# Latest **URL:** https://discuss.elastic.co/latest.md?page=611 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 612 --- ## [Hi Team, Do we have any radio button option in Kibana](https://discuss.elastic.co/t/hi-team-do-we-have-any-radio-button-option-in-kibana/336670)
**Author:** [@Abj\_Ins](https://discuss.elastic.co/u/Abj_Ins)\ **Replies:** 1\ **Last updated:** [July 11, 2023, 7:58pm UTC](https://discuss.elastic.co/t/hi-team-do-we-have-any-radio-button-option-in-kibana/336670 "2023-07-11T19:58:46Z")
Do we have any radio button option in Kibana. --- ## [Elastic Certified Observaibility Trainning Course - Lab 8.2 & 8.3](https://discuss.elastic.co/t/elastic-certified-observaibility-trainning-course-lab-8-2-8-3/337334)
**Author:** [@Sara\_YB](https://discuss.elastic.co/u/Sara_YB)\ **Replies:** 5\ **Last updated:** [July 11, 2023, 6:55pm UTC](https://discuss.elastic.co/t/elastic-certified-observaibility-trainning-course-lab-8-2-8-3/337334 "2023-07-11T18:55:28Z")
Course: \ Elastic Certified Observaibility Trainning Course Version: \ 7.9 Question: \ I have a question about stack monitoring… --- ## [Elastic Certified Observaibility Trainning Course - Lab 7.3](https://discuss.elastic.co/t/elastic-certified-observaibility-trainning-course-lab-7-3/337228)
**Author:** [@Sara\_YB](https://discuss.elastic.co/u/Sara_YB)\ **Replies:** 5\ **Last updated:** [July 11, 2023, 6:52pm UTC](https://discuss.elastic.co/t/elastic-certified-observaibility-trainning-course-lab-7-3/337228 "2023-07-11T18:52:17Z")
Course: \ Elastic Certified Observaibility Trainning Course Version: \ 7.9 Question: \ I am trying to create a snapshot as per … --- ## [ILM With Index Sorting](https://discuss.elastic.co/t/ilm-with-index-sorting/338140)
**Author:** [@Ofir\_Sudai](https://discuss.elastic.co/u/Ofir_Sudai)\ **Replies:** 0\ **Last updated:** [July 11, 2023, 4:42pm UTC](https://discuss.elastic.co/t/ilm-with-index-sorting/338140 "2023-07-11T16:42:29Z")
Hi, We have an index the represents a feed of nft related activities (listing, bid, minted, transfer, sold, etc). The index is used to return realtime feed for users in our system so latency is a priority. The index is… --- ## [Stuck "Cancelled Tasks" In ElasticSearch 8.6.2 causing Cluster failure](https://discuss.elastic.co/t/stuck-cancelled-tasks-in-elasticsearch-8-6-2-causing-cluster-failure/337490)
**Author:** [@Thomas\_Kuisel](https://discuss.elastic.co/u/Thomas_Kuisel)\ **Replies:** 18\ **Last updated:** [July 11, 2023, 4:27pm UTC](https://discuss.elastic.co/t/stuck-cancelled-tasks-in-elasticsearch-8-6-2-causing-cluster-failure/337490 "2023-07-11T16:27:41Z")
Hi - We are using Elasticsearch 8.6.2 running on Azure AKS and noticed some serious issues lately. As of last week the week of Jun30 2023, we started noticing huge unresolved search transport queues in our cluster. The… --- ## [What if difference between setting node.roles: \["data\_hot"\] vs node.attr.box\_type: hot?](https://discuss.elastic.co/t/what-if-difference-between-setting-node-roles-data-hot-vs-node-attr-box-type-hot/337766)
**Author:** [@kuldeep\_gupta](https://discuss.elastic.co/u/kuldeep_gupta)\ **Replies:** 3\ **Last updated:** [July 11, 2023, 4:27pm UTC](https://discuss.elastic.co/t/what-if-difference-between-setting-node-roles-data-hot-vs-node-attr-box-type-hot/337766 "2023-07-11T16:27:15Z")
What is the difference between node.roles:\["data\_hot"\] vs node.attr.box\_type: hot. --- ## [Invalid FieldReference: \`\_Domain\_Labels\[0\]\_ULabel\`](https://discuss.elastic.co/t/invalid-fieldreference-domain-labels-0-ulabel/337016)
