# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1179 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1180 --- ## [Search #/@'s on ElasticSearch](https://discuss.elastic.co/t/search-s-on-elasticsearch/288157)
**Author:** [@Joran](https://discuss.elastic.co/u/Joran)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 3:51pm UTC](https://discuss.elastic.co/t/search-s-on-elasticsearch/288157 "2021-11-01T15:51:45Z")
Hi, We attempted to index @/#'s on our Elasticsearch, so we could search for example "#bitcoin". See here our settings for our Index "users" (some settings I replaced with "PRIVATE"): "users": { "settings": { "index"… --- ## [How to see differences in Bar Vertical Percentage](https://discuss.elastic.co/t/how-to-see-differences-in-bar-vertical-percentage/288125)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 4\ **Last updated:** [November 1, 2021, 3:37pm UTC](https://discuss.elastic.co/t/how-to-see-differences-in-bar-vertical-percentage/288125 "2021-11-01T15:37:28Z")
Hi, I'm using 7.15, I have created Bar Vertical Percentage that will show build status, the build runs 700 tests... and sometimes there are tests failures, in the visual I've created it is hard to see the failed builds… --- ## [How to add the name of Ingest node that processed the pipeline to special field](https://discuss.elastic.co/t/how-to-add-the-name-of-ingest-node-that-processed-the-pipeline-to-special-field/288091)
**Author:** [@Ayd\_Asraf](https://discuss.elastic.co/u/Ayd_Asraf)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 3:36pm UTC](https://discuss.elastic.co/t/how-to-add-the-name-of-ingest-node-that-processed-the-pipeline-to-special-field/288091 "2021-11-01T15:36:00Z")
Hello, I am trying to get the ingest node name that ran the pipeline which produced the output final document and append it to the document by setting the value of a special extra field "ingested\_on" that was created fo… --- ## [Shard creation when using index pattern](https://discuss.elastic.co/t/shard-creation-when-using-index-pattern/288099)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 3:11pm UTC](https://discuss.elastic.co/t/shard-creation-when-using-index-pattern/288099 "2021-11-01T15:11:55Z")
How are shards created/allocated when we are using an index pattern such that each day's log is written to a separate index (eg my\_index\_emailf\_log-\* , my\_index\_emailf\_log-dd-mm-yyyy .) Suppose we have specified 1 pri… --- ## [Metricbeat lambda](https://discuss.elastic.co/t/metricbeat-lambda/287267)
**Author:** [@Narkomax](https://discuss.elastic.co/u/Narkomax)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 3:07pm UTC](https://discuss.elastic.co/t/metricbeat-lambda/287267 "2021-11-01T15:07:23Z")
Who can explain me why? We are using metricbeat to monitor AWS Lambdas. Using simple standard dashboard. Today, we have 1 error in cloudwatch in our lambda, but for some reason metricbeat found 4 errors with the same t… --- ## [Filter over 6000 values in Kibana](https://discuss.elastic.co/t/filter-over-6000-values-in-kibana/288136)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 2:56pm UTC](https://discuss.elastic.co/t/filter-over-6000-values-in-kibana/288136 "2021-11-01T14:56:19Z")
Hey! I have created a query filter in python and send it to Kibana as a saved object. The final saved object looks like that: { "attributes": { "description": "", "filters": \[{ "query":… --- ## [Excluded fields in index pattern still shows up as suggestions in search bar](https://discuss.elastic.co/t/excluded-fields-in-index-pattern-still-shows-up-as-suggestions-in-search-bar/287913)
**Author:** [@ella.danielsson](https://discuss.elastic.co/u/ella.danielsson)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 2:30pm UTC](https://discuss.elastic.co/t/excluded-fields-in-index-pattern-still-shows-up-as-suggestions-in-search-bar/287913 "2021-11-01T14:30:19Z")
I have excluded the field NodeAlias and NodeAlias.keyword in my index pattern. But when I am viewing my data in discovery and clicking in the search bar with kql as search language the excluded field is still suggested. … --- ## [How To read in logstash the response from elasticsearch using elasticsearch output plugin](https://discuss.elastic.co/t/how-to-read-in-logstash-the-response-from-elasticsearch-using-elasticsearch-output-plugin/288135)
