# Latest **URL:** https://discuss.elastic.co/latest.md?page=1218 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1219 --- ## [Do filebeat has hostname variable?](https://discuss.elastic.co/t/do-filebeat-has-hostname-variable/298665)
**Author:** [@Gyrops](https://discuss.elastic.co/u/Gyrops)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 7:10pm UTC](https://discuss.elastic.co/t/do-filebeat-has-hostname-variable/298665 "2022-03-14T19:10:44Z")
I need to configure a hostname variable in my filebeat.yaml configuration file without using host system variable. It's doabble? How is now: fields: source: myhostname How I would like it to be: fields: source: $… --- ## [Failed to start filebeat\_ drop\_fields processors](https://discuss.elastic.co/t/failed-to-start-filebeat-drop-fields-processors/299154)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 6\ **Last updated:** [March 14, 2022, 6:53pm UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-drop-fields-processors/299154 "2022-03-14T18:53:03Z")
good day I have a problem when I start filebeat I get the following error: and this is my configuration in filebeat.yml # ================================= Processors ================================= processors: #… --- ## [Send sophos logs via filebeat to elasticsearch ( ubuntu 20.04 )](https://discuss.elastic.co/t/send-sophos-logs-via-filebeat-to-elasticsearch-ubuntu-20-04/299641)
**Author:** [@khouloud1](https://discuss.elastic.co/u/khouloud1)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 5:17pm UTC](https://discuss.elastic.co/t/send-sophos-logs-via-filebeat-to-elasticsearch-ubuntu-20-04/299641 "2022-03-14T17:17:25Z")
Hello , I have ubuntu 20.04 and want to send sophos (antivirus) logs via filebeat to Elasticsearch . I know that the module of sophos is supported by default for firewall and utm . Could you help please --- ## [Deletions in reindex](https://discuss.elastic.co/t/deletions-in-reindex/299650)
**Author:** [@Aditya\_Verma1](https://discuss.elastic.co/u/Aditya_Verma1)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 4:55pm UTC](https://discuss.elastic.co/t/deletions-in-reindex/299650 "2022-03-14T16:55:27Z")
I have an index which i want to reindex to a new index increasing the no of primary shards. So i started reindexing. I didn't make the source index read only so ingestions, updations and deletions were happening on the s… --- ## [Kibana to Elastic node xpack.security.http.ssl.enabled](https://discuss.elastic.co/t/kibana-to-elastic-node-xpack-security-http-ssl-enabled/299645)
**Author:** [@mwoods269](https://discuss.elastic.co/u/mwoods269)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 4:26pm UTC](https://discuss.elastic.co/t/kibana-to-elastic-node-xpack-security-http-ssl-enabled/299645 "2022-03-14T16:26:01Z")
Looking for some insight on the following Current configuration Elasticnodes (using internal CA) configured with xpack.security.http.ssl.enabled:true so things like kibana and logstash outputs can connect via https. Al… --- ## [Dont disable merges?](https://discuss.elastic.co/t/dont-disable-merges/299646)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 4:30pm UTC](https://discuss.elastic.co/t/dont-disable-merges/299646 "2022-03-14T16:30:26Z")
So I found an interesting bit of info in a post and wanted to know more information "The best answer to those is don't disable merging as I mentioned. Otherwise yes merges use IO, if you disable them then they won't ha… --- ## [APM server doesn’t start (Windows)](https://discuss.elastic.co/t/apm-server-doesn-t-start-windows/299632)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 4:31pm UTC](https://discuss.elastic.co/t/apm-server-doesn-t-start-windows/299632 "2022-03-14T16:31:22Z")
Hi, I have already followed all the steps of the documentation here Installing APM Server on Windowsedit and about Check APM Server status Elasticsearch: 7.16.3 kibana: 7.16.3 APM server: 8.1.0 Anyone tell pl… --- ## [Couldn't find any Elasticsearch data](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/299464)
