# Latest

**URL:** https://discuss.elastic.co/latest.md?page=937

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 938

---

## [.NET Agent is not capturing / sending spans to APM/ Elastic](https://discuss.elastic.co/t/net-agent-is-not-capturing-sending-spans-to-apm-elastic/314319)

<div class="topic-metadata">

**Author:** [@dwmri](https://discuss.elastic.co/u/dwmri)\
**Replies:** 8\
**Last updated:** [October 10, 2022, 6:32pm UTC](https://discuss.elastic.co/t/net-agent-is-not-capturing-sending-spans-to-apm-elastic/314319 "2022-10-10T18:32:08Z")

</div>

Hi, We are trying to capture tracing data from a .NET application into APM to help pinpoint performance problems, we can see HTTP requests listed under the application in Kibana, with URL and times, however we cannot se…

---

## [Painless script - counting equal values in a field](https://discuss.elastic.co/t/painless-script-counting-equal-values-in-a-field/316252)

<div class="topic-metadata">

**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 6:06pm UTC](https://discuss.elastic.co/t/painless-script-counting-equal-values-in-a-field/316252 "2022-10-10T18:06:31Z")

</div>

Hi. I'm not good with pineless syntax. Please tell me by painless script. How to count the same values in a field ? For example, in the field 1 = 111 three times. How to count duplicates ?

---

## [Elastic password generate error](https://discuss.elastic.co/t/elastic-password-generate-error/316239)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 5:49pm UTC](https://discuss.elastic.co/t/elastic-password-generate-error/316239 "2022-10-10T17:49:06Z")

</div>

sudo ./elasticsearch-setup-passwords auto warning: ignoring JAVA\_HOME=/usr/lib/jvm/java-11-openjdk-amd64; using bundled JDK 14:42:41.915 \[main\] WARN org.elasticsearch.common.ssl.DiagnosticTrustManager - failed to estab…

---

## [Logstash not starting](https://discuss.elastic.co/t/logstash-not-starting/316188)

<div class="topic-metadata">

**Author:** [@sandeep\_singh3](https://discuss.elastic.co/u/sandeep_singh3)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 5:44pm UTC](https://discuss.elastic.co/t/logstash-not-starting/316188 "2022-10-10T17:44:57Z")

</div>

I am trying to run Logstash on my window machine but unable to do so due below error \\Eclipse was unexpected at this time. Command used to run the logstash logstash.bat -f logstash.conf Version of Logstash - 7.16.3 l…

---

## [Docker Filebeats for raspberrpi 4 aarch64](https://discuss.elastic.co/t/docker-filebeats-for-raspberrpi-4-aarch64/316011)

<div class="topic-metadata">

**Author:** [@Nlmyr](https://discuss.elastic.co/u/Nlmyr)\
**Replies:** 3\
**Last updated:** [October 10, 2022, 5:39pm UTC](https://discuss.elastic.co/t/docker-filebeats-for-raspberrpi-4-aarch64/316011 "2022-10-10T17:39:38Z")

</div>

Is Docker Filebeats for raspberrpi 4 aarch64 available?

---

## [Build your own Beat in Go](https://discuss.elastic.co/t/build-your-own-beat-in-go/316066)

<div class="topic-metadata">

**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\
**Replies:** 4\
**Last updated:** [October 10, 2022, 5:38pm UTC](https://discuss.elastic.co/t/build-your-own-beat-in-go/316066 "2022-10-10T17:38:11Z")

</div>

I needed to send messages to Logstash using Beat from a little app I'm developing in Go. I've seen different ways to do it without doing calling services as filebeat to not create a dependency. I was taking a look to t…

---

## [Winlogbeat may leak PublisherHandle, and lead to failure of sysmon uninstalling](https://discuss.elastic.co/t/winlogbeat-may-leak-publisherhandle-and-lead-to-failure-of-sysmon-uninstalling/316246)

<div class="topic-metadata">

**Author:** [@Serinalice](https://discuss.elastic.co/u/Serinalice)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 4:21pm UTC](https://discuss.elastic.co/t/winlogbeat-may-leak-publisherhandle-and-lead-to-failure-of-sysmon-uninstalling/316246 "2022-10-10T16:21:06Z")

</div>

When I use "github.com/elastic/beats/v7/winlogbeat" library to build my app which manages sysmon and reads events of sysmon from windows event system, I found the app uninstall sysmon failed. This is the minimal code to …

---

## [Filebeat can't process all the logs](https://discuss.elastic.co/t/filebeat-cant-process-all-the-logs/316017)

<div class="topic-metadata">

**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 3:56pm UTC](https://discuss.elastic.co/t/filebeat-cant-process-all-the-logs/316017 "2022-10-10T15:56:01Z")

</div>

Hello team, Greeting, I have a setup that will push the logs from filebeat to logstash to elastic. Here is my filebeat configs filebeat.inputs: - type: log enabled: true paths: - '/var/www/log/myapp.log' clos…

---

## [Set variable in configuration file](https://discuss.elastic.co/t/set-variable-in-configuration-file/316096)

<div class="topic-metadata">

**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\
**Replies:** 5\
**Last updated:** [October 10, 2022, 3:41pm UTC](https://discuss.elastic.co/t/set-variable-in-configuration-file/316096 "2022-10-10T15:41:30Z")

</div>

Hi all ! Simply, is there some method in Logstash news versions to code a variable which can be used in input, filter and output sections ? if so, how to code it ? Thanks.

