# Latest **URL:** https://discuss.elastic.co/latest.md?page=814 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 815 --- ## [Observabiltiy APM Services \ Overview (tab) or Logs (tab)](https://discuss.elastic.co/t/observabiltiy-apm-services-service-name-overview-tab-or-logs-tab/323441)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 1\ **Last updated:** [January 19, 2023, 7:13pm UTC](https://discuss.elastic.co/t/observabiltiy-apm-services-service-name-overview-tab-or-logs-tab/323441 "2023-01-19T19:13:49Z")
Elastic Cloud Enterprise Kibana version 8.5.3: Elasticsearch version 8.5.3: APM Server version 8.5.3: APM Agent language and version 8.5.3: Browser version: Fresh install or upgraded from other version? Upgrade fro… --- ## [Auditbeat 7.17.8 high cpu usage during data transfer with system socket dataset](https://discuss.elastic.co/t/auditbeat-7-17-8-high-cpu-usage-during-data-transfer-with-system-socket-dataset/323540)
**Author:** [@opoplawski](https://discuss.elastic.co/u/opoplawski)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 7:10pm UTC](https://discuss.elastic.co/t/auditbeat-7-17-8-high-cpu-usage-during-data-transfer-with-system-socket-dataset/323540 "2023-01-19T19:10:19Z")
I'm running auditbeat-7.17.8-1.x86\_64 on AlmaLinux release 8.7 on one of our file servers. I just noticed that while running an rsync transfer to that machine auditbeat is consuming between 100-200% cpu. It is not outp… --- ## [How to pipe results from one data view to other data view in KQL?](https://discuss.elastic.co/t/how-to-pipe-results-from-one-data-view-to-other-data-view-in-kql/323539)
**Author:** [@Arun\_Kulanthaivel](https://discuss.elastic.co/u/Arun_Kulanthaivel)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 6:48pm UTC](https://discuss.elastic.co/t/how-to-pipe-results-from-one-data-view-to-other-data-view-in-kql/323539 "2023-01-19T18:48:56Z")
Hi, i have two data views in kibana one logs-apigee-\* and other logs-epm-. we have a field "type" in logs-apigee- i want to get from logs-epm-\* for a given date range with all type from logs-apigee-\*. is there any way … --- ## [Reindex API: An unexpected authentication error occurred](https://discuss.elastic.co/t/reindex-api-an-unexpected-authentication-error-occurred/323538)
**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 6:39pm UTC](https://discuss.elastic.co/t/reindex-api-an-unexpected-authentication-error-occurred/323538 "2023-01-19T18:39:59Z")
Hello everyone, I'm trying to migrate an index from Cluster A to Cluster B using the Reindex from remote Add each ip segment in my whitelist in both cluster: reindex.remote.whitelist: \["123.176.49.\*:9200","123.188.49.… --- ## [Issues with Exception lists automatically combining rules](https://discuss.elastic.co/t/issues-with-exception-lists-automatically-combining-rules/323106)
**Author:** [@aforfot](https://discuss.elastic.co/u/aforfot)\ **Replies:** 5\ **Last updated:** [January 19, 2023, 6:39pm UTC](https://discuss.elastic.co/t/issues-with-exception-lists-automatically-combining-rules/323106 "2023-01-19T18:39:52Z")
When creating multiple Rules in Elastic Security we have started to notice an issue where exception list items created for one specific rule will also affect other rules. In our case the issue affects 2 specific rules th… --- ## [Reliable way to see all hosts in environment?](https://discuss.elastic.co/t/reliable-way-to-see-all-hosts-in-environment/323530)
