# Latest **URL:** https://discuss.elastic.co/latest.md?page=926 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 927 --- ## [Kubernetes Module of Metricbeat does not get pct metrics from Kubelet on Windows](https://discuss.elastic.co/t/kubernetes-module-of-metricbeat-does-not-get-pct-metrics-from-kubelet-on-windows/315694)
**Author:** [@rituzzzpilot](https://discuss.elastic.co/u/rituzzzpilot)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 7:26am UTC](https://discuss.elastic.co/t/kubernetes-module-of-metricbeat-does-not-get-pct-metrics-from-kubelet-on-windows/315694 "2022-10-19T07:26:07Z")
Hi, everyone I have been testing metricbeat 7.17 Kubernetes module with Kubelet 1.24.3 and windows worker nodes (Windows Server 2022). I use Metricbeat in order to get metrics of containers, pods and nodes. I got node a… --- ## [Index Lifecycle Management - closing indices](https://discuss.elastic.co/t/index-lifecycle-management-closing-indices/316757)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 4\ **Last updated:** [October 19, 2022, 7:10am UTC](https://discuss.elastic.co/t/index-lifecycle-management-closing-indices/316757 "2022-10-19T07:10:07Z")
Have I failed to find the relevant part of the documentation for Elasticsearch 7.17 and 8.4, or is it the case that Index Lifecycle Management does not provide a way to close indices? (And if it really doesn't provide a … --- ## [ImagePullBackOff error while deploying Elastic via ECK](https://discuss.elastic.co/t/imagepullbackoff-error-while-deploying-elastic-via-eck/316739)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 6:50am UTC](https://discuss.elastic.co/t/imagepullbackoff-error-while-deploying-elastic-via-eck/316739 "2022-10-19T06:50:03Z")
I'm trying to follow the tutorial from this page: , to deploy Elastic on K8s and I get ImagePullbackOff error, pod events below: Events: Type Reason Age From Message … --- ## [CSV file input renew interval](https://discuss.elastic.co/t/csv-file-input-renew-interval/316952)
**Author:** [@Julian\_Tang](https://discuss.elastic.co/u/Julian_Tang)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 6:40am UTC](https://discuss.elastic.co/t/csv-file-input-renew-interval/316952 "2022-10-19T06:40:22Z")
Hi I have a question ,about a CSV file , I adds additional row , 1.what time well renew this data ? 2.if I need to change interval , how to do? 3.or another better choice to update this? input { file { path =\> … --- ## [Not able to monitor with Metricbeat. Monitoring with Self monitoring in kibana](https://discuss.elastic.co/t/not-able-to-monitor-with-metricbeat-monitoring-with-self-monitoring-in-kibana/316790)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 6\ **Last updated:** [October 19, 2022, 6:14am UTC](https://discuss.elastic.co/t/not-able-to-monitor-with-metricbeat-monitoring-with-self-monitoring-in-kibana/316790 "2022-10-19T06:14:30Z")
Hello, I have configured metricbeat in windows providing you the steps I followed. kibana -\> stack monitoring -\> monitor with metricbeat -\> followed the steps mentioned there -\> downloaded and setup metricbeat. -\> cha… --- ## [How much data in GB is being ingested daily in our Elastic Cloud?](https://discuss.elastic.co/t/how-much-data-in-gb-is-being-ingested-daily-in-our-elastic-cloud/316905)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 5:24am UTC](https://discuss.elastic.co/t/how-much-data-in-gb-is-being-ingested-daily-in-our-elastic-cloud/316905 "2022-10-19T05:24:58Z")
Hello, Where to see how much data in GB is being ingested daily to our Hot nodes in our Elastic Cloud solution? Kind regards, Dane --- ## [Cannot restore index \[.ds-.logs-deprecation.elasticsearch-default](https://discuss.elastic.co/t/cannot-restore-index-ds-logs-deprecation-elasticsearch-default/316856)
**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\ **Replies:** 4\ **Last updated:** [October 19, 2022, 5:21am UTC](https://discuss.elastic.co/t/cannot-restore-index-ds-logs-deprecation-elasticsearch-default/316856 "2022-10-19T05:21:33Z")
Hi, Does someone know if .ds-.logs-deprecation.elasticsearch-default index can be deleted or can it be disabled on the configuration? I'm encountering the error below while restoring my cluster. {"error":{"root\_cause":… --- ## [Using if else in logstash filter](https://discuss.elastic.co/t/using-if-else-in-logstash-filter/316853)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 8\ **Last updated:** [October 19, 2022, 5:13am UTC](https://discuss.elastic.co/t/using-if-else-in-logstash-filter/316853 "2022-10-19T05:13:50Z")
