# Latest **URL:** https://discuss.elastic.co/latest.md?page=690 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 691 --- ## [How to change the path of Jruby jar files in Logstash](https://discuss.elastic.co/t/how-to-change-the-path-of-jruby-jar-files-in-logstash/330909)
**Author:** [@sriteja\_chebrolu](https://discuss.elastic.co/u/sriteja_chebrolu)\ **Replies:** 1\ **Last updated:** [May 4, 2023, 6:30am UTC](https://discuss.elastic.co/t/how-to-change-the-path-of-jruby-jar-files-in-logstash/330909 "2023-05-04T06:30:32Z")
Large number of Jruby jar files are generating in Windows temp folder that filling up the C drive space. I want to change the path of those Jruby jar files. Can anyone please help me on this. --- ## [Kibana dashboard is healthy , even filebeat service is stopped](https://discuss.elastic.co/t/kibana-dashboard-is-healthy-even-filebeat-service-is-stopped/332228)
**Author:** [@SalmaShaik](https://discuss.elastic.co/u/SalmaShaik)\ **Replies:** 4\ **Last updated:** [May 4, 2023, 5:53am UTC](https://discuss.elastic.co/t/kibana-dashboard-is-healthy-even-filebeat-service-is-stopped/332228 "2023-05-04T05:53:33Z")
Hi, Filebeat service is not running. But the kibana Dasboard shows as healthy in Elasticsearch Vm's and their respective nodes. Can anyone help me. --- ## [Logstash not able to pull multiple beats data (ELK 8.6)](https://discuss.elastic.co/t/logstash-not-able-to-pull-multiple-beats-data-elk-8-6/332424)
**Author:** [@Kvoyce2023](https://discuss.elastic.co/u/Kvoyce2023)\ **Replies:** 4\ **Last updated:** [May 4, 2023, 3:54am UTC](https://discuss.elastic.co/t/logstash-not-able-to-pull-multiple-beats-data-elk-8-6/332424 "2023-05-04T03:54:44Z")
Hello all: I am trying to get my filebeat and metricbeat data from another server into logstash . I am using below command line at the logstash bin folder. And I got separate conf file for filebeat and metricbeat on my … --- ## [Crear regla para monitorear un servicio](https://discuss.elastic.co/t/crear-regla-para-monitorear-un-servicio/332473)
**Author:** [@LeonardoCord](https://discuss.elastic.co/u/LeonardoCord)\ **Replies:** 0\ **Last updated:** [May 3, 2023, 8:37pm UTC](https://discuss.elastic.co/t/crear-regla-para-monitorear-un-servicio/332473 "2023-05-03T20:37:53Z")
Hola a todos Requiero configurar una regla para monitorear un servicio. Por lo general para el monitoreo de si un host esta arriba utilizo monitor.ip : "10.110.110.10" and monitor.status : "down" pero ahora necesito ver… --- ## [Elasticsearch cluster on k8s Stuck](https://discuss.elastic.co/t/elasticsearch-cluster-on-k8s-stuck/332427)
**Author:** [@tauqeerahmad104](https://discuss.elastic.co/u/tauqeerahmad104)\ **Replies:** 0\ **Last updated:** [May 3, 2023, 1:29pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-on-k8s-stuck/332427 "2023-05-03T13:29:54Z")
I am trying to deploy the Elasticsearch cluster from this link. In the first step when I deployed the cluster it was successfully created. The problem is even after an hour I am still not able to see the health nodes and… --- ## [Elastic 8.7.0 Error in Discover tab](https://discuss.elastic.co/t/elastic-8-7-0-error-in-discover-tab/332329)
**Author:** [@afmiller1](https://discuss.elastic.co/u/afmiller1)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 10:00pm UTC](https://discuss.elastic.co/t/elastic-8-7-0-error-in-discover-tab/332329 "2023-05-03T22:00:03Z")
Have a single node cluster up and trying to use metricbeats locally and running into this error. I haven't come across it before. What is actually broke? This is when I go into the discover tab under metricbeat and try t… --- ## [Adding extra/context to every log entry](https://discuss.elastic.co/t/adding-extra-context-to-every-log-entry/332434)
**Author:** [@Legion112](https://discuss.elastic.co/u/Legion112)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 9:01pm UTC](https://discuss.elastic.co/t/adding-extra-context-to-every-log-entry/332434 "2023-05-03T21:01:54Z")
I would like to add to Monolog extra current transaction and trace id How would I do that? Which particular field should I use to make Elasticsearch understand that particular log belongs to trace/transaction? Are the… --- ## [How to copy data from old cluster to new cluster](https://discuss.elastic.co/t/how-to-copy-data-from-old-cluster-to-new-cluster/332470)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 8:31pm UTC](https://discuss.elastic.co/t/how-to-copy-data-from-old-cluster-to-new-cluster/332470 "2023-05-03T20:31:17Z")
