{"users":[{"id":10,"username":"Leslie_Hawthorn","name":"Leslie Hawthorn","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/l/7c8e57/{size}.png","trust_level":1},{"id":-1,"username":"system","name":"system","avatar_template":"https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png","admin":true,"moderator":true,"trust_level":4},{"id":107774,"username":"d.silwon","name":"Daniel","avatar_template":"/user_avatar/discuss.elastic.co/d.silwon/{size}/65853_2.png","trust_level":2},{"id":113015,"username":"Rios","name":"Rios","avatar_template":"/user_avatar/discuss.elastic.co/rios/{size}/95745_2.png","trust_level":2},{"id":167991,"username":"Ilya_Ploskovitov","name":"Ilya Ploskovitov","avatar_template":"/user_avatar/discuss.elastic.co/ilya_ploskovitov/{size}/140559_2.png","trust_level":0},{"id":167994,"username":"Rx7TyreBurna","name":"Nathan C","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/r/c4cdca/{size}.png","trust_level":0},{"id":30630,"username":"Badger","name":"","avatar_template":"/user_avatar/discuss.elastic.co/badger/{size}/25190_2.png","trust_level":3},{"id":167925,"username":"Wing_W","name":"Wing W","avatar_template":"/user_avatar/discuss.elastic.co/wing_w/{size}/147217_2.png","trust_level":0},{"id":29038,"username":"RainTown","name":"Kevin Maguire","avatar_template":"/user_avatar/discuss.elastic.co/raintown/{size}/140206_2.png","trust_level":3},{"id":93287,"username":"JimJ","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/j/76d3ee/{size}.png","trust_level":1},{"id":34955,"username":"leandrojmp","name":"Leandro Pereira","avatar_template":"/user_avatar/discuss.elastic.co/leandrojmp/{size}/107231_2.png","primary_group_name":"elastic_certified","flair_name":"elastic_certified","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/4/b/4b7ff6230ea5ae3c4c3f43b26e783b36ceea35b2.png","flair_color":"00BFB3","flair_group_id":46,"trust_level":2},{"id":118499,"username":"Rnx","name":"Radoslav Nagy","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/r/6de8d8/{size}.png","trust_level":1},{"id":166427,"username":"fer.mt","name":"Fer ","avatar_template":"/user_avatar/discuss.elastic.co/fer.mt/{size}/145089_2.png","trust_level":1},{"id":84308,"username":"stephenb","name":"Stephen Brown","avatar_template":"/user_avatar/discuss.elastic.co/stephenb/{size}/40856_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"admin":true,"moderator":true,"trust_level":4},{"id":165088,"username":"kuroro","name":"kuroro","avatar_template":"/user_avatar/discuss.elastic.co/kuroro/{size}/143492_2.png","trust_level":1},{"id":167795,"username":"arav","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/b9e5f3/{size}.png","trust_level":1},{"id":159710,"username":"Tortoise","name":"","avatar_template":"/user_avatar/discuss.elastic.co/tortoise/{size}/143659_2.png","trust_level":3},{"id":167662,"username":"Toxic_Bunny","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/t/a9adbd/{size}.png","trust_level":1},{"id":167731,"username":"SteveJR1","name":"Steve Junior","avatar_template":"/user_avatar/discuss.elastic.co/stevejr1/{size}/137049_2.png","trust_level":0},{"id":167710,"username":"Bojie","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/b/50afbb/{size}.png","trust_level":0},{"id":6098,"username":"Luca_Belluccini","name":"Luca Belluccini","avatar_template":"/user_avatar/discuss.elastic.co/luca_belluccini/{size}/33239_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"trust_level":4},{"id":167544,"username":"scorpoin82","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/s/7ba0ec/{size}.png","trust_level":0},{"id":112102,"username":"Aniket_Pant","name":"kaal","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/77aa72/{size}.png","trust_level":2},{"id":167628,"username":"rokkotnik","name":"rokkotnik","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/r/dfb087/{size}.png","trust_level":0},{"id":85439,"username":"Elk_huh","name":"Brian","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/e/d26b3c/{size}.png","trust_level":1},{"id":167518,"username":"teopatl","name":"Jamie","avatar_template":"/user_avatar/discuss.elastic.co/teopatl/{size}/146714_2.png","trust_level":0},{"id":167515,"username":"TLB35","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/t/8edcca/{size}.png","trust_level":1},{"id":167471,"username":"VOCTERMA","name":"马海峰","avatar_template":"/user_avatar/discuss.elastic.co/vocterma/{size}/146671_2.png","trust_level":1},{"id":166371,"username":"josh_tran","name":"Phuc