# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1075 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1076 --- ## [Filebeat - Multiple VPC logs from different S3 buckets not working](https://discuss.elastic.co/t/filebeat-multiple-vpc-logs-from-different-s3-buckets-not-working/292711)
**Author:** [@antondubek](https://discuss.elastic.co/u/antondubek)\ **Replies:** 14\ **Last updated:** [January 28, 2022, 2:54pm UTC](https://discuss.elastic.co/t/filebeat-multiple-vpc-logs-from-different-s3-buckets-not-working/292711 "2022-01-28T14:54:45Z")
HI All, Within our AWS account, we have 2 VPC's that output flow logs into individual separate S3 buckets. I have enabled event notifications and connected them to SQS which all works. I also have WAF and ALB logs which… --- ## [Font size and colors in Lens bar charts](https://discuss.elastic.co/t/font-size-and-colors-in-lens-bar-charts/295694)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 2:32pm UTC](https://discuss.elastic.co/t/font-size-and-colors-in-lens-bar-charts/295694 "2022-01-28T14:32:54Z")
Hello, This is a pretty basic question, but I cannot find the answers in the Kibana documentation. I have a Lens bar charts visualization where I want to change the font size and colors of the bar legends and axis titl… --- ## [How can I find is ilm policy been applied to my index?](https://discuss.elastic.co/t/how-can-i-find-is-ilm-policy-been-applied-to-my-index/295708)
**Author:** [@baalchina](https://discuss.elastic.co/u/baalchina)\ **Replies:** 1\ **Last updated:** [January 28, 2022, 2:26pm UTC](https://discuss.elastic.co/t/how-can-i-find-is-ilm-policy-been-applied-to-my-index/295708 "2022-01-28T14:26:09Z")
Hi, I am trying to apply a ILM policy to my index, I created a new index template, all of them are empty except a index pattern(and this pattern has some index include). At last, I assigin the ILM policy to the new index… --- ## [Save Menu disappears from embedded iframe after create visualization click](https://discuss.elastic.co/t/save-menu-disappears-from-embedded-iframe-after-create-visualization-click/295713)
**Author:** [@Agus\_Roca](https://discuss.elastic.co/u/Agus_Roca)\ **Replies:** 0\ **Last updated:** [January 28, 2022, 2:07pm UTC](https://discuss.elastic.co/t/save-menu-disappears-from-embedded-iframe-after-create-visualization-click/295713 "2022-01-28T14:07:13Z")
Hi fellows! I shared a dashboard with the top menu enabled so that i can create visualizations and save them while embedded in my site.. This works ok on load, but when i hit create visualization, the Save Menu dissappe… --- ## [Set “ssl” parameter for jdbc input plugin for cassandra](https://discuss.elastic.co/t/set-ssl-parameter-for-jdbc-input-plugin-for-cassandra/295711)
**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\ **Replies:** 0\ **Last updated:** [January 28, 2022, 1:46pm UTC](https://discuss.elastic.co/t/set-ssl-parameter-for-jdbc-input-plugin-for-cassandra/295711 "2022-01-28T13:46:10Z")
Hi, Im trying to connect to ssl cassandra with dbschema jdbc drivers. but failing to connect. where as successful to connect to non ssl cassandra db. Also with cdata drivers im able to connect both ssl & non ssl cassa… --- ## [Using rally without GIT and S3 bucket](https://discuss.elastic.co/t/using-rally-without-git-and-s3-bucket/295681)
**Author:** [@marek\_duciuc](https://discuss.elastic.co/u/marek_duciuc)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 1:20pm UTC](https://discuss.elastic.co/t/using-rally-without-git-and-s3-bucket/295681 "2022-01-28T13:20:17Z")
Is there a way to use rally without setting up git and S3? What I mean during track development I do not want it to be committed to git and also I just want to have data locally into in s3 for now. How do I do it? At l… --- ## [Filter to send only system shortnames](https://discuss.elastic.co/t/filter-to-send-only-system-shortnames/295704)
**Author:** [@StuWhitby](https://discuss.elastic.co/u/StuWhitby)\ **Replies:** 1\ **Last updated:** [January 28, 2022, 1:17pm UTC](https://discuss.elastic.co/t/filter-to-send-only-system-shortnames/295704 "2022-01-28T13:17:27Z")
Hi, I'm new to Logstash, and attempting to update our company's configuration which currently sends syslog data to Splunk. I've searched on how to standardise the system naming, which may have the shortname or the long… --- ## [Auditbeat Conditional Processing if then else](https://discuss.elastic.co/t/auditbeat-conditional-processing-if-then-else/295697)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 0\ **Last updated:** [January 28, 2022, 11:49am UTC](https://discuss.elastic.co/t/auditbeat-conditional-processing-if-then-else/295697 "2022-01-28T11:49:31Z")
