# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=719 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 720 --- ## [Index corrupt exception](https://discuss.elastic.co/t/index-corrupt-exception/319883)
**Author:** [@JAYALAKSHMI](https://discuss.elastic.co/u/JAYALAKSHMI)\ **Replies:** 4\ **Last updated:** [November 28, 2022, 7:52am UTC](https://discuss.elastic.co/t/index-corrupt-exception/319883 "2022-11-28T07:52:09Z")
Hi, We are seeing the Filesystem corruption issue. Due to this two shards are not accessible on the cluster. There is no issue from the hardware end and all other shards are accessible and available. Error: "store\_exc… --- ## [Unable to initialize fleet v8.5](https://discuss.elastic.co/t/unable-to-initialize-fleet-v8-5/319905)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 7:31am UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-v8-5/319905 "2022-11-28T07:31:27Z")
I upgraded from 8.4 to 8.5 and now getting this error --- ## [Auditd module is not converting process arg hexadecimal to ASCII](https://discuss.elastic.co/t/auditd-module-is-not-converting-process-arg-hexadecimal-to-ascii/319909)
**Author:** [@LucianoHanna](https://discuss.elastic.co/u/LucianoHanna)\ **Replies:** 0\ **Last updated:** [November 28, 2022, 6:12am UTC](https://discuss.elastic.co/t/auditd-module-is-not-converting-process-arg-hexadecimal-to-ascii/319909 "2022-11-28T06:12:23Z")
Hi! I am getting "6563686F205C226172672068657820656E636F6465645C22" where should be "echo "arg hex encoded"". It's a problem with my configuration or it's a problem with auditd module? P.S.: I have tested with ausearc… --- ## [Unable to start ElasticSearch in Windows 11](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows-11/319740)
**Author:** [@yuvrajbset](https://discuss.elastic.co/u/yuvrajbset)\ **Replies:** 2\ **Last updated:** [November 28, 2022, 4:46am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows-11/319740 "2022-11-28T04:46:27Z")
Hello ES Team, I am unable to run the Elasticsearch in my web browser after installation. The browser returns a message "ERR\_EMPTY\_RESPONSE" after access the 9200 port after running the elasticsearch I receive this mess… --- ## [How to parse glastopf honeypot json logs in logstash?](https://discuss.elastic.co/t/how-to-parse-glastopf-honeypot-json-logs-in-logstash/319900)
**Author:** [@mr\_ka](https://discuss.elastic.co/u/mr_ka)\ **Replies:** 0\ **Last updated:** [November 28, 2022, 3:01am UTC](https://discuss.elastic.co/t/how-to-parse-glastopf-honeypot-json-logs-in-logstash/319900 "2022-11-28T03:01:15Z")
I have a raw data in json format that I want to visualize in Kibana, but I'm having trouble parsing the data in logstash, previously I was able to visualize raw data for honeypot dionaea and cowrie. please help me in doi… --- ## [Does NLP in ElasticSearch8.5.1 support GPU?](https://discuss.elastic.co/t/does-nlp-in-elasticsearch8-5-1-support-gpu/319898)
**Author:** [@xy\_xia](https://discuss.elastic.co/u/xy_xia)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 4:00am UTC](https://discuss.elastic.co/t/does-nlp-in-elasticsearch8-5-1-support-gpu/319898 "2022-11-28T04:00:41Z")
Hi, Is it possible to use GPU when I'm doing inference with nlp models like bert in elasticsearch8. Is there any relevant parameter setting to use GPU or CPU? --- ## [Base64 decode issue](https://discuss.elastic.co/t/base64-decode-issue/319874)
**Author:** [@Rajesh\_R](https://discuss.elastic.co/u/Rajesh_R)\ **Replies:** 2\ **Last updated:** [November 28, 2022, 2:55am UTC](https://discuss.elastic.co/t/base64-decode-issue/319874 "2022-11-28T02:55:18Z")
Hi Team, Does Anyone know how to decode base64 in logstash? Logfile : {"ID":"11166946081959","Type":"LOG","pID":"rajesh.r@gmail.com","Interface":"Offboarding","payload": "PD94bWzCoHZlcnNpb249IjEuMCLCoGVuY29kaW5nPSJJU08… --- ## [Why does my Elastic 7.10.2 have automatic report generation and no automatic sending function?](https://discuss.elastic.co/t/why-does-my-elastic-7-10-2-have-automatic-report-generation-and-no-automatic-sending-function/318718)
