# Latest **URL:** https://discuss.elastic.co/latest.md?page=877 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 878 --- ## [Metricbeat docker host process - permission denied](https://discuss.elastic.co/t/metricbeat-docker-host-process-permission-denied/320015)
**Author:** [@Harm](https://discuss.elastic.co/u/Harm)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 8:51am UTC](https://discuss.elastic.co/t/metricbeat-docker-host-process-permission-denied/320015 "2022-11-30T08:51:30Z")
Hi, I'm trying to use a docker container to monitor my host os processes. It looked quited straightforward by mapping the /proc filesystem to the container and pointing the module hostfs setting to the correct directory… --- ## [KafkaException javax.security.auth.login.LoginException on latest logstash version](https://discuss.elastic.co/t/kafkaexception-javax-security-auth-login-loginexception-on-latest-logstash-version/320126)
**Author:** [@Ganesh4](https://discuss.elastic.co/u/Ganesh4)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 8:42am UTC](https://discuss.elastic.co/t/kafkaexception-javax-security-auth-login-loginexception-on-latest-logstash-version/320126 "2022-11-30T08:42:13Z")
ssl.truststore.password = null ssl.truststore.type = JKS transaction.timeout.ms = 60000 transactional.id = null value.serializer = class org.apache.kafka.common.serialization.StringSerializer \[2022-1… --- ## [I cannot sort the aggregation result by the values of the grouped set](https://discuss.elastic.co/t/i-cannot-sort-the-aggregation-result-by-the-values-of-the-grouped-set/320121)
**Author:** [@Emanuel\_Zienecker](https://discuss.elastic.co/u/Emanuel_Zienecker)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 8:36am UTC](https://discuss.elastic.co/t/i-cannot-sort-the-aggregation-result-by-the-values-of-the-grouped-set/320121 "2022-11-30T08:36:11Z")
Example: I have a parent/child relation. The parent are devices, the children are data points. The data points have e.g. temperature values. Now I want to make an aggregation in which I determine the maximum temperature … --- ## [How to use QueryBuilders class for MultiMatchQuery in Elasticsearch 8.x](https://discuss.elastic.co/t/how-to-use-querybuilders-class-for-multimatchquery-in-elasticsearch-8-x/319765)
**Author:** [@Olayode\_possible](https://discuss.elastic.co/u/Olayode_possible)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 7:43am UTC](https://discuss.elastic.co/t/how-to-use-querybuilders-class-for-multimatchquery-in-elasticsearch-8-x/319765 "2022-11-30T07:43:58Z")
Hi everyone, I am a newbie in Elasticseach and am trying out stuff in order to gain more knowledge. I need help converting the below line of code written in Elasticseach 7.x to 8.x standard. any pointers to resources… --- ## [Eliminate Kibana Maps refresh blink](https://discuss.elastic.co/t/eliminate-kibana-maps-refresh-blink/319887)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 4\ **Last updated:** [November 30, 2022, 7:46am UTC](https://discuss.elastic.co/t/eliminate-kibana-maps-refresh-blink/319887 "2022-11-30T07:46:57Z")
Hi, I know it's probably not possible, but is there a way to disable the 'blink' when Kibana Maps does a refresh? If for not all layers, maybe just for selected layers? It would be awesome! --- ## [Elasticsearch ingestnode crashes on a specific document?](https://discuss.elastic.co/t/elasticsearch-ingestnode-crashes-on-a-specific-document/319723)
**Author:** [@shanke](https://discuss.elastic.co/u/shanke)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 6:42am UTC](https://discuss.elastic.co/t/elasticsearch-ingestnode-crashes-on-a-specific-document/319723 "2022-11-30T06:42:07Z")
Hey! I wrote a small application for our company which indexes all documents on our file server with the ingest attachment processor. In 7.x (as an extra plugin) it was working fine, since the change to 8.x (buildin inge… --- ## [Elasti Search failed to connect local host port:9200](https://discuss.elastic.co/t/elasti-search-failed-to-connect-local-host-port-9200/319958)
**Author:** [@Naga\_rajan](https://discuss.elastic.co/u/Naga_rajan)\ **Replies:** 4\ **Last updated:** [November 30, 2022, 6:23am UTC](https://discuss.elastic.co/t/elasti-search-failed-to-connect-local-host-port-9200/319958 "2022-11-30T06:23:22Z")
Hi Everyone, I Installed eck-operator, elasticsearch and kibana using this chart - \[helm-charts/elasticsearch at main · elastic/helm-charts · GitHub\] successfully deployed. kibana ui user page also coming. But while ex… --- ## [Dropdown filter does not apply on chart created using timelion](https://discuss.elastic.co/t/dropdown-filter-does-not-apply-on-chart-created-using-timelion/320109)
