# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=85 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 86 --- ## [Performance issue on 40TB index](https://discuss.elastic.co/t/performance-issue-on-40tb-index/376021)
**Author:** [@Suresh\_Ghatuwa](https://discuss.elastic.co/u/Suresh_Ghatuwa)\ **Replies:** 5\ **Last updated:** [March 25, 2025, 8:52am UTC](https://discuss.elastic.co/t/performance-issue-on-40tb-index/376021 "2025-03-25T08:52:33Z")
Hello All, I have 40 TB of index having about 6 Billion documents in single index. My ES query is Fetching 100000 unique values of uniqueId values (applying terms aggregations) from single ES query. Currently, we ini… --- ## [Node.js client uses master only nodes by default](https://discuss.elastic.co/t/node-js-client-uses-master-only-nodes-by-default/376162)
**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Replies:** 6\ **Last updated:** [March 25, 2025, 10:13am UTC](https://discuss.elastic.co/t/node-js-client-uses-master-only-nodes-by-default/376162 "2025-03-25T10:13:55Z")
Hey, a couple of days ago I noticed that our node.js client by default seems to use master only nodes for queries, even though there are dedicated data nodes. The docs show this default node filter: function defaultNo… --- ## [Pass angular parameter to Kibana dashboard](https://discuss.elastic.co/t/pass-angular-parameter-to-kibana-dashboard/376372)
**Author:** [@mittal\_rawal1](https://discuss.elastic.co/u/mittal_rawal1)\ **Replies:** 0\ **Last updated:** [March 25, 2025, 10:08am UTC](https://discuss.elastic.co/t/pass-angular-parameter-to-kibana-dashboard/376372 "2025-03-25T10:08:57Z")
Hi Team, We have a requirement to access parameters from angular to Kibana Dashboard/ visualization charts. Is there any way we can pass angular parameter to Kibana Dashboard? --- ## [Packetbeat with Ai, helpme please](https://discuss.elastic.co/t/packetbeat-with-ai-helpme-please/376318)
**Author:** [@nzeland149](https://discuss.elastic.co/u/nzeland149)\ **Replies:** 4\ **Last updated:** [March 25, 2025, 9:49am UTC](https://discuss.elastic.co/t/packetbeat-with-ai-helpme-please/376318 "2025-03-25T09:49:47Z")
i have a question i want to set output file of packetbeat in a file and i want this file get analysed by ai and detect anomalies and then send it to wazuh(works wih filebeat) to view it in kibana can anyone help me or t… --- ## [Missing response option in transaction section](https://discuss.elastic.co/t/missing-response-option-in-transaction-section/376365)
**Author:** [@Amol\_Nagotkar](https://discuss.elastic.co/u/Amol_Nagotkar)\ **Replies:** 0\ **Last updated:** [March 25, 2025, 7:14am UTC](https://discuss.elastic.co/t/missing-response-option-in-transaction-section/376365 "2025-03-25T07:14:49Z")
Hi all, in above image as highlighted, i can see only request in dropdown. how can i unable response option? basically inside Observability -\> APM -\>Services -\>service\_name -\> Transactions-\> specific transaction in… --- ## [Increase Fields Statistics on Discover Tab Kibana](https://discuss.elastic.co/t/increase-fields-statistics-on-discover-tab-kibana/376322)
**Author:** [@Sohaib\_Khan](https://discuss.elastic.co/u/Sohaib_Khan)\ **Replies:** 2\ **Last updated:** [March 25, 2025, 7:36am UTC](https://discuss.elastic.co/t/increase-fields-statistics-on-discover-tab-kibana/376322 "2025-03-25T07:36:34Z")
Hi, I want to increase the count of field statistics on Kibana. Currently, I have more than a million records but on-field statistics give results based on 55000 records. I want to increase it to match the exact count … --- ## [Unable to consume messages from kafka using logstash at a high throughput](https://discuss.elastic.co/t/unable-to-consume-messages-from-kafka-using-logstash-at-a-high-throughput/376325)
