# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1051 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1052 --- ## [How do you print a value of a variable in the source script?](https://discuss.elastic.co/t/how-do-you-print-a-value-of-a-variable-in-the-source-script/297160)
**Author:** [@Marco\_Ramos](https://discuss.elastic.co/u/Marco_Ramos)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 7:35am UTC](https://discuss.elastic.co/t/how-do-you-print-a-value-of-a-variable-in-the-source-script/297160 "2022-02-16T07:35:54Z")
how do you print a value of a variable in the source script? --- ## [ELK upgrade from 7.8.0 to 7.17.0](https://discuss.elastic.co/t/elk-upgrade-from-7-8-0-to-7-17-0/297333)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 7:31am UTC](https://discuss.elastic.co/t/elk-upgrade-from-7-8-0-to-7-17-0/297333 "2022-02-16T07:31:19Z")
Hello all, I'm planning to upgrade ELK stack from 7.8.0 to 7.17.0, please suggest if I need to take care of any scenarios and risks that I may encounter during this upgrade. Thanks, Nandakishor --- ## [Change background color and text conditionally - OpenSearch Dashboard](https://discuss.elastic.co/t/change-background-color-and-text-conditionally-opensearch-dashboard/297262)
**Author:** [@Raphael\_Carneiro](https://discuss.elastic.co/u/Raphael_Carneiro)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 7:28am UTC](https://discuss.elastic.co/t/change-background-color-and-text-conditionally-opensearch-dashboard/297262 "2022-02-16T07:28:51Z")
Hi, I want to build a very simple visualization based on Count aggregation to be added to a dashboard. This visualization should look just like this: This text and background should change between OK/NOK based on a c… --- ## [Elastic search pagination to log server](https://discuss.elastic.co/t/elastic-search-pagination-to-log-server/296922)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 4\ **Last updated:** [February 16, 2022, 7:12am UTC](https://discuss.elastic.co/t/elastic-search-pagination-to-log-server/296922 "2022-02-16T07:12:37Z")
Hello friends. I have a question today, so I'm writing it down. I'm going to write it down in detail today. I ask for your understanding of my poor English skills. I have a question when building a log server using E… --- ## [Kibana Hostname/IP does not match certificate's](https://discuss.elastic.co/t/kibana-hostname-ip-does-not-match-certificates/297256)
**Author:** [@onjangkim](https://discuss.elastic.co/u/onjangkim)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 6:23am UTC](https://discuss.elastic.co/t/kibana-hostname-ip-does-not-match-certificates/297256 "2022-02-16T06:23:51Z")
Hi please help me What is the cause of this error in kibana? scmail: error sending email: Hostname/IP does not match certificate's altnames: IP: 192.168.18.220 is not in the cert's list: "} --- ## [My JDBC SQL statement have $ sign how do i supply it in JDBC input plugin?](https://discuss.elastic.co/t/my-jdbc-sql-statement-have-sign-how-do-i-supply-it-in-jdbc-input-plugin/297326)
**Author:** [@cans](https://discuss.elastic.co/u/cans)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 6:12am UTC](https://discuss.elastic.co/t/my-jdbc-sql-statement-have-sign-how-do-i-supply-it-in-jdbc-input-plugin/297326 "2022-02-16T06:12:40Z")
Hi, My JDBC input conf statement involves selecting a view from an oracle database. This view involves a $ sign. therefore I get an SQL command not properly ended error when I run the logstash script. how do I escape th… --- ## ["Wild swings" in event rate when number of workers increase](https://discuss.elastic.co/t/wild-swings-in-event-rate-when-number-of-workers-increase/297320)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 4:38am UTC](https://discuss.elastic.co/t/wild-swings-in-event-rate-when-number-of-workers-increase/297320 "2022-02-16T04:38:38Z")
Hi, I'm trying to increase the event rate for my filebeat that is writing Netflow data to Elasticsearch, to keep up with the incoming Netflow traffic. I have already increased max\_bulk\_size to 1000 in filebeat.yml, whic… --- ## [How to compare the log values and drop the deduplicated log in Logstash](https://discuss.elastic.co/t/how-to-compare-the-log-values-and-drop-the-deduplicated-log-in-logstash/297239)