**Author:** [@Zaid\_Raza](https://discuss.elastic.co/u/Zaid_Raza)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 6:18am UTC](https://discuss.elastic.co/t/dropdown-filter-does-not-apply-on-chart-created-using-timelion/320109 "2022-11-30T06:18:11Z")
Hi, I have created a chart using Timelion on canvas. kibana |filters | timelion query=".es(index='traces-apm\*,apm-\*,logs-apm\*,apm-\*,metrics-apm\*,apm-\*',metric=avg:transaction.duration.us, timefield=@timestamp,q=' \_e… --- ## [Unable to start logstash service Windows server 64 bit](https://discuss.elastic.co/t/unable-to-start-logstash-service-windows-server-64-bit/319363)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 8\ **Last updated:** [November 30, 2022, 5:26am UTC](https://discuss.elastic.co/t/unable-to-start-logstash-service-windows-server-64-bit/319363 "2022-11-30T05:26:05Z")
Hi, I have downloaded and unzipped logstash and tried to install it as service using nssm. Logstash gets successfully installed but when i try to start the service it is showing as below screenshot. This is the erro… --- ## [Enhancements for ECE system containers or memory and CPU contention/limit aware](https://discuss.elastic.co/t/enhancements-for-ece-system-containers-or-memory-and-cpu-contention-limit-aware/320103)
**Author:** [@florinsfetea](https://discuss.elastic.co/u/florinsfetea)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 3:24am UTC](https://discuss.elastic.co/t/enhancements-for-ece-system-containers-or-memory-and-cpu-contention-limit-aware/320103 "2022-11-30T03:24:13Z")
Hello Elastic people, Today ECE assumes it has the entire host for its use. For cloud and VMs that might be ok but for on-prem and future systems with a lot of resources it might not be. The future shows that more core… --- ## [Disk storage per node](https://discuss.elastic.co/t/disk-storage-per-node/319551)
**Author:** [@qksjdhi1212](https://discuss.elastic.co/u/qksjdhi1212)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:18am UTC](https://discuss.elastic.co/t/disk-storage-per-node/319551 "2022-11-30T01:18:22Z")
I read this article (Benchmarking and sizing your Elasticsearch cluster for logs and metrics | Elastic Blog) It introduced how to calculate total data, total storage and the number of data nodes in my cluster \* Total D… --- ## [Create Python elasticsearch connection](https://discuss.elastic.co/t/create-python-elasticsearch-connection/319690)
**Author:** [@3482bd7cf80a5a43e5a9](https://discuss.elastic.co/u/3482bd7cf80a5a43e5a9)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:17am UTC](https://discuss.elastic.co/t/create-python-elasticsearch-connection/319690 "2022-11-30T01:17:29Z")
Hi I'm using python client:Python Elasticsearch Client — Elasticsearch 8.0.0 documentation to initiate API calls to my ES hosted behind AWS API gateway. Can i use the SDK to talk to my ES stack if mTLS has been enabled… --- ## [Snapshot error - The specified bucket does not exist](https://discuss.elastic.co/t/snapshot-error-the-specified-bucket-does-not-exist/319662)
**Author:** [@dverissimola](https://discuss.elastic.co/u/dverissimola)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:15am UTC](https://discuss.elastic.co/t/snapshot-error-the-specified-bucket-does-not-exist/319662 "2022-11-30T01:15:02Z")
Hello, I have a ECK cluster and when I try to register a repository but when I click on "verify repository" I receive an error saying that the bucket don't exist: The bucket exists and I can access it from the pods… --- ## [The first request on my java application the search is slow but took is small and then it become quick](https://discuss.elastic.co/t/the-first-request-on-my-java-application-the-search-is-slow-but-took-is-small-and-then-it-become-quick/319715)
**Author:** [@MonkAscetic](https://discuss.elastic.co/u/MonkAscetic)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:14am UTC](https://discuss.elastic.co/t/the-first-request-on-my-java-application-the-search-is-slow-but-took-is-small-and-then-it-become-quick/319715 "2022-11-30T01:14:37Z")
the first request on my java application the search is slow but took is small and then it become quick, reponse took between 10ms and 20ms but actually is 2s,I used elasticseach 7.17.2,and client is ElasticsearchClient … --- ## [Can any one help me out for my cluster, It one node as this error](https://discuss.elastic.co/t/can-any-one-help-me-out-for-my-cluster-it-one-node-as-this-error/319731)
