# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=688

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 689

---

## [How to integrate from EKS to ELK](https://discuss.elastic.co/t/how-to-integrate-from-eks-to-elk/321414)

<div class="topic-metadata">

**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\
**Replies:** 5\
**Last updated:** [December 23, 2022, 3:24pm UTC](https://discuss.elastic.co/t/how-to-integrate-from-eks-to-elk/321414 "2022-12-23T15:24:49Z")

</div>

Hi team, We would like to explore about the integrate from EKS to ELK. Normally, we have getting the logs from below path. Logs Flow - FileBeat/MetricBeat -\> AWS Kafka -\> Logstash -\> ES -\> Kibana So, we would like to…

---

## [Security\_exception: current license is non-compliant for \[searchable-snapshots\]](https://discuss.elastic.co/t/security-exception-current-license-is-non-compliant-for-searchable-snapshots/321925)

<div class="topic-metadata">

**Author:** [@Frobeniusnorm](https://discuss.elastic.co/u/Frobeniusnorm)\
**Replies:** 3\
**Last updated:** [December 23, 2022, 3:16pm UTC](https://discuss.elastic.co/t/security-exception-current-license-is-non-compliant-for-searchable-snapshots/321925 "2022-12-23T15:16:41Z")

</div>

In my Index Management i get the warning: Index lifecycle error security\_exception: current license is non-compliant for \[searchable-snapshots\] But when i go to the policies, searchable snapshots are not activated. H…

---

## [Using the geoip filter with commercial databases](https://discuss.elastic.co/t/using-the-geoip-filter-with-commercial-databases/321874)

<div class="topic-metadata">

**Author:** [@patam](https://discuss.elastic.co/u/patam)\
**Replies:** 2\
**Last updated:** [December 23, 2022, 3:11pm UTC](https://discuss.elastic.co/t/using-the-geoip-filter-with-commercial-databases/321874 "2022-12-23T15:11:52Z")

</div>

I am trying to use the commercial Anonymous IP database for the geoip filter and I'm not sure how to retreive the information from the database. I have Logstash updating the db and the right .mmdb is there I am just unsu…

---

## [Elastic cloud Service logstash?](https://discuss.elastic.co/t/elastic-cloud-service-logstash/321885)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 4\
**Last updated:** [December 23, 2022, 2:40pm UTC](https://discuss.elastic.co/t/elastic-cloud-service-logstash/321885 "2022-12-23T14:40:19Z")

</div>

Hi, I an see that I am able to create logstash Pipelines in Elastic cloud service however I cannot find any documentation about: What is the logstash endpoint? How are the Ressources assigned to the logstash Pipeline…

---

## [GeoDistance queries with ElasticsearchClient 8.0.4](https://discuss.elastic.co/t/geodistance-queries-with-elasticsearchclient-8-0-4/321842)

<div class="topic-metadata">

**Author:** [@nalvio](https://discuss.elastic.co/u/nalvio)\
**Replies:** 2\
**Last updated:** [December 23, 2022, 1:55pm UTC](https://discuss.elastic.co/t/geodistance-queries-with-elasticsearchclient-8-0-4/321842 "2022-12-23T13:55:11Z")

</div>

With refresh of ElasticsearchClient 8.0.4, how do we build a GeoDistance query?

---

## [What network mode use in podman-compose](https://discuss.elastic.co/t/what-network-mode-use-in-podman-compose/321914)

<div class="topic-metadata">

**Author:** [@vnovotny98](https://discuss.elastic.co/u/vnovotny98)\
**Replies:** 5\
**Last updated:** [December 23, 2022, 1:19pm UTC](https://discuss.elastic.co/t/what-network-mode-use-in-podman-compose/321914 "2022-12-23T13:19:02Z")

</div>

Hello, I have a problem with podman-compose. I have running ELK stack and communication between apps is working but I cant figure out why I cant connect from another host to logstash input. Can you please tell me which…

---

## [Is there any way to add custome time picker as start date and end date on user's end,and Dashboard will update on the basis of that time range?](https://discuss.elastic.co/t/is-there-any-way-to-add-custome-time-picker-as-start-date-and-end-date-on-users-end-and-dashboard-will-update-on-the-basis-of-that-time-range/321901)

<div class="topic-metadata">

**Author:** [@ysattvik](https://discuss.elastic.co/u/ysattvik)\
**Replies:** 5\
**Last updated:** [December 23, 2022, 1:14pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-add-custome-time-picker-as-start-date-and-end-date-on-users-end-and-dashboard-will-update-on-the-basis-of-that-time-range/321901 "2022-12-23T13:14:12Z")

</div>

I am using Kibana 8.5.0 . please suggest some solution.

