# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=88 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 89 --- ## [Does elastic-agent enrolled in fleet with system integration needs port opened to elasticsearch nodes?](https://discuss.elastic.co/t/does-elastic-agent-enrolled-in-fleet-with-system-integration-needs-port-opened-to-elasticsearch-nodes/375992)
**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\ **Replies:** 1\ **Last updated:** [March 17, 2025, 2:54pm UTC](https://discuss.elastic.co/t/does-elastic-agent-enrolled-in-fleet-with-system-integration-needs-port-opened-to-elasticsearch-nodes/375992 "2025-03-17T14:54:48Z")
I have a 3 elasticsearch nodes, 1 elastic agent fleet server node, and 8 elastic-agent server. The elastic-agent have custom logs and system integration. I have opened ports from elastic agent to fleet server. Does the e… --- ## [Lens Metric with Graph Underlay](https://discuss.elastic.co/t/lens-metric-with-graph-underlay/376035)
**Author:** [@ArielC](https://discuss.elastic.co/u/ArielC)\ **Replies:** 2\ **Last updated:** [March 17, 2025, 10:31pm UTC](https://discuss.elastic.co/t/lens-metric-with-graph-underlay/376035 "2025-03-17T22:31:47Z")
I would like to create a Metric visualization using Lens similar to one mentioned in the post below: https://discuss.elastic.co/t/metric-background-change-based-on-last-week-value/345082 How can I add a graph under… --- ## [Node reduction - Should I use "primaries" or "none"](https://discuss.elastic.co/t/node-reduction-should-i-use-primaries-or-none/375983)
**Author:** [@Archie1](https://discuss.elastic.co/u/Archie1)\ **Replies:** 10\ **Last updated:** [March 17, 2025, 9:34pm UTC](https://discuss.elastic.co/t/node-reduction-should-i-use-primaries-or-none/375983 "2025-03-17T21:34:33Z")
Hi Everyone, I am reducing an Elasticsearch cluster from 6 nodes to 3. I have already started the process and can see shard draining from the nodes. Nodes were taken out of the pool with the correct command so that pa… --- ## [Warning messages in kibana - not connecting to elasticsearch](https://discuss.elastic.co/t/warning-messages-in-kibana-not-connecting-to-elasticsearch/376015)
**Author:** [@DOkuwa](https://discuss.elastic.co/u/DOkuwa)\ **Replies:** 1\ **Last updated:** [March 17, 2025, 8:41pm UTC](https://discuss.elastic.co/t/warning-messages-in-kibana-not-connecting-to-elasticsearch/376015 "2025-03-17T20:41:33Z")
elasticsearch and kibana seems to be working but kibana cannot connect to elasticsearch # systemctl status kibana ● kibana.service - Kibana Loaded: loaded (/usr/lib/systemd/system/kibana.service; enabled; vendor pr… --- ## [Forwarding my bulk records from Http Input Plugin to Elasticsearch Output Plugin - Discuss the Elastic Stack](https://discuss.elastic.co/t/forwarding-my-bulk-records-from-http-input-plugin-to-elasticsearch-output-plugin-discuss-the-elastic-stack/375866)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 23\ **Last updated:** [March 17, 2025, 6:39pm UTC](https://discuss.elastic.co/t/forwarding-my-bulk-records-from-http-input-plugin-to-elasticsearch-output-plugin-discuss-the-elastic-stack/375866 "2025-03-17T18:39:15Z")
Hello there. Passing from Elastic On-Prem to Elastic Cloud, I am trying to use Logstash to create a "store and forward" implementation for creating documents in elastic. So, practically, before I was directly writing to… --- ## [Create average availability for multiple servers?](https://discuss.elastic.co/t/create-average-availability-for-multiple-servers/375800)
