# Latest **URL:** https://discuss.elastic.co/latest.md?page=1165 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1166 --- ## [High memory usage of Metricbeat in Kubernetes](https://discuss.elastic.co/t/high-memory-usage-of-metricbeat-in-kubernetes/301961)
**Author:** [@melkamar](https://discuss.elastic.co/u/melkamar)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 7:05am UTC](https://discuss.elastic.co/t/high-memory-usage-of-metricbeat-in-kubernetes/301961 "2022-04-20T07:05:16Z")
I am trying out collecting metrics and logs from pods in our staging Kubernetes cluster. I have followed the instructions here: Run Metricbeat on Kubernetes | Metricbeat Reference \[8.1\] | Elastic The cluster has two nod… --- ## [How to create Elasticsearch Dedicated Replica Cluster](https://discuss.elastic.co/t/how-to-create-elasticsearch-dedicated-replica-cluster/301697)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 11\ **Last updated:** [April 20, 2022, 6:29am UTC](https://discuss.elastic.co/t/how-to-create-elasticsearch-dedicated-replica-cluster/301697 "2022-04-20T06:29:38Z")
Hello Everyone: I am using Elasticsearch v7.8.0 cluster having indices in 100TB+. I am looking for a backup cluster for my running PROD cluster , a cluster where my DATA would reside in READ-ONLY Manner while it still … --- ## [How to pull large amount of data (all documents in the index) using elasticsearch python client?](https://discuss.elastic.co/t/how-to-pull-large-amount-of-data-all-documents-in-the-index-using-elasticsearch-python-client/302763)
**Author:** [@safarial.fatemeh](https://discuss.elastic.co/u/safarial.fatemeh)\ **Replies:** 3\ **Last updated:** [April 20, 2022, 6:22am UTC](https://discuss.elastic.co/t/how-to-pull-large-amount-of-data-all-documents-in-the-index-using-elasticsearch-python-client/302763 "2022-04-20T06:22:34Z")
I'm using Elasticsearch.helpers.scan to pull down over 1M documents from Elasticsearch and I use match\_all query for that. the process is superslow (taking over 2hrs). is there a better way to pull down all the documen… --- ## [Configuration error in logstash pipeline for multiline sql statements](https://discuss.elastic.co/t/configuration-error-in-logstash-pipeline-for-multiline-sql-statements/302599)
**Author:** [@Vijay\_Balagopal](https://discuss.elastic.co/u/Vijay_Balagopal)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 6:15am UTC](https://discuss.elastic.co/t/configuration-error-in-logstash-pipeline-for-multiline-sql-statements/302599 "2022-04-20T06:15:05Z")
We have configured centralized pipeline feature for logstash. When we are using a multi line SQL statement we are getting error as below. \[2022-04-18T08:19:05,193\]\[ERROR\]\[logstash.agent \] Failed to execute ac… --- ## [Dense vector field type](https://discuss.elastic.co/t/dense-vector-field-type/302548)
**Author:** [@Anand\_p\_s](https://discuss.elastic.co/u/Anand_p_s)\ **Replies:** 4\ **Last updated:** [April 20, 2022, 6:06am UTC](https://discuss.elastic.co/t/dense-vector-field-type/302548 "2022-04-20T06:06:51Z")
How can apply dense vector size(dims) to 2048 "mappings": { "properties": { "denseVector": { "type": "dense\_vector", "index": false, "dims":2048 } } } And i got The number of dimensions for field \[denseVector\]… --- ## [Source ip not getting reflected](https://discuss.elastic.co/t/source-ip-not-getting-reflected/302769)
