# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=968 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 969 --- ## [Cross Cluster Indices on in Index Management tab](https://discuss.elastic.co/t/cross-cluster-indices-on-in-index-management-tab/302768)
**Author:** [@subham](https://discuss.elastic.co/u/subham)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 3:43pm UTC](https://discuss.elastic.co/t/cross-cluster-indices-on-in-index-management-tab/302768 "2022-04-20T15:43:55Z")
Hi, I am not able to find my indices from remote cluster in Index Management tab. However, I am able to create index patterns using pattern cluster-name:index-name. Can someone tell if it's possible to search remote clu… --- ## [Access Management to Kibana production](https://discuss.elastic.co/t/access-management-to-kibana-production/302794)
**Author:** [@CP-AssafM](https://discuss.elastic.co/u/CP-AssafM)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 3:24pm UTC](https://discuss.elastic.co/t/access-management-to-kibana-production/302794 "2022-04-20T15:24:41Z")
Hi All, How do you manage your user's access to Kibana in production? I want to provide access to a user to specific customer logs (and not all the customer's logs), We have thousands of customers logs in the same ind… --- ## [DISTINCT values DSL query](https://discuss.elastic.co/t/distinct-values-dsl-query/302715)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 3:05pm UTC](https://discuss.elastic.co/t/distinct-values-dsl-query/302715 "2022-04-20T15:05:32Z")
Hello, I've been reading a lot about this topic because I've seen it has been asked before but I can do it works yet. I am trying to get unique values from an index. I have something like this: id | app\_name | … --- ## [Using HAProxy in front of ES cluster?](https://discuss.elastic.co/t/using-haproxy-in-front-of-es-cluster/302739)
**Author:** [@tflorac](https://discuss.elastic.co/u/tflorac)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 2:58pm UTC](https://discuss.elastic.co/t/using-haproxy-in-front-of-es-cluster/302739 "2022-04-20T14:58:29Z")
Hi, When using an Elasticsearch cluster, I understand that I can set the addresses of all the cluster nodes on my client application side. But: what occurs if I define only one node address on application side? is th… --- ## [Slow handling of documents when large text in a field](https://discuss.elastic.co/t/slow-handling-of-documents-when-large-text-in-a-field/302679)
**Author:** [@lubosvr](https://discuss.elastic.co/u/lubosvr)\ **Replies:** 10\ **Last updated:** [April 20, 2022, 2:45pm UTC](https://discuss.elastic.co/t/slow-handling-of-documents-when-large-text-in-a-field/302679 "2022-04-20T14:45:03Z")
Hi, We have problems when handling for documents with large content in a single field. We have index with mapping like this: "mappings" : { "properties" : { "properties" : { "name" : { "type" : "te… --- ## [Search\_as\_you\_type highlight issue](https://discuss.elastic.co/t/search-as-you-type-highlight-issue/302825)
**Author:** [@sinnetll19](https://discuss.elastic.co/u/sinnetll19)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 2:18pm UTC](https://discuss.elastic.co/t/search-as-you-type-highlight-issue/302825 "2022-04-20T14:18:22Z")
Continuing the discussion from Search\_as\_you\_type and highlight: "It will only highlight matching tokens — if you leave out the space after fox, it won't mark that." why does this happen and how can i use a search\_as\_y… --- ## [Logstash does not open Port for Data-Input](https://discuss.elastic.co/t/logstash-does-not-open-port-for-data-input/302305)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 1:06pm UTC](https://discuss.elastic.co/t/logstash-does-not-open-port-for-data-input/302305 "2022-04-20T13:06:39Z")
Hi there, soo i'm trying to get a new cluster to work - everythings setup fine. We're using CentOS 7, Elasticsearch 7.15, Logstash 7.15. The service is running fine - no errors when running it in debug mode. There's… --- ## [Does clustering important for elastic stack](https://discuss.elastic.co/t/does-clustering-important-for-elastic-stack/302784)
**Author:** [@hadii](https://discuss.elastic.co/u/hadii)\ **Replies:** 4\ **Last updated:** [April 20, 2022, 12:39pm UTC](https://discuss.elastic.co/t/does-clustering-important-for-elastic-stack/302784 "2022-04-20T12:39:14Z")
Could anyone explain to me clearly does clustering is required or not for elastic stack? --- ## [AcceptSecurityContext error, data 532](https://discuss.elastic.co/t/acceptsecuritycontext-error-data-532/302602)
