# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=61

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 62

---

## [Reloading dictionary decompounder word\_list\_path](https://discuss.elastic.co/t/reloading-dictionary-decompounder-word-list-path/379206)

<div class="topic-metadata">

**Author:** [@cweiske](https://discuss.elastic.co/u/cweiske)\
**Replies:** 2\
**Last updated:** [June 18, 2025, 11:15am UTC](https://discuss.elastic.co/t/reloading-dictionary-decompounder-word-list-path/379206 "2025-06-18T11:15:33Z")

</div>

I've defined my own dictionary\_decompounder word list to cater for special words that are not matched by the German hyphenation\_decompounder: { "version": 3, "\_meta": { "description": "Default index sett…

---

## [ES\_PATH\_CONF ignored](https://discuss.elastic.co/t/es-path-conf-ignored/379262)

<div class="topic-metadata">

**Author:** [@h.koehler](https://discuss.elastic.co/u/h.koehler)\
**Replies:** 2\
**Last updated:** [June 18, 2025, 10:54am UTC](https://discuss.elastic.co/t/es-path-conf-ignored/379262 "2025-06-18T10:54:01Z")

</div>

What the title says. I already tried commenting out the source line in /usr/share/elasticsearch/bin/elasticsearch-env. My unit file: \[Unit\] Description=Elasticsearch %i Server Documentation=https://www.elastic.co Wants…

---

## [Unable to open Kibana Dashboards and Saved Searches](https://discuss.elastic.co/t/unable-to-open-kibana-dashboards-and-saved-searches/379195)

<div class="topic-metadata">

**Author:** [@anagha03](https://discuss.elastic.co/u/anagha03)\
**Replies:** 3\
**Last updated:** [June 18, 2025, 10:27am UTC](https://discuss.elastic.co/t/unable-to-open-kibana-dashboards-and-saved-searches/379195 "2025-06-18T10:27:51Z")

</div>

Hi Team, We are currently experiencing issues with Kibana where we are unable to open or create dashboards and visualizations. Additionally, saved searches from the Discover tab are not loading as expected. We encounter…

---

## [Type of a Field](https://discuss.elastic.co/t/type-of-a-field/379238)

<div class="topic-metadata">

**Author:** [@madhavsankarg](https://discuss.elastic.co/u/madhavsankarg)\
**Replies:** 3\
**Last updated:** [June 18, 2025, 10:22am UTC](https://discuss.elastic.co/t/type-of-a-field/379238 "2025-06-18T10:22:22Z")

</div>

Hi Everyone, How can we make the type of a field(exception) permanently as object ? I am facing issue where the type of the field sometimes gets assigned as text but required is object. According to the log which is fi…

---

## [S3 Repo verification exception (Failed to connect to service endpoint)](https://discuss.elastic.co/t/s3-repo-verification-exception-failed-to-connect-to-service-endpoint/379244)

<div class="topic-metadata">

**Author:** [@staubt](https://discuss.elastic.co/u/staubt)\
**Replies:** 5\
**Last updated:** [June 18, 2025, 8:09am UTC](https://discuss.elastic.co/t/s3-repo-verification-exception-failed-to-connect-to-service-endpoint/379244 "2025-06-18T08:09:29Z")

</div>

Hello I'm using snapshotting for backup/restore. There I recreate each time the repository since the location in S3 can change. For the authentication I use two different clients "backup" and "restore". At the moment …

---

## [I am connecting elastic search local instance to cloudhosted xsoar](https://discuss.elastic.co/t/i-am-connecting-elastic-search-local-instance-to-cloudhosted-xsoar/379271)

<div class="topic-metadata">

**Author:** [@Ans.inayat](https://discuss.elastic.co/u/Ans.inayat)\
**Replies:** 3\
**Last updated:** [June 18, 2025, 5:42am UTC](https://discuss.elastic.co/t/i-am-connecting-elastic-search-local-instance-to-cloudhosted-xsoar/379271 "2025-06-18T05:42:33Z")

</div>

Error (Jun 17th 2025 22:57:57) Failed to connect. Check Server URL field and port number. Error message: HTTPConnectionPool (host='10.0.40.18', port=9200): Max retries exceeded with url: / (Caused by NewConnectionError(…

