# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1141 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1142 --- ## [Field with name for each document](https://discuss.elastic.co/t/field-with-name-for-each-document/290815)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 10:11pm UTC](https://discuss.elastic.co/t/field-with-name-for-each-document/290815 "2021-12-02T22:11:28Z")
In each entry I have IP address and I would have also name for it. I have pairs IP and name. How can I deal with it? To have name in each document where is IP adress? I use static lookup but this is hard to use, I don'… --- ## [Nest query search with AND](https://discuss.elastic.co/t/nest-query-search-with-and/290793)
**Author:** [@Katgust](https://discuss.elastic.co/u/Katgust)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:55pm UTC](https://discuss.elastic.co/t/nest-query-search-with-and/290793 "2021-12-02T21:55:51Z")
I'd like to convert this GET /financialfirms/\_search?q="Danske" AND "Bank" into DSL but can't find out how. Anyone wanna help? Right now every query I've made gives a result for "Danske" OR "Bank". I've tried differen… --- ## [How to add role/permissions to an existing API key?](https://discuss.elastic.co/t/how-to-add-role-permissions-to-an-existing-api-key/289946)
**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:32pm UTC](https://discuss.elastic.co/t/how-to-add-role-permissions-to-an-existing-api-key/289946 "2021-12-02T21:32:26Z")
I have created, from the Dev Console, and used an API key with "All" permissions for a particular index. I would now like to add "Read" permissions to a second index but use the existing API key. Can these be done? I am… --- ## [Problems with create Log threshold rule](https://discuss.elastic.co/t/problems-with-create-log-threshold-rule/290080)
**Author:** [@user25](https://discuss.elastic.co/u/user25)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:29pm UTC](https://discuss.elastic.co/t/problems-with-create-log-threshold-rule/290080 "2021-12-02T21:29:22Z")
Problems with create Log threshold rule in kibana -\>stack management -\> rules and connectors. I can't select any filed when creating this rule because there is an empty list. Elasticsearch, kibana, logstash have version … --- ## [Panels to have in Kibana dashboard for troubleshooting applications](https://discuss.elastic.co/t/panels-to-have-in-kibana-dashboard-for-troubleshooting-applications/289949)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:23pm UTC](https://discuss.elastic.co/t/panels-to-have-in-kibana-dashboard-for-troubleshooting-applications/289949 "2021-12-02T21:23:37Z")
Hey folks, what are some good panels to have in kibana visualisation for developers to troubleshoot issues in applications? I am trying to create a dashboard that developers could use to pinpoint where the app is having… --- ## [Alert on Windows event id to be grouped by and include hostname](https://discuss.elastic.co/t/alert-on-windows-event-id-to-be-grouped-by-and-include-hostname/290249)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:21pm UTC](https://discuss.elastic.co/t/alert-on-windows-event-id-to-be-grouped-by-and-include-hostname/290249 "2021-12-02T21:21:33Z")
Hi, I would like to run an alert on a specific windows log event id. This alert should be grouped on hostname. So, if 3 hosts generate this alert i would like 3 separate alerts logged. However, i can't seem to do this… --- ## [Processing gzipped Log Files with Elastic Agent Custom Log Integration?](https://discuss.elastic.co/t/processing-gzipped-log-files-with-elastic-agent-custom-log-integration/290831)
**Author:** [@abolan](https://discuss.elastic.co/u/abolan)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 9:14pm UTC](https://discuss.elastic.co/t/processing-gzipped-log-files-with-elastic-agent-custom-log-integration/290831 "2021-12-02T21:14:03Z")
Hello, I have an Elastic Cloud environment set up and I'm trying to ingest and parse a number of gzipped log files from a pair of central log repository servers. The Elastic Agent is already installed and communicating … --- ## [Kibana Monitoring Dashboard shows dubious memory usage for Filebeat](https://discuss.elastic.co/t/kibana-monitoring-dashboard-shows-dubious-memory-usage-for-filebeat/289645)