**Author:** [@BenKenobi](https://discuss.elastic.co/u/BenKenobi)\ **Replies:** 0\ **Last updated:** [March 12, 2025, 5:22pm UTC](https://discuss.elastic.co/t/create-average-availability-for-multiple-servers/375800 "2025-03-12T17:22:25Z")
Hi, I have created a table visualization where the availability (status:up) for each monitor.name is being presented in percentage. Now I would like to create a visualization that sums all availability for all servers … --- ## [Download a dashboard 'based' on a title](https://discuss.elastic.co/t/download-a-dashboard-based-on-a-title/375914)
**Author:** [@anton99](https://discuss.elastic.co/u/anton99)\ **Replies:** 3\ **Last updated:** [March 17, 2025, 2:41pm UTC](https://discuss.elastic.co/t/download-a-dashboard-based-on-a-title/375914 "2025-03-17T14:41:44Z")
Hi, i am trying to download (export) a dashboard with (references), to import that dashboard into a new created Elasticsearch instance. I've got the api correct to export and then to import! But now i try to find the I… --- ## [Running elastic search cluster with expired TLS ceritificate](https://discuss.elastic.co/t/running-elastic-search-cluster-with-expired-tls-ceritificate/375996)
**Author:** [@piyushgupta](https://discuss.elastic.co/u/piyushgupta)\ **Replies:** 3\ **Last updated:** [March 17, 2025, 2:16pm UTC](https://discuss.elastic.co/t/running-elastic-search-cluster-with-expired-tls-ceritificate/375996 "2025-03-17T14:16:21Z")
Hi , we are running 6 node cluster with 3 master and 3 data node in each node we are using letsencrypt certificate as below which expires every 3 month xpack.security.http.ssl.enabled: true xpack.security.http.ssl.ke… --- ## [Logstash duplicate](https://discuss.elastic.co/t/logstash-duplicate/375381)
**Author:** [@AVMOps](https://discuss.elastic.co/u/AVMOps)\ **Replies:** 12\ **Last updated:** [March 17, 2025, 12:30pm UTC](https://discuss.elastic.co/t/logstash-duplicate/375381 "2025-03-17T12:30:48Z")
Hello, I'm facing a duplicate data issue with Elasticsearch (3 nodes v8.5.2 - green state), coupled with Logstash (1 node v 8.5.2). So basically we have multiple apps servers sending logs with NLog to Logstash on port … --- ## [Add new master to the ES cluster](https://discuss.elastic.co/t/add-new-master-to-the-es-cluster/376000)
**Author:** [@piyushgupta](https://discuss.elastic.co/u/piyushgupta)\ **Replies:** 4\ **Last updated:** [March 17, 2025, 12:06pm UTC](https://discuss.elastic.co/t/add-new-master-to-the-es-cluster/376000 "2025-03-17T12:06:43Z")
Hi We are having ES cluster 7.10.0 with total 5 nodes 3 master node 3 data node 1 node serves as both data and master node i have plan to add 1 more master only node is any risk on adding new master only node to… --- ## [How to change a template of integration stream?](https://discuss.elastic.co/t/how-to-change-a-template-of-integration-stream/376005)
**Author:** [@111238](https://discuss.elastic.co/u/111238)\ **Replies:** 0\ **Last updated:** [March 17, 2025, 11:19am UTC](https://discuss.elastic.co/t/how-to-change-a-template-of-integration-stream/376005 "2025-03-17T11:19:04Z")
Hi there. I use custom UDP integration. And it creates a datastream with seemingly hardcoded default "logs" template. Creating another one with a higher priority doesn't help. How the heck do I change it? Creating a… --- ## [Kibana has been in between availability and demotion, resulting in very slow queries](https://discuss.elastic.co/t/kibana-has-been-in-between-availability-and-demotion-resulting-in-very-slow-queries/375995)
**Author:** [@xialiang](https://discuss.elastic.co/u/xialiang)\ **Replies:** 2\ **Last updated:** [March 17, 2025, 10:17am UTC](https://discuss.elastic.co/t/kibana-has-been-in-between-availability-and-demotion-resulting-in-very-slow-queries/375995 "2025-03-17T10:17:25Z")
kibana's journal \[2025-03-17T09:44:49.334+00:00\]\[INFO \]\[status\] Kibana is now available (was degraded) \[2025-03-17T09:45:03.275+00:00\]\[INFO \]\[status\] Kibana is now degraded (was available) \[2025-03-17T09:45:18.038+00:00… --- ## [Unable to retrieve version information from Elasticsearch nodes. unable to verify the first certificate](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/375968)
