss.elastic.co/t/anonymous-login-not-working-in-kibana-9-0-2/379885)

<div class="topic-metadata">

**Author:** [@sanilmendonca](https://discuss.elastic.co/u/sanilmendonca)\
**Replies:** 0\
**Last updated:** [July 8, 2025, 5:17am UTC](https://discuss.elastic.co/t/anonymous-login-not-working-in-kibana-9-0-2/379885 "2025-07-08T05:17:02Z")

</div>

As part of my Kibana config i have adde dbelow code, xpack.security.authc.providers: anonymous.anonymous1: order: 0 session: idleTimeout: 1y basic.basic1: order: 1 when i try to bring the servr up…

---

## [Synonyms with FSCrawler](https://discuss.elastic.co/t/synonyms-with-fscrawler/379785)

<div class="topic-metadata">

**Author:** [@AndreAT](https://discuss.elastic.co/u/AndreAT)\
**Replies:** 6\
**Last updated:** [July 7, 2025, 9:14pm UTC](https://discuss.elastic.co/t/synonyms-with-fscrawler/379785 "2025-07-07T21:14:50Z")

</div>

Hi, I like to use synonym\_path to assign a couple of synonyms to optimize my search. My enviroment is setup with Elasticsearch 8.15.1 and FSCrawler and after some study I figure out that I can't add mapping as done in …

---

## [Sending Short URLs from Remote Hosts in Latest Kibana Versions](https://discuss.elastic.co/t/sending-short-urls-from-remote-hosts-in-latest-kibana-versions/379881)

<div class="topic-metadata">

**Author:** [@dan\_walker](https://discuss.elastic.co/u/dan_walker)\
**Replies:** 0\
**Last updated:** [July 7, 2025, 8:47pm UTC](https://discuss.elastic.co/t/sending-short-urls-from-remote-hosts-in-latest-kibana-versions/379881 "2025-07-07T20:47:15Z")

</div>

Good Afternoon, I run Elastic Stack 8.17.2. My ELK stack is installed on a "Reporting" server, while my application is installed on a separate "Application" server. My application relies on sending Short URLs to Kibana. …

---

## [Cannot use Metricbeat Prometheus module to scrape Blackbox Exporter](https://discuss.elastic.co/t/cannot-use-metricbeat-prometheus-module-to-scrape-blackbox-exporter/379862)

<div class="topic-metadata">

**Author:** [@Amit\_Yaari](https://discuss.elastic.co/u/Amit_Yaari)\
**Replies:** 0\
**Last updated:** [July 7, 2025, 10:36am UTC](https://discuss.elastic.co/t/cannot-use-metricbeat-prometheus-module-to-scrape-blackbox-exporter/379862 "2025-07-07T10:36:02Z")

</div>

I am trying to use Metricbeat’s Prometheus module to collect results from the Blackbox Exporter (prom/blackbox-exporter), which probes services using the /probe endpoint. I want to probe internal service health endpoint…

---

## [How to read S3 bucket using filebeat and parse in logstash](https://discuss.elastic.co/t/how-to-read-s3-bucket-using-filebeat-and-parse-in-logstash/379557)

<div class="topic-metadata">

**Author:** [@vijay117](https://discuss.elastic.co/u/vijay117)\
**Replies:** 4\
**Last updated:** [July 7, 2025, 9:44am UTC](https://discuss.elastic.co/t/how-to-read-s3-bucket-using-filebeat-and-parse-in-logstash/379557 "2025-07-07T09:44:54Z")

</div>

Can some one explain how to read the contents of S3 bucket and store in Elasticsearch via logstash

---

## [After upgrading from ES 7, it is easy for a node to be unable to join the cluster for a long time after leaving. Restart the problem node and join it immediately](https://discuss.elastic.co/t/after-upgrading-from-es-7-it-is-easy-for-a-node-to-be-unable-to-join-the-cluster-for-a-long-time-after-leaving-restart-the-problem-node-and-join-it-immediately/373546)

