# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=70 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 71 --- ## [Filebeat logging format on Windows](https://discuss.elastic.co/t/filebeat-logging-format-on-windows/378052)
**Author:** [@jpiche](https://discuss.elastic.co/u/jpiche)\ **Replies:** 4\ **Last updated:** [May 14, 2025, 9:55pm UTC](https://discuss.elastic.co/t/filebeat-logging-format-on-windows/378052 "2025-05-14T21:55:47Z")
Is there a way to control the logging format used by filebeat? I'm talking about filebeat's own logging, not the logs I want to process. For some reason, filebeat is logging to json. I don't have a logging section in my… --- ## [Elastic-agent ingest interval](https://discuss.elastic.co/t/elastic-agent-ingest-interval/357921)
**Author:** [@nml1988](https://discuss.elastic.co/u/nml1988)\ **Replies:** 2\ **Last updated:** [May 14, 2025, 8:42pm UTC](https://discuss.elastic.co/t/elastic-agent-ingest-interval/357921 "2025-05-14T20:42:46Z")
Hi people! I need your help with a requirement. I installed an elastic-agent 8.11.4 on a windows server to read and send data from .csv files by integrating fleet 'custom logs'. The agent was installed by default. Cu… --- ## [Ingesting Prometheus data via remote\_write with Elastic Agent (EKS)](https://discuss.elastic.co/t/ingesting-prometheus-data-via-remote-write-with-elastic-agent-eks/377969)
**Author:** [@trudesea](https://discuss.elastic.co/u/trudesea)\ **Replies:** 8\ **Last updated:** [May 14, 2025, 5:28pm UTC](https://discuss.elastic.co/t/ingesting-prometheus-data-via-remote-write-with-elastic-agent-eks/377969 "2025-05-14T17:28:23Z")
So I have a EKS cluster using the Prometheus helm chart. I've followed this doc: But this documentation is well, atrocious. I assume the Host in the provided screenshot is the Prometheus server that is configured … --- ## [Oldest Version of Elastic Agent compatible with Elasticsearch 9.0?](https://discuss.elastic.co/t/oldest-version-of-elastic-agent-compatible-with-elasticsearch-9-0/378099)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 5\ **Last updated:** [May 14, 2025, 4:16pm UTC](https://discuss.elastic.co/t/oldest-version-of-elastic-agent-compatible-with-elasticsearch-9-0/378099 "2025-05-14T16:16:20Z")
What is the oldest version of Elastic Agent which can be used with Elasticsearch 9.x? The compatibility matrix doesn't show any 8.x compatibility and I have a few agents on AWS hosts that are currently pinned to 8.4.x an… --- ## [Cannot synchronize elasticsearch repo in TheForeman](https://discuss.elastic.co/t/cannot-synchronize-elasticsearch-repo-in-theforeman/377553)
**Author:** [@tiga](https://discuss.elastic.co/u/tiga)\ **Replies:** 2\ **Last updated:** [May 14, 2025, 11:48am UTC](https://discuss.elastic.co/t/cannot-synchronize-elasticsearch-repo-in-theforeman/377553 "2025-05-14T11:48:03Z")
I cannot synchronize Elasticsearch 8.x yum repository under https://artifacts.elastic.co/packages/8.x/yum The issue I got is: HTTP status code: 502 Response headers: {"Date"=\>"Sun, 27 Apr 2025 16:30:38 GMT", "Server"=\>"… --- ## [Filebeat 7.15.1 is not reading one of the filebeat.inputs, in logs showing Loading Inputs: 2 and then in other line shows Enabled inputs: 1](https://discuss.elastic.co/t/filebeat-7-15-1-is-not-reading-one-of-the-filebeat-inputs-in-logs-showing-loading-inputs-2-and-then-in-other-line-shows-enabled-inputs-1/377896)
