# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=885

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 886

---

## [Can i configure ubuntu server that i will install in it elasticsearch with static ip from my home wifi to make this address to elasticsearch configuration or i will let the ubuntu server have an address rom the dhcp wifi what's the recommanded ? thanks](https://discuss.elastic.co/t/can-i-configure-ubuntu-server-that-i-will-install-in-it-elasticsearch-with-static-ip-from-my-home-wifi-to-make-this-address-to-elasticsearch-configuration-or-i-will-let-the-ubuntu-server-have-an-address-rom-the-dhcp-wifi-whats-the-recommanded-thanks/308219)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 9:28am UTC](https://discuss.elastic.co/t/can-i-configure-ubuntu-server-that-i-will-install-in-it-elasticsearch-with-static-ip-from-my-home-wifi-to-make-this-address-to-elasticsearch-configuration-or-i-will-let-the-ubuntu-server-have-an-address-rom-the-dhcp-wifi-whats-the-recommanded-thanks/308219 "2022-06-28T09:28:43Z")

</div>

can i configure ubuntu server that i will install in it elasticsearch with static ip from my home wifi to make this address to elasticsearch configuration or i will let the ubuntu server have an address rom the dhcp wifi…

---

## [TLS transport in single node cluster](https://discuss.elastic.co/t/tls-transport-in-single-node-cluster/308336)

<div class="topic-metadata">

**Author:** [@kannengi](https://discuss.elastic.co/u/kannengi)\
**Replies:** 0\
**Last updated:** [June 28, 2022, 9:13am UTC](https://discuss.elastic.co/t/tls-transport-in-single-node-cluster/308336 "2022-06-28T09:13:58Z")

</div>

Hi, (Elasticsearch Version 7.12) I'm securing my single-node ES cluster with TLS. network.host: \_site\_ discovery.type: single-node I've already successfully configured TLS over http for communication from outside wit…

---

## [Syslog collection via Elastic Agent](https://discuss.elastic.co/t/syslog-collection-via-elastic-agent/307626)

<div class="topic-metadata">

**Author:** [@Josh\_G](https://discuss.elastic.co/u/Josh_G)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 9:07am UTC](https://discuss.elastic.co/t/syslog-collection-via-elastic-agent/307626 "2022-06-28T09:07:05Z")

</div>

Hello, We have an application for which installing a local agent is not possible and there is no specific Agent Integration so we are looking to collect the syslog over TCP or UDP. I assumed within the System integrati…

---

## [Slice dense vector contents?](https://discuss.elastic.co/t/slice-dense-vector-contents/307972)

<div class="topic-metadata">

**Author:** [@lz-mn](https://discuss.elastic.co/u/lz-mn)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 8:39am UTC](https://discuss.elastic.co/t/slice-dense-vector-contents/307972 "2022-06-28T08:39:25Z")

</div>

Hi, I have about a million documents indexed with a dense vector. I am trying to add a new field to each document with a slice of its vector, e.g. the first 700 elements only. What is the best way to do this please? Th…

---

## [Painless script for inventory of previous week](https://discuss.elastic.co/t/painless-script-for-inventory-of-previous-week/308209)

<div class="topic-metadata">

**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\
**Replies:** 9\
**Last updated:** [June 28, 2022, 8:01am UTC](https://discuss.elastic.co/t/painless-script-for-inventory-of-previous-week/308209 "2022-06-28T08:01:05Z")

</div>

Hi, I want to fetch the inventory value of the previous week. Is there a way to write a painless script for this? thanks..