**Author:** [@yeppazu](https://discuss.elastic.co/u/yeppazu)\ **Replies:** 5\ **Last updated:** [November 1, 2021, 2:16pm UTC](https://discuss.elastic.co/t/how-to-read-in-logstash-the-response-from-elasticsearch-using-elasticsearch-output-plugin/288135 "2021-11-01T14:16:31Z")
Hi :slight\_smile: there is a some method to read response from Elasticsearch and trigger an action over it? (eg: running script, call an http url, ...) Normally, elastic return a JSON after HTTP index request. This JSO… --- ## [Filebeat only reads my local machine log files](https://discuss.elastic.co/t/filebeat-only-reads-my-local-machine-log-files/288119)
**Author:** [@Amrbayoumy89](https://discuss.elastic.co/u/Amrbayoumy89)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 2:14pm UTC](https://discuss.elastic.co/t/filebeat-only-reads-my-local-machine-log-files/288119 "2021-11-01T14:14:51Z")
Hello Dears, I started to install Elasticsearch, Filebeat and Kibana on my local machine. I have a written text file for Tomcat logs called "tomcatServerlogs.log" and I entered its path in filebeat.yml When I switch to… --- ## [Index management not listing indicies in the cluster for superuser](https://discuss.elastic.co/t/index-management-not-listing-indicies-in-the-cluster-for-superuser/288110)
**Author:** [@vijayebpzr](https://discuss.elastic.co/u/vijayebpzr)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 1:47pm UTC](https://discuss.elastic.co/t/index-management-not-listing-indicies-in-the-cluster-for-superuser/288110 "2021-11-01T13:47:11Z")
I logged into kibana as superuser, but I am not able to view the indicies that are present in the cluster. However I can see the index patterns and could query those patterns in Discover tab. I am wondering what is restr… --- ## [Is it possible to save column width in dashboard?](https://discuss.elastic.co/t/is-it-possible-to-save-column-width-in-dashboard/288126)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 1:18pm UTC](https://discuss.elastic.co/t/is-it-possible-to-save-column-width-in-dashboard/288126 "2021-11-01T13:18:45Z")
Hi, I'm using 7.15, My dashboard appears with few visuals, in the visual the columns are not width enough... So I've can set new width but the save Dashboard button is disabled. Is there a way to save column width in d… --- ## [Error load indices](https://discuss.elastic.co/t/error-load-indices/287914)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 1:14pm UTC](https://discuss.elastic.co/t/error-load-indices/287914 "2021-11-01T13:14:08Z")
I have got error to load indices in kibana. In Elasticsearch log no errors. Kabana logs contains next : {"type":"log","@timestamp":"2021-10-28T15:54:31+03:00","tags":\["error","http"\],"pid":39683,"message":"TypeError: Ca… --- ## [Filebeat Module - Umbrella - Parsing not usable Data](https://discuss.elastic.co/t/filebeat-module-umbrella-parsing-not-usable-data/285632)
**Author:** [@elasticband](https://discuss.elastic.co/u/elasticband)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 12:59pm UTC](https://discuss.elastic.co/t/filebeat-module-umbrella-parsing-not-usable-data/285632 "2021-11-01T12:59:11Z")
Hey Everyone, I have had pretty decent luck with the Filebeat modules, I currently use multiple Cisco ingestions (ASA, FTD, Meraki), and I have the Umbrella information being recognized and parsed; however I really do n… --- ## [How to disable popups in Kibana visualization](https://discuss.elastic.co/t/how-to-disable-popups-in-kibana-visualization/288076)
