# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1178 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1179 --- ## [Yarn kbn bootstrap fails， A few TS errors occurred！](https://discuss.elastic.co/t/yarn-kbn-bootstrap-fails-a-few-ts-errors-occurred/287767)
**Author:** [@nuaazt](https://discuss.elastic.co/u/nuaazt)\ **Replies:** 3\ **Last updated:** [November 2, 2021, 1:58pm UTC](https://discuss.elastic.co/t/yarn-kbn-bootstrap-fails-a-few-ts-errors-occurred/287767 "2021-11-02T13:58:25Z")
hi， I pull the code from the github (tag 7.14.0) and then build kibana on windows 10. Getting started | Kibana Guide \[7.15\] | Elastic, my os is windows10 ， git bash but got errors at the step: 'yarn kbn bootstrap' i… --- ## [Logstash-input-azureblob | Unable to configure plugin](https://discuss.elastic.co/t/logstash-input-azureblob-unable-to-configure-plugin/288231)
**Author:** [@RS\_D](https://discuss.elastic.co/u/RS_D)\ **Replies:** 0\ **Last updated:** [November 2, 2021, 1:57pm UTC](https://discuss.elastic.co/t/logstash-input-azureblob-unable-to-configure-plugin/288231 "2021-11-02T13:57:49Z")
ELK\_VERSION=7.15.0 docker compose command to install the plugin : command: bash -c "bin/logstash-plugin install logstash-input-azureblob && logstash -f /usr/share/logstash/pipeline/logstash.conf" Help me to get rid o… --- ## [Import bash output in Kibana, it's possible?](https://discuss.elastic.co/t/import-bash-output-in-kibana-its-possible/288225)
**Author:** [@pi314](https://discuss.elastic.co/u/pi314)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 12:58pm UTC](https://discuss.elastic.co/t/import-bash-output-in-kibana-its-possible/288225 "2021-11-02T12:58:23Z")
Hello everyone, can I import the output of a bash script into a kibana dashboard? I have created the following script to search email sending in postfix but I want to put together something visually more attractive. He… --- ## [In kibana(KQL), In the message field need to combine two conditions](https://discuss.elastic.co/t/in-kibana-kql-in-the-message-field-need-to-combine-two-conditions/288185)
**Author:** [@souji](https://discuss.elastic.co/u/souji)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 12:15pm UTC](https://discuss.elastic.co/t/in-kibana-kql-in-the-message-field-need-to-combine-two-conditions/288185 "2021-11-02T12:15:21Z")
Have text message like below in my index "POST /app/v1/fetch/abcdefgh HTTP/1.1" 404 NR route\_not\_found - "-" 0 0 0 - “10.0.0.0” “example.xxx.xxx.com" "-" - - 10.10.10.1:80 "POST /app/v1/fetch/abcdefgh HTTP/1.1" 200 rou… --- ## [Include empty nested fields in aggregation](https://discuss.elastic.co/t/include-empty-nested-fields-in-aggregation/288003)
**Author:** [@Calin\_Blaga](https://discuss.elastic.co/u/Calin_Blaga)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 11:37am UTC](https://discuss.elastic.co/t/include-empty-nested-fields-in-aggregation/288003 "2021-11-02T11:37:40Z")
I would like to do an aggregation on a nested field, and I would like to include empty occurrences too. What I tried: GET index/\_search { "size": 0, "aggs": { "language\_skills": { "nested": { "pat… --- ## [Fleet Pipeline does not exist - Data Streams not getting data](https://discuss.elastic.co/t/fleet-pipeline-does-not-exist-data-streams-not-getting-data/285877)
**Author:** [@Heroj04](https://discuss.elastic.co/u/Heroj04)\ **Replies:** 21\ **Last updated:** [November 2, 2021, 11:29am UTC](https://discuss.elastic.co/t/fleet-pipeline-does-not-exist-data-streams-not-getting-data/285877 "2021-11-02T11:29:46Z")
I have elastic setup and working using regular beats fine. I have since setup fleet and trying to add servers using that. however I am seeing a bunch of errors about pipelines not existing, only for certain items. See an… --- ## [Add nodes to the cluster on the fly](https://discuss.elastic.co/t/add-nodes-to-the-cluster-on-the-fly/287666)
**Author:** [@Ain\_Ryushika](https://discuss.elastic.co/u/Ain_Ryushika)\ **Replies:** 5\ **Last updated:** [November 2, 2021, 11:13am UTC](https://discuss.elastic.co/t/add-nodes-to-the-cluster-on-the-fly/287666 "2021-11-02T11:13:50Z")
Hello, I have a task to add 2 more nodes in a cluster. Currently we have 5 nodes in a cluster which are all data nodes. Elastic version 7.11.2. Current discovery parameters set for cluster: "discovery.zen.ping.unicast.… --- ## [Kibana.yml configure error](https://discuss.elastic.co/t/kibana-yml-configure-error/288172)
