# Latest **URL:** https://discuss.elastic.co/latest.md?page=795 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 796 --- ## [\[URGENT\] Corpora Definiton , no base-url defined || Indexing Local dump.json](https://discuss.elastic.co/t/urgent-corpora-definiton-no-base-url-defined-indexing-local-dump-json/324515)
**Author:** [@Sriram\_Kumar](https://discuss.elastic.co/u/Sriram_Kumar)\ **Replies:** 6\ **Last updated:** [February 6, 2023, 9:32am UTC](https://discuss.elastic.co/t/urgent-corpora-definiton-no-base-url-defined-indexing-local-dump-json/324515 "2023-02-06T09:32:29Z")
Hi I am very new to esRally , I tried finding the similar topic but couldn't . Any help would be really appreciated. So , I have hosted a local es on docker. version : 8.5.2 , single node . I want to do benchmarking us… --- ## [java.security.AccessControlException: access denied (\\"java.net.SocketPermission\\" \\"localhost:0\\" \\"listen,resolve\\")](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-java-net-socketpermission-localhost-0-listen-resolve/324777)
**Author:** [@hitlll](https://discuss.elastic.co/u/hitlll)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 9:08am UTC](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-java-net-socketpermission-localhost-0-listen-resolve/324777 "2023-02-06T09:08:35Z")
I have configured SocketPermission ("localhost: 0", "listen, resolve"), but this error will still be reported. Please help me solve it. Thanks! --- ## [Audit logs stop on certain nodes in cluster](https://discuss.elastic.co/t/audit-logs-stop-on-certain-nodes-in-cluster/324519)
**Author:** [@ryuujin](https://discuss.elastic.co/u/ryuujin)\ **Replies:** 7\ **Last updated:** [February 6, 2023, 8:19am UTC](https://discuss.elastic.co/t/audit-logs-stop-on-certain-nodes-in-cluster/324519 "2023-02-06T08:19:39Z")
Hello! I have a production cluster running 20 nodes that I would like to configure audit logs for. Everything seems to be running correctly on 3 nodes, on the rest it stops logging events. When I restart the service on … --- ## [How to Differentiate Elastic Agent with same hostname](https://discuss.elastic.co/t/how-to-differentiate-elastic-agent-with-same-hostname/324763)
**Author:** [@OmFJ](https://discuss.elastic.co/u/OmFJ)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 8:01am UTC](https://discuss.elastic.co/t/how-to-differentiate-elastic-agent-with-same-hostname/324763 "2023-02-06T08:01:15Z")
Hi Everyone, I have multiple CentOS 7 running on VM. What i am trying to do is to monitor processes or services within each host. the problem is that all my host has default hostname. i already placed tags in fleet menu… --- ## [Required Privilege in Microsoft SQL Server to Connect With Elastic Integration and Logstash JDBC Plugin](https://discuss.elastic.co/t/required-privilege-in-microsoft-sql-server-to-connect-with-elastic-integration-and-logstash-jdbc-plugin/324510)
**Author:** [@OmFJ](https://discuss.elastic.co/u/OmFJ)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 7:13am UTC](https://discuss.elastic.co/t/required-privilege-in-microsoft-sql-server-to-connect-with-elastic-integration-and-logstash-jdbc-plugin/324510 "2023-02-06T07:13:16Z")
Hi Everyone, i would like to ask related with Microsoft SQL Integration and JDBC Plugin in logstash. as we know we need username and password to access the database with JDBC or Microsoft SQL Integration. my question wou… --- ## [Snapshot issue when running policy using Alibaba cloud S3](https://discuss.elastic.co/t/snapshot-issue-when-running-policy-using-alibaba-cloud-s3/324731)
