# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1091 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1092 --- ## [Pie chart with list](https://discuss.elastic.co/t/pie-chart-with-list/294342)
**Author:** [@cris](https://discuss.elastic.co/u/cris)\ **Replies:** 7\ **Last updated:** [January 17, 2022, 5:23pm UTC](https://discuss.elastic.co/t/pie-chart-with-list/294342 "2022-01-17T17:23:18Z")
Hi my friends I'm very new on kibana. I want to create a pie chart with a field who contains a list, like this: \[passed, passed, passed, passed, failed, failed, failed, passed, passed, passed, passed, passed, passed, pa… --- ## [Snapshot indices to S3 repository\_exception](https://discuss.elastic.co/t/snapshot-indices-to-s3-repository-exception/294611)
**Author:** [@rymr](https://discuss.elastic.co/u/rymr)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 5:16pm UTC](https://discuss.elastic.co/t/snapshot-indices-to-s3-repository-exception/294611 "2022-01-17T17:16:44Z")
Hi, I backup my indices with a script on s3 bucket following those steps: create repository if it doesn't exist cleanup the repository remove old snapshots snapshot in 4 repositories depending of indices types The fi… --- ## [ES password containing comma can't be passed as environment variable](https://discuss.elastic.co/t/es-password-containing-comma-cant-be-passed-as-environment-variable/294450)
**Author:** [@BitPatty](https://discuss.elastic.co/u/BitPatty)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 4:36pm UTC](https://discuss.elastic.co/t/es-password-containing-comma-cant-be-passed-as-environment-variable/294450 "2022-01-17T16:36:25Z")
I'm passing the password as environment variable to heartbeat.yml on ES 7.16.1 as follows: heartbeat.yml: output: elasticsearch: password: '${ELASTICSEARCH\_PASSWORD}' When using ELASTICSEARCH\_PASSWORD="foo,bar" … --- ## [Aggregate filter plugin output in a single document - Logstash](https://discuss.elastic.co/t/aggregate-filter-plugin-output-in-a-single-document-logstash/294606)
**Author:** [@Eduard\_Abril](https://discuss.elastic.co/u/Eduard_Abril)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 4:28pm UTC](https://discuss.elastic.co/t/aggregate-filter-plugin-output-in-a-single-document-logstash/294606 "2022-01-17T16:28:21Z")
Hi guys, I'm using an aggregate filter plugin to map certain information to the main document that I'm processing with logstash but I don't understand why at the end I'm getting 2 documents instead of 1, the first of the… --- ## [Output conditions with logstash plugin http\_poller](https://discuss.elastic.co/t/output-conditions-with-logstash-plugin-http-poller/294608)
**Author:** [@redaER7](https://discuss.elastic.co/u/redaER7)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 4:26pm UTC](https://discuss.elastic.co/t/output-conditions-with-logstash-plugin-http-poller/294608 "2022-01-17T16:26:49Z")
I would like to implement a conditional output to Elasticsearch index using logstash http\_poller input plugin. I am using a GET request and sending the response to the index only if the response is not already in the ind… --- ## [After Upgrade Logstash is running but not sending logs to elasticsearch](https://discuss.elastic.co/t/after-upgrade-logstash-is-running-but-not-sending-logs-to-elasticsearch/294324)
**Author:** [@Othmane\_CHHAIBI](https://discuss.elastic.co/u/Othmane_CHHAIBI)\ **Replies:** 7\ **Last updated:** [January 17, 2022, 4:19pm UTC](https://discuss.elastic.co/t/after-upgrade-logstash-is-running-but-not-sending-logs-to-elasticsearch/294324 "2022-01-17T16:19:15Z")
hello everyone, After upgrading logstash from version 6.8 to 7.16.2, logstash is running but it didn't send logs to Elasticsearch. In the logfile of logstash server i have this error : "\[2022-01-03Tl3:50:23,910)\[FATAL)… --- ## [Error "Look-behind group does not have an obvious maximum length near index" in pattern\_capture](https://discuss.elastic.co/t/error-look-behind-group-does-not-have-an-obvious-maximum-length-near-index-in-pattern-capture/294594)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 4:08pm UTC](https://discuss.elastic.co/t/error-look-behind-group-does-not-have-an-obvious-maximum-length-near-index-in-pattern-capture/294594 "2022-01-17T16:08:08Z")