**Author:** [@Dylan\_Smart](https://discuss.elastic.co/u/Dylan_Smart)\ **Replies:** 2\ **Last updated:** [March 17, 2025, 7:28am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/375968 "2025-03-17T07:28:10Z")
Hi dear fellow elkers! I having the issue of Unable to retrieve version information from Elasticsearch nodes. unable to verify the first certificate. The server also gets stuck on Kibana server is not ready yet. I am fo… --- ## [Calling a function / store procedure from jdbc input pluging](https://discuss.elastic.co/t/calling-a-function-store-procedure-from-jdbc-input-pluging/375562)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 2\ **Last updated:** [March 16, 2025, 6:55pm UTC](https://discuss.elastic.co/t/calling-a-function-store-procedure-from-jdbc-input-pluging/375562 "2025-03-16T18:55:38Z")
Hello, I'm trying to invoke a function from the jdbc input plugin. I've read this But I get the following error \[2025-03-07T14:43:00,004\]\[WARN \]\[logstash.inputs.jdbc \]\[main\]\[335bb609b009b4900e39c184c3e0c418f819… --- ## [Podman compose for kibana+elasticsearch+logstash](https://discuss.elastic.co/t/podman-compose-for-kibana-elasticsearch-logstash/375592)
**Author:** [@Phoenix2](https://discuss.elastic.co/u/Phoenix2)\ **Replies:** 14\ **Last updated:** [March 16, 2025, 6:36pm UTC](https://discuss.elastic.co/t/podman-compose-for-kibana-elasticsearch-logstash/375592 "2025-03-16T18:36:32Z")
I am trying to create a podman compose file to create instant Elasticsearch, Kibana, Logstash. All data should be backed up via volumes. The problem seems to be transferring the Kibana API key from Elastic to Kibana. My… --- ## [Filebeat pods memory usage increase over time](https://discuss.elastic.co/t/filebeat-pods-memory-usage-increase-over-time/375981)
**Author:** [@Dharani\_Vattamwar](https://discuss.elastic.co/u/Dharani_Vattamwar)\ **Replies:** 0\ **Last updated:** [March 16, 2025, 3:06pm UTC](https://discuss.elastic.co/t/filebeat-pods-memory-usage-increase-over-time/375981 "2025-03-16T15:06:33Z")
memory usage of filebeat pod which has high number of logs processing is increasing over time. if the filebeat pod is restarted the memory comes down and again starts increasing. This behaviour is observed if cpu us… --- ## [Elastic Analytics](https://discuss.elastic.co/t/elastic-analytics/375978)
**Author:** [@pngworkforce](https://discuss.elastic.co/u/pngworkforce)\ **Replies:** 0\ **Last updated:** [March 16, 2025, 9:50am UTC](https://discuss.elastic.co/t/elastic-analytics/375978 "2025-03-16T09:50:29Z")
Hello! Is there a way to set up Elasticsearch and Kibana on the Elastic Cloud to collect search query data without having to use the Behavioural Analytics JS plugins? We will look at implementing the JS plugin in the f… --- ## [Parse either json or non json logs in logstash](https://discuss.elastic.co/t/parse-either-json-or-non-json-logs-in-logstash/375771)
**Author:** [@alex\_petrov](https://discuss.elastic.co/u/alex_petrov)\ **Replies:** 2\ **Last updated:** [March 16, 2025, 8:36am UTC](https://discuss.elastic.co/t/parse-either-json-or-non-json-logs-in-logstash/375771 "2025-03-16T08:36:49Z")
here is my log messages with two farmats in response section : this one non json in response 2025-03-12 10:52:19,645 INFO REQUEST:/auth/authorize?response\_type=code RESPONSE:APPROVED amount:1000 this one json in rep… --- ## [Best way to delete old data from elastic search](https://discuss.elastic.co/t/best-way-to-delete-old-data-from-elastic-search/375958)
