# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=816 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 817 --- ## [Elasticsearch wont start after upgrade to 8.4 - repository-gcs issue](https://discuss.elastic.co/t/elasticsearch-wont-start-after-upgrade-to-8-4-repository-gcs-issue/313060)
**Author:** [@kribor1](https://discuss.elastic.co/u/kribor1)\ **Replies:** 1\ **Last updated:** [August 27, 2022, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-after-upgrade-to-8-4-repository-gcs-issue/313060 "2022-08-27T10:23:01Z")
Hi, As I updated to 8.4 today one of my nodes (I have a 2-node cluster) now fails to start with the below stacktrace: Exception in thread "main" java.lang.IllegalArgumentException: Unknown properties for plugin \[reposi… --- ## [Add version for Mapping](https://discuss.elastic.co/t/add-version-for-mapping/313047)
**Author:** [@Ghassan\_Karwchan](https://discuss.elastic.co/u/Ghassan_Karwchan)\ **Replies:** 1\ **Last updated:** [August 27, 2022, 12:50am UTC](https://discuss.elastic.co/t/add-version-for-mapping/313047 "2022-08-27T00:50:13Z")
Hi. A newbie question. Can I add some kind of versioning for the mapping itself and not the document. So, it is not a property or attribute of the document being indexed, but the mapping itself. So, when I request th… --- ## [Automate Kibana Alerting using Terraform](https://discuss.elastic.co/t/automate-kibana-alerting-using-terraform/313053)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 10:21pm UTC](https://discuss.elastic.co/t/automate-kibana-alerting-using-terraform/313053 "2022-08-26T22:21:16Z")
Hello All, I am trying to automate Kibana alert creation through Terraform but couldn't find a Terraform provider for it. Can someone please suggest if this is possible? Thanks --- ## [Trying to understand how Logstash Redis input plugin works](https://discuss.elastic.co/t/trying-to-understand-how-logstash-redis-input-plugin-works/313042)
**Author:** [@ImranArif](https://discuss.elastic.co/u/ImranArif)\ **Replies:** 3\ **Last updated:** [August 26, 2022, 8:54pm UTC](https://discuss.elastic.co/t/trying-to-understand-how-logstash-redis-input-plugin-works/313042 "2022-08-26T20:54:56Z")
Hi, Please consider the following input plugin configuration of Logstash: input { redis { host =\> "es1" port =\> 6380 batch\_count =\> 2000 data\_type =\> "list" key =\> "log\_list" codec =\> plain … --- ## [Highlight Html not indexed run time](https://discuss.elastic.co/t/highlight-html-not-indexed-run-time/313045)
**Author:** [@lixaotec](https://discuss.elastic.co/u/lixaotec)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 7:25pm UTC](https://discuss.elastic.co/t/highlight-html-not-indexed-run-time/313045 "2022-08-26T19:25:18Z")
Dear fellows, Is it possible to 'somehow', tells elasticsearch to apply highlight to a html text , that is not indexed? I mean, suppose I store the html in a blob storage, and then wish to show it with an on-the-run hi… --- ## [Parsing issue with Event ID 4740](https://discuss.elastic.co/t/parsing-issue-with-event-id-4740/313034)
**Author:** [@LuKaaS](https://discuss.elastic.co/u/LuKaaS)\ **Replies:** 1\ **Last updated:** [August 26, 2022, 5:36pm UTC](https://discuss.elastic.co/t/parsing-issue-with-event-id-4740/313034 "2022-08-26T17:36:21Z")
Hello everybody, We are facing a parsing issue with the Event ID 4740 (A user account was locked) with Winlogbeat. Winlogbeat version : 8.2.3 Winlogbeat log : { "ecs": { "version": "8.0.0" }, … --- ## [Elasticsearch vector tile search point resolution](https://discuss.elastic.co/t/elasticsearch-vector-tile-search-point-resolution/312125)
**Author:** [@Charles\_Bodman](https://discuss.elastic.co/u/Charles_Bodman)\ **Replies:** 2\ **Last updated:** [August 26, 2022, 4:55pm UTC](https://discuss.elastic.co/t/elasticsearch-vector-tile-search-point-resolution/312125 "2022-08-26T16:55:22Z")
Hi there, We're currently developing a feature for a map project utilizing Elasticsearch vector tile search (MVT). Our feature is displaying individual document location points. (Points, not polygons). The problem we'… --- ## [.logstash\_jdbc\_last\_run not created when running logstash as a service](https://discuss.elastic.co/t/logstash-jdbc-last-run-not-created-when-running-logstash-as-a-service/313008)
