# 2022: The Year in Review **URL:** \ **Category:** Meta Elastic\ **Created:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272 "2023-01-01T20:19:20Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/1 "2023-01-01T20:19:20Z")
## 2022's Top Users ## Most Time Reading | User | Hours Read | | --- | --- | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) | @stephenb | | 275 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) | @Badger | | 172 | | | ![](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/50.png) | @Tomo_M | | 155 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) | @leandrojmp | | 152 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) | @Christian_Dahlqvist | | 145 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/50/39224_2.png) | @warkolm | | 78 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rabbit_br/50/82261_2.png) | @RabBit_BR | | 74 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) | @Rios | | 67 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sudhagar_ramesh/50/105673_2.png) | @sudhagar_ramesh | | 50 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/50/22453_2.png) | @DavidTurner | | 38 | ## Most Topics | User | Topics | | --- | --- | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ins/50/92827_2.png) | @INS | | 61 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prashant_mehta/50/101764_2.png) | @PRASHANT_MEHTA | | 46 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikolas1306/50/111507_2.png) | @Nikolas1306 | | 40 | | | ![](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/50.png) | @Aniket_Pant | | 40 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alex_vermex/50/101267_2.png) | @alex_vermex | | 39 | | | ![](https://avatars.discourse-cdn.com/v4/letter/s/8797f3/50.png) | @Sandeep_Raju | | 38 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/50/83401_2.png) | @BenB196 | | 33 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticliver/50/64869_2.png) | @ElasticLiver | | 32 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/samuelsmendes/50/104246_2.png) | @SamuelSMendes | | 30 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/behappy_alwayz0401/50/105988_2.png) | @behappy_alwayz0401 | | 30 | ## Most Replies | User | Replies | | --- | --- | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/50/39224_2.png) | @warkolm | | 2.75k | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) | @stephenb | | 1.96k | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) | @Badger | | 1.33k | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) | @leandrojmp | | 1.23k | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) | @Christian_Dahlqvist | | 1.17k | | | ![](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/50.png) | @Tomo_M | | 803 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/50/44959_2.png) | @dadoonet | | 651 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) | @Rios | | 465 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rabbit_br/50/82261_2.png) | @RabBit_BR | | 407 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/50/22453_2.png) | @DavidTurner | | 379 | ## Most Replied to | User | Replies | | --- | --- | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/50/39224_2.png) | @warkolm | | 1.74k | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) | @stephenb | | 1.5k | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) | @Badger | | 949 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) | @leandrojmp | | 899 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) | @Christian_Dahlqvist | | 837 | | | ![](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/50.png) | @Tomo_M | | 539 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/50/44959_2.png) | @dadoonet | | 430 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) | @Rios | | 293 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rabbit_br/50/82261_2.png) | @RabBit_BR | | 282 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/50/22453_2.png) | @DavidTurner | | 240 | ## Most Likes Given | User | Likes | | --- | --- | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/50/39224_2.png) | @warkolm | | 502 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) | @stephenb | | 427 | | | ![](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/50.png) | @Tomo_M | | 369 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) | @Christian_Dahlqvist | | 195 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/willemdh/50/16922_2.png) | @willemdh | | 190 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sudhagar_ramesh/50/105673_2.png) | @sudhagar_ramesh | | 137 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsanz/50/53734_2.png) | @jsanz | | 83 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rabbit_br/50/82261_2.png) | @RabBit_BR | | 69 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/50/44959_2.png) | @dadoonet | | 67 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) | @Rios | | 64 | ## Most Likes Received | User | Likes | | --- | --- | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) | @stephenb | | 413 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/50/39224_2.png) | @warkolm | | 371 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) | @leandrojmp | | 322 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) | @Christian_Dahlqvist | | 312 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) | @Badger | | 304 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/50/22453_2.png) | @DavidTurner | | 175 | | | ![](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/50.png) | @Tomo_M | | 152 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/50/44959_2.png) | @dadoonet | | 147 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rabbit_br/50/82261_2.png) | @RabBit_BR | | 87 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/50/95745_2.png) | @Rios | | 81 | ## Most Visits | User | Days Visited | | --- | --- | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/50/40856_2.png) | @stephenb | | 365 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/50/25190_2.png) | @Badger | | 365 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/50/4617_2.png) | @Christian_Dahlqvist | | 365 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/50/83401_2.png) | @BenB196 | | 364 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/50/107231_2.png) | @leandrojmp | | 361 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/50/22453_2.png) | @DavidTurner | | 356 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gabriel_tessier/50/27911_2.png) | @gabriel_tessier | | 349 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/50/39224_2.png) | @warkolm | | 346 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vampikmin/50/22367_2.png) | @VamPikmin | | 328 | | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/50/71328_2.png) | @hendry.lim | | 324 | [All Yearly Visits](https://discuss.elastic.co/u?order=days_visited&period=yearly) ## Daily Visits | Days Visited | Users | | --- | --- | | 365 | 3 | | 364 | 1 | | 361 | 1 | | 356 | 1 | | 349 | 1 | | 346 | 1 | | 328 | 1 | | 324 | 1 | | 320 | 1 | | 314 | 1 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/2 "2023-01-01T20:19:22Z")
## [Top #Elasticsearch Topics](https://discuss.elastic.co/c/elastic-stack/elasticsearch/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maof97/50/101433_2.png) | [Unable to create an enrollment token for Kibana. "Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate"](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token-for-kibana-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificate/297032) | 12 | | ![](https://avatars.discourse-cdn.com/v4/letter/e/e480ec/50.png) | [Newbie to Linux/elastic. I'm having trouble setting up elasticsearch](https://discuss.elastic.co/t/newbie-to-linux-elastic-im-having-trouble-setting-up-elasticsearch/298687) | 9 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vassiliy.vins/50/113615_2.png) | [Elasticsearch does not start CentOS7](https://discuss.elastic.co/t/elasticsearch-does-not-start-centos7/318373) | 7 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abdul_gaffar_shaikh/50/78006_2.png) | [Configure multi node configuration with enrollment token - Elasticsearch 8.0.0](https://discuss.elastic.co/t/configure-multi-node-configuration-with-enrollment-token-elasticsearch-8-0-0/297486) | 6 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/datencio/50/101671_2.png) | [ElasticSearch FIPS (BouncyCastle)](https://discuss.elastic.co/t/elasticsearch-fips-bouncycastle/303298) | 6 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wonderland14/50/102959_2.png) | [We couldn't log you in. Please try again](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/314294) | 53 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bjawaid/50/112648_2.png) | [Elasticsearch service getting failed on Ubuntu 20.4](https://discuss.elastic.co/t/elasticsearch-service-getting-failed-on-ubuntu-20-4/317677) | 37 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vassiliy.vins/50/113615_2.png) | [Elasticsearch does not start CentOS7](https://discuss.elastic.co/t/elasticsearch-does-not-start-centos7/318373) | 36 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ddolcimascolo/50/110406_2.png) | [Auto\_expand\_replicas not working on enrich index](https://discuss.elastic.co/t/auto-expand-replicas-not-working-on-enrich-index/313569) | 31 | | ![](https://avatars.discourse-cdn.com/v4/letter/w/da6949/50.png) | [How to Reduce Received Logs Size in ELK Stack?](https://discuss.elastic.co/t/how-to-reduce-received-logs-size-in-elk-stack/301066) | 31 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/e/e480ec/50.png) | [Newbie to Linux/elastic. I'm having trouble setting up elasticsearch](https://discuss.elastic.co/t/newbie-to-linux-elastic-im-having-trouble-setting-up-elasticsearch/298687) | 19 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/df705f/50.png) | [cURL request not working with CA certificate on Windows](https://discuss.elastic.co/t/curl-request-not-working-with-ca-certificate-on-windows/299566) | 18 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sajjad_murtaza/50/104020_2.png) | [Can not get run Elasticsearch 6 on my MAC](https://discuss.elastic.co/t/can-not-get-run-elasticsearch-6-on-my-mac/301707) | 18 | | ![](https://avatars.discourse-cdn.com/v4/letter/f/7feea3/50.png) | [Node Auto Configuration](https://discuss.elastic.co/t/node-auto-configuration/297543) | 18 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramesh_balasubramani/50/53173_2.png) | [Rejecting mapping update to [xxx] as the final mapping would have more than 1 type: [\_doc, xxx]](https://discuss.elastic.co/t/rejecting-mapping-update-to-xxx-as-the-final-mapping-would-have-more-than-1-type-doc-xxx/298839) | 18 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/3 "2023-01-01T20:19:23Z")
## [Top #Kibana Topics](https://discuss.elastic.co/c/elastic-stack/kibana/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/e/e480ec/50.png) | [Kibana - Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate-in-certificate-chain/299159) | 19 | | ![](https://avatars.discourse-cdn.com/v4/letter/i/f0a364/50.png) | [How to get the sum in time of values in Lens](https://discuss.elastic.co/t/how-to-get-the-sum-in-time-of-values-in-lens/310735) | 10 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/ec9cab/50.png) | [Split and get part of a long string in painless](https://discuss.elastic.co/t/split-and-get-part-of-a-long-string-in-painless/295575) | 9 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shreesh_narayanan/50/87312_2.png) | [Kibana error [FATAL Error: [config validation of [elasticsearch].username]: value of "elastic" is