# Latest **URL:** https://discuss.elastic.co/latest.md?page=429 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 430 --- ## [Json processor Parsing Issue Workaround](https://discuss.elastic.co/t/json-processor-parsing-issue-workaround/351208)
**Author:** [@vishnu.a](https://discuss.elastic.co/u/vishnu.a)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 10:53am UTC](https://discuss.elastic.co/t/json-processor-parsing-issue-workaround/351208 "2024-01-17T10:53:49Z")
Hello I'm trying to parse a field using the Json processor. the input is similar to the following: {"json": { \\"field1\\":\\"...\\", \\"field2\\":\\"...\\", ... , \\"Message\\":\\"\\\", ... , \\"fieldn\\":\\"...\\" } The… --- ## [How does the search performance compare between standard and nested document structure](https://discuss.elastic.co/t/how-does-the-search-performance-compare-between-standard-and-nested-document-structure/351070)
**Author:** [@mmaccou](https://discuss.elastic.co/u/mmaccou)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 10:36am UTC](https://discuss.elastic.co/t/how-does-the-search-performance-compare-between-standard-and-nested-document-structure/351070 "2024-01-17T10:36:12Z")
I’m exploring different ways to structure my indices. I found an article on the Elasticsearch blog about using nested documents. All else being equal, does this structure impact the speed or other performance/accuracy in… --- ## [Shards and Index states through Java Client](https://discuss.elastic.co/t/shards-and-index-states-through-java-client/351241)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 10:23am UTC](https://discuss.elastic.co/t/shards-and-index-states-through-java-client/351241 "2024-01-17T10:23:35Z")
Hi, I am looking a way to get Shards and Index states through Java Client 7.17 The states getting from: GET \_cat/indices/?v GET \_cat/shards/?v Is it possible though HighLevelRestAPI? --- ## [Search with exact phrase in my index](https://discuss.elastic.co/t/search-with-exact-phrase-in-my-index/351213)
**Author:** [@Indilya](https://discuss.elastic.co/u/Indilya)\ **Replies:** 7\ **Last updated:** [January 17, 2024, 10:08am UTC](https://discuss.elastic.co/t/search-with-exact-phrase-in-my-index/351213 "2024-01-17T10:08:58Z")
Hello, First of all I want to apologize if my post is not correct. This is my first time on this forum and my first time using Elastic Search. I also take this opportunity to thank you in advance for the help. I have … --- ## [How to Enable OCR in Elasticsearch for Enhanced PDF Readability?](https://discuss.elastic.co/t/how-to-enable-ocr-in-elasticsearch-for-enhanced-pdf-readability/351249)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 9:59am UTC](https://discuss.elastic.co/t/how-to-enable-ocr-in-elasticsearch-for-enhanced-pdf-readability/351249 "2024-01-17T09:59:25Z")
Hello, We're facing a challenge with a client regarding the upload and processing of PDF files to make them text-searchable. Initially, we implemented an ingest pipeline with Elasticsearch's attachment processor, levera… --- ## [Kibana v8.6.0 docker image build fails](https://discuss.elastic.co/t/kibana-v8-6-0-docker-image-build-fails/350851)
**Author:** [@salman\_kh](https://discuss.elastic.co/u/salman_kh)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 8:28am UTC](https://discuss.elastic.co/t/kibana-v8-6-0-docker-image-build-fails/350851 "2024-01-17T08:28:36Z")
Hello, I'm attempting to build a Kibana Docker image from the source code, specifically for version 8.6.0. However, I'm encountering an error. I followed the same procedure for this version a couple of months ago but di… --- ## [Map index creation\_date to new field in existing documents](https://discuss.elastic.co/t/map-index-creation-date-to-new-field-in-existing-documents/351235)
**Author:** [@es236908](https://discuss.elastic.co/u/es236908)\ **Replies:** 3\ **Last updated:** [January 17, 2024, 9:52am UTC](https://discuss.elastic.co/t/map-index-creation-date-to-new-field-in-existing-documents/351235 "2024-01-17T09:52:20Z")
Every day I create an index of my file system with Diskover so I have a large amount of indexes one for every day. Each of those indexes has documents for each file but there is no field for the time the index/document w… --- ## [Find an Phrase with addtional variants](https://discuss.elastic.co/t/find-an-phrase-with-addtional-variants/351067)