**Author:** [@Mahigs](https://discuss.elastic.co/u/Mahigs)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 4:51pm UTC](https://discuss.elastic.co/t/reliable-way-to-see-all-hosts-in-environment/323530 "2023-01-19T16:51:23Z")
I am trying to build out a dashboard showing all the hosts that are sending logs in our environment while also having a panel that shows when a host stops sending logs and the last time they sent a log. I took a look at… --- ## [Elasticsearch windows server high split i/o and service restart](https://discuss.elastic.co/t/elasticsearch-windows-server-high-split-i-o-and-service-restart/323147)
**Author:** [@elastic101](https://discuss.elastic.co/u/elastic101)\ **Replies:** 4\ **Last updated:** [January 19, 2023, 4:39pm UTC](https://discuss.elastic.co/t/elasticsearch-windows-server-high-split-i-o-and-service-restart/323147 "2023-01-19T16:39:08Z")
Hello, We are using an app that has Elasticsearch database. The version is old and we are seeing a lot of issues lately. The split I/O increases to 50% + and the service becomes unresponsive. Below are the cluster detai… --- ## [Incorrect JSON logs parsing](https://discuss.elastic.co/t/incorrect-json-logs-parsing/323447)
**Author:** [@ira-zaya](https://discuss.elastic.co/u/ira-zaya)\ **Replies:** 1\ **Last updated:** [January 19, 2023, 3:46pm UTC](https://discuss.elastic.co/t/incorrect-json-logs-parsing/323447 "2023-01-19T15:46:25Z")
Hi. I have json format logs, looks like this: { "dt":"2023-01-18T17:41:04.8723262+00:00", "tz":"Etc/UTC", "host":"host-name", "containerName":"container-name", "level":"INFO", "scope":"Web API", "message":"exitin… --- ## [Javaagent - explicitly defining a class to be visible in dependencies, transactions](https://discuss.elastic.co/t/javaagent-explicitly-defining-a-class-to-be-visible-in-dependencies-transactions/321648)
**Author:** [@dave.richards](https://discuss.elastic.co/u/dave.richards)\ **Replies:** 13\ **Last updated:** [January 19, 2023, 3:38pm UTC](https://discuss.elastic.co/t/javaagent-explicitly-defining-a-class-to-be-visible-in-dependencies-transactions/321648 "2023-01-19T15:38:20Z")
Kibana version: 8.4.3 Elasticsearch version: 8.2.3 APM Server version: 8.2.3 APM Agent language and version: 1.33 Hi - we have a user who has added the elastic agent to a third party application. One known dependency… --- ## [Importing dashboards using kibana api through curl](https://discuss.elastic.co/t/importing-dashboards-using-kibana-api-through-curl/323320)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [January 19, 2023, 3:29pm UTC](https://discuss.elastic.co/t/importing-dashboards-using-kibana-api-through-curl/323320 "2023-01-19T15:29:14Z")
Hi Community, I want to import metricbeat dashboard , but i can't find the id. ELK version 7.17 command used curl -u user:pass -k -X POST "https://localhost:5601/api/saved\_objects/\_export -H 'kbn-xsrf: true' -H 'Cont… --- ## [Can't connect to node (ECONNREFUSED) - Multi cluster setup](https://discuss.elastic.co/t/cant-connect-to-node-econnrefused-multi-cluster-setup/323334)
**Author:** [@Onezy](https://discuss.elastic.co/u/Onezy)\ **Replies:** 1\ **Last updated:** [January 19, 2023, 3:27pm UTC](https://discuss.elastic.co/t/cant-connect-to-node-econnrefused-multi-cluster-setup/323334 "2023-01-19T15:27:25Z")
Hi, I'm new to both ES and docker so I may not be doing something right and maybe somebody could help I am currently trying to create a multi cluster setup with 3 nodes and 2 kibanas: Cluster1 (2 nodes 1 kibana) / Clu… --- ## [Vega Tree graph - Binding Custom Icon](https://discuss.elastic.co/t/vega-tree-graph-binding-custom-icon/323443)
**Author:** [@Dimple.P](https://discuss.elastic.co/u/Dimple.P)\ **Replies:** 1\ **Last updated:** [January 19, 2023, 2:56pm UTC](https://discuss.elastic.co/t/vega-tree-graph-binding-custom-icon/323443 "2023-01-19T14:56:44Z")
Is it feasible to attach customized icons in the Vega V5 Tree graph? If yes, how should each node be modified? --- ## [No config file found - help me pleaseee](https://discuss.elastic.co/t/no-config-file-found-help-me-pleaseee/323521)
