2021: The Year in Review

Meta Elastic
1

2021's Top Users

Most Time Reading

User Hours Read
@stephenb
308
@Badger
226
@Christian_Dahlqvist
161
@leandrojmp
106
@aaron-nimocks
94
@warkolm
91
@DavidTurner
89
@dadoonet
42
@spinscale
38
@legoguy1000
37

Most Topics

User Topics
@ElasticLiver
63
@Aniket_Pant
54
@Sandeep_Raju
53
@elasticforme
45
@its-ogawa
44
@willemdh
43
@riahc3
41
@BenB196
39
@padamrai
38
@ankitdevnalkar
37

Most Replies

User Replies
@warkolm
3.7k
@Badger
2.16k
@stephenb
1.94k
@dadoonet
1.45k
@Christian_Dahlqvist
1.18k
@DavidTurner
818
@aaron-nimocks
630
@leandrojmp
576
@legoguy1000
501
@flash1293
493

Most Replied to

User Replies
@warkolm
2.43k
@Badger
1.5k
@stephenb
1.47k
@dadoonet
936
@Christian_Dahlqvist
843
@DavidTurner
566
@aaron-nimocks
475
@leandrojmp
429
@flash1293
338
@legoguy1000
329

Most Likes Given

User Likes
@warkolm
1.08k
@stephenb
416
@willemdh
222
@dadoonet
203
@Christian_Dahlqvist
170
@aaron-nimocks
105
@DavidTurner
86
@DMinovski
81
@ylasri
64
@ElasticLiver
53

Most Likes Received

User Likes
@stephenb
473
@Badger
425
@warkolm
422
@DavidTurner
390
@dadoonet
338
@Christian_Dahlqvist
290
@leandrojmp
169
@aaron-nimocks
137
@spinscale
119
@wylie
114

Most Visits

User Days Visited
@Christian_Dahlqvist
365
@Badger
365
@stephenb
364
@leandrojmp
363
@DavidTurner
361
@ylasri
344
@gabriel_tessier
338
@BenB196
337
@aaron-nimocks
331
@dadoonet
328

All Yearly Visits

Daily Visits

Days Visited Users
365 2
364 1
363 1
361 1
344 1
338 1
337 1
331 1
328 2
323 1
3 Likes
2

Top #Elasticsearch Topics

Most Read

User Topic Hours Read
Zero-day-exploit in log4j2 which is part of elasticsearch 78
How to disable geoip usage in 7.14.0 9
Elasticsearch 7.16.1 crashing randomly 8
Elasticsearch installation 8
Slow Cluster in Elastic Cloud since updating to 7.12 7

Most Replies

User Topic Replies
Zero-day-exploit in log4j2 which is part of elasticsearch 93
Elasticsearch query time range issue 50
Watcher that counts the documents that arrive to an index in kibana 45
Elasticsearch installation 45
How to figure what what is using so much CPU and memory in Elastic Search? 41

Most Popular

User Topic Score
Zero-day-exploit in log4j2 which is part of elasticsearch 22
How to disable geoip usage in 7.14.0 19
3 nodes in the cluster, 2 data and 1 master - why if one fails it takes the whole cluster down? 18
Kibana unable to authenticate 18
Higher CPU vs Higher Memory. Which helps in what cases? 17
3

Top #Kibana Topics

Most Read

User Topic Hours Read
Kibana cannot connect to ES cluster - Unable to retrieve version information from Elasticsearch nodes 16
Anonymous Kibana Users 8
Kibana Status Code : 302 8
How to disable Kibana security warning message 7
Compare Two Indexes 6

Most Replies

User Topic Replies
Kibana Status Code : 302 35
Dynamic fetch data from index to generate TreeFlow 30
Getting Error-Cannot delete files/directories outside the current working directory when i wants to generate visualization report in pdf 28
Anonymous Kibana Users 27
Yarn kbn bootstrap fails 27

Most Popular

User Topic Score
How to disable Kibana security warning message 21
KQL to filter for documents where a field exists and its value is less than a fixed number? 18
Kibana Status Code : 302 18
[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"} and Server is not ready 18
Unable to revive connection: http://localhost:9200 with Docker 18
4

Top #Logstash Topics

Most Read

User Topic Hours Read
Logstash stopped processing because of an error: (SystemExit) exit 12
CVE-2021-44228 aka log4shell is logstash and/or elasticsearch affected? 10
Delete JndiLookup.class 7
How to parase xml in logstash 7
This interval creates too many buckets to show in the selected time rage 7

Most Replies

User Topic Replies
Convert field containing a timestamp from string to a date / time or timestamp? 47
Logstash not sending syslog to elasticsearch 41
SQSSNSS3 plugin error queue not valid for endpoint 39
Logstash Lookup Fields 35
Ingesting JSON Data Samples w/ Logstash 33

Most Popular

User Topic Score
CVE-2021-44228 aka log4shell is logstash and/or elasticsearch affected? 22
Delete JndiLookup.class 19
Logstash stopped processing because of an error: (SystemExit) exit 18
Connection refused logstash to elasticsearch 18
Logstash Parser error - tried to parse field as object, but found a concrete value 18
5