**Author:** [@libertey](https://discuss.elastic.co/u/libertey)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 9:49am UTC](https://discuss.elastic.co/t/find-an-phrase-with-addtional-variants/351067 "2024-01-17T09:49:26Z")
Hello, i run into a Problem with matching of queries, I have an keyowrd like John Doe and now my System should find all Entries where the John Doe is mentioned as author. The main Problem is the Person John Doe is not a… --- ## [Able to Calculate Metrics, Unable to Visualize as Graphs \[beginner\]](https://discuss.elastic.co/t/able-to-calculate-metrics-unable-to-visualize-as-graphs-beginner/351146)
**Author:** [@Scharka](https://discuss.elastic.co/u/Scharka)\ **Replies:** 1\ **Last updated:** [January 17, 2024, 8:47am UTC](https://discuss.elastic.co/t/able-to-calculate-metrics-unable-to-visualize-as-graphs-beginner/351146 "2024-01-17T08:47:54Z")
I'm new to Kibana, and I can't seem to figure out a completely trivial thing. Can you please point me in the right direction? I tried searching & googling, but I was not able to move on for more days. Minimal working ex… --- ## [How to connect eStreamer with Elastic?](https://discuss.elastic.co/t/how-to-connect-estreamer-with-elastic/351090)
**Author:** [@hectorGC](https://discuss.elastic.co/u/hectorGC)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 9:27am UTC](https://discuss.elastic.co/t/how-to-connect-estreamer-with-elastic/351090 "2024-01-17T09:27:44Z")
Hi Elastic researchers! I am trying to get more logs from the ftds since the logs are not complete in the IPS events and cisco suggests to use eStreamer. I am trying to understand the technology but some help related on… --- ## [Getting fatal exception while booting Elasticsearch while trying to start elasticsearch in Vm](https://discuss.elastic.co/t/getting-fatal-exception-while-booting-elasticsearch-while-trying-to-start-elasticsearch-in-vm/351192)
**Author:** [@Mohammed\_Ahmed](https://discuss.elastic.co/u/Mohammed_Ahmed)\ **Replies:** 3\ **Last updated:** [January 17, 2024, 8:57am UTC](https://discuss.elastic.co/t/getting-fatal-exception-while-booting-elasticsearch-while-trying-to-start-elasticsearch-in-vm/351192 "2024-01-17T08:57:53Z")
getting this error fatal exception while booting Elasticsearch java.lang.IllegalStateException: cannot downgrade a node from version \[8.10.3\] to version \[8.9.0\] at org.elasticsearch.env.NodeMetadata.verifyUpgradeToCur… --- ## [Failed migration of system indices for the watcher and watcher not firing after update](https://discuss.elastic.co/t/failed-migration-of-system-indices-for-the-watcher-and-watcher-not-firing-after-update/350704)
**Author:** [@AEA27](https://discuss.elastic.co/u/AEA27)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 7:45am UTC](https://discuss.elastic.co/t/failed-migration-of-system-indices-for-the-watcher-and-watcher-not-firing-after-update/350704 "2024-01-17T07:45:14Z")
continuation of Failed migration of system indices (.triggered\_watches) with Upgrade Assistant using v7.17.14 Summary, upgrade assistant was giving an error for the watcher when migrating system indices. I tried deleti… --- ## [Filebeat causes](https://discuss.elastic.co/t/filebeat-causes/351119)
**Author:** [@Rutuja\_More](https://discuss.elastic.co/u/Rutuja_More)\ **Replies:** 2\ **Last updated:** [January 17, 2024, 6:29am UTC](https://discuss.elastic.co/t/filebeat-causes/351119 "2024-01-17T06:29:01Z")
Has anyone encountered compatibility issues when running Filebeat alongside a live application? Are there known conflicts or considerations to be aware of when Filebeat is continuously monitoring logs in the presence of… --- ## [ES Query Rule : Ability to show previous value?](https://discuss.elastic.co/t/es-query-rule-ability-to-show-previous-value/351215)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [January 17, 2024, 12:04am UTC](https://discuss.elastic.co/t/es-query-rule-ability-to-show-previous-value/351215 "2024-01-17T00:04:42Z")
Hello, It's me again. I have a interesting use case for ES Query rule but was wondering if its even possible. I was asked to create an alert and be able to show the a field like {{\_source.status}}. This is possible. N… --- ## [Kibana Lens Dashboard Link Broken 404 Dashboard Not Found](https://discuss.elastic.co/t/kibana-lens-dashboard-link-broken-404-dashboard-not-found/350980)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 5\ **Last updated:** [January 16, 2024, 9:59pm UTC](https://discuss.elastic.co/t/kibana-lens-dashboard-link-broken-404-dashboard-not-found/350980 "2024-01-16T21:59:27Z")
