# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=680

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 681

---

## [Certificate error occurred when installing the fleet server](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710)

<div class="topic-metadata">

**Author:** [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Replies:** 46\
**Last updated:** [December 23, 2022, 3:12am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710 "2022-12-23T03:12:45Z")

</div>

My Elasticsearch and Kibana versions are 8.5.0. When installing the fly, certificate errors are reported all the time. My elasticsearch has set three nodes, and the certificate generated by using the （elasticsearch-certu…

---

## [Tuning elasticsearch enviroment](https://discuss.elastic.co/t/tuning-elasticsearch-enviroment/322089)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 11\
**Last updated:** [January 3, 2023, 8:42am UTC](https://discuss.elastic.co/t/tuning-elasticsearch-enviroment/322089 "2023-01-03T08:42:45Z")

</div>

Hi Please share any suggestion how I can tune up the performance of elasic cluster This solution was deployed on 3 bare metal machine. Each of particular host has a 256 GB RAM so we distributed memory through such co…

---

## [Upgrade to 8.x from 7.x | Error in Kibana](https://discuss.elastic.co/t/upgrade-to-8-x-from-7-x-error-in-kibana/317829)

<div class="topic-metadata">

**Author:** [@Senthil\_ak](https://discuss.elastic.co/u/Senthil_ak)\
**Replies:** 9\
**Last updated:** [January 3, 2023, 8:19am UTC](https://discuss.elastic.co/t/upgrade-to-8-x-from-7-x-error-in-kibana/317829 "2023-01-03T08:19:26Z")

</div>

We are running 7.2, successfully upgraded to 7.17.6, and want to move to the 8.X version. All went fine with the 7.17.6 upgrade. On Kibana I see some upgrade issues (critical) but not sure how to resolve this. First err…

---

## [How to remove the filter suggestions in kibana, having the word .keyword](https://discuss.elastic.co/t/how-to-remove-the-filter-suggestions-in-kibana-having-the-word-keyword/320534)

<div class="topic-metadata">

**Author:** [@Kota.MuraliMohan](https://discuss.elastic.co/u/Kota.MuraliMohan)\
**Replies:** 1\
**Last updated:** [December 6, 2022, 10:55am UTC](https://discuss.elastic.co/t/how-to-remove-the-filter-suggestions-in-kibana-having-the-word-keyword/320534 "2022-12-06T10:55:12Z")

</div>

Hi, I'm trying to remove the suggestions in kibana filter having .keyword in the suggestions. I'm uploading the image for reference, we should eliminate the highlighted suggestions

---

## [If mysql is remote, how do I configure it in elastic agent metricbeat ( help)](https://discuss.elastic.co/t/if-mysql-is-remote-how-do-i-configure-it-in-elastic-agent-metricbeat-help/322343)

<div class="topic-metadata">

**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\
**Replies:** 1\
**Last updated:** [January 3, 2023, 7:25am UTC](https://discuss.elastic.co/t/if-mysql-is-remote-how-do-i-configure-it-in-elastic-agent-metricbeat-help/322343 "2023-01-03T07:25:26Z")

</div>

Kibana version: 7.17.8 Elasticsearch version: 7.17.8 APM Server version: 7.17.8 APM Agent language and version: 7.17.8 Browser version:

---

## [Logstash Grok Pattern Not Working(Regex)](https://discuss.elastic.co/t/logstash-grok-pattern-not-working-regex/322199)

<div class="topic-metadata">

**Author:** [@Prakash111](https://discuss.elastic.co/u/Prakash111)\
**Replies:** 4\
**Last updated:** [January 3, 2023, 6:14am UTC](https://discuss.elastic.co/t/logstash-grok-pattern-not-working-regex/322199 "2023-01-03T06:14:58Z")

</div>

Hi Team, I have few logs which is having same pattern DATE LOGLEVEL textData JSONDATA i want to write grok pattern, it should pass all these 3 logs my grok pattern %{TIMESTAMP\_ISO8601:time}\\s\*\\\[%{LOGLEVEL:logleve}\\\]\\…

