# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=71 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 72 --- ## [How to remove filter alias from backing index of a data stream?](https://discuss.elastic.co/t/how-to-remove-filter-alias-from-backing-index-of-a-data-stream/378011)
**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\ **Replies:** 3\ **Last updated:** [May 11, 2025, 2:22pm UTC](https://discuss.elastic.co/t/how-to-remove-filter-alias-from-backing-index-of-a-data-stream/378011 "2025-05-11T14:22:10Z")
Hi, I have an alias in my index template for test data stream to let me query for data in the last few days like the following: { "recent": { "filter": { "range": { "@timestamp": { "gte": "… --- ## [Transform script fails to index into destination data stream](https://discuss.elastic.co/t/transform-script-fails-to-index-into-destination-data-stream/378012)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [May 11, 2025, 11:52am UTC](https://discuss.elastic.co/t/transform-script-fails-to-index-into-destination-data-stream/378012 "2025-05-11T11:52:02Z")
I'm on v.8.18 and trying to make my first transform script which should correlate a start and end event from a source index and then calculate the process time in ms as the time difference between start and end events an… --- ## [Keyword or short type more perf for heavily used filter field?](https://discuss.elastic.co/t/keyword-or-short-type-more-perf-for-heavily-used-filter-field/376744)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 7\ **Last updated:** [May 10, 2025, 7:47pm UTC](https://discuss.elastic.co/t/keyword-or-short-type-more-perf-for-heavily-used-filter-field/376744 "2025-05-10T19:47:34Z")
hi, I have a field (low cardinality enumeration), I know will be used in almost all queries as a filter. Usual pick is as a keyword of course. But then the query cache is not used. keyword are supposed to be so fast t… --- ## [Which 2 fields in Elastic Search can be made as time unsync comparsion?](https://discuss.elastic.co/t/which-2-fields-in-elastic-search-can-be-made-as-time-unsync-comparsion/378007)
**Author:** [@jt2023](https://discuss.elastic.co/u/jt2023)\ **Replies:** 9\ **Last updated:** [May 10, 2025, 4:26pm UTC](https://discuss.elastic.co/t/which-2-fields-in-elastic-search-can-be-made-as-time-unsync-comparsion/378007 "2025-05-10T16:26:45Z")
{ "query": { "query\_string": { "query": "("NTP server status changes to unreachable" OR "Global time setting changed by NTP") AND devname:(ABC)", "default\_field": "logdesc" } } } --- ## [NTP server time sync issue - how to write alerts (Query DSL )](https://discuss.elastic.co/t/ntp-server-time-sync-issue-how-to-write-alerts-query-dsl/378006)
**Author:** [@jt2023](https://discuss.elastic.co/u/jt2023)\ **Replies:** 3\ **Last updated:** [May 10, 2025, 3:14pm UTC](https://discuss.elastic.co/t/ntp-server-time-sync-issue-how-to-write-alerts-query-dsl/378006 "2025-05-10T15:14:12Z")
NTP server time sync issue --- ## [Creating vector index from SharePoint Online data](https://discuss.elastic.co/t/creating-vector-index-from-sharepoint-online-data/378000)
**Author:** [@UNNIE\_Ayilliath](https://discuss.elastic.co/u/UNNIE_Ayilliath)\ **Replies:** 0\ **Last updated:** [May 9, 2025, 9:35pm UTC](https://discuss.elastic.co/t/creating-vector-index-from-sharepoint-online-data/378000 "2025-05-09T21:35:46Z")
I am trying to implement a vector index using ELSER2. The data source is SharePoint Online and I have used the Elasticsearch SharePoint Online connector to ingest data into the index with DLS enabled. I followed this bl… --- ## [Kibana unexpected session error in Firefox only](https://discuss.elastic.co/t/kibana-unexpected-session-error-in-firefox-only/377999)
**Author:** [@natharran](https://discuss.elastic.co/u/natharran)\ **Replies:** 2\ **Last updated:** [May 9, 2025, 6:21pm UTC](https://discuss.elastic.co/t/kibana-unexpected-session-error-in-firefox-only/377999 "2025-05-09T18:21:52Z")
I have Elasticsearch and Kibana (8.17.4) under ECK (3.0.0) in Kubernetes. I'm not overwriting any ECK-managed settings for either ES or Kibana. In Firefox 138.0.1 I'm experiencing a weird issue: Kibana logs out on refres… --- ## [An unexpected authentication error occurred. Please log in again.](https://discuss.elastic.co/t/an-unexpected-authentication-error-occurred-please-log-in-again/377678)