Hi everyone, i'd like to ask, is it possible to use OR operator in if else statement in logstash filter? so, i want to delete the event that has value "VoIP-Null0", "Null0", and "Loopback0" in data.ifDescr field. i … --- ## [Hello Community,](https://discuss.elastic.co/t/hello-community/316949)
**Author:** [@Chirag\_Gupta](https://discuss.elastic.co/u/Chirag_Gupta)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 5:07am UTC](https://discuss.elastic.co/t/hello-community/316949 "2022-10-19T05:07:51Z")
Can we index the postgrec table with data as an index to elasti -search via a java client? If yes please help me out. As most of the tutorials only index some data(hard-coded) from java programme to elastic-search. --- ## [Delete Phase Not Actioned](https://discuss.elastic.co/t/delete-phase-not-actioned/316726)
**Author:** [@waleedkh](https://discuss.elastic.co/u/waleedkh)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 4:46am UTC](https://discuss.elastic.co/t/delete-phase-not-actioned/316726 "2022-10-19T04:46:38Z")
Hi there, I have an ILM configured with the following settings PUT \_ilm/policy/cwl-abc-policy { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { … --- ## [Restoring watchers](https://discuss.elastic.co/t/restoring-watchers/316391)
**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 4:30am UTC](https://discuss.elastic.co/t/restoring-watchers/316391 "2022-10-19T04:30:11Z")
Hi Everyone, I am trying to restore the watcher snapshot from ELK 7.10 version to 8.2 but it showing the following error. after this issue, I tried to setup 7.1 cluster to reindex these watchers but when I tried to … --- ## [Fatal exception while booting Elasticsearch](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/316884)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 3:59am UTC](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/316884 "2022-10-19T03:59:49Z")
Hello, While I am trying to upgrade from 8.3.2 to 8.4.1 Its upgrading the Elasticsearch but the service is not running. \[2022-10-18T11:15:37,060\]\[ERROR\]\[o.e.b.Elasticsearch \] \[vm0dnelkdma0003.corp.chartercom.com\] … --- ## [About zabbix and elastic](https://discuss.elastic.co/t/about-zabbix-and-elastic/316946)
**Author:** [@sjh0207](https://discuss.elastic.co/u/sjh0207)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 3:20am UTC](https://discuss.elastic.co/t/about-zabbix-and-elastic/316946 "2022-10-19T03:20:35Z")
Hi. i'm from korea Please understand that I am using a translator due to lack of English skills I am considering zabbix and elastic for network traffic monitoring. The reason for considering zabbix and elastic is to … --- ## [Okta log Intergration](https://discuss.elastic.co/t/okta-log-intergration/316830)
**Author:** [@sean.doody](https://discuss.elastic.co/u/sean.doody)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 3:18am UTC](https://discuss.elastic.co/t/okta-log-intergration/316830 "2022-10-19T03:18:26Z")
Hello, I am trying to test getting Okta logs to Elastic, when trying to do so, it doesnt seem like Elastic wants to ingest the logs. I am currently just testing off a work laptop, but one I get this figured out I will us… --- ## [How to configure ILM options such as Hot-Warm-Cold configuration and data limits to each phase with the Helm chart?](https://discuss.elastic.co/t/how-to-configure-ilm-options-such-as-hot-warm-cold-configuration-and-data-limits-to-each-phase-with-the-helm-chart/316872)
**Author:** [@Sankar\_S](https://discuss.elastic.co/u/Sankar_S)\ **Replies:** 0\ **Last updated:** [October 18, 2022, 9:48am UTC](https://discuss.elastic.co/t/how-to-configure-ilm-options-such-as-hot-warm-cold-configuration-and-data-limits-to-each-phase-with-the-helm-chart/316872 "2022-10-18T09:48:33Z")
how to configure ILM options such as Hot-Warm-Cold configuration and data limits to each phase with the Helm chart ? --- ## [Docker error during 3-node cluster running](https://discuss.elastic.co/t/docker-error-during-3-node-cluster-running/315304)