---

## [How do we reindex an index such that queries having a symbol and not having symbol return same results](https://discuss.elastic.co/t/how-do-we-reindex-an-index-such-that-queries-having-a-symbol-and-not-having-symbol-return-same-results/322339)

<div class="topic-metadata">

**Author:** [@Krishna\_Teja](https://discuss.elastic.co/u/Krishna_Teja)\
**Replies:** 0\
**Last updated:** [January 3, 2023, 5:12am UTC](https://discuss.elastic.co/t/how-do-we-reindex-an-index-such-that-queries-having-a-symbol-and-not-having-symbol-return-same-results/322339 "2023-01-03T05:12:14Z")

</div>

query: { match: { "key": "yee-haw" } } # returns 0 query: { match: { "key": "yeehaw" } } # returns 2 Reindex such that both yee-haw and yeehaw return same results with same s…

---

## [Could not index event to Elasticsearch. status: 404](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-404/322312)

<div class="topic-metadata">

**Author:** [@shubham.s](https://discuss.elastic.co/u/shubham.s)\
**Replies:** 3\
**Last updated:** [January 3, 2023, 4:34am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-status-404/322312 "2023-01-03T04:34:45Z")

</div>

refer to /etc/logstash/conf.d/pipeline.conf input { file { path =\> "/var/log/secure" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { grok { match =\> { "message" =\> ""%{IPV4:i…

---

## [How do I get Elasticsearch CA trusted thumbprint](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-ca-trusted-thumbprint/322270)

<div class="topic-metadata">

**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\
**Replies:** 1\
**Last updated:** [January 3, 2023, 3:53am UTC](https://discuss.elastic.co/t/how-do-i-get-elasticsearch-ca-trusted-thumbprint/322270 "2023-01-03T03:53:49Z")

</div>

---

## [OpenID Connect stand-alone Elastic with Keycloak](https://discuss.elastic.co/t/openid-connect-stand-alone-elastic-with-keycloak/322287)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 1\
**Last updated:** [January 3, 2023, 3:36am UTC](https://discuss.elastic.co/t/openid-connect-stand-alone-elastic-with-keycloak/322287 "2023-01-03T03:36:52Z")

</div>

I would like to have a single node ES (no Kibana involved) authenticate against Keycloak for all requests. I've followed the OpenID Connect without Kibana documentation to the best of my knowledge. However, this and the…

---

## [Docker-compose start false](https://discuss.elastic.co/t/docker-compose-start-false/322189)

<div class="topic-metadata">

**Author:** [@freemankevin](https://discuss.elastic.co/u/freemankevin)\
**Replies:** 4\
**Last updated:** [January 3, 2023, 3:31am UTC](https://discuss.elastic.co/t/docker-compose-start-false/322189 "2023-01-03T03:31:06Z")

</div>

The 'setup' part cannot be executed repeatedly, there is a problem with the shell script, can you update the description in the official document (Install Elasticsearch with Docker | Elasticsearch Guide \[8.5\] | Elastic) …

---

## [ELK Stack connect to Keycloak via OpenID](https://discuss.elastic.co/t/elk-stack-connect-to-keycloak-via-openid/322256)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 8\
**Last updated:** [January 3, 2023, 3:28am UTC](https://discuss.elastic.co/t/elk-stack-connect-to-keycloak-via-openid/322256 "2023-01-03T03:28:41Z")

</div>

I am attempting to have an Elastic Stack (just one node ES and Kibana) authenticate against Keycloak using OpenID. My docker-compose.yml file: version: "2.2" services: setup: image: docker.elastic.co/elasticsear…

---

## [Need to integrate Kibana dashboard directly to a website](https://discuss.elastic.co/t/need-to-integrate-kibana-dashboard-directly-to-a-website/318387)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 3\
**Last updated:** [November 8, 2022, 9:07am UTC](https://discuss.elastic.co/t/need-to-integrate-kibana-dashboard-directly-to-a-website/318387 "2022-11-08T09:07:28Z")

