# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=87 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 88 --- ## [Not a valid logstash keystore](https://discuss.elastic.co/t/not-a-valid-logstash-keystore/376130)
**Author:** [@JosephR](https://discuss.elastic.co/u/JosephR)\ **Replies:** 0\ **Last updated:** [March 19, 2025, 2:40pm UTC](https://discuss.elastic.co/t/not-a-valid-logstash-keystore/376130 "2025-03-19T14:40:09Z")
When I set my keystore using the Elastic steps and add my keys it works fine and will not have any issues listing them or using them for what I need, however as soon as that server or the logstash service restarts I get … --- ## [Logstash pushes duplicate logs to elasticsearch](https://discuss.elastic.co/t/logstash-pushes-duplicate-logs-to-elasticsearch/376137)
**Author:** [@guru\_dev](https://discuss.elastic.co/u/guru_dev)\ **Replies:** 0\ **Last updated:** [March 19, 2025, 5:54pm UTC](https://discuss.elastic.co/t/logstash-pushes-duplicate-logs-to-elasticsearch/376137 "2025-03-19T17:54:18Z")
\[2025-03-19T00:05:31,618\]\[INFO \]\[logstash.outputs.elastic\]\[main\]\[f5eb5aca1c087bda2220eb216257aea3dd0ce51468b2b1e8aa414d37f871ded2\] Retrying failed action {:status=\>429, :action=\>\["index", {:\_id=\>"ea6cdea2b1e81ed5b4df4eeb… --- ## [Lens reference line that scales with bucket/window size](https://discuss.elastic.co/t/lens-reference-line-that-scales-with-bucket-window-size/376092)
**Author:** [@dpotter](https://discuss.elastic.co/u/dpotter)\ **Replies:** 1\ **Last updated:** [March 19, 2025, 4:30pm UTC](https://discuss.elastic.co/t/lens-reference-line-that-scales-with-bucket-window-size/376092 "2025-03-19T16:30:09Z")
Hi - I'd like to add a static reference line to my Kibana Lens visualization, but I'd like the line to scale based on the bucket/window size. For example, I'd like to set the reference line to 1,000 per minute. If th… --- ## [TooManyBucketsException in Transform with Continuous High Ingestion (100k documents/minute)](https://discuss.elastic.co/t/toomanybucketsexception-in-transform-with-continuous-high-ingestion-100k-documents-minute/375509)
**Author:** [@Lucas\_Pereira](https://discuss.elastic.co/u/Lucas_Pereira)\ **Replies:** 4\ **Last updated:** [March 19, 2025, 3:23pm UTC](https://discuss.elastic.co/t/toomanybucketsexception-in-transform-with-continuous-high-ingestion-100k-documents-minute/375509 "2025-03-19T15:23:35Z")
Hi, I'm facing an issue with an Elasticsearch transform that can't handle a continuous stream of high ingestion (~100k documents per minute) into the netflow-read-\* source index, as well as occasional backlogs (e.g. 10M … --- ## [Moved from 7.x to 8.x ... Maps stopped working](https://discuss.elastic.co/t/moved-from-7-x-to-8-x-maps-stopped-working/376112)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 1\ **Last updated:** [March 19, 2025, 2:29pm UTC](https://discuss.elastic.co/t/moved-from-7-x-to-8-x-maps-stopped-working/376112 "2025-03-19T14:29:19Z")
Hi! I'm really stuck with this new geo\_point stuff. I have also read about disabling ECS compatibility mode on my pipeline but... I would rather learn the propper way to do thing from now ownwards. So, this is the upda… --- ## [Query metricbeat thresholds for CPU, Disk, etc remotely](https://discuss.elastic.co/t/query-metricbeat-thresholds-for-cpu-disk-etc-remotely/376127)
