# Latest **URL:** https://discuss.elastic.co/latest.md?page=430 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 431 --- ## [Maintaining "time delta" between events when reindexing](https://discuss.elastic.co/t/maintaining-time-delta-between-events-when-reindexing/351155)
**Author:** [@petlit2049](https://discuss.elastic.co/u/petlit2049)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 1:53pm UTC](https://discuss.elastic.co/t/maintaining-time-delta-between-events-when-reindexing/351155 "2024-01-16T13:53:21Z")
I'm trying to work out a process for maintaining the time difference between event records when re-indexing data from one index to another but with a new "t0" using only Elasticsearch with ingest pipelines and/or logstas… --- ## [How to move from 3 node cluster to single node](https://discuss.elastic.co/t/how-to-move-from-3-node-cluster-to-single-node/351132)
**Author:** [@Mohammed\_Ahmed](https://discuss.elastic.co/u/Mohammed_Ahmed)\ **Replies:** 5\ **Last updated:** [January 16, 2024, 1:12pm UTC](https://discuss.elastic.co/t/how-to-move-from-3-node-cluster-to-single-node/351132 "2024-01-16T13:12:21Z")
i have a three node cluster below is the config cluster.name: hotels-autosuggest node.name: "es-autosuggest-3" path.logs: /var/log/elasticsearch path.data: /data/elasticsearch/data bootstrap.memory\_lock: true network.ho… --- ## [Move data directory 8.5.2](https://discuss.elastic.co/t/move-data-directory-8-5-2/351168)
**Author:** [@Chel](https://discuss.elastic.co/u/Chel)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 1:00pm UTC](https://discuss.elastic.co/t/move-data-directory-8-5-2/351168 "2024-01-16T13:00:45Z")
I want to move data directory from cluster A to Cluster B. Both have documents present. I want to copy the documents from cluster A to cluster B. Both cluster have different uuid's . Is it possible to change the cluster … --- ## [Encountered a retryable error. Will Retry with exponential backoff code=\>400](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/351147)
**Author:** [@DIVANSHU\_AGARWAL](https://discuss.elastic.co/u/DIVANSHU_AGARWAL)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 12:03pm UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400/351147 "2024-01-16T12:03:50Z")
Receiving these log traces on logstash end, unable to index documents to Elasticsearch. \[2024-01-15T11:28:39,573\]\[ERROR\]\[logstash.outputs.opensearch\] Encountered a retryable error (will retry with exponential backoff) {… --- ## [Logstash template](https://discuss.elastic.co/t/logstash-template/351131)
**Author:** [@SalehEska](https://discuss.elastic.co/u/SalehEska)\ **Replies:** 3\ **Last updated:** [January 16, 2024, 11:57am UTC](https://discuss.elastic.co/t/logstash-template/351131 "2024-01-16T11:57:08Z")
The problem is it does not create template , the template just for change things in the settings. this is the template : { "index\_patterns": \["audittrail\_transactions\_\*"\], "settings": { "number\_of\_shards": 2, "inde… --- ## [Snapshots integrity on elasticsearch](https://discuss.elastic.co/t/snapshots-integrity-on-elasticsearch/351074)
**Author:** [@TIT](https://discuss.elastic.co/u/TIT)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 11:10am UTC](https://discuss.elastic.co/t/snapshots-integrity-on-elasticsearch/351074 "2024-01-16T11:10:16Z")
Is There any way i can verify snapshots integrity something , the snapshots in my case are stored on an Nfs . --- ## [Distributed Tracing using java agent with Kafka based application](https://discuss.elastic.co/t/distributed-tracing-using-java-agent-with-kafka-based-application/351134)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 10:41am UTC](https://discuss.elastic.co/t/distributed-tracing-using-java-agent-with-kafka-based-application/351134 "2024-01-16T10:41:59Z")
Hi , I am currently working on observing traces provided in case of spring-boot application that uses Kafka messaging framework. Below is my sample application details for both producer and consumer: java version : 17 … --- ## [How to export large set data and write to csv using elasticsearch](https://discuss.elastic.co/t/how-to-export-large-set-data-and-write-to-csv-using-elasticsearch/351152)