**Author:** [@h.allaoui](https://discuss.elastic.co/u/h.allaoui)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 6:41am UTC](https://discuss.elastic.co/t/snapshot-issue-when-running-policy-using-alibaba-cloud-s3/324731 "2023-02-06T06:41:35Z")
Hi Community, I setup a repo using Alibaba cloud S3 storage and when I run an immediate snapshot it is working but when I run a snapshot policy based on that repo I am getting below error. { "type": "repository\_excep… --- ## [Vega: Set a text for empty data set](https://discuss.elastic.co/t/vega-set-a-text-for-empty-data-set/324758)
**Author:** [@Irwan\_Kurniawan](https://discuss.elastic.co/u/Irwan_Kurniawan)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 6:38am UTC](https://discuss.elastic.co/t/vega-set-a-text-for-empty-data-set/324758 "2023-02-06T06:38:55Z")
Actually my condition same with this thread but when I try, it doesn't work for me. I did the filter transform and when there's no rows that shown after the transform, I want to make a static text to inform that. --- ## [Copy only Index Mapping from one cluster to another without the data](https://discuss.elastic.co/t/copy-only-index-mapping-from-one-cluster-to-another-without-the-data/324411)
**Author:** [@dadiasish](https://discuss.elastic.co/u/dadiasish)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 6:37am UTC](https://discuss.elastic.co/t/copy-only-index-mapping-from-one-cluster-to-another-without-the-data/324411 "2023-02-06T06:37:11Z")
Hi, I have a cluster which has index mappings and data in it. I'm currently creating a new cluster where I have different set of data which need to be ingested with the same mappings like in the previous cluster. So, … --- ## [Can I search elastic keys with wildcard or substring](https://discuss.elastic.co/t/can-i-search-elastic-keys-with-wildcard-or-substring/324754)
**Author:** [@sarthik](https://discuss.elastic.co/u/sarthik)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 6:32am UTC](https://discuss.elastic.co/t/can-i-search-elastic-keys-with-wildcard-or-substring/324754 "2023-02-06T06:32:15Z")
I have the following patterns as keys in my data stored in elk indexes: \* Name \* \_name \* preffered\_name \* first\_name \* last\_name I need to query these keys, but the key names are not fixed, so need to search keys based… --- ## [Getting cluster security error after login](https://discuss.elastic.co/t/getting-cluster-security-error-after-login/324463)
**Author:** [@Kamal\_Khandelwal](https://discuss.elastic.co/u/Kamal_Khandelwal)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 6:05am UTC](https://discuss.elastic.co/t/getting-cluster-security-error-after-login/324463 "2023-02-06T06:05:03Z")
getting this error whenever i try to login, can someone please help me action \[cluster:monitor/main\] is unauthorized for user \[kamal\] with effective roles (assigned roles \[monitoring,network\] were not found), this a… --- ## [Azure Ad SSO login does not capture User context](https://discuss.elastic.co/t/azure-ad-sso-login-does-not-capture-user-context/324432)
**Author:** [@sarthik](https://discuss.elastic.co/u/sarthik)\ **Replies:** 4\ **Last updated:** [February 6, 2023, 5:21am UTC](https://discuss.elastic.co/t/azure-ad-sso-login-does-not-capture-user-context/324432 "2023-02-06T05:21:04Z")
I am monitoring a JAVA application using Elasticsearch APM which user Microsoft SSO login using Azure AD on top of simple user password based login. While using normal login (user password based), the user context i.e u… --- ## [Elasticsearch overview - Indexingexing Latency - no data](https://discuss.elastic.co/t/elasticsearch-overview-indexingexing-latency-no-data/319856)
