# Latest **URL:** https://discuss.elastic.co/latest.md?page=881 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 882 --- ## [Index corrupt exception](https://discuss.elastic.co/t/index-corrupt-exception/319883)
**Author:** [@JAYALAKSHMI](https://discuss.elastic.co/u/JAYALAKSHMI)\ **Replies:** 4\ **Last updated:** [November 28, 2022, 7:52am UTC](https://discuss.elastic.co/t/index-corrupt-exception/319883 "2022-11-28T07:52:09Z")
Hi, We are seeing the Filesystem corruption issue. Due to this two shards are not accessible on the cluster. There is no issue from the hardware end and all other shards are accessible and available. Error: "store\_exc… --- ## [Unable to initialize fleet v8.5](https://discuss.elastic.co/t/unable-to-initialize-fleet-v8-5/319905)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 7:31am UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-v8-5/319905 "2022-11-28T07:31:27Z")
I upgraded from 8.4 to 8.5 and now getting this error --- ## [Auditd module is not converting process arg hexadecimal to ASCII](https://discuss.elastic.co/t/auditd-module-is-not-converting-process-arg-hexadecimal-to-ascii/319909)
**Author:** [@LucianoHanna](https://discuss.elastic.co/u/LucianoHanna)\ **Replies:** 0\ **Last updated:** [November 28, 2022, 6:12am UTC](https://discuss.elastic.co/t/auditd-module-is-not-converting-process-arg-hexadecimal-to-ascii/319909 "2022-11-28T06:12:23Z")
Hi! I am getting "6563686F205C226172672068657820656E636F6465645C22" where should be "echo "arg hex encoded"". It's a problem with my configuration or it's a problem with auditd module? P.S.: I have tested with ausearc… --- ## [Unable to start ElasticSearch in Windows 11](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows-11/319740)
**Author:** [@yuvrajbset](https://discuss.elastic.co/u/yuvrajbset)\ **Replies:** 2\ **Last updated:** [November 28, 2022, 4:46am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows-11/319740 "2022-11-28T04:46:27Z")
Hello ES Team, I am unable to run the Elasticsearch in my web browser after installation. The browser returns a message "ERR\_EMPTY\_RESPONSE" after access the 9200 port after running the elasticsearch I receive this mess… --- ## [How to parse glastopf honeypot json logs in logstash?](https://discuss.elastic.co/t/how-to-parse-glastopf-honeypot-json-logs-in-logstash/319900)
**Author:** [@mr\_ka](https://discuss.elastic.co/u/mr_ka)\ **Replies:** 0\ **Last updated:** [November 28, 2022, 3:01am UTC](https://discuss.elastic.co/t/how-to-parse-glastopf-honeypot-json-logs-in-logstash/319900 "2022-11-28T03:01:15Z")
I have a raw data in json format that I want to visualize in Kibana, but I'm having trouble parsing the data in logstash, previously I was able to visualize raw data for honeypot dionaea and cowrie. please help me in doi… --- ## [Does NLP in ElasticSearch8.5.1 support GPU?](https://discuss.elastic.co/t/does-nlp-in-elasticsearch8-5-1-support-gpu/319898)
**Author:** [@xy\_xia](https://discuss.elastic.co/u/xy_xia)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 4:00am UTC](https://discuss.elastic.co/t/does-nlp-in-elasticsearch8-5-1-support-gpu/319898 "2022-11-28T04:00:41Z")
Hi, Is it possible to use GPU when I'm doing inference with nlp models like bert in elasticsearch8. Is there any relevant parameter setting to use GPU or CPU? --- ## [Base64 decode issue](https://discuss.elastic.co/t/base64-decode-issue/319874)
**Author:** [@Rajesh\_R](https://discuss.elastic.co/u/Rajesh_R)\ **Replies:** 2\ **Last updated:** [November 28, 2022, 2:55am UTC](https://discuss.elastic.co/t/base64-decode-issue/319874 "2022-11-28T02:55:18Z")
Hi Team, Does Anyone know how to decode base64 in logstash? Logfile : {"ID":"11166946081959","Type":"LOG","pID":"rajesh.r@gmail.com","Interface":"Offboarding","payload": "PD94bWzCoHZlcnNpb249IjEuMCLCoGVuY29kaW5nPSJJU08… --- ## [Why does my Elastic 7.10.2 have automatic report generation and no automatic sending function?](https://discuss.elastic.co/t/why-does-my-elastic-7-10-2-have-automatic-report-generation-and-no-automatic-sending-function/318718)