**Author:** [@ashisharyan](https://discuss.elastic.co/u/ashisharyan)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 6:05am UTC](https://discuss.elastic.co/t/source-ip-not-getting-reflected/302769 "2022-04-20T06:05:41Z")
We are presently using Elk stack for receiving syslog through file beat. We are receiving logs in logstash and also in Elasticsearch but we are not getting source ip in our dashboard Below is the config file of logsta… --- ## [Top Hit / last value metrics aggregation doesn't work on Runtime fields](https://discuss.elastic.co/t/top-hit-last-value-metrics-aggregation-doesnt-work-on-runtime-fields/301924)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 7\ **Last updated:** [April 20, 2022, 5:28am UTC](https://discuss.elastic.co/t/top-hit-last-value-metrics-aggregation-doesnt-work-on-runtime-fields/301924 "2022-04-20T05:28:03Z")
Hello All, I use Kibana version 7.15.2. I'm not able to perform TopHits or last value metrics aggregation on runtime fields. I just see blanks or dashes '-' when I do so. Here is an example: On the kibana\_sample\_data… --- ## [Content match in elasticsearch query over date range](https://discuss.elastic.co/t/content-match-in-elasticsearch-query-over-date-range/302478)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 5\ **Last updated:** [April 20, 2022, 5:14am UTC](https://discuss.elastic.co/t/content-match-in-elasticsearch-query-over-date-range/302478 "2022-04-20T05:14:24Z")
Hello, Trying to execute query over an index for the last 5 minutes, where message field contain word IIOP\_CLEAR\_TEXT. Would like to get all the results, via pagination as well using 10000 records per page. How can th… --- ## [Invalid configuration for xpack.security.transport.ssl - \[xpack.security.transport.ssl.enabled\]](https://discuss.elastic.co/t/invalid-configuration-for-xpack-security-transport-ssl-xpack-security-transport-ssl-enabled/302761)
**Author:** [@Fikri\_Naufal\_F](https://discuss.elastic.co/u/Fikri_Naufal_F)\ **Replies:** 2\ **Last updated:** [April 20, 2022, 3:20am UTC](https://discuss.elastic.co/t/invalid-configuration-for-xpack-security-transport-ssl-xpack-security-transport-ssl-enabled/302761 "2022-04-20T03:20:24Z")
i already uninstall my existing Elasticsearch 7.16 and then install Elasticsearch 8.1.2 but i got this error when run elasticseacrh. what i supose to do? Exception org.elasticsearch.ElasticsearchSecurityException: inval… --- ## [Log4j vulnerability in Elastic Search 7.16.1](https://discuss.elastic.co/t/log4j-vulnerability-in-elastic-search-7-16-1/302760)
**Author:** [@olilam](https://discuss.elastic.co/u/olilam)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 3:08am UTC](https://discuss.elastic.co/t/log4j-vulnerability-in-elastic-search-7-16-1/302760 "2022-04-20T03:08:57Z")
Hi, Our vulnerability scanning tool is detecting Elasticsearch-sql-cli-7.16.1.jar in the bin folder as vulnerable and the jar file contains a Jndilookup.class file. Is it supposed to be detected as vulnerable? Can anyo… --- ## [Elastic Agent + Managing Fleet Behind Proxy](https://discuss.elastic.co/t/elastic-agent-managing-fleet-behind-proxy/302745)
**Author:** [@ashokbalaraman](https://discuss.elastic.co/u/ashokbalaraman)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 9:40pm UTC](https://discuss.elastic.co/t/elastic-agent-managing-fleet-behind-proxy/302745 "2022-04-19T21:40:23Z")
Hi, We are connecting to fleet via proxy server, I am not sure how to send proxy certificates in the Proxy-Header CLI flag. Here is what I tried that did not work, Elastic Version: 8.1 Request: elastic-agent install … --- ## [Metrics not working when using Logstash](https://discuss.elastic.co/t/metrics-not-working-when-using-logstash/302705)
**Author:** [@quim.gomez](https://discuss.elastic.co/u/quim.gomez)\ **Replies:** 13\ **Last updated:** [April 19, 2022, 8:02pm UTC](https://discuss.elastic.co/t/metrics-not-working-when-using-logstash/302705 "2022-04-19T20:02:34Z")
Hello, I'm using Metricbeats with Logstash. I figured out that when I set Metricbeat to send the output directly to Elasticsearch, I can see all the metrics information in the tab Observability -\> Metrics. But when I se… --- ## [Logstash out put to SQL Server](https://discuss.elastic.co/t/logstash-out-put-to-sql-server/302460)