**Author:** [@Jonathan\_Or](https://discuss.elastic.co/u/Jonathan_Or)\ **Replies:** 1\ **Last updated:** [January 19, 2023, 2:33pm UTC](https://discuss.elastic.co/t/no-config-file-found-help-me-pleaseee/323521 "2023-01-19T14:33:01Z")
hey , i have a problem with my logstash thats running on my ubuntu 18.04 machine. when i run journalctl -u logstash it presents one error that says that no config file found in path etc/log..... but when i go to conf… --- ## [Infinite extent for field "\" : \[Infinity, -Infinity\]](https://discuss.elastic.co/t/infinite-extent-for-field-field-name-infinity-infinity/323523)
**Author:** [@Kamil\_BdBelfort](https://discuss.elastic.co/u/Kamil_BdBelfort)\ **Replies:** 5\ **Last updated:** [January 19, 2023, 2:26pm UTC](https://discuss.elastic.co/t/infinite-extent-for-field-field-name-infinity-infinity/323523 "2023-01-19T14:26:55Z")
Hi there, I am using elasticsearch & kibana version 8.5.3 This is how my data look like when I run my script: Inspect \> View Request \> Vega debug \> Spec: { "$schema": "https://vega.github.io/schema/vega-lite/v5.j… --- ## [Java Agent APM won't send data to Elasticsearch](https://discuss.elastic.co/t/java-agent-apm-wont-send-data-to-elasticsearch/323489)
**Author:** [@zerratriani](https://discuss.elastic.co/u/zerratriani)\ **Replies:** 2\ **Last updated:** [January 19, 2023, 2:02pm UTC](https://discuss.elastic.co/t/java-agent-apm-wont-send-data-to-elasticsearch/323489 "2023-01-19T14:02:12Z")
I have a java application and want to monitor it. the two hosts between the APM server and the application server are well connected. I have also deactivated the firewall but the data from the apm agent was not successfu… --- ## [How i can rename dynamical fields](https://discuss.elastic.co/t/how-i-can-rename-dynamical-fields/323321)
**Author:** [@Glad](https://discuss.elastic.co/u/Glad)\ **Replies:** 3\ **Last updated:** [January 19, 2023, 1:55pm UTC](https://discuss.elastic.co/t/how-i-can-rename-dynamical-fields/323321 "2023-01-19T13:55:46Z")
Hello, I would like some help with my little problem. I would like to be able to automatically rename fields that I get with my snmp plugin in input. I obtain this result: "host" =\> \[ \[1\] { "iso...hrProcessorLoa… --- ## [Dsl Query - calculate incidence in percentage (%) or bucket\_script](https://discuss.elastic.co/t/dsl-query-calculate-incidence-in-percentage-or-bucket-script/323501)
**Author:** [@SalvoDM91](https://discuss.elastic.co/u/SalvoDM91)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 11:24am UTC](https://discuss.elastic.co/t/dsl-query-calculate-incidence-in-percentage-or-bucket-script/323501 "2023-01-19T11:24:21Z")
Hi guys, I've a sample dataset with 3 columns (ID, ACTION and AMOUNT): I would like to create a DSL query in order to check minute by minute: number of documents with ACTION = "purchase" (paramA) number of documen… --- ## [How to Show the Value of tags When Using Server Log Connector](https://discuss.elastic.co/t/how-to-show-the-value-of-tags-when-using-server-log-connector/323372)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 6\ **Last updated:** [January 19, 2023, 1:36pm UTC](https://discuss.elastic.co/t/how-to-show-the-value-of-tags-when-using-server-log-connector/323372 "2023-01-19T13:36:46Z")
Hello everyone, i want to ask something about alerting here. i already create a rule to notify me if there is a certificate that will be expire in few days through server log which is kibana.log like this Due to di… --- ## [Multi-node cluster certificates](https://discuss.elastic.co/t/multi-node-cluster-certificates/323522)
