# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=92 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 93 --- ## [Missing POST URL when exporting with CSV in visualization](https://discuss.elastic.co/t/missing-post-url-when-exporting-with-csv-in-visualization/375470)
**Author:** [@JSElasticDiscuss](https://discuss.elastic.co/u/JSElasticDiscuss)\ **Replies:** 1\ **Last updated:** [March 7, 2025, 1:30pm UTC](https://discuss.elastic.co/t/missing-post-url-when-exporting-with-csv-in-visualization/375470 "2025-03-07T13:30:03Z")
Missing the 'Copy POST URL' link in export for visualizations. Need this for creating a watcher to send CSV report. User is in 'SuperUser' group, so should be able to see everything. v8.16.0 --- ## [Filebeat multiple outputs](https://discuss.elastic.co/t/filebeat-multiple-outputs/374668)
**Author:** [@Thirupathi](https://discuss.elastic.co/u/Thirupathi)\ **Replies:** 16\ **Last updated:** [March 7, 2025, 12:57pm UTC](https://discuss.elastic.co/t/filebeat-multiple-outputs/374668 "2025-03-07T12:57:02Z")
Filebeat to send logs to Kafka, and if Kafka is down, failover to Elasticsearch. --- ## [I am not getting expected result using subquery in \_sql method of elasticsearch query DSL](https://discuss.elastic.co/t/i-am-not-getting-expected-result-using-subquery-in-sql-method-of-elasticsearch-query-dsl/375550)
**Author:** [@Sunil\_Jagtap](https://discuss.elastic.co/u/Sunil_Jagtap)\ **Replies:** 3\ **Last updated:** [March 7, 2025, 10:57am UTC](https://discuss.elastic.co/t/i-am-not-getting-expected-result-using-subquery-in-sql-method-of-elasticsearch-query-dsl/375550 "2025-03-07T10:57:38Z")
Below is the query & output, kindly suggest, GET \_sql?format=txt { "query": """ SELECT tenant\_id, (SELECT is\_vulnerability\_scan\_tool\_active from "index1") AS VST from "index2" where tenant\_id='ABCDEFHG' """ } … --- ## [Unable to setup connector in docker environment](https://discuss.elastic.co/t/unable-to-setup-connector-in-docker-environment/373315)
**Author:** [@Eshwar\_K](https://discuss.elastic.co/u/Eshwar_K)\ **Replies:** 7\ **Last updated:** [March 7, 2025, 9:10am UTC](https://discuss.elastic.co/t/unable-to-setup-connector-in-docker-environment/373315 "2025-03-07T09:10:30Z")
Hi Community, I am setting up a connector on top of docker but while running docker with provided configuration from Kibana UI, I am getting below errors. I am not sure why docker is giving permission denied error. Can… --- ## [My kibana.service failed after i made a change in kibana.yml](https://discuss.elastic.co/t/my-kibana-service-failed-after-i-made-a-change-in-kibana-yml/375420)
**Author:** [@Duong\_Hieu](https://discuss.elastic.co/u/Duong_Hieu)\ **Replies:** 13\ **Last updated:** [March 7, 2025, 9:06am UTC](https://discuss.elastic.co/t/my-kibana-service-failed-after-i-made-a-change-in-kibana-yml/375420 "2025-03-07T09:06:03Z")
i installed kibana by rpm, it was running til i made some change to kibana.yml, after that it failed immediately. This is what i changed: server.port: 5601 server.host:"10.6.145.226" elasticsearch.hosts: \["https:/\_/10… --- ## [ELASTIC\_PASSWORD and KIBANA\_PASSWORD in docker-compose seems to be ignored?](https://discuss.elastic.co/t/elastic-password-and-kibana-password-in-docker-compose-seems-to-be-ignored/375389)
**Author:** [@hairdo-wirier](https://discuss.elastic.co/u/hairdo-wirier)\ **Replies:** 3\ **Last updated:** [March 7, 2025, 4:57am UTC](https://discuss.elastic.co/t/elastic-password-and-kibana-password-in-docker-compose-seems-to-be-ignored/375389 "2025-03-07T04:57:45Z")
I am building out an automation project using ansible, docker and of course Elasticsearch. I have got SSL working, but I am really struggling with setting the passwords non-interactively. My understanding from the docs,… --- ## [Knn\_vectors field understanding](https://discuss.elastic.co/t/knn-vectors-field-understanding/374923)
