# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=815 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 816 --- ## [Illegal\_argument\_exception when trying to see Security/Hosts](https://discuss.elastic.co/t/illegal-argument-exception-when-trying-to-see-security-hosts/313140)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 0\ **Last updated:** [August 29, 2022, 9:03am UTC](https://discuss.elastic.co/t/illegal-argument-exception-when-trying-to-see-security-hosts/313140 "2022-08-29T09:03:42Z")
Hello! I am trying to see hosts on one of my clusters (self-hosted). I have got three nodes here. When I go to Security/Host I get error 400: Full error message: { "message": "status\_exception", "statusCode": … --- ## [Is there any way to use the search result from one index to search on another index?](https://discuss.elastic.co/t/is-there-any-way-to-use-the-search-result-from-one-index-to-search-on-another-index/313131)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 9:04am UTC](https://discuss.elastic.co/t/is-there-any-way-to-use-the-search-result-from-one-index-to-search-on-another-index/313131 "2022-08-29T09:04:42Z")
I wanted to search for some data on the first index. Then I need to find the unique values of a specific field in the above search result, and search for the them in the second index. The names of the indices are diffe… --- ## [Word\_delimiter behaviour using match query with operator and](https://discuss.elastic.co/t/word-delimiter-behaviour-using-match-query-with-operator-and/313135)
**Author:** [@the\_hoff](https://discuss.elastic.co/u/the_hoff)\ **Replies:** 0\ **Last updated:** [August 29, 2022, 8:35am UTC](https://discuss.elastic.co/t/word-delimiter-behaviour-using-match-query-with-operator-and/313135 "2022-08-29T08:35:20Z")
Hi folks, I am currently using the word\_delimiter for splitting up tokens to subtokens with Elastic Version 7.9.2.I do get an unexpected outcome using the delimiter filter with a match query and operator "and" and I am … --- ## [Indices of elasticsearch](https://discuss.elastic.co/t/indices-of-elasticsearch/313073)
**Author:** [@Milan\_Dangol](https://discuss.elastic.co/u/Milan_Dangol)\ **Replies:** 2\ **Last updated:** [August 29, 2022, 8:51am UTC](https://discuss.elastic.co/t/indices-of-elasticsearch/313073 "2022-08-29T08:51:38Z")
Hello there! I am new to elasticsearch. So i was looking around ILM and it was a quite useful tool to remove old indices. But my concern here is, when i looked into /var/lib/elasticsearch. There was a folder named indice… --- ## [Max count of a index in a day](https://discuss.elastic.co/t/max-count-of-a-index-in-a-day/313133)
**Author:** [@maruf](https://discuss.elastic.co/u/maruf)\ **Replies:** 0\ **Last updated:** [August 29, 2022, 8:30am UTC](https://discuss.elastic.co/t/max-count-of-a-index-in-a-day/313133 "2022-08-29T08:30:59Z")
Hi, I am new to elasticsearch. We are using ELK stack for logging nginx and various logs. Is there a way to aggregate today's max for an index pattern? Example: In Kibana I can see the spike, I want to get that ti… --- ## [Fleet Server - Error - x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/312923)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 8\ **Last updated:** [August 29, 2022, 8:27am UTC](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/312923 "2022-08-29T08:27:23Z")
Hi All, Please have some patience with me cause i ll give as much details. I have my ELK stack (elastic, kibana, logstash) on same local server (192.168.0.2) and im trying to install Fleet server on another host (192.1… --- ## [How to get the health status of a single index in elasticsearch?](https://discuss.elastic.co/t/how-to-get-the-health-status-of-a-single-index-in-elasticsearch/313129)
**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 8:09am UTC](https://discuss.elastic.co/t/how-to-get-the-health-status-of-a-single-index-in-elasticsearch/313129 "2022-08-29T08:09:39Z")
I am using elasticsearch 5.6.16. I know about the cluster health and cat health APIs which come bundled with elasticsearch 5.6 I want to know the status of a particular index found inside my elasticsearch local instance… --- ## [How to access old indices from rollover alias after rollover in ES 7.16](https://discuss.elastic.co/t/how-to-access-old-indices-from-rollover-alias-after-rollover-in-es-7-16/313081)