**Author:** [@tcapp24](https://discuss.elastic.co/u/tcapp24)\ **Replies:** 5\ **Last updated:** [July 11, 2023, 3:50pm UTC](https://discuss.elastic.co/t/invalid-fieldreference-domain-labels-0-ulabel/337016 "2023-07-11T15:50:13Z")
Logstash version - 7.17.8 Currently we are seeing invalid FieldReference errors on our Logstash nodes dealing with \_Domain\_Labels\[0\]\_ULabel onf.d/mulesoft/get\_cloudhub\_app\_logs.conf"\], :thread=\>"#\… --- ## [Metricbeat and Heartbeat 8.x custom index Name should pickup from template ,but creates always bedefault index name](https://discuss.elastic.co/t/metricbeat-and-heartbeat-8-x-custom-index-name-should-pickup-from-template-but-creates-always-bedefault-index-name/337557)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 22\ **Last updated:** [July 11, 2023, 3:40pm UTC](https://discuss.elastic.co/t/metricbeat-and-heartbeat-8-x-custom-index-name-should-pickup-from-template-but-creates-always-bedefault-index-name/337557 "2023-07-11T15:40:37Z")
Hello All, I'm migrating metricbeat and heartbeat from 7.9.1 to 8.7.1 version and current challenge is I'm unbale to create custom index name defined in my index template and metricbeat.yml. I'm not sure how come every… --- ## [Starting Elasticsearch failed](https://discuss.elastic.co/t/starting-elasticsearch-failed/337616)
**Author:** [@stephane\_chan](https://discuss.elastic.co/u/stephane_chan)\ **Replies:** 4\ **Last updated:** [July 11, 2023, 2:43pm UTC](https://discuss.elastic.co/t/starting-elasticsearch-failed/337616 "2023-07-11T14:43:07Z")
Hi, Why does the elasticsearch.service status always give me this every time I start/restart my server? . ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled;… --- ## [Using the transform feature for summarizing APM indexes](https://discuss.elastic.co/t/using-the-transform-feature-for-summarizing-apm-indexes/338118)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 0\ **Last updated:** [July 11, 2023, 2:27pm UTC](https://discuss.elastic.co/t/using-the-transform-feature-for-summarizing-apm-indexes/338118 "2023-07-11T14:27:23Z")
I have elasticsearch version 7.17.1 and our applications are integrated with APM server to send metrics. The problem that we have is it generates heavy indexes, and we want to have old data as well. I thought maybe I ca… --- ## [What mapping or structure should I use for an index that will have very varying fields per document?](https://discuss.elastic.co/t/what-mapping-or-structure-should-i-use-for-an-index-that-will-have-very-varying-fields-per-document/338114)
**Author:** [@Bart\_de\_Man](https://discuss.elastic.co/u/Bart_de_Man)\ **Replies:** 0\ **Last updated:** [July 11, 2023, 2:03pm UTC](https://discuss.elastic.co/t/what-mapping-or-structure-should-i-use-for-an-index-that-will-have-very-varying-fields-per-document/338114 "2023-07-11T14:03:04Z")
Hi there! As per title; i'd like to have an index which will have very different fields per document. How should I approach this task? What does the mapping look like, if any. Short example of what i'd like to acchieve… --- ## [FluentBit not able to connect to ElasticSearch even with username password given in config](https://discuss.elastic.co/t/fluentbit-not-able-to-connect-to-elasticsearch-even-with-username-password-given-in-config/338104)
**Author:** [@Ganesh\_Kannan\_K\_S1](https://discuss.elastic.co/u/Ganesh_Kannan_K_S1)\ **Replies:** 1\ **Last updated:** [July 11, 2023, 1:58pm UTC](https://discuss.elastic.co/t/fluentbit-not-able-to-connect-to-elasticsearch-even-with-username-password-given-in-config/338104 "2023-07-11T13:58:05Z")
I am using an AWS EC2 server for running a single-node Elasticsearch instance. I have kibana installed in the same server. I am able to configure 'FluentD' to this node with security enabled, but not 'Fluent-bit'. I am … --- ## [Rename json field from the mongo log with filebeat processor](https://discuss.elastic.co/t/rename-json-field-from-the-mongo-log-with-filebeat-processor/338111)
