# Latest **URL:** https://discuss.elastic.co/latest.md?page=1179 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1180 --- ## [Metricbeat Output to Logstash, Can monitor in Stack Monitoring?](https://discuss.elastic.co/t/metricbeat-output-to-logstash-can-monitor-in-stack-monitoring/301919)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 3:55am UTC](https://discuss.elastic.co/t/metricbeat-output-to-logstash-can-monitor-in-stack-monitoring/301919 "2022-04-08T03:55:09Z")
Hi, I monitor logstash node by using metricbeat, and configure metricbeat output to logstash -\> Elasticsearch. I can received all the metricbeat events to metricbeat-\* However, can I show the metricbeat monitoring in … --- ## [How to get rid of Standalone Cluster in Kibana Stack Monitoring?](https://discuss.elastic.co/t/how-to-get-rid-of-standalone-cluster-in-kibana-stack-monitoring/301159)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 2:23am UTC](https://discuss.elastic.co/t/how-to-get-rid-of-standalone-cluster-in-kibana-stack-monitoring/301159 "2022-04-08T02:23:15Z")
I'm monitoring Elasticsearch by using metricbeats and monitor my metricbeats using beats-xpack After I monitored metricbeats, on the stack monitoring \> cluster, it appeared the standalone cluster & my cluster.. Read th… --- ## [After add a fleet server，How to add watching my windows pc docker data?](https://discuss.elastic.co/t/after-add-a-fleet-server-how-to-add-watching-my-windows-pc-docker-data/301911)
**Author:** [@aliuq](https://discuss.elastic.co/u/aliuq)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 1:52am UTC](https://discuss.elastic.co/t/after-add-a-fleet-server-how-to-add-watching-my-windows-pc-docker-data/301911 "2022-04-08T01:52:00Z")
excute below command, it does't works in 7.15.0, and got a error message Access is denied .\\elastic-agent.exe install -f \` --fleet-server-es=http://192.168.2.122:9200 \` --fleet-server-service-token=XXXXXXXXXXXXXX… --- ## [How can I represent a config key containing a dot/period/full-stop "."?](https://discuss.elastic.co/t/how-can-i-represent-a-config-key-containing-a-dot-period-full-stop/301907)
**Author:** [@javabrett](https://discuss.elastic.co/u/javabrett)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:56am UTC](https://discuss.elastic.co/t/how-can-i-represent-a-config-key-containing-a-dot-period-full-stop/301907 "2022-04-08T00:56:53Z")
TL;DR: Can beats/metricsbeat/prometheus module tolerate a config key that contains dots/periods/full-stops, given the Beats go-ucfg config-processsing. I am using metricbeat and module prometheus. For the Prometheus sc… --- ## [使用Docker设置timezone环境变量无效（timezone not working in elasticsearch on docker）](https://discuss.elastic.co/t/docker-timezone-timezone-not-working-in-elasticsearch-on-docker/300262)
**Author:** [@emmet.jiang](https://discuss.elastic.co/u/emmet.jiang)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 1:08am UTC](https://discuss.elastic.co/t/docker-timezone-timezone-not-working-in-elasticsearch-on-docker/300262 "2022-04-08T01:08:50Z")
经过我的测试发现，\>=7.15.2 版本无法使用TZ设置时区，例如：7.17.1、8.1.0 After my test, I found that the time zone cannot be set with TZ in version \> = 7.15.2, such as 7.17.1 and 8.1.0。 docker run -d -e "TZ=Asia/Shanghai" -e "discovery.type=sin… --- ## [Hide filters in a map layer](https://discuss.elastic.co/t/hide-filters-in-a-map-layer/301782)
**Author:** [@Jose\_Luis\_Martin\_Avi](https://discuss.elastic.co/u/Jose_Luis_Martin_Avi)\ **Replies:** 3\ **Last updated:** [April 8, 2022, 1:06am UTC](https://discuss.elastic.co/t/hide-filters-in-a-map-layer/301782 "2022-04-08T01:06:19Z")
Hi everyone I have a problem that I don't how to solve. I have free license of Kibana and I want to show information in a map with layers. In those layers I make joins with another table to show information of age avera… --- ## [Kibana TimeoutError: Request timed out](https://discuss.elastic.co/t/kibana-timeouterror-request-timed-out/301906)
**Author:** [@da57ea5e41250f119fd8](https://discuss.elastic.co/u/da57ea5e41250f119fd8)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:40am UTC](https://discuss.elastic.co/t/kibana-timeouterror-request-timed-out/301906 "2022-04-08T00:40:00Z")
The kibana service prints out this logging log. But at the same time es service is normal. The network is also normal version: kibana-7.13.3 centos: Linux 5.10.96-90.460.amzn2.x86\_64 #1 SMP Fri Feb 4 17:12:04 UTC 2022… --- ## [Query trouble with multiple OR conditions](https://discuss.elastic.co/t/query-trouble-with-multiple-or-conditions/301249)
