# Latest **URL:** https://discuss.elastic.co/latest.md?page=420 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 421 --- ## [Looking for advice on a use case for NetFlow](https://discuss.elastic.co/t/looking-for-advice-on-a-use-case-for-netflow/351422)
**Author:** [@tonitones](https://discuss.elastic.co/u/tonitones)\ **Replies:** 3\ **Last updated:** [January 26, 2024, 2:47am UTC](https://discuss.elastic.co/t/looking-for-advice-on-a-use-case-for-netflow/351422 "2024-01-26T02:47:10Z")
Hello everyone from the elastic community! This will be my first topic here. Hoping to get some insights from everyone. I am very new to elastic. I was able to install and run elk stack on docker, thanks to the official… --- ## [Unable to Set UP TLS for Kibana](https://discuss.elastic.co/t/unable-to-set-up-tls-for-kibana/351380)
**Author:** [@audric\_w](https://discuss.elastic.co/u/audric_w)\ **Replies:** 2\ **Last updated:** [January 26, 2024, 2:19am UTC](https://discuss.elastic.co/t/unable-to-set-up-tls-for-kibana/351380 "2024-01-26T02:19:27Z")
Hi, I've encountered a problem when trying to disable TLSv1.1 for Kibana using the command below: server.ssl.supportedProtocols: "TLSv1.2" However, after adding that command, the Kibana cannot be started: Jan 19 03:3… --- ## [Maintaining @timestamp order of docs when using the reindex api](https://discuss.elastic.co/t/maintaining-timestamp-order-of-docs-when-using-the-reindex-api/351318)
**Author:** [@petlit2049](https://discuss.elastic.co/u/petlit2049)\ **Replies:** 1\ **Last updated:** [January 26, 2024, 1:36am UTC](https://discuss.elastic.co/t/maintaining-timestamp-order-of-docs-when-using-the-reindex-api/351318 "2024-01-26T01:36:06Z")
There's a deprecated feature in the reindex api which makes (made?) it possible to maintain the timestamp order between docs being reindexed using the reindex api. However, the documentation states that this is a depreca… --- ## [Configuring Input file on Windows to get Output in 2024](https://discuss.elastic.co/t/configuring-input-file-on-windows-to-get-output-in-2024/351839)
**Author:** [@Will\_J](https://discuss.elastic.co/u/Will_J)\ **Replies:** 2\ **Last updated:** [January 25, 2024, 11:10pm UTC](https://discuss.elastic.co/t/configuring-input-file-on-windows-to-get-output-in-2024/351839 "2024-01-25T23:10:18Z")
I am trying a simple file input / output example. Using following conf file at the C:/logstash-8.11.3-windows-x86\_64/logstash-8.11.3/config/file-pipeline.conf input { file { path =\> \["C:/logstash-8.11.3-wind… --- ## [\[GitHub Connector\] Help on setting up the sync](https://discuss.elastic.co/t/github-connector-help-on-setting-up-the-sync/351658)
**Author:** [@anna-safonov](https://discuss.elastic.co/u/anna-safonov)\ **Replies:** 12\ **Last updated:** [January 25, 2024, 7:54pm UTC](https://discuss.elastic.co/t/github-connector-help-on-setting-up-the-sync/351658 "2024-01-25T19:54:54Z")
I am trying to run GitHub Connector (v8.11) on Elastic Search, v8.11.3, and sync data from a GitHub Enterprise Server, specifically one repo under and organization. I am having trouble figuring out how to configure adva… --- ## [Basic Setup failures joining an existing cluster](https://discuss.elastic.co/t/basic-setup-failures-joining-an-existing-cluster/351830)
**Author:** [@bryanrood](https://discuss.elastic.co/u/bryanrood)\ **Replies:** 0\ **Last updated:** [January 25, 2024, 7:53pm UTC](https://discuss.elastic.co/t/basic-setup-failures-joining-an-existing-cluster/351830 "2024-01-25T19:53:41Z")
Hi there, I have been beating my head against a tree trying to get nodes added to my new ES cluster. I'm trying to build a 6 node ES cluster. I got the first node working and I'm trying to add the second node. I can ge… --- ## [How to loop the jdbc streaming filter by pass the index of array of object?](https://discuss.elastic.co/t/how-to-loop-the-jdbc-streaming-filter-by-pass-the-index-of-array-of-object/351784)
