# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=762 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 763 --- ## [Advice on indexing long form text](https://discuss.elastic.co/t/advice-on-indexing-long-form-text/316674)
**Author:** [@orweinberger](https://discuss.elastic.co/u/orweinberger)\ **Replies:** 1\ **Last updated:** [October 15, 2022, 2:02pm UTC](https://discuss.elastic.co/t/advice-on-indexing-long-form-text/316674 "2022-10-15T14:02:19Z")
I'm trying to find the best and most efficient way to index a transcript of long conversations, for example a 2-3 hour podcast between multiple members, or for another example a transcript of a large Zoom meeting with ma… --- ## [Filebeat error when setting index name](https://discuss.elastic.co/t/filebeat-error-when-setting-index-name/316680)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 0\ **Last updated:** [October 15, 2022, 10:44am UTC](https://discuss.elastic.co/t/filebeat-error-when-setting-index-name/316680 "2022-10-15T10:44:37Z")
filebeat.inputs: - type: log enabled: true paths: - /FSEBroker\\\*.\* output.elasticsearch: hosts: \[ "http://172.19.1.12:9200"\] protocol: "http" index: "fss2-%{+yyyy.MM.dd}" log error G:\\\>G… --- ## [How to achieve same results as cutoff\_frequency with minimum\_should\_match with Elasticsearch 8.X after deprecation of common term queries](https://discuss.elastic.co/t/how-to-achieve-same-results-as-cutoff-frequency-with-minimum-should-match-with-elasticsearch-8-x-after-deprecation-of-common-term-queries/316679)
**Author:** [@jatinw21](https://discuss.elastic.co/u/jatinw21)\ **Replies:** 0\ **Last updated:** [October 15, 2022, 10:24am UTC](https://discuss.elastic.co/t/how-to-achieve-same-results-as-cutoff-frequency-with-minimum-should-match-with-elasticsearch-8-x-after-deprecation-of-common-term-queries/316679 "2022-10-15T10:24:29Z")
If I make a search for a term in the database of say movie titles, I want it to do an AND query for all the words in the search query that have higher than certain cutoff\_frequency and OR query for all the words in the s… --- ## [Let's encrypt issue with the CA Certificate after end of validation 3o September](https://discuss.elastic.co/t/lets-encrypt-issue-with-the-ca-certificate-after-end-of-validation-3o-september/316675)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 0\ **Last updated:** [October 15, 2022, 8:25am UTC](https://discuss.elastic.co/t/lets-encrypt-issue-with-the-ca-certificate-after-end-of-validation-3o-september/316675 "2022-10-15T08:25:17Z")
I have tried various ways to install let's encrypt with my Elasticsearch cluster, but have been unable to do so. First method error displayed root@elk2:~# /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-tok… --- ## [How to establish a connection from java client to elastic search version 8](https://discuss.elastic.co/t/how-to-establish-a-connection-from-java-client-to-elastic-search-version-8/316408)
**Author:** [@Chirag\_Gupta](https://discuss.elastic.co/u/Chirag_Gupta)\ **Replies:** 6\ **Last updated:** [October 15, 2022, 5:40am UTC](https://discuss.elastic.co/t/how-to-establish-a-connection-from-java-client-to-elastic-search-version-8/316408 "2022-10-15T05:40:03Z")
A guide for establishing a connection of java client with elastic-search without using RestHighLevelClient method --- ## [Ho validate filter expression?](https://discuss.elastic.co/t/ho-validate-filter-expression/316664)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 1\ **Last updated:** [October 15, 2022, 3:07am UTC](https://discuss.elastic.co/t/ho-validate-filter-expression/316664 "2022-10-15T03:07:22Z")
example produce error filter { grok { match =\> { "message" =\> "%\[stderr\] (default task%" } } mutate { remove\_field =\> \['@timestamp'\] } } Failed to execute action {:action=\>L… --- ## [Error starting Elastic Search](https://discuss.elastic.co/t/error-starting-elastic-search/316659)
**Author:** [@ArrakisMiner](https://discuss.elastic.co/u/ArrakisMiner)\ **Replies:** 4\ **Last updated:** [October 14, 2022, 7:44pm UTC](https://discuss.elastic.co/t/error-starting-elastic-search/316659 "2022-10-14T19:44:57Z")
I'm having issues trying to start Elastic Search after installation, and I'm not sure how to get around it, nor can I find any similar topics with solutions online. When I run systemctl start elasticsearch, I get the er… --- ## [Kibana security password?](https://discuss.elastic.co/t/kibana-security-password/316234)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 6\ **Last updated:** [October 14, 2022, 7:14pm UTC](https://discuss.elastic.co/t/kibana-security-password/316234 "2022-10-14T19:14:35Z")
