# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=97 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 98 --- ## [Reindex request failure causes error parsing exception](https://discuss.elastic.co/t/reindex-request-failure-causes-error-parsing-exception/374944)
**Author:** [@svtd](https://discuss.elastic.co/u/svtd)\ **Replies:** 4\ **Last updated:** [February 24, 2025, 3:50pm UTC](https://discuss.elastic.co/t/reindex-request-failure-causes-error-parsing-exception/374944 "2025-02-24T15:50:49Z")
Elasticsearch version and Elasticsearch Java client version: 8.13.4 Hi! When destination index is read only, reindex request expectedly fail, but Elastic Java client is not able to parse the failure response with the f… --- ## [Dividing document counts from 2 different indices](https://discuss.elastic.co/t/dividing-document-counts-from-2-different-indices/374151)
**Author:** [@HugoD](https://discuss.elastic.co/u/HugoD)\ **Replies:** 6\ **Last updated:** [February 24, 2025, 3:18pm UTC](https://discuss.elastic.co/t/dividing-document-counts-from-2-different-indices/374151 "2025-02-24T15:18:47Z")
Hi. I've had an ask from one of our users. We are displaying multiple metrics coming form multiple indices in the same dashboard (NOT my design, by the way). Now, they want to have a ratio calculated for the selected ti… --- ## [Contact for solutions when index lifecycle policies are not reflected](https://discuss.elastic.co/t/contact-for-solutions-when-index-lifecycle-policies-are-not-reflected/374913)
**Author:** [@sjoh9163](https://discuss.elastic.co/u/sjoh9163)\ **Replies:** 3\ **Last updated:** [February 24, 2025, 3:08pm UTC](https://discuss.elastic.co/t/contact-for-solutions-when-index-lifecycle-policies-are-not-reflected/374913 "2025-02-24T15:08:38Z")
I am using ECK 8.14 and here is the reflected Index Lifecycle Policies(ILM) content: PUT \_ilm/policy/ECK-ILM { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "set\_p… --- ## [Filebeat is not Processing the incomings logs for logstash and kibana](https://discuss.elastic.co/t/filebeat-is-not-processing-the-incomings-logs-for-logstash-and-kibana/374952)
**Author:** [@akmoharana](https://discuss.elastic.co/u/akmoharana)\ **Replies:** 0\ **Last updated:** [February 24, 2025, 2:58pm UTC](https://discuss.elastic.co/t/filebeat-is-not-processing-the-incomings-logs-for-logstash-and-kibana/374952 "2025-02-24T14:58:07Z")
Hi Team, I have deployed ELK and Filebeat in a Kubernetes environment and configured logging based on ingest time, ingest time delay, and log-to-Filebeat delay. However, Filebeat is not processing logs, and no data is a… --- ## [How to Resolve \`QueueRuntimeException: Data to be written is bigger than page capacity\` in Logstash Exec Input Plugin?](https://discuss.elastic.co/t/how-to-resolve-queueruntimeexception-data-to-be-written-is-bigger-than-page-capacity-in-logstash-exec-input-plugin/374930)
**Author:** [@A\_Bhise](https://discuss.elastic.co/u/A_Bhise)\ **Replies:** 2\ **Last updated:** [February 24, 2025, 1:52pm UTC](https://discuss.elastic.co/t/how-to-resolve-queueruntimeexception-data-to-be-written-is-bigger-than-page-capacity-in-logstash-exec-input-plugin/374930 "2025-02-24T13:52:37Z")
Hello Logstash Community, I’m encountering a QueueRuntimeException in Logstash that says:"data to be written is bigger than page capacity" Configurations are: logstash.yml pipeline.ordered: auto config.support\_esc… --- ## [Please help me with manual deletion of index](https://discuss.elastic.co/t/please-help-me-with-manual-deletion-of-index/374929)