**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 5:59pm UTC](https://discuss.elastic.co/t/how-to-loop-the-jdbc-streaming-filter-by-pass-the-index-of-array-of-object/351784 "2024-01-25T17:59:31Z")
So here is the usecase i have the "mainSKU": \[ { "id": 102, }, { "id": 101, }, { "id": 100, } \] like this and i am using jdb\_streaming and every mainSKU has 3 to 4 SKU in order to that i need to loop get … --- ## [Sql escape character in logstash](https://discuss.elastic.co/t/sql-escape-character-in-logstash/351800)
**Author:** [@Rakesh\_Verma](https://discuss.elastic.co/u/Rakesh_Verma)\ **Replies:** 2\ **Last updated:** [January 25, 2024, 5:51pm UTC](https://discuss.elastic.co/t/sql-escape-character-in-logstash/351800 "2024-01-25T17:51:31Z")
I am getting below error in following sql . SELECT HA.HotelID AS HotelCode,'\[' + STUFF((SELECT ',' + '{"AmenityId": ' + CAST(HA\_inner.AmenityId AS VARCHAR(10)) + ', "AmenityName": ' + QUOTENAME(HAT\_inner.AmenityName, '"… --- ## [How to test or check Connection of my Java application to Elasticsearch?](https://discuss.elastic.co/t/how-to-test-or-check-connection-of-my-java-application-to-elasticsearch/351821)
**Author:** [@unknownuser](https://discuss.elastic.co/u/unknownuser)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 5:43pm UTC](https://discuss.elastic.co/t/how-to-test-or-check-connection-of-my-java-application-to-elasticsearch/351821 "2024-01-25T17:43:45Z")
Hi Everyone! :slight\_smile: Can you help me to know how to check the connection between my java application to Elasticsearch? Btw, I am using the Elasticsearch version 8.11. I see the documentation Connecting | Elastics… --- ## [Anonymous Viewer unable to see links panel](https://discuss.elastic.co/t/anonymous-viewer-unable-to-see-links-panel/351650)
**Author:** [@A\_Sto](https://discuss.elastic.co/u/A_Sto)\ **Replies:** 3\ **Last updated:** [January 25, 2024, 5:18pm UTC](https://discuss.elastic.co/t/anonymous-viewer-unable-to-see-links-panel/351650 "2024-01-25T17:18:16Z")
I recently updated my dashboards with a links panel. I have anonymous viewing set up with read permissions on a subset of dashboards to enable users without explicit logins to view some basic dashboards. The links panels… --- ## [Elastic artifacts repository missing last release](https://discuss.elastic.co/t/elastic-artifacts-repository-missing-last-release/350367)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 3\ **Last updated:** [January 25, 2024, 4:05pm UTC](https://discuss.elastic.co/t/elastic-artifacts-repository-missing-last-release/350367 "2024-01-25T16:05:49Z")
Hello, I again notice new elastic version is released - Release notes | Elasticsearch Guide \[7.17\] | Elastic, now also with security fixes (Elasticsearch 8.11.2, 7.17.16 Security Update (ESA-2023-29)), but it is not ava… --- ## [How often a shard is actually refreshing](https://discuss.elastic.co/t/how-often-a-shard-is-actually-refreshing/351801)
**Author:** [@ktech007](https://discuss.elastic.co/u/ktech007)\ **Replies:** 3\ **Last updated:** [January 25, 2024, 2:31pm UTC](https://discuss.elastic.co/t/how-often-a-shard-is-actually-refreshing/351801 "2024-01-25T14:31:31Z")
Hi, I am trying to better understand how often a shard is refreshed in comparison to the refresh interval. For some context: We are trying to calculate the indexing lag in our indexing pipeline and refresh interval is … --- ## [Have any way to customize icu\_tokenizer?](https://discuss.elastic.co/t/have-any-way-to-customize-icu-tokenizer/351766)