**Author:** [@sreenivasan](https://discuss.elastic.co/u/sreenivasan)\ **Replies:** 0\ **Last updated:** [March 19, 2025, 2:18pm UTC](https://discuss.elastic.co/t/query-metricbeat-thresholds-for-cpu-disk-etc-remotely/376127 "2025-03-19T14:18:09Z")
Hello forum, We are currently operating with a partial ELK stack setup: BEATS -\> Logstash -\> a dedicated event management tool for visualizing alerts. Notably, our setup does not include Elasticsearch or Kibana. During … --- ## [Logstash isn't sending logs to Elastic Cloud Instance](https://discuss.elastic.co/t/logstash-isnt-sending-logs-to-elastic-cloud-instance/376118)
**Author:** [@Mohamad\_AbuZaitoun](https://discuss.elastic.co/u/Mohamad_AbuZaitoun)\ **Replies:** 1\ **Last updated:** [March 19, 2025, 2:16pm UTC](https://discuss.elastic.co/t/logstash-isnt-sending-logs-to-elastic-cloud-instance/376118 "2025-03-19T14:16:24Z")
NEED HELP! I have logstash installed on my Ubuntu server and there is a test drupal website served by apache2 web server, what I'm trying is to read this website logs which are written to a file inside /var/log/apache2,… --- ## [Kibana Visualization Transformation Layer](https://discuss.elastic.co/t/kibana-visualization-transformation-layer/376126)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [March 19, 2025, 2:16pm UTC](https://discuss.elastic.co/t/kibana-visualization-transformation-layer/376126 "2025-03-19T14:16:08Z")
Hello, I have been exploring other data visualization solutions like Grafana and Power BI. One big thing I have noticed is they offer a transformation layer when building your visualization. This transformation layer ac… --- ## [Any Vega Community Examples](https://discuss.elastic.co/t/any-vega-community-examples/376034)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [March 19, 2025, 1:35pm UTC](https://discuss.elastic.co/t/any-vega-community-examples/376034 "2025-03-19T13:35:24Z")
Hello All, I am curious to learn about other's implementations of Vega in their dashboards? I would like to explore more ways to visualize my data (open to any use case) using Vega, and I feel like I just ask to see wha… --- ## [Filebeat - Kafka output via proxy](https://discuss.elastic.co/t/filebeat-kafka-output-via-proxy/376077)
**Author:** [@Tajriis](https://discuss.elastic.co/u/Tajriis)\ **Replies:** 5\ **Last updated:** [March 19, 2025, 12:21pm UTC](https://discuss.elastic.co/t/filebeat-kafka-output-via-proxy/376077 "2025-03-19T12:21:48Z")
Hello, Im collecting logs via filebeat and send them to kafka which is on cloud. I need a proxy for my server to reach the kafka output. Is it possible ? There is nothing in the documentation regarding kafka output a… --- ## [False alert for watcher](https://discuss.elastic.co/t/false-alert-for-watcher/376115)
**Author:** [@sreya\_14](https://discuss.elastic.co/u/sreya_14)\ **Replies:** 0\ **Last updated:** [March 19, 2025, 10:40am UTC](https://discuss.elastic.co/t/false-alert-for-watcher/376115 "2025-03-19T10:40:42Z")
We have a watcher to check a java process for an application on two servers. But issue is that the application team use to get false alerts from ELK even the processes are up . { "trigger": { "schedule": { "… --- ## [Can i build both OSS and x-pack modules for metricbeat](https://discuss.elastic.co/t/can-i-build-both-oss-and-x-pack-modules-for-metricbeat/375891)
**Author:** [@srishti](https://discuss.elastic.co/u/srishti)\ **Replies:** 5\ **Last updated:** [March 19, 2025, 9:26am UTC](https://discuss.elastic.co/t/can-i-build-both-oss-and-x-pack-modules-for-metricbeat/375891 "2025-03-19T09:26:17Z")
Hello, I'm trying to metricbeat from source and it seems I can build the binary for either the oss modules or x-pack modules. The binary in the image(elastic/metricbeat:8.17.3) is built for both. Is that something I ca… --- ## [Filebeat configuration file cannot retrieve local environment variables](https://discuss.elastic.co/t/filebeat-configuration-file-cannot-retrieve-local-environment-variables/376104)
