# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=706 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 707 --- ## [Not able to delete Project monitor which is undefined](https://discuss.elastic.co/t/not-able-to-delete-project-monitor-which-is-undefined/320572)
**Author:** [@Deepak\_Vyas](https://discuss.elastic.co/u/Deepak_Vyas)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 1:17pm UTC](https://discuss.elastic.co/t/not-able-to-delete-project-monitor-which-is-undefined/320572 "2022-12-08T13:17:30Z")
Under same project ID "Kingmakers" i see two monitors with same name one is default and one is undefined. I am not able to delete undefined one. --- ## [Issue with nfs server, getting error where using repo.path](https://discuss.elastic.co/t/issue-with-nfs-server-getting-error-where-using-repo-path/320716)
**Author:** [@luis\_ernesto\_alcanta](https://discuss.elastic.co/u/luis_ernesto_alcanta)\ **Replies:** 3\ **Last updated:** [December 8, 2022, 12:32pm UTC](https://discuss.elastic.co/t/issue-with-nfs-server-getting-error-where-using-repo-path/320716 "2022-12-08T12:32:09Z")
Hi I try to use a nfs server to run some backups: I am configuring elastic.yml in next way: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: quickstart namespace: rentallo-elastic sp… --- ## [How to resolve IP to hostname comming from Nginx access logs using nginx integration?](https://discuss.elastic.co/t/how-to-resolve-ip-to-hostname-comming-from-nginx-access-logs-using-nginx-integration/320788)
**Author:** [@DUGi](https://discuss.elastic.co/u/DUGi)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 12:31pm UTC](https://discuss.elastic.co/t/how-to-resolve-ip-to-hostname-comming-from-nginx-access-logs-using-nginx-integration/320788 "2022-12-08T12:31:19Z")
Hello, I have a question regarding nginx integration - access-log. I set it up and everything is working but I want to change source.ip to hostname. I'm using Fleet with agent and nginx integration. I added to Collec… --- ## [How to sync data from htttp\_poller](https://discuss.elastic.co/t/how-to-sync-data-from-htttp-poller/320787)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 12:29pm UTC](https://discuss.elastic.co/t/how-to-sync-data-from-htttp-poller/320787 "2022-12-08T12:29:18Z")
Hello, I am having 1 Billion data coming from an http API. The Api has pagination so that I can fetch data in batches. How can I implement that pagination in logstash using http\_poller plugin... My config file structur… --- ## [How to create multiple dense vector field?](https://discuss.elastic.co/t/how-to-create-multiple-dense-vector-field/320514)
**Author:** [@sungwon1110](https://discuss.elastic.co/u/sungwon1110)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 12:24pm UTC](https://discuss.elastic.co/t/how-to-create-multiple-dense-vector-field/320514 "2022-12-08T12:24:35Z")
Im trying to create multiple dense vector field. This is my mapping code: { "mappings": { "properties": { "ABSTRACT\_vector": { "type": "dense\_vector", "dims": 384 }, "BACKGROUND\_vector": { "type": "dense\_vector… --- ## [High memory usage of Metricbeat in Kubernetes](https://discuss.elastic.co/t/high-memory-usage-of-metricbeat-in-kubernetes/320784)
**Author:** [@beatman](https://discuss.elastic.co/u/beatman)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 12:24pm UTC](https://discuss.elastic.co/t/high-memory-usage-of-metricbeat-in-kubernetes/320784 "2022-12-08T12:24:02Z")
Hi, Continuing the discussion from High memory usage of Metricbeat in Kubernetes: I'm facing exactly the same problem with metricbeat consuming memory until it gets OOM-killed. This happens on all three k8s clusters I… --- ## [Parsing key value pairs from 2 seperate fields into several fields in ingest pipeline](https://discuss.elastic.co/t/parsing-key-value-pairs-from-2-seperate-fields-into-several-fields-in-ingest-pipeline/320782)
**Author:** [@DennisLC](https://discuss.elastic.co/u/DennisLC)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 12:11pm UTC](https://discuss.elastic.co/t/parsing-key-value-pairs-from-2-seperate-fields-into-several-fields-in-ingest-pipeline/320782 "2022-12-08T12:11:44Z")
I have just started ingesting 0365 audit logs, and I have come across the following field: o365.audit.ExtraProperties.value that I would like to parse out to several fields (as it contains comma seperated values) in my… --- ## [Problem connection LogStash to ElasticSearch in DockerCompose](https://discuss.elastic.co/t/problem-connection-logstash-to-elasticsearch-in-dockercompose/320773)