**Author:** [@qiang\_tang](https://discuss.elastic.co/u/qiang_tang)\ **Replies:** 2\ **Last updated:** [November 28, 2022, 2:06am UTC](https://discuss.elastic.co/t/why-does-my-elastic-7-10-2-have-automatic-report-generation-and-no-automatic-sending-function/318718 "2022-11-28T02:06:51Z")
Without this function "From the Kibana toolbar, click Share, then select PDF Reports." The URL cannot be generated, but the report can be automatically generated. Is there any other way to automatically send the report … --- ## [Standalone apm-server with elasticsearch 8 in docker not able to connect](https://discuss.elastic.co/t/standalone-apm-server-with-elasticsearch-8-in-docker-not-able-to-connect/319892)
**Author:** [@AlanMark](https://discuss.elastic.co/u/AlanMark)\ **Replies:** 2\ **Last updated:** [November 28, 2022, 1:45am UTC](https://discuss.elastic.co/t/standalone-apm-server-with-elasticsearch-8-in-docker-not-able-to-connect/319892 "2022-11-28T01:45:18Z")
Elasticsearch version: 8.5.0 APM Server version: 8.5.2 Original install method (e.g. download page, yum, deb, from source, etc.) and version: docker Fresh install or upgraded from other version?: fresh Setup: Attemp… --- ## [How to increase the number of shards or replicas dynamically in single race on esrally](https://discuss.elastic.co/t/how-to-increase-the-number-of-shards-or-replicas-dynamically-in-single-race-on-esrally/319773)
**Author:** [@qksjdhi1212](https://discuss.elastic.co/u/qksjdhi1212)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 12:31am UTC](https://discuss.elastic.co/t/how-to-increase-the-number-of-shards-or-replicas-dynamically-in-single-race-on-esrally/319773 "2022-11-28T00:31:54Z")
I planned to set cluster and increase the number of shards or replicas to optimize it testing the cluster with esrally Is there any way to start one shard and increase to n shards on single esrally race +) I found foll… --- ## [Creating http.p12,tranport.p12 from a signed CSR for Elasticsearch](https://discuss.elastic.co/t/creating-http-p12-tranport-p12-from-a-signed-csr-for-elasticsearch/319680)
**Author:** [@redsearch2022](https://discuss.elastic.co/u/redsearch2022)\ **Replies:** 4\ **Last updated:** [November 27, 2022, 11:28pm UTC](https://discuss.elastic.co/t/creating-http-p12-tranport-p12-from-a-signed-csr-for-elasticsearch/319680 "2022-11-27T23:28:57Z")
After getting the CSR signed, how do I create the http.p12 and transport.p12 needed for Elasticsearch xpack.security.http.ssl: enabled: true keystore.path: certs/http.p12 xpack.security.transport.ssl: enabled: tr… --- ## [Connect filebeat to ELK](https://discuss.elastic.co/t/connect-filebeat-to-elk/319482)
**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\ **Replies:** 18\ **Last updated:** [November 27, 2022, 6:31pm UTC](https://discuss.elastic.co/t/connect-filebeat-to-elk/319482 "2022-11-27T18:31:05Z")
Hello! Could you provide link to connect filebeat to logstash ? jboss logs will be transmitted Thank you --- ## [Вопрос по дубликатам](https://discuss.elastic.co/t/topic/319889)
**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\ **Replies:** 0\ **Last updated:** [November 27, 2022, 6:30pm UTC](https://discuss.elastic.co/t/topic/319889 "2022-11-27T18:30:19Z")
Доброго времени суток. Пытаюсь отчистить индекс от дубликатов, используя fingerprint (id в индексе нет), чтобы наполнить другой индекс чистыми данными: Конфиг logstash такой: input { elasticsearch { hosts =\> \[… --- ## [How to exclude keys by multi-terms/composite aggregations](https://discuss.elastic.co/t/how-to-exclude-keys-by-multi-terms-composite-aggregations/319881)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 0\ **Last updated:** [November 27, 2022, 1:29pm UTC](https://discuss.elastic.co/t/how-to-exclude-keys-by-multi-terms-composite-aggregations/319881 "2022-11-27T13:29:32Z")
Hi, I am writing an composite aggregation in Elasticsearch like the following: POST family\_predicted\_data/\_search { "query": { "bool": { "filter": \[ { "terms": { "query\_id": \[ … --- ## [Enrich policy execution interval in Elasticsearch 8.5](https://discuss.elastic.co/t/enrich-policy-execution-interval-in-elasticsearch-8-5/319863)
**Author:** [@Jan\_lindroos](https://discuss.elastic.co/u/Jan_lindroos)\ **Replies:** 5\ **Last updated:** [November 27, 2022, 1:05pm UTC](https://discuss.elastic.co/t/enrich-policy-execution-interval-in-elasticsearch-8-5/319863 "2022-11-27T13:05:15Z")
Hi, the elastic docs for 8.5 says that by default the execution policies are executed every 15 minutes, but as far as I can see from the timestamp of the enrich index, the policy has not been executed after I initially e… --- ## [Locating relevant build instructions for ELK over LAN](https://discuss.elastic.co/t/locating-relevant-build-instructions-for-elk-over-lan/319853)