**Author:** [@pacoxpk](https://discuss.elastic.co/u/pacoxpk)\ **Replies:** 3\ **Last updated:** [March 19, 2025, 8:58am UTC](https://discuss.elastic.co/t/filebeat-configuration-file-cannot-retrieve-local-environment-variables/376104 "2025-03-19T08:58:00Z")
Filebeat version: 8.12.0 The configuration of filebeat.yml is as follows filebeat.config.inputs: enabled: true path: /etc/filebeat/conf.d/\*.yml processors: - add\_fields: fields: environment: prod … --- ## [I am working to get the metrics onboarded for brocade san switches to kibana](https://discuss.elastic.co/t/i-am-working-to-get-the-metrics-onboarded-for-brocade-san-switches-to-kibana/376107)
**Author:** [@gvp1983](https://discuss.elastic.co/u/gvp1983)\ **Replies:** 0\ **Last updated:** [March 19, 2025, 6:52am UTC](https://discuss.elastic.co/t/i-am-working-to-get-the-metrics-onboarded-for-brocade-san-switches-to-kibana/376107 "2025-03-19T06:52:53Z")
I am using telegraf and snmp to get the performance metrics from brocade san switches and the output to Kafka and sending the same to elastic and u want to create a dashboard and need to know how to we plot the counter32… --- ## [Kibana Canvas - dropdownControl v. 8.9.2](https://discuss.elastic.co/t/kibana-canvas-dropdowncontrol-v-8-9-2/376096)
**Author:** [@emmanuel.sanchez](https://discuss.elastic.co/u/emmanuel.sanchez)\ **Replies:** 1\ **Last updated:** [March 18, 2025, 9:52pm UTC](https://discuss.elastic.co/t/kibana-canvas-dropdowncontrol-v-8-9-2/376096 "2025-03-18T21:52:36Z")
Hi there, I'm trying to use a dropdownControl in order to filter values from a datatable, but i was unable to do that, i followed some post here but i can't fix it. The currently behaviour is the following: In my dropd… --- ## [Rabbitmq plugin with metricbeat not showing correct data](https://discuss.elastic.co/t/rabbitmq-plugin-with-metricbeat-not-showing-correct-data/375607)
**Author:** [@Amol\_Nagotkar](https://discuss.elastic.co/u/Amol_Nagotkar)\ **Replies:** 1\ **Last updated:** [March 18, 2025, 5:41pm UTC](https://discuss.elastic.co/t/rabbitmq-plugin-with-metricbeat-not-showing-correct-data/375607 "2025-03-18T17:41:39Z")
Hi all, I have added rabbitplugin using metricbeat. file -\> /etc/metricbeat/modules.d/rabbitmq.yml # Module: rabbitmq # Docs: https://www.elastic.co/guide/en/beats/metricbeat/8.16/metricbeat-module-rabbitmq.html - mo… --- ## [Support for colpali and other late interaction based retrieval](https://discuss.elastic.co/t/support-for-colpali-and-other-late-interaction-based-retrieval/373864)
**Author:** [@dbasu](https://discuss.elastic.co/u/dbasu)\ **Replies:** 6\ **Last updated:** [March 18, 2025, 3:03pm UTC](https://discuss.elastic.co/t/support-for-colpali-and-other-late-interaction-based-retrieval/373864 "2025-03-18T15:03:24Z")
Does elasticsearch support search based on Embeddings from models like colqwen, colpali, etc.? If yes, where can I find supporting documentation? --- ## [Logstash using multiple configuration](https://discuss.elastic.co/t/logstash-using-multiple-configuration/376032)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 4\ **Last updated:** [March 18, 2025, 2:33pm UTC](https://discuss.elastic.co/t/logstash-using-multiple-configuration/376032 "2025-03-18T14:33:40Z")