Tran","avatar_template":"/user_avatar/discuss.elastic.co/josh_tran/{size}/145034_2.png","trust_level":1},{"id":167176,"username":"mariyabanatic","name":"Mariya banatic J","avatar_template":"/user_avatar/discuss.elastic.co/mariyabanatic/{size}/146029_2.png","trust_level":1},{"id":166792,"username":"CitizenSteak","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/c/d07c76/{size}.png","trust_level":1},{"id":164695,"username":"dot-mike","name":"","avatar_template":"/user_avatar/discuss.elastic.co/dot-mike/{size}/143339_2.png","trust_level":2},{"id":148918,"username":"liquidkite","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/l/df788c/{size}.png","trust_level":1},{"id":126296,"username":"venkatkumar229","name":"Venkat Kumar","avatar_template":"/user_avatar/discuss.elastic.co/venkatkumar229/{size}/104663_2.png","trust_level":1},{"id":167316,"username":"Miksos","name":"Miksos ","avatar_template":"/user_avatar/discuss.elastic.co/miksos/{size}/144363_2.png","trust_level":1},{"id":167293,"username":"dalal404","name":"Sabyasachi Dalal","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/d/4491bb/{size}.png","trust_level":0},{"id":167290,"username":"maldoror","name":"Maldoror","avatar_template":"/user_avatar/discuss.elastic.co/maldoror/{size}/146415_2.png","trust_level":0},{"id":167265,"username":"Prateek_Garg","name":"Prateek Garg","avatar_template":"/user_avatar/discuss.elastic.co/prateek_garg/{size}/141370_2.png","trust_level":0},{"id":137155,"username":"carly.richmond","name":"Carly Richmond","avatar_template":"/user_avatar/discuss.elastic.co/carly.richmond/{size}/104935_2.png","primary_group_name":"elastic_team","flair_name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_group_id":44,"moderator":true,"trust_level":4}],"primary_groups":[{"id":46,"name":"elastic_certified"},{"id":44,"name":"elastic_team"}],"flair_groups":[{"id":46,"name":"elastic_certified","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/4/b/4b7ff6230ea5ae3c4c3f43b26e783b36ceea35b2.png","flair_bg_color":"","flair_color":"00BFB3"},{"id":44,"name":"elastic_team","flair_url":"https://us1.discourse-cdn.com/elastic/original/3X/d/a/da51fdee688298baeeac95dbab7916a88ba95532.png","flair_bg_color":"","flair_color":""}],"topic_list":{"can_create_topic":false,"more_topics_url":"/c/elastic-stack/logstash/14?page=1","per_page":30,"top_tags":[{"id":15,"name":"docker","slug":"docker"},{"id":7,"name":"elastic-stack-monitoring","slug":"elastic-stack-monitoring"},{"id":8,"name":"elastic-stack-security","slug":"elastic-stack-security"},{"id":102,"name":"jdbc","slug":"jdbc"},{"id":28,"name":"ilm-index-lifecycle-management","slug":"ilm-index-lifecycle-management"},{"id":12,"name":"elastic-stack-alerting","slug":"elastic-stack-alerting"},{"id":82,"name":"ingest-pipeline","slug":"ingest-pipeline"},{"id":44,"name":"windows","slug":"windows"},{"id":26,"name":"ecs-elastic-common-schema","slug":"ecs-elastic-common-schema"},{"id":19,"name":"painless","slug":"painless"},{"id":29,"name":"beats-module","slug":"beats-module"},{"id":13,"name":"elastic-stack-sql","slug":"elastic-stack-sql"},{"id":25,"name":"fleet","slug":"fleet"},{"id":85,"name":"datastreams","slug":"datastreams"},{"id":14,"name":"license","slug":"license"},{"id":49,"name":"kql-kibana-query-language","slug":"kql-kibana-query-language"},{"id":138,"name":"aggregations","slug":"aggregations"},{"id":11,"name":"elastic-stack-graph","slug":"elastic-stack-graph"},{"id":40,"name":"maps","slug":"maps"},{"id":43,"name":"language-clients","slug":"language-clients"},{"id":83,"name":"migration","slug":"migration"},{"id":84,"name":"reindex","slug":"reindex"},{"id":23,"name":"ccr-cross-cluster-replication","slug":"ccr-cross-cluster-replication"},{"id":63,"name":"elastic-agent","slug":"elastic-agent"},{"id":9,"name":"elastic-stack-machine-learning","slug":"elastic-stack-machine-learning"},{"id":134,"name":"runtime","slug":"runtime"},{"id":68,"name":"transforms","slug":"transforms"},{"id":97,"name":"async-search","slug":"async-search"},{"id":17,"name":"canvas","slug":"canvas"},{"id":24,"name":"curator","slug":"curator"},{"id":64,"name":"detection-rules","slug":"detection-rules"}],"topics":[{"fancy_title":"About the Logstash category","id":35,"title":"About the Logstash