# Latest **URL:** https://discuss.elastic.co/latest.md?page=839 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 840 --- ## [APM Server transport error (ECONNREFUSED)](https://discuss.elastic.co/t/apm-server-transport-error-econnrefused/322153)
**Author:** [@jmd1](https://discuss.elastic.co/u/jmd1)\ **Replies:** 1\ **Last updated:** [December 30, 2022, 7:09am UTC](https://discuss.elastic.co/t/apm-server-transport-error-econnrefused/322153 "2022-12-30T07:09:20Z")
hello, can you please advise? I have a nodejs app where I need to add an elastic agent. The application is running on a Fargate, What I did is that inside my dockerfile I wrote a script that will install and enroll this … --- ## [About Sending Logs from External SIEM (include ArcSight, Qradar, Splunk, ELK...) to Receiver Elastic Agent or Logstash with method TCP/UDP](https://discuss.elastic.co/t/about-sending-logs-from-external-siem-include-arcsight-qradar-splunk-elk-to-receiver-elastic-agent-or-logstash-with-method-tcp-udp/322139)
**Author:** [@Louis\_Wales](https://discuss.elastic.co/u/Louis_Wales)\ **Replies:** 4\ **Last updated:** [December 30, 2022, 3:45am UTC](https://discuss.elastic.co/t/about-sending-logs-from-external-siem-include-arcsight-qradar-splunk-elk-to-receiver-elastic-agent-or-logstash-with-method-tcp-udp/322139 "2022-12-30T03:45:10Z")
Hi everyone, I have a question when should I use TCP, and when should I use UDP to forward logs? Or is it better to use TCP or UDP? The situation is about Sending Logs from External SIEM (include ArcSight, Qradar, Splun… --- ## [System test failing for Policy having variable definition outside Policy Templates](https://discuss.elastic.co/t/system-test-failing-for-policy-having-variable-definition-outside-policy-templates/322028)
**Author:** [@Alex\_R](https://discuss.elastic.co/u/Alex_R)\ **Replies:** 0\ **Last updated:** [December 27, 2022, 8:59am UTC](https://discuss.elastic.co/t/system-test-failing-for-policy-having-variable-definition-outside-policy-templates/322028 "2022-12-27T08:59:38Z")
Hi Team! I am working on one of the integrations in which I have defined one variable in the main manifest (package level) in such a fashion. vars: - name: instance\_url type: text title: Instance URL requ… --- ## [After restart Ubuntu , Elastic does not work](https://discuss.elastic.co/t/after-restart-ubuntu-elastic-does-not-work/322065)
**Author:** [@Mursel](https://discuss.elastic.co/u/Mursel)\ **Replies:** 1\ **Last updated:** [December 30, 2022, 2:20am UTC](https://discuss.elastic.co/t/after-restart-ubuntu-elastic-does-not-work/322065 "2022-12-30T02:20:17Z")
Hello. I have an issue. Elastic installed on Ubuntu (ESXI). I have restarted ubuntu, but after that, I can't see any logs in Kibana. In the terminal, I can see logs (syslog). --- ## [Auto instrumentation profiler setup](https://discuss.elastic.co/t/auto-instrumentation-profiler-setup/322160)
**Author:** [@tomaszn](https://discuss.elastic.co/u/tomaszn)\ **Replies:** 0\ **Last updated:** [December 29, 2022, 2:17pm UTC](https://discuss.elastic.co/t/auto-instrumentation-profiler-setup/322160 "2022-12-29T14:17:35Z")
FROM mcr.microsoft.com/dotnet/sdk:6.0-alpine AS builder ARG AGENT\_VERSION=1.19.0 WORKDIR /app COPY . . RUN dotnet restore ./API/app/app.csproj WORKDIR /app/API/app RUN dotnet publish "app.csproj" --no-restore -c Rele… --- ## [Advice on paging with Parent-Child relation (And grouping)](https://discuss.elastic.co/t/advice-on-paging-with-parent-child-relation-and-grouping/322180)
