# Elastic Observability

**URL:** https://discuss.elastic.co/c/observability/82.md?page=2

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 3

---

## [\[Synthetic Monitoring\] Screenshot Options Configuration](https://discuss.elastic.co/t/synthetic-monitoring-screenshot-options-configuration/362415)

<div class="topic-metadata">

**Author:** [@aisyaharifin](https://discuss.elastic.co/u/aisyaharifin)\
**Replies:** 3\
**Last updated:** [December 17, 2025, 1:08pm UTC](https://discuss.elastic.co/t/synthetic-monitoring-screenshot-options-configuration/362415 "2025-12-17T13:08:44Z")

</div>

Hi Elastic, I want to ask is there a way I can configure my screenshot options in synthetic for all my monitor at once? For instance I have 150 monitors that i want to configure the screenshot options. Thanks!

---

## [Metricbeat 8.x – Why were os.cpu.load\_average.5m and 15m removed?](https://discuss.elastic.co/t/metricbeat-8-x-why-were-os-cpu-load-average-5m-and-15m-removed/384120)

<div class="topic-metadata">

**Author:** [@Suresh\_Ghatuwa](https://discuss.elastic.co/u/Suresh_Ghatuwa)\
**Replies:** 1\
**Last updated:** [December 17, 2025, 12:56pm UTC](https://discuss.elastic.co/t/metricbeat-8-x-why-were-os-cpu-load-average-5m-and-15m-removed/384120 "2025-12-17T12:56:52Z")

</div>

We observed a behavioral change between Metricbeat 7.17 and 8.x (tested with 8.13) regarding Elasticsearch node OS CPU load averages. In Metricbeat 7.17, metricset exported: node\_stats.os.cpu.load\_average.1m node\_…

---

## [Password required for Sudo install](https://discuss.elastic.co/t/password-required-for-sudo-install/384141)

<div class="topic-metadata">

**Author:** [@sharona](https://discuss.elastic.co/u/sharona)\
**Replies:** 1\
**Last updated:** [December 17, 2025, 12:26pm UTC](https://discuss.elastic.co/t/password-required-for-sudo-install/384141 "2025-12-17T12:26:59Z")

</div>

I’m using the Strigo environment and it keeps prompting for the elastic password. I tried using the training access password and it doesn’t work.

---

## [Salesforce Integration - Resolving Salesforce instance URL Error](https://discuss.elastic.co/t/salesforce-integration-resolving-salesforce-instance-url-error/383693)

<div class="topic-metadata">

**Author:** [@BKgingersnap](https://discuss.elastic.co/u/BKgingersnap)\
**Replies:** 8\
**Last updated:** [December 15, 2025, 2:47pm UTC](https://discuss.elastic.co/t/salesforce-integration-resolving-salesforce-instance-url-error/383693 "2025-12-15T14:47:07Z")

</div>

I’m configuring the Salesforce Integration as described here: Salesforce Integration | Elastic integrations I am able to authenticate and generate an Salesforce Access Token using the test script in the document but whe…

---

## [Testing APIs and Screenshots?](https://discuss.elastic.co/t/testing-apis-and-screenshots/383791)

<div class="topic-metadata">

**Author:** [@Peter\_Lambrechtsen](https://discuss.elastic.co/u/Peter_Lambrechtsen)\
**Replies:** 1\
**Last updated:** [December 14, 2025, 8:43am UTC](https://discuss.elastic.co/t/testing-apis-and-screenshots/383791 "2025-12-14T08:43:14Z")

</div>

I have seen various posts about testing APIs using a custom built nodejs script and not being able to get screenshots. Following the Synthetics and Playwright documentation this is the sort of thing I would like to do: i…

---

## [How to filter traces by a custom label in a span](https://discuss.elastic.co/t/how-to-filter-traces-by-a-custom-label-in-a-span/384013)

<div class="topic-metadata">

**Author:** [@xyz1111](https://discuss.elastic.co/u/xyz1111)\
**Replies:** 1\
**Last updated:** [December 12, 2025, 12:18pm UTC](https://discuss.elastic.co/t/how-to-filter-traces-by-a-custom-label-in-a-span/384013 "2025-12-12T12:18:39Z")

