# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=251 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 252 --- ## [Does Elasticsearch clients try to request to the node that has the primary shard of a specific doc?](https://discuss.elastic.co/t/does-elasticsearch-clients-try-to-request-to-the-node-that-has-the-primary-shard-of-a-specific-doc/350181)
**Author:** [@AmirrezaRiahi](https://discuss.elastic.co/u/AmirrezaRiahi)\ **Replies:** 3\ **Last updated:** [January 1, 2024, 3:49pm UTC](https://discuss.elastic.co/t/does-elasticsearch-clients-try-to-request-to-the-node-that-has-the-primary-shard-of-a-specific-doc/350181 "2024-01-01T15:49:50Z")
From my understanding, nodes only can perform write operations on documents if they own their primary shard. Therefore if we have 2 nodes A, B and A owns the primary shard of the doc D, if the client asks node B to modif… --- ## [2023: The Year in Review](https://discuss.elastic.co/t/2023-the-year-in-review/350184)
**Author:** [@system](https://discuss.elastic.co/u/system)\ **Replies:** 17\ **Last updated:** [January 1, 2024, 3:41pm UTC](https://discuss.elastic.co/t/2023-the-year-in-review/350184 "2024-01-01T15:41:16Z")
2023's Top Users Most Time Reading User Hours Read @stephenb 281 @leandrojmp 234 @Christian\_Dahlqvist 155 @Rios 120 @Badger 103 @DavidTurner 49 @carly.richmond 46 @PRASHANT\_MEHTA 40 @wa… --- ## [Attempt to create Lens visualization produces an error "Cannot read properties of undefined (reading 'localeCompare')"](https://discuss.elastic.co/t/attempt-to-create-lens-visualization-produces-an-error-cannot-read-properties-of-undefined-reading-localecompare/350010)
**Author:** [@Nicole\_Hirshler](https://discuss.elastic.co/u/Nicole_Hirshler)\ **Replies:** 4\ **Last updated:** [January 1, 2024, 12:29pm UTC](https://discuss.elastic.co/t/attempt-to-create-lens-visualization-produces-an-error-cannot-read-properties-of-undefined-reading-localecompare/350010 "2024-01-01T12:29:42Z")
Since the upgrade to 7.17.12 ELK, I cannot create Lens visualization. I searched the internet and found some post saying that it can be related to the security. ELK is configured in my setup with two users: elastic and s… --- ## [Conditional formatting for data and colors according to input field available for dashboard users](https://discuss.elastic.co/t/conditional-formatting-for-data-and-colors-according-to-input-field-available-for-dashboard-users/350177)
**Author:** [@Magdy](https://discuss.elastic.co/u/Magdy)\ **Replies:** 0\ **Last updated:** [January 1, 2024, 7:17am UTC](https://discuss.elastic.co/t/conditional-formatting-for-data-and-colors-according-to-input-field-available-for-dashboard-users/350177 "2024-01-01T07:17:38Z")
Create text input on the screen and compare it with the value in the tree map to change the background of cells accordingly. --- ## [Elasticserach installation on linux preferences](https://discuss.elastic.co/t/elasticserach-installation-on-linux-preferences/350169)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 0\ **Last updated:** [January 1, 2024, 5:45am UTC](https://discuss.elastic.co/t/elasticserach-installation-on-linux-preferences/350169 "2024-01-01T05:45:39Z")
in order to install the latest (8.11.1) elasticsearch cluster in a production environment (oracle linux based), which method of installation is better? rpm or zip/tar.gz? in each method which user can we use ? root or … --- ## [How to compare the value of field with the input value from the screen to take an action?](https://discuss.elastic.co/t/how-to-compare-the-value-of-field-with-the-input-value-from-the-screen-to-take-an-action/350168)
