# Top **URL:** https://discuss.elastic.co/top.md?page=246&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 247 --- ## [Logstash dockerfile issue while syncing elasticsearch with mysql using python](https://discuss.elastic.co/t/logstash-dockerfile-issue-while-syncing-elasticsearch-with-mysql-using-python/355083)
**Author:** [@abhinavtyagi](https://discuss.elastic.co/u/abhinavtyagi)\ **Replies:** 9\ **Last updated:** [March 10, 2024, 4:30pm UTC](https://discuss.elastic.co/t/logstash-dockerfile-issue-while-syncing-elasticsearch-with-mysql-using-python/355083 "2024-03-10T16:30:39Z")
Below is the logstash dockerfile taken from GitHub - r13i/sync-elasticsearch-mysql: Using Logstash to synchronize an Elasticsearch index with MySQL data but note that I am using Python and JDBC works with Java. How can … --- ## [Executing multiple .conf files in one instance](https://discuss.elastic.co/t/executing-multiple-conf-files-in-one-instance/340749)
**Author:** [@Tony\_Stark](https://discuss.elastic.co/u/Tony_Stark)\ **Replies:** 9\ **Last updated:** [August 16, 2023, 12:48pm UTC](https://discuss.elastic.co/t/executing-multiple-conf-files-in-one-instance/340749 "2023-08-16T12:48:52Z")
I am trying to execute multiple .conf files in logstash with logstash -f "path\*.conf" but logstash processes the .conf file the same number of times as the number of .conf files I have , if I have 5 .conf files , I get o… --- ## [Need help with elastic/kibana ESET connect integration](https://discuss.elastic.co/t/need-help-with-elastic-kibana-eset-connect-integration/379896)
**Author:** [@Sainar](https://discuss.elastic.co/u/Sainar)\ **Replies:** 15\ **Last updated:** [July 12, 2025, 3:01pm UTC](https://discuss.elastic.co/t/need-help-with-elastic-kibana-eset-connect-integration/379896 "2025-07-12T15:01:41Z")
Hey people i am new to this forum, please help, I have a problem with ESET integration, i connect it via TCP to collect JSON logs from it, my elastic/kibana is on-premis and ESET connect is a cloud one, so all is workin… --- ## [Which architecture is better for the Elasticsearch structure?](https://discuss.elastic.co/t/which-architecture-is-better-for-the-elasticsearch-structure/383008)
**Author:** [@celikbaris61](https://discuss.elastic.co/u/celikbaris61)\ **Replies:** 12\ **Last updated:** [October 28, 2025, 11:49am UTC](https://discuss.elastic.co/t/which-architecture-is-better-for-the-elasticsearch-structure/383008 "2025-10-28T11:49:10Z")
Hello everyone,I'm going to set up a cluster for Elasticsearch. My data size is approximately 50 TB and will continue to grow. I will primarily use it for search and cross-queries. My question is:I will be using virtual … --- ## [Logstash deletes source files and not creating index - date parsing issue](https://discuss.elastic.co/t/logstash-deletes-source-files-and-not-creating-index-date-parsing-issue/347243)
**Author:** [@derekmizak](https://discuss.elastic.co/u/derekmizak)\ **Replies:** 10\ **Last updated:** [November 15, 2023, 8:54pm UTC](https://discuss.elastic.co/t/logstash-deletes-source-files-and-not-creating-index-date-parsing-issue/347243 "2023-11-15T20:54:21Z")
I am using Elastic and logstash 8.11 running in docker. When logstash starts it deletes log files from the source directory but nothing is passed to elastic - no index is created. I am not sure why logstash is deleting… --- ## [Get all of the documents for user in elastic enterprise search](https://discuss.elastic.co/t/get-all-of-the-documents-for-user-in-elastic-enterprise-search/361707)
**Author:** [@CTO\_Servefast](https://discuss.elastic.co/u/CTO_Servefast)\ **Replies:** 9\ **Last updated:** [June 21, 2024, 7:53am UTC](https://discuss.elastic.co/t/get-all-of-the-documents-for-user-in-elastic-enterprise-search/361707 "2024-06-21T07:53:00Z")
I would like to get all of the documents for a user in elastic enterprise search using @elastic/enterprise-search npm package. The only way i had some success was using client.app.search() using empty string for query b… --- ## [Regarding Ingest Node Pipeline](https://discuss.elastic.co/t/regarding-ingest-node-pipeline/321094)
