# Latest **URL:** https://discuss.elastic.co/latest.md?page=1765 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1766 --- ## [Is it possible to obtain User-Centric Metrics with Custom Transactions?](https://discuss.elastic.co/t/is-it-possible-to-obtain-user-centric-metrics-with-custom-transactions/267707)
**Author:** [@randy\_a](https://discuss.elastic.co/u/randy_a)\ **Replies:** 6\ **Last updated:** [March 25, 2021, 2:56pm UTC](https://discuss.elastic.co/t/is-it-possible-to-obtain-user-centric-metrics-with-custom-transactions/267707 "2021-03-25T14:56:39Z")
Hi there, I'm a front-end developer with limited experience, therefore I'm a bit stuck at the moment. I've applied Elastic RUM for the front-end (Angular) part of our single-page application. Our use case is to obtain p… --- ## [ElasticSearch for realtime metrics/KPIs of a system](https://discuss.elastic.co/t/elasticsearch-for-realtime-metrics-kpis-of-a-system/267845)
**Author:** [@Nuno\_Centeio](https://discuss.elastic.co/u/Nuno_Centeio)\ **Replies:** 8\ **Last updated:** [March 25, 2021, 2:38pm UTC](https://discuss.elastic.co/t/elasticsearch-for-realtime-metrics-kpis-of-a-system/267845 "2021-03-25T14:38:41Z")
Hi! I need an advice. This is a very simplified version of what I have. I've developed an API that returns some metrics of things that happens on my system. For example, how many time the user is logged, the number of … --- ## [Failed to connect to Elastic search backend.make sure it is running and healthy](https://discuss.elastic.co/t/failed-to-connect-to-elastic-search-backend-make-sure-it-is-running-and-healthy/268149)
**Author:** [@saqib619](https://discuss.elastic.co/u/saqib619)\ **Replies:** 9\ **Last updated:** [March 25, 2021, 2:23pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-elastic-search-backend-make-sure-it-is-running-and-healthy/268149 "2021-03-25T14:23:02Z")
I am trying to set app search on my linux server. All the prerequisites are done and I am at the last step to start it. It gives the below 2 errors Failed to connect to Elasticsearch backend.Make sure it is running an… --- ## [Logstash filter "if" condition to check if field exist or not](https://discuss.elastic.co/t/logstash-filter-if-condition-to-check-if-field-exist-or-not/268336)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 2:20pm UTC](https://discuss.elastic.co/t/logstash-filter-if-condition-to-check-if-field-exist-or-not/268336 "2021-03-25T14:20:14Z")
Is there any way in Logstash to check if a certain field exists or not? My use-case: I want to add a field "status: missing" when the field "httpStatus" doesn't come in the log document. --- ## [Unable to Start Elasticsearch 7.12 in Ubuntu 18.04](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-12-in-ubuntu-18-04/268330)
**Author:** [@chinkleet](https://discuss.elastic.co/u/chinkleet)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 2:09pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-12-in-ubuntu-18-04/268330 "2021-03-25T14:09:05Z")
I have installed "elasticsearch" 7.12 version on Ubuntu 18.04 machine. when trying to start the "elasticsearch" service getting below error: (base) extramarks@extramarks-Latitude-3400:~/Downloads$ systemctl status ela… --- ## [Filter for each output in multiple outputs](https://discuss.elastic.co/t/filter-for-each-output-in-multiple-outputs/268358)
**Author:** [@Charith\_sattiva](https://discuss.elastic.co/u/Charith_sattiva)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 2:04pm UTC](https://discuss.elastic.co/t/filter-for-each-output-in-multiple-outputs/268358 "2021-03-25T14:04:12Z")
Hello, I would like to send logs to multiple hosts in the output plugin of logstash. Is there a way I can filter logs for each output separately using the filter plugin? Thanks in advance --- ## [Elasticsearch Load Balancer Recommendation](https://discuss.elastic.co/t/elasticsearch-load-balancer-recommendation/268286)
**Author:** [@muthucse](https://discuss.elastic.co/u/muthucse)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 1:53pm UTC](https://discuss.elastic.co/t/elasticsearch-load-balancer-recommendation/268286 "2021-03-25T13:53:38Z")
The cluster has 5 hot nodes, 3 warm nodes and 3 dedicated master nodes (on-premise). We process the logs from multiple applications using Beats plugin. As we have option in Beats to add array of data nodes with loadbalan… --- ## [Kibana show Images](https://discuss.elastic.co/t/kibana-show-images/268349)
