# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=96 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 97 --- ## [Elastic-Agent is healthy or offline](https://discuss.elastic.co/t/elastic-agent-is-healthy-or-offline/374899)
**Author:** [@seyed\_amir](https://discuss.elastic.co/u/seyed_amir)\ **Replies:** 7\ **Last updated:** [February 26, 2025, 1:12pm UTC](https://discuss.elastic.co/t/elastic-agent-is-healthy-or-offline/374899 "2025-02-26T13:12:20Z")
Hello, I installed Fleet Server in the cluster and then installed several Windows and Linux agents. The status of all is healthy, but every few minutes these agents are displayed as offline. Although they are sending log… --- ## [Group visualizations into tabs on a single dashboard in Kibana](https://discuss.elastic.co/t/group-visualizations-into-tabs-on-a-single-dashboard-in-kibana/369427)
**Author:** [@elk\_guy\_1234](https://discuss.elastic.co/u/elk_guy_1234)\ **Replies:** 1\ **Last updated:** [February 26, 2025, 11:23am UTC](https://discuss.elastic.co/t/group-visualizations-into-tabs-on-a-single-dashboard-in-kibana/369427 "2025-02-26T11:23:33Z")
Is there a way to group visualizations into tabs on a single dashboard in Kibana? I do not wnat to create separate dashboards, and drill down links to them, that is not what I am looking for. I want the user to be able… --- ## [Map index to a new ILM](https://discuss.elastic.co/t/map-index-to-a-new-ilm/375056)
**Author:** [@Chaviru](https://discuss.elastic.co/u/Chaviru)\ **Replies:** 3\ **Last updated:** [February 26, 2025, 10:28am UTC](https://discuss.elastic.co/t/map-index-to-a-new-ilm/375056 "2025-02-26T10:28:37Z")
Hello guys, I have a usecase where I need to map my current index to a new ILM policy. So I created a new ILM polciy with my requirement and then deleted the existing ILM for the index and then added the new ILM for thi… --- ## [Does the ingest pipeline support automatic embedding conversion from text to vectors?](https://discuss.elastic.co/t/does-the-ingest-pipeline-support-automatic-embedding-conversion-from-text-to-vectors/375070)
**Author:** [@Thulasi\_Vasan\_S](https://discuss.elastic.co/u/Thulasi_Vasan_S)\ **Replies:** 0\ **Last updated:** [February 26, 2025, 10:20am UTC](https://discuss.elastic.co/t/does-the-ingest-pipeline-support-automatic-embedding-conversion-from-text-to-vectors/375070 "2025-02-26T10:20:01Z")
I am looking for a way to automate the process of converting text to vector embeddings and storing them in an Elasticsearch index. End Goal: The content should be stored in vector format, which I will later use for RAG. … --- ## [How do i edit my elasticsearch.yml and kibana.yml in conf folder to be to install on my pc](https://discuss.elastic.co/t/how-do-i-edit-my-elasticsearch-yml-and-kibana-yml-in-conf-folder-to-be-to-install-on-my-pc/375063)
**Author:** [@nabireeba](https://discuss.elastic.co/u/nabireeba)\ **Replies:** 0\ **Last updated:** [February 26, 2025, 9:18am UTC](https://discuss.elastic.co/t/how-do-i-edit-my-elasticsearch-yml-and-kibana-yml-in-conf-folder-to-be-to-install-on-my-pc/375063 "2025-02-26T09:18:10Z")
ERROR: Failed to determine the health of the cluster. , with exit code 69 when creating enrollment token --- ## [Can I disable the 'helpful' date-range approximation?](https://discuss.elastic.co/t/can-i-disable-the-helpful-date-range-approximation/374758)
**Author:** [@Tim\_Baverstock](https://discuss.elastic.co/u/Tim_Baverstock)\ **Replies:** 1\ **Last updated:** [February 26, 2025, 9:10am UTC](https://discuss.elastic.co/t/can-i-disable-the-helpful-date-range-approximation/374758 "2025-02-26T09:10:14Z")
When I'm trying to set a relative time - 25 hours ago or 29 days - for some display, the display automatically rounds it to '~ 1 day' or '~ 1 month', and then when I want to tweak it to 26 hours or 30 days, the dialogue … --- ## [Not able to connect to elastic from pyspark application](https://discuss.elastic.co/t/not-able-to-connect-to-elastic-from-pyspark-application/375005)
