# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1140 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1141 --- ## [Not able to search or aggregate values from a field included lately in the mapping](https://discuss.elastic.co/t/not-able-to-search-or-aggregate-values-from-a-field-included-lately-in-the-mapping/290836)
**Author:** [@Fabio\_Batalha](https://discuss.elastic.co/u/Fabio_Batalha)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 4:12pm UTC](https://discuss.elastic.co/t/not-able-to-search-or-aggregate-values-from-a-field-included-lately-in-the-mapping/290836 "2021-12-03T16:12:02Z")
Hello there! I have a field (log\_file\_name) in my index that was not included in the mapping since de index was created. All records have the field but no mapping was defined to it. My mapping is configured as dynamic =… --- ## [Graph scale on Kibana Dashboard](https://discuss.elastic.co/t/graph-scale-on-kibana-dashboard/290766)
**Author:** [@sunny3794.ad](https://discuss.elastic.co/u/sunny3794.ad)\ **Replies:** 5\ **Last updated:** [December 3, 2021, 3:58pm UTC](https://discuss.elastic.co/t/graph-scale-on-kibana-dashboard/290766 "2021-12-03T15:58:54Z")
Is there any way to change the graph scale on Kibana Dashboards to logarithmic? I have tried searching for it but couldn't find any option to bring about this change. I read somewhere that this feature was added to Kiban… --- ## [Error logging container json files with filebeat](https://discuss.elastic.co/t/error-logging-container-json-files-with-filebeat/290912)
**Author:** [@Guillaume84](https://discuss.elastic.co/u/Guillaume84)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 3:48pm UTC](https://discuss.elastic.co/t/error-logging-container-json-files-with-filebeat/290912 "2021-12-03T15:48:11Z")
Hello, I am struggling for days on parsing a simple airflow json file from a k8s container Log format: {"asctime": "2021-12-02 17:04:34,450", "filename": "standard\_task\_runner.py", "lineno": 77, "levelname": "INFO", "… --- ## [Error restoring state from URL Cannot read properties of null (reading 'length')](https://discuss.elastic.co/t/error-restoring-state-from-url-cannot-read-properties-of-null-reading-length/290823)
**Author:** [@RobertC1](https://discuss.elastic.co/u/RobertC1)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 3:32pm UTC](https://discuss.elastic.co/t/error-restoring-state-from-url-cannot-read-properties-of-null-reading-length/290823 "2021-12-03T15:32:39Z")
Hi! Please, when I switch from one dashboard to anothe I get the error Error restoring state from URL Cannot read properties of null (reading 'length'). I need help Thanks --- ## [Pie chart from time range](https://discuss.elastic.co/t/pie-chart-from-time-range/290545)
**Author:** [@franckfct](https://discuss.elastic.co/u/franckfct)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 2:48pm UTC](https://discuss.elastic.co/t/pie-chart-from-time-range/290545 "2021-12-03T14:48:21Z")
Hi, I have this kind of log to monitor the availability of my application: Status,Start,End Unavailable,17-03-2020 12:10:32,17-03-2020 12:14:32 Available,17-03-2020 12:15:32,26-03-2020 12:31:25 Unavailable,26-03-2020 1… --- ## [Kibana Filter aggregation: how to handle field names (and/or values) with spaces?](https://discuss.elastic.co/t/kibana-filter-aggregation-how-to-handle-field-names-and-or-values-with-spaces/289069)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 2\ **Last updated:** [December 3, 2021, 2:47pm UTC](https://discuss.elastic.co/t/kibana-filter-aggregation-how-to-handle-field-names-and-or-values-with-spaces/289069 "2021-12-03T14:47:10Z")
I'm having some trouble (with Kibana 6.7) in finding the correct way to handle this situation: field name: "Closure Code" possible field values: \["False Positive", "Automatically Closed", "Closed by change", ... \] I n… --- ## [Daily dashboard report - Kibana](https://discuss.elastic.co/t/daily-dashboard-report-kibana/290875)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 2:17pm UTC](https://discuss.elastic.co/t/daily-dashboard-report-kibana/290875 "2021-12-03T14:17:30Z")
Hi. My setup has Suricata running and sending logs to ES to be displayed in KIbana. I want to generate daily reports from the custom dashboards that i have created. I know that Kibana allows this. Do i have to be a lic… --- ## [Update Documents (multiple fields) using multiple Index (Array of id's)](https://discuss.elastic.co/t/update-documents-multiple-fields-using-multiple-index-array-of-ids/290898)