**Author:** [@optimus\_prime](https://discuss.elastic.co/u/optimus_prime)\ **Replies:** 3\ **Last updated:** [March 25, 2025, 4:24am UTC](https://discuss.elastic.co/t/unable-to-consume-messages-from-kafka-using-logstash-at-a-high-throughput/376325 "2025-03-25T04:24:59Z")
Hi I am currently load testing my logstash to consume events from kafka and index to opensearch. In our production environment we get around 300k events per seco nd so I was trying to replicate the same. I was able to p… --- ## [Blocked by virus software Kibana 8.3.17](https://discuss.elastic.co/t/blocked-by-virus-software-kibana-8-3-17/376349)
**Author:** [@ripacheco1967](https://discuss.elastic.co/u/ripacheco1967)\ **Replies:** 0\ **Last updated:** [March 24, 2025, 9:39pm UTC](https://discuss.elastic.co/t/blocked-by-virus-software-kibana-8-3-17/376349 "2025-03-24T21:39:31Z")
Norton is blocking us from downloading Kibana 8.3.17 to a Mac (Silicon M1) Threat name: PwrSh:Obfuscated-AH \[Cryp\] Severity: 2 Threat type: Cryptic File name: kibana-8.17.3-darwin-aarch64.tar File path: /Users/rober… --- ## [Saving just the "message" to file using http input and file output plugins](https://discuss.elastic.co/t/saving-just-the-message-to-file-using-http-input-and-file-output-plugins/376340)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 6\ **Last updated:** [March 24, 2025, 8:21pm UTC](https://discuss.elastic.co/t/saving-just-the-message-to-file-using-http-input-and-file-output-plugins/376340 "2025-03-24T20:21:12Z")
Hello, I am trying to store the http input "message" to file for an http call sending: { "index" : { "\_index" : "journaling\_insert","\_id":"A5CC1A05-09B9-4688-9796-14BB9E8A95FC"}} {"REMOTEIP":"1.111.1.11","CHAINCODE":"8… --- ## [Need help disabling field type casting for computer forensics logs](https://discuss.elastic.co/t/need-help-disabling-field-type-casting-for-computer-forensics-logs/376334)
**Author:** [@Hofmupy](https://discuss.elastic.co/u/Hofmupy)\ **Replies:** 1\ **Last updated:** [March 24, 2025, 5:54pm UTC](https://discuss.elastic.co/t/need-help-disabling-field-type-casting-for-computer-forensics-logs/376334 "2025-03-24T17:54:27Z")
Hi, While currently working on developing a tool for computer forensics relying on Elasticsearch, I am facing several issues related to field types. The tool is parsing data using Vector, and sends it directly to Elast… --- ## [.siem-signals-default doesn't exists](https://discuss.elastic.co/t/siem-signals-default-doesnt-exists/376342)
**Author:** [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\ **Replies:** 0\ **Last updated:** [March 24, 2025, 5:49pm UTC](https://discuss.elastic.co/t/siem-signals-default-doesnt-exists/376342 "2025-03-24T17:49:54Z")
Hi, I can't see the .siem-signals-default index on Index Management. I'm trying to use the detection API on signals but it always returns 0 results. The version is 8.17.2. Thank you --- ## [Preserving time filter in Kibana dashboard item url panel options](https://discuss.elastic.co/t/preserving-time-filter-in-kibana-dashboard-item-url-panel-options/375716)
**Author:** [@kbfirebreather](https://discuss.elastic.co/u/kbfirebreather)\ **Replies:** 2\ **Last updated:** [March 24, 2025, 5:08pm UTC](https://discuss.elastic.co/t/preserving-time-filter-in-kibana-dashboard-item-url-panel-options/375716 "2025-03-24T17:08:39Z")
I have a dashboard that aggregate K8s pods over a given time span. When I click the entry in the table, it takes me to the logs for that pod. The time filter resets back to last 15 minutes. Is there a way to reference th… --- ## [Winlogbeat freezes](https://discuss.elastic.co/t/winlogbeat-freezes/372270)
