# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=752

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 753

---

## [Metricbeat - Error creating runner from config: failed to initialize condition](https://discuss.elastic.co/t/metricbeat-error-creating-runner-from-config-failed-to-initialize-condition/317449)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 4\
**Last updated:** [October 26, 2022, 7:02am UTC](https://discuss.elastic.co/t/metricbeat-error-creating-runner-from-config-failed-to-initialize-condition/317449 "2022-10-26T07:02:53Z")

</div>

Attempting to fetch various bean data from Jboss instances by means of jolokia some works others fail though I can fetch them with curl, any hints appreciated on what/which condition is missing or faulty, TIA! Getting e…

---

## [Unable to Register Azure Repo in Elasticsearch - 2.4.4](https://discuss.elastic.co/t/unable-to-register-azure-repo-in-elasticsearch-2-4-4/317466)

<div class="topic-metadata">

**Author:** [@Sandipan\_Deb](https://discuss.elastic.co/u/Sandipan_Deb)\
**Replies:** 3\
**Last updated:** [October 26, 2022, 6:56am UTC](https://discuss.elastic.co/t/unable-to-register-azure-repo-in-elasticsearch-2-4-4/317466 "2022-10-26T06:56:32Z")

</div>

I am getting below error while trying to register a repo in azure storage. It was working fine before 2-3 months. Suddenly it started giving error. Not able to understand what might have changed. Any help is appreciated…

---

## [Set Elastic Password during deployment](https://discuss.elastic.co/t/set-elastic-password-during-deployment/317457)

<div class="topic-metadata">

**Author:** [@Dum](https://discuss.elastic.co/u/Dum)\
**Replies:** 3\
**Last updated:** [October 26, 2022, 6:13am UTC](https://discuss.elastic.co/t/set-elastic-password-during-deployment/317457 "2022-10-26T06:13:35Z")

</div>

I am new to Elasticsearch and setting it up with an install.sh script. I am going through the documentation and can see that for docker installation, one can specify a password for the elastic user in the docker-compose …

---

## [Not able to get fields from multiple source indices](https://discuss.elastic.co/t/not-able-to-get-fields-from-multiple-source-indices/316412)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 4\
**Last updated:** [October 26, 2022, 5:22am UTC](https://discuss.elastic.co/t/not-able-to-get-fields-from-multiple-source-indices/316412 "2022-10-26T05:22:56Z")

</div>

Hi, I gave multiple indices in the 'indices' field of the enrich policy. But it is fetching values from one index only. Thanks

---

## [Approximate kNN total hits inconsistent](https://discuss.elastic.co/t/approximate-knn-total-hits-inconsistent/316901)

<div class="topic-metadata">

**Author:** [@Dazhi\_Jiao](https://discuss.elastic.co/u/Dazhi_Jiao)\
**Replies:** 2\
**Last updated:** [October 26, 2022, 5:12am UTC](https://discuss.elastic.co/t/approximate-knn-total-hits-inconsistent/316901 "2022-10-26T05:12:37Z")

</div>

Hi, we have an implementation of Approximate kNN search, with 768-dimension embedding vector in the ANN search. We observed that the total hits are not consistent when running the SAME query multiple times, or paginate u…

---

## [Unable to Authenticate user \[kibana\_system\] for REST request](https://discuss.elastic.co/t/unable-to-authenticate-user-kibana-system-for-rest-request/317455)

<div class="topic-metadata">

**Author:** [@Ihms](https://discuss.elastic.co/u/Ihms)\
**Replies:** 2\
**Last updated:** [October 26, 2022, 5:00am UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-kibana-system-for-rest-request/317455 "2022-10-26T05:00:22Z")

</div>

I have just installed Elasticsearch 8.4. I can successfully connect to Elasticsearch, but when I try connecting to Kibana, I get the below error: Unable to retrieve version information from Elasticsearch nodes. security…