**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 4:16am UTC](https://discuss.elastic.co/t/how-to-compare-the-log-values-and-drop-the-deduplicated-log-in-logstash/297239 "2022-02-16T04:16:37Z")
Feb 15, 2022 @ 16:16:01.743 columns.url:https://mail.google.com/mail/u/0/#inbox name:chrome\_browser\_history @timestamp:Feb 15, 2022 @ 16:16:01.743 @version:1 action:added calendarTime:Tue Feb 15 08:15:58 2022 UTC columns… --- ## [CCR connection issue](https://discuss.elastic.co/t/ccr-connection-issue/297312)
**Author:** [@sonujatav35](https://discuss.elastic.co/u/sonujatav35)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 1:48am UTC](https://discuss.elastic.co/t/ccr-connection-issue/297312 "2022-02-16T01:48:18Z")
Hi, I am trying to setup CCR in our test. While setting up the remote cluster getting some issue. Using platinum license on both cluster. Below status is showing for remote cluster. Can anyone advise me on this whic… --- ## [Re-indexing into schema with new multifields](https://discuss.elastic.co/t/re-indexing-into-schema-with-new-multifields/297203)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 1:32am UTC](https://discuss.elastic.co/t/re-indexing-into-schema-with-new-multifields/297203 "2022-02-16T01:32:33Z")
Hi, Let's say, for the sake of simplicity, I have an index "a" with only this field in the schema: "foo": { "type": "keyword", } And then I create a new index "b" with a new multifield … --- ## [Elasticsearch Basic License Precompiled Beats Downlad for OpenBSD 7.0?](https://discuss.elastic.co/t/elasticsearch-basic-license-precompiled-beats-downlad-for-openbsd-7-0/297310)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 2\ **Last updated:** [February 16, 2022, 1:13am UTC](https://discuss.elastic.co/t/elasticsearch-basic-license-precompiled-beats-downlad-for-openbsd-7-0/297310 "2022-02-16T01:13:15Z")
Hello, I have tried (and failed at the make stage) to compile the OSS version of beats on OpenBSD 7.0. I have since discovered that the OSS version does not have the capabilities that I need. What I'm looking for is a pr… --- ## [Separating HTTPJSON array to separate log entries](https://discuss.elastic.co/t/separating-httpjson-array-to-separate-log-entries/297030)
**Author:** [@isa\_slngr](https://discuss.elastic.co/u/isa_slngr)\ **Replies:** 3\ **Last updated:** [February 16, 2022, 12:37am UTC](https://discuss.elastic.co/t/separating-httpjson-array-to-separate-log-entries/297030 "2022-02-16T00:37:33Z")
Good evening all, Does anyone in the community know how I can create separate log entries using an ingest pipeline for JSON results pulled via the HTTPJSON integration? We are pulling events via an API and the results … --- ## [Reindex data is multiplying docs](https://discuss.elastic.co/t/reindex-data-is-multiplying-docs/296920)
**Author:** [@cris](https://discuss.elastic.co/u/cris)\ **Replies:** 13\ **Last updated:** [February 16, 2022, 12:21am UTC](https://discuss.elastic.co/t/reindex-data-is-multiplying-docs/296920 "2022-02-16T00:21:19Z")
Hello community! I am working with logstash to reindex some data, I have a problem when I run logstash.service the documents increase a lot in the new index, in the original index I have 3000 documents and I expect like… --- ## [Make Errors on OpenBSD 7.0 (Compiling Source)](https://discuss.elastic.co/t/make-errors-on-openbsd-7-0-compiling-source/296662)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 12:08am UTC](https://discuss.elastic.co/t/make-errors-on-openbsd-7-0-compiling-source/296662 "2022-02-16T00:08:51Z")
Hello, I have perused the various OpenBSD topics regarding compiling beats (specifically filebeat) on OpenBSD, and have not found a solution to what I'm seeing. OpenBSD 7.0 currently ships a filebeat version which is b… --- ## [Filter last day documents in index](https://discuss.elastic.co/t/filter-last-day-documents-in-index/297302)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 11:45pm UTC](https://discuss.elastic.co/t/filter-last-day-documents-in-index/297302 "2022-02-15T23:45:56Z")
