# Latest **URL:** https://discuss.elastic.co/latest.md?page=1516 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1517 --- ## [Does the elastic agent contain winlogbeat?](https://discuss.elastic.co/t/does-the-elastic-agent-contain-winlogbeat/282043)
**Author:** [@shardinator](https://discuss.elastic.co/u/shardinator)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 1:04pm UTC](https://discuss.elastic.co/t/does-the-elastic-agent-contain-winlogbeat/282043 "2021-08-20T13:04:55Z")
Hi When looking at event logs shipped from elastic agent 7.14.0 the agent.type is filebeat. So is the elastic agent actually using winlogbeat? If not, does the used filebeat have feature parity with winlogbeat? Cheers… --- ## [Aggregate filter - Parsing Jenkins log](https://discuss.elastic.co/t/aggregate-filter-parsing-jenkins-log/281994)
**Author:** [@Uplift](https://discuss.elastic.co/u/Uplift)\ **Replies:** 4\ **Last updated:** [August 20, 2021, 12:57pm UTC](https://discuss.elastic.co/t/aggregate-filter-parsing-jenkins-log/281994 "2021-08-20T12:57:38Z")
Dear ELK community, I'm quite new to ELK stack and I'm trying to figure out what can I really achieve with Logstash. I'm trying to extract some information from Jenkins logs, and I found the aggregate filter plugin whi… --- ## [Using recursion for paging?](https://discuss.elastic.co/t/using-recursion-for-paging/282079)
**Author:** [@jasenj1](https://discuss.elastic.co/u/jasenj1)\ **Replies:** 0\ **Last updated:** [August 20, 2021, 12:55pm UTC](https://discuss.elastic.co/t/using-recursion-for-paging/282079 "2021-08-20T12:55:10Z")
Given a web service that supports a typical paging construct of specifying the record to start from and a page size, is using the "pipeline" input and output to recursively call a config file a viable option? Or will it … --- ## [Is there a way to ease installing fleet server to a elasticsearch server secured by self-signed certificate](https://discuss.elastic.co/t/is-there-a-way-to-ease-installing-fleet-server-to-a-elasticsearch-server-secured-by-self-signed-certificate/281583)
**Author:** [@ZeLAxyz](https://discuss.elastic.co/u/ZeLAxyz)\ **Replies:** 7\ **Last updated:** [August 20, 2021, 12:11pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-ease-installing-fleet-server-to-a-elasticsearch-server-secured-by-self-signed-certificate/281583 "2021-08-20T12:11:32Z")
Hi, I just tried installing fleet server to a elasticsearch server secured by self-signed certificate. And I get an error message: app@fs00:~/elastic-agent-7.14.0-linux-x86\_64$ sudo ./elastic-agent install -f --fleet… --- ## [Monitoring java process running in remote server by Elasticsearch](https://discuss.elastic.co/t/monitoring-java-process-running-in-remote-server-by-elasticsearch/282068)
**Author:** [@buulq90](https://discuss.elastic.co/u/buulq90)\ **Replies:** 0\ **Last updated:** [August 20, 2021, 10:55am UTC](https://discuss.elastic.co/t/monitoring-java-process-running-in-remote-server-by-elasticsearch/282068 "2021-08-20T10:55:23Z")
Hello all, I have the ELK stack with: AWS Elasticsearch & Logstash on EC2 instance. Currently, I want to monitor the java process in the other remote server which running many java process such as: java --proccess1 j… --- ## [One node one primary shard](https://discuss.elastic.co/t/one-node-one-primary-shard/282066)
**Author:** [@terrainc](https://discuss.elastic.co/u/terrainc)\ **Replies:** 0\ **Last updated:** [August 20, 2021, 10:41am UTC](https://discuss.elastic.co/t/one-node-one-primary-shard/282066 "2021-08-20T10:41:56Z")
I have 6 nodes and 6 primary shards for each index plus replica. I want to be sure that each index primary shard got own node. How I understand, this can be controlled by allocation.balance "cluster.routing.allo… --- ## [Shards balance and homogeneity of their sizes](https://discuss.elastic.co/t/shards-balance-and-homogeneity-of-their-sizes/281661)