---

## [S\_s\_l\_handshake\_exception in watcher](https://discuss.elastic.co/t/s-s-l-handshake-exception-in-watcher/317307)

<div class="topic-metadata">

**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\
**Replies:** 0\
**Last updated:** [October 24, 2022, 10:03am UTC](https://discuss.elastic.co/t/s-s-l-handshake-exception-in-watcher/317307 "2022-10-24T10:03:05Z")

</div>

Hi, I am trying to create the following watcher to send automatically a csv report coming from the POST url of a saved search of kibana. The whatcher is the following: { "trigger": { "schedule": { "interval…

---

## [Max compilations rate setting - cluster level or node level?](https://discuss.elastic.co/t/max-compilations-rate-setting-cluster-level-or-node-level/317299)

<div class="topic-metadata">

**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 4:20am UTC](https://discuss.elastic.co/t/max-compilations-rate-setting-cluster-level-or-node-level/317299 "2022-10-26T04:20:55Z")

</div>

Does the limit defined in script.max\_compilations\_rate apply for the concurrent number of scripts on a node, or for the total concurrent number of scripts for the entire cluster? Thanks.

---

## [How to store configmap in elasticsearch](https://discuss.elastic.co/t/how-to-store-configmap-in-elasticsearch/317454)

<div class="topic-metadata">

**Author:** [@hanweisen](https://discuss.elastic.co/u/hanweisen)\
**Replies:** 0\
**Last updated:** [October 26, 2022, 2:38am UTC](https://discuss.elastic.co/t/how-to-store-configmap-in-elasticsearch/317454 "2022-10-26T02:38:32Z")

</div>

Recently I am indexing the k8s resource object in ES. There are some problems with storing configmap. configmap defines as bellow: // +genclient // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object …

---

## [Monitoring Index Rate (Elastic Cloud)](https://discuss.elastic.co/t/monitoring-index-rate-elastic-cloud/317453)

<div class="topic-metadata">

**Author:** [@keiransteele](https://discuss.elastic.co/u/keiransteele)\
**Replies:** 0\
**Last updated:** [October 26, 2022, 1:42am UTC](https://discuss.elastic.co/t/monitoring-index-rate-elastic-cloud/317453 "2022-10-26T01:42:58Z")

</div>

I have an issue where the "ds-.monitoring-es-8-mb" indicies are one of the top two by index rate at around 300/s for our 13 node cluster. I asked support if using "xpack.monitoring.collection.interval" is the correct wa…

---

## [Could we support timeout mechanism for replica bulk request？](https://discuss.elastic.co/t/could-we-support-timeout-mechanism-for-replica-bulk-request/316977)

<div class="topic-metadata">

**Author:** [@howardhuang](https://discuss.elastic.co/u/howardhuang)\
**Replies:** 6\
**Last updated:** [October 26, 2022, 1:39am UTC](https://discuss.elastic.co/t/could-we-support-timeout-mechanism-for-replica-bulk-request/316977 "2022-10-26T01:39:25Z")

</div>

Assume that shard has 1 primary + 1 replica, if a bulk request goes to primary and finished the shard bulk write operation, then transfer the bulk request to replica node, if the replica node is a really slow node, for e…

---

## [Failed to Load Service Token](https://discuss.elastic.co/t/failed-to-load-service-token/317391)

<div class="topic-metadata">

**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 1:17am UTC](https://discuss.elastic.co/t/failed-to-load-service-token/317391 "2022-10-26T01:17:06Z")

</div>

Hello, at the start of Elastic I got these errors: \[2022-10-25T09:31:12,342\]\[ERROR\]\[o.e.b.Elasticsearch \] \[node-1\] fatal exception while booting Elasticsearch java.lang.IllegalStateException: security initializati…

---

## [Setup multi nodes on elastic 8.4.3 to run only when 2 nodes are active](https://discuss.elastic.co/t/setup-multi-nodes-on-elastic-8-4-3-to-run-only-when-2-nodes-are-active/317407)

