# Latest **URL:** https://discuss.elastic.co/latest.md?page=447 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 448 --- ## [Conditional background in canvas doesn't work](https://discuss.elastic.co/t/conditional-background-in-canvas-doesnt-work/346970)
**Author:** [@fay](https://discuss.elastic.co/u/fay)\ **Replies:** 2\ **Last updated:** [December 24, 2023, 8:03am UTC](https://discuss.elastic.co/t/conditional-background-in-canvas-doesnt-work/346970 "2023-12-24T08:03:03Z")
Hi all I want to condition my background for specific value of SQL returned, I try to have a condition for my metric color and its work but in background color its not ! can anyone explain why? this is my expression … --- ## [Dec 24th, 2023: \[EN\] Generating the ultimate Christmas song with Elasticsearch and LLMs](https://discuss.elastic.co/t/dec-24th-2023-en-generating-the-ultimate-christmas-song-with-elasticsearch-and-llms/347313)
**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Replies:** 0\ **Last updated:** [December 24, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-24th-2023-en-generating-the-ultimate-christmas-song-with-elasticsearch-and-llms/347313 "2023-12-24T08:00:17Z")
Introduction We've all played with those song generators out there on the internet to generate songs. More recently we've used LLMs such as ChatGPT to generate songs or poems in the style of a particular artist. But w… --- ## [Help with date-time conversion from Filebeat](https://discuss.elastic.co/t/help-with-date-time-conversion-from-filebeat/349573)
**Author:** [@bobus](https://discuss.elastic.co/u/bobus)\ **Replies:** 18\ **Last updated:** [December 23, 2023, 11:51am UTC](https://discuss.elastic.co/t/help-with-date-time-conversion-from-filebeat/349573 "2023-12-23T11:51:46Z")
I'm sending log data from Filebeat (running on Kubernetes) to Graylog/Elasticsearch. I need to ensure that the date-time field inside the JSON message block that is part of the log entry has this format: 2023-12-11T23:… --- ## [Metricbeat configuration not applied correctly](https://discuss.elastic.co/t/metricbeat-configuration-not-applied-correctly/349873)
**Author:** [@litronics](https://discuss.elastic.co/u/litronics)\ **Replies:** 1\ **Last updated:** [December 23, 2023, 8:33am UTC](https://discuss.elastic.co/t/metricbeat-configuration-not-applied-correctly/349873 "2023-12-23T08:33:59Z")
I am running metricbeat in a docker container and for some reasons it doesn't connect correctly to elasticsearch and logstash. This is my container configuration: metricbeat: container\_name: elk\_metricbeat ho… --- ## [Dec 23rd, 2023: \[EN\] Novice Kibana user goes metal in analytics](https://discuss.elastic.co/t/dec-23rd-2023-en-novice-kibana-user-goes-metal-in-analytics/347312)
**Author:** [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\ **Replies:** 0\ **Last updated:** [December 23, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-23rd-2023-en-novice-kibana-user-goes-metal-in-analytics/347312 "2023-12-23T08:00:38Z")
For this year's advent calendar, I thought I will try to ingest some music data into elasticsearch and talk about few of my favourite features in Discover and Dashboard for analytics in Kibana 8.11 (our latest release)… --- ## [Kibana 7.17 点線ラインで表示するには？](https://discuss.elastic.co/t/kibana-7-17/349876)
**Author:** [@toshihisa-nakamura](https://discuss.elastic.co/u/toshihisa-nakamura)\ **Replies:** 1\ **Last updated:** [December 23, 2023, 7:47am UTC](https://discuss.elastic.co/t/kibana-7-17/349876 "2023-12-23T07:47:08Z")
kibana7.17のDashboardでデータをLineで表示させていますが、ver6まではあったVisualoptionsのDot表示＆Line非表示がなくなり設定できません。 ver7以降ではどのようにすればDot＆Line非表示にできますか？ 教えていただけるとありがたいです。 --- ## [Osquery fails to return any data from Windows 10 or MACOS elastic agents](https://discuss.elastic.co/t/osquery-fails-to-return-any-data-from-windows-10-or-macos-elastic-agents/349880)