Hi I am trying to copy all the index (150) from old cluster to new cluster. Trying reindex api is throwing error, and snapshot and restore is not an option. any other ways to migrate, so that all mapping and data sett… --- ## [Encoded data in message field using filebeat filestream input](https://discuss.elastic.co/t/encoded-data-in-message-field-using-filebeat-filestream-input/330907)
**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 8:16pm UTC](https://discuss.elastic.co/t/encoded-data-in-message-field-using-filebeat-filestream-input/330907 "2023-05-03T20:16:35Z")
I'm using filebeat to read in a multiline log. I'm able to get the data into elasticsearch with the multiline event stored into the message field. Log Sample: Date: Wed Apr 19 09:57:45 2023 Computer Name: SystemX User… --- ## [How to create a user with only devtools read only access](https://discuss.elastic.co/t/how-to-create-a-user-with-only-devtools-read-only-access/329842)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 8:23pm UTC](https://discuss.elastic.co/t/how-to-create-a-user-with-only-devtools-read-only-access/329842 "2023-05-03T20:23:11Z")
how can i create a user , when they login directly view devtools and only have read only(GET) access. what are the steps for this, as I can not see any info related to this. Any help on this would be very appreciated --- ## [Probleme avec la taille des cercles dans Map](https://discuss.elastic.co/t/probleme-avec-la-taille-des-cercles-dans-map/332471)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 0\ **Last updated:** [May 3, 2023, 7:54pm UTC](https://discuss.elastic.co/t/probleme-avec-la-taille-des-cercles-dans-map/332471 "2023-05-03T19:54:51Z")
Bonjour, Je ne comprends pas comment Kibana gere la taille des cercles proportionnels dans Map. Par exemple je souhaite cartographier des donnees avec un cercle porportionnel lié a une variable (fatalities) donc je sai… --- ## [How to reduce Metricbeat index file size?](https://discuss.elastic.co/t/how-to-reduce-metricbeat-index-file-size/330630)
**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\ **Replies:** 5\ **Last updated:** [May 3, 2023, 7:26pm UTC](https://discuss.elastic.co/t/how-to-reduce-metricbeat-index-file-size/330630 "2023-05-03T19:26:38Z")
Hi, How can I reduce the metricbeat index file size as it is taking more storage for per day logs, please help me. Thanks & regards, Nitin Bisht --- ## [How to access to "observability-annotations" index in elastic apm](https://discuss.elastic.co/t/how-to-access-to-observability-annotations-index-in-elastic-apm/332276)
**Author:** [@Jeremy\_Cohen\_Solal](https://discuss.elastic.co/u/Jeremy_Cohen_Solal)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 6:35pm UTC](https://discuss.elastic.co/t/how-to-access-to-observability-annotations-index-in-elastic-apm/332276 "2023-05-03T18:35:24Z")
Hello is there a way to access to the index "observability-annotations" in kibana (and outside) ? Actually this index is nowhere to be seen (even with full admin permissions). The index is described in kibana document… --- ## [Création watche calcule ratio de deux metric](https://discuss.elastic.co/t/creation-watche-calcule-ratio-de-deux-metric/332350)
**Author:** [@Youssef\_OPS](https://discuss.elastic.co/u/Youssef_OPS)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 4:38pm UTC](https://discuss.elastic.co/t/creation-watche-calcule-ratio-de-deux-metric/332350 "2023-05-03T16:38:03Z")
Bonjour à tous, Je suis entrain de crée une alerte ratio qui permets de calculer la ratio de deux métriques en effet il permet de chercher les deux phrase dans un délais de 1h Voici le code mais ca fonctionne pas : il… --- ## [Alert once if URL goes down or comes back up](https://discuss.elastic.co/t/alert-once-if-url-goes-down-or-comes-back-up/330510)