**Author:** [@Tingda\_Du](https://discuss.elastic.co/u/Tingda_Du)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 11:00am UTC](https://discuss.elastic.co/t/kibana-yml-configure-error/288172 "2021-11-02T11:00:52Z")
in kibana.yml I have that logging.root.level: error But I got the error of Configuring logger failed: { ValidationError: child "logging" fails because \["root" is not allowed\] at Object.exports.process (/usr/share/… --- ## [Can CCR also replicate dashboards (and other stuff...)?](https://discuss.elastic.co/t/can-ccr-also-replicate-dashboards-and-other-stuff/287415)
**Author:** [@bertr](https://discuss.elastic.co/u/bertr)\ **Replies:** 1\ **Last updated:** [November 2, 2021, 11:00am UTC](https://discuss.elastic.co/t/can-ccr-also-replicate-dashboards-and-other-stuff/287415 "2021-11-02T11:00:18Z")
CCR is great to replicate data in user indices (such as all beats indices), but I don't know if it can also be used to replicate kibana dashboards. Rationale : it's a bummer if you need to fail over and you have your da… --- ## [Hello, now there is a scene. I need to get TOP10 data from ES and draw a histogram. The top10 data also needs to be processed and drawn into a tabular chart. How can I get the contents of the histogram for tabular chart?](https://discuss.elastic.co/t/hello-now-there-is-a-scene-i-need-to-get-top10-data-from-es-and-draw-a-histogram-the-top10-data-also-needs-to-be-processed-and-drawn-into-a-tabular-chart-how-can-i-get-the-contents-of-the-histogram-for-tabular-chart/288200)
**Author:** [@li\_li](https://discuss.elastic.co/u/li_li)\ **Replies:** 1\ **Last updated:** [November 2, 2021, 9:15am UTC](https://discuss.elastic.co/t/hello-now-there-is-a-scene-i-need-to-get-top10-data-from-es-and-draw-a-histogram-the-top10-data-also-needs-to-be-processed-and-drawn-into-a-tabular-chart-how-can-i-get-the-contents-of-the-histogram-for-tabular-chart/288200 "2021-11-02T09:15:40Z")
Hello, now there is a scene. I need to get TOP10 data from ES and draw a histogram. The top10 data also needs to be processed and drawn into a tabular chart. How can I get the contents of the histogram for tabular chart? … --- ## [Can elasticsearch be accessed by http and htpps simultaneously?](https://discuss.elastic.co/t/can-elasticsearch-be-accessed-by-http-and-htpps-simultaneously/287885)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 8:00am UTC](https://discuss.elastic.co/t/can-elasticsearch-be-accessed-by-http-and-htpps-simultaneously/287885 "2021-11-02T08:00:14Z")
Hello! I am working with a supposedly secure cluster that you access through https://localhost: 9200 but when I went to see the metricbeat.yml configuration file I saw a parameter that surprised me: ssl.verification\_m… --- ## [LogStash not working on Windows](https://discuss.elastic.co/t/logstash-not-working-on-windows/288202)
**Author:** [@Rainbow\_Lee](https://discuss.elastic.co/u/Rainbow_Lee)\ **Replies:** 0\ **Last updated:** [November 2, 2021, 7:21am UTC](https://discuss.elastic.co/t/logstash-not-working-on-windows/288202 "2021-11-02T07:21:15Z")
I just download logstash-7.15.1 and unzip it. I run ./bin/logstash -f logstash-simple.conf but got errors like this \[FATAL\] 2021-11-02 14:21:27.366 \[main\] Logstash - Logstash stopped processing because of an error: (… --- ## [How to create email connector in Kibana to alert a log?](https://discuss.elastic.co/t/how-to-create-email-connector-in-kibana-to-alert-a-log/288104)
**Author:** [@nhattanmai](https://discuss.elastic.co/u/nhattanmai)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 7:11am UTC](https://discuss.elastic.co/t/how-to-create-email-connector-in-kibana-to-alert-a-log/288104 "2021-11-02T07:11:02Z")
Dear all, I need create email connector to send email when a log has message match with keyword. Alert worked well, but I don't know how to setting email connector when following the guide: Preconfigured connector typ… --- ## [Purpose of @timestamp field in data stream](https://discuss.elastic.co/t/purpose-of-timestamp-field-in-data-stream/288183)
**Author:** [@rhsp](https://discuss.elastic.co/u/rhsp)\ **Replies:** 4\ **Last updated:** [November 2, 2021, 5:56am UTC](https://discuss.elastic.co/t/purpose-of-timestamp-field-in-data-stream/288183 "2021-11-02T05:56:52Z")
I am confused by the need for the mandatory @timestamp as it does not seem to be used in any part of the data stream. The date on the index is based on creation date instead of the @timestamp field. Rollover also seem to… --- ## [Loading SQL Server data using Logstash](https://discuss.elastic.co/t/loading-sql-server-data-using-logstash/288097)
