# Latest

**URL:** https://discuss.elastic.co/latest.md?page=916

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 917

---

## [How to Config Elastic Agent in Windows Form .NET framework 4.8 without System variables](https://discuss.elastic.co/t/how-to-config-elastic-agent-in-windows-form-net-framework-4-8-without-system-variables/317639)

<div class="topic-metadata">

**Author:** [@AUnkownS](https://discuss.elastic.co/u/AUnkownS)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 6:28pm UTC](https://discuss.elastic.co/t/how-to-config-elastic-agent-in-windows-form-net-framework-4-8-without-system-variables/317639 "2022-10-27T18:28:14Z")

</div>

Hello, I am trying to config a elastic agent in a windows desktop application(winforms) in the .NET framework 4.8. My goal is to change the Agents Url and Service name, without having to use environment variables. I tri…

---

## [List all indices using Java rest client](https://discuss.elastic.co/t/list-all-indices-using-java-rest-client/317629)

<div class="topic-metadata">

**Author:** [@PV2000](https://discuss.elastic.co/u/PV2000)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 6:00pm UTC](https://discuss.elastic.co/t/list-all-indices-using-java-rest-client/317629 "2022-10-27T18:00:31Z")

</div>

Hi, What is the best way to get a list of all indices in Elastic Search using Java ? I am using RestHighLevelClient. Also, is there a way to get only those indices that match a prefix ? I see cat indices REST endpoin…

---

## [@timestamp missing exception for datastream](https://discuss.elastic.co/t/timestamp-missing-exception-for-datastream/317633)

<div class="topic-metadata">

**Author:** [@Sankar\_S](https://discuss.elastic.co/u/Sankar_S)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 5:24pm UTC](https://discuss.elastic.co/t/timestamp-missing-exception-for-datastream/317633 "2022-10-27T17:24:20Z")

</div>

Getting the below exception while indexing the document into datastream org.elasticsearch.ElasticsearchException: Elasticsearch exception \[type=illegal\_argument\_exception, reason=data stream timestamp field \[@timestamp\]…

---

## [How can I set up autodiscovery for Dockerized mysql metrics and logs using Elastic Agent managed by Fleet?](https://discuss.elastic.co/t/how-can-i-set-up-autodiscovery-for-dockerized-mysql-metrics-and-logs-using-elastic-agent-managed-by-fleet/317632)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 5:14pm UTC](https://discuss.elastic.co/t/how-can-i-set-up-autodiscovery-for-dockerized-mysql-metrics-and-logs-using-elastic-agent-managed-by-fleet/317632 "2022-10-27T17:14:08Z")

</div>

Judging from Can I monitor apache inside a docker container? and Autodiscover | Metricbeat Reference \[8.4\] | Elastic there should be a way to configure autodiscovery of my MySQL/MariaDB containers. When I try adding a M…

---

## [How to get all fields in Enterprise Workplace search connected with Jira Service Management?](https://discuss.elastic.co/t/how-to-get-all-fields-in-enterprise-workplace-search-connected-with-jira-service-management/317591)

<div class="topic-metadata">

**Author:** [@Fiza](https://discuss.elastic.co/u/Fiza)\
**Replies:** 7\
**Last updated:** [October 27, 2022, 4:55pm UTC](https://discuss.elastic.co/t/how-to-get-all-fields-in-enterprise-workplace-search-connected-with-jira-service-management/317591 "2022-10-27T16:55:16Z")

</div>

I looked into forum whether there is any question related to this but couldn't find any. I have integrated JSM with elastic enterprise search (Workplace search). Over there in workplace I'm getting issue data with seve…

---

## [What is APM Latency Threshold Alert?](https://discuss.elastic.co/t/what-is-apm-latency-threshold-alert/317627)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 5\
**Last updated:** [October 27, 2022, 4:38pm UTC](https://discuss.elastic.co/t/what-is-apm-latency-threshold-alert/317627 "2022-10-27T16:38:20Z")

