# Latest **URL:** https://discuss.elastic.co/latest.md?page=401 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 402 --- ## [Filebeat Autodiscover on Kubernetes not working](https://discuss.elastic.co/t/filebeat-autodiscover-on-kubernetes-not-working/353097)
**Author:** [@Paul\_B](https://discuss.elastic.co/u/Paul_B)\ **Replies:** 4\ **Last updated:** [February 14, 2024, 8:04pm UTC](https://discuss.elastic.co/t/filebeat-autodiscover-on-kubernetes-not-working/353097 "2024-02-14T20:04:08Z")
I'm having trouble getting autodiscover to work correctly in a Kubernetes environment, if I restart the Filebeat daemonset then logs of new pods are collected correctly but if a pod restarts then Filebeat doesn't see the… --- ## [Node.js doesn't establish connection to Elasticsearch from docker container](https://discuss.elastic.co/t/node-js-doesnt-establish-connection-to-elasticsearch-from-docker-container/353298)
**Author:** [@Francis\_Lagares](https://discuss.elastic.co/u/Francis_Lagares)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 7:45pm UTC](https://discuss.elastic.co/t/node-js-doesnt-establish-connection-to-elasticsearch-from-docker-container/353298 "2024-02-14T19:45:32Z")
I'm trying to connect my Node.js application to Elasticsearch with docker containers but without success. I've tried many variants but none of them worked out for me. Elasticsearch container is up and running and I can… --- ## [Cross cluster search](https://discuss.elastic.co/t/cross-cluster-search/353068)
**Author:** [@nitzang1](https://discuss.elastic.co/u/nitzang1)\ **Replies:** 3\ **Last updated:** [February 14, 2024, 6:49pm UTC](https://discuss.elastic.co/t/cross-cluster-search/353068 "2024-02-14T18:49:54Z")
I'd like to do a CCS between Elastisearch service and a local ECK. It should/can be uni-directional. Using only the ESS Kibana to search. The ESS is on an enterprise subscription and the ECK is on a free subscription. I… --- ## [Query Regarding Warning Messages in Logstash Version 8.12.0](https://discuss.elastic.co/t/query-regarding-warning-messages-in-logstash-version-8-12-0/353242)
**Author:** [@Ramya\_Sababathi](https://discuss.elastic.co/u/Ramya_Sababathi)\ **Replies:** 1\ **Last updated:** [February 14, 2024, 6:44pm UTC](https://discuss.elastic.co/t/query-regarding-warning-messages-in-logstash-version-8-12-0/353242 "2024-02-14T18:44:32Z")
Issue Description: Upon upgrading to Logstash version 8.12.0, I have noticed the following warning messages appearing in the logs: /usr/share/logstash/vendor/bundle/jruby/3.1.0/gems/concurrent-ruby-1.1.9/lib/concurrent… --- ## [Mimecast integration no longer ingesting siem logs](https://discuss.elastic.co/t/mimecast-integration-no-longer-ingesting-siem-logs/353192)
**Author:** [@jeffmaley](https://discuss.elastic.co/u/jeffmaley)\ **Replies:** 1\ **Last updated:** [February 14, 2024, 5:27pm UTC](https://discuss.elastic.co/t/mimecast-integration-no-longer-ingesting-siem-logs/353192 "2024-02-14T17:27:51Z")
I'm using the Mimecast integration and it's suddenly stopped ingesting the siem logs. The logs on the elastic agent indicate that events are being published, but they are not showing up in the index in ELK. Has anyone ru… --- ## [Top\_hits sort within the nested bucket](https://discuss.elastic.co/t/top-hits-sort-within-the-nested-bucket/353302)
**Author:** [@mavwolverine](https://discuss.elastic.co/u/mavwolverine)\ **Replies:** 0\ **Last updated:** [February 14, 2024, 5:16pm UTC](https://discuss.elastic.co/t/top-hits-sort-within-the-nested-bucket/353302 "2024-02-14T17:16:45Z")
document has categories array with \[{"categoryId": 123, "sortOrder": 456},{"categoryId": 124, "sortOrder": 12}\] Used terms to create buckets on categoryId, now I want to sort using sortOrder inside each bucket for that … --- ## [Creating a second index with subset of fields from first index](https://discuss.elastic.co/t/creating-a-second-index-with-subset-of-fields-from-first-index/353265)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 4:15pm UTC](https://discuss.elastic.co/t/creating-a-second-index-with-subset-of-fields-from-first-index/353265 "2024-02-14T16:15:55Z")
Hello Elastic community, I'm seeking advice on how to efficiently create a second index containing only a subset of fields from a primary index based on certain conditions. To provide some context, let's say I have a p… --- ## [Elastic search server do not respond on curl request](https://discuss.elastic.co/t/elastic-search-server-do-not-respond-on-curl-request/353258)