**Author:** [@steves](https://discuss.elastic.co/u/steves)\ **Replies:** 8\ **Last updated:** [November 26, 2022, 9:27pm UTC](https://discuss.elastic.co/t/locating-relevant-build-instructions-for-elk-over-lan/319853 "2022-11-26T21:27:12Z")
Hi all, I've been doing a number of installs towards getting a fully working ELK system and I've not yet gotten to the L part. In the end I'm trying to end up with is a MySQL db search set up that is accessible over the… --- ## [Is it possible to create a stopword filter, when using tokenizer = " keyword"?](https://discuss.elastic.co/t/is-it-possible-to-create-a-stopword-filter-when-using-tokenizer-keyword/319865)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 0\ **Last updated:** [November 26, 2022, 6:31pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-stopword-filter-when-using-tokenizer-keyword/319865 "2022-11-26T18:31:20Z")
Right now, I'm able to create a working stopword filter in the following way. company\_name\_stopword = \["inc","corp"\] \_company\_name\_stopword\_filter = dsl.token\_filter("\_company\_name\_stopword\_filter", type="stop", … --- ## [Unable to Install Fleet Server - EOF](https://discuss.elastic.co/t/unable-to-install-fleet-server-eof/319847)
**Author:** [@tmeuze](https://discuss.elastic.co/u/tmeuze)\ **Replies:** 8\ **Last updated:** [November 26, 2022, 6:08pm UTC](https://discuss.elastic.co/t/unable-to-install-fleet-server-eof/319847 "2022-11-26T18:08:16Z")
Hello, I'm hitting a wall trying to install Fleet Server on the same host as my ELK stack (v8.5.2). The result is always the same: Elastic Agent will be installed at /opt/Elastic/Agent and will run as a service. Do you… --- ## [Logging information is displayed in the wrong index](https://discuss.elastic.co/t/logging-information-is-displayed-in-the-wrong-index/319828)
**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\ **Replies:** 8\ **Last updated:** [November 26, 2022, 5:43pm UTC](https://discuss.elastic.co/t/logging-information-is-displayed-in-the-wrong-index/319828 "2022-11-26T17:43:54Z")
Hello, I have two conf files with different indexes in the "/etc/logstash/conf.d/" folder. These are as follows: root@dsme01:~# cat /etc/logstash/conf.d/02-snmp.conf input { snmp { tables =\> \[{ "name" =\> "i… --- ## [Filebeat apache module not collecting any logs](https://discuss.elastic.co/t/filebeat-apache-module-not-collecting-any-logs/319832)
**Author:** [@cesq](https://discuss.elastic.co/u/cesq)\ **Replies:** 4\ **Last updated:** [November 26, 2022, 4:55pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-not-collecting-any-logs/319832 "2022-11-26T16:55:52Z")
So I have been playing around with collecting data using filebeat and sending it via sidecar to my graylog server. I wanted to try out the apache module, so I wrote the configuration for this (following the docs of cours… --- ## [Better way of displaying KNN results in Kibana?](https://discuss.elastic.co/t/better-way-of-displaying-knn-results-in-kibana/317104)
**Author:** [@freddyh](https://discuss.elastic.co/u/freddyh)\ **Replies:** 1\ **Last updated:** [October 31, 2022, 9:58am UTC](https://discuss.elastic.co/t/better-way-of-displaying-knn-results-in-kibana/317104 "2022-10-31T09:58:06Z")
I'm using the approximate kNN feature to index a vector for searching. With the previous exact kNN method I was able to craft a URL string for the script\_score query, but I haven't been able to replicate that with the ap… --- ## [Power of Kibana with complex aggregations that I usually run in Excel](https://discuss.elastic.co/t/power-of-kibana-with-complex-aggregations-that-i-usually-run-in-excel/319864)
**Author:** [@auato](https://discuss.elastic.co/u/auato)\ **Replies:** 0\ **Last updated:** [November 26, 2022, 4:37pm UTC](https://discuss.elastic.co/t/power-of-kibana-with-complex-aggregations-that-i-usually-run-in-excel/319864 "2022-11-26T16:37:41Z")
I'm used to processing a huge amount of raw data (typically hundreds of thousands of rows, whole months of data per day, per hour, per detail). In Excel I perform some aggregations and calculations as shown in picture an… --- ## [Elasticsearch Search Query returning only 10 hits](https://discuss.elastic.co/t/elasticsearch-search-query-returning-only-10-hits/319670)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [November 26, 2022, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-search-query-returning-only-10-hits/319670 "2022-11-26T10:32:23Z")