category","slug":"about-the-logstash-category","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2015-04-22T19:15:01.983Z","last_posted_at":"2017-07-06T04:25:54.812Z","bumped":true,"bumped_at":"2015-10-30T23:52:41.897Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Centralize, transform & stash your data\nLogstash is a free and open server-side data processing pipeline that ingests data from a multitude of sources, transforms it, and then sends it to your favorite "stash."","visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":8993,"like_count":4,"has_summary":false,"last_poster_username":"system","category_id":14,"op_like_count":4,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":10,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":-1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Date filter plugin in Logstash configuration","id":385899,"title":"Date filter plugin in Logstash configuration","slug":"date-filter-plugin-in-logstash-configuration","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-04-15T14:38:11.410Z","last_posted_at":"2026-04-15T19:05:00.018Z","bumped":true,"bumped_at":"2026-04-15T19:05:00.018Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":7,"like_count":0,"has_summary":false,"last_poster_username":"Rios","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":107774,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Architecture check: Offloading Logstash gsub regex to K8s pod sidecars to save CPU?","id":385800,"title":"Architecture check: Offloading Logstash gsub regex to K8s pod sidecars to save CPU?","slug":"architecture-check-offloading-logstash-gsub-regex-to-k8s-pod-sidecars-to-save-cpu","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-04-07T13:43:49.121Z","last_posted_at":"2026-04-07T13:43:49.234Z","bumped":true,"bumped_at":"2026-04-07T13:43:49.234Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":15,"like_count":1,"has_summary":false,"last_poster_username":"Ilya_Ploskovitov","category_id":14,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":167991,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Need help parsing XML and general strategy with logstash","id":385787,"title":"Need help parsing XML and general strategy with logstash","slug":"need-help-parsing-xml-and-general-strategy-with-logstash","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-04-06T16:54:46.526Z","last_posted_at":"2026-04-07T03:35:46.656Z","bumped":true,"bumped_at":"2026-04-07T03:35:46.656Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":20,"like_count":0,"has_summary":false,"last_poster_username":"Rx7TyreBurna","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster, Accepted Answer","user_id":167994,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":30630,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"One Deata view @timestamp alarm","id":385624,"title":"One Deata view @timestamp alarm","slug":"one-deata-view-timestamp-alarm","posts_count":4,"reply_count":1,"highest_post_number":4,"image_url":null,"created_at":"2026-03-26T02:03:19.457Z","last_posted_at":"2026-03-27T06:10:22.392Z","bumped":true,"bumped_at":"2026-03-27T06:10:22.392Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":37,"like_count":2,"has_summary":false,"last_poster_username":"Wing_W","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":167925,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":29038,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Logstash.outputs.elasticsearch - Failed to perform request: Connection refused","id":385421,"title":"Logstash.outputs.elasticsearch - Failed to perform request: Connection refused","slug":"logstash-outputs-elasticsearch-failed-to-perform-request-connection-refused","posts_count":12,"reply_count":8,"highest_post_number":12,"image_url":null,"created_at":"2026-03-12T09:13:23.151Z","last_posted_at":"2026-03-20T13:25:13.541Z","bumped":true,"bumped_at":"2026-03-20T13:25:13.541Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":76,"like_count":1,"has_summary":false,"last_poster_username":"JimJ","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":93287,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":30630,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":null,"description":"Frequent Poster","user_id":29038,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Logstash pipeline shutting off/starting order","id":385423,"title":"Logstash pipeline shutting off/starting