---

## [How to clear disk usage](https://discuss.elastic.co/t/how-to-clear-disk-usage/307738)

<div class="topic-metadata">

**Author:** [@willam\_boss](https://discuss.elastic.co/u/willam_boss)\
**Replies:** 7\
**Last updated:** [June 28, 2022, 7:53am UTC](https://discuss.elastic.co/t/how-to-clear-disk-usage/307738 "2022-06-28T07:53:42Z")

</div>

health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open sks QcmAeW2sToa3nqbPF7EVzQ 30 1 3101816690 1219212661 16.8…

---

## [Ecs compatibiliy warning in logstash](https://discuss.elastic.co/t/ecs-compatibiliy-warning-in-logstash/308263)

<div class="topic-metadata">

**Author:** [@NomanLatif](https://discuss.elastic.co/u/NomanLatif)\
**Replies:** 3\
**Last updated:** [June 28, 2022, 7:53am UTC](https://discuss.elastic.co/t/ecs-compatibiliy-warning-in-logstash/308263 "2022-06-28T07:53:14Z")

</div>

We see the following warning in logstash logs \[2022-06-27T12:23:27,848\]\[WARN \]\[deprecation.logstash.codecs.json\]\[my\_pipeline\] Relying on default value of pipeline.ecs\_compatibility, which may change in a future major re…

---

## [Elastic CCR using Create Follower API](https://discuss.elastic.co/t/elastic-ccr-using-create-follower-api/308226)

<div class="topic-metadata">

**Author:** [@abhishekgupta31986](https://discuss.elastic.co/u/abhishekgupta31986)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 7:52am UTC](https://discuss.elastic.co/t/elastic-ccr-using-create-follower-api/308226 "2022-06-28T07:52:25Z")

</div>

Hi, I'm setting up CCR in ES. As per documentation it's necessary to setup appropriate roles in remote and local cluster, and then create a user in local cluster with the created role. However i dont see how this role …

---

## [How to split nested json list into different document](https://discuss.elastic.co/t/how-to-split-nested-json-list-into-different-document/308261)

<div class="topic-metadata">

**Author:** [@Giulia](https://discuss.elastic.co/u/Giulia)\
**Replies:** 3\
**Last updated:** [June 28, 2022, 7:52am UTC](https://discuss.elastic.co/t/how-to-split-nested-json-list-into-different-document/308261 "2022-06-28T07:52:17Z")

</div>

Hello! I would to split a nested json array into different unique json document. For example, I have this document { "beginTimeSeconds": 1655886958, "endTimeS…

---

## [Exponential result in kibana metric visualization when expecting zero](https://discuss.elastic.co/t/exponential-result-in-kibana-metric-visualization-when-expecting-zero/306302)

<div class="topic-metadata">

**Author:** [@Irene](https://discuss.elastic.co/u/Irene)\
**Replies:** 4\
**Last updated:** [June 28, 2022, 7:41am UTC](https://discuss.elastic.co/t/exponential-result-in-kibana-metric-visualization-when-expecting-zero/306302 "2022-06-28T07:41:36Z")

</div>

Hello, I am creating some Dashboards in Kibana version 6.8 to compare data from two different environments, depending on the field "tecnologia". In the dashboard I use metric visualizations to count the number of docume…

---

## [Aggregation with double nested arrays](https://discuss.elastic.co/t/aggregation-with-double-nested-arrays/307976)

<div class="topic-metadata">

**Author:** [@mo-ezzat](https://discuss.elastic.co/u/mo-ezzat)\
**Replies:** 6\
**Last updated:** [June 28, 2022, 7:24am UTC](https://discuss.elastic.co/t/aggregation-with-double-nested-arrays/307976 "2022-06-28T07:24:35Z")

</div>

Hello, I'm pretty new to the aggregations but I believe this is a bit complicated I've the following set of data "grossWeight" : 6.43, "netWeight" : 6.89, "previouid" : "", "itemData" : \[ …

---

## [While scrolling, does the scroll id change](https://discuss.elastic.co/t/while-scrolling-does-the-scroll-id-change/308239)

<div class="topic-metadata">

**Author:** [@sfaxianovic](https://discuss.elastic.co/u/sfaxianovic)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 7:10am UTC](https://discuss.elastic.co/t/while-scrolling-does-the-scroll-id-change/308239 "2022-06-28T07:10:46Z")