**Author:** [@mabsIpca](https://discuss.elastic.co/u/mabsIpca)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 11:15am UTC](https://discuss.elastic.co/t/problem-connection-logstash-to-elasticsearch-in-dockercompose/320773 "2022-12-08T11:15:03Z")
Hi everyone, I am currently developing a little project for university essay with educational purposes. In this project, I'm trying to use rabbit mq to send Log messages to Logstash from a Spring Boot Backend. Currentl… --- ## [Manipulating Nested Fields](https://discuss.elastic.co/t/manipulating-nested-fields/320768)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 10:44am UTC](https://discuss.elastic.co/t/manipulating-nested-fields/320768 "2022-12-08T10:44:45Z")
Hi, Given a field \[field\]\[sub-field\], how can I move the value from "sub-field" to field? That is, convert this from an object to a string? I've tried: mutate { covert =\> { "field" =\> "string" } } and: mutate {… --- ## [Delete index older than a week](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 23\ **Last updated:** [December 8, 2022, 10:26am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737 "2022-12-08T10:26:15Z")
Currently i have logs from 5 to 6 servers coming to elk. I want to delete all indices older than a week. what is the best way to achieve this? i went through ILM but didn't get the exact way to do this --- ## [Performance: Sorting / Filtering by runtime fields](https://discuss.elastic.co/t/performance-sorting-filtering-by-runtime-fields/320540)
**Author:** [@kennyprisjakt](https://discuss.elastic.co/u/kennyprisjakt)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 9:58am UTC](https://discuss.elastic.co/t/performance-sorting-filtering-by-runtime-fields/320540 "2022-12-08T09:58:38Z")
Hey, I'm looking into getting price conversions up to date in my indices. Price data: Updated index time Price conversions: Updated in query time (via runtime fields) The data for the currency conversion changes ofte… --- ## [.monitoring-$product-$date index](https://discuss.elastic.co/t/monitoring-product-date-index/320766)
**Author:** [@plessuk](https://discuss.elastic.co/u/plessuk)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 9:57am UTC](https://discuss.elastic.co/t/monitoring-product-date-index/320766 "2022-12-08T09:57:34Z")
Hello team, I faced with problem, that monitoring indexes create without ILM policy, I tried to find solution, how I can configure ILM to this monitoring indexes, Tried create Index template with predefined ILM policy… --- ## [Upsert solution Logstash](https://discuss.elastic.co/t/upsert-solution-logstash/320764)
**Author:** [@Vincent001](https://discuss.elastic.co/u/Vincent001)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 9:56am UTC](https://discuss.elastic.co/t/upsert-solution-logstash/320764 "2022-12-08T09:56:36Z")
Hello, I have a solution with filebeat(on server) -\> logstash(on server) -\> elasticsearch(as service) i have to ingest data from file.log in json format. each row have an "GUID" element wich is use for upsert. there i… --- ## [Upgrade Java for Elasticsearch and logstash](https://discuss.elastic.co/t/upgrade-java-for-elasticsearch-and-logstash/319644)
**Author:** [@Ravi\_Vishwakarma](https://discuss.elastic.co/u/Ravi_Vishwakarma)\ **Replies:** 8\ **Last updated:** [December 8, 2022, 9:19am UTC](https://discuss.elastic.co/t/upgrade-java-for-elasticsearch-and-logstash/319644 "2022-12-08T09:19:37Z")
Hi, Can anyone let me know how I can upgrade the java JDK on Elasticsearch and logstash. Path : /usr/share/logstash/jdk/ Installed version : 11.0.14.1 2022-02-08 Upgrade to a version greater than 11.0.16 Path : /… --- ## [Http request curl: (52) Empty reply from server](https://discuss.elastic.co/t/http-request-curl-52-empty-reply-from-server/320750)
**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\ **Replies:** 6\ **Last updated:** [December 8, 2022, 8:48am UTC](https://discuss.elastic.co/t/http-request-curl-52-empty-reply-from-server/320750 "2022-12-08T08:48:09Z")
We started a new Elasticsearch instance of 8.4.3 and the ES is up and running but when i am trying to send an HTTP request to the server I get a reply of curl: (52) Empty reply from server but when I pass the certificate… --- ## [Logs dont have date in timestamp](https://discuss.elastic.co/t/logs-dont-have-date-in-timestamp/320544)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 8:26am UTC](https://discuss.elastic.co/t/logs-dont-have-date-in-timestamp/320544 "2022-12-08T08:26:44Z")