forbidden.]](https://discuss.elastic.co/t/kibana-error-fatal-error-config-validation-of-elasticsearch-username-value-of-elastic-is-forbidden/297956) | 8 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maltewhiite/50/94551_2.png) | [Kibana server.publicBaseUrl](https://discuss.elastic.co/t/kibana-server-publicbaseurl/293661) | 7 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/i/f0a364/50.png) | [How to get the sum in time of values in Lens](https://discuss.elastic.co/t/how-to-get-the-sum-in-time-of-values-in-lens/310735) | 51 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/4af34b/50.png) | [Kibana v7.16.1 login issue. Not able to login (ResponseError: version\_conflict\_engine\_exception)](https://discuss.elastic.co/t/kibana-v7-16-1-login-issue-not-able-to-login-responseerror-version-conflict-engine-exception/308670) | 35 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_sanchez/50/111087_2.png) | [Kibana error while querying in Discover](https://discuss.elastic.co/t/kibana-error-while-querying-in-discover/318764) | 34 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/50/107057_2.png) | [Layer dot found result](https://discuss.elastic.co/t/layer-dot-found-result/312028) | 28 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/secopsgeek/50/83957_2.png) | [Fleet-server: http: server gave HTTP response to HTTPS client](https://discuss.elastic.co/t/fleet-server-http-server-gave-http-response-to-https-client/301203) | 25 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/j/58956e/50.png) | [Role 'reporting\_user' is deprecated. Please use Kibana feature privileges instead](https://discuss.elastic.co/t/role-reporting-user-is-deprecated-please-use-kibana-feature-privileges-instead/294593) | 19 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/auasad/50/92826_2.png) | [Kibana server is not ready yet on elastic 8.0](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-on-elastic-8-0/297418) | 19 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/ec9cab/50.png) | [Split and get part of a long string in painless](https://discuss.elastic.co/t/split-and-get-part-of-a-long-string-in-painless/295575) | 18 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amitesh_gupta/50/105091_2.png) | [Error: Cannot read properties of undefined (reading 'includes')](https://discuss.elastic.co/t/error-cannot-read-properties-of-undefined-reading-includes/303696) | 18 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fabian_crespo_fernan/50/104923_2.png) | [Error Kibana container is unhealthy](https://discuss.elastic.co/t/error-kibana-container-is-unhealthy/303409) | 18 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/4 "2023-01-01T20:19:24Z")
## [Top #Logstash Topics](https://discuss.elastic.co/c/elastic-stack/logstash/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dark_man/50/99119_2.png) | [Pipeline error {:pipeline\_id=\>"main", :exception=\>#](https://discuss.elastic.co/t/pipeline-error-pipeline-id-main-exception-nomethoderror-undefined-method-close-for-nil-nilclass/296706) | 24 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/50/106867_2.png) | [HTTP Poller [API] input in Logstash - Does it support "Request\_data" on top of "Headers"?](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327) | 7 | | ![](https://avatars.discourse-cdn.com/v4/letter/g/d2c977/50.png) | [Problem with Logstash SSL](https://discuss.elastic.co/t/problem-with-logstash-ssl/298084) | 7 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rohit_goel1/50/46637_2.png) | [Parse xml entry with logstash and create a new field with the data](https://discuss.elastic.co/t/parse-xml-entry-with-logstash-and-create-a-new-field-with-the-data/302262) | 6 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dark_man/50/99119_2.png) | [Pipeline error {:pipeline\_id=\>"main", :exception=\>#](https://discuss.elastic.co/t/pipeline-error-pipeline-id-main-exception-nomethoderror-undefined-method-close-for-nil-nilclass/296706) | 44 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/roger_huang/50/106867_2.png) | [HTTP Poller [API] input in Logstash - Does it support "Request\_data" on top of "Headers"?](https://discuss.elastic.co/t/http-poller-api-input-in-logstash-does-it-support-request-data-on-top-of-headers/316327) | 34 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rohit_goel1/50/46637_2.png) | [Parse xml entry with logstash and create a new field with the data](https://discuss.elastic.co/t/parse-xml-entry-with-logstash-and-create-a-new-field-with-the-data/302262) | 32 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simone1/50/97834_2.png) | [Can't run Logstash as a Service](https://discuss.elastic.co/t/cant-run-logstash-as-a-service/299202) | 26 | | ![](https://avatars.discourse-cdn.com/v4/letter/k/eb9ed0/50.png) | [Indices not creating after logstah starting with Systemctl service](https://discuss.elastic.co/t/indices-not-creating-after-logstah-starting-with-systemctl-service/304871) | 25 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/r/ecb155/50.png) | [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299338) | 18 | | ![](https://avatars.discourse-cdn.com/v4/letter/g/d2c977/50.png) | [Problem with Logstash SSL](https://discuss.elastic.co/t/problem-with-logstash-ssl/298084) | 18 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/meda_akshay/50/100766_2.png) | [Logstash is not listening port 5044](https://discuss.elastic.co/t/logstash-is-not-listening-port-5044/302621) | 17 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simone1/50/97834_2.png) | [Can't run Logstash as a Service](https://discuss.elastic.co/t/cant-run-logstash-as-a-service/299202) | 17 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sharon_hacham/50/105161_2.png) | [Logstash pipeline grok issue with regex](https://discuss.elastic.co/t/logstash-pipeline-grok-issue-with-regex/308252) | 17 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/5 "2023-01-01T20:19:24Z")
## [Top #Beats Topics](https://discuss.elastic.co/c/elastic-stack/beats/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/t/278dde/50.png) | [Filebeat writing to its own index](https://discuss.elastic.co/t/filebeat-writing-to-its-own-index/310842) | 7 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/austin_es_questions/50/98119_2.png) | [Filebeat -\> ElasticSearch for logrus running on k8s](https://discuss.elastic.co/t/filebeat-elasticsearch-for-logrus-running-on-k8s/312416) | 7 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ppine7/50/111560_2.png) | [Filebeat monitoring metrics not visible in ElasticSearch](https://discuss.elastic.co/t/filebeat-monitoring-metrics-not-visible-in-elasticsearch/315596) | 6 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marcin_frankiewicz/50/97650_2.png) | [Filebeat and updating existing docs](https://discuss.elastic.co/t/filebeat-and-updating-existing-docs/320781) | 6 | | ![](https://avatars.discourse-cdn.com/v4/letter/m/4da419/50.png) | [Metricbeat Cluster Monitoring: logstash.node: Could not find field 'id' in Logstash API response](https://discuss.elastic.co/t/metricbeat-cluster-monitoring-logstash-node-could-not-find-field-id-in-logstash-api-response/299651) | 6 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/t/278dde/50.png) | [Filebeat writing to its own index](https://discuss.elastic.co/t/filebeat-writing-to-its-own-index/310842) | 48 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/50/114986_2.png) | [Certificate error occurred when installing the fleet server](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710) | 46 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/renato_souza/50/106692_2.png) | [How to integrate AWS Lambda with plugin Elastic](https://discuss.elastic.co/t/how-to-integrate-aws-lambda-with-plugin-elastic/306506) | 33 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ppine7/50/111560_2.png) | [Filebeat monitoring metrics not visible in ElasticSearch](https://discuss.elastic.co/t/filebeat-monitoring-metrics-not-visible-in-elasticsearch/315596) | 31 | | ![](https://avatars.discourse-cdn.com/v4/letter/s/ebca7d/50.png) | [Missing authentication credentials for REST request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/313588) | 29 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tarik_mazouz/50/105068_2.png) | [Packetbeat on windows 10 : error connecting to kibana, fail to get the kibana version : HTTP GET request to http://192.168.217.128:5601](https://discuss.elastic.co/t/packetbeat-on-windows-10-error-connecting-to-kibana-fail-to-get-the-kibana-version-http-get-request-to-http-192-168-217-128-5601/303655) | 18 | | ![](https://avatars.discourse-cdn.com/v4/letter/m/4da419/50.png) | [Metricbeat Cluster Monitoring: logstash.node: Could not find field 'id' in Logstash API response](https://discuss.elastic.co/t/metricbeat-cluster-monitoring-logstash-node-could-not-find-field-id-in-logstash-api-response/299651) | 17 | | ![](https://avatars.discourse-cdn.com/v4/letter/s/ebca7d/50.png) | [Missing authentication credentials for REST request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/313588) | 17 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/renato_souza/50/106692_2.png) | [How to integrate AWS Lambda with plugin Elastic](https://discuss.elastic.co/t/how-to-integrate-aws-lambda-with-plugin-elastic/306506) | 17 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spo/50/78055_2.png) | [Elastic agent is unable to enroll to fleet](https://discuss.elastic.co/t/elastic-agent-is-unable-to-enroll-to-fleet/301679) | 17 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/6 "2023-01-01T20:19:25Z")
## [Top #APM Topics](https://discuss.elastic.co/c/observability/apm/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hamunaptroid/50/63795_2.png) | [Uploading sourcemaps from AIX webserver](https://discuss.elastic.co/t/uploading-sourcemaps-from-aix-webserver/303526) | 9 | | ![](https://avatars.discourse-cdn.com/v4/letter/j/bb73d2/50.png) | [Auto instrumention - Metrics work, traces not received](https://discuss.elastic.co/t/auto-instrumention-metrics-work-traces-not-received/295559) | 9 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dixit/50/111369_2.png) | [Python ZOPE Application Framework Integration to Elastic APM](https://discuss.elastic.co/t/python-zope-application-framework-integration-to-elastic-apm/315277) | 52 | | ![](https://avatars.discourse-cdn.com/v4/letter/r/dbc845/50.png) | [Traces are not shown in Kibana](https://discuss.elastic.co/t/traces-are-not-shown-in-kibana/295757) | 30 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bekk777/50/101315_2.png) | [APM on docker did not send logs trace to elastic cloud](https://discuss.elastic.co/t/apm-on-docker-did-not-send-logs-trace-to-elastic-cloud/295620) | 25 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pratiksha_nagoshe/50/99920_2.png) | [Not able connect to elastic apm server from AWS lambda](https://discuss.elastic.co/t/not-able-connect-to-elastic-apm-server-from-aws-lambda/312813) | 23 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/efdknittlfrank/50/102691_2.png) | [Span compression potentially breaks Redis instrumentation?](https://discuss.elastic.co/t/span-compression-potentially-breaks-redis-instrumentation/300823) | 23 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/r/dbc845/50.png) | [Traces are not shown in Kibana](https://discuss.elastic.co/t/traces-are-not-shown-in-kibana/295757) | 17 | | ![](https://avatars.discourse-cdn.com/v4/letter/j/bb73d2/50.png) | [Auto instrumention - Metrics work, traces not received](https://discuss.elastic.co/t/auto-instrumention-metrics-work-traces-not-received/295559) | 17 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bekk777/50/101315_2.png) | [APM on docker did not send logs trace to elastic cloud](https://discuss.elastic.co/t/apm-on-docker-did-not-send-logs-trace-to-elastic-cloud/295620) | 