For reference on what works and what doesn't in processors in auditbeat. Adding multiple conditions(like an OR condition) works fine like this: processors: - if: equals: process.executable: "/home/… --- ## [Sharing Dashboard via iFrame fails to login](https://discuss.elastic.co/t/sharing-dashboard-via-iframe-fails-to-login/295639)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 4\ **Last updated:** [January 28, 2022, 1:03pm UTC](https://discuss.elastic.co/t/sharing-dashboard-via-iframe-fails-to-login/295639 "2022-01-28T13:03:35Z")
Hello All, I was looking at trying to share access to my Dashboard via the provided iFrame code, and when I place the iFrame into my html page it its my kibana instance but... it fails to let me log in and see my dashbo… --- ## [Kibana export CSV from discovery - err:Unsupported content-type of false specified by job output](https://discuss.elastic.co/t/kibana-export-csv-from-discovery-err-unsupported-content-type-of-false-specified-by-job-output/295705)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [January 28, 2022, 12:59pm UTC](https://discuss.elastic.co/t/kibana-export-csv-from-discovery-err-unsupported-content-type-of-false-specified-by-job-output/295705 "2022-01-28T12:59:19Z")
Elastic/Kibana version 7.13.3 I am trying to export data from Elasticsearch using discover-\>save as-\>share-\>csv reports -\> generate CSV But I receive messge report generated and when I try to download it it provides … --- ## [Pie Chart - Field name is not Visible](https://discuss.elastic.co/t/pie-chart-field-name-is-not-visible/295691)
**Author:** [@Susendiran](https://discuss.elastic.co/u/Susendiran)\ **Replies:** 4\ **Last updated:** [January 28, 2022, 12:47pm UTC](https://discuss.elastic.co/t/pie-chart-field-name-is-not-visible/295691 "2022-01-28T12:47:14Z")
Hello Team, We are facing one issue in Pie-chart visualization which is not showing a field named - "Hospitality". The amount/quantity is visible in pie-chart view but the field name alone not visible while viewing(not … --- ## [Get documents based on some filter conditions](https://discuss.elastic.co/t/get-documents-based-on-some-filter-conditions/295431)
**Author:** [@Khushboo\_Kaul](https://discuss.elastic.co/u/Khushboo_Kaul)\ **Replies:** 1\ **Last updated:** [January 26, 2022, 11:50pm UTC](https://discuss.elastic.co/t/get-documents-based-on-some-filter-conditions/295431 "2022-01-26T23:50:26Z")
Hi, I am trying to use spark ( pyspark) and my goal is to query from the huge Elasticsearch index a subset of data that matches a particular condition of column. For example, if my columns are - name, age, timestamp I… --- ## [Using CoOrdinated nodes in ES cluster](https://discuss.elastic.co/t/using-coordinated-nodes-in-es-cluster/295608)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 4\ **Last updated:** [January 28, 2022, 11:42am UTC](https://discuss.elastic.co/t/using-coordinated-nodes-in-es-cluster/295608 "2022-01-28T11:42:12Z")
I have 6 nodes cluster where all nodes marked with "mdi". Now I added 3 more Co-Ordinated nodes and configured with master=false, data=false, ingest=false. Now those nodes shows role as "-". As per doc this indicates th… --- ## [Error registering plugin Beats input](https://discuss.elastic.co/t/error-registering-plugin-beats-input/295596)
**Author:** [@florinb](https://discuss.elastic.co/u/florinb)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 11:04am UTC](https://discuss.elastic.co/t/error-registering-plugin-beats-input/295596 "2022-01-28T11:04:28Z")
i'm running a dockerised Logstash 6.8.23 on java 1.8 image with all dependencies fulfilled: $ java -version openjdk version "1.8.0\_312" OpenJDK Runtime Environment (build 1.8.0\_312-b07) OpenJDK 64-Bit Server VM (build 2… --- ## [Journalbeat is being stuck](https://discuss.elastic.co/t/journalbeat-is-being-stuck/295312)