**Author:** [@Shahram](https://discuss.elastic.co/u/Shahram)\ **Replies:** 3\ **Last updated:** [February 14, 2024, 4:05pm UTC](https://discuss.elastic.co/t/elastic-search-server-do-not-respond-on-curl-request/353258 "2024-02-14T16:05:22Z")
I noticed my Elasticsearch could not be accessible via curl, so I started from scratch on a new vm. I used this config file for docker-compose.yml: version: '3.6' services: Elasticsearch: image: elasticsearch:7.1… --- ## [Delete\_by\_query returns empty](https://discuss.elastic.co/t/delete-by-query-returns-empty/353294)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 1\ **Last updated:** [February 14, 2024, 4:01pm UTC](https://discuss.elastic.co/t/delete-by-query-returns-empty/353294 "2024-02-14T16:01:05Z")
I try to delete the old records in my index, but the delete\_by\_query returns empty to me. I have a lot of data in the index, it should not be zero. Please help me to check where the problem is. Thank you! Here is my cur… --- ## [Size of the facet in the query affects the number of results of specific facet](https://discuss.elastic.co/t/size-of-the-facet-in-the-query-affects-the-number-of-results-of-specific-facet/353296)
**Author:** [@Daniel\_Botran\_Quiros](https://discuss.elastic.co/u/Daniel_Botran_Quiros)\ **Replies:** 0\ **Last updated:** [February 14, 2024, 3:51pm UTC](https://discuss.elastic.co/t/size-of-the-facet-in-the-query-affects-the-number-of-results-of-specific-facet/353296 "2024-02-14T15:51:27Z")
Hello, I am implementing App Search for an e-commerce, and I've just realized that the size of the facet in the queries affects to certain counts in the response. My query is like this: { "query": "galletas", "pa… --- ## [Filestream Fingerprint Mode](https://discuss.elastic.co/t/filestream-fingerprint-mode/352667)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 4\ **Last updated:** [February 14, 2024, 3:49pm UTC](https://discuss.elastic.co/t/filestream-fingerprint-mode/352667 "2024-02-14T15:49:44Z")
Hi I had a question regarding this new fingerprint mode with filestream. Introducing Filestream fingerprint mode | Elastic Blog Does the file id created with fingerprint uses the filename as well as the content of the … --- ## [ApiError AuthenticationException even correct API Key is provided](https://discuss.elastic.co/t/apierror-authenticationexception-even-correct-api-key-is-provided/353121)
**Author:** [@tfulanchan](https://discuss.elastic.co/u/tfulanchan)\ **Replies:** 3\ **Last updated:** [February 14, 2024, 3:11pm UTC](https://discuss.elastic.co/t/apierror-authenticationexception-even-correct-api-key-is-provided/353121 "2024-02-14T15:11:04Z")
Hello, 2nd day trial Elasticsearch Cloud. I have my Cloud API keys from "Organization \> API Keys \> Create API key". I am doing the chatbot tutorial. This is my credentials and they will be removed once the problem is … --- ## [Q: Search value with filter problem](https://discuss.elastic.co/t/q-search-value-with-filter-problem/353275)
**Author:** [@Alanko5](https://discuss.elastic.co/u/Alanko5)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 3:10pm UTC](https://discuss.elastic.co/t/q-search-value-with-filter-problem/353275 "2024-02-14T15:10:42Z")
I use api to search in elastic. I send query: { "bool": { "should": \[ { "fuzzy": { "titleLabel.startswith": { "value": "aquam", … --- ## [Couldn't connect to server](https://discuss.elastic.co/t/couldnt-connect-to-server/353058)
**Author:** [@Jean-Claude](https://discuss.elastic.co/u/Jean-Claude)\ **Replies:** 4\ **Last updated:** [February 14, 2024, 3:07pm UTC](https://discuss.elastic.co/t/couldnt-connect-to-server/353058 "2024-02-14T15:07:42Z")
Hello Kibana version: 8.12 Elasticsearch version: 8.12 APM Server version: 8.12 APM Agent language and version: php v1.13.0 Browser version: firefox 122.0.1 (64 bits) Original install method (e.g. download page, y… --- ## [How to mask the content which will be available in persistence queue file](https://discuss.elastic.co/t/how-to-mask-the-content-which-will-be-available-in-persistence-queue-file/353075)
**Author:** [@siva0030](https://discuss.elastic.co/u/siva0030)\ **Replies:** 6\ **Last updated:** [February 14, 2024, 3:03pm UTC](https://discuss.elastic.co/t/how-to-mask-the-content-which-will-be-available-in-persistence-queue-file/353075 "2024-02-14T15:03:54Z")
Hello Team, We are using Logstash (8.11.3) in our monitoring to receive data from different source systems (via Filebeat, Metricbeat, and Winlogbeat). On the Logstash side, we are using a persistence queue. Since, Logs… --- ## [Alerts Webhook with basic license ELK 8.12](https://discuss.elastic.co/t/alerts-webhook-with-basic-license-elk-8-12/353216)