---

## [Get records only if condition persist for given span of time](https://discuss.elastic.co/t/get-records-only-if-condition-persist-for-given-span-of-time/319825)

<div class="topic-metadata">

**Author:** [@simone\_colombo](https://discuss.elastic.co/u/simone_colombo)\
**Replies:** 1\
**Last updated:** [December 23, 2022, 12:53pm UTC](https://discuss.elastic.co/t/get-records-only-if-condition-persist-for-given-span-of-time/319825 "2022-12-23T12:53:29Z")

</div>

I'm facing a querying problem with Kibana: I want to be returned all the records that match a given condition but only if they match it for at least a given span of time. Something like: Clock \> 50 and Vents is "off" \*\*…

---

## [How to only load enabled-module dashboards with \`filebeat setup\`](https://discuss.elastic.co/t/how-to-only-load-enabled-module-dashboards-with-filebeat-setup/321913)

<div class="topic-metadata">

**Author:** [@brsolomon](https://discuss.elastic.co/u/brsolomon)\
**Replies:** 0\
**Last updated:** [December 23, 2022, 12:50pm UTC](https://discuss.elastic.co/t/how-to-only-load-enabled-module-dashboards-with-filebeat-setup/321913 "2022-12-23T12:50:03Z")

</div>

It seems that the default behavior of filebeat setup --dashboards is to load all dashboards rather than just dashboards for the modules enabled via config or --modules. Is there a way to only have filebeat setup --dashb…

---

## [Get all the fields from an index with specific type](https://discuss.elastic.co/t/get-all-the-fields-from-an-index-with-specific-type/321852)

<div class="topic-metadata">

**Author:** [@nikssssss](https://discuss.elastic.co/u/nikssssss)\
**Replies:** 4\
**Last updated:** [December 23, 2022, 12:45pm UTC](https://discuss.elastic.co/t/get-all-the-fields-from-an-index-with-specific-type/321852 "2022-12-23T12:45:45Z")

</div>

hi all, how it is possible to get the all the fields from an index that are mapped as a date for example

---

## [Rollup Jobs Performance](https://discuss.elastic.co/t/rollup-jobs-performance/321019)

<div class="topic-metadata">

**Author:** [@mguggi](https://discuss.elastic.co/u/mguggi)\
**Replies:** 5\
**Last updated:** [December 23, 2022, 12:29pm UTC](https://discuss.elastic.co/t/rollup-jobs-performance/321019 "2022-12-23T12:29:18Z")

</div>

I'm having issues with the performance of Rollup Jobs on my system. The Data Quantity is quite large Job(1): rough 2,5M docs in 15 minutes / 300gb per day Job(2): rough 250T docs in 15 minutes / 40gb per day I'm tryin…

---

## [Search for documents matching some fields in a nested array](https://discuss.elastic.co/t/search-for-documents-matching-some-fields-in-a-nested-array/321808)

<div class="topic-metadata">

**Author:** [@Ali5](https://discuss.elastic.co/u/Ali5)\
**Replies:** 4\
**Last updated:** [December 23, 2022, 12:18pm UTC](https://discuss.elastic.co/t/search-for-documents-matching-some-fields-in-a-nested-array/321808 "2022-12-23T12:18:41Z")

</div>

I am learning to use Elasticsearch as a basic recommender engine. My elasticsearch document contains records with nested entities as follows POST feeds/\_doc { "feed\_id": "1", "title": "Mateen", "body": "This is ma…

