# Latest **URL:** https://discuss.elastic.co/latest.md?page=794 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 795 --- ## [How to use custom plugin in RestHighLevelClient (migrating from TransportClient to RestHighLevelClient.)](https://discuss.elastic.co/t/how-to-use-custom-plugin-in-resthighlevelclient-migrating-from-transportclient-to-resthighlevelclient/324824)
**Author:** [@hr89](https://discuss.elastic.co/u/hr89)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 7:11pm UTC](https://discuss.elastic.co/t/how-to-use-custom-plugin-in-resthighlevelclient-migrating-from-transportclient-to-resthighlevelclient/324824 "2023-02-06T19:11:23Z")
Hello Experts! We are in a process of migrating from TransportClient (now, removed) to RestHighLevelClient. We use custom plugin for some functionalities. As per the TransportClient we are initializing it like below. … --- ## [Work with xml in logstash](https://discuss.elastic.co/t/work-with-xml-in-logstash/324784)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 7:05pm UTC](https://discuss.elastic.co/t/work-with-xml-in-logstash/324784 "2023-02-06T19:05:39Z")
Hi all, I have a xml data as below which is harvesting by filebeat and sending to logstash. \ \ \5\ \ \ \123\ \ … --- ## [I am trying to add special character in logstash config](https://discuss.elastic.co/t/i-am-trying-to-add-special-character-in-logstash-config/324785)
**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 6:02pm UTC](https://discuss.elastic.co/t/i-am-trying-to-add-special-character-in-logstash-config/324785 "2023-02-06T18:02:23Z")
Hi I am sharing log pattern in below. 2023-02-06T10:10:42.075890912Z stdout F 2023-02-06 10:10:42.075 \[DEBUG\] - {"logtype":"INFO","request":{"operation":"XXXXXX","trackingID":"abccc","usecase":"xyz"} I am trying to pu… --- ## [Grok fiels are removed by aggregate section](https://discuss.elastic.co/t/grok-fiels-are-removed-by-aggregate-section/324798)
**Author:** [@Miriam](https://discuss.elastic.co/u/Miriam)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 5:54pm UTC](https://discuss.elastic.co/t/grok-fiels-are-removed-by-aggregate-section/324798 "2023-02-06T17:54:09Z")
I have follwoing file structure: id, iduser,datetimInit, dateTimeends 0001 0001 2023-02-03 04:45:16.78 2023-02-03 04:46:16.78 0002 0001 2023-02-03 08:45:16.78 2023-02-03 08:46:16.78 0003 0002 2023-02-04 04:45:16.78 2023… --- ## [Heartbeat add fild Source IP](https://discuss.elastic.co/t/heartbeat-add-fild-source-ip/324667)
**Author:** [@brunopsitech](https://discuss.elastic.co/u/brunopsitech)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 5:50pm UTC](https://discuss.elastic.co/t/heartbeat-add-fild-source-ip/324667 "2023-02-06T17:50:22Z")
Would it be possible to add in the options of the monitors an output parameter for a certain IP when performing the ICMP test? It would be used in firewall environments that have 2 or more WANs, so it could be tested whi… --- ## [Query\_shard\_exception](https://discuss.elastic.co/t/query-shard-exception/324756)
**Author:** [@Tussingh](https://discuss.elastic.co/u/Tussingh)\ **Replies:** 7\ **Last updated:** [February 6, 2023, 5:35pm UTC](https://discuss.elastic.co/t/query-shard-exception/324756 "2023-02-06T17:35:28Z")
I am getting below error when I am trying to query :slight\_smile : { "error": { "root\_cause": \[ { "type": "query\_shard\_exception", "reason": "failed to create query: \[nested\] failed to find nested object under path… --- ## [Winlogbeat - Crash 7.17.8](https://discuss.elastic.co/t/winlogbeat-crash-7-17-8/324816)
**Author:** [@novaksam](https://discuss.elastic.co/u/novaksam)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 5:14pm UTC](https://discuss.elastic.co/t/winlogbeat-crash-7-17-8/324816 "2023-02-06T17:14:23Z")
I've been having issues with Winlogbeat for a while now, but I figured I'd finally get someone to look at it. The last working version of Winlogbeat I've used that hasn't shown this issue is 7.17.3, but I wasn't able to … --- ## [Logstash slow processing of events](https://discuss.elastic.co/t/logstash-slow-processing-of-events/324392)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 11\ **Last updated:** [February 6, 2023, 5:02pm UTC](https://discuss.elastic.co/t/logstash-slow-processing-of-events/324392 "2023-02-06T17:02:58Z")
