# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=73 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 74 --- ## [Trigger Action for Every Document](https://discuss.elastic.co/t/trigger-action-for-every-document/377802)
**Author:** [@evanmantan](https://discuss.elastic.co/u/evanmantan)\ **Replies:** 0\ **Last updated:** [May 5, 2025, 9:06am UTC](https://discuss.elastic.co/t/trigger-action-for-every-document/377802 "2025-05-05T09:06:56Z")
Hi, So I want to be able to send an alert for every document that matches the query during check intervals. And I've read from a post back in 2021 about Kibana's not having the feature to trigger action/send alert for e… --- ## [How to send proxy log to ELK? USE LOGSTASH?](https://discuss.elastic.co/t/how-to-send-proxy-log-to-elk-use-logstash/377774)
**Author:** [@jt2023](https://discuss.elastic.co/u/jt2023)\ **Replies:** 3\ **Last updated:** [May 5, 2025, 5:03am UTC](https://discuss.elastic.co/t/how-to-send-proxy-log-to-elk-use-logstash/377774 "2025-05-05T05:03:38Z")
How to send proxy log to ELK ? may I have details sharing ? Thanks --- ## [Exclude symbol "-" does not work to filter out indices](https://discuss.elastic.co/t/exclude-symbol-does-not-work-to-filter-out-indices/377787)
**Author:** [@ChatLee](https://discuss.elastic.co/u/ChatLee)\ **Replies:** 0\ **Last updated:** [May 5, 2025, 2:01am UTC](https://discuss.elastic.co/t/exclude-symbol-does-not-work-to-filter-out-indices/377787 "2025-05-05T02:01:19Z")
Hi teams, I want to setup some snapshot settings, and I want to only back up indices those name start with non-dot, I tried with pattern " -.\* " and " \*, -.\* ", but found these patterns does not work. I tried to setup … --- ## [It's posible to create an Advanced Search page in WP powered by Elastic Search](https://discuss.elastic.co/t/its-posible-to-create-an-advanced-search-page-in-wp-powered-by-elastic-search/366788)
**Author:** [@Flavius\_V](https://discuss.elastic.co/u/Flavius_V)\ **Replies:** 1\ **Last updated:** [September 19, 2024, 5:38pm UTC](https://discuss.elastic.co/t/its-posible-to-create-an-advanced-search-page-in-wp-powered-by-elastic-search/366788 "2024-09-19T17:38:52Z")
Hi Team, I have no experience with Elastic Search, I have read a lot about it, and I found it awesome. I would like to adopt and integtate Elastic Search in a content website which is based on Wordpress. The website ru… --- ## [Elastic Agent not collecting last logs of suddenly stopped container](https://discuss.elastic.co/t/elastic-agent-not-collecting-last-logs-of-suddenly-stopped-container/377783)
**Author:** [@incjqye6\_amway](https://discuss.elastic.co/u/incjqye6_amway)\ **Replies:** 0\ **Last updated:** [May 4, 2025, 8:05am UTC](https://discuss.elastic.co/t/elastic-agent-not-collecting-last-logs-of-suddenly-stopped-container/377783 "2025-05-04T08:05:36Z")
I am using Fleet agent policy with kubernetes integration to collect logs from conatiners running in EKS cluster. The elastic agent are running as standalone DaemonSets in this cluster and all agent configurations are ma… --- ## [Jdk is damaged when running elacticsearch in Mac](https://discuss.elastic.co/t/jdk-is-damaged-when-running-elacticsearch-in-mac/377582)
**Author:** [@Alakser](https://discuss.elastic.co/u/Alakser)\ **Replies:** 5\ **Last updated:** [May 3, 2025, 9:56pm UTC](https://discuss.elastic.co/t/jdk-is-damaged-when-running-elacticsearch-in-mac/377582 "2025-05-03T21:56:22Z")
Hello forum, I just recently installed elasticsearch on a MacBook. After a successfully unpacking and trying to run bin/elasticsearch I get the following popup message "idk is damaged". I have tried: xattr -d com.app… --- ## [Filebeat container not returning any logs or errors](https://discuss.elastic.co/t/filebeat-container-not-returning-any-logs-or-errors/377779)
