# Latest **URL:** https://discuss.elastic.co/latest.md?page=665 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 666 --- ## [Elastic-agent: output by integration and not by policy](https://discuss.elastic.co/t/elastic-agent-output-by-integration-and-not-by-policy/334252)
**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\ **Replies:** 2\ **Last updated:** [May 26, 2023, 9:13am UTC](https://discuss.elastic.co/t/elastic-agent-output-by-integration-and-not-by-policy/334252 "2023-05-26T09:13:16Z")
Hi, i have an instance of elastic-agent on a server where i have multiple integrations. for most of them I need the Elasticsearch output. But, I also have some log files on that server which I want to send to Logstash f… --- ## [.net agent with masstransit rabbitmq transactions](https://discuss.elastic.co/t/net-agent-with-masstransit-rabbitmq-transactions/332260)
**Author:** [@Joao\_Cardoso](https://discuss.elastic.co/u/Joao_Cardoso)\ **Replies:** 2\ **Last updated:** [May 26, 2023, 9:02am UTC](https://discuss.elastic.co/t/net-agent-with-masstransit-rabbitmq-transactions/332260 "2023-05-26T09:02:23Z")
Hello, Im using .net 6 with MassTransit and RabbitMQ and i'm trying to figure out how can i have the APM transactions of my messages being consumed. I saw the .net agent has integration with rabbitMQ nowdays but i wasn'… --- ## [Can I take backup of indices from one cluster and restore it to another cluster](https://discuss.elastic.co/t/can-i-take-backup-of-indices-from-one-cluster-and-restore-it-to-another-cluster/334387)
**Author:** [@kunalhiremath](https://discuss.elastic.co/u/kunalhiremath)\ **Replies:** 14\ **Last updated:** [May 26, 2023, 8:55am UTC](https://discuss.elastic.co/t/can-i-take-backup-of-indices-from-one-cluster-and-restore-it-to-another-cluster/334387 "2023-05-26T08:55:37Z")
Can I take backup of indices from one cluster and restore it to another cluster by simply copying the snapshot/backup repository folder and sending it to another cluster and from there I will perform restore operation is… --- ## [Logs of java APM agent in the Host](https://discuss.elastic.co/t/logs-of-java-apm-agent-in-the-host/334403)
**Author:** [@Anand\_Hitachi](https://discuss.elastic.co/u/Anand_Hitachi)\ **Replies:** 3\ **Last updated:** [May 26, 2023, 8:36am UTC](https://discuss.elastic.co/t/logs-of-java-apm-agent-in-the-host/334403 "2023-05-26T08:36:16Z")
I'm not getting the logs of java APM agent which is running on Linux host. It looks like agent is connected to the apm server as , We are able to see some metrics and details in kibana UI but couldn't see the agent logs. … --- ## [LVM / Redhat / ECE](https://discuss.elastic.co/t/lvm-redhat-ece/334404)
**Author:** [@steman-provinzial](https://discuss.elastic.co/u/steman-provinzial)\ **Replies:** 0\ **Last updated:** [May 26, 2023, 7:51am UTC](https://discuss.elastic.co/t/lvm-redhat-ece/334404 "2023-05-26T07:51:21Z")
Hi there, I have a question regarding this statement that can be found in the ECE documentation: Red Hat Enterprise Linux (RHEL) and CentOS | Elastic Cloud Enterprise Reference \[3.5\] | Elastic You Elastic guys write: … --- ## [High iops from filebeat](https://discuss.elastic.co/t/high-iops-from-filebeat/334399)
**Author:** [@dimovvasiliy](https://discuss.elastic.co/u/dimovvasiliy)\ **Replies:** 0\ **Last updated:** [May 26, 2023, 6:37am UTC](https://discuss.elastic.co/t/high-iops-from-filebeat/334399 "2023-05-26T06:37:55Z")
Hi there! I faced with a filebeat high io consumption problem. Sometimes some of my filebeat daemons start to make abnormal number of io requests (thousands per seond). I checked it and found that filebeat make a checkp… --- ## [Taking backup on one system and restoring it in another system](https://discuss.elastic.co/t/taking-backup-on-one-system-and-restoring-it-in-another-system/334392)
