# Elastic Observability

**URL:** https://discuss.elastic.co/c/observability/82.md?page=11

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 12

---

## [Monitoring Windows servers](https://discuss.elastic.co/t/monitoring-windows-servers/374276)

<div class="topic-metadata">

**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\
**Replies:** 0\
**Last updated:** [February 9, 2025, 2:12pm UTC](https://discuss.elastic.co/t/monitoring-windows-servers/374276 "2025-02-09T14:12:39Z")

</div>

Hello, I want to monitor Windows clients through Elastic. Something like Windows Resource Monitor and be able to write a series of alerts for it like CPU usage percentage, RAM usage percentage, etc. My server is Debian…

---

## [Winlogbeat and Grafana Loki](https://discuss.elastic.co/t/winlogbeat-and-grafana-loki/374255)

<div class="topic-metadata">

**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\
**Replies:** 2\
**Last updated:** [February 9, 2025, 1:37pm UTC](https://discuss.elastic.co/t/winlogbeat-and-grafana-loki/374255 "2025-02-09T13:37:28Z")

</div>

Hello, I want to send Windows Event ID 4066 to Grafana Loki server with IP address 192.168.1.2 via Winlogbeat. I wrote the following configuration file: winlogbeat.event\_logs: - name: Application event\_id: 4066 …

---

## [Doker run dometricbeat:8.17.0 failed](https://discuss.elastic.co/t/doker-run-dometricbeat-8-17-0-failed/374258)

<div class="topic-metadata">

**Author:** [@Resoft-190910](https://discuss.elastic.co/u/Resoft-190910)\
**Replies:** 0\
**Last updated:** [February 8, 2025, 11:24am UTC](https://discuss.elastic.co/t/doker-run-dometricbeat-8-17-0-failed/374258 "2025-02-08T11:24:06Z")

</div>

This is execute command: docker run --network elk elastic/metricbeat:8.17.0 setup -E setup.ilm.overwrite=true -E setup.kibana.host=kibana:5601 -E output.elasticsearch.hosts=\["xxxxxxxxx:9200"\] -E output.elasticsearch.use…

---

## [Fleet server docker APM TLS environment vars](https://discuss.elastic.co/t/fleet-server-docker-apm-tls-environment-vars/374199)

<div class="topic-metadata">

**Author:** [@Ali\_Osman](https://discuss.elastic.co/u/Ali_Osman)\
**Replies:** 0\
**Last updated:** [February 6, 2025, 10:19pm UTC](https://discuss.elastic.co/t/fleet-server-docker-apm-tls-environment-vars/374199 "2025-02-06T22:19:23Z")

</div>

I have a docker compose file where it spins up a single node elasticsearch, kibana and a fleet server. Everything is running TLS except the APM server I have to do it manually from Kibana. Is there some environment vari…

---

## [How to improve FCP and LCP score](https://discuss.elastic.co/t/how-to-improve-fcp-and-lcp-score/374196)

<div class="topic-metadata">

**Author:** [@nicolas\_marinucci](https://discuss.elastic.co/u/nicolas_marinucci)\
**Replies:** 0\
**Last updated:** [February 6, 2025, 8:16pm UTC](https://discuss.elastic.co/t/how-to-improve-fcp-and-lcp-score/374196 "2025-02-06T20:16:42Z")

</div>

Hello, dear friends! I am currently implementing synthetic monitoring to obtain metrics of the status of certain services. For this I have followed the documentation to set up a full elastic agent with docker to use it…

---

## [The error list of the Flask Python app is not collected in ES APM](https://discuss.elastic.co/t/the-error-list-of-the-flask-python-app-is-not-collected-in-es-apm/374101)

<div class="topic-metadata">

**Author:** [@jungsookim](https://discuss.elastic.co/u/jungsookim)\
**Replies:** 0\
**Last updated:** [February 5, 2025, 2:51am UTC](https://discuss.elastic.co/t/the-error-list-of-the-flask-python-app-is-not-collected-in-es-apm/374101 "2025-02-05T02:51:18Z")

</div>

Env OS: Ubuntu Linux (Container to be exact) Python version: 3.10 Framework and version \[e.g. Django 2.1\]: flask-3.0.2 APM Server version: 8.15 Agent version: 6.23.0 Using all default values. Agent Setup (code) d…

---

## [How RUM and APM works](https://discuss.elastic.co/t/how-rum-and-apm-works/373846)

<div class="topic-metadata">

**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\
**Replies:** 7\
**Last updated:** [February 4, 2025, 10:36pm UTC](https://discuss.elastic.co/t/how-rum-and-apm-works/373846 "2025-02-04T22:36:47Z")

</div>

Hi, I need your help to understand how RUM works. I've seen it linked to APM, but I know very little about APM. Can someone describe how RUM works and how to use it? Thank you very much.