---

## [Jdbc\_stating trowing raise\_pool\_timeout exception](https://discuss.elastic.co/t/jdbc-stating-trowing-raise-pool-timeout-exception/379144)

<div class="topic-metadata">

**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\
**Replies:** 5\
**Last updated:** [June 17, 2025, 10:44pm UTC](https://discuss.elastic.co/t/jdbc-stating-trowing-raise-pool-timeout-exception/379144 "2025-06-17T22:44:45Z")

</div>

Hello everyone, I am using jdbc\_static to populate my lookup table and, when I have increased my pipeline workers from 8 to 32, I am starting receiving this error: Exception when executing Jdbc query {:lookup\_id=\>"talo…

---

## [Elastic 30 day license renewal request](https://discuss.elastic.co/t/elastic-30-day-license-renewal-request/379264)

<div class="topic-metadata">

**Author:** [@jelliott1](https://discuss.elastic.co/u/jelliott1)\
**Replies:** 2\
**Last updated:** [June 17, 2025, 7:26pm UTC](https://discuss.elastic.co/t/elastic-30-day-license-renewal-request/379264 "2025-06-17T19:26:16Z")

</div>

Hello, my 30 day trial license for on-prem Elastic Stack expired before I could finish some validation tests. I filled out the renewal request form through Kibana a few weeks ago and have not heard anything. Assistance…

---

## [ERROR CONSULTING/MANAGING RULES - Alerts and Insights](https://discuss.elastic.co/t/error-consulting-managing-rules-alerts-and-insights/378970)

<div class="topic-metadata">

**Author:** [@dudahl](https://discuss.elastic.co/u/dudahl)\
**Replies:** 18\
**Last updated:** [June 17, 2025, 6:00pm UTC](https://discuss.elastic.co/t/error-consulting-managing-rules-alerts-and-insights/378970 "2025-06-17T18:00:16Z")

</div>

The message error ("Unable to load rules") below appears when I try to consult or manage the rules on Stack Management \> Alerts and Insights. I've already tried to look for similar bugs here, but all of them were found …

---

## [Index Automatically Deleted Every Few Days – ads\_index Disappears Without ILM Enabled](https://discuss.elastic.co/t/index-automatically-deleted-every-few-days-ads-index-disappears-without-ilm-enabled/379245)

<div class="topic-metadata">

**Author:** [@Developer\_G\_Design](https://discuss.elastic.co/u/Developer_G_Design)\
**Replies:** 8\
**Last updated:** [June 17, 2025, 2:41pm UTC](https://discuss.elastic.co/t/index-automatically-deleted-every-few-days-ads-index-disappears-without-ilm-enabled/379245 "2025-06-17T14:41:59Z")

</div>

Hello We’re encountering a critical issue where our custom index (ads\_index) is automatically deleted every 3–4 days without any manual action or lifecycle management policies in effect. Elasticsearch version: 8.18 Si…

---

## [Install Elastic agent with PowerShell script](https://discuss.elastic.co/t/install-elastic-agent-with-powershell-script/357060)

<div class="topic-metadata">

**Author:** [@Killerbe](https://discuss.elastic.co/u/Killerbe)\
**Replies:** 1\
**Last updated:** [June 17, 2025, 2:14pm UTC](https://discuss.elastic.co/t/install-elastic-agent-with-powershell-script/357060 "2025-06-17T14:14:12Z")

</div>

We have created a PowerShell script to install the elastic agent. The script is pushed by GPO. When the installation is done by the GPO, then the elastic agent file structure is created under C:\\Program Files, but the di…

---

## [ELK kibana will not authenticate in elastic - Get Kibana server not ready error](https://discuss.elastic.co/t/elk-kibana-will-not-authenticate-in-elastic-get-kibana-server-not-ready-error/379234)

<div class="topic-metadata">

**Author:** [@Steant](https://discuss.elastic.co/u/Steant)\
**Replies:** 1\
**Last updated:** [June 17, 2025, 1:21pm UTC](https://discuss.elastic.co/t/elk-kibana-will-not-authenticate-in-elastic-get-kibana-server-not-ready-error/379234 "2025-06-17T13:21:12Z")