**Author:** [@qiang\_tang](https://discuss.elastic.co/u/qiang_tang)\ **Replies:** 2\ **Last updated:** [November 28, 2022, 2:06am UTC](https://discuss.elastic.co/t/why-does-my-elastic-7-10-2-have-automatic-report-generation-and-no-automatic-sending-function/318718 "2022-11-28T02:06:51Z")
Without this function "From the Kibana toolbar, click Share, then select PDF Reports." The URL cannot be generated, but the report can be automatically generated. Is there any other way to automatically send the report … --- ## [How to increase the number of shards or replicas dynamically in single race on esrally](https://discuss.elastic.co/t/how-to-increase-the-number-of-shards-or-replicas-dynamically-in-single-race-on-esrally/319773)
**Author:** [@qksjdhi1212](https://discuss.elastic.co/u/qksjdhi1212)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 12:31am UTC](https://discuss.elastic.co/t/how-to-increase-the-number-of-shards-or-replicas-dynamically-in-single-race-on-esrally/319773 "2022-11-28T00:31:54Z")
I planned to set cluster and increase the number of shards or replicas to optimize it testing the cluster with esrally Is there any way to start one shard and increase to n shards on single esrally race +) I found foll… --- ## [Creating http.p12,tranport.p12 from a signed CSR for Elasticsearch](https://discuss.elastic.co/t/creating-http-p12-tranport-p12-from-a-signed-csr-for-elasticsearch/319680)
**Author:** [@redsearch2022](https://discuss.elastic.co/u/redsearch2022)\ **Replies:** 4\ **Last updated:** [November 27, 2022, 11:28pm UTC](https://discuss.elastic.co/t/creating-http-p12-tranport-p12-from-a-signed-csr-for-elasticsearch/319680 "2022-11-27T23:28:57Z")
After getting the CSR signed, how do I create the http.p12 and transport.p12 needed for Elasticsearch xpack.security.http.ssl: enabled: true keystore.path: certs/http.p12 xpack.security.transport.ssl: enabled: tr… --- ## [Connect filebeat to ELK](https://discuss.elastic.co/t/connect-filebeat-to-elk/319482)
**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\ **Replies:** 18\ **Last updated:** [November 27, 2022, 6:31pm UTC](https://discuss.elastic.co/t/connect-filebeat-to-elk/319482 "2022-11-27T18:31:05Z")
Hello! Could you provide link to connect filebeat to logstash ? jboss logs will be transmitted Thank you --- ## [How to exclude keys by multi-terms/composite aggregations](https://discuss.elastic.co/t/how-to-exclude-keys-by-multi-terms-composite-aggregations/319881)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 0\ **Last updated:** [November 27, 2022, 1:29pm UTC](https://discuss.elastic.co/t/how-to-exclude-keys-by-multi-terms-composite-aggregations/319881 "2022-11-27T13:29:32Z")
Hi, I am writing an composite aggregation in Elasticsearch like the following: POST family\_predicted\_data/\_search { "query": { "bool": { "filter": \[ { "terms": { "query\_id": \[ … --- ## [Enrich policy execution interval in Elasticsearch 8.5](https://discuss.elastic.co/t/enrich-policy-execution-interval-in-elasticsearch-8-5/319863)
**Author:** [@Jan\_lindroos](https://discuss.elastic.co/u/Jan_lindroos)\ **Replies:** 5\ **Last updated:** [November 27, 2022, 1:05pm UTC](https://discuss.elastic.co/t/enrich-policy-execution-interval-in-elasticsearch-8-5/319863 "2022-11-27T13:05:15Z")
Hi, the elastic docs for 8.5 says that by default the execution policies are executed every 15 minutes, but as far as I can see from the timestamp of the enrich index, the policy has not been executed after I initially e… --- ## [Locating relevant build instructions for ELK over LAN](https://discuss.elastic.co/t/locating-relevant-build-instructions-for-elk-over-lan/319853)
**Author:** [@steves](https://discuss.elastic.co/u/steves)\ **Replies:** 8\ **Last updated:** [November 26, 2022, 9:27pm UTC](https://discuss.elastic.co/t/locating-relevant-build-instructions-for-elk-over-lan/319853 "2022-11-26T21:27:12Z")
Hi all, I've been doing a number of installs towards getting a fully working ELK system and I've not yet gotten to the L part. In the end I'm trying to end up with is a MySQL db search set up that is accessible over the… --- ## [Is it possible to create a stopword filter, when using tokenizer = " keyword"?](https://discuss.elastic.co/t/is-it-possible-to-create-a-stopword-filter-when-using-tokenizer-keyword/319865)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 0\ **Last updated:** [November 26, 2022, 6:31pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-stopword-filter-when-using-tokenizer-keyword/319865 "2022-11-26T18:31:20Z")
Right now, I'm able to create a working stopword filter in the following way. company\_name\_stopword = \["inc","corp"\] \_company\_name\_stopword\_filter = dsl.token\_filter("\_company\_name\_stopword\_filter", type="stop", … --- ## [Unable to Install Fleet Server - EOF](https://discuss.elastic.co/t/unable-to-install-fleet-server-eof/319847)