**Author:** [@hotcobra](https://discuss.elastic.co/u/hotcobra)\ **Replies:** 0\ **Last updated:** [December 23, 2023, 7:40am UTC](https://discuss.elastic.co/t/osquery-fails-to-return-any-data-from-windows-10-or-macos-elastic-agents/349880 "2023-12-23T07:40:11Z")
I can see all agents are healthy (in Security Onion 2.4.30), I attempt query and all I get back is error. I assume it's a configuration or permission issue but can't find it. Recommendations? --- ## [Invalid or malformed certificate using caFingerprint](https://discuss.elastic.co/t/invalid-or-malformed-certificate-using-cafingerprint/349754)
**Author:** [@joe\_recra](https://discuss.elastic.co/u/joe_recra)\ **Replies:** 11\ **Last updated:** [December 23, 2023, 12:54am UTC](https://discuss.elastic.co/t/invalid-or-malformed-certificate-using-cafingerprint/349754 "2023-12-23T00:54:34Z")
hi, I generated a CA certificate using: ./elasticsearch-certutil ca --pem --out /certs/ca.zip and then generated a cert using: ./bin/elasticsearch-certutil cert \\ --out /var/snap/amazon-ssm-agent/7628/elasticsearch-8… --- ## [Logstash SNMP input plugin not seeing metadata](https://discuss.elastic.co/t/logstash-snmp-input-plugin-not-seeing-metadata/349524)
**Author:** [@bytelink](https://discuss.elastic.co/u/bytelink)\ **Replies:** 6\ **Last updated:** [December 22, 2023, 5:04pm UTC](https://discuss.elastic.co/t/logstash-snmp-input-plugin-not-seeing-metadata/349524 "2023-12-22T17:04:26Z")
I am trying to implement the SNMP input plugin to gther network data however when I try and access the metadata it returns the line of code not the data. I even tried copying the example from the documentation and get t… --- ## [Migrating from Nest to Elastic.Client.Elasticsearch QueryContainer not longer available](https://discuss.elastic.co/t/migrating-from-nest-to-elastic-client-elasticsearch-querycontainer-not-longer-available/349864)
**Author:** [@ricocsharp](https://discuss.elastic.co/u/ricocsharp)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 3:17pm UTC](https://discuss.elastic.co/t/migrating-from-nest-to-elastic-client-elasticsearch-querycontainer-not-longer-available/349864 "2023-12-22T15:17:16Z")
I’m rewriting our code for the new Elastic.Client.Elasticsearch and I’m trying to find some code examples how to do that. here I'm letting an example of code to be converted, the main problem is that QueryContainer is n… --- ## [Failed to indices:data/write/bulk\[s\] on replica because of Netty4TcpChannel / CompositeBytesReference more than 2GB](https://discuss.elastic.co/t/failed-to-indices-data-write-bulk-s-on-replica-because-of-netty4tcpchannel-compositebytesreference-more-than-2gb/349797)
**Author:** [@Martin\_Berlin](https://discuss.elastic.co/u/Martin_Berlin)\ **Replies:** 5\ **Last updated:** [December 22, 2023, 3:11pm UTC](https://discuss.elastic.co/t/failed-to-indices-data-write-bulk-s-on-replica-because-of-netty4tcpchannel-compositebytesreference-more-than-2gb/349797 "2023-12-22T15:11:59Z")
While Indexing to our Cluster sometimes this error occures turning the cluster in red & yellow state: One node is trying to "perform indices:data/write/bulk\[s\] on replica" on another node but fails because of "exception… --- ## [Not able install fleet properly on Windows7](https://discuss.elastic.co/t/not-able-install-fleet-properly-on-windows7/348791)
**Author:** [@swapnalimag](https://discuss.elastic.co/u/swapnalimag)\ **Replies:** 2\ **Last updated:** [December 22, 2023, 3:00pm UTC](https://discuss.elastic.co/t/not-able-install-fleet-properly-on-windows7/348791 "2023-12-22T15:00:58Z")
Hello, I am trying to install the fleet agent on Windows 7 . But during installation it is showing me the following error. "Fail to execute request to fleet-server: x509: certificate signed by Unknown authority" We ha… --- ## [Challenges while migrating elasticsearch client 6.8 to 8.7 (is mandatory)](https://discuss.elastic.co/t/challenges-while-migrating-elasticsearch-client-6-8-to-8-7-is-mandatory/349856)