**Author:** [@Kowsalya\_Mouttou](https://discuss.elastic.co/u/Kowsalya_Mouttou)\ **Replies:** 6\ **Last updated:** [August 26, 2022, 4:08pm UTC](https://discuss.elastic.co/t/logstash-jdbc-last-run-not-created-when-running-logstash-as-a-service/313008 "2022-08-26T16:08:05Z")
Hi, My problem is when I run logstash as a service. I'm working with centos6 and ELK 7.9.2 For a same config file with logstash-input-jdbc, evrything works fine when running logstash with the command line : /usr/shar… --- ## [Remove symbol from logstash](https://discuss.elastic.co/t/remove-symbol-from-logstash/312998)
**Author:** [@travlest](https://discuss.elastic.co/u/travlest)\ **Replies:** 1\ **Last updated:** [August 26, 2022, 3:59pm UTC](https://discuss.elastic.co/t/remove-symbol-from-logstash/312998 "2022-08-26T15:59:04Z")
hi, i have a string like this - \['127.0.53.53'\] and \['104.21.57.219', '172.67.192.115'\] i would like to remove the symbol \[' xx '\] I have tried something like this, but it seems fail. can anybody help me? mutate { gs… --- ## [Can't re-enable Kibana monitoring after export/import of saved objects](https://discuss.elastic.co/t/cant-re-enable-kibana-monitoring-after-export-import-of-saved-objects/312966)
**Author:** [@HockeyFan0000](https://discuss.elastic.co/u/HockeyFan0000)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 9:00pm UTC](https://discuss.elastic.co/t/cant-re-enable-kibana-monitoring-after-export-import-of-saved-objects/312966 "2022-08-25T21:00:47Z")
I had enabled self-monitoring in Kibana and it was working. I was told to migrate the dashboards, searches (etc) from one cluster to another. I exported the saved objects out of one cluster and imported some of them in… --- ## [Is it possible to suggester search with vector?](https://discuss.elastic.co/t/is-it-possible-to-suggester-search-with-vector/313030)
**Author:** [@dirkdiggler41](https://discuss.elastic.co/u/dirkdiggler41)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 3:02pm UTC](https://discuss.elastic.co/t/is-it-possible-to-suggester-search-with-vector/313030 "2022-08-26T15:02:46Z")
Hi! I see that in version 8 there has been some improvement to the vector/knn search. So just wondering, is it possible to use it with the suggester search? Another thing, I assume that the suggester search is faster th… --- ## [Applications unable to connect to APM running under Elastic Agent](https://discuss.elastic.co/t/applications-unable-to-connect-to-apm-running-under-elastic-agent/313026)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 2:39pm UTC](https://discuss.elastic.co/t/applications-unable-to-connect-to-apm-running-under-elastic-agent/313026 "2022-08-26T14:39:01Z")
I am attempting to migrate my EKS cluster Elastic APM agent from the stand-alone agent to elastic-agent. I'm using a fleet-managed policy with an agent deployed using Elastic Operator, which sends data to the cloud. I'm … --- ## [\[elasticsearch 8.3\] Master node 'dies' once per week](https://discuss.elastic.co/t/elasticsearch-8-3-master-node-dies-once-per-week/311493)
**Author:** [@Roberto\_D\_Arco](https://discuss.elastic.co/u/Roberto_D_Arco)\ **Replies:** 10\ **Last updated:** [August 26, 2022, 12:53pm UTC](https://discuss.elastic.co/t/elasticsearch-8-3-master-node-dies-once-per-week/311493 "2022-08-26T12:53:28Z")
We have 2 very similar self managed cluster, staging and production, on AWS and on arm architecture (graviton2) and amazon linux 2 base image: 3 master nodes and 3 datanodes. In all instances we have installed monit that… --- ## [Elasticsearch pod is not running when enable security](https://discuss.elastic.co/t/elasticsearch-pod-is-not-running-when-enable-security/313018)
**Author:** [@amsmzn](https://discuss.elastic.co/u/amsmzn)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 11:52am UTC](https://discuss.elastic.co/t/elasticsearch-pod-is-not-running-when-enable-security/313018 "2022-08-26T11:52:26Z")
Hi, How can i enable authentication in elasticsearch helm chart. When i am enabling xpack.security.enabled : true, elasicsearch pod begins to get failed. My kibana is exposed over https. Can anybody please guide my how … --- ## [AWS WAF data with filebeat/metricbeat](https://discuss.elastic.co/t/aws-waf-data-with-filebeat-metricbeat/313017)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 11:34am UTC](https://discuss.elastic.co/t/aws-waf-data-with-filebeat-metricbeat/313017 "2022-08-26T11:34:47Z")