ho enable password for kibana in simple mode? --- ## [Can I delete a older system index once a rollover has been made?](https://discuss.elastic.co/t/can-i-delete-a-older-system-index-once-a-rollover-has-been-made/316642)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 1\ **Last updated:** [October 14, 2022, 7:03pm UTC](https://discuss.elastic.co/t/can-i-delete-a-older-system-index-once-a-rollover-has-been-made/316642 "2022-10-14T19:03:52Z")
So I got this index which got massive we were trying out the APM, now it has been made a rollover but the older one still have a huge impact on the cluster. Already talked to the team and decided to delete the 100GB … --- ## [How to query a nested array for an object with one matching field and one nonexistent field?](https://discuss.elastic.co/t/how-to-query-a-nested-array-for-an-object-with-one-matching-field-and-one-nonexistent-field/316663)
**Author:** [@A111](https://discuss.elastic.co/u/A111)\ **Replies:** 1\ **Last updated:** [October 14, 2022, 5:36pm UTC](https://discuss.elastic.co/t/how-to-query-a-nested-array-for-an-object-with-one-matching-field-and-one-nonexistent-field/316663 "2022-10-14T17:36:25Z")
Given this: { "mappings": { "document\_type": { "properties": { "id": { "type": "long" }, "resolutions": { "… --- ## [Curator and Elasticsearch 8](https://discuss.elastic.co/t/curator-and-elasticsearch-8/316550)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 3\ **Last updated:** [October 14, 2022, 5:31pm UTC](https://discuss.elastic.co/t/curator-and-elasticsearch-8/316550 "2022-10-14T17:31:53Z")
I noticed today that Version Compatibility | Curator Reference \[5.8\] | Elastic does not list Elasticsearch 8. Elasticsearch curator & ES version 8.x confirms it doesn't work with Elasticsearch 8. So my questions are: … --- ## [Logstash stalls processing and becomes unresponsitive after some runtime (filter issues?)](https://discuss.elastic.co/t/logstash-stalls-processing-and-becomes-unresponsitive-after-some-runtime-filter-issues/316640)
**Author:** [@gweiss76](https://discuss.elastic.co/u/gweiss76)\ **Replies:** 2\ **Last updated:** [October 14, 2022, 5:15pm UTC](https://discuss.elastic.co/t/logstash-stalls-processing-and-becomes-unresponsitive-after-some-runtime-filter-issues/316640 "2022-10-14T17:15:26Z")
Hi fellow log analysts. We are currently using Logstash for all syslog related logdata. Currently we have the issue, that logstash (almost) stops processing logdata after some time which results in backpressure to the … --- ## [Kibana index is not found](https://discuss.elastic.co/t/kibana-index-is-not-found/316612)
**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\ **Replies:** 2\ **Last updated:** [October 14, 2022, 5:07pm UTC](https://discuss.elastic.co/t/kibana-index-is-not-found/316612 "2022-10-14T17:07:41Z")
Hi, I have Elasticsearch cluster in production set by another person. I need to be able to find and store kibana index. However when I list all the indeces (xxx:9200/\_cat/indices) Kibana related is not there. Is there … --- ## [Remove timestamp where message have a string search?](https://discuss.elastic.co/t/remove-timestamp-where-message-have-a-string-search/316661)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 0\ **Last updated:** [October 14, 2022, 4:22pm UTC](https://discuss.elastic.co/t/remove-timestamp-where-message-have-a-string-search/316661 "2022-10-14T16:22:42Z")
i have this |2022-09-30 15:10:15,151 ERROR \[stderr\] (default task-4) |at org.jboss.resteasy.resteasy-jaxrs@3.12.1.Final//org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:138)| |---|---| |2022-09… --- ## [Elasticsearch GeoIP and unknown error](https://discuss.elastic.co/t/elasticsearch-geoip-and-unknown-error/316541)
**Author:** [@ulysse31](https://discuss.elastic.co/u/ulysse31)\ **Replies:** 6\ **Last updated:** [October 14, 2022, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-geoip-and-unknown-error/316541 "2022-10-14T16:15:50Z")
Hi, My elasticsearch DB suddently stopped making geoip resolve on entries, and on the elasticsearch DB logs the following message is logged: \[2022-10-13T15:06:21,875\]\[WARN \]\[o.e.i.g.GeoIpDownloader \] \[host\] could not … --- ## [Search and partial search using or not special characters](https://discuss.elastic.co/t/search-and-partial-search-using-or-not-special-characters/316655)