**Author:** [@adnan-ali](https://discuss.elastic.co/u/adnan-ali)\ **Replies:** 0\ **Last updated:** [January 1, 2024, 5:37am UTC](https://discuss.elastic.co/t/how-to-compare-the-value-of-field-with-the-input-value-from-the-screen-to-take-an-action/350168 "2024-01-01T05:37:32Z")
in the tree map value ,we need to change the background color of tree map cell depend on the input value from the screen to comparing with value on tree map EX: tree map value is 1000 . input value from screen is 1200… --- ## [Logstash configuration with multiple http\_poller did'nt ran for some indices](https://discuss.elastic.co/t/logstash-configuration-with-multiple-http-poller-didnt-ran-for-some-indices/350151)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 0\ **Last updated:** [December 31, 2023, 8:02am UTC](https://discuss.elastic.co/t/logstash-configuration-with-multiple-http-poller-didnt-ran-for-some-indices/350151 "2023-12-31T08:02:11Z")
Hello, I have a logstash configuration with multiple http\_poller input plugins. say input { http\_poller { id =\> "s1-input" urls =\> { sector\_api =\> { method =\> "POST" url =\> "url1" headers =\>… --- ## [BM25 score when do search in multi field](https://discuss.elastic.co/t/bm25-score-when-do-search-in-multi-field/350146)
**Author:** [@r1ckC139](https://discuss.elastic.co/u/r1ckC139)\ **Replies:** 1\ **Last updated:** [December 30, 2023, 2:14pm UTC](https://discuss.elastic.co/t/bm25-score-when-do-search-in-multi-field/350146 "2023-12-30T14:14:26Z")
es\_query = { "bool": { "must": \[ {"match": {"title": title\_text}}, {"match": {"year": year\_text}} \] } } when i do search 2 field match, how elasticsearch combine score of 2 match? --- ## [How to integrate syslog input plugin](https://discuss.elastic.co/t/how-to-integrate-syslog-input-plugin/349025)
**Author:** [@Ravi\_Pattar](https://discuss.elastic.co/u/Ravi_Pattar)\ **Replies:** 41\ **Last updated:** [December 26, 2023, 12:24pm UTC](https://discuss.elastic.co/t/how-to-integrate-syslog-input-plugin/349025 "2023-12-26T12:24:13Z")
Hi, I have installed full stack ELK (version 7.17.13) and now I want to integrate syslog input plugin. Need some directions on the same on how to setup. Also when I tried with some changes in logstash.conf but I am fa… --- ## [Azure Monitor Metrics for StorageAccounts namespaces does not ingest data, no error message returned](https://discuss.elastic.co/t/azure-monitor-metrics-for-storageaccounts-namespaces-does-not-ingest-data-no-error-message-returned/350135)
**Author:** [@s.buksa](https://discuss.elastic.co/u/s.buksa)\ **Replies:** 2\ **Last updated:** [December 30, 2023, 1:19am UTC](https://discuss.elastic.co/t/azure-monitor-metrics-for-storageaccounts-namespaces-does-not-ingest-data-no-error-message-returned/350135 "2023-12-30T01:19:03Z")
Hello, Could someone, please, help me to understand where is the issue in the following configurations? I am trying to scrape metrics from specific resource namespace "Microsoft.Storage/storageAccounts/queueServices" na… --- ## [Help parsing custom nginx logs using Filebeat and Ingest Pipelines](https://discuss.elastic.co/t/help-parsing-custom-nginx-logs-using-filebeat-and-ingest-pipelines/349974)
**Author:** [@BDeveloper](https://discuss.elastic.co/u/BDeveloper)\ **Replies:** 17\ **Last updated:** [December 29, 2023, 7:09pm UTC](https://discuss.elastic.co/t/help-parsing-custom-nginx-logs-using-filebeat-and-ingest-pipelines/349974 "2023-12-29T19:09:18Z")
Hi, I am new to using ELK stack. I have custom logs for my nginx access.log files and I am needing help parsing them by using filebeat and ingest pipeline (Log Files -\> Filebeat -\> (Parse with Ingest Pipeline Parse) Ela… --- ## [Are there any issues or topics on shrinking elastic-agent's install size?](https://discuss.elastic.co/t/are-there-any-issues-or-topics-on-shrinking-elastic-agents-install-size/350099)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [December 29, 2023, 4:46pm UTC](https://discuss.elastic.co/t/are-there-any-issues-or-topics-on-shrinking-elastic-agents-install-size/350099 "2023-12-29T16:46:48Z")