**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\ **Replies:** 9\ **Last updated:** [December 14, 2022, 7:26am UTC](https://discuss.elastic.co/t/regarding-ingest-node-pipeline/321094 "2022-12-14T07:26:52Z")
Hi team, We would like to know about the ingest node pipeline. we are new in this platform. Normally, an application team sending the logs through the below mentioned path. Logs Flow Path: FileBeat/MetricBeat -\> AWS K… --- ## [In Elasticsearch, data after a certain date is not coming through](https://discuss.elastic.co/t/in-elasticsearch-data-after-a-certain-date-is-not-coming-through/376075)
**Author:** [@aiagent\_ai](https://discuss.elastic.co/u/aiagent_ai)\ **Replies:** 12\ **Last updated:** [April 10, 2025, 3:06pm UTC](https://discuss.elastic.co/t/in-elasticsearch-data-after-a-certain-date-is-not-coming-through/376075 "2025-04-10T15:06:43Z")
Problem: My application is running on Docker, and I am using Elasticsearch. The index has been created. When I make a curl request, I get a response, but in my application, data after March 5th is not showing up. Howeve… --- ## [Vert High Latencies For GeoDistance query for 10k documents](https://discuss.elastic.co/t/vert-high-latencies-for-geodistance-query-for-10k-documents/315631)
**Author:** [@Parth\_Narang](https://discuss.elastic.co/u/Parth_Narang)\ **Replies:** 10\ **Last updated:** [October 5, 2022, 5:32pm UTC](https://discuss.elastic.co/t/vert-high-latencies-for-geodistance-query-for-10k-documents/315631 "2022-10-05T17:32:08Z")
I have a requirement to fetch 10k documents around a lat long in 10km radius while below query works fine but take around 350 ms to fetch all the documents. is there any other way to improve on this was expecting latenci… --- ## [Unable to see beyond 500 traces records](https://discuss.elastic.co/t/unable-to-see-beyond-500-traces-records/364756)
**Author:** [@Harshul](https://discuss.elastic.co/u/Harshul)\ **Replies:** 10\ **Last updated:** [September 3, 2024, 2:42pm UTC](https://discuss.elastic.co/t/unable-to-see-beyond-500-traces-records/364756 "2024-09-03T14:42:41Z")
I have a node backend and I have setup Opentelemetry to export signals to Opentelemetry collector which further exports the signals (Traces, Metrics and Logs) to elastic. During the performance testing, an API was execut… --- ## [Barracuda Cloudgen Integration / Agent possibly broken?](https://discuss.elastic.co/t/barracuda-cloudgen-integration-agent-possibly-broken/380785)
**Author:** [@cow\_on\_lsd](https://discuss.elastic.co/u/cow_on_lsd)\ **Replies:** 14\ **Last updated:** [August 8, 2025, 1:13pm UTC](https://discuss.elastic.co/t/barracuda-cloudgen-integration-agent-possibly-broken/380785 "2025-08-08T13:13:06Z")
Good Morning Everyone, I have the following situation: The Barracuda firewall is configured as described here The integration is configured as per default values The agent is enrolled with the right integration polic… --- ## [API logs not coming after setting up Elastic Agent , Beats logs are coming](https://discuss.elastic.co/t/api-logs-not-coming-after-setting-up-elastic-agent-beats-logs-are-coming/372081)
**Author:** [@ErGeek](https://discuss.elastic.co/u/ErGeek)\ **Replies:** 14\ **Last updated:** [December 18, 2024, 6:18pm UTC](https://discuss.elastic.co/t/api-logs-not-coming-after-setting-up-elastic-agent-beats-logs-are-coming/372081 "2024-12-18T18:18:41Z")
Hi All, We have setup an Elastic Agent to send logs from an Application API to Kafka. We are able to establish the connection using the Elastic Agent. But instead of the API logs, we are getting Beat logs (Filebeat and… --- ## [How to reliably verify a snapshot restore succeeded? Failed shards disappear from \_recovery](https://discuss.elastic.co/t/how-to-reliably-verify-a-snapshot-restore-succeeded-failed-shards-disappear-from-recovery/389912)