**Author:** [@yt\_h](https://discuss.elastic.co/u/yt_h)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 12:22pm UTC](https://discuss.elastic.co/t/acceptsecuritycontext-error-data-532/302602 "2022-04-20T12:22:28Z")
Crazy print domain authentication failed in my Elasticsearch logs today {"type": "server", "timestamp": "2022-04-18T08:55:38,254Z", "level": "WARN", "component": "o.e.x.s.a.AuthenticationService", "cluster.name": "Elast… --- ## [Reparsing / processing old indexes with new separation files in Logstash depending on path logs](https://discuss.elastic.co/t/reparsing-processing-old-indexes-with-new-separation-files-in-logstash-depending-on-path-logs/302807)
**Author:** [@dapmI](https://discuss.elastic.co/u/dapmI)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 12:01pm UTC](https://discuss.elastic.co/t/reparsing-processing-old-indexes-with-new-separation-files-in-logstash-depending-on-path-logs/302807 "2022-04-20T12:01:23Z")
Hello, I'm currently in the process to separate indexes depending on the path logs. Here we had to separate logs depending on the source files to better apply lifecycle policy. Currently we have one common index with lo… --- ## [Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"https://elastic:xxxxxx@xxx.xxx.xx.xx:9200/", :error\_type=\>LogStash:error=\>"Elasticsearch Unreachable: \[https://elastic:xxxxxx@xxx.xxx.xx.xx:9200/\]](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-url-https-elastic-xxxxxx-xxx-xxx-xx-xx-9200-error-type-logstash-error-elasticsearch-unreachable-https-elastic-xxxxxx-xxx-xxx-xx-xx-9200/302676)
**Author:** [@sahir](https://discuss.elastic.co/u/sahir)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 11:32am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error-url-https-elastic-xxxxxx-xxx-xxx-xx-xx-9200-error-type-logstash-error-elasticsearch-unreachable-https-elastic-xxxxxx-xxx-xxx-xx-xx-9200/302676 "2022-04-20T11:32:23Z")
Hi Team, I tried to connect Elasticsearch from Logstash i'm facing this error. I deployed Elasticsearch using HTTPS and check without passing a certificate its shows an error Elastic hosts is unreachable and again ill te… --- ## [How to access objects fields nested value in runtime field painless (or expression) scripts?](https://discuss.elastic.co/t/how-to-access-objects-fields-nested-value-in-runtime-field-painless-or-expression-scripts/302699)
**Author:** [@Mohammad\_Ostadi](https://discuss.elastic.co/u/Mohammad_Ostadi)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 9:25am UTC](https://discuss.elastic.co/t/how-to-access-objects-fields-nested-value-in-runtime-field-painless-or-expression-scripts/302699 "2022-04-20T09:25:33Z")
I have a document like this: POST test/\_doc { "name":"Ali", "age":20, "grades":\[ { "title":"math", "score":1 }, { "title":"english", "score":2 }, { "title":"physic", "sc… --- ## [Custom search fields using metadata](https://discuss.elastic.co/t/custom-search-fields-using-metadata/302713)
**Author:** [@Hamza\_Youssouf](https://discuss.elastic.co/u/Hamza_Youssouf)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 8:26am UTC](https://discuss.elastic.co/t/custom-search-fields-using-metadata/302713 "2022-04-20T08:26:36Z")
Hello, I'm new to Elastic. I would like to develop a .Net application that will use Elastic. I had a question about the research part. I have several types of documents with each specific metadata. Would it be possible … --- ## [Missing \_meta field in mapping \[doc\] of index\[watches\] & \[.triggered\_watches\]](https://discuss.elastic.co/t/missing-meta-field-in-mapping-doc-of-index-watches-triggered-watches/302410)
**Author:** [@axi](https://discuss.elastic.co/u/axi)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 8:23am UTC](https://discuss.elastic.co/t/missing-meta-field-in-mapping-doc-of-index-watches-triggered-watches/302410 "2022-04-20T08:23:21Z")
I just updated my cloud elastic stack from 6.8.23 to 7.17.2 using the cloud.elastic.co dashboard and all went well but I have now some WARNs in the log section of the dashboard: \[instance-0000000010\] Missing \_meta field… --- ## [How to set analyzer in Java Client Elasticsearch -\> Search Request Builder in query time](https://discuss.elastic.co/t/how-to-set-analyzer-in-java-client-elasticsearch-search-request-builder-in-query-time/302723)
**Author:** [@joanjanku2000](https://discuss.elastic.co/u/joanjanku2000)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 8:22am UTC](https://discuss.elastic.co/t/how-to-set-analyzer-in-java-client-elasticsearch-search-request-builder-in-query-time/302723 "2022-04-20T08:22:56Z")
How to set analyzer in Java Client Elasticsearch -\> Search Request Builder in query time --- ## [Event.module Field Not Added by Winlogbeat Module (\>= v8.0.0)](https://discuss.elastic.co/t/event-module-field-not-added-by-winlogbeat-module-v8-0-0/302595)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 3\ **Last updated:** [April 20, 2022, 7:27am UTC](https://discuss.elastic.co/t/event-module-field-not-added-by-winlogbeat-module-v8-0-0/302595 "2022-04-20T07:27:43Z")