**Author:** [@Geeta\_Sharma](https://discuss.elastic.co/u/Geeta_Sharma)\ **Replies:** 7\ **Last updated:** [May 14, 2025, 10:13am UTC](https://discuss.elastic.co/t/filebeat-7-15-1-is-not-reading-one-of-the-filebeat-inputs-in-logs-showing-loading-inputs-2-and-then-in-other-line-shows-enabled-inputs-1/377896 "2025-05-14T10:13:43Z")
I have used filebeat.inputs to send my custom logs via logstash output and then to elasticsearch but only one input is getting read other one is getting ignored even though both is enabled. Tried everything but it is not… --- ## [Sql/metrics input in Elastic Agent not returning data (v8.14.3, PostgreSQL 17.2)](https://discuss.elastic.co/t/sql-metrics-input-in-elastic-agent-not-returning-data-v8-14-3-postgresql-17-2/378128)
**Author:** [@Linuxguru](https://discuss.elastic.co/u/Linuxguru)\ **Replies:** 0\ **Last updated:** [May 14, 2025, 10:12am UTC](https://discuss.elastic.co/t/sql-metrics-input-in-elastic-agent-not-returning-data-v8-14-3-postgresql-17-2/378128 "2025-05-14T10:12:29Z")
Hi, I'm using Elastic Agent in standalone mode (without Fleet) on RHEL 9, version 8.14.3. I aim to collect the max\_connections value from pg\_settings in PostgreSQL 17.2 and correlate it with the number of active connect… --- ## [Please teach me search substrings in Elasticsearch query](https://discuss.elastic.co/t/please-teach-me-search-substrings-in-elasticsearch-query/378115)
**Author:** [@t\_rin](https://discuss.elastic.co/u/t_rin)\ **Replies:** 2\ **Last updated:** [May 14, 2025, 5:59am UTC](https://discuss.elastic.co/t/please-teach-me-search-substrings-in-elasticsearch-query/378115 "2025-05-14T05:59:52Z")
DELETE content-search-test PUT content-search-test { "mappings": { "properties": { "content": { "type": "text", "analyzer": "kuromoji\_analyzer", "f… --- ## [Status: (FAILED) could not start output: failed to reload output: open : no such file or directory reading \ accessing 'elasticsearch'](https://discuss.elastic.co/t/status-failed-could-not-start-output-failed-to-reload-output-open-no-such-file-or-directory-reading-nil-accessing-elasticsearch/377950)
**Author:** [@neofall](https://discuss.elastic.co/u/neofall)\ **Replies:** 8\ **Last updated:** [May 14, 2025, 2:56am UTC](https://discuss.elastic.co/t/status-failed-could-not-start-output-failed-to-reload-output-open-no-such-file-or-directory-reading-nil-accessing-elasticsearch/377950 "2025-05-14T02:56:11Z")
I have strangers error from my fleet server is Unhealthy and then I check the the elastic-agent status : Before that I've problem with x509 unknown authority error but it disappeared in elastic agent logs because I'm… --- ## [Migration to V8: kibana reporting-user depreciated](https://discuss.elastic.co/t/migration-to-v8-kibana-reporting-user-depreciated/378100)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 0\ **Last updated:** [May 13, 2025, 9:03pm UTC](https://discuss.elastic.co/t/migration-to-v8-kibana-reporting-user-depreciated/378100 "2025-05-13T21:03:47Z")
basic license on version 7.17... I spent hours on this yesterday and failed to figure out how to use "kibana privileges" to allow reporting for users. the screenshot in the documentation do not match what I see. I res… --- ## [Custom mapping types in index templates are deprecated --](https://discuss.elastic.co/t/custom-mapping-types-in-index-templates-are-deprecated/378068)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 0\ **Last updated:** [May 13, 2025, 1:58am UTC](https://discuss.elastic.co/t/custom-mapping-types-in-index-templates-are-deprecated/378068 "2025-05-13T01:58:19Z")
I am getting ready to move to version 8 (at last)... Under " deprecation issues" I get Custom mapping types in index templates are deprecated. I have never knowing used anything except \_type: doc and have never set up… --- ## [Need help with getting task list on a particular node](https://discuss.elastic.co/t/need-help-with-getting-task-list-on-a-particular-node/378096)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 1\ **Last updated:** [May 13, 2025, 6:25pm UTC](https://discuss.elastic.co/t/need-help-with-getting-task-list-on-a-particular-node/378096 "2025-05-13T18:25:58Z")