**Author:** [@Bikash\_Hutait](https://discuss.elastic.co/u/Bikash_Hutait)\ **Replies:** 0\ **Last updated:** [January 16, 2024, 10:34am UTC](https://discuss.elastic.co/t/how-to-export-large-set-data-and-write-to-csv-using-elasticsearch/351152 "2024-01-16T10:34:13Z")
We have an application allowing users to export records based on search/filter criteria. I am looking for a solution to implement the "export all" functionality to a CSV file. I conducted a test utilizing the \_scroll AP… --- ## [Register percolate query with java api client ElasticSearch 8](https://discuss.elastic.co/t/register-percolate-query-with-java-api-client-elasticsearch-8/351084)
**Author:** [@TSCH](https://discuss.elastic.co/u/TSCH)\ **Replies:** 0\ **Last updated:** [January 15, 2024, 3:46pm UTC](https://discuss.elastic.co/t/register-percolate-query-with-java-api-client-elasticsearch-8/351084 "2024-01-15T15:46:13Z")
When trying to implement a similar usecase as the elasticsearch doicumentation for the percolate query with the java api client I ran into an issue and wonder if I'm doing things wrong, or there is something missing in t… --- ## [Java::JavaLang::IllegalStateException\` for \`PipelineAction::Create\](https://discuss.elastic.co/t/java-illegalstateexception-for-pipelineaction-create-main/351142)
**Author:** [@bp\_cs](https://discuss.elastic.co/u/bp_cs)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 9:58am UTC](https://discuss.elastic.co/t/java-illegalstateexception-for-pipelineaction-create-main/351142 "2024-01-16T09:58:30Z")
Thread.exclusive is deprecated, use Thread::Mutex Sending Logstash logs to D:/code/logstash/logstash-7.4.2/logs which is now configured via log4j2.properties \[2024-01-16T16:51:36,256\]\[WARN \]\[logstash.config.source.multil… --- ## [Persistent queue configuration in Windows OS using File IO](https://discuss.elastic.co/t/persistent-queue-configuration-in-windows-os-using-file-io/351145)
**Author:** [@sudipta.s](https://discuss.elastic.co/u/sudipta.s)\ **Replies:** 0\ **Last updated:** [January 16, 2024, 9:56am UTC](https://discuss.elastic.co/t/persistent-queue-configuration-in-windows-os-using-file-io/351145 "2024-01-16T09:56:39Z")
Hello team, We are looking for some support on Persistent queue configuration in windows OS. We are using file IO and exposed some shared location with all write privilege. With guided configuration in elastic documenta… --- ## [Elasticsearch snapshot is failing due to access denied exception](https://discuss.elastic.co/t/elasticsearch-snapshot-is-failing-due-to-access-denied-exception/350474)
**Author:** [@tykarthick](https://discuss.elastic.co/u/tykarthick)\ **Replies:** 15\ **Last updated:** [January 16, 2024, 9:28am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-is-failing-due-to-access-denied-exception/350474 "2024-01-16T09:28:25Z")
Hi Team, Greetings ! A POC is under progress for the Elasticsearch snapshot and restoration and this POC is on the Azure VM's Linux environment. The version of Elasticsearch is 8.6.2 with three node cluster setup. The… --- ## [Single node elasticsearch installation with podman and IPv6](https://discuss.elastic.co/t/single-node-elasticsearch-installation-with-podman-and-ipv6/351086)
**Author:** [@hitchalon](https://discuss.elastic.co/u/hitchalon)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 8:40am UTC](https://discuss.elastic.co/t/single-node-elasticsearch-installation-with-podman-and-ipv6/351086 "2024-01-16T08:40:02Z")
Hi all, I am trying to install Elasticsearch by using podman on a IPv6 only host (RHEL 9.3, podman 4.6.3). Here is my run commands for elasticsearch and kibana podman run --name es01 --net elastic-v6 -p \[1000:1400:240… --- ## [Как в ElasticsearchOperations в UpdateQuery в скрипте достать params листом а не стрингой?](https://discuss.elastic.co/t/elasticsearchoperations-updatequery-params/351126)
**Author:** [@Marina\_S](https://discuss.elastic.co/u/Marina_S)\ **Replies:** 0\ **Last updated:** [January 16, 2024, 7:47am UTC](https://discuss.elastic.co/t/elasticsearchoperations-updatequery-params/351126 "2024-01-16T07:47:52Z")
Я использую ElasticsearchOperations directories это лист объектов List Directory String scriptText = "if (ctx.\_source.businessPartnerParams != null) { " + "ctx.\_source.businessPartnerParams.bpName = 'test 3 ' " + "}"… --- ## [Connecting APM to logstash](https://discuss.elastic.co/t/connecting-apm-to-logstash/351124)
