# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=84 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 85 --- ## [How does elastic compare to mongodb for vector search](https://discuss.elastic.co/t/how-does-elastic-compare-to-mongodb-for-vector-search/376467)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 2\ **Last updated:** [March 28, 2025, 10:06am UTC](https://discuss.elastic.co/t/how-does-elastic-compare-to-mongodb-for-vector-search/376467 "2025-03-28T10:06:35Z")
we are evaluating elastic and mongodb for our vector search usecase. What are some advantages of elastic over mongodb? --- ## [No Role/User Admin - no reporting](https://discuss.elastic.co/t/no-role-user-admin-no-reporting/376514)
**Author:** [@Michael\_Jervis](https://discuss.elastic.co/u/Michael_Jervis)\ **Replies:** 1\ **Last updated:** [March 28, 2025, 9:16am UTC](https://discuss.elastic.co/t/no-role-user-admin-no-reporting/376514 "2025-03-28T09:16:57Z")
Hi, We set up ELK 7.17 some time ago following a digital ocean guide here: The login appears to just be set up via the NGINX basic auth. When I go into Stack Management there is no Roles or Users section, we don't ha… --- ## [Enabling Trace Logging for a shard/index](https://discuss.elastic.co/t/enabling-trace-logging-for-a-shard-index/376486)
**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\ **Replies:** 4\ **Last updated:** [March 28, 2025, 5:28am UTC](https://discuss.elastic.co/t/enabling-trace-logging-for-a-shard-index/376486 "2025-03-28T05:28:13Z")
Hi Team, Is there a way to enable trace logging for a particular shard or particular index in elasticsearch. I tried doing this but it didn't work PUT \_cluster/settings { "transient": { "logger.org.elasticsearch… --- ## [Java: java.lang.foreign.\* is a preview API and is disabled by default. (use --enable-preview to enable preview APIs)](https://discuss.elastic.co/t/java-java-lang-foreign-is-a-preview-api-and-is-disabled-by-default-use-enable-preview-to-enable-preview-apis/376442)
**Author:** [@Jo\_Vanmont](https://discuss.elastic.co/u/Jo_Vanmont)\ **Replies:** 5\ **Last updated:** [March 28, 2025, 3:10am UTC](https://discuss.elastic.co/t/java-java-lang-foreign-is-a-preview-api-and-is-disabled-by-default-use-enable-preview-to-enable-preview-apis/376442 "2025-03-28T03:10:10Z")
I'm trying to compile the elasticsearch-main source code with java version 21 in intellij idea but are getting this error. Tried already to add --enable-preview to the compiler vm options but no success. --- ## [Elasticsearch 8.17.2: Native memory allocation (mmap) failed](https://discuss.elastic.co/t/elasticsearch-8-17-2-native-memory-allocation-mmap-failed/376485)
**Author:** [@pavlodvornikov](https://discuss.elastic.co/u/pavlodvornikov)\ **Replies:** 2\ **Last updated:** [March 27, 2025, 4:08pm UTC](https://discuss.elastic.co/t/elasticsearch-8-17-2-native-memory-allocation-mmap-failed/376485 "2025-03-27T16:08:48Z")
Hello, I just recently upgraded my Elasticsearch cluster from 8.10.4 to 8.17.2. Prior to that I have not experienced memory issues with the same load. Data nodes run on i4i.2xlarge EC2 instances with 64G RAM and 8 vCPU… --- ## [Last\_value sorting by date value](https://discuss.elastic.co/t/last-value-sorting-by-date-value/376417)
**Author:** [@kimraik](https://discuss.elastic.co/u/kimraik)\ **Replies:** 2\ **Last updated:** [March 27, 2025, 2:53pm UTC](https://discuss.elastic.co/t/last-value-sorting-by-date-value/376417 "2025-03-27T14:53:48Z")
when using "last\_value" to display certain data, there is an option based on which date field the last\_value is sorted but this option is gone when using "last\_value" in a formula. Or at least I did not see any. In case … --- ## [Logstash.inputs.tcp certificate\_expired and unknown\_ca](https://discuss.elastic.co/t/logstash-inputs-tcp-certificate-expired-and-unknown-ca/376484)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 0\ **Last updated:** [March 27, 2025, 2:08pm UTC](https://discuss.elastic.co/t/logstash-inputs-tcp-certificate-expired-and-unknown-ca/376484 "2025-03-27T14:08:30Z")
Logstash 7.17 Can anyone offer any insight in to what would Logstash, acting as a server, to log this? \[2025-03-06T11:19:54,746\]\[ERROR\]\[logstash.inputs.tcp \] /10.70.12.45:38396: closing due: io.netty.handler.codec… --- ## [Filebeat or Logstash or Elastic Agent ? RPM or tarball?](https://discuss.elastic.co/t/filebeat-or-logstash-or-elastic-agent-rpm-or-tarball/376482)
