# Latest **URL:** https://discuss.elastic.co/latest.md?page=1721 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1722 --- ## [Metricbeat - no counter paths were found](https://discuss.elastic.co/t/metricbeat-no-counter-paths-were-found/270166)
**Author:** [@Inammathe\_Inna](https://discuss.elastic.co/u/Inammathe_Inna)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 8:42am UTC](https://discuss.elastic.co/t/metricbeat-no-counter-paths-were-found/270166 "2021-04-21T08:42:59Z")
Hi, Periodically, we are finding our Windows servers stop sending perfmon metrics (other metrics e.g. cpu from the system module) continue just fine. The current workaround that gets them going again is restarting the … --- ## [Logstash throws out 'Host name does not match the certificate subject provided by the peer' error](https://discuss.elastic.co/t/logstash-throws-out-host-name-does-not-match-the-certificate-subject-provided-by-the-peer-error/270622)
**Author:** [@arunhk3](https://discuss.elastic.co/u/arunhk3)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 8:11am UTC](https://discuss.elastic.co/t/logstash-throws-out-host-name-does-not-match-the-certificate-subject-provided-by-the-peer-error/270622 "2021-04-21T08:11:25Z")
Hi All, I recently installed a three-node cluster in a vagrant box to test out the security features of Elasticsearch: I followed the guides in the below order: Set up basic security for the Elastic Stack | Elasticse… --- ## [Can Elastic APM to Monitoring Mobile Application?](https://discuss.elastic.co/t/can-elastic-apm-to-monitoring-mobile-application/270781)
**Author:** [@Helmy\_Me](https://discuss.elastic.co/u/Helmy_Me)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 7:52am UTC](https://discuss.elastic.co/t/can-elastic-apm-to-monitoring-mobile-application/270781 "2021-04-21T07:52:30Z")
Hi All, I'm looking for a document for monitoring mobile applications with elastic APM. but I haven't found it yet. Can I monitor Mobile Application (andorid & Ios) using elastic? Please Advice. Thanks, Helmy --- ## [Kibana transform latest continously not updating](https://discuss.elastic.co/t/kibana-transform-latest-continously-not-updating/268739)
**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 7:50am UTC](https://discuss.elastic.co/t/kibana-transform-latest-continously-not-updating/268739 "2021-04-21T07:50:07Z")
Hi everyone, so I'm trying on the latest transform. I have 3 files. Those are: name, status, tgl. I will ingest data1 and data2 at the same time to index transformtest then I will create transformation index transfor… --- ## [Elastic Slack Configuration for 6.5.4 version on Kubernetes](https://discuss.elastic.co/t/elastic-slack-configuration-for-6-5-4-version-on-kubernetes/270198)
**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 7:37am UTC](https://discuss.elastic.co/t/elastic-slack-configuration-for-6-5-4-version-on-kubernetes/270198 "2021-04-21T07:37:48Z")
Hello Team, We are trying to configure slack for sending alerts. But its throwing errors. Elastic Version - 6.5.4 Our Elastic Service is deployed via Kubernetes. Please find the slack configuration below : xpack.not… --- ## [APM server /intake/v2/events return 202 but timed too long](https://discuss.elastic.co/t/apm-server-intake-v2-events-return-202-but-timed-too-long/270646)
**Author:** [@badtimo](https://discuss.elastic.co/u/badtimo)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 7:36am UTC](https://discuss.elastic.co/t/apm-server-intake-v2-events-return-202-but-timed-too-long/270646 "2021-04-21T07:36:43Z")
Kibana version: 7.9.1 Elasticsearch version:7.9.1 APM Server version:7.9.1 APM Agent language and version: golang, 1.8.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: helm in… --- ## [Change date format in timepicker from 24 hr to 12 hour](https://discuss.elastic.co/t/change-date-format-in-timepicker-from-24-hr-to-12-hour/270108)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 6:41am UTC](https://discuss.elastic.co/t/change-date-format-in-timepicker-from-24-hr-to-12-hour/270108 "2021-04-21T06:41:53Z")
Hi, I would like to change the time format in the date-picker in Discover, Visualizations and Dashboards from 24 hours to 12 hours eg. currently it's 15:30 16:00.... I would like it to show as 3:30 pm 4:00pm. Could som… --- ## [Clickeable element and filter accordingly](https://discuss.elastic.co/t/clickeable-element-and-filter-accordingly/270775)
