{"users":[{"id":10,"username":"Leslie_Hawthorn","name":"Leslie Hawthorn","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/l/7c8e57/{size}.png","trust_level":1},{"id":-1,"username":"system","name":"system","avatar_template":"https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png","admin":true,"moderator":true,"trust_level":4},{"id":60,"username":"warkolm","name":"Mark Walkom","avatar_template":"/user_avatar/discuss.elastic.co/warkolm/{size}/39224_2.png","trust_level":2},{"id":167970,"username":"coldmint","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/c/67e7ee/{size}.png","trust_level":0},{"id":167795,"username":"arav","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/b9e5f3/{size}.png","trust_level":1},{"id":155525,"username":"Thirupathi","name":"Thirupathi","avatar_template":"/user_avatar/discuss.elastic.co/thirupathi/{size}/145431_2.png","trust_level":1},{"id":34955,"username":"leandrojmp","name":"Leandro Pereira","avatar_template":"/user_avatar/discuss.elastic.co/leandrojmp/{size}/107231_2.png","primary_group_name":"elastic_certified","flair_name":"elastic_certified","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/4/b/4b7ff6230ea5ae3c4c3f43b26e783b36ceea35b2.png","flair_color":"00BFB3","flair_group_id":46,"trust_level":2},{"id":167924,"username":"h123123123","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/h/e47774/{size}.png","trust_level":0},{"id":167855,"username":"empee","name":"Manuel Palumbo","avatar_template":"/user_avatar/discuss.elastic.co/empee/{size}/147123_2.png","trust_level":0},{"id":167829,"username":"briandoesdev","name":"","avatar_template":"/user_avatar/discuss.elastic.co/briandoesdev/{size}/147104_2.png","trust_level":1},{"id":151566,"username":"waitspring","name":"Fu Xuanming","avatar_template":"/user_avatar/discuss.elastic.co/waitspring/{size}/124922_2.png","trust_level":1},{"id":159710,"username":"Tortoise","name":"","avatar_template":"/user_avatar/discuss.elastic.co/tortoise/{size}/143659_2.png","trust_level":3},{"id":162489,"username":"Alyssa_Nunez","name":"Alyssa Nunez","avatar_template":"/user_avatar/discuss.elastic.co/alyssa_nunez/{size}/139985_2.png","trust_level":0},{"id":99262,"username":"NickFritts","name":"Nick Fritts","avatar_template":"/user_avatar/discuss.elastic.co/nickfritts/{size}/47189_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"trust_level":4},{"id":167805,"username":"raychinov","name":"Kolyo Raychinov","avatar_template":"/user_avatar/discuss.elastic.co/raychinov/{size}/147062_2.png","trust_level":0},{"id":134509,"username":"TiagoQueiroz","name":"Tiago Queiroz","avatar_template":"/user_avatar/discuss.elastic.co/tiagoqueiroz/{size}/107061_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"trust_level":4},{"id":167686,"username":"Cesar_Mejia","name":"César Mejía","avatar_template":"/user_avatar/discuss.elastic.co/cesar_mejia/{size}/141794_2.png","trust_level":1},{"id":152003,"username":"amitkumar.gupta","name":"Amit","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/ee7513/{size}.png","trust_level":1},{"id":84308,"username":"stephenb","name":"Stephen Brown","avatar_template":"/user_avatar/discuss.elastic.co/stephenb/{size}/40856_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"admin":true,"moderator":true,"trust_level":4},{"id":29038,"username":"RainTown","name":"Kevin Maguire","avatar_template":"/user_avatar/discuss.elastic.co/raintown/{size}/140206_2.png","trust_level":3},{"id":167807,"username":"maxp1","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/7c8e57/{size}.png","trust_level":0},{"id":38199,"username":"mark54g","name":"Mark Vovchuk","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/cc9497/{size}.png","trust_level":1},{"id":162058,"username":"Vishwadeeptha_P","name":"Vishwadeeptha P","avatar_template":"/user_avatar/discuss.elastic.co/vishwadeeptha_p/{size}/139320_2.png","trust_level":0},{"id":49889,"username":"strawgate","name":"William Easton","avatar_template":"/user_avatar/discuss.elastic.co/strawgate/{size}/131008_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"trust_level":4},{"id":165261,"username":"shabpa","name":"Alexander","avatar_template":"/user_avatar/discuss.elastic.co/shabpa/{size}/143684_2.png","trust_level":1},{"id":167773,"username":"steverb38","name":"Steverb38","avatar_template":"/user_avatar/discuss.elastic.co/steverb38/{size}/147021_2.png","trust_level":0},{"id":167770,"username":"ciranor","name":null,"avatar_template":"/user_avatar/discuss.elastic.co/ciranor/{size}/147015_2.png","trust_level":0},{"id":113015,"username":"Rios","name":"Rios","avatar_template":"/user_avatar/discuss.elastic.co/rios/{size}/95745_2.png","trust_level":2},{"id":161264,"username":"_som","name":"Som","avatar_template":"/user_avatar/discuss.elastic.co/_som/{size}/138182_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"trust_level":4},{"id":117968,"username":"Andex","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/848f3c/{size}.png","trust_level":1},{"id":115149,"username":"marc.guasch","name":"Marc