# Latest **URL:** https://discuss.elastic.co/latest.md?page=1167 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1168 --- ## [Error running winlogbeat setup on windows host](https://discuss.elastic.co/t/error-running-winlogbeat-setup-on-windows-host/302635)
**Author:** [@randyhaley](https://discuss.elastic.co/u/randyhaley)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 4:15pm UTC](https://discuss.elastic.co/t/error-running-winlogbeat-setup-on-windows-host/302635 "2022-04-18T16:15:25Z")
I am attempting to run the winlogbeat.exe setup -e command from my windows machine. ES/Kibana is in the AWS cloud and I am connecting via the public dns of my AWS instance. When I run the setup command, it states that th… --- ## [Logstash is not listening port 5044](https://discuss.elastic.co/t/logstash-is-not-listening-port-5044/302621)
**Author:** [@Meda\_Akshay](https://discuss.elastic.co/u/Meda_Akshay)\ **Replies:** 18\ **Last updated:** [April 18, 2022, 3:34pm UTC](https://discuss.elastic.co/t/logstash-is-not-listening-port-5044/302621 "2022-04-18T15:34:55Z")
Hi, Am new to Logstash, here my issue is logstash is not listening at port 5044, here is my filebeat configuration output.logstash configured as following # ------------------------------ Logstash Output -------------… --- ## [Troubleshooting missing links for some OpenTelemetry services in the APM Service Map](https://discuss.elastic.co/t/troubleshooting-missing-links-for-some-opentelemetry-services-in-the-apm-service-map/302451)
**Author:** [@davemoore](https://discuss.elastic.co/u/davemoore)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 3:32pm UTC](https://discuss.elastic.co/t/troubleshooting-missing-links-for-some-opentelemetry-services-in-the-apm-service-map/302451 "2022-04-18T15:32:00Z")
Observed behavior: The APM service map doesn't display links between some OpenTelemetry services, but those links do appear in the trace samples. When searching in Discover for the trace.id of one of the orphaned servi… --- ## [Harvester not started for new files in configured paths](https://discuss.elastic.co/t/harvester-not-started-for-new-files-in-configured-paths/294332)
**Author:** [@dchsueh](https://discuss.elastic.co/u/dchsueh)\ **Replies:** 7\ **Last updated:** [April 18, 2022, 3:19pm UTC](https://discuss.elastic.co/t/harvester-not-started-for-new-files-in-configured-paths/294332 "2022-04-18T15:19:48Z")
Hello, I have a problem I've verified in filebeat 6.8.3, 7.5.1, and 7.16.3 I have a filebeat.yml filebeat.inputs, type log, with three configured paths with \*\* in the middle portions, something like - /var/log/a/b/\*… --- ## [Elastic SIEM Rules/Exceptions/Lists in Terraform](https://discuss.elastic.co/t/elastic-siem-rules-exceptions-lists-in-terraform/302628)
**Author:** [@operator-equals](https://discuss.elastic.co/u/operator-equals)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 2:34pm UTC](https://discuss.elastic.co/t/elastic-siem-rules-exceptions-lists-in-terraform/302628 "2022-04-18T14:34:08Z")
Hello people! I created a repo to manage Rules and Exceptions/Lists in Terraform. Working with detection-rules repo \[1\], I needed to somehow keep a source of truth on what is deployed in the SIEM. So I created a Terraf… --- ## [Get list of all indices using Elasticsearch Java API Client 7.17](https://discuss.elastic.co/t/get-list-of-all-indices-using-elasticsearch-java-api-client-7-17/302395)
**Author:** [@saurabhrs](https://discuss.elastic.co/u/saurabhrs)\ **Replies:** 6\ **Last updated:** [April 18, 2022, 2:28pm UTC](https://discuss.elastic.co/t/get-list-of-all-indices-using-elasticsearch-java-api-client-7-17/302395 "2022-04-18T14:28:33Z")
I am using Elasticsearch Java API Client 7.17 to perform operations on my cluster. I can not find a way to get list of all indices in my cluster using this API. I have found examples to achieve this using REST APIs but … --- ## [Run filebeat setup fail](https://discuss.elastic.co/t/run-filebeat-setup-fail/302626)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 2:18pm UTC](https://discuss.elastic.co/t/run-filebeat-setup-fail/302626 "2022-04-18T14:18:09Z")
Hi i just install elasticsearch and kibana on docker, i want to work with filebeat, so i followed the official documentation Run filebeat setup So i run this command: docker run docker.elastic.co/beats/filebeat:8.1.2 … --- ## [Elasticsearch - Bootstrap checks failing](https://discuss.elastic.co/t/elasticsearch-bootstrap-checks-failing/302442)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-bootstrap-checks-failing/302442 "2022-04-18T13:28:53Z")
