# Latest **URL:** https://discuss.elastic.co/latest.md?page=875 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 876 --- ## [I have added a process in metricbeat.yml file to monitor but the process details are not showing in kibana](https://discuss.elastic.co/t/i-have-added-a-process-in-metricbeat-yml-file-to-monitor-but-the-process-details-are-not-showing-in-kibana/320227)
**Author:** [@sourabh\_rawat](https://discuss.elastic.co/u/sourabh_rawat)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 8:51am UTC](https://discuss.elastic.co/t/i-have-added-a-process-in-metricbeat-yml-file-to-monitor-but-the-process-details-are-not-showing-in-kibana/320227 "2022-12-01T08:51:10Z")
I have added a process in the metricbeat.yml file to monitor but the process details are not showing in kibana dashboard. I am getting the process details in the agent logs but when I try to get the process details usin… --- ## [Golang apm DetachedContext before goroutine not record span](https://discuss.elastic.co/t/golang-apm-detachedcontext-before-goroutine-not-record-span/320208)
**Author:** [@zt9788](https://discuss.elastic.co/u/zt9788)\ **Replies:** 8\ **Last updated:** [December 1, 2022, 8:48am UTC](https://discuss.elastic.co/t/golang-apm-detachedcontext-before-goroutine-not-record-span/320208 "2022-12-01T08:48:36Z")
es7,apm server7 When use DetachedContext before (go func(...)) there is not record span I saw #475 //use the zero framework redis quene //in the consume task func ProcessTask(ctx context.Context, t \*asynq.Task) error{… --- ## [Use javaagent happened deadlock](https://discuss.elastic.co/t/use-javaagent-happened-deadlock/320132)
**Author:** [@fido](https://discuss.elastic.co/u/fido)\ **Replies:** 1\ **Last updated:** [December 1, 2022, 8:33am UTC](https://discuss.elastic.co/t/use-javaagent-happened-deadlock/320132 "2022-12-01T08:33:11Z")
We have one problem when we use javaagent with Tomcat. It will caused deadlock and make some thread blocked , but it seems like a occasional problem，because it happened just one time. JDK Version:1.8.0\_192-b12 Tomcat V… --- ## [Prevent thai tokenizer from tokenizing hashtag](https://discuss.elastic.co/t/prevent-thai-tokenizer-from-tokenizing-hashtag/320225)
**Author:** [@TFP](https://discuss.elastic.co/u/TFP)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 8:19am UTC](https://discuss.elastic.co/t/prevent-thai-tokenizer-from-tokenizing-hashtag/320225 "2022-12-01T08:19:03Z")
I'm currently using the thai tokenizer and wanted to preserve hashtag words but the tokenizer keeps on removing the hashtag symbol. ES version: 7.16.2 GET /\_analyze { "tokenizer": "thai", "text": "#รายการพ #hashtag" … --- ## [Overwriting ILM policy is disabled. Set \`setup.ilm.overwrite: true\` for enabling](https://discuss.elastic.co/t/overwriting-ilm-policy-is-disabled-set-setup-ilm-overwrite-true-for-enabling/320217)
**Author:** [@Umer\_Tahir](https://discuss.elastic.co/u/Umer_Tahir)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 7:23am UTC](https://discuss.elastic.co/t/overwriting-ilm-policy-is-disabled-set-setup-ilm-overwrite-true-for-enabling/320217 "2022-12-01T07:23:50Z")
I am using metric beat Please let me know where can I Set setup.ilm.overwrite: true for enabling. I have already searched in metricbeat.yml but still no clue I have found. --- ## [error\_class=Fluent::Plugin::ElasticsearchErrorHandler::ElasticsearchError error="400 - Rejected by Elasticsearch](https://discuss.elastic.co/t/error-class-fluent-elasticsearcherror-error-400-rejected-by-elasticsearch/320215)
**Author:** [@Somasuntaram\_MU](https://discuss.elastic.co/u/Somasuntaram_MU)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 7:03am UTC](https://discuss.elastic.co/t/error-class-fluent-elasticsearcherror-error-400-rejected-by-elasticsearch/320215 "2022-12-01T07:03:11Z")
I am setting up EFK stack using docker-compose. Fluentd is able to receive the logs from http-endpoint. But the logs are getting rejected by elasticsearch. Though I am able to receive the error as bad argument and reje… --- ## [Dec 1st, 2022: \[PT\] Elastic Agent 101](https://discuss.elastic.co/t/dec-1st-2022-pt-elastic-agent-101/319992)
**Author:** [@AndersonQ](https://discuss.elastic.co/u/AndersonQ)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2022-pt-elastic-agent-101/319992 "2022-12-01T08:00:30Z")
Este artigo também está disponível em inglês. Primeiro, o que é o Elastic Agent? Elatic Agent é uma forma única e unificada de adicionar monitoramento para logs, métricas e outros tipos de dados em um host. Ele tam… --- ## [Dec 1st, 2022: \[EN\] Elastic Agent 101](https://discuss.elastic.co/t/dec-1st-2022-en-elastic-agent-101/316879)