**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\ **Replies:** 7\ **Last updated:** [August 20, 2021, 10:29am UTC](https://discuss.elastic.co/t/shards-balance-and-homogeneity-of-their-sizes/281661 "2021-08-20T10:29:42Z")
I understood the need of a well balanced ES cluster, with indices made of enough shards (not too much but not too few), but I was wondering if the constancy of the size of shards was important ? Indeed, according the pu… --- ## [Assets of System Integration seems missing on a fresh installed Elastic Stack 7.14 Basic Version](https://discuss.elastic.co/t/assets-of-system-integration-seems-missing-on-a-fresh-installed-elastic-stack-7-14-basic-version/282059)
**Author:** [@ZeLAxyz](https://discuss.elastic.co/u/ZeLAxyz)\ **Replies:** 0\ **Last updated:** [August 20, 2021, 9:47am UTC](https://discuss.elastic.co/t/assets-of-system-integration-seems-missing-on-a-fresh-installed-elastic-stack-7-14-basic-version/282059 "2021-08-20T09:47:05Z")
Hi, I am using the elastic account on a freshed installed Elastic Stack 7.14. The Dashboards, Saved searches, Visualizations assets all seems missing. Did I do something wrong? How can I get them? Best regards Roy … --- ## [Does "retry\_on\_conflict" will handle updating the latest version number before retrying again?](https://discuss.elastic.co/t/does-retry-on-conflict-will-handle-updating-the-latest-version-number-before-retrying-again/281738)
**Author:** [@Vikram\_Golapelliwar](https://discuss.elastic.co/u/Vikram_Golapelliwar)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 9:41am UTC](https://discuss.elastic.co/t/does-retry-on-conflict-will-handle-updating-the-latest-version-number-before-retrying-again/281738 "2021-08-20T09:41:22Z")
Team, I have been trying to understand how setting retry\_on\_conflict will behave. It is little confusing in the documentation. As per my understanding, below lines suggest that the latest version update will be handle… --- ## [AWS Billing Dashboard using metricbeat](https://discuss.elastic.co/t/aws-billing-dashboard-using-metricbeat/281940)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 3\ **Last updated:** [August 20, 2021, 5:55am UTC](https://discuss.elastic.co/t/aws-billing-dashboard-using-metricbeat/281940 "2021-08-20T05:55:41Z")
Hi, I am trying to create AWS Billing Dashboard in Kibana using metricbeat. In metricbeat.yml, I want to load the dashboard in Space Name "Divyank" and not in default space. How to get space id for "Divyank" space. al… --- ## [Config Logstash with https to Elasticsearch cluster](https://discuss.elastic.co/t/config-logstash-with-https-to-elasticsearch-cluster/282053)
**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\ **Replies:** 0\ **Last updated:** [August 20, 2021, 9:19am UTC](https://discuss.elastic.co/t/config-logstash-with-https-to-elasticsearch-cluster/282053 "2021-08-20T09:19:24Z")
Error Logs in Logstash Aug 20 14:28:50 elastic.sys logstash\[5101\]: \[2021-08-20T14:28:50,172\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Attempted to resurrect connection to dead ES instance, but got an error {:url=\>"h… --- ## [Elastic App Search Indexing progress do not proceed v7.11.2](https://discuss.elastic.co/t/elastic-app-search-indexing-progress-do-not-proceed-v7-11-2/281840)
