# Latest **URL:** https://discuss.elastic.co/latest.md?page=817 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 818 --- ## [Elasticsearch service keep restarting time to time](https://discuss.elastic.co/t/elasticsearch-service-keep-restarting-time-to-time/323387)
**Author:** [@Gihan\_Indrajith](https://discuss.elastic.co/u/Gihan_Indrajith)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 8:28am UTC](https://discuss.elastic.co/t/elasticsearch-service-keep-restarting-time-to-time/323387 "2023-01-18T08:28:46Z")
Observed that elasticsearch service keep restarting time to time. Node has 16GB memory and allocated 8GB for the heap. Elasticsearch version - 7.13 Below is the log. This is one of the nodes from 5 node cluster. \[2023… --- ## [Logstash Pipeline terminate after one output plugin error](https://discuss.elastic.co/t/logstash-pipeline-terminate-after-one-output-plugin-error/323386)
**Author:** [@Bert\_Van\_der\_Heyden](https://discuss.elastic.co/u/Bert_Van_der_Heyden)\ **Replies:** 0\ **Last updated:** [January 18, 2023, 7:59am UTC](https://discuss.elastic.co/t/logstash-pipeline-terminate-after-one-output-plugin-error/323386 "2023-01-18T07:59:16Z")
Context: Logstash 8.6.0 \[2023-01-18T08:07:30,522\]\[ERROR\]\[logstash.javapipeline \]\[test\_pipeline\] Pipeline worker error, the pipeline will be stopped {:pipeline\_id=\>"test\_pipeline", :error=\>"(IOError) An established co… --- ## [Error regarding updation of dashboard through python using elasticsearch-dsl library](https://discuss.elastic.co/t/error-regarding-updation-of-dashboard-through-python-using-elasticsearch-dsl-library/323383)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 0\ **Last updated:** [January 18, 2023, 7:13am UTC](https://discuss.elastic.co/t/error-regarding-updation-of-dashboard-through-python-using-elasticsearch-dsl-library/323383 "2023-01-18T07:13:32Z")
This is the error that I am getting while I am trying to update my Kibana dashboard using the elasticsearchdsl library for python: b'{"statusCode":404,"error":"Not Found","message":"Saved object \[visualization/166353692… --- ## [Unable to convert date to specified timezone](https://discuss.elastic.co/t/unable-to-convert-date-to-specified-timezone/322398)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 10\ **Last updated:** [January 18, 2023, 6:46am UTC](https://discuss.elastic.co/t/unable-to-convert-date-to-specified-timezone/322398 "2023-01-18T06:46:18Z")
Hi All, I am trying to convert the date UTC time to different timezone (Asia/Tokyo) in logstash and below is the configuration I have tried, input { stdin { id =\> "logstash-rae" add\_field =\> { "log\_or… --- ## [Indices generated lately than real time several hours](https://discuss.elastic.co/t/indices-generated-lately-than-real-time-several-hours/323206)
**Author:** [@Anh\_Nguyen](https://discuss.elastic.co/u/Anh_Nguyen)\ **Replies:** 12\ **Last updated:** [January 18, 2023, 6:44am UTC](https://discuss.elastic.co/t/indices-generated-lately-than-real-time-several-hours/323206 "2023-01-18T06:44:25Z")
I got some problems with Datastream's Indices Generating. In detail, the indices are generated more lately than real time 1 day or a few hours. I want to have an index for the right date of the generated index but i coul… --- ## [How to run ElasticSearch containers in FIPS 140-2 compliant mode](https://discuss.elastic.co/t/how-to-run-elasticsearch-containers-in-fips-140-2-compliant-mode/323380)
**Author:** [@Vinay\_Chaudhari](https://discuss.elastic.co/u/Vinay_Chaudhari)\ **Replies:** 0\ **Last updated:** [January 18, 2023, 6:08am UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-containers-in-fips-140-2-compliant-mode/323380 "2023-01-18T06:08:55Z")
We self host ES 8.x on AKS using ECK operator. For one of government project, we need to comply with FIPS 140-2. There is some documentation available on the same here but there is no mention what to do while using ECK o… --- ## [Metricbeat' logstash module is NOT working properly (no errors)](https://discuss.elastic.co/t/metricbeat-logstash-module-is-not-working-properly-no-errors/322763)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [January 14, 2023, 3:33pm UTC](https://discuss.elastic.co/t/metricbeat-logstash-module-is-not-working-properly-no-errors/322763 "2023-01-14T15:33:15Z")