**Author:** [@glitz](https://discuss.elastic.co/u/glitz)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 4:56am UTC](https://discuss.elastic.co/t/clickeable-element-and-filter-accordingly/270775 "2021-04-21T04:56:30Z")
Hello, I have tried without success to make a canvas that in first page have some data, let's say a pie with 3 subnet ranges, and if a click any of them it brings me to a second page with the details of every ip within c… --- ## [Kibana 7.12 nginx reverse proxy, docker compose](https://discuss.elastic.co/t/kibana-7-12-nginx-reverse-proxy-docker-compose/270776)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 4:36am UTC](https://discuss.elastic.co/t/kibana-7-12-nginx-reverse-proxy-docker-compose/270776 "2021-04-21T04:36:46Z")
Hi Im trying to use nginx as a reverse proxy for kibana but I can make it work, this is my kibana.yml server.name: kibana server.host: "localhost" elasticsearch.hosts: \[ "https://elasticsearch:9200" \] elasticsearch.user… --- ## [The issue of tcp connection of logstash](https://discuss.elastic.co/t/the-issue-of-tcp-connection-of-logstash/270780)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 3:27am UTC](https://discuss.elastic.co/t/the-issue-of-tcp-connection-of-logstash/270780 "2021-04-21T03:27:49Z")
It seems to me that the limit of the no of tcp connection of logstash is about 110. If the no of connection is more than 110, filebeat will show something like handshake.....ERROR...i/o timeout when running test output c… --- ## [Alerts from prebuilt detection rules](https://discuss.elastic.co/t/alerts-from-prebuilt-detection-rules/270633)
**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 2:30am UTC](https://discuss.elastic.co/t/alerts-from-prebuilt-detection-rules/270633 "2021-04-21T02:30:19Z")
Hi, I am running 7.12 and would like to send an alerts to slack whenever a positive match occurs on one of the prebuilt detection rules. i.e Prebuilt rule reference | Elastic Security Solution \[7.12\] | Elastic I can s… --- ## [Hot-warm search question](https://discuss.elastic.co/t/hot-warm-search-question/270778)
**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 2:26am UTC](https://discuss.elastic.co/t/hot-warm-search-question/270778 "2021-04-21T02:26:53Z")
Hi, I have a pretty basic question around how search functions under the hood. I am evaluating a hot-warm architecture on aws (SSD, S3 backed respectively). Our use case is such that some searches may have to be issued a… --- ## [Group records by geo-location on Maps](https://discuss.elastic.co/t/group-records-by-geo-location-on-maps/270759)
**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 2:05am UTC](https://discuss.elastic.co/t/group-records-by-geo-location-on-maps/270759 "2021-04-21T02:05:11Z")
I'm wondering if it is possible to group all records that have the same geo-location on the map? For instance I have 10 records with geo\_location { "lon": "-75.9247", "lat": "44.5299" } but they show up as 10 separate do… --- ## [Filebeat Netflow Module || Kibana Dashboard Extremly Slow](https://discuss.elastic.co/t/filebeat-netflow-module-kibana-dashboard-extremly-slow/269926)
**Author:** [@albertosoares](https://discuss.elastic.co/u/albertosoares)\ **Replies:** 6\ **Last updated:** [April 21, 2021, 1:18am UTC](https://discuss.elastic.co/t/filebeat-netflow-module-kibana-dashboard-extremly-slow/269926 "2021-04-21T01:18:16Z")
I've deployed the Netflow module and when I go to the Filebeat Netflow Dashboards and I query for 24 hours, today or 4 hours the query is extremely slow. Environment ELK 7.12 3 data nodes (12 vCPU, 10 RAM -Xms5g m / -… --- ## [Is there a way to automate external identity mapping?](https://discuss.elastic.co/t/is-there-a-way-to-automate-external-identity-mapping/270774)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [April 20, 2021, 11:38pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-automate-external-identity-mapping/270774 "2021-04-20T23:38:48Z")
With some help I've successfully mapped a few of my Active Directory users to their Google Drive counterparts. But I can't help but wonder if there is a better way. Do external identity mapping's have to be configured v… --- ## [Supporting very high number of query terms a good idea?](https://discuss.elastic.co/t/supporting-very-high-number-of-query-terms-a-good-idea/270771)