</div>

Hey! I’m trying to find a way to only see the spans with a particular label value. Similar to opening the traces on Grafana and typing something like {span.mycustomfield=”value”} and seeing all the spans underneath. Trie…

---

## [Synthetic Rules - Active & recovered states - Incident Create & update](https://discuss.elastic.co/t/synthetic-rules-active-recovered-states-incident-create-update/383944)

<div class="topic-metadata">

**Author:** [@c.m](https://discuss.elastic.co/u/c.m)\
**Replies:** 1\
**Last updated:** [December 11, 2025, 9:24am UTC](https://discuss.elastic.co/t/synthetic-rules-active-recovered-states-incident-create-update/383944 "2025-12-11T09:24:43Z")

</div>

Hi, I am trying to capture ‘Active & Recovered ‘ events for a synthetic monitor so that i can update Incident in SNOW now. Setup: Have synthetic monioring setup for a website. Have a syntheric & uptime rule setup. Have…

---

## [Prometheus support](https://discuss.elastic.co/t/prometheus-support/383869)

<div class="topic-metadata">

**Author:** [@ilyazh](https://discuss.elastic.co/u/ilyazh)\
**Replies:** 0\
**Last updated:** [December 4, 2025, 4:14pm UTC](https://discuss.elastic.co/t/prometheus-support/383869 "2025-12-04T16:14:24Z")

</div>

Hello, when I was at the ElasticON in Munich on Nov 6th 2025 there was a short presentation “A new era for Metrics in Elastic: Performance, Prometheus, and more” where the presenter talked about Elasticsearch being able…

---

## [Question about APM Logs feature support across agents](https://discuss.elastic.co/t/question-about-apm-logs-feature-support-across-agents/383418)

<div class="topic-metadata">

**Author:** [@barcus](https://discuss.elastic.co/u/barcus)\
**Replies:** 3\
**Last updated:** [December 4, 2025, 3:07pm UTC](https://discuss.elastic.co/t/question-about-apm-logs-feature-support-across-agents/383418 "2025-12-04T15:07:34Z")

</div>

Hello APM team, I have a question regarding the experimental feature that allows application logs to be ingested through the APM Agent and stored directly into the APM log indices (one index per APM service). From what…

---

## [Parsing a logstash file](https://discuss.elastic.co/t/parsing-a-logstash-file/383788)

<div class="topic-metadata">

**Author:** [@DOkuwa](https://discuss.elastic.co/u/DOkuwa)\
**Replies:** 2\
**Last updated:** [December 1, 2025, 6:08pm UTC](https://discuss.elastic.co/t/parsing-a-logstash-file/383788 "2025-12-01T18:08:53Z")

</div>

I want to parse my logstash file to be able to delete some unnecessary fields that appear in kibana This is the input file from filebeat { "source": "10.200.226.62:57500", "subscription-name": "default-1764331045"…

---

## [Using multiple data views in a single alert definition?](https://discuss.elastic.co/t/using-multiple-data-views-in-a-single-alert-definition/383683)

<div class="topic-metadata">

**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\
**Replies:** 5\
**Last updated:** [December 1, 2025, 2:48pm UTC](https://discuss.elastic.co/t/using-multiple-data-views-in-a-single-alert-definition/383683 "2025-12-01T14:48:40Z")

</div>

Hi everyone, I’m wondering if it’s possible for an alert to reference multiple data views in its definition. My use case: I have one data view per environment, and I’d like to avoid duplicating the same alert definitio…

---

## [Enable APM for springboot running on windows](https://discuss.elastic.co/t/enable-apm-for-springboot-running-on-windows/383568)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 20\
**Last updated:** [November 26, 2025, 2:56pm UTC](https://discuss.elastic.co/t/enable-apm-for-springboot-running-on-windows/383568 "2025-11-26T14:56:31Z")

</div>

Hello , I want to enable APM for java application running on tomcat server(windows). I’ve followed the steps mentioned in the setup-tomcat-windows . I have restarted the tomcat service running on windows but it was not …