Hello World! I'm running same setup: metricbeat.yml and modules.d/logstash-xpack.yml, yet one of the instance everything works fine, yet in another (almost identical) instance it is not working at all: NOT properly wor… --- ## [Which version of Elasticsearch can be migrated to Open search 1.3.6](https://discuss.elastic.co/t/which-version-of-elasticsearch-can-be-migrated-to-open-search-1-3-6/323374)
**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 5:38am UTC](https://discuss.elastic.co/t/which-version-of-elasticsearch-can-be-migrated-to-open-search-1-3-6/323374 "2023-01-18T05:38:00Z")
Hello Team, I wanted to know which version of Elasticsearch can be migrated to Open search 1.3.6, we are using Graylog with Elasticsearch 7.16 and we wanted to move to OS from ES. from Graylog it says that anything bey… --- ## [Got response code '403' contacting Elasticsearch at URL](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url/323368)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [January 18, 2023, 2:27am UTC](https://discuss.elastic.co/t/got-response-code-403-contacting-elasticsearch-at-url/323368 "2023-01-18T02:27:40Z")
Hello World! I'm trying to follow Configuring Security in Logstash | Logstash Reference \[7.17\] | Elastic, specifically these: Configuring Logstash to use Basic Authentication Granting Users Access to the Logstash Indi… --- ## [Has anyone made a "serverless" elasticsearch?](https://discuss.elastic.co/t/has-anyone-made-a-serverless-elasticsearch/168468)
**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\ **Replies:** 4\ **Last updated:** [January 18, 2023, 2:08am UTC](https://discuss.elastic.co/t/has-anyone-made-a-serverless-elasticsearch/168468 "2023-01-18T02:08:00Z")
hello, I'm a big fan of ES and have been using it for years now. Just wondering if anyone has made an attempt to make a serverless approach to ES? Let me expand on what I mean: I personally use Elasticsearch for a pr… --- ## [Elasticsearch kubernetes deployment](https://discuss.elastic.co/t/elasticsearch-kubernetes-deployment/323308)
**Author:** [@Ayyappan](https://discuss.elastic.co/u/Ayyappan)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 1:36am UTC](https://discuss.elastic.co/t/elasticsearch-kubernetes-deployment/323308 "2023-01-18T01:36:09Z")
is it possible to restore the data from the cache once its cleared/overwritten? --- ## [Elastic Search Docker upgrade to latest](https://discuss.elastic.co/t/elastic-search-docker-upgrade-to-latest/323341)
**Author:** [@gjahagir](https://discuss.elastic.co/u/gjahagir)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 1:31am UTC](https://discuss.elastic.co/t/elastic-search-docker-upgrade-to-latest/323341 "2023-01-18T01:31:46Z")
Hi, I'm new to Elasticsearch as well as docker. I spinned up a 3 node elastic cluster following the documentation here I used stack version as 8.0.1 to test the upgrade process. I followed the documentation on upgrade… --- ## [Broken documentation links in Metricbeat modules.d yml files](https://discuss.elastic.co/t/broken-documentation-links-in-metricbeat-modules-d-yml-files/323347)
**Author:** [@AndyPC](https://discuss.elastic.co/u/AndyPC)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 1:27am UTC](https://discuss.elastic.co/t/broken-documentation-links-in-metricbeat-modules-d-yml-files/323347 "2023-01-18T01:27:27Z")
Posting here per instructions to do so before filing a bug on github: All of the modules yml files in metricbeat/modules.d (version 8.6.0) have broken documentation links in the top-of file comment. The links in the do… --- ## [New sidebar menu!](https://discuss.elastic.co/t/new-sidebar-menu/323371)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [January 18, 2023, 12:59am UTC](https://discuss.elastic.co/t/new-sidebar-menu/323371 "2023-01-18T00:59:24Z")
With a new version of Discourse, there is some neat features that are now available. The first one that we have enabled is the new sidebar menu that you should be seeing. This is customisable via your user profile \> Pre… --- ## [On-premises fleet server install: es bad\_certificate](https://discuss.elastic.co/t/on-premises-fleet-server-install-es-bad-certificate/323090)