**Author:** [@Kinkokela](https://discuss.elastic.co/u/Kinkokela)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 12:53pm UTC](https://discuss.elastic.co/t/how-to-disable-popups-in-kibana-visualization/288076 "2021-11-01T12:53:11Z")
I am using Kibana visualization i-frame in my Django project. But sometimes popups appear. How can I remove all popups? I found this topic but it is not suitable for me so I need another solution. --- ## [Hybrid Grok and Dissect Parsing](https://discuss.elastic.co/t/hybrid-grok-and-dissect-parsing/288021)
**Author:** [@Nico\_Pampaloni](https://discuss.elastic.co/u/Nico_Pampaloni)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 11:25am UTC](https://discuss.elastic.co/t/hybrid-grok-and-dissect-parsing/288021 "2021-11-01T11:25:35Z")
Hi Everyone! I have a question about using Dissect and Grok together when working with a format that has varying structure. A line in my log file might look like this: word,word.word.word.word|timestamp|number,number,na… --- ## [Custom module in filebeat](https://discuss.elastic.co/t/custom-module-in-filebeat/288114)
**Author:** [@Paurav\_Thakkar](https://discuss.elastic.co/u/Paurav_Thakkar)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 10:51am UTC](https://discuss.elastic.co/t/custom-module-in-filebeat/288114 "2021-11-01T10:51:43Z")
Hi, I am trying to create a custom module that I need for a data source that is not available. This data source exposes an API that can be used to fetch logs. Currently I am using filebeat OSS and the input plugin that I… --- ## [Logstash Kubernetes Operator?](https://discuss.elastic.co/t/logstash-kubernetes-operator/288127)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 10:31am UTC](https://discuss.elastic.co/t/logstash-kubernetes-operator/288127 "2021-11-01T10:31:49Z")
Hi folks, does anyone know if there is or will be a dedicated Logstash Operator in future? From what I can see from the current official Elasticsearch Operator, Logstash is not considered as a component there at all. D… --- ## [Count() with KQL doesn't return desired results](https://discuss.elastic.co/t/count-with-kql-doesnt-return-desired-results/288121)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 9:30am UTC](https://discuss.elastic.co/t/count-with-kql-doesnt-return-desired-results/288121 "2021-11-01T09:30:16Z")
Hi There, I'm using 7.15. My elastic data are records of tests. Each test has status failed or pass. I want to visualize a table like this: Testcase Name | # of failed tests | %of failure from all runs I tried to us… --- ## [Count of Records vs Count using formula](https://discuss.elastic.co/t/count-of-records-vs-count-using-formula/286914)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 9:29am UTC](https://discuss.elastic.co/t/count-of-records-vs-count-using-formula/286914 "2021-11-01T09:29:47Z")
Hi, I'm using version 7.15 I have data that each record is a test results. I'm trying to build this table, that contain failed tests only: Test Name Fail Tests Count Success Rate (%) Test 1 … --- ## [Read XEL file and send to elasticsearch](https://discuss.elastic.co/t/read-xel-file-and-send-to-elasticsearch/288109)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 4\ **Last updated:** [November 1, 2021, 9:12am UTC](https://discuss.elastic.co/t/read-xel-file-and-send-to-elasticsearch/288109 "2021-11-01T09:12:14Z")
Hi all, I have some xel files which are a SQL server output. Is there any way to read these files and index them in Elasticsearch. Can beats or logstash read these files? Any help will be so appreciated. Regards --- ## [Waht are the possible datatypes of fileds of an index like keyword, ip , date nanos etc](https://discuss.elastic.co/t/waht-are-the-possible-datatypes-of-fileds-of-an-index-like-keyword-ip-date-nanos-etc/287891)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 8\ **Last updated:** [November 1, 2021, 9:11am UTC](https://discuss.elastic.co/t/waht-are-the-possible-datatypes-of-fileds-of-an-index-like-keyword-ip-date-nanos-etc/287891 "2021-11-01T09:11:01Z")
