# Latest **URL:** https://discuss.elastic.co/latest.md?page=808 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 809 --- ## [Pagerduty connector](https://discuss.elastic.co/t/pagerduty-connector/323244)
**Author:** [@AdityaKhajuria](https://discuss.elastic.co/u/AdityaKhajuria)\ **Replies:** 5\ **Last updated:** [January 25, 2023, 1:19pm UTC](https://discuss.elastic.co/t/pagerduty-connector/323244 "2023-01-25T13:19:57Z")
Rules & Connectors Hi team, im trying to integrate Pagerduty with Elasticsearch, so far i have created the Elastic-Alerts service in Pagerduty and have used all those credentials right here in Kibana connector, but when… --- ## [Path files Visualizations](https://discuss.elastic.co/t/path-files-visualizations/323899)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 4\ **Last updated:** [January 25, 2023, 12:58pm UTC](https://discuss.elastic.co/t/path-files-visualizations/323899 "2023-01-25T12:58:03Z")
Hello everyone, I Hobe ta all is very well, I have a Q regarding use path files to visualize them in Kibana. Is it possible to find a way to use Kibana search engine to find specific line in the set of files without s… --- ## [How to use the http.p12, http\_ca.crt and transport.p12 generated by elasticsearch when run as a single node](https://discuss.elastic.co/t/how-to-use-the-http-p12-http-ca-crt-and-transport-p12-generated-by-elasticsearch-when-run-as-a-single-node/323913)
**Author:** [@Raja\_Muneer](https://discuss.elastic.co/u/Raja_Muneer)\ **Replies:** 3\ **Last updated:** [January 25, 2023, 12:51pm UTC](https://discuss.elastic.co/t/how-to-use-the-http-p12-http-ca-crt-and-transport-p12-generated-by-elasticsearch-when-run-as-a-single-node/323913 "2023-01-25T12:51:25Z")
I am trying to enable HTTPS on my elk-stack. While I am able to do so using the following link. Configuring ssl,tls and https However, When we run elasticsearch as a single node it generates some default certificates w… --- ## [Alert from Kibana](https://discuss.elastic.co/t/alert-from-kibana/323912)
**Author:** [@aneeshks1982](https://discuss.elastic.co/u/aneeshks1982)\ **Replies:** 2\ **Last updated:** [January 25, 2023, 12:42pm UTC](https://discuss.elastic.co/t/alert-from-kibana/323912 "2023-01-25T12:42:39Z")
Hi, I'm looking for a procedure to set up alert in Kibana for a specific error message in the indices. --- ## [Error when using autodiscover + hints + templates with filebeat 8.6](https://discuss.elastic.co/t/error-when-using-autodiscover-hints-templates-with-filebeat-8-6/323527)
**Author:** [@Laffs2k5](https://discuss.elastic.co/u/Laffs2k5)\ **Replies:** 2\ **Last updated:** [January 25, 2023, 12:38pm UTC](https://discuss.elastic.co/t/error-when-using-autodiscover-hints-templates-with-filebeat-8-6/323527 "2023-01-25T12:38:11Z")
Hi, Thought I should check in with the community here before creating a github issue, just in case there's something I'm not understanding correctly; After upgrading our filebeat kubernetes daemonset from 7.17.8 to 8.6… --- ## [Elastic Transforms - continous mode is not detecting changes](https://discuss.elastic.co/t/elastic-transforms-continous-mode-is-not-detecting-changes/323895)
**Author:** [@catrexis](https://discuss.elastic.co/u/catrexis)\ **Replies:** 3\ **Last updated:** [January 25, 2023, 12:32pm UTC](https://discuss.elastic.co/t/elastic-transforms-continous-mode-is-not-detecting-changes/323895 "2023-01-25T12:32:07Z")
I have a problem with my index transformation and already tried so many different versions but nothing helped: My documents in the source index look like: { "content" : { "creationTime" : "2022-07-25 16:00:49 +02… --- ## [Logstashとfilebeatの役割](https://discuss.elastic.co/t/logstash-filebeat/323914)