**Author:** [@CJohn](https://discuss.elastic.co/u/CJohn)\ **Replies:** 0\ **Last updated:** [December 29, 2022, 10:53pm UTC](https://discuss.elastic.co/t/advice-on-paging-with-parent-child-relation-and-grouping/322180 "2022-12-29T22:53:28Z")
Hi, I am having a few issues in the returning the right paged results with a parent - child relationship. There are two scenarios in which I display the data that impact the shape returning from elastic. For the momen… --- ## [Prebuilt security detection rules not showing any alters](https://discuss.elastic.co/t/prebuilt-security-detection-rules-not-showing-any-alters/320541)
**Author:** [@satendra1987](https://discuss.elastic.co/u/satendra1987)\ **Replies:** 1\ **Last updated:** [December 30, 2022, 12:00am UTC](https://discuss.elastic.co/t/prebuilt-security-detection-rules-not-showing-any-alters/320541 "2022-12-30T00:00:52Z")
Hi, i am trying to work on elasticsearch security. i have installed elastic agent using fleet. Now i have enabled prebuilt security detection rules and status shows as successful when rules are executed however i dont s… --- ## [Osquery in new space not working](https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 3\ **Last updated:** [December 2, 2022, 12:22am UTC](https://discuss.elastic.co/t/osquery-in-new-space-not-working/319869 "2022-12-02T00:22:03Z")
Why does this keep happening? Osquery packs only work from the Default space, any other space where I created a new pack, this happens: --- ## [Trying to understand a previous setup/pipeline](https://discuss.elastic.co/t/trying-to-understand-a-previous-setup-pipeline/322175)
**Author:** [@jason3](https://discuss.elastic.co/u/jason3)\ **Replies:** 1\ **Last updated:** [December 29, 2022, 9:52pm UTC](https://discuss.elastic.co/t/trying-to-understand-a-previous-setup-pipeline/322175 "2022-12-29T21:52:07Z")
Hello all, Im trying to understand and learn Elastic while working though and improving some bad setups of my predecessors. I was hoping you could help with confirming my understanding after what I have been reading. … --- ## [Minimum files needed for search only?](https://discuss.elastic.co/t/minimum-files-needed-for-search-only/322056)
**Author:** [@Cliffster](https://discuss.elastic.co/u/Cliffster)\ **Replies:** 5\ **Last updated:** [December 29, 2022, 9:22pm UTC](https://discuss.elastic.co/t/minimum-files-needed-for-search-only/322056 "2022-12-29T21:22:44Z")
Our non profit (Chipster.org) is creating offline educational collections for people who lack internet. The collections will be distributed on flash drives and designed so that a user can copy their collection freely t… --- ## [I have Kibana Running and Elasticsearch also running but I can not get to the Kibana URL](https://discuss.elastic.co/t/i-have-kibana-running-and-elasticsearch-also-running-but-i-can-not-get-to-the-kibana-url/322124)
**Author:** [@Peter\_Lilley](https://discuss.elastic.co/u/Peter_Lilley)\ **Replies:** 4\ **Last updated:** [December 29, 2022, 6:00pm UTC](https://discuss.elastic.co/t/i-have-kibana-running-and-elasticsearch-also-running-but-i-can-not-get-to-the-kibana-url/322124 "2022-12-29T18:00:28Z")
I am using an Ubuntu VM hosted in Azure, I have the ports 9200 open and 5601 open. When i go to \:9200 i get this "name" : "node-YBA", "cluster\_name" : "my-application", "cluster\_uuid" : "PIsS2fqrR62icScNqyi… --- ## [Add a custom field in Kibana](https://discuss.elastic.co/t/add-a-custom-field-in-kibana/322138)
**Author:** [@jessutanto](https://discuss.elastic.co/u/jessutanto)\ **Replies:** 1\ **Last updated:** [December 29, 2022, 5:55pm UTC](https://discuss.elastic.co/t/add-a-custom-field-in-kibana/322138 "2022-12-29T17:55:14Z")
Hi, I wanted to add a field where it calculates the age of a person, thus --\> Birth date - Now I tried to implement this guide. \[see the Datetime Now Example\]. Somehow I got an error said cannot resolve symbol \[zdt\]. … --- ## [Creating Custom dashboard with grouping and math function](https://discuss.elastic.co/t/creating-custom-dashboard-with-grouping-and-math-function/322115)