**Author:** [@tilchl](https://discuss.elastic.co/u/tilchl)\ **Replies:** 3\ **Last updated:** [March 14, 2022, 4:24pm UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/299464 "2022-03-14T16:24:48Z")
Im trying to create a new index pattern in Kibana but I get Couldn't find any Elasticsearch data elasticsearch::9200 returns: { "name" : "rechenmonster-es01", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "S… --- ## [High CPU Usage across entire cluster](https://discuss.elastic.co/t/high-cpu-usage-across-entire-cluster/299508)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 8\ **Last updated:** [March 14, 2022, 4:14pm UTC](https://discuss.elastic.co/t/high-cpu-usage-across-entire-cluster/299508 "2022-03-14T16:14:33Z")
We have a version 5.6 100 plus node cluster which has been suffering from high cpu usage for a sometime now. The hot threads show several different threads which are usually taking 100% cpu. 3 masters 6i.xlarge 38 node… --- ## [Display count of tomcat down -metric visualization](https://discuss.elastic.co/t/display-count-of-tomcat-down-metric-visualization/299477)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 4\ **Last updated:** [March 14, 2022, 3:45pm UTC](https://discuss.elastic.co/t/display-count-of-tomcat-down-metric-visualization/299477 "2022-03-14T15:45:44Z")
Trying to create a visulization in kibana that should only display no of tomcat which are down. I guess I'm using wrong aggregation and not getting exactly wht can help out here. ''''''''''''''''' logs: Filelds: 1)t… --- ## [System health based on multiple metrics](https://discuss.elastic.co/t/system-health-based-on-multiple-metrics/299531)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 3\ **Last updated:** [March 14, 2022, 3:44pm UTC](https://discuss.elastic.co/t/system-health-based-on-multiple-metrics/299531 "2022-03-14T15:44:40Z")
I am looking to display the health of a system based on multiple metrics, e.g. cpu/memory/page load times via iis/uptime etc. So I have multiple beats and Elasticsearch ingesting multiple data points. Ideally I want to… --- ## [Deleting Kibana Index patterns and dependencies](https://discuss.elastic.co/t/deleting-kibana-index-patterns-and-dependencies/299111)
**Author:** [@nkuntla](https://discuss.elastic.co/u/nkuntla)\ **Replies:** 5\ **Last updated:** [March 14, 2022, 3:09pm UTC](https://discuss.elastic.co/t/deleting-kibana-index-patterns-and-dependencies/299111 "2022-03-14T15:09:52Z")
Trying to delete multiple index patterns in our kibana instance that are junk. Some questions related to this. Will deleting the index pattern delete dependent visualizations and dashboards? Will the delete fail if th… --- ## [java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space/299620)
**Author:** [@Ahmed\_El\_bendary](https://discuss.elastic.co/u/Ahmed_El_bendary)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 2:55pm UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space/299620 "2022-03-14T14:55:32Z")
when using prefix query with large text give exception then service will stop. { "track\_total\_hits": true, "from": 0, "query": { "bool": { "minimum\_should\_match": 1, "must": \[ { "… --- ## [java.lang.NoClassDefFoundError: javax/servlet/ServletContext APM agent 1.29.0 in Docker](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-javax-servlet-servletcontext-apm-agent-1-29-0-in-docker/298975)
**Author:** [@jseletz](https://discuss.elastic.co/u/jseletz)\ **Replies:** 5\ **Last updated:** [March 14, 2022, 2:34pm UTC](https://discuss.elastic.co/t/java-lang-noclassdeffounderror-javax-servlet-servletcontext-apm-agent-1-29-0-in-docker/298975 "2022-03-14T14:34:10Z")
I am running Tomcat 9.0.52 in K8s from the Docker tomcat:9.0.52-jdk11-corretto image. I've downloaded the agent from https://repo1.maven.org/maven2/co/elastic/apm/elastic-apm-agent/1.29.0/elastic-apm-agent-1.29.0.jar an… --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299474)
**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\ **Replies:** 7\ **Last updated:** [March 14, 2022, 2:25pm UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299474 "2022-03-14T14:25:31Z")
Hi, After instaling/configuring logstash, I get this error: \[2022-03-11T09:22:27,379\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /u02/logstash\_frontend/etc/log4j2.properties \[2022-03-11T09:22:… --- ## [How to test journey files before passing them to heartbeat](https://discuss.elastic.co/t/how-to-test-journey-files-before-passing-them-to-heartbeat/299627)
