# Latest **URL:** https://discuss.elastic.co/latest.md?page=1510 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1511 --- ## [Metricbeat can't collect elasticsearch metrics](https://discuss.elastic.co/t/metricbeat-cant-collect-elasticsearch-metrics/281783)
**Author:** [@lisiyu](https://discuss.elastic.co/u/lisiyu)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 6:36am UTC](https://discuss.elastic.co/t/metricbeat-cant-collect-elasticsearch-metrics/281783 "2021-08-25T06:36:08Z")
The elasticsearch module is enabled in metricbeat. But metricbeat index have no data for elastic metrics. Version Metricbeat: 7.13.1 Elasticsearch: 7.13.1 Kibana: 7.13.1 Config Metricbeat: ...... metricbeat.conf… --- ## [How to record FCP and LCP while changing the routes in react for a single page applications](https://discuss.elastic.co/t/how-to-record-fcp-and-lcp-while-changing-the-routes-in-react-for-a-single-page-applications/282113)
**Author:** [@piyush.sarin](https://discuss.elastic.co/u/piyush.sarin)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 5:55am UTC](https://discuss.elastic.co/t/how-to-record-fcp-and-lcp-while-changing-the-routes-in-react-for-a-single-page-applications/282113 "2021-08-25T05:55:21Z")
Is it possible to record domComplete matrix such as FCP and LCP in transaction marks matrix when the we are not reloading a page and the component is changing with react routing? --- ## [Error using logstash : ParserError: Unexpected character ('\<'](https://discuss.elastic.co/t/error-using-logstash-parsererror-unexpected-character/281322)
**Author:** [@vp096](https://discuss.elastic.co/u/vp096)\ **Replies:** 18\ **Last updated:** [August 25, 2021, 5:54am UTC](https://discuss.elastic.co/t/error-using-logstash-parsererror-unexpected-character/281322 "2021-08-25T05:54:17Z")
Hello, I have been using ELK for a while and I am trying to retrieve the logs from a Wifi controller (Aruba Mobility Master). I checked with Wireshark, and I'm getting my syslog packets fine. However, logstash makes an … --- ## [How to Capture user's activity in Elasticsearch](https://discuss.elastic.co/t/how-to-capture-users-activity-in-elasticsearch/282346)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 6\ **Last updated:** [August 25, 2021, 5:35am UTC](https://discuss.elastic.co/t/how-to-capture-users-activity-in-elasticsearch/282346 "2021-08-25T05:35:44Z")
Dear Elastic Users, I am working on an Elasticsearch POC and as part of that i need to capture below details -- What users are searching for -- Which links users are clicking In short i want to capture users activity… --- ## [Which node to apply Active Directory configuration](https://discuss.elastic.co/t/which-node-to-apply-active-directory-configuration/282365)
**Author:** [@roh](https://discuss.elastic.co/u/roh)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 5:16am UTC](https://discuss.elastic.co/t/which-node-to-apply-active-directory-configuration/282365 "2021-08-25T05:16:54Z")
Hi all! I'm working on Elasticsearch Cluster with 10 ES nodes for my client's project on production and already created cluster with 3 ES nodes on development . Nodes are like below: Production 6 Hot (3 of them incl… --- ## [Best practices for indexing documents](https://discuss.elastic.co/t/best-practices-for-indexing-documents/282347)
**Author:** [@TheHunter](https://discuss.elastic.co/u/TheHunter)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 4:43am UTC](https://discuss.elastic.co/t/best-practices-for-indexing-documents/282347 "2021-08-25T04:43:46Z")
Hi all, I’m trying to get info about best practices to define indices, mainly in microservices environment. The question is, inside each our microservices we have many “schemas”, so in order to use in a right way shard… --- ## [Change machine learning algorithms](https://discuss.elastic.co/t/change-machine-learning-algorithms/282343)
**Author:** [@Hartinah](https://discuss.elastic.co/u/Hartinah)\ **Replies:** 5\ **Last updated:** [August 25, 2021, 4:37am UTC](https://discuss.elastic.co/t/change-machine-learning-algorithms/282343 "2021-08-25T04:37:01Z")
Sorry, I've only been learning about elastics for a few years...And I happen to want to do some research with Wazuh and Elastic...I noticed that there are machine learning features in elastic in data analysis. Is it pos… --- ## [ILM Index Lifecycle](https://discuss.elastic.co/t/ilm-index-lifecycle/282367)