<div class="topic-metadata">

**Author:** [@juandreww](https://discuss.elastic.co/u/juandreww)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 1:14am UTC](https://discuss.elastic.co/t/setup-multi-nodes-on-elastic-8-4-3-to-run-only-when-2-nodes-are-active/317407 "2022-10-26T01:14:55Z")

</div>

Hi, I would like to configure the Elastic Search for multiple nodes but only when 2 nodes running from 3 nodes, then the localhost can be accessed I have tried: node.name: node-3 (in folder node2 then node-2, etc) net…

---

## [I cant reach Elasticsearch localhost:9200](https://discuss.elastic.co/t/i-cant-reach-elasticsearch-localhost-9200/317323)

<div class="topic-metadata">

**Author:** [@Dun\_King](https://discuss.elastic.co/u/Dun_King)\
**Replies:** 2\
**Last updated:** [October 26, 2022, 12:30am UTC](https://discuss.elastic.co/t/i-cant-reach-elasticsearch-localhost-9200/317323 "2022-10-26T00:30:09Z")

</div>

Hello together, im trying to setup Elasticsearch for 10 hour now, i tried any tips i found on different sites and Forums, but noone could heklp me. I am following the instruction exactly as they are written on the main …

---

## [Escape character while connecting with Elastic Search](https://discuss.elastic.co/t/escape-character-while-connecting-with-elastic-search/317439)

<div class="topic-metadata">

**Author:** [@Karan\_Jain1](https://discuss.elastic.co/u/Karan_Jain1)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 8:14pm UTC](https://discuss.elastic.co/t/escape-character-while-connecting-with-elastic-search/317439 "2022-10-25T20:14:59Z")

</div>

Hi In our cluster, the Elastic Search version is 7.6.1 and security is enabled using OpenDistro (please refer https://opendistro.github.io/for-elasticsearch/ ) of a compatible OD version of 1.6 and backup ( please refe…

---

## [ES 7.17.6 Is it possible to update a rollup job?](https://discuss.elastic.co/t/es-7-17-6-is-it-possible-to-update-a-rollup-job/316001)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 6:14pm UTC](https://discuss.elastic.co/t/es-7-17-6-is-it-possible-to-update-a-rollup-job/316001 "2022-10-25T18:14:26Z")

</div>

Hi Team, I'm trying to update the page\_size of an existing rollup job but I don't see an API available for that. Is it possible?

---

## [Unable to configuring HeartBeat autodiscovery with hints in ECK setup](https://discuss.elastic.co/t/unable-to-configuring-heartbeat-autodiscovery-with-hints-in-eck-setup/317309)

<div class="topic-metadata">

**Author:** [@diadoom](https://discuss.elastic.co/u/diadoom)\
**Replies:** 4\
**Last updated:** [October 25, 2022, 5:39pm UTC](https://discuss.elastic.co/t/unable-to-configuring-heartbeat-autodiscovery-with-hints-in-eck-setup/317309 "2022-10-25T17:39:21Z")

</div>

hello! I'm trying to configure heartbeat in ECK using the autodiscovery configuration with hints, however using the config in ECK does not seem to work. It used to work when I had a self managed elastic setup running i…

---

## [Metricbeat Configuration on eck](https://discuss.elastic.co/t/metricbeat-configuration-on-eck/317257)

<div class="topic-metadata">

**Author:** [@emmanuel\_stevens\_LED](https://discuss.elastic.co/u/emmanuel_stevens_LED)\
**Replies:** 7\
**Last updated:** [October 25, 2022, 5:31pm UTC](https://discuss.elastic.co/t/metricbeat-configuration-on-eck/317257 "2022-10-25T17:31:48Z")

</div>

Hello, I am trying to send data from a container ubuntu to eck. Below you can see my configuration output.elasticsearch: Array of hosts to connect to. hosts: \["https://elasticsearch-es-internal-http:9200"\] Protocol…