**Author:** [@yli](https://discuss.elastic.co/u/yli)\ **Replies:** 23\ **Last updated:** [March 6, 2025, 11:13pm UTC](https://discuss.elastic.co/t/knn-vectors-field-understanding/374923 "2025-03-06T23:13:04Z")
Hi, I have defined one field, named "file\_section\_embedding", in my index mapping to be dense\_vector and enabled index for it. I also tested both including and excluding the dense vector field in/from the "\_source", and… --- ## [DWG - ElasticSearch - Tika](https://discuss.elastic.co/t/dwg-elasticsearch-tika/375383)
**Author:** [@uniconfortced](https://discuss.elastic.co/u/uniconfortced)\ **Replies:** 5\ **Last updated:** [March 6, 2025, 9:34pm UTC](https://discuss.elastic.co/t/dwg-elasticsearch-tika/375383 "2025-03-06T21:34:25Z")
I have a simple question. I read that Tika can extract information from CAD file as DWG format. There is a mode to improve this in Elastic? I put into modules\\ingest-attachment folder tika-parser-cad-module-2.9.2.jar b… --- ## [Fields autocomplete on devtools not working in Version 8.12.2](https://discuss.elastic.co/t/fields-autocomplete-on-devtools-not-working-in-version-8-12-2/375538)
**Author:** [@kotha](https://discuss.elastic.co/u/kotha)\ **Replies:** 1\ **Last updated:** [March 6, 2025, 9:31pm UTC](https://discuss.elastic.co/t/fields-autocomplete-on-devtools-not-working-in-version-8-12-2/375538 "2025-03-06T21:31:20Z")
Hi, Recently we upgraded from 8.7.1 to 8.12.2 version and after the autocomplete for fields is not working in devtools. The same feature is working in 8.7.1 and in 8.17.1 versions. Is this a known bug in version 8.12.… --- ## [Upload a CSV file in Kibana UI through pipeline with custom mapping](https://discuss.elastic.co/t/upload-a-csv-file-in-kibana-ui-through-pipeline-with-custom-mapping/375483)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 6\ **Last updated:** [March 6, 2025, 7:55pm UTC](https://discuss.elastic.co/t/upload-a-csv-file-in-kibana-ui-through-pipeline-with-custom-mapping/375483 "2025-03-06T19:55:17Z")
I want to upload a single CSV file to Elasticsearch using just the Kibana UI. The file should go through a pipeline and the index needs custom settings. I am currently doing this with a complicated manual process and won… --- ## [The place of the doc for the option 'data.autocomplete.valueSuggestions' is a little bit confusing](https://discuss.elastic.co/t/the-place-of-the-doc-for-the-option-data-autocomplete-valuesuggestions-is-a-little-bit-confusing/375534)
**Author:** [@ACoder](https://discuss.elastic.co/u/ACoder)\ **Replies:** 0\ **Last updated:** [March 6, 2025, 4:42pm UTC](https://discuss.elastic.co/t/the-place-of-the-doc-for-the-option-data-autocomplete-valuesuggestions-is-a-little-bit-confusing/375534 "2025-03-06T16:42:45Z")
When I tried to find out what 'data.autocomplete.valueSuggestions.terminateAfter' do, search tools pointed me to 'Edit Kibana user settings | Elasticsearch Service Documentation | Elastic'. This option is related to Kib… --- ## [Kibana deletes data view from another data view?](https://discuss.elastic.co/t/kibana-deletes-data-view-from-another-data-view/375454)