Hello i want to install elk on docker, so i followed the official documentation Install Elasticsearch with Docker | Elasticsearch Guide \[8.1\] | Elastic So when i want to start Elasticsearch in Docker to get the passwor… --- ## [Same template created every minute](https://discuss.elastic.co/t/same-template-created-every-minute/302623)
**Author:** [@stk1](https://discuss.elastic.co/u/stk1)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 1:23pm UTC](https://discuss.elastic.co/t/same-template-created-every-minute/302623 "2022-04-18T13:23:39Z")
Hi, we are using Elasticsearch with Kibana and APM-Server for monitoring since two years. Since 3 weeks we are experiencing massive problems. First Kibana stopped due to a corrupted translog (TranslogCorruptedException)… --- ## [Displaying a signal element in Vega visualization within a Kibana dashboard](https://discuss.elastic.co/t/displaying-a-signal-element-in-vega-visualization-within-a-kibana-dashboard/302562)
**Author:** [@mbsnider](https://discuss.elastic.co/u/mbsnider)\ **Replies:** 5\ **Last updated:** [April 18, 2022, 1:11pm UTC](https://discuss.elastic.co/t/displaying-a-signal-element-in-vega-visualization-within-a-kibana-dashboard/302562 "2022-04-18T13:11:13Z")
I'm building my own visualizations in Vega, and I am adding signals to my Vega code using the "bind" option to have a "range" or "select" object that the user of my Kibana dashboard can use to customize the visualization… --- ## [Filebeat 8.1.2 - cisco module is not creating neither index nor data stream after I deleted the first data stream, index template, index pattern and pipeline to start all over](https://discuss.elastic.co/t/filebeat-8-1-2-cisco-module-is-not-creating-neither-index-nor-data-stream-after-i-deleted-the-first-data-stream-index-template-index-pattern-and-pipeline-to-start-all-over/302359)
**Author:** [@Adrian\_Gtz](https://discuss.elastic.co/u/Adrian_Gtz)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 12:56pm UTC](https://discuss.elastic.co/t/filebeat-8-1-2-cisco-module-is-not-creating-neither-index-nor-data-stream-after-i-deleted-the-first-data-stream-index-template-index-pattern-and-pipeline-to-start-all-over/302359 "2022-04-18T12:56:41Z")
I enabled cisco module and set up filebeat.yml to output Elasticsearch with user and password. At the begining everything went well. But I decided to start all over and when I deleted the data stream, related index templ… --- ## [Snapshot Backup is not deleting Across the ELK Cluster](https://discuss.elastic.co/t/snapshot-backup-is-not-deleting-across-the-elk-cluster/302620)
**Author:** [@Abhishek\_Pratap\_Sin1](https://discuss.elastic.co/u/Abhishek_Pratap_Sin1)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 12:34pm UTC](https://discuss.elastic.co/t/snapshot-backup-is-not-deleting-across-the-elk-cluster/302620 "2022-04-18T12:34:40Z")
Hi Team, I have three nodes ELK-Cluster, I have created an SLM policy to take a Snapshot backup on the daily basis and delete the snapshot backup after three days on the cluster \[Issue\]: The snapshot backup is deleted… --- ## [Adding a new field with phonetic(metaphone) value in elasticsearch index with logstash](https://discuss.elastic.co/t/adding-a-new-field-with-phonetic-metaphone-value-in-elasticsearch-index-with-logstash/302614)
**Author:** [@saiyad\_arshad\_qadir](https://discuss.elastic.co/u/saiyad_arshad_qadir)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 10:44am UTC](https://discuss.elastic.co/t/adding-a-new-field-with-phonetic-metaphone-value-in-elasticsearch-index-with-logstash/302614 "2022-04-18T10:44:00Z")
I am new to Elasticsearch and trying to index phonetic value(metaphone) into my Elasticsearch index using logstash. index example: { "\_id" : "lRBYHIAB4PMEhuD9IXcF", "name":"KEVIN GENTLE" } and when we index it, i am s… --- ## [My Mapping with python is not working](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545)