**Author:** [@slashlinux](https://discuss.elastic.co/u/slashlinux)\ **Replies:** 0\ **Last updated:** [July 11, 2023, 1:52pm UTC](https://discuss.elastic.co/t/rename-json-field-from-the-mongo-log-with-filebeat-processor/338111 "2023-07-11T13:52:29Z")
Hi guys, I'm trying to use the official website documentation for filebeat renaming field from the json but doesn't work so I ve decided to post here what i ve done and learn more about my mistake. I want to rename for … --- ## [Documentation on pushing a custom agent to Elastic packages artifactory](https://discuss.elastic.co/t/documentation-on-pushing-a-custom-agent-to-elastic-packages-artifactory/338000)
**Author:** [@hari\_ibm](https://discuss.elastic.co/u/hari_ibm)\ **Replies:** 6\ **Last updated:** [July 11, 2023, 1:45pm UTC](https://discuss.elastic.co/t/documentation-on-pushing-a-custom-agent-to-elastic-packages-artifactory/338000 "2023-07-11T13:45:21Z")
I would like to develop an custom agent and push to our own Elastic packages artifactory --- ## [Generating a PDF from a dashboard v7.9](https://discuss.elastic.co/t/generating-a-pdf-from-a-dashboard-v7-9/338094)
**Author:** [@mepec20921](https://discuss.elastic.co/u/mepec20921)\ **Replies:** 1\ **Last updated:** [July 11, 2023, 1:40pm UTC](https://discuss.elastic.co/t/generating-a-pdf-from-a-dashboard-v7-9/338094 "2023-07-11T13:40:30Z")
Using Elastic v7.9, we have some dashboards set up which we would like to generate a report from every day, and save it to a shared area in Windows. I can see when I am on my dashboard, if I click share and then wither … --- ## [Suggestion based on a real use case:](https://discuss.elastic.co/t/suggestion-based-on-a-real-use-case/338109)
**Author:** [@btsinfo](https://discuss.elastic.co/u/btsinfo)\ **Replies:** 0\ **Last updated:** [July 11, 2023, 1:29pm UTC](https://discuss.elastic.co/t/suggestion-based-on-a-real-use-case/338109 "2023-07-11T13:29:52Z")
We have observed that the APM application uses the datastream "metrics-apm.\*" to display metrics with transaction names in the application. However, one of the strengths of Elastic is the ability to customize transaction… --- ## [Winlogbeat logs sent through logstash aren't parsed correctly](https://discuss.elastic.co/t/winlogbeat-logs-sent-through-logstash-arent-parsed-correctly/338076)
**Author:** [@dosterberg](https://discuss.elastic.co/u/dosterberg)\ **Replies:** 3\ **Last updated:** [July 11, 2023, 12:51pm UTC](https://discuss.elastic.co/t/winlogbeat-logs-sent-through-logstash-arent-parsed-correctly/338076 "2023-07-11T12:51:00Z")
Hi everyone! I'm new to ELK and have been enjoying very much working with it so far. I am currently evaluating ELK with Elastic Security as a SIEM in a test environment. I have tried sending both data from filebeat with … --- ## [Disable old alerts](https://discuss.elastic.co/t/disable-old-alerts/337894)
**Author:** [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\ **Replies:** 2\ **Last updated:** [July 11, 2023, 12:29pm UTC](https://discuss.elastic.co/t/disable-old-alerts/337894 "2023-07-11T12:29:29Z")
Hello, I have a problem in Kibana Stack Monitoring section. I see historical alerts here. Can it be set to show me, for example, only alerts that are 3 days old? How could I set it up? You can see in the picture that… --- ## [How to archive snapshots](https://discuss.elastic.co/t/how-to-archive-snapshots/337959)