Note: It may be necessary to check the user permissions first. TL/DR 1. (Hamburger Menu) --\> Stack Management --\> Saved Objects 2. Select the dashboard and Export 3. Open with Notepad++, CTRL +F, change the Search Mo… --- ## [\[ElasticSearch v.7.5\] How to merge daily and weekly indexes into a monthly index?](https://discuss.elastic.co/t/elasticsearch-v-7-5-how-to-merge-daily-and-weekly-indexes-into-a-monthly-index/351210)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 9:34pm UTC](https://discuss.elastic.co/t/elasticsearch-v-7-5-how-to-merge-daily-and-weekly-indexes-into-a-monthly-index/351210 "2024-01-16T21:34:55Z")
How to merge daily and weekly indexes into a monthly index? In order to free shards. --- ## [After Installing Logstash version 8.11.4 it Exit because a System error](https://discuss.elastic.co/t/after-installing-logstash-version-8-11-4-it-exit-because-a-system-error/351035)
**Author:** [@jcourt2006](https://discuss.elastic.co/u/jcourt2006)\ **Replies:** 10\ **Last updated:** [January 16, 2024, 8:56pm UTC](https://discuss.elastic.co/t/after-installing-logstash-version-8-11-4-it-exit-because-a-system-error/351035 "2024-01-16T20:56:56Z")
I get the following error: \[root@app logstash\]# /usr/share/logstash/bin/logstash -t --path.settings /etc/logstash Using bundled JDK: /usr/share/logstash/jdk /usr/share/logstash/vendor/bundle/jruby/3.1.0/gems/concurrent-… --- ## [Java APM Agent, System CPU reporting with Java 21](https://discuss.elastic.co/t/java-apm-agent-system-cpu-reporting-with-java-21/351149)
**Author:** [@GreenEyed](https://discuss.elastic.co/u/GreenEyed)\ **Replies:** 4\ **Last updated:** [January 16, 2024, 5:41pm UTC](https://discuss.elastic.co/t/java-apm-agent-system-cpu-reporting-with-java-21/351149 "2024-01-16T17:41:00Z")
Kibana version: 7.17.10 Elasticsearch version: 7.17.10 APM Server version: 7.17.10 APM Agent language and version: Java agent, 1.45.0 Java version: Java 21 Original install method (e.g. download page, yum, deb, from… --- ## [Why is a new index created with 0001 if you restart logstash?](https://discuss.elastic.co/t/why-is-a-new-index-created-with-0001-if-you-restart-logstash/351167)
**Author:** [@emoxam](https://discuss.elastic.co/u/emoxam)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 5:39pm UTC](https://discuss.elastic.co/t/why-is-a-new-index-created-with-0001-if-you-restart-logstash/351167 "2024-01-16T17:39:27Z")
Why is a new index created with 0001 if you restart logstash? And does not continue to write to the main one, without numbers. But if you restart it again, it keeps writing to 0001 without creating 0002? /etc/logstash/c… --- ## [I need to onboard nodeJS logs and create visualisations in kibana](https://discuss.elastic.co/t/i-need-to-onboard-nodejs-logs-and-create-visualisations-in-kibana/350694)
**Author:** [@vishnu\_vardhan1](https://discuss.elastic.co/u/vishnu_vardhan1)\ **Replies:** 3\ **Last updated:** [January 16, 2024, 5:28pm UTC](https://discuss.elastic.co/t/i-need-to-onboard-nodejs-logs-and-create-visualisations-in-kibana/350694 "2024-01-16T17:28:21Z")
We try to onboard node js data into elastic. How we need configure and take those api calls data into elastic. We tried with APM , any other approach to get those logs into elastic. Our elk cluster has been enterprise… --- ## [Elastic Search with ChatGPT](https://discuss.elastic.co/t/elastic-search-with-chatgpt/351166)
**Author:** [@Pey](https://discuss.elastic.co/u/Pey)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 5:27pm UTC](https://discuss.elastic.co/t/elastic-search-with-chatgpt/351166 "2024-01-16T17:27:30Z")
Hi, I am very interested in combining the usage of GPT + Elasticsearch for enterprise data (link: ChatGPT and Elasticsearch: OpenAI meets private data — Elastic Search Labs). We have used Azure Cognitive Search + Open AI… --- ## [\[Ingest processor\] How to apply ingest pipeline on an index?](https://discuss.elastic.co/t/ingest-processor-how-to-apply-ingest-pipeline-on-an-index/351180)
**Author:** [@Keith\_Lin](https://discuss.elastic.co/u/Keith_Lin)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 4:14pm UTC](https://discuss.elastic.co/t/ingest-processor-how-to-apply-ingest-pipeline-on-an-index/351180 "2024-01-16T16:14:58Z")
So in kibana i created an ingest pipeline. Is there a way to apply it to an index or it will be automatically applied? --- ## [Azure: Normalizing Array Fields](https://discuss.elastic.co/t/azure-normalizing-array-fields/351184)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [January 16, 2024, 4:13pm UTC](https://discuss.elastic.co/t/azure-normalizing-array-fields/351184 "2024-01-16T16:13:12Z")