**Author:** [@dms6978](https://discuss.elastic.co/u/dms6978)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 12:27am UTC](https://discuss.elastic.co/t/on-premises-fleet-server-install-es-bad-certificate/323090 "2023-01-18T00:27:29Z")
I am installing the Fleet server in the on-premises environment. It's all connected, so fleet server is completed with healthy. Then, Elasticsearch is sending an warning called bad\_certificate. Is it because I sent ht… --- ## [The button 'Copy cluster ID' for Kibana is no longer visible](https://discuss.elastic.co/t/the-button-copy-cluster-id-for-kibana-is-no-longer-visible/322982)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 12:05am UTC](https://discuss.elastic.co/t/the-button-copy-cluster-id-for-kibana-is-no-longer-visible/322982 "2023-01-18T00:05:59Z")
I used to copy the Kibana Cluster ID from Elastic Cloud Console, but the button has disappeared! before after --- ## [Excessive denied SMB traffic](https://discuss.elastic.co/t/excessive-denied-smb-traffic/323184)
**Author:** [@Abulfaz](https://discuss.elastic.co/u/Abulfaz)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 12:00am UTC](https://discuss.elastic.co/t/excessive-denied-smb-traffic/323184 "2023-01-18T00:00:55Z")
How should I write Elastic rule that detect if excessive denied SMB traffic from a single host? --- ## [Logstash with ILM configuration](https://discuss.elastic.co/t/logstash-with-ilm-configuration/323363)
**Author:** [@Erates](https://discuss.elastic.co/u/Erates)\ **Replies:** 1\ **Last updated:** [January 17, 2023, 9:39pm UTC](https://discuss.elastic.co/t/logstash-with-ilm-configuration/323363 "2023-01-17T21:39:27Z")
Hi, we have an ELK stack running (I have no say in which version, which is currently 7.x) to get the logs of our applications running in a Kubernetes cluster all combined in 1 place. The applications are pushing their lo… --- ## [Kibana could not perform access check to Enterprise Search](https://discuss.elastic.co/t/kibana-could-not-perform-access-check-to-enterprise-search/321708)
**Author:** [@tavaradhan](https://discuss.elastic.co/u/tavaradhan)\ **Replies:** 3\ **Last updated:** [January 17, 2023, 9:18pm UTC](https://discuss.elastic.co/t/kibana-could-not-perform-access-check-to-enterprise-search/321708 "2023-01-17T21:18:02Z")
hi, I am setting up a self-managed setup (Elasticsearch, Kibana, Enterprise search) for a simple search application. Everything works fine with http. Once I enable ssl on enterprisesearch and on kibana, I get "Unable to… --- ## [Error: disk usage exceeded flood-stage watermark, index has read-only-allow-delete block](https://discuss.elastic.co/t/error-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/323357)
**Author:** [@pmono](https://discuss.elastic.co/u/pmono)\ **Replies:** 5\ **Last updated:** [January 17, 2023, 9:14pm UTC](https://discuss.elastic.co/t/error-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/323357 "2023-01-17T21:14:59Z")
Hello, I'm getting a weird error: \[2023-01-17T18:18:32.398997+00:00\] main.ERROR: Child process failed with message: Elasticsearch engine returned an error response. item id: 20. Error type: "cluster\_block\_exception", r… --- ## [Ingest Pipeline "app\_search\_crawler" not running](https://discuss.elastic.co/t/ingest-pipeline-app-search-crawler-not-running/316833)
**Author:** [@moassafiri](https://discuss.elastic.co/u/moassafiri)\ **Replies:** 6\ **Last updated:** [January 17, 2023, 9:12pm UTC](https://discuss.elastic.co/t/ingest-pipeline-app-search-crawler-not-running/316833 "2023-01-17T21:12:29Z")
Hello! Why would the default Ingest Pipeline in version 8.4 not run? There's not too much information about the conditions to which the pipeline would run, it just says that every document that is found by the crawler … --- ## [More master node?](https://discuss.elastic.co/t/more-master-node/323348)
**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\ **Replies:** 6\ **Last updated:** [January 17, 2023, 8:02pm UTC](https://discuss.elastic.co/t/more-master-node/323348 "2023-01-17T20:02:54Z")
Hello everyone, I explain my context. I am designing an architecture with 18 nodes where everyone can be master (of the 18 nodes, only 1 master remains) if necessary, but I feel that 1 for 17 is too little and I want to… --- ## [Log incoming connection IP?](https://discuss.elastic.co/t/log-incoming-connection-ip/323359)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 2\ **Last updated:** [January 17, 2023, 7:55pm UTC](https://discuss.elastic.co/t/log-incoming-connection-ip/323359 "2023-01-17T19:55:17Z")