**Author:** [@Willliam](https://discuss.elastic.co/u/Willliam)\ **Replies:** 3\ **Last updated:** [February 6, 2023, 3:39am UTC](https://discuss.elastic.co/t/elasticsearch-overview-indexingexing-latency-no-data/319856 "2023-02-06T03:39:59Z")
es version: v8.1.3 kibana version: v8.1.3 monitory tpye: self monitoring Elasticsearch overview - Indexingexing Latency - no data please check the screenshot --- ## [Filebeat stopped working after an hour after the install](https://discuss.elastic.co/t/filebeat-stopped-working-after-an-hour-after-the-install/324538)
**Author:** [@Joshua\_John\_Consulta](https://discuss.elastic.co/u/Joshua_John_Consulta)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 3:08am UTC](https://discuss.elastic.co/t/filebeat-stopped-working-after-an-hour-after-the-install/324538 "2023-02-06T03:08:44Z")
Here's the error from the terminal: × filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Loaded: loaded (/lib/systemd/system/filebeat.service; enabled; preset: enabled) Activ… --- ## [Content archival and retrieval app built on ELK](https://discuss.elastic.co/t/content-archival-and-retrieval-app-built-on-elk/324695)
**Author:** [@ryendluri](https://discuss.elastic.co/u/ryendluri)\ **Replies:** 1\ **Last updated:** [February 5, 2023, 11:11pm UTC](https://discuss.elastic.co/t/content-archival-and-retrieval-app-built-on-elk/324695 "2023-02-05T23:11:58Z")
is there an existing application that supports archiving data and retrieving data in a non-profit context? Thanks --- ## [ElasticSearch Snapshotting using Azure Repository Plugin - Storage Account with Azure DNS Zone](https://discuss.elastic.co/t/elasticsearch-snapshotting-using-azure-repository-plugin-storage-account-with-azure-dns-zone/324421)
**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\ **Replies:** 0\ **Last updated:** [February 1, 2023, 12:17pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshotting-using-azure-repository-plugin-storage-account-with-azure-dns-zone/324421 "2023-02-01T12:17:03Z")
I'm using the Azure Repository plugin to take snapshot backups. I created a new Storage Account with the "Azure DNS Zone" option in the networking tab as shown :- If we select this option, then snapshot registration… --- ## [Elasticsearch-reconfigure-node errors and aborts](https://discuss.elastic.co/t/elasticsearch-reconfigure-node-errors-and-aborts/324724)
**Author:** [@H\_K7](https://discuss.elastic.co/u/H_K7)\ **Replies:** 1\ **Last updated:** [February 5, 2023, 10:20pm UTC](https://discuss.elastic.co/t/elasticsearch-reconfigure-node-errors-and-aborts/324724 "2023-02-05T22:20:06Z")
it errored on the 4th node I ran, previous 3 nodes when I ran reconfigure node with the token it didn't error out. error message ERROR: Aborting enrolling to cluster. Could not communicate with the node on any of the a… --- ## [401 Error : missing authentication credentials : elasticsearch version 7.6.2](https://discuss.elastic.co/t/401-error-missing-authentication-credentials-elasticsearch-version-7-6-2/324618)
**Author:** [@abhay14](https://discuss.elastic.co/u/abhay14)\ **Replies:** 2\ **Last updated:** [February 5, 2023, 10:18pm UTC](https://discuss.elastic.co/t/401-error-missing-authentication-credentials-elasticsearch-version-7-6-2/324618 "2023-02-05T22:18:30Z")
I have followed the below wiki to enable the basic authentication Elastic verion 7.6 I am not sure how to configure default the username and password so But I am getting the error , curl -s --cacert config/certs/ca/c… --- ## [DEV TOOLS - Group indexes into 1](https://discuss.elastic.co/t/dev-tools-group-indexes-into-1/324666)
**Author:** [@vfeydel](https://discuss.elastic.co/u/vfeydel)\ **Replies:** 2\ **Last updated:** [February 5, 2023, 10:15pm UTC](https://discuss.elastic.co/t/dev-tools-group-indexes-into-1/324666 "2023-02-05T22:15:22Z")
Hi, I have 66 index with a similar structure ike for example : abc\_1, abc\_2, abc\_3 .... abc\_n. They have a commun field name "identifiant". The id 1 may be in 1 or 2 or n index or only one and the same for the other id.… --- ## [Can't find my index](https://discuss.elastic.co/t/cant-find-my-index/324686)