**Author:** [@kqgcm](https://discuss.elastic.co/u/kqgcm)\ **Replies:** 0\ **Last updated:** [October 14, 2022, 3:43pm UTC](https://discuss.elastic.co/t/search-and-partial-search-using-or-not-special-characters/316655 "2022-10-14T15:43:40Z")
Hello, I have something like this: "documents" : { "type1" : "341.943-61", "type2" : "5.6-0" } But the user is not require to input it with special characters, so, it can be something… --- ## [Ho group specific pattern in 1 message?](https://discuss.elastic.co/t/ho-group-specific-pattern-in-1-message/316646)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 0\ **Last updated:** [October 14, 2022, 2:38pm UTC](https://discuss.elastic.co/t/ho-group-specific-pattern-in-1-message/316646 "2022-10-14T14:38:32Z")
example 2022-09-28 16:48:11,016 INFO \[stdout\] (default task-2) RELOAD PKCS#11 CRYPTOKI 2022-09-28 16:48:11,027 ERROR \[stderr\] (default task-2) it.unidoc.cdr.core.exception.IdentityStoreException: it.unidoc.cdr.core.exc… --- ## [Unable to export csv](https://discuss.elastic.co/t/unable-to-export-csv/316362)
**Author:** [@rivermigue](https://discuss.elastic.co/u/rivermigue)\ **Replies:** 1\ **Last updated:** [October 14, 2022, 1:58pm UTC](https://discuss.elastic.co/t/unable-to-export-csv/316362 "2022-10-14T13:58:28Z")
I have recently enabled the xpack plugin for native basic authentication, once I did that, the export csv within kibana stopped working and displaying the following error message: Failed to create report Sorry, you don'… --- ## [Elastic-agent: Error dialing x509: certificate signed by unknown authority](https://discuss.elastic.co/t/elastic-agent-error-dialing-x509-certificate-signed-by-unknown-authority/315675)
**Author:** [@enigmatic](https://discuss.elastic.co/u/enigmatic)\ **Replies:** 5\ **Last updated:** [October 14, 2022, 12:41pm UTC](https://discuss.elastic.co/t/elastic-agent-error-dialing-x509-certificate-signed-by-unknown-authority/315675 "2022-10-14T12:41:41Z")
Hi All, Hope you can help wit the following. I installed Elasticsearch and Kibana version 8.4. both are up and running. I'm trying to install Fleet to manage the elastic-agents, how ever i hit a road block. the elast… --- ## [Request elasticsearch to update geoip database](https://discuss.elastic.co/t/request-elasticsearch-to-update-geoip-database/315850)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 6\ **Last updated:** [October 14, 2022, 12:32pm UTC](https://discuss.elastic.co/t/request-elasticsearch-to-update-geoip-database/315850 "2022-10-14T12:32:30Z")
Hello I use elasticsearch on premises for security features, and I can't expose it all the time which made my geoip databases expire. I'm aware that elasticsearch use maxmind database and request using https://geoip.el… --- ## [Login problem w/ superuser on other nodes (docker)](https://discuss.elastic.co/t/login-problem-w-superuser-on-other-nodes-docker/316635)
**Author:** [@divadpoc](https://discuss.elastic.co/u/divadpoc)\ **Replies:** 0\ **Last updated:** [October 14, 2022, 12:12pm UTC](https://discuss.elastic.co/t/login-problem-w-superuser-on-other-nodes-docker/316635 "2022-10-14T12:12:34Z")
Hi, I had a problem I was able to figure out, but I don't understanding why, yet. All versions, ES, Kibana, Java Client, w/ latest version (8.4) I followed the instructions here in order to run elasticsearch and kibana… --- ## [Fuzzy search](https://discuss.elastic.co/t/fuzzy-search/316620)
**Author:** [@subodh\_dhukuchhu](https://discuss.elastic.co/u/subodh_dhukuchhu)\ **Replies:** 1\ **Last updated:** [October 14, 2022, 11:44am UTC](https://discuss.elastic.co/t/fuzzy-search/316620 "2022-10-14T11:44:07Z")
I have \[ {title:"This is title",desc:"This is desc"}, {title:"I am second title",desc:"I am second title"}, \] My requirement was To show result when I search "secott" ( from second object) To show result when I se… --- ## [Exact string match query on all fields](https://discuss.elastic.co/t/exact-string-match-query-on-all-fields/316623)
**Author:** [@melwinalmeida](https://discuss.elastic.co/u/melwinalmeida)\ **Replies:** 0\ **Last updated:** [October 14, 2022, 10:32am UTC](https://discuss.elastic.co/t/exact-string-match-query-on-all-fields/316623 "2022-10-14T10:32:09Z")
Our records contain lot of string fields. How do I perform an exact string match query without mentioning the field names in the query. For example, suppose I have following records: { "address": "google.com", "a… --- ## [Elastic Agent "Unhealthy" - Error while dialing open \\\\\\\\.\\\\pipe\\\\elastic-agent-system: Access Denied](https://discuss.elastic.co/t/elastic-agent-unhealthy-error-while-dialing-open-pipe-elastic-agent-system-access-denied/316617)