**Author:** [@Dhrumil\_Sakhreliya](https://discuss.elastic.co/u/Dhrumil_Sakhreliya)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:12am UTC](https://discuss.elastic.co/t/can-any-one-help-me-out-for-my-cluster-it-one-node-as-this-error/319731 "2022-11-30T01:12:31Z")
\[2022-11-24T04:38:53,120\]\[WARN \]\[r.suppressed \] \[cybernode01\] path: /\_cluster/health, params: {} org.elasticsearch.discovery.MasterNotDiscoveredException: null at org.elasticsearch.action.support.master.Tra… --- ## [Change the Certificate](https://discuss.elastic.co/t/change-the-certificate/319804)
**Author:** [@sa002](https://discuss.elastic.co/u/sa002)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:12am UTC](https://discuss.elastic.co/t/change-the-certificate/319804 "2022-11-30T01:12:05Z")
we have an Elasticsearch cluster with the version "7.17.5" The certificate has expired. I have renewed the certificate but somehow the cluster does not accept the certificate. It still has the old certificate because th… --- ## [Is it safe to modify system index template settings?](https://discuss.elastic.co/t/is-it-safe-to-modify-system-index-template-settings/319894)
**Author:** [@windows95](https://discuss.elastic.co/u/windows95)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:03am UTC](https://discuss.elastic.co/t/is-it-safe-to-modify-system-index-template-settings/319894 "2022-11-30T01:03:56Z")
I have a single node installation. This leads to an yellow/unhealthy status when indices have replication configured. In my case there are these system indices which cause problems: .internal.alerts-observability.logs.a… --- ## [Need help on creating a Watcher Alert for Packetbeat](https://discuss.elastic.co/t/need-help-on-creating-a-watcher-alert-for-packetbeat/319986)
**Author:** [@AKCG23](https://discuss.elastic.co/u/AKCG23)\ **Replies:** 0\ **Last updated:** [November 29, 2022, 3:27am UTC](https://discuss.elastic.co/t/need-help-on-creating-a-watcher-alert-for-packetbeat/319986 "2022-11-29T03:27:12Z")
Hi , i have configured Packetbeats in some of my Application servers. I am able to get data in my dashboards. Currently i am looking at creating some Alerts for the network traffic . Is there a template or an example wh… --- ## [How to Stop Deletion of a Specific Index?](https://discuss.elastic.co/t/how-to-stop-deletion-of-a-specific-index/320032)
**Author:** [@Jdman647](https://discuss.elastic.co/u/Jdman647)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:58am UTC](https://discuss.elastic.co/t/how-to-stop-deletion-of-a-specific-index/320032 "2022-11-30T00:58:45Z")
Hello, Using Securityonion's 'advanced clustering' which means us managing it's cluster. Our delete time is set to 15 days for our so-\* indices. If I want to stop specific index: so-zeek-11232022 from being deleted af… --- ## [cURL command to create the snapshot (cURL PUT) is showing empty response](https://discuss.elastic.co/t/curl-command-to-create-the-snapshot-curl-put-is-showing-empty-response/320041)
**Author:** [@thulsidosskrishnan](https://discuss.elastic.co/u/thulsidosskrishnan)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:58am UTC](https://discuss.elastic.co/t/curl-command-to-create-the-snapshot-curl-put-is-showing-empty-response/320041 "2022-11-30T00:58:07Z")
Hello All, Greetings. I have a script that does the process for creating a repo on S3 AWS . I get all the indices and use the ES PUT CURL command to create the snapshot . For some time now the process is not completin… --- ## [Generating a periodic(i.e. timeslot based, say 2min duration) aggregation on an existing ELK index](https://discuss.elastic.co/t/generating-a-periodic-i-e-timeslot-based-say-2min-duration-aggregation-on-an-existing-elk-index/319858)
**Author:** [@rvadiga](https://discuss.elastic.co/u/rvadiga)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:50am UTC](https://discuss.elastic.co/t/generating-a-periodic-i-e-timeslot-based-say-2min-duration-aggregation-on-an-existing-elk-index/319858 "2022-11-30T00:50:59Z")
Hi Team, I need to design or derive a ELK index (configurable time-window/time-slot) populated based on a highly loaded (i.e say 300 million data points generated per day and indexed) ELK index and define a dashboard ba… --- ## [Postman PUT GET](https://discuss.elastic.co/t/postman-put-get/319861)
**Author:** [@codeRed123](https://discuss.elastic.co/u/codeRed123)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:50am UTC](https://discuss.elastic.co/t/postman-put-get/319861 "2022-11-30T00:50:20Z")
How to get POSTMAN to create index and all when im doing localhost:9200/ it says "type": "security\_exception", Can some one tell how to resolve this error, when i try it via console of kibana it is fine but I want it in … --- ## [How to change the number of replicas of the indices .internal.preview.alerts-security.alerts-default](https://discuss.elastic.co/t/how-to-change-the-number-of-replicas-of-the-indices-internal-preview-alerts-security-alerts-default/319713)
