# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=77 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 78 --- ## [Kibana visualization wont show all records](https://discuss.elastic.co/t/kibana-visualization-wont-show-all-records/377072)
**Author:** [@Milad\_Akhlaghi](https://discuss.elastic.co/u/Milad_Akhlaghi)\ **Replies:** 4\ **Last updated:** [April 22, 2025, 10:54am UTC](https://discuss.elastic.co/t/kibana-visualization-wont-show-all-records/377072 "2025-04-22T10:54:10Z")
Hello friends, i have created a table-type visualization dashboard via Lens. Everything works fine, but I have a small problem. when I search a field if there is bunch of records that timestamp is smaller than 30 seco… --- ## [event.duration incorrect value in elastick](https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200)
**Author:** [@yanshin](https://discuss.elastic.co/u/yanshin)\ **Replies:** 5\ **Last updated:** [April 22, 2025, 8:40am UTC](https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200 "2025-04-22T08:40:20Z")
Hello! can you help me solve the problem? there are PG SQL logs in elastica. there is an event.duration field that displays an incorrect value.for example, in the postgresql logs duration: 818.585 ms in elastic t… --- ## [Update part of a url](https://discuss.elastic.co/t/update-part-of-a-url/377354)
**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\ **Replies:** 1\ **Last updated:** [April 21, 2025, 11:34pm UTC](https://discuss.elastic.co/t/update-part-of-a-url/377354 "2025-04-21T23:34:17Z")
Hello! my team and I were trying to perform an update operation for several records that match having a certain url: GET myindex/\_search { "query": { "wildcard": { "url": { "value": "\*myteam.com\*" … --- ## [Data in elastic search doesn't match while running the same job](https://discuss.elastic.co/t/data-in-elastic-search-doesnt-match-while-running-the-same-job/377080)
**Author:** [@yolo1](https://discuss.elastic.co/u/yolo1)\ **Replies:** 3\ **Last updated:** [April 21, 2025, 7:56pm UTC](https://discuss.elastic.co/t/data-in-elastic-search-doesnt-match-while-running-the-same-job/377080 "2025-04-21T19:56:12Z")
So i have a hive script which creates multiple external table to one index and stores the data there. Later on we visualise that data on ES. While converting the code from hive to pyspark i notice that while running the… --- ## [How to display multi-select variables on bar charts as a percentage of records](https://discuss.elastic.co/t/how-to-display-multi-select-variables-on-bar-charts-as-a-percentage-of-records/377263)
**Author:** [@Michal714](https://discuss.elastic.co/u/Michal714)\ **Replies:** 9\ **Last updated:** [April 21, 2025, 6:16pm UTC](https://discuss.elastic.co/t/how-to-display-multi-select-variables-on-bar-charts-as-a-percentage-of-records/377263 "2025-04-21T18:16:42Z")
I want to show responses to a multi-select question as a percentage of response IDs. In a survey we used, we asked respondents to select all the options that apply to them. This means that we have more responses than re… --- ## [Location of Read Pointer for Filebeat](https://discuss.elastic.co/t/location-of-read-pointer-for-filebeat/377346)
**Author:** [@soren.frederiksen](https://discuss.elastic.co/u/soren.frederiksen)\ **Replies:** 2\ **Last updated:** [April 21, 2025, 5:20pm UTC](https://discuss.elastic.co/t/location-of-read-pointer-for-filebeat/377346 "2025-04-21T17:20:34Z")
We have Filebeat set up to collect logs from AWS and then forward them to Log Stash. Filebeat is installed on a Windows server set up as an EC2 instance in the AWS cloud. The problem is that if we rebuild the EC2 insta… --- ## [Making the CRT and KEY files for Kibana](https://discuss.elastic.co/t/making-the-crt-and-key-files-for-kibana/377344)
**Author:** [@Ruthless\_Rebel](https://discuss.elastic.co/u/Ruthless_Rebel)\ **Replies:** 1\ **Last updated:** [April 21, 2025, 4:37pm UTC](https://discuss.elastic.co/t/making-the-crt-and-key-files-for-kibana/377344 "2025-04-21T16:37:48Z")
I am using 8.17.3. All the info I find on making keys and such, are more than 5 years old and incomplete. I am trying to use Detections. I had previously used Elasticsearch and Kibana with no security. Closed lab environ… --- ## [Log level highlighting in Discover](https://discuss.elastic.co/t/log-level-highlighting-in-discover/376732)