**Author:** [@GiorgioS13](https://discuss.elastic.co/u/GiorgioS13)\ **Replies:** 8\ **Last updated:** [May 9, 2025, 6:21pm UTC](https://discuss.elastic.co/t/an-unexpected-authentication-error-occurred-please-log-in-again/377678 "2025-05-09T18:21:30Z")
Hello, Yesterday we upgraded from version 8.18 to 9.0 without any issues, and I didn’t change any configurations. However, today I’m receiving this error when trying to perform actions in Kibana. Does anyone have an i… --- ## [Logstash TCP Input Zero Window Size](https://discuss.elastic.co/t/logstash-tcp-input-zero-window-size/377851)
**Author:** [@5Lights](https://discuss.elastic.co/u/5Lights)\ **Replies:** 6\ **Last updated:** [May 9, 2025, 5:53pm UTC](https://discuss.elastic.co/t/logstash-tcp-input-zero-window-size/377851 "2025-05-09T17:53:00Z")
We have a Loadbalancer that sends events as a JSON Stream over TCP to Logstash using Persistent Queue. Logstash is configured with a TCP Input. The Sender limits itself to 4 long-lived TCP connections to Logstash, but i… --- ## [Clarification regarding java api](https://discuss.elastic.co/t/clarification-regarding-java-api/377957)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 4\ **Last updated:** [May 9, 2025, 5:17pm UTC](https://discuss.elastic.co/t/clarification-regarding-java-api/377957 "2025-05-09T17:17:23Z")
Is this only applicable to java code? Python will still continue to use rest call? I am having a very difficult time to find a documentation with comprehensive examples of various calls using java api; therefore, it's … --- ## [Adaptive Replica Selection and knn load balancing](https://discuss.elastic.co/t/adaptive-replica-selection-and-knn-load-balancing/377991)
**Author:** [@peedeeboy](https://discuss.elastic.co/u/peedeeboy)\ **Replies:** 0\ **Last updated:** [May 9, 2025, 1:55pm UTC](https://discuss.elastic.co/t/adaptive-replica-selection-and-knn-load-balancing/377991 "2025-05-09T13:55:54Z")
hey friends :wave: I posted previously about our efforts on optimising our dedicated knn cluster. The latest thing we've been trying to understand / solve is why when we run load/stress testing, we often see 1 or 2 nod… --- ## [Is Self Inner Join Supported in ES?](https://discuss.elastic.co/t/is-self-inner-join-supported-in-es/377906)
**Author:** [@sekarvicky73](https://discuss.elastic.co/u/sekarvicky73)\ **Replies:** 2\ **Last updated:** [May 9, 2025, 1:36pm UTC](https://discuss.elastic.co/t/is-self-inner-join-supported-in-es/377906 "2025-05-09T13:36:40Z")
is possible to the below DB in query in Elasticsearch in SIngle query. SELECT \* FROM ADSMFolderDetails a INNER JOIN ADSMFolderDetails b ON a.parent\_path = b.path AND a.perm = b.perm AND a.sid = b.sid --- ## [WP-CLI: Please complete the setup of your index options. There is no index configured for searching](https://discuss.elastic.co/t/wp-cli-please-complete-the-setup-of-your-index-options-there-is-no-index-configured-for-searching/377841)
**Author:** [@Flavius\_V](https://discuss.elastic.co/u/Flavius_V)\ **Replies:** 1\ **Last updated:** [May 9, 2025, 1:33pm UTC](https://discuss.elastic.co/t/wp-cli-please-complete-the-setup-of-your-index-options-there-is-no-index-configured-for-searching/377841 "2025-05-09T13:33:13Z")
Hi, we try running a wp-cli command to run a sync to index our existing content in Elasticsearch, using Elasticpress plugin. We are using the following WP-CLI command: wp elasticpress sync --force --setup --show-errors… --- ## [Kibana 9.0 - "vibrant color palette" unusable](https://discuss.elastic.co/t/kibana-9-0-vibrant-color-palette-unusable/377821)
**Author:** [@allatrue](https://discuss.elastic.co/u/allatrue)\ **Replies:** 5\ **Last updated:** [May 9, 2025, 12:07pm UTC](https://discuss.elastic.co/t/kibana-9-0-vibrant-color-palette-unusable/377821 "2025-05-09T12:07:11Z")
Hi everybody, I would like to ask the designers of the new "vibrant color palette", if they ever tested it with Lens visualizations? Very useful function of highlighting the line when hovering it in legend, works now on… --- ## [Kibana 8.7.0 rebooting](https://discuss.elastic.co/t/kibana-8-7-0-rebooting/377916)