Sorry to post such simple request, but the new online documentation is really useless. The reference site to old doc is also useless because the searching feature is broken. I need to list all the tasks on a particular… --- ## [NATS Integration with an Elastic Agent Container](https://discuss.elastic.co/t/nats-integration-with-an-elastic-agent-container/378092)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 0\ **Last updated:** [May 13, 2025, 3:40pm UTC](https://discuss.elastic.co/t/nats-integration-with-an-elastic-agent-container/378092 "2025-05-13T15:40:20Z")
I want to log all the NATS messages handled by a NATS server to a Elasticsearch instance. I want to do it in the following manner: Using serverless cloud instances of Elasticsearch and Kibana Using Elastic Agent and Fl… --- ## [Migrate Elastic indexes betwewn v6 and v8](https://discuss.elastic.co/t/migrate-elastic-indexes-betwewn-v6-and-v8/377943)
**Author:** [@miguel4](https://discuss.elastic.co/u/miguel4)\ **Replies:** 6\ **Last updated:** [May 13, 2025, 12:23pm UTC](https://discuss.elastic.co/t/migrate-elastic-indexes-betwewn-v6-and-v8/377943 "2025-05-13T12:23:26Z")
Hello, I currently have a Stack ELK with version 6.x of Elastic whose data we want I have to migrate to v8.x. I want to migrate only the indexes. With dumps I have seen that it is impossible to do it directly without go… --- ## [Can we resue serialized ShardSearchRequest in coordinator? And reuse it among channels?](https://discuss.elastic.co/t/can-we-resue-serialized-shardsearchrequest-in-coordinator-and-reuse-it-among-channels/378067)
**Author:** [@vsop\_479](https://discuss.elastic.co/u/vsop_479)\ **Replies:** 2\ **Last updated:** [May 13, 2025, 9:56am UTC](https://discuss.elastic.co/t/can-we-resue-serialized-shardsearchrequest-in-coordinator-and-reuse-it-among-channels/378067 "2025-05-13T09:56:23Z")
When coordinator send ShardSearchRequest to data nodes, it need serialize this shard request many times for every shard, even these request are all the same. Can we just serialize it one time, and send it to different s… --- ## [How to Use Machine Learning with Packetbeat to Detect Network Anomalies in Elastic Stack?](https://discuss.elastic.co/t/how-to-use-machine-learning-with-packetbeat-to-detect-network-anomalies-in-elastic-stack/378075)
**Author:** [@nzeland149](https://discuss.elastic.co/u/nzeland149)\ **Replies:** 0\ **Last updated:** [May 13, 2025, 9:31am UTC](https://discuss.elastic.co/t/how-to-use-machine-learning-with-packetbeat-to-detect-network-anomalies-in-elastic-stack/378075 "2025-05-13T09:31:07Z")
I'm currently working on a network monitoring project using the Elastic Stack and Packetbeat, and I'm interested in using Elastic Machine Learning to detect anomalies in network traffic. However, I'm not sure how to prop… --- ## [Trial Extension ](https://discuss.elastic.co/t/trial-extension/378069)
**Author:** [@Miguel\_Nicolas\_Loaiz](https://discuss.elastic.co/u/Miguel_Nicolas_Loaiz)\ **Replies:** 0\ **Last updated:** [May 13, 2025, 1:58am UTC](https://discuss.elastic.co/t/trial-extension/378069 "2025-05-13T01:58:52Z")
Hi Elastic Team, We’re currently running some testing and demo work using the self-managed version of Elasticsearch. Unfortunately, our 30-day trial has just expired, and we still need a bit more time to finish up our e… --- ## [Why is the file scanned as a non secure file?](https://discuss.elastic.co/t/why-is-the-file-scanned-as-a-non-secure-file/378018)