**Author:** [@AndersonQ](https://discuss.elastic.co/u/AndersonQ)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2022-en-elastic-agent-101/316879 "2022-12-01T08:00:30Z")
This article is also available in portuguese. First things first, what is the Elastic Agent? Elastic Agent is a single, unified way to add monitoring for logs, metrics, and other types of data to a host. It can als… --- ## [Filebeat 8.5 pattern not applying to index + the Indices shows as .ds-\?](https://discuss.elastic.co/t/filebeat-8-5-pattern-not-applying-to-index-the-indices-shows-as-ds-name/320220)
**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 7:46am UTC](https://discuss.elastic.co/t/filebeat-8-5-pattern-not-applying-to-index-the-indices-shows-as-ds-name/320220 "2022-12-01T07:46:19Z")
Hello all, I am using the new Filebeat Helm (8.50 to collect logs from several microservices and send them directly to elasticsearch (EFK). I've edited the Values.yaml under daemonset with the following: filebeatCon… --- ## [Query\_string search within nested types](https://discuss.elastic.co/t/query-string-search-within-nested-types/320218)
**Author:** [@vlasami](https://discuss.elastic.co/u/vlasami)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 7:26am UTC](https://discuss.elastic.co/t/query-string-search-within-nested-types/320218 "2022-12-01T07:26:47Z")
Hi, We recently introduced nested type to our document structure and found that it has some restriction with the query\_string search type, which we use extensively. The search documentation says that: "Avoid using th… --- ## [Bootstrap check failed max file descriptors \[16384\] for elasticsearch process is too low, increase to at least \[65535\]](https://discuss.elastic.co/t/bootstrap-check-failed-max-file-descriptors-16384-for-elasticsearch-process-is-too-low-increase-to-at-least-65535/320140)
**Author:** [@Dhakarlabh](https://discuss.elastic.co/u/Dhakarlabh)\ **Replies:** 2\ **Last updated:** [December 1, 2022, 6:12am UTC](https://discuss.elastic.co/t/bootstrap-check-failed-max-file-descriptors-16384-for-elasticsearch-process-is-too-low-increase-to-at-least-65535/320140 "2022-12-01T06:12:59Z")
While deploying from the helm chart on the dual stack cluster. I am facing this bootstrap check failed issue. It is working fine for single stack IPv4 cluster. I tried to configure the network.host="global:ipv6" but it i… --- ## [Include Data Streams in ILM Policy](https://discuss.elastic.co/t/include-data-streams-in-ilm-policy/319404)
**Author:** [@waleedkh](https://discuss.elastic.co/u/waleedkh)\ **Replies:** 5\ **Last updated:** [December 1, 2022, 4:28am UTC](https://discuss.elastic.co/t/include-data-streams-in-ilm-policy/319404 "2022-12-01T04:28:15Z")
Hi There, I am making use of Data Streams and an ILM Policy to delete data that is rolled over from Hot phase to delete phase, this happens after 3 days. I wanted to check if there is a way to include the actual deleti… --- ## [Would like to arrange data histogram COUNT values in descending order,Vertical bar](https://discuss.elastic.co/t/would-like-to-arrange-data-histogram-count-values-in-descending-order-vertical-bar/318072)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 12:06pm UTC](https://discuss.elastic.co/t/would-like-to-arrange-data-histogram-count-values-in-descending-order-vertical-bar/318072 "2022-11-03T12:06:15Z")
Hello All, Is it possible to arrange data histogram COUNT values in descending order(big to small). Simply need to display highestest count first for given product type on given date. I dont see any option available t… --- ## [Does nodequerycache need to be configured to be created?](https://discuss.elastic.co/t/does-nodequerycache-need-to-be-configured-to-be-created/320201)
**Author:** [@winteriscomming](https://discuss.elastic.co/u/winteriscomming)\ **Replies:** 1\ **Last updated:** [December 1, 2022, 1:30am UTC](https://discuss.elastic.co/t/does-nodequerycache-need-to-be-configured-to-be-created/320201 "2022-12-01T01:30:57Z")
A 404 not found error occurs when querying the nodequerycache index with cat api. According to the docs, it is said that node query cache can be set in elasticsearch.yml, but since the default value is enabled, I am con… --- ## [Elasticsearch keeps crashing and won't restart often](https://discuss.elastic.co/t/elasticsearch-keeps-crashing-and-wont-restart-often/320199)
