# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1043 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1044 --- ## [Dashboard dark mode options in Kibana 7](https://discuss.elastic.co/t/dashboard-dark-mode-options-in-kibana-7/297472)
**Author:** [@buncieboy](https://discuss.elastic.co/u/buncieboy)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 10:09am UTC](https://discuss.elastic.co/t/dashboard-dark-mode-options-in-kibana-7/297472 "2022-02-22T10:09:13Z")
We are currently migrating from Elastic 6 to 7. We have a internally public dashboard we use to show some metrics from our data, which we then embed in our application. In Elastic 6 we were able to pass the users dark mo… --- ## [Again trying to restore backup from 6.5.11 to 7.16.3](https://discuss.elastic.co/t/again-trying-to-restore-backup-from-6-5-11-to-7-16-3/297863)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 9:27am UTC](https://discuss.elastic.co/t/again-trying-to-restore-backup-from-6-5-11-to-7-16-3/297863 "2022-02-22T09:27:00Z")
So I've finally gotten my Elasticsearch and kibana up and running again, darned that was tough. So I'm back to my real task of trying to figure out how to get my snapshot back into Elasticsearch. I've set up path.repo … --- ## [Kibana 7.16.3 - How to use custom logo and heading in Login page?](https://discuss.elastic.co/t/kibana-7-16-3-how-to-use-custom-logo-and-heading-in-login-page/297837)
**Author:** [@ravinderk](https://discuss.elastic.co/u/ravinderk)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 10:06am UTC](https://discuss.elastic.co/t/kibana-7-16-3-how-to-use-custom-logo-and-heading-in-login-page/297837 "2022-02-22T10:06:28Z")
Hi All I'm using Kibana 7.16.3 version. I need to use custom logo and custom heading in Kibana login page. But not finding proper instructions to do that. Please let me know if anyone knows the steps for this. Thanks i… --- ## [Change color when timestamp field in doc is older then 10 minutes](https://discuss.elastic.co/t/change-color-when-timestamp-field-in-doc-is-older-then-10-minutes/297080)
**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 9:42am UTC](https://discuss.elastic.co/t/change-color-when-timestamp-field-in-doc-is-older-then-10-minutes/297080 "2022-02-22T09:42:09Z")
Hi, I'm searching for the best setup to configure a visual to display: green: when timestamp in doc is created in last 5 minutes red: when timestamp in last doc is older then 10 minutes. Anyone any tips wh… --- ## [Fleet server - how to add a fleet server after added one and deleted](https://discuss.elastic.co/t/fleet-server-how-to-add-a-fleet-server-after-added-one-and-deleted/297762)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 3\ **Last updated:** [February 22, 2022, 9:41am UTC](https://discuss.elastic.co/t/fleet-server-how-to-add-a-fleet-server-after-added-one-and-deleted/297762 "2022-02-22T09:41:51Z")
i deleted my fleet server, want to add a new feet server, but i dont have the "add a fleet sever" window only the window to add the agent. --- ## [Indexing slowlog investigation](https://discuss.elastic.co/t/indexing-slowlog-investigation/297752)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 7\ **Last updated:** [February 22, 2022, 9:31am UTC](https://discuss.elastic.co/t/indexing-slowlog-investigation/297752 "2022-02-22T09:31:18Z")
Hi! We have a very old Elasticsearch cluster v1.6.0 (we will hopefully upgrade soon) with 20 nodes: 3 master nodes and 17 data nodes. As a B2B service, each index represents a different business (customer). This clust… --- ## [Elasticsearch.service: Main process exited, code=exited, status=1](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-exited-status-1/297845)
**Author:** [@kiran\_t](https://discuss.elastic.co/u/kiran_t)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 8:33am UTC](https://discuss.elastic.co/t/elasticsearch-service-main-process-exited-code-exited-status-1/297845 "2022-02-22T08:33:17Z")
Hello, Elasticsearch starts failing with following error and then GCP node gets restarted. sudo systemctl status Elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/e… --- ## [Hiding Index Patterns](https://discuss.elastic.co/t/hiding-index-patterns/297512)