---

## [How can we create list in elasticsearch](https://discuss.elastic.co/t/how-can-we-create-list-in-elasticsearch/321906)

<div class="topic-metadata">

**Author:** [@Ali5](https://discuss.elastic.co/u/Ali5)\
**Replies:** 3\
**Last updated:** [December 23, 2022, 11:48am UTC](https://discuss.elastic.co/t/how-can-we-create-list-in-elasticsearch/321906 "2022-12-23T11:48:40Z")

</div>

i want to create list of arrays in elasticsearch how we can search it to them as i want to create list of arrays not nested array

---

## [Failed to snapshot shard# 2](https://discuss.elastic.co/t/failed-to-snapshot-shard-2/321911)

<div class="topic-metadata">

**Author:** [@rebmeiml](https://discuss.elastic.co/u/rebmeiml)\
**Replies:** 0\
**Last updated:** [December 23, 2022, 11:35am UTC](https://discuss.elastic.co/t/failed-to-snapshot-shard-2/321911 "2022-12-23T11:35:28Z")

</div>

Our configuration: all nodes are hosted on a jelastic cloud platform all nodes are Docker containers 3 ES nodes, v7.17.5 1 Kibana node, v7.17.5 1 storage node (NFS) with enough space to store the backup data the backup…

---

## [How can we communicate between different container of elk stacks if published in kubernetes?](https://discuss.elastic.co/t/how-can-we-communicate-between-different-container-of-elk-stacks-if-published-in-kubernetes/321908)

<div class="topic-metadata">

**Author:** [@Rohit\_Kundu](https://discuss.elastic.co/u/Rohit_Kundu)\
**Replies:** 0\
**Last updated:** [December 23, 2022, 11:06am UTC](https://discuss.elastic.co/t/how-can-we-communicate-between-different-container-of-elk-stacks-if-published-in-kubernetes/321908 "2022-12-23T11:06:08Z")

</div>

I want to create docker images of each applications of elk stacks, and will later publish on kubernetes. Wanted to know that how can we communicate between different containers of elk

---

## [Logstash JDBC input plugin: Java::OrgPostgresqlUtil::PSQLException: An I/O error occurred while sending to the backend](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-java-an-i-o-error-occurred-while-sending-to-the-backend/321900)

<div class="topic-metadata">

**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\
**Replies:** 0\
**Last updated:** [December 23, 2022, 10:12am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-java-an-i-o-error-occurred-while-sending-to-the-backend/321900 "2022-12-23T10:12:05Z")

</div>

Hi all, I have created a Logstash pipeline which aims to sync an Elasticsearch index with a Postgres database. Unfortunately, there is a query that does not perform well and takes quite some time. Once every now and the…

---

## [Raw json query in elasticsearch-net](https://discuss.elastic.co/t/raw-json-query-in-elasticsearch-net/321793)

<div class="topic-metadata">

**Author:** [@A\_Kamali](https://discuss.elastic.co/u/A_Kamali)\
**Replies:** 1\
**Last updated:** [December 23, 2022, 10:01am UTC](https://discuss.elastic.co/t/raw-json-query-in-elasticsearch-net/321793 "2022-12-23T10:01:24Z")

</div>

I want to switch from nest to elasticsearch-net and use my own raw json query for searching. How can I use elasticsearch-net to search using raw json queries?

---

## [I'm struggling set up the minimal Security and the configure the TLS](https://discuss.elastic.co/t/im-struggling-set-up-the-minimal-security-and-the-configure-the-tls/321851)

<div class="topic-metadata">

**Author:** [@Anonym123](https://discuss.elastic.co/u/Anonym123)\
**Replies:** 5\
**Last updated:** [December 23, 2022, 8:58am UTC](https://discuss.elastic.co/t/im-struggling-set-up-the-minimal-security-and-the-configure-the-tls/321851 "2022-12-23T08:58:17Z")

</div>

What im using: The offical Helm Chart verion 7.17.3 from artifacthub.io Image version is also 7.17.3 My Problem: I'm struggling set up the minimal Security and the configure the TLS My Steps: Create the p12 elast…