**Author:** [@Quam](https://discuss.elastic.co/u/Quam)\ **Replies:** 4\ **Last updated:** [May 9, 2025, 12:01pm UTC](https://discuss.elastic.co/t/kibana-8-7-0-rebooting/377916 "2025-05-09T12:01:13Z")
Hello guys, I'm trying to deploy kibana v8.7.0 on k8s in order to monitore third-party elastic instance v8.7 the pod keep rebooting with the same logs... \[2025-05-07T14:46:48.622+00:00\]\[INFO \]\[plugins-service\] Plugin … --- ## [Service Map showing duplicate Connection between two services](https://discuss.elastic.co/t/service-map-showing-duplicate-connection-between-two-services/377988)
**Author:** [@Aritra\_Dutta](https://discuss.elastic.co/u/Aritra_Dutta)\ **Replies:** 0\ **Last updated:** [May 9, 2025, 11:26am UTC](https://discuss.elastic.co/t/service-map-showing-duplicate-connection-between-two-services/377988 "2025-05-09T11:26:01Z")
version: v8.17.3 setup Deployed on elastic cloud Services deployed on Kubernetes Services instrumented with Opentelemetry Go Agent and kotel package (comes with frankz-go) Services Communicate via Redpanda (Kafka co… --- ## [How to send raw JSON queries with Elasticsearch Java Client 8](https://discuss.elastic.co/t/how-to-send-raw-json-queries-with-elasticsearch-java-client-8/377922)
**Author:** [@Daniel\_Abadi](https://discuss.elastic.co/u/Daniel_Abadi)\ **Replies:** 2\ **Last updated:** [May 9, 2025, 10:48am UTC](https://discuss.elastic.co/t/how-to-send-raw-json-queries-with-elasticsearch-java-client-8/377922 "2025-05-09T10:48:42Z")
Hello, I’m currently migrating from Elasticsearch 7 to 8 in a Java application, and I’m running into issues when trying to perform searches using raw JSON queries. In Elasticsearch 7, I used the Low Level REST Client l… --- ## [Fleet Server preventing Elasticsearch node shutdown due to persistent HTTP connections](https://discuss.elastic.co/t/fleet-server-preventing-elasticsearch-node-shutdown-due-to-persistent-http-connections/376934)
**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\ **Replies:** 4\ **Last updated:** [May 9, 2025, 1:02am UTC](https://discuss.elastic.co/t/fleet-server-preventing-elasticsearch-node-shutdown-due-to-persistent-http-connections/376934 "2025-05-09T01:02:03Z")
I'm encountering a reproducible issue where Fleet Server maintains persistent connections to Elasticsearch nodes in a way that prevents the nodes from shutting down cleanly. This causes 2–3 minute hangs during shutdown, … --- ## [Index template and index pattern](https://discuss.elastic.co/t/index-template-and-index-pattern/377897)
**Author:** [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\ **Replies:** 1\ **Last updated:** [May 8, 2025, 10:11pm UTC](https://discuss.elastic.co/t/index-template-and-index-pattern/377897 "2025-05-08T22:11:57Z")
Does an index template's index pattern apply to datastreams (if any) or to indexes attached to the datastream? --- ## [Kubernetes Integration - DNS Issue](https://discuss.elastic.co/t/kubernetes-integration-dns-issue/376772)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [April 4, 2025, 3:51am UTC](https://discuss.elastic.co/t/kubernetes-integration-dns-issue/376772 "2025-04-04T03:51:30Z")
Hello, I noticed part of the K8S integration is grabbing from: https://${env.NODE\_NAME}:10250 The issue is that this is dependent on DNS Resolution and leads to errors: \> error making http request: Get "https://\ **Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 7\ **Last updated:** [May 8, 2025, 8:05pm UTC](https://discuss.elastic.co/t/start-a-multi-node-cluster-with-docker-compose-example-does-not-work-on-8-18-0/377689 "2025-05-08T20:05:32Z") I followed the instructions in "Start a multi-node cluster with Docker Compose" to create a Elasticsearch/Kibana cluster on my machine. The Elasticsearch nodes start but cannot be connected to. My docker-compose.yml is … --- ## [ESXI Logs integration request](https://discuss.elastic.co/t/esxi-logs-integration-request/377946)
**Author:** [@Knight7](https://discuss.elastic.co/u/Knight7)\ **Replies:** 4\ **Last updated:** [May 8, 2025, 5:27pm UTC](https://discuss.elastic.co/t/esxi-logs-integration-request/377946 "2025-05-08T17:27:27Z")
Hello, It would be nice if there is a custom integration for the Vmware ESXI logs. --- ## [Multi-Tenant](https://discuss.elastic.co/t/multi-tenant/377944)