**Author:** [@Matt\_Janda](https://discuss.elastic.co/u/Matt_Janda)\ **Replies:** 17\ **Last updated:** [April 21, 2025, 2:22pm UTC](https://discuss.elastic.co/t/log-level-highlighting-in-discover/376732 "2025-04-21T14:22:17Z")
I’d like to start this topic to understand how Kibana automatically highlights log\_level fields with different background colors. In my case, when I set up Discover, the field in the index is called log\_level. Kibana… --- ## [Elser in self managed cluster](https://discuss.elastic.co/t/elser-in-self-managed-cluster/375490)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 5\ **Last updated:** [April 21, 2025, 2:04pm UTC](https://discuss.elastic.co/t/elser-in-self-managed-cluster/375490 "2025-04-21T14:04:36Z")
The elser documentation seems to be tailored for cloud deployment . If one wants to deploy and install elser in self managed cluster where could I find the steps . Please help --- ## [Elasticsearch 8.15.2: OpenJDK CVEs](https://discuss.elastic.co/t/elasticsearch-8-15-2-openjdk-cves/377335)
**Author:** [@debbbuu](https://discuss.elastic.co/u/debbbuu)\ **Replies:** 1\ **Last updated:** [April 21, 2025, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-8-15-2-openjdk-cves/377335 "2025-04-21T13:47:32Z")
Hi, As part of the vulnerability assessment (VA) scan on our ELK servers, we identified that the bundled OpenJDK version is affected by multiple vulnerabilities. We are using a self-managed cluster. We did upgrade the E… --- ## [Issue with OpenJDK Vulnerabilities (CVE-2024) in Elasticsearch 8.15.2](https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377330)
**Author:** [@debbbuu](https://discuss.elastic.co/u/debbbuu)\ **Replies:** 1\ **Last updated:** [April 21, 2025, 1:47pm UTC](https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377330 "2025-04-21T13:47:11Z")
Hi, As part of the vulnerability assessment (VA) scan on our ELK servers, we identified that the bundled OpenJDK version is affected by multiple vulnerabilities. We are using a self-managed cluster. We did upgrade the E… --- ## [Elastic Search Logs delay and missing](https://discuss.elastic.co/t/elastic-search-logs-delay-and-missing/377320)
**Author:** [@nishant\_goyal](https://discuss.elastic.co/u/nishant_goyal)\ **Replies:** 1\ **Last updated:** [April 21, 2025, 8:28am UTC](https://discuss.elastic.co/t/elastic-search-logs-delay-and-missing/377320 "2025-04-21T08:28:05Z")
using Elasticsearch , logstash and kibana on 16vcore linux azure server and approx 300 micro service logs pushing through logback to logstash. i observed sometimes logs not storing to Elasticsearch and sometimes delay. … --- ## [\[cluster:monitor/nodes/stats\[n\]\] timed out](https://discuss.elastic.co/t/cluster-monitor-nodes-stats-n-timed-out/377322)
**Author:** [@ZaynJiang](https://discuss.elastic.co/u/ZaynJiang)\ **Replies:** 0\ **Last updated:** [April 21, 2025, 5:31am UTC](https://discuss.elastic.co/t/cluster-monitor-nodes-stats-n-timed-out/377322 "2025-04-21T05:31:44Z")
I encountered exactly the same problem. Both the thread stack and the logs are identical. This issue has been closed, but it remains unsolved. --- ## [Elasticserach table visualization export format](https://discuss.elastic.co/t/elasticserach-table-visualization-export-format/377311)
**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\ **Replies:** 0\ **Last updated:** [April 19, 2025, 4:06pm UTC](https://discuss.elastic.co/t/elasticserach-table-visualization-export-format/377311 "2025-04-19T16:06:04Z")
I have table like when i export the table as CSV it format changes, and the columnd heards become the rows of the CSV file, like below Is there a way to export so the output would be the same as how table is disp… --- ## [Paged Search Larger than 10,000 Records](https://discuss.elastic.co/t/paged-search-larger-than-10-000-records/376500)
**Author:** [@Devan](https://discuss.elastic.co/u/Devan)\ **Replies:** 4\ **Last updated:** [April 18, 2025, 3:36am UTC](https://discuss.elastic.co/t/paged-search-larger-than-10-000-records/376500 "2025-04-18T03:36:37Z")
We are currently using from and size pagination in our Elasticsearch results of ~1,000 records on average. We recently ran into some instances of ~15,000 records and expect some more of similar magnitude, resulting in th… --- ## [Ubuntu 24.04 Support](https://discuss.elastic.co/t/ubuntu-24-04-support/362337)