**Author:** [@prashanthtg](https://discuss.elastic.co/u/prashanthtg)\ **Replies:** 3\ **Last updated:** [March 16, 2025, 7:51am UTC](https://discuss.elastic.co/t/best-way-to-delete-old-data-from-elastic-search/375958 "2025-03-16T07:51:15Z")
I want to maintain the lifecycle management of an Elasticsearch doc over x days. \_delete\_by\_query api help with the job, however i understand this also comes with some performance impact on query/read on delete of large … --- ## [Logstash memory queue events lost](https://discuss.elastic.co/t/logstash-memory-queue-events-lost/375962)
**Author:** [@Mahdi\_Moazami](https://discuss.elastic.co/u/Mahdi_Moazami)\ **Replies:** 1\ **Last updated:** [March 15, 2025, 12:49pm UTC](https://discuss.elastic.co/t/logstash-memory-queue-events-lost/375962 "2025-03-15T12:49:05Z")
Hi there, we are using logstash as data pipeline to transfer data from a SQL Server database to Elasticsearch. the pipelines are configured as memory queued and sometimes after the data transfer completes, it's incomple… --- ## [Logstash ERROR: (NameError) cannot initialize Java class org.logstash.plugins.AliasRegistry (java.lang.ExceptionInInitializerError)](https://discuss.elastic.co/t/logstash-error-nameerror-cannot-initialize-java-class-org-logstash-plugins-aliasregistry-java-lang-exceptionininitializererror/375965)
**Author:** [@horemheb](https://discuss.elastic.co/u/horemheb)\ **Replies:** 0\ **Last updated:** [March 15, 2025, 9:13am UTC](https://discuss.elastic.co/t/logstash-error-nameerror-cannot-initialize-java-class-org-logstash-plugins-aliasregistry-java-lang-exceptionininitializererror/375965 "2025-03-15T09:13:25Z")
Logstash ERROR: (NameError) cannot initialize Java class org.logstash.plugins.AliasRegistry (java.lang.ExceptionInInitializerError) For this exception on windows machines I'd changed jvm.options file for parameters #-Du… --- ## [Autocomplete Strategy](https://discuss.elastic.co/t/autocomplete-strategy/375869)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 2\ **Last updated:** [March 14, 2025, 8:59pm UTC](https://discuss.elastic.co/t/autocomplete-strategy/375869 "2025-03-14T20:59:24Z")
We are new to Elasticsearch's options for autocomplete functionalities. Would apprciate if someone could advise us as to what is the best option for autocomplete such as Completion Suggesters, Search As You Type etc. T… --- ## [Wildcard query using NEST API](https://discuss.elastic.co/t/wildcard-query-using-nest-api/375867)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 2\ **Last updated:** [March 14, 2025, 8:57pm UTC](https://discuss.elastic.co/t/wildcard-query-using-nest-api/375867 "2025-03-14T20:57:25Z")
We have the following Wildcard query. What we want to do is if the query matches the beginning then it should be boosted to the top. All results should be in Ascending alphabetic order based on the field "Name" which i… --- ## [Extracting process environment variables](https://discuss.elastic.co/t/extracting-process-environment-variables/375955)
**Author:** [@rafirs](https://discuss.elastic.co/u/rafirs)\ **Replies:** 0\ **Last updated:** [March 14, 2025, 8:48pm UTC](https://discuss.elastic.co/t/extracting-process-environment-variables/375955 "2025-03-14T20:48:31Z")
What's the recommended approach to extracting a specific set of environment variables from an event? Failing to find a syntax to reference the fields within process.env, I did find that using a script/javascript process… --- ## [Create fields in kibana using log4j2](https://discuss.elastic.co/t/create-fields-in-kibana-using-log4j2/375954)