**Author:** [@TheLotusMind](https://discuss.elastic.co/u/TheLotusMind)\ **Replies:** 0\ **Last updated:** [March 27, 2025, 2:03pm UTC](https://discuss.elastic.co/t/filebeat-or-logstash-or-elastic-agent-rpm-or-tarball/376482 "2025-03-27T14:03:08Z")
Hello, New to ELK trying to educate myself and find my way around... I "inherited" a project where I have to update ELK (and the OS of the VMs it's running on) to the latest version. Our setup consists of a few hundre… --- ## [Export logs from ELK stack to external destination](https://discuss.elastic.co/t/export-logs-from-elk-stack-to-external-destination/376472)
**Author:** [@IlleApprentice](https://discuss.elastic.co/u/IlleApprentice)\ **Replies:** 2\ **Last updated:** [March 27, 2025, 2:00pm UTC](https://discuss.elastic.co/t/export-logs-from-elk-stack-to-external-destination/376472 "2025-03-27T14:00:38Z")
Hi everyone, I am writing to you because I would need to export logs from inside elk to outside, like to blob in azure or any other destination point. Do you know any solution to date available. Thank you very much! --- ## [SAN storage - I/O values](https://discuss.elastic.co/t/san-storage-i-o-values/376474)
**Author:** [@stephanenm](https://discuss.elastic.co/u/stephanenm)\ **Replies:** 2\ **Last updated:** [March 27, 2025, 1:49pm UTC](https://discuss.elastic.co/t/san-storage-i-o-values/376474 "2025-03-27T13:49:45Z")
Hello all, I am currently in charge to about find a storage system than can works with Elastic solutions. I need to have this storage system on prem so any cloud services is forbiden. I have read that Objet storage or … --- ## [\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. self signed certificate](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate/376240)
**Author:** [@Rupavathi](https://discuss.elastic.co/u/Rupavathi)\ **Replies:** 21\ **Last updated:** [March 27, 2025, 10:21am UTC](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate/376240 "2025-03-27T10:21:19Z")
Hi, I am facing an issue while integrating kibana with elasticsearch. I have created my own company rootCA and created kibana.crt and kibana.key and registered with rootCA. After I run the docker compose up , I was not … --- ## [MISP Elastic Intergration using Filebeat](https://discuss.elastic.co/t/misp-elastic-intergration-using-filebeat/376196)
**Author:** [@Muhammadh\_Zakir\_Huss](https://discuss.elastic.co/u/Muhammadh_Zakir_Huss)\ **Replies:** 1\ **Last updated:** [March 27, 2025, 4:53am UTC](https://discuss.elastic.co/t/misp-elastic-intergration-using-filebeat/376196 "2025-03-27T04:53:04Z")
Hi, I have installed a MISP instance and Filebeat in a Ubuntu server. I have configured the filebeat to query the MISP instance for IOCs and upload it to Elasticsearch. I am getting the logs but I see an error.message: U… --- ## [Elastic endpoint degraded state](https://discuss.elastic.co/t/elastic-endpoint-degraded-state/376444)
**Author:** [@Jason\_Hirata](https://discuss.elastic.co/u/Jason_Hirata)\ **Replies:** 3\ **Last updated:** [March 27, 2025, 3:11am UTC](https://discuss.elastic.co/t/elastic-endpoint-degraded-state/376444 "2025-03-27T03:11:40Z")
Trying to run the unified elastic-agent 8.15.0 as ds in kubernetes, and running into the following issue. ┌─ fleet │ └─ status: (HEALTHY) Connected └─ elastic-agent ├─ status: (DEGRADED) 1 or more components/units i… --- ## [Detect Systems Type with Elastic](https://discuss.elastic.co/t/detect-systems-type-with-elastic/376436)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [March 26, 2025, 5:38pm UTC](https://discuss.elastic.co/t/detect-systems-type-with-elastic/376436 "2025-03-26T17:38:21Z")
Hello, I have seen in Observability, that elastic agent can collect metrics regarding metadata information about the host its monitoring. Like OS, Cloud Provider, Service Name I have not seen whether elastic agent c… --- ## [Kibana Logs Authentication Failure](https://discuss.elastic.co/t/kibana-logs-authentication-failure/376385)
**Author:** [@Echo\_01](https://discuss.elastic.co/u/Echo_01)\ **Replies:** 0\ **Last updated:** [March 25, 2025, 3:02pm UTC](https://discuss.elastic.co/t/kibana-logs-authentication-failure/376385 "2025-03-25T15:02:11Z")
Kibana is generating failure logs like the following: \[2025-03-25T15:49:06.652+01:00\]\[INFO \]\[plugins.security.authentication\] Authentication attempt failed: {"error":{"root\_cause":\[{"type":"security\_exception","reason":… --- ## [Elastic Agent Integrations Failing to Update](https://discuss.elastic.co/t/elastic-agent-integrations-failing-to-update/376422)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [March 26, 2025, 2:23pm UTC](https://discuss.elastic.co/t/elastic-agent-integrations-failing-to-update/376422 "2025-03-26T14:23:35Z")