**Author:** [@rildo](https://discuss.elastic.co/u/rildo)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 1:33pm UTC](https://discuss.elastic.co/t/kibana-show-images/268349 "2021-03-25T13:33:56Z")
I have a doubt . I have a table x that contains a column called images (type jsonb) in my postgresql database. I migrated this data to elasticsearch, however, only the image metadata appears, I would like to know if it i… --- ## [Search IP fields](https://discuss.elastic.co/t/search-ip-fields/268223)
**Author:** [@Skeeve](https://discuss.elastic.co/u/Skeeve)\ **Replies:** 2\ **Last updated:** [March 25, 2021, 12:47pm UTC](https://discuss.elastic.co/t/search-ip-fields/268223 "2021-03-25T12:47:50Z")
I have an field called "ip" being of type "ip". When I search using the API, I can enter GET mbp\_ip/\_search { "query": { "term": { "ip": "88.198.248.0/24" } } } But I … --- ## [Logstash input file plugin feature proposal - possibility to disable file truncation detection](https://discuss.elastic.co/t/logstash-input-file-plugin-feature-proposal-possibility-to-disable-file-truncation-detection/268339)
**Author:** [@maciejfranek](https://discuss.elastic.co/u/maciejfranek)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 12:34pm UTC](https://discuss.elastic.co/t/logstash-input-file-plugin-feature-proposal-possibility-to-disable-file-truncation-detection/268339 "2021-03-25T12:34:20Z")
Hello everyone, I've been using logstash with azure files, but I reached nasty problem with it - logstash produced a lot of duplicated log events in the output due to file truncation detection. I've already created iss… --- ## [Mapping conflict after upgrade filebeat to to 7.12](https://discuss.elastic.co/t/mapping-conflict-after-upgrade-filebeat-to-to-7-12/268338)
**Author:** [@molekuul](https://discuss.elastic.co/u/molekuul)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 12:34pm UTC](https://discuss.elastic.co/t/mapping-conflict-after-upgrade-filebeat-to-to-7-12/268338 "2021-03-25T12:34:02Z")
Hi, After the filebeat upgrade from 7.11.1 to 7.12.0 I get an Mapping conflict for field: postgresql.log.error.code It seems like in 7.11.1 this field has a type long but in 7.12 the type is keyword How can I fix thi… --- ## [Change top left Elastic logo on opendistro kibana](https://discuss.elastic.co/t/change-top-left-elastic-logo-on-opendistro-kibana/268334)
**Author:** [@\_Tekle](https://discuss.elastic.co/u/_Tekle)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 12:28pm UTC](https://discuss.elastic.co/t/change-top-left-elastic-logo-on-opendistro-kibana/268334 "2021-03-25T12:28:10Z")
hello team, how can I change the top left elasic logo in opendistro, I want to use my logo here. please help me. --- ## [Elasticsearch - JMX Exporter](https://discuss.elastic.co/t/elasticsearch-jmx-exporter/268332)
**Author:** [@Joshua3](https://discuss.elastic.co/u/Joshua3)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 11:53am UTC](https://discuss.elastic.co/t/elasticsearch-jmx-exporter/268332 "2021-03-25T11:53:25Z")
Hello, i'm using JMX Exporter to get MBeans from Elasticsearch running in Docker container. This is part of Docker environment to parsing in to container to run Java JMX exporter as JavaAgent -e ES\_JAVA\_OPTS=-javaagent… --- ## [How to insert date type column of a csv file in the format "dd:MM:YYYY HH:mm:ss" into elasticsearch through logstash config](https://discuss.elastic.co/t/how-to-insert-date-type-column-of-a-csv-file-in-the-format-ddyyyy-hhss-into-elasticsearch-through-logstash-config/268189)
**Author:** [@DEEPTHI\_SONA\_G](https://discuss.elastic.co/u/DEEPTHI_SONA_G)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 11:30am UTC](https://discuss.elastic.co/t/how-to-insert-date-type-column-of-a-csv-file-in-the-format-ddyyyy-hhss-into-elasticsearch-through-logstash-config/268189 "2021-03-25T11:30:11Z")
I'm trying to insert data from a csv file into elasticsearch using logstash. I have tried adding date { match =\> \["SIGHTING\_TIME", "dd-MM-YYYY HH:mm:ss"\] target =\>"SIGHTING\_TIME" } in … --- ## [How can I match multimatch with NEST in elasticsearch?](https://discuss.elastic.co/t/how-can-i-match-multimatch-with-nest-in-elasticsearch/268304)
**Author:** [@Celal\_Poyraz](https://discuss.elastic.co/u/Celal_Poyraz)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 11:23am UTC](https://discuss.elastic.co/t/how-can-i-match-multimatch-with-nest-in-elasticsearch/268304 "2021-03-25T11:23:44Z")
I want to search with RegisterNumber and Title at the same time. But how can I match both at the same time? Also, when I press the space character, I cannot make calls after the space. How can I solve this? Currently sea… --- ## [Kibana 7.9 Index Patterns Do Not Pick Up Source Fields](https://discuss.elastic.co/t/kibana-7-9-index-patterns-do-not-pick-up-source-fields/268220)