**Author:** [@sjoh9163](https://discuss.elastic.co/u/sjoh9163)\ **Replies:** 1\ **Last updated:** [February 24, 2025, 1:28pm UTC](https://discuss.elastic.co/t/please-help-me-with-manual-deletion-of-index/374929 "2025-02-24T13:28:03Z")
Please help me organize INDEX manually I want to delete INDEX manually because ILM policy doesn't seem to reflect properly. For example, DELETE /.ds-logs-elastic\_agent-default-2025.01.06-000004 or POST /.ds-logs-e… --- ## [Having issues with low watermark / disk space](https://discuss.elastic.co/t/having-issues-with-low-watermark-disk-space/374934)
**Author:** [@cybertron](https://discuss.elastic.co/u/cybertron)\ **Replies:** 5\ **Last updated:** [February 24, 2025, 9:45am UTC](https://discuss.elastic.co/t/having-issues-with-low-watermark-disk-space/374934 "2025-02-24T09:45:24Z")
Hi I have been struggling with low watermark that keeps getting hit on some nodes in my cluster. I have a 6 node cluster, that unfortunatly have different diskspace. 3 nodes have 5 TB and 3 nodes have 10TB. The proble… --- ## [How to choose number of max threadpools for snapshots](https://discuss.elastic.co/t/how-to-choose-number-of-max-threadpools-for-snapshots/374922)
**Author:** [@Dharani\_Vattamwar](https://discuss.elastic.co/u/Dharani_Vattamwar)\ **Replies:** 1\ **Last updated:** [February 24, 2025, 7:56am UTC](https://discuss.elastic.co/t/how-to-choose-number-of-max-threadpools-for-snapshots/374922 "2025-02-24T07:56:54Z")
We have an elasticsearch cluster with 15 data nodes each with almost 9TB data to get snapshotted. Disk max\_snapshot\_Bytes\_per\_second is 250MB/sec. cpu -\> 4 cores ES\_JAVA\_OPTS -\> -Xms10240m -Xmx10240m --- ## [Adding Custom plugin on Elastic Cloud](https://discuss.elastic.co/t/adding-custom-plugin-on-elastic-cloud/374743)
**Author:** [@jaewon\_park](https://discuss.elastic.co/u/jaewon_park)\ **Replies:** 5\ **Last updated:** [February 24, 2025, 6:50am UTC](https://discuss.elastic.co/t/adding-custom-plugin-on-elastic-cloud/374743 "2025-02-24T06:50:27Z")
Trying to add plugin (.zip) through the Extensions tool. But I can't choose "installable plugin". Says it is not supported by my subscription. No additional information and nothing in the documentation. I am on Enterpri… --- ## [Not able to parse prometheus metrics to json format](https://discuss.elastic.co/t/not-able-to-parse-prometheus-metrics-to-json-format/374447)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 34\ **Last updated:** [February 23, 2025, 7:18pm UTC](https://discuss.elastic.co/t/not-able-to-parse-prometheus-metrics-to-json-format/374447 "2025-02-23T19:18:38Z")
Hello, Able to get Prometheus metrics as a message using http\_poller. But not able to convert to json. Below is the same output of Prometheus format # TYPE http\_requests\_total counter http\_requests\_total{code="200",m… --- ## [Different source of logs at same port 514 at elastic-agent VM](https://discuss.elastic.co/t/different-source-of-logs-at-same-port-514-at-elastic-agent-vm/374789)
**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\ **Replies:** 1\ **Last updated:** [February 23, 2025, 7:10pm UTC](https://discuss.elastic.co/t/different-source-of-logs-at-same-port-514-at-elastic-agent-vm/374789 "2025-02-23T19:10:03Z")
Hello , I am receiving different type of logs eg. cisco ise logs , pfsense logs, epp logs at single server via syslog-ng at same port 514 . I have set up elastic agent at this VM to integration and receiving logs , but … --- ## [Azure Blob Storage Searchable Snapshot Repository Supported Storage Classes](https://discuss.elastic.co/t/azure-blob-storage-searchable-snapshot-repository-supported-storage-classes/374871)