</div>

Hi, I am trying to create a dependency between the ELK stack, so that every service starts with the correct order. Although I have checked that i have the correct password for kibana\_system, and the curl command from th…

---

## [Need Explanation ILM / DSL / closing indice and stuff](https://discuss.elastic.co/t/need-explanation-ilm-dsl-closing-indice-and-stuff/379232)

<div class="topic-metadata">

**Author:** [@Sebastien\_Tolron](https://discuss.elastic.co/u/Sebastien_Tolron)\
**Replies:** 0\
**Last updated:** [June 17, 2025, 8:56am UTC](https://discuss.elastic.co/t/need-explanation-ilm-dsl-closing-indice-and-stuff/379232 "2025-06-17T08:56:56Z")

</div>

Hi , Hi Everyone , I'm trying to understand what I've done with ILM and it looks messy :smiley: I need explanation and some help on good practices for that. The Setup : I have an Elasticsearch cluster with 10 Data …

---

## [Pipelines are not loading](https://discuss.elastic.co/t/pipelines-are-not-loading/378936)

<div class="topic-metadata">

**Author:** [@shailendra.rastogi](https://discuss.elastic.co/u/shailendra.rastogi)\
**Replies:** 6\
**Last updated:** [June 17, 2025, 5:57am UTC](https://discuss.elastic.co/t/pipelines-are-not-loading/378936 "2025-06-17T05:57:23Z")

</div>

HI , logstash version 9.0.1 The logstash is running fine however the pipelines are not loading getting \[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources. List of pipelines to be lo…

---

## [Metricbeat Podman Container Metrics](https://discuss.elastic.co/t/metricbeat-podman-container-metrics/379212)

<div class="topic-metadata">

**Author:** [@shabpa](https://discuss.elastic.co/u/shabpa)\
**Replies:** 0\
**Last updated:** [June 16, 2025, 3:57pm UTC](https://discuss.elastic.co/t/metricbeat-podman-container-metrics/379212 "2025-06-16T15:57:07Z")

</div>

Hi everyone, I'm currently running Metricbeat inside a Podman container, and I'm trying to collect metrics from other containers. So far, I'm successfully receiving data from the following metricsets: cpu network con…

---

## [Geo based pricing](https://discuss.elastic.co/t/geo-based-pricing/379199)

<div class="topic-metadata">

**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\
**Replies:** 1\
**Last updated:** [June 16, 2025, 2:32pm UTC](https://discuss.elastic.co/t/geo-based-pricing/379199 "2025-06-16T14:32:34Z")

</div>

Is it possible to create a geo based pricing usecase with elasticsearch for retail index? Say, I search for a jacket from SFO, it should be $50 but from Denver, it should be $45. I see geo shape feature but how do you ap…

---

## [Question about Transport Client Compatibility with Elasticsearch 8.x](https://discuss.elastic.co/t/question-about-transport-client-compatibility-with-elasticsearch-8-x/379196)

<div class="topic-metadata">

**Author:** [@nickgarlis](https://discuss.elastic.co/u/nickgarlis)\
**Replies:** 2\
**Last updated:** [June 16, 2025, 10:53am UTC](https://discuss.elastic.co/t/question-about-transport-client-compatibility-with-elasticsearch-8-x/379196 "2025-06-16T10:53:58Z")

</div>

According to the Elasticsearch documentation, the Java client version 7.17 should be forward-compatible with 8.x clusters. We are currently using the Transport Client, not the High-Level REST Client. We’re aware that th…

---

## [.NET client Version 9.0.0 ElasticsearchClientProductRegistration ArgumentNullException](https://discuss.elastic.co/t/net-client-version-9-0-0-elasticsearchclientproductregistration-argumentnullexception/379174)

<div class="topic-metadata">

**Author:** [@Mahdi\_Abbasi](https://discuss.elastic.co/u/Mahdi_Abbasi)\
**Replies:** 1\
**Last updated:** [June 16, 2025, 7:42am UTC](https://discuss.elastic.co/t/net-client-version-9-0-0-elasticsearchclientproductregistration-argumentnullexception/379174 "2025-06-16T07:42:01Z")

</div>

Elastic.Clients.Elasticsearch version:9.0.0 Elasticsearch version:9.0.2 .NET runtime version:7.0.101 Operating system version:Windows 10.0.19045 Description of the problem: I am trying to connect to the elasticsearc…