**Author:** [@lvalladares](https://discuss.elastic.co/u/lvalladares)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 8:53pm UTC](https://discuss.elastic.co/t/query-trouble-with-multiple-or-conditions/301249 "2022-04-07T20:53:04Z")
Hey Folks! I'm having weird trouble with enterprise app search hosted on Elastic Cloud. I've several documents indexed with a field called customer\_groups, when I make the following query: customer\_groups:"112" OR cust… --- ## [Question regarding size of bulk action](https://discuss.elastic.co/t/question-regarding-size-of-bulk-action/301800)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 21\ **Last updated:** [April 7, 2022, 8:25pm UTC](https://discuss.elastic.co/t/question-regarding-size-of-bulk-action/301800 "2022-04-07T20:25:45Z")
I have 3 nodes designated to be the ingestion nodes. So all writers will round robin to those 3 nodes. My question is should the bulkWrite size be sizing to the ingestion node or primary shard on nodes? Let's say I ha… --- ## [Storing suitable document ids that matches percolator query](https://discuss.elastic.co/t/storing-suitable-document-ids-that-matches-percolator-query/301900)
**Author:** [@alimbayevaf](https://discuss.elastic.co/u/alimbayevaf)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 6:52pm UTC](https://discuss.elastic.co/t/storing-suitable-document-ids-that-matches-percolator-query/301900 "2022-04-07T18:52:50Z")
Hello there! I don't have good experience in using elastic and I want to know if my structure is reasonable and adequate. Problem: I have "computers" index { "mappings": { "properties": { "cpu": {"type": "… --- ## [Create a backlog report with ElasticSearch](https://discuss.elastic.co/t/create-a-backlog-report-with-elasticsearch/301872)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 4:40pm UTC](https://discuss.elastic.co/t/create-a-backlog-report-with-elasticsearch/301872 "2022-04-07T16:40:49Z")
I have an index that stores created tasks, this index has the property of creation date and task end date. With Elasticsearch, can I build a histogram that displays the daily backlog since the beginning of my records, b… --- ## [Logstash pipeline configuration. Can someone please hep me? Thank you](https://discuss.elastic.co/t/logstash-pipeline-configuration-can-someone-please-hep-me-thank-you/301891)
**Author:** [@sazeens1](https://discuss.elastic.co/u/sazeens1)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 3:33pm UTC](https://discuss.elastic.co/t/logstash-pipeline-configuration-can-someone-please-hep-me-thank-you/301891 "2022-04-07T15:33:05Z")
Hello Everyone, Can someone please help me on this one? data in the kafka topic test sample: { "id": "2001", "name": "XYZ", "address" : "safwq", "phone": "1656161" } Sample Logstash configuration for creating a s… --- ## [JSON Parse Failure](https://discuss.elastic.co/t/json-parse-failure/301892)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 4:37pm UTC](https://discuss.elastic.co/t/json-parse-failure/301892 "2022-04-07T16:37:40Z")
I have the following pipeline config: input { file { type =\> "json" path =\> \[ C:/temp/\*.json" \] start\_position =\> "beginnning" codec =\> multiline { pattern =\> "^ZsExDrC" what =\> "previous" … --- ## [Docker container performance monitor](https://discuss.elastic.co/t/docker-container-performance-monitor/299165)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 3:27pm UTC](https://discuss.elastic.co/t/docker-container-performance-monitor/299165 "2022-04-07T15:27:30Z")
Hello, We have our ELK (on prem) as SIEM solution. Now we have an requirement is like, we want to monitor multiple docker container performance (cpu usage, memory usage, etc). Those all docker container were installed o… --- ## [Logstash doesn't send events to Elasticsearch](https://discuss.elastic.co/t/logstash-doesnt-send-events-to-elasticsearch/301887)