</div>

I'm trying to learn what the Latency Threshold Alert is as shown in this picture for Kibana 8.4 But the rule above never seems to fire at all, even though my node-app-1 service averages latency of 10 seconds, which i…

---

## [Issue creating index with alert](https://discuss.elastic.co/t/issue-creating-index-with-alert/317604)

<div class="topic-metadata">

**Author:** [@Florian-LB](https://discuss.elastic.co/u/Florian-LB)\
**Replies:** 2\
**Last updated:** [October 27, 2022, 3:14pm UTC](https://discuss.elastic.co/t/issue-creating-index-with-alert/317604 "2022-10-27T15:14:30Z")

</div>

Hi, I want to setup an alert when 3 login rejections occur on the same switch in order to get this info on my dashboard. I created a threshold rule “Alerte Brute Force Cisco” that raise an alert when 3 authentications …

---

## [Rollback/Downgrade of integration possible?](https://discuss.elastic.co/t/rollback-downgrade-of-integration-possible/317624)

<div class="topic-metadata">

**Author:** [@matled](https://discuss.elastic.co/u/matled)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 2:40pm UTC](https://discuss.elastic.co/t/rollback-downgrade-of-integration-possible/317624 "2022-10-27T14:40:58Z")

</div>

Hi there Is it possible to rollback/downgrade to an earlier version of an integration? We currently observed an issue with the newest System Integration that doesn't populate ECS Fields like user.name or domain.name any…

---

## [Data Stream not found in Data Views](https://discuss.elastic.co/t/data-stream-not-found-in-data-views/317222)

<div class="topic-metadata">

**Author:** [@sakib3833](https://discuss.elastic.co/u/sakib3833)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 2:22pm UTC](https://discuss.elastic.co/t/data-stream-not-found-in-data-views/317222 "2022-10-27T14:22:55Z")

</div>

I use Microsoft Defender Endpoint integration to collect logs. The agent installed perfectly and the other ID and secret key put accordingly. In the Index management section it shows that it creates Data Stream. But…

---

## [Kibana Rules Authentication when Creator leaves Project](https://discuss.elastic.co/t/kibana-rules-authentication-when-creator-leaves-project/317091)

<div class="topic-metadata">

**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\
**Replies:** 4\
**Last updated:** [October 27, 2022, 1:31pm UTC](https://discuss.elastic.co/t/kibana-rules-authentication-when-creator-leaves-project/317091 "2022-10-27T13:31:56Z")

</div>

Good Morning, I am wondering if anyone has run into a similar scenario. We have implemented watchers and rules in our environment. One of the people who created some of these rules has left the project. We use AD to au…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/317390)

<div class="topic-metadata">

**Author:** [@bungearnss](https://discuss.elastic.co/u/bungearnss)\
**Replies:** 7\
**Last updated:** [October 27, 2022, 1:19pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/317390 "2022-10-27T13:19:31Z")

</div>

Hello Community, I am trying to run Kibana server but I am getting this error, can anyone give me some advice? This is my es.yml file, I want xpack.security.enabled: false remains In my kibana.yml just uncomment …

---

## [Problem with Endpoint Security Initiation](https://discuss.elastic.co/t/problem-with-endpoint-security-initiation/316419)

<div class="topic-metadata">

**Author:** [@Patryk\_Ostrowski](https://discuss.elastic.co/u/Patryk_Ostrowski)\
**Replies:** 7\
**Last updated:** [October 27, 2022, 12:50pm UTC](https://discuss.elastic.co/t/problem-with-endpoint-security-initiation/316419 "2022-10-27T12:50:35Z")

</div>

Hello, I'm trying to initialize Security Endpoint on a Linux Ubuntu 20.04.4 LTS. After that I had a 13 problems for example: "Configure File Events Failure enabling file events; current state is disabled". I tried to di…