**Author:** [@cdy5159](https://discuss.elastic.co/u/cdy5159)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 1:27pm UTC](https://discuss.elastic.co/t/multi-node-cluster-certificates/323522 "2023-01-19T13:27:52Z")
I have a 3 node cluster that was created using the defaults at installation. Elastic version is 8.4.2. Only the cert from the initial node has a host-name built in. Do I need to re-create the transport certs and/or th… --- ## [I get no data from Elastic via asp.net core](https://discuss.elastic.co/t/i-get-no-data-from-elastic-via-asp-net-core/323515)
**Author:** [@fozgul](https://discuss.elastic.co/u/fozgul)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 12:54pm UTC](https://discuss.elastic.co/t/i-get-no-data-from-elastic-via-asp-net-core/323515 "2023-01-19T12:54:57Z")
My Elastic server(7.16.2) is running on an on-prem server with certain Ip. (Free version) I have the following setup for client creation in asp.net core: var pool = new SingleNodeConnectionPool(new Uri("http://username… --- ## [Complex queries inside nested fields](https://discuss.elastic.co/t/complex-queries-inside-nested-fields/323514)
**Author:** [@Hemabh\_Ravee\_Fox](https://discuss.elastic.co/u/Hemabh_Ravee_Fox)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 12:51pm UTC](https://discuss.elastic.co/t/complex-queries-inside-nested-fields/323514 "2023-01-19T12:51:32Z")
I have some documents which contain a nested field planList which is an array of objects. It's length will always be 2 or 3. And the objects always have 3 keys - planName, planType, and planId. I want to write a query w… --- ## [How to use DTOs in new java client with ILM](https://discuss.elastic.co/t/how-to-use-dtos-in-new-java-client-with-ilm/323511)
**Author:** [@bilak](https://discuss.elastic.co/u/bilak)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 12:36pm UTC](https://discuss.elastic.co/t/how-to-use-dtos-in-new-java-client-with-ilm/323511 "2023-01-19T12:36:46Z")
I'm using 7.17 client and I'd like to build ILM from java. This is what I've tried: final RolloverConditions rollover = new RolloverConditions.Builder() .maxSize("4GB") .maxAge(t -\> t.time("1D")) … --- ## [Multiple logstash instances listening to the same redis channel](https://discuss.elastic.co/t/multiple-logstash-instances-listening-to-the-same-redis-channel/323506)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 1\ **Last updated:** [January 19, 2023, 12:33pm UTC](https://discuss.elastic.co/t/multiple-logstash-instances-listening-to-the-same-redis-channel/323506 "2023-01-19T12:33:21Z")
We're using redis to pass data between logstash instances. I have 2 logstash instances currently with the same config: input { redis { data\_type =\> "channel" host =\> "${REDIS\_HOST}" key =\> "l… --- ## [Packetbeat not working & showin only one interface](https://discuss.elastic.co/t/packetbeat-not-working-showin-only-one-interface/323510)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 12:31pm UTC](https://discuss.elastic.co/t/packetbeat-not-working-showin-only-one-interface/323510 "2023-01-19T12:31:25Z")
Hello, I am attempting to run Packetbeat (8.6.0) on Microsoft Windows 11 (professional 22H2 version, latest). I have Npcap as part of NMAP installation, which I refreshed today - specially ticking to enable the WinPcap… --- ## [Customise the field that a option list is applied to](https://discuss.elastic.co/t/customise-the-field-that-a-option-list-is-applied-to/322950)
**Author:** [@Jan\_De\_Smet](https://discuss.elastic.co/u/Jan_De_Smet)\ **Replies:** 2\ **Last updated:** [January 19, 2023, 12:20pm UTC](https://discuss.elastic.co/t/customise-the-field-that-a-option-list-is-applied-to/322950 "2023-01-19T12:20:15Z")
Hi, I have a data set containing containing objects in the following format: { "id": 123, "displayName": "foo" } I would like to use this to populate an option list. It is important that the user only sees the dis… --- ## [Logstash from multiple beats server](https://discuss.elastic.co/t/logstash-from-multiple-beats-server/323491)