---

## [Log4J version in apm-agent](https://discuss.elastic.co/t/log4j-version-in-apm-agent/374015)

<div class="topic-metadata">

**Author:** [@PedroSerrano](https://discuss.elastic.co/u/PedroSerrano)\
**Replies:** 3\
**Last updated:** [February 4, 2025, 8:37am UTC](https://discuss.elastic.co/t/log4j-version-in-apm-agent/374015 "2025-02-04T08:37:49Z")

</div>

Hi! We are using apm-agent library (apm-agent-attach) in a java application, and we've seen lastest version of apm-agent (1.52.1) comes with log4j 2.12.4, which has some vulnerabilities. Are there any plans to launch a…

---

## [Elastic AI Assistant for Search Connector Knowledge Base](https://discuss.elastic.co/t/elastic-ai-assistant-for-search-connector-knowledge-base/362832)

<div class="topic-metadata">

**Author:** [@aisyaharifin](https://discuss.elastic.co/u/aisyaharifin)\
**Replies:** 2\
**Last updated:** [February 4, 2025, 12:15am UTC](https://discuss.elastic.co/t/elastic-ai-assistant-for-search-connector-knowledge-base/362832 "2025-02-04T00:15:40Z")

</div>

Hi Elastic, I have AI Assistant for my Observability and I found that I can manage the knowledge base by integrate it with our Search Connector. I already setup my Search Connector specifically Confluence Connector. B…

---

## [.Net Apm Agent Installation](https://discuss.elastic.co/t/net-apm-agent-installation/373279)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 2\
**Last updated:** [February 3, 2025, 6:01pm UTC](https://discuss.elastic.co/t/net-apm-agent-installation/373279 "2025-02-03T18:01:03Z")

</div>

Hi Team, We are trying to implement the elastic APM agent on a web portal running on .NET framework 4.5.2. As per the documentation 4.6.2 or above is supported. Is there a workaround for this problem. We also tried addi…

---

## [ELK APM .NET System.NullReferenceException](https://discuss.elastic.co/t/elk-apm-net-system-nullreferenceexception/371079)

<div class="topic-metadata">

**Author:** [@Anders\_Ekdahl](https://discuss.elastic.co/u/Anders_Ekdahl)\
**Replies:** 1\
**Last updated:** [February 3, 2025, 1:40pm UTC](https://discuss.elastic.co/t/elk-apm-net-system-nullreferenceexception/371079 "2025-02-03T13:40:07Z")

</div>

We're using the Elastic.Apm NuGet package and noticed that it threw a NullReferenceException in the ElasticActivityListener. The stack trace is: System.NullReferenceException: Object reference not set to an instance of…

---

## [Dotnet agent configuration](https://discuss.elastic.co/t/dotnet-agent-configuration/371592)

<div class="topic-metadata">

**Author:** [@Sachin\_Chourasiya](https://discuss.elastic.co/u/Sachin_Chourasiya)\
**Replies:** 1\
**Last updated:** [February 3, 2025, 1:23pm UTC](https://discuss.elastic.co/t/dotnet-agent-configuration/371592 "2025-02-03T13:23:03Z")

</div>

Hi All, i want to monitor ASP.NET Core application running on docker container and i have setup the integrated apm server on different server, now i want to monitor .net application using .net apm agent but when i look …

---

## [AWS ECR scanning and vulnerabilities concern for docker image 8.12.2](https://discuss.elastic.co/t/aws-ecr-scanning-and-vulnerabilities-concern-for-docker-image-8-12-2/368117)