---

## [Elasticsearch integration with Zabbix](https://discuss.elastic.co/t/elasticsearch-integration-with-zabbix/316489)

<div class="topic-metadata">

**Author:** [@Muhammad\_Umar](https://discuss.elastic.co/u/Muhammad_Umar)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 6:02am UTC](https://discuss.elastic.co/t/elasticsearch-integration-with-zabbix/316489 "2022-10-13T06:02:20Z")

</div>

I tried to extract log files from Zabbix to Grafana, which came out successful. Now I want to extract the same from Grafana to Elasticsearch and view the same in Kibana. Is this possible?? If “yes” explain it briefly (o…

---

## [Newcomers seeking advice](https://discuss.elastic.co/t/newcomers-seeking-advice/317583)

<div class="topic-metadata">

**Author:** [@sir\_t](https://discuss.elastic.co/u/sir_t)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 12:01pm UTC](https://discuss.elastic.co/t/newcomers-seeking-advice/317583 "2022-10-27T12:01:28Z")

</div>

I want to run docker Elasticsearch and kibana containers separately on a cloud server, I tried to build it myself, but I can only access elasticsearch remotely by configuring https, how do I go about it, can you give me …

---

## [Dynamic Elasticsearch query execution from Node JS](https://discuss.elastic.co/t/dynamic-elasticsearch-query-execution-from-node-js/317602)

<div class="topic-metadata">

**Author:** [@pravu](https://discuss.elastic.co/u/pravu)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 10:55am UTC](https://discuss.elastic.co/t/dynamic-elasticsearch-query-execution-from-node-js/317602 "2022-10-27T10:55:43Z")

</div>

I need to execute dynamic queries from Node JS . I tried the following script and getting error. async function executeDynamicTest (){ const querySrting= "{index: 'entity\_index', query: { match: { amount: '1819' }}}"; …

---

## [Elasticsearch snapshot restoration error for system indices](https://discuss.elastic.co/t/elasticsearch-snapshot-restoration-error-for-system-indices/317138)

<div class="topic-metadata">

**Author:** [@jaykb77](https://discuss.elastic.co/u/jaykb77)\
**Replies:** 5\
**Last updated:** [October 27, 2022, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-restoration-error-for-system-indices/317138 "2022-10-27T08:49:29Z")

</div>

Im trying to restore a snapshot(snapshot of entire cluster) and exclude internal indices as recommended in documentation (Restore a snapshot | Elasticsearch Guide \[7.17\] | Elastic ) Although this method is supposed to b…

---

## [Remove field suggestions from Query bar](https://discuss.elastic.co/t/remove-field-suggestions-from-query-bar/317471)

<div class="topic-metadata">

**Author:** [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)\
**Replies:** 5\
**Last updated:** [October 27, 2022, 8:26am UTC](https://discuss.elastic.co/t/remove-field-suggestions-from-query-bar/317471 "2022-10-27T08:26:56Z")

</div>

These field name appear by default in the Query Bar. Please advise if we can remove these fields and have a simple text search.

---

## [Grok parse failure](https://discuss.elastic.co/t/grok-parse-failure/317379)

<div class="topic-metadata">

**Author:** [@Paf](https://discuss.elastic.co/u/Paf)\
**Replies:** 2\
**Last updated:** [October 27, 2022, 7:23am UTC](https://discuss.elastic.co/t/grok-parse-failure/317379 "2022-10-27T07:23:40Z")

</div>

Hello, I want to parse the field "ModifiedProperties" with this value : {"Name":"StrongAuthenticationMethod","NewValue":"\[\\r\\n {\\r\\n \\"MethodType\\": 5,\\r\\n \\"Default\\": true\\r\\n },\\r\\n {\\r\\n \\"MethodType\\":…

---

## [Mage package is failed in windows](https://discuss.elastic.co/t/mage-package-is-failed-in-windows/317592)

<div class="topic-metadata">

**Author:** [@nosor70637](https://discuss.elastic.co/u/nosor70637)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 7:18am UTC](https://discuss.elastic.co/t/mage-package-is-failed-in-windows/317592 "2022-10-27T07:18:22Z")