**Author:** [@sambhav\_khare](https://discuss.elastic.co/u/sambhav_khare)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 6:36am UTC](https://discuss.elastic.co/t/how-to-access-old-indices-from-rollover-alias-after-rollover-in-es-7-16/313081 "2022-08-29T06:36:59Z")
I have a template and policy to rollover and delete the indexes after 2 days but after rollover old indices will not be pointing to rollover alias and will have data that will be needed for 2 more days. Template: { "… --- ## [Docker elastic-agent certificate signed by unknown authority](https://discuss.elastic.co/t/docker-elastic-agent-certificate-signed-by-unknown-authority/313024)
**Author:** [@orihomie](https://discuss.elastic.co/u/orihomie)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 6:09am UTC](https://discuss.elastic.co/t/docker-elastic-agent-certificate-signed-by-unknown-authority/313024 "2022-08-29T06:09:57Z")
Hi. I'm trying to launch elastic-agent in a docker-compose way: elastic-agent: platform: linux/arm64 image: docker.elastic.co/beats/elastic-agent:8.2.3 container\_name: elastic-agent restart: always u… --- ## [Remove elastic auth page but use x-pack](https://discuss.elastic.co/t/remove-elastic-auth-page-but-use-x-pack/313105)
**Author:** [@Murali\_Krishna2](https://discuss.elastic.co/u/Murali_Krishna2)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 5:32am UTC](https://discuss.elastic.co/t/remove-elastic-auth-page-but-use-x-pack/313105 "2022-08-29T05:32:57Z")
Hi Team, In our company, we are using the elastic stack for the last 4 years. As x-pack security was only for paid users before. Instead of x-pack, we used google authentication for login. Once a user log-in with the… --- ## [Failed to determine the health of the cluster](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/313117)
**Author:** [@rajvel](https://discuss.elastic.co/u/rajvel)\ **Replies:** 4\ **Last updated:** [August 29, 2022, 4:42am UTC](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster/313117 "2022-08-29T04:42:26Z")
Hello Team, We used the CA to create a http.p12 file for elasticsearch secured configuration. If we use the own CA, the kibana error. Please help me to fix the issue. Server not yet ready. \[ERROR\]\[elasticsearch-serv… --- ## [Docker beat?](https://discuss.elastic.co/t/docker-beat/313074)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [August 29, 2022, 3:45am UTC](https://discuss.elastic.co/t/docker-beat/313074 "2022-08-29T03:45:42Z")
Dear all, I thought something like docker beat did exist? What is the best practice to replace the docker beat? Thanky you and kind regards! --- ## [Elastic Cloud Pricing Question](https://discuss.elastic.co/t/elastic-cloud-pricing-question/313079)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [August 29, 2022, 3:43am UTC](https://discuss.elastic.co/t/elastic-cloud-pricing-question/313079 "2022-08-29T03:43:44Z")
Hi there, I was reading this article: and I have a question to better understand the pricing mode. Let us say I have choose (as stated in the example) a “Compute Optimized” profile. This means in the first place mor… --- ## [Help me...! Error Caused by: java.lang.IllegalStateException: jar hell!](https://discuss.elastic.co/t/help-me-error-caused-by-java-lang-illegalstateexception-jar-hell/313116)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 2:39am UTC](https://discuss.elastic.co/t/help-me-error-caused-by-java-lang-illegalstateexception-jar-hell/313116 "2022-08-29T02:39:28Z")
The following error is occurring So I deleted the lib in elasticsearch/lib, but if I delete it, another error occurs If I try to delete it from the java project, a code compilation error occurs, what should I do? grad… --- ## [Resolving master node election issues](https://discuss.elastic.co/t/resolving-master-node-election-issues/313054)
**Author:** [@christhegrand](https://discuss.elastic.co/u/christhegrand)\ **Replies:** 1\ **Last updated:** [August 29, 2022, 1:36am UTC](https://discuss.elastic.co/t/resolving-master-node-election-issues/313054 "2022-08-29T01:36:11Z")
Hello, I'm using the ECK stack to run Elasticsearch. Right now it looks like there is no known master node and the election attempts are failing. How do I fix this? Some logs are included below: {"type": "server", "tim… --- ## [Debugging error when using suggest in elastic search](https://discuss.elastic.co/t/debugging-error-when-using-suggest-in-elastic-search/313115)