---

## [Using search as you type field for prefix queries](https://discuss.elastic.co/t/using-search-as-you-type-field-for-prefix-queries/317432)

<div class="topic-metadata">

**Author:** [@caseydm](https://discuss.elastic.co/u/caseydm)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 5:28pm UTC](https://discuss.elastic.co/t/using-search-as-you-type-field-for-prefix-queries/317432 "2022-10-25T17:28:44Z")

</div>

I indexed some of my data as a "search as you type" field in Kibana. Specifically, in the query below the field authorships.author.display\_name.autocomplete is indexed this way. From looking at the documentation, indexin…

---

## [ES query from spark returns all despite of filter](https://discuss.elastic.co/t/es-query-from-spark-returns-all-despite-of-filter/316643)

<div class="topic-metadata">

**Author:** [@aadhikari3711](https://discuss.elastic.co/u/aadhikari3711)\
**Replies:** 8\
**Last updated:** [October 25, 2022, 5:14pm UTC](https://discuss.elastic.co/t/es-query-from-spark-returns-all-despite-of-filter/316643 "2022-10-25T17:14:37Z")

</div>

Hello All, I am trying to access index from databricks via es query and wanted a result set based on query filter, add to data frame. Requirement: Get output with :cd.ID=1 and cd.s\_D\<\>0. I get: All the cd.ID both 0 …

---

## [I want to get the source host or container details by using UUID of the index](https://discuss.elastic.co/t/i-want-to-get-the-source-host-or-container-details-by-using-uuid-of-the-index/317426)

<div class="topic-metadata">

**Author:** [@Jana03](https://discuss.elastic.co/u/Jana03)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 5:11pm UTC](https://discuss.elastic.co/t/i-want-to-get-the-source-host-or-container-details-by-using-uuid-of-the-index/317426 "2022-10-25T17:11:46Z")

</div>

I want to disable fluentd internal logs which are fluent.warn. we have many servers fluentd installed and sending logs to elasticsearch. when i click on logs it is not showing any source, env, or app details. how will…

---

## [Query nested array for empty and specific value](https://discuss.elastic.co/t/query-nested-array-for-empty-and-specific-value/316263)

<div class="topic-metadata">

**Author:** [@kunwarshukla](https://discuss.elastic.co/u/kunwarshukla)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 4:43pm UTC](https://discuss.elastic.co/t/query-nested-array-for-empty-and-specific-value/316263 "2022-10-25T16:43:05Z")

</div>

Documents structure - { "hits": \[ { "\_type": "\_doc", "\_id": "ef0a2c44179a513476b080cc2a585d95", "\_source": { "DIVISION\_NUMBER": 44, "MATCHES": \[ { "MATCH\_STA…

---

## [Logstash trying to reprocess the same files](https://discuss.elastic.co/t/logstash-trying-to-reprocess-the-same-files/317362)

<div class="topic-metadata">

**Author:** [@Victor\_Caetano](https://discuss.elastic.co/u/Victor_Caetano)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 4:20pm UTC](https://discuss.elastic.co/t/logstash-trying-to-reprocess-the-same-files/317362 "2022-10-25T16:20:19Z")

</div>

I'm using File Input Plugin, and a multiline codec, and grok filters to process .txt files that exists in a folder in my Linux VM, those files are static, i don't make changes in it's content, i only add more files to th…

---

## [Unable to output into Elasticsearch](https://discuss.elastic.co/t/unable-to-output-into-elasticsearch/317374)

<div class="topic-metadata">

**Author:** [@Hawas\_Musthafa](https://discuss.elastic.co/u/Hawas_Musthafa)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 4:15pm UTC](https://discuss.elastic.co/t/unable-to-output-into-elasticsearch/317374 "2022-10-25T16:15:47Z")