**Author:** [@nandhini\_r](https://discuss.elastic.co/u/nandhini_r)\ **Replies:** 4\ **Last updated:** [May 3, 2023, 3:43pm UTC](https://discuss.elastic.co/t/alert-once-if-url-goes-down-or-comes-back-up/330510 "2023-05-03T15:43:09Z")
Hi, I have setup heartbeat and monitoring URLs. I need help setting up when the URL goes down, I want to send only 1 email with the body of "URL goes down". If any of the URL comes back up, I want to send only 1 emai… --- ## [Filebeat JSON Parsing](https://discuss.elastic.co/t/filebeat-json-parsing/331023)
**Author:** [@Tussingh](https://discuss.elastic.co/u/Tussingh)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 2:43pm UTC](https://discuss.elastic.co/t/filebeat-json-parsing/331023 "2023-05-03T14:43:55Z")
I am trying to ingest below JSON to elastic through filebeat http json input plugin. \[ { "metricId": 185016812, "metricName": "BTM|Application Diagnostic Data|Base Page:20869077|Synthetic Visually Complete Time (ms)"… --- ## [Best practices for testing against clusters on ECE](https://discuss.elastic.co/t/best-practices-for-testing-against-clusters-on-ece/332321)
**Author:** [@jan.stap](https://discuss.elastic.co/u/jan.stap)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 2:40pm UTC](https://discuss.elastic.co/t/best-practices-for-testing-against-clusters-on-ece/332321 "2023-05-03T14:40:35Z")
Hello, We intend to test the ingest and query performance of clusters hosted on ECE by using Rally. So far, the elastic/logs track looks interesting. I studied this video and pdf on Rally testing pitfalls by the Rally a… --- ## [.Net Elastic Agent Tracing](https://discuss.elastic.co/t/net-elastic-agent-tracing/332444)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 0\ **Last updated:** [May 3, 2023, 2:39pm UTC](https://discuss.elastic.co/t/net-elastic-agent-tracing/332444 "2023-05-03T14:39:38Z")
Hi , I am trying to configure .Net agent and I have following doubts from the traces captured for my MVC application in .net core Async methods are not been traced by the agent. Due to this I am unable to get the end t… --- ## [Open Telemetry querying](https://discuss.elastic.co/t/open-telemetry-querying/332041)
**Author:** [@kpatter](https://discuss.elastic.co/u/kpatter)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 1:59pm UTC](https://discuss.elastic.co/t/open-telemetry-querying/332041 "2023-05-03T13:59:21Z")
Elastic search recommends against structuring data such that joins are needed for indexes, yet the OpenTelemetry data is put in multiple indexes. There's doesn't appear to be a way to configure the data to go to a singl… --- ## [Query on array fields with null value](https://discuss.elastic.co/t/query-on-array-fields-with-null-value/332426)
**Author:** [@dhggw](https://discuss.elastic.co/u/dhggw)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 1:54pm UTC](https://discuss.elastic.co/t/query-on-array-fields-with-null-value/332426 "2023-05-03T13:54:24Z")
Hello all, we have in our index fields with arrays, each containing only one element, which is NULL: "field": \[ null \] I would like to filter on just these records, however I can't find a query that will do this.… --- ## [How to add Azure Service Bus log to elastic](https://discuss.elastic.co/t/how-to-add-azure-service-bus-log-to-elastic/332431)
**Author:** [@abh-remitra](https://discuss.elastic.co/u/abh-remitra)\ **Replies:** 0\ **Last updated:** [May 3, 2023, 1:39pm UTC](https://discuss.elastic.co/t/how-to-add-azure-service-bus-log-to-elastic/332431 "2023-05-03T13:39:32Z")
We have ECE on-prem (8.5.2) and we have recently added some services running in Azure. Looking for recommendations / advice for the best way to collect and ship Azure Service Bus logs to our ES cluster. Thanks in advan… --- ## [How to add synonym with a forward shash? Error failed to build synonyms](https://discuss.elastic.co/t/how-to-add-synonym-with-a-forward-shash-error-failed-to-build-synonyms/330647)
**Author:** [@Eduard\_mart](https://discuss.elastic.co/u/Eduard_mart)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 1:33pm UTC](https://discuss.elastic.co/t/how-to-add-synonym-with-a-forward-shash-error-failed-to-build-synonyms/330647 "2023-05-03T13:33:03Z")
How to add synonym with a forward shash? Error failed to build synonyms. --- ## [Elastic DSL Query](https://discuss.elastic.co/t/elastic-dsl-query/330656)