**Author:** [@gewo](https://discuss.elastic.co/u/gewo)\ **Replies:** 0\ **Last updated:** [May 3, 2025, 7:45pm UTC](https://discuss.elastic.co/t/filebeat-container-not-returning-any-logs-or-errors/377779 "2025-05-03T19:45:50Z")
Hi, I want filebeat to get all logs from containers and push them to elastic When I spin up my compose it starts but does nothing. The container logs from filebeat are compleatly empty. I know that it reads the filebe… --- ## [How to send both single line and multiple line to output](https://discuss.elastic.co/t/how-to-send-both-single-line-and-multiple-line-to-output/377777)
**Author:** [@MelasticSan](https://discuss.elastic.co/u/MelasticSan)\ **Replies:** 1\ **Last updated:** [May 3, 2025, 7:16pm UTC](https://discuss.elastic.co/t/how-to-send-both-single-line-and-multiple-line-to-output/377777 "2025-05-03T19:16:23Z")
{"time":"2025-05-03T05:30:47+0000","pid":"1012395","level":"info"...... {"time":"2025-05-03T05:30:47+0000","pid":"1012395","level":"debug"...... All lines in the input files start like above and some are single line and… --- ## [Nodes regularly out of heap](https://discuss.elastic.co/t/nodes-regularly-out-of-heap/377704)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 1\ **Last updated:** [May 3, 2025, 4:05am UTC](https://discuss.elastic.co/t/nodes-regularly-out-of-heap/377704 "2025-05-03T04:05:51Z")
Hi, Recently we are experiencing unexpected elasticsearch node restarts with Terminating due to java.lang.OutOfMemoryError: Java heap space. We do not exactly know why this happens and what is causing it. We have been … --- ## [Can we change position of drop list position created by signal?](https://discuss.elastic.co/t/can-we-change-position-of-drop-list-position-created-by-signal/377766)
**Author:** [@norfolk](https://discuss.elastic.co/u/norfolk)\ **Replies:** 0\ **Last updated:** [May 2, 2025, 6:01pm UTC](https://discuss.elastic.co/t/can-we-change-position-of-drop-list-position-created-by-signal/377766 "2025-05-02T18:01:46Z")
Hello, Suppose a droplist was created by following: { "$schema": "https://vega.github.io/schema/vega/v4.json", "signals": \[ { "name": "selected\_team", "value": "", "bind": { "input": "… --- ## [Kibana ESQL table give undifined errors when access by url or url is modified and reload](https://discuss.elastic.co/t/kibana-esql-table-give-undifined-errors-when-access-by-url-or-url-is-modified-and-reload/377144)
**Author:** [@Sereno\_Polveroso](https://discuss.elastic.co/u/Sereno_Polveroso)\ **Replies:** 3\ **Last updated:** [May 2, 2025, 12:45pm UTC](https://discuss.elastic.co/t/kibana-esql-table-give-undifined-errors-when-access-by-url-or-url-is-modified-and-reload/377144 "2025-05-02T12:45:16Z")
I've got this kind of errors when trying to share the view with some filters set by url. They happen randomly, but they consistently do once they happen the first time. Also once they happen, even if I remove the f… --- ## [Date Format for Monthly aggregated data table](https://discuss.elastic.co/t/date-format-for-monthly-aggregated-data-table/377667)
**Author:** [@nada.nasser](https://discuss.elastic.co/u/nada.nasser)\ **Replies:** 1\ **Last updated:** [May 2, 2025, 9:53am UTC](https://discuss.elastic.co/t/date-format-for-monthly-aggregated-data-table/377667 "2025-05-02T09:53:40Z")
using Kibana 7.17.15 I am creating a data table with a monthly bucket histogram on a date field. The date column is displayed as YYYY-MM-DD. I set the date field format in the index pattern as MMM YY, but it is still in… --- ## [Set new colors for the Default Color palette](https://discuss.elastic.co/t/set-new-colors-for-the-default-color-palette/377558)