**Author:** [@Ajith\_Lal](https://discuss.elastic.co/u/Ajith_Lal)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 2:27pm UTC](https://discuss.elastic.co/t/have-any-way-to-customize-icu-tokenizer/351766 "2024-01-25T14:27:46Z")
I need to add some more keywords to icu\_tokanizer, which don't need to tokanize? i had tried kuromoji\_tokanizer it has userdictionary, we can add new keyword tokens to userdictionary. can i have any way to do this to icu… --- ## [Terms aggregation is slow, setting eager\_global\_ordinals to True did not work](https://discuss.elastic.co/t/terms-aggregation-is-slow-setting-eager-global-ordinals-to-true-did-not-work/350550)
**Author:** [@rupesh.yadav](https://discuss.elastic.co/u/rupesh.yadav)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 2:10pm UTC](https://discuss.elastic.co/t/terms-aggregation-is-slow-setting-eager-global-ordinals-to-true-did-not-work/350550 "2024-01-25T14:10:56Z")
I am quite new to ES so I might not know a few things. I have an Elasticsearch query\_string query and with that I have an aggregate query, I am trying to get the results as fast as I can. Currently, it is taking 20s to 2… --- ## [About aggregation Query count Mismatch for lesser Records](https://discuss.elastic.co/t/about-aggregation-query-count-mismatch-for-lesser-records/351774)
**Author:** [@Lalith\_Kumar](https://discuss.elastic.co/u/Lalith_Kumar)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 1:23pm UTC](https://discuss.elastic.co/t/about-aggregation-query-count-mismatch-for-lesser-records/351774 "2024-01-25T13:23:18Z")
Hello Guys, I have 100,000 records in an index. I am using a filter which reduces the record count to 2077, When I use aggregation on field along with filter( 2077 records) the result deviates.( Expected : 6 , Actual : 4… --- ## [Can ELSER be used with languages other than English](https://discuss.elastic.co/t/can-elser-be-used-with-languages-other-than-english/351186)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 11\ **Last updated:** [January 25, 2024, 1:02pm UTC](https://discuss.elastic.co/t/can-elser-be-used-with-languages-other-than-english/351186 "2024-01-25T13:02:19Z")
Hello, I'm posting to gather insights about ELSER's language capabilities, particularly its support for languages other than English. My interest lies in understanding how well ELSER handles the following languages: D… --- ## [Import Emails into Elasticsearch using Logstash IMAP Input](https://discuss.elastic.co/t/import-emails-into-elasticsearch-using-logstash-imap-input/351798)
**Author:** [@frank\_esg](https://discuss.elastic.co/u/frank_esg)\ **Replies:** 0\ **Last updated:** [January 25, 2024, 12:38pm UTC](https://discuss.elastic.co/t/import-emails-into-elasticsearch-using-logstash-imap-input/351798 "2024-01-25T12:38:01Z")
Hi, we would like to import Emails into Elasticsearch to have a kind of Email Archive. We started with Logstash and the IMAP Input plugin. But it turned out that this plugin was not updated in the last years and has se… --- ## [How to restore the ElasticSearch cluster when more than half of the master-eligible nodes are down simultaneously](https://discuss.elastic.co/t/how-to-restore-the-elasticsearch-cluster-when-more-than-half-of-the-master-eligible-nodes-are-down-simultaneously/351793)
**Author:** [@hhalei](https://discuss.elastic.co/u/hhalei)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 12:28pm UTC](https://discuss.elastic.co/t/how-to-restore-the-elasticsearch-cluster-when-more-than-half-of-the-master-eligible-nodes-are-down-simultaneously/351793 "2024-01-25T12:28:05Z")
We have deployed an Elasticsearch cluster consisting of 6 nodes with the following roles： node-1 master-eligible,data node-2 master-eligible,data node-3 master-eligible,data node-4 data node-5 data node-6… --- ## [Failing to match "53...\\n" with "\[0-9\]\[0-9\]\\\\.\\\\.\\\\.\\n?" in Discover filter. Help?](https://discuss.elastic.co/t/failing-to-match-53-n-with-0-9-0-9-n-in-discover-filter-help/351104)