**Author:** [@kapibara824](https://discuss.elastic.co/u/kapibara824)\ **Replies:** 0\ **Last updated:** [January 25, 2023, 11:49am UTC](https://discuss.elastic.co/t/logstash-filebeat/323914 "2023-01-25T11:49:29Z")
現在filebeatでログを読み込みlogstashに転送後処理をしてelasticsearchにoutputすると言った構成で運用しています。 深く考えずにエンドノードにfilebeatを配置しましたが、エンドノードにlogstashを置いてその場で解析しつつログ基盤のlogstashに転送するような構成でもやりたいことはできており、かつlogstashの負荷分散をできるので適しているような気がしています。 調べてみても基本的にエ… --- ## [Kubernetes.node.status.\* metrics not available for alerting](https://discuss.elastic.co/t/kubernetes-node-status-metrics-not-available-for-alerting/323901)
**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\ **Replies:** 2\ **Last updated:** [January 25, 2023, 11:43am UTC](https://discuss.elastic.co/t/kubernetes-node-status-metrics-not-available-for-alerting/323901 "2023-01-25T11:43:52Z")
Hello, i am using metricbeat in kubernetes with next config - module: kubernetes metricsets: - node - system - pod - container - volume period: 10s host: ${N… --- ## [How can I create custom tags from the data inside a log file using filebeat](https://discuss.elastic.co/t/how-can-i-create-custom-tags-from-the-data-inside-a-log-file-using-filebeat/323657)
**Author:** [@Raja\_Muneer](https://discuss.elastic.co/u/Raja_Muneer)\ **Replies:** 11\ **Last updated:** [January 25, 2023, 11:21am UTC](https://discuss.elastic.co/t/how-can-i-create-custom-tags-from-the-data-inside-a-log-file-using-filebeat/323657 "2023-01-25T11:21:20Z")
I am using elk stack for a month now. Lately, I have come across a situation where I need some help from the community to save me some time. I am actually running filebeat and elk stack in docker. I am sending logs from … --- ## ["Supportability Dashboards" for Elastic stack for cluster health etc](https://discuss.elastic.co/t/supportability-dashboards-for-elastic-stack-for-cluster-health-etc/323014)
**Author:** [@dave.richards](https://discuss.elastic.co/u/dave.richards)\ **Replies:** 2\ **Last updated:** [January 25, 2023, 10:41am UTC](https://discuss.elastic.co/t/supportability-dashboards-for-elastic-stack-for-cluster-health-etc/323014 "2023-01-25T10:41:43Z")
Hi - is anyone aware of any community developed or publicly available kibana dashboards created to observe the health of the elastic stack, including APM ? Ideally including the alerts seen in Stack Management, but exten… --- ## [Correct way to get Not Exists or Exists and empty fields Query for multiple level of nested properties](https://discuss.elastic.co/t/correct-way-to-get-not-exists-or-exists-and-empty-fields-query-for-multiple-level-of-nested-properties/323903)
**Author:** [@Denis\_Kostaev](https://discuss.elastic.co/u/Denis_Kostaev)\ **Replies:** 0\ **Last updated:** [January 25, 2023, 9:39am UTC](https://discuss.elastic.co/t/correct-way-to-get-not-exists-or-exists-and-empty-fields-query-for-multiple-level-of-nested-properties/323903 "2023-01-25T09:39:31Z")
Hello, I have a mapping with the multiple level of nested properties. I'm trying to get Not Exists (not mapped) fields on 3 lvl or Exists and empty (empty string or null values). "mappings": { "properties": { … --- ## [ES 8 Java client: BoolQuery.Builder no longer has hasClauses() method](https://discuss.elastic.co/t/es-8-java-client-boolquery-builder-no-longer-has-hasclauses-method/323894)
**Author:** [@yusufozcan](https://discuss.elastic.co/u/yusufozcan)\ **Replies:** 3\ **Last updated:** [January 25, 2023, 10:33am UTC](https://discuss.elastic.co/t/es-8-java-client-boolquery-builder-no-longer-has-hasclauses-method/323894 "2023-01-25T10:33:00Z")
Hello. We are upgrading our elastic java client from 6.8.10 to 8.1.3 and it seems BoolQuery.Builder doesn't have hasClauses() method anymore. Is there any workaround which provides the same functionality? Thanks in adv… --- ## [Make virtualization file beat aggregation](https://discuss.elastic.co/t/make-virtualization-file-beat-aggregation/323907)