**Author:** [@Denis\_Abreu](https://discuss.elastic.co/u/Denis_Abreu)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 3:13pm UTC](https://discuss.elastic.co/t/logstash-doesnt-send-events-to-elasticsearch/301887 "2022-04-07T15:13:32Z")
Hi! Could anyone tell me what could be wrong? I'm using ELK in Docker and trying to send Elastic log to itself via Filebeat \> Logstash filebeat.yml filebeat.config: modules: path: ${path.config}/modules.d/\*.yml… --- ## [Winlogbeat performance issue](https://discuss.elastic.co/t/winlogbeat-performance-issue/301886)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 3:11pm UTC](https://discuss.elastic.co/t/winlogbeat-performance-issue/301886 "2022-04-07T15:11:41Z")
Hello All, Can you please help to understand and resolve the issue. Environment is like: Multiple location (branches) having many on prem Win Servers where winlogbeat is installed and their we had dedicated on prem sy… --- ## [Filebeat Registry Issue handling large number of files](https://discuss.elastic.co/t/filebeat-registry-issue-handling-large-number-of-files/301885)
**Author:** [@KillerDAN](https://discuss.elastic.co/u/KillerDAN)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 3:10pm UTC](https://discuss.elastic.co/t/filebeat-registry-issue-handling-large-number-of-files/301885 "2022-04-07T15:10:55Z")
Currently running filebeat 7.17.2. I have a setup where filebeat is "scrapping" a folder where per minute 5 (or more in future) CSV files are dropped and filebeat exports to kafka. (CSV are TWAMP telemetry data) Typic… --- ## [Deploying elasticsearch 7.4.0 with helm crashlooping on k8s](https://discuss.elastic.co/t/deploying-elasticsearch-7-4-0-with-helm-crashlooping-on-k8s/301876)
**Author:** [@erwa](https://discuss.elastic.co/u/erwa)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 2:57pm UTC](https://discuss.elastic.co/t/deploying-elasticsearch-7-4-0-with-helm-crashlooping-on-k8s/301876 "2022-04-07T14:57:54Z")
Hi, I've added the elastic helm repo with: helm install Elasticsearch elastic/Elasticsearch And are trying to install Elasticsearch 7.4.0 single node installation with arguments: helm install elasticsearch elastic/el… --- ## [How to use Qlik sense script in elasticsearch](https://discuss.elastic.co/t/how-to-use-qlik-sense-script-in-elasticsearch/301807)
**Author:** [@safaeaz](https://discuss.elastic.co/u/safaeaz)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 2:40pm UTC](https://discuss.elastic.co/t/how-to-use-qlik-sense-script-in-elasticsearch/301807 "2022-04-07T14:40:10Z")
i Need to migrate data from Qlik sense to Elasticsearch the data is loaded in Qlik sense with a script i dont have any prerequisite in qlik sense script i would like to know how to use that script to load data in Elastic… --- ## [My second node cannot access the repository](https://discuss.elastic.co/t/my-second-node-cannot-access-the-repository/301755)
**Author:** [@Mestre](https://discuss.elastic.co/u/Mestre)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 2:29pm UTC](https://discuss.elastic.co/t/my-second-node-cannot-access-the-repository/301755 "2022-04-07T14:29:16Z")
My second node cannot access the repository, on every Elasticsearch.yml (node1 & node 2) I have the same line path.repo: /home/lab/sambashare On node 1 y created a shared folder with samba that's is located on /home/la… --- ## [Can be Rally used to benchmark Kibana?](https://discuss.elastic.co/t/can-be-rally-used-to-benchmark-kibana/301794)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 2:22pm UTC](https://discuss.elastic.co/t/can-be-rally-used-to-benchmark-kibana/301794 "2022-04-07T14:22:15Z")
I want to benchmark an Elastic Cloud Kibana installation and I was thinking on using Rally. Is it possible? and how? Thanks! --- ## [Selectively choosing documents from an index to include in a snapshot](https://discuss.elastic.co/t/selectively-choosing-documents-from-an-index-to-include-in-a-snapshot/301764)
**Author:** [@hishamnajem](https://discuss.elastic.co/u/hishamnajem)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 2:15pm UTC](https://discuss.elastic.co/t/selectively-choosing-documents-from-an-index-to-include-in-a-snapshot/301764 "2022-04-07T14:15:21Z")
Hello, is there a way within a single operation selectively include only some documents (based on a filter) when creating a snapshot? For example if I have an index named index-1 and it has 1000 docs of which 100 includ… --- ## [Filebeat daemon](https://discuss.elastic.co/t/filebeat-daemon/301777)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 1:59pm UTC](https://discuss.elastic.co/t/filebeat-daemon/301777 "2022-04-07T13:59:26Z")