</div>

Hi all, In the documentation in the loop while the scrollId is erased each time My question is why this is done like that ? are the scrollId changes each time ? and if so why only clearing the last one? Regards

---

## [Snapshot s3: The specified key does not exist](https://discuss.elastic.co/t/snapshot-s3-the-specified-key-does-not-exist/308280)

<div class="topic-metadata">

**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 7:07am UTC](https://discuss.elastic.co/t/snapshot-s3-the-specified-key-does-not-exist/308280 "2022-06-28T07:07:38Z")

</div>

Hello, I am currently testing s3 compatible solution from Scaleway. Creating my repository, my bucket contains a test directory tests-kedvHECeQhmY6kvkArb8AA but it seems that elasticsearch cannot delete this directory.…

---

## [How to control he log flow in ELK](https://discuss.elastic.co/t/how-to-control-he-log-flow-in-elk/308322)

<div class="topic-metadata">

**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 6:28am UTC](https://discuss.elastic.co/t/how-to-control-he-log-flow-in-elk/308322 "2022-06-28T06:28:02Z")

</div>

Hello team, We would like to know about, how to control the log flow in kibana? The Elasticsearch cluster are experiencing huge ingestion rate while the (Performance test) PT happens at application end so that, we are …

---

## [I am using elk stack repo locally and using filebeat, i have configured filebeat but still saying "hosting provider type not detected"](https://discuss.elastic.co/t/i-am-using-elk-stack-repo-locally-and-using-filebeat-i-have-configured-filebeat-but-still-saying-hosting-provider-type-not-detected/308247)

<div class="topic-metadata">

**Author:** [@Tech\_Byte](https://discuss.elastic.co/u/Tech_Byte)\
**Replies:** 6\
**Last updated:** [June 28, 2022, 6:26am UTC](https://discuss.elastic.co/t/i-am-using-elk-stack-repo-locally-and-using-filebeat-i-have-configured-filebeat-but-still-saying-hosting-provider-type-not-detected/308247 "2022-06-28T06:26:24Z")

</div>

here is my configuration output.elasticsearch: # Array of hosts to connect to. hosts: \["localhost:9200", "localhost:5601"\] # Protocol - either \`http\` (default) or \`https\`. #protocol: "https" # Authenticati…

---

## [Unable to get Term Aggregations using Java RestHighLevelClient](https://discuss.elastic.co/t/unable-to-get-term-aggregations-using-java-resthighlevelclient/308246)

<div class="topic-metadata">

**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 4:43am UTC](https://discuss.elastic.co/t/unable-to-get-term-aggregations-using-java-resthighlevelclient/308246 "2022-06-28T04:43:38Z")

</div>

I'm using Java 8 and Elasticsearch 7.12.0 I want term aggregations, as I want all the words and the doc\_count, of all the words available in indexed documents. I did it using kibana, but i'm unable to do it using Java. …

---

## [Need to control the log flows in kibana](https://discuss.elastic.co/t/need-to-control-the-log-flows-in-kibana/308213)

<div class="topic-metadata">

**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\
**Replies:** 3\
**Last updated:** [June 28, 2022, 6:09am UTC](https://discuss.elastic.co/t/need-to-control-the-log-flows-in-kibana/308213 "2022-06-28T06:09:36Z")

</div>

Hello team, We would like to know about, how to control the log flow in kibana? The Elasticsearch cluster are experiencing huge ingestion rate while the (Performance test) PT happens at application end so that, we are …

---

## [How to uninstall metricbeat 7.16.2 and install the 6.8.3 version of metricbeat](https://discuss.elastic.co/t/how-to-uninstall-metricbeat-7-16-2-and-install-the-6-8-3-version-of-metricbeat/308256)

<div class="topic-metadata">

**Author:** [@ritesh811](https://discuss.elastic.co/u/ritesh811)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 5:56am UTC](https://discuss.elastic.co/t/how-to-uninstall-metricbeat-7-16-2-and-install-the-6-8-3-version-of-metricbeat/308256 "2022-06-28T05:56:25Z")

</div>

I had installed metricbeat 7.16.2 using the rpm command and now I want to uninstall it and install the 6.8.3 version. Can someone please help by writing down the steps required for it? Thanks in advance.