**Author:** [@tirth\_pipalia](https://discuss.elastic.co/u/tirth_pipalia)\ **Replies:** 1\ **Last updated:** [December 3, 2021, 2:00pm UTC](https://discuss.elastic.co/t/update-documents-multiple-fields-using-multiple-index-array-of-ids/290898 "2021-12-03T14:00:10Z")
I want an example where I can use Array of \[id's\] and Array of \[object{}\] (having fields and values), which will update ids\[0\] with object\[0\], ids\[1\] with object\[1\] in a single query. --- ## [Logstash log4j2.properties deleting all the compressed files](https://discuss.elastic.co/t/logstash-log4j2-properties-deleting-all-the-compressed-files/290896)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 12:33pm UTC](https://discuss.elastic.co/t/logstash-log4j2-properties-deleting-all-the-compressed-files/290896 "2021-12-03T12:33:08Z")
Hi Team, I am trying to delete the audit files from Elasticsearch logs directory "C:\\test-elk\\Elasticsearch-7.7.0\\data\\logs". My audit files are generating to the mentioned path but unfortunately I am not able to delete… --- ## [How to get the most relevant fields from a single document?](https://discuss.elastic.co/t/how-to-get-the-most-relevant-fields-from-a-single-document/290895)
**Author:** [@IgnazK](https://discuss.elastic.co/u/IgnazK)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 12:33pm UTC](https://discuss.elastic.co/t/how-to-get-the-most-relevant-fields-from-a-single-document/290895 "2021-12-03T12:33:08Z")
I have an index containing documents with information about various products. As the documents were created from paginated files, the information text is mapped on numerated fields representing the respective page in the… --- ## [Add operation on log messages](https://discuss.elastic.co/t/add-operation-on-log-messages/289466)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 17\ **Last updated:** [December 3, 2021, 12:27pm UTC](https://discuss.elastic.co/t/add-operation-on-log-messages/289466 "2021-12-03T12:27:59Z")
Hi Team, I have logs, where when bank account is opened i am getting below messages. for APAC - bank account is opened in APAC for EMEA - bank account is opened in EMEA Say for a day, if there was 4 accounts opened… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/288862)
**Author:** [@Glardz](https://discuss.elastic.co/u/Glardz)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 11:49am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/288862 "2021-12-03T11:49:33Z")
hello, i installed 3 nodes of Elasticsearch and its working but when i put kibana i have the message "Kibana server is not ready yet" My log kibana.yml {"type":"log","@timestamp":"2021-11-10T10:12:19+01:00","tags":\["d… --- ## [Erros on kibana devtools "parse\_exception"](https://discuss.elastic.co/t/erros-on-kibana-devtools-parse-exception/290635)
**Author:** [@Glardz](https://discuss.elastic.co/u/Glardz)\ **Replies:** 21\ **Last updated:** [December 3, 2021, 11:46am UTC](https://discuss.elastic.co/t/erros-on-kibana-devtools-parse-exception/290635 "2021-12-03T11:46:55Z")
hello, i have this error when i use dev tools, GET is working but PUT and POST action is not working, do you have any idea ? thanks for your response --- ## [Input fields involuntarily convert character combinations into unicode, like "\<-" or "=\>" into ← and ⇒](https://discuss.elastic.co/t/input-fields-involuntarily-convert-character-combinations-into-unicode-like-or-into-and/290870)
**Author:** [@grin](https://discuss.elastic.co/u/grin)\ **Replies:** 1\ **Last updated:** [December 3, 2021, 11:11am UTC](https://discuss.elastic.co/t/input-fields-involuntarily-convert-character-combinations-into-unicode-like-or-into-and/290870 "2021-12-03T11:11:31Z")
I can't search for "-\>" or "\<-" or "=\>" and probably other combinations in Kibana since input gets converted to → ← ⇒ and like. Even if it isn't input: creating a filter by pressing (+) on a "-\>" field creates a filter … --- ## [Does Elasticagent has fileintegrity as a feauture](https://discuss.elastic.co/t/does-elasticagent-has-fileintegrity-as-a-feauture/290813)
**Author:** [@djamel.lahouazi](https://discuss.elastic.co/u/djamel.lahouazi)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 11:08am UTC](https://discuss.elastic.co/t/does-elasticagent-has-fileintegrity-as-a-feauture/290813 "2021-12-03T11:08:15Z")
Is there any integration in elasticagent for fileintegrity? --- ## [Filebeat with sophos module](https://discuss.elastic.co/t/filebeat-with-sophos-module/290867)