**Author:** [@khaled7](https://discuss.elastic.co/u/khaled7)\ **Replies:** 3\ **Last updated:** [May 8, 2025, 2:11pm UTC](https://discuss.elastic.co/t/multi-tenant/377944 "2025-05-08T14:11:43Z")
hello Elastic Team I am detailing my scenario here. iam working with many customer wihth ELK and want a free open source solution to make multi-tenant monitor all those clients from one view internal in my company all… --- ## [S3 snapshot causing nodes to drop from cluster](https://discuss.elastic.co/t/s3-snapshot-causing-nodes-to-drop-from-cluster/377918)
**Author:** [@twilson](https://discuss.elastic.co/u/twilson)\ **Replies:** 8\ **Last updated:** [May 8, 2025, 2:07pm UTC](https://discuss.elastic.co/t/s3-snapshot-causing-nodes-to-drop-from-cluster/377918 "2025-05-08T14:07:36Z")
Since upgrading to 8.17.2, and even now on 8.18.0, snapshots to S3 are causing nodes to drop out of the cluster due to the 'followers check retry count exceeded' error. This seems to be happening only on cold data nodes… --- ## [Elastic refuses to balance disks, trying to send data to full cold disks, why?](https://discuss.elastic.co/t/elastic-refuses-to-balance-disks-trying-to-send-data-to-full-cold-disks-why/377923)
**Author:** [@Dave\_Houser](https://discuss.elastic.co/u/Dave_Houser)\ **Replies:** 4\ **Last updated:** [May 8, 2025, 12:56pm UTC](https://discuss.elastic.co/t/elastic-refuses-to-balance-disks-trying-to-send-data-to-full-cold-disks-why/377923 "2025-05-08T12:56:58Z")
We found a couple weeks ago that our 3 node cold storage was filling up. It got to ~90% full. We added 3 more cold nodes around this time before it got past ~90% full. After doing so elastic slowly started removing data … --- ## [Updating the license will clear the query cache](https://discuss.elastic.co/t/updating-the-license-will-clear-the-query-cache/377935)
**Author:** [@hanbj](https://discuss.elastic.co/u/hanbj)\ **Replies:** 0\ **Last updated:** [May 8, 2025, 11:15am UTC](https://discuss.elastic.co/t/updating-the-license-will-clear-the-query-cache/377935 "2025-05-08T11:15:01Z")
Due to the expiration of the license, a large number of clusters' licenses were updated at once today. Some clusters in the production environment experienced an increase in query time. Through monitoring, it was found t… --- ## [Prevent standard tokenizer from tokenizing \ token per character](https://discuss.elastic.co/t/prevent-standard-tokenizer-from-tokenizing-ideographic-token-per-character/377797)
**Author:** [@yukha-dw](https://discuss.elastic.co/u/yukha-dw)\ **Replies:** 1\ **Last updated:** [May 8, 2025, 9:56am UTC](https://discuss.elastic.co/t/prevent-standard-tokenizer-from-tokenizing-ideographic-token-per-character/377797 "2025-05-08T09:56:32Z")
Hello, is it possible to use N-Gram Filter on each \ phrase just like how it works on \? For example (min\_gram=max\_gram=2 & preserve\_original): Input: "我 爱 青苹果" Desired Output: "我", "爱", "青苹", "苹果",… --- ## [Use days\_of\_month](https://discuss.elastic.co/t/use-days-of-month/377907)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [May 8, 2025, 9:55am UTC](https://discuss.elastic.co/t/use-days-of-month/377907 "2025-05-08T09:55:51Z")
Hi I would like to create line graph in Lens and use sum(price)/days\_of\_month how do I get days\_of\_month ? which is 31,28,31,30 etc.. --- ## [Can I delete logs-generic-default?](https://discuss.elastic.co/t/can-i-delete-logs-generic-default/377927)
**Author:** [@Vaishnavi\_Batgeri](https://discuss.elastic.co/u/Vaishnavi_Batgeri)\ **Replies:** 1\ **Last updated:** [May 8, 2025, 6:26am UTC](https://discuss.elastic.co/t/can-i-delete-logs-generic-default/377927 "2025-05-08T06:26:08Z")
If I delete logs-generic-default indices, will it impact application or infrastructure data, as I'm facing a storage issue? --- ## [Elastic Search Unrestricted Information Disclosure Vulnerability "version 7.16.2"](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability-version-7-16-2/377920)
**Author:** [@AhmedHassan](https://discuss.elastic.co/u/AhmedHassan)\ **Replies:** 1\ **Last updated:** [May 8, 2025, 4:24am UTC](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability-version-7-16-2/377920 "2025-05-08T04:24:32Z")
We are using Elasticsearch version 7.16.2 and is coming out with the finding "Elasticsearch Unrestricted Information Disclosure Vulnerability". For reference Report URL :Elasticsearch Unrestricted Access Information Dis… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=70) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=72)