**Author:** [@ciprianamza](https://discuss.elastic.co/u/ciprianamza)\ **Replies:** 10\ **Last updated:** [August 30, 2026, 4:03pm UTC](https://discuss.elastic.co/t/how-to-reliably-verify-a-snapshot-restore-succeeded-failed-shards-disappear-from-recovery/389912 "2026-08-30T16:03:41Z")
Hello, I'd like to raise a possible problem I recently ran into in an internal application, and which I see the current Curator implementation mirrors as well (curator/curator/utils.py at v5.8.4 · elastic/curator · GitH… --- ## [Unable to configure Elastic , Kibana tool in new environment](https://discuss.elastic.co/t/unable-to-configure-elastic-kibana-tool-in-new-environment/313938)
**Author:** [@Infratech](https://discuss.elastic.co/u/Infratech)\ **Replies:** 10\ **Last updated:** [September 9, 2022, 7:37am UTC](https://discuss.elastic.co/t/unable-to-configure-elastic-kibana-tool-in-new-environment/313938 "2022-09-09T07:37:14Z")
I have logged in but showing below error. I have already assigned Admin, PowerUser role to user.. Please look in to this…. --- ## [Fingerprint no consistent on combination of same type of value](https://discuss.elastic.co/t/fingerprint-no-consistent-on-combination-of-same-type-of-value/356038)
**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\ **Replies:** 10\ **Last updated:** [March 23, 2024, 7:23pm UTC](https://discuss.elastic.co/t/fingerprint-no-consistent-on-combination-of-same-type-of-value/356038 "2024-03-23T19:23:09Z")
Hello Everyone , i am trying to create a unique fingerprint figure print according to upc + displayName and upc + selectedModifiersCombined with the conditions Here are 4 orders after splitting in logstash { orderId: … --- ## [Getting issue while starting kibana](https://discuss.elastic.co/t/getting-issue-while-starting-kibana/368693)
**Author:** [@pranchalm](https://discuss.elastic.co/u/pranchalm)\ **Replies:** 9\ **Last updated:** [October 14, 2024, 12:15am UTC](https://discuss.elastic.co/t/getting-issue-while-starting-kibana/368693 "2024-10-14T00:15:40Z")
Elasticsearch version-:8.15 Kibana version-:8.15 security is enabled(basic auth), without ssl Running Elasticsearch and kibana in local with single cluster -windows machine As we can see in the screenshot kibana i… --- ## [Convert IP from integears](https://discuss.elastic.co/t/convert-ip-from-integears/374687)
**Author:** [@arcsons](https://discuss.elastic.co/u/arcsons)\ **Replies:** 17\ **Last updated:** [February 26, 2025, 6:00pm UTC](https://discuss.elastic.co/t/convert-ip-from-integears/374687 "2025-02-26T18:00:40Z")
Hi I have two fields with integers. How can I convert it to IP ? netconn\_ipv4: 178,258,031 netconn\_local\_ipv4: 178,258,037 I guess I can do this with mappings but not sure. I have tested with following without luck. … --- ## [GCS repository creation times out on one node (starts working after restart)](https://discuss.elastic.co/t/gcs-repository-creation-times-out-on-one-node-starts-working-after-restart/360292)
**Author:** [@sumant-pangotra](https://discuss.elastic.co/u/sumant-pangotra)\ **Replies:** 11\ **Last updated:** [June 5, 2024, 9:44am UTC](https://discuss.elastic.co/t/gcs-repository-creation-times-out-on-one-node-starts-working-after-restart/360292 "2024-06-05T09:44:31Z")
GCS repository creation times out on one node (starts working after restart) { "name" : "elasticsearch-client-6fdc44747f-2h2md", "cluster\_name" : "es-123", "cluster\_uuid" : "dfQbgOeVTXieyW3JUWcEQw", "version" : … --- ## [Two different controls to be applied on two separate visualizations on one dashboard](https://discuss.elastic.co/t/two-different-controls-to-be-applied-on-two-separate-visualizations-on-one-dashboard/378943)