**Author:** [@kunalhiremath](https://discuss.elastic.co/u/kunalhiremath)\ **Replies:** 2\ **Last updated:** [May 26, 2023, 6:22am UTC](https://discuss.elastic.co/t/taking-backup-on-one-system-and-restoring-it-in-another-system/334392 "2023-05-26T06:22:41Z")
I have Elasticsearch running on one system where I take backup of indices regularly into a snapshot, but these indices(snapshot) I want to restore to different system. How can I proceed. I am unable to find clear answer… --- ## [Kibana Error - Error while updating search session conflict](https://discuss.elastic.co/t/kibana-error-error-while-updating-search-session-conflict/334396)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 0\ **Last updated:** [May 26, 2023, 6:11am UTC](https://discuss.elastic.co/t/kibana-error-error-while-updating-search-session-conflict/334396 "2023-05-26T06:11:31Z")
Kibana Version : 8.5.3 Hello The following error is intermittently logged in Kibana's logs Is there a lack of authority? Or Is it an error that can be ignored? If you can give me any information on the cause or how … --- ## [How to check if Application run as administrator](https://discuss.elastic.co/t/how-to-check-if-application-run-as-administrator/333514)
**Author:** [@target\_test](https://discuss.elastic.co/u/target_test)\ **Replies:** 5\ **Last updated:** [May 26, 2023, 1:47am UTC](https://discuss.elastic.co/t/how-to-check-if-application-run-as-administrator/333514 "2023-05-26T01:47:14Z")
Hello i have a question Is there any rules to detect if any application run as administrator or if a user run the application as admin in windows machine ? --- ## [I have problem installing elastic agent](https://discuss.elastic.co/t/i-have-problem-installing-elastic-agent/334375)
**Author:** [@daniellopez](https://discuss.elastic.co/u/daniellopez)\ **Replies:** 0\ **Last updated:** [May 25, 2023, 10:55pm UTC](https://discuss.elastic.co/t/i-have-problem-installing-elastic-agent/334375 "2023-05-25T22:55:37Z")
Actually I am having a problem to install elastic agent. When I run the command that kibana gives me I get the following error 2023-05-25T10:46:57.852-0500 INFO cmd/enroll\_cmd.go:701 Fleet Server - Error - coul… --- ## [Kibana change the "now value" or current time](https://discuss.elastic.co/t/kibana-change-the-now-value-or-current-time/334203)
**Author:** [@JackieLaFrite](https://discuss.elastic.co/u/JackieLaFrite)\ **Replies:** 2\ **Last updated:** [May 25, 2023, 9:49pm UTC](https://discuss.elastic.co/t/kibana-change-the-now-value-or-current-time/334203 "2023-05-25T21:49:22Z")
Kibana "now" value is incorrect and i don't want it to modify the value of my time field. If it's currently 12h05, logstash send the logs from 12h05 but Kibana with this settings : Display the logs from 10h and add 2… --- ## [Where to find complete documentation for CRDs?](https://discuss.elastic.co/t/where-to-find-complete-documentation-for-crds/334367)
**Author:** [@nahh](https://discuss.elastic.co/u/nahh)\ **Replies:** 0\ **Last updated:** [May 25, 2023, 7:25pm UTC](https://discuss.elastic.co/t/where-to-find-complete-documentation-for-crds/334367 "2023-05-25T19:25:40Z")
I'm looking for the complete documentation for the ECK operator CRDs. For example, I'm looking into tweaking the config for Kibana pods so they may run on my cluster. I see that the CRD defines spec.podTemplate, but expl… --- ## [Tail\_files option for filebeat not working as expected](https://discuss.elastic.co/t/tail-files-option-for-filebeat-not-working-as-expected/334359)