**Author:** [@matianyang1203](https://discuss.elastic.co/u/matianyang1203)\ **Replies:** 2\ **Last updated:** [May 13, 2025, 1:09am UTC](https://discuss.elastic.co/t/why-is-the-file-scanned-as-a-non-secure-file/378018 "2025-05-13T01:09:49Z")
c:/program files/elk/elasticsearch-8.15.0/data/indices/tdnqopoytdeizxdumput4w/0/index/\_dx.cfs, \_7t.cfs, \_6z.cfs. These files are scanned as suspicious Trojan files! --- ## ["no external input files" when trying to run the nginx elastic agent tutorial](https://discuss.elastic.co/t/no-external-input-files-when-trying-to-run-the-nginx-elastic-agent-tutorial/378066)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 0\ **Last updated:** [May 12, 2025, 10:38pm UTC](https://discuss.elastic.co/t/no-external-input-files-when-trying-to-run-the-nginx-elastic-agent-tutorial/378066 "2025-05-12T22:38:12Z")
I am following Example: Use standalone Elastic Agent with Elastic Cloud Serverless to monitor nginx. I am stuck at Step 6: Configure standalone Elastic Agent. I have created an API key, an Elastic Agent policy, and adde… --- ## [Jdbc\_static dealing with parameters from not existing fields](https://discuss.elastic.co/t/jdbc-static-dealing-with-parameters-from-not-existing-fields/377628)
**Author:** [@Francesco\_Esposito](https://discuss.elastic.co/u/Francesco_Esposito)\ **Replies:** 3\ **Last updated:** [May 12, 2025, 10:09pm UTC](https://discuss.elastic.co/t/jdbc-static-dealing-with-parameters-from-not-existing-fields/377628 "2025-05-12T22:09:37Z")
I'm trying to use the jdbc\_static filter in my logstash pipeline, but I am getting the following error: \[2025-04-29T10:36:48,983\]\[WARN \]\[logstash.filters.jdbc.lookup\]\[test\]\[udplogstash\] Parameter field not found in even… --- ## [Elastic Integration - Custom HTTP API](https://discuss.elastic.co/t/elastic-integration-custom-http-api/378056)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [May 12, 2025, 6:52pm UTC](https://discuss.elastic.co/t/elastic-integration-custom-http-api/378056 "2025-05-12T18:52:59Z")
Hello, I am not sure why Custom API is not working: There's no logs, it seems like its not attempting to run? Custom API integration vv1.22.0 Elasticsearch v8.18.0 Elastic Agent v8.16.3 --- ## [Kibana does not recognize Elasticsearch license](https://discuss.elastic.co/t/kibana-does-not-recognize-elasticsearch-license/377853)
**Author:** [@maario](https://discuss.elastic.co/u/maario)\ **Replies:** 5\ **Last updated:** [May 12, 2025, 2:17pm UTC](https://discuss.elastic.co/t/kibana-does-not-recognize-elasticsearch-license/377853 "2025-05-12T14:17:56Z")
Hi there We recently upgraded our cluster (8 ES Nodes, 1 Kibana Node) from 8.14.3 to 8.17.5. We ran into various issues along the way due to an issue in VMware and had to transfer all our VMs to a different storage. Th… --- ## [Does file input plugin support backpressure](https://discuss.elastic.co/t/does-file-input-plugin-support-backpressure/378035)
**Author:** [@Anandh\_Kumar](https://discuss.elastic.co/u/Anandh_Kumar)\ **Replies:** 4\ **Last updated:** [May 12, 2025, 1:44pm UTC](https://discuss.elastic.co/t/does-file-input-plugin-support-backpressure/378035 "2025-05-12T13:44:39Z")
We are using a file input plugin 4.4 latest version with logstash 8.17.0. We have a kafka output plugin using a file input plugin using a persistent queue on a dedicated pipeline. Does file input support backpressure ,… --- ## [How to query for audit data - AU-2 data](https://discuss.elastic.co/t/how-to-query-for-audit-data-au-2-data/378039)