**Author:** [@rubic](https://discuss.elastic.co/u/rubic)\ **Replies:** 14\ **Last updated:** [June 20, 2025, 11:19am UTC](https://discuss.elastic.co/t/two-different-controls-to-be-applied-on-two-separate-visualizations-on-one-dashboard/378943 "2025-06-20T11:19:02Z")
Hi, I'm trying create dashboard which will allow users to compare two, the same graphs showing hourly jobs distribution break down by date. The goal is to apply two, different dates on each graph using controls - I kno… --- ## [Azure Functions nodejs not showing transaction samples](https://discuss.elastic.co/t/azure-functions-nodejs-not-showing-transaction-samples/364373)
**Author:** [@shevkaboss](https://discuss.elastic.co/u/shevkaboss)\ **Replies:** 11\ **Last updated:** [January 21, 2025, 9:22am UTC](https://discuss.elastic.co/t/azure-functions-nodejs-not-showing-transaction-samples/364373 "2025-01-21T09:22:02Z")
Good day, I'm new to ELK stack and trying to setup APM transactions on my BE application. We are using serverless infrastructure with Azure Functions and nodejs. I cannot see any transaction samples in APM view: St… --- ## [Opster availability](https://discuss.elastic.co/t/opster-availability/368511)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 9\ **Last updated:** [August 17, 2025, 8:21pm UTC](https://discuss.elastic.co/t/opster-availability/368511 "2025-08-17T20:21:44Z")
Elastic acquired opster 1 year ago, why is not available to new users yet or integrated? we need a solution like that to optimize clusters, now is very hard. I am testing Pulse that is an alternative but we would like t… --- ## [How to take the backup of 3months data of elasticsearch?](https://discuss.elastic.co/t/how-to-take-the-backup-of-3months-data-of-elasticsearch/337653)
**Author:** [@merson](https://discuss.elastic.co/u/merson)\ **Replies:** 10\ **Last updated:** [July 10, 2023, 9:28am UTC](https://discuss.elastic.co/t/how-to-take-the-backup-of-3months-data-of-elasticsearch/337653 "2023-07-10T09:28:41Z")
In elasticsearch, it is runned three months and the size of elk is 40gb then I want to backup the elasticsearch datas. so what to do the backup of elasticsearch for 3months without using snapshot and restore. --- ## [Need to give read access .fleet-artifacts system index to non admin user(Developer Role)](https://discuss.elastic.co/t/need-to-give-read-access-fleet-artifacts-system-index-to-non-admin-user-developer-role/366082)
**Author:** [@SachinJoshi](https://discuss.elastic.co/u/SachinJoshi)\ **Replies:** 17\ **Last updated:** [September 16, 2024, 4:07am UTC](https://discuss.elastic.co/t/need-to-give-read-access-fleet-artifacts-system-index-to-non-admin-user-developer-role/366082 "2024-09-16T04:07:00Z")
I want to give read access to .fleet-artifacts index to non admin users, these users having developer role. I have given the permission but i am getting following error when i try to access via api. "type": "security\_ex… --- ## [S3 compatible storage are not able to mounted for snapshot](https://discuss.elastic.co/t/s3-compatible-storage-are-not-able-to-mounted-for-snapshot/386444)
**Author:** [@Rajesh\_Kannan](https://discuss.elastic.co/u/Rajesh_Kannan)\ **Replies:** 11\ **Last updated:** [May 27, 2026, 11:05am UTC](https://discuss.elastic.co/t/s3-compatible-storage-are-not-able-to-mounted-for-snapshot/386444 "2026-05-27T11:05:50Z")
We are trying to mount the s3 storage( S3 compatible DataCore (caringo)) bucket on elastic 9.3.0 using the below command and we are getting "s3\_exception: A header you provided implies functionality that is not implement… --- ## [Slow cluster recovery after node system updates](https://discuss.elastic.co/t/slow-cluster-recovery-after-node-system-updates/383462)