**Author:** [@elastic\_yogi](https://discuss.elastic.co/u/elastic_yogi)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 11:07pm UTC](https://discuss.elastic.co/t/supporting-very-high-number-of-query-terms-a-good-idea/270771 "2021-04-20T23:07:24Z")
We have a postgres table with nearly a million rows that we index into elasticsearch. We want to support a specific use case of allowing a user to copy and paste nearly 10k unique identifiers to filter for specific entri… --- ## [Elasticsearch using more RAM](https://discuss.elastic.co/t/elasticsearch-using-more-ram/270669)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 10:56pm UTC](https://discuss.elastic.co/t/elasticsearch-using-more-ram/270669 "2021-04-20T22:56:49Z")
my /etc/elasticsearch/jvm.options is : ## JVM configuration ################################################################ ## IMPORTANT: JVM heap size ################################################################ … --- ## [ServiceNow connector - alerts and actions, missing fields](https://discuss.elastic.co/t/servicenow-connector-alerts-and-actions-missing-fields/270576)
**Author:** [@nekirc](https://discuss.elastic.co/u/nekirc)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 10:55pm UTC](https://discuss.elastic.co/t/servicenow-connector-alerts-and-actions-missing-fields/270576 "2021-04-20T22:55:58Z")
Hi, is there any chance to add some additional fields to ServiceNow connector in Alerts and Actions tab in the next Elastic version ? Would be good to have possibility to put information to below fields: Company Serv… --- ## [How to map Native Realm Active Directory users to Google Drive users?](https://discuss.elastic.co/t/how-to-map-native-realm-active-directory-users-to-google-drive-users/270769)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 6\ **Last updated:** [April 20, 2021, 10:51pm UTC](https://discuss.elastic.co/t/how-to-map-native-realm-active-directory-users-to-google-drive-users/270769 "2021-04-20T22:51:26Z")
From the docs I've been trying to map my Active Directory users to their Google Drive counterparts. The API calls return 200, but when I try to list all identities, the list is empty. POST http://search.example.org/api/… --- ## [After selecting App Search, I can no longer select Workplace Search](https://discuss.elastic.co/t/after-selecting-app-search-i-can-no-longer-select-workplace-search/270629)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 6\ **Last updated:** [April 20, 2021, 8:20pm UTC](https://discuss.elastic.co/t/after-selecting-app-search-i-can-no-longer-select-workplace-search/270629 "2021-04-20T20:20:55Z")
When I logged into Enterprise Search via my AD/ES-Native user, I was given the option to choose either App Search or Workplace Search. I selected App Search. Now, when I go back to /ent/select, Workplace Search no longer… --- ## [Logviewing - Filebeat](https://discuss.elastic.co/t/logviewing-filebeat/270758)
**Author:** [@Akhil2610](https://discuss.elastic.co/u/Akhil2610)\ **Replies:** 0\ **Last updated:** [April 20, 2021, 7:50pm UTC](https://discuss.elastic.co/t/logviewing-filebeat/270758 "2021-04-20T19:50:06Z")
Hello everyone, Hope you are doing well! I am exploring the possibilities of log viewing through Kibana. I am new to ELK so pardon me for asking dumb questions. I am using version 7.9.2 for ELK and filebeat as well. so… --- ## [Putting mass archived log files to Elasticsearch using Filebeat](https://discuss.elastic.co/t/putting-mass-archived-log-files-to-elasticsearch-using-filebeat/270441)
**Author:** [@h8h](https://discuss.elastic.co/u/h8h)\ **Replies:** 2\ **Last updated:** [April 20, 2021, 7:29pm UTC](https://discuss.elastic.co/t/putting-mass-archived-log-files-to-elasticsearch-using-filebeat/270441 "2021-04-20T19:29:51Z")
Hello, I am working in forensics and have a lot of log files, each 100MB in size. I feel very uncomfortable using filebeat because it throws a lot of "too many open files" errors. I am not sure if every file is being p… --- ## [Autodiscover on ECK not harvesting logs](https://discuss.elastic.co/t/autodiscover-on-eck-not-harvesting-logs/270750)