**Author:** [@sunilmpatil](https://discuss.elastic.co/u/sunilmpatil)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 5:49am UTC](https://discuss.elastic.co/t/loading-sql-server-data-using-logstash/288097 "2021-11-02T05:49:37Z")
Hi All, I am planning to load data from SQL Server database to Elastic. While trying to load this data using Logstash JDBC plugin, I am facing issue. I am pasting details as below, please suggest what is missing here. (… --- ## [HTTP JSON input with Split but keeping other fields](https://discuss.elastic.co/t/http-json-input-with-split-but-keeping-other-fields/288089)
**Author:** [@bitnapper](https://discuss.elastic.co/u/bitnapper)\ **Replies:** 1\ **Last updated:** [November 2, 2021, 5:27am UTC](https://discuss.elastic.co/t/http-json-input-with-split-but-keeping-other-fields/288089 "2021-11-02T05:27:35Z")
Hi, as a learning project I set up a ELK stack to read the status of my Hue Homeautomation installation. I only need to read the sensordata at the moment but I want to keep the association to the bridge. I use filebeat … --- ## [Missing authentication credentials for rest request - API KEY](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-api-key/287651)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 7\ **Last updated:** [November 2, 2021, 4:43am UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-api-key/287651 "2021-11-02T04:43:12Z")
Hi, I am trying to authorize my application using API Key from a PHP application . I have the below code. What else am i missing below as its asking for credetails. $search\_host = 'lux.es.eastus2.azure.elastic-cloud.co… --- ## [Packetbeat parsing mongodb OP\_MSG](https://discuss.elastic.co/t/packetbeat-parsing-mongodb-op-msg/287535)
**Author:** [@chinaxushi](https://discuss.elastic.co/u/chinaxushi)\ **Replies:** 8\ **Last updated:** [November 2, 2021, 2:25am UTC](https://discuss.elastic.co/t/packetbeat-parsing-mongodb-op-msg/287535 "2021-11-02T02:25:58Z")
Mongodb version 3.6 and later added 'OP'\_ MSG 'message type. When packet beat parses this type, the output field mongodb is empty. In addition, the most important thing is that there is no end time and no overall respons… --- ## [Help with note.roles](https://discuss.elastic.co/t/help-with-note-roles/288149)
**Author:** [@b0r1s](https://discuss.elastic.co/u/b0r1s)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 10:57pm UTC](https://discuss.elastic.co/t/help-with-note-roles/288149 "2021-11-01T22:57:09Z")
Hey everyone o/ I was working with 3 nodes in my cluster. Now I added a 4th node, to be the cold node. Some indices that should be on it (according to ILM) are still not going. I'm trying to configure node.roles on the… --- ## [Support needed (Install Issues)](https://discuss.elastic.co/t/support-needed-install-issues/288151)
**Author:** [@Hondo](https://discuss.elastic.co/u/Hondo)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 10:55pm UTC](https://discuss.elastic.co/t/support-needed-install-issues/288151 "2021-11-01T22:55:00Z")
Hello, our webhoster have issius to install "Elasticsearch" on our ded. Rootserver with Almalinnux 8.4.0 He\`s write Blockquote Regarding the Elasticsearch application issue, it seems that you may need to further che… --- ## [Help with slow query/indexing time on big index](https://discuss.elastic.co/t/help-with-slow-query-indexing-time-on-big-index/286583)
**Author:** [@Ain\_Ryushika](https://discuss.elastic.co/u/Ain_Ryushika)\ **Replies:** 7\ **Last updated:** [November 1, 2021, 9:47pm UTC](https://discuss.elastic.co/t/help-with-slow-query-indexing-time-on-big-index/286583 "2021-11-01T21:47:31Z")
System Specifications Elasticsearch: 3 data nodes, 200 primary shards, 406 total shards CPU model: Intel(R) Xeon(R) Gold 6248 CPU @ 2.50GHz CPU total logical cores: 8 Memory : 32GB (16gb heap) Client have an index 9… --- ## [How to create outlier jobs with data fields coming from multiple sources (log1,log2, metricbeat1, etc....)](https://discuss.elastic.co/t/how-to-create-outlier-jobs-with-data-fields-coming-from-multiple-sources-log1-log2-metricbeat1-etc/288016)