</div>

Hi, I try to build metricbeat in my windows machine, run mage package command threw error like below C:\\Program Files\\Go\\src\\beats\\metricbeat\>mage package Generated fields.yml for metricbeat to C:\\Program Files\\Go\\src\\b…

---

## [Impossible to set password for elastic builtin superuser](https://discuss.elastic.co/t/impossible-to-set-password-for-elastic-builtin-superuser/317305)

<div class="topic-metadata">

**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\
**Replies:** 13\
**Last updated:** [October 27, 2022, 7:11am UTC](https://discuss.elastic.co/t/impossible-to-set-password-for-elastic-builtin-superuser/317305 "2022-10-27T07:11:51Z")

</div>

Hi, I just install elasticsearch 8.4.1 from elasticsearch-8.4.1-1.x86\_64 RPM on a Red Hat Enterprise Linux release 8.6 (Ootpa) server. Everything looks ok, elastic service is running. But I cannot find the elastic use…

---

## [Big JSON Payloads in Elastic APM](https://discuss.elastic.co/t/big-json-payloads-in-elastic-apm/317527)

<div class="topic-metadata">

**Author:** [@rStorms](https://discuss.elastic.co/u/rStorms)\
**Replies:** 2\
**Last updated:** [October 27, 2022, 6:59am UTC](https://discuss.elastic.co/t/big-json-payloads-in-elastic-apm/317527 "2022-10-27T06:59:20Z")

</div>

Hi there, we are using Elastic for Logs and APM in our application. To track bigger JSON payloads sent via REST between Microservices we selectively log those to a capped MongoDB collection in order to debug. I saw the …

---

## [Create enrollment for kibana impossible with certificate Lets Encript](https://discuss.elastic.co/t/create-enrollment-for-kibana-impossible-with-certificate-lets-encript/317294)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 3\
**Last updated:** [October 27, 2022, 6:54am UTC](https://discuss.elastic.co/t/create-enrollment-for-kibana-impossible-with-certificate-lets-encript/317294 "2022-10-27T06:54:42Z")

</div>

After the problem I indicated in the post I can't get Elastic and Kibana to work with real certificates I was finally able to understand the issue of needing to pass the --url in the command. But now when I want to gene…

---

## [Oracle cloud instances logs in elk siem](https://discuss.elastic.co/t/oracle-cloud-instances-logs-in-elk-siem/317207)

<div class="topic-metadata">

**Author:** [@Sarala\_C](https://discuss.elastic.co/u/Sarala_C)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 6:50am UTC](https://discuss.elastic.co/t/oracle-cloud-instances-logs-in-elk-siem/317207 "2022-10-27T06:50:53Z")

</div>

Hello, Our requirement is to ingest oracle cloud instances logs into ELK SIEM that is hosted on azure cloud. Is this possible? if yes then please can you guide. Waiting for any solution. Thanks Sarala

---

## [ELK & APIs calls](https://discuss.elastic.co/t/elk-apis-calls/317116)

<div class="topic-metadata">

**Author:** [@noshell](https://discuss.elastic.co/u/noshell)\
**Replies:** 3\
**Last updated:** [October 27, 2022, 6:28am UTC](https://discuss.elastic.co/t/elk-apis-calls/317116 "2022-10-27T06:28:46Z")

</div>

Hello, I have a design / architecture question. In a project i wish you to implement REST APIs with custom dashboards but i want to segreagte network flows. I would like to know if i used a distributed archietcture wh…

---

## [Create a conditional mapping (enabled = false) on a single field based on field value](https://discuss.elastic.co/t/create-a-conditional-mapping-enabled-false-on-a-single-field-based-on-field-value/317572)