---

## [Choosing tracks that contain long-running tasks](https://discuss.elastic.co/t/choosing-tracks-that-contain-long-running-tasks/316193)

<div class="topic-metadata">

**Author:** [@Sunt-ing](https://discuss.elastic.co/u/Sunt-ing)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 3:34pm UTC](https://discuss.elastic.co/t/choosing-tracks-that-contain-long-running-tasks/316193 "2022-10-10T15:34:44Z")

</div>

Hi all! I need to benchmark on a track that contains some long-running (such as larger than 10s) tasks. Benchmarking one track after another is definitely an approach and I'm working on that, but there are so many tracks…

---

## [Updating elastic search document by id is not working](https://discuss.elastic.co/t/updating-elastic-search-document-by-id-is-not-working/316240)

<div class="topic-metadata">

**Author:** [@Atul\_Joshi1](https://discuss.elastic.co/u/Atul_Joshi1)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 3:26pm UTC](https://discuss.elastic.co/t/updating-elastic-search-document-by-id-is-not-working/316240 "2022-10-10T15:26:05Z")

</div>

I have document structure as below stored in Elasticsearch - { "\_index" : "testIndex", "\_type" : "\_doc", "\_id" : "6ZR6soMBLkXUqNwMnccZ", "\_score" : 3.4454321, "\_source" : { …

---

## [No Host events Endpoint Security](https://discuss.elastic.co/t/no-host-events-endpoint-security/316046)

<div class="topic-metadata">

**Author:** [@shellcode](https://discuss.elastic.co/u/shellcode)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 2:35pm UTC](https://discuss.elastic.co/t/no-host-events-endpoint-security/316046 "2022-10-10T14:35:09Z")

</div>

Hi all, I have installed Elastic Agent (enrolled with fleet and healthy) and Endpoint Security on a couple of hosts. All seems to work, except I am missing host events in the overview. There are events, but the messages…

---

## [SpringBoot 2.5.8 highest supported elasticsearch version](https://discuss.elastic.co/t/springboot-2-5-8-highest-supported-elasticsearch-version/316224)

<div class="topic-metadata">

**Author:** [@Er-Young](https://discuss.elastic.co/u/Er-Young)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 2:00pm UTC](https://discuss.elastic.co/t/springboot-2-5-8-highest-supported-elasticsearch-version/316224 "2022-10-10T14:00:34Z")

</div>

gods help me please~ SpringBoot 2.5.8 can use elasticsearch 7.17.2? if not ,which highest version I can choose?

---

## [New Java client how to estimate size of BulkRequest](https://discuss.elastic.co/t/new-java-client-how-to-estimate-size-of-bulkrequest/316211)

<div class="topic-metadata">

**Author:** [@fabian-froehlich](https://discuss.elastic.co/u/fabian-froehlich)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 11:32am UTC](https://discuss.elastic.co/t/new-java-client-how-to-estimate-size-of-bulkrequest/316211 "2022-10-10T11:32:00Z")

</div>

Is there a efferent way to estimate the size of the bulk request in the new ElasticsearchClient ? Currently our in the HighLevelRest-Client we use the method bulkRequest.estimatedSizeInBytes() to check whether another …

---

## [Script field is automatically deleted from the index pattern](https://discuss.elastic.co/t/script-field-is-automatically-deleted-from-the-index-pattern/316175)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 12:23pm UTC](https://discuss.elastic.co/t/script-field-is-automatically-deleted-from-the-index-pattern/316175 "2022-10-10T12:23:50Z")

</div>

Hi Community, recently we add a custom field that parse the string field to integer field that time it was showing and after 7 days it is deleted. We have added the field by clicking on Add Field.