**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 9:07pm UTC](https://discuss.elastic.co/t/how-to-create-outlier-jobs-with-data-fields-coming-from-multiple-sources-log1-log2-metricbeat1-etc/288016 "2021-11-01T21:07:24Z")
Hi everyone, Let me elaborate what i want and why i want that then may be it would be easier to find a best solution. I am new to ML jobs, I've created Single metric jobs and also have explored Multi-metric ML jobs a l… --- ## [TSVB table - Get start date](https://discuss.elastic.co/t/tsvb-table-get-start-date/288025)
**Author:** [@Saliinger](https://discuss.elastic.co/u/Saliinger)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 8:58pm UTC](https://discuss.elastic.co/t/tsvb-table-get-start-date/288025 "2021-11-01T20:58:38Z")
Hello. I have a TSVB table feeded with heartbeat. I'm using the field "summary.down" to watch when uptime goes down. The frequency is 1m and I'm accumulating the time when "summary.down" only shows 1. While that field… --- ## [Date time range picker](https://discuss.elastic.co/t/date-time-range-picker/288155)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 7:50pm UTC](https://discuss.elastic.co/t/date-time-range-picker/288155 "2021-11-01T19:50:32Z")
I am using Kibana 7.3.2 and plan to move to 7.15.1 maybe in the next few months after verifying a few things. The setup: The field I'm basing my visual upon is the @timeStamp in UTC The dashboard's date / time picker … --- ## [Panw module](https://discuss.elastic.co/t/panw-module/288163)
**Author:** [@alvaro.cabrera](https://discuss.elastic.co/u/alvaro.cabrera)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 7:19pm UTC](https://discuss.elastic.co/t/panw-module/288163 "2021-11-01T19:19:59Z")
We have a file beat 7.14.2 installed to receive logs from 45 palolato firewalls, the panw module is enabled to listen on udp and send all data to elastic directly. after this set up we noticed a significant amount of vol… --- ## [Saved Objects, Visualized items and Dashboards is missing](https://discuss.elastic.co/t/saved-objects-visualized-items-and-dashboards-is-missing/287946)
**Author:** [@Brisma](https://discuss.elastic.co/u/Brisma)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 6:50pm UTC](https://discuss.elastic.co/t/saved-objects-visualized-items-and-dashboards-is-missing/287946 "2021-11-01T18:50:49Z")
Currently i develop dashboards and visualization in Kibana. In the next days, there are error when opening kibana with error message like this: {"statusCode":500,"error":"Internal Server Error","message":"{illegal\_argum… --- ## [How send Auditbeat dashboard to kibana (rancher)](https://discuss.elastic.co/t/how-send-auditbeat-dashboard-to-kibana-rancher/288165)
**Author:** [@sadux](https://discuss.elastic.co/u/sadux)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 6:49pm UTC](https://discuss.elastic.co/t/how-send-auditbeat-dashboard-to-kibana-rancher/288165 "2021-11-01T18:49:41Z")
Hello! I'm new at ELK. Just update ELK stack to 7.15.1 and need download Auditbeat dashboards to kibana. Kibana running at rancher container. How I should download dashboards to Kibana? --- ## [Nested Gauge Chart](https://discuss.elastic.co/t/nested-gauge-chart/288129)
**Author:** [@bodach](https://discuss.elastic.co/u/bodach)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 6:41pm UTC](https://discuss.elastic.co/t/nested-gauge-chart/288129 "2021-11-01T18:41:57Z")
Hello, I saw this gauge chart somewhere and I want to use the same structure in my canvas. Any ideas where can i download it? --- ## [Sorting by named query result](https://discuss.elastic.co/t/sorting-by-named-query-result/288168)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 6:36pm UTC](https://discuss.elastic.co/t/sorting-by-named-query-result/288168 "2021-11-01T18:36:33Z")
Is it possible to sort the results of the ES query by the value present in the named query? We have such code in Elasticsearch-dsl: def \_named\_family\_sample\_q(family\_samples\_q, family\_guid, quality\_filters\_by\_family): … --- ## [7.15.1 is extremely slow](https://discuss.elastic.co/t/7-15-1-is-extremely-slow/287617)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 10\ **Last updated:** [November 1, 2021, 5:25pm UTC](https://discuss.elastic.co/t/7-15-1-is-extremely-slow/287617 "2021-11-01T17:25:50Z")
whom ever it may concern something is wrong with 7.15.1 loading kibana dashboard is extremely slow same hardware works loading same data same dashboard in 7.12 only 14 second. 7.15.1 it takes 2 min. everything is same … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1177) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1179)