<div class="topic-metadata">

**Author:** [@zcola](https://discuss.elastic.co/u/zcola)\
**Replies:** 14\
**Last updated:** [July 7, 2025, 7:52am UTC](https://discuss.elastic.co/t/after-upgrading-from-es-7-it-is-easy-for-a-node-to-be-unable-to-join-the-cluster-for-a-long-time-after-leaving-restart-the-problem-node-and-join-it-immediately/373546 "2025-07-07T07:52:47Z")

</div>

Versions 8.8.2 or 8.13.2 have this problem. The cluster data size is usually 300-700 tb. The log will be stuck in waiting for local cluster applier for more than ten minutes or one or two minutes. When you restart the p…

---

## [Is data stream backing indices are explicitly created or auto created?](https://discuss.elastic.co/t/is-data-stream-backing-indices-are-explicitly-created-or-auto-created/373490)

<div class="topic-metadata">

**Author:** [@Richard\_Zhang](https://discuss.elastic.co/u/Richard_Zhang)\
**Replies:** 3\
**Last updated:** [July 7, 2025, 6:25am UTC](https://discuss.elastic.co/t/is-data-stream-backing-indices-are-explicitly-created-or-auto-created/373490 "2025-07-07T06:25:10Z")

</div>

Hi everyone, For example, elastic-cloud-logs-8 is a data stream and its underlying indices are like this .ds-elastic-cloud-logs-8-2025.01.22-016804. So question is: is data stream backing indices are explicitly created…

---

## [Enormous CPU usage spike on Hosts](https://discuss.elastic.co/t/enormous-cpu-usage-spike-on-hosts/379809)

<div class="topic-metadata">

**Author:** [@mertse](https://discuss.elastic.co/u/mertse)\
**Replies:** 2\
**Last updated:** [July 7, 2025, 6:18am UTC](https://discuss.elastic.co/t/enormous-cpu-usage-spike-on-hosts/379809 "2025-07-07T06:18:46Z")

</div>

Hello, we are finalizing our systems now and we're going to start the test license in August. Today after doing some more configurations inside Kibana, I've discovered the Host overview and Metrics overview which didn't…

---

## [Elasticsearch cluster keeps going yellow even with balanced nodes](https://discuss.elastic.co/t/elasticsearch-cluster-keeps-going-yellow-even-with-balanced-nodes/379845)

<div class="topic-metadata">

**Author:** [@Rovmenpaul](https://discuss.elastic.co/u/Rovmenpaul)\
**Replies:** 1\
**Last updated:** [July 7, 2025, 5:37am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-keeps-going-yellow-even-with-balanced-nodes/379845 "2025-07-07T05:37:55Z")

</div>

Hi Everyone, I'm running a small Elasticsearch cluster with three data nodes and one master. Everything was stable for a while, but lately the cluster keeps switching to yellow status randomly throughout the day. When I…

---

## [New logstash installation is not working](https://discuss.elastic.co/t/new-logstash-installation-is-not-working/379824)

<div class="topic-metadata">

**Author:** [@Luis\_Moy](https://discuss.elastic.co/u/Luis_Moy)\
**Replies:** 11\
**Last updated:** [July 6, 2025, 7:29pm UTC](https://discuss.elastic.co/t/new-logstash-installation-is-not-working/379824 "2025-07-06T19:29:50Z")

</div>

Hello I want to install logstash in red hat linux 9. according with this documentation, because i need this specific version. I followed the instructions. downloaded from the github the version, and using jdk 11 from…

---

## [Elasticsearch index is deleted from application but not removed from disk](https://discuss.elastic.co/t/elasticsearch-index-is-deleted-from-application-but-not-removed-from-disk/379591)