**Author:** [@vamsi2](https://discuss.elastic.co/u/vamsi2)\ **Replies:** 1\ **Last updated:** [December 29, 2022, 5:11pm UTC](https://discuss.elastic.co/t/creating-custom-dashboard-with-grouping-and-math-function/322115 "2022-12-29T17:11:07Z")
Hi Is it possible to create a complex custom dashboards with grouping and math functions in elastic ? --- ## [Elastic SIEM Fundamentals Course Kibana will not display data](https://discuss.elastic.co/t/elastic-siem-fundamentals-course-kibana-will-not-display-data/321601)
**Author:** [@tthiry](https://discuss.elastic.co/u/tthiry)\ **Replies:** 1\ **Last updated:** [December 29, 2022, 4:58pm UTC](https://discuss.elastic.co/t/elastic-siem-fundamentals-course-kibana-will-not-display-data/321601 "2022-12-29T16:58:18Z")
Just starting the SIEM Fundamentals on-demand course. I have logged into Strigo and am trying to access the Kibana instance. The "Loading Elastic" message is displayed but it never displays anything. I've been waiting ov… --- ## [How can I send custom logs in a specific location to filebeat running inside docker](https://discuss.elastic.co/t/how-can-i-send-custom-logs-in-a-specific-location-to-filebeat-running-inside-docker/322106)
**Author:** [@Raja\_Muneer](https://discuss.elastic.co/u/Raja_Muneer)\ **Replies:** 18\ **Last updated:** [December 29, 2022, 4:29pm UTC](https://discuss.elastic.co/t/how-can-i-send-custom-logs-in-a-specific-location-to-filebeat-running-inside-docker/322106 "2022-12-29T16:29:56Z")
I am new to filebeat and elk. I am trying to send custom logs using filebeat to Elasticsearch directly.Both the elk stack and filebeat are running inside docker containers.. The custom logs are in the folder home/usernam… --- ## [How do you handle Elastic Agent Policies and Integrations that only apply to some systems?](https://discuss.elastic.co/t/how-do-you-handle-elastic-agent-policies-and-integrations-that-only-apply-to-some-systems/322168)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [December 29, 2022, 4:15pm UTC](https://discuss.elastic.co/t/how-do-you-handle-elastic-agent-policies-and-integrations-that-only-apply-to-some-systems/322168 "2022-12-29T16:15:09Z")
Hi All, This is more of a general question looking for input from others how they handle Elastic Agent policies when there is an integration that only needs to be deployed to a subset of systems. General concept of my … --- ## [Security in elasticsearch](https://discuss.elastic.co/t/security-in-elasticsearch/322119)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 4\ **Last updated:** [December 29, 2022, 3:58pm UTC](https://discuss.elastic.co/t/security-in-elasticsearch/322119 "2022-12-29T15:58:27Z")
Hello everyone, such a question, I recently set up elasticsearch 7.17, when I created certificates, I caught myself thinking that I didn’t fully understand the meaning, I hope you can help me. as I understand it, there… --- ## [Ingest-attachment not found](https://discuss.elastic.co/t/ingest-attachment-not-found/322150)
**Author:** [@WhatCouldGoWrong](https://discuss.elastic.co/u/WhatCouldGoWrong)\ **Replies:** 7\ **Last updated:** [December 29, 2022, 2:53pm UTC](https://discuss.elastic.co/t/ingest-attachment-not-found/322150 "2022-12-29T14:53:08Z")
Hi, I'm trying to install the ingest-attachment (using elasticsearch-plugin install ingest-attachment). I'm behind a proxy, so I use this line: sudo CLI\_JAVA\_OPTS="-Dhttp.proxyHost=192.168.0.1 -Dhttp.proxyPort=8080 -D… --- ## [Kibana - unknown configuration key deprecation.skip\_deprecated\_settings](https://discuss.elastic.co/t/kibana-unknown-configuration-key-deprecation-skip-deprecated-settings/321575)