**Author:** [@ecology5913](https://discuss.elastic.co/u/ecology5913)\ **Replies:** 9\ **Last updated:** [November 18, 2025, 6:34pm UTC](https://discuss.elastic.co/t/slow-cluster-recovery-after-node-system-updates/383462 "2025-11-18T18:34:20Z")
I’ve been doing lifecycle management for ES clusters recently, from clusters with indices without replicas to clusters with 1TB shards. While the problems with those examples are obvious, I recently got more ‘normal‘ cl… --- ## [Logstash date filter error](https://discuss.elastic.co/t/logstash-date-filter-error/313253)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 10\ **Last updated:** [August 31, 2022, 12:07pm UTC](https://discuss.elastic.co/t/logstash-date-filter-error/313253 "2022-08-31T12:07:58Z")
I have this field in my logs event\_time=2022-08-30 17:30:42.000 my logstash pipeline file is filter { if "average\_weight" in \[tags\] { kv { source=\>"message" target =\> "test" field\_split=\>"," } mutate { rename =\> { "\[t… --- ## [Breaking changes between elastic agent 8.16.1 and 8.16.3](https://discuss.elastic.co/t/breaking-changes-between-elastic-agent-8-16-1-and-8-16-3/374219)
**Author:** [@mtr\_sw](https://discuss.elastic.co/u/mtr_sw)\ **Replies:** 9\ **Last updated:** [April 3, 2025, 2:23pm UTC](https://discuss.elastic.co/t/breaking-changes-between-elastic-agent-8-16-1-and-8-16-3/374219 "2025-04-03T14:23:23Z")
We were successfully running the elastic agent using the image 8.16.1 in a Kubernetes replica set with the following environment variables set: FLEET\_ENROLL = "1" FLEET\_URL="\ via https" FLEET\_ENROLLME… --- ## [Logtash CSV Parser Fail Muline Value is counting next raw](https://discuss.elastic.co/t/logtash-csv-parser-fail-muline-value-is-counting-next-raw/318617)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 10\ **Last updated:** [November 11, 2022, 6:33pm UTC](https://discuss.elastic.co/t/logtash-csv-parser-fail-muline-value-is-counting-next-raw/318617 "2022-11-11T18:33:14Z")
see in my First raw last coulumn have multiline and second raw haveing signle line --- ## [Custom Logo Kibana 7.9.2 (guide)](https://discuss.elastic.co/t/custom-logo-kibana-7-9-2-guide/250814)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 6\ **Last updated:** [October 16, 2020, 3:49pm UTC](https://discuss.elastic.co/t/custom-logo-kibana-7-9-2-guide/250814 "2020-10-16T15:49:38Z")
Only verified on Kibana 7.9.2 running in Debian 10 Hello, For all users who, like me, need to customize the logos in Kibana, I share this guide that I have been creating myself as I have been able to solve each problem… --- ## [Report shows less data than shown in search results](https://discuss.elastic.co/t/report-shows-less-data-than-shown-in-search-results/355020)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 9\ **Last updated:** [March 12, 2024, 10:24am UTC](https://discuss.elastic.co/t/report-shows-less-data-than-shown-in-search-results/355020 "2024-03-12T10:24:14Z")
We are running 7.17.x Elasticsearch and have setup a reporting for a search query. The team needs a weekly dump and it appears the number of results are not matching the one shown in search query results For example: 7 … --- ## [Issue with connecting to local llm from 8.18.0 ESv](https://discuss.elastic.co/t/issue-with-connecting-to-local-llm-from-8-18-0-esv/380086)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 11\ **Last updated:** [July 24, 2025, 4:19am UTC](https://discuss.elastic.co/t/issue-with-connecting-to-local-llm-from-8-18-0-esv/380086 "2025-07-24T04:19:14Z")
Hello Team, We are facing issues with connecting to our local LLM from Elasticsearch cluster of 8.18.0 version. While we are able to connect the same model Llama 3.2 3B Instruct to the 8.15.1 Elasticsearch. Getting the… --- ## [Huge amount of Space not released for \_recovery\_source](https://discuss.elastic.co/t/huge-amount-of-space-not-released-for-recovery-source/375477)