Top #Beats Topics

Most Read

User Topic Hours Read
Filebeat as a UDP Syslog Listener Dropping Alot of Logs 10
Unable to communicate with Fleet Server after Upgrade to 7.14 9
Input 'aws-s3' failed with: failed to initialize s3 poller 9
Filebeat is not reading the log file in real time 6
Doubts about Filebeat Threat Intel Module [7.12.0] 6

Most Replies

User Topic Replies
Input 'aws-s3' failed with: failed to initialize s3 poller 50
GeoIP enrichment not working 30
Action [indices:admin/auto_create] is unauthorized for API key id [####] of user [elastic/fleet-server] on indices [metricbeat-7.14.1-2021.09.08], this action is granted by the index privileges [auto_configure,create_index,manage,all] 29
I have this error bash: ./metricbeat: cannot execute binary file: Exec format error 29
Unable to enroll fleet server as assinged policy does not have fleet server input 26

Most Popular

User Topic Score
Doubt about Elasticsearch module of Filebeat on container [7.9.2] 19
Doubts about Filebeat Threat Intel Module [7.12.0] 18
I have this error bash: ./metricbeat: cannot execute binary file: Exec format error 18
Filesetup is not working 18
Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch 17
6
7

Top #Elastic Security Topics

Most Read

User Topic Hours Read
All Rules are showing Failed 12
Detection and Response for HAFNIUM Activity 11
7.11.0 Detections need permissions 7
Elastic Agent 7.14 -- Strange bug during enrollment "Elastic fleet agent bug" 7
Do i need to install other "beats" with the elastic and endpoint agents or is something else wrong? 5

Most Liked

User Topic Likes
Openness in Elastic Security's Agent artifacts 16
Detection and Response for HAFNIUM Activity 15

Most Replies

User Topic Replies
Do i need to install other "beats" with the elastic and endpoint agents or is something else wrong? 32
All Rules are showing Failed 28
Elastic Agent 7.14 -- Strange bug during enrollment "Elastic fleet agent bug" 15
Endpoint 7.13 migration to 7.13.1 Lesson learned with Fleet “On-Prim” -Bad 15
Elastic-agent.exe not running on target 14

Most Popular

User Topic Score
Detection and Response for HAFNIUM Activity 19
All Rules are showing Failed 18
Openness in Elastic Security's Agent artifacts 17
Elastic Agent 7.14 -- Strange bug during enrollment "Elastic fleet agent bug" 17
OSQuery Live Queries don't go through 17
8
9
10

Top #SIEM Topics

Most Read

User Topic Hours Read
Indicator Match Detection Rule Not Matched and Mapped to Intel Feeds 8
[ URLHaus threat intelligence ]: create a new rule 6
Questions re elksiem 6

Most Replies

User Topic Replies
Questions re elksiem 33
[ URLHaus threat intelligence ]: create a new rule 17
Indicator Match Detection Rule Not Matched and Mapped to Intel Feeds 16
ElasticSIEM unable to find [logs-endpoint.alerts 11
Elastic SIEM. Security rules doesn't work 11

Most Popular

User Topic Score
Questions re elksiem 17
Indicator Match Detection Rule Not Matched and Mapped to Intel Feeds 16
ElasticSIEM unable to find [logs-endpoint.alerts 16
Can't access Detections from a different space 16
[ URLHaus threat intelligence ]: create a new rule 16

Most Bookmarked

User Topic Bookmarks
Indicator Match Detection Rule Not Matched and Mapped to Intel Feeds 5
11

Top #Вопросы на русском языке Topics

Most Read

User Topic Hours Read
Вычисляемые поля в Kibana 13
Почему не работает dfs_query_then_fetch? 5

Most Replies

User Topic Replies
Проблемы с ram 34
Упорядоченный список в painless 26
Почему не работает dfs_query_then_fetch? 23
Kibana визуализация суммы часов 19
Как достать вложенные объекты в скрипте при агрегации. How get object in script 17

Most Popular

User Topic Score
Почему не работает dfs_query_then_fetch? 17
Проблемы с ram 17
Упорядоченный список в painless 16
Сбор syslog с помощью ELK 16
Kibana визуализация суммы часов 16
12
13
14
15
16
17
18
19
20

Top #Workplace Search Topics

Most Read

User Topic Hours Read
Invalid field name: _allow_permissions,_deny_permissions 6
Permission to add GoogleDrive to WorkplaceSearch 6

Most Replies

User Topic Replies
Invalid field name: _allow_permissions,_deny_permissions 43
Permission to add GoogleDrive to WorkplaceSearch 30
Unknown problem occurred when syncing 16
Enable readonly mode Elastic workplace search on docker desktop 13
How to retrieve all document form a content source of Workplace search 11

Most Popular

User Topic Score
Invalid field name: _allow_permissions,_deny_permissions 17
Permission to add GoogleDrive to WorkplaceSearch 17
Enable readonly mode Elastic workplace search on docker desktop 16
No index pattern match of enterprise search in Kibana 16
FSCrawler Ingest pdf error Exceeds maximum allowed document size of 102400 bytes 16