Guasch","avatar_template":"/user_avatar/discuss.elastic.co/marc.guasch/{size}/74642_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"trust_level":4},{"id":12203,"username":"willemdh","name":"WillemDH","avatar_template":"/user_avatar/discuss.elastic.co/willemdh/{size}/16922_2.png","trust_level":2},{"id":167731,"username":"SteveJR1","name":"Steve Junior","avatar_template":"/user_avatar/discuss.elastic.co/stevejr1/{size}/137049_2.png","trust_level":0},{"id":133982,"username":"melkamar","name":"Martin Melka","avatar_template":"/user_avatar/discuss.elastic.co/melkamar/{size}/100785_2.png","trust_level":1},{"id":167696,"username":"TheBob","name":"Bob","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/t/cab0a1/{size}.png","trust_level":0},{"id":12248,"username":"andrewkroh","name":"Andrew Kroh","avatar_template":"/user_avatar/discuss.elastic.co/andrewkroh/{size}/3784_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"moderator":true,"trust_level":2},{"id":167693,"username":"maryam_naeem","name":"MARYAM","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/838e76/{size}.png","trust_level":0},{"id":112102,"username":"Aniket_Pant","name":"kaal","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/77aa72/{size}.png","trust_level":2},{"id":167640,"username":"Lev_Anni","name":"Lev Anni","avatar_template":"/user_avatar/discuss.elastic.co/lev_anni/{size}/146836_2.png","trust_level":0},{"id":128069,"username":"tractor_boy","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/t/278dde/{size}.png","trust_level":1},{"id":167632,"username":"Jayesh_Auti","name":"Jayesh Auti","avatar_template":"/user_avatar/discuss.elastic.co/jayesh_auti/{size}/140043_2.png","trust_level":0},{"id":152798,"username":"whanklee","name":"","avatar_template":"/user_avatar/discuss.elastic.co/whanklee/{size}/126612_2.png","trust_level":1},{"id":163090,"username":"mistrhanky1","name":"mistrhanky","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/6de8d8/{size}.png","trust_level":1},{"id":167535,"username":"luxin88","name":"","avatar_template":"/user_avatar/discuss.elastic.co/luxin88/{size}/146729_2.png","trust_level":0},{"id":159598,"username":"cahl","name":"Cesar","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/c/cab0a1/{size}.png","trust_level":1},{"id":167463,"username":"marian.veverka","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/74df32/{size}.png","trust_level":0},{"id":167464,"username":"k0i3n","name":"k0i3n","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/k/8edcca/{size}.png","trust_level":0}],"primary_groups":[{"id":46,"name":"elastic_certified"},{"id":44,"name":"elastic_team"}],"flair_groups":[{"id":46,"name":"elastic_certified","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/4/b/4b7ff6230ea5ae3c4c3f43b26e783b36ceea35b2.png","flair_bg_color":"","flair_color":"00BFB3"},{"id":44,"name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_bg_color":"","flair_color":""}],"topic_list":{"can_create_topic":false,"more_topics_url":"/c/elastic-stack/beats/28?page=1","per_page":30,"top_tags":[{"id":54,"name":"filebeat","slug":"filebeat"},{"id":56,"name":"metricbeat","slug":"metricbeat"},{"id":57,"name":"winlogbeat","slug":"winlogbeat"},{"id":15,"name":"docker","slug":"docker"},{"id":55,"name":"packetbeat","slug":"packetbeat"},{"id":29,"name":"beats-module","slug":"beats-module"},{"id":58,"name":"heartbeat","slug":"heartbeat"},{"id":59,"name":"auditbeat","slug":"auditbeat"},{"id":25,"name":"fleet","slug":"fleet"},{"id":63,"name":"elastic-agent","slug":"elastic-agent"},{"id":51,"name":"beats-development","slug":"beats-development"},{"id":7,"name":"elastic-stack-monitoring","slug":"elastic-stack-monitoring"},{"id":60,"name":"functionbeat","slug":"functionbeat"},{"id":8,"name":"elastic-stack-security","slug":"elastic-stack-security"},{"id":28,"name":"ilm-index-lifecycle-management","slug":"ilm-index-lifecycle-management"},{"id":53,"name":"journalbeat","slug":"journalbeat"},{"id":44,"name":"windows","slug":"windows"},{"id":12,"name":"elastic-stack-alerting","slug":"elastic-stack-alerting"},{"id":82,"name":"ingest-pipeline","slug":"ingest-pipeline"},{"id":73,"name":"libbeat","slug":"libbeat"},{"id":26,"name":"ecs-elastic-common-schema","slug":"ecs-elastic-common-schema"},{"id":104,"name":"integrations","slug":"integrations"},{"id":85,"name":"datastreams","slug":"datastreams"},{"id":94,"name":"osquery-manager","slug":"osquery-manager"},{"id":14,"name":"license","slug":"license"},{"id":19,"name":"painless","slug":"painless"},{"id":9,"name":"elastic-stack-machine-learning","slug":"elastic-stack-machine-learning"},{"id":92,"name":"runtime-fields","slug":"runtime-fields"},{"id":41,"name":"windows-installer","slug":"windows-installer"},{"id":114,"name":"infrastructure-observability","slug":"infrastructure-observability"},{"id":49,"name":"kql-kibana-query-language","slug":"kql-kibana-query-language"}],"topics":[{"fancy_title":"About