---

## [Filebeat: Problem migration json parser from 8.17.0 to 9.0.0 with filestream](https://discuss.elastic.co/t/filebeat-problem-migration-json-parser-from-8-17-0-to-9-0-0-with-filestream/378589)

<div class="topic-metadata">

**Author:** [@DirkGerlach](https://discuss.elastic.co/u/DirkGerlach)\
**Replies:** 5\
**Last updated:** [June 16, 2025, 5:52am UTC](https://discuss.elastic.co/t/filebeat-problem-migration-json-parser-from-8-17-0-to-9-0-0-with-filestream/378589 "2025-06-16T05:52:25Z")

</div>

Hi there, I am new in participating in this board. As a long-time reader I found a lot of stuff here that helps my to keep running a few ECK instances. Today I am facing a huge problem in migrating filebeat from 8.17.0…

---

## [Where is the release note of Go Client?](https://discuss.elastic.co/t/where-is-the-release-note-of-go-client/378882)

<div class="topic-metadata">

**Author:** [@johtani](https://discuss.elastic.co/u/johtani)\
**Replies:** 2\
**Last updated:** [June 16, 2025, 4:53am UTC](https://discuss.elastic.co/t/where-is-the-release-note-of-go-client/378882 "2025-06-16T04:53:30Z")

</div>

I can see some official clients release notes for Es 9 on Relase notes page. However , there is no Go Client. Does this mean there's nothing to be concerned about when upgrading to version 9? Or does it mean that Go C…

---

## [Installing Elasticsearch on Ubuntu 24](https://discuss.elastic.co/t/installing-elasticsearch-on-ubuntu-24/372215)

<div class="topic-metadata">

**Author:** [@Fredb69](https://discuss.elastic.co/u/Fredb69)\
**Replies:** 11\
**Last updated:** [June 15, 2025, 10:12pm UTC](https://discuss.elastic.co/t/installing-elasticsearch-on-ubuntu-24/372215 "2025-06-15T22:12:06Z")

</div>

Hi I want installing Elasticsearch on Ubuntu 24 but I have a problem with the PGP Key. The message is : W: Erreur de GPG : https://artifacts.elastic.co/packages/8.x/apt stable InRelease : Les signatures suivantes n'on…

---

## [Service crashed | Disk Utilization was 100%](https://discuss.elastic.co/t/service-crashed-disk-utilization-was-100/379188)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [June 15, 2025, 10:03pm UTC](https://discuss.elastic.co/t/service-crashed-disk-utilization-was-100/379188 "2025-06-15T22:03:12Z")

</div>

Hi Team, We have 14 nodes of elasticsearch(v8.17) cluster(3 master+6 hot+5 warm) running on prem. Today our cluster was on red state and i have observed that one of the warm nodes was stopped because of disk was 100% . …

---

## [Edit a line in Elastic Search through Kibana](https://discuss.elastic.co/t/edit-a-line-in-elastic-search-through-kibana/379179)

<div class="topic-metadata">

**Author:** [@Yoann\_Buzenet](https://discuss.elastic.co/u/Yoann_Buzenet)\
**Replies:** 2\
**Last updated:** [June 15, 2025, 10:50am UTC](https://discuss.elastic.co/t/edit-a-line-in-elastic-search-through-kibana/379179 "2025-06-15T10:50:03Z")

</div>

Hello, Is it possible to edit a line saved in Elastic Search with Kibana ? If I browse the lines of an index, can editing via the GUI be done ? It just seems read only. I would want to do that for making test on reques…

---

## [❗ Multiline Pattern Not Working in Filebeat 9.0.1 (Filestream Type Input)](https://discuss.elastic.co/t/multiline-pattern-not-working-in-filebeat-9-0-1-filestream-type-input/378977)

<div class="topic-metadata">

**Author:** [@Ravi\_Chandran](https://discuss.elastic.co/u/Ravi_Chandran)\
**Replies:** 2\
**Last updated:** [June 15, 2025, 8:47am UTC](https://discuss.elastic.co/t/multiline-pattern-not-working-in-filebeat-9-0-1-filestream-type-input/378977 "2025-06-15T08:47:09Z")