**Author:** [@RBR](https://discuss.elastic.co/u/RBR)\ **Replies:** 5\ **Last updated:** [March 24, 2025, 4:19pm UTC](https://discuss.elastic.co/t/winlogbeat-freezes/372270 "2025-03-24T16:19:44Z")
Hello everyone, I recently came across the topic of Elastic Search, following the motto: "Can you take a look at this" We have been having an issue since November where the transmission on our Active Directory Domain Co… --- ## [KNN \_score not lining up with similarity filter](https://discuss.elastic.co/t/knn-score-not-lining-up-with-similarity-filter/376088)
**Author:** [@Yakob](https://discuss.elastic.co/u/Yakob)\ **Replies:** 4\ **Last updated:** [March 24, 2025, 4:03pm UTC](https://discuss.elastic.co/t/knn-score-not-lining-up-with-similarity-filter/376088 "2025-03-24T16:03:57Z")
Hi Elastic experts, I have the following elastic query, which returns 452 hits. { "explain": true, "knn": { "field": "derived.models.multilingualE5LargeInstruct", "query\_vector": \[{{1024 element … --- ## [How can i Disable SSL on Metricbeat?](https://discuss.elastic.co/t/how-can-i-disable-ssl-on-metricbeat/376226)
**Author:** [@Nooot\_VK](https://discuss.elastic.co/u/Nooot_VK)\ **Replies:** 3\ **Last updated:** [March 24, 2025, 2:02pm UTC](https://discuss.elastic.co/t/how-can-i-disable-ssl-on-metricbeat/376226 "2025-03-24T14:02:39Z")
Hey guys! I'm trying to temporarily disable SSL in Metricbeat due to a certificate issue, but I'm not getting it. Is there any way to disable it? I've tried this, but it doesn't work. ssl.verification\_mode: none ssl.ena… --- ## [Logstash reading events from March 14th on March 16th](https://discuss.elastic.co/t/logstash-reading-events-from-march-14th-on-march-16th/375982)
**Author:** [@devops\_training](https://discuss.elastic.co/u/devops_training)\ **Replies:** 10\ **Last updated:** [March 24, 2025, 12:48pm UTC](https://discuss.elastic.co/t/logstash-reading-events-from-march-14th-on-march-16th/375982 "2025-03-24T12:48:05Z")
\[2025-03-16T00:07:37,943\]\[INFO \]\[logstash.outputs.opensearch\]\[main\]\[f636cb73983bcc650332a7ed143a2c1655e1be6017f7947da7fc02b194adad2d\] Retrying failed action {:status=\>429, :action=\>\["index", {:\_id=\>nil, :\_index=\>"http\_se… --- ## [Getting error while trying to connect a DB from ELK](https://discuss.elastic.co/t/getting-error-while-trying-to-connect-a-db-from-elk/376063)
**Author:** [@sreya\_14](https://discuss.elastic.co/u/sreya_14)\ **Replies:** 4\ **Last updated:** [March 24, 2025, 11:14am UTC](https://discuss.elastic.co/t/getting-error-while-trying-to-connect-a-db-from-elk/376063 "2025-03-24T11:14:59Z")
Getting connectivity error while trying to connect through default user and password for elasticsearch. "received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.24.217… --- ## [Idrac logs doesn't show SN or IP in logs. Can't figure out which idrac the log belongs to](https://discuss.elastic.co/t/idrac-logs-doesnt-show-sn-or-ip-in-logs-cant-figure-out-which-idrac-the-log-belongs-to/376311)
**Author:** [@Vitalii117](https://discuss.elastic.co/u/Vitalii117)\ **Replies:** 0\ **Last updated:** [March 24, 2025, 10:25am UTC](https://discuss.elastic.co/t/idrac-logs-doesnt-show-sn-or-ip-in-logs-cant-figure-out-which-idrac-the-log-belongs-to/376311 "2025-03-24T10:25:50Z")
Hi! I have moved logs from many IDRACs to ELK stack, did normal logstash setup but logs don't show any serial number or IP of Idrac so I can't figure out which idrac the log belongs to. Please help me to point out whic… --- ## [DNS Integration stopped working](https://discuss.elastic.co/t/dns-integration-stopped-working/376214)