**Author:** [@twiggy](https://discuss.elastic.co/u/twiggy)\ **Replies:** 0\ **Last updated:** [April 20, 2021, 6:30pm UTC](https://discuss.elastic.co/t/autodiscover-on-eck-not-harvesting-logs/270750 "2021-04-20T18:30:28Z")
Hello everyone, I'm trying to implement autodiscover with filebeat using ECK. Basic feature at the moment, using : config: filebeat.autodiscover: providers: - type: kubernetes … --- ## [Multiple group\_search.base\_dn for one LDAP/AD](https://discuss.elastic.co/t/multiple-group-search-base-dn-for-one-ldap-ad/270746)
**Author:** [@ctan](https://discuss.elastic.co/u/ctan)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 6:07pm UTC](https://discuss.elastic.co/t/multiple-group-search-base-dn-for-one-ldap-ad/270746 "2021-04-20T18:07:44Z")
We have two spots for groups to reside inside of AD, which are not children of the same folders (but in the same domain). I am looking for a way to have ES search them both to get the group membership, while not travers… --- ## [Hive overwhelming Elasticsearch](https://discuss.elastic.co/t/hive-overwhelming-elasticsearch/269930)
**Author:** [@albertkohl](https://discuss.elastic.co/u/albertkohl)\ **Replies:** 23\ **Last updated:** [April 20, 2021, 5:57pm UTC](https://discuss.elastic.co/t/hive-overwhelming-elasticsearch/269930 "2021-04-20T17:57:46Z")
i'm new to ES so bare with me :slight\_smile: i have a hadoop cluster running hive, and i have a table of about 441 million rows, 10 columns wide (string and bigint) i setup an external table in hive, created an index i… --- ## [Reindex API from remote server](https://discuss.elastic.co/t/reindex-api-from-remote-server/270743)
**Author:** [@cool\_aarti2](https://discuss.elastic.co/u/cool_aarti2)\ **Replies:** 0\ **Last updated:** [April 20, 2021, 4:43pm UTC](https://discuss.elastic.co/t/reindex-api-from-remote-server/270743 "2021-04-20T16:43:31Z")
Hi, We have a remote server which have some elastic indices. I would like to reindex the data from this server onto another. But I am getting the error: "type": "s\_s\_l\_handshake\_exception", "reason": "PKIX path build… --- ## [Send index information to Jira when a detection is triggered](https://discuss.elastic.co/t/send-index-information-to-jira-when-a-detection-is-triggered/270404)
**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\ **Replies:** 3\ **Last updated:** [April 20, 2021, 4:37pm UTC](https://discuss.elastic.co/t/send-index-information-to-jira-when-a-detection-is-triggered/270404 "2021-04-20T16:37:09Z")
Hi, community! I hope you're doing great! I'm struggling with some issues to send the correct information to Jira in rule actions. When I configure a new detection, I want to send some fields of the detection that are … --- ## [Formatdate markdown content](https://discuss.elastic.co/t/formatdate-markdown-content/270585)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 5\ **Last updated:** [April 20, 2021, 4:06pm UTC](https://discuss.elastic.co/t/formatdate-markdown-content/270585 "2021-04-20T16:06:23Z")
Hi, I have a markdown content in Canvas like this: {{#each rows}} ### {{date}} ### {{/each}} where date is, for example: 2021-04-19T13:25:00+02:00 how can i format this date (d/m/y hh:mm) and set the local timezone? … --- ## [Custom index filter](https://discuss.elastic.co/t/custom-index-filter/270714)
**Author:** [@ARDiver86](https://discuss.elastic.co/u/ARDiver86)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 3:39pm UTC](https://discuss.elastic.co/t/custom-index-filter/270714 "2021-04-20T15:39:49Z")
I am attempting to put specific messages from sysmon into their own index so I can apply a separate lifecycle policy to them. I thought I had this policy correct but it does not seem to be working properly. The query I … --- ## [Web Crawler Failed HTTP request: Unable to request "\< domain \>" because it resolved to only private/invalid addresses](https://discuss.elastic.co/t/web-crawler-failed-http-request-unable-to-request-domain-because-it-resolved-to-only-private-invalid-addresses/270631)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [April 20, 2021, 3:29pm UTC](https://discuss.elastic.co/t/web-crawler-failed-http-request-unable-to-request-domain-because-it-resolved-to-only-private-invalid-addresses/270631 "2021-04-20T15:29:56Z")
When I try to run the web crawler against a site we host, it fails with this error: Failed HTTP request: Unable to request "\< domain \>" because it resolved to only private/invalid addresses The site in question would… [Previous page](https://discuss.elastic.co/latest.md?page=1720) [Next page](https://discuss.elastic.co/latest.md?page=1722)