**Author:** [@pkmollman](https://discuss.elastic.co/u/pkmollman)\ **Replies:** 1\ **Last updated:** [February 22, 2025, 8:31am UTC](https://discuss.elastic.co/t/azure-blob-storage-searchable-snapshot-repository-supported-storage-classes/374871 "2025-02-22T08:31:03Z")
Does anyone know what storage classes are supported for Azure blob? There are docs that mention AWS S3 archive tiers aren't supported for snapshot repositories, but do hot, cool, cold, and archive all work for Azure blo… --- ## [Custom Connectors vs Integrations](https://discuss.elastic.co/t/custom-connectors-vs-integrations/374862)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 4\ **Last updated:** [February 21, 2025, 10:57pm UTC](https://discuss.elastic.co/t/custom-connectors-vs-integrations/374862 "2025-02-21T22:57:31Z")
Hello, what is the difference between both? --- ## [How to configure filebeat to store logs in elasticsearch correctly](https://discuss.elastic.co/t/how-to-configure-filebeat-to-store-logs-in-elasticsearch-correctly/374865)
**Author:** [@Mirali\_Rafiyev](https://discuss.elastic.co/u/Mirali_Rafiyev)\ **Replies:** 1\ **Last updated:** [February 21, 2025, 8:25pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-to-store-logs-in-elasticsearch-correctly/374865 "2025-02-21T20:25:25Z")
Hi there , i am newbie in this stack sorry for dummy questions , in my backend i store logs like this {"context":{"userId":"66ffe5e929e84af79a89dde8"},"level":"info","message":"getProfile: user found","timestamp":"2025-… --- ## [Cleaning indexes or overwriting indexes automatically](https://discuss.elastic.co/t/cleaning-indexes-or-overwriting-indexes-automatically/374791)
**Author:** [@website](https://discuss.elastic.co/u/website)\ **Replies:** 1\ **Last updated:** [February 21, 2025, 8:17pm UTC](https://discuss.elastic.co/t/cleaning-indexes-or-overwriting-indexes-automatically/374791 "2025-02-21T20:17:06Z")
I deployed elasticsearch with suricata, now suricata has filled up the disk space, I wanted to increase the indexes with a period of more than 30 days or configure elasticsearch itself so that it overwrites the indexes a… --- ## [Elastic search scoring issue](https://discuss.elastic.co/t/elastic-search-scoring-issue/374694)
**Author:** [@Santanu112](https://discuss.elastic.co/u/Santanu112)\ **Replies:** 3\ **Last updated:** [February 21, 2025, 7:04pm UTC](https://discuss.elastic.co/t/elastic-search-scoring-issue/374694 "2025-02-21T19:04:47Z")
Hi All, I have implemented edge\_ngram. When i am searching "Santanu Prasad" I am getting 3 doc, "santanu", "santanu prasad" and "prasad" For the below query i am getting : "Prasad" with highest score then "Santanu P… --- ## [Expected configuration is missing from elasticsearch.yml](https://discuss.elastic.co/t/expected-configuration-is-missing-from-elasticsearch-yml/374861)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 0\ **Last updated:** [February 21, 2025, 5:23pm UTC](https://discuss.elastic.co/t/expected-configuration-is-missing-from-elasticsearch-yml/374861 "2025-02-21T17:23:51Z")
Kindly help. While I am building a cluster with two nodes in version 8.15, I have started node1, and generated a token for node2 by command: /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s node But… --- ## [AD Entity Analytics - invalid memory address or nil pointer dereference](https://discuss.elastic.co/t/ad-entity-analytics-invalid-memory-address-or-nil-pointer-dereference/374855)