**Author:** [@jeff2](https://discuss.elastic.co/u/jeff2)\ **Replies:** 7\ **Last updated:** [April 16, 2025, 10:24am UTC](https://discuss.elastic.co/t/ubuntu-24-04-support/362337 "2025-04-16T10:24:59Z")
Ubuntu 24.04 LTS is now released but it is not mentioned in the elastic support matrix Are elasticsearch and logstash officially supported on Ubuntu 24.04? Also, does the Support matrix also act as a Compatibility matr… --- ## [Big drop in indexing rate when reindexing](https://discuss.elastic.co/t/big-drop-in-indexing-rate-when-reindexing/377310)
**Author:** [@parameter](https://discuss.elastic.co/u/parameter)\ **Replies:** 1\ **Last updated:** [April 19, 2025, 9:40am UTC](https://discuss.elastic.co/t/big-drop-in-indexing-rate-when-reindexing/377310 "2025-04-19T09:40:18Z")
I'm reindexing timeseries data into bigger indices. I have daily indices like logs-yyyy-MM-dd and I'm reindexing it to bigger indices using: POST \_reindex { "source": { "index": "logs-2024-08-\*" }, "dest": { … --- ## [Manual backup restore](https://discuss.elastic.co/t/manual-backup-restore/377270)
**Author:** [@iexpertini](https://discuss.elastic.co/u/iexpertini)\ **Replies:** 2\ **Last updated:** [April 18, 2025, 5:27pm UTC](https://discuss.elastic.co/t/manual-backup-restore/377270 "2025-04-18T17:27:32Z")
Greetings, We’re currently facing an issue with our Elasticsearch cluster, which consists of 8 nodes. Unfortunately, we accidentally “emptied” an index (my\_index) from the cluster. While we don’t have a snapshot, we do … --- ## [Differences between LOOKUP Index and Enrich Index](https://discuss.elastic.co/t/differences-between-lookup-index-and-enrich-index/377286)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [April 18, 2025, 4:53pm UTC](https://discuss.elastic.co/t/differences-between-lookup-index-and-enrich-index/377286 "2025-04-18T16:53:39Z")
Hello, Elastic recently announced LOOKUP JOINS. They specified that the lookup function in ES|QL only works if the index is a lookup index. I am bit confused on this implementation? It seems like both ENRICH and LOOKU… --- ## [Elasticsearch crashes with every update](https://discuss.elastic.co/t/elasticsearch-crashes-with-every-update/377276)
**Author:** [@Didier\_Bourgineau](https://discuss.elastic.co/u/Didier_Bourgineau)\ **Replies:** 3\ **Last updated:** [April 18, 2025, 3:21pm UTC](https://discuss.elastic.co/t/elasticsearch-crashes-with-every-update/377276 "2025-04-18T15:21:41Z")
Elasticsearch crashes with every update since 8.14.0 and again between 8.17.4 and 8.18.0 with the following error: java.util.ServiceConfigurationError: Error loading SPI class list from URL: jar:file:///usr/share/elast… --- ## [Improve support for Master Data and Enrichment](https://discuss.elastic.co/t/improve-support-for-master-data-and-enrichment/377284)
**Author:** [@catn0b0t](https://discuss.elastic.co/u/catn0b0t)\ **Replies:** 2\ **Last updated:** [April 18, 2025, 3:15pm UTC](https://discuss.elastic.co/t/improve-support-for-master-data-and-enrichment/377284 "2025-04-18T15:15:09Z")
If you are setting up anything that looks like a datawarehouse or whatever, sooner or later you are going to have a need for some kind of "lookup tables". The lack of support for such thing in Kibana is really frustratin… --- ## [Unable to delete added search to kibana dashboard](https://discuss.elastic.co/t/unable-to-delete-added-search-to-kibana-dashboard/377043)
**Author:** [@vahagg1](https://discuss.elastic.co/u/vahagg1)\ **Replies:** 12\ **Last updated:** [April 18, 2025, 10:09am UTC](https://discuss.elastic.co/t/unable-to-delete-added-search-to-kibana-dashboard/377043 "2025-04-18T10:09:54Z")
Using Kibana version 8.17.3 and added a search result to the one of my dashboard but currently want to remove the search from dashboard which is not possible there is a one pencil logo which goes to Discover to do some e… --- ## [Service killing each week - Error loading SPI class list from URL - x-pack-security](https://discuss.elastic.co/t/service-killing-each-week-error-loading-spi-class-list-from-url-x-pack-security/363142)
**Author:** [@Alan\_Monteiro\_SW](https://discuss.elastic.co/u/Alan_Monteiro_SW)\ **Replies:** 2\ **Last updated:** [March 19, 2025, 2:14pm UTC](https://discuss.elastic.co/t/service-killing-each-week-error-loading-spi-class-list-from-url-x-pack-security/363142 "2025-03-19T14:14:25Z")
Hi :smiley: I was using Elastic Search 8.14.2, and the service would crash every week. The log output showed that x-pack-security-8.14.1 was not found, but the installed Elastic Search version was 8.14.2. I tried reinst… --- ## [Trouble implementing Elasticsearch BBQ](https://discuss.elastic.co/t/trouble-implementing-elasticsearch-bbq/377269)