---

## [Dynamic date to Watcher email](https://discuss.elastic.co/t/dynamic-date-to-watcher-email/300687)

<div class="topic-metadata">

**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\
**Replies:** 2\
**Last updated:** [December 23, 2022, 8:57am UTC](https://discuss.elastic.co/t/dynamic-date-to-watcher-email/300687 "2022-12-23T08:57:49Z")

</div>

Hi I want to add a date to the watcher command shown below right into the file name without having to type in a different one manually all the time. E.g. PM2.5\_arista\_report\_24Mar22. Is there any way that you can help m…

---

## [Kibana not connecting points in line](https://discuss.elastic.co/t/kibana-not-connecting-points-in-line/321821)

<div class="topic-metadata">

**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\
**Replies:** 3\
**Last updated:** [December 23, 2022, 8:41am UTC](https://discuss.elastic.co/t/kibana-not-connecting-points-in-line/321821 "2022-12-23T08:41:32Z")

</div>

Hi! I'm running on Kibana 7.16.1. I'm trying to display a simple Lens Line chart. My dataset is a set of documents like: { timestamp: \<ISO time\>, violations: 123, file: "path/to/foo.cpp", owner: "Foo", } My go…

---

## [Parsing CSV with different header](https://discuss.elastic.co/t/parsing-csv-with-different-header/321887)

<div class="topic-metadata">

**Author:** [@SKiD](https://discuss.elastic.co/u/SKiD)\
**Replies:** 0\
**Last updated:** [December 23, 2022, 8:07am UTC](https://discuss.elastic.co/t/parsing-csv-with-different-header/321887 "2022-12-23T08:07:07Z")

</div>

Hello, I have some thousand CSV files which I need to index into elasticsearch. All of those CSV files have different headers. I tried to use the CSV filter for logstash, but then I read THAT. Besides of my incomprehens…

---

## [Do we have any provision to DRAG the new "CONTROLS" at any position in the Kibana dashboard ? If possible please convey the process for the same](https://discuss.elastic.co/t/do-we-have-any-provision-to-drag-the-new-controls-at-any-position-in-the-kibana-dashboard-if-possible-please-convey-the-process-for-the-same/321884)

<div class="topic-metadata">

**Author:** [@ysattvik](https://discuss.elastic.co/u/ysattvik)\
**Replies:** 1\
**Last updated:** [December 23, 2022, 8:04am UTC](https://discuss.elastic.co/t/do-we-have-any-provision-to-drag-the-new-controls-at-any-position-in-the-kibana-dashboard-if-possible-please-convey-the-process-for-the-same/321884 "2022-12-23T08:04:14Z")

</div>

Currently controls are freezed at the TOP of the Dashboard.

---

## [Kibana Alerts - closing alert - impossible?](https://discuss.elastic.co/t/kibana-alerts-closing-alert-impossible/317734)

<div class="topic-metadata">

**Author:** [@xonicman](https://discuss.elastic.co/u/xonicman)\
**Replies:** 3\
**Last updated:** [October 30, 2022, 3:57pm UTC](https://discuss.elastic.co/t/kibana-alerts-closing-alert-impossible/317734 "2022-10-30T15:57:01Z")

</div>

Good day to all of you! I'm interacting with the Elastic 8.1 free version. Some alert rules are created that way, that alerts will be active forever I would like to close such alerts manually - for example, an alert i…

---

## [Multiple logstash instances consume kafka, only one is working](https://discuss.elastic.co/t/multiple-logstash-instances-consume-kafka-only-one-is-working/321880)

<div class="topic-metadata">

**Author:** [@TemplateXu](https://discuss.elastic.co/u/TemplateXu)\
**Replies:** 1\
**Last updated:** [December 23, 2022, 6:45am UTC](https://discuss.elastic.co/t/multiple-logstash-instances-consume-kafka-only-one-is-working/321880 "2022-12-23T06:45:47Z")

</div>

Multiple logstash instances consume log messages in kafka, but only one of them is working. When I close one of them, the other starts to work. How to make two logstash instances work together