**Author:** [@rara01](https://discuss.elastic.co/u/rara01)\ **Replies:** 8\ **Last updated:** [March 6, 2025, 4:04pm UTC](https://discuss.elastic.co/t/kibana-deletes-data-view-from-another-data-view/375454 "2025-03-06T16:04:06Z")
Hi, Yesterday, i deleted one of my newly created test dataviews, where i added two index patterns/datastreams - pd-serilog\* and pd1-service\*. One of them (pd-serilog\*) was named same as data view (which may be the probl… --- ## [Which loggers does Elasticsearch have?](https://discuss.elastic.co/t/which-loggers-does-elasticsearch-have/375514)
**Author:** [@ACoder](https://discuss.elastic.co/u/ACoder)\ **Replies:** 6\ **Last updated:** [March 6, 2025, 3:54pm UTC](https://discuss.elastic.co/t/which-loggers-does-elasticsearch-have/375514 "2025-03-06T15:54:51Z")
The doc says: Messages are logged by a hierarchy of loggers which matches the hierarchy of Java packages and classes in the Elasticsearch source code. And it gives an example: logger.org.elasticsearch.discovery: DEB… --- ## [How do i add custom field based on filebeat input 's glob path?](https://discuss.elastic.co/t/how-do-i-add-custom-field-based-on-filebeat-input-s-glob-path/375526)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 0\ **Last updated:** [March 6, 2025, 2:31pm UTC](https://discuss.elastic.co/t/how-do-i-add-custom-field-based-on-filebeat-input-s-glob-path/375526 "2025-03-06T14:31:23Z")
Hello, I have a requirement , where i need to derive values based on the input path example - i have a log file on a partition format - /app/shared/1.1.1.1\_webserver\_ticket#1.log From the above path , i need to extr… --- ## [Optimistic concurrency control in ElasticSearch Output plugin](https://discuss.elastic.co/t/optimistic-concurrency-control-in-elasticsearch-output-plugin/375506)
**Author:** [@HDDTHR](https://discuss.elastic.co/u/HDDTHR)\ **Replies:** 3\ **Last updated:** [March 6, 2025, 1:36pm UTC](https://discuss.elastic.co/t/optimistic-concurrency-control-in-elasticsearch-output-plugin/375506 "2025-03-06T13:36:50Z")
Is there a mechanism to use if\_seq\_no and if\_primary\_term in the Elasticsearch output plugin? My use-case involves using Elasticsearch as an input (including the \_seq\_no, and \_primary\_term fields), and updating the docu… --- ## [Using the UpdateByQuery with InlineScript,100000+ items it is giving the max timeout exception](https://discuss.elastic.co/t/using-the-updatebyquery-with-inlinescript-100000-items-it-is-giving-the-max-timeout-exception/375434)
**Author:** [@rutuja](https://discuss.elastic.co/u/rutuja)\ **Replies:** 6\ **Last updated:** [March 6, 2025, 9:20am UTC](https://discuss.elastic.co/t/using-the-updatebyquery-with-inlinescript-100000-items-it-is-giving-the-max-timeout-exception/375434 "2025-03-06T09:20:53Z")
I am using the UpdateByQuery with InlineScript, but it is working for only 30000-40000 items while updating, and for 100000+ items it is giving the connection time out exception and only updating 14000 items. i want to … --- ## [Windows Server 2025 Support](https://discuss.elastic.co/t/windows-server-2025-support/371325)
**Author:** [@oed-brosentd](https://discuss.elastic.co/u/oed-brosentd)\ **Replies:** 3\ **Last updated:** [March 6, 2025, 8:25am UTC](https://discuss.elastic.co/t/windows-server-2025-support/371325 "2025-03-06T08:25:41Z")
Hi there, we're currently evaluating the use of Winlog/Filebeat on Microsofts latest Major Release Windows Server 2025. As it's not yet in the Support Matrix: Is there any information on when Elastic will officially sup… --- ## [Logstash single server](https://discuss.elastic.co/t/logstash-single-server/375493)
**Author:** [@Trent-alex](https://discuss.elastic.co/u/Trent-alex)\ **Replies:** 1\ **Last updated:** [March 6, 2025, 5:01am UTC](https://discuss.elastic.co/t/logstash-single-server/375493 "2025-03-06T05:01:16Z")
Hello I have the following configuration file reporting the below error. This is all running on a single machine. filter { csv { separator =\> "," columns =\> \["Day of Date Eastern", "Device Id", "Location", "T… --- ## [Log not visible on Kibana Interface](https://discuss.elastic.co/t/log-not-visible-on-kibana-interface/375193)