</div>

Unable to output to the elasticseach. output { elasticsearch { hosts =\> "elasticsearch:9200" user =\> "logstash\_internal" password =\> "${LOGSTASH\_INTERNAL\_PASSWORD}" index =\> "testmanagement-%{+yyyy.MM.dd}" } and …

---

## [Input multiple files using Elastic Agent](https://discuss.elastic.co/t/input-multiple-files-using-elastic-agent/317150)

<div class="topic-metadata">

**Author:** [@shuuny-matrix](https://discuss.elastic.co/u/shuuny-matrix)\
**Replies:** 9\
**Last updated:** [October 25, 2022, 4:08pm UTC](https://discuss.elastic.co/t/input-multiple-files-using-elastic-agent/317150 "2022-10-25T16:08:38Z")

</div>

Hi, I wanted to input multiple files with same category from a directory to a same index into Kibana with Elasticsearch backend. I noticed that it could be done using Logstash but not clear documentation on how to do to…

---

## [Best way to update a single field across all the documents (may be million docs)](https://discuss.elastic.co/t/best-way-to-update-a-single-field-across-all-the-documents-may-be-million-docs/317343)

<div class="topic-metadata">

**Author:** [@ykonathala](https://discuss.elastic.co/u/ykonathala)\
**Replies:** 4\
**Last updated:** [October 25, 2022, 2:43pm UTC](https://discuss.elastic.co/t/best-way-to-update-a-single-field-across-all-the-documents-may-be-million-docs/317343 "2022-10-25T14:43:00Z")

</div>

Team, Can I get some suggestions around updating a single field across multiple documents in the elasticsearch? Thing here is need to get a value of that field (existing) compare it will an external value and do some ca…

---

## [400: request does not support \[pit\]](https://discuss.elastic.co/t/400-request-does-not-support-pit/317141)

<div class="topic-metadata">

**Author:** [@mworzala](https://discuss.elastic.co/u/mworzala)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 2:50pm UTC](https://discuss.elastic.co/t/400-request-does-not-support-pit/317141 "2022-10-25T14:50:59Z")

</div>

Hi: I am executing the following query against the search api, but it is returning a 400, and an error that the request does not support the pit parameter. This is from the Go client, however, from the python client the…

---

## [Download of indices as download option](https://discuss.elastic.co/t/download-of-indices-as-download-option/316313)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [October 25, 2022, 2:26pm UTC](https://discuss.elastic.co/t/download-of-indices-as-download-option/316313 "2022-10-25T14:26:56Z")

</div>

Hi all, Sometimes, I need to download entire index data for different purposes. Maybe use it for another place or app. There is no export button for getting Elasticsearch Index Data as json file or some other format i…

---

## [Reset password in Elasticsearch does not work](https://discuss.elastic.co/t/reset-password-in-elasticsearch-does-not-work/317418)

<div class="topic-metadata">

**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\
**Replies:** 2\
**Last updated:** [October 25, 2022, 1:46pm UTC](https://discuss.elastic.co/t/reset-password-in-elasticsearch-does-not-work/317418 "2022-10-25T13:46:25Z")

</div>

Hello everyone, I have installed my own certificates on my Elasticsearch Server. root CA Server certificate All certificates are self-signed. I now want to reset the password for the "logstash\_system" user and get the…

---

## [Fleet Ingest Docker Container Logs](https://discuss.elastic.co/t/fleet-ingest-docker-container-logs/317416)

<div class="topic-metadata">

**Author:** [@beerygaz](https://discuss.elastic.co/u/beerygaz)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 1:01pm UTC](https://discuss.elastic.co/t/fleet-ingest-docker-container-logs/317416 "2022-10-25T13:01:13Z")

</div>

We'd like to try and use all the benefits of Fleet but also need to ingest selected container logs. And add include/exclude regexes to these logs as some of them can be quite noisy and also badly formatted. filebeat ha…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=751)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=753)