**Author:** [@nilrae](https://discuss.elastic.co/u/nilrae)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 8:53am UTC](https://discuss.elastic.co/t/elastic-app-search-indexing-progress-do-not-proceed-v7-11-2/281840 "2021-08-20T08:53:15Z")
We have a problem in our self hosted Elastic App Search. The display for "Indexing progress" has been at 0% for some time. I do not found any API reference to start the index progress new. Also when I try to update the … --- ## [Pagination option is not visible in kibana after upgraded it to 7.9.4](https://discuss.elastic.co/t/pagination-option-is-not-visible-in-kibana-after-upgraded-it-to-7-9-4/281834)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 4\ **Last updated:** [August 20, 2021, 8:05am UTC](https://discuss.elastic.co/t/pagination-option-is-not-visible-in-kibana-after-upgraded-it-to-7-9-4/281834 "2021-08-20T08:05:30Z")
Hi Team, Recently i have upgraded my Elasticsearch & Kibana to 7.9.4 but after upgrade in kibana pagination option is not visible. For example if i have queried something in kibana and got total count 200 but out of 200… --- ## [NEST, number of transferred bytes when using compression](https://discuss.elastic.co/t/nest-number-of-transferred-bytes-when-using-compression/281991)
**Author:** [@MPeli](https://discuss.elastic.co/u/MPeli)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 7:56am UTC](https://discuss.elastic.co/t/nest-number-of-transferred-bytes-when-using-compression/281991 "2021-08-20T07:56:06Z")
Hi, I use the NEST library to index documents. Request are made using a BulkAsync function. I enabled an http compression (gzip). I wonder whether it is possible to find out how many bytes were transferred when making a… --- ## [Is there a way to configure Multiple Log Streams by distinct Index Name?](https://discuss.elastic.co/t/is-there-a-way-to-configure-multiple-log-streams-by-distinct-index-name/281823)
**Author:** [@vijay.sangha](https://discuss.elastic.co/u/vijay.sangha)\ **Replies:** 3\ **Last updated:** [August 20, 2021, 7:48am UTC](https://discuss.elastic.co/t/is-there-a-way-to-configure-multiple-log-streams-by-distinct-index-name/281823 "2021-08-20T07:48:16Z")
I have been using logtrail till version 7.9.0, but the plugin provider didn't re-wrote the code to comply with the latest version. As there is a streams availabe within Kibana now, is there a way to define multiple stre… --- ## [Logstash not creating index in kibana](https://discuss.elastic.co/t/logstash-not-creating-index-in-kibana/280780)
**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\ **Replies:** 25\ **Last updated:** [August 20, 2021, 7:27am UTC](https://discuss.elastic.co/t/logstash-not-creating-index-in-kibana/280780 "2021-08-20T07:27:08Z")
This is my logstash plain log file \[2021-06-18T08:21:45,675\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2021-06-18T08:21:45,686\]\[INFO \]\[logstash.runner … --- ## [Logstash http\_poller body calls the SQL API of elasticsearch error](https://discuss.elastic.co/t/logstash-http-poller-body-calls-the-sql-api-of-elasticsearch-error/282042)
**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\ **Replies:** 0\ **Last updated:** [August 20, 2021, 7:14am UTC](https://discuss.elastic.co/t/logstash-http-poller-body-calls-the-sql-api-of-elasticsearch-error/282042 "2021-08-20T07:14:48Z")
Hi I used logstash http\_ poller calls the SQL API of elasticsearch. SQL API \_sql?format=txt error. The following is some configuration information. input { http\_poller { urls =\> { item =\> { method =\> post url =\> … --- ## [Unable to communicate with Fleet Server after Upgrade to 7.14](https://discuss.elastic.co/t/unable-to-communicate-with-fleet-server-after-upgrade-to-7-14/280388)