**Author:** [@ben-sec](https://discuss.elastic.co/u/ben-sec)\ **Replies:** 1\ **Last updated:** [March 24, 2025, 7:19am UTC](https://discuss.elastic.co/t/dns-integration-stopped-working/376214 "2025-03-24T07:19:23Z")
Hi! I'm running the Windows DNS integration and was successfully ingesting DNS logs from three different servers using Elastic Agent 8.14.3. After upgrading to 8.17.3, I no longer receive DNS logs from these servers. Ho… --- ## [Triggered esql alert rule does not expose document results](https://discuss.elastic.co/t/triggered-esql-alert-rule-does-not-expose-document-results/375907)
**Author:** [@FPTravStan](https://discuss.elastic.co/u/FPTravStan)\ **Replies:** 2\ **Last updated:** [March 24, 2025, 6:27am UTC](https://discuss.elastic.co/t/triggered-esql-alert-rule-does-not-expose-document-results/375907 "2025-03-24T06:27:05Z")
Hello, I'm looking for some help with getting an ESQL query based alert to expose the documents results so that it can be used in the customDetails of the pagerduty payload when triggered. Looking at the an example of … --- ## [Best practices for index needed for AI Analyst use cases](https://discuss.elastic.co/t/best-practices-for-index-needed-for-ai-analyst-use-cases/375964)
**Author:** [@Moni\_Hazarika](https://discuss.elastic.co/u/Moni_Hazarika)\ **Replies:** 3\ **Last updated:** [March 24, 2025, 5:53am UTC](https://discuss.elastic.co/t/best-practices-for-index-needed-for-ai-analyst-use-cases/375964 "2025-03-24T05:53:55Z")
Hi Team, Currently we have 2 indices for storing the raw datasets without doing any transformations. These datasets have very nested structure. This was fine for the current use cases where the only search pattern we h… --- ## [Field remapping for backward compatibility](https://discuss.elastic.co/t/field-remapping-for-backward-compatibility/376209)
**Author:** [@davetayl](https://discuss.elastic.co/u/davetayl)\ **Replies:** 15\ **Last updated:** [March 24, 2025, 4:43am UTC](https://discuss.elastic.co/t/field-remapping-for-backward-compatibility/376209 "2025-03-24T04:43:20Z")
I have an environment that is a bit older, ES7.7.3, LS6.8.23 and FB6.8.23 all working correctly with the older OS versions the client is using. As part of a new build we need to upgrade the FB version to 8.17 if possible… --- ## [Integrating Avolution ABACUS (.odb files ) Data with Elasticsearch: Need Guidance](https://discuss.elastic.co/t/integrating-avolution-abacus-odb-files-data-with-elasticsearch-need-guidance/376292)
**Author:** [@rijo\_jose](https://discuss.elastic.co/u/rijo_jose)\ **Replies:** 1\ **Last updated:** [March 24, 2025, 5:23am UTC](https://discuss.elastic.co/t/integrating-avolution-abacus-odb-files-data-with-elasticsearch-need-guidance/376292 "2025-03-24T05:23:10Z")
I have an important project to integrate of data generated from Avolution ABACUS (Enterprise Architect tool) simulations with Elasticsearch. I understand that ABACUS primarily produces output in the .odb file format. We … --- ## [Kibana Dashboard Slowdowns with Large Elasticsearch Indexes](https://discuss.elastic.co/t/kibana-dashboard-slowdowns-with-large-elasticsearch-indexes/376273)