<div class="topic-metadata">

**Author:** [@xyngfei](https://discuss.elastic.co/u/xyngfei)\
**Replies:** 0\
**Last updated:** [October 2, 2024, 6:45am UTC](https://discuss.elastic.co/t/aws-ecr-scanning-and-vulnerabilities-concern-for-docker-image-8-12-2/368117 "2024-10-02T06:45:29Z")

</div>

I am trying to follow the guide to pull the docker image, why are there so many critical findings? need some advice to move forward. docker pull docker.elastic.co/beats/elastic-agent-complete:8.12.2

---

## [Elastic agent on AKS does not collect kubernetes total node memory metric](https://discuss.elastic.co/t/elastic-agent-on-aks-does-not-collect-kubernetes-total-node-memory-metric/356900)

<div class="topic-metadata">

**Author:** [@minhtranes](https://discuss.elastic.co/u/minhtranes)\
**Replies:** 1\
**Last updated:** [February 2, 2025, 10:07pm UTC](https://discuss.elastic.co/t/elastic-agent-on-aks-does-not-collect-kubernetes-total-node-memory-metric/356900 "2025-02-02T22:07:11Z")

</div>

Issue In my case, the Kubernetes dashboard (Metrics Kubernetes Node) does not show Memory usage visualization. Context: I deployed ELK stack 8.12.2 on Azure Kubernetes Service to monitor basic metrics of Node and Pod …

---

## [Missing Logs on Elasticsearch Using OTEL Collector](https://discuss.elastic.co/t/missing-logs-on-elasticsearch-using-otel-collector/373449)

<div class="topic-metadata">

**Author:** [@Fuad\_Arohunfara](https://discuss.elastic.co/u/Fuad_Arohunfara)\
**Replies:** 40\
**Last updated:** [February 2, 2025, 9:39pm UTC](https://discuss.elastic.co/t/missing-logs-on-elasticsearch-using-otel-collector/373449 "2025-02-02T21:39:04Z")

</div>

Logs are being shipped using otelcollector to Kibana from our kubernetes cluster but there appears to be some logs missing -- Find attached error any help will be appreciated. error elasticsearchexporter@v0.115.0/bulk…

---

## [ECS ingest pipeline parsing & help of AI?](https://discuss.elastic.co/t/ecs-ingest-pipeline-parsing-help-of-ai/373974)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 1\
**Last updated:** [February 2, 2025, 12:24pm UTC](https://discuss.elastic.co/t/ecs-ingest-pipeline-parsing-help-of-ai/373974 "2025-02-02T12:24:19Z")

</div>

Hi there, I have to do some ingest pipeline parsing for cisco proxy syslog logs sent over udp and want to use the ECS standard. Does someone of the staff or the community know, if there is an AI that can help me in that…

---

## [Split traces to separate indices based on service name](https://discuss.elastic.co/t/split-traces-to-separate-indices-based-on-service-name/373942)

<div class="topic-metadata">

**Author:** [@Ali\_Osman](https://discuss.elastic.co/u/Ali_Osman)\
**Replies:** 6\
**Last updated:** [February 1, 2025, 4:26pm UTC](https://discuss.elastic.co/t/split-traces-to-separate-indices-based-on-service-name/373942 "2025-02-01T16:26:44Z")

</div>

Kibana version: 8.17.1 Elasticsearch version: 8.17.1 APM Server version: 8.17.1 APM Agent language and version: NodeJS - 4.11.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: D…

---

## [Roadmap and possible discontinuation of OpenTracing bridge](https://discuss.elastic.co/t/roadmap-and-possible-discontinuation-of-opentracing-bridge/373877)

<div class="topic-metadata">

**Author:** [@CGiuseppe](https://discuss.elastic.co/u/CGiuseppe)\
**Replies:** 2\
**Last updated:** [January 30, 2025, 9:02am UTC](https://discuss.elastic.co/t/roadmap-and-possible-discontinuation-of-opentracing-bridge/373877 "2025-01-30T09:02:09Z")

</div>

The OpenTracing bridge docs for the java apm agent (version 1.52.1) on OpenTracing bridge | APM Java Agent Reference \[1.x\] | Elastic contain a note saying the following: " OpenTracing is discontinued in favor of OpenTe…