**Author:** [@hasan.idriss](https://discuss.elastic.co/u/hasan.idriss)\ **Replies:** 1\ **Last updated:** [January 19, 2023, 12:08pm UTC](https://discuss.elastic.co/t/logstash-from-multiple-beats-server/323491 "2023-01-19T12:08:45Z")
hello every one, i am using logstash to receive data from multiple server using winlogbeats over the port 5044 I want to create an index for each server based on the server name can some one provide me with the logsta… --- ## [Dev Tools Console can't retrieve data - Error Bad Gateway 502](https://discuss.elastic.co/t/dev-tools-console-cant-retrieve-data-error-bad-gateway-502/323500)
**Author:** [@Kamil\_BdBelfort](https://discuss.elastic.co/u/Kamil_BdBelfort)\ **Replies:** 3\ **Last updated:** [January 19, 2023, 11:51am UTC](https://discuss.elastic.co/t/dev-tools-console-cant-retrieve-data-error-bad-gateway-502/323500 "2023-01-19T11:51:09Z")
Hi there, Can anyone explain me please why do I get this error when I am running elasticsearch on localhost? See screenshot: Thanks a lot, Kamil --- ## [elasticsearch.AuthorizationException: AuthorizationException(403, 'security\_exception', 'action \[cluster:monitor/main\] is unauthorized for user\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*this action is grante d by the cluster privileges \[monitor,manage,all\]')](https://discuss.elastic.co/t/elasticsearch-authorizationexception-authorizationexception-403-security-exception-action-cluster-monitor-main-is-unauthorized-for-user-this-action-is-grante-d-by-the-cluster-privileges-monitor-manage-all/323499)
**Author:** [@savitaSUtar](https://discuss.elastic.co/u/savitaSUtar)\ **Replies:** 1\ **Last updated:** [January 19, 2023, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-authorizationexception-authorizationexception-403-security-exception-action-cluster-monitor-main-is-unauthorized-for-user-this-action-is-grante-d-by-the-cluster-privileges-monitor-manage-all/323499 "2023-01-19T11:42:54Z")
I am writting a Elastic search connection code from python like : es = Elasticsearch("url", basic\_auth=("Username", "password")) print(es.info()) but getting error as : elasticsearch.AuthorizationException: Authorizat… --- ## [Disable SSO forsome ECE Deployments](https://discuss.elastic.co/t/disable-sso-forsome-ece-deployments/323503)
**Author:** [@stobbe](https://discuss.elastic.co/u/stobbe)\ **Replies:** 0\ **Last updated:** [January 19, 2023, 11:32am UTC](https://discuss.elastic.co/t/disable-sso-forsome-ece-deployments/323503 "2023-01-19T11:32:02Z")
Hello, I have noticed that system deployments are not doing the SSO. Is there a way to also disable this for a user created deployments? Or I want a deployment in ECE to ask me for my credentials, is this possible? K… --- ## [How to visualize max aggregation inside terms aggregation in Kibana?](https://discuss.elastic.co/t/how-to-visualize-max-aggregation-inside-terms-aggregation-in-kibana/323406)
**Author:** [@cr\_168328](https://discuss.elastic.co/u/cr_168328)\ **Replies:** 4\ **Last updated:** [January 19, 2023, 11:25am UTC](https://discuss.elastic.co/t/how-to-visualize-max-aggregation-inside-terms-aggregation-in-kibana/323406 "2023-01-19T11:25:57Z")
I have an index exams which contains data related to students who passed some exams. A student can attempt an exam multiple times. Hence there may be more than one document in the index for a particular student and exam… [Previous page](https://discuss.elastic.co/latest.md?page=813) [Next page](https://discuss.elastic.co/latest.md?page=815)