**Author:** [@SKRYMr](https://discuss.elastic.co/u/SKRYMr)\ **Replies:** 8\ **Last updated:** [March 25, 2021, 11:01am UTC](https://discuss.elastic.co/t/kibana-7-9-index-patterns-do-not-pick-up-source-fields/268220 "2021-03-25T11:01:16Z")
Hello, I was trying to set up some visualizations for our data so I created an index pattern to match all our production indices. What happens is that the indices are matched correctly but only "root" fields are picked … --- ## [ERR Failed to publish events caused by: write tcp - wsasend: An existing connection was forcibly closed by the remote host](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-write-tcp-wsasend-an-existing-connection-was-forcibly-closed-by-the-remote-host/268321)
**Author:** [@My\_Google\_Account](https://discuss.elastic.co/u/My_Google_Account)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 10:47am UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-write-tcp-wsasend-an-existing-connection-was-forcibly-closed-by-the-remote-host/268321 "2021-03-25T10:47:59Z")
good afternoon! logstash version is 5.6.2, filebeat for windows version is 5.1.1, i have a problem with one of our filebeat agents and see in filebeat log file this: ERR Failed to publish events caused by: write tcp - w… --- ## [Detection threshold rule problem](https://discuss.elastic.co/t/detection-threshold-rule-problem/268079)
**Author:** [@Jorge7](https://discuss.elastic.co/u/Jorge7)\ **Replies:** 5\ **Last updated:** [March 25, 2021, 10:23am UTC](https://discuss.elastic.co/t/detection-threshold-rule-problem/268079 "2021-03-25T10:23:27Z")
Hi everyone, I'm try to create a personalize rule with the threshold parameter detection. I am using a handmade index with personal fields. This is the mapping: { "login-000001" : { "mappings" : { "properti… --- ## [RabbitMQ ingest pipeline can't parse some log entries](https://discuss.elastic.co/t/rabbitmq-ingest-pipeline-cant-parse-some-log-entries/268317)
**Author:** [@amelnyk](https://discuss.elastic.co/u/amelnyk)\ **Replies:** 0\ **Last updated:** [March 25, 2021, 10:14am UTC](https://discuss.elastic.co/t/rabbitmq-ingest-pipeline-cant-parse-some-log-entries/268317 "2021-03-25T10:14:24Z")
Some logs (Erlang VM) can't be parsed by the provided grok expression, example log entries: 2019-07-29 14:14:43.032 \[error\] emulator Discarding message {'$gen\_call',{\<0.442.0\>,#Ref\<0.3746561768.1184890881.104501\>},stat}… --- ## [Apm-agent-attach-standalone.jar I am new , elastic APM](https://discuss.elastic.co/t/apm-agent-attach-standalone-jar-i-am-new-elastic-apm/268049)
**Author:** [@Abhishek\_Tiwari1](https://discuss.elastic.co/u/Abhishek_Tiwari1)\ **Replies:** 7\ **Last updated:** [March 25, 2021, 10:07am UTC](https://discuss.elastic.co/t/apm-agent-attach-standalone-jar-i-am-new-elastic-apm/268049 "2021-03-25T10:07:15Z")
HI , I am new in elastic APM , need help to setup. I am trying to setup run Jar using "apm-agent-attach-1.21.0-standalone.jar', but i am not able to run it. Below is my command : java -jar '/opt/elastic/apm/apm-agent… --- ## [ECS fields not applied from index template](https://discuss.elastic.co/t/ecs-fields-not-applied-from-index-template/267056)
**Author:** [@jfs1](https://discuss.elastic.co/u/jfs1)\ **Replies:** 6\ **Last updated:** [March 25, 2021, 10:01am UTC](https://discuss.elastic.co/t/ecs-fields-not-applied-from-index-template/267056 "2021-03-25T10:01:02Z")
I'm trying to reformat my index template to migrate to ECS. I think I'm missing something because the field format for the multi-level keys is not taken into account. My index template looks like this : { "te… --- ## [Recommendation to use search after instead of scrolling](https://discuss.elastic.co/t/recommendation-to-use-search-after-instead-of-scrolling/268293)
**Author:** [@prelator](https://discuss.elastic.co/u/prelator)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 9:58am UTC](https://discuss.elastic.co/t/recommendation-to-use-search-after-instead-of-scrolling/268293 "2021-03-25T09:58:20Z")
Hello everybody If you want to read an index completely, you can read in the documentation that the search after function should be used from 10,000 documents (instead of scroll). We have now tested this and unfortunat… --- ## [BulkProcessor using BulkRequest with wait\_for](https://discuss.elastic.co/t/bulkprocessor-using-bulkrequest-with-wait-for/268308)