Today I ran into issues trying to install, and ended up figuring out that you need at least 1.7G of disk for Agent. It had been a while since I last looked at the minimum requirements for Elastic Agent. Considering I re… --- ## [Logstash pipeline to filter rss document](https://discuss.elastic.co/t/logstash-pipeline-to-filter-rss-document/349800)
**Author:** [@ramiwashere](https://discuss.elastic.co/u/ramiwashere)\ **Replies:** 3\ **Last updated:** [December 29, 2023, 2:52pm UTC](https://discuss.elastic.co/t/logstash-pipeline-to-filter-rss-document/349800 "2023-12-29T14:52:53Z")
I've just created a logstash that will retrieve documents from a feed. I receive the documents in return but the fields I want to add are all on the same document. Here's an example: \ \ \… --- ## [Rolling upgrade from 7.14.2 to 7.17.16 no working](https://discuss.elastic.co/t/rolling-upgrade-from-7-14-2-to-7-17-16-no-working/350106)
**Author:** [@fory](https://discuss.elastic.co/u/fory)\ **Replies:** 4\ **Last updated:** [December 29, 2023, 1:46pm UTC](https://discuss.elastic.co/t/rolling-upgrade-from-7-14-2-to-7-17-16-no-working/350106 "2023-12-29T13:46:01Z")
According to 7.17.16 documentation, upgrading from 7.14.2 to 7.17.16 can be done by rolling upgrade. I have a two node cluster both are master eligible. Following the rolling upgrade documentation, I upgraded one of the… --- ## [Machine Learning node Pricing](https://discuss.elastic.co/t/machine-learning-node-pricing/350113)
**Author:** [@haopv](https://discuss.elastic.co/u/haopv)\ **Replies:** 1\ **Last updated:** [December 29, 2023, 11:30am UTC](https://discuss.elastic.co/t/machine-learning-node-pricing/350113 "2023-12-29T11:30:59Z")
Hi Elastic, I have 20 nodes data Elastic in my Cluster on Premises with Basic License, Can I add 2 nodes machine learning for ML Job (Security Rule ML) and pay license for only 2 nodes ML ? If not! What is the way to o… --- ## [Need help with ScriptedMetricAggregation in Elasticsearch v8.7](https://discuss.elastic.co/t/need-help-with-scriptedmetricaggregation-in-elasticsearch-v8-7/350088)
**Author:** [@Chetan\_Ramaiah](https://discuss.elastic.co/u/Chetan_Ramaiah)\ **Replies:** 2\ **Last updated:** [December 29, 2023, 9:58am UTC](https://discuss.elastic.co/t/need-help-with-scriptedmetricaggregation-in-elasticsearch-v8-7/350088 "2023-12-29T09:58:38Z")
Hello, I am working on migrating ES 6.8 java code to ES 8.7.1 rest API java. But, I am unable to understand or find how to write script metric aggregation with ES 8.7.1. Could you please guide me using the below code fr… --- ## [I have a requirement where in I have to move selected data from Elasticsearch INDEX to oracle Table {RDBMS}](https://discuss.elastic.co/t/i-have-a-requirement-where-in-i-have-to-move-selected-data-from-elasticsearch-index-to-oracle-table-rdbms/350083)
**Author:** [@AkshayP21296](https://discuss.elastic.co/u/AkshayP21296)\ **Replies:** 2\ **Last updated:** [December 28, 2023, 8:16pm UTC](https://discuss.elastic.co/t/i-have-a-requirement-where-in-i-have-to-move-selected-data-from-elasticsearch-index-to-oracle-table-rdbms/350083 "2023-12-28T20:16:45Z")
I have a requirement where in I have to move selected data from Elasticsearch INDEX to oracle Table {RDBMS} --- ## [Need help on aggregation and sub aggregation with ES 8.7 rest api](https://discuss.elastic.co/t/need-help-on-aggregation-and-sub-aggregation-with-es-8-7-rest-api/350093)