**Author:** [@selin](https://discuss.elastic.co/u/selin)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 4:23am UTC](https://discuss.elastic.co/t/ilm-index-lifecycle/282367 "2021-08-25T04:23:37Z")
Hi can i know if ilm\_rollover\_alias not speificed, will it take index name as alias? index =\> "my\_index" ilm\_pattern =\> "{now/d{yyyyMMdd}}-00001" so it will be my\_index-20210823-00001 ? --- ## [Elastic cloud deployment issue](https://discuss.elastic.co/t/elastic-cloud-deployment-issue/282366)
**Author:** [@kadiveti](https://discuss.elastic.co/u/kadiveti)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 4:08am UTC](https://discuss.elastic.co/t/elastic-cloud-deployment-issue/282366 "2021-08-25T04:08:39Z")
Hi Team, My kibana console is showing This site can’t be reached even after trying for multiple edits in 14 days cloud trial. Thanks, Sai --- ## [How to save the data obtained by using the http\_poller input plug-in of logstash to elasticsearch?](https://discuss.elastic.co/t/how-to-save-the-data-obtained-by-using-the-http-poller-input-plug-in-of-logstash-to-elasticsearch/282304)
**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\ **Replies:** 5\ **Last updated:** [August 25, 2021, 3:06am UTC](https://discuss.elastic.co/t/how-to-save-the-data-obtained-by-using-the-http-poller-input-plug-in-of-logstash-to-elasticsearch/282304 "2021-08-25T03:06:01Z")
Hi :slightly\_smiling\_face: I use version 7.12.0. I used http\_poller to call the SQL API of elasticsearch and got some statistics. input { http\_poller { urls =\> { item =\> { method =\> post url =\> "http://localho… --- ## [Stop token filter how to set whitespace char as stop word in stopwords\_path config file](https://discuss.elastic.co/t/stop-token-filter-how-to-set-whitespace-char-as-stop-word-in-stopwords-path-config-file/280905)
**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 2:55am UTC](https://discuss.elastic.co/t/stop-token-filter-how-to-set-whitespace-char-as-stop-word-in-stopwords-path-config-file/280905 "2021-08-25T02:55:00Z")
Elasticsearch 7.5 thank you for help me ! i want to set the stop word by the stopwords\_path , i set a lot word in the stopwords.txt file , most of the word in the file is effective but only the whitespace char is not e… --- ## [Unable to install Fleet/Agent](https://discuss.elastic.co/t/unable-to-install-fleet-agent/282283)
**Author:** [@Andre\_GIRBAL](https://discuss.elastic.co/u/Andre_GIRBAL)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 2:41am UTC](https://discuss.elastic.co/t/unable-to-install-fleet-agent/282283 "2021-08-25T02:41:51Z")
Hi, I'm installing an ELk stack OnPrem for test purpose. (v7.14) I want to try the Elastic Security suite, and manage to install Fleet and Agent on Windows Server. Configuration of my stack ELK seems to be ok. Just I … --- ## [NVMe storage with Helm charts](https://discuss.elastic.co/t/nvme-storage-with-helm-charts/282428)
**Author:** [@porscheme](https://discuss.elastic.co/u/porscheme)\ **Replies:** 0\ **Last updated:** [August 25, 2021, 2:37am UTC](https://discuss.elastic.co/t/nvme-storage-with-helm-charts/282428 "2021-08-25T02:37:56Z")
Does ES helm charts support using NVMe storage? Any hep is really appreciated!. --- ## [Index not displaying expected log values](https://discuss.elastic.co/t/index-not-displaying-expected-log-values/282314)
**Author:** [@flenoir](https://discuss.elastic.co/u/flenoir)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 1:20am UTC](https://discuss.elastic.co/t/index-not-displaying-expected-log-values/282314 "2021-08-25T01:20:46Z")
Hi, I'm struggling with filebeat and logstash because, i want to handle different logs ( logs and json file) as inputs and i want to have a dedicated index for all logs (first\_index and another one for json datas ( on s… --- ## [On the division of labor between packetbeat and filebeat](https://discuss.elastic.co/t/on-the-division-of-labor-between-packetbeat-and-filebeat/282379)
**Author:** [@chinaxushi](https://discuss.elastic.co/u/chinaxushi)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 1:19am UTC](https://discuss.elastic.co/t/on-the-division-of-labor-between-packetbeat-and-filebeat/282379 "2021-08-25T01:19:14Z")
Today, I just noticed that filebeat can also listen to TCP or UPD traffic data, even NetFlow traffic data. Shouldn't these be the working scope of packetbeat. I feel beat's planning is a little messy! --- ## [Filebeat: initial ingestion of 2M files](https://discuss.elastic.co/t/filebeat-initial-ingestion-of-2m-files/282362)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 2\ **Last updated:** [August 25, 2021, 1:03am UTC](https://discuss.elastic.co/t/filebeat-initial-ingestion-of-2m-files/282362 "2021-08-25T01:03:35Z")