**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\ **Replies:** 3\ **Last updated:** [April 19, 2022, 8:15pm UTC](https://discuss.elastic.co/t/logstash-out-put-to-sql-server/302460 "2022-04-19T20:15:26Z")
@Badger Hi I am using log stash to output to csv -- it is working fine. However I am trying to write from Elasticsearch to sql server using jdbc driver which is giving error. Can you please try to pick what I am doin… --- ## [Ok to add safe-to-evict annotation to Elasticsearch/Kibana pods for k8s cluster autoscaling?](https://discuss.elastic.co/t/ok-to-add-safe-to-evict-annotation-to-elasticsearch-kibana-pods-for-k8s-cluster-autoscaling/302264)
**Author:** [@jketcham](https://discuss.elastic.co/u/jketcham)\ **Replies:** 2\ **Last updated:** [April 19, 2022, 7:51pm UTC](https://discuss.elastic.co/t/ok-to-add-safe-to-evict-annotation-to-elasticsearch-kibana-pods-for-k8s-cluster-autoscaling/302264 "2022-04-19T19:51:12Z")
I'm running ECK in Google Kubernetes Engine, and I've run into instances where the Cluster Autoscaler will choose not to remove an ES/KB Pod because it has local storage. One option is to add the "cluster-autoscaler.kub… --- ## [Node.max\_local\_storage\_nodes was set to 3, now can't upgrade to 8.0](https://discuss.elastic.co/t/node-max-local-storage-nodes-was-set-to-3-now-cant-upgrade-to-8-0/302642)
**Author:** [@Justin\_Cross](https://discuss.elastic.co/u/Justin_Cross)\ **Replies:** 7\ **Last updated:** [April 19, 2022, 7:20pm UTC](https://discuss.elastic.co/t/node-max-local-storage-nodes-was-set-to-3-now-cant-upgrade-to-8-0/302642 "2022-04-19T19:20:19Z")
Hi, So our node.max\_local\_storage\_nodes was set to 3 even though we only need 1 the whole time. Now we are trying to upgrade from 7.17.0 to 8 and it won't allow us even when we remove the node.max\_local\_storage\_nodes fr… --- ## [Security error in kibana container](https://discuss.elastic.co/t/security-error-in-kibana-container/302728)
**Author:** [@jrcartmell](https://discuss.elastic.co/u/jrcartmell)\ **Replies:** 1\ **Last updated:** [April 19, 2022, 6:21pm UTC](https://discuss.elastic.co/t/security-error-in-kibana-container/302728 "2022-04-19T18:21:25Z")
Below is an error I am getting in my kibana container. And at the bottom is my yaml config file. I am trying to run 3 instances of ES and 1 Kibana with security enabled. Error: {"type":"log","@timestamp":"2022-04-19T… --- ## [Does the Logstash output plugin for RabbitMQ supports RabbitMQ support?](https://discuss.elastic.co/t/does-the-logstash-output-plugin-for-rabbitmq-supports-rabbitmq-support/302741)
**Author:** [@AMBUJ\_DUBEY](https://discuss.elastic.co/u/AMBUJ_DUBEY)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 6:20pm UTC](https://discuss.elastic.co/t/does-the-logstash-output-plugin-for-rabbitmq-supports-rabbitmq-support/302741 "2022-04-19T18:20:41Z")
Does the Logstash output plugin for RabbitMQ (Rabbitmq output plugin | Logstash Reference \[8.1\] | Elastic) have support for Streams — RabbitMQ --- ## [Is it possible to run an APM Agent to monitor a raw windows service?](https://discuss.elastic.co/t/is-it-possible-to-run-an-apm-agent-to-monitor-a-raw-windows-service/302721)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 2\ **Last updated:** [April 19, 2022, 6:14pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-an-apm-agent-to-monitor-a-raw-windows-service/302721 "2022-04-19T18:14:54Z")