---

## [Multiple snapshot in multiple containers](https://discuss.elastic.co/t/multiple-snapshot-in-multiple-containers/308249)

<div class="topic-metadata">

**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\
**Replies:** 6\
**Last updated:** [June 28, 2022, 5:42am UTC](https://discuss.elastic.co/t/multiple-snapshot-in-multiple-containers/308249 "2022-06-28T05:42:22Z")

</div>

Hi all , We know currently ElasticSearch doesn't allow taking multiple snapshot at same time for the some container it is configured with. Let's say i have 2-3 index , i configure unique new repository for each of my i…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/308174)

<div class="topic-metadata">

**Author:** [@Badr\_Atouhlaten](https://discuss.elastic.co/u/Badr_Atouhlaten)\
**Replies:** 13\
**Last updated:** [June 28, 2022, 4:25am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/308174 "2022-06-28T04:25:50Z")

</div>

i am getting \[Kibana server is not ready yet\] after reboot server Started Kibana. : \[2022-06-14T11:08:40.458+00:00\]\[INFO \]\[plugins-service\] Plugin "cloudSecurityPosture" is disabled. : \[2022-06-14T11:08:40.498+00:00\]\[…

---

## [ELK stack installables](https://discuss.elastic.co/t/elk-stack-installables/308312)

<div class="topic-metadata">

**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\
**Replies:** 4\
**Last updated:** [June 28, 2022, 4:23am UTC](https://discuss.elastic.co/t/elk-stack-installables/308312 "2022-06-28T04:23:30Z")

</div>

Hi Team, I am bit confused with ELK installable. Just want to clarify before I start using it in our environment. in lower environments i have used RPM repository option to install ELK stack but in production we don't ha…

---

## [Logstash shutdown alert](https://discuss.elastic.co/t/logstash-shutdown-alert/308232)

<div class="topic-metadata">

**Author:** [@suresh\_u](https://discuss.elastic.co/u/suresh_u)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 2:55am UTC](https://discuss.elastic.co/t/logstash-shutdown-alert/308232 "2022-06-28T02:55:40Z")

</div>

Hi Team, I am using Logstash 7.17.4 for transferring Oracle DB data to ElasticSearch index. Logstash is running perfectly as a windows service(Running on Remote Windows machine) and syncing also happening perfectly. M…

---

## [Why do I have wrap "filter" inside "bool" when I'm only filtering for a single field?](https://discuss.elastic.co/t/why-do-i-have-wrap-filter-inside-bool-when-im-only-filtering-for-a-single-field/308306)

<div class="topic-metadata">

**Author:** [@thomas708](https://discuss.elastic.co/u/thomas708)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 2:45am UTC](https://discuss.elastic.co/t/why-do-i-have-wrap-filter-inside-bool-when-im-only-filtering-for-a-single-field/308306 "2022-06-28T02:45:38Z")

</div>

In ElasticSearch 7.10 this query works { "query": { "bool": { "filter": { "term": { "field1": "value1" } } } } } but t…

---

## [Bucket Aggregate not working in newer versions](https://discuss.elastic.co/t/bucket-aggregate-not-working-in-newer-versions/307591)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 3\
**Last updated:** [June 28, 2022, 2:39am UTC](https://discuss.elastic.co/t/bucket-aggregate-not-working-in-newer-versions/307591 "2022-06-28T02:39:46Z")