**Author:** [@meghananagaraja](https://discuss.elastic.co/u/meghananagaraja)\ **Replies:** 3\ **Last updated:** [February 26, 2025, 9:06am UTC](https://discuss.elastic.co/t/not-able-to-connect-to-elastic-from-pyspark-application/375005 "2025-02-26T09:06:06Z")
Hi All, I am running Kafka, spark and elastic separately on docker containers. I use a python pyspark application to connect with elastic. But i am getting an error spark-job-2 | INFO:elastic\_transport.transport:HEAD … --- ## [Installed Docker onb redhat](https://discuss.elastic.co/t/installed-docker-onb-redhat/375002)
**Author:** [@felixwong](https://discuss.elastic.co/u/felixwong)\ **Replies:** 2\ **Last updated:** [February 26, 2025, 8:48am UTC](https://discuss.elastic.co/t/installed-docker-onb-redhat/375002 "2025-02-26T08:48:16Z")
HI , Thank you all for your help ! I installed elasticsearch:8.17.2 in red hat Docker . Is it possible to export docker configuration es01/es02/kib01 before stop? so I can retain configuration and keys ( password) w… --- ## [Issue with CompletionSuggester query using DotNet Elastic.Clients.Elasticsearch](https://discuss.elastic.co/t/issue-with-completionsuggester-query-using-dotnet-elastic-clients-elasticsearch/374959)
**Author:** [@Reed\_M](https://discuss.elastic.co/u/Reed_M)\ **Replies:** 3\ **Last updated:** [February 25, 2025, 8:03pm UTC](https://discuss.elastic.co/t/issue-with-completionsuggester-query-using-dotnet-elastic-clients-elasticsearch/374959 "2025-02-25T20:03:40Z")
I am trying to query the CompletionSuggester using Elastic.Clients.Elasticsearch. I am able to query with the following (use either prefix OR regex gets the right result): POST customer-catalog-test-0001/\_search { "\_s… --- ## [Split hostname into new fields](https://discuss.elastic.co/t/split-hostname-into-new-fields/375022)
**Author:** [@Gowtham1](https://discuss.elastic.co/u/Gowtham1)\ **Replies:** 3\ **Last updated:** [February 25, 2025, 5:07pm UTC](https://discuss.elastic.co/t/split-hostname-into-new-fields/375022 "2025-02-25T17:07:54Z")
Hi, I'm new to Logstash,I'm trying to split the hostname into new fields like the below example hostname = gbldi-f01-switch split to the below fields SITE\_ID = gbldi FLOOR = f01 CATEGORY = switch Please see the bel… --- ## [Why analyser dont work with suggester?](https://discuss.elastic.co/t/why-analyser-dont-work-with-suggester/374827)
**Author:** [@Adrien\_L](https://discuss.elastic.co/u/Adrien_L)\ **Replies:** 2\ **Last updated:** [February 25, 2025, 5:01pm UTC](https://discuss.elastic.co/t/why-analyser-dont-work-with-suggester/374827 "2025-02-25T17:01:33Z")
I'm trying to work on a basic suggester that if someone write "bl" the suggester would propose "blue corola" and "toyota blue". But at the moment its only return "blue corola". It's like the analyser dont work. Can you… --- ## [Error message": "getting node from external cluster \[RC\_Test\] failed" between nodes on 2 docker hosts](https://discuss.elastic.co/t/error-message-getting-node-from-external-cluster-rc-test-failed-between-nodes-on-2-docker-hosts/374980)
**Author:** [@poke1710](https://discuss.elastic.co/u/poke1710)\ **Replies:** 10\ **Last updated:** [February 25, 2025, 4:21pm UTC](https://discuss.elastic.co/t/error-message-getting-node-from-external-cluster-rc-test-failed-between-nodes-on-2-docker-hosts/374980 "2025-02-25T16:21:15Z")
Hi, We are facing problem while connecting remote cluster. I am using docker compose to build elasticsearch with local ip 10.1.1.2 on docker host 1 and same on docker host 2, when trying to connect remote cluster it is … --- ## [Filter and multiline logs in filebeat](https://discuss.elastic.co/t/filter-and-multiline-logs-in-filebeat/375033)