hi! using logtash I collect logs from communigate, but they come with a timestamp without a date 15:32:37.159 SMTPI-875156(\[40.11.11.11\]) \[33221\] received encrypted, 9618 bytes 15:32:37.160 QUEUE(\[33221\]) from 9618 byt… --- ## [Getting the Values using Kibana by using StateCode](https://discuss.elastic.co/t/getting-the-values-using-kibana-by-using-statecode/316554)
**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\ **Replies:** 0\ **Last updated:** [October 13, 2022, 3:46pm UTC](https://discuss.elastic.co/t/getting-the-values-using-kibana-by-using-statecode/316554 "2022-10-13T15:46:52Z")
Hi, I have a variable which is TimeTaken , and I log the value as TimeTaken:10 with StateCode 1111 and TimeTaken 20 with StateCode 2222 When I use the KQL Query, sum(TimeTaken, Kql = 'StateCode:1111'). What value do w… --- ## [Wrong number of result using match\_phrase\_prefix](https://discuss.elastic.co/t/wrong-number-of-result-using-match-phrase-prefix/318838)
**Author:** [@Gorelldk](https://discuss.elastic.co/u/Gorelldk)\ **Replies:** 12\ **Last updated:** [December 8, 2022, 8:15am UTC](https://discuss.elastic.co/t/wrong-number-of-result-using-match-phrase-prefix/318838 "2022-12-08T08:15:22Z")
Hi all I have a on-premise ELK instance where i have an index with roughly 50.000 documents with 30 columns. One of the columns is name, indexed as a text. I have 4500 documents called VFCXXXX where the X is numbers, i… --- ## [Kubernetes Kibana 8.5.2 \[ERROR\]\[plugins.ruleRegistry\] Error: Server is stopping; must stop all async operations](https://discuss.elastic.co/t/kubernetes-kibana-8-5-2-error-plugins-ruleregistry-error-server-is-stopping-must-stop-all-async-operations/320754)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 7:59am UTC](https://discuss.elastic.co/t/kubernetes-kibana-8-5-2-error-plugins-ruleregistry-error-server-is-stopping-must-stop-all-async-operations/320754 "2022-12-08T07:59:57Z")
\[2022-12-08T07:57:35.263+00:00\]\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain \[2022-12-08T07:57:36.049+00:00\]\[INFO \]\[plugins.s… --- ## [Extract base64 encoded field from JSON message and write the decoded field to a file](https://discuss.elastic.co/t/extract-base64-encoded-field-from-json-message-and-write-the-decoded-field-to-a-file/320398)
**Author:** [@Arinjay\_Jain](https://discuss.elastic.co/u/Arinjay_Jain)\ **Replies:** 5\ **Last updated:** [December 8, 2022, 7:48am UTC](https://discuss.elastic.co/t/extract-base64-encoded-field-from-json-message-and-write-the-decoded-field-to-a-file/320398 "2022-12-08T07:48:51Z")
Hi All, I have the following logstash pipeline configuration. input { tcp { port =\> 5102 codec =\> json } } filter { json { source =\> "message" } } output { stdout { c… --- ## [Storage recommendations for Elastic](https://discuss.elastic.co/t/storage-recommendations-for-elastic/320655)
**Author:** [@Sireesha](https://discuss.elastic.co/u/Sireesha)\ **Replies:** 4\ **Last updated:** [December 8, 2022, 7:38am UTC](https://discuss.elastic.co/t/storage-recommendations-for-elastic/320655 "2022-12-08T07:38:29Z")
Hi , What is the recommended storage to deploy Elastic search . We are weighting options between local vs netapp storage . Please guide. --- ## [Kubernetes Kibana 8.5.2 healthcheck path? Tried /login but "connection refused"](https://discuss.elastic.co/t/kubernetes-kibana-8-5-2-healthcheck-path-tried-login-but-connection-refused/320753)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 7:35am UTC](https://discuss.elastic.co/t/kubernetes-kibana-8-5-2-healthcheck-path-tried-login-but-connection-refused/320753 "2022-12-08T07:35:48Z")
Kibana Statefulset: readinessProbe: # Override the readiness probe as GCLB reuses it for its own healthchecks httpGet: scheme: HTTPS path: /login … --- ## [Is there any funtionality in Elastic Search using which we can perform mathematical operations or calculations on the entries in an index?](https://discuss.elastic.co/t/is-there-any-funtionality-in-elastic-search-using-which-we-can-perform-mathematical-operations-or-calculations-on-the-entries-in-an-index/320741)