the Beats category","id":1067,"title":"About the Beats category","slug":"about-the-beats-category","posts_count":6,"reply_count":1,"highest_post_number":8,"image_url":null,"created_at":"2015-05-21T09:27:28.284Z","last_posted_at":"2020-06-04T01:30:19.199Z","bumped":true,"bumped_at":"2016-03-04T20:12:38.878Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Lightweight data shippers\nBeats is a free and open platform for single-purpose data shippers. They send data from hundreds or thousands of machines and systems to Logstash or Elasticsearch. \nPlease use the relevant tag f…","visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":8256,"like_count":1,"has_summary":false,"last_poster_username":"warkolm","category_id":28,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":10,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":60,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Winlogbeat - Mismatched event.action for event.code","id":385735,"title":"Winlogbeat - Mismatched event.action for event.code","slug":"winlogbeat-mismatched-event-action-for-event-code","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-04-01T15:44:13.088Z","last_posted_at":"2026-04-02T07:35:31.268Z","bumped":true,"bumped_at":"2026-04-02T07:35:31.268Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":57,"name":"winlogbeat","slug":"winlogbeat"}],"tags_descriptions":{},"views":19,"like_count":0,"has_summary":false,"last_poster_username":"arav","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167970,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":167795,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Duplicate messages observed in Kafka when using Filebeat with disk queue","id":385693,"title":"Duplicate messages observed in Kafka when using Filebeat with disk queue","slug":"duplicate-messages-observed-in-kafka-when-using-filebeat-with-disk-queue","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-03-30T07:26:44.941Z","last_posted_at":"2026-03-30T13:38:46.925Z","bumped":true,"bumped_at":"2026-03-30T13:38:46.925Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":19,"like_count":0,"has_summary":false,"last_poster_username":"leandrojmp","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":155525,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"How to ensure the integrity of filebeat output data during network fluctuations？","id":385625,"title":"How to ensure the integrity of filebeat output data during network fluctuations？","slug":"how-to-ensure-the-integrity-of-filebeat-output-data-during-network-fluctuations","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://us1.discourse-cdn.com/elastic/optimized/3X/e/8/e8d3e69ff51458064903576d98181cec7c256bb1_2_1024x604.jpeg","created_at":"2026-03-26T02:03:20.495Z","last_posted_at":"2026-03-26T02:03:20.606Z","bumped":true,"bumped_at":"2026-03-26T02:03:20.606Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":17,"like_count":0,"has_summary":false,"last_poster_username":"h123123123","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":167924,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[Elastic Log Driver] Structured JSON logs breaks when Docker splits large log lines","id":385448,"title":"[Elastic Log Driver] Structured JSON logs breaks when Docker splits large log lines","slug":"elastic-log-driver-structured-json-logs-breaks-when-docker-splits-large-log-lines","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-14T02:10:11.662Z","last_posted_at":"2026-03-14T02:10:11.732Z","bumped":true,"bumped_at":"2026-03-14T02:10:11.732Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":29,"name":"beats-module","slug":"beats-module"},{"id":15,"name":"docker","slug":"docker"}],"tags_descriptions":{},"views":18,"like_count":0,"has_summary":false,"last_poster_username":"empee","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":167855,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Syslog parser fails on double backslashes in structured data","id":385386,"title":"Syslog parser fails on double backslashes in structured data","slug":"syslog-parser-fails-on-double-backslashes-in-structured-data","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-03-10T04:40:10.099Z","last_posted_at":"2026-03-10T13:35:19.389Z","bumped":true,"bumped_at":"2026-03-10T13:35:19.389Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":51,"name":"beats-development","slug":"beats-development"},{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":44,"like_count":0,"has_summary":false,"last_poster_username":"briandoesdev","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":167829,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"How