**Author:** [@Celal\_Celik](https://discuss.elastic.co/u/Celal_Celik)\ **Replies:** 8\ **Last updated:** [April 18, 2022, 10:34am UTC](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545 "2022-04-18T10:34:02Z")
Hello community, I was trying to upload a simple csv-File but unfortunatelty my Mapping is not working. All my fields are still "keywords". What am I missing? def csv\_reader(filename,indexname): # connection to Ela… --- ## [CPU becomes overloaded when rebooting OS](https://discuss.elastic.co/t/cpu-becomes-overloaded-when-rebooting-os/302612)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 10:32am UTC](https://discuss.elastic.co/t/cpu-becomes-overloaded-when-rebooting-os/302612 "2022-04-18T10:32:58Z")
We have CentOS6.9 with Filebeat 7.12.1 installed. It has been working normally, but the CPU load increased dramatically when the OS was rebooted. As soon as we stopped Filebeat, the CPU load dropped, so we believe that… --- ## [Elastic APM with .Net 5.0](https://discuss.elastic.co/t/elastic-apm-with-net-5-0/302596)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 7:12am UTC](https://discuss.elastic.co/t/elastic-apm-with-net-5-0/302596 "2022-04-18T07:12:35Z")
Hi, I am trying to instrument my sample dotnet application which is .net 5.0 version with elastic APM. While I am able to get the transactions and their respective stacktraces, the traces captured seems to be intermitte… --- ## [Es 的攻击图数据怎么一次查询实现](https://discuss.elastic.co/t/es/302242)
**Author:** [@tianzheng183315](https://discuss.elastic.co/u/tianzheng183315)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 10:12am UTC](https://discuss.elastic.co/t/es/302242 "2022-04-18T10:12:51Z")
现在有一个需求,需要统计es文档的数据 一个文档对象有一个攻击者a,和一个被攻击对象b,a和b是一个ip,每个ip有一个所属地,所属地不在文档中体现,需要另外在数据库中查询. 然后我想统计所属地之间的攻击数量,我怎么样能通过一次查询查询出数据. 我知道可以用MultiSearch可以实现一次查询,不知道这个性能怎么,各位麻烦给个建议 --- ## [Does ES have the 99th percentile time of request?](https://discuss.elastic.co/t/does-es-have-the-99th-percentile-time-of-request/302557)
**Author:** [@gaojiabao1991](https://discuss.elastic.co/u/gaojiabao1991)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 8:49am UTC](https://discuss.elastic.co/t/does-es-have-the-99th-percentile-time-of-request/302557 "2022-04-18T08:49:01Z")
Hello everyone, I'm new to ES, and I'm recently replacing our company's Solr with ES. Our current monitoring is to use the elasticsearch-exporter provided by the prometheus community to record the system operation infor… --- ## [Unable to retrieve license information from license server {:message=\>"No Available connections"}](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server-message-no-available-connections/302175)
**Author:** [@sahir](https://discuss.elastic.co/u/sahir)\ **Replies:** 7\ **Last updated:** [April 18, 2022, 7:07am UTC](https://discuss.elastic.co/t/unable-to-retrieve-license-information-from-license-server-message-no-available-connections/302175 "2022-04-18T07:07:00Z")
Hello team, I'm new to Logstash when im trying to run a logstash i getting the error like this anyone can you please look on it. \[2022-04-11T19:19:07,223\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retriev… --- ## [Unable to use of beats (here journalbeat) with AWS ElasticSearch 7.10](https://discuss.elastic.co/t/unable-to-use-of-beats-here-journalbeat-with-aws-elasticsearch-7-10/301062)
**Author:** [@obourdon](https://discuss.elastic.co/u/obourdon)\ **Replies:** 3\ **Last updated:** [April 18, 2022, 6:58am UTC](https://discuss.elastic.co/t/unable-to-use-of-beats-here-journalbeat-with-aws-elasticsearch-7-10/301062 "2022-04-18T06:58:54Z")
Reopening this as my previous entry was closed for what I consider as a wrong reason not leading to any helpful answer/solution As detailed in Unable to use of beats (here journalbeat) with AWS ElasticSearch 7.x · Issu… --- ## [Elastic Lucene vs KQL vs DSL vs EQL](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588)
**Author:** [@Esha](https://discuss.elastic.co/u/Esha)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 6:23am UTC](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588 "2022-04-18T06:23:11Z")
Hi Team, Can you please share when should we use the lucene query, KQL, DSL and EQL query types. For rules creation is it best to use the lucene query or KQL query? Thank you --- ## [One standalone node formed in monitoring cluster](https://discuss.elastic.co/t/one-standalone-node-formed-in-monitoring-cluster/302422)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 6:22am UTC](https://discuss.elastic.co/t/one-standalone-node-formed-in-monitoring-cluster/302422 "2022-04-18T06:22:00Z")