---

## [NTLM negotiation logged as ERROR](https://discuss.elastic.co/t/ntlm-negotiation-logged-as-error/368877)

<div class="topic-metadata">

**Author:** [@dsantos98](https://discuss.elastic.co/u/dsantos98)\
**Replies:** 1\
**Last updated:** [January 30, 2025, 6:15am UTC](https://discuss.elastic.co/t/ntlm-negotiation-logged-as-error/368877 "2025-01-30T06:15:48Z")

</div>

Environment Windows .NET Framework 4.8 WebApp Describe the bug The situation I came across is when my web application receives a request and that request triggers a request/transaction using HttpWebRequest (System.Net)…

---

## [Automatic traces from tracing doesn't match with MDC traces](https://discuss.elastic.co/t/automatic-traces-from-tracing-doesnt-match-with-mdc-traces/373776)

<div class="topic-metadata">

**Author:** [@FranM](https://discuss.elastic.co/u/FranM)\
**Replies:** 1\
**Last updated:** [January 29, 2025, 2:41pm UTC](https://discuss.elastic.co/t/automatic-traces-from-tracing-doesnt-match-with-mdc-traces/373776 "2025-01-29T14:41:26Z")

</div>

Good Morning, I am using ecs structured logging (logging.structured.format.console=ecs) and io.micrometer:micrometer-tracing-bridge-brave with a Spring boot 3.4.2 . My trace from trace.id is coming from MDC and traceId …

---

## [Elastic synthetic error - You can't manually starts test on a private location](https://discuss.elastic.co/t/elastic-synthetic-error-you-cant-manually-starts-test-on-a-private-location/373813)

<div class="topic-metadata">

**Author:** [@Amol\_Nagotkar](https://discuss.elastic.co/u/Amol_Nagotkar)\
**Replies:** 2\
**Last updated:** [January 29, 2025, 2:01pm UTC](https://discuss.elastic.co/t/elastic-synthetic-error-you-cant-manually-starts-test-on-a-private-location/373813 "2025-01-29T14:01:53Z")

</div>

Hi all, Using elastic version 8.8.0. I have created private location. added the same while creating a monitor as shown in image. Please check error below. My health-check api is not working. Current status is also …

---

## [Valid values for service.state](https://discuss.elastic.co/t/valid-values-for-service-state/373766)

<div class="topic-metadata">

**Author:** [@kelunik](https://discuss.elastic.co/u/kelunik)\
**Replies:** 1\
**Last updated:** [January 28, 2025, 5:07pm UTC](https://discuss.elastic.co/t/valid-values-for-service-state/373766 "2025-01-28T17:07:16Z")

</div>

I have (long-running) processes that have a starting, running and shutdown phase. I want to filter logs to only show the running phase. I looked at ECS and found service.state as a field that might be suitable, however, …

---

## [Synthetics and APM integration](https://discuss.elastic.co/t/synthetics-and-apm-integration/373769)

<div class="topic-metadata">

**Author:** [@vharish0596](https://discuss.elastic.co/u/vharish0596)\
**Replies:** 0\
**Last updated:** [January 28, 2025, 2:00pm UTC](https://discuss.elastic.co/t/synthetics-and-apm-integration/373769 "2025-01-28T14:00:05Z")

</div>

In the advanced options of synthetics there an option to choose APM service name. However few things are not clear like Let's say I have a service in APM running in two environments with the same name, to which envi…

---

## [How to create an alert when apm agent stops working?](https://discuss.elastic.co/t/how-to-create-an-alert-when-apm-agent-stops-working/373618)

<div class="topic-metadata">

**Author:** [@krishnannair87](https://discuss.elastic.co/u/krishnannair87)\
**Replies:** 3\
**Last updated:** [January 28, 2025, 10:01am UTC](https://discuss.elastic.co/t/how-to-create-an-alert-when-apm-agent-stops-working/373618 "2025-01-28T10:01:24Z")

</div>

I have multiple elastic apm java agent deployed and i need to create an alert when it stops working. I see one topic relevant to this but I still want to check what is the configuration of alert in case we enable health …

---

## [Elastic APM Agent vs Elastic Distribution of OpenTelemetry roadmap and support](https://discuss.elastic.co/t/elastic-apm-agent-vs-elastic-distribution-of-opentelemetry-roadmap-and-support/373731)