**Author:** [@pofudukhamsi](https://discuss.elastic.co/u/pofudukhamsi)\ **Replies:** 22\ **Last updated:** [March 5, 2025, 9:47pm UTC](https://discuss.elastic.co/t/log-not-visible-on-kibana-interface/375193 "2025-03-05T21:47:51Z")
Hello, I send the logs to ELK via Qradar. I can see the logs with TCPdump, but I cannot access the logs in the Kibana interface. Elasticsearch, Logstash, Kibana are all installed on a single server. Old sent logs are … --- ## [Aggregation Group By With Total Count](https://discuss.elastic.co/t/aggregation-group-by-with-total-count/375057)
**Author:** [@hammadrasheed0](https://discuss.elastic.co/u/hammadrasheed0)\ **Replies:** 4\ **Last updated:** [March 5, 2025, 8:00pm UTC](https://discuss.elastic.co/t/aggregation-group-by-with-total-count/375057 "2025-03-05T20:00:55Z")
HI, I am stuck with a use case where I need to group N number of persons by company and get the total count of grouped persons across the pages. So far the query I have prepared is working fine up to the level where the… --- ## [Need help with kibana ssl setup](https://discuss.elastic.co/t/need-help-with-kibana-ssl-setup/375466)
**Author:** [@rao15](https://discuss.elastic.co/u/rao15)\ **Replies:** 1\ **Last updated:** [March 5, 2025, 5:53pm UTC](https://discuss.elastic.co/t/need-help-with-kibana-ssl-setup/375466 "2025-03-05T17:53:10Z")
I have a 3 master and 3 data nodes elastic cluster. To generate the elastic certs. Step1: /u01/app/elasticsearch/bin/elasticsearch-certutil cert -pem -multiple Step2. Unzip and moved all the master and data nodes. it … --- ## [Logstash Pipeline](https://discuss.elastic.co/t/logstash-pipeline/375396)
**Author:** [@JosephR](https://discuss.elastic.co/u/JosephR)\ **Replies:** 18\ **Last updated:** [March 5, 2025, 5:52pm UTC](https://discuss.elastic.co/t/logstash-pipeline/375396 "2025-03-05T17:52:19Z")
I have quite a few logstash conf files written out that have to be kicked off manually at the moment. Is there a way to cause them to run automatically? I need to basically tie what I bring in to a dashboard that consta… --- ## [Error Ingesting AWS Security Hub Data](https://discuss.elastic.co/t/error-ingesting-aws-security-hub-data/375013)
**Author:** [@Abhay\_Singh](https://discuss.elastic.co/u/Abhay_Singh)\ **Replies:** 4\ **Last updated:** [March 5, 2025, 5:35pm UTC](https://discuss.elastic.co/t/error-ingesting-aws-security-hub-data/375013 "2025-03-05T17:35:53Z")
Hello Team, I am trying to ingest data from AWS Security Hub into elastic using elastic agent and the integration available, however i am getting the below error. Could someone guide me how i can resolve this issue. Er… --- ## [Illegal\_argument\_exception Text Fields are not Optmised](https://discuss.elastic.co/t/illegal-argument-exception-text-fields-are-not-optmised/375386)
**Author:** [@user-27022024](https://discuss.elastic.co/u/user-27022024)\ **Replies:** 2\ **Last updated:** [March 5, 2025, 4:40pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-text-fields-are-not-optmised/375386 "2025-03-05T16:40:25Z")
I have started getting this error when trying to run an average and median on a what certainly used to be mapped as a number. Type: illegal\_argument\_exception Reason: Text fields are not optimised for operations that r… --- ## [Error when restoring snapshot to a new stack](https://discuss.elastic.co/t/error-when-restoring-snapshot-to-a-new-stack/375461)