**Author:** [@simpsonr1](https://discuss.elastic.co/u/simpsonr1)\ **Replies:** 0\ **Last updated:** [May 12, 2025, 1:19pm UTC](https://discuss.elastic.co/t/how-to-query-for-audit-data-au-2-data/378039 "2025-05-12T13:19:44Z")
How do I find audit or query for audit in Kibana? --- ## [How to Elasticsearch Backup/Restore (User, Role, and Repository Settings)](https://discuss.elastic.co/t/how-to-elasticsearch-backup-restore-user-role-and-repository-settings/377995)
**Author:** [@Jinhee\_Jeong](https://discuss.elastic.co/u/Jinhee_Jeong)\ **Replies:** 3\ **Last updated:** [May 12, 2025, 11:59am UTC](https://discuss.elastic.co/t/how-to-elasticsearch-backup-restore-user-role-and-repository-settings/377995 "2025-05-12T11:59:20Z")
Hi there, I’ve set up an Elasticsearch cluster using Docker Compose with 3 Elasticsearch nodes and 1 Kibana — so a total of 4 Docker containers. I’m currently working on testing backup and restore functionality. First… --- ## [Enable logging for rspec on Logstash plugin](https://discuss.elastic.co/t/enable-logging-for-rspec-on-logstash-plugin/378034)
**Author:** [@frans-wtax](https://discuss.elastic.co/u/frans-wtax)\ **Replies:** 0\ **Last updated:** [May 12, 2025, 10:28am UTC](https://discuss.elastic.co/t/enable-logging-for-rspec-on-logstash-plugin/378034 "2025-05-12T10:28:25Z")
I'm making some changes to the logstash-input-salesforce plugin and would like to be able to see the logging generated by @logger.debug statements when running rspec tests. Currently, when rspec starts, it prints Sendin… --- ## [Kubertnetes Integration with package policy on ECK](https://discuss.elastic.co/t/kubertnetes-integration-with-package-policy-on-eck/378027)
**Author:** [@Elle\_K](https://discuss.elastic.co/u/Elle_K)\ **Replies:** 0\ **Last updated:** [May 12, 2025, 8:51am UTC](https://discuss.elastic.co/t/kubertnetes-integration-with-package-policy-on-eck/378027 "2025-05-12T08:51:13Z")
I am trying to use the Kubernetes Integration and deploy it to an agent for my ECK cluster. I have included my yml file below. I also included a snippet of output from the Dev tools command GET kbn:/api/fleet/package\_po… --- ## [Filebeat - elasticsearch](https://discuss.elastic.co/t/filebeat-elasticsearch/378020)
**Author:** [@n0405](https://discuss.elastic.co/u/n0405)\ **Replies:** 1\ **Last updated:** [May 12, 2025, 6:55am UTC](https://discuss.elastic.co/t/filebeat-elasticsearch/378020 "2025-05-12T06:55:39Z")
Hello , I use filebeat to send logs to Elasticsearch , but my configuration wan't work . I use version 8.18.1. In Elasticsearch config file this is security settinges : xpack.security.enabled: true xpack.security.enr… --- ## [How can i generate UUID in nodejs](https://discuss.elastic.co/t/how-can-i-generate-uuid-in-nodejs/377231)
**Author:** [@parsamoloudi](https://discuss.elastic.co/u/parsamoloudi)\ **Replies:** 2\ **Last updated:** [May 12, 2025, 5:03am UTC](https://discuss.elastic.co/t/how-can-i-generate-uuid-in-nodejs/377231 "2025-05-12T05:03:31Z")
i want to generate unique id in my each document in NodeJS --- ## [Rollover Alternatives for Updating?](https://discuss.elastic.co/t/rollover-alternatives-for-updating/378013)
**Author:** [@mvkfg](https://discuss.elastic.co/u/mvkfg)\ **Replies:** 4\ **Last updated:** [May 11, 2025, 3:38pm UTC](https://discuss.elastic.co/t/rollover-alternatives-for-updating/378013 "2025-05-11T15:38:28Z")
Hi, I have an Elasticsearch setup which is running version 8.18.1, which is used for bulk data logging and searching. Initially, I was using the default settings, but once my index became larger than 20GB, I decided to … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=69) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=71)