Hi there, As far as I understand, event.module is not being added to each document originating from Winlogbeat (starting from v8.0.0) that uses Winlogbeat modules. This field was previously seen from v7.4.0 onwards, wh… --- ## [High memory usage of Metricbeat in Kubernetes](https://discuss.elastic.co/t/high-memory-usage-of-metricbeat-in-kubernetes/301961)
**Author:** [@melkamar](https://discuss.elastic.co/u/melkamar)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 7:05am UTC](https://discuss.elastic.co/t/high-memory-usage-of-metricbeat-in-kubernetes/301961 "2022-04-20T07:05:16Z")
I am trying out collecting metrics and logs from pods in our staging Kubernetes cluster. I have followed the instructions here: Run Metricbeat on Kubernetes | Metricbeat Reference \[8.1\] | Elastic The cluster has two nod… --- ## [How to create Elasticsearch Dedicated Replica Cluster](https://discuss.elastic.co/t/how-to-create-elasticsearch-dedicated-replica-cluster/301697)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 11\ **Last updated:** [April 20, 2022, 6:29am UTC](https://discuss.elastic.co/t/how-to-create-elasticsearch-dedicated-replica-cluster/301697 "2022-04-20T06:29:38Z")
Hello Everyone: I am using Elasticsearch v7.8.0 cluster having indices in 100TB+. I am looking for a backup cluster for my running PROD cluster , a cluster where my DATA would reside in READ-ONLY Manner while it still … --- ## [How to pull large amount of data (all documents in the index) using elasticsearch python client?](https://discuss.elastic.co/t/how-to-pull-large-amount-of-data-all-documents-in-the-index-using-elasticsearch-python-client/302763)
**Author:** [@safarial.fatemeh](https://discuss.elastic.co/u/safarial.fatemeh)\ **Replies:** 3\ **Last updated:** [April 20, 2022, 6:22am UTC](https://discuss.elastic.co/t/how-to-pull-large-amount-of-data-all-documents-in-the-index-using-elasticsearch-python-client/302763 "2022-04-20T06:22:34Z")
I'm using Elasticsearch.helpers.scan to pull down over 1M documents from Elasticsearch and I use match\_all query for that. the process is superslow (taking over 2hrs). is there a better way to pull down all the documen… --- ## [Configuration error in logstash pipeline for multiline sql statements](https://discuss.elastic.co/t/configuration-error-in-logstash-pipeline-for-multiline-sql-statements/302599)
**Author:** [@Vijay\_Balagopal](https://discuss.elastic.co/u/Vijay_Balagopal)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 6:15am UTC](https://discuss.elastic.co/t/configuration-error-in-logstash-pipeline-for-multiline-sql-statements/302599 "2022-04-20T06:15:05Z")
We have configured centralized pipeline feature for logstash. When we are using a multi line SQL statement we are getting error as below. \[2022-04-18T08:19:05,193\]\[ERROR\]\[logstash.agent \] Failed to execute ac… --- ## [Dense vector field type](https://discuss.elastic.co/t/dense-vector-field-type/302548)
**Author:** [@Anand\_p\_s](https://discuss.elastic.co/u/Anand_p_s)\ **Replies:** 4\ **Last updated:** [April 20, 2022, 6:06am UTC](https://discuss.elastic.co/t/dense-vector-field-type/302548 "2022-04-20T06:06:51Z")
How can apply dense vector size(dims) to 2048 "mappings": { "properties": { "denseVector": { "type": "dense\_vector", "index": false, "dims":2048 } } } And i got The number of dimensions for field \[denseVector\]… --- ## [Source ip not getting reflected](https://discuss.elastic.co/t/source-ip-not-getting-reflected/302769)
**Author:** [@ashisharyan](https://discuss.elastic.co/u/ashisharyan)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 6:05am UTC](https://discuss.elastic.co/t/source-ip-not-getting-reflected/302769 "2022-04-20T06:05:41Z")
We are presently using Elk stack for receiving syslog through file beat. We are receiving logs in logstash and also in Elasticsearch but we are not getting source ip in our dashboard Below is the config file of logsta… --- ## [Top Hit / last value metrics aggregation doesn't work on Runtime fields](https://discuss.elastic.co/t/top-hit-last-value-metrics-aggregation-doesnt-work-on-runtime-fields/301924)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 7\ **Last updated:** [April 20, 2022, 5:28am UTC](https://discuss.elastic.co/t/top-hit-last-value-metrics-aggregation-doesnt-work-on-runtime-fields/301924 "2022-04-20T05:28:03Z")