Hello again, From the previous threads that I have solved, now I have two Logstash configurations, one that output to Http pluging and one to elasticsearch plugin. I am configuring my D:\\logstash-7.17.28\\config\\pipelin… --- ## [High CPU usage: undertand events / traffic in discover view](https://discuss.elastic.co/t/high-cpu-usage-undertand-events-traffic-in-discover-view/376074)
**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\ **Replies:** 0\ **Last updated:** [March 18, 2025, 1:56pm UTC](https://discuss.elastic.co/t/high-cpu-usage-undertand-events-traffic-in-discover-view/376074 "2025-03-18T13:56:18Z")
Hello there, I am trying to understand why my cluster is currently being overloaded (high cpu, enterprise search instances rebooting) I stumbled upon the Discover view /app/discover view in Kibana: Our problems sta… --- ## [Watcher for monitor a process does not work](https://discuss.elastic.co/t/watcher-for-monitor-a-process-does-not-work/376064)
**Author:** [@sreya\_14](https://discuss.elastic.co/u/sreya_14)\ **Replies:** 1\ **Last updated:** [March 18, 2025, 1:35pm UTC](https://discuss.elastic.co/t/watcher-for-monitor-a-process-does-not-work/376064 "2025-03-18T13:35:39Z")
We have created a watcher to monitor a process in a linux server but it does not fired and only taking the sleeping state of the process . { "trigger": { "schedule": { "interval": "5m" } }, "input": … --- ## [Logstash \[ERROR\]\[logstash.licensechecker.licensereader\]](https://discuss.elastic.co/t/logstash-error-logstash-licensechecker-licensereader/376073)
**Author:** [@dev\_morphheus](https://discuss.elastic.co/u/dev_morphheus)\ **Replies:** 0\ **Last updated:** [March 18, 2025, 1:07pm UTC](https://discuss.elastic.co/t/logstash-error-logstash-licensechecker-licensereader/376073 "2025-03-18T13:07:26Z")
Hi, I just created a Logstash instance, and it returns the following error: log:\[2025-03-18T07:22:11,331\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license information from license server {:messa… --- ## [How to use Filebeat input HttpJson](https://discuss.elastic.co/t/how-to-use-filebeat-input-httpjson/376045)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 1\ **Last updated:** [March 18, 2025, 12:17pm UTC](https://discuss.elastic.co/t/how-to-use-filebeat-input-httpjson/376045 "2025-03-18T12:17:41Z")
Hi there, i'm trying to pull data from my gitlab instance. there are 2 kinds of data: commits and projects. this is my first time using httpjson in filebeat so I don't really understand how to use it. there are 2 APIs … --- ## [How to monitor the size of elasticsearch index](https://discuss.elastic.co/t/how-to-monitor-the-size-of-elasticsearch-index/375986)
**Author:** [@jinfeng\_zhang](https://discuss.elastic.co/u/jinfeng_zhang)\ **Replies:** 1\ **Last updated:** [March 18, 2025, 11:26am UTC](https://discuss.elastic.co/t/how-to-monitor-the-size-of-elasticsearch-index/375986 "2025-03-18T11:26:47Z")
Do you have a solution for elasticsearch index size monitoring? For example, the index pit doesn't scroll according to the lifetime I set for various reasons, so it can get big. At this point, I would like to receive an… --- ## [Problem with logstash configuration](https://discuss.elastic.co/t/problem-with-logstash-configuration/376061)
**Author:** [@dante.tettamanti](https://discuss.elastic.co/u/dante.tettamanti)\ **Replies:** 0\ **Last updated:** [March 18, 2025, 11:08am UTC](https://discuss.elastic.co/t/problem-with-logstash-configuration/376061 "2025-03-18T11:08:19Z")
Hi guys, first , sorry for my bad english . I have problem with target in the input filter i tried to run the configuration and send a message, but il looks like that the "target" option of the jsoncodec isn't apply T… --- ## [Move existing index from hot node to cold node](https://discuss.elastic.co/t/move-existing-index-from-hot-node-to-cold-node/376037)