**Author:** [@Puneet\_Singh](https://discuss.elastic.co/u/Puneet_Singh)\ **Replies:** 1\ **Last updated:** [May 25, 2023, 6:53pm UTC](https://discuss.elastic.co/t/tail-files-option-for-filebeat-not-working-as-expected/334359 "2023-05-25T18:53:50Z")
I have downloaded filebeat 8.8.0 today and it seems that the tail\_files option is not working as expected. When i run filebeat, the filebeat seems to be scanning entire file and scanning everything, instead of shipping … --- ## [ELK version 8.7.0 with mysql using docker compose](https://discuss.elastic.co/t/elk-version-8-7-0-with-mysql-using-docker-compose/333871)
**Author:** [@Fatiha](https://discuss.elastic.co/u/Fatiha)\ **Replies:** 13\ **Last updated:** [May 25, 2023, 6:36pm UTC](https://discuss.elastic.co/t/elk-version-8-7-0-with-mysql-using-docker-compose/333871 "2023-05-25T18:36:55Z")
hi every one I want to run elastic and kibana and logstash I use docker compose this is the docker compose file yml : version: '3' services: mysql: container\_name: mysql hostname: mysql image: 'mysql' … --- ## [Scale out logstash server and configure the output in the Fleet UI](https://discuss.elastic.co/t/scale-out-logstash-server-and-configure-the-output-in-the-fleet-ui/333383)
**Author:** [@A113n](https://discuss.elastic.co/u/A113n)\ **Replies:** 1\ **Last updated:** [May 25, 2023, 5:29pm UTC](https://discuss.elastic.co/t/scale-out-logstash-server-and-configure-the-output-in-the-fleet-ui/333383 "2023-05-25T17:29:31Z")
Hi I have 1 logstash server configured and 1 fleet server. I now want to scale out logstash by 1 more server. The Elastic Agent have client side support for loadbalancing between multiple logstash servers: output.log… --- ## [Filter with winlogbeat](https://discuss.elastic.co/t/filter-with-winlogbeat/324621)
**Author:** [@BeyondRAM](https://discuss.elastic.co/u/BeyondRAM)\ **Replies:** 13\ **Last updated:** [May 25, 2023, 5:10pm UTC](https://discuss.elastic.co/t/filter-with-winlogbeat/324621 "2023-05-25T17:10:40Z")
Hello I got winlogbeat on my file server which brings up specifics ressources from an file audit, 4663, 4670 and 4659 events, well file activy actually. I got an issue, I want to create a dashboard with the files the mo… --- ## [Searching using query string with variable clauses](https://discuss.elastic.co/t/searching-using-query-string-with-variable-clauses/333756)
**Author:** [@orlenkoda5](https://discuss.elastic.co/u/orlenkoda5)\ **Replies:** 7\ **Last updated:** [May 25, 2023, 4:48pm UTC](https://discuss.elastic.co/t/searching-using-query-string-with-variable-clauses/333756 "2023-05-25T16:48:06Z")
Hi everyone. I'm trying to make a template wich I can use to search through several fields by one word (using query string). But now I need to add a clause which will get a variable in a query (date). How can I combine … --- ## [SnapShot Backup and Restore](https://discuss.elastic.co/t/snapshot-backup-and-restore/333943)
**Author:** [@Manjunath\_VS](https://discuss.elastic.co/u/Manjunath_VS)\ **Replies:** 1\ **Last updated:** [May 25, 2023, 4:28pm UTC](https://discuss.elastic.co/t/snapshot-backup-and-restore/333943 "2023-05-25T16:28:53Z")
Hi Team, I have deployed Elasticsearch cluster along with Kibana using Bitnami Elasticsearch I am new to Elasticsearch and Kibana We wanted to take a backup from a Kubernetes cluster and restore it to another Kubern… --- ## [Error starting Logstash pipeline after upgrading to Java 17](https://discuss.elastic.co/t/error-starting-logstash-pipeline-after-upgrading-to-java-17/334346)