order","slug":"logstash-pipeline-shutting-off-starting-order","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":null,"created_at":"2026-03-12T11:45:40.655Z","last_posted_at":"2026-03-12T22:09:16.167Z","bumped":true,"bumped_at":"2026-03-12T22:09:16.167Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":34,"like_count":1,"has_summary":false,"last_poster_username":"Badger","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":118499,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":30630,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"High availability Ingest architecture","id":385425,"title":"High availability Ingest architecture","slug":"high-availability-ingest-architecture","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2026-03-12T13:23:46.016Z","last_posted_at":"2026-03-12T18:29:09.141Z","bumped":true,"bumped_at":"2026-03-12T18:29:09.141Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":42,"like_count":2,"has_summary":false,"last_poster_username":"leandrojmp","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":166427,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":84308,"primary_group_id":44,"flair_group_id":44},{"extras":"latest","description":"Most Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Why does /var/log/logstash_flow_stats.log appear by default in RPM installation?","id":385321,"title":"Why does /var/log/logstash_flow_stats.log appear by default in RPM installation?","slug":"why-does-var-log-logstash-flow-stats-log-appear-by-default-in-rpm-installation","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-03-03T10:31:00.235Z","last_posted_at":"2026-03-05T02:16:31.759Z","bumped":true,"bumped_at":"2026-03-05T02:16:31.759Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":26,"like_count":0,"has_summary":false,"last_poster_username":"kuroro","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster, Accepted Answer","user_id":165088,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Elastic Agent to Logstash","id":385314,"title":"Elastic Agent to Logstash","slug":"elastic-agent-to-logstash","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":null,"created_at":"2026-03-03T08:44:51.822Z","last_posted_at":"2026-03-03T13:14:30.502Z","bumped":true,"bumped_at":"2026-03-03T13:14:30.502Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"fleet","slug":"fleet"}],"tags_descriptions":{},"views":31,"like_count":1,"has_summary":false,"last_poster_username":"leandrojmp","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167795,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":159710,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Creation date of logstash created files, with %{+YYYY.MM.dd} in the name, is offset by few hours","id":385002,"title":"Creation date of logstash created files, with %{+YYYY.MM.dd} in the name, is offset by few hours","slug":"creation-date-of-logstash-created-files-with-yyyy-mm-dd-in-the-name-is-offset-by-few-hours","posts_count":5,"reply_count":2,"highest_post_number":5,"image_url":null,"created_at":"2026-02-11T06:30:18.150Z","last_posted_at":"2026-02-22T15:28:31.531Z","bumped":true,"bumped_at":"2026-02-22T15:28:31.531Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":46,"like_count":4,"has_summary":false,"last_poster_username":"leandrojmp","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167662,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster, Accepted Answer","user_id":29038,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":167731,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Windows version for logstash 9.3.0","id":385109,"title":"Windows version for logstash 9.3.0","slug":"windows-version-for-logstash-9-3-0","posts_count":7,"reply_count":4,"highest_post_number":7,"image_url":null,"created_at":"2026-02-19T08:51:21.092Z","last_posted_at":"2026-02-20T13:35:47.741Z","bumped":true,"bumped_at":"2026-02-20T13:35:47.741Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":71,"like_count":2,"has_summary":false,"last_poster_username":"Luca_Belluccini","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167710,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":6098,"primary_group_id":44,"flair_group_id":44},{"extras":null,"description":"Frequent Poster","user_id":30630,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"ELK final output","id":384962,"title":"ELK final