Hello all, i have an index that recieves data from monday to friday, i need to retrieve the last day documents. Because of data is not recieving on saturday and sunday, 1 day ago filter is not wotking correctly. i would… --- ## [Metricbeat 7.16.1 is not available for download](https://discuss.elastic.co/t/metricbeat-7-16-1-is-not-available-for-download/297277)
**Author:** [@cgnusr01](https://discuss.elastic.co/u/cgnusr01)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 11:42pm UTC](https://discuss.elastic.co/t/metricbeat-7-16-1-is-not-available-for-download/297277 "2022-02-15T23:42:39Z")
When visiting https://www.elastic.co/downloads/past-releases/metricbeat-7-16-1 we get 404 error. --- ## [Question about Reading Flattened Field from ES Index to Pyspark](https://discuss.elastic.co/t/question-about-reading-flattened-field-from-es-index-to-pyspark/297189)
**Author:** [@musku](https://discuss.elastic.co/u/musku)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 11:37pm UTC](https://discuss.elastic.co/t/question-about-reading-flattened-field-from-es-index-to-pyspark/297189 "2022-02-15T23:37:14Z")
Hi , I am trying to read flattened Filed from Elasticsearch . I will be able to read all filed from Index except Flattened Datatype filed. Could you please let me know how to read that filed from Spark. Any option th… --- ## [Looking for guidance on how to add a map using GeoServer](https://discuss.elastic.co/t/looking-for-guidance-on-how-to-add-a-map-using-geoserver/296545)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 3\ **Last updated:** [February 15, 2022, 11:35pm UTC](https://discuss.elastic.co/t/looking-for-guidance-on-how-to-add-a-map-using-geoserver/296545 "2022-02-15T23:35:34Z")
Hi there Elastic team, I'm looking for some guidance on how to add a custom map using a geoserver. I have went over the instructions on this blog Kibana and a Custom Tile Server for NHL Data | Elastic Blog and and I can… --- ## [Missing MISP docs?](https://discuss.elastic.co/t/missing-misp-docs/297301)
**Author:** [@tofubeats](https://discuss.elastic.co/u/tofubeats)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 10:44pm UTC](https://discuss.elastic.co/t/missing-misp-docs/297301 "2022-02-15T22:44:41Z")
I have set up a MISP instance and have configured filebeat to query the MISP server. However, I cannot find the actual docs in any indices in logstash. When running journalctl -fu logstash, I see this every few minutes: … --- ## [How to clear filters from the Dashboard?](https://discuss.elastic.co/t/how-to-clear-filters-from-the-dashboard/297235)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 10:51pm UTC](https://discuss.elastic.co/t/how-to-clear-filters-from-the-dashboard/297235 "2022-02-15T22:51:46Z")
We upgraded Elastic Cloud version 7.13.2 to 7.15.2. In our web page, we have a button and embed Dashboard like this. The dashboard URL in iframe is saved object embed code what Kibana provides which is like below. h… --- ## [Is it possible to call REST API call to elastic using JAVA](https://discuss.elastic.co/t/is-it-possible-to-call-rest-api-call-to-elastic-using-java/297278)
**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 10:22pm UTC](https://discuss.elastic.co/t/is-it-possible-to-call-rest-api-call-to-elastic-using-java/297278 "2022-02-15T22:22:45Z")
Need to call this type of query via REST API String query = "{"bool": {"must": \[{"match\_phrase": {"countryName": "INDIA"}}\], "must\_not": \[\], "should": \[\]}}"; --- ## [How to use curl API curl -X GET -u elastic:elastic http://elasticsearchprd.vbox.com/\_cat/shards | grep -i "UNASSIGNED" from the REST client tool](https://discuss.elastic.co/t/how-to-use-curl-api-curl-x-get-u-elastic-elastic-http-elasticsearchprd-vbox-com-cat-shards-grep-i-unassigned-from-the-rest-client-tool/297052)
**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 10:05pm UTC](https://discuss.elastic.co/t/how-to-use-curl-api-curl-x-get-u-elastic-elastic-http-elasticsearchprd-vbox-com-cat-shards-grep-i-unassigned-from-the-rest-client-tool/297052 "2022-02-15T22:05:08Z")
Hi, How can I use this curl command curl -X GET -u elastic:elastic http://elasticsearchprd.vbox.com/\_cat/shards | grep -i "UNASSIGNED" in any of the REST client tool such as POSTMAN or anything else. If any one come acr… --- ## [Stuck login anonymous embed](https://discuss.elastic.co/t/stuck-login-anonymous-embed/297252)