</div>

Summary Despite attempting multiple valid multiline.pattern configurations, Filebeat v9.0.1 fails to parse multiline log entries correctly from a plain text log file located inside a container. The logs contain Python st…

---

## [Agent Update fails on linux systems due to missing .asc file](https://discuss.elastic.co/t/agent-update-fails-on-linux-systems-due-to-missing-asc-file/374928)

<div class="topic-metadata">

**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\
**Replies:** 2\
**Last updated:** [June 15, 2025, 4:45am UTC](https://discuss.elastic.co/t/agent-update-fails-on-linux-systems-due-to-missing-asc-file/374928 "2025-06-15T04:45:07Z")

</div>

Yes - i found one closed post with the same issue but there was no answer. Updating my linux clients via fleet is failing every time due to missing .asc file. Meanwhile i start the update, login to the host and fetch t…

---

## [ES|QL query message format](https://discuss.elastic.co/t/es-ql-query-message-format/379171)

<div class="topic-metadata">

**Author:** [@pruna](https://discuss.elastic.co/u/pruna)\
**Replies:** 7\
**Last updated:** [June 14, 2025, 4:19pm UTC](https://discuss.elastic.co/t/es-ql-query-message-format/379171 "2025-06-14T16:19:35Z")

</div>

Hi! I need to query elements for a specific month in a date field. For that, I'm trying my first ES|QL query, as follows: { "query": """ FROM facts | WHERE DATE\_PART('month', date\_start) = '06' """ } by doing …

---

## [Backup & Restore Scripts- Elasticsearch - 2.4.3](https://discuss.elastic.co/t/backup-restore-scripts-elasticsearch-2-4-3/379173)

<div class="topic-metadata">

**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\
**Replies:** 2\
**Last updated:** [June 14, 2025, 4:42pm UTC](https://discuss.elastic.co/t/backup-restore-scripts-elasticsearch-2-4-3/379173 "2025-06-14T16:42:08Z")

</div>

Posting For records. Note: These scripts tested against Elasticsearch 2.4.3 which is EOL. These scripts may or may not work with newer versions of elastic. 1\] Details: A\] Node1: 10.226.71.1 (Master + Data) B\] Node2:…

---

## [The maximum configured depth of 64 has been exceeded. Cannot read next JSON object](https://discuss.elastic.co/t/the-maximum-configured-depth-of-64-has-been-exceeded-cannot-read-next-json-object/378954)

<div class="topic-metadata">

**Author:** [@Nikos\_Levogiannis](https://discuss.elastic.co/u/Nikos_Levogiannis)\
**Replies:** 10\
**Last updated:** [June 14, 2025, 7:45am UTC](https://discuss.elastic.co/t/the-maximum-configured-depth-of-64-has-been-exceeded-cannot-read-next-json-object/378954 "2025-06-14T07:45:32Z")

</div>

I am trying to make a search request using the new ElasticsearchClient 8.18 (C# .net) with a high number of aggregations and I get the error : The maximum configured depth of 64 has been exceeded. Cannot read next JSON …

---

## [Elastic Common Schema For Network Devices/SNMP](https://discuss.elastic.co/t/elastic-common-schema-for-network-devices-snmp/379168)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 1\
**Last updated:** [June 13, 2025, 4:41pm UTC](https://discuss.elastic.co/t/elastic-common-schema-for-network-devices-snmp/379168 "2025-06-13T16:41:31Z")

</div>

Hello, Does elastic have standardized fields for network devices? If not, is there plans for it? Thanks, E

---

## [Ticket SNOW form Kibana](https://discuss.elastic.co/t/ticket-snow-form-kibana/379166)

<div class="topic-metadata">

**Author:** [@Dariia\_Hrebenichenko](https://discuss.elastic.co/u/Dariia_Hrebenichenko)\
**Replies:** 2\
**Last updated:** [June 13, 2025, 4:03pm UTC](https://discuss.elastic.co/t/ticket-snow-form-kibana/379166 "2025-06-13T16:03:03Z")

</div>

Hello everybody! I need to create tickets in ServiceNow what based on information in Kibana. I already have alerting system what takes information from kibana.log and uses logstash to send different emails. Now I need…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=60)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=62)