Hello, I am on 8.17.3 ES/Kibana I attempted to reinstall and update some installed integrations and I keep getting errors: Seems like not related to a specific integration but is preventing from reinstalling or u… --- ## [Logstash not picking/not processing all files with elasticsearch output plugin](https://discuss.elastic.co/t/logstash-not-picking-not-processing-all-files-with-elasticsearch-output-plugin/376396)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 4\ **Last updated:** [March 26, 2025, 2:02pm UTC](https://discuss.elastic.co/t/logstash-not-picking-not-processing-all-files-with-elasticsearch-output-plugin/376396 "2025-03-26T14:02:31Z")
Hello again. I am testing Logstash options and I am now creating this configuration: I am using 2 pipelines, one creates files with this configuration: input { http { port =\> 6043 } } output { file { pat… --- ## [Automatic Rollover on Elastic Serverless deployment?](https://discuss.elastic.co/t/automatic-rollover-on-elastic-serverless-deployment/376406)
**Author:** [@Nicolo\_Boschi](https://discuss.elastic.co/u/Nicolo_Boschi)\ **Replies:** 3\ **Last updated:** [March 26, 2025, 1:19pm UTC](https://discuss.elastic.co/t/automatic-rollover-on-elastic-serverless-deployment/376406 "2025-03-26T13:19:13Z")
I wanted to configure automatic rollover for my index in a new Elastic Serverless deployment. From the docs, it looks like it should be managed automatically by the platform itself. Is it true? What is the threshold? I… --- ## [Need help setting up a second node](https://discuss.elastic.co/t/need-help-setting-up-a-second-node/375785)
**Author:** [@hairless\_mess](https://discuss.elastic.co/u/hairless_mess)\ **Replies:** 25\ **Last updated:** [March 26, 2025, 10:53am UTC](https://discuss.elastic.co/t/need-help-setting-up-a-second-node/375785 "2025-03-26T10:53:13Z")
Hello! I have a server with Elasticsearch, Kibana and a fleet-server agent installed. I use all the default certificates created in the beginning (automatic security configuration I believe it's called?). I would like… --- ## [Failed to publish events, Logstash and Agent](https://discuss.elastic.co/t/failed-to-publish-events-logstash-and-agent/376388)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 3\ **Last updated:** [March 26, 2025, 9:04am UTC](https://discuss.elastic.co/t/failed-to-publish-events-logstash-and-agent/376388 "2025-03-26T09:04:59Z")
Hello, I am trying to deploy a Logstash service on OCP using an Elastic-provided image: elastic/logstash:8.16.3 The service needs to receive input data from elastic-agents and forward it accordingly. My input pipeline… --- ## [Rollover daily at night 12 am](https://discuss.elastic.co/t/rollover-daily-at-night-12-am/376367)
**Author:** [@Vaishnavi\_Batgeri](https://discuss.elastic.co/u/Vaishnavi_Batgeri)\ **Replies:** 6\ **Last updated:** [March 26, 2025, 6:10am UTC](https://discuss.elastic.co/t/rollover-daily-at-night-12-am/376367 "2025-03-26T06:10:21Z")
I have created rollover indices for different applications, as I started the logstash service file at 8 PM, all the indices are getting created at that time only. However, there is a data mismatch, for instance: if the … --- ## [Multiple YAML Files (Modular Configs)](https://discuss.elastic.co/t/multiple-yaml-files-modular-configs/376399)
**Author:** [@Thirupathi](https://discuss.elastic.co/u/Thirupathi)\ **Replies:** 1\ **Last updated:** [March 26, 2025, 4:44am UTC](https://discuss.elastic.co/t/multiple-yaml-files-modular-configs/376399 "2025-03-26T04:44:15Z")
would have several smaller YAML files, and the primary configuration (filebeat.yml) will reference them.? /etc/filebeat/ ├── filebeat.yml # Main configuration file ├── inputs.yml # Inpu… --- ## [Modifying StatefulSet updateStrategy in Elasticsearch k8s Operator from OnDelete to RollingUpdate](https://discuss.elastic.co/t/modifying-statefulset-updatestrategy-in-elasticsearch-k8s-operator-from-ondelete-to-rollingupdate/376397)