**Author:** [@shinobu](https://discuss.elastic.co/u/shinobu)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 8:17am UTC](https://discuss.elastic.co/t/hiding-index-patterns/297512 "2022-02-22T08:17:20Z")
Hello, would you know if it is possible to hide certain Index Patterns for users in discovery if they do not have the permission to view the indexes? Thank you. Best Regards. --- ## [Http security header not detected vulnerability](https://discuss.elastic.co/t/http-security-header-not-detected-vulnerability/297726)
**Author:** [@nagarajan\_muthu](https://discuss.elastic.co/u/nagarajan_muthu)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 8:03am UTC](https://discuss.elastic.co/t/http-security-header-not-detected-vulnerability/297726 "2022-02-22T08:03:10Z")
Hi, Have received http security header not detected vulnerability Nc on Kibana version v7.10.1. Please let us know if any one aware how to fix it. Send an email to security@elastic.co on 15th still so for no updates. R… --- ## [Logstash stopped](https://discuss.elastic.co/t/logstash-stopped/297853)
**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 7:51am UTC](https://discuss.elastic.co/t/logstash-stopped/297853 "2022-02-22T07:51:35Z")
\[2022-02-22T08:29:17,828\]\[ERROR\]\[logstash.javapipeline \]\[mylogs5001\]\[e7635b2b0a223a267b10d8697a123f9520147502f99c0c0faadfac0d8bcf3960\] A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:mylogs… --- ## [Configure multi node configuration with enrollment token - Elasticsearch 8.0.0](https://discuss.elastic.co/t/configure-multi-node-configuration-with-enrollment-token-elasticsearch-8-0-0/297486)
**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\ **Replies:** 6\ **Last updated:** [February 22, 2022, 7:07am UTC](https://discuss.elastic.co/t/configure-multi-node-configuration-with-enrollment-token-elasticsearch-8-0-0/297486 "2022-02-22T07:07:20Z")
hi team, i am trying to install Elasticsearch 8.0.0 and form a multi node cluster, but using enrollment token , the other node is not accepting and joining the cluster. the error i faced is it does not support multi no… --- ## [Main process exited, code=exited, status=1/FAILURE](https://discuss.elastic.co/t/main-process-exited-code-exited-status-1-failure/297751)
**Author:** [@allamsettiramesh](https://discuss.elastic.co/u/allamsettiramesh)\ **Replies:** 11\ **Last updated:** [February 22, 2022, 6:55am UTC](https://discuss.elastic.co/t/main-process-exited-code-exited-status-1-failure/297751 "2022-02-22T06:55:44Z")
Elasticsearch throwing below issue Version 7.17.0, Job for Elasticsearch.service failed because the control process exited with error code. See "systemctl status Elasticsearch.service" and "journalctl -xe" for detail… --- ## [Is it possible to send email alerts to specific user for their login failure](https://discuss.elastic.co/t/is-it-possible-to-send-email-alerts-to-specific-user-for-their-login-failure/297849)
**Author:** [@calista](https://discuss.elastic.co/u/calista)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 6:27am UTC](https://discuss.elastic.co/t/is-it-possible-to-send-email-alerts-to-specific-user-for-their-login-failure/297849 "2022-02-22T06:27:59Z")
Hi Team, May I check if it is possible to send email alerts to specific user for their OS login failure in the stack management watcher? Example a server has multiple users and when user 'john' login using the wrong pas… --- ## [How to connect via SSH in custom Kibana plugin?](https://discuss.elastic.co/t/how-to-connect-via-ssh-in-custom-kibana-plugin/297347)
**Author:** [@kyh119](https://discuss.elastic.co/u/kyh119)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 6:00am UTC](https://discuss.elastic.co/t/how-to-connect-via-ssh-in-custom-kibana-plugin/297347 "2022-02-22T06:00:09Z")
Hi. I'm trying to create my own Kibana plugin which makes a connection to remote server via SSH and does: when I click the button, the plugin connects to server and execute shell scripts. I've tried installing some np… --- ## [Why does the jdbc\_pool\_timeout parameter not work?](https://discuss.elastic.co/t/why-does-the-jdbc-pool-timeout-parameter-not-work/297714)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 3\ **Last updated:** [February 22, 2022, 5:45am UTC](https://discuss.elastic.co/t/why-does-the-jdbc-pool-timeout-parameter-not-work/297714 "2022-02-22T05:45:28Z")
First of all I can't be sure that the jdbc\_pool\_timeout parameter has no effect. I use logstash 7.16 to sync data from mysql 8.0 to elasitcsearch 7.16 cluster. Because this database is a production environment, there … --- ## [Detect Open ports](https://discuss.elastic.co/t/detect-open-ports/297832)