**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\ **Replies:** 0\ **Last updated:** [January 25, 2023, 10:26am UTC](https://discuss.elastic.co/t/make-virtualization-file-beat-aggregation/323907 "2023-01-25T10:26:00Z")
"log.file.path": \[ "C:\\ProgramData\\UNO\\SES\\Logs\\user1\\101.log" 10 count "log.file.path": \[ "C:\\ProgramData\\UNO\\SES\\Logs\\user1\\102.log" 20 count "log.file.path": \[ "C:\\ProgramData\\UNO\\SES\\Logs\\user2\\101.log" … --- ## [Showing 'actual' & 'typical' values in ML anomaly detection alert](https://discuss.elastic.co/t/showing-actual-typical-values-in-ml-anomaly-detection-alert/322810)
**Author:** [@nospace](https://discuss.elastic.co/u/nospace)\ **Replies:** 2\ **Last updated:** [January 25, 2023, 9:56am UTC](https://discuss.elastic.co/t/showing-actual-typical-values-in-ml-anomaly-detection-alert/322810 "2023-01-25T09:56:58Z")
Hey folks, We're running a couple of ML jobs for anomaly detection with mail alerts. For faster detection of false alerts I would like to extend the alert with the values from 'actual' and 'typical'. The documentation … --- ## [Replacement of QueryBuilder(ES 5.6) in ES 8.5](https://discuss.elastic.co/t/replacement-of-querybuilder-es-5-6-in-es-8-5/323856)
**Author:** [@Harsh0145](https://discuss.elastic.co/u/Harsh0145)\ **Replies:** 3\ **Last updated:** [January 25, 2023, 9:49am UTC](https://discuss.elastic.co/t/replacement-of-querybuilder-es-5-6-in-es-8-5/323856 "2023-01-25T09:49:44Z")
Hi, We have been using the ES 5.6 cluster, but are now migrating to a new ES 8.5 cluster. The Data migration, and indexing queries are all sorted. However, earlier we used to use QueryBuilder in ES 5.6 java app and ther… --- ## [Apm java agent could not find or load main class](https://discuss.elastic.co/t/apm-java-agent-could-not-find-or-load-main-class/323484)
**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\ **Replies:** 5\ **Last updated:** [January 25, 2023, 9:45am UTC](https://discuss.elastic.co/t/apm-java-agent-could-not-find-or-load-main-class/323484 "2023-01-25T09:45:57Z")
hi, i am trying to mount an application in gke with java apm-agent, with the following dockerfile: FROM adoptopenjdk:11-jre-hotspot RUN export RUN apt-get -qq update \\ && apt-get install --no-install-recommends -y -… --- ## [Get List of top occurance for specific condition](https://discuss.elastic.co/t/get-list-of-top-occurance-for-specific-condition/323864)
**Author:** [@nada.nasser](https://discuss.elastic.co/u/nada.nasser)\ **Replies:** 1\ **Last updated:** [January 25, 2023, 9:37am UTC](https://discuss.elastic.co/t/get-list-of-top-occurance-for-specific-condition/323864 "2023-01-25T09:37:05Z")
I am having an index where data is logged with a success/fail flag for a specific item. I want to get a unique list of items who has fail and never a success. Usually a success is expected after fail from time perspecti… --- ## [Interrupted system call, INTERNAL\_SERVER\_ERROR during Elasticsearch snapshot](https://discuss.elastic.co/t/interrupted-system-call-internal-server-error-during-elasticsearch-snapshot/323900)
**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\ **Replies:** 0\ **Last updated:** [January 25, 2023, 9:30am UTC](https://discuss.elastic.co/t/interrupted-system-call-internal-server-error-during-elasticsearch-snapshot/323900 "2023-01-25T09:30:53Z")
Hi, I am using ES 7.8.0 version and sometimes my snapshot is failing with below errors. What could be the reason for this? "failures\\":\[{\\"index\\":\\"operation-2022.12.23\\",\\"index\_uuid\\":\\"operation-2022.12.23\\",\\"shar… --- ## [Kibana Lens Column Ordering](https://discuss.elastic.co/t/kibana-lens-column-ordering/323666)