**Author:** [@meganl](https://discuss.elastic.co/u/meganl)\ **Replies:** 2\ **Last updated:** [February 21, 2025, 3:01pm UTC](https://discuss.elastic.co/t/ad-entity-analytics-invalid-memory-address-or-nil-pointer-dereference/374855 "2025-02-21T15:01:21Z")
A few weeks ago, the AD Entity Analytics integration stopped ingesting any data. This happened around the time we updated Elastic from 8.15.3 to 8.15.5. It seems that after updating Elastic, the incremental updates were … --- ## [LS to ES via mTLS RSA only?](https://discuss.elastic.co/t/ls-to-es-via-mtls-rsa-only/374849)
**Author:** [@natharran](https://discuss.elastic.co/u/natharran)\ **Replies:** 1\ **Last updated:** [February 21, 2025, 2:38pm UTC](https://discuss.elastic.co/t/ls-to-es-via-mtls-rsa-only/374849 "2025-02-21T14:38:55Z")
Hello all, I have a working configuration where Logstash authenticates to Elasticsearch via mTLS scheme using it's default RSA key. I now need to replace this key via another one that is generated by out Openshift opera… --- ## [Getting the count of documents in one index based on the ID on another index](https://discuss.elastic.co/t/getting-the-count-of-documents-in-one-index-based-on-the-id-on-another-index/374828)
**Author:** [@kko](https://discuss.elastic.co/u/kko)\ **Replies:** 4\ **Last updated:** [February 21, 2025, 2:13pm UTC](https://discuss.elastic.co/t/getting-the-count-of-documents-in-one-index-based-on-the-id-on-another-index/374828 "2025-02-21T14:13:56Z")
I have 2 indices, one contains all the courses and another index contains all the student registrations. Is there a way I can query the course index and get the count of registrations from the registration index in one q… --- ## [Memory Leak - Weblogic Server](https://discuss.elastic.co/t/memory-leak-weblogic-server/374847)
**Author:** [@Cadu\_Souza](https://discuss.elastic.co/u/Cadu_Souza)\ **Replies:** 0\ **Last updated:** [February 21, 2025, 11:17am UTC](https://discuss.elastic.co/t/memory-leak-weblogic-server/374847 "2025-02-21T11:17:12Z")
Hi everyone, I am facing an issue on a WebLogic server running Java 8 with the latest version of the APM agent installed. The JVM has been experiencing a memory leak problem after two days of use without a reset. After… --- ## [Slow bulk speed](https://discuss.elastic.co/t/slow-bulk-speed/373675)
**Author:** [@ronwilson](https://discuss.elastic.co/u/ronwilson)\ **Replies:** 61\ **Last updated:** [February 21, 2025, 10:47am UTC](https://discuss.elastic.co/t/slow-bulk-speed/373675 "2025-02-21T10:47:29Z")
Hi! We have performance issue with bulk operations in Elasticsearch 8.14.3. Bulks looks like this (tried from 1000 up to 25000 records - no changes): { "index": {"\_id" : "627", "\_index": "iv\_counter\_fd7bb2fd122ca9a08d40… --- ## [Kibana: How to obtain the last value of a date field](https://discuss.elastic.co/t/kibana-how-to-obtain-the-last-value-of-a-date-field/374817)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 4\ **Last updated:** [February 21, 2025, 10:17am UTC](https://discuss.elastic.co/t/kibana-how-to-obtain-the-last-value-of-a-date-field/374817 "2025-02-21T10:17:15Z")
Hi! I have an index with many documents per device and day. One of the fields is a date field called "latest\_device\_activity\_dt". Please note that this is not the field that the index is referred to, is a date field tha… --- ## [Unable to Create Enrollment Token After http.p12 Certificate Renewal](https://discuss.elastic.co/t/unable-to-create-enrollment-token-after-http-p12-certificate-renewal/374842)
**Author:** [@Rushali](https://discuss.elastic.co/u/Rushali)\ **Replies:** 0\ **Last updated:** [February 21, 2025, 7:35am UTC](https://discuss.elastic.co/t/unable-to-create-enrollment-token-after-http-p12-certificate-renewal/374842 "2025-02-21T07:35:14Z")
I followed the official guide for the renewal of http.p12 cert for Elasticsearch: Basic Security Setup with HTTPS After renewing the http.p12 certificate, we are facing an issue where we cannot generate an enrollment t… --- ## [Issue with SSL](https://discuss.elastic.co/t/issue-with-ssl/374657)