**Author:** [@Martin\_Sander](https://discuss.elastic.co/u/Martin_Sander)\ **Replies:** 1\ **Last updated:** [February 5, 2023, 10:11pm UTC](https://discuss.elastic.co/t/cant-find-my-index/324686 "2023-02-05T22:11:22Z")
I have a problem finding my created intex in Kibana/Search App engine. I have an API with a bunch of articles and already created an index with a python script. When I browse 127.0.0.1:9200/articles I do get a response … --- ## [Crawling Protected websites](https://discuss.elastic.co/t/crawling-protected-websites/324504)
**Author:** [@aruntvla](https://discuss.elastic.co/u/aruntvla)\ **Replies:** 0\ **Last updated:** [February 2, 2023, 6:15am UTC](https://discuss.elastic.co/t/crawling-protected-websites/324504 "2023-02-02T06:15:14Z")
Hi Team, I want to crawl websites having IAM authentication/Wordpress login. Currently I am getting error when validating the domain under App Search under Cloud Trial Version. Is there any need to achieve this to elasti… --- ## [Backward Pagination with Elasticsearch Aggregation with Spring data Elasticsearch](https://discuss.elastic.co/t/backward-pagination-with-elasticsearch-aggregation-with-spring-data-elasticsearch/324607)
**Author:** [@Anuja\_Brahmankar](https://discuss.elastic.co/u/Anuja_Brahmankar)\ **Replies:** 1\ **Last updated:** [February 5, 2023, 4:36pm UTC](https://discuss.elastic.co/t/backward-pagination-with-elasticsearch-aggregation-with-spring-data-elasticsearch/324607 "2023-02-05T16:36:47Z")
Hi , I have aggregation Query with Composite Aggregation builder with spring data elasticsearch which provides after\_key value,which return last aggregated count with That I am able do forward pagination. Sample Query: … --- ## [Can you get different results from replica and primary if queried at the same time?](https://discuss.elastic.co/t/can-you-get-different-results-from-replica-and-primary-if-queried-at-the-same-time/324732)
**Author:** [@Diya\_Al\_Mahameed](https://discuss.elastic.co/u/Diya_Al_Mahameed)\ **Replies:** 6\ **Last updated:** [February 5, 2023, 4:20pm UTC](https://discuss.elastic.co/t/can-you-get-different-results-from-replica-and-primary-if-queried-at-the-same-time/324732 "2023-02-05T16:20:14Z")
in our system we get different responses and I speculate it caused by "Adaptive Replica Selection". the two queries are different but they should fetch the same document . The first query check if the document have bee… --- ## [Query nested array having n matching elements](https://discuss.elastic.co/t/query-nested-array-having-n-matching-elements/324744)
**Author:** [@Frankk](https://discuss.elastic.co/u/Frankk)\ **Replies:** 0\ **Last updated:** [February 5, 2023, 4:00pm UTC](https://discuss.elastic.co/t/query-nested-array-having-n-matching-elements/324744 "2023-02-05T16:00:24Z")
Is this possible? I am indexing web site user activity focusing on user comments across multiple web sites and databases. I am "fairly" new to ES and am addressing quite a large problem. So basic question... Along wi… --- ## [Invalid FieldReference](https://discuss.elastic.co/t/invalid-fieldreference/324365)
**Author:** [@ztony](https://discuss.elastic.co/u/ztony)\ **Replies:** 2\ **Last updated:** [February 5, 2023, 3:14pm UTC](https://discuss.elastic.co/t/invalid-fieldreference/324365 "2023-02-05T15:14:19Z")
Does anyone see this "Invalid FieldReference" error? we added some mutations to the pipeline, but new field with the same error came out. see the error log below: An unexpected error occurred! {:error=\>org.logstash.Fiel… --- ## [Http filter Vs elasticsearch ouput](https://discuss.elastic.co/t/http-filter-vs-elasticsearch-ouput/324718)