Hi Team, I have a search query which is extracting the data from metricbeat index and the output shows me the same hits as the size mentioned in the query. However, if i apply painless script to transform the data, it i… --- ## ["reason"=\>"failed to parse field \[column108\] of type \[date\] in document](https://discuss.elastic.co/t/reason-failed-to-parse-field-column108-of-type-date-in-document/319854)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 9:28pm UTC](https://discuss.elastic.co/t/reason-failed-to-parse-field-column108-of-type-date-in-document/319854 "2022-11-25T21:28:50Z")
Hello everyone, Everything was working normally until today where I see that the amount of logs visible from Kibana decreased from more than 1 million every 15 min to a few in that same time interval. The first thing I… --- ## [How can we roll up all the aggregation data indices have?](https://discuss.elastic.co/t/how-can-we-roll-up-all-the-aggregation-data-indices-have/317436)
**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\ **Replies:** 5\ **Last updated:** [October 31, 2022, 2:13am UTC](https://discuss.elastic.co/t/how-can-we-roll-up-all-the-aggregation-data-indices-have/317436 "2022-10-31T02:13:30Z")
How can we roll up all the aggregation data indices have? And If we do rollup of all the aggregation which indices have than will there be any difference between the size of actual and rollup indices or not? --- ## [Kubernetes filebeat not sending logs to secured Elasticsearch](https://discuss.elastic.co/t/kubernetes-filebeat-not-sending-logs-to-secured-elasticsearch/319334)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 8\ **Last updated:** [November 25, 2022, 6:53pm UTC](https://discuss.elastic.co/t/kubernetes-filebeat-not-sending-logs-to-secured-elasticsearch/319334 "2022-11-25T18:53:46Z")
Hello Team We are facing an issue where we have setup the filebeat on kubernetes environment it is working well if we setup the output without https but while setting the output as secured elasticsearch node i.e. https:… --- ## [Añadir logs postfix a ELK](https://discuss.elastic.co/t/anadir-logs-postfix-a-elk/299794)
**Author:** [@Guif](https://discuss.elastic.co/u/Guif)\ **Replies:** 1\ **Last updated:** [November 25, 2022, 6:40pm UTC](https://discuss.elastic.co/t/anadir-logs-postfix-a-elk/299794 "2022-11-25T18:40:53Z")
Buenas, Estoy ingestando todos el contenido de l0s logs del servidor de correo con FileBeat del siguiente modo: filebeat.inputs: - type: log enabled: true fields: level: debug event.dataset: postfix p… --- ## [Can I delete deprecation log indices by a query?](https://discuss.elastic.co/t/can-i-delete-deprecation-log-indices-by-a-query/307253)
**Author:** [@fujita](https://discuss.elastic.co/u/fujita)\ **Replies:** 2\ **Last updated:** [November 25, 2022, 6:29pm UTC](https://discuss.elastic.co/t/can-i-delete-deprecation-log-indices-by-a-query/307253 "2022-11-25T18:29:48Z")
Thank you for always providing useful information. Several days ago we upgraded Elasticsearch to version 7.17.2 at our data center. After upgrading we found that cluster health is yellow. Before upgrading it was not s… --- ## [Plainess regex enagle](https://discuss.elastic.co/t/plainess-regex-enagle/319845)
**Author:** [@Ryan\_Ng](https://discuss.elastic.co/u/Ryan_Ng)\ **Replies:** 0\ **Last updated:** [November 25, 2022, 6:15pm UTC](https://discuss.elastic.co/t/plainess-regex-enagle/319845 "2022-11-25T18:15:32Z")
Hi, I have "script.painless.regex.enabled: true" at elasticsearch.yml and trying to use some additional regex features (Pattern.compile) in plainness but it still seems not to allow it. I am testing within the cloud whi… --- ## [Pregunta de novato](https://discuss.elastic.co/t/pregunta-de-novato/305681)
**Author:** [@Fonchi](https://discuss.elastic.co/u/Fonchi)\ **Replies:** 8\ **Last updated:** [June 15, 2022, 12:41pm UTC](https://discuss.elastic.co/t/pregunta-de-novato/305681 "2022-06-15T12:41:16Z")
Buenos días, espero me podáis ayudar, e instalado elastic en un servidor de ubuntu en la máquina virtual del servidor, y e de abrir los puertos a una dirección de ip específica, pero no consigo hacerlo. E buscado por tod… [Previous page](https://discuss.elastic.co/latest.md?page=880) [Next page](https://discuss.elastic.co/latest.md?page=882)