**Author:** [@timbav](https://discuss.elastic.co/u/timbav)\ **Replies:** 7\ **Last updated:** [January 25, 2024, 12:02pm UTC](https://discuss.elastic.co/t/failing-to-match-53-n-with-0-9-0-9-n-in-discover-filter-help/351104 "2024-01-25T12:02:35Z")
I'm on v 7.10.0 of Kibana. My logs are line-based Json, and the JSON looks like this: {"dlog":{ ..., "line":"53...\\n", ...}, ...} Those dots are three . characters, not a unicode ellipsis: 0000000 , " l i… --- ## [Ingest pipeline ELSER embedding fails with more than 1 ML node](https://discuss.elastic.co/t/ingest-pipeline-elser-embedding-fails-with-more-than-1-ml-node/351673)
**Author:** [@Rakesh\_Nayak](https://discuss.elastic.co/u/Rakesh_Nayak)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 11:25am UTC](https://discuss.elastic.co/t/ingest-pipeline-elser-embedding-fails-with-more-than-1-ml-node/351673 "2024-01-25T11:25:01Z")
Hello Team, We can create embeddings using a pipeline with 1 ML node. But, when we add another node, it seems like none of the documents gets ingested through the pipeline. Attached is the reference. note: using simula… --- ## [Elk 7.5 How to show all indexes having storage\_term as cold](https://discuss.elastic.co/t/elk-7-5-how-to-show-all-indexes-having-storage-term-as-cold/351377)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 5\ **Last updated:** [January 25, 2024, 11:16am UTC](https://discuss.elastic.co/t/elk-7-5-how-to-show-all-indexes-having-storage-term-as-cold/351377 "2024-01-25T11:16:38Z")
How to show all indexes having storage\_term as cold? Why are there indexes with this cold parameter? --- ## [Delete index after 1 day if empty and after n days if not empty](https://discuss.elastic.co/t/delete-index-after-1-day-if-empty-and-after-n-days-if-not-empty/351741)
**Author:** [@elastico23](https://discuss.elastic.co/u/elastico23)\ **Replies:** 2\ **Last updated:** [January 25, 2024, 9:44am UTC](https://discuss.elastic.co/t/delete-index-after-1-day-if-empty-and-after-n-days-if-not-empty/351741 "2024-01-25T09:44:55Z")
Hi, we use daily indices and currently use an ILM policy to delete indices after n days. However, we have some indices each day that don't end up having documents and would like to delete those after 1 day instead of kee… --- ## [How to convert HEXA field into ASCII field through logstash pipeline](https://discuss.elastic.co/t/how-to-convert-hexa-field-into-ascii-field-through-logstash-pipeline/351771)
**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 9:44am UTC](https://discuss.elastic.co/t/how-to-convert-hexa-field-into-ascii-field-through-logstash-pipeline/351771 "2024-01-25T09:44:11Z")
Hi All, we are getting one filed in the form of hexa i need to convert that filed into ASCII through logstash pipeline. Could you please guide me on this? eg:- "abc": "8a64756c656173654368616e" I need to convert "abc"… --- ## [Filebeat CEL Input: how to pass headers in request?](https://discuss.elastic.co/t/filebeat-cel-input-how-to-pass-headers-in-request/351746)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [January 25, 2024, 7:56am UTC](https://discuss.elastic.co/t/filebeat-cel-input-how-to-pass-headers-in-request/351746 "2024-01-25T07:56:27Z")
I'm trying to pull from an API which has got Digest authentication ONLY enabled. Hence cannot use httpjson But in input.type of cel, how do I pass request headers like 'Content-Type: application/json' etc? Below is my … --- ## [Kibana is not connecting to Elasticsearch when providing own Certificate](https://discuss.elastic.co/t/kibana-is-not-connecting-to-elasticsearch-when-providing-own-certificate/351763)