---

## [JsonXContent NoClassDefFoundError only in Production — Works Locally](https://discuss.elastic.co/t/jsonxcontent-noclassdeffounderror-only-in-production-works-locally/383673)

<div class="topic-metadata">

**Author:** [@Md\_Nisar\_Ahmed](https://discuss.elastic.co/u/Md_Nisar_Ahmed)\
**Replies:** 3\
**Last updated:** [November 26, 2025, 1:35pm UTC](https://discuss.elastic.co/t/jsonxcontent-noclassdeffounderror-only-in-production-works-locally/383673 "2025-11-26T13:35:51Z")

</div>

Hi team, I am getting this error only in my production server, but the exact same code works perfectly on my local machine: java.lang.NoClassDefFoundError: Could not initialize class org.elasticsearch.xcontent.json.Js…

---

## [Can you group endpoint.events.\* event.datasets when creating visualizations?](https://discuss.elastic.co/t/can-you-group-endpoint-events-event-datasets-when-creating-visualizations/383520)

<div class="topic-metadata">

**Author:** [@meatwad](https://discuss.elastic.co/u/meatwad)\
**Replies:** 1\
**Last updated:** [November 19, 2025, 6:16am UTC](https://discuss.elastic.co/t/can-you-group-endpoint-events-event-datasets-when-creating-visualizations/383520 "2025-11-19T06:16:10Z")

</div>

Hi there! I’m trying to create an “area stacked” visualization that shows event.dataset over the last 90 days. Is there a way to group the endpoint.events.network, endpoint.events.process, and events.events.file logs int…

---

## [Filebeat 8.17.10 disable template data\_stream](https://discuss.elastic.co/t/filebeat-8-17-10-disable-template-data-stream/383429)

<div class="topic-metadata">

**Author:** [@almteref](https://discuss.elastic.co/u/almteref)\
**Replies:** 3\
**Last updated:** [November 18, 2025, 3:55am UTC](https://discuss.elastic.co/t/filebeat-8-17-10-disable-template-data-stream/383429 "2025-11-18T03:55:08Z")

</div>

Hi I have filebae version 8.17.10 running on k8s And send logs to elasticsearch with the same version This is my configuration filebeat: inputs: type: filestream id: vouchers-logs-stream paths: /path/to/logs/\*.…

---

## [APM data stream reroutes and custom ILM policies](https://discuss.elastic.co/t/apm-data-stream-reroutes-and-custom-ilm-policies/383499)

<div class="topic-metadata">

**Author:** [@wbjls](https://discuss.elastic.co/u/wbjls)\
**Replies:** 0\
**Last updated:** [November 18, 2025, 3:44am UTC](https://discuss.elastic.co/t/apm-data-stream-reroutes-and-custom-ilm-policies/383499 "2025-11-18T03:44:21Z")

</div>

Hi There, I’m a newbie to Elastic and looking to solve an issue that I am having trouble with. Essentially I am looking to set up a Telemetry stack across various apps we maintain, and am trialing an approach for a sin…

---

## [Alerting on field value change](https://discuss.elastic.co/t/alerting-on-field-value-change/383451)

<div class="topic-metadata">

**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\
**Replies:** 12\
**Last updated:** [November 16, 2025, 1:10pm UTC](https://discuss.elastic.co/t/alerting-on-field-value-change/383451 "2025-11-16T13:10:12Z")

</div>

I’m currently logging on-change data in ES, and I’m running a latest transform to store the most updated data into a separate index. I was advised that an ingest pipeline will help me compare any value coming in with th…

---

## [Android APM (EDOT auto-instrumentation) not tracking full app activity](https://discuss.elastic.co/t/android-apm-edot-auto-instrumentation-not-tracking-full-app-activity/383422)

<div class="topic-metadata">

**Author:** [@Faisal\_siddiqui](https://discuss.elastic.co/u/Faisal_siddiqui)\
**Replies:** 1\
**Last updated:** [November 13, 2025, 2:49pm UTC](https://discuss.elastic.co/t/android-apm-edot-auto-instrumentation-not-tracking-full-app-activity/383422 "2025-11-13T14:49:47Z")