---

## [Kibana field filter suggester settings](https://discuss.elastic.co/t/kibana-field-filter-suggester-settings/315665)

<div class="topic-metadata">

**Author:** [@gribna](https://discuss.elastic.co/u/gribna)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 10:39am UTC](https://discuss.elastic.co/t/kibana-field-filter-suggester-settings/315665 "2022-10-10T10:39:18Z")

</div>

Which setting affects the appearance of value suggestion list in filters and in queries? We have several environments and it doesn't work for one of them. The difference between environments is that the one that doesn't…

---

## [Kibana cannot startup - always tried to migrate](https://discuss.elastic.co/t/kibana-cannot-startup-always-tried-to-migrate/316200)

<div class="topic-metadata">

**Author:** [@misterking7](https://discuss.elastic.co/u/misterking7)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 9:47am UTC](https://discuss.elastic.co/t/kibana-cannot-startup-always-tried-to-migrate/316200 "2022-10-10T09:47:42Z")

</div>

Hello team, I have issue with Kibana that cannot start up . before it was deployed into Openshift3 , Kibana version showed as 7.9.3 - Elasticsearch is 7.9.2 now, I tried to shutdown old cluster instance on Openshift3 …

---

## [Roadmap for "Stateless" Elasticsearch](https://discuss.elastic.co/t/roadmap-for-stateless-elasticsearch/316107)

<div class="topic-metadata">

**Author:** [@benjismith](https://discuss.elastic.co/u/benjismith)\
**Replies:** 8\
**Last updated:** [October 10, 2022, 9:28am UTC](https://discuss.elastic.co/t/roadmap-for-stateless-elasticsearch/316107 "2022-10-10T09:28:46Z")

</div>

I read yesterday's blog post about the future of a "stateless" Elasticsearch architecture, where one of the big benefits is the ability to scale indexing workloads separately from search workloads... I have a 30+ node…

---

## [How to capture user-interactions such as click which do not have network activities?](https://discuss.elastic.co/t/how-to-capture-user-interactions-such-as-click-which-do-not-have-network-activities/315984)

<div class="topic-metadata">

**Author:** [@Aman50](https://discuss.elastic.co/u/Aman50)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 9:04am UTC](https://discuss.elastic.co/t/how-to-capture-user-interactions-such-as-click-which-do-not-have-network-activities/315984 "2022-10-10T09:04:35Z")

</div>

Hi, I'm currently using Angular to track user-interactions. I know we can use custom-transactions to capture non-network user-interactions. But doing so will lead to huge amount of transactions since our application is …

---

## [Disable default secret creating in kubernetes](https://discuss.elastic.co/t/disable-default-secret-creating-in-kubernetes/316196)

<div class="topic-metadata">

**Author:** [@Norsu296](https://discuss.elastic.co/u/Norsu296)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 8:46am UTC](https://discuss.elastic.co/t/disable-default-secret-creating-in-kubernetes/316196 "2022-10-10T08:46:03Z")

</div>

Hi, how can I disable secret creating for elasticsearch? I'm using deployment with Kind: Elasticsearch and I want to use my own password but elastic is still recreating k8s password like elastic: password with name xyz-e…

---

## [Linking Dashboard and Discover tab to view documents based on filter](https://discuss.elastic.co/t/linking-dashboard-and-discover-tab-to-view-documents-based-on-filter/315687)

<div class="topic-metadata">

**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\
**Replies:** 3\
**Last updated:** [October 10, 2022, 7:13am UTC](https://discuss.elastic.co/t/linking-dashboard-and-discover-tab-to-view-documents-based-on-filter/315687 "2022-10-10T07:13:05Z")

</div>

Hi Team, I am looking for any feature availability in Kibana which would enable me to link my dashboard to the discover tab to view the documents. So the idea is I have a dashboard created based on field aggregation I …

---

## [Case Insensitive search in kibana dahboard](https://discuss.elastic.co/t/case-insensitive-search-in-kibana-dahboard/315653)

<div class="topic-metadata">

**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 7:11am UTC](https://discuss.elastic.co/t/case-insensitive-search-in-kibana-dahboard/315653 "2022-10-10T07:11:12Z")

</div>

Hi, I created dashboard with some visualization and add filters on it. But these are case sensitive. Is it possible to search with lower or upper case. For exam Adam name searchable from Adam or adam or aDaM. Thanks

---

## [Same index pattern in multiple namespaces](https://discuss.elastic.co/t/same-index-pattern-in-multiple-namespaces/316085)

<div class="topic-metadata">

**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 7:07am UTC](https://discuss.elastic.co/t/same-index-pattern-in-multiple-namespaces/316085 "2022-10-10T07:07:26Z")

</div>

Hi I am using Kibana/Elasticsearch version 7.16.3. I have trouble creating the same index pattern within multiple namespaces. I am using bulk create API to create multiple index patterns and for one of the patterns …

---

## [Group by query with select case when gives error: Connot use non-grouped column (Canvas elasticsearch sql)](https://discuss.elastic.co/t/group-by-query-with-select-case-when-gives-error-connot-use-non-grouped-column-canvas-elasticsearch-sql/315880)