**Author:** [@vesnindev](https://discuss.elastic.co/u/vesnindev)\ **Replies:** 1\ **Last updated:** [December 1, 2022, 1:02am UTC](https://discuss.elastic.co/t/elasticsearch-keeps-crashing-and-wont-restart-often/320199 "2022-12-01T01:02:36Z")
Hello. Tell me why Elasticsearch keeps crashing and often doesn't restart? \[2022-12-01T00:50:12.915+0000\]\[16713\]\[safepoint \] Safepoint "ICBufferFull", Time since last: 1183469 ns, Reaching safepoint: 22369 ns, At saf… --- ## [Rate limiter](https://discuss.elastic.co/t/rate-limiter/320177)
**Author:** [@srobison62](https://discuss.elastic.co/u/srobison62)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 10:27pm UTC](https://discuss.elastic.co/t/rate-limiter/320177 "2022-11-30T22:27:01Z")
I understand that Elastic search has a built in functionality to control merges of data so if there is a huge increasing logs it doesn't overload the system. I am wondering where I could actually view these settings or i… --- ## [How flexible the ilm rollover is?](https://discuss.elastic.co/t/how-flexible-the-ilm-rollover-is/320169)
**Author:** [@ThePohorc](https://discuss.elastic.co/u/ThePohorc)\ **Replies:** 4\ **Last updated:** [November 30, 2022, 9:31pm UTC](https://discuss.elastic.co/t/how-flexible-the-ilm-rollover-is/320169 "2022-11-30T21:31:36Z")
Hello! Trying to understand ILM rollover. I created a test on elastic.co and follow the example on: Tutorial: Automate rollover with ILM | Elasticsearch Guide \[8.5\] | Elastic I set rollover on 10 documents. Now, when … --- ## [Silent error on date parsing](https://discuss.elastic.co/t/silent-error-on-date-parsing/320187)
**Author:** [@rfirpo](https://discuss.elastic.co/u/rfirpo)\ **Replies:** 3\ **Last updated:** [November 30, 2022, 9:19pm UTC](https://discuss.elastic.co/t/silent-error-on-date-parsing/320187 "2022-11-30T21:19:16Z")
Logstash is silently dropping my logs after implementing a small modification in my grok filter. The original filter looks like: filter { if \[internal\]\[logtype\] == "mycustomtype" { grok { match =\> { … --- ## [Architecture Question](https://discuss.elastic.co/t/architecture-question/320191)
**Author:** [@bsherman](https://discuss.elastic.co/u/bsherman)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 9:18pm UTC](https://discuss.elastic.co/t/architecture-question/320191 "2022-11-30T21:18:32Z")
We have a 10 node cluster running 7.6 on s390x. I'm aware s390x is not supported but we've been able to make it work. We want to upgrade to 7.17. With the 7.17 upgrade we want to have at least one node to use machine l… --- ## [Elasticsearch how to subtract field number value with specific number](https://discuss.elastic.co/t/elasticsearch-how-to-subtract-field-number-value-with-specific-number/318090)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 3\ **Last updated:** [November 3, 2022, 11:44am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-subtract-field-number-value-with-specific-number/318090 "2022-11-03T11:44:36Z")
Hello I am looking for solution to prepare dashboard in which i need to prepare a visualization with difference value e.g. site performance field mentioned as 500ms but as per threshold it should be 200ms Field name "… --- ## [Official icon name](https://discuss.elastic.co/t/official-icon-name/320181)
**Author:** [@seanee](https://discuss.elastic.co/u/seanee)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 8:03pm UTC](https://discuss.elastic.co/t/official-icon-name/320181 "2022-11-30T20:03:03Z")
I'm creating user documentation and was wondering, is there an official name for the menu icon in the upper left of the Kibana GUI (the three lines) other than menu icon . I keep referring to it as a 'pancake icon' as it… --- ## [How to setup 'elastic' account from source code](https://discuss.elastic.co/t/how-to-setup-elastic-account-from-source-code/320189)
**Author:** [@augxmas](https://discuss.elastic.co/u/augxmas)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 7:58pm UTC](https://discuss.elastic.co/t/how-to-setup-elastic-account-from-source-code/320189 "2022-11-30T19:58:45Z")
I downloaded elasticsearch source from git then run it via gradle with command 'gradlew run'. when i try to access http://localhost:9200, ES is asking id/password. usally, I setup 'elastics' account with 'elasticsearch… --- ## [Defender\_atp module error message](https://discuss.elastic.co/t/defender-atp-module-error-message/320188)