**Author:** [@jaykb77](https://discuss.elastic.co/u/jaykb77)\ **Replies:** 5\ **Last updated:** [July 11, 2023, 12:27pm UTC](https://discuss.elastic.co/t/how-to-archive-snapshots/337959 "2023-07-11T12:27:59Z")
Hi all, We have a requirement to archive snapshots for long term retention. However since the snapshot directories are incremental, we do not want to simply zip it and send to archive storage. Is there a recommended alt… --- ## [Elastic cloud and Elastic Package Registry](https://discuss.elastic.co/t/elastic-cloud-and-elastic-package-registry/336272)
**Author:** [@adrien\_moreau](https://discuss.elastic.co/u/adrien_moreau)\ **Replies:** 3\ **Last updated:** [July 11, 2023, 12:16pm UTC](https://discuss.elastic.co/t/elastic-cloud-and-elastic-package-registry/336272 "2023-07-11T12:16:43Z")
I have developed a custom integration for Elastic but I don't want to publish this integration to the public EPR repo. I am running Elastic on Elastic Cloud. I would like to know if it is possible to push my custom inte… --- ## [Transferring a writable index from one cluster to another](https://discuss.elastic.co/t/transferring-a-writable-index-from-one-cluster-to-another/337934)
**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\ **Replies:** 15\ **Last updated:** [July 11, 2023, 11:35am UTC](https://discuss.elastic.co/t/transferring-a-writable-index-from-one-cluster-to-another/337934 "2023-07-11T11:35:10Z")
I am trying to migrate writable indices from one cluster to another. I wanted to know what could possibly the best approach for doing this. Currently I am doing it as follows : Phase1 -\> Before taking snapshot of init… --- ## [\[ECONNREFUSED\] connect ECONNREFUSED .. Using elaticsearch connector to connect to theHive fails](https://discuss.elastic.co/t/econnrefused-connect-econnrefused-using-elaticsearch-connector-to-connect-to-thehive-fails/338096)
**Author:** [@Cone](https://discuss.elastic.co/u/Cone)\ **Replies:** 0\ **Last updated:** [July 11, 2023, 11:10am UTC](https://discuss.elastic.co/t/econnrefused-connect-econnrefused-using-elaticsearch-connector-to-connect-to-thehive-fails/338096 "2023-07-11T11:10:43Z")
When I try to connect the Elasticsearch to TheHive via webhooks i get this error shown in the image . Why is taht happenning, The Hive is up and running on that ip address and port? Thanx in advance My webhook is … --- ## [Trino connector : Elasticsearch exception \[type=search\_phase\_execution\_exception, reason=all shards failed](https://discuss.elastic.co/t/trino-connector-elasticsearch-exception-type-search-phase-execution-exception-reason-all-shards-failed/338092)
**Author:** [@subash\_k](https://discuss.elastic.co/u/subash_k)\ **Replies:** 0\ **Last updated:** [July 11, 2023, 10:39am UTC](https://discuss.elastic.co/t/trino-connector-elasticsearch-exception-type-search-phase-execution-exception-reason-all-shards-failed/338092 "2023-07-11T10:39:09Z")
Pushing logs via logstash and while retrieving data from two tables query failing with below error Using trino query engine connector.name=elasticsearch and also tried with below config but no luck elasticsearch.da… --- ## [Winlogbeat run as service issues](https://discuss.elastic.co/t/winlogbeat-run-as-service-issues/338029)
**Author:** [@Emorta](https://discuss.elastic.co/u/Emorta)\ **Replies:** 4\ **Last updated:** [July 11, 2023, 10:18am UTC](https://discuss.elastic.co/t/winlogbeat-run-as-service-issues/338029 "2023-07-11T10:18:53Z")
Hey there, I'm facing a challenge while trying to centralize logging for three servers in Elastic Cloud, and I could really use some help from the community. Here's the issue I'm encountering: When I try to install it … --- ## [Error : environment is not locked in 3 node Kubernetes Elastic Deployment](https://discuss.elastic.co/t/error-environment-is-not-locked-in-3-node-kubernetes-elastic-deployment/338085)