**Author:** [@mathias21](https://discuss.elastic.co/u/mathias21)\ **Replies:** 0\ **Last updated:** [March 14, 2025, 8:24pm UTC](https://discuss.elastic.co/t/create-fields-in-kibana-using-log4j2/375954 "2025-03-14T20:24:15Z")
Hi everyone, I'm new to Kibana and need your help. How can I display the information written in logger.info in Kibana columns in my code? For example: I want to create a field in Kibana called "persona" and store the "c… --- ## [SLOs and Maintenance Windows](https://discuss.elastic.co/t/slos-and-maintenance-windows/375947)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [March 14, 2025, 8:04pm UTC](https://discuss.elastic.co/t/slos-and-maintenance-windows/375947 "2025-03-14T20:04:47Z")
Hello, I am beginning to leverage SLO's and have a basic understanding so far. I created a synthetics availability SLO for some monitors. My question lies on how SLO's consider periods of maintenance. I know Kibana's Ma… --- ## [Auditbeat handling of link and linkat syscalls](https://discuss.elastic.co/t/auditbeat-handling-of-link-and-linkat-syscalls/375868)
**Author:** [@rafirs](https://discuss.elastic.co/u/rafirs)\ **Replies:** 2\ **Last updated:** [March 14, 2025, 7:44pm UTC](https://discuss.elastic.co/t/auditbeat-handling-of-link-and-linkat-syscalls/375868 "2025-03-14T19:44:55Z")
The hard link syscalls (link and linkat) do not seem to be configured properly and do not get the same treatment as other file calls. If no one is currently working on it, I am happy to provide a pr to add them to go-li… --- ## [Why doesn't the index template created by .NET logger use logs@custom?](https://discuss.elastic.co/t/why-doesnt-the-index-template-created-by-net-logger-use-logs-custom/375953)
**Author:** [@tobiasly](https://discuss.elastic.co/u/tobiasly)\ **Replies:** 0\ **Last updated:** [March 14, 2025, 7:21pm UTC](https://discuss.elastic.co/t/why-doesnt-the-index-template-created-by-net-logger-use-logs-custom/375953 "2025-03-14T19:21:02Z")
I'm using the Elastic.Extensions.Logging library to ship logs from my .NET app. When I configured it to bootstrap the data stream, it created a corresponding index template named logs-dotnet-8.11.0 with a higher priority… --- ## [Handling multi word expressions in elastic](https://discuss.elastic.co/t/handling-multi-word-expressions-in-elastic/375950)
**Author:** [@Alireza\_Zamani](https://discuss.elastic.co/u/Alireza_Zamani)\ **Replies:** 0\ **Last updated:** [March 14, 2025, 6:14pm UTC](https://discuss.elastic.co/t/handling-multi-word-expressions-in-elastic/375950 "2025-03-14T18:14:47Z")
Hi, I want to be able to handle multi word expressions with fuzzy in elasticsearch. So for example i have two tokens in my field's value that have a unified meaning when they occur next to each other. Every query, must … --- ## [\[2025-03-14T09:00:37,853\]\[FATAL\]\[org.logstash.Logstash \] Logstash stopped processing because of an error: (SystemExit) exit org.jruby.exceptions.SystemExit: (SystemExit) exit at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:747) ~\[jruby-c](https://discuss.elastic.co/t/2025-03-14t0937-853-fatal-org-logstash-logstash-logstash-stopped-processing-because-of-an-error-systemexit-exit-org-jruby-exceptions-systemexit-systemexit-exit-at-org-jruby-rubykernel-exit-org-jruby-rubykernel-java-747-jruby-c/375949)
**Author:** [@praveen.jain](https://discuss.elastic.co/u/praveen.jain)\ **Replies:** 0\ **Last updated:** [March 14, 2025, 5:41pm UTC](https://discuss.elastic.co/t/2025-03-14t0937-853-fatal-org-logstash-logstash-logstash-stopped-processing-because-of-an-error-systemexit-exit-org-jruby-exceptions-systemexit-systemexit-exit-at-org-jruby-rubykernel-exit-org-jruby-rubykernel-java-747-jruby-c/375949 "2025-03-14T17:41:06Z")
I am getting this below error in my environment where I am using logstash to collect and transfer logs to syslog server and also storing it locally. \[2025-03-14T09:00:37,853\]\[FATAL\]\[org.logstash.Logstash \] Logstash s… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=87) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=89)