<div class="topic-metadata">

**Author:** [@JerryKumar](https://discuss.elastic.co/u/JerryKumar)\
**Replies:** 1\
**Last updated:** [October 27, 2022, 5:57am UTC](https://discuss.elastic.co/t/create-a-conditional-mapping-enabled-false-on-a-single-field-based-on-field-value/317572 "2022-10-27T05:57:24Z")

</div>

Hey team, I have a use case in my application where a list of items called Descriptors are generated. These are filtered for a specific prefix "descsearch" and only these are being sent to the index and everything work…

---

## [How to use XContentBuilder in Elasticsearch 8.0](https://discuss.elastic.co/t/how-to-use-xcontentbuilder-in-elasticsearch-8-0/317256)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 8\
**Last updated:** [October 27, 2022, 5:56am UTC](https://discuss.elastic.co/t/how-to-use-xcontentbuilder-in-elasticsearch-8-0/317256 "2022-10-27T05:56:59Z")

</div>

Hi, i found some examples how to use XContentBuilder in Elasticsearch 7.x but these examples do not work any more since ESJAC is completely new programmed. But as XContentBuilder still exists: XContentBuilder (elasticse…

---

## [Elasticsearch Multi-word synonyms and stopword issue](https://discuss.elastic.co/t/elasticsearch-multi-word-synonyms-and-stopword-issue/317585)

<div class="topic-metadata">

**Author:** [@sudheesh](https://discuss.elastic.co/u/sudheesh)\
**Replies:** 0\
**Last updated:** [October 27, 2022, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-multi-word-synonyms-and-stopword-issue/317585 "2022-10-27T05:54:33Z")

</div>

I have created an index as follows PUT /wordforms\_example { "mappings": { "dynamic": "strict", "properties": { "test\_field": { "type": "text", "analyzer": "synonym\_words\_analyzer\_…

---

## [Question about statistics delayed too long](https://discuss.elastic.co/t/question-about-statistics-delayed-too-long/317577)

<div class="topic-metadata">

**Author:** [@315386775](https://discuss.elastic.co/u/315386775)\
**Replies:** 2\
**Last updated:** [October 27, 2022, 5:54am UTC](https://discuss.elastic.co/t/question-about-statistics-delayed-too-long/317577 "2022-10-27T05:54:11Z")

</div>

i use the kibana with CVAT GitHub - opencv/cvat: Annotate better with CVAT, the industry-leading data engine for machine learning. Used and trusted by teams at any scale, for data of any scale. Question in Kibana. I ca…

---

## [Logstash failing to convert from csv to json and to forward to opensearch](https://discuss.elastic.co/t/logstash-failing-to-convert-from-csv-to-json-and-to-forward-to-opensearch/317264)

<div class="topic-metadata">

**Author:** [@D\_Go](https://discuss.elastic.co/u/D_Go)\
**Replies:** 12\
**Last updated:** [October 27, 2022, 5:35am UTC](https://discuss.elastic.co/t/logstash-failing-to-convert-from-csv-to-json-and-to-forward-to-opensearch/317264 "2022-10-27T05:35:54Z")

</div>

Hi, I've been at this for a while and cant seem to load a csv file to AWS opensearch from logstash. Any help will be appreciated. """ \[ERROR\] 2022-10-23 04:09:20.063 \[Converge PipelineAction::Create\] agent - Failed to…

---

## [What is Elastic agent?](https://discuss.elastic.co/t/what-is-elastic-agent/317087)

<div class="topic-metadata">

**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\
**Replies:** 6\
**Last updated:** [October 27, 2022, 4:31am UTC](https://discuss.elastic.co/t/what-is-elastic-agent/317087 "2022-10-27T04:31:05Z")

</div>

Hi everyone, I know this is going to very basic question but I am new to ELK stack, and I have so many things to learn. I have installed ELK stack (Logstash, Elasticsearch, and Kibana), and also I have configured the f…

[Previous page](https://discuss.elastic.co/latest.md?page=915)

[Next page](https://discuss.elastic.co/latest.md?page=917)