**Author:** [@Affan\_Mir](https://discuss.elastic.co/u/Affan_Mir)\ **Replies:** 0\ **Last updated:** [January 16, 2024, 7:13am UTC](https://discuss.elastic.co/t/connecting-apm-to-logstash/351124 "2024-01-16T07:13:26Z")
I want to connect my apm-server to my log stash that will do some preprocessing before dumping the metrics into Elasticsearch. According to the documentation listed at Configure the Logstash output | APM User Guide \[8.1… --- ## [Is it possible that with the help of SYSLOG we can push the present log events as well as the past history of events?](https://discuss.elastic.co/t/is-it-possible-that-with-the-help-of-syslog-we-can-push-the-present-log-events-as-well-as-the-past-history-of-events/351123)
**Author:** [@Subrato1](https://discuss.elastic.co/u/Subrato1)\ **Replies:** 0\ **Last updated:** [January 16, 2024, 6:58am UTC](https://discuss.elastic.co/t/is-it-possible-that-with-the-help-of-syslog-we-can-push-the-present-log-events-as-well-as-the-past-history-of-events/351123 "2024-01-16T06:58:28Z")
Any specific configuration required for that?? --- ## [Filebeat CEL Input Type - FIle Options](https://discuss.elastic.co/t/filebeat-cel-input-type-file-options/350812)
**Author:** [@bigdaddy0918](https://discuss.elastic.co/u/bigdaddy0918)\ **Replies:** 2\ **Last updated:** [January 15, 2024, 7:40pm UTC](https://discuss.elastic.co/t/filebeat-cel-input-type-file-options/350812 "2024-01-15T19:40:12Z")
I'm using a CEL type input in Filebeat. Currently the filebeat.yml file points at a specific directory/file. What is the syntax to wildcard a portion of the file? (i.e. for the parameter resource.url: file:///home/di… --- ## [Get error when config "value\_serializer" and "key\_serializer" in output part](https://discuss.elastic.co/t/get-error-when-config-value-serializer-and-key-serializer-in-output-part/351062)
**Author:** [@Pengcheng\_Fu](https://discuss.elastic.co/u/Pengcheng_Fu)\ **Replies:** 1\ **Last updated:** [January 15, 2024, 7:34pm UTC](https://discuss.elastic.co/t/get-error-when-config-value-serializer-and-key-serializer-in-output-part/351062 "2024-01-15T19:34:19Z")
I am testing transfer data between mutile kafka cluster my configuration is below: input { kafka { bootstrap\_servers =\> "10.62.169.206:9092,10.62.220.44:9092,10.62.220.150:9092" topics =\> \["prod-sk… --- ## [Does single node Elasticsearch supports ILM ploicy](https://discuss.elastic.co/t/does-single-node-elasticsearch-supports-ilm-ploicy/350124)
**Author:** [@Ravi\_Pattar](https://discuss.elastic.co/u/Ravi_Pattar)\ **Replies:** 41\ **Last updated:** [January 15, 2024, 6:46pm UTC](https://discuss.elastic.co/t/does-single-node-elasticsearch-supports-ilm-ploicy/350124 "2024-01-15T18:46:05Z")
Hello, I have applied the ILM policy because the disk space usage was seen very high. But I don't see any changes in the disk space after implementing the ILM policy for filebeat. shards disk.indices disk.used disk.to… --- ## [Kubernetes deployed Elastic Agent is looped in beat restart](https://discuss.elastic.co/t/kubernetes-deployed-elastic-agent-is-looped-in-beat-restart/351054)
**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\ **Replies:** 1\ **Last updated:** [January 15, 2024, 5:16pm UTC](https://discuss.elastic.co/t/kubernetes-deployed-elastic-agent-is-looped-in-beat-restart/351054 "2024-01-15T17:16:10Z")
As according to GitHub, I opened the post in the wrong category. That's why I am reposting: Kubernetes deployed Elastic Agent is looped in beat restart --- ## [Saved Objects link disappeared except the default space](https://discuss.elastic.co/t/saved-objects-link-disappeared-except-the-default-space/350992)
**Author:** [@Zakwan\_hajjar](https://discuss.elastic.co/u/Zakwan_hajjar)\ **Replies:** 2\ **Last updated:** [January 15, 2024, 4:39pm UTC](https://discuss.elastic.co/t/saved-objects-link-disappeared-except-the-default-space/350992 "2024-01-15T16:39:56Z")
I'm using the latest stable version 8.11.4 and I have a strange case in Kibana that I don't have an option for "Saved Objects". This problem exists in all spaces except the default space. I am logged in as root user so I… --- ## [Question about Kibana connectors](https://discuss.elastic.co/t/question-about-kibana-connectors/351081)
**Author:** [@stobbe](https://discuss.elastic.co/u/stobbe)\ **Replies:** 1\ **Last updated:** [January 15, 2024, 4:23pm UTC](https://discuss.elastic.co/t/question-about-kibana-connectors/351081 "2024-01-15T16:23:05Z")
Hello, I was wandering, the kibana email connetor, is assume that's different from xpack.notification.email namespace in \`elasticsearch.yml. So from a watcher I can only use the xpack one? KR Henk --- ## [How to save a time range in kibana?](https://discuss.elastic.co/t/how-to-save-a-time-range-in-kibana/351065)