**Author:** [@rejiprn](https://discuss.elastic.co/u/rejiprn)\ **Replies:** 0\ **Last updated:** [February 25, 2025, 3:28pm UTC](https://discuss.elastic.co/t/filter-and-multiline-logs-in-filebeat/375033 "2025-02-25T15:28:57Z")
Hello, I have a problem with parsing multiline log message from Filebeat to Elasticsearch. sample logs from filebeat is as follows: 2025-02-25T10:26:29.929895387Z stdout F { 2025-02-25T10:26:29.929932291Z stdout F me… --- ## [I get an error when connecting 2 remote clusters](https://discuss.elastic.co/t/i-get-an-error-when-connecting-2-remote-clusters/375029)
**Author:** [@shin12](https://discuss.elastic.co/u/shin12)\ **Replies:** 2\ **Last updated:** [February 25, 2025, 3:23pm UTC](https://discuss.elastic.co/t/i-get-an-error-when-connecting-2-remote-clusters/375029 "2025-02-25T15:23:14Z")
However, I am encountering an issue when trying to connect Cluster 1 to Cluster 2 as a remote cluster. The nodes on both clusters are trying to communicate using their internal IP addresses (the IPs assigned to each cont… --- ## [I get an error when connecting 2 remote clusters](https://discuss.elastic.co/t/i-get-an-error-when-connecting-2-remote-clusters/375031)
**Author:** [@anhle](https://discuss.elastic.co/u/anhle)\ **Replies:** 0\ **Last updated:** [February 25, 2025, 3:00pm UTC](https://discuss.elastic.co/t/i-get-an-error-when-connecting-2-remote-clusters/375031 "2025-02-25T15:00:02Z")
However, I am encountering an issue when trying to connect Cluster 1 to Cluster 2 as a remote cluster. The nodes on both clusters are trying to communicate using their internal IP addresses (the IPs assigned to each cont… --- ## [Fleet allows agent upgrades higher than cluster version](https://discuss.elastic.co/t/fleet-allows-agent-upgrades-higher-than-cluster-version/375014)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 2\ **Last updated:** [February 25, 2025, 2:06pm UTC](https://discuss.elastic.co/t/fleet-allows-agent-upgrades-higher-than-cluster-version/375014 "2025-02-25T14:06:41Z")
Hello, In previous versions of Elastic the highest available version for upgrading Elastic Agent in fleet was the version of the cluster itself however the newer versions allow upgrading to the latest release version. I… --- ## [Facing issue in Bar Graph Creation](https://discuss.elastic.co/t/facing-issue-in-bar-graph-creation/368523)
**Author:** [@Sandeep\_Thakur](https://discuss.elastic.co/u/Sandeep_Thakur)\ **Replies:** 3\ **Last updated:** [February 25, 2025, 2:01pm UTC](https://discuss.elastic.co/t/facing-issue-in-bar-graph-creation/368523 "2025-02-25T14:01:49Z")
I am using EKL 8.15.2 where we are unable to create horizontal and vertical Bar graph visualisation other all graph working but when we try to create bar graph its showing " kbn-ui-shared-deps-npm.dll.js:365 Uncaught Ty… --- ## [Memory usage in elasticsearch](https://discuss.elastic.co/t/memory-usage-in-elasticsearch/374973)
**Author:** [@Carlos\_Cardoso](https://discuss.elastic.co/u/Carlos_Cardoso)\ **Replies:** 3\ **Last updated:** [February 25, 2025, 1:19pm UTC](https://discuss.elastic.co/t/memory-usage-in-elasticsearch/374973 "2025-02-25T13:19:46Z")
Hello everyone, good evening. I'm experiencing seemingly high memory consumption from Elasticsearch and would like to know if anyone else has experienced this and how they optimized. :small\_blue\_diamond: Scenario: Elas… --- ## [How to remote cluster](https://discuss.elastic.co/t/how-to-remote-cluster/375009)