**Author:** [@mostafaelsayed](https://discuss.elastic.co/u/mostafaelsayed)\ **Replies:** 8\ **Last updated:** [February 5, 2023, 10:41am UTC](https://discuss.elastic.co/t/http-filter-vs-elasticsearch-ouput/324718 "2023-02-05T10:41:10Z")
Hello, I want to capture and process failures related to Elasticsearch being down and Elasticsearch output does not offer a way to handle this so, I want to do a POC and experiment with indexing events into Elasticsearc… --- ## [Blocked by: \[TOO\_MANY\_REQUESTS/12/disk usage exceeded flood-stage watermark, index has read-only-allow-delete block\]](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 2\ **Last updated:** [February 5, 2023, 5:31am UTC](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725 "2023-02-05T05:31:13Z")
Hi, I reached disk usage of 90%. I increased the disk space and now have 80% usage: /dev/root 562G 445G 118G 80% / I've tried to run the commands to remove the read only blocker: PUT \_cluster/settings { "… --- ## [Logstash crash when starting after messing the queue files](https://discuss.elastic.co/t/logstash-crash-when-starting-after-messing-the-queue-files/324708)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 2\ **Last updated:** [February 5, 2023, 3:34am UTC](https://discuss.elastic.co/t/logstash-crash-when-starting-after-messing-the-queue-files/324708 "2023-02-05T03:34:10Z")
I've just upgraded Logstash minor version from 7.13 to 7.17.9, but it doesn't restart, erroring about inability to create queues (there was a forced stop of Logstash, so I assume the files are corrupted). I tried to del… --- ## [Average on keyword of a nested object in Kibana Lens?](https://discuss.elastic.co/t/average-on-keyword-of-a-nested-object-in-kibana-lens/324716)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 4\ **Last updated:** [February 5, 2023, 1:51am UTC](https://discuss.elastic.co/t/average-on-keyword-of-a-nested-object-in-kibana-lens/324716 "2023-02-05T01:51:57Z")
I'm working with Kibana Lens and I don't understand the results I'm getting. I started by running these commands in Dev Tools on a completely empty index called avg1 POST avg1/\_doc { "order\_items": \[ {"product":… --- ## [SSL certificate embedding in winlogbeat or auditbeat - Need example](https://discuss.elastic.co/t/ssl-certificate-embedding-in-winlogbeat-or-auditbeat-need-example/324720)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 0\ **Last updated:** [February 4, 2023, 11:18pm UTC](https://discuss.elastic.co/t/ssl-certificate-embedding-in-winlogbeat-or-auditbeat-need-example/324720 "2023-02-04T23:18:33Z")
I'd like to know if someone can present a working example of their Beats config for Beats to Logstash with SSL, but using the embedding the certificate in the beats config as described in Configure SSL | Winlogbeat Refer… --- ## [Possible Bug: Unable to fetch term vectors after applying filter on ingested document](https://discuss.elastic.co/t/possible-bug-unable-to-fetch-term-vectors-after-applying-filter-on-ingested-document/324662)
**Author:** [@Ancel](https://discuss.elastic.co/u/Ancel)\ **Replies:** 1\ **Last updated:** [February 4, 2023, 5:19pm UTC](https://discuss.elastic.co/t/possible-bug-unable-to-fetch-term-vectors-after-applying-filter-on-ingested-document/324662 "2023-02-04T17:19:36Z")
Hi all. Situation: I am using Elasticsearch 8.4.1. I am ingesting a document, then via applying the apostrophe token filter, I want to remove every character from the apostrophe to the end of the term, apply a couple of… [Previous page](https://discuss.elastic.co/latest.md?page=794) [Next page](https://discuss.elastic.co/latest.md?page=796)