**Author:** [@DylanWelzel](https://discuss.elastic.co/u/DylanWelzel)\ **Replies:** 1\ **Last updated:** [April 18, 2025, 5:46am UTC](https://discuss.elastic.co/t/trouble-implementing-elasticsearch-bbq/377269 "2025-04-18T05:46:02Z")
I am trying to integrate BBQ, specifically bbq\_hnsw into my existing index. However I'm not seeing the performance benefits I would expect. { "type": "dense\_vector", "dims": dims, "index": True, … --- ## [Filter bar not showing not showing when filtering in visualisation](https://discuss.elastic.co/t/filter-bar-not-showing-not-showing-when-filtering-in-visualisation/375382)
**Author:** [@simagalkova](https://discuss.elastic.co/u/simagalkova)\ **Replies:** 3\ **Last updated:** [April 18, 2025, 5:22am UTC](https://discuss.elastic.co/t/filter-bar-not-showing-not-showing-when-filtering-in-visualisation/375382 "2025-04-18T05:22:27Z")
In some of my dashboards, when using filtering directly in charts (ie click in chart), the filters are applied, but it's not visible on the top that they are applied = I cannot remove them other then with Reset. Happens… --- ## [.monitoring-es-9-mb is missing](https://discuss.elastic.co/t/monitoring-es-9-mb-is-missing/377191)
**Author:** [@dramis](https://discuss.elastic.co/u/dramis)\ **Replies:** 2\ **Last updated:** [April 17, 2025, 9:24pm UTC](https://discuss.elastic.co/t/monitoring-es-9-mb-is-missing/377191 "2025-04-17T21:24:53Z")
Hi, i just migrate to elk 9, i just notice that .monitoring-es-mb System index template still using .monitoring-es-8-\* I also have these error in elk log: \[2025-04-16T07:57:24,226\]\[INFO \]\[o.e.x.i.a.TransportPutL… --- ## [Kibana connector how to show java exception in notification message](https://discuss.elastic.co/t/kibana-connector-how-to-show-java-exception-in-notification-message/377262)
**Author:** [@nurlanizimbetov](https://discuss.elastic.co/u/nurlanizimbetov)\ **Replies:** 0\ **Last updated:** [April 17, 2025, 3:07pm UTC](https://discuss.elastic.co/t/kibana-connector-how-to-show-java-exception-in-notification-message/377262 "2025-04-17T15:07:00Z")
Good afternoon. How to add java exception in notification message to alert? Currently we using slack as platform for alerts.. i've tried to add this: - Message3: {{error.exception.message}} {{error.exception.type }} {… --- ## [Filebeat missing all logs from K8s cluster](https://discuss.elastic.co/t/filebeat-missing-all-logs-from-k8s-cluster/377257)
**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\ **Replies:** 0\ **Last updated:** [April 17, 2025, 2:20pm UTC](https://discuss.elastic.co/t/filebeat-missing-all-logs-from-k8s-cluster/377257 "2025-04-17T14:20:05Z")
We have deployed filebeat in kubernetes cluster to collect large volume of logs. However we see filebeat is not indexing all the logs. It is consistently missing good amount of logs. We did setup monitoring for beats age… --- ## [JDBC - This driver is not configured for integrated authentication](https://discuss.elastic.co/t/jdbc-this-driver-is-not-configured-for-integrated-authentication/377225)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 2\ **Last updated:** [April 17, 2025, 2:03pm UTC](https://discuss.elastic.co/t/jdbc-this-driver-is-not-configured-for-integrated-authentication/377225 "2025-04-17T14:03:21Z")
Trying to connect to my Sql Server Instance thru Windows Authentication using the following configuration: input { udp { port =\> 517 } } filter { mutate { gsub =\> \[ "message", "\\u0000", "\[0x00\]" \] } mutate { gsub … --- ## [Data stream default to true](https://discuss.elastic.co/t/data-stream-default-to-true/377154)
**Author:** [@opensourcengineer](https://discuss.elastic.co/u/opensourcengineer)\ **Replies:** 1\ **Last updated:** [April 17, 2025, 12:59pm UTC](https://discuss.elastic.co/t/data-stream-default-to-true/377154 "2025-04-17T12:59:20Z")
we are using model qwen2.5 model as a connector and we tested the model and its running fine. when we are asking AI assistant , the payload data is going to LMstudio with stream:true. i would like to change it to "stream… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=76) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=78)