**Author:** [@Robin\_Gorry](https://discuss.elastic.co/u/Robin_Gorry)\ **Replies:** 3\ **Last updated:** [May 2, 2025, 9:03am UTC](https://discuss.elastic.co/t/set-new-colors-for-the-default-color-palette/377558 "2025-05-02T09:03:15Z")
Using: v 8.17.4 I would like to create a new color palette or update the default color palette with my clients brand colors. I can see I can edit a panel (pie chart) and click on the Color mapping. I can choose from th… --- ## [Filebeat HTTPJSON - Dynamic query in body](https://discuss.elastic.co/t/filebeat-httpjson-dynamic-query-in-body/376707)
**Author:** [@Jannus\_C](https://discuss.elastic.co/u/Jannus_C)\ **Replies:** 13\ **Last updated:** [May 2, 2025, 7:55am UTC](https://discuss.elastic.co/t/filebeat-httpjson-dynamic-query-in-body/376707 "2025-05-02T07:55:56Z")
Hello, I'm testing filebeat + httpjson against an elasticsearch instance. I'm able to retrieve all the data via scrolling using a "fixed query", - type: httpjson config\_version: 2 interval: 5m request.url: https… --- ## [OOM since 8.16.1 with openjdk23](https://discuss.elastic.co/t/oom-since-8-16-1-with-openjdk23/371395)
**Author:** [@ALIT](https://discuss.elastic.co/u/ALIT)\ **Replies:** 32\ **Last updated:** [May 2, 2025, 7:14am UTC](https://discuss.elastic.co/t/oom-since-8-16-1-with-openjdk23/371395 "2025-05-02T07:14:30Z")
Hi, after upgrading from 8.15.1 to 8.16.1, all machines in two of our four ES clusters are running out of Memory after 7-12 hours. Our current setup for all clusters is: System: Ubuntu 22 3 master 3 data nodes (64GB… --- ## [Kibana not starting after upgrade to 8.17](https://discuss.elastic.co/t/kibana-not-starting-after-upgrade-to-8-17/377571)
**Author:** [@redpebble](https://discuss.elastic.co/u/redpebble)\ **Replies:** 4\ **Last updated:** [May 1, 2025, 6:35am UTC](https://discuss.elastic.co/t/kibana-not-starting-after-upgrade-to-8-17/377571 "2025-05-01T06:35:23Z")
Hello everybody Since upgrading from 8.15.2 to 8.17.0 I've been unable to get Kibana to start, I've looked at other posts related to this but have been unable to resolve the issue. Unfortunately I didn't use the upgrad… --- ## [Combining pinned and query rules in Elasticsearch DSL – is it possible?](https://discuss.elastic.co/t/combining-pinned-and-query-rules-in-elasticsearch-dsl-is-it-possible/377265)
**Author:** [@Shell\_Dias](https://discuss.elastic.co/u/Shell_Dias)\ **Replies:** 4\ **Last updated:** [May 2, 2025, 2:29am UTC](https://discuss.elastic.co/t/combining-pinned-and-query-rules-in-elasticsearch-dsl-is-it-possible/377265 "2025-05-02T02:29:06Z")
Is it possible to use both pinned query and query rules together in the same DSL request? I have a case where some documents need to be permanently pinned at the top (through rules), but there are dynamic situations wher… --- ## [ES|QL command join](https://discuss.elastic.co/t/es-ql-command-join/363425)
**Author:** [@nspaniol](https://discuss.elastic.co/u/nspaniol)\ **Replies:** 2\ **Last updated:** [May 1, 2025, 1:14pm UTC](https://discuss.elastic.co/t/es-ql-command-join/363425 "2025-05-01T13:14:35Z")
Hello Team, I am new to the environment Kibana and used some commands for a few weeks. My question today is about the ES|QL language. There are several types of commands, written down in the Docs. Through my lecture, … --- ## [8.17.3 canvas issue](https://discuss.elastic.co/t/8-17-3-canvas-issue/377100)