**Author:** [@Chaviru](https://discuss.elastic.co/u/Chaviru)\ **Replies:** 1\ **Last updated:** [March 18, 2025, 10:57am UTC](https://discuss.elastic.co/t/move-existing-index-from-hot-node-to-cold-node/376037 "2025-03-18T10:57:52Z")
Hello all, I currently have created an mapped a new ILM polciy for my indices right now. But there are some older indices which are mapped to the older ILM policy. This index size is very big and currently I need to mov… --- ## [Deletion of indices](https://discuss.elastic.co/t/deletion-of-indices/376002)
**Author:** [@sreya\_14](https://discuss.elastic.co/u/sreya_14)\ **Replies:** 2\ **Last updated:** [March 18, 2025, 9:59am UTC](https://discuss.elastic.co/t/deletion-of-indices/376002 "2025-03-18T09:59:58Z")
Getting FS utilization alert from elasticsearch node .On further checking I found some old indices /u01/app/elkprd/elasticsearch/var/lib/elasticsearch/nodes/0/indices/\_0IJAYgVTh2N1tHfmaxclQ/2/index/\_bs.fdt /u01/app/elk… --- ## [Aggregation Rule](https://discuss.elastic.co/t/aggregation-rule/375990)
**Author:** [@cybersc\_1](https://discuss.elastic.co/u/cybersc_1)\ **Replies:** 2\ **Last updated:** [March 18, 2025, 9:12am UTC](https://discuss.elastic.co/t/aggregation-rule/375990 "2025-03-18T09:12:44Z")
Hi there. I have plenty of logs on my logstash, and they look like this: Mar 17 10:43:04 xfirewall CEF:0|infotecs|xf|5.4|62|Non-encrypted forwarded IP packet passed|5|start=1742190120000 end=1742190120000 src=\*\*\*\* dst=\*… --- ## [Resolving hostname while installing Elastic Agent](https://discuss.elastic.co/t/resolving-hostname-while-installing-elastic-agent/376050)
**Author:** [@r00t](https://discuss.elastic.co/u/r00t)\ **Replies:** 0\ **Last updated:** [March 18, 2025, 8:19am UTC](https://discuss.elastic.co/t/resolving-hostname-while-installing-elastic-agent/376050 "2025-03-18T08:19:08Z")
Hi community. I had a setup to access interface via hostname instead of IP adress. While trying to deploying agents on Windows machines via ELASTIC FLEET they can not resolve. I know editing the hosts file will fix pro… --- ## [All users are listed in the alerts assignees](https://discuss.elastic.co/t/all-users-are-listed-in-the-alerts-assignees/376047)
**Author:** [@tarek](https://discuss.elastic.co/u/tarek)\ **Replies:** 0\ **Last updated:** [March 18, 2025, 7:20am UTC](https://discuss.elastic.co/t/all-users-are-listed-in-the-alerts-assignees/376047 "2025-03-18T07:20:02Z")
Hi, Is there a way to limit the list of users that can be shown in the alerts assignees dropdown list? lets say we have user1 with role: role1 and this role has only access to space1. can we configure kibana so that wh… --- ## [Logstash error - Unable to retrieve Elasticsearch version](https://discuss.elastic.co/t/logstash-error-unable-to-retrieve-elasticsearch-version/375620)
**Author:** [@kawalkarhemant](https://discuss.elastic.co/u/kawalkarhemant)\ **Replies:** 22\ **Last updated:** [March 18, 2025, 6:07am UTC](https://discuss.elastic.co/t/logstash-error-unable-to-retrieve-elasticsearch-version/375620 "2025-03-18T06:07:38Z")
I am trying to trasanfer data from MSSQL to Elasticsearch using Logstash config file. But keep getting error message. \[2025-03-10T00:13:43,950\]\[WARN \]\[logstash.runner \] NOTICE: Running Logstash as a superuser … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=86) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=88)