17 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dixit/50/111369_2.png) | [Python ZOPE Application Framework Integration to Elastic APM](https://discuss.elastic.co/t/python-zope-application-framework-integration-to-elastic-apm/315277) | 17 | | ![](https://avatars.discourse-cdn.com/v4/letter/m/dbc845/50.png) | [Ssl certificate error with APM using fleet](https://discuss.elastic.co/t/ssl-certificate-error-with-apm-using-fleet/311786) | 17 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/7 "2023-01-01T20:19:25Z")
## [Top #Elastic Enterprise Search Topics](https://discuss.elastic.co/c/enterprise-search/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nids_rai/50/103705_2.png) | [Unexpected exception while running Enterprise Search: Error: Read timed out at](https://discuss.elastic.co/t/unexpected-exception-while-running-enterprise-search-error-read-timed-out-at/307102) | 19 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rav_panchalingam/50/106902_2.png) | [Engine Name is already Taken](https://discuss.elastic.co/t/engine-name-is-already-taken/306961) | 15 | | ![](https://avatars.discourse-cdn.com/v4/letter/t/6de8d8/50.png) | [App Search: how to best index a site that doesn't crawl well - Confluence wiki for example](https://discuss.elastic.co/t/app-search-how-to-best-index-a-site-that-doesnt-crawl-well-confluence-wiki-for-example/313195) | 15 | | ![](https://avatars.discourse-cdn.com/v4/letter/p/9e8a1a/50.png) | [Can we create multiple searchbox with search and clear button for each of them. is this something can be implemented with react out of box library?](https://discuss.elastic.co/t/can-we-create-multiple-searchbox-with-search-and-clear-button-for-each-of-them-is-this-something-can-be-implemented-with-react-out-of-box-library/293949) | 13 | | ![](https://avatars.discourse-cdn.com/v4/letter/n/8c91f0/50.png) | [How to get private-key not through UI](https://discuss.elastic.co/t/how-to-get-private-key-not-through-ui/300431) | 13 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/serena_chou/50/100087_2.png) | [SharePoint Server connector package](https://discuss.elastic.co/t/sharepoint-server-connector-package/302586) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nids_rai/50/103705_2.png) | [Unexpected exception while running Enterprise Search: Error: Read timed out at](https://discuss.elastic.co/t/unexpected-exception-while-running-enterprise-search-error-read-timed-out-at/307102) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sriakash/50/77423_2.png) | [Concurrent patch updates](https://discuss.elastic.co/t/concurrent-patch-updates/296257) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/s/ccd318/50.png) | [Unstable response-timing App Search](https://discuss.elastic.co/t/unstable-response-timing-app-search/309383) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rav_panchalingam/50/106902_2.png) | [Engine Name is already Taken](https://discuss.elastic.co/t/engine-name-is-already-taken/306961) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/8 "2023-01-01T20:19:25Z")
## [Top #Elastic Cloud on Kubernetes (ECK) Topics](https://discuss.elastic.co/c/orchestration/eck/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ins/50/92827_2.png) | [Change topic from :Bad logic for allocation shard due to data tier arch -\> case with node roles syntax in elastic \>8.0.0](https://discuss.elastic.co/t/change-topic-from-bad-logic-for-allocation-shard-due-to-data-tier-arch-case-with-node-roles-syntax-in-elastic-8-0-0/300168) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nortena/50/107805_2.png) | [Deploy an Elasticsearch cluster with QuickStart](https://discuss.elastic.co/t/deploy-an-elasticsearch-cluster-with-quickstart/308656) | 13 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kay_khan/50/45028_2.png) | [Use metricbeat to monitor elasticsearch/kibana/beats](https://discuss.elastic.co/t/use-metricbeat-to-monitor-elasticsearch-kibana-beats/304828) | 13 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steveytam/50/110062_2.png) | [Elastic Cluster change to applyingphase after receiving data stream and logs](https://discuss.elastic.co/t/elastic-cluster-change-to-applyingphase-after-receiving-data-stream-and-logs/313120) | 12 | | ![](https://avatars.discourse-cdn.com/v4/letter/w/54ee81/50.png) | [Elastic Fleet Server Agent fails on startup](https://discuss.elastic.co/t/elastic-fleet-server-agent-fails-on-startup/319282) | 12 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kay_khan/50/45028_2.png) | [Use metricbeat to monitor elasticsearch/kibana/beats](https://discuss.elastic.co/t/use-metricbeat-to-monitor-elasticsearch-kibana-beats/304828) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/radw/50/53012_2.png) | [Kibana keeps restarting with no error](https://discuss.elastic.co/t/kibana-keeps-restarting-with-no-error/301868) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nortena/50/107805_2.png) | [Deploy an Elasticsearch cluster with QuickStart](https://discuss.elastic.co/t/deploy-an-elasticsearch-cluster-with-quickstart/308656) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vasek/50/104774_2.png) | [ECK Elasticsearch - Performing Full Restart of ES Nodes](https://discuss.elastic.co/t/eck-elasticsearch-performing-full-restart-of-es-nodes/312798) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ins/50/92827_2.png) | [Change topic from :Bad logic for allocation shard due to data tier arch -\> case with node roles syntax in elastic \>8.0.0](https://discuss.elastic.co/t/change-topic-from-bad-logic-for-allocation-shard-due-to-data-tier-arch-case-with-node-roles-syntax-in-elastic-8-0-0/300168) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/9 "2023-01-01T20:19:26Z")
## [Top #Elastic Security Topics](https://discuss.elastic.co/c/security/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/p/74df32/50.png) | [Elastic