**Author:** [@Chetan\_Ramaiah](https://discuss.elastic.co/u/Chetan_Ramaiah)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 1:36pm UTC](https://discuss.elastic.co/t/challenges-while-migrating-elasticsearch-client-6-8-to-8-7-is-mandatory/349856 "2023-12-22T13:36:39Z")
Hello, Currently, I am in the midst of transitioning from Elasticsearch HLRC 6.8 to Elasticsearch REST API Java Client 8.7 within a Spring Boot application. This migration aligns with the broader upgrade of the Spring v… --- ## [Disk usage grows indefinitely over time](https://discuss.elastic.co/t/disk-usage-grows-indefinitely-over-time/349751)
**Author:** [@Tommaso\_Parisi](https://discuss.elastic.co/u/Tommaso_Parisi)\ **Replies:** 2\ **Last updated:** [December 22, 2023, 1:29pm UTC](https://discuss.elastic.co/t/disk-usage-grows-indefinitely-over-time/349751 "2023-12-22T13:29:14Z")
Hello, as you see in the screenshot above the disk usage of my index grows indefinitely over time. If I close the index and then reopen it the usage drops, as you can see from the graph. I did a \_close followed by a… --- ## [co.elastic.clients.elasticsearch.core.BulkRequest does not work against the Elasticsearch 8.11](https://discuss.elastic.co/t/co-elastic-clients-elasticsearch-core-bulkrequest-does-not-work-against-the-elasticsearch-8-11/349769)
**Author:** [@Gegata](https://discuss.elastic.co/u/Gegata)\ **Replies:** 6\ **Last updated:** [December 22, 2023, 12:30pm UTC](https://discuss.elastic.co/t/co-elastic-clients-elasticsearch-core-bulkrequest-does-not-work-against-the-elasticsearch-8-11/349769 "2023-12-22T12:30:29Z")
The issue: After the upgrade of our Elasticsearch server from version 8.6 to version 8.11 one of our services stopped working. The following errors we are receiving on this BulkRequest: POST /\_bulk \[{"update":{"\_id":"… --- ## [Kibana doesn't respond when I create Elastic AI Assistant](https://discuss.elastic.co/t/kibana-doesnt-respond-when-i-create-elastic-ai-assistant/349854)
**Author:** [@xjieup](https://discuss.elastic.co/u/xjieup)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 11:25am UTC](https://discuss.elastic.co/t/kibana-doesnt-respond-when-i-create-elastic-ai-assistant/349854 "2023-12-22T11:25:27Z")
I am used Elasticsearch version 8.11.3. When I try to create an Elastic AI Assistant and click the Add Generative AI Connector button, Kibana gives an error "\[ERROR\]\[http\] 500 Server Error". Why? What can I try. --- ## [The remote web server is affected by a cross-site scripting vulnerability](https://discuss.elastic.co/t/the-remote-web-server-is-affected-by-a-cross-site-scripting-vulnerability/349840)
**Author:** [@Kesavan](https://discuss.elastic.co/u/Kesavan)\ **Replies:** 1\ **Last updated:** [December 22, 2023, 11:23am UTC](https://discuss.elastic.co/t/the-remote-web-server-is-affected-by-a-cross-site-scripting-vulnerability/349840 "2023-12-22T11:23:25Z")
In Our QA system we are facing the below security scan finding. Scanning tool used: nessus Above image text: |Medium|172.16.1.218|tcp|9201|Web Server Generic XSS|The remote web server is affected by a cross-site s… --- ## [What's the new FilterAggregator in the java client 8](https://discuss.elastic.co/t/whats-the-new-filteraggregator-in-the-java-client-8/349737)