to limit bandwidth usage of Windows Filebeat","id":385357,"title":"How to limit bandwidth usage of Windows Filebeat","slug":"how-to-limit-bandwidth-usage-of-windows-filebeat","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-03-06T00:54:15.733Z","last_posted_at":"2026-03-06T06:18:36.361Z","bumped":true,"bumped_at":"2026-03-06T06:18:36.361Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":22,"like_count":0,"has_summary":false,"last_poster_username":"Tortoise","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":151566,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":159710,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"It looks like winlogbeat (8.19.10) is showing noisy warn logs again","id":385125,"title":"It looks like winlogbeat (8.19.10) is showing noisy warn logs again","slug":"it-looks-like-winlogbeat-8-19-10-is-showing-noisy-warn-logs-again","posts_count":5,"reply_count":3,"highest_post_number":5,"image_url":null,"created_at":"2026-02-19T22:34:55.772Z","last_posted_at":"2026-03-05T14:19:59.062Z","bumped":true,"bumped_at":"2026-03-05T14:19:59.062Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":57,"name":"winlogbeat","slug":"winlogbeat"}],"tags_descriptions":{},"views":55,"like_count":0,"has_summary":false,"last_poster_username":"Alyssa_Nunez","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":162489,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":99262,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"container input: CRI partial line reassembly ignores max_bytes, causing OOM","id":385340,"title":"container input: CRI partial line reassembly ignores max_bytes, causing OOM","slug":"container-input-cri-partial-line-reassembly-ignores-max-bytes-causing-oom","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-03-04T12:08:33.864Z","last_posted_at":"2026-03-05T14:15:36.308Z","bumped":true,"bumped_at":"2026-03-05T14:15:36.308Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":15,"name":"docker","slug":"docker"},{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":37,"like_count":0,"has_summary":false,"last_poster_username":"TiagoQueiroz","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167805,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":134509,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"Logstash/Filebeat lag issue - Logs delayed by hours","id":385101,"title":"Logstash/Filebeat lag issue - Logs delayed by hours","slug":"logstash-filebeat-lag-issue-logs-delayed-by-hours","posts_count":46,"reply_count":40,"highest_post_number":46,"image_url":"https://us1.discourse-cdn.com/elastic/original/3X/0/5/05cb1d7fffe5d3796d5f6dedb26cddfd72862538.png","created_at":"2026-02-18T17:00:34.242Z","last_posted_at":"2026-03-05T13:02:46.748Z","bumped":true,"bumped_at":"2026-03-05T13:02:46.748Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":218,"like_count":6,"has_summary":false,"last_poster_username":"RainTown","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167686,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":null,"description":"Frequent Poster","user_id":152003,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":84308,"primary_group_id":44,"flair_group_id":44},{"extras":"latest","description":"Most Recent Poster","user_id":29038,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Filebeat - duplicated logs when using journald Input with systemd units","id":385347,"title":"Filebeat - duplicated logs when using journald Input with systemd units","slug":"filebeat-duplicated-logs-when-using-journald-input-with-systemd-units","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":"https://us1.discourse-cdn.com/elastic/original/3X/8/d/8d77759d8a87c0b1410db05458f8d1cdd6cac69a.png","created_at":"2026-03-04T18:39:16.314Z","last_posted_at":"2026-03-05T00:15:46.771Z","bumped":true,"bumped_at":"2026-03-05T00:15:46.771Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":36,"like_count":0,"has_summary":false,"last_poster_username":"mark54g","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167807,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":38199,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Metricbeats for podman containers","id":370744,"title":"Metricbeats for podman