**Author:** [@Mor123460](https://discuss.elastic.co/u/Mor123460)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:49am UTC](https://discuss.elastic.co/t/how-to-change-the-number-of-replicas-of-the-indices-internal-preview-alerts-security-alerts-default/319713 "2022-11-30T00:49:47Z")
Hey :slight\_smile: I have a kibana and elasticsearch installed on the same server, meaning only one data node, without the need for any replicas. I successfully changed all the index templates to: "index.number\_of\_rep… --- ## [How to manage data retention time in ElasticSearch](https://discuss.elastic.co/t/how-to-manage-data-retention-time-in-elasticsearch/319729)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:49am UTC](https://discuss.elastic.co/t/how-to-manage-data-retention-time-in-elasticsearch/319729 "2022-11-30T00:49:10Z")
Hello, What is default of index data retention? If I want to change and edit this retentions for customize the time, if the data after I specifically time I want to remove this data. Thanks in advance for your help. --- ## [Kibana alert](https://discuss.elastic.co/t/kibana-alert/319737)
**Author:** [@niyog](https://discuss.elastic.co/u/niyog)\ **Replies:** 0\ **Last updated:** [November 24, 2022, 10:43am UTC](https://discuss.elastic.co/t/kibana-alert/319737 "2022-11-24T10:43:25Z")
Hai, i am new to this kibana and i completed the setup and even the logs are coming. I created an alert with the the rule type "Log threshold" and added the rule as below and saved the rule. The alert is working whe… --- ## [How to put each file name as index name to store Elasticsearch via Filebeat](https://discuss.elastic.co/t/how-to-put-each-file-name-as-index-name-to-store-elasticsearch-via-filebeat/319755)
**Author:** [@Furkan\_Gulseren](https://discuss.elastic.co/u/Furkan_Gulseren)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:48am UTC](https://discuss.elastic.co/t/how-to-put-each-file-name-as-index-name-to-store-elasticsearch-via-filebeat/319755 "2022-11-30T00:48:44Z")
Hello, How can I put each filename as index name to store elasticsearch via filebeat? i am using Filebeat to send log files to elasticsearch via logstash conf. i am using wildcard(\*) to get all of the files in director… --- ## [Elasticsearch upgrade](https://discuss.elastic.co/t/elasticsearch-upgrade/319837)
**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:47am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade/319837 "2022-11-30T00:47:44Z")
Hello, We are planning to upgrade the ELK stack of the below versions to 8.4.3. Elasticsearch: 7.5.1 Kibana : 6.7.2 Logstash : 6.8.12 Questions: What should be the order of Upgrade? (Should I up… --- ## [Data/master node offline for extended period](https://discuss.elastic.co/t/data-master-node-offline-for-extended-period/319566)
**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:43am UTC](https://discuss.elastic.co/t/data-master-node-offline-for-extended-period/319566 "2022-11-30T00:43:48Z")
I have a 3-node cluster that is used for monitoring. Each node runs the master and data roles. I just noticed that one of the nodes had been offline for a couple of months and after finding out why, the config had been … --- ## [Does elasticsearch8.5.1 support vector dimensionality reduction when using vector retrieval?](https://discuss.elastic.co/t/does-elasticsearch8-5-1-support-vector-dimensionality-reduction-when-using-vector-retrieval/319600)
**Author:** [@xy\_xia](https://discuss.elastic.co/u/xy_xia)\ **Replies:** 0\ **Last updated:** [November 23, 2022, 1:46am UTC](https://discuss.elastic.co/t/does-elasticsearch8-5-1-support-vector-dimensionality-reduction-when-using-vector-retrieval/319600 "2022-11-23T01:46:30Z")
Hello， As far as I know, the number of vector dimensions. Can’t exceed 1024 for indexed vectors ("index": true ), or 2048 for non-indexed vectors. But, my model outputs a vector with dimensions greater than 1024, a… --- ## [Rollover alias vs index alias](https://discuss.elastic.co/t/rollover-alias-vs-index-alias/319698)
**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:42am UTC](https://discuss.elastic.co/t/rollover-alias-vs-index-alias/319698 "2022-11-30T00:42:01Z")
Hello, I am going to apply ILM to an index template from Kibana. When applying to index template, there's a field of "alias for rollover index", but i have set and alias already in index template. What is the difference … [Previous page](https://discuss.elastic.co/latest.md?page=876) [Next page](https://discuss.elastic.co/latest.md?page=878)