</div>

Hello, team! I integrated Elastic APM in my Android app using EDOT (Elastic Distribution of OpenTelemetry) for auto-instrumentation, but it’s only tracking a few API calls — not the complete app activity. Most screens, …

---

## [Application Reads on which Cluster](https://discuss.elastic.co/t/application-reads-on-which-cluster/383368)

<div class="topic-metadata">

**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\
**Replies:** 2\
**Last updated:** [November 13, 2025, 1:55pm UTC](https://discuss.elastic.co/t/application-reads-on-which-cluster/383368 "2025-11-13T13:55:30Z")

</div>

Team, Looking for a right metric to determine which cluster is taking read traffic. We have 2 clusters for redundancy at anytime only one cluster will take read traffic anc both takes write traffic. I have been playing…

---

## [ClientTimeout while awaiting headers](https://discuss.elastic.co/t/clienttimeout-while-awaiting-headers/383330)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 16\
**Last updated:** [November 12, 2025, 2:59pm UTC](https://discuss.elastic.co/t/clienttimeout-while-awaiting-headers/383330 "2025-11-12T14:59:45Z")

</div>

Hi Team, I want to monitor one url https://abccc.com/acbs. I am using http ping method . But i am getting \`Could not connect xx.xx.xx.xx:443 with error:dial tcp xx.xx.xx.xx:443:i/o timeout(Client.Timeout exceeds while …

---

## [How to use Universal Profiling to minitor JBoss](https://discuss.elastic.co/t/how-to-use-universal-profiling-to-minitor-jboss/383395)

<div class="topic-metadata">

**Author:** [@edgarmat1964](https://discuss.elastic.co/u/edgarmat1964)\
**Replies:** 1\
**Last updated:** [November 12, 2025, 2:44pm UTC](https://discuss.elastic.co/t/how-to-use-universal-profiling-to-minitor-jboss/383395 "2025-11-12T14:44:57Z")

</div>

LS, at the moment we are using an additional javaagent argument on JBoss’ commandline to monitor it using apm. Which works but has (at least) one downside: to roll out a new version of the apm agent you have to restart …

---

## [Observability UI shows incorrect count of active alerts](https://discuss.elastic.co/t/observability-ui-shows-incorrect-count-of-active-alerts/383386)

<div class="topic-metadata">

**Author:** [@Hari\_mandla](https://discuss.elastic.co/u/Hari_mandla)\
**Replies:** 0\
**Last updated:** [November 12, 2025, 10:55am UTC](https://discuss.elastic.co/t/observability-ui-shows-incorrect-count-of-active-alerts/383386 "2025-11-12T10:55:32Z")

</div>

Our expectation about Alert lifecycle is, "When a rule creates an alert for particular group, kibana creates a document in .internal-observability-\* index with a status active. When this is recovered, kibana updates the …

---

## [Observability Alerting](https://discuss.elastic.co/t/observability-alerting/383344)

<div class="topic-metadata">

**Author:** [@MuchoRiceGobler](https://discuss.elastic.co/u/MuchoRiceGobler)\
**Replies:** 1\
**Last updated:** [November 11, 2025, 4:14pm UTC](https://discuss.elastic.co/t/observability-alerting/383344 "2025-11-11T16:14:35Z")

</div>

I've made a couple hundred Observability rules to detect when 0 logs are received from specific hosts (monitors logs are being forwarded to Elastic). However, my rules run every 60 seconds (to minimise time to detection …

---

## [How to enrich logs with the EDOT Java?](https://discuss.elastic.co/t/how-to-enrich-logs-with-the-edot-java/383286)

<div class="topic-metadata">

**Author:** [@nilsen](https://discuss.elastic.co/u/nilsen)\
**Replies:** 0\
**Last updated:** [November 7, 2025, 9:08am UTC](https://discuss.elastic.co/t/how-to-enrich-logs-with-the-edot-java/383286 "2025-11-07T09:08:09Z")

</div>

I'm using the EDOT Java agent, which automatically generates and exports logs/metrics/tracing from my Java application to Elastic. However, I'm having a hard time enriching the log documents. The goal is to be able to q…