**Author:** [@tifty](https://discuss.elastic.co/u/tifty)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 1:24am UTC](https://discuss.elastic.co/t/docker-error-during-3-node-cluster-running/315304 "2022-10-19T01:24:03Z")
Hi everyone, I am trying to run a 3-node cluster on my local machine. Although it doesn't happen with every run but at times I am getting the "Error response from daemon: i/o timeout" error in one of the nodes randomly a… --- ## [Nested Json](https://discuss.elastic.co/t/nested-json/316939)
**Author:** [@Rdonaldson](https://discuss.elastic.co/u/Rdonaldson)\ **Replies:** 0\ **Last updated:** [October 18, 2022, 10:56pm UTC](https://discuss.elastic.co/t/nested-json/316939 "2022-10-18T22:56:28Z")
New to ES and Json. Working on building queries to extract product logging events. Could you point me in the direction/search terms/pointers so I can learn how to parse out/select data fields that are within a nested J… --- ## [X509: certificate signed by unknown authority](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/316904)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 2\ **Last updated:** [October 18, 2022, 10:53pm UTC](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/316904 "2022-10-18T22:53:56Z")
Hello, I have an SSL connection between a Windows machine with Winlogbeat and Metricbeat and an Ubuntu machine with ES and Kibana on it. The beat's .ymls file are the same, with same configuration. With the elasticsea… --- ## [Use workplace search with data already indexed in elasticsearch as a source](https://discuss.elastic.co/t/use-workplace-search-with-data-already-indexed-in-elasticsearch-as-a-source/296080)
**Author:** [@eyalaz](https://discuss.elastic.co/u/eyalaz)\ **Replies:** 7\ **Last updated:** [October 18, 2022, 10:09pm UTC](https://discuss.elastic.co/t/use-workplace-search-with-data-already-indexed-in-elasticsearch-as-a-source/296080 "2022-10-18T22:09:39Z")
Hi, We would like to use Elastic Enterprise Search with on premise Gitlab server. Our Gitlab code is already indexed in elasticsearch through the gitlab advanced search feature ( Elasticsearch | GitLab ) Can we use th… --- ## [Import CSV date format time difference](https://discuss.elastic.co/t/import-csv-date-format-time-difference/316907)
**Author:** [@Julian\_Tang](https://discuss.elastic.co/u/Julian_Tang)\ **Replies:** 6\ **Last updated:** [October 18, 2022, 9:50pm UTC](https://discuss.elastic.co/t/import-csv-date-format-time-difference/316907 "2022-10-18T21:50:00Z")
Hi I try to import a CSV file in logstash. but I have problem, the csv file first is date and time, I use separator to "timestamp", but it + 8 hours (my time zone is +8) so I how to set time don't +8 ? input { file… --- ## [New to Elastic Community](https://discuss.elastic.co/t/new-to-elastic-community/315025)
**Author:** [@tifty](https://discuss.elastic.co/u/tifty)\ **Replies:** 2\ **Last updated:** [October 18, 2022, 8:17pm UTC](https://discuss.elastic.co/t/new-to-elastic-community/315025 "2022-10-18T20:17:32Z")
Hi everyone, I am very new to using elastic stack and docker. I am using elasticsearch built by docker-compose, and currently, I am just practicing on my local machine how to make any deployment production ready. It will… --- ## [Wildcard suffix for indicies, aggregate for each index](https://discuss.elastic.co/t/wildcard-suffix-for-indicies-aggregate-for-each-index/316779)
**Author:** [@daekblad](https://discuss.elastic.co/u/daekblad)\ **Replies:** 1\ **Last updated:** [October 18, 2022, 7:29pm UTC](https://discuss.elastic.co/t/wildcard-suffix-for-indicies-aggregate-for-each-index/316779 "2022-10-18T19:29:00Z")
Hi, I have this watcher that checks for errors and sends an e-mail if any error is found. It's setup so that it checks a wildcard index patterns ("services-\*"). There are too many services so a wildcard is a must since … --- ## [How to enable size-mapper plugin / \_size field via RestHighLevelClient](https://discuss.elastic.co/t/how-to-enable-size-mapper-plugin-size-field-via-resthighlevelclient/314501)