Hello, I am using Elastic's Azure Integration to collect AD Audit logs. Everything is working as expected but I find the schema logic to be hard to work with. The managed ingest pipeline runs a script to map out nested… --- ## [Guidance on partial keyword search](https://discuss.elastic.co/t/guidance-on-partial-keyword-search/351094)
**Author:** [@Sandip\_Maniar](https://discuss.elastic.co/u/Sandip_Maniar)\ **Replies:** 4\ **Last updated:** [January 16, 2024, 4:06pm UTC](https://discuss.elastic.co/t/guidance-on-partial-keyword-search/351094 "2024-01-16T16:06:57Z")
Hi, What is the most effective approach for implementing partial keyword search in the context of lengthy search texts, exceeding 5000 characters? For instance, if the keyword is "Exclusive," searching with "clus" shoul… --- ## [Cannot restore open indices in new empty cluster](https://discuss.elastic.co/t/cannot-restore-open-indices-in-new-empty-cluster/351176)
**Author:** [@mebaj91360](https://discuss.elastic.co/u/mebaj91360)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 3:43pm UTC](https://discuss.elastic.co/t/cannot-restore-open-indices-in-new-empty-cluster/351176 "2024-01-16T15:43:54Z")
Hello, I am trying to restore a snapshot on a new, empty cluster, but I get this error: \[restore-old:snapshot-2024.01.09-5ebjtwcnqksvliv3h9tcug/r4dfaUrJQXyQ0xxVa0OE8Q\] cannot restore index \[logstash-2023.09.02\] because… --- ## [\[Error\] fleet-server failed: context canceled](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled/351096)
**Author:** [@Cliff\_ln](https://discuss.elastic.co/u/Cliff_ln)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 3:42pm UTC](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled/351096 "2024-01-16T15:42:07Z")
Hello, I'm trying to upgrade my Elastic cluster from version 8.10.4 to 8.11.1. I encountered issues during the upgrade of Fleet. The upgrade steps involve deleting the existing Fleet server and Agent policies, then crea… --- ## [Error management in elasticsearch output plugin](https://discuss.elastic.co/t/error-management-in-elasticsearch-output-plugin/351100)
**Author:** [@Cesar\_Garcia1](https://discuss.elastic.co/u/Cesar_Garcia1)\ **Replies:** 4\ **Last updated:** [January 16, 2024, 3:41pm UTC](https://discuss.elastic.co/t/error-management-in-elasticsearch-output-plugin/351100 "2024-01-16T15:41:28Z")
Hello everyone Hello to all of you I have a problem with logstash and elasticsearch I have this configuration file for logstash input { file { path =\> "${FILE\_TO\_SEND}" sincedb\_path =\> "/dev/null" mode =\> read… --- ## [Redirect Elastic Agent to new Fleet Server](https://discuss.elastic.co/t/redirect-elastic-agent-to-new-fleet-server/350310)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 3\ **Last updated:** [January 16, 2024, 3:36pm UTC](https://discuss.elastic.co/t/redirect-elastic-agent-to-new-fleet-server/350310 "2024-01-16T15:36:59Z")
I have about 1000 elastic agents currently connected to a Fleet server that is also my Kibana server. I'd like to migrate the devices to a new Fleet server to improve the performance of my Kibana server. Can I migrate … --- ## [Unable to retrieve version information from Elasticsearch nodes. security\_exception](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-security-exception/350524)
**Author:** [@unknownuser](https://discuss.elastic.co/u/unknownuser)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 3:20pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-security-exception/350524 "2024-01-16T15:20:56Z")
Hi Pal, I recently encountered an issue from my Kibana 8.11.1 version upgrade. The token I used is from monitoring node, this is for the kibana and monitoring connections. However, the kibana UI shows "Kibana server is … --- ## [Elasticsearch 8.11.4 Windows installation from zip not completing](https://discuss.elastic.co/t/elasticsearch-8-11-4-windows-installation-from-zip-not-completing/351172)
**Author:** [@Echo9Zulu](https://discuss.elastic.co/u/Echo9Zulu)\ **Replies:** 5\ **Last updated:** [January 16, 2024, 2:40pm UTC](https://discuss.elastic.co/t/elasticsearch-8-11-4-windows-installation-from-zip-not-completing/351172 "2024-01-16T14:40:42Z")
Hello! I am having difficulty installing Elasticsearch 8.11.4 on a laptop running Windows 10. Running elasticsearch.bat creates the following log in the command window. Shortly after running the command the install hang… [Previous page](https://discuss.elastic.co/latest.md?page=428) [Next page](https://discuss.elastic.co/latest.md?page=430)