**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:59pm UTC](https://discuss.elastic.co/t/kibana-monitoring-dashboard-shows-dubious-memory-usage-for-filebeat/289645 "2021-12-02T20:59:19Z")
I just set up Filebeat monitoring for my elk stack, and checked out the dashboard in Kibana. How am I meant to read the "Memory (MB)" section? It looks like it is saying the OS has \> 60 terabytes of memory reserved for t… --- ## [To apply time filter in canvas to all visualisations](https://discuss.elastic.co/t/to-apply-time-filter-in-canvas-to-all-visualisations/290655)
**Author:** [@SwetaD](https://discuss.elastic.co/u/SwetaD)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:55pm UTC](https://discuss.elastic.co/t/to-apply-time-filter-in-canvas-to-all-visualisations/290655 "2021-12-02T20:55:42Z")
Hello, I designed a canvas with several visualisations - mainly peak values for a day. I wish to insert a time filter common to all. I inserted a time filter but by changing the timestamp, no value changes. Can someon… --- ## [Vega Visualization ESe](https://discuss.elastic.co/t/vega-visualization-ese/290707)
**Author:** [@WhatImIDoing](https://discuss.elastic.co/u/WhatImIDoing)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:54pm UTC](https://discuss.elastic.co/t/vega-visualization-ese/290707 "2021-12-02T20:54:39Z")
I am getting an EsError for my vega script and i dont know what else to do. I tried putting it into the dev tools and fixed all the syntax errors shown there. Was working and now it doesn't. Kibana version: 7.10 { … --- ## [Histogram aggregation on calculated field by script](https://discuss.elastic.co/t/histogram-aggregation-on-calculated-field-by-script/290829)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 8:53pm UTC](https://discuss.elastic.co/t/histogram-aggregation-on-calculated-field-by-script/290829 "2021-12-02T20:53:16Z")
Hey everyone! We have index with products and every product (document in index) has several prices fields. We have query with script that calculates us finalPrice field because we do not know how many prices a document … --- ## [Canvas dropdown control doesn't work as I expected](https://discuss.elastic.co/t/canvas-dropdown-control-doesnt-work-as-i-expected/289786)
**Author:** [@marekpowwm](https://discuss.elastic.co/u/marekpowwm)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:52pm UTC](https://discuss.elastic.co/t/canvas-dropdown-control-doesnt-work-as-i-expected/289786 "2021-12-02T20:52:35Z")
I try to create a dropdown control inside the canvas. I created a data source and previewed it: And next, I tried to set up the display for this control: But nothing was displayed on the canvas when I clicked on t… --- ## [Logstash 7.15 grok patterns directory](https://discuss.elastic.co/t/logstash-7-15-grok-patterns-directory/290826)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:48pm UTC](https://discuss.elastic.co/t/logstash-7-15-grok-patterns-directory/290826 "2021-12-02T20:48:19Z")
Hi, I was running logstash 7.3, and had configured some grok patterns in a file and placed that file in /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-patterns-core-4.1.2/patterns/ After upgrading to logs… --- ## [Kibana Maps Tooltip Date format](https://discuss.elastic.co/t/kibana-maps-tooltip-date-format/290810)
**Author:** [@travisvyas](https://discuss.elastic.co/u/travisvyas)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:47pm UTC](https://discuss.elastic.co/t/kibana-maps-tooltip-date-format/290810 "2021-12-02T20:47:56Z")
After our kibana was updated to 7.12 we have noticed that our date/time fields are showing as epoch in the kibana maps when we hover over our data points. When the same date/fields are seen in discover tab they are fine… --- ## [Vega Multiple Roots Error](https://discuss.elastic.co/t/vega-multiple-roots-error/290824)
**Author:** [@WhatImIDoing](https://discuss.elastic.co/u/WhatImIDoing)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 8:46pm UTC](https://discuss.elastic.co/t/vega-multiple-roots-error/290824 "2021-12-02T20:46:44Z")
I am getting a multiple roots error from this vega script and i am not sure where in the transformation i am going wrong. { "$schema": "https://vega.github.io/schema/vega/v5.json", "description": "An example of a … --- ## [KIbana SQL query parametrization](https://discuss.elastic.co/t/kibana-sql-query-parametrization/289787)