**Author:** [@sanil.ramachandran](https://discuss.elastic.co/u/sanil.ramachandran)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 10:40am UTC](https://discuss.elastic.co/t/filebeat-with-sophos-module/290867 "2021-12-03T10:40:00Z")
Hello, I am very new to elk. I have managed to install elasticsearch,kibana and filebeat in ubuntu server, managed to enable sophos module and manged to receive syslog messages from the appliance using rsyslog server. … --- ## [Line diagram showing sum of finished orders over time](https://discuss.elastic.co/t/line-diagram-showing-sum-of-finished-orders-over-time/290818)
**Author:** [@maxl](https://discuss.elastic.co/u/maxl)\ **Replies:** 5\ **Last updated:** [December 3, 2021, 10:15am UTC](https://discuss.elastic.co/t/line-diagram-showing-sum-of-finished-orders-over-time/290818 "2021-12-03T10:15:13Z")
Hello to the elastic community! I have a problem and I can't figure out how I could achieve this. Every few minutes some orders get finished. And I want to show how many are finished after 5 mins, after 10 mins, and s… --- ## [Filebeat data not indexed](https://discuss.elastic.co/t/filebeat-data-not-indexed/290801)
**Author:** [@Angelo\_Capone](https://discuss.elastic.co/u/Angelo_Capone)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 5:24pm UTC](https://discuss.elastic.co/t/filebeat-data-not-indexed/290801 "2021-12-02T17:24:08Z")
Hi, i'm using filebeat 7.15.1 running as a docker container with the following configuration: filebeat.config: modules: path: ${path.config}/modules.d/\*.yml reload.enabled: true reload.period: 60s filebe… --- ## [Monitor GCE VM commands](https://discuss.elastic.co/t/monitor-gce-vm-commands/286988)
**Author:** [@\_bugc4t](https://discuss.elastic.co/u/_bugc4t)\ **Replies:** 1\ **Last updated:** [December 3, 2021, 9:27am UTC](https://discuss.elastic.co/t/monitor-gce-vm-commands/286988 "2021-12-03T09:27:31Z")
I've got a running filebeat ECK cluster. However, I've got a new requirement to incorporate VM commands and processes from another GCP project for analysis. I've looked into the GCP Ops Agent and Auditbeat but neither s… --- ## [Filebeat k8s - autodiscover for podman.sock not working](https://discuss.elastic.co/t/filebeat-k8s-autodiscover-for-podman-sock-not-working/290857)
**Author:** [@cal2](https://discuss.elastic.co/u/cal2)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 9:11am UTC](https://discuss.elastic.co/t/filebeat-k8s-autodiscover-for-podman-sock-not-working/290857 "2021-12-03T09:11:55Z")
Hi Ok i've got filebeat running on kubernetes (k3s) via helm. All is working totally fine for gathering the cluster logs. I also have podman running on the same nodes and i'd like to use the docker autodiscover provide… --- ## [Filebeat/Logstash Delay](https://discuss.elastic.co/t/filebeat-logstash-delay/290856)
**Author:** [@Sumit\_Yadav](https://discuss.elastic.co/u/Sumit_Yadav)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 9:06am UTC](https://discuss.elastic.co/t/filebeat-logstash-delay/290856 "2021-12-03T09:06:06Z")
Hi Team I have a self managed elastic cluster. We are using Filebeat -\> logstash -\> Elasticsearch cluster-\> Kibana setup. All 7.15v with basic license. Data transferred through out the day is around 260GB. Filebeat hav… --- ## [Refreshing the access token when communicating with an API](https://discuss.elastic.co/t/refreshing-the-access-token-when-communicating-with-an-api/25384)
**Author:** [@rmarji](https://discuss.elastic.co/u/rmarji)\ **Replies:** 10\ **Last updated:** [December 3, 2021, 9:05am UTC](https://discuss.elastic.co/t/refreshing-the-access-token-when-communicating-with-an-api/25384 "2021-12-03T09:05:26Z")
I'm trying to use Http\_poller input plugin, to get results from an API, it works fine while the access token is valid, however its only valid for one hour, I want to be able to refresh the access token with the refresh t… --- ## [Using FSCrawler as REST in simulate mode. How to disable communication with ES (Elasticsearch)](https://discuss.elastic.co/t/using-fscrawler-as-rest-in-simulate-mode-how-to-disable-communication-with-es-elasticsearch/290805)