Maybe this has been answered before. But I can't seem to find it. Does anybody know how to enable logging in ES to show the IP address an API is invoked from? Things like when an index is created, I see the log with t… --- ## [Cant collapse/fold lengthy fields in Kibana Console](https://discuss.elastic.co/t/cant-collapse-fold-lengthy-fields-in-kibana-console/322229)
**Author:** [@nickchomey](https://discuss.elastic.co/u/nickchomey)\ **Replies:** 1\ **Last updated:** [January 17, 2023, 5:59pm UTC](https://discuss.elastic.co/t/cant-collapse-fold-lengthy-fields-in-kibana-console/322229 "2023-01-17T17:59:49Z")
I am storing some lengthy HTML strings in a binary field (don't need to search it with text and keyword has a 32766 character limit). When I click in Kibana to collapse/fold the field, the button turns red and doesn't do… --- ## [APM transactions with Spring Integration](https://discuss.elastic.co/t/apm-transactions-with-spring-integration/321421)
**Author:** [@Yaneek](https://discuss.elastic.co/u/Yaneek)\ **Replies:** 4\ **Last updated:** [January 17, 2023, 4:56pm UTC](https://discuss.elastic.co/t/apm-transactions-with-spring-integration/321421 "2023-01-17T16:56:32Z")
Hi, I'd like to ask if it's possible to monitor Spring Integration transactions in APM. Adding javaagent to our Spring Boot app works flawlessly and the transactions related to REST API invocation show up very nicely i… --- ## [Elasticsearch Java API client 8.5, does generate the correct format for source ordering for composition aggregation](https://discuss.elastic.co/t/elasticsearch-java-api-client-8-5-does-generate-the-correct-format-for-source-ordering-for-composition-aggregation/323352)
**Author:** [@snguyen](https://discuss.elastic.co/u/snguyen)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 4:55pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-8-5-does-generate-the-correct-format-for-source-ordering-for-composition-aggregation/323352 "2023-01-17T16:55:22Z")
Hi, I am using Elasticsearch Java API client 8.5. I need to be able to specified the order for the sources such as for date histogram aggregation as the source. However the issue is that it generates array as the value … --- ## [Поиск по префиксу и словоформам одновременно](https://discuss.elastic.co/t/topic/323345)
**Author:** [@romixart](https://discuss.elastic.co/u/romixart)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 4:21pm UTC](https://discuss.elastic.co/t/topic/323345 "2023-01-17T16:21:34Z")
У меня есть следующая структура объекта: номер, наименование, список позиций. Список позиций это nested тип, количество позиций в объекте может быть от 0 до N. Наименование и позиции проиндексированы каждой в 2 поля: в… --- ## [Error when trying to install fleet server and elastic agent on Openshift K8s Cluster quickstart](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-and-elastic-agent-on-openshift-k8s-cluster-quickstart/322059)
**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\ **Replies:** 2\ **Last updated:** [January 17, 2023, 4:22pm UTC](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-and-elastic-agent-on-openshift-k8s-cluster-quickstart/322059 "2023-01-17T16:22:34Z")
Hi all. I'm trying to follow the quickstart procedure to get a ECK cluster on a Openshift K8s cluster. I've created a namespace called 'elastic' After that I have downloaded the operator: wget https://download.elasti… --- ## [GROK pattern issue](https://discuss.elastic.co/t/grok-pattern-issue/323330)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 4\ **Last updated:** [January 17, 2023, 4:00pm UTC](https://discuss.elastic.co/t/grok-pattern-issue/323330 "2023-01-17T16:00:54Z")
Hello, I am using filebeat to send logs from a DNS server to logstash before being ingested in Elasticsearch. The same pattern is repeated with two spaces and one space due to the variation in logs over updates which is… --- ## [Change text of Facet input coming from schema](https://discuss.elastic.co/t/change-text-of-facet-input-coming-from-schema/323339)
**Author:** [@Max4](https://discuss.elastic.co/u/Max4)\ **Replies:** 1\ **Last updated:** [January 17, 2023, 3:41pm UTC](https://discuss.elastic.co/t/change-text-of-facet-input-coming-from-schema/323339 "2023-01-17T15:41:59Z")
Hello im implementing Search UI, im using facet components, i have a filter that has two values that come from schemas "offers" and "articles". Since our schema is in english but the website is in German i would like to … [Previous page](https://discuss.elastic.co/latest.md?page=816) [Next page](https://discuss.elastic.co/latest.md?page=818)