**Author:** [@arcsons](https://discuss.elastic.co/u/arcsons)\ **Replies:** 5\ **Last updated:** [February 21, 2025, 7:10am UTC](https://discuss.elastic.co/t/issue-with-ssl/374657 "2025-02-21T07:10:46Z")
Hello, I'm encountering problems while configuring SSL certificates for HTTPS. I've attempted the setup, but I've run into some issues. I have configuration files, status reports, and logs available that I believe are … --- ## [ElasticSearch self-signed Certificate error](https://discuss.elastic.co/t/elasticsearch-self-signed-certificate-error/374835)
**Author:** [@jeanne1](https://discuss.elastic.co/u/jeanne1)\ **Replies:** 0\ **Last updated:** [February 20, 2025, 9:18pm UTC](https://discuss.elastic.co/t/elasticsearch-self-signed-certificate-error/374835 "2025-02-20T21:18:33Z")
Hi, On my local ubuntu machine, I am running elasticsearch via docker container: docker run --name es01 --net elastic -p 9200:9200 -it -m 1GB \\ -e "discovery.type=single-node" \\ -e "network.host=0.0.0.0" \\ docker… --- ## [Vega font change based on kibana theme](https://discuss.elastic.co/t/vega-font-change-based-on-kibana-theme/374783)
**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\ **Replies:** 2\ **Last updated:** [February 20, 2025, 8:34pm UTC](https://discuss.elastic.co/t/vega-font-change-based-on-kibana-theme/374783 "2025-02-20T20:34:55Z")
Is there a way to have the font in vega auto adjust when the theme is changed in Kibana (light/dark modes)? I've tried the code below but it's not working. Basically, looking for white font when in dark mode and black fo… --- ## [Discrepancy in Log Filtering in Logstash](https://discuss.elastic.co/t/discrepancy-in-log-filtering-in-logstash/374821)
**Author:** [@ErGeek](https://discuss.elastic.co/u/ErGeek)\ **Replies:** 12\ **Last updated:** [February 20, 2025, 7:07pm UTC](https://discuss.elastic.co/t/discrepancy-in-log-filtering-in-logstash/374821 "2025-02-20T19:07:05Z")
Hi All, We are currently using the filter below in Logstash to process logs. Filter - filter { # Parse the JSON string from the message field into "parsed\_msg" json { source =\> "message" target =\> "parsed\_… --- ## [Datastreams are slower than normal indices?](https://discuss.elastic.co/t/datastreams-are-slower-than-normal-indices/374811)
**Author:** [@Victor\_Monteagudo](https://discuss.elastic.co/u/Victor_Monteagudo)\ **Replies:** 6\ **Last updated:** [February 20, 2025, 5:49pm UTC](https://discuss.elastic.co/t/datastreams-are-slower-than-normal-indices/374811 "2025-02-20T17:49:59Z")
Context: I have an Elasticsearch 7.17.10 running on a Docker machine. This Elasticsearch cluster has two nodes. We are ingesting DNS traffic using Packetbeat. We rotate indices daily: for example, dns-2025-02-20, dns… --- ## [IIS Worker Process Requests Elapsed Time](https://discuss.elastic.co/t/iis-worker-process-requests-elapsed-time/374805)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 0\ **Last updated:** [February 20, 2025, 11:12am UTC](https://discuss.elastic.co/t/iis-worker-process-requests-elapsed-time/374805 "2025-02-20T11:12:41Z")
Hi Team, I am attaching a screenshot below for IIS Worker Process Requests Elapsed Time from the Windows system. We are using IIS integration to pull IIS metrics and logs with elastic version 8.13. In the above scr… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=96) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=98)