**Author:** [@Marian\_MIRON](https://discuss.elastic.co/u/Marian_MIRON)\ **Replies:** 0\ **Last updated:** [March 26, 2025, 2:49am UTC](https://discuss.elastic.co/t/modifying-statefulset-updatestrategy-in-elasticsearch-k8s-operator-from-ondelete-to-rollingupdate/376397 "2025-03-26T02:49:06Z")
Using the Elasticsearch k8s Operator, I need help changing the updateStrategy in a StatefulSet from type: OnDelete to type: RollingUpdate. I'm working with Helm templates to manage the CRDs. What's the best way to accomp… --- ## [Logstash - Sending "\_id" in my document generates error](https://discuss.elastic.co/t/logstash-sending-id-in-my-document-generates-error/376343)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 3\ **Last updated:** [March 25, 2025, 8:18pm UTC](https://discuss.elastic.co/t/logstash-sending-id-in-my-document-generates-error/376343 "2025-03-25T20:18:35Z")
I have logstash using file input and elasticsearch output plugins and configured this way input { file { path =\> "D:/log\_streaming/my\_app/\*.log" start\_position =\> "beginning" sincedb\_path =\> "NUL" mode =\> "read… --- ## [Logstash exec timeout](https://discuss.elastic.co/t/logstash-exec-timeout/376389)
**Author:** [@O\_O\_O](https://discuss.elastic.co/u/O_O_O)\ **Replies:** 0\ **Last updated:** [March 25, 2025, 4:03pm UTC](https://discuss.elastic.co/t/logstash-exec-timeout/376389 "2025-03-25T16:03:55Z")
I have a long running task executed by exec input plugin, if the current task takes longer then the interval that I have set, does it simply cancel the current task and start a new one, or does it spawn a new child proce… --- ## [ILM policy not triggering a new index](https://discuss.elastic.co/t/ilm-policy-not-triggering-a-new-index/376066)
**Author:** [@aravinds257](https://discuss.elastic.co/u/aravinds257)\ **Replies:** 1\ **Last updated:** [March 25, 2025, 3:25pm UTC](https://discuss.elastic.co/t/ilm-policy-not-triggering-a-new-index/376066 "2025-03-25T15:25:24Z")
I have index created on a weekly basis via a pipeline which creates a index ending with \_yyyymmddw, but was relying on ILM policy sharding based on if it reaches the 50gb limit. Even though the index action shows as roll… --- ## [Agent and integration are heatlhy, but no logs from vm](https://discuss.elastic.co/t/agent-and-integration-are-heatlhy-but-no-logs-from-vm/376376)
**Author:** [@Den\_Mat](https://discuss.elastic.co/u/Den_Mat)\ **Replies:** 5\ **Last updated:** [March 25, 2025, 3:00pm UTC](https://discuss.elastic.co/t/agent-and-integration-are-heatlhy-but-no-logs-from-vm/376376 "2025-03-25T15:00:51Z")
I installed an agent on a virtual machine to collect PostgreSQL logs through integration. The log paths are correct, and everything seems to be healthy. However, the logs are not being sent to ELK, and no data stream is… --- ## [Filebeat cant send to ES](https://discuss.elastic.co/t/filebeat-cant-send-to-es/376351)
**Author:** [@Arko\_00](https://discuss.elastic.co/u/Arko_00)\ **Replies:** 3\ **Last updated:** [March 25, 2025, 2:16pm UTC](https://discuss.elastic.co/t/filebeat-cant-send-to-es/376351 "2025-03-25T14:16:00Z")
Hello, i have one master and one client node.. on my master is elastic, kibana and logstash running and on my client only filebeat. know i am try to send every logfile under /var/log/\*.log too my elastic but i get this e… --- ## [Logstash 8.12.2 - CSV Input to HTTP Output - Pipeline stuck looping](https://discuss.elastic.co/t/logstash-8-12-2-csv-input-to-http-output-pipeline-stuck-looping/376346)
**Author:** [@Steven\_LS](https://discuss.elastic.co/u/Steven_LS)\ **Replies:** 6\ **Last updated:** [March 25, 2025, 1:56pm UTC](https://discuss.elastic.co/t/logstash-8-12-2-csv-input-to-http-output-pipeline-stuck-looping/376346 "2025-03-25T13:56:50Z")
I have a logstash instance I am attempting to troubleshoot, where when I launch Logstash in debug mode, it looks like logstash is looping on no cgroup found. I've looked up and followed advice on swapping the sincedb pat… --- ## [Http\_poller and API Key ID and API KEY](https://discuss.elastic.co/t/http-poller-and-api-key-id-and-api-key/376381)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 0\ **Last updated:** [March 25, 2025, 1:55pm UTC](https://discuss.elastic.co/t/http-poller-and-api-key-id-and-api-key/376381 "2025-03-25T13:55:41Z")
Good Day, How do I send an API KEY ID and an API KEY with http\_poller. I am trying to replicate the following curl command which retrieves valid data but with http\_poller. -H 'Accept: application/json' \\ -H 'Content-T… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=83) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=85)