I have about 2M log files to process for initial ingestion. These csv files are spread on 4 folders. I have set up a filebeat pipeline and set harvester\_limit: 0 I have also tried to set up 4 filebeat instances, modif… --- ## [Alias Index & Alias fields usability in projects](https://discuss.elastic.co/t/alias-index-alias-fields-usability-in-projects/282293)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 12:57am UTC](https://discuss.elastic.co/t/alias-index-alias-fields-usability-in-projects/282293 "2021-08-25T00:57:02Z")
Hi, I'm using different indices names and different fields. But i'm required to build common dashboards for them all. I can't really change any of my indices or fields as they are important & can't change them. I hav… --- ## [Mappings missing after rollover](https://discuss.elastic.co/t/mappings-missing-after-rollover/282295)
**Author:** [@Shashankdevaraj](https://discuss.elastic.co/u/Shashankdevaraj)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 12:56am UTC](https://discuss.elastic.co/t/mappings-missing-after-rollover/282295 "2021-08-25T00:56:28Z")
Hi, After a rollover through ILM, recent additions to the mappings of the index, will not reflect in the latest rolled over one This will result in 'status': 400, 'error': {'type': 'strict\_dynamic\_mapping\_exception', '… --- ## [S3 CSV Codec - Using a non printable character as separator](https://discuss.elastic.co/t/s3-csv-codec-using-a-non-printable-character-as-separator/282262)
**Author:** [@Hammond95](https://discuss.elastic.co/u/Hammond95)\ **Replies:** 4\ **Last updated:** [August 25, 2021, 12:55am UTC](https://discuss.elastic.co/t/s3-csv-codec-using-a-non-printable-character-as-separator/282262 "2021-08-25T00:55:47Z")
Is it possible to use a non printable character as a separator in the csv codec? codec =\> csv { columns =\> \["col1", "col2", "col3"\] charset =\> "UTF-8" separator =\> "\\\\u001F" } I have tried… --- ## [Python - How to upload jsonl file to Elasticsearch](https://discuss.elastic.co/t/python-how-to-upload-jsonl-file-to-elasticsearch/282408)
**Author:** [@Talents](https://discuss.elastic.co/u/Talents)\ **Replies:** 1\ **Last updated:** [August 25, 2021, 12:53am UTC](https://discuss.elastic.co/t/python-how-to-upload-jsonl-file-to-elasticsearch/282408 "2021-08-25T00:53:22Z")
So I'm trying to learn how to use Elasticsearch but I'm really struggling. I've tried looking at the official documentation but it's really not helping me. Basically what I'm trying to do is upload a jsonl file that has… --- ## [RUM agent for Vue not capturing every single click](https://discuss.elastic.co/t/rum-agent-for-vue-not-capturing-every-single-click/281963)
**Author:** [@confuseddeveloper](https://discuss.elastic.co/u/confuseddeveloper)\ **Replies:** 8\ **Last updated:** [August 24, 2021, 10:28pm UTC](https://discuss.elastic.co/t/rum-agent-for-vue-not-capturing-every-single-click/281963 "2021-08-24T22:28:51Z")
Hi, I'm trying to replace our Google Analytics with RUM. Specifically I want to capture clicks of the following Event click such as clicking on the button Route change Sometimes I see it working. But sometimes it doe… --- ## [Why elasticsearch Downs After Reboot](https://discuss.elastic.co/t/why-elasticsearch-downs-after-reboot/281678)
**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\ **Replies:** 5\ **Last updated:** [August 24, 2021, 10:15pm UTC](https://discuss.elastic.co/t/why-elasticsearch-downs-after-reboot/281678 "2021-08-24T22:15:02Z")
Hello, dear community, Recently we faced some critical errors in elasticsearch. The errors down below occurred after we rebooted the machines. #Issue: Failed to Read keystore Password on Console The problem was Elasti… --- ## [Syslog data from external device into ELK Stack](https://discuss.elastic.co/t/syslog-data-from-external-device-into-elk-stack/282287)
**Author:** [@pooch](https://discuss.elastic.co/u/pooch)\ **Replies:** 3\ **Last updated:** [August 24, 2021, 10:03pm UTC](https://discuss.elastic.co/t/syslog-data-from-external-device-into-elk-stack/282287 "2021-08-24T22:03:49Z")
I have ELK collecting logs from all of my pods within my Kubernetes cluster. I would also like to collect logs from an external PA firewall (syslog) and have them processed into Elasticsearch. I am a bit confused on how … --- ## [How to do parallel filter search of 1M queries in minimal time?](https://discuss.elastic.co/t/how-to-do-parallel-filter-search-of-1m-queries-in-minimal-time/282023)