containers","slug":"metricbeats-for-podman-containers","posts_count":6,"reply_count":4,"highest_post_number":6,"image_url":null,"created_at":"2024-11-19T07:03:37.595Z","last_posted_at":"2026-02-27T11:38:08.231Z","bumped":true,"bumped_at":"2026-02-27T11:38:08.231Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":15,"name":"docker","slug":"docker"},{"id":56,"name":"metricbeat","slug":"metricbeat"}],"tags_descriptions":{},"views":297,"like_count":0,"has_summary":false,"last_poster_username":"steverb38","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":162058,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":49889,"primary_group_id":44,"flair_group_id":44},{"extras":null,"description":"Frequent Poster","user_id":165261,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":167773,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Winlogbeat Kafka output not reading SSL certs with “wrong” line ends","id":385257,"title":"Winlogbeat Kafka output not reading SSL certs with \"wrong\" line ends","slug":"winlogbeat-kafka-output-not-reading-ssl-certs-with-wrong-line-ends","posts_count":4,"reply_count":1,"highest_post_number":4,"image_url":null,"created_at":"2026-02-26T19:01:57.583Z","last_posted_at":"2026-02-27T10:41:24.011Z","bumped":true,"bumped_at":"2026-02-27T10:41:24.011Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":57,"name":"winlogbeat","slug":"winlogbeat"}],"tags_descriptions":{},"views":28,"like_count":2,"has_summary":false,"last_poster_username":"Rios","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster, Accepted Answer","user_id":167770,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Filebeat Event Publishing Delay to Kafka","id":385064,"title":"Filebeat Event Publishing Delay to Kafka","slug":"filebeat-event-publishing-delay-to-kafka","posts_count":10,"reply_count":7,"highest_post_number":10,"image_url":null,"created_at":"2026-02-16T04:17:16.298Z","last_posted_at":"2026-02-24T08:52:30.183Z","bumped":true,"bumped_at":"2026-02-24T08:52:30.183Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":75,"like_count":0,"has_summary":false,"last_poster_username":"Thirupathi","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":155525,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":161264,"primary_group_id":44,"flair_group_id":44},{"extras":null,"description":"Frequent Poster","user_id":84308,"primary_group_id":44,"flair_group_id":44},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Agent (Winlogbeat) stop sending data","id":384988,"title":"Agent (Winlogbeat) stop sending data","slug":"agent-winlogbeat-stop-sending-data","posts_count":6,"reply_count":3,"highest_post_number":6,"image_url":null,"created_at":"2026-02-10T09:19:31.812Z","last_posted_at":"2026-02-23T20:21:41.098Z","bumped":true,"bumped_at":"2026-02-23T20:21:41.098Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":57,"name":"winlogbeat","slug":"winlogbeat"}],"tags_descriptions":{},"views":39,"like_count":0,"has_summary":false,"last_poster_username":"marc.guasch","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":117968,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":99262,"primary_group_id":44,"flair_group_id":44},{"extras":null,"description":"Frequent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":115149,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"Selecting only wy WiFi interface for network metric does not seem to work","id":371486,"title":"Selecting only wy WiFi interface for network metric does not seem to work","slug":"selecting-only-wy-wifi-interface-for-network-metric-does-not-seem-to-work","posts_count":6,"reply_count":3,"highest_post_number":6,"image_url":"https://us1.discourse-cdn.com/elastic/original/3X/4/9/498badb2780a591fd9540f46102553962337079b.png","created_at":"2024-12-04T21:35:02.436Z","last_posted_at":"2026-02-22T15:44:58.807Z","bumped":true,"bumped_at":"2026-02-22T15:44:58.807Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":56,"name":"metricbeat","slug":"metricbeat"}],"tags_descriptions":{},"views":74,"like_count":3,"has_summary":false,"last_poster_username":"SteveJR1","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster, Accepted Answer","user_id":12203,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":84308,"primary_group_id":44,"flair_group_id":44},{"extras":"latest","description":"Most Recent Poster","user_id":167731,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Operating system version when running inside Kubernetes daemonset","id":385099,"title":"Operating system version when running inside Kubernetes daemonset","slug":"operating-system-version-when-running-inside-kubernetes-daemonset","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-02-18T16:36:36.478Z","last_posted_at":"2026-02-18T16:36:36.607Z","bumped":true,"bumped_at":"2026-02-18T16:36:36.607Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":15,"name":"docker","slug":"docker"},{"id":56,"name":"metricbeat","slug":"metricbeat"}],"tags_descriptions":{},"views":18,"like_count":0,"has_summary":false,"last_poster_username":"melkamar","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":133982,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Registry