---

## [Update index pattern in order to remove unused fields](https://discuss.elastic.co/t/update-index-pattern-in-order-to-remove-unused-fields/320144)

<div class="topic-metadata">

**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\
**Replies:** 1\
**Last updated:** [December 23, 2022, 5:18am UTC](https://discuss.elastic.co/t/update-index-pattern-in-order-to-remove-unused-fields/320144 "2022-12-23T05:18:08Z")

</div>

Hello, I update my index-template mappings and removed some fields that i do not need. But, after this change, the index pattern still have the fields that were deleted. So: How can i update the index pattern in orde…

---

## [Embed dashboard using reverse proxy - Incorrect HTTP method for uri](https://discuss.elastic.co/t/embed-dashboard-using-reverse-proxy-incorrect-http-method-for-uri/321878)

<div class="topic-metadata">

**Author:** [@Tzachi.shachar](https://discuss.elastic.co/u/Tzachi.shachar)\
**Replies:** 1\
**Last updated:** [December 23, 2022, 4:09am UTC](https://discuss.elastic.co/t/embed-dashboard-using-reverse-proxy-incorrect-http-method-for-uri/321878 "2022-12-23T04:09:23Z")

</div>

Hi, I'm using nginx as a reverse proxy with the following configuration: server { listen 4443 ssl; server\_name localhost; ssl\_certificate /etc/nginx/ssl/nginx.crt; ssl\_certificate\_key /etc/nginx/…

---

## [Float type rounding issues](https://discuss.elastic.co/t/float-type-rounding-issues/321859)

<div class="topic-metadata">

**Author:** [@etnachtman](https://discuss.elastic.co/u/etnachtman)\
**Replies:** 8\
**Last updated:** [December 23, 2022, 3:50am UTC](https://discuss.elastic.co/t/float-type-rounding-issues/321859 "2022-12-23T03:50:30Z")

</div>

I am trying to debug a kibana display issue with an index field of type float. When I look at the data in the index directly using dev tools it appears correctly. "balance": 10000.3675 However when I view the value th…

---

## [How to add another condition to SearchRequest.Builder in Java API](https://discuss.elastic.co/t/how-to-add-another-condition-to-searchrequest-builder-in-java-api/321812)

<div class="topic-metadata">

**Author:** [@cchuang4](https://discuss.elastic.co/u/cchuang4)\
**Replies:** 2\
**Last updated:** [December 23, 2022, 2:36am UTC](https://discuss.elastic.co/t/how-to-add-another-condition-to-searchrequest-builder-in-java-api/321812 "2022-12-23T02:36:54Z")

</div>

For new Java API, If I want to make a search like below: my code below, but I will set range and terms in different place, how should I combination the second setting to exist condition. In my code, the second .quer…

---

## [Watcher - input - chain: conditional execution of a chain](https://discuss.elastic.co/t/watcher-input-chain-conditional-execution-of-a-chain/318554)

<div class="topic-metadata">

**Author:** [@nico33b\_nico33b](https://discuss.elastic.co/u/nico33b_nico33b)\
**Replies:** 1\
**Last updated:** [November 25, 2022, 9:16am UTC](https://discuss.elastic.co/t/watcher-input-chain-conditional-execution-of-a-chain/318554 "2022-11-25T09:16:55Z")

</div>

I'm using the chain feature in a watcher. I'm looking for a proper way to stop the execution of a specific input depending of the result of the previous one. Let say, you have a 3 steps chain which do something like: …

---

## [Kibana Dashboard Snapshot](https://discuss.elastic.co/t/kibana-dashboard-snapshot/321865)

<div class="topic-metadata">

**Author:** [@Cal](https://discuss.elastic.co/u/Cal)\
**Replies:** 1\
**Last updated:** [December 23, 2022, 1:37am UTC](https://discuss.elastic.co/t/kibana-dashboard-snapshot/321865 "2022-12-23T01:37:21Z")

</div>

Hello team, we are currently looking to migrate our Elastic from an on-prem to a cloud hosting and want to know how we can easily transfer our Kibana dashboard and visualizations. I've seen pre-packaged Elastic Stacks (…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=687)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=689)