**Author:** [@Doriane.R](https://discuss.elastic.co/u/Doriane.R)\ **Replies:** 0\ **Last updated:** [October 14, 2022, 9:36am UTC](https://discuss.elastic.co/t/elastic-agent-unhealthy-error-while-dialing-open-pipe-elastic-agent-system-access-denied/316617 "2022-10-14T09:36:01Z")
Hi, I am new to ELK and I have an issue with my Elastic Agents on my Windows servers. I am working with : Elasticsearch / Kibana version 8.4.2 Elastic-Agent version 8.4.2 I have successfully enroll my Fleet Server (… --- ## [Export Elastic Agent policies](https://discuss.elastic.co/t/export-elastic-agent-policies/316608)
**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\ **Replies:** 0\ **Last updated:** [October 14, 2022, 8:32am UTC](https://discuss.elastic.co/t/export-elastic-agent-policies/316608 "2022-10-14T08:32:20Z")
Hi everyone, I am currently thinking about moving my ELK (8.3 on premises) to Docker containers, so I'd like to know if it is possible to export my Fleet agent policies and import them afterwards (with PUT in the API fo… --- ## [Functionbeat fails to update with a new cloudwatch log group Could not execute the lambda function](https://discuss.elastic.co/t/functionbeat-fails-to-update-with-a-new-cloudwatch-log-group-could-not-execute-the-lambda-function/315020)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 1\ **Last updated:** [October 14, 2022, 7:07am UTC](https://discuss.elastic.co/t/functionbeat-fails-to-update-with-a-new-cloudwatch-log-group-could-not-execute-the-lambda-function/315020 "2022-10-14T07:07:16Z")
We had functionbeat running and i had to remove and recreate it, however im getting the following errors: {"log.level":"info","@timestamp":"2022-09-23T13:55:44.066+0100","log.logger":"aws","log.origin":{"file.name":"aws… --- ## [Shards for three node cluster](https://discuss.elastic.co/t/shards-for-three-node-cluster/316386)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 6\ **Last updated:** [October 14, 2022, 6:50am UTC](https://discuss.elastic.co/t/shards-for-three-node-cluster/316386 "2022-10-14T06:50:35Z")
Hi Team, I have three node cluster and my current shard setting is 2 primary and 1 replica so in total, 4 shards for three node cluster. In this case, a single node is having one extra shard everytime? Can i have 1 pr… --- ## [Get the score for a document with String id](https://discuss.elastic.co/t/get-the-score-for-a-document-with-string-id/316596)
**Author:** [@karthik\_sagar](https://discuss.elastic.co/u/karthik_sagar)\ **Replies:** 1\ **Last updated:** [October 14, 2022, 6:47am UTC](https://discuss.elastic.co/t/get-the-score-for-a-document-with-string-id/316596 "2022-10-14T06:47:55Z")
Hi everyone, Here is a sample document I have with document id as string datatype. For one of my query I was expecting ~1000 records but the returned count is 10 documents less. I wanted to understand why some documents… --- ## [Pagination Logic in input of HTTP Poller plugin, if not how to do it in custom plugin](https://discuss.elastic.co/t/pagination-logic-in-input-of-http-poller-plugin-if-not-how-to-do-it-in-custom-plugin/316595)
**Author:** [@Sayontani\_Bose1](https://discuss.elastic.co/u/Sayontani_Bose1)\ **Replies:** 1\ **Last updated:** [October 14, 2022, 6:44am UTC](https://discuss.elastic.co/t/pagination-logic-in-input-of-http-poller-plugin-if-not-how-to-do-it-in-custom-plugin/316595 "2022-10-14T06:44:41Z")
I have to bulk import data via LogStash as below: Source: Restful Get APIs Destination : Elasticsearch My .conf file looks as below: input { http\_poller { urls =\> { ticket\_status =\> { method =\> get url =\> "https… --- ## [Installing Elasticsearch in Centos7 problem](https://discuss.elastic.co/t/installing-elasticsearch-in-centos7-problem/316497)
**Author:** [@MBekhit](https://discuss.elastic.co/u/MBekhit)\ **Replies:** 8\ **Last updated:** [October 14, 2022, 6:19am UTC](https://discuss.elastic.co/t/installing-elasticsearch-in-centos7-problem/316497 "2022-10-14T06:19:11Z")
Hi, I have this error when I want to install Elasticsearch in Centos 7 elasticsearch-7.17.6-x86\_64.rp FAILED https://artifacts.elastic.co/packages/7.x/yum/7.17.6/elasticsearch-… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=761) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=763)