**Author:** [@Chetan\_Ramaiah](https://discuss.elastic.co/u/Chetan_Ramaiah)\ **Replies:** 0\ **Last updated:** [December 28, 2023, 4:59pm UTC](https://discuss.elastic.co/t/need-help-on-aggregation-and-sub-aggregation-with-es-8-7-rest-api/350093 "2023-12-28T16:59:01Z")
Hello, I am working on migrating ES 6.8 java code to ES 8.7 rest api java. While working on aggregation, I am able to construct aggregation layer but not as per the required format. ----- \*\*expected result\*\* ----- "a… --- ## [Integration with cisco ISE, PaloAlto and Fortigate Firewall](https://discuss.elastic.co/t/integration-with-cisco-ise-paloalto-and-fortigate-firewall/349848)
**Author:** [@Ganesh\_DV](https://discuss.elastic.co/u/Ganesh_DV)\ **Replies:** 15\ **Last updated:** [December 28, 2023, 3:08pm UTC](https://discuss.elastic.co/t/integration-with-cisco-ise-paloalto-and-fortigate-firewall/349848 "2023-12-28T15:08:46Z")
Hi team. im new to elasticsearch, kindly help me to resolve with below mentioned problem in integartion. I configured cisco ise, fortinet and paloalto firewalls to push logs to elasticsearch via Load balancer . Logs ar… --- ## [Integrations empty](https://discuss.elastic.co/t/integrations-empty/349934)
**Author:** [@jevonsnotes](https://discuss.elastic.co/u/jevonsnotes)\ **Replies:** 9\ **Last updated:** [December 28, 2023, 2:30pm UTC](https://discuss.elastic.co/t/integrations-empty/349934 "2023-12-28T14:30:04Z")
version 8.11.3 running elk in closed network,the Integrations have nothing --- ## [Assign kibana alert running on a specific instance](https://discuss.elastic.co/t/assign-kibana-alert-running-on-a-specific-instance/348704)
**Author:** [@JT\_IGS](https://discuss.elastic.co/u/JT_IGS)\ **Replies:** 3\ **Last updated:** [December 28, 2023, 1:29pm UTC](https://discuss.elastic.co/t/assign-kibana-alert-running-on-a-specific-instance/348704 "2023-12-28T13:29:16Z")
There are multiple kibana instances connecting to same ES cluster: kibana1 -\> elasticsearch \<- kibana2 After setting kibana alerts, found that kibana alerts run on random instance (1/2). While i have a need to run rul… --- ## [Kibana is not starting: Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/kibana-is-not-starting-unable-to-retrieve-version-information-from-elasticsearch-nodes/350071)
**Author:** [@Kunal\_Rastogi](https://discuss.elastic.co/u/Kunal_Rastogi)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 12:19pm UTC](https://discuss.elastic.co/t/kibana-is-not-starting-unable-to-retrieve-version-information-from-elasticsearch-nodes/350071 "2023-12-28T12:19:54Z")
\[2023-12-28T16:45:31.743+05:30\]\[INFO \]\[plugins.taskManager\] TaskManager is identified by the Kibana UUID: 40011819-3390-4e5d-a0bc-5b2571fd083c \[2023-12-28T16:45:31.767+05:30\]\[INFO \]\[custom-branding-service\] CustomBrandin… --- ## [Getting access to custom headers in kibana client](https://discuss.elastic.co/t/getting-access-to-custom-headers-in-kibana-client/349885)
**Author:** [@mojtaba\_mosalman](https://discuss.elastic.co/u/mojtaba_mosalman)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 9:47am UTC](https://discuss.elastic.co/t/getting-access-to-custom-headers-in-kibana-client/349885 "2023-12-28T09:47:21Z")
Hi. I'm trying to get value of custom header set in response of our server in kibana react client using axios but it seems that it's not accessiable even though it's showing in browser console (Access-Control-Expose-Head… --- ## [Elasticsearch basic license limitation on the number of nodes](https://discuss.elastic.co/t/elasticsearch-basic-license-limitation-on-the-number-of-nodes/350058)