**Author:** [@jubin03](https://discuss.elastic.co/u/jubin03)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 4:00am UTC](https://discuss.elastic.co/t/detect-open-ports/297832 "2022-02-22T04:00:18Z")
I have a log message that I get once per day \[timestamp\] | \[host name\]| Open ports: 80, 22,443, 8080 A few days later I found an additional port is open \[timestamp\] | \[host name\]| Open ports: 80, 22,443, 8080, \*\*8220\*… --- ## [How to find some elasticsearch architecture image](https://discuss.elastic.co/t/how-to-find-some-elasticsearch-architecture-image/297692)
**Author:** [@Zephery\_Wen](https://discuss.elastic.co/u/Zephery_Wen)\ **Replies:** 3\ **Last updated:** [February 22, 2022, 2:30am UTC](https://discuss.elastic.co/t/how-to-find-some-elasticsearch-architecture-image/297692 "2022-02-22T02:30:51Z")
I can't find any architecture images about query, write, election and so on in the offical website. I'm a little confused Some articles like this say this image come from the offical website, but i can't find it in the… --- ## [Sending BulkRequest in Java API Client Elasticsearch version 7.16.3](https://discuss.elastic.co/t/sending-bulkrequest-in-java-api-client-elasticsearch-version-7-16-3/297715)
**Author:** [@shanky25](https://discuss.elastic.co/u/shanky25)\ **Replies:** 2\ **Last updated:** [February 22, 2022, 2:48am UTC](https://discuss.elastic.co/t/sending-bulkrequest-in-java-api-client-elasticsearch-version-7-16-3/297715 "2022-02-22T02:48:44Z")
Hi everyone, I have an java application which uses Elasticsearch and RestHighLevelClient. The application simply reads csv files and creates a List of Maps java using Jackson CSV Mapper. After that the Map is indexed … --- ## [How to access the system indices like .kibana\* indices in the elasticsearch](https://discuss.elastic.co/t/how-to-access-the-system-indices-like-kibana-indices-in-the-elasticsearch/297779)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 4\ **Last updated:** [February 22, 2022, 2:08am UTC](https://discuss.elastic.co/t/how-to-access-the-system-indices-like-kibana-indices-in-the-elasticsearch/297779 "2022-02-22T02:08:09Z")
In our project, we have a service that takes the backup of different system indices like .kibana\* indices. When I access them using the rest API, I am getting the following deprecation warning {"type": "deprecation.elas… --- ## [Can't install logstash-output-mongodb](https://discuss.elastic.co/t/cant-install-logstash-output-mongodb/297822)
**Author:** [@tamina](https://discuss.elastic.co/u/tamina)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 1:29am UTC](https://discuss.elastic.co/t/cant-install-logstash-output-mongodb/297822 "2022-02-22T01:29:50Z")
I'm using windows server 2016. I'm using logstash ver 7.17. I'm using install command "bin/logstash-plugin install logstash-output-mongodb". When I try to install logstash-output-mongodb ,I get response only "Using … --- ## [How to get date to format correctly](https://discuss.elastic.co/t/how-to-get-date-to-format-correctly/297818)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 1:28am UTC](https://discuss.elastic.co/t/how-to-get-date-to-format-correctly/297818 "2022-02-22T01:28:15Z")
Hello, In transforms can you specify an index template for mappings? Or set the date format? My source index has a timestamp properly formatted using strict\_date\_optional\_time||epoch\_millis. When it goes to the trans… --- ## [How to create my index to not tokenize on slash "/"?](https://discuss.elastic.co/t/how-to-create-my-index-to-not-tokenize-on-slash/297793)
**Author:** [@rakotomandimby](https://discuss.elastic.co/u/rakotomandimby)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 1:23am UTC](https://discuss.elastic.co/t/how-to-create-my-index-to-not-tokenize-on-slash/297793 "2022-02-22T01:23:30Z")
Hello, The default behaviour of ES to tokenize on slash does not suit me, because my data is really full of slashes. Tokenizing on space is more relevent in my case, but how to copy the index with the good tokinizing s… --- ## [Weird behavior after Metricbeat 8.0.0 install](https://discuss.elastic.co/t/weird-behavior-after-metricbeat-8-0-0-install/297501)