**Author:** [@h0llym0lly](https://discuss.elastic.co/u/h0llym0lly)\ **Replies:** 4\ **Last updated:** [December 29, 2022, 2:19pm UTC](https://discuss.elastic.co/t/kibana-unknown-configuration-key-deprecation-skip-deprecated-settings/321575 "2022-12-29T14:19:44Z")
I have an instance of Kibana which was not installed via RPM or DEB package. Whole application was started via script and now I wanted to add it to systemd. I am facing this error when I am trying to start kibana via s… --- ## [Type: long fields show wrong values in kibana](https://discuss.elastic.co/t/type-long-fields-show-wrong-values-in-kibana/322154)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 7\ **Last updated:** [December 29, 2022, 2:13pm UTC](https://discuss.elastic.co/t/type-long-fields-show-wrong-values-in-kibana/322154 "2022-12-29T14:13:53Z")
Hello, I have noticed a problem with Kibana. Values with "type": "long" do not display correctly. For example let's take the value "1 671 607 837 241 650 688" displayed in Discover: This is wrong. When I swith to … --- ## [It is possible to use Kibana cluster alerts with data from an external monitoring cluster?](https://discuss.elastic.co/t/it-is-possible-to-use-kibana-cluster-alerts-with-data-from-an-external-monitoring-cluster/319549)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 2\ **Last updated:** [December 1, 2022, 2:45pm UTC](https://discuss.elastic.co/t/it-is-possible-to-use-kibana-cluster-alerts-with-data-from-an-external-monitoring-cluster/319549 "2022-12-01T14:45:41Z")
Hello, Currently We have a platinum licensed cluster running on-prem, and as recommended by Elastic we use another cluster to collect the monitoring data. This monitoring cluster uses the Basic License, as it is just a… --- ## [Elasticsearch ingest large of data](https://discuss.elastic.co/t/elasticsearch-ingest-large-of-data/322099)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 5\ **Last updated:** [December 29, 2022, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-large-of-data/322099 "2022-12-29T13:24:47Z")
is there capability of Elasticsearch to ingest amount large of data at a rate of 300TB in the year after that archive data in offline storage? what is challenges facing me to ingest that much volume? --- ## [Index created via python not seen in UI and vice-versa](https://discuss.elastic.co/t/index-created-via-python-not-seen-in-ui-and-vice-versa/321923)
**Author:** [@nikhilkvn](https://discuss.elastic.co/u/nikhilkvn)\ **Replies:** 1\ **Last updated:** [December 29, 2022, 1:14pm UTC](https://discuss.elastic.co/t/index-created-via-python-not-seen-in-ui-and-vice-versa/321923 "2022-12-29T13:14:07Z")
This is weird. Index created via Dev-Console is not seen in the Python-client. Index created via Python-client is not seen on Dev-Console. Both ways I am able to write/Read data. But have to choose only one way I am … --- ## [Recurring index corruption](https://discuss.elastic.co/t/recurring-index-corruption/322144)
**Author:** [@Sebastiano](https://discuss.elastic.co/u/Sebastiano)\ **Replies:** 11\ **Last updated:** [December 29, 2022, 1:07pm UTC](https://discuss.elastic.co/t/recurring-index-corruption/322144 "2022-12-29T13:07:27Z")
Hi, we are experimenting setting up an ELK cluster using Azure Container Instances. We successfully setup the cluster and we started using it to push log entries, generated by our distributed system, using and Azure Ev… --- ## [Ruby Code Exception](https://discuss.elastic.co/t/ruby-code-exception/322155)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 1\ **Last updated:** [December 29, 2022, 12:26pm UTC](https://discuss.elastic.co/t/ruby-code-exception/322155 "2022-12-29T12:26:01Z")