**Author:** [@Wei\_Chen](https://discuss.elastic.co/u/Wei_Chen)\ **Replies:** 10\ **Last updated:** [April 2, 2025, 9:14pm UTC](https://discuss.elastic.co/t/huge-amount-of-space-not-released-for-recovery-source/375477 "2025-04-02T21:14:39Z")
Hi, I am trying to optimize my dense vector space usage of the \_source field but haven't got any luck so far. I tried with turning on synthetic source, but then I observed that I now see a new \_recovery\_source field taki… --- ## [Elastic Response to Blog ‘EDR 0-Day Vulnerability’](https://discuss.elastic.co/t/elastic-response-to-blog-edr-0-day-vulnerability/381093)
**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\ **Replies:** 1\ **Last updated:** [August 26, 2025, 7:03pm UTC](https://discuss.elastic.co/t/elastic-response-to-blog-edr-0-day-vulnerability/381093 "2025-08-26T19:03:51Z")
Updated: August 29, 2025 Elastic has been directly engaging with the independent researcher. After evaluating additional information provided by the researcher, our original assessment still stands. To confirm we are r… --- ## [How to reindex when source indices are continuously receiving data?](https://discuss.elastic.co/t/how-to-reindex-when-source-indices-are-continuously-receiving-data/385685)
**Author:** [@yogesh119905](https://discuss.elastic.co/u/yogesh119905)\ **Replies:** 10\ **Last updated:** [August 3, 2026, 7:41pm UTC](https://discuss.elastic.co/t/how-to-reindex-when-source-indices-are-continuously-receiving-data/385685 "2026-08-03T19:41:48Z")
Title: How to reindex when source indices are continuously receiving data? Description: I’m trying to perform a reindex operation in Elasticsearch where the source indices are continuously receiving new data. Scenari… --- ## [Mailing dashborad as PDF using Watcher](https://discuss.elastic.co/t/mailing-dashborad-as-pdf-using-watcher/372359)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 9\ **Last updated:** [December 28, 2024, 4:37pm UTC](https://discuss.elastic.co/t/mailing-dashborad-as-pdf-using-watcher/372359 "2024-12-28T16:37:26Z")
Hi All, I created a dashboard in Kibana and trying to set up a watcher that should send the dashboard as PDF to an email address periodically. My watcher json is as below: { "trigger": { "schedule": { "cro… --- ## [Filebeat HTTPJSON - Dynamic query in body](https://discuss.elastic.co/t/filebeat-httpjson-dynamic-query-in-body/376707)
**Author:** [@Jannus\_C](https://discuss.elastic.co/u/Jannus_C)\ **Replies:** 13\ **Last updated:** [May 2, 2025, 7:55am UTC](https://discuss.elastic.co/t/filebeat-httpjson-dynamic-query-in-body/376707 "2025-05-02T07:55:56Z")
Hello, I'm testing filebeat + httpjson against an elasticsearch instance. I'm able to retrieve all the data via scrolling using a "fixed query", - type: httpjson config\_version: 2 interval: 5m request.url: https… --- ## [APM for external plugin server side](https://discuss.elastic.co/t/apm-for-external-plugin-server-side/363759)
**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\ **Replies:** 15\ **Last updated:** [September 2, 2024, 3:15pm UTC](https://discuss.elastic.co/t/apm-for-external-plugin-server-side/363759 "2024-09-02T15:15:24Z")
Hello, I am creating an external kibana plugin in React, which has both public and server side, using ES and Kibana 8.13.0 (also testing in 8.14.3) I would like to have APM for the same. I have successfully added APM f… --- ## [Huge portion of transactions missing from Java agents after upgrade from 7 to 8](https://discuss.elastic.co/t/huge-portion-of-transactions-missing-from-java-agents-after-upgrade-from-7-to-8/370783)