**Author:** [@peter.branzi](https://discuss.elastic.co/u/peter.branzi)\ **Replies:** 1\ **Last updated:** [January 25, 2023, 9:08am UTC](https://discuss.elastic.co/t/kibana-lens-column-ordering/323666 "2023-01-25T09:08:48Z")
hi there I'm using Kibana 8.4.2 and was wondering if anyone knows of a way to reverse the ordering of the columns so that the most recents dates are in front ? Column is an aggregation of events by a timestamp T… --- ## [Create filed with type and format by api](https://discuss.elastic.co/t/create-filed-with-type-and-format-by-api/323853)
**Author:** [@Ased13](https://discuss.elastic.co/u/Ased13)\ **Replies:** 3\ **Last updated:** [January 25, 2023, 8:56am UTC](https://discuss.elastic.co/t/create-filed-with-type-and-format-by-api/323853 "2023-01-25T08:56:11Z")
hi can create a field with the following request? {"mappings": {"properties": {"address": {"type":"text","format":"url"} } } } If not,How can it be created by request with specifying the forma… --- ## [Filebeat settings](https://discuss.elastic.co/t/filebeat-settings/323845)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 2\ **Last updated:** [January 25, 2023, 8:37am UTC](https://discuss.elastic.co/t/filebeat-settings/323845 "2023-01-25T08:37:27Z")
Hello, I want to clarify if I understood the documentation correctly, bulk\_max\_size - filebeat transmits events (as I understand it, let's say a line in the log file) bundled, default 50, if I set 0, then queue comes i… --- ## [DEPLOY ELK STACK (with eck) using CLONED DISKS](https://discuss.elastic.co/t/deploy-elk-stack-with-eck-using-cloned-disks/323744)
**Author:** [@Maria\_Gabriela\_Perez](https://discuss.elastic.co/u/Maria_Gabriela_Perez)\ **Replies:** 6\ **Last updated:** [January 25, 2023, 7:28am UTC](https://discuss.elastic.co/t/deploy-elk-stack-with-eck-using-cloned-disks/323744 "2023-01-25T07:28:17Z")
Is it possible to deploy on kubernetes (gke) a new copy of elasticsearch using cloned disks from another elasticsearch deployment in another cluster, without conflicts? Any workarounds ?.. I need to restore logs saved i… --- ## [How to identify if a Windows PC requires a restart?](https://discuss.elastic.co/t/how-to-identify-if-a-windows-pc-requires-a-restart/323887)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 0\ **Last updated:** [January 25, 2023, 7:08am UTC](https://discuss.elastic.co/t/how-to-identify-if-a-windows-pc-requires-a-restart/323887 "2023-01-25T07:08:20Z")
Hi, I am using Elastic agent 7.17.4 to monitor the windows machines. Is there any OOB feature to identify if a Windows machine requires a restart after a patch/software update? --- ## [Can Packetbeat just capture the packets without decoding?](https://discuss.elastic.co/t/can-packetbeat-just-capture-the-packets-without-decoding/323473)
**Author:** [@sarathtv](https://discuss.elastic.co/u/sarathtv)\ **Replies:** 4\ **Last updated:** [January 25, 2023, 4:35am UTC](https://discuss.elastic.co/t/can-packetbeat-just-capture-the-packets-without-decoding/323473 "2023-01-25T04:35:05Z")
My application uses SIP protocol and I wanted to have a real-time packet analyzer for it. I found that Packetbeat could be the perfect fit, but unfortunately it doesn't support SIP in the listed set of protocols. Is the… --- ## [Is there a beat listing all installed RPMs?](https://discuss.elastic.co/t/is-there-a-beat-listing-all-installed-rpms/323886)