**Author:** [@Nikhil\_Khurana](https://discuss.elastic.co/u/Nikhil_Khurana)\ **Replies:** 1\ **Last updated:** [May 25, 2023, 4:19pm UTC](https://discuss.elastic.co/t/error-starting-logstash-pipeline-after-upgrading-to-java-17/334346 "2023-05-25T16:19:21Z")
I have bundled Logstash within my Java application and launch it using JRuby. It worked fine until upgrading to Java 17. After upgrading, the pipeline fails to start with following exception : java.lang.IllegalAcce… --- ## [How to list non empty field names based on search criteria on elasticsearch](https://discuss.elastic.co/t/how-to-list-non-empty-field-names-based-on-search-criteria-on-elasticsearch/334349)
**Author:** [@ehmd96](https://discuss.elastic.co/u/ehmd96)\ **Replies:** 1\ **Last updated:** [May 25, 2023, 4:07pm UTC](https://discuss.elastic.co/t/how-to-list-non-empty-field-names-based-on-search-criteria-on-elasticsearch/334349 "2023-05-25T16:07:29Z")
we are encountering an issue on elasticsearch trying to display fields based on certain search criteria. We have an index with a "payload" field which has multiple properties What we are trying to do is to request t… --- ## [\[Logstash\] How to drop message if field is not a number](https://discuss.elastic.co/t/logstash-how-to-drop-message-if-field-is-not-a-number/333324)
**Author:** [@catalin.bulancea](https://discuss.elastic.co/u/catalin.bulancea)\ **Replies:** 4\ **Last updated:** [May 25, 2023, 3:59pm UTC](https://discuss.elastic.co/t/logstash-how-to-drop-message-if-field-is-not-a-number/333324 "2023-05-25T15:59:49Z")
Hi Logstash gurus, I need to drop the messages that contain specific fields that are not a number. The filter I have is: filter { csv { separator =\> "," skip\_header =\> "true" columns =\> \["process-n… --- ## [Set Filter with + on Last Value Aggregation](https://discuss.elastic.co/t/set-filter-with-on-last-value-aggregation/334348)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 1\ **Last updated:** [May 25, 2023, 3:36pm UTC](https://discuss.elastic.co/t/set-filter-with-on-last-value-aggregation/334348 "2023-05-25T15:36:02Z")
Hello, if you click the + in a lens table entry from a last value aggregation column of a text field the resulting filter is I assume that happens for all aggregated columns as the expectation is that an aggregate… --- ## [Documents being deleted after BulkRequest indexing](https://discuss.elastic.co/t/documents-being-deleted-after-bulkrequest-indexing/333674)
**Author:** [@vivss](https://discuss.elastic.co/u/vivss)\ **Replies:** 12\ **Last updated:** [May 25, 2023, 3:06pm UTC](https://discuss.elastic.co/t/documents-being-deleted-after-bulkrequest-indexing/333674 "2023-05-25T15:06:35Z")
Hi all, We are using Elasticsearch 7.17.7 and indexing documents via BulkRequest in Java API Client, and we noticed that many documents are being deleted after indexing. We retrieve the records from a Postgresql databas… --- ## [What does "managed namespaces" mean exactly?](https://discuss.elastic.co/t/what-does-managed-namespaces-mean-exactly/334054)
**Author:** [@nahh](https://discuss.elastic.co/u/nahh)\ **Replies:** 2\ **Last updated:** [May 25, 2023, 2:55pm UTC](https://discuss.elastic.co/t/what-does-managed-namespaces-mean-exactly/334054 "2023-05-25T14:55:59Z")
I'm looking in to installing ECK in my Kubernetes clusters and I'm stuck on one issue: in the helm chart for ECK we're asked to specify a list of "managed namespaces". What does that mean? Specifically, what is being man… --- ## [Can I have separate apm index log for each of my application](https://discuss.elastic.co/t/can-i-have-separate-apm-index-log-for-each-of-my-application/330692)