**Author:** [@JamiK](https://discuss.elastic.co/u/JamiK)\ **Replies:** 10\ **Last updated:** [November 29, 2024, 9:10pm UTC](https://discuss.elastic.co/t/huge-portion-of-transactions-missing-from-java-agents-after-upgrade-from-7-to-8/370783 "2024-11-29T21:10:21Z")
Kibana version: 8.16.0 Elasticsearch version: 8.16.0 APM Server version: 8.16.0 APM Agent language and version: Java, 1.52.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: ECK … --- ## [Search docs not return 0 hits](https://discuss.elastic.co/t/search-docs-not-return-0-hits/357309)
**Author:** [@JPXotox](https://discuss.elastic.co/u/JPXotox)\ **Replies:** 9\ **Last updated:** [April 15, 2024, 1:23pm UTC](https://discuss.elastic.co/t/search-docs-not-return-0-hits/357309 "2024-04-15T13:23:09Z")
Hi, I´m trying to search some docs, in Kibana using discover i have 2 hits with the following timestamp: @timestamp Apr 3, 2024 @ 03:27:23.000 and Apr 3, 2024 @ 03:26:56.000 for a doc with a field "sender": "TEED-NEC45… --- ## [Troubleshooting an unstable cluster](https://discuss.elastic.co/t/troubleshooting-an-unstable-cluster/377070)
**Author:** [@lwm2016](https://discuss.elastic.co/u/lwm2016)\ **Replies:** 19\ **Last updated:** [April 14, 2025, 12:23pm UTC](https://discuss.elastic.co/t/troubleshooting-an-unstable-cluster/377070 "2025-04-14T12:23:54Z")
Hi Team, We have deployed a cluster of across 9 physical machines, each hosting multiple instances. The hardware specifications per machine are: 112 CPU cores 503 GB memory Here's cluster and node info { "name" :… --- ## [Create a data view](https://discuss.elastic.co/t/create-a-data-view/375485)
**Author:** [@arcsons](https://discuss.elastic.co/u/arcsons)\ **Replies:** 10\ **Last updated:** [March 11, 2025, 12:08pm UTC](https://discuss.elastic.co/t/create-a-data-view/375485 "2025-03-11T12:08:04Z")
Hi everyone, I have two hosts that I want to add to a Data View. Their logs are being sent to this data stream .ds-logs-elastic\_agent.fleet\_server-default-2025.02.04-000004 I have tested using an alias with a filter, … --- ## [Filebeat CEL input blames timeout while debug shows proper response](https://discuss.elastic.co/t/filebeat-cel-input-blames-timeout-while-debug-shows-proper-response/374776)
**Author:** [@rlevitsky](https://discuss.elastic.co/u/rlevitsky)\ **Replies:** 13\ **Last updated:** [February 26, 2025, 10:04pm UTC](https://discuss.elastic.co/t/filebeat-cel-input-blames-timeout-while-debug-shows-proper-response/374776 "2025-02-26T22:04:35Z")
Hi community, I'm trying to fetch the Symantec's Event Stream (Broadcom Enterprise Security Group - API Documentation) with filebeat. First of all, to check if Symantec's side works properly, I wrote this script to fet… --- ## [Ingest pipeline pattern matching - much help needed](https://discuss.elastic.co/t/ingest-pipeline-pattern-matching-much-help-needed/379207)
**Author:** [@SteveParker](https://discuss.elastic.co/u/SteveParker)\ **Replies:** 12\ **Last updated:** [June 24, 2025, 1:13pm UTC](https://discuss.elastic.co/t/ingest-pipeline-pattern-matching-much-help-needed/379207 "2025-06-24T13:13:43Z")
Hi all I am using the following ES|QL to pattern match a substring in a field from a filebeat index - FROM filebeat-\* | WHERE url.original LIKE "q=" It would make a lot of sense to drop any incoming documents that do… --- ## [Issue with Communication Between Two Elasticsearch Nodes Using Docker](https://discuss.elastic.co/t/issue-with-communication-between-two-elasticsearch-nodes-using-docker/371174)
**Author:** [@Telos](https://discuss.elastic.co/u/Telos)\ **Replies:** 9\ **Last updated:** [November 28, 2024, 2:27pm UTC](https://discuss.elastic.co/t/issue-with-communication-between-two-elasticsearch-nodes-using-docker/371174 "2024-11-28T14:27:31Z")
Hello everyone, I am currently experimenting with Elasticsearch, and I would like to set up a small infrastructure with 2 nodes that are not on the same server but within the same cluster. I’m using Docker for this. Whi… --- ## [Elasticsearch search query returning "empty" response using elasticsearch python API](https://discuss.elastic.co/t/elasticsearch-search-query-returning-empty-response-using-elasticsearch-python-api/365983)