Hello I just want to index the word "Samsung" in the text below Text: Samsung a30 mobile phone I mean I want to separate the text above by space and just index the word I want (the word may change by location, for exa… --- ## [How to change "message" value in index](https://discuss.elastic.co/t/how-to-change-message-value-in-index/294548)
**Author:** [@mhzr](https://discuss.elastic.co/u/mhzr)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 3:38pm UTC](https://discuss.elastic.co/t/how-to-change-message-value-in-index/294548 "2022-01-17T15:38:45Z")
Hello, In logstash pipeline or indexpattern how to change the following part of CDN log in "message" field to seperate or extract some data then aggrigate them. original "message" value: \<40\> 2022-01-17T08:31:22Z logs… --- ## [ES issue with bulk items](https://discuss.elastic.co/t/es-issue-with-bulk-items/294598)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 3:35pm UTC](https://discuss.elastic.co/t/es-issue-with-bulk-items/294598 "2022-01-17T15:35:36Z")
Hello, I'm receiving below issues with bulk items, "stacktrace": \["org.elasticsearch.index.mapper.MapperParsingException: object mapping for \[rule\] tried to parse field \[rule\] as object, but found a concrete value", "a… --- ## [Separate Fields Now Displaying As One Object](https://discuss.elastic.co/t/separate-fields-now-displaying-as-one-object/293950)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 11\ **Last updated:** [January 17, 2022, 3:25pm UTC](https://discuss.elastic.co/t/separate-fields-now-displaying-as-one-object/293950 "2022-01-17T15:25:33Z")
I use Logstash to process our logs and organize relevant fields into objects so that they display together in Kibana. log.source log.format log.time However, after upgrading, I THINK to 7.16, they're now displaying as… --- ## [Elastic Ingest Node Geoip Expired](https://discuss.elastic.co/t/elastic-ingest-node-geoip-expired/294591)
**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 3:09pm UTC](https://discuss.elastic.co/t/elastic-ingest-node-geoip-expired/294591 "2022-01-17T15:09:30Z")
I have been using Elasticsearch ingest nodes for a while. For the first time I noticed that I am getting an error on geoip mapping of data. Error is: \_geoip\_expired\_database Looking into this, looks like if libraries ar… --- ## [Assign colors to boolean pie chart](https://discuss.elastic.co/t/assign-colors-to-boolean-pie-chart/294486)
**Author:** [@kequach](https://discuss.elastic.co/u/kequach)\ **Replies:** 6\ **Last updated:** [January 17, 2022, 2:54pm UTC](https://discuss.elastic.co/t/assign-colors-to-boolean-pie-chart/294486 "2022-01-17T14:54:44Z")
I want to have fixed colors for true/false. At the moment, the color palette simply assigns the bigger value to the default color which makes it hard to tell in one glance if the piechart is mostly false or true: I al… --- ## [Brand New Installation of ElasticSearch and Kibana on Windows. Kibana is not able to connect to ElasticSearch](https://discuss.elastic.co/t/brand-new-installation-of-elasticsearch-and-kibana-on-windows-kibana-is-not-able-to-connect-to-elasticsearch/294490)
**Author:** [@webdada](https://discuss.elastic.co/u/webdada)\ **Replies:** 3\ **Last updated:** [January 17, 2022, 2:43pm UTC](https://discuss.elastic.co/t/brand-new-installation-of-elasticsearch-and-kibana-on-windows-kibana-is-not-able-to-connect-to-elasticsearch/294490 "2022-01-17T14:43:21Z")
Both are on latest 7.16.3 version. Elasticsearch-7.16.3 Elasticsearch starts fine, I was able to access http://localhost:9200/ Kibana command line start error: log \[20:15:25.611\] \[warning\]\[process\] Error \[Prod… --- ## [How do I protect indexes](https://discuss.elastic.co/t/how-do-i-protect-indexes/294585)
**Author:** [@kzltp](https://discuss.elastic.co/u/kzltp)\ **Replies:** 3\ **Last updated:** [January 17, 2022, 2:09pm UTC](https://discuss.elastic.co/t/how-do-i-protect-indexes/294585 "2022-01-17T14:09:41Z")
I use elasticsarch 7.16. I wanna any indexes not delete. Any user(included in superuser) can't delete any indexes. How do i do that. --- ## [Date incorrectly parsed](https://discuss.elastic.co/t/date-incorrectly-parsed/294571)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 2:03pm UTC](https://discuss.elastic.co/t/date-incorrectly-parsed/294571 "2022-01-17T14:03:09Z")