**Author:** [@JasonREC](https://discuss.elastic.co/u/JasonREC)\ **Replies:** 15\ **Last updated:** [May 25, 2023, 2:35pm UTC](https://discuss.elastic.co/t/can-i-have-separate-apm-index-log-for-each-of-my-application/330692 "2023-05-25T14:35:19Z")
I currently have 2 nodejs and 1 php app, and all of them are using the same apm server url and token to set up the apm agent. In Kibana discover, I found out there is a index pattern called "traces-apm\*,apm-,logs-apm,ap… --- ## [Syncing facet states and URL for range facet](https://discuss.elastic.co/t/syncing-facet-states-and-url-for-range-facet/334257)
**Author:** [@John\_Brandenburg](https://discuss.elastic.co/u/John_Brandenburg)\ **Replies:** 2\ **Last updated:** [May 25, 2023, 2:42pm UTC](https://discuss.elastic.co/t/syncing-facet-states-and-url-for-range-facet/334257 "2023-05-25T14:42:40Z")
I have created a custom range facet, and I am having trouble right now syncing the URL parameters, and the state. It seems to work when on the page, and the user selects a single value in this facet. But if they select m… --- ## [Remove ConfigMaps when uninstalling ECK](https://discuss.elastic.co/t/remove-configmaps-when-uninstalling-eck/332958)
**Author:** [@cturbe](https://discuss.elastic.co/u/cturbe)\ **Replies:** 2\ **Last updated:** [May 25, 2023, 2:14pm UTC](https://discuss.elastic.co/t/remove-configmaps-when-uninstalling-eck/332958 "2023-05-25T14:14:50Z")
Hello, Is it possible to delete the 3 remaining configMaps when uninstalling ECK via Helm? $helm uninstall eck-operator All resources are deleted except these 3 ConfigMap: kubectl get configmap elastic-licensing … --- ## [APM library hangs](https://discuss.elastic.co/t/apm-library-hangs/334333)
**Author:** [@Ola\_Bjuremo](https://discuss.elastic.co/u/Ola_Bjuremo)\ **Replies:** 0\ **Last updated:** [May 25, 2023, 1:36pm UTC](https://discuss.elastic.co/t/apm-library-hangs/334333 "2023-05-25T13:36:04Z")
We are using Elastic APM 1.19.0 in our .Net Framework asp.net web. Recently we have experienced problems with the APM library hanging with 100% CPU usage. All the threads on the web server are stuck on the same place, … --- ## [API Key delete by mistake in stack Management](https://discuss.elastic.co/t/api-key-delete-by-mistake-in-stack-management/334304)
**Author:** [@maniacci](https://discuss.elastic.co/u/maniacci)\ **Replies:** 3\ **Last updated:** [May 25, 2023, 1:04pm UTC](https://discuss.elastic.co/t/api-key-delete-by-mistake-in-stack-management/334304 "2023-05-25T13:04:11Z")
Hi , I have by mistake deleted API keys (while doing some manipulations following a test to add a Linux server on the SIEM). I would like to know if it is possible to restore his keys? I have Veeam backups . I would … --- ## [Elasticsearch 7.17.10 indexing bottleneck on i3.2xlarge and d3.2xlarge nodes in EKS](https://discuss.elastic.co/t/elasticsearch-7-17-10-indexing-bottleneck-on-i3-2xlarge-and-d3-2xlarge-nodes-in-eks/333503)
**Author:** [@Chris\_Austin](https://discuss.elastic.co/u/Chris_Austin)\ **Replies:** 52\ **Last updated:** [May 25, 2023, 1:03pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-10-indexing-bottleneck-on-i3-2xlarge-and-d3-2xlarge-nodes-in-eks/333503 "2023-05-25T13:03:25Z")
My 7.17.10 cluster is hosted in AWS EKS and is managed by ECK. It appears to top out at around 90k documents indexed per second (including replicas) per second and I haven't been able to identify the bottleneck. Adding m… [Previous page](https://discuss.elastic.co/latest.md?page=664) [Next page](https://discuss.elastic.co/latest.md?page=666)