**Author:** [@Duc\_Vo](https://discuss.elastic.co/u/Duc_Vo)\ **Replies:** 0\ **Last updated:** [August 29, 2022, 1:34am UTC](https://discuss.elastic.co/t/debugging-error-when-using-suggest-in-elastic-search/313115 "2022-08-29T01:34:50Z")
Invalid NEST response built from a unsuccessful (400) low level call on POST: /demo\_products/\_search?pretty=true&typed\_keys=true Audit trail of this API call: \[1\] ProductCheckOnStartup: Took: 00:00:00.2614523 \[2\] Produ… --- ## [DNS lookup failure | Failed to connect to backoff(async(tcp | no such host](https://discuss.elastic.co/t/dns-lookup-failure-failed-to-connect-to-backoff-async-tcp-no-such-host/313111)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 10\ **Last updated:** [August 28, 2022, 10:54pm UTC](https://discuss.elastic.co/t/dns-lookup-failure-failed-to-connect-to-backoff-async-tcp-no-such-host/313111 "2022-08-28T22:54:00Z")
dear friends, please help: I have several servers with beats, kibana, logstash and elasticsearch (these are not docker(!)). trying to send logs from metricbeat to elasticsearch via logstash. here is my metricbeat.yml con… --- ## [Elasticsearch keeps saying Connection refused on AWS EC2](https://discuss.elastic.co/t/elasticsearch-keeps-saying-connection-refused-on-aws-ec2/313084)
**Author:** [@samacker77elastic](https://discuss.elastic.co/u/samacker77elastic)\ **Replies:** 1\ **Last updated:** [August 28, 2022, 10:19pm UTC](https://discuss.elastic.co/t/elasticsearch-keeps-saying-connection-refused-on-aws-ec2/313084 "2022-08-28T22:19:02Z")
All the three services Elasticsearch, Kibana, and logstash are active & running on EC2 instance. Number of nodes I have set is 1 for testing purposes. Elasticsearch log \[2022-08-28T07:36:50,297\]\[WARN \]\[o.e.d.PeerFinde… --- ## [Elastic query for where in](https://discuss.elastic.co/t/elastic-query-for-where-in/313104)
**Author:** [@Harrowmykel](https://discuss.elastic.co/u/Harrowmykel)\ **Replies:** 5\ **Last updated:** [August 28, 2022, 8:59pm UTC](https://discuss.elastic.co/t/elastic-query-for-where-in/313104 "2022-08-28T20:59:22Z")
Hello, Can someone give me the json query equivalent of the following MySQL query Select \* from Table where col1=q or col2=q where cat in (cat1, cat2, cat3) Basically I want to find "q" in index "Table" but restricted… --- ## [Add follower index error: "index\_not\_found\_exception"](https://discuss.elastic.co/t/add-follower-index-error-index-not-found-exception/313108)
**Author:** [@Zeus29](https://discuss.elastic.co/u/Zeus29)\ **Replies:** 0\ **Last updated:** [August 28, 2022, 7:36pm UTC](https://discuss.elastic.co/t/add-follower-index-error-index-not-found-exception/313108 "2022-08-28T19:36:05Z")
Hi, I have 2 elastic clusters (Cluster1 and Cluster2) and I am trying to configure a follower index in Cluster2 from a leader index of Cluster1. I have followed the next steps: Add Cluster1 as remote cluster in Clus… --- ## [Understanding Bool and Nested Query](https://discuss.elastic.co/t/understanding-bool-and-nested-query/313102)
**Author:** [@Aditya-Kumar-Sinha](https://discuss.elastic.co/u/Aditya-Kumar-Sinha)\ **Replies:** 0\ **Last updated:** [August 28, 2022, 5:20pm UTC](https://discuss.elastic.co/t/understanding-bool-and-nested-query/313102 "2022-08-28T17:20:44Z")
I want to understand both the queries how they are different "query": { "nested": { "path": "addresses", "query": { "bool": { "must\_not": \[ { "exists": { … --- ## [Is Docker Compose supported for a single node Elasticsearch setup?](https://discuss.elastic.co/t/is-docker-compose-supported-for-a-single-node-elasticsearch-setup/313071)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 5\ **Last updated:** [August 28, 2022, 4:54pm UTC](https://discuss.elastic.co/t/is-docker-compose-supported-for-a-single-node-elasticsearch-setup/313071 "2022-08-28T16:54:52Z")
I'm new to Elasticstack and trying to set up a minimal development installation. I followed the instructions in Install Kibana With Docker and got what I needed. However, it seems silly to run multiple docker run comma… --- ## [Unable to connect filebeat with elasticsearch " Authentication to realm default\_native failed"](https://discuss.elastic.co/t/unable-to-connect-filebeat-with-elasticsearch-authentication-to-realm-default-native-failed/313095)