**Author:** [@brusque.sowers](https://discuss.elastic.co/u/brusque.sowers)\ **Replies:** 1\ **Last updated:** [July 11, 2023, 9:51am UTC](https://discuss.elastic.co/t/error-environment-is-not-locked-in-3-node-kubernetes-elastic-deployment/338085 "2023-07-11T09:51:10Z")
We have a 3 node Elastic deployment on Kubernetes. We encountered the following error in elastic Logs : elasticsearch.node.id":"LMHIgOg6RrWkCRWFY5QyZQ","elasticsearch.node.name":"elasticsearch-0.es-service","elasticsea… --- ## [Adjusting timezone in Fields in index pattern](https://discuss.elastic.co/t/adjusting-timezone-in-fields-in-index-pattern/337995)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [July 11, 2023, 9:07am UTC](https://discuss.elastic.co/t/adjusting-timezone-in-fields-in-index-pattern/337995 "2023-07-11T09:07:07Z")
Hi , I'm using Kibana 7.10 One of the time fields i'm using is showing a +5.30 hrs time. i.e showing a future time. I think its a timezone error & I want to clear this error in Kibana index pattern field settings. So … --- ## [Sysdig integration with ELK](https://discuss.elastic.co/t/sysdig-integration-with-elk/338057)
**Author:** [@pennywise01](https://discuss.elastic.co/u/pennywise01)\ **Replies:** 2\ **Last updated:** [July 11, 2023, 6:47am UTC](https://discuss.elastic.co/t/sysdig-integration-with-elk/338057 "2023-07-11T06:47:35Z")
Hi all, i am trying to intergrate sysdig with ELK stack. I am following a tutorial from a blog. I already configured logstash to put the log into elasticsearch but i got an error. \> Blockquote \[ERROR\] 2023-07-11 05:45:… --- ## [Why isElectionQuorum need lastCommitedConfiguration and lastAcceptedConfiguration all pass?](https://discuss.elastic.co/t/why-iselectionquorum-need-lastcommitedconfiguration-and-lastacceptedconfiguration-all-pass/338048)
**Author:** [@cm\_z](https://discuss.elastic.co/u/cm_z)\ **Replies:** 1\ **Last updated:** [July 11, 2023, 6:43am UTC](https://discuss.elastic.co/t/why-iselectionquorum-need-lastcommitedconfiguration-and-lastacceptedconfiguration-all-pass/338048 "2023-07-11T06:43:01Z")
Why does Elasticsearch need to check if both lastAcceptedConfiguration and lastCommitedConfiguration are over the majority threshold when deciding whether to start an election? What is the reasoning behind this, and are … --- ## [Implementing machine learning API in Rust using elasticsearch8.4.0-alpha.1 library](https://discuss.elastic.co/t/implementing-machine-learning-api-in-rust-using-elasticsearch8-4-0-alpha-1-library/337770)
**Author:** [@aniket\_mandhare](https://discuss.elastic.co/u/aniket_mandhare)\ **Replies:** 2\ **Last updated:** [July 11, 2023, 6:11am UTC](https://discuss.elastic.co/t/implementing-machine-learning-api-in-rust-using-elasticsearch8-4-0-alpha-1-library/337770 "2023-07-11T06:11:23Z")
Hey folks, I am trying to implement machine learning API in Rust programming language using elasticsearch8.4.0-alpha.1 library and now I am stuck. I want to use ML model which is already imported in Elasticsearch which c… --- ## [Can I install both agent winlogbeat and exabeam on same server?](https://discuss.elastic.co/t/can-i-install-both-agent-winlogbeat-and-exabeam-on-same-server/338054)
**Author:** [@witsarut](https://discuss.elastic.co/u/witsarut)\ **Replies:** 0\ **Last updated:** [July 11, 2023, 4:35am UTC](https://discuss.elastic.co/t/can-i-install-both-agent-winlogbeat-and-exabeam-on-same-server/338054 "2023-07-11T04:35:36Z")
Hello Everyone, Can I do install both agent winlogbeat and exabeam on same server ? If can do that, It's have a effected to server i.e. high CPU consume. Thanks, [Previous page](https://discuss.elastic.co/latest.md?page=610) [Next page](https://discuss.elastic.co/latest.md?page=612)