Hello , I want to get filebeat on docker, i followed the instructions here : How to run Filebeat with Docker and use it with ELK stack But when i try to run the Filebeat container using this configuration : docker run… --- ## [Cannot upgrade to 8.x; cannot find incompatible indices](https://discuss.elastic.co/t/cannot-upgrade-to-8-x-cannot-find-incompatible-indices/301526)
**Author:** [@Todd\_Sayers](https://discuss.elastic.co/u/Todd_Sayers)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 1:56pm UTC](https://discuss.elastic.co/t/cannot-upgrade-to-8-x-cannot-find-incompatible-indices/301526 "2022-04-07T13:56:57Z")
I'm not able to upgrade my cluster to 8.x. The Upgrade Assistant (via Kibana) does not identify any indices that need to be migrated (I additionally clicked the "migrate button," regardless). I'm stuck. After upgrading… --- ## [Issue with rules creation](https://discuss.elastic.co/t/issue-with-rules-creation/301083)
**Author:** [@kesako](https://discuss.elastic.co/u/kesako)\ **Replies:** 14\ **Last updated:** [April 7, 2022, 1:56pm UTC](https://discuss.elastic.co/t/issue-with-rules-creation/301083 "2022-04-07T13:56:13Z")
Hello, I am trying to test some features of the SIEM integrated in ELK but I am stuck on the rules. In fact I am trying to put a rule where a alert is sent when a specific ip receives packets from another specific ip… --- ## [Logstash Filter issue](https://discuss.elastic.co/t/logstash-filter-issue/300950)
**Author:** [@cRaZyT](https://discuss.elastic.co/u/cRaZyT)\ **Replies:** 5\ **Last updated:** [April 7, 2022, 1:49pm UTC](https://discuss.elastic.co/t/logstash-filter-issue/300950 "2022-04-07T13:49:11Z")
Hi, I have a problem with a logstash filter. The message which has to be filtered looks like: Imported data: {"total":10,"valid":7,"violations":{"missing":\["359072065634251","359072065633741"\],"Data":\["35907206563425… --- ## [What is the correct way to deploy \`Elastic Agent\` 8 via Docker?](https://discuss.elastic.co/t/what-is-the-correct-way-to-deploy-elastic-agent-8-via-docker/301688)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [April 7, 2022, 10:54am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-deploy-elastic-agent-8-via-docker/301688 "2022-04-07T10:54:47Z")
I am trying to configure Elastic Stack using docker-compose.yml as follows, where Kibana gets the API key via bin/elasticsearch-create-enrollment-token -s kibana. version: "3.8" services: elasticsearch-node01: i… --- ## [Unable launch winlogbeats on windows 10 x86](https://discuss.elastic.co/t/unable-launch-winlogbeats-on-windows-10-x86/301863)
**Author:** [@lolo54000](https://discuss.elastic.co/u/lolo54000)\ **Replies:** 0\ **Last updated:** [April 7, 2022, 12:18pm UTC](https://discuss.elastic.co/t/unable-launch-winlogbeats-on-windows-10-x86/301863 "2022-04-07T12:18:58Z")
Hi I want to install winlogbeat on windows 10 pro x86 (20h2). (my processor is a core I3 2100 ) I download the last version (8.1.1) in zip format and when i want to launch winlogbeat.exe i have an error that tell me : … --- ## [Elasticsearch filters aggregation does not return array format](https://discuss.elastic.co/t/elasticsearch-filters-aggregation-does-not-return-array-format/301736)
**Author:** [@abhi-jana](https://discuss.elastic.co/u/abhi-jana)\ **Replies:** 3\ **Last updated:** [April 7, 2022, 1:05pm UTC](https://discuss.elastic.co/t/elasticsearch-filters-aggregation-does-not-return-array-format/301736 "2022-04-07T13:05:44Z")
The filters aggregation returns bucket as object "buckets": { "errors": { "doc\_count": 1 }, "warnings": { "doc\_count": 2 } } But i would like to return a … --- ## [What Does The Various Data Files Mean?](https://discuss.elastic.co/t/what-does-the-various-data-files-mean/301756)
**Author:** [@shaloms](https://discuss.elastic.co/u/shaloms)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 12:55pm UTC](https://discuss.elastic.co/t/what-does-the-various-data-files-mean/301756 "2022-04-07T12:55:27Z")
Hi All, I'm new to Elasticsearch and this is my first time posting here, so apologies if I'm doing something incorrectly. Looking in the data directory, I see that there are lot of types of data files such as cfs, cfe,… [Previous page](https://discuss.elastic.co/latest.md?page=1178) [Next page](https://discuss.elastic.co/latest.md?page=1180)