Hello, I'm trying to process events from logstash and I'm facing issue of slow processing of events.There are around 100k records.In logstash.yml I've enabled log.level debug. So far I can observe in 2 hours around 110… --- ## [Geographic Coordinates and Java API Client in 8.6](https://discuss.elastic.co/t/geographic-coordinates-and-java-api-client-in-8-6/324613)
**Author:** [@BenjaminD](https://discuss.elastic.co/u/BenjaminD)\ **Replies:** 12\ **Last updated:** [February 6, 2023, 4:24pm UTC](https://discuss.elastic.co/t/geographic-coordinates-and-java-api-client-in-8-6/324613 "2023-02-06T16:24:51Z")
Hello. I'm trying to create documents from a Java app. Those documents includes geographic coordinates (lat and lon in decimal form). Both Elasticsearch and the java client are in 8.6.0. In the beginning, no index exi… --- ## [How to work Agent policy witn APM Integration](https://discuss.elastic.co/t/how-to-work-agent-policy-witn-apm-integration/321997)
**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\ **Replies:** 16\ **Last updated:** [February 6, 2023, 4:05pm UTC](https://discuss.elastic.co/t/how-to-work-agent-policy-witn-apm-integration/321997 "2023-02-06T16:05:15Z")
Hello friends, I'm a bit confused, I have 2 agent policies and 2 APM integrations, the first agent policy is by default and this one has 2 integrations "Elastic APM" and "Fleet-server" and another policy that I created w… --- ## [Filebeat interface name](https://discuss.elastic.co/t/filebeat-interface-name/324812)
**Author:** [@teplyukdimka](https://discuss.elastic.co/u/teplyukdimka)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 3:58pm UTC](https://discuss.elastic.co/t/filebeat-interface-name/324812 "2023-02-06T15:58:17Z")
Доброго времени суток. Подскажите, пожалуйста, я собираю netflow с помощью filebeat. Есть поля ''' "egress\_interface" : 199, "ingress\_interface" : 277, ''' Через SNMP я узнал, какие сетевые интерфейсы соответствую… --- ## [Kibana sorting in asc/desc order in Discover not working](https://discuss.elastic.co/t/kibana-sorting-in-asc-desc-order-in-discover-not-working/324582)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 3:26pm UTC](https://discuss.elastic.co/t/kibana-sorting-in-asc-desc-order-in-discover-not-working/324582 "2023-02-06T15:26:22Z")
Hello, In Discover mode I am not able to sort the duration field in ascending order. It continues to show in descending order. Please guide. We are using 7.6.2 stack Thanks --- ## [How to use conflict.proceed and retry on conflict in elastic search .net](https://discuss.elastic.co/t/how-to-use-conflict-proceed-and-retry-on-conflict-in-elastic-search-net/324806)
**Author:** [@Arvind\_Sharma](https://discuss.elastic.co/u/Arvind_Sharma)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 3:23pm UTC](https://discuss.elastic.co/t/how-to-use-conflict-proceed-and-retry-on-conflict-in-elastic-search-net/324806 "2023-02-06T15:23:59Z")
Can anyone help me to pass conflict = proceed and retry on conflict params in Bulk and Delete methods of elastic search.net. --- ## [How to read my spring-boot application logs from APM logs menu?](https://discuss.elastic.co/t/how-to-read-my-spring-boot-application-logs-from-apm-logs-menu/324635)
**Author:** [@vincentLG](https://discuss.elastic.co/u/vincentLG)\ **Replies:** 7\ **Last updated:** [February 6, 2023, 3:23pm UTC](https://discuss.elastic.co/t/how-to-read-my-spring-boot-application-logs-from-apm-logs-menu/324635 "2023-02-06T15:23:10Z")
Hello, I have a spring-boot application running into a docker container. I have set up Filebeat, and I can read my dockerized spring-boot application logs from Kibana Stream logs menu: I have set up an APM server en… --- ## [Convert string field to geo\_point field for map visualisation](https://discuss.elastic.co/t/convert-string-field-to-geo-point-field-for-map-visualisation/324397)
**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\ **Replies:** 4\ **Last updated:** [February 6, 2023, 2:42pm UTC](https://discuss.elastic.co/t/convert-string-field-to-geo-point-field-for-map-visualisation/324397 "2023-02-06T14:42:59Z")
Hello, We collect in our logs, among other things, geo-coordinates and their accuracy in 2 "string" fields. Currently there are over 3,200,000 logs since the beginning of 2021. Now we want to display these coordinates o… --- ## [PodSecurityPolicy issue with ECK Operator 2.6.1](https://discuss.elastic.co/t/podsecuritypolicy-issue-with-eck-operator-2-6-1/324794)