Im looking to export logs/metrics from aws waf to elasticsearch, however i dont see any mention of WAF under the aws module of either filebeat or metricbeat. So how exactly do i integrate this. filebeat: metricbeat: --- ## [Logs are not coming from the client when custom logs integration was added](https://discuss.elastic.co/t/logs-are-not-coming-from-the-client-when-custom-logs-integration-was-added/313011)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 1\ **Last updated:** [August 26, 2022, 11:23am UTC](https://discuss.elastic.co/t/logs-are-not-coming-from-the-client-when-custom-logs-integration-was-added/313011 "2022-08-26T11:23:34Z")
I was trying to use custom logs to ingest log files of tomcat9 from a client system. \*The client system is using the policy Agent policy 1 \*The client system is also running apache2. Apache httpd server integration (in… --- ## [Get dynamic payload value of kibana rest API for pytest code](https://discuss.elastic.co/t/get-dynamic-payload-value-of-kibana-rest-api-for-pytest-code/313013)
**Author:** [@pranitha89](https://discuss.elastic.co/u/pranitha89)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 10:33am UTC](https://discuss.elastic.co/t/get-dynamic-payload-value-of-kibana-rest-api-for-pytest-code/313013 "2022-08-26T10:33:02Z")
I am working on capturing kibana logs for my application by automation using pytest frame work. For that I need to get the dynamic payload(from inspection page-\>network) in to my code. please can somebody help me with … --- ## [Display Intime value of field for every timestamp as Timeseries](https://discuss.elastic.co/t/display-intime-value-of-field-for-every-timestamp-as-timeseries/312760)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [August 25, 2022, 3:21am UTC](https://discuss.elastic.co/t/display-intime-value-of-field-for-every-timestamp-as-timeseries/312760 "2022-08-25T03:21:07Z")
Hello All, I want to simply display the value of filed(coming every seconds) from my script wrt to statistic time. Through TSVB in kibana I want to display this.As I'm unbale to achieve this,Below are the images attach… --- ## [Excluding patterns with KQL](https://discuss.elastic.co/t/excluding-patterns-with-kql/310965)
**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\ **Replies:** 2\ **Last updated:** [August 26, 2022, 9:28am UTC](https://discuss.elastic.co/t/excluding-patterns-with-kql/310965 "2022-08-26T09:28:15Z")
Hi, I'm trying to exclude some patterns when using the Discover feature of Kibana (v8.2) but it doesn't seem to work and return 0 results. For example, I have the following indexed doc: { "\_index": "installs3", "\_… --- ## [Java High Level Rest Client - Mutli Search API Not working with Elasticsearch 8.3.2](https://discuss.elastic.co/t/java-high-level-rest-client-mutli-search-api-not-working-with-elasticsearch-8-3-2/310515)
**Author:** [@sheiks2m](https://discuss.elastic.co/u/sheiks2m)\ **Replies:** 4\ **Last updated:** [August 26, 2022, 9:15am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-mutli-search-api-not-working-with-elasticsearch-8-3-2/310515 "2022-08-26T09:15:34Z")
HI, Im using Java High level rest client version 7.17.5. Multi Search API not working as expected. Please find the below code. SearchSourceBuilder metaDataSearch = new SearchSourceBuilder(); org.elasticsearch.a… --- ## [Apache, Filebeat, Kibana 8.3.3](https://discuss.elastic.co/t/apache-filebeat-kibana-8-3-3/312696)
**Author:** [@Gunnar](https://discuss.elastic.co/u/Gunnar)\ **Replies:** 5\ **Last updated:** [August 26, 2022, 8:38am UTC](https://discuss.elastic.co/t/apache-filebeat-kibana-8-3-3/312696 "2022-08-26T08:38:26Z")
Hello, I'm new to Filebeat and Kibana. I'm having a strange issue, I'm sending apache logfiles to Elasticsearch using the apache module. On Kibana logfile shows like this: 13:06:23.462 www.xxx.de 185.191.171.22 - - \[23… --- ## [Can't remove deleted object from dashboard](https://discuss.elastic.co/t/cant-remove-deleted-object-from-dashboard/312927)
**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\ **Replies:** 2\ **Last updated:** [August 26, 2022, 8:17am UTC](https://discuss.elastic.co/t/cant-remove-deleted-object-from-dashboard/312927 "2022-08-26T08:17:44Z")
Dear All, I deleted a visualisation from the library which was used in a kibana dashboard. Unfortunately there is now an empty frame which can't be removed from the dashboard. Any ideas how to solve this issue without … --- ## [Can't restart kibana](https://discuss.elastic.co/t/cant-restart-kibana/312357)