**Author:** [@Francois\_Saab](https://discuss.elastic.co/u/Francois_Saab)\ **Replies:** 2\ **Last updated:** [December 3, 2021, 8:12am UTC](https://discuss.elastic.co/t/using-fscrawler-as-rest-in-simulate-mode-how-to-disable-communication-with-es-elasticsearch/290805 "2021-12-03T08:12:22Z")
Hello, We are using FSCrawler As Rest service and using it in simulate mode. We are uploading files to ES from our SDK. All is ok so far. However we want to configure FSCrawler to not communicate with ES , as we are o… --- ## [Relocation starts on network drops even though node\_left delay is set](https://discuss.elastic.co/t/relocation-starts-on-network-drops-even-though-node-left-delay-is-set/290797)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 7:54am UTC](https://discuss.elastic.co/t/relocation-starts-on-network-drops-even-though-node-left-delay-is-set/290797 "2021-12-03T07:54:00Z")
We have a process (Patch Orchestration in Azure Service Fabric) that patches our VMs. As I expect node reboots during this, I have set a node\_left delay to cover the reboot time (i.e., ~10 min). This generally works well… --- ## [When I log in to Kibana as kibana\_system user, it says "You do not have permission"](https://discuss.elastic.co/t/when-i-log-in-to-kibana-as-kibana-system-user-it-says-you-do-not-have-permission/290837)
**Author:** [@tadashi.oya](https://discuss.elastic.co/u/tadashi.oya)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 7:38am UTC](https://discuss.elastic.co/t/when-i-log-in-to-kibana-as-kibana-system-user-it-says-you-do-not-have-permission/290837 "2021-12-03T07:38:40Z")
Hi there. When I log in to Kibana as kibana\_system user, it says "You do not have permission to access the requested page". As elastic user, the dashboard is displayed. The reproduction procedure is as follows. step … --- ## [NEST Client.SearchAsync\() automatically deserializes an object with a Null value](https://discuss.elastic.co/t/nest-client-searchasync-t-automatically-deserializes-an-object-with-a-null-value/290847)
**Author:** [@KhalidDu](https://discuss.elastic.co/u/KhalidDu)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 6:57am UTC](https://discuss.elastic.co/t/nest-client-searchasync-t-automatically-deserializes-an-object-with-a-null-value/290847 "2021-12-03T06:57:14Z")
When I'm in the Nest Client, I use Client.SearchAsync\() , Some fields in the result are Null, Entity is the Index structure that I inserted. When I use Client.SearchAsync\(), I don't want to use Object, w… --- ## [How to create/update fields to URL format?](https://discuss.elastic.co/t/how-to-create-update-fields-to-url-format/290730)
**Author:** [@brian661](https://discuss.elastic.co/u/brian661)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 5:09am UTC](https://discuss.elastic.co/t/how-to-create-update-fields-to-url-format/290730 "2021-12-03T05:09:47Z")
I am trying to build my Kibana and automating the creation of the index patterns. For all of the index pattern, I want to update a field to format=URL, and set up the link on it, But I am not able to find the api I sho… --- ## [Is it possible to have a seperate kibana link with unique port for each jenkins job?](https://discuss.elastic.co/t/is-it-possible-to-have-a-seperate-kibana-link-with-unique-port-for-each-jenkins-job/290842)
**Author:** [@nava](https://discuss.elastic.co/u/nava)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 4:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-have-a-seperate-kibana-link-with-unique-port-for-each-jenkins-job/290842 "2021-12-03T04:29:21Z")
HI , My question is related to jenkins job. In a day we get 'N' number of jenkins jobs.instead of having consolidate kibana ,we want to have for each job need a different kibana dashboard ? is this possible ? if so w… --- ## [Elasticsearch highlight](https://discuss.elastic.co/t/elasticsearch-highlight/290838)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 3:46am UTC](https://discuss.elastic.co/t/elasticsearch-highlight/290838 "2021-12-03T03:46:00Z")
I want to have a accurate highlight match.for example ,then I search the string '2323',which will highlight the '2323' and don't highlight mathch '23231'、'23232' and so on.now I used the plain highlight type and default … --- ## [Kibana reporting download Intercept part of the string](https://discuss.elastic.co/t/kibana-reporting-download-intercept-part-of-the-string/289894)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 2\ **Last updated:** [December 3, 2021, 3:36am UTC](https://discuss.elastic.co/t/kibana-reporting-download-intercept-part-of-the-string/289894 "2021-12-03T03:36:49Z")
I want to download report as csv,but I have a big field which is text,and i want to download as many rows as possible，so i want to konw how can i do，if i don't update the xpack.reporting.csv.maxSizeBytes param because w… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1139) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1141)