**Author:** [@riosje](https://discuss.elastic.co/u/riosje)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 2:24pm UTC](https://discuss.elastic.co/t/alerts-webhook-with-basic-license-elk-8-12/353216 "2024-02-14T14:24:30Z")
Is there a way to trigger a webhook or reach out any external resource with the basic license using the Alerts monitoring? --- ## [Elastic with pfd, excel and word documents](https://discuss.elastic.co/t/elastic-with-pfd-excel-and-word-documents/353284)
**Author:** [@DAVID\_MARIN\_ALVAREZ](https://discuss.elastic.co/u/DAVID_MARIN_ALVAREZ)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 2:17pm UTC](https://discuss.elastic.co/t/elastic-with-pfd-excel-and-word-documents/353284 "2024-02-14T14:17:58Z")
Hello, I need help, I am creating a project with which I need to index files of different types to perform searches on them using elastic, these files are extracted directly from an Oracle database in 12c, I would like t… --- ## [Highlighting performance issues with stored field and fvh highlighter](https://discuss.elastic.co/t/highlighting-performance-issues-with-stored-field-and-fvh-highlighter/353240)
**Author:** [@jsfi](https://discuss.elastic.co/u/jsfi)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 1:58pm UTC](https://discuss.elastic.co/t/highlighting-performance-issues-with-stored-field-and-fvh-highlighter/353240 "2024-02-14T13:58:42Z")
Hello, I'm having a very similar issue to Elastic query takes over 1 minute due to time spent in "HighlightPhase" I have documents with an optional attachments text field that for some documents can be quite big (up to… --- ## [Network Connections from ES Cluster](https://discuss.elastic.co/t/network-connections-from-es-cluster/353287)
**Author:** [@neophilipp](https://discuss.elastic.co/u/neophilipp)\ **Replies:** 0\ **Last updated:** [February 14, 2024, 1:44pm UTC](https://discuss.elastic.co/t/network-connections-from-es-cluster/353287 "2024-02-14T13:44:41Z")
Hi, i am relativ new with the ELK Stack. For Security Reasons I need to know, if there is a communication needed FROM Elasticsearch to Fleet Server, Kibana or something else in ELK Stack. We want put our ES Cluster in a… --- ## [\[.NET SDK v7\] IsValid vs ThrowExceptions and bulk](https://discuss.elastic.co/t/net-sdk-v7-isvalid-vs-throwexceptions-and-bulk/353281)
**Author:** [@mnj](https://discuss.elastic.co/u/mnj)\ **Replies:** 0\ **Last updated:** [February 14, 2024, 1:28pm UTC](https://discuss.elastic.co/t/net-sdk-v7-isvalid-vs-throwexceptions-and-bulk/353281 "2024-02-14T13:28:03Z")
The docs say: By default, the client won’t throw on any ElasticsearchClientException but instead return an invalid response that can be detected by checking the .IsValid property on the response. You can change this be… --- ## [Windows Event Log connector with Logstash](https://discuss.elastic.co/t/windows-event-log-connector-with-logstash/353274)
**Author:** [@RemyB](https://discuss.elastic.co/u/RemyB)\ **Replies:** 1\ **Last updated:** [February 14, 2024, 1:07pm UTC](https://discuss.elastic.co/t/windows-event-log-connector-with-logstash/353274 "2024-02-14T13:07:05Z")
Hello all, I would like to thank you in advance for your time reading my following issue : In order to install the windows integrations (Windows Event Logs/Windows) and benefit from the provided visualisations and the … --- ## [Postfix monitoring using ELK](https://discuss.elastic.co/t/postfix-monitoring-using-elk/353125)
**Author:** [@uzzaldas](https://discuss.elastic.co/u/uzzaldas)\ **Replies:** 3\ **Last updated:** [February 14, 2024, 12:20pm UTC](https://discuss.elastic.co/t/postfix-monitoring-using-elk/353125 "2024-02-14T12:20:39Z")
I want to monitor Postfix logs using ELK stack. I tried postfix filter and grok pattern as below. But I am getting following errors from logstash. ELK Version: 8.9.2 Logstash Error: logstash\_1 | \[2024-02-13T05:3… --- ## [Apm agent can't read the configuration from appsettings.Release.json](https://discuss.elastic.co/t/apm-agent-cant-read-the-configuration-from-appsettings-release-json/353174)
**Author:** [@bassem\_abdalftah](https://discuss.elastic.co/u/bassem_abdalftah)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 11:25am UTC](https://discuss.elastic.co/t/apm-agent-cant-read-the-configuration-from-appsettings-release-json/353174 "2024-02-14T11:25:50Z")
Kibana version: 8.3.3 Elasticsearch version:8.3.3 APM Server version:8.3.3 APM Agent language and version:dotnet core 1.25.3 Fresh install or upgraded from other version? Fresh install The APM dotnet core agent does… --- ## [Error uninstalling the elastic agent](https://discuss.elastic.co/t/error-uninstalling-the-elastic-agent/353142)