**Author:** [@marekpowwm](https://discuss.elastic.co/u/marekpowwm)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:33pm UTC](https://discuss.elastic.co/t/kibana-sql-query-parametrization/289787 "2021-12-02T20:33:12Z")
Is it possible to add a parameter to select index using ES SQL? I created a variable named indexName and I tried to add it to the query this way: SELECT \* FROM "{indexName}" But I get the error: So my question is: … --- ## [Kibana NetworkError while trying to access /api/core/capabiities](https://discuss.elastic.co/t/kibana-networkerror-while-trying-to-access-api-core-capabiities/289408)
**Author:** [@kallistisoft](https://discuss.elastic.co/u/kallistisoft)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:28pm UTC](https://discuss.elastic.co/t/kibana-networkerror-while-trying-to-access-api-core-capabiities/289408 "2021-12-02T20:28:49Z")
I'm trying to setup an ELK stack on Arch Linux and am unable to access the Kibana dashboard. When trying to access Kibana it hangs on the 'loading elastic' loading screen and eventually fails by timing out on the reques… --- ## [Free Text Input Control](https://discuss.elastic.co/t/free-text-input-control/290757)
**Author:** [@kshepitzki1](https://discuss.elastic.co/u/kshepitzki1)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:26pm UTC](https://discuss.elastic.co/t/free-text-input-control/290757 "2021-12-02T20:26:44Z")
Input Controls are amazing. Would be nice to complement the Drop Down and Range controls with Free Text controls that are bound to specific fields like the other controls. Is it possible? --- ## [Fleet server problem](https://discuss.elastic.co/t/fleet-server-problem/289654)
**Author:** [@dzsonaszg](https://discuss.elastic.co/u/dzsonaszg)\ **Replies:** 3\ **Last updated:** [December 2, 2021, 8:19pm UTC](https://discuss.elastic.co/t/fleet-server-problem/289654 "2021-12-02T20:19:35Z")
Hello, My Feelt server is missing from the agent list, and if i try to reistall, i get this message. Now my agents are working correctly. On my endpoints the enrollment works just fine, but not the endpoint security as… --- ## [Does rollup support scripted fields?](https://discuss.elastic.co/t/does-rollup-support-scripted-fields/290503)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 3\ **Last updated:** [December 2, 2021, 8:16pm UTC](https://discuss.elastic.co/t/does-rollup-support-scripted-fields/290503 "2021-12-02T20:16:53Z")
hi, team, i had created the scripted fields in index patterns. When i create rollups job, i cann't find the scripted fields that i will aggregate on metrics. --- ## [Custom domain using AWS Cloudfront](https://discuss.elastic.co/t/custom-domain-using-aws-cloudfront/289621)
**Author:** [@michael.brizic](https://discuss.elastic.co/u/michael.brizic)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:13pm UTC](https://discuss.elastic.co/t/custom-domain-using-aws-cloudfront/289621 "2021-12-02T20:13:02Z")
I've read this blog post which has been helpful in getting started: Custom Domain However, due to various requirements on our end, I need to proxy our Elastic Cloud Kibana instance using AWS Route53/Cloudfront. And for … --- ## [Issue on .tasks index when trying to update Kibana from 6.8 to 7.6](https://discuss.elastic.co/t/issue-on-tasks-index-when-trying-to-update-kibana-from-6-8-to-7-6/289575)
**Author:** [@cam1](https://discuss.elastic.co/u/cam1)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:09pm UTC](https://discuss.elastic.co/t/issue-on-tasks-index-when-trying-to-update-kibana-from-6-8-to-7-6/289575 "2021-12-02T20:09:37Z")
Hello, I'm trying to upgrade my ES cluster from 6.8 to 7.6 but i'm facing an issue when I try to update my Kibana instance. I get an error on the .tasks index : FATAL \[index\_not\_found\_exception\] no such index \[.tasks… --- ## [Kibana SESSION\_EXPIRED](https://discuss.elastic.co/t/kibana-session-expired/289506)