**Author:** [@poke1710](https://discuss.elastic.co/u/poke1710)\ **Replies:** 1\ **Last updated:** [February 25, 2025, 11:12am UTC](https://discuss.elastic.co/t/how-to-remote-cluster/375009 "2025-02-25T11:12:53Z")
Elasticsearch Cluster Configuration: I would like to build a cluster with 3 Elasticsearch nodes. I need assistance configuring the Elasticsearch nodes to ensure they can communicate with each other (local cluster). I n… --- ## [Understanding Point-in-Time Recovery (PITR) & Backup Strategies in Elastic Cloud](https://discuss.elastic.co/t/understanding-point-in-time-recovery-pitr-backup-strategies-in-elastic-cloud/374996)
**Author:** [@Tharun\_Chimata](https://discuss.elastic.co/u/Tharun_Chimata)\ **Replies:** 1\ **Last updated:** [February 25, 2025, 10:04am UTC](https://discuss.elastic.co/t/understanding-point-in-time-recovery-pitr-backup-strategies-in-elastic-cloud/374996 "2025-02-25T10:04:53Z")
I have an Elastic Cloud account and I'm trying to understand if Point-in-Time Recovery (PITR) is possible using Elasticsearch snapshots. From what I’ve read, snapshots in Elasticsearch seem to be full backups (similar t… --- ## [A romved rule keeps firing alerts in ELK SIEM version: 7.12.0](https://discuss.elastic.co/t/a-romved-rule-keeps-firing-alerts-in-elk-siem-version-7-12-0/374995)
**Author:** [@JasemMHZ](https://discuss.elastic.co/u/JasemMHZ)\ **Replies:** 0\ **Last updated:** [February 25, 2025, 9:18am UTC](https://discuss.elastic.co/t/a-romved-rule-keeps-firing-alerts-in-elk-siem-version-7-12-0/374995 "2025-02-25T09:18:23Z")
I removed a rule from \:5601/app/alerting/rules about two weeks ago and it keeps generating alerts, but when I click on edit event and then edit rule link in the event page, it says the rule has been deleted, b… --- ## [Shard Balancing on ELK cluster](https://discuss.elastic.co/t/shard-balancing-on-elk-cluster/374915)
**Author:** [@rach\_53](https://discuss.elastic.co/u/rach_53)\ **Replies:** 2\ **Last updated:** [February 25, 2025, 7:27am UTC](https://discuss.elastic.co/t/shard-balancing-on-elk-cluster/374915 "2025-02-25T07:27:50Z")
Hello Community, I have an elk cluster with 4 servers 1master and 3 worker nodes. My issue is with the disk space consumption on worker nodes with regards to data indexing and replicas. When an index is created one repl… --- ## [Index replica shard relocation taking too long](https://discuss.elastic.co/t/index-replica-shard-relocation-taking-too-long/374950)
**Author:** [@Samuel\_Ruiz\_Garcia](https://discuss.elastic.co/u/Samuel_Ruiz_Garcia)\ **Replies:** 1\ **Last updated:** [February 25, 2025, 7:21am UTC](https://discuss.elastic.co/t/index-replica-shard-relocation-taking-too-long/374950 "2025-02-25T07:21:11Z")
A week ago, we had to recreate one out of 3 nodes of our ELK cluster due to and exception trying to stop the service (docker container). To solve it i had to kill the container process and then recreate the node. To let … --- ## [Azure Blob Storage Keeps Disconnecting when verify it gives "502 Bad Gateway"](https://discuss.elastic.co/t/azure-blob-storage-keeps-disconnecting-when-verify-it-gives-502-bad-gateway/374987)
**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\ **Replies:** 0\ **Last updated:** [February 25, 2025, 7:00am UTC](https://discuss.elastic.co/t/azure-blob-storage-keeps-disconnecting-when-verify-it-gives-502-bad-gateway/374987 "2025-02-25T07:00:14Z")
Basic Information: I'm experiencing an issue with my on-prem Elasticsearch cluster's (8.17) Azure Blob Storage repository. The repository is configured using a container and initially shows as connected when verified vi… --- ## [What is the usecasae of --ca-dn when using elasticsearch-certutil utility](https://discuss.elastic.co/t/what-is-the-usecasae-of-ca-dn-when-using-elasticsearch-certutil-utility/374961)