**Author:** [@Ahlam\_Abubaker](https://discuss.elastic.co/u/Ahlam_Abubaker)\ **Replies:** 1\ **Last updated:** [August 28, 2022, 3:34pm UTC](https://discuss.elastic.co/t/unable-to-connect-filebeat-with-elasticsearch-authentication-to-realm-default-native-failed/313095 "2022-08-28T15:34:43Z")
I'm trying to test the connection between filebeat on server and elasticsearch running on another server "both are on the same network" I'm getting this output when running this command ./filebeat test output ........… --- ## [Query with function](https://discuss.elastic.co/t/query-with-function/313096)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 0\ **Last updated:** [August 28, 2022, 2:01pm UTC](https://discuss.elastic.co/t/query-with-function/313096 "2022-08-28T14:01:56Z")
Hi, I want to get data that answer functions: (X AND 3 == 1) Means get the documents that answer the function condition (AND 3 = 1), While X is the value from document. What is the best approach to implement it? Than… --- ## [How to change the jvm options config](https://discuss.elastic.co/t/how-to-change-the-jvm-options-config/313085)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 3\ **Last updated:** [August 28, 2022, 10:00am UTC](https://discuss.elastic.co/t/how-to-change-the-jvm-options-config/313085 "2022-08-28T10:00:33Z")
I want to decrease the ram of the consummation of elastic in the JVM options config how can I? ################################################################ ## IMPORTANT: JVM heap size ###############################… --- ## [Queries latency increased after upgrade to es7](https://discuss.elastic.co/t/queries-latency-increased-after-upgrade-to-es7/313006)
**Author:** [@Eylon\_Koren1](https://discuss.elastic.co/u/Eylon_Koren1)\ **Replies:** 1\ **Last updated:** [August 28, 2022, 8:59am UTC](https://discuss.elastic.co/t/queries-latency-increased-after-upgrade-to-es7/313006 "2022-08-28T08:59:13Z")
Hi! We upgraded our ES cluster from version 6.8 to 7.17.3, afterwards the query latency was increased (10 - 30 ms) for all different kind of queries. We expected for reducing the query latency after upgrade, because … --- ## [How does Elasticsearch indexes non-text fields](https://discuss.elastic.co/t/how-does-elasticsearch-indexes-non-text-fields/313072)
**Author:** [@ImranArif](https://discuss.elastic.co/u/ImranArif)\ **Replies:** 4\ **Last updated:** [August 28, 2022, 7:32am UTC](https://discuss.elastic.co/t/how-does-elasticsearch-indexes-non-text-fields/313072 "2022-08-28T07:32:21Z")
Hi, I understand that Elasticsearch analyzes text fields and saves the resulting tokens in an inverted index data structure. But I am a bit confused regarding how does Elasticsearch stores other fields, like integer, fl… --- ## [How to read csv files from another machine /server and How define path in logstash config file or in filebeat yml file?](https://discuss.elastic.co/t/how-to-read-csv-files-from-another-machine-server-and-how-define-path-in-logstash-config-file-or-in-filebeat-yml-file/313075)
**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\ **Replies:** 0\ **Last updated:** [August 28, 2022, 6:12am UTC](https://discuss.elastic.co/t/how-to-read-csv-files-from-another-machine-server-and-how-define-path-in-logstash-config-file-or-in-filebeat-yml-file/313075 "2022-08-28T06:12:26Z")
input { file { path =\> "/home/bhaveshk/.\*csv" (How to define path here to read csv file from another machine/server) start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } --- ## [Hostname/IP does not match certificate's altnames](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificates-altnames/312777)
**Author:** [@it\_dev](https://discuss.elastic.co/u/it_dev)\ **Replies:** 2\ **Last updated:** [August 28, 2022, 6:02am UTC](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificates-altnames/312777 "2022-08-28T06:02:58Z")
I have installed ELK 8 stack fresh. If I change server's IP address, Kibana says: Kibana server is not ready yet. I looked up in the log file, it says: Unable to retrieve version information from Elasticsearch nodes. … --- ## [Loop over inner\_hits within post\_filter via script](https://discuss.elastic.co/t/loop-over-inner-hits-within-post-filter-via-script/313044)
**Author:** [@Sumit\_Jha1](https://discuss.elastic.co/u/Sumit_Jha1)\ **Replies:** 3\ **Last updated:** [August 27, 2022, 1:27pm UTC](https://discuss.elastic.co/t/loop-over-inner-hits-within-post-filter-via-script/313044 "2022-08-27T13:27:38Z")
This is how the response looks like: { "hits" : { "hits" : \[ { "\_index" : "myindex", "\_type" : "\_doc", "\_id" : "7201e7f0-882f-4184-bdda-71302b8c28d3", "\_source" : {...}, … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=814) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=816)