---

## [Send Meta Data with RUM for APM](https://discuss.elastic.co/t/send-meta-data-with-rum-for-apm/383250)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 0\
**Last updated:** [November 5, 2025, 3:28pm UTC](https://discuss.elastic.co/t/send-meta-data-with-rum-for-apm/383250 "2025-11-05T15:28:18Z")

</div>

I am testing out a few of the Agent API in RUM with Elasticsearch APM as shown in this documentation here: Agent API | APM RUM JavaScript agent So far I got most things working like getting span information, traces, tra…

---

## [Setting up Elasticsearch servicemonitor for prometheus](https://discuss.elastic.co/t/setting-up-elasticsearch-servicemonitor-for-prometheus/374831)

<div class="topic-metadata">

**Author:** [@ragc007](https://discuss.elastic.co/u/ragc007)\
**Replies:** 2\
**Last updated:** [November 5, 2025, 5:58am UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-servicemonitor-for-prometheus/374831 "2025-11-05T05:58:26Z")

</div>

trying to setup servicemonitor for elasticsearch exporter to expose elasticsearch cluster metrics to prometheus, but exporter fails to connect to elasticsearch cluster in exporter we are passing the service url along wi…

---

## [Basic example of Span with RUM?](https://discuss.elastic.co/t/basic-example-of-span-with-rum/382794)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 4\
**Last updated:** [November 5, 2025, 2:45am UTC](https://discuss.elastic.co/t/basic-example-of-span-with-rum/382794 "2025-11-05T02:45:12Z")

</div>

I am trying to test the span feature of RUM. So i wrote this simple code: \<!DOCTYPE html\> \<html lang="en"\> \<head\> \<meta charset="utf-8" /\> \<title\>Span\</title\> \<script src="https://unpkg.com/@elastic/apm-rum@5.12.0…

---

## [Adding journey to synthetic monitor and running steps and not skipping when failure](https://discuss.elastic.co/t/adding-journey-to-synthetic-monitor-and-running-steps-and-not-skipping-when-failure/316826)

<div class="topic-metadata">

**Author:** [@Kris\_MacKay](https://discuss.elastic.co/u/Kris_MacKay)\
**Replies:** 2\
**Last updated:** [November 5, 2025, 1:35am UTC](https://discuss.elastic.co/t/adding-journey-to-synthetic-monitor-and-running-steps-and-not-skipping-when-failure/316826 "2025-11-05T01:35:35Z")

</div>

Problem: Our automation scripts were originally written in Playwright for Windows and Linux. They used "test" instead of "step" for each section. I'm using the following environment: Elastic using a synthetic monitor …

---

## [Elastic APM + PacketBeat](https://discuss.elastic.co/t/elastic-apm-packetbeat/383222)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 0\
**Last updated:** [November 4, 2025, 11:48pm UTC](https://discuss.elastic.co/t/elastic-apm-packetbeat/383222 "2025-11-04T23:48:57Z")

</div>

Hello, Other APM solutions offer a network component as part of their APM solution. This network component provides monitoring that helps identify whether network issues are related to application problems. Here’s a re…

---

## [Want to understand how we can integrate metricbeat with amazon ecs ec2 launch type?](https://discuss.elastic.co/t/want-to-understand-how-we-can-integrate-metricbeat-with-amazon-ecs-ec2-launch-type/383217)

<div class="topic-metadata">

**Author:** [@rutz19](https://discuss.elastic.co/u/rutz19)\
**Replies:** 0\
**Last updated:** [November 4, 2025, 5:16pm UTC](https://discuss.elastic.co/t/want-to-understand-how-we-can-integrate-metricbeat-with-amazon-ecs-ec2-launch-type/383217 "2025-11-04T17:16:40Z")

</div>

If any one has integrated metricbeat with aws ecs ec2. It would be really helpful if you can share the details on how to achieve it.

[Previous page](https://discuss.elastic.co/c/observability/82.md?page=1)

[Next page](https://discuss.elastic.co/c/observability/82.md?page=3)