**Author:** [@Karan37](https://discuss.elastic.co/u/Karan37)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 11:14am UTC](https://discuss.elastic.co/t/error-uninstalling-the-elastic-agent/353142 "2024-02-14T11:14:57Z")
i am running the uninstall command where the command have to be run but still showing error PS C:\\Program Files\\Elastic\\Agent\> .\\elastic-agent.exe uninstall Error: can only be uninstalled by executing the installed Elas… --- ## [Elastic operator upgrade](https://discuss.elastic.co/t/elastic-operator-upgrade/353255)
**Author:** [@sagarbud](https://discuss.elastic.co/u/sagarbud)\ **Replies:** 0\ **Last updated:** [February 14, 2024, 10:36am UTC](https://discuss.elastic.co/t/elastic-operator-upgrade/353255 "2024-02-14T10:36:23Z")
Hello All, I have 12 node elastic cluster(7.4.2) on GKE K8s cluster. Also, I have installed elastic operator. But when I upgrade elastic operator from 1.0.0-beta to 2.4.0, it gives below error. To upgrade elastic opera… --- ## [Can we upgrade only Kibana version from 8.6.2 to 8.11.1](https://discuss.elastic.co/t/can-we-upgrade-only-kibana-version-from-8-6-2-to-8-11-1/353150)
**Author:** [@amitjadhav0384](https://discuss.elastic.co/u/amitjadhav0384)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 10:30am UTC](https://discuss.elastic.co/t/can-we-upgrade-only-kibana-version-from-8-6-2-to-8-11-1/353150 "2024-02-14T10:30:58Z")
Currently we have installed and using version 8.6.2 for Elasticsearch, Logstash and Kibana. But due to below mentioned vulnerabilities we want to upgrade Kibana to version 8.11.1 • Arbitrary Code Injection CVE-2023-3141… --- ## [Captcha in Kibana](https://discuss.elastic.co/t/captcha-in-kibana/353131)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 1\ **Last updated:** [February 14, 2024, 10:23am UTC](https://discuss.elastic.co/t/captcha-in-kibana/353131 "2024-02-14T10:23:51Z")
Hi, captcha should also be used in kibana login for more security. Vikram Singh --- ## [Elasticsearch 7.17 Java RestHighLevelClient to Elasticsearch 8.10.0 server communication issue](https://discuss.elastic.co/t/elasticsearch-7-17-java-resthighlevelclient-to-elasticsearch-8-10-0-server-communication-issue/353048)
**Author:** [@Muthukumaran\_Kothand](https://discuss.elastic.co/u/Muthukumaran_Kothand)\ **Replies:** 2\ **Last updated:** [February 14, 2024, 9:16am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-java-resthighlevelclient-to-elasticsearch-8-10-0-server-communication-issue/353048 "2024-02-14T09:16:41Z")
Hi, Since we have a large Java Client codebase, our migration to 8.x Java Client would take time and as intermediary solution, we are constrained to use Elasticsearch 7.17.x client in combination with 8.10.0 server I a… --- ## [Disable the mouse hover options from the column field value in discover table](https://discuss.elastic.co/t/disable-the-mouse-hover-options-from-the-column-field-value-in-discover-table/353237)
**Author:** [@rkidev](https://discuss.elastic.co/u/rkidev)\ **Replies:** 5\ **Last updated:** [February 14, 2024, 9:14am UTC](https://discuss.elastic.co/t/disable-the-mouse-hover-options-from-the-column-field-value-in-discover-table/353237 "2024-02-14T09:14:39Z")
Hi, I have one column field as URL in discover table. I am not able to click on that link because - 1- On mouse hover the link is hiding behind the three icons. How can I disable the icons? 2- Is there any way to show… --- ## [Getting {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."} when accessing kibana dashboard](https://discuss.elastic.co/t/getting-statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred-when-accessing-kibana-dashboard/353245)
**Author:** [@Avishka\_Pasindu](https://discuss.elastic.co/u/Avishka_Pasindu)\ **Replies:** 0\ **Last updated:** [February 14, 2024, 9:10am UTC](https://discuss.elastic.co/t/getting-statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred-when-accessing-kibana-dashboard/353245 "2024-02-14T09:10:25Z")
{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."} Im getting above error on the browser when trying to access an already deployed kibana service's kibana dashboard. By r… [Previous page](https://discuss.elastic.co/latest.md?page=400) [Next page](https://discuss.elastic.co/latest.md?page=402)