**Author:** [@vrviji](https://discuss.elastic.co/u/vrviji)\ **Replies:** 5\ **Last updated:** [May 2, 2023, 8:45pm UTC](https://discuss.elastic.co/t/elastic-dsl-query/330656 "2023-05-02T20:45:41Z")
Hello All, I would like to do a self join in DSL. Is that possible in Elastic 7.17. Basically i want to search a index for a certain Error message and if the latest status of the order is completed i dont want to includ… --- ## [ElasticSearch 8.6 bat execution error](https://discuss.elastic.co/t/elasticsearch-8-6-bat-execution-error/332305)
**Author:** [@Kvoyce2023](https://discuss.elastic.co/u/Kvoyce2023)\ **Replies:** 5\ **Last updated:** [May 3, 2023, 12:34pm UTC](https://discuss.elastic.co/t/elasticsearch-8-6-bat-execution-error/332305 "2023-05-03T12:34:41Z")
Hi all: When I execute elasticsearch.bat from elastic\\bin folder I am getting below error of "Socket connection time out". I have added below elasticsearch.yml as well. Please advise. Thank you. \[2023-05-03T00:51:56,0… --- ## [Logstash file input plugin](https://discuss.elastic.co/t/logstash-file-input-plugin/332259)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 12:32pm UTC](https://discuss.elastic.co/t/logstash-file-input-plugin/332259 "2023-05-03T12:32:48Z")
Hi, I am trying to use logstash file input plugin. I want to pick files from multiple locations and send them to different indices. Here is my config nput { file { type =\> "TomEE-logs-passport" … --- ## [Log correlation with Log4j2 and AsyncLoggerContextSelector](https://discuss.elastic.co/t/log-correlation-with-log4j2-and-asyncloggercontextselector/330646)
**Author:** [@kelunik](https://discuss.elastic.co/u/kelunik)\ **Replies:** 5\ **Last updated:** [May 3, 2023, 12:31pm UTC](https://discuss.elastic.co/t/log-correlation-with-log4j2-and-asyncloggercontextselector/330646 "2023-05-03T12:31:57Z")
If I use async logging, the transaction.id and trace.id fields aren't set in the log messages. System.setProperty("log4j2.contextSelector", "org.apache.logging.log4j.core.async.AsyncLoggerContextSelector"); I'd like to… --- ## [Room for improvement for log\_sending=true](https://discuss.elastic.co/t/room-for-improvement-for-log-sending-true/330602)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 7\ **Last updated:** [May 3, 2023, 12:26pm UTC](https://discuss.elastic.co/t/room-for-improvement-for-log-sending-true/330602 "2023-05-03T12:26:38Z")
Kibana version: 8.7.0 Elasticsearch version: 8.7.0 APM Server version: 8.7.0 APM Agent language and version: 1.36.0 I just started using log\_sending=true in the Java agent on one of our Q-Systems. The logs are transf… --- ## [Question about agent detachment](https://discuss.elastic.co/t/question-about-agent-detachment/330650)
**Author:** [@dogourd](https://discuss.elastic.co/u/dogourd)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 12:25pm UTC](https://discuss.elastic.co/t/question-about-agent-detachment/330650 "2023-05-03T12:25:49Z")
I noticed there is a detach method in co.elastic.apm.agent.premain.AgentMain which seems to be used for detaching the agent, although the comment says it's only for demonstration purposes. I tried to use this method to … --- ## [Why is data from elasticsearch not being updated?](https://discuss.elastic.co/t/why-is-data-from-elasticsearch-not-being-updated/330810)
**Author:** [@edgarmat1964](https://discuss.elastic.co/u/edgarmat1964)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 11:50am UTC](https://discuss.elastic.co/t/why-is-data-from-elasticsearch-not-being-updated/330810 "2023-05-03T11:50:08Z")
LS, I have a "simple" vega script to extract data from elasticsearch to "visualize": { "$schema": "https://vega.github.io/schema/vega/v5.json", "width": 400, "height": 70, "padding": 5, "autosize": "none", "b… --- ## [Cross-cluster](https://discuss.elastic.co/t/cross-cluster/332253)
**Author:** [@elastic\_user4](https://discuss.elastic.co/u/elastic_user4)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 11:48am UTC](https://discuss.elastic.co/t/cross-cluster/332253 "2023-05-03T11:48:16Z")
I tried to do the first step in this documentation(Tutorial: Set up cross-cluster replication | Elasticsearch Guide \[8.7\] | Elastic) and I couldn't connect one cluster with another i have port 9300 open on both clusters. … [Previous page](https://discuss.elastic.co/latest.md?page=689) [Next page](https://discuss.elastic.co/latest.md?page=691)