**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\ **Replies:** 2\ **Last updated:** [February 25, 2025, 5:31am UTC](https://discuss.elastic.co/t/what-is-the-usecasae-of-ca-dn-when-using-elasticsearch-certutil-utility/374961 "2025-02-25T05:31:50Z")
the --ca-dn option while using cert seems to only be applicable with --self-signed option, for example ./elasticsearch-certutil cert --self-signed --ca-dn xyz --pem --out /usr/share/elasticsearch/bin/test/out5.zip Bu… --- ## [Filebeat 'dissect' won't override 'message' field](https://discuss.elastic.co/t/filebeat-dissect-wont-override-message-field/374971)
**Author:** [@yquirion](https://discuss.elastic.co/u/yquirion)\ **Replies:** 1\ **Last updated:** [February 24, 2025, 11:15pm UTC](https://discuss.elastic.co/t/filebeat-dissect-wont-override-message-field/374971 "2025-02-24T23:15:13Z")
Hi there! I'm having a strange problem when using a dissect clause into filebeat. Here is my code: - dissect: when: regexp: message: '^.\*\\s#remotelogmessage#\\shost\_ip:.\*$' tokenizer: "%… --- ## [Pre release v9 UX Feedback](https://discuss.elastic.co/t/pre-release-v9-ux-feedback/374970)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [February 24, 2025, 10:25pm UTC](https://discuss.elastic.co/t/pre-release-v9-ux-feedback/374970 "2025-02-24T22:25:41Z")
I would like to preface that I am big supporter of Elastic, I am just providing constructive criticism. So, I was able to explore a bit with the pre-release. I actually being waiting for v9 after hearing how much improv… --- ## [Filebeat slow registry issues](https://discuss.elastic.co/t/filebeat-slow-registry-issues/374951)
**Author:** [@Dario\_Menten](https://discuss.elastic.co/u/Dario_Menten)\ **Replies:** 3\ **Last updated:** [February 24, 2025, 6:24pm UTC](https://discuss.elastic.co/t/filebeat-slow-registry-issues/374951 "2025-02-24T18:24:20Z")
Hello Team, I have an Opensearch cluster with 10 Opensearch Indexers running on Kubernetes. I have Logstash in the middle to process all the logs. Who send the logs is Filebeat, but the delay in the log ingestion on Op… --- ## [Elastic Defend Policy - Performance impact of configs](https://discuss.elastic.co/t/elastic-defend-policy-performance-impact-of-configs/374369)
**Author:** [@Ziyi26](https://discuss.elastic.co/u/Ziyi26)\ **Replies:** 3\ **Last updated:** [February 24, 2025, 5:24pm UTC](https://discuss.elastic.co/t/elastic-defend-policy-performance-impact-of-configs/374369 "2025-02-24T17:24:38Z")
Hi there, We want to minimize specifically the Elastic Defend Policies due to the size of our estate. One easy way is to have 1 policy for both Windows and Linux hosts. How does Elastic Defend work when you configure i… --- ## [Using a Single Logstash template.conf Across Multiple Pipelines with Dynamic Variable Replacement](https://discuss.elastic.co/t/using-a-single-logstash-template-conf-across-multiple-pipelines-with-dynamic-variable-replacement/374853)
**Author:** [@Dante1](https://discuss.elastic.co/u/Dante1)\ **Replies:** 6\ **Last updated:** [February 24, 2025, 5:05pm UTC](https://discuss.elastic.co/t/using-a-single-logstash-template-conf-across-multiple-pipelines-with-dynamic-variable-replacement/374853 "2025-02-24T17:05:06Z")
I need to create 1000 pipelines that will all use the same template file, template.conf, as a template. For example, in the pipelines.yml file I have these pipelines: - pipeline.id: pip\_01 path.config: "/etc/logstash… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=95) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=97)