output","slug":"elk-final-output","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":null,"created_at":"2026-02-08T19:14:03.982Z","last_posted_at":"2026-02-16T02:59:34.172Z","bumped":true,"bumped_at":"2026-02-16T02:59:34.172Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":63,"like_count":1,"has_summary":false,"last_poster_username":"scorpoin82","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":167544,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"DLQ setup issue for specific application in Logstash pipeline","id":385059,"title":"DLQ setup issue for specific application in Logstash pipeline","slug":"dlq-setup-issue-for-specific-application-in-logstash-pipeline","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-02-15T16:18:16.670Z","last_posted_at":"2026-02-15T16:57:05.925Z","bumped":true,"bumped_at":"2026-02-15T16:57:05.925Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":21,"like_count":0,"has_summary":false,"last_poster_username":"leandrojmp","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":112102,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46}]},{"fancy_title":"Logstash filter JSON parse error","id":384918,"title":"Logstash filter JSON parse error","slug":"logstash-filter-json-parse-error","posts_count":8,"reply_count":2,"highest_post_number":8,"image_url":null,"created_at":"2026-02-04T19:05:58.825Z","last_posted_at":"2026-02-06T12:42:06.730Z","bumped":true,"bumped_at":"2026-02-06T12:42:06.730Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":49,"like_count":6,"has_summary":false,"last_poster_username":"Rios","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167628,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":null,"description":"Frequent Poster","user_id":30630,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Logstash Grok filter Not working","id":384762,"title":"Logstash Grok filter Not working","slug":"logstash-grok-filter-not-working","posts_count":7,"reply_count":5,"highest_post_number":7,"image_url":null,"created_at":"2026-01-27T20:34:52.353Z","last_posted_at":"2026-01-28T19:41:41.314Z","bumped":true,"bumped_at":"2026-01-28T19:41:41.314Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":49,"like_count":2,"has_summary":false,"last_poster_username":"Elk_huh","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":85439,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster, Accepted Answer","user_id":30630,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":null,"description":"Frequent Poster","user_id":29038,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Gitops: Building Logstash Plugin via gitlab runner?","id":384724,"title":"Gitops: Building Logstash Plugin via gitlab runner?","slug":"gitops-building-logstash-plugin-via-gitlab-runner","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-01-23T21:44:39.989Z","last_posted_at":"2026-01-23T21:44:40.055Z","bumped":true,"bumped_at":"2026-01-23T21:44:40.055Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":15,"name":"docker","slug":"docker"}],"tags_descriptions":{},"views":22,"like_count":0,"has_summary":false,"last_poster_username":"teopatl","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":167518,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[Syslog output] Erratic message output behavior","id":384670,"title":"[Syslog output] Erratic message output behavior","slug":"syslog-output-erratic-message-output-behavior","posts_count":7,"reply_count":5,"highest_post_number":7,"image_url":null,"created_at":"2026-01-21T10:50:26.444Z","last_posted_at":"2026-01-21T18:01:53.133Z","bumped":true,"bumped_at":"2026-01-21T18:01:53.133Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":55,"like_count":0,"has_summary":false,"last_poster_username":"Rios","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167515,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":30630,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"How should logstash connect to ECK created TLS encrypted elasticsearch in kubernets","id":384586,"title":"How should logstash connect to ECK created TLS encrypted elasticsearch in kubernets","slug":"how-should-logstash-connect-to-eck-created-tls-encrypted-elasticsearch-in-kubernets","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-01-16T15:26:13.704Z","last_posted_at":"2026-01-16T15:26:13.750Z","bumped":true,"bumped_at":"2026-01-16T15:26:13.750Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":22,"like_count":0,"has_summary":false,"last_poster_username":"VOCTERMA","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":167471,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Logstash - %{+YYYY} returns a year two years behind around year boundary – how is this possible?","id":384359,"title":"Logstash - %{+YYYY} returns a year two years behind around year boundary – how is this possible?","slug":"logstash-yyyy-returns-a-year-two-years-behind-around-year-boundary-how-is-this-possible","posts_count":13,"reply_count":9,"highest_post_number":13,"image_url":null,"created_at":"2026-01-05T09:48:21.498Z","last_posted_at":"2026-01-15T09:46:00.524Z","bumped":true,"bumped_at":"2026-01-15T09:46:00.524Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":134,"name":"runtime","slug":"runtime"}],"tags_descriptions":{},"views":132,"like_count":10,"has_summary":false,"last_poster_username":"josh_tran","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":166371,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":30630,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":null,"description":"Frequent Poster","user_id":29038,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Intermittent metric registration error: worker_millis_per_event","id":383836,"title":"Intermittent metric registration error: worker_millis_per_event","slug":"intermittent-metric-registration-error-worker-millis-per-event","posts_count":8,"reply_count":4,"highest_post_number":8,"image_url":null,"created_at":"2025-12-03T09:36:48.593Z","last_posted_at":"2026-01-08T23:29:31.710Z","bumped":true,"bumped_at":"2026-01-08T23:29:31.710Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":15,"name":"docker","slug":"docker"}],"tags_descriptions":{},"views":84,"like_count":0,"has_summary":false,"last_poster_username":"Rios","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167176,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Logstash GROK","id":384394,"title":"Logstash GROK","slug":"logstash-grok","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-01-06T17:35:06.141Z","last_posted_at":"2026-01-07T12:00:00.231Z","bumped":true,"bumped_at":"2026-01-07T12:00:00.231Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":68,"like_count":0,"has_summary":false,"last_poster_username":"Rios","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":85439,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":30630,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Logstash PKI : Why does Logstash rely on optionnal metadata (Bag Attributes)?","id":384389,"title":"Logstash PKI : Why does Logstash rely on optionnal metadata (Bag Attributes)?","slug":"logstash-pki-why-does-logstash-rely-on-optionnal-metadata-bag-attributes","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-01-06T12:56:54.675Z","last_posted_at":"2026-01-06T14:03:03.607Z","bumped":true,"bumped_at":"2026-01-06T14:03:03.607Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":50,"like_count":1,"has_summary":false,"last_poster_username":"dot-mike","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":166792,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":164695,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Ingesting logs from S3 bucket elastic-agent vs logstash","id":384339,"title":"Ingesting logs from S3 bucket elastic-agent vs logstash","slug":"ingesting-logs-from-s3-bucket-elastic-agent-vs-logstash","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2026-01-02T16:00:57.471Z","last_posted_at":"2026-01-02T16:46:33.890Z","bumped":true,"bumped_at":"2026-01-02T16:46:33.890Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":87,"like_count":0,"has_summary":false,"last_poster_username":"stephenb","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":148918,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":"latest","description":"Most Recent Poster","user_id":84308,"primary_group_id":44,"flair_group_id":44}]},{"fancy_title":"How to handle duplicate records in datastreams using fingerprint","id":384260,"title":"How to handle duplicate records in datastreams using fingerprint","slug":"how-to-handle-duplicate-records-in-datastreams-using-fingerprint","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2025-12-26T09:49:45.279Z","last_posted_at":"2025-12-26T11:34:00.972Z","bumped":true,"bumped_at":"2025-12-26T11:34:00.972Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":46,"like_count":2,"has_summary":false,"last_poster_username":"Rios","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":126296,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":159710,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"I