**Author:** [@sebastianboelling](https://discuss.elastic.co/u/sebastianboelling)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 1:58pm UTC](https://discuss.elastic.co/t/podsecuritypolicy-issue-with-eck-operator-2-6-1/324794 "2023-02-06T13:58:47Z")
Hi, I am trying to deploy ECK Operator 2.6.1 on K8s based on that example: Deploy ECK in your Kubernetes cluster | Elastic Cloud on Kubernetes \[2.6\] | Elastic I used an local stored operator.yaml kubectl apply -f oper… --- ## [BERTopic en ElasticSearch](https://discuss.elastic.co/t/bertopic-en-elasticsearch/324790)
**Author:** [@alvaro\_ing](https://discuss.elastic.co/u/alvaro_ing)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 12:17pm UTC](https://discuss.elastic.co/t/bertopic-en-elasticsearch/324790 "2023-02-06T12:17:16Z")
Buenas, Me gustaría poder importar un modelo entrenado con BERTopic dentro de Elasticsearch. Como es de la familia de los BERT entiendo que deberia poder importarse pero no se como una vez tengo el modelo entrenado pued… --- ## [24 Java files, ElasticAPM Java agent takes more than 6 seconds to attach](https://discuss.elastic.co/t/24-java-files-elasticapm-java-agent-takes-more-than-6-seconds-to-attach/324771)
**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 12:07pm UTC](https://discuss.elastic.co/t/24-java-files-elasticapm-java-agent-takes-more-than-6-seconds-to-attach/324771 "2023-02-06T12:07:30Z")
Hello APM Java Gurus APM Server version: 7.17.6 / 7.17.8 APM Agent language and version: 1.33.0 / 1.34.1 Is there anything special in your setup? Are you using a load balancer in front of the APM Servers?\* It is r… --- ## [How to sum the values in the column (bytes) and convert it GB?](https://discuss.elastic.co/t/how-to-sum-the-values-in-the-column-bytes-and-convert-it-gb/324563)
**Author:** [@maskrider1111](https://discuss.elastic.co/u/maskrider1111)\ **Replies:** 3\ **Last updated:** [February 6, 2023, 11:19am UTC](https://discuss.elastic.co/t/how-to-sum-the-values-in-the-column-bytes-and-convert-it-gb/324563 "2023-02-06T11:19:12Z")
Hey Folks, I'm struggling to sum the value in record (bytes) and visualize it in table. Any idea how would i achieve the SUM and converted to GB? --- ## [While Exporting Data from Kibana into CSV file, variables are getting exported as "Part of"](https://discuss.elastic.co/t/while-exporting-data-from-kibana-into-csv-file-variables-are-getting-exported-as-part-of/324772)
**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\ **Replies:** 4\ **Last updated:** [February 6, 2023, 11:18am UTC](https://discuss.elastic.co/t/while-exporting-data-from-kibana-into-csv-file-variables-are-getting-exported-as-part-of/324772 "2023-02-06T11:18:20Z")
While Exporting Data from Kibana into CSV file, variables are getting exported as Part of Variable. For e.g. in below screenshot, "RRC Success" is one of the variable created and available as a complete value However… --- ## [Enable Cross Cluster Search vs Monitoring](https://discuss.elastic.co/t/enable-cross-cluster-search-vs-monitoring/324749)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 11:16am UTC](https://discuss.elastic.co/t/enable-cross-cluster-search-vs-monitoring/324749 "2023-02-06T11:16:24Z")
Just installed a ES cluster 8.6.1 and a Kibana 8.6.1, trying to enable cluster monitoring, but attempting to access monitoring app from kibana, it just tells me that my cluster has monitoring.ui.ccs.enabled=true. Dunno h… --- ## [Unable to initialize Fleet](https://discuss.elastic.co/t/unable-to-initialize-fleet/324643)
**Author:** [@beth](https://discuss.elastic.co/u/beth)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 10:52am UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet/324643 "2023-02-06T10:52:25Z")
Hi all, I am getting this error: unable to initialize Fleet search\_phase\_execution\_exception: \[no\_shard\_available\_action\_exception\] Reason: null Deployment Version 8.2.2 Someone please help? --- ## [Elasticsearch boolean term query latency increases with zero match terms](https://discuss.elastic.co/t/elasticsearch-boolean-term-query-latency-increases-with-zero-match-terms/324619)