</div>

My team and I have been working on a Twitter sentiment analysis project. We are collecting data for this purpose and creating a dashboard. We are currently building a website and want to create a model in which if a user…

---

## [How to exclude same consumer groups from Kibana dashboard](https://discuss.elastic.co/t/how-to-exclude-same-consumer-groups-from-kibana-dashboard/318268)

<div class="topic-metadata">

**Author:** [@vkatoch](https://discuss.elastic.co/u/vkatoch)\
**Replies:** 4\
**Last updated:** [November 8, 2022, 4:22am UTC](https://discuss.elastic.co/t/how-to-exclude-same-consumer-groups-from-kibana-dashboard/318268 "2022-11-08T04:22:37Z")

</div>

Hi Elastic Team/Members, I have almost 60 Logstash consumers (with unique consumers ID) in my PROD environment which are consuming from Kafka and sending to cloud, Big data lake and Splunk. I have created a Kibana dash…

---

## [Unable to upgrade the elastic search and kibana to lastet 8.5.1 version](https://discuss.elastic.co/t/unable-to-upgrade-the-elastic-search-and-kibana-to-lastet-8-5-1-version/321971)

<div class="topic-metadata">

**Author:** [@MahithaSarala](https://discuss.elastic.co/u/MahithaSarala)\
**Replies:** 12\
**Last updated:** [January 2, 2023, 9:14pm UTC](https://discuss.elastic.co/t/unable-to-upgrade-the-elastic-search-and-kibana-to-lastet-8-5-1-version/321971 "2023-01-02T21:14:03Z")

</div>

Hi Team, We have installed Elastic serach and kibana setup using helm charts , The current version is 7.17.3 . On checking in artifacthub.io we have referred to the following elastic and kibana latest versions for upgr…

---

## [ElasticSearch 8.5.3 installation windows](https://discuss.elastic.co/t/elasticsearch-8-5-3-installation-windows/322301)

<div class="topic-metadata">

**Author:** [@akrajmscct](https://discuss.elastic.co/u/akrajmscct)\
**Replies:** 1\
**Last updated:** [January 2, 2023, 9:12pm UTC](https://discuss.elastic.co/t/elasticsearch-8-5-3-installation-windows/322301 "2023-01-02T21:12:17Z")

</div>

Hi Team, I am new to Elasticsearch and Kibana. I using windows and downloaded the elasticsearch 8.5.3 version zip file. After unzip I run the elasticsearch.bat file in command prompt. It generates token, username and pa…

---

## [Raise HTTP\_EXCEPTIONS.get(status\_code, TransportError)( elasticsearch.exceptions.TransportError: TransportError(302, '')](https://discuss.elastic.co/t/raise-http-exceptions-get-status-code-transporterror-elasticsearch-exceptions-transporterror-transporterror-302/322024)

<div class="topic-metadata">

**Author:** [@Kompal](https://discuss.elastic.co/u/Kompal)\
**Replies:** 1\
**Last updated:** [January 2, 2023, 9:10pm UTC](https://discuss.elastic.co/t/raise-http-exceptions-get-status-code-transporterror-elasticsearch-exceptions-transporterror-transporterror-302/322024 "2023-01-02T21:10:12Z")

</div>

Receiving the exception -raise HTTP\_EXCEPTIONS.get(status\_code, TransportError)( elasticsearch.exceptions.TransportError: TransportError(302, '') while trying to create index using python.