**Author:** [@Andres\_Altamirano](https://discuss.elastic.co/u/Andres_Altamirano)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 1:51pm UTC](https://discuss.elastic.co/t/how-to-test-journey-files-before-passing-them-to-heartbeat/299627 "2022-03-14T13:51:22Z")
Hi, We are using synthetics monitoring with heartbeat as a container. It works whit no problems. The thing is that we are working writing more journey files so we need a way to test those journey files before putting t… --- ## [Error when clone index](https://discuss.elastic.co/t/error-when-clone-index/299504)
**Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 1:31pm UTC](https://discuss.elastic.co/t/error-when-clone-index/299504 "2022-03-14T13:31:08Z")
I want to clone my index, i have done what shown in this page to clone the index using this command. POST /my\_index/\_clone/my\_index\_clone I also tried to make the index read-only first with this command PUT /my\_index… --- ## [Geoip losing type geo\_point for location (v8.1)](https://discuss.elastic.co/t/geoip-losing-type-geo-point-for-location-v8-1/299623)
**Author:** [@fedora35](https://discuss.elastic.co/u/fedora35)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 1:20pm UTC](https://discuss.elastic.co/t/geoip-losing-type-geo-point-for-location-v8-1/299623 "2022-03-14T13:20:44Z")
Hello, I'm a beginner with ELK and i have the following problem: I send apache's logs with filebeat to logstash. All is working except the fact when I check the location mapping in kibana, it has no type : it appears l… --- ## [Create service unit for Auditbeat for Debian](https://discuss.elastic.co/t/create-service-unit-for-auditbeat-for-debian/299622)
**Author:** [@helkmaster](https://discuss.elastic.co/u/helkmaster)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 1:16pm UTC](https://discuss.elastic.co/t/create-service-unit-for-auditbeat-for-debian/299622 "2022-03-14T13:16:44Z")
For DEB and RPM there is by default a serivce unit when you want to start Auditbeat. I currently work on a Debian distribution and I want to create a service unit for Auditbeat because I want to run it in the background… --- ## [Reference a value from new added field within grok match setting](https://discuss.elastic.co/t/reference-a-value-from-new-added-field-within-grok-match-setting/299619)
**Author:** [@mstojanovic](https://discuss.elastic.co/u/mstojanovic)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 12:33pm UTC](https://discuss.elastic.co/t/reference-a-value-from-new-added-field-within-grok-match-setting/299619 "2022-03-14T12:33:59Z")
Hi, I'm trying to reference a value from a new field that was added with mutate plugin. I try to reference it within a grok match settings. Part of the filter pipeline looks like: filter { mutate { add\_… --- ## [How to overwrite system generated .monitoring-\* templates in elasticsearch 8.0](https://discuss.elastic.co/t/how-to-overwrite-system-generated-monitoring-templates-in-elasticsearch-8-0/299618)
**Author:** [@BhawanaSharma](https://discuss.elastic.co/u/BhawanaSharma)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 12:33pm UTC](https://discuss.elastic.co/t/how-to-overwrite-system-generated-monitoring-templates-in-elasticsearch-8-0/299618 "2022-03-14T12:33:33Z")
In Elasticsearch 8.0 few system generated templates are coming by default named with ".monitoring-\*" in that "number\_of\_replicas: 1" with default value 1, because of that replica is set to 1 and health of data stream is … --- ## [Integrations Server on Elastic Cloud - Install Agent](https://discuss.elastic.co/t/integrations-server-on-elastic-cloud-install-agent/299617)
**Author:** [@mgfeal](https://discuss.elastic.co/u/mgfeal)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 12:32pm UTC](https://discuss.elastic.co/t/integrations-server-on-elastic-cloud-install-agent/299617 "2022-03-14T12:32:17Z")
Hi, I'm trying to monitoring Azure using Elastic Cloud. I'm reading this doc: Ingest logs, metrics, and uptime data with Elastic Agent | Observability Guide \[8.1\] | Elastic But I don't understand how to install an ag… --- ## [Pie chart - show last string value of two records with same ID](https://discuss.elastic.co/t/pie-chart-show-last-string-value-of-two-records-with-same-id/299614)