**Author:** [@Shraddha29](https://discuss.elastic.co/u/Shraddha29)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 5:55am UTC](https://discuss.elastic.co/t/is-there-any-funtionality-in-elastic-search-using-which-we-can-perform-mathematical-operations-or-calculations-on-the-entries-in-an-index/320741 "2022-12-08T05:55:59Z")
Is there any functionality in Elastic Search using which we can perform mathematical operations or calculations on the entries in an index? --- ## [How to view remote clusters index metadata](https://discuss.elastic.co/t/how-to-view-remote-clusters-index-metadata/320518)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 4\ **Last updated:** [December 8, 2022, 5:24am UTC](https://discuss.elastic.co/t/how-to-view-remote-clusters-index-metadata/320518 "2022-12-08T05:24:58Z")
Hi Team, I have a 3 clustesr setup like below cluster-query cluster-a cluster-b I added a & b as a remote clusters in cluster-query to search the data from query cluster kibana. Now i want to get the index mapping … --- ## [High Seach/Query Latency during Indexing Jobs](https://discuss.elastic.co/t/high-seach-query-latency-during-indexing-jobs/320615)
**Author:** [@vishnu\_teja](https://discuss.elastic.co/u/vishnu_teja)\ **Replies:** 7\ **Last updated:** [December 8, 2022, 4:47am UTC](https://discuss.elastic.co/t/high-seach-query-latency-during-indexing-jobs/320615 "2022-12-08T04:47:07Z")
Hi Everyone, We are recently facing issues with high latency in our Elastic Search Cluster, especially during Ingestion/Indexing in cluster. We run a batchJob which calls the update API of ES, so it will either update t… --- ## [API for configuring Fleet Server settings?](https://discuss.elastic.co/t/api-for-configuring-fleet-server-settings/318879)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 4:18am UTC](https://discuss.elastic.co/t/api-for-configuring-fleet-server-settings/318879 "2022-12-08T04:18:23Z")
Is there a programmatic way to set the values for Fleet Server as shown in this image here? I'm ok with command line tools, restful api, or some other automated service. There's a lot of elastic documentation, but I… --- ## [Agent stuck on updating but still send index](https://discuss.elastic.co/t/agent-stuck-on-updating-but-still-send-index/319391)
**Author:** [@xondeeptry](https://discuss.elastic.co/u/xondeeptry)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 3:53am UTC](https://discuss.elastic.co/t/agent-stuck-on-updating-but-still-send-index/319391 "2022-12-08T03:53:12Z")
I'm just enroll new window fleet everything is fine data received by logstash and stored in our cluster but agent stuck on updating in fleet. When i get agent status everything is healthy unless fleet-server stuck on re… --- ## [Termsvector of an element of array](https://discuss.elastic.co/t/termsvector-of-an-element-of-array/320732)
**Author:** [@tim2020work2](https://discuss.elastic.co/u/tim2020work2)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 3:48am UTC](https://discuss.elastic.co/t/termsvector-of-an-element-of-array/320732 "2022-12-08T03:48:49Z")
How do I view terms vector of a field in an element of array? API \_termvectors accept input "fields". i.e "fields" : \["msg"\], } If I want to view term vector of an element of array, the following does not work "f… --- ## [Kubernetes ConfigMap for S3 bucket?](https://discuss.elastic.co/t/kubernetes-configmap-for-s3-bucket/320728)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 0\ **Last updated:** [December 8, 2022, 2:59am UTC](https://discuss.elastic.co/t/kubernetes-configmap-for-s3-bucket/320728 "2022-12-08T02:59:44Z")
I am trying to bring up master Statefulset with 3 pods. I previously had to run the following script in Elasticsearch Dockerfile: yes | bin/elasticsearch-plugin install repository-s3 Now that s3 snapshot is built into … --- ## [Elastic agent is unhealthy](https://discuss.elastic.co/t/elastic-agent-is-unhealthy/320664)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 2:40am UTC](https://discuss.elastic.co/t/elastic-agent-is-unhealthy/320664 "2022-12-08T02:40:43Z")
Hi all, I have a case when after i enroll the fleet server to Elasticsearch. It become health for a while then became unhealthy. I checked the log then it said this: {"@timestamp":"2022-12-07T08:58:09.831566388Z","ag… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=705) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=707)