---

## [Variable in HTTP plugin](https://discuss.elastic.co/t/variable-in-http-plugin/322308)

<div class="topic-metadata">

**Author:** [@Anu14](https://discuss.elastic.co/u/Anu14)\
**Replies:** 3\
**Last updated:** [January 2, 2023, 6:28pm UTC](https://discuss.elastic.co/t/variable-in-http-plugin/322308 "2023-01-02T18:28:56Z")

</div>

Hello, I have a pretty basic use case for which I am unable to use log stash as intended and would appreciate community's help. There are 'n' keys that are part of a URL. These keys keep changing on daily basis and I w…

---

## [Kibana Visualization Data To Python](https://discuss.elastic.co/t/kibana-visualization-data-to-python/319093)

<div class="topic-metadata">

**Author:** [@hi\_xavier](https://discuss.elastic.co/u/hi_xavier)\
**Replies:** 4\
**Last updated:** [December 5, 2022, 6:29pm UTC](https://discuss.elastic.co/t/kibana-visualization-data-to-python/319093 "2022-12-05T18:29:29Z")

</div>

Hello, We currently have a visualization (table) in Kibana that displays success rates. Is it possible to retrieve the data from this table using python?

---

## [Not using Elasticsearch, Logstash keeps asking for a license](https://discuss.elastic.co/t/not-using-elasticsearch-logstash-keeps-asking-for-a-license/322318)

<div class="topic-metadata">

**Author:** [@camilovietnam](https://discuss.elastic.co/u/camilovietnam)\
**Replies:** 3\
**Last updated:** [January 2, 2023, 4:53pm UTC](https://discuss.elastic.co/t/not-using-elasticsearch-logstash-keeps-asking-for-a-license/322318 "2023-01-02T16:53:38Z")

</div>

Hello! I am running Logstash with Opensearch, and I keep seeing the following message in the logs of my Logstash container: logstash | \[2023-01-02T14:17:52,107\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to r…

---

## [BitDefender Integration](https://discuss.elastic.co/t/bitdefender-integration/322327)

<div class="topic-metadata">

**Author:** [@xzapata](https://discuss.elastic.co/u/xzapata)\
**Replies:** 0\
**Last updated:** [January 2, 2023, 4:20pm UTC](https://discuss.elastic.co/t/bitdefender-integration/322327 "2023-01-02T16:20:43Z")

</div>

Good evening, I am trying to integrate BitDefender Gravity Zone. As you many may know is a cloud service. There are 2 steps 2 this: 1.- Generate a token authentication 2.-Enable the modules/log types with a CURL instr…

---

## [\_tier\_preference when prefered nodes are full](https://discuss.elastic.co/t/tier-preference-when-prefered-nodes-are-full/322325)

<div class="topic-metadata">

**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\
**Replies:** 1\
**Last updated:** [January 2, 2023, 3:41pm UTC](https://discuss.elastic.co/t/tier-preference-when-prefered-nodes-are-full/322325 "2023-01-02T15:41:38Z")

</div>

Hey Everyone, I'll try to be as brief and precise with my question as possible. When an index has a tier preference set to let's say data\_warm,data\_hot, and both the warm and hot nodes are full... will it reject new me…

---

## [Indexing operations have failed](https://discuss.elastic.co/t/indexing-operations-have-failed/322053)

<div class="topic-metadata">

**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\
**Replies:** 4\
**Last updated:** [January 2, 2023, 1:45pm UTC](https://discuss.elastic.co/t/indexing-operations-have-failed/322053 "2023-01-02T13:45:18Z")

</div>

Hello, I have set up a cluster of 18 nodes where all of them can be master in case of a crash. I call it "all in one". A few days ago I detected that I have "Indexing operations have failed" I'm not using logstash or f…

---

## [Filter input data from Filebeat using logstash?](https://discuss.elastic.co/t/filter-input-data-from-filebeat-using-logstash/322078)

<div class="topic-metadata">

**Author:** [@camilovietnam](https://discuss.elastic.co/u/camilovietnam)\
**Replies:** 9\
**Last updated:** [January 2, 2023, 12:26pm UTC](https://discuss.elastic.co/t/filter-input-data-from-filebeat-using-logstash/322078 "2023-01-02T12:26:30Z")

</div>

Hello! I managed to set up the stack Filebeat-\>Logstash-\>Elasticsearch, but I am using journald as an input for my filebeat logs, which means that a lot of unnecessary data appears to be saved in the ES index. I thought …

---

## [Missing required property 'Highlight.fields'](https://discuss.elastic.co/t/missing-required-property-highlight-fields/322294)