<div class="topic-metadata">

**Author:** [@Houssam](https://discuss.elastic.co/u/Houssam)\
**Replies:** 4\
**Last updated:** [October 10, 2022, 7:04am UTC](https://discuss.elastic.co/t/group-by-query-with-select-case-when-gives-error-connot-use-non-grouped-column-canvas-elasticsearch-sql/315880 "2022-10-10T07:04:39Z")

</div>

Hello everyone I face a problem with a certain group by elasticsearch sql query when i try to use a field in select case condition but not group by it because it doubles my rows and leaves null values, i get the followin…

---

## [New to Elastic - Netflow Data Analysis](https://discuss.elastic.co/t/new-to-elastic-netflow-data-analysis/316073)

<div class="topic-metadata">

**Author:** [@bigverm23](https://discuss.elastic.co/u/bigverm23)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 7:03am UTC](https://discuss.elastic.co/t/new-to-elastic-netflow-data-analysis/316073 "2022-10-10T07:03:28Z")

</div>

good morning all. I am very new to Elastic and am looking for resources/insight on ingesting netflow from firewall logs and help with analysis. We are ingesting a few million events per day and I'd like to get to a poi…

---

## [Not Able to see Indexes in Kibana, nor in logs of Elastic Search](https://discuss.elastic.co/t/not-able-to-see-indexes-in-kibana-nor-in-logs-of-elastic-search/316178)

<div class="topic-metadata">

**Author:** [@shivamec92](https://discuss.elastic.co/u/shivamec92)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 6:48am UTC](https://discuss.elastic.co/t/not-able-to-see-indexes-in-kibana-nor-in-logs-of-elastic-search/316178 "2022-10-10T06:48:05Z")

</div>

This is the logs that i am getting from Debug mode of Elastic Search Authentication of \[elastic\] using realm \[reserved/reserved\] with token \[UsernamePasswordToken\] was \[AuthenticationResult{status=SUCCESS, value=User\[us…

---

## [Doubts about building a relationship master detail](https://discuss.elastic.co/t/doubts-about-building-a-relationship-master-detail/316170)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 6:27am UTC](https://discuss.elastic.co/t/doubts-about-building-a-relationship-master-detail/316170 "2022-10-10T06:27:09Z")

</div>

Currently, I have an index that collects the logs of a series of control centers, and obtain from them the technical data of their electrical consumption, on and off status, and other kinds of data that allow me to know …

---

## [System.AggregateException: One or more errors occurred. ---\> Elasticsearch.Net.ElasticsearchClientException: The client is unable to verify that the server is Elasticsearch due to an unsuccessful product check call](https://discuss.elastic.co/t/system-aggregateexception-one-or-more-errors-occurred-elasticsearch-net-elasticsearchclientexception-the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-an-unsuccessful-product-check-call/315970)

<div class="topic-metadata">

**Author:** [@arulmani](https://discuss.elastic.co/u/arulmani)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 6:00am UTC](https://discuss.elastic.co/t/system-aggregateexception-one-or-more-errors-occurred-elasticsearch-net-elasticsearchclientexception-the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-an-unsuccessful-product-check-call/315970 "2022-10-10T06:00:25Z")

</div>

The below specified two different errors are logged intermittently during the bulk delete operation on a 3 million data. The cron job to delete the records in bulk runs from 8 seconds to 15 seconds on every 2 minutes in…

---

## [Combine Metricbeat events into one with Logstash](https://discuss.elastic.co/t/combine-metricbeat-events-into-one-with-logstash/315896)

<div class="topic-metadata">

**Author:** [@bg4erem](https://discuss.elastic.co/u/bg4erem)\
**Replies:** 5\
**Last updated:** [October 10, 2022, 3:21am UTC](https://discuss.elastic.co/t/combine-metricbeat-events-into-one-with-logstash/315896 "2022-10-10T03:21:15Z")

</div>

Dear community I have spent several days trying to combine Metricbeat events into one with Logstash. I understand it should be done with the aggregate filter of Logstash. Still, I haven't figured it out. I use Logstas…

---

## [Apmsql is not tracking my sql queries](https://discuss.elastic.co/t/apmsql-is-not-tracking-my-sql-queries/316158)

<div class="topic-metadata">

**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 2:03am UTC](https://discuss.elastic.co/t/apmsql-is-not-tracking-my-sql-queries/316158 "2022-10-10T02:03:15Z")

</div>

Hello Everyone. I am trying to configure the APM to track as well the SQL transactions. I am looking to Built-in instrumentation modules | APM Go Agent Reference \[2.x\] | Elastic and this is my current test code dsn :=…

[Previous page](https://discuss.elastic.co/latest.md?page=936)

[Next page](https://discuss.elastic.co/latest.md?page=938)