**Author:** [@qwinkler](https://discuss.elastic.co/u/qwinkler)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 10:33am UTC](https://discuss.elastic.co/t/journalbeat-is-being-stuck/295312 "2022-01-28T10:33:36Z")
Journalbeat stuck for an unknown reason. Also, this only happens on the nodes with more logs than on the other ones. There are around 5 logs per second (which I don't think is a big load), but still. Here is an actual b… --- ## [About Synonym toke filter](https://discuss.elastic.co/t/about-synonym-toke-filter/294501)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 10:32am UTC](https://discuss.elastic.co/t/about-synonym-toke-filter/294501 "2022-01-28T10:32:49Z")
I am using synonym token filter in my mapping but it has a property called synonyms\_path. PUT /\_template/ise { "index\_patterns" : \["log-ise-\*"\], "settings": { "index.lifecycle.name":"ise\_policy", "ind… --- ## [Winlogbeat output config problems](https://discuss.elastic.co/t/winlogbeat-output-config-problems/295628)
**Author:** [@jlareos](https://discuss.elastic.co/u/jlareos)\ **Replies:** 5\ **Last updated:** [January 28, 2022, 10:21am UTC](https://discuss.elastic.co/t/winlogbeat-output-config-problems/295628 "2022-01-28T10:21:01Z")
Hi everyone! I have installed in a VMWare machine the Security Onion OS. On the same machine i have installed winlogbeat and i'm having problems with the yml file. When i execute this command ./winlogbeat test config … --- ## [Automatic heap sizing](https://discuss.elastic.co/t/automatic-heap-sizing/293386)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 9\ **Last updated:** [January 28, 2022, 10:03am UTC](https://discuss.elastic.co/t/automatic-heap-sizing/293386 "2022-01-28T10:03:46Z")
I'm testing the automatic heap size feature in 7.16.2. In a 12G VM I was specifying a 4G heap, I removed that setting, restarted Elasticsearch and it used 1G for heap. That seams small to me. Does it grow the heap if … --- ## [Pagination - re-indexing](https://discuss.elastic.co/t/pagination-re-indexing/295648)
**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\ **Replies:** 3\ **Last updated:** [January 28, 2022, 10:03am UTC](https://discuss.elastic.co/t/pagination-re-indexing/295648 "2022-01-28T10:03:11Z")
I have question regarding pagination in Elasticsearch, let i have log record more then 10,000 so i am gone a do pagination on it, so main question is that -- is it required re-indexing when data is more then 10,000 ??? --- ## [Aggregate multiple in logstash](https://discuss.elastic.co/t/aggregate-multiple-in-logstash/295602)
**Author:** [@marc0069urca](https://discuss.elastic.co/u/marc0069urca)\ **Replies:** 3\ **Last updated:** [January 28, 2022, 9:24am UTC](https://discuss.elastic.co/t/aggregate-multiple-in-logstash/295602 "2022-01-28T09:24:00Z")
Hello I am having trouble merging data from different SQL data tables. I can see that the data is saved in ELK as the different SQL entries are made but when arriving at the aggregation filter, it renames the fields we… --- ## [Optimising Kibana Indicator Match alert](https://discuss.elastic.co/t/optimising-kibana-indicator-match-alert/295668)
**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\ **Replies:** 0\ **Last updated:** [January 28, 2022, 8:39am UTC](https://discuss.elastic.co/t/optimising-kibana-indicator-match-alert/295668 "2022-01-28T08:39:31Z")
Hi I am trying to alert against a large set of indices covered by the Indicator Index Pattern. These indices go back 3 years so there is a lot of data. When activated the alerting rule requires a lot of system resources… --- ## [Filebeat. "from kafka to kafka transfer"](https://discuss.elastic.co/t/filebeat-from-kafka-to-kafka-transfer/295342)
**Author:** [@faringot](https://discuss.elastic.co/u/faringot)\ **Replies:** 8\ **Last updated:** [January 28, 2022, 7:31am UTC](https://discuss.elastic.co/t/filebeat-from-kafka-to-kafka-transfer/295342 "2022-01-28T07:31:26Z")
Good day, I'm trying to set up data transfer from one Kafka to another using Filebeat. The current version does not work with SASL\_SSL and I have downloaded 8.0.0-rc1. Found a new error: "Exiting: module kafka is confi… --- ## [Reindex 2.4 to 5.6](https://discuss.elastic.co/t/reindex-2-4-to-5-6/295642)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 7\ **Last updated:** [January 28, 2022, 7:17am UTC](https://discuss.elastic.co/t/reindex-2-4-to-5-6/295642 "2022-01-28T07:17:19Z")