**Author:** [@Taras\_Mikityuk](https://discuss.elastic.co/u/Taras_Mikityuk)\ **Replies:** 2\ **Last updated:** [May 1, 2025, 5:47am UTC](https://discuss.elastic.co/t/8-17-3-canvas-issue/377100 "2025-05-01T05:47:07Z")
Hi everyone, After updating Kibana to version 8.17.3, we've encountered an issue with generating PDF reports from Canvas—all text elements are missing in the output. Steps to Reproduce: Create a new Canvas. Add any te… --- ## [Is SNMP PDU varbinds order preserved by the snmptrap plugin?](https://discuss.elastic.co/t/is-snmp-pdu-varbinds-order-preserved-by-the-snmptrap-plugin/377649)
**Author:** [@NickyJohn](https://discuss.elastic.co/u/NickyJohn)\ **Replies:** 2\ **Last updated:** [May 1, 2025, 2:01am UTC](https://discuss.elastic.co/t/is-snmp-pdu-varbinds-order-preserved-by-the-snmptrap-plugin/377649 "2025-05-01T02:01:03Z")
Doesn't seem to... eg v 2c linkUp rubydebug output shown here... https://www.rfc-editor.org/rfc/rfc3416#page-21 4.2.6. The SNMPv2-Trap-PDU ... The first \*\* two variable bindings\*\* in the variable binding list of … --- ## [Functional filter on ES v 9.0.0, not working on v 8.18.0](https://discuss.elastic.co/t/functional-filter-on-es-v-9-0-0-not-working-on-v-8-18-0/377692)
**Author:** [@dave\_espinosa\_qs](https://discuss.elastic.co/u/dave_espinosa_qs)\ **Replies:** 1\ **Last updated:** [April 30, 2025, 11:55pm UTC](https://discuss.elastic.co/t/functional-filter-on-es-v-9-0-0-not-working-on-v-8-18-0/377692 "2025-04-30T23:55:21Z")
Hello everyone, After checking this post, I implemented a filter (in a v 9.0.0 Elasticsearch infrastructure) which looks as follows: \[ { "bool": { "should": \[ {"term": {"metadata… --- ## [Loading a json file to enrich data](https://discuss.elastic.co/t/loading-a-json-file-to-enrich-data/377683)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 4\ **Last updated:** [April 30, 2025, 9:21pm UTC](https://discuss.elastic.co/t/loading-a-json-file-to-enrich-data/377683 "2025-04-30T21:21:44Z")
Hello everyone, I am working with Logstash UDP Input Plugin and Elasticsearch output plugin. I need to load a json file containing information that I need to enrich the data sent to elastic matching same criteria. Wha… --- ## [Multilevel Vega Visualization with kibanaAddFilter](https://discuss.elastic.co/t/multilevel-vega-visualization-with-kibanaaddfilter/377448)
**Author:** [@m.hanna](https://discuss.elastic.co/u/m.hanna)\ **Replies:** 1\ **Last updated:** [April 30, 2025, 8:46pm UTC](https://discuss.elastic.co/t/multilevel-vega-visualization-with-kibanaaddfilter/377448 "2025-04-30T20:46:49Z")
I am dipping my toes back into Vega. I am following the code posted at Adding filter capabilities to Vega Sankey visualizations in Kibana - Elasticsearch Labs to create a multi-level Vega Sankey with kibanaAddFilter. The… --- ## [Timestamp of last attemp of ingestion](https://discuss.elastic.co/t/timestamp-of-last-attemp-of-ingestion/377681)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 4\ **Last updated:** [April 30, 2025, 4:44pm UTC](https://discuss.elastic.co/t/timestamp-of-last-attemp-of-ingestion/377681 "2025-04-30T16:44:57Z")
Hello everyone, I am working with Logstash UDP Input Plugin and Elasticsearch output plugin and using Persisted Queues. I noticed that the @timestamp I receive from Logstash into Elasticsearch, even in the event of int… --- ## [Renaming of indices during Elastic Search Upgrade](https://discuss.elastic.co/t/renaming-of-indices-during-elastic-search-upgrade/377680)