**Author:** [@Jakub\_Polcar](https://discuss.elastic.co/u/Jakub_Polcar)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 12:22pm UTC](https://discuss.elastic.co/t/pie-chart-show-last-string-value-of-two-records-with-same-id/299614 "2022-03-14T12:22:15Z")
Hello, is there an option how to set up a pie chart to show count of last string values, but if there are two records with same ID, count only last one based on timestamp? Test records: record 1: ID: 123, variable: "v… --- ## [Dashboard Watcher URL](https://discuss.elastic.co/t/dashboard-watcher-url/299613)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 12:18pm UTC](https://discuss.elastic.co/t/dashboard-watcher-url/299613 "2022-03-14T12:18:27Z")
Hi Is there an option that can allow me to generate a dashboard PDF in landscape mode? When I printed it, it only prints it in A4 portrait mode. Also, in the post URL shown below. I want the watcher to automatically ge… --- ## [Filebeat with custom logfile and kubernetes metadata to elasticsearch and kibana](https://discuss.elastic.co/t/filebeat-with-custom-logfile-and-kubernetes-metadata-to-elasticsearch-and-kibana/299403)
**Author:** [@v\_anil](https://discuss.elastic.co/u/v_anil)\ **Replies:** 0\ **Last updated:** [March 11, 2022, 6:40am UTC](https://discuss.elastic.co/t/filebeat-with-custom-logfile-and-kubernetes-metadata-to-elasticsearch-and-kibana/299403 "2022-03-11T06:40:08Z")
Our applications are deployed in AWS EKS cluster, and for certain reasons we need to write our app logs to separate file lets say ${POD\_NAME}.applog instead of stdout (we mounted /var/log/container/ to the pod /log folde… --- ## [Reindex change shard number](https://discuss.elastic.co/t/reindex-change-shard-number/299337)
**Author:** [@gabbar](https://discuss.elastic.co/u/gabbar)\ **Replies:** 4\ **Last updated:** [March 14, 2022, 12:02pm UTC](https://discuss.elastic.co/t/reindex-change-shard-number/299337 "2022-03-14T12:02:39Z")
Hello community! I'm running Elasticsearch 6.8 to store logs collected using graylog and I would like to reduce the amount of shards of the older indices. Using curator I've been able to shrink the shards from 6 to 1, … --- ## [Can you incorporate the Uptime dashboard into Canvas?](https://discuss.elastic.co/t/can-you-incorporate-the-uptime-dashboard-into-canvas/299373)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 11:48am UTC](https://discuss.elastic.co/t/can-you-incorporate-the-uptime-dashboard-into-canvas/299373 "2022-03-14T11:48:27Z")
If so, how ? Want to add this view with various filters to fine-tune the display into Canvas pages. --- ## [Hide field of document in Kibana](https://discuss.elastic.co/t/hide-field-of-document-in-kibana/299599)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 10:56am UTC](https://discuss.elastic.co/t/hide-field-of-document-in-kibana/299599 "2022-03-14T10:56:37Z")
Hi, We have made some dashboards in Kibana that also include the table with all the data of a specific index pattern. There is a new field ("hash") added in documents of some index patterns but we need to "hide" it in … --- ## [Net Client NEST 8 download?](https://discuss.elastic.co/t/net-client-nest-8-download/298558)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 3\ **Last updated:** [March 14, 2022, 10:07am UTC](https://discuss.elastic.co/t/net-client-nest-8-download/298558 "2022-03-14T10:07:49Z")
Elastic 8 was released few weeks ago and NEST 8 documentation is online but I cant find NEST 8 nuget package. When it is going to be published or where I can download final release or a beta? --- ## [Can we use Elasticsearch-dsl-py 7.4 with Elasticsearch-8.x?](https://discuss.elastic.co/t/can-we-use-elasticsearch-dsl-py-7-4-with-elasticsearch-8-x/299402)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 10:05am UTC](https://discuss.elastic.co/t/can-we-use-elasticsearch-dsl-py-7-4-with-elasticsearch-8-x/299402 "2022-03-14T10:05:03Z")
We have some Python programs that use Elasticsearch-dsl-py and Elasticsearch-py Python clients to process Elasticsearch data. We are considering upgrading to Elasticsearch-8. From PyPI we can see that elasticsearch-py-8.… [Previous page](https://discuss.elastic.co/latest.md?page=1217) [Next page](https://discuss.elastic.co/latest.md?page=1219)