**Author:** [@mst3r25](https://discuss.elastic.co/u/mst3r25)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:06pm UTC](https://discuss.elastic.co/t/kibana-session-expired/289506 "2021-12-02T20:06:06Z")
I keep getting random SESSION\_EXPIRED when after implementing PKI authentication. If I use username and password my session never expires. Sometime I am able to use PKI to log back in after the SESSION\_EXPIRED, other tim… --- ## [Custom Analyser for IPv4 Mapped IPv6](https://discuss.elastic.co/t/custom-analyser-for-ipv4-mapped-ipv6/290822)
**Author:** [@Sai\_Satwik\_Kuppili](https://discuss.elastic.co/u/Sai_Satwik_Kuppili)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 7:55pm UTC](https://discuss.elastic.co/t/custom-analyser-for-ipv4-mapped-ipv6/290822 "2021-12-02T19:55:07Z")
Seems Elasticsearch doesn't allow IPv4 mapped IPv6 with CIDR to index. When I was trying to index IPv4-mapped-IPv6 ::ffff:127.12.0.1/108 I am getting the following error. PUT test PUT test/\_mapping/ { "dynamic\_t… --- ## [Systemctl start logstash does nothing](https://discuss.elastic.co/t/systemctl-start-logstash-does-nothing/290814)
**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\ **Replies:** 6\ **Last updated:** [December 2, 2021, 7:36pm UTC](https://discuss.elastic.co/t/systemctl-start-logstash-does-nothing/290814 "2021-12-02T19:36:57Z")
I am working on pulling changes onto a few logstash boxes. The issue is when I run the command systemctl start logstash I get nothing back. Expected: logstash starts with a verbose output. Actual: Any help with t… --- ## [Generation of logs for kibana has stopped after SIGHUP](https://discuss.elastic.co/t/generation-of-logs-for-kibana-has-stopped-after-sighup/289439)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:48pm UTC](https://discuss.elastic.co/t/generation-of-logs-for-kibana-has-stopped-after-sighup/289439 "2021-12-02T19:48:28Z")
I observed that after SIGHUP signal sent to kibana, logs generation have stopped. Please tell how and why sighup signal is sent to kibana service. --- ## [Getting lines of a log that surround an error message with kibana](https://discuss.elastic.co/t/getting-lines-of-a-log-that-surround-an-error-message-with-kibana/289368)
**Author:** [@tnibbe](https://discuss.elastic.co/u/tnibbe)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:41pm UTC](https://discuss.elastic.co/t/getting-lines-of-a-log-that-surround-an-error-message-with-kibana/289368 "2021-12-02T19:41:15Z")
Hello I am trying to use the ELK stack for error diagnosis with some testing output logs. I have a log structured as follows. DateTime MessageType MessageOrigin Message 2021-10-28T00:11:16… --- ## [Change kibana loading logo](https://discuss.elastic.co/t/change-kibana-loading-logo/289340)
**Author:** [@mohamed.softparadigm](https://discuss.elastic.co/u/mohamed.softparadigm)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:16pm UTC](https://discuss.elastic.co/t/change-kibana-loading-logo/289340 "2021-12-02T19:16:52Z")
I am running kibana 7.15 in a docker container. How can I change Elasticsearch loading logo in kibana iframe? --- ## [ElasticSearch 6.0 + Grafana 7.x data viz is not working as expected](https://discuss.elastic.co/t/elasticsearch-6-0-grafana-7-x-data-viz-is-not-working-as-expected/288669)
**Author:** [@111343](https://discuss.elastic.co/u/111343)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 7:15pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-grafana-7-x-data-viz-is-not-working-as-expected/288669 "2021-12-02T19:15:42Z")
Reporting the issue here What Grafana version and what operating system are you using? - 7.5.4 What are you trying to achieve? I’m trying to vizualize specific excerpts of the logs. I need to display performance of th… --- ## [CSV exporting reports fails almost all the time](https://discuss.elastic.co/t/csv-exporting-reports-fails-almost-all-the-time/289087)
**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:09pm UTC](https://discuss.elastic.co/t/csv-exporting-reports-fails-almost-all-the-time/289087 "2021-12-02T19:09:17Z")
In very similar vanes as 7.5 \[reporting\] fails randomly and Kibana Reporting -csv download fails frequently with error 'Unable to generate report Max attempts reached (3)' we're currently unable to do CSV exporting most … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1140) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1142)