Hello All, I use Kibana version 7.15.2. I'm not able to perform TopHits or last value metrics aggregation on runtime fields. I just see blanks or dashes '-' when I do so. Here is an example: On the kibana\_sample\_data… --- ## [Content match in elasticsearch query over date range](https://discuss.elastic.co/t/content-match-in-elasticsearch-query-over-date-range/302478)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 5\ **Last updated:** [April 20, 2022, 5:14am UTC](https://discuss.elastic.co/t/content-match-in-elasticsearch-query-over-date-range/302478 "2022-04-20T05:14:24Z")
Hello, Trying to execute query over an index for the last 5 minutes, where message field contain word IIOP\_CLEAR\_TEXT. Would like to get all the results, via pagination as well using 10000 records per page. How can th… --- ## [Invalid configuration for xpack.security.transport.ssl - \[xpack.security.transport.ssl.enabled\]](https://discuss.elastic.co/t/invalid-configuration-for-xpack-security-transport-ssl-xpack-security-transport-ssl-enabled/302761)
**Author:** [@Fikri\_Naufal\_F](https://discuss.elastic.co/u/Fikri_Naufal_F)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 3:20am UTC](https://discuss.elastic.co/t/invalid-configuration-for-xpack-security-transport-ssl-xpack-security-transport-ssl-enabled/302761 "2022-04-20T03:20:24Z")
i already uninstall my existing Elasticsearch 7.16 and then install Elasticsearch 8.1.2 but i got this error when run elasticseacrh. what i supose to do? Exception org.elasticsearch.ElasticsearchSecurityException: inval… --- ## [Log4j vulnerability in Elastic Search 7.16.1](https://discuss.elastic.co/t/log4j-vulnerability-in-elastic-search-7-16-1/302760)
**Author:** [@olilam](https://discuss.elastic.co/u/olilam)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 3:08am UTC](https://discuss.elastic.co/t/log4j-vulnerability-in-elastic-search-7-16-1/302760 "2022-04-20T03:08:57Z")
Hi, Our vulnerability scanning tool is detecting Elasticsearch-sql-cli-7.16.1.jar in the bin folder as vulnerable and the jar file contains a Jndilookup.class file. Is it supposed to be detected as vulnerable? Can anyo… --- ## [Metrics not working when using Logstash](https://discuss.elastic.co/t/metrics-not-working-when-using-logstash/302705)
**Author:** [@quim.gomez](https://discuss.elastic.co/u/quim.gomez)\ **Replies:** 13\ **Last updated:** [April 19, 2022, 8:02pm UTC](https://discuss.elastic.co/t/metrics-not-working-when-using-logstash/302705 "2022-04-19T20:02:34Z")
Hello, I'm using Metricbeats with Logstash. I figured out that when I set Metricbeat to send the output directly to Elasticsearch, I can see all the metrics information in the tab Observability -\> Metrics. But when I se… --- ## [Logstash out put to SQL Server](https://discuss.elastic.co/t/logstash-out-put-to-sql-server/302460)
**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\ **Replies:** 3\ **Last updated:** [April 19, 2022, 8:15pm UTC](https://discuss.elastic.co/t/logstash-out-put-to-sql-server/302460 "2022-04-19T20:15:26Z")
@Badger Hi I am using log stash to output to csv -- it is working fine. However I am trying to write from Elasticsearch to sql server using jdbc driver which is giving error. Can you please try to pick what I am doin… --- ## [Node.max\_local\_storage\_nodes was set to 3, now can't upgrade to 8.0](https://discuss.elastic.co/t/node-max-local-storage-nodes-was-set-to-3-now-cant-upgrade-to-8-0/302642)
**Author:** [@Justin\_Cross](https://discuss.elastic.co/u/Justin_Cross)\ **Replies:** 7\ **Last updated:** [April 19, 2022, 7:20pm UTC](https://discuss.elastic.co/t/node-max-local-storage-nodes-was-set-to-3-now-cant-upgrade-to-8-0/302642 "2022-04-19T19:20:19Z")
Hi, So our node.max\_local\_storage\_nodes was set to 3 even though we only need 1 the whole time. Now we are trying to upgrade from 7.17.0 to 8 and it won't allow us even when we remove the node.max\_local\_storage\_nodes fr… --- ## [Security error in kibana container](https://discuss.elastic.co/t/security-error-in-kibana-container/302728)
**Author:** [@jrcartmell](https://discuss.elastic.co/u/jrcartmell)\ **Replies:** 1\ **Last updated:** [April 19, 2022, 6:21pm UTC](https://discuss.elastic.co/t/security-error-in-kibana-container/302728 "2022-04-19T18:21:25Z")
Below is an error I am getting in my kibana container. And at the bottom is my yaml config file. I am trying to run 3 instances of ES and 1 Kibana with security enabled. Error: {"type":"log","@timestamp":"2022-04-19T… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=967) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=969)