can’t seem to connect to logstash for some reason?","id":384209,"title":"I can't seem to connect to logstash for some reason?","slug":"i-cant-seem-to-connect-to-logstash-for-some-reason","posts_count":6,"reply_count":2,"highest_post_number":6,"image_url":null,"created_at":"2025-12-20T17:48:31.848Z","last_posted_at":"2025-12-22T11:00:20.174Z","bumped":true,"bumped_at":"2025-12-22T11:00:20.174Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":49,"like_count":4,"has_summary":false,"last_poster_username":"Miksos","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster, Accepted Answer","user_id":167316,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":159710,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":84308,"primary_group_id":44,"flair_group_id":44},{"extras":null,"description":"Frequent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Logstash not reading log files from Windows network share folder","id":384144,"title":"Logstash not reading log files from Windows network share folder","slug":"logstash-not-reading-log-files-from-windows-network-share-folder","posts_count":11,"reply_count":9,"highest_post_number":11,"image_url":null,"created_at":"2025-12-17T13:02:48.621Z","last_posted_at":"2025-12-19T12:14:47.873Z","bumped":true,"bumped_at":"2025-12-19T12:14:47.873Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":71,"like_count":3,"has_summary":false,"last_poster_username":"Rios","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167293,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":34955,"primary_group_id":46,"flair_group_id":46},{"extras":"latest","description":"Most Recent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"‘No operations allowed after connection closed’ errors during Filter phase","id":384139,"title":"'No operations allowed after connection closed' errors during Filter phase","slug":"no-operations-allowed-after-connection-closed-errors-during-filter-phase","posts_count":5,"reply_count":3,"highest_post_number":5,"image_url":"https://us1.discourse-cdn.com/elastic/optimized/3X/a/4/a4a90995c190ed3e27adc7b84012d3ad8a1bc115_2_1024x550.jpeg","created_at":"2025-12-17T11:03:49.217Z","last_posted_at":"2025-12-18T11:44:36.821Z","bumped":true,"bumped_at":"2025-12-18T11:44:36.821Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":34,"like_count":2,"has_summary":false,"last_poster_username":"maldoror","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":167290,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":113015,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Logs parsing for multiline logs","id":384151,"title":"Logs parsing for multiline logs","slug":"logs-parsing-for-multiline-logs","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-12-17T17:37:35.434Z","last_posted_at":"2025-12-17T18:33:35.070Z","bumped":true,"bumped_at":"2025-12-17T18:33:35.070Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":44,"like_count":1,"has_summary":false,"last_poster_username":"Badger","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":112102,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":30630,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"You are using a deprecated config setting “truststore” set in http. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Use `ssl_truststore_path` instead","id":384071,"title":"You are using a deprecated config setting \"truststore\" set in http. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Use `ssl_truststore_path` instead","slug":"you-are-using-a-deprecated-config-setting-truststore-set-in-http-deprecated-settings-will-continue-to-work-but-are-scheduled-for-removal-from-logstash-in-the-future-use-ssl-truststore-path-instead","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":null,"created_at":"2025-12-15T12:07:35.971Z","last_posted_at":"2025-12-16T16:45:47.249Z","bumped":true,"bumped_at":"2025-12-16T16:45:47.249Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":42,"like_count":0,"has_summary":false,"last_poster_username":"carly.richmond","category_id":14,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":167265,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":137155,"primary_group_id":44,"flair_group_id":44}]}]}}