**Author:** [@Deathwing182](https://discuss.elastic.co/u/Deathwing182)\ **Replies:** 0\ **Last updated:** [February 17, 2022, 1:53pm UTC](https://discuss.elastic.co/t/weird-behavior-after-metricbeat-8-0-0-install/297501 "2022-02-17T13:53:05Z")
So I upgraded my cluster to ES 8 a couple days ago...all is well mostly, but on the node doing the cluster monitoring, if I also upgrade Metricbeat to 8.0.0, then I almost immediately start getting weirdness showing up i… --- ## [ES 7.9.2 Installation failed to upgrade](https://discuss.elastic.co/t/es-7-9-2-installation-failed-to-upgrade/297642)
**Author:** [@Juan\_2022](https://discuss.elastic.co/u/Juan_2022)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 12:23am UTC](https://discuss.elastic.co/t/es-7-9-2-installation-failed-to-upgrade/297642 "2022-02-22T00:23:39Z")
Hi All, I'm using ES 6.8.4 version and wanted to upgrade to 7.9.2 and after running ES installer it fails, the error message is "An error occurred during upgrade!" I appreciate if someone can help me to troubleshoot. … --- ## [Logs are not showing in Kibana only for one application log path](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-only-for-one-application-log-path/297691)
**Author:** [@rajneesh134](https://discuss.elastic.co/u/rajneesh134)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 12:23am UTC](https://discuss.elastic.co/t/logs-are-not-showing-in-kibana-only-for-one-application-log-path/297691 "2022-02-22T00:23:01Z")
Hi Team, We have done setup for ELK and can see logs for all the applications, But one application logs are not reflecting in Kibana. If we send top command output in same log file , we can see in Kibana. But not sure… --- ## [BulkIndexError: ('2 document(s) failed to index.') Elasticsearch](https://discuss.elastic.co/t/bulkindexerror-2-document-s-failed-to-index-elasticsearch/297682)
**Author:** [@anarchy1923](https://discuss.elastic.co/u/anarchy1923)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 12:22am UTC](https://discuss.elastic.co/t/bulkindexerror-2-document-s-failed-to-index-elasticsearch/297682 "2022-02-22T00:22:08Z")
At first I found some null values in my preprocessed data, so removed those. (Here's my Data Cleaning Code - and the respective outputs enclosed in '''Comments''') Cleaning and Preprocessing df\_merged\[df\_merged.abstrac… --- ## [Starting to plan indexes for many filebeats](https://discuss.elastic.co/t/starting-to-plan-indexes-for-many-filebeats/297820)
**Author:** [@pavvelj](https://discuss.elastic.co/u/pavvelj)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 11:49pm UTC](https://discuss.elastic.co/t/starting-to-plan-indexes-for-many-filebeats/297820 "2022-02-21T23:49:19Z")
Hi, Im planning the way to organizing my data collection in terms of indexing and organizing flows in some way. Im goin to collect large amounts of data of 3 main sorts - system logs, application/proxy/loadbalncer logs a… --- ## [Too\_many\_clauses error in Elasticsearch 6.6.1](https://discuss.elastic.co/t/too-many-clauses-error-in-elasticsearch-6-6-1/297748)
**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\ **Replies:** 2\ **Last updated:** [February 21, 2022, 11:23pm UTC](https://discuss.elastic.co/t/too-many-clauses-error-in-elasticsearch-6-6-1/297748 "2022-02-21T23:23:43Z")
Hi, I am using ES 6.6.1. Getting below error too\_many\_clauses: maxClauseCount is set to 1024 From Search Settings | Elasticsearch Guide \[6.6\] | Elastic , In case you consider to increase this setting, make sure you … --- ## [Elastic search backup](https://discuss.elastic.co/t/elastic-search-backup/297718)
**Author:** [@Arpita11](https://discuss.elastic.co/u/Arpita11)\ **Replies:** 4\ **Last updated:** [February 21, 2022, 11:18pm UTC](https://discuss.elastic.co/t/elastic-search-backup/297718 "2022-02-21T23:18:27Z")
Elasticsearch for my project is hosted on AWS EC2 machine. AMI backups are taken for EC2. If the Elasticsearch server goes down, can I restore it from AMI backup and get it working? --- ## [Elasticsearch dashboard not showing results](https://discuss.elastic.co/t/elasticsearch-dashboard-not-showing-results/297757)
**Author:** [@hapkoek](https://discuss.elastic.co/u/hapkoek)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 11:17pm UTC](https://discuss.elastic.co/t/elasticsearch-dashboard-not-showing-results/297757 "2022-02-21T23:17:56Z")
Hi all, Some time ago I created a dashboard with kibana and Elasticsearch importing DMARC mails with parsedmarc. I had some issues with kibana and nginx but those seem to be solved now. But when I open the dashboard, I… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1042) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1044)