Endpoint 8.1 - File locking issues](https://discuss.elastic.co/t/elastic-endpoint-8-1-file-locking-issues/299253) | 5 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/p/74df32/50.png) | [Elastic Endpoint 8.1 - File locking issues](https://discuss.elastic.co/t/elastic-endpoint-8-1-file-locking-issues/299253) | 19 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maof97/50/101433_2.png) | [Fleet Server is unstable. Can't connect new hosts but status is 'healthy'](https://discuss.elastic.co/t/fleet-server-is-unstable-cant-connect-new-hosts-but-status-is-healthy/299009) | 17 | | ![](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/50.png) | [Update to 8.3.1 from 8.3.0 has broken Fleet - please help!](https://discuss.elastic.co/t/update-to-8-3-1-from-8-3-0-has-broken-fleet-please-help/308654) | 10 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maof97/50/101433_2.png) | [Fleet Server is unstable. Can't connect new hosts but status is 'healthy'](https://discuss.elastic.co/t/fleet-server-is-unstable-cant-connect-new-hosts-but-status-is-healthy/299009) | 17 | | ![](https://avatars.discourse-cdn.com/v4/letter/p/74df32/50.png) | [Elastic Endpoint 8.1 - File locking issues](https://discuss.elastic.co/t/elastic-endpoint-8-1-file-locking-issues/299253) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/efadeev/50/105236_2.png) | [Error with Security Rules](https://discuss.elastic.co/t/error-with-security-rules/303960) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/50.png) | [Update to 8.3.1 from 8.3.0 has broken Fleet - please help!](https://discuss.elastic.co/t/update-to-8-3-1-from-8-3-0-has-broken-fleet-please-help/308654) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/f/3bc359/50.png) | [Elastic-agent -- Sent logs to external SIEM](https://discuss.elastic.co/t/elastic-agent-sent-logs-to-external-siem/296045) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/10 "2023-01-01T20:19:26Z")
## [Top #Elastic Observability Topics](https://discuss.elastic.co/c/observability/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/its_anton/50/111286_2.png) | [🧐 Observability \> Alerts \> Manage Rules: "Unable to load rules"](https://discuss.elastic.co/t/observability-alerts-manage-rules-unable-to-load-rules/315170) | 12 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gfan8w/50/110790_2.png) | [CaptureTransaction not showing all spans in webflux project](https://discuss.elastic.co/t/capturetransaction-not-showing-all-spans-in-webflux-project/314279) | 11 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/its_anton/50/111286_2.png) | [🧐 Observability \> Alerts \> Manage Rules: "Unable to load rules"](https://discuss.elastic.co/t/observability-alerts-manage-rules-unable-to-load-rules/315170) | 15 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gfan8w/50/110790_2.png) | [CaptureTransaction not showing all spans in webflux project](https://discuss.elastic.co/t/capturetransaction-not-showing-all-spans-in-webflux-project/314279) | 15 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/khalifa_khalifi/50/107364_2.png) | [Where are the remote logs saves in my local ELK instance?](https://discuss.elastic.co/t/where-are-the-remote-logs-saves-in-my-local-elk-instance/308255) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/11 "2023-01-01T20:19:26Z")
## [Top #SIEM Topics](https://discuss.elastic.co/c/security/siem/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/a/22d042/50.png) | [Over 110 detections crash SIEM application and Kibana plugins](https://discuss.elastic.co/t/over-110-detections-crash-siem-application-and-kibana-plugins/295830) | 7 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/a/22d042/50.png) | [Over 110 detections crash SIEM application and Kibana plugins](https://discuss.elastic.co/t/over-110-detections-crash-siem-application-and-kibana-plugins/295830) | 18 | | ![](https://avatars.discourse-cdn.com/v4/letter/k/a698b9/50.png) | [Issue with rules creation](https://discuss.elastic.co/t/issue-with-rules-creation/301083) | 14 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/a183cd/50.png) | [Crete alerts for disabled accounts](https://discuss.elastic.co/t/crete-alerts-for-disabled-accounts/312833) | 14 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/9d8465/50.png) | [Why filebeat pipelines disappoint or SIEM missing authentication patterns](https://discuss.elastic.co/t/why-filebeat-pipelines-disappoint-or-siem-missing-authentication-patterns/307308) | 12 | | ![](https://avatars.discourse-cdn.com/v4/letter/u/ed8c4c/50.png) | [Not able to edit rules](https://discuss.elastic.co/t/not-able-to-edit-rules/314643) | 11 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/a/22d042/50.png) | [Over 110 detections crash SIEM application and Kibana plugins](https://discuss.elastic.co/t/over-110-detections-crash-siem-application-and-kibana-plugins/295830) | 17 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/9d8465/50.png) | [Why filebeat pipelines disappoint or SIEM missing authentication patterns](https://discuss.elastic.co/t/why-filebeat-pipelines-disappoint-or-siem-missing-authentication-patterns/307308) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/k/a698b9/50.png) | [Issue with rules creation](https://discuss.elastic.co/t/issue-with-rules-creation/301083) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/a183cd/50.png) | [Crete alerts for disabled accounts](https://discuss.elastic.co/t/crete-alerts-for-disabled-accounts/312833) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/u/ed8c4c/50.png) | [Not able to edit rules](https://discuss.elastic.co/t/not-able-to-edit-rules/314643) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/12 "2023-01-01T20:19:26Z")
## [Top #Endpoint Security Topics](https://discuss.elastic.co/c/security/endpoint-security/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/a/f08c70/50.png) | [End point security fails