**Author:** [@Darth\_vader\_22](https://discuss.elastic.co/u/Darth_vader_22)\ **Replies:** 3\ **Last updated:** [December 22, 2023, 8:36am UTC](https://discuss.elastic.co/t/whats-the-new-filteraggregator-in-the-java-client-8/349737 "2023-12-22T08:36:24Z")
hello guys , i'm having hard times trying to find a way to create a FilterAggregationBuilder in the new java client 8.11 , if anyone could point me te the solution i'll be grateful FiltersAggregationBuilder agg… --- ## [Dec 22nd, 2023: \[EN\] Santa Claus Meets GenAI: Deciphering Handwritten Christmas Letters with LLM, LangChain and Elasticsearch](https://discuss.elastic.co/t/dec-22nd-2023-en-santa-claus-meets-genai-deciphering-handwritten-christmas-letters-with-llm-langchain-and-elasticsearch/347311)
**Author:** [@Alex\_Salgado-Elastic](https://discuss.elastic.co/u/Alex_Salgado-Elastic)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-22nd-2023-en-santa-claus-meets-genai-deciphering-handwritten-christmas-letters-with-llm-langchain-and-elasticsearch/347311 "2023-12-22T08:00:37Z")
This post is also available in portuguese. In the heart of the North Pole, Santa's team of elves faced a formidable logistical challenge: how to handle millions of letters from children around the world. With a deter… --- ## [Dec 22nd, 2023: \[PT\] Papai Noel Encontra a IA Generativa: Decifrando Cartas de Natal Escritas à Mão com LLM, LangChain e Elasticsearch](https://discuss.elastic.co/t/dec-22nd-2023-pt-papai-noel-encontra-a-ia-generativa-decifrando-cartas-de-natal-escritas-a-mao-com-llm-langchain-e-elasticsearch/347310)
**Author:** [@Alex\_Salgado-Elastic](https://discuss.elastic.co/u/Alex_Salgado-Elastic)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-22nd-2023-pt-papai-noel-encontra-a-ia-generativa-decifrando-cartas-de-natal-escritas-a-mao-com-llm-langchain-e-elasticsearch/347310 "2023-12-22T08:00:37Z")
This post is also available in english. No coração do Polo Norte, a equipe de duendes de Papai Noel enfrentava um desafio logístico formidável: como lidar com milhões de cartas de crianças de todo o mundo. Com um olh… --- ## [Index distribution clarification](https://discuss.elastic.co/t/index-distribution-clarification/349835)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 1\ **Last updated:** [December 22, 2023, 2:20am UTC](https://discuss.elastic.co/t/index-distribution-clarification/349835 "2023-12-22T02:20:05Z")
I am trying to add a node in my cluster running on 7.17x with 3 existing nodes ( master eligible ), the new 4th node is data only node. I am seeing new index have all primary shards allocated to 1 node, shouldn't they b… --- ## [대시보드에서 각 패널별로 날짜를 고정하는 방법](https://discuss.elastic.co/t/topic/349834)
**Author:** [@kindah7469](https://discuss.elastic.co/u/kindah7469)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 1:12am UTC](https://discuss.elastic.co/t/topic/349834 "2023-12-22T01:12:04Z")
대시보드에서 데이터를 시각화 할때 2023년이면 2023년부터의 data를 보여주고, 2024년이면 2024년의 data를 보여주는 방법이 궁금합니다. 패널에도 커스텀 필터가 있고 대시보드에도 필터가 있어서 헷갈리고 어렵네요 ㅜㅜ --- ## [Does creating a Field Alias requires reindexing?](https://discuss.elastic.co/t/does-creating-a-field-alias-requires-reindexing/349820)
**Author:** [@HotPocket](https://discuss.elastic.co/u/HotPocket)\ **Replies:** 1\ **Last updated:** [December 21, 2023, 11:35pm UTC](https://discuss.elastic.co/t/does-creating-a-field-alias-requires-reindexing/349820 "2023-12-21T23:35:36Z")
Typically modifying the index mapping requires reindexing existing data. I'm look at reference in the documentation whether creating Field Alias does or does not require reindexing. Is it confirmed that if I modify the i… --- ## [Logstash xml input plugin - parsing log4net:event](https://discuss.elastic.co/t/logstash-xml-input-plugin-parsing-log4net-event/349817)