**Author:** [@tmeuze](https://discuss.elastic.co/u/tmeuze)\ **Replies:** 8\ **Last updated:** [November 26, 2022, 6:08pm UTC](https://discuss.elastic.co/t/unable-to-install-fleet-server-eof/319847 "2022-11-26T18:08:16Z")
Hello, I'm hitting a wall trying to install Fleet Server on the same host as my ELK stack (v8.5.2). The result is always the same: Elastic Agent will be installed at /opt/Elastic/Agent and will run as a service. Do you… --- ## [Logging information is displayed in the wrong index](https://discuss.elastic.co/t/logging-information-is-displayed-in-the-wrong-index/319828)
**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\ **Replies:** 8\ **Last updated:** [November 26, 2022, 5:43pm UTC](https://discuss.elastic.co/t/logging-information-is-displayed-in-the-wrong-index/319828 "2022-11-26T17:43:54Z")
Hello, I have two conf files with different indexes in the "/etc/logstash/conf.d/" folder. These are as follows: root@dsme01:~# cat /etc/logstash/conf.d/02-snmp.conf input { snmp { tables =\> \[{ "name" =\> "i… --- ## [Filebeat apache module not collecting any logs](https://discuss.elastic.co/t/filebeat-apache-module-not-collecting-any-logs/319832)
**Author:** [@cesq](https://discuss.elastic.co/u/cesq)\ **Replies:** 4\ **Last updated:** [November 26, 2022, 4:55pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-not-collecting-any-logs/319832 "2022-11-26T16:55:52Z")
So I have been playing around with collecting data using filebeat and sending it via sidecar to my graylog server. I wanted to try out the apache module, so I wrote the configuration for this (following the docs of cours… --- ## [Better way of displaying KNN results in Kibana?](https://discuss.elastic.co/t/better-way-of-displaying-knn-results-in-kibana/317104)
**Author:** [@freddyh](https://discuss.elastic.co/u/freddyh)\ **Replies:** 1\ **Last updated:** [October 31, 2022, 9:58am UTC](https://discuss.elastic.co/t/better-way-of-displaying-knn-results-in-kibana/317104 "2022-10-31T09:58:06Z")
I'm using the approximate kNN feature to index a vector for searching. With the previous exact kNN method I was able to craft a URL string for the script\_score query, but I haven't been able to replicate that with the ap… --- ## [Power of Kibana with complex aggregations that I usually run in Excel](https://discuss.elastic.co/t/power-of-kibana-with-complex-aggregations-that-i-usually-run-in-excel/319864)
**Author:** [@auato](https://discuss.elastic.co/u/auato)\ **Replies:** 0\ **Last updated:** [November 26, 2022, 4:37pm UTC](https://discuss.elastic.co/t/power-of-kibana-with-complex-aggregations-that-i-usually-run-in-excel/319864 "2022-11-26T16:37:41Z")
I'm used to processing a huge amount of raw data (typically hundreds of thousands of rows, whole months of data per day, per hour, per detail). In Excel I perform some aggregations and calculations as shown in picture an… --- ## [Elasticsearch Search Query returning only 10 hits](https://discuss.elastic.co/t/elasticsearch-search-query-returning-only-10-hits/319670)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [November 26, 2022, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-search-query-returning-only-10-hits/319670 "2022-11-26T10:32:23Z")
Hi Team, I have a search query which is extracting the data from metricbeat index and the output shows me the same hits as the size mentioned in the query. However, if i apply painless script to transform the data, it i… --- ## ["reason"=\>"failed to parse field \[column108\] of type \[date\] in document](https://discuss.elastic.co/t/reason-failed-to-parse-field-column108-of-type-date-in-document/319854)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 9:28pm UTC](https://discuss.elastic.co/t/reason-failed-to-parse-field-column108-of-type-date-in-document/319854 "2022-11-25T21:28:50Z")
Hello everyone, Everything was working normally until today where I see that the amount of logs visible from Kibana decreased from more than 1 million every 15 min to a few in that same time interval. The first thing I… --- ## [How can we roll up all the aggregation data indices have?](https://discuss.elastic.co/t/how-can-we-roll-up-all-the-aggregation-data-indices-have/317436)