<div class="topic-metadata">

**Author:** [@Marchelune](https://discuss.elastic.co/u/Marchelune)\
**Replies:** 3\
**Last updated:** [January 27, 2025, 8:09pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-vs-elastic-distribution-of-opentelemetry-roadmap-and-support/373731 "2025-01-27T20:09:56Z")

</div>

Hi! I have a roadmap question on the APM nodeJS agent (although it's probably a question in general). I wrote and maintain some custom (internal) packages to instrument nodejs apps to better track transactions from an u…

---

## [Retrieving Node URL from Alert](https://discuss.elastic.co/t/retrieving-node-url-from-alert/372143)

<div class="topic-metadata">

**Author:** [@Bartosz](https://discuss.elastic.co/u/Bartosz)\
**Replies:** 1\
**Last updated:** [January 25, 2025, 6:02pm UTC](https://discuss.elastic.co/t/retrieving-node-url-from-alert/372143 "2025-01-25T18:02:10Z")

</div>

I have created simple CPU alert inside Stack Management, with action that send a message to Slack. I wanted to have the URL to the node causing the alert inside the message. I found the url inside {{context.action}} v…

---

## [How to setup a snooze schedule except 1st day of quarter beginning](https://discuss.elastic.co/t/how-to-setup-a-snooze-schedule-except-1st-day-of-quarter-beginning/368568)

<div class="topic-metadata">

**Author:** [@ajeshbabun](https://discuss.elastic.co/u/ajeshbabun)\
**Replies:** 1\
**Last updated:** [January 25, 2025, 4:57pm UTC](https://discuss.elastic.co/t/how-to-setup-a-snooze-schedule-except-1st-day-of-quarter-beginning/368568 "2025-01-25T16:57:57Z")

</div>

I have a rule that search for data using Elasticsearch query for a job runs at 6:00 AM of 1st day of quarter beginning. So want this rule to be snoozed every day except 6:00 AM to 6:30 AM on 1st day of every quarter begi…

---

## [Elastiflow - Seeing flows in Elastiflow Dashboard](https://discuss.elastic.co/t/elastiflow-seeing-flows-in-elastiflow-dashboard/373653)

<div class="topic-metadata">

**Author:** [@CarlosDanger142](https://discuss.elastic.co/u/CarlosDanger142)\
**Replies:** 1\
**Last updated:** [January 25, 2025, 1:05am UTC](https://discuss.elastic.co/t/elastiflow-seeing-flows-in-elastiflow-dashboard/373653 "2025-01-25T01:05:10Z")

</div>

Is this the correct category to ask about Elastiflow dashboards? Brand new to Elastiflow. Not seeing my data in the dashboard. Sending sFlow and IPFIX to the collector via port udp 9995. type or paste code here !\[Sc…

---

## [Does Tail-based Sampling Sample Logs/Metrics?](https://discuss.elastic.co/t/does-tail-based-sampling-sample-logs-metrics/373642)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 2\
**Last updated:** [January 25, 2025, 12:48am UTC](https://discuss.elastic.co/t/does-tail-based-sampling-sample-logs-metrics/373642 "2025-01-25T00:48:48Z")

</div>

Hi All, Might be a bit of a "dump" question, but I couldn't really find any documentation on it, so wanted to ask and confirm. With APM/OTel there are essentially 3 parts: traces, logs, metrics. When using tail-based s…

---

## [Private location resource calculator](https://discuss.elastic.co/t/private-location-resource-calculator/373647)

<div class="topic-metadata">

**Author:** [@mbowman](https://discuss.elastic.co/u/mbowman)\
**Replies:** 0\
**Last updated:** [January 24, 2025, 6:58pm UTC](https://discuss.elastic.co/t/private-location-resource-calculator/373647 "2025-01-24T18:58:11Z")

</div>

Hi, Over the last year we have increased our Synthetics monitor usage with several type of monitors, but only a few multi-step user journeys. Based on what is described here Monitor resources on private networks | Elas…

[Previous page](https://discuss.elastic.co/c/observability/82.md?page=10)

[Next page](https://discuss.elastic.co/c/observability/82.md?page=12)