**Author:** [@thleh](https://discuss.elastic.co/u/thleh)\ **Replies:** 15\ **Last updated:** [August 20, 2021, 7:08am UTC](https://discuss.elastic.co/t/unable-to-communicate-with-fleet-server-after-upgrade-to-7-14/280388 "2021-08-20T07:08:18Z")
Hi, after Upgrading to 7.14 (elasticsearch and elastic-agent hosting fleet-server) i'm unable to start other elastic-agents version 7.14. 2021-08-04T09:11:32.489+0200 ERROR fleet/fleet\_gateway.go:205 Could not communic… --- ## [Filter out some specific metrics from Discovery or APM dashboard](https://discuss.elastic.co/t/filter-out-some-specific-metrics-from-discovery-or-apm-dashboard/277948)
**Author:** [@suren\_d](https://discuss.elastic.co/u/suren_d)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 6:42am UTC](https://discuss.elastic.co/t/filter-out-some-specific-metrics-from-discovery-or-apm-dashboard/277948 "2021-08-20T06:42:36Z")
I am trying to pull some observability data from APM and Discover dashboards, but I can't get beyond couple of simple data. In APM dashboard, it only returns data if I search for transaction.duration.us and in Discover,… --- ## [Packetbeat performance and sizing](https://discuss.elastic.co/t/packetbeat-performance-and-sizing/281769)
**Author:** [@gintek](https://discuss.elastic.co/u/gintek)\ **Replies:** 2\ **Last updated:** [August 20, 2021, 6:04am UTC](https://discuss.elastic.co/t/packetbeat-performance-and-sizing/281769 "2021-08-20T06:04:43Z")
Hello, I'm planning to use packetbeat on dedicated servers, getting the traffic from mirror ports on switch. Dedicated server will Virtual Machine with Linux of course. I couldn't find in documentation what resources … --- ## [Ilm policy for existing index](https://discuss.elastic.co/t/ilm-policy-for-existing-index/282036)
**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 5:29am UTC](https://discuss.elastic.co/t/ilm-policy-for-existing-index/282036 "2021-08-20T05:29:08Z")
Hi Team, I am trying to understand how does ilm policy also setup new indices. I understand that one needs to first setup the ilm policy which is then assigned to a template e.g { "index\_patterns": \["test-\*"\], "t… --- ## [Winlogbeat authorization error on AWS ELK](https://discuss.elastic.co/t/winlogbeat-authorization-error-on-aws-elk/281757)
**Author:** [@Juan\_Gutierrez](https://discuss.elastic.co/u/Juan_Gutierrez)\ **Replies:** 14\ **Last updated:** [August 20, 2021, 4:53am UTC](https://discuss.elastic.co/t/winlogbeat-authorization-error-on-aws-elk/281757 "2021-08-20T04:53:43Z")
Hi there, I have an AWS Elasticsearch stack - version 7.10 and I would like to ship our fleet of EC2's Windows event logs to it. I've followed the documentation and used an earlier version of Winlogbeat - version 7.12.… --- ## [Convert elasticsearch query output of float fields( latitude & longtitude) to String](https://discuss.elastic.co/t/convert-elasticsearch-query-output-of-float-fields-latitude-longtitude-to-string/282001)
**Author:** [@Sagar\_kadu](https://discuss.elastic.co/u/Sagar_kadu)\ **Replies:** 3\ **Last updated:** [August 19, 2021, 8:59pm UTC](https://discuss.elastic.co/t/convert-elasticsearch-query-output-of-float-fields-latitude-longtitude-to-string/282001 "2021-08-19T20:59:18Z")
I'm using elasticsearch input plugin to fetch data from elasticsearch using scroll api and it returns JSON document which consists of \[customerAddresses\] array containing latitude & logitude fields of float type...I woul… --- ## [Remove hashtags "#" using gsub](https://discuss.elastic.co/t/remove-hashtags-using-gsub/282028)