for Elastic Agent with error "Missed two check-ins"](https://discuss.elastic.co/t/end-point-security-fails-for-elastic-agent-with-error-missed-two-check-ins/297477) | 6 | | ![](https://avatars.discourse-cdn.com/v4/letter/d/258eb7/50.png) | [Unable to run Endpoint 8.4 on a Ubuntu 20.04 host hardened with CIS Level 2](https://discuss.elastic.co/t/unable-to-run-endpoint-8-4-on-a-ubuntu-20-04-host-hardened-with-cis-level-2/318559) | 5 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/f/7feea3/50.png) | [Elastic Agent defunct on fleet server and clients](https://discuss.elastic.co/t/elastic-agent-defunct-on-fleet-server-and-clients/305803) | 20 | | ![](https://avatars.discourse-cdn.com/v4/letter/r/2acd7d/50.png) | [No exception lists found](https://discuss.elastic.co/t/no-exception-lists-found/312089) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/d/258eb7/50.png) | [Unable to run Endpoint 8.4 on a Ubuntu 20.04 host hardened with CIS Level 2](https://discuss.elastic.co/t/unable-to-run-endpoint-8-4-on-a-ubuntu-20-04-host-hardened-with-cis-level-2/318559) | 15 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rdrgporto/50/13278_2.png) | [Remove or Hide Kibana and Signal fields in Elastic Security](https://discuss.elastic.co/t/remove-or-hide-kibana-and-signal-fields-in-elastic-security/294804) | 17 | | ![](https://avatars.discourse-cdn.com/v4/letter/f/7feea3/50.png) | [Elastic Agent defunct on fleet server and clients](https://discuss.elastic.co/t/elastic-agent-defunct-on-fleet-server-and-clients/305803) | 17 | | ![](https://avatars.discourse-cdn.com/v4/letter/n/d78d45/50.png) | [Elastic-Agent installed, but not viewable in Security Hosts tab or logs in Kibana](https://discuss.elastic.co/t/elastic-agent-installed-but-not-viewable-in-security-hosts-tab-or-logs-in-kibana/298524) | 17 | | ![](https://avatars.discourse-cdn.com/v4/letter/p/d2c977/50.png) | [Elastic agent and SvcHost DnsCache very high CPU usage](https://discuss.elastic.co/t/elastic-agent-and-svchost-dnscache-very-high-cpu-usage/304536) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/d/258eb7/50.png) | [Unable to run Endpoint 8.4 on a Ubuntu 20.04 host hardened with CIS Level 2](https://discuss.elastic.co/t/unable-to-run-endpoint-8-4-on-a-ubuntu-20-04-host-hardened-with-cis-level-2/318559) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/13 "2023-01-01T20:19:27Z")
## [Top #Logs Topics](https://discuss.elastic.co/c/observability/logs/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_kot/50/99150_2.png) | [Moving applications logs to Elastic Observability](https://discuss.elastic.co/t/moving-applications-logs-to-elastic-observability/305409) | 8 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/c/dc4da7/50.png) | [How to ingest a log file from source system to Kibana through Filebeat](https://discuss.elastic.co/t/how-to-ingest-a-log-file-from-source-system-to-kibana-through-filebeat/315544) | 15 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_kot/50/99150_2.png) | [Moving applications logs to Elastic Observability](https://discuss.elastic.co/t/moving-applications-logs-to-elastic-observability/305409) | 15 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mybyte/50/99989_2.png) | [How do you manage large filebeat installations?](https://discuss.elastic.co/t/how-do-you-manage-large-filebeat-installations/293755) | 11 | | ![](https://avatars.discourse-cdn.com/v4/letter/d/9d8465/50.png) | [AWS fleet integration fails with API key error on ingest](https://discuss.elastic.co/t/aws-fleet-integration-fails-with-api-key-error-on-ingest/304846) | 10 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/k/46a35a/50.png) | [I have a problem when I want to send logs of clamav-0.104.2.linux.x86\_64 to EK version 7.14.2 , ubuntu 20.04](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-clamav-0-104-2-linux-x86-64-to-ek-version-7-14-2-ubuntu-20-04/297611) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_kot/50/99150_2.png) | [Moving applications logs to Elastic Observability](https://discuss.elastic.co/t/moving-applications-logs-to-elastic-observability/305409) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mybyte/50/99989_2.png) | [How do you manage large filebeat installations?](https://discuss.elastic.co/t/how-do-you-manage-large-filebeat-installations/293755) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/d/9d8465/50.png) | [AWS fleet integration fails with API key error on ingest](https://discuss.elastic.co/t/aws-fleet-integration-fails-with-api-key-error-on-ingest/304846) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/c/dc4da7/50.png) | [How to ingest a log file from source system to Kibana through Filebeat](https://discuss.elastic.co/t/how-to-ingest-a-log-file-from-source-system-to-kibana-through-filebeat/315544) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/14 "2023-01-01T20:19:27Z")
## [Top #日本語による質問・議論はこちら Topics](https://discuss.elastic.co/c/in-your-native-tongue/japanese/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikaidokota/50/106257_2.png) | [Watcherで各bucketのdoc\_countを集計したい](https://discuss.elastic.co/t/watcher-bucket-doc-count/305789) | 14 | | ![](https://avatars.discourse-cdn.com/v4/letter/t/8491ac/50.png) | [ドキュメントAPIにて、インデックス名に動的に日付を設定する方法](https://discuss.elastic.co/t/api/293513) | 10 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/t/8491ac/50.png) | [ドキュメントAPIにて、インデックス名に動的に日付を設定する方法](https://discuss.elastic.co/t/api/293513) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikaidokota/50/106257_2.png) | [Watcherで各bucketのdoc\_countを集計したい](https://discuss.elastic.co/t/watcher-bucket-doc-count/305789) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/15 "2023-01-01T20:19:27Z")
## [Top #Uptime Topics](https://discuss.elastic.co/c/observability/uptime/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mybyte/50/99989_2.png) | [Synthetics failing