**Author:** [@elastic\_yogi](https://discuss.elastic.co/u/elastic_yogi)\ **Replies:** 5\ **Last updated:** [August 24, 2021, 8:43pm UTC](https://discuss.elastic.co/t/how-to-do-parallel-filter-search-of-1m-queries-in-minimal-time/282023 "2021-08-24T20:43:25Z")
Hi, I would like to search 1M filter queries in parallel in order to reduce the search time. This means a boolean query with 1M filter values, an no ordering is necessary. My index size is about 1GB, and I've stored ever… --- ## [Elastic App Search costs](https://discuss.elastic.co/t/elastic-app-search-costs/282399)
**Author:** [@fabulias](https://discuss.elastic.co/u/fabulias)\ **Replies:** 1\ **Last updated:** [August 24, 2021, 8:23pm UTC](https://discuss.elastic.co/t/elastic-app-search-costs/282399 "2021-08-24T20:23:28Z")
Hi guys, I've created a free cluster for 14 days (for testing) in the elastic cloud but I have some doubts about the Elasticsearch cluster and Elasticsearch App Search. First case: If I want to keep a cluster in Elast… --- ## [Detection and Response for ProxyShell Activity](https://discuss.elastic.co/t/detection-and-response-for-proxyshell-activity/282407)
**Author:** [@variable](https://discuss.elastic.co/u/variable)\ **Replies:** 0\ **Last updated:** [August 24, 2021, 7:58pm UTC](https://discuss.elastic.co/t/detection-and-response-for-proxyshell-activity/282407 "2021-08-24T19:58:56Z")
Detection and Response for ProxyShell Activity Executive Summary On August 21, 2021, the Cybersecurity and Infrastructure Security Agency (CISA) released an urgent notice related to the exploitation of ProxyShell vulnera… --- ## [Issues with certbot certificates and kibana](https://discuss.elastic.co/t/issues-with-certbot-certificates-and-kibana/282270)
**Author:** [@noobthenoob](https://discuss.elastic.co/u/noobthenoob)\ **Replies:** 3\ **Last updated:** [August 24, 2021, 7:09pm UTC](https://discuss.elastic.co/t/issues-with-certbot-certificates-and-kibana/282270 "2021-08-24T19:09:43Z")
\[MY\_DOMAIN\] = My externally accessable url such as "asdf.dk" \[MY\_LOCAL\_SERVER\_IP\] = My servers local IP address such as 192.168.1.2 Hello everyone, I have some issues with kibana & certbot certificates. Let me elabor… --- ## [Can't setup Nginx reverse proxy for Kibana in Localhost](https://discuss.elastic.co/t/cant-setup-nginx-reverse-proxy-for-kibana-in-localhost/282176)
**Author:** [@Amine\_Chichi](https://discuss.elastic.co/u/Amine_Chichi)\ **Replies:** 3\ **Last updated:** [August 24, 2021, 6:57pm UTC](https://discuss.elastic.co/t/cant-setup-nginx-reverse-proxy-for-kibana-in-localhost/282176 "2021-08-24T18:57:59Z")
I want to set up a reverse proxy to access kibana using a username and a password, so I followed this tutorial. When I use the URL http://elastic.local to access kibana the timeout occurs and nothing happen. But when I … --- ## [Best practices for logstash output configuration and Elasticsearch](https://discuss.elastic.co/t/best-practices-for-logstash-output-configuration-and-elasticsearch/281642)
**Author:** [@Vinay\_Kumar2](https://discuss.elastic.co/u/Vinay_Kumar2)\ **Replies:** 1\ **Last updated:** [August 24, 2021, 6:42pm UTC](https://discuss.elastic.co/t/best-practices-for-logstash-output-configuration-and-elasticsearch/281642 "2021-08-24T18:42:31Z")
Hello, My question is related to the correct way to configure the output, for Elasticsearch. Right now my Elasticsearch cluster is one dedicated master node, 3 data nodes and acts as master eligible nodes and 1 coordi… --- ## [Filebeat Multiline Pattern not working on Production servers](https://discuss.elastic.co/t/filebeat-multiline-pattern-not-working-on-production-servers/282398)
**Author:** [@Pavani\_Reddy](https://discuss.elastic.co/u/Pavani_Reddy)\ **Replies:** 0\ **Last updated:** [August 24, 2021, 6:41pm UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-not-working-on-production-servers/282398 "2021-08-24T18:41:33Z")
Hi Team, I am using multiline.pattern in filebeat for parsing logs. I am able parse the logs correctly on local lab servers, but when implemented the same on prod servers , multiple logs gets indexed as one event to el… [Previous page](https://discuss.elastic.co/latest.md?page=1509) [Next page](https://discuss.elastic.co/latest.md?page=1511)