**Author:** [@manropinxu](https://discuss.elastic.co/u/manropinxu)\ **Replies:** 9\ **Last updated:** [September 12, 2024, 7:17am UTC](https://discuss.elastic.co/t/elasticsearch-search-query-returning-empty-response-using-elasticsearch-python-api/365983 "2024-09-12T07:17:40Z")
I am using elasticsearch py client in my real time application. The application performs search query aggregations like "sum of field settledAmount in last 10 days". Most of queries work without problems. However a tin… --- ## [Configure two sets of hosts for different logs](https://discuss.elastic.co/t/configure-two-sets-of-hosts-for-different-logs/358094)
**Author:** [@swtg](https://discuss.elastic.co/u/swtg)\ **Replies:** 9\ **Last updated:** [April 26, 2024, 3:23am UTC](https://discuss.elastic.co/t/configure-two-sets-of-hosts-for-different-logs/358094 "2024-04-26T03:23:27Z")
Hi Team, I am looking to configure 2 sets of kafka hosts to which different logs will be sent. Example: filebeat.inputs: syslog this should be sent via below hosts and without any authentication (no auth configured o… --- ## [Why query result cannot be generated all data (csv) of specific days in Elastic Search](https://discuss.elastic.co/t/why-query-result-cannot-be-generated-all-data-csv-of-specific-days-in-elastic-search/340674)
**Author:** [@jt2023](https://discuss.elastic.co/u/jt2023)\ **Replies:** 9\ **Last updated:** [August 12, 2023, 9:14am UTC](https://discuss.elastic.co/t/why-query-result-cannot-be-generated-all-data-csv-of-specific-days-in-elastic-search/340674 "2023-08-12T09:14:11Z")
why query result cannot be generated all data (csv) of specific days in Elastic Search. For example, i searched for 15,16,17 July data, but only 17July can be generated and displayed in csv file --- ## [Problem in installing & configuration of elasticsearch](https://discuss.elastic.co/t/problem-in-installing-configuration-of-elasticsearch/362465)
**Author:** [@arjun2001](https://discuss.elastic.co/u/arjun2001)\ **Replies:** 9\ **Last updated:** [July 5, 2024, 1:49pm UTC](https://discuss.elastic.co/t/problem-in-installing-configuration-of-elasticsearch/362465 "2024-07-05T13:49:58Z")
Actually my requirement is to implement the elasticsearch in my angular application. so i installed the jvm & elasticsearch from the official websites and also i am successfully installed & configured that. but now i am … --- ## [Docker integration - condition not working](https://discuss.elastic.co/t/docker-integration-condition-not-working/377864)
**Author:** [@dot-mike](https://discuss.elastic.co/u/dot-mike)\ **Replies:** 12\ **Last updated:** [May 28, 2025, 5:49am UTC](https://discuss.elastic.co/t/docker-integration-condition-not-working/377864 "2025-05-28T05:49:09Z")
Hi all, thanks for amazing product. I'm trying to set condition for docker logs ingestion and I'm not having success. I always get some kind of error, see below. Please help me enable conditional logs based on label. U… --- ## [Already deleted monitor is reporting monitor status to elasticsearch](https://discuss.elastic.co/t/already-deleted-monitor-is-reporting-monitor-status-to-elasticsearch/377936)
**Author:** [@niecore](https://discuss.elastic.co/u/niecore)\ **Replies:** 12\ **Last updated:** [May 21, 2025, 5:44am UTC](https://discuss.elastic.co/t/already-deleted-monitor-is-reporting-monitor-status-to-elasticsearch/377936 "2025-05-21T05:44:42Z")
I deleted a synthetics monitor but still receive new monitor results in the synthetics-\* datastream. The monitor is also still visible in the old uptime app and the monitor is triggering alerts that are configured based … [Previous page](https://discuss.elastic.co/top.md?page=245&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=247&per_page=50&period=all)