**Author:** [@Kavya\_2708](https://discuss.elastic.co/u/Kavya_2708)\ **Replies:** 4\ **Last updated:** [April 30, 2025, 3:53pm UTC](https://discuss.elastic.co/t/renaming-of-indices-during-elastic-search-upgrade/377680 "2025-04-30T15:53:54Z")
We are upgrading our elastic-search , kibana cluster from 7.17 to 8.17. As part of the upgrade, we are required to reindex the existing indices. During this process it is renaming the indices. ex. it is renaming aps to r… --- ## [Management of illegal characters](https://discuss.elastic.co/t/management-of-illegal-characters/377159)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 9\ **Last updated:** [April 30, 2025, 2:56pm UTC](https://discuss.elastic.co/t/management-of-illegal-characters/377159 "2025-04-30T14:56:40Z")
Hello Everyone, I am in the process of converting a "in-house" Delphi application that receives an XML string over udp port and send it to an elasticsearch instance, doing a conversion from XML to JSON and sending it th… --- ## [\[elasticsearch.server\]\[WARN\] caught exception while handling client http traffic, closing connection Netty4HttpChannel](https://discuss.elastic.co/t/elasticsearch-server-warn-caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel/365301)
**Author:** [@ETFJeff](https://discuss.elastic.co/u/ETFJeff)\ **Replies:** 4\ **Last updated:** [April 30, 2025, 2:41pm UTC](https://discuss.elastic.co/t/elasticsearch-server-warn-caught-exception-while-handling-client-http-traffic-closing-connection-netty4httpchannel/365301 "2025-04-30T14:41:55Z")
Hi, I get the following error in the cluster log about every hour. \[elasticsearch.server\]\[WARN\] caught exception while handling client http traffic, closing connection Netty4HttpChannel Any suggestions on where to sta… --- ## [Completely lost on kibana](https://discuss.elastic.co/t/completely-lost-on-kibana/377675)
**Author:** [@Personne\_58](https://discuss.elastic.co/u/Personne_58)\ **Replies:** 0\ **Last updated:** [April 30, 2025, 2:41pm UTC](https://discuss.elastic.co/t/completely-lost-on-kibana/377675 "2025-04-30T14:41:30Z")
Hello, let me explain briefly. I installed Elasticsearch and Kibana on Kali Linux via WSL2 (Windows 10). I have over 200GB of text files that I would like to index (files located in a Kali Linux folder and then in thousa… --- ## [Impossible to uninstall Elastic Endpoint](https://discuss.elastic.co/t/impossible-to-uninstall-elastic-endpoint/351717)
**Author:** [@BlueNick](https://discuss.elastic.co/u/BlueNick)\ **Replies:** 25\ **Last updated:** [April 30, 2025, 2:11pm UTC](https://discuss.elastic.co/t/impossible-to-uninstall-elastic-endpoint/351717 "2025-04-30T14:11:14Z")
Hello, I've uninstalled the elastic agent on a windows machine successfully, the uninstall command runs successfully but, the Elastic Endpoint Folder is still present. I've tried to delete manually the folder with an … --- ## [Kibana Index Threshold Alert doesn't report 0 document](https://discuss.elastic.co/t/kibana-index-threshold-alert-doesnt-report-0-document/360526)
**Author:** [@wijamw](https://discuss.elastic.co/u/wijamw)\ **Replies:** 10\ **Last updated:** [April 30, 2025, 12:58pm UTC](https://discuss.elastic.co/t/kibana-index-threshold-alert-doesnt-report-0-document/360526 "2025-04-30T12:58:43Z")
Hello everyone, This issue should be resolved according to this post I am using Elastic Cloud Stack v8.11.4. I tried to do it but it doesn't alert me even though one of my nodes is off. I tried to filter only my o… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=72) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=74)