Fields with Winlogbeat","id":385082,"title":"Registry Fields with Winlogbeat","slug":"registry-fields-with-winlogbeat","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-02-17T19:26:25.779Z","last_posted_at":"2026-02-17T22:05:07.539Z","bumped":true,"bumped_at":"2026-02-17T22:05:07.539Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":57,"name":"winlogbeat","slug":"winlogbeat"}],"tags_descriptions":{},"views":30,"like_count":0,"has_summary":false,"last_poster_username":"andrewkroh","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167696,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":12248,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"AbuseCH integration issue","id":385076,"title":"AbuseCH integration issue","slug":"abusech-integration-issue","posts_count":4,"reply_count":0,"highest_post_number":4,"image_url":null,"created_at":"2026-02-17T08:59:46.361Z","last_posted_at":"2026-02-17T16:29:52.825Z","bumped":true,"bumped_at":"2026-02-17T16:29:52.825Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":55,"name":"packetbeat","slug":"packetbeat"}],"tags_descriptions":{},"views":29,"like_count":0,"has_summary":false,"last_poster_username":"leandrojmp","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167693,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":159710,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":12248,"primary_group_id":44,"flair_group_id":44},{"extras":"latest","description":"Most Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Read latest logs from a file","id":384957,"title":"Read latest logs from a file","slug":"read-latest-logs-from-a-file","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-02-07T13:19:17.598Z","last_posted_at":"2026-02-08T10:06:09.834Z","bumped":true,"bumped_at":"2026-02-08T10:06:09.834Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":41,"like_count":0,"has_summary":false,"last_poster_username":"Tortoise","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":112102,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":159710,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Graylog + Metricbeat + IIS","id":384950,"title":"Graylog + Metricbeat + IIS","slug":"graylog-metricbeat-iis","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-02-06T19:20:40.427Z","last_posted_at":"2026-02-06T19:20:40.507Z","bumped":true,"bumped_at":"2026-02-06T19:20:40.507Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":56,"name":"metricbeat","slug":"metricbeat"}],"tags_descriptions":{},"views":16,"like_count":0,"has_summary":false,"last_poster_username":"Lev_Anni","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":167640,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Creating an alarm that outputs the group name","id":384911,"title":"Creating an alarm that outputs the group name","slug":"creating-an-alarm-that-outputs-the-group-name","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-02-04T11:00:02.449Z","last_posted_at":"2026-02-06T09:31:24.446Z","bumped":true,"bumped_at":"2026-02-06T09:31:24.446Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":26,"like_count":0,"has_summary":false,"last_poster_username":"tractor_boy","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":128069,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster, Accepted Answer","user_id":159710,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"SentinelOne Integration with ELK","id":384924,"title":"SentinelOne Integration with ELK","slug":"sentinelone-integration-with-elk","posts_count":5,"reply_count":2,"highest_post_number":5,"image_url":"https://us1.discourse-cdn.com/elastic/optimized/3X/1/d/1d51f60574c74dfa55597226217a43dad7458626_2_1024x334.png","created_at":"2026-02-05T06:17:55.749Z","last_posted_at":"2026-02-05T13:22:13.819Z","bumped":true,"bumped_at":"2026-02-05T13:22:13.819Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":8,"name":"elastic-stack-security","slug":"elastic-stack-security"},{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":33,"like_count":1,"has_summary":false,"last_poster_username":"leandrojmp","category_id":28,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167632,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":159710,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Panic: runtime error: makeslice: cap out of range","id":384887,"title":"Panic: runtime error: makeslice: cap out of