**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\ **Replies:** 3\ **Last updated:** [January 15, 2024, 4:12pm UTC](https://discuss.elastic.co/t/how-to-save-a-time-range-in-kibana/351065 "2024-01-15T16:12:28Z")
I've seen in some kibana instances that instead of selecting the preconfigured range (1 day, 7 days, etc) you can store a custom timerange with a name. Any idea how to do it? --- ## [Providing Socket tineout exception not working in elastic java api](https://discuss.elastic.co/t/providing-socket-tineout-exception-not-working-in-elastic-java-api/350923)
**Author:** [@Divy\_Garg](https://discuss.elastic.co/u/Divy_Garg)\ **Replies:** 7\ **Last updated:** [January 15, 2024, 3:56pm UTC](https://discuss.elastic.co/t/providing-socket-tineout-exception-not-working-in-elastic-java-api/350923 "2024-01-15T15:56:29Z")
Hi I am using below libraries to connect to elasticsearch from java implementation group: 'co.elastic.clients', name: 'elasticsearch-java', version: '8.11.4' implementation group: 'org.elasticsearch.client', name: 'el… --- ## [I want know the elastic search enterprise version pricing model](https://discuss.elastic.co/t/i-want-know-the-elastic-search-enterprise-version-pricing-model/351073)
**Author:** [@Pintu](https://discuss.elastic.co/u/Pintu)\ **Replies:** 1\ **Last updated:** [January 15, 2024, 2:55pm UTC](https://discuss.elastic.co/t/i-want-know-the-elastic-search-enterprise-version-pricing-model/351073 "2024-01-15T14:55:06Z")
I want to know the enterprise version pricing model --- ## [/bin/tini: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory](https://discuss.elastic.co/t/bin-tini-error-while-loading-shared-libraries-libc-so-6-cannot-open-shared-object-file-no-such-file-or-directory/351077)
**Author:** [@Abdeljalil\_El\_Yousso](https://discuss.elastic.co/u/Abdeljalil_El_Yousso)\ **Replies:** 0\ **Last updated:** [January 15, 2024, 2:44pm UTC](https://discuss.elastic.co/t/bin-tini-error-while-loading-shared-libraries-libc-so-6-cannot-open-shared-object-file-no-such-file-or-directory/351077 "2024-01-15T14:44:26Z")
how to resolve the following error if anybody encoutred it while running elasticserach 8.10.4 on docker in debian terminal /bin/tini: error while loading shared libraries: libc.so.6: cannot open shared object file: No s… --- ## [Ensuring Document Ordering in Bulk Ingestion](https://discuss.elastic.co/t/ensuring-document-ordering-in-bulk-ingestion/350972)
**Author:** [@Ivelin\_Yanev](https://discuss.elastic.co/u/Ivelin_Yanev)\ **Replies:** 11\ **Last updated:** [January 15, 2024, 2:41pm UTC](https://discuss.elastic.co/t/ensuring-document-ordering-in-bulk-ingestion/350972 "2024-01-15T14:41:04Z")
Hi everyone, I'm currently working on implementing bulk operations for documents. In my scenario, I receive PubSub messages and generate corresponding Elasticsearch documents using the data from these PubSub messages. I… --- ## [Release Notes Page of 8.11.4 for Kibana unavailable](https://discuss.elastic.co/t/release-notes-page-of-8-11-4-for-kibana-unavailable/351008)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [January 15, 2024, 1:27pm UTC](https://discuss.elastic.co/t/release-notes-page-of-8-11-4-for-kibana-unavailable/351008 "2024-01-15T13:27:59Z")
Please check https://www.elastic.co/guide/en/kibana/8.11/release-notes-8.11.4.html --- ## [Query with must and should with ANd and OR Logic in Elasticsearch](https://discuss.elastic.co/t/query-with-must-and-should-with-and-and-or-logic-in-elasticsearch/351068)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 0\ **Last updated:** [January 15, 2024, 12:35pm UTC](https://discuss.elastic.co/t/query-with-must-and-should-with-and-and-or-logic-in-elasticsearch/351068 "2024-01-15T12:35:38Z")
Hi, I want my search work like all the search terms searched with AND results first and then with OR results. example, Search term - borosil infrastructure the result should come like - borosil infrastructure boro… --- ## [ILM is deleting after rollover](https://discuss.elastic.co/t/ilm-is-deleting-after-rollover/350525)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 4\ **Last updated:** [January 15, 2024, 11:48am UTC](https://discuss.elastic.co/t/ilm-is-deleting-after-rollover/350525 "2024-01-15T11:48:35Z")
Hi, I have set rollover after 10gb and delete after 7 days. PUT \_ilm/policy/policy1 { "policy": { "phases": { "hot": { "actions": { "rollover": { "max\_primary\_shard\_size": "10g… [Previous page](https://discuss.elastic.co/latest.md?page=429) [Next page](https://discuss.elastic.co/latest.md?page=431)