Hello, i can't get this date parsed correctly 20220113T21:00:18.965901 date { match =\> \["fill\_date", "yyyMMdd'T'HH:mm:ss.SSSSSS"\] target =\> "@timestamp" } Best --- ## [Calculate ratio beetwin count and unique count](https://discuss.elastic.co/t/calculate-ratio-beetwin-count-and-unique-count/294588)
**Author:** [@Fred59](https://discuss.elastic.co/u/Fred59)\ **Replies:** 8\ **Last updated:** [January 17, 2022, 1:51pm UTC](https://discuss.elastic.co/t/calculate-ratio-beetwin-count-and-unique-count/294588 "2022-01-17T13:51:48Z")
Hello, I have a list of tickets for a computeur support. I would have in a tab the ratio beetwin the count of exchange and the unique count of ticket number, for different typologies, like that: Is it possible in a … --- ## [Log4j on Elasticsearch 7.9.2](https://discuss.elastic.co/t/log4j-on-elasticsearch-7-9-2/292093)
**Author:** [@h4h3hj](https://discuss.elastic.co/u/h4h3hj)\ **Replies:** 8\ **Last updated:** [January 17, 2022, 12:33pm UTC](https://discuss.elastic.co/t/log4j-on-elasticsearch-7-9-2/292093 "2022-01-17T12:33:12Z")
Hi Everyone, As we know the vulnerability (CVE-2021-44228) impacts multiple versions of the Apache Log4j2 I can see Elastic has updated about this Supported versions of Elasticsearch (6.8.9+, 7.8+) used with recent ve… --- ## [Browser was closed unexpectedly!](https://discuss.elastic.co/t/browser-was-closed-unexpectedly/294581)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 12:21pm UTC](https://discuss.elastic.co/t/browser-was-closed-unexpectedly/294581 "2022-01-17T12:21:19Z")
Hi, I am trying to print a PDF of my dashboard but all I keep getting is this error: "Browser was closed unexpectedly! Check the server logs for more info." What does this mean? Can you please try and help me with this?… --- ## [Logstash parse strings before a valid json](https://discuss.elastic.co/t/logstash-parse-strings-before-a-valid-json/294578)
**Author:** [@Calin\_Tatar](https://discuss.elastic.co/u/Calin_Tatar)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 11:59am UTC](https://discuss.elastic.co/t/logstash-parse-strings-before-a-valid-json/294578 "2022-01-17T11:59:58Z")
Hello, i have the following log : Received stock info for v2, payload: {'id': '1234dads', 'sku': '1QA0QWQ-1JFQQQ'} and i would like to add a new field with phase before json ,i tried the following config but is now worki… --- ## [Please suggest on how to configure Kibana Dashboard Proxy URL](https://discuss.elastic.co/t/please-suggest-on-how-to-configure-kibana-dashboard-proxy-url/294575)
**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 11:53am UTC](https://discuss.elastic.co/t/please-suggest-on-how-to-configure-kibana-dashboard-proxy-url/294575 "2022-01-17T11:53:39Z")
Hello Team, I have ELK stack running on Docker container. I wanted to configure the Kibana dashboard through virtual host so that I can access it with XYZ.com domain. \ ProxyPreserveHost On ServerN… --- ## [Kibana page goes unresponsive everytime i select sum buckets in Kibana 7.6.3](https://discuss.elastic.co/t/kibana-page-goes-unresponsive-everytime-i-select-sum-buckets-in-kibana-7-6-3/294573)
**Author:** [@emohan](https://discuss.elastic.co/u/emohan)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 11:45am UTC](https://discuss.elastic.co/t/kibana-page-goes-unresponsive-everytime-i-select-sum-buckets-in-kibana-7-6-3/294573 "2022-01-17T11:45:06Z")
I want to sum count based on common bucket and so i try sum bucket aggregation which results in page going unresponsive. I am on Kibana 7.6.3 version. This is similar to previous post: Is this bug still existing? --- ## [Mean aggregation over cadinality aggregation, over previous composite aggregation](https://discuss.elastic.co/t/mean-aggregation-over-cadinality-aggregation-over-previous-composite-aggregation/294374)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 3\ **Last updated:** [January 17, 2022, 10:52am UTC](https://discuss.elastic.co/t/mean-aggregation-over-cadinality-aggregation-over-previous-composite-aggregation/294374 "2022-01-17T10:52:21Z")
My use case require to obtain an average over previous cardinality aggregation, this aggregations works over the buckets generated by a composite aggregation "calendar histogram" that breaks the timeline in calendar days… --- ## [Snapshot & Restore Policies](https://discuss.elastic.co/t/snapshot-restore-policies/294567)