**Author:** [@mario\_kazela](https://discuss.elastic.co/u/mario_kazela)\ **Replies:** 2\ **Last updated:** [August 20, 2021, 3:53am UTC](https://discuss.elastic.co/t/remove-hashtags-using-gsub/282028 "2021-08-20T03:53:02Z")
Hi, I have some trouble using gsub on logstash because I'm still new on logstash configuration. Just want to asking. Example I have data like "#ynwa". How to remove "#" and leave the word "ynwa" only using gsub ? mutat… --- ## [Connection reset by peer](https://discuss.elastic.co/t/connection-reset-by-peer/281667)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 12:58am UTC](https://discuss.elastic.co/t/connection-reset-by-peer/281667 "2021-08-20T00:58:31Z")
filebeat now emits the following error 2021-08-17T06:00:10.472+0900 ERROR \[logstash\] logstash/async.go:280 Failed to publish events caused by: write tcp XXX.XXX.XXX.XXX:XXX-\>XXX.XXX.XXX.XXX:XXX: write: conne… --- ## [Ability to remove blank range of dates from Kibana visualization](https://discuss.elastic.co/t/ability-to-remove-blank-range-of-dates-from-kibana-visualization/281864)
**Author:** [@BMGR](https://discuss.elastic.co/u/BMGR)\ **Replies:** 3\ **Last updated:** [August 19, 2021, 10:38pm UTC](https://discuss.elastic.co/t/ability-to-remove-blank-range-of-dates-from-kibana-visualization/281864 "2021-08-19T22:38:48Z")
Hey all, I'm trying to build a dashboard that hones in on two primary time frames - monthly and yearly. In order to view yearly values, it appears that my date range needs to be set to that year. For the monthly range… --- ## [How can I change the default Elasticsearch port that Kibana listens?](https://discuss.elastic.co/t/how-can-i-change-the-default-elasticsearch-port-that-kibana-listens/281860)
**Author:** [@raylight](https://discuss.elastic.co/u/raylight)\ **Replies:** 6\ **Last updated:** [August 19, 2021, 10:14pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-default-elasticsearch-port-that-kibana-listens/281860 "2021-08-19T22:14:40Z")
I already have an instance of Logstash, Elasticsearch and Kibana running on my computer with the version 7.4.2... I'd like to run a different instance of them with the version 7.14.0... So, in these new instances, I've c… --- ## [Run Elasticsearch on port other than 9200](https://discuss.elastic.co/t/run-elasticsearch-on-port-other-than-9200/281830)
**Author:** [@mba](https://discuss.elastic.co/u/mba)\ **Replies:** 5\ **Last updated:** [August 19, 2021, 10:12pm UTC](https://discuss.elastic.co/t/run-elasticsearch-on-port-other-than-9200/281830 "2021-08-19T22:12:55Z")
I want to run elasticsearch on port other than 9200, so I changed http.port=9220 in elasticsearch.yml but still it is running on port number 9200 --- ## [Filtering and ordering](https://discuss.elastic.co/t/filtering-and-ordering/282015)
**Author:** [@Sriram8894](https://discuss.elastic.co/u/Sriram8894)\ **Replies:** 2\ **Last updated:** [August 19, 2021, 10:03pm UTC](https://discuss.elastic.co/t/filtering-and-ordering/282015 "2021-08-19T22:03:49Z")
I would like to know the reason for below case Case 1 : Consider, I have applied a filter on documents and the order of documents in response is 1,2,3,4. Case 2: I have updated a field in the document 2, then If I exec… --- ## [Elastic Endpoint Security crashes and memory errors](https://discuss.elastic.co/t/elastic-endpoint-security-crashes-and-memory-errors/282003)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 6\ **Last updated:** [August 19, 2021, 9:49pm UTC](https://discuss.elastic.co/t/elastic-endpoint-security-crashes-and-memory-errors/282003 "2021-08-19T21:49:53Z")
Hey, I'm getting multiple different Elastic Endpoint crashes across different hosts and across Elastic Agent 7.14 and 7.13.2. I provide exemplary crashes below, from the Windows Application Event log. In terms of crash… [Previous page](https://discuss.elastic.co/latest.md?page=1515) [Next page](https://discuss.elastic.co/latest.md?page=1517)