range","slug":"panic-runtime-error-makeslice-cap-out-of-range","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-02-03T14:00:55.316Z","last_posted_at":"2026-02-03T14:00:55.381Z","bumped":true,"bumped_at":"2026-02-03T14:00:55.381Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":55,"name":"packetbeat","slug":"packetbeat"}],"tags_descriptions":{},"views":17,"like_count":0,"has_summary":false,"last_poster_username":"whanklee","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":152798,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Filebeat Unable to Handle Single Large Event (~5GB)","id":384782,"title":"Filebeat Unable to Handle Single Large Event (~5GB)","slug":"filebeat-unable-to-handle-single-large-event-5gb","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-01-29T05:54:07.618Z","last_posted_at":"2026-01-29T13:57:18.999Z","bumped":true,"bumped_at":"2026-01-29T13:57:18.999Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":36,"like_count":0,"has_summary":false,"last_poster_username":"TiagoQueiroz","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":155525,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":134509,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"Use filebeat processor to concatenate string","id":384725,"title":"Use filebeat processor to concatenate string","slug":"use-filebeat-processor-to-concatenate-string","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-01-23T22:55:48.430Z","last_posted_at":"2026-01-26T15:15:49.406Z","bumped":true,"bumped_at":"2026-01-26T15:15:49.406Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":46,"like_count":2,"has_summary":false,"last_poster_username":"mistrhanky1","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":163090,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":159710,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"When using s3-compatible service as inputs, path_style is un-useful","id":384709,"title":"When using s3-compatible service as inputs, path_style is un-useful","slug":"when-using-s3-compatible-service-as-inputs-path-style-is-un-useful","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://us1.discourse-cdn.com/elastic/original/3X/9/6/967ba776e2e757092540dda5b62bdf751a798097.png","created_at":"2026-01-23T09:33:30.216Z","last_posted_at":"2026-01-23T09:33:30.286Z","bumped":true,"bumped_at":"2026-01-23T09:33:30.286Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":18,"like_count":0,"has_summary":false,"last_poster_username":"luxin88","category_id":28,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":167535,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Filebeat package (filebeat-9.2.1-amd64.deb) is affected by CVE-2025-11226/CVE-2025-5818/CVE-2025-47914","id":384618,"title":"Filebeat package (filebeat-9.2.1-amd64.deb) is affected by CVE-2025-11226/CVE-2025-5818/CVE-2025-47914","slug":"filebeat-package-filebeat-9-2-1-amd64-deb-is-affected-by-cve-2025-11226-cve-2025-5818-cve-2025-47914","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-01-19T12:56:35.055Z","last_posted_at":"2026-01-19T21:56:11.676Z","bumped":true,"bumped_at":"2026-01-19T21:56:11.676Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":74,"like_count":2,"has_summary":false,"last_poster_username":"cahl","category_id":28,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":159598,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Elastic Agent vs Logstash with Filebeat","id":384556,"title":"Elastic Agent vs Logstash with Filebeat","slug":"elastic-agent-vs-logstash-with-filebeat","posts_count":6,"reply_count":3,"highest_post_number":6,"image_url":null,"created_at":"2026-01-15T11:25:04.813Z","last_posted_at":"2026-01-17T17:10:53.285Z","bumped":true,"bumped_at":"2026-01-17T17:10:53.285Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":15,"name":"docker","slug":"docker"},{"id":54,"name":"filebeat","slug":"filebeat"},{"id":25,"name":"fleet","slug":"fleet"}],"tags_descriptions":{},"views":129,"like_count":6,"has_summary":false,"last_poster_username":"Rios","category_id":28,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167463,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":null,"description":"Frequent Poster","user_id":84308,"primary_group_id":44,"flair_group_id":44},{"extras":"latest","description":"Most Recent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"How to parse json from message field","id":384560,"title":"How to parse json from message field","slug":"how-to-parse-json-from-message-field","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-01-15T14:56:01.872Z","last_posted_at":"2026-01-15T14:56:01.942Z","bumped":true,"bumped_at":"2026-01-15T14:56:01.942Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":54,"name":"filebeat","slug":"filebeat"}],"tags_descriptions":{},"views":24,"like_count":1,"has_summary":false,"last_poster_username":"k0i3n","category_id":28,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":167464,"primary_group_id":null,"flair_group_id":null}]}]}}