<div class="topic-metadata">

**Author:** [@Ali5](https://discuss.elastic.co/u/Ali5)\
**Replies:** 0\
**Last updated:** [January 2, 2023, 9:27am UTC](https://discuss.elastic.co/t/missing-required-property-highlight-fields/322294 "2023-01-02T09:27:35Z")

</div>

i am using elasticsearch bool querry with springboot application my querry is as follow: public List\<feed\> search(String id) throws IOException { Query bodyTermQuery = TermQuery.of(tq -\> tq.field("bo…

---

## [Kibana Graph Links](https://discuss.elastic.co/t/kibana-graph-links/317226)

<div class="topic-metadata">

**Author:** [@Rachel\_Bond](https://discuss.elastic.co/u/Rachel_Bond)\
**Replies:** 3\
**Last updated:** [December 5, 2022, 12:34pm UTC](https://discuss.elastic.co/t/kibana-graph-links/317226 "2022-12-05T12:34:59Z")

</div>

Hi ELK Community! I was just wondering if there were a way to define links within Graph using an existing field and if not a native capability, if is there a workaround someone has found to make this work? Thank you fo…

---

## [Year is missing from original log file, log events are stored as current year](https://discuss.elastic.co/t/year-is-missing-from-original-log-file-log-events-are-stored-as-current-year/322300)

<div class="topic-metadata">

**Author:** [@r123](https://discuss.elastic.co/u/r123)\
**Replies:** 0\
**Last updated:** [January 2, 2023, 11:11am UTC](https://discuss.elastic.co/t/year-is-missing-from-original-log-file-log-events-are-stored-as-current-year/322300 "2023-01-02T11:11:27Z")

</div>

Hi there, I have been testing the ELK-Stack recently. The ELK-Stack runs on a standalone server (elk-host01) After setting everything up, I have installed the elastic-agent on another server (srv-docker01). The logs ar…

---

## [Using logstash to connect to Azure Datalake Storage Account from elasticsearch](https://discuss.elastic.co/t/using-logstash-to-connect-to-azure-datalake-storage-account-from-elasticsearch/322296)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 0\
**Last updated:** [January 2, 2023, 9:54am UTC](https://discuss.elastic.co/t/using-logstash-to-connect-to-azure-datalake-storage-account-from-elasticsearch/322296 "2023-01-02T09:54:56Z")

</div>

Hi all, Using jdbc driver in logstash, I'm able to connect elasticsearch with different databases like mysql , etc & get data to elasticsearch. But I'm not able to connect elasticsearch with Azure Data Lake Storage Gen…

---

## [How to implement index rollover properties/condition in ES using spring data elasticsearch](https://discuss.elastic.co/t/how-to-implement-index-rollover-properties-condition-in-es-using-spring-data-elasticsearch/322218)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 3\
**Last updated:** [January 2, 2023, 8:15am UTC](https://discuss.elastic.co/t/how-to-implement-index-rollover-properties-condition-in-es-using-spring-data-elasticsearch/322218 "2023-01-02T08:15:37Z")

</div>

Hello All, How can I add the following property values in Elasticsearch when using spring-data-elasticsearch? Data from spring to elastic and need to configure ILM for this.For this specific usecase logsatsh cant be us…

---

## [How to fetch data from Elasticseach and display in React using APIs](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticseach-and-display-in-react-using-apis/322197)

<div class="topic-metadata">

**Author:** [@khlinten\_demelash](https://discuss.elastic.co/u/khlinten_demelash)\
**Replies:** 8\
**Last updated:** [January 2, 2023, 8:03am UTC](https://discuss.elastic.co/t/how-to-fetch-data-from-elasticseach-and-display-in-react-using-apis/322197 "2023-01-02T08:03:47Z")

</div>

Hello, I'm from Ethiopia, and I'm working in Front-end Website Development. am using ReactJS and Elasticsearch. I'm getting trouble fetching data from Elasticsearch(https://192.168.1.3:9200/clientesafewindows-logstash/\_…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=679)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=681)