Waht are the possible datatypes of fileds of an index like keyword, ip , date nanos, etc? guess if field type is keyword then it is is stored in docvalues so we can sort on it? regards shini --- ## [Find word count in text field](https://discuss.elastic.co/t/find-word-count-in-text-field/288120)
**Author:** [@sanjaye218](https://discuss.elastic.co/u/sanjaye218)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 8:44am UTC](https://discuss.elastic.co/t/find-word-count-in-text-field/288120 "2021-11-01T08:44:28Z")
Hi, I am trying to get top 10 words along with word count in text field in multiple documents based on certain filter criteria. I can see termvector but its giving results per document. e.g. document 1 contains comment… --- ## [How to setup https for kibana?](https://discuss.elastic.co/t/how-to-setup-https-for-kibana/287383)
**Author:** [@nhattanmai](https://discuss.elastic.co/u/nhattanmai)\ **Replies:** 4\ **Last updated:** [November 1, 2021, 8:36am UTC](https://discuss.elastic.co/t/how-to-setup-https-for-kibana/287383 "2021-11-01T08:36:08Z")
Hi all, Sorry about my bad English. I'm config https following the guide: I generated a server certificate and private key for Kibana: ./bin/elasticsearch-certutil csr -name kibana-server MY\_IP\_SERVER Kibana setting… --- ## [Index 128 out of bounds for length 128](https://discuss.elastic.co/t/index-128-out-of-bounds-for-length-128/287971)
**Author:** [@shreyanshes103](https://discuss.elastic.co/u/shreyanshes103)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 8:02am UTC](https://discuss.elastic.co/t/index-128-out-of-bounds-for-length-128/287971 "2021-11-01T08:02:11Z")
Hi All ,getting error like this..."caused\_by" : { "type" : "array\_index\_out\_of\_bounds\_exception", "reason" : "Index 128 out of bounds for length 128", "caused\_by" : { "type" : "array\_index\_out\_of\_bounds\_exception", … --- ## [ILM Questions - ILM lifecycle policy defaults on upgrade and applying a policy to existing/old indices](https://discuss.elastic.co/t/ilm-questions-ilm-lifecycle-policy-defaults-on-upgrade-and-applying-a-policy-to-existing-old-indices/288115)
**Author:** [@neil6323](https://discuss.elastic.co/u/neil6323)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 7:04am UTC](https://discuss.elastic.co/t/ilm-questions-ilm-lifecycle-policy-defaults-on-upgrade-and-applying-a-policy-to-existing-old-indices/288115 "2021-11-01T07:04:49Z")
I have a couple of questions about the management of ILM based on legacy index templates. Previously I have created a number of new index lifecycle policies with custom config for each of the beats being used. These p… --- ## [How to make directory links in Kibana report, and how to make directory links in text element Markdown?](https://discuss.elastic.co/t/how-to-make-directory-links-in-kibana-report-and-how-to-make-directory-links-in-text-element-markdown/288107)
**Author:** [@li\_li](https://discuss.elastic.co/u/li_li)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 6:10am UTC](https://discuss.elastic.co/t/how-to-make-directory-links-in-kibana-report-and-how-to-make-directory-links-in-text-element-markdown/288107 "2021-11-01T06:10:46Z")
I'm new here and I'd like to ask you a question，How to make directory links in Kibana report, and how to make directory links in text element Markdown? Thank！ --- ## [How can I get the count of all indices?](https://discuss.elastic.co/t/how-can-i-get-the-count-of-all-indices/288047)
**Author:** [@buaaytt](https://discuss.elastic.co/u/buaaytt)\ **Replies:** 7\ **Last updated:** [November 1, 2021, 6:08am UTC](https://discuss.elastic.co/t/how-can-i-get-the-count-of-all-indices/288047 "2021-11-01T06:08:39Z")
And is there a way to configure whether to include the default system indices, whose names start with a dot? --- ## [Showing TPS on line visulaize](https://discuss.elastic.co/t/showing-tps-on-line-visulaize/286898)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 5:22am UTC](https://discuss.elastic.co/t/showing-tps-on-line-visulaize/286898 "2021-11-01T05:22:41Z")
Hi all, In the kibana version 6.5.4, we can create a line visualize which shows tps (count per second