Hi Team, I am getting Ruby exception occurred: undefined method \`length' for nil error while using the following Ruby Code ruby { code =\> ' names = event.get("\[message\]").split(".") event.set("number\_… --- ## [MYSQL Integration using elasticagent mysql performance metrics cause metricbeat crashes : Agent V8.5.0](https://discuss.elastic.co/t/mysql-integration-using-elasticagent-mysql-performance-metrics-cause-metricbeat-crashes-agent-v8-5-0/322081)
**Author:** [@Nabeel\_Ahmed\_NAK](https://discuss.elastic.co/u/Nabeel_Ahmed_NAK)\ **Replies:** 3\ **Last updated:** [December 29, 2022, 12:09pm UTC](https://discuss.elastic.co/t/mysql-integration-using-elasticagent-mysql-performance-metrics-cause-metricbeat-crashes-agent-v8-5-0/322081 "2022-12-29T12:09:12Z")
I'm using prebuild elastic integration to fetch mysql metrics and logs. I'm able to fetch mysql status metrics and agent running healthy. But when I enable MySQL performance metric it will become unhealthy and I got er… --- ## [Escape dot in mustache to access elastic query \_source field in alerts](https://discuss.elastic.co/t/escape-dot-in-mustache-to-access-elastic-query-source-field-in-alerts/321912)
**Author:** [@Nabeel\_Ahmed\_NAK](https://discuss.elastic.co/u/Nabeel_Ahmed_NAK)\ **Replies:** 7\ **Last updated:** [December 29, 2022, 9:03am UTC](https://discuss.elastic.co/t/escape-dot-in-mustache-to-access-elastic-query-source-field-in-alerts/321912 "2022-12-29T09:03:35Z")
Hi All I have enabled elastic defend and enabled rules to detect security events. Now I want to generate alerts from the Kibana rule and connector to slack. I have encountered that Elasticsearch mapping of kibana rule… --- ## [Filebeat in k8s pod cannot read log file : No such file or directory](https://discuss.elastic.co/t/filebeat-in-k8s-pod-cannot-read-log-file-no-such-file-or-directory/322074)
**Author:** [@cat-rat](https://discuss.elastic.co/u/cat-rat)\ **Replies:** 1\ **Last updated:** [December 29, 2022, 9:00am UTC](https://discuss.elastic.co/t/filebeat-in-k8s-pod-cannot-read-log-file-no-such-file-or-directory/322074 "2022-12-29T09:00:04Z")
\--- apiVersion: v1 kind: ConfigMap metadata: name: filebeat-config namespace: kube-system labels: k8s-app: filebeat data: filebeat.yml: |- filebeat.inputs: - type: container fields\_under\_root: t… --- ## [Query on Azure Module Authentication for Metricbeat](https://discuss.elastic.co/t/query-on-azure-module-authentication-for-metricbeat/322023)
**Author:** [@vin89](https://discuss.elastic.co/u/vin89)\ **Replies:** 1\ **Last updated:** [December 29, 2022, 8:36am UTC](https://discuss.elastic.co/t/query-on-azure-module-authentication-for-metricbeat/322023 "2022-12-29T08:36:02Z")
We are planning to use azure module for metricbeat for monitoring and alerting in our organization, so as per documentation we could see it uses client\_id and client\_secret for authentication. Do we have any other ways t… --- ## [Kibana on https with docker-compose](https://discuss.elastic.co/t/kibana-on-https-with-docker-compose/316069)
**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 3:12pm UTC](https://discuss.elastic.co/t/kibana-on-https-with-docker-compose/316069 "2022-11-03T15:12:42Z")
Hi everyone, I'd like to put kibana web page on https instead of http. I did set everything came to my mind in order to do so, and this is my docker-compose.yml file. the problems I encountered are: elasticsearch is… [Previous page](https://discuss.elastic.co/latest.md?page=838) [Next page](https://discuss.elastic.co/latest.md?page=840)