**Author:** [@avrix121](https://discuss.elastic.co/u/avrix121)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 7:32am UTC](https://discuss.elastic.co/t/kibana-is-not-connecting-to-elasticsearch-when-providing-own-certificate/351763 "2024-01-25T07:32:23Z")
Hi Team, I have deployed ECK 2.11 on AWS EKS. I have used elastic and kibana resource files as given in official quickstart documentation. I am exposing Kibana and elasticsearch externally using domain names and have c… --- ## [Loading profiler failed during CoCreateInstance](https://discuss.elastic.co/t/loading-profiler-failed-during-cocreateinstance/351775)
**Author:** [@Melyanets\_Pavel](https://discuss.elastic.co/u/Melyanets_Pavel)\ **Replies:** 0\ **Last updated:** [January 25, 2024, 6:47am UTC](https://discuss.elastic.co/t/loading-profiler-failed-during-cocreateinstance/351775 "2024-01-25T06:47:51Z")
APM Agent language and version: apm-agent-dotnet v1.25.3 Kibana version: 7.17.13 Elasticsearch version: 7.17.13 APM Server version: 7.17.13 Browser version: is not applicable Original install method (e.g. download p… --- ## [Embedding token size limit for ELSER2 model](https://discuss.elastic.co/t/embedding-token-size-limit-for-elser2-model/351403)
**Author:** [@SanthoshKMurugadass](https://discuss.elastic.co/u/SanthoshKMurugadass)\ **Replies:** 15\ **Last updated:** [January 25, 2024, 6:22am UTC](https://discuss.elastic.co/t/embedding-token-size-limit-for-elser2-model/351403 "2024-01-25T06:22:38Z")
Hi, I am trying to create embedding for a string using .elser\_model\_2 model. My embedding is get truncated at different token limits time at 283 and some time at 302. I like to understand that is maximum token size li… --- ## [Rule preview is slow](https://discuss.elastic.co/t/rule-preview-is-slow/351732)
**Author:** [@elasticexpert](https://discuss.elastic.co/u/elasticexpert)\ **Replies:** 2\ **Last updated:** [January 25, 2024, 5:07am UTC](https://discuss.elastic.co/t/rule-preview-is-slow/351732 "2024-01-25T05:07:57Z")
Rule preview is very slow, but when I take the search and search it in kibana dev tools it is very fast. In the rule preview it says that the query time is fast (3ms), so I opened chrome dev tools at network and saw tha… --- ## [Whether Kibana inbuilt "viewer" role can be restricted only to view the Analytics feature for a user](https://discuss.elastic.co/t/whether-kibana-inbuilt-viewer-role-can-be-restricted-only-to-view-the-analytics-feature-for-a-user/351434)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 1\ **Last updated:** [January 25, 2024, 4:30am UTC](https://discuss.elastic.co/t/whether-kibana-inbuilt-viewer-role-can-be-restricted-only-to-view-the-analytics-feature-for-a-user/351434 "2024-01-25T04:30:53Z")
I am working in default namespace and i want to create an user with viewer role. Whether Kibana inbuilt "viewer" role can be restricted only to view the Analytics feature of kibana for a user and i dont want to create a… --- ## [Create Helper Functions within Pipeline](https://discuss.elastic.co/t/create-helper-functions-within-pipeline/351581)
**Author:** [@michael\_c\_michael](https://discuss.elastic.co/u/michael_c_michael)\ **Replies:** 3\ **Last updated:** [January 24, 2024, 11:54pm UTC](https://discuss.elastic.co/t/create-helper-functions-within-pipeline/351581 "2024-01-24T23:54:40Z")
I have a function in my pipeline that does some math and another that does some translation. Is there a way to create a function like in python, so that I don't have to retype the same code everytime I want to do this op… [Previous page](https://discuss.elastic.co/latest.md?page=419) [Next page](https://discuss.elastic.co/latest.md?page=421)