</div>

Hi team, Previously I had a visualisation for top 10 VMS showing the cou usage of the infrastructure. The concept behind the visualisation was: The data was collected from metricbeat Average of system.cpu.user.pct, sy…

---

## [Adding Elasticsearch aggregation keys](https://discuss.elastic.co/t/adding-elasticsearch-aggregation-keys/308220)

<div class="topic-metadata">

**Author:** [@111505](https://discuss.elastic.co/u/111505)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 1:07am UTC](https://discuss.elastic.co/t/adding-elasticsearch-aggregation-keys/308220 "2022-06-28T01:07:45Z")

</div>

I want to aggregate the CPU values of the PODs in the group. However, if the aggregation API is based on the POD, which POD is shown in the Key, but it is not known which group the POD belongs to. Is there a way to incl…

---

## [Scheduled cross-cluster \_reindex](https://discuss.elastic.co/t/scheduled-cross-cluster-reindex/308230)

<div class="topic-metadata">

**Author:** [@CrystalDesignDR](https://discuss.elastic.co/u/CrystalDesignDR)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 12:52am UTC](https://discuss.elastic.co/t/scheduled-cross-cluster-reindex/308230 "2022-06-28T00:52:46Z")

</div>

Hi, we have various elastic cloud deployments where we would need to copy data from one cluster to another (with filters). We found that we can do this with POST \_reindex Now to my question: Is there a way to schedul…

---

## [Index gets deleted right after it was created](https://discuss.elastic.co/t/index-gets-deleted-right-after-it-was-created/308242)

<div class="topic-metadata">

**Author:** [@moor](https://discuss.elastic.co/u/moor)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 12:47am UTC](https://discuss.elastic.co/t/index-gets-deleted-right-after-it-was-created/308242 "2022-06-28T00:47:21Z")

</div>

Hi there, I am running a single-node ES v. 7.17.3 instance in an environment not accessible from internet. I also have a full text crawler service (heritrix) that populates an index. Right after the crawling job finish…

---

## [Elasticsearch shutdowns every few days with this error](https://discuss.elastic.co/t/elasticsearch-shutdowns-every-few-days-with-this-error/308271)

<div class="topic-metadata">

**Author:** [@Harshil\_Narielwala](https://discuss.elastic.co/u/Harshil_Narielwala)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 12:41am UTC](https://discuss.elastic.co/t/elasticsearch-shutdowns-every-few-days-with-this-error/308271 "2022-06-28T00:41:04Z")

</div>

My elasticsearch instance is connected to an application server I.e Liferay as a search engine. I am getting the below error randomly every few days. Can anyone explain what this means and how can I solve this? \[2022-…

---

## [Using custom pytorch model in ES8](https://discuss.elastic.co/t/using-custom-pytorch-model-in-es8/308297)

<div class="topic-metadata">

**Author:** [@jyang](https://discuss.elastic.co/u/jyang)\
**Replies:** 0\
**Last updated:** [June 27, 2022, 9:54pm UTC](https://discuss.elastic.co/t/using-custom-pytorch-model-in-es8/308297 "2022-06-27T21:54:30Z")

</div>

Hi, I would like to understand what it takes to deploy/use a custom pytorch model in elasticsearch 8. The desired usage would be to get text embedding for the input text from a custom SentenceTransformer model, using an…

---

## [Elastic search query to check if property is empty/non-empty](https://discuss.elastic.co/t/elastic-search-query-to-check-if-property-is-empty-non-empty/308290)

<div class="topic-metadata">

**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\
**Replies:** 1\
**Last updated:** [June 27, 2022, 9:12pm UTC](https://discuss.elastic.co/t/elastic-search-query-to-check-if-property-is-empty-non-empty/308290 "2022-06-27T21:12:14Z")

</div>

Hello, I was trying to find out all my documents which has property with empty value or non-empty value. The type of this property is "keyword". I'm using ES 6.8.1 version. I couldn't find anything in the documentation…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=884)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=886)