Kibana version: 7.16.3 Elasticsearch version: 7.16.3 APM Server version: 7.16.3 I want to know if is possible to monitor a Windows service with an APM Agent, I know that on APM Agents list is shown what is supported (… --- ## [Nodejs APM - Can't resolve 'async\_hooks'](https://discuss.elastic.co/t/nodejs-apm-cant-resolve-async-hooks/302644)
**Author:** [@jsoule6](https://discuss.elastic.co/u/jsoule6)\ **Replies:** 4\ **Last updated:** [April 19, 2022, 5:54pm UTC](https://discuss.elastic.co/t/nodejs-apm-cant-resolve-async-hooks/302644 "2022-04-19T17:54:32Z")
Hello, We are trying to use APM for our React nodejs app. We have added the dependency in our package.json to install the elastic-apm-node module: "elastic-apm-node": "^3.31.0" And then we added the below line in our… --- ## [Kibana not recognizing fleet server in apm example](https://discuss.elastic.co/t/kibana-not-recognizing-fleet-server-in-apm-example/301806)
**Author:** [@Arnatious](https://discuss.elastic.co/u/Arnatious)\ **Replies:** 2\ **Last updated:** [April 19, 2022, 5:40pm UTC](https://discuss.elastic.co/t/kibana-not-recognizing-fleet-server-in-apm-example/301806 "2022-04-19T17:40:12Z")
I'm attempting to spin up a ECK deployment using the fleet-apm config example at cloud-on-k8s/fleet-apm-integration.yaml at main · elastic/cloud-on-k8s · GitHub . The only change I've made is changing the count of Elasti… --- ## [Need Clarification on How to Obtain ES SSL Certs for Fleet Server](https://discuss.elastic.co/t/need-clarification-on-how-to-obtain-es-ssl-certs-for-fleet-server/302738)
**Author:** [@CptElasticBand](https://discuss.elastic.co/u/CptElasticBand)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 5:36pm UTC](https://discuss.elastic.co/t/need-clarification-on-how-to-obtain-es-ssl-certs-for-fleet-server/302738 "2022-04-19T17:36:16Z")
Hello! I need clarification on the following prerequisite for setting up proper Fleet Server SSL/TLS certificates. Excerpt from Configure SSL/TLS for self-managed Fleet Servers: Elastic Agents require a PEM-format… --- ## [Kibana server is not ready yet RHEL 8](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-rhel-8/301455)
**Author:** [@ashisharyan](https://discuss.elastic.co/u/ashisharyan)\ **Replies:** 7\ **Last updated:** [April 19, 2022, 5:19pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-rhel-8/301455 "2022-04-19T17:19:33Z")
Hi , I am installing ELK stack (elasticsearch-7.10.2)on RHEL8 Elasticsearch and Kibana both installed Successfully but when we open Kibana web console it is showing kibana server is not ready yet. Below is Yml files. … --- ## [Remove enterprise search ubuntu or downgrade version](https://discuss.elastic.co/t/remove-enterprise-search-ubuntu-or-downgrade-version/302727)
**Author:** [@apachefranklin](https://discuss.elastic.co/u/apachefranklin)\ **Replies:** 1\ **Last updated:** [April 19, 2022, 5:10pm UTC](https://discuss.elastic.co/t/remove-enterprise-search-ubuntu-or-downgrade-version/302727 "2022-04-19T17:10:00Z")
Hello Guys, i have elasticsearch7.17 , i want to configure appsearch (enterprise-search) but i install enterprisesearch8.1 who is not compatible with my elasticsearch version. I installed enterprisesearch8.1 by using deb… --- ## [Error converting field type in a reindexing](https://discuss.elastic.co/t/error-converting-field-type-in-a-reindexing/302689)
**Author:** [@quim.gomez](https://discuss.elastic.co/u/quim.gomez)\ **Replies:** 1\ **Last updated:** [April 19, 2022, 5:05pm UTC](https://discuss.elastic.co/t/error-converting-field-type-in-a-reindexing/302689 "2022-04-19T17:05:29Z")
Hello, I'm having some visualization problems inside Elastic due to I'm sending all the data Beats collect to Logstash instead of directly to Elastisearch. That made some fields change their type. For example, the fiel… --- ## [Solr's copyField equivalent in ElasticSearch](https://discuss.elastic.co/t/solrs-copyfield-equivalent-in-elasticsearch/302682)