**Author:** [@Sarindra\_Therese](https://discuss.elastic.co/u/Sarindra_Therese)\ **Replies:** 11\ **Last updated:** [August 26, 2022, 7:44am UTC](https://discuss.elastic.co/t/cant-restart-kibana/312357 "2022-08-26T07:44:22Z")
I've just started to learn elasticsearch and kibana yesterday, Today, when i try to restart kibana server, it's return me error: FATAL Error: Port 5601 is already in use. Another instance of Kibana may be running! Th… --- ## [How to identify specific users who are submitting slowlog queries?](https://discuss.elastic.co/t/how-to-identify-specific-users-who-are-submitting-slowlog-queries/312120)
**Author:** [@Apprentice](https://discuss.elastic.co/u/Apprentice)\ **Replies:** 10\ **Last updated:** [August 26, 2022, 7:19am UTC](https://discuss.elastic.co/t/how-to-identify-specific-users-who-are-submitting-slowlog-queries/312120 "2022-08-26T07:19:50Z")
I'm trying to create a dashboard that can identify slow queries and the user who submitted them. Was wondering if there were any examples/guides I could follow online as I am a bit stumped on how to go about this (am a b… --- ## [Logstash -\> Elastic Timeouts](https://discuss.elastic.co/t/logstash-elastic-timeouts/312713)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 5\ **Last updated:** [August 26, 2022, 7:17am UTC](https://discuss.elastic.co/t/logstash-elastic-timeouts/312713 "2022-08-26T07:17:13Z")
I have 2 logstash nodes with about 30 different pipelines sending data to a 6 node elastic cluster. For about half of my pipelines I am seeing a ton of errors like this in the /var/log/logstash/pipeline\_mypipeline.log fi… --- ## [Error while restore snapshot GCS](https://discuss.elastic.co/t/error-while-restore-snapshot-gcs/312968)
**Author:** [@Kiran\_Kumar\_Thungala](https://discuss.elastic.co/u/Kiran_Kumar_Thungala)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 9:29pm UTC](https://discuss.elastic.co/t/error-while-restore-snapshot-gcs/312968 "2022-08-25T21:29:09Z")
Hi, I'm struggle trying to restore an index from a snapshot which was taken by SLM. The steps I've following are: We have snapshots which was taken as per SLM, i am trying to restore one of the snapshot: "backup" : { … --- ## [Knowing when an event message get sent to pubsub](https://discuss.elastic.co/t/knowing-when-an-event-message-get-sent-to-pubsub/312987)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 4:14am UTC](https://discuss.elastic.co/t/knowing-when-an-event-message-get-sent-to-pubsub/312987 "2022-08-26T04:14:01Z")
I'm using this plugin to send kafka events to pubsub, I'm running to some issue where I need to know when the message arrived at logstash and when it was attempted to be delivered to pubsub. When I tried to enable log… --- ## [Elasticsearch tableau connection error](https://discuss.elastic.co/t/elasticsearch-tableau-connection-error/312985)
**Author:** [@vnaresh66temp5](https://discuss.elastic.co/u/vnaresh66temp5)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 3:42am UTC](https://discuss.elastic.co/t/elasticsearch-tableau-connection-error/312985 "2022-08-26T03:42:41Z")
We are trying to connect to elasticsearch from tableau to do some BI stuff. We are planning to buy a platinum license. But before that, we would like to see how it works with tableau, elasticsearch I took a trail licens… --- ## [I'm getting jar hell when installing custom analyzer plugin](https://discuss.elastic.co/t/im-getting-jar-hell-when-installing-custom-analyzer-plugin/312978)
**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\ **Replies:** 0\ **Last updated:** [August 26, 2022, 2:46am UTC](https://discuss.elastic.co/t/im-getting-jar-hell-when-installing-custom-analyzer-plugin/312978 "2022-08-26T02:46:34Z")
The following error is occurring So I deleted the lib in elasticsearch/lib, but if I delete it, another error occurs If I try to delete it from the java project, a code compilation error occurs, what should I do? grad… --- ## [Elasticsearch Platinum license](https://discuss.elastic.co/t/elasticsearch-platinum-license/312983)
**Author:** [@vnaresh66temp5](https://discuss.elastic.co/u/vnaresh66temp5)\ **Replies:** 1\ **Last updated:** [August 26, 2022, 3:32am UTC](https://discuss.elastic.co/t/elasticsearch-platinum-license/312983 "2022-08-26T03:32:11Z")
I am planning to buy an elasticsearch platinum license. We have three working environments, Dev, Uat, Prod. If I buy one elasticsearch platinum license, is it enough to use the same license on three environments or shou… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=815) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=817)