**Author:** [@vikcher123](https://discuss.elastic.co/u/vikcher123)\ **Replies:** 3\ **Last updated:** [February 6, 2023, 10:41am UTC](https://discuss.elastic.co/t/elasticsearch-boolean-term-query-latency-increases-with-zero-match-terms/324619 "2023-02-06T10:41:56Z")
I'm observing some interesting behavior with boolean term queries on Elasticsearch that I'd like to understand further. Each document in the index has several terms under the section ev\_tags. I'm issuing queries like b… --- ## [New Java API updateRequest as String](https://discuss.elastic.co/t/new-java-api-updaterequest-as-string/324783)
**Author:** [@schmermeister](https://discuss.elastic.co/u/schmermeister)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 10:38am UTC](https://discuss.elastic.co/t/new-java-api-updaterequest-as-string/324783 "2023-02-06T10:38:10Z")
Is there a way with the new Java API to update a document as JSON-String? Problem is, i have a Object which i want to update and this contains null value which must be serialized. By default jackson ignores null value t… --- ## [Monitoring several url and setting schedule](https://discuss.elastic.co/t/monitoring-several-url-and-setting-schedule/324104)
**Author:** [@ppic](https://discuss.elastic.co/u/ppic)\ **Replies:** 3\ **Last updated:** [February 6, 2023, 10:30am UTC](https://discuss.elastic.co/t/monitoring-several-url-and-setting-schedule/324104 "2023-02-06T10:30:06Z")
Hello, I use heartbeat module to monitor http responses, with Elastic v7.17.6. I have to monitor several url. Do I have to use this syntax : heartbeat.monitors: - type: http urls: \["http://url1", "http://url2", "ht… --- ## [Macos install elastic agent 8.6.1 unhealthy](https://discuss.elastic.co/t/macos-install-elastic-agent-8-6-1-unhealthy/324782)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 10:10am UTC](https://discuss.elastic.co/t/macos-install-elastic-agent-8-6-1-unhealthy/324782 "2023-02-06T10:10:44Z")
I'm installing elastic agent 8.6.1 and the backend says unhealthy，What can be done about it? Checking the status shows the following error： elastic-agent-8.6.1-darwin-x86\_64 % sudo /Library/Elastic/Agent/elastic-age… --- ## [Logstash and delete of gz files](https://discuss.elastic.co/t/logstash-and-delete-of-gz-files/324514)
**Author:** [@Rhh](https://discuss.elastic.co/u/Rhh)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 10:07am UTC](https://discuss.elastic.co/t/logstash-and-delete-of-gz-files/324514 "2023-02-06T10:07:58Z")
Hi I have the following my conf file ... input { file { path =\> "C:/TDS.Extra/ConsoleApp13/ConsoleApp13/bin/Debug/test.gz" sincedb\_path =\> "nul" mode =\> "read" file\_completed\_action =\> "delete" codec =\> "json" } … --- ## [【Macos】elastic agent 8.5.2 and 8.5.3 install unhealthy](https://discuss.elastic.co/t/macos-elastic-agent-8-5-2-and-8-5-3-install-unhealthy/324596)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 10:02am UTC](https://discuss.elastic.co/t/macos-elastic-agent-8-5-2-and-8-5-3-install-unhealthy/324596 "2023-02-06T10:02:11Z")
hello, I am trying to install elastic agent 8.5.2 and 8.5.3 in macos and I get the following error, what can I do to solve it? Status: FAILED Message: app endpoint-security--8.5.3-03e0f317: failed to start connection cr… --- ## [How to go from JSON-based aggregation to UI visualization?](https://discuss.elastic.co/t/how-to-go-from-json-based-aggregation-to-ui-visualization/324774)
**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 9:56am UTC](https://discuss.elastic.co/t/how-to-go-from-json-based-aggregation-to-ui-visualization/324774 "2023-02-06T09:56:08Z")
Hi, In the Kibana documentation about aggregations, there is only information about how to write a JSON query and get an aggregated result. However I cannot find any documentation on how to go from there to a UI visual… --- ## [APM with container not working](https://discuss.elastic.co/t/apm-with-container-not-working/324419)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 1\ **Last updated:** [February 6, 2023, 9:34am UTC](https://discuss.elastic.co/t/apm-with-container-not-working/324419 "2023-02-06T09:34:22Z")
Hello Team, I am trying to enable elastic APM & RUM for Kubernetes containerized application. but not finding any clue how do i enable them below is the yaml file which we deploy using kubectl apply command, is there … [Previous page](https://discuss.elastic.co/latest.md?page=793) [Next page](https://discuss.elastic.co/latest.md?page=795)