**Author:** [@rowi1de](https://discuss.elastic.co/u/rowi1de)\ **Replies:** 19\ **Last updated:** [October 18, 2022, 7:19pm UTC](https://discuss.elastic.co/t/how-to-enable-size-mapper-plugin-size-field-via-resthighlevelclient/314501 "2022-10-18T19:19:38Z")
Hey Folks, I'm trying to add the \_size field to an existing index via RestHighLevelClient and failing to see there I could put the following "mappings": { "\_size": { "enabled": true } } the Dev Tools… --- ## [Count in Event Correlation](https://discuss.elastic.co/t/count-in-event-correlation/316197)
**Author:** [@sbianco1978](https://discuss.elastic.co/u/sbianco1978)\ **Replies:** 1\ **Last updated:** [October 18, 2022, 6:59pm UTC](https://discuss.elastic.co/t/count-in-event-correlation/316197 "2022-10-18T18:59:56Z")
Dears, I need to create an Event Correlation rule that performs a sequence that group by for a value and meantime count for another value. My scope is: sequence by user.name with maxspan=10m and count county \>= 2 se… --- ## [Does logstash support zip format logs from s3 bucket](https://discuss.elastic.co/t/does-logstash-support-zip-format-logs-from-s3-bucket/316877)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 7\ **Last updated:** [October 18, 2022, 6:20pm UTC](https://discuss.elastic.co/t/does-logstash-support-zip-format-logs-from-s3-bucket/316877 "2022-10-18T18:20:38Z")
Hi Team, Just want to know does logstash support the integration of logs from s3 bucket which are in .zip format? Regards --- ## [Fleet Integrations in dockerized services](https://discuss.elastic.co/t/fleet-integrations-in-dockerized-services/316926)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 0\ **Last updated:** [October 18, 2022, 5:53pm UTC](https://discuss.elastic.co/t/fleet-integrations-in-dockerized-services/316926 "2022-10-18T17:53:39Z")
Hello, I'm trying to get som Traefik logs from a docker container. With regular filebeat I can configure the autodiscover option to make it work, but not sure how to do this with Fleet. I could only find this: docker… --- ## [There are no transform nodes available](https://discuss.elastic.co/t/there-are-no-transform-nodes-available/316889)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 4\ **Last updated:** [October 18, 2022, 5:26pm UTC](https://discuss.elastic.co/t/there-are-no-transform-nodes-available/316889 "2022-10-18T17:26:38Z")
Hi, I am configuring enroll an agent with endpoint and cloud security module and while it doing I'm getting error "Required transform failed" and "A required transform, endpoint.metadata\_current-default-8.4.1, endpoint.… --- ## [Agent binary download source location not working](https://discuss.elastic.co/t/agent-binary-download-source-location-not-working/316925)
**Author:** [@andrisarkameru](https://discuss.elastic.co/u/andrisarkameru)\ **Replies:** 0\ **Last updated:** [October 18, 2022, 5:09pm UTC](https://discuss.elastic.co/t/agent-binary-download-source-location-not-working/316925 "2022-10-18T17:09:40Z")
Hello, I'm using elasticsearch/kibana version 8.4.2 on windows containers. It seems that Kibana fleet binary download source setting does not work, or does not get taken into account. i'm following the air-gapped inst… --- ## [Ingest already created doc in pubsub to elk using logstash](https://discuss.elastic.co/t/ingest-already-created-doc-in-pubsub-to-elk-using-logstash/316924)
**Author:** [@Dennis\_John](https://discuss.elastic.co/u/Dennis_John)\ **Replies:** 0\ **Last updated:** [October 18, 2022, 5:00pm UTC](https://discuss.elastic.co/t/ingest-already-created-doc-in-pubsub-to-elk-using-logstash/316924 "2022-10-18T17:00:09Z")
Hi, I am using microservices and part of the job by microservices is to create a doc with index and doc id and other fields that will be pushed to pubsub. Currently, we are ingesting to elk by pulling messages from GCP… --- ## [ILM shrink adds random uuid but no aliases created](https://discuss.elastic.co/t/ilm-shrink-adds-random-uuid-but-no-aliases-created/316457)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 3\ **Last updated:** [October 18, 2022, 3:35pm UTC](https://discuss.elastic.co/t/ilm-shrink-adds-random-uuid-but-no-aliases-created/316457 "2022-10-18T15:35:36Z")
elasticsearch version 7.17 since upgrading from 7.6.2. to 7.17.x, i noticed ilm adds a random uuid to the shrunk index name. looks like this feature was added in 7.13 (see here). my ilm policy was set up again right af… [Previous page](https://discuss.elastic.co/latest.md?page=925) [Next page](https://discuss.elastic.co/latest.md?page=927)