<div class="topic-metadata">

**Author:** [@kuldeep\_gupta](https://discuss.elastic.co/u/kuldeep_gupta)\
**Replies:** 8\
**Last updated:** [July 6, 2025, 5:51pm UTC](https://discuss.elastic.co/t/elasticsearch-index-is-deleted-from-application-but-not-removed-from-disk/379591 "2025-07-06T17:51:05Z")

</div>

I am using elasticsearch version 8.12.0 i deleted some indices from my cluster, but when i checked node stats from stack monitoring tab from kibana what is found Free disk is 1TB and Data is 2.2TB but total disk size is …

---

## [Filebeat's journald input with paths for Podman Logs](https://discuss.elastic.co/t/filebeats-journald-input-with-paths-for-podman-logs/379831)

<div class="topic-metadata">

**Author:** [@alexandrosprey](https://discuss.elastic.co/u/alexandrosprey)\
**Replies:** 0\
**Last updated:** [July 6, 2025, 1:10pm UTC](https://discuss.elastic.co/t/filebeats-journald-input-with-paths-for-podman-logs/379831 "2025-07-06T13:10:58Z")

</div>

I'm trying to spin up log collection on Linux Fedora 42 in docker compose (via podman). Podman doesn't write logs to files, so I chose journalctl filebeat.inputs: - type: journald id: "podman-logs" # explicit…

---

## [Dashboard ES|QL Visualization configuration resets with every query change](https://discuss.elastic.co/t/dashboard-es-ql-visualization-configuration-resets-with-every-query-change/379813)

<div class="topic-metadata">

**Author:** [@allatrue](https://discuss.elastic.co/u/allatrue)\
**Replies:** 2\
**Last updated:** [July 5, 2025, 6:19pm UTC](https://discuss.elastic.co/t/dashboard-es-ql-visualization-configuration-resets-with-every-query-change/379813 "2025-07-05T18:19:11Z")

</div>

Hello everyone, I'm wondering if this is a normal behavior. When I make any change at ES|QL visualization query in a dashboard and click "Run query", the editor resets the visualization configuration, so that I have to …

---

## [Failed to determine the health of the cluster](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/379645)

<div class="topic-metadata">

**Author:** [@HarimbolaSantatra](https://discuss.elastic.co/u/HarimbolaSantatra)\
**Replies:** 3\
**Last updated:** [July 5, 2025, 9:02am UTC](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/379645 "2025-07-05T09:02:11Z")

</div>

When I run ./elasticsearch-reset-password -i -u elastic --url https://192.168.3.1:9200, it yields: ERROR: Failed to determine the health of the cluster., with exit code 69 But when I remove the --url flag, I get: ERRO…

---

## [Replica shards of newly created indices remain UNASSIGNED](https://discuss.elastic.co/t/replica-shards-of-newly-created-indices-remain-unassigned/379459)

<div class="topic-metadata">

**Author:** [@onel](https://discuss.elastic.co/u/onel)\
**Replies:** 12\
**Last updated:** [July 4, 2025, 7:44pm UTC](https://discuss.elastic.co/t/replica-shards-of-newly-created-indices-remain-unassigned/379459 "2025-07-04T19:44:16Z")

</div>

hello We haven’t experienced this issue before, but recently we noticed that the primary shards of rollover-created indices are allocated normally, while the replica shards always remain in an UNASSIGNED state. We creat…

---

## [The cluster never changes the assigned master node](https://discuss.elastic.co/t/the-cluster-never-changes-the-assigned-master-node/379777)

<div class="topic-metadata">

**Author:** [@Emiliano\_Baum](https://discuss.elastic.co/u/Emiliano_Baum)\
**Replies:** 12\
**Last updated:** [July 4, 2025, 6:30pm UTC](https://discuss.elastic.co/t/the-cluster-never-changes-the-assigned-master-node/379777 "2025-07-04T18:30:39Z")

</div>

The cluster never changes the assigned master node Elasticsearch version 6.8. I have a cluster with 6 data nodes, 3 ingest nodes, and 5 masters (masters only). Over the last few days, the master nodes have been cascadi…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=55)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=57)