**Author:** [@basiltitus](https://discuss.elastic.co/u/basiltitus)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 9:05am UTC](https://discuss.elastic.co/t/elasticsearch-basic-license-limitation-on-the-number-of-nodes/350058 "2023-12-28T09:05:04Z")
Hi, We are using ELK as a single node cluster with Kibana and I'd been searching if there any limitation on the number of nodes for Elasticsearch free version. But i am unable to find information on these. Does ES fre… --- ## [Elasticsearch ヒープメモリ使用量増加に関する質問](https://discuss.elastic.co/t/elasticsearch/350055)
**Author:** [@yuma\_n](https://discuss.elastic.co/u/yuma_n)\ **Replies:** 0\ **Last updated:** [December 28, 2023, 8:27am UTC](https://discuss.elastic.co/t/elasticsearch/350055 "2023-12-28T08:27:23Z")
私がElasticsearchを使用している環境では、1日ごとにシャードが増加します。Logstashのoutput設定で以下のようにindexを作成しているからだと思われます。 output { elasticsearch { hosts =\> \["\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*"\] cacert =\> '\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*' user =\> "\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*" pas… --- ## [Elasticsearch JAVA API Client version 8 upsert Request](https://discuss.elastic.co/t/elasticsearch-java-api-client-version-8-upsert-request/350047)
**Author:** [@durgesh\_dp](https://discuss.elastic.co/u/durgesh_dp)\ **Replies:** 1\ **Last updated:** [December 28, 2023, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-version-8-upsert-request/350047 "2023-12-28T06:01:40Z")
I am doing a migration from version 7 which is deprecated to version 8 java api client , but there is no documentation regarding upsert in version 8 , i have to write a updateRequest to update a document if it exists and… --- ## [Kibana Dashboard error](https://discuss.elastic.co/t/kibana-dashboard-error/349030)
**Author:** [@Bountardos](https://discuss.elastic.co/u/Bountardos)\ **Replies:** 2\ **Last updated:** [December 27, 2023, 11:18pm UTC](https://discuss.elastic.co/t/kibana-dashboard-error/349030 "2023-12-27T23:18:54Z")
Hello, i'm currently trying to create a dashboard to represent some data that i filter on a set of IP's, but i get an error of authentication when i try to see the data. Request error: security\_exception, unable to aut… --- ## [The Kibana website reports an error "Status Code 500"](https://discuss.elastic.co/t/the-kibana-website-reports-an-error-status-code-500/349138)
**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\ **Replies:** 3\ **Last updated:** [December 27, 2023, 11:02pm UTC](https://discuss.elastic.co/t/the-kibana-website-reports-an-error-status-code-500/349138 "2023-12-27T23:02:52Z")
The call to my Kibana website terminates with the following error message: {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred. Check Kibana server logs for details."} My Kiba… --- ## [Filebeat yml config issue](https://discuss.elastic.co/t/filebeat-yml-config-issue/349360)
**Author:** [@Satsan](https://discuss.elastic.co/u/Satsan)\ **Replies:** 1\ **Last updated:** [December 27, 2023, 10:43pm UTC](https://discuss.elastic.co/t/filebeat-yml-config-issue/349360 "2023-12-27T22:43:27Z")
The index for my Filebeat YAML configuration is not appearing in the Kibana index pattern. This issue arose with a new Filebeat setup on the Linux server. I configured Filebeat and created a YAML configuration file. I v… --- ## [Incorrect http method for uri](https://discuss.elastic.co/t/incorrect-http-method-for-uri/348546)
**Author:** [@irdrgz](https://discuss.elastic.co/u/irdrgz)\ **Replies:** 0\ **Last updated:** [December 4, 2023, 10:59am UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri/348546 "2023-12-04T10:59:33Z")
Hello everyone, I'm setting up a lab with Security Onion and I'm configuring Auditbeat in an Ubuntu Desktop instance. When I run "auditbeat setup" I get the next error: Looking for the Kibana logs in the SO machine I… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=250) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=252)