**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\ **Replies:** 2\ **Last updated:** [March 25, 2021, 9:49am UTC](https://discuss.elastic.co/t/bulkprocessor-using-bulkrequest-with-wait-for/268308 "2021-03-25T09:49:24Z")
Hello, We are trying to set a "wait\_for" refresh policy for every bulk request we are performing. It seems the only way is setting this policy on the 'beforeBulk' method on the bulk listener in this way: public void be… --- ## [Elastic cannot restore incremental snapshot in new cluster](https://discuss.elastic.co/t/elastic-cannot-restore-incremental-snapshot-in-new-cluster/268052)
**Author:** [@Adrian\_Birladeanu](https://discuss.elastic.co/u/Adrian_Birladeanu)\ **Replies:** 14\ **Last updated:** [March 25, 2021, 9:41am UTC](https://discuss.elastic.co/t/elastic-cannot-restore-incremental-snapshot-in-new-cluster/268052 "2021-03-25T09:41:27Z")
Hello. I have created an s3 repository and created a full snapshot and several incremental snapshots (though the data didn't change since the full snapshot was taken. I'm still working on the development infrastructure).… --- ## [Hourly rate pricing](https://discuss.elastic.co/t/hourly-rate-pricing/268231)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 5\ **Last updated:** [March 25, 2021, 9:15am UTC](https://discuss.elastic.co/t/hourly-rate-pricing/268231 "2021-03-25T09:15:39Z")
Hi, I've created a new account in Elastic Cloud, with a trial period. Out of curiosity I wanted to check the "Billing" section and I noticed a strange cost. $ 0.2714 of "hourly rate" for "Cloud Standard Data High I… --- ## [Elastic snapshot repository - hidden .snapshot/ directory](https://discuss.elastic.co/t/elastic-snapshot-repository-hidden-snapshot-directory/268306)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 2\ **Last updated:** [March 25, 2021, 9:09am UTC](https://discuss.elastic.co/t/elastic-snapshot-repository-hidden-snapshot-directory/268306 "2021-03-25T09:09:46Z")
Hi, I recently set up a snapshot repository. After a couple of hesitations and tests, I adopted a final setting. And ran the first snaphots after defining my policy. Now, I am facing a disk space issue. I noticed a … --- ## [Fleet setup - cannot enable kibana security](https://discuss.elastic.co/t/fleet-setup-cannot-enable-kibana-security/267117)
**Author:** [@bleed2002](https://discuss.elastic.co/u/bleed2002)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 9:08am UTC](https://discuss.elastic.co/t/fleet-setup-cannot-enable-kibana-security/267117 "2021-03-25T09:08:42Z")
Hi there, I want to try out central management for Elastic Agents, but i cannot get "Kibana security" enabled, although I'm sure it is configured correctly. I'm running the stack on docker (19.03.12), ELK\_VERSION is 7.… --- ## [Server](https://discuss.elastic.co/t/server/268274)
**Author:** [@amazonas\_ecommerce](https://discuss.elastic.co/u/amazonas_ecommerce)\ **Replies:** 2\ **Last updated:** [March 25, 2021, 8:39am UTC](https://discuss.elastic.co/t/server/268274 "2021-03-25T08:39:48Z")
I installed Elasticsearch 7 on the ubunto AWS Lightsail. It's working perfectly on localhost. However, I have Magento2.4 on another EC2 AWS server, but I don't know how to use Elasticsearch on another server, I have alr… --- ## [Kibana Export and Import not working](https://discuss.elastic.co/t/kibana-export-and-import-not-working/268204)
**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 8:10am UTC](https://discuss.elastic.co/t/kibana-export-and-import-not-working/268204 "2021-03-25T08:10:16Z")
Hi guys, Exported some Kibana dashboards and vizualizations from one computer to another and I got the same error while importing the ndjson ==\> Sorry, there was an error The file could not be processed due to error:… --- ## [What is the correct way to specify mappings for "geo point" data type to index geo information documents in an elasticsearch index?](https://discuss.elastic.co/t/what-is-the-correct-way-to-specify-mappings-for-geo-point-data-type-to-index-geo-information-documents-in-an-elasticsearch-index/268200)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 6\ **Last updated:** [March 25, 2021, 8:08am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-specify-mappings-for-geo-point-data-type-to-index-geo-information-documents-in-an-elasticsearch-index/268200 "2021-03-25T08:08:52Z")
I have configured a logstash pipeline in which I have used filter "logstash-filter-geoip" for getting geo information about the IP Address.I have specified mapping before indexing documents into elasticsearch but it is s… [Previous page](https://discuss.elastic.co/latest.md?page=1764) [Next page](https://discuss.elastic.co/latest.md?page=1766)