Hello team, One standalone cluster formed when we upgraded from 7.2 to 7.16.3 in moniotring cluster. Does any one have any idea how to remove this --- ## [Steps to integrate App connect with Elasticserach](https://discuss.elastic.co/t/steps-to-integrate-app-connect-with-elasticserach/302593)
**Author:** [@SnehaB](https://discuss.elastic.co/u/SnehaB)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 5:10am UTC](https://discuss.elastic.co/t/steps-to-integrate-app-connect-with-elasticserach/302593 "2022-04-18T05:10:47Z")
Hello Team, Please help me to integrate ELK stack with IBM app connect. If any links or documents are there please let me know. --- ## [Filebeat 的配置问题](https://discuss.elastic.co/t/filebeat/301917)
**Author:** [@stardustman](https://discuss.elastic.co/u/stardustman)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 4:53am UTC](https://discuss.elastic.co/t/filebeat/301917 "2022-04-18T04:53:08Z")
问题背景： 使用 elastic7.8 和 filebeat7.8 的版本，配置 filebeat.yml 的 setup.ilm.enabled: auto 可以生效，可以自动在 es 上创建出 index。 现在的问题： 使用 elastic7.17 和 filebeat7.17 的版本，配置 filebeat 的 setup.ilm.enabled: auto 没有生效，没有在 es 上创建出 index。 这是什么原因？… --- ## [Error setting up Dashboards with auditbeat](https://discuss.elastic.co/t/error-setting-up-dashboards-with-auditbeat/302591)
**Author:** [@b\_tolu](https://discuss.elastic.co/u/b_tolu)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 4:41am UTC](https://discuss.elastic.co/t/error-setting-up-dashboards-with-auditbeat/302591 "2022-04-18T04:41:58Z")
hi so i would run the background of all i have done i am trying to create a SIEM , so I installed Elasticsearch,kibana, and auditbeat . I have made all the right settings for me to be able to startup. My issue now is tha… --- ## [Multiple logstash indexes to be created from multiple application log files](https://discuss.elastic.co/t/multiple-logstash-indexes-to-be-created-from-multiple-application-log-files/302399)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 4:01am UTC](https://discuss.elastic.co/t/multiple-logstash-indexes-to-be-created-from-multiple-application-log-files/302399 "2022-04-18T04:01:13Z")
Hello, Still considerably new to ELK, I have successfully set up Logstash index for one of my application log files as below conf file: server1:/etc/logstash/conf.d # cat /etc/logstash/conf.d/accessinfologs.conf input … --- ## [PowerShell Keylogging Script potential False Positive](https://discuss.elastic.co/t/powershell-keylogging-script-potential-false-positive/299364)
**Author:** [@gicetek](https://discuss.elastic.co/u/gicetek)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 3:36am UTC](https://discuss.elastic.co/t/powershell-keylogging-script-potential-false-positive/299364 "2022-04-18T03:36:07Z")
I recently enabled a number of the provided rules in our test Elasticsearch/Kibana/Winlogbeat configuration and am seeing alerts on the "PowerShell Keylogging Script" rule every time I run nearly any powershell command o… --- ## [Access AppSearch APIs without authentication](https://discuss.elastic.co/t/access-appsearch-apis-without-authentication/302477)
**Author:** [@ntruongsinh](https://discuss.elastic.co/u/ntruongsinh)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 2:20am UTC](https://discuss.elastic.co/t/access-appsearch-apis-without-authentication/302477 "2022-04-18T02:20:59Z")
Hi everyone, I wonder if we have anyway to disable security for AppSearch APIs when running it locally? Like searching or creating documents, we don't have to provide Authentication header? Thanks in advance. --- ## [How to change field types in xml filter](https://discuss.elastic.co/t/how-to-change-field-types-in-xml-filter/302583)
**Author:** [@hagaluly](https://discuss.elastic.co/u/hagaluly)\ **Replies:** 1\ **Last updated:** [April 17, 2022, 11:13pm UTC](https://discuss.elastic.co/t/how-to-change-field-types-in-xml-filter/302583 "2022-04-17T23:13:57Z")
i have this xml as an example \ \ **Author:** [@joman\_alles\_goed](https://discuss.elastic.co/u/joman_alles_goed)\ **Replies:** 0\ **Last updated:** [April 17, 2022, 6:38pm UTC](https://discuss.elastic.co/t/ece-cant-connect-to-my-instances/302579 "2022-04-17T18:38:20Z") Hello everyone, Recently i have done a ECE installation on my ubuntu machine. The installation is succesfully done i can reach the cloud UI and log in as a admin. After that i started a deployment which also is a succes… [Previous page](https://discuss.elastic.co/latest.md?page=1166) [Next page](https://discuss.elastic.co/latest.md?page=1168)