**Author:** [@intsec](https://discuss.elastic.co/u/intsec)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 7:52pm UTC](https://discuss.elastic.co/t/defender-atp-module-error-message/320188 "2022-11-30T19:52:51Z")
I have finally got my Azure application for defender ATP to connect to my manager but when looking at the logs that are coming in to Kibana they are all with this error.message cannot access method/field \[length\] from a… --- ## [How to load balance data coming from various applications to logstash](https://discuss.elastic.co/t/how-to-load-balance-data-coming-from-various-applications-to-logstash/319989)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 6\ **Last updated:** [November 30, 2022, 7:32pm UTC](https://discuss.elastic.co/t/how-to-load-balance-data-coming-from-various-applications-to-logstash/319989 "2022-11-30T19:32:23Z")
Hi All, I need some suggestions on how/what can be used to balance the data that is coming from 1000 of applications to logstash. Architecture looks like this: We have various sources who's logs needs to be integrated… --- ## [\[SOLVED\] Mistake input with Elastic PHP 8.5.0](https://discuss.elastic.co/t/solved-mistake-input-with-elastic-php-8-5-0/320182)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 6:29pm UTC](https://discuss.elastic.co/t/solved-mistake-input-with-elastic-php-8-5-0/320182 "2022-11-30T18:29:22Z")
I'm using PHP Client API for work with SQL (intensive) But I've a problem. In my first few unit tests, I was using a simple named index. My surprise has been when trying to do the integration tests, when I took it out… --- ## [How to convert latitude and longitude in logstash and store in elasticserach in a proper format](https://discuss.elastic.co/t/how-to-convert-latitude-and-longitude-in-logstash-and-store-in-elasticserach-in-a-proper-format/320116)
**Author:** [@Dhanushka\_Samarasing](https://discuss.elastic.co/u/Dhanushka_Samarasing)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 5:45pm UTC](https://discuss.elastic.co/t/how-to-convert-latitude-and-longitude-in-logstash-and-store-in-elasticserach-in-a-proper-format/320116 "2022-11-30T17:45:04Z")
I have latitude and longitude data in a Postgresql DB, now I need to move those data to Elasticsearch through Logstash pipeline. I have tried different methods but non of them did not work so far. This is the sample rec… --- ## [V 8.5.0 update - boolean field not working in donut lens anymore](https://discuss.elastic.co/t/v-8-5-0-update-boolean-field-not-working-in-donut-lens-anymore/318949)
**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\ **Replies:** 11\ **Last updated:** [November 30, 2022, 5:20pm UTC](https://discuss.elastic.co/t/v-8-5-0-update-boolean-field-not-working-in-donut-lens-anymore/318949 "2022-11-30T17:20:39Z")
Dear All, recently I updated to version 8.5.0 Since that time a donut lens isn't working. This mapping for this donat is defined with "bq\_DMZ": { "type": "boolean" }, With logstash I am importing the d… --- ## [Aws vpcflow parser not loading/executing](https://discuss.elastic.co/t/aws-vpcflow-parser-not-loading-executing/320082)
**Author:** [@erhank](https://discuss.elastic.co/u/erhank)\ **Replies:** 4\ **Last updated:** [November 30, 2022, 5:18pm UTC](https://discuss.elastic.co/t/aws-vpcflow-parser-not-loading-executing/320082 "2022-11-30T17:18:57Z")
filebeat 8.4.3 attempting to consume AWS vpcflow logs from S3 and output to logstash S3 consumption is happening correctly, but ingest pipeline fails to run on messages -- the output messages simply contain original mes… --- ## [Filebeat not picking up the data and logs path from config file](https://discuss.elastic.co/t/filebeat-not-picking-up-the-data-and-logs-path-from-config-file/320168)
**Author:** [@Arjun\_Meena](https://discuss.elastic.co/u/Arjun_Meena)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 5:09pm UTC](https://discuss.elastic.co/t/filebeat-not-picking-up-the-data-and-logs-path-from-config-file/320168 "2022-11-30T17:09:03Z")
We are running the filebeat as a service on our ec2 machine. Below is the configuration file. # ============================== Filebeat inputs =============================== filebeat.inputs: - type: log enabled: tr… --- ## [Why use Filebeat before Logstash?](https://discuss.elastic.co/t/why-use-filebeat-before-logstash/320171)
**Author:** [@scantron](https://discuss.elastic.co/u/scantron)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 3:48pm UTC](https://discuss.elastic.co/t/why-use-filebeat-before-logstash/320171 "2022-11-30T15:48:35Z")
Hi all, I am working with syslogs from various different networking devices all going to the same port. Filebeat does not allow you to use multiple modules to parse logs all coming in on the same port. So Logstash is ho… [Previous page](https://discuss.elastic.co/latest.md?page=874) [Next page](https://discuss.elastic.co/latest.md?page=876)