**Author:** [@pumiki](https://discuss.elastic.co/u/pumiki)\ **Replies:** 4\ **Last updated:** [December 21, 2023, 10:04pm UTC](https://discuss.elastic.co/t/logstash-xml-input-plugin-parsing-log4net-event/349817 "2023-12-21T22:04:50Z")
Hello, log4net generates xml file. every event is stored in xml element called log4net:event. The issue is that logstash cant parse the element with the ":" in it. any idea ? The xml \\… --- ## [Kibana Security CVE - Building 8.9.0 docker distributable](https://discuss.elastic.co/t/kibana-security-cve-building-8-9-0-docker-distributable/349409)
**Author:** [@breno.andrade](https://discuss.elastic.co/u/breno.andrade)\ **Replies:** 5\ **Last updated:** [December 21, 2023, 9:33pm UTC](https://discuss.elastic.co/t/kibana-security-cve-building-8-9-0-docker-distributable/349409 "2023-12-21T21:33:24Z")
Hi there, Due to a security fault, I need to patchback this Kibana 8.11.1 fix: The product is already shipped and we can't upversion to 8.11.1 at this moment so we want to manage our own Kibana 8.9.0 build with this f… --- ## [Cant parse xml file generated with log4net using logstash](https://discuss.elastic.co/t/cant-parse-xml-file-generated-with-log4net-using-logstash/349728)
**Author:** [@pumiki](https://discuss.elastic.co/u/pumiki)\ **Replies:** 5\ **Last updated:** [December 21, 2023, 8:18pm UTC](https://discuss.elastic.co/t/cant-parse-xml-file-generated-with-log4net-using-logstash/349728 "2023-12-21T20:18:02Z")
Hello, I have c# app that logs xml file using log4net and log4net.Layout.XmlLayout (see configuration below). The generated log events contains message ang name-value collection: \\ **Author:** [@Julia\_Dai](https://discuss.elastic.co/u/Julia_Dai)\ **Replies:** 0\ **Last updated:** [December 21, 2023, 6:57pm UTC](https://discuss.elastic.co/t/default-dynamic-template-uses-enum-for-text-fields-instead-of-keyword/349821 "2023-12-21T18:57:06Z") We're using Elasticsearch dynamic mapping for our indexes, but for some reason our indexes are mapping text fields to enum sub fields instead of keyword sub fields like it says in the docs (Dynamic field mapping | Elasti… --- ## [Elastic\_Log\_Kibana\_v7.17.15](https://discuss.elastic.co/t/elastic-log-kibana-v7-17-15/349732)
**Author:** [@sossoulokoariel](https://discuss.elastic.co/u/sossoulokoariel)\ **Replies:** 18\ **Last updated:** [December 21, 2023, 6:17pm UTC](https://discuss.elastic.co/t/elastic-log-kibana-v7-17-15/349732 "2023-12-21T18:17:30Z")
Welcome to Elastic's Discussion Forums! I find myself confronted with this error in my log kibana. When I connect to the interface I get the message: "Kibana is not yet". Even though all my services are active. Please he… --- ## [Locator.click: Timeout 50000ms exceeded. problem in a synthetic monitor](https://discuss.elastic.co/t/locator-click-timeout-50000ms-exceeded-problem-in-a-synthetic-monitor/349808)
**Author:** [@pagliardini](https://discuss.elastic.co/u/pagliardini)\ **Replies:** 1\ **Last updated:** [December 21, 2023, 5:44pm UTC](https://discuss.elastic.co/t/locator-click-timeout-50000ms-exceeded-problem-in-a-synthetic-monitor/349808 "2023-12-21T17:44:50Z")
Hello, I am having problems with a synthetic monitor. is this step step('Click internal:text="Available domain"i', async () =\> { await page1.getByText('Available domain').click(); await page1.getByText('Register').… --- ## [Export aggregated reports into Postgres](https://discuss.elastic.co/t/export-aggregated-reports-into-postgres/349806)
**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\ **Replies:** 2\ **Last updated:** [December 21, 2023, 5:42pm UTC](https://discuss.elastic.co/t/export-aggregated-reports-into-postgres/349806 "2023-12-21T17:42:32Z")
Hello, I am indexing data into an Elasticsearch cluster (of one node) based on events associated with different devices, each identified by an ID. Many events can occur during the day. At the end of each day, I would li… [Previous page](https://discuss.elastic.co/latest.md?page=446) [Next page](https://discuss.elastic.co/latest.md?page=448)