silently?](https://discuss.elastic.co/t/synthetics-failing-silently/295443) | 10 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mybyte/50/99989_2.png) | [Synthetics failing silently?](https://discuss.elastic.co/t/synthetics-failing-silently/295443) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/swchandu/50/95295_2.png) | [Uptime does not display the details accurately](https://discuss.elastic.co/t/uptime-does-not-display-the-details-accurately/316214) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/16 "2023-01-01T20:19:27Z")
## [Top #Elastic Cloud Enterprise (ECE) Topics](https://discuss.elastic.co/c/orchestration/cloud-enterprise/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/a/3bc359/50.png) | [How to create an automated solution for Instance Migration in the case of Allocator Faliures?](https://discuss.elastic.co/t/how-to-create-an-automated-solution-for-instance-migration-in-the-case-of-allocator-faliures/300369) | 18 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/a/3bc359/50.png) | [How to create an automated solution for Instance Migration in the case of Allocator Faliures?](https://discuss.elastic.co/t/how-to-create-an-automated-solution-for-instance-migration-in-the-case-of-allocator-faliures/300369) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/17 "2023-01-01T20:19:28Z")
## [Top #Discussions en français Topics](https://discuss.elastic.co/c/in-your-native-tongue/discussions-en-francais/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/r/4af34b/50.png) | [Problème d'intégration des indices](https://discuss.elastic.co/t/probleme-dintegration-des-indices/314017) | 15 | | ![](https://avatars.discourse-cdn.com/v4/letter/p/9fc348/50.png) | [Probleme de limite temporelle / Kibana](https://discuss.elastic.co/t/probleme-de-limite-temporelle-kibana/313560) | 13 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/khadija_boudinar1/50/106922_2.png) | [Connection sqlserver to elasticsearch](https://discuss.elastic.co/t/connection-sqlserver-to-elasticsearch/307039) | 11 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/khadija_boudinar1/50/106922_2.png) | [Connection sqlserver to elasticsearch](https://discuss.elastic.co/t/connection-sqlserver-to-elasticsearch/307039) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/r/4af34b/50.png) | [Problème d'intégration des indices](https://discuss.elastic.co/t/probleme-dintegration-des-indices/314017) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/p/9fc348/50.png) | [Probleme de limite temporelle / Kibana](https://discuss.elastic.co/t/probleme-de-limite-temporelle-kibana/313560) | 15 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/18 "2023-01-01T20:19:28Z")
## [Top #Вопросы на русском языке Topics](https://discuss.elastic.co/c/in-your-native-tongue/russian/l/top) ### Most Read | User | Topic | Hours Read | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/h_kleiser/50/103652_2.png) | [Why artifacts.elastic.co/GPG-KEY-elasticsearch returns 403 for russian IPs, but not always?](https://discuss.elastic.co/t/why-artifacts-elastic-co-gpg-key-elasticsearch-returns-403-for-russian-ips-but-not-always/300969) | 6 | ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/h_kleiser/50/103652_2.png) | [Why artifacts.elastic.co/GPG-KEY-elasticsearch returns 403 for russian IPs, but not always?](https://discuss.elastic.co/t/why-artifacts-elastic-co-gpg-key-elasticsearch-returns-403-for-russian-ips-but-not-always/300969) | 26 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/dbc845/50.png) | [ERROR - collector [index-stats] timed out when collecting data](https://discuss.elastic.co/t/error-collector-index-stats-timed-out-when-collecting-data/312353) | 12 | | ![](https://avatars.discourse-cdn.com/v4/letter/h/9de0a6/50.png) | [Сжатие старых логов](https://discuss.elastic.co/t/topic/297130) | 10 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/h_kleiser/50/103652_2.png) | [Why artifacts.elastic.co/GPG-KEY-elasticsearch returns 403 for russian IPs, but not always?](https://discuss.elastic.co/t/why-artifacts-elastic-co-gpg-key-elasticsearch-returns-403-for-russian-ips-but-not-always/300969) | 18 | | ![](https://avatars.discourse-cdn.com/v4/letter/h/9de0a6/50.png) | [Сжатие старых логов](https://discuss.elastic.co/t/topic/297130) | 16 | | ![](https://avatars.discourse-cdn.com/v4/letter/a/dbc845/50.png) | [ERROR - collector [index-stats] timed out when collecting data](https://discuss.elastic.co/t/error-collector-index-stats-timed-out-when-collecting-data/312353) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/19 "2023-01-01T20:19:28Z")
## [Top #Metrics Topics](https://discuss.elastic.co/c/observability/metrics/l/top) ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://avatars.discourse-cdn.com/v4/letter/o/e8c25b/50.png) | [Metricbeat MSSQL module has a really high batch req/sec number](https://discuss.elastic.co/t/metricbeat-mssql-module-has-a-really-high-batch-req-sec-number/297859) | 16 | ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 1, 2023, 8:19pm UTC](https://discuss.elastic.co/t/2022-the-year-in-review/322272/20 "2023-01-01T20:19:28Z")
## [Top #中文提问与讨论 Topics](https://discuss.elastic.co/c/in-your-native-tongue/chinese/l/top) ### Most Replies | User | Topic | Replies | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shadow_chn/50/107538_2.png) | [Elastic Search安装完成后无法启动](https://discuss.elastic.co/t/elastic-search/317941) | 10 | ### Most Popular | User | Topic | Score | | --- | --- | --- | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/obt/50/104922_2.png) | [使用Machine Learning創建job來判斷是否遭到攻擊](https://discuss.elastic.co/t/machine-learning-job/303726) | 16 | | ![](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shadow_chn/50/107538_2.png) | [Elastic Search安装完成后无法启动](https://discuss.elastic.co/t/elastic-search/317941) | 15 | [Next page](https://discuss.elastic.co/t/2022-the-year-in-review/322272.md?page=2)