**Author:** [@Palaibada](https://discuss.elastic.co/u/Palaibada)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 9:19pm UTC](https://discuss.elastic.co/t/stuck-login-anonymous-embed/297252 "2022-02-15T21:19:25Z")
why when i enable anonymous embed i can't enter the dashboard and loop login in the iframe? and when i input xpack.security.sameSiteCookies: "None" kibana not working. --- ## [New to Plugin Development](https://discuss.elastic.co/t/new-to-plugin-development/297271)
**Author:** [@Richard\_L\_Nichols](https://discuss.elastic.co/u/Richard_L_Nichols)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 9:14pm UTC](https://discuss.elastic.co/t/new-to-plugin-development/297271 "2022-02-15T21:14:22Z")
I am struggling getting started and even after contacting support I can not seem to find a good source for documentation. For example I can create a label and update the time every second but when it comes to visualizati… --- ## [Filebeat failing to parse docker json-file logs](https://discuss.elastic.co/t/filebeat-failing-to-parse-docker-json-file-logs/297287)
**Author:** [@rectalogic](https://discuss.elastic.co/u/rectalogic)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 8:48pm UTC](https://discuss.elastic.co/t/filebeat-failing-to-parse-docker-json-file-logs/297287 "2022-02-15T20:48:35Z")
I'm using filebeat 7.12.0 to ingest docker logs using the container input. Log entries in the docker json-file format look like: {"log":"{\\"@timestamp\\":\\"2022-02-15T17:45:26.742Z\\",\\"log.level\\":\\"info\\",\\"message\\":\\"… --- ## [Multimetric ML job Question](https://discuss.elastic.co/t/multimetric-ml-job-question/297292)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 8:41pm UTC](https://discuss.elastic.co/t/multimetric-ml-job-question/297292 "2022-02-15T20:41:49Z")
I have an index with data of throughput of multiples interfaces, those interfaces have different capacities: 1Gbps, 800Mbps, 500Mbps, 50Mbps. It will be allright if I mix all those interfaces in a single multimetric ML … --- ## [Escape single quotes in URL field](https://discuss.elastic.co/t/escape-single-quotes-in-url-field/297120)
**Author:** [@thenotoriousciu](https://discuss.elastic.co/u/thenotoriousciu)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 8:32pm UTC](https://discuss.elastic.co/t/escape-single-quotes-in-url-field/297120 "2022-02-15T20:32:31Z")
Hello, I am trying to create a URL field which redirects to a different dashboard. The values in this field have the following format: 'Application': Create (notice the single quotes). The problem is that when the link … --- ## [How to create field that can get input?](https://discuss.elastic.co/t/how-to-create-field-that-can-get-input/297249)
**Author:** [@paz\_Ben\_Netanel](https://discuss.elastic.co/u/paz_Ben_Netanel)\ **Replies:** 1\ **Last updated:** [February 15, 2022, 8:13pm UTC](https://discuss.elastic.co/t/how-to-create-field-that-can-get-input/297249 "2022-02-15T20:13:46Z")
I want to create a field that can get input and the output will be accordingly --- ## [Forecasts on a dashboard](https://discuss.elastic.co/t/forecasts-on-a-dashboard/153788)
**Author:** [@Kult](https://discuss.elastic.co/u/Kult)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 8:12pm UTC](https://discuss.elastic.co/t/forecasts-on-a-dashboard/153788 "2022-02-15T20:12:16Z")
ML's Forecast feature is great, but is there any way to incorporate forecasts into visualisations (traditional, Timelion or otherwise)? If not, can regular visualisations, Timelion or some another plugin you'd recommend … --- ## [Elasticsearch: Create API Key based on role?](https://discuss.elastic.co/t/elasticsearch-create-api-key-based-on-role/297188)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-create-api-key-based-on-role/297188 "2022-02-15T15:31:46Z")
In the Create API key API documentation, it shows the complete role definition for the API key being included in the /\_security/api\_key request. However, in the example shown, supposed I already have role-a and role-b d… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1050) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1052)