We are in the process of re-indexing 2.4 to 5.6. During the re-indexing process the application is able to perform inserts/updates/delete operation to 2.4. So, we are planning to re-index again to copy the missing docume… --- ## [Apply ILM on rollup or transform index](https://discuss.elastic.co/t/apply-ilm-on-rollup-or-transform-index/294039)
**Author:** [@Achraf\_MENSI](https://discuss.elastic.co/u/Achraf_MENSI)\ **Replies:** 7\ **Last updated:** [January 28, 2022, 6:50am UTC](https://discuss.elastic.co/t/apply-ilm-on-rollup-or-transform-index/294039 "2022-01-28T06:50:59Z")
Hello, does anyone have successfully applied ILM on a transform or rollup index? or it's possible only with normal index? thanks --- ## [Display dynamic data in columns](https://discuss.elastic.co/t/display-dynamic-data-in-columns/294812)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 13\ **Last updated:** [January 28, 2022, 5:22am UTC](https://discuss.elastic.co/t/display-dynamic-data-in-columns/294812 "2022-01-28T05:22:18Z")
Hi all, In my project, the field names are dynamic as new indices keep getting pushed with different columns names. I cannot select a column name as they are not constant for all indices except time field and name fiel… --- ## [Logstash scheduling for every 5 mins hour using rss input](https://discuss.elastic.co/t/logstash-scheduling-for-every-5-mins-hour-using-rss-input/295544)
**Author:** [@saik1](https://discuss.elastic.co/u/saik1)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 4:37am UTC](https://discuss.elastic.co/t/logstash-scheduling-for-every-5-mins-hour-using-rss-input/295544 "2022-01-28T04:37:42Z")
Hi, EveryOne, how can i schedule logstash for every 5mins using rss input? Regads kiran --- ## [Statically Extract Kibana Dashboard](https://discuss.elastic.co/t/statically-extract-kibana-dashboard/295631)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 2\ **Last updated:** [January 28, 2022, 12:22am UTC](https://discuss.elastic.co/t/statically-extract-kibana-dashboard/295631 "2022-01-28T00:22:00Z")
Hello All, I have a dashboard that I would like to effectively export a snapshot of, and then host behind a CRM to people that don't have access to my Kibana and ES servers. Is there a good way to statically extract a d… --- ## [Questions about performance](https://discuss.elastic.co/t/questions-about-performance/295518)
**Author:** [@EnJay](https://discuss.elastic.co/u/EnJay)\ **Replies:** 5\ **Last updated:** [January 27, 2022, 11:26pm UTC](https://discuss.elastic.co/t/questions-about-performance/295518 "2022-01-27T23:26:04Z")
Hello dear community :hugs: Sorry for the possibly incorrect questions below. I'm just trying to learn the miracle of Elasticsearch :slight\_smile: I want to store ~10 billion records with data history of different cryp… --- ## [Not enough free space for cache file of size \[8757706752\] in path \[/usr/share/elasticsearch/data/nodes/0\]](https://discuss.elastic.co/t/not-enough-free-space-for-cache-file-of-size-8757706752-in-path-usr-share-elasticsearch-data-nodes-0/295612)
**Author:** [@chaishiqi](https://discuss.elastic.co/u/chaishiqi)\ **Replies:** 1\ **Last updated:** [January 27, 2022, 10:24pm UTC](https://discuss.elastic.co/t/not-enough-free-space-for-cache-file-of-size-8757706752-in-path-usr-share-elasticsearch-data-nodes-0/295612 "2022-01-27T22:24:12Z")
I ran a container of frozen node with image tag 7.16.2,here is the Elasticsearch.yml cluster.name: "docker-cluster" network.host: 192.168.56.13 discovery.seed\_hosts: \["192.168.56.13", "192.168.56.12", "192.168.56.14"\] n… --- ## [Date range java api examples](https://discuss.elastic.co/t/date-range-java-api-examples/295505)
**Author:** [@nandan-g](https://discuss.elastic.co/u/nandan-g)\ **Replies:** 1\ **Last updated:** [January 27, 2022, 8:02pm UTC](https://discuss.elastic.co/t/date-range-java-api-examples/295505 "2022-01-27T20:02:33Z")
Hi, I am trying to search the documents using a date range filter along with some keywords. I couldn't find any java api samples to do so. Could you please help me. Normal search works with the following code: But am af… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1074) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1076)