**Author:** [@SamuelPrice](https://discuss.elastic.co/u/SamuelPrice)\ **Replies:** 1\ **Last updated:** [March 23, 2025, 11:38pm UTC](https://discuss.elastic.co/t/kibana-dashboard-slowdowns-with-large-elasticsearch-indexes/376273 "2025-03-23T23:38:04Z")
Hi everyone, I’m running into performance issues with my Kibana dashboards when working with large Elasticsearch indexes. The dashboards, especially those that include multiple visualizations, are starting to load slowe… --- ## [Unable to create Index in Elastic Search](https://discuss.elastic.co/t/unable-to-create-index-in-elastic-search/376256)
**Author:** [@pengdijie](https://discuss.elastic.co/u/pengdijie)\ **Replies:** 4\ **Last updated:** [March 23, 2025, 7:38pm UTC](https://discuss.elastic.co/t/unable-to-create-index-in-elastic-search/376256 "2025-03-23T19:38:46Z")
Hello, I'm trying to Use Elasticsearch to index the Wikipedia dump, but this error appears here elastic\_transport.ConnectionError: Connection error caused by: NewConnectionError(\ **Author:** [@Sujay\_Babu\_Sekar](https://discuss.elastic.co/u/Sujay_Babu_Sekar)\ **Replies:** 0\ **Last updated:** [March 23, 2025, 7:29pm UTC](https://discuss.elastic.co/t/logstash-kafka-output-with-azure-managed-identity-failing-with-classnotfoundexception/376285 "2025-03-23T19:29:45Z") Hello everyone, I'm trying to configure Logstash to send data to an Azure Event Hub using Kafka output with Azure Managed Identity authentication. I'm using a custom Kafka OAuthBearer class for Azure authentication, whi… --- ## [Disk IO - How to visualize Max Disk Throughput](https://discuss.elastic.co/t/disk-io-how-to-visualize-max-disk-throughput/360803)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [March 23, 2025, 6:52pm UTC](https://discuss.elastic.co/t/disk-io-how-to-visualize-max-disk-throughput/360803 "2025-03-23T18:52:34Z")
Hello is there a way to visualize the Disk Throughput using Lens? I want to do a line graph but it seems like its not possible to do it with Lens. Here's the fields: system.diskio.read.bytes The total number of bytes… --- ## [Multiple Labels for same field for SNMP](https://discuss.elastic.co/t/multiple-labels-for-same-field-for-snmp/375642)
**Author:** [@Sohaib\_Khan](https://discuss.elastic.co/u/Sohaib_Khan)\ **Replies:** 3\ **Last updated:** [March 23, 2025, 1:57pm UTC](https://discuss.elastic.co/t/multiple-labels-for-same-field-for-snmp/375642 "2025-03-23T13:57:22Z")
Hi, I'm using SNMP-Logstash plugin to get data from SNMP. It works fine to an extent, The issues comes in for a field that has multiple values, example "processorusage" as i have 2 fortigate devices but it is fetching a… --- ## [Vega Error - Node Not Found](https://discuss.elastic.co/t/vega-error-node-not-found/376268)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 0\ **Last updated:** [March 22, 2025, 9:51pm UTC](https://discuss.elastic.co/t/vega-error-node-not-found/376268 "2025-03-22T21:51:21Z")
I am getting an vega error Node Not Found XXX i dont know whats going on. { "$schema": "https://vega.github.io/schema/vega/v5.json", "title": "Merchant Transaction Network", "width": 800, "height": 600, "autos… --- ## [The contribution docs seems to be broken](https://discuss.elastic.co/t/the-contribution-docs-seems-to-be-broken/376267)
**Author:** [@ArtistBanda](https://discuss.elastic.co/u/ArtistBanda)\ **Replies:** 0\ **Last updated:** [March 22, 2025, 7:04pm UTC](https://discuss.elastic.co/t/the-contribution-docs-seems-to-be-broken/376267 "2025-03-22T19:04:22Z")
I was planning to contribute to Kibana but the contributions docs seems to be broken here LINK. The new link is only open for employees and the old link is 404. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=84) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=86)