**Author:** [@nn14](https://discuss.elastic.co/u/nn14)\ **Replies:** 5\ **Last updated:** [April 19, 2022, 4:59pm UTC](https://discuss.elastic.co/t/solrs-copyfield-equivalent-in-elasticsearch/302682 "2022-04-19T16:59:52Z")
Hello team, We are migrating from Solr to ES. Please let me know if there is an equivalent of copyField in ES. Basically for the below Solr code, this was done to enable date range searches on lastUpdateDate I need an… --- ## [Elastic ingest node load not balanced with pipeline](https://discuss.elastic.co/t/elastic-ingest-node-load-not-balanced-with-pipeline/301894)
**Author:** [@ss\_22](https://discuss.elastic.co/u/ss_22)\ **Replies:** 9\ **Last updated:** [April 19, 2022, 4:33pm UTC](https://discuss.elastic.co/t/elastic-ingest-node-load-not-balanced-with-pipeline/301894 "2022-04-19T16:33:41Z")
Hi, I have a ECK cluster with 6 data/ingest nodes. I also have an ingest node pipeline deployed and processing logs from Filebeat. While it is running I noticed only one node being utilized near 100% CPU where the other… --- ## [Warning and Error Messages - Kibana Dashboard](https://discuss.elastic.co/t/warning-and-error-messages-kibana-dashboard/301397)
**Author:** [@TS-021](https://discuss.elastic.co/u/TS-021)\ **Replies:** 2\ **Last updated:** [April 19, 2022, 3:40pm UTC](https://discuss.elastic.co/t/warning-and-error-messages-kibana-dashboard/301397 "2022-04-19T15:40:55Z")
Hi, I am running T-Pot via AWS and included with T-Pot is Kibana. Every time I launch the Kibana dashboard I get the following messages - Message 1: Configuration missing server.publicBaseUrl is missing and should b… --- ## [Heartbeat download for Windows is actually for Linux/Unix](https://discuss.elastic.co/t/heartbeat-download-for-windows-is-actually-for-linux-unix/302646)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 3\ **Last updated:** [April 19, 2022, 2:20pm UTC](https://discuss.elastic.co/t/heartbeat-download-for-windows-is-actually-for-linux-unix/302646 "2022-04-19T14:20:08Z")
This page says to download the Windows zip file But the download page does not have a zip file. It defaults to RPM I downloaded the RPM file to the Windows server and used 7Zip to extract it. The extracted file is … --- ## [Transport\_address resolved as IP:PORT in docker](https://discuss.elastic.co/t/transport-address-resolved-as-ip-port-in-docker/302718)
**Author:** [@Jan\_Kucera](https://discuss.elastic.co/u/Jan_Kucera)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 1:21pm UTC](https://discuss.elastic.co/t/transport-address-resolved-as-ip-port-in-docker/302718 "2022-04-19T13:21:10Z")
Hello everyone, I am struggling with Docker and Elasticsearch. I am trying to setup my instance so it has published adddress in format HOSTNAME:PORT and not IP:PORT for both HTTP and transport. I am posting my docker-co… --- ## [Elasticsearch \[6.8.23\] does not return results when I query in a specific field](https://discuss.elastic.co/t/elasticsearch-6-8-23-does-not-return-results-when-i-query-in-a-specific-field/302704)
**Author:** [@joanjanku2000](https://discuss.elastic.co/u/joanjanku2000)\ **Replies:** 2\ **Last updated:** [April 19, 2022, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-23-does-not-return-results-when-i-query-in-a-specific-field/302704 "2022-04-19T13:06:42Z")
Hi Everyone, I am running an issue after I upgraded my Elastic Cluster from 5.1.1 to 6.8.23. When I search everything in an index using this API: /index\_0003/\_search it returns all the result as expected. However… [Previous page](https://discuss.elastic.co/latest.md?page=1164) [Next page](https://discuss.elastic.co/latest.md?page=1166)