**Author:** [@FALEN](https://discuss.elastic.co/u/FALEN)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 10:49am UTC](https://discuss.elastic.co/t/snapshot-restore-policies/294567 "2022-01-17T10:49:58Z")
Hi all, Im using s3 repository to snapshot & restore indices. Clusters configured to have 10+ different snapshot policies that mainly based on index names. I leave a certain amount of time between each policy to preven… --- ## [Metricbeat and Elasticsearch Breaker Limit](https://discuss.elastic.co/t/metricbeat-and-elasticsearch-breaker-limit/294419)
**Author:** [@MichaelCoetzee](https://discuss.elastic.co/u/MichaelCoetzee)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 10:38am UTC](https://discuss.elastic.co/t/metricbeat-and-elasticsearch-breaker-limit/294419 "2022-01-17T10:38:32Z")
Hi All. We have a Kubernetes cluster with Elasticsearch and Metricbeat We collect quite a lot of data with Metricbeat and sometimes our Elasticsearch cluster might go down during some maintenance and as i understand it… --- ## [How to run multiple instances in docker container?](https://discuss.elastic.co/t/how-to-run-multiple-instances-in-docker-container/294390)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 10:18am UTC](https://discuss.elastic.co/t/how-to-run-multiple-instances-in-docker-container/294390 "2022-01-17T10:18:48Z")
I want to run multiple config files in docker container. pipelines.yml file : - pipeline.id: main path.config: "/usr/share/logstash/config/conf.d/\*.conf" - pipeline.id: i2c\_req\_res path.config: "/usr/share/logstas… --- ## [Ingest strategy](https://discuss.elastic.co/t/ingest-strategy/294561)
**Author:** [@mark8](https://discuss.elastic.co/u/mark8)\ **Replies:** 0\ **Last updated:** [January 17, 2022, 9:56am UTC](https://discuss.elastic.co/t/ingest-strategy/294561 "2022-01-17T09:56:56Z")
Hi there, as a (broader) follow up on this topic, I am creating this new one about ingest strategy, as I am utterly running out of ideas. My use case has many client machines, each logging various metrics (pretty common… --- ## [How to index a certain number of words from each text?](https://discuss.elastic.co/t/how-to-index-a-certain-number-of-words-from-each-text/294506)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 6\ **Last updated:** [January 17, 2022, 9:54am UTC](https://discuss.elastic.co/t/how-to-index-a-certain-number-of-words-from-each-text/294506 "2022-01-17T09:54:13Z")
How can only the first two words of each text be indexed ?? --- ## [I deleted index like files into OS when I had a diskspace problem and now have to fix it](https://discuss.elastic.co/t/i-deleted-index-like-files-into-os-when-i-had-a-diskspace-problem-and-now-have-to-fix-it/294558)
**Author:** [@marlybyliganget](https://discuss.elastic.co/u/marlybyliganget)\ **Replies:** 1\ **Last updated:** [January 17, 2022, 9:31am UTC](https://discuss.elastic.co/t/i-deleted-index-like-files-into-os-when-i-had-a-diskspace-problem-and-now-have-to-fix-it/294558 "2022-01-17T09:31:10Z")
Hi guys I have a problem with Elasticsearch cluster I deleted index like files into OS, when I had a diskspace problem I deleted index through this command find ./data/nodes/0/indices -type d -mtime +30 -exec rm -rf … --- ## [Elastic Agent - State persistence in Docker](https://discuss.elastic.co/t/elastic-agent-state-persistence-in-docker/294352)
**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 8:49am UTC](https://discuss.elastic.co/t/elastic-agent-state-persistence-in-docker/294352 "2022-01-17T08:49:50Z")
Hi, I am looking for best practice guidance when running the Elastic Agent and integrations in Docker containers. I have no issues getting them running (the documentation needs a bit of love as there are some inconsisten… --- ## [Create TermAggregation with the wildcard field in Java code](https://discuss.elastic.co/t/create-termaggregation-with-the-wildcard-field-in-java-code/294424)
**Author:** [@Tiffany](https://discuss.elastic.co/u/Tiffany)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 7:50am UTC](https://discuss.elastic.co/t/create-termaggregation-with-the-wildcard-field-in-java-code/294424 "2022-01-17T07:50:39Z")
Hi, I want to create a termAggregation query with wildcard in Java API. It works in Elasticsearch console, but not in Java code. Would you mind shedding some lights? Thank you! Below query works in console { "aggrega… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1090) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1092)