**Author:** [@franknord](https://discuss.elastic.co/u/franknord)\ **Replies:** 0\ **Last updated:** [January 25, 2023, 6:57am UTC](https://discuss.elastic.co/t/is-there-a-beat-listing-all-installed-rpms/323886 "2023-01-25T06:57:02Z")
In order to get a quick overview of the RPMs installed on my servers, I wrote a simple shell script listing all RPMs and their versions into a CSV and sending this file via Filebeat to Logstash. Everything is working wel… --- ## [Authentication using apikey failed](https://discuss.elastic.co/t/authentication-using-apikey-failed/323875)
**Author:** [@Cruz](https://discuss.elastic.co/u/Cruz)\ **Replies:** 4\ **Last updated:** [January 25, 2023, 6:41am UTC](https://discuss.elastic.co/t/authentication-using-apikey-failed/323875 "2023-01-25T06:41:59Z")
Suddenly this error appeared. I can't find in the logs what is the cause of this error. Can anyone tell me how to fix this? Please help.. :cry: I am using version of elasticsearch 7.17.8 and kibana 7.17.8 error: Au… --- ## [Filters on lens](https://discuss.elastic.co/t/filters-on-lens/323795)
**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\ **Replies:** 2\ **Last updated:** [January 25, 2023, 5:15am UTC](https://discuss.elastic.co/t/filters-on-lens/323795 "2023-01-25T05:15:16Z")
Hi, I created a table using the Lens, with the column names as below. Name, Age, city, and occupation. I want to use the filter in the one of the above columns (example age: 27), display all the entries for this table… --- ## [Elastic Search - Error Detail - Only one usage of each socket address (protocol/network address/port) is normally permitted Error](https://discuss.elastic.co/t/elastic-search-error-detail-only-one-usage-of-each-socket-address-protocol-network-address-port-is-normally-permitted-error/323792)
**Author:** [@ankurpatel](https://discuss.elastic.co/u/ankurpatel)\ **Replies:** 2\ **Last updated:** [January 25, 2023, 5:07am UTC](https://discuss.elastic.co/t/elastic-search-error-detail-only-one-usage-of-each-socket-address-protocol-network-address-port-is-normally-permitted-error/323792 "2023-01-25T05:07:31Z")
We have got below error in API which access data from Elastic Search. Error generated when web site traffic is high. We have configured Elastic Search on Single Node. We developed API(.NET core) by using NEST (7.15.1 lib… --- ## [Haproxy + TCP + Provided Grok expressions do not match field value](https://discuss.elastic.co/t/haproxy-tcp-provided-grok-expressions-do-not-match-field-value/323879)
**Author:** [@Dipu\_Haridas](https://discuss.elastic.co/u/Dipu_Haridas)\ **Replies:** 0\ **Last updated:** [January 25, 2023, 4:57am UTC](https://discuss.elastic.co/t/haproxy-tcp-provided-grok-expressions-do-not-match-field-value/323879 "2023-01-25T04:57:56Z")
Hi, I am new to Filebeat. Sorry if I sound foolish. I have been trying to load the haproxy logs to elasticsearch without much luck for quite some time. Haproxy Version: 1.8.27 Filebeat version: 7.17.8 Elasticsearch v… --- ## [Setting sameSiteCookies to None while kibana being behind a reverse proxy](https://discuss.elastic.co/t/setting-samesitecookies-to-none-while-kibana-being-behind-a-reverse-proxy/323877)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 0\ **Last updated:** [January 25, 2023, 3:58am UTC](https://discuss.elastic.co/t/setting-samesitecookies-to-none-while-kibana-being-behind-a-reverse-proxy/323877 "2023-01-25T03:58:03Z")
I have kibana running with SSL disabled and a reverse proxy (nginx) to do the SSL termination. I also have xpack.security.sameSiteCookies: "None" which seems ot be causing issues with below error. Is there a way to tel… [Previous page](https://discuss.elastic.co/latest.md?page=807) [Next page](https://discuss.elastic.co/latest.md?page=809)