**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\ **Replies:** 5\ **Last updated:** [October 31, 2022, 2:13am UTC](https://discuss.elastic.co/t/how-can-we-roll-up-all-the-aggregation-data-indices-have/317436 "2022-10-31T02:13:30Z")
How can we roll up all the aggregation data indices have? And If we do rollup of all the aggregation which indices have than will there be any difference between the size of actual and rollup indices or not? --- ## [Kubernetes filebeat not sending logs to secured Elasticsearch](https://discuss.elastic.co/t/kubernetes-filebeat-not-sending-logs-to-secured-elasticsearch/319334)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 8\ **Last updated:** [November 25, 2022, 6:53pm UTC](https://discuss.elastic.co/t/kubernetes-filebeat-not-sending-logs-to-secured-elasticsearch/319334 "2022-11-25T18:53:46Z")
Hello Team We are facing an issue where we have setup the filebeat on kubernetes environment it is working well if we setup the output without https but while setting the output as secured elasticsearch node i.e. https:… --- ## [Plainess regex enagle](https://discuss.elastic.co/t/plainess-regex-enagle/319845)
**Author:** [@Ryan\_Ng](https://discuss.elastic.co/u/Ryan_Ng)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 6:15pm UTC](https://discuss.elastic.co/t/plainess-regex-enagle/319845 "2022-11-25T18:15:32Z")
Hi, I have "script.painless.regex.enabled: true" at elasticsearch.yml and trying to use some additional regex features (Pattern.compile) in plainness but it still seems not to allow it. I am testing within the cloud whi… --- ## [How to parse \_jsonparsefailure from Laravel with backslashes](https://discuss.elastic.co/t/how-to-parse-jsonparsefailure-from-laravel-with-backslashes/319724)
**Author:** [@strazhnyk](https://discuss.elastic.co/u/strazhnyk)\ **Replies:** 8\ **Last updated:** [November 25, 2022, 4:36pm UTC](https://discuss.elastic.co/t/how-to-parse-jsonparsefailure-from-laravel-with-backslashes/319724 "2022-11-25T16:36:28Z")
Could anyone help me with the reason why logstash doesn't parse Laraver logs, please? Where is the core problem? Interesting that access logs and some errors log are parsed well. I can't understand why Laravel access lo… --- ## [Question about processors order in Filebeat](https://discuss.elastic.co/t/question-about-processors-order-in-filebeat/319820)
**Author:** [@andreycha](https://discuss.elastic.co/u/andreycha)\ **Replies:** 1\ **Last updated:** [November 25, 2022, 4:33pm UTC](https://discuss.elastic.co/t/question-about-processors-order-in-filebeat/319820 "2022-11-25T16:33:38Z")
Hi, I'm struggling to find an answer to a seemingly simple question: in which order are processors executed if I have them configured both in filebeat.yml (globally, not in the input) and in a Filebeat module? Unfortun… --- ## [Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/319776)
**Author:** [@Dmitriy\_Esin](https://discuss.elastic.co/u/Dmitriy_Esin)\ **Replies:** 9\ **Last updated:** [November 25, 2022, 4:21pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/319776 "2022-11-25T16:21:01Z")
Hi! I trying to install EFK stack into my k8s GCP cluster. I use official helm charts from https://helm.elastic.co: elasticsearch and kibana I use automatically generated certificates and credentials on deployment sta… --- ## [Index-wise conditions in Kibana watchers](https://discuss.elastic.co/t/index-wise-conditions-in-kibana-watchers/319622)
**Author:** [@ErGeek](https://discuss.elastic.co/u/ErGeek)\ **Replies:** 1\ **Last updated:** [November 25, 2022, 4:10pm UTC](https://discuss.elastic.co/t/index-wise-conditions-in-kibana-watchers/319622 "2022-11-25T16:10:15Z")
Hi All, We are using Elasticsearch watchers for getting the total data ingested from each index. But since we are having different ILMs for each index, we are not able to get the average data ingested for a particular d… --- ## [Calendar interval in Discover Kibana](https://discuss.elastic.co/t/calendar-interval-in-discover-kibana/319734)
**Author:** [@martinsbleu](https://discuss.elastic.co/u/martinsbleu)\ **Replies:** 2\ **Last updated:** [November 25, 2022, 3:45pm UTC](https://discuss.elastic.co/t/calendar-interval-in-discover-kibana/319734 "2022-11-25T15:45:18Z")
Hi team, I would like to know if there is a way to filter the data by a calendar interval. For exemple, we are 24/11 as of this post, if I want to filter data from last month (01/10 =\> 31/10), I had to use the specifi… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=718) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=720)