**Author:** [@koffe](https://discuss.elastic.co/u/koffe)\ **Replies:** 0\ **Last updated:** [March 5, 2025, 2:00pm UTC](https://discuss.elastic.co/t/error-when-restoring-snapshot-to-a-new-stack/375461 "2025-03-05T14:00:39Z")
Hi! I am trying to move my saved snapshots from my old stack to a new one. For some of my snapshots i get the following message: "searchable snapshots indices may be converted only within the same repository" What i h… --- ## [Log Visibility Issue for sfd-ui-node-server-dev Index in ELK](https://discuss.elastic.co/t/log-visibility-issue-for-sfd-ui-node-server-dev-index-in-elk/375458)
**Author:** [@vikascateina](https://discuss.elastic.co/u/vikascateina)\ **Replies:** 0\ **Last updated:** [March 5, 2025, 12:49pm UTC](https://discuss.elastic.co/t/log-visibility-issue-for-sfd-ui-node-server-dev-index-in-elk/375458 "2025-03-05T12:49:36Z")
We've encountered an issue with log visibility for the ui-node-dev index in our ELK server environment. This index uses the pattern ui-node-dev, whereas other indices, such as account-data-api-env, follow patterns like a… --- ## [JMX plugin logstash. Configuration for retreive process.pid , process.nb\_thread?](https://discuss.elastic.co/t/jmx-plugin-logstash-configuration-for-retreive-process-pid-process-nb-thread/375457)
**Author:** [@martel](https://discuss.elastic.co/u/martel)\ **Replies:** 0\ **Last updated:** [March 5, 2025, 12:40pm UTC](https://discuss.elastic.co/t/jmx-plugin-logstash-configuration-for-retreive-process-pid-process-nb-thread/375457 "2025-03-05T12:40:15Z")
i want add metrics to the JMX information from process. i want add pid, the number of thread for this pid, etc... i cant try the good query: "queries" : \[ { "object\_name" : "java.lang:type=Memory", "object\_alias" :… --- ## [What's the relation between filebeat, index lifecycle policies and index templates?](https://discuss.elastic.co/t/whats-the-relation-between-filebeat-index-lifecycle-policies-and-index-templates/375455)
**Author:** [@jacek.bilski](https://discuss.elastic.co/u/jacek.bilski)\ **Replies:** 0\ **Last updated:** [March 5, 2025, 12:12pm UTC](https://discuss.elastic.co/t/whats-the-relation-between-filebeat-index-lifecycle-policies-and-index-templates/375455 "2025-03-05T12:12:12Z")
We're using Elastic 7.17. What I'm trying to accomplish is: I want to ship logs using filebeat so that they land in a datastream of a specific name and with a specific lifecycle policy. The goal is to separate data from … --- ## [Convert the code in Logstash](https://discuss.elastic.co/t/convert-the-code-in-logstash/375284)
**Author:** [@Gowtham1](https://discuss.elastic.co/u/Gowtham1)\ **Replies:** 3\ **Last updated:** [March 5, 2025, 11:03am UTC](https://discuss.elastic.co/t/convert-the-code-in-logstash/375284 "2025-03-05T11:03:40Z")
Hi, I'm to the Logstash, How can I convert the below codes in Logstash? Code 1: def categorize\_rssi(rssi): if rssi \<= -30 and rssi \> -50: return "Excellent Signal" elif rssi \<= -50 and rssi \> -60: return "Good Sig… --- ## [Which node has ML model deployed](https://discuss.elastic.co/t/which-node-has-ml-model-deployed/375447)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 0\ **Last updated:** [March 5, 2025, 10:46am UTC](https://discuss.elastic.co/t/which-node-has-ml-model-deployed/375447 "2025-03-05T10:46:46Z")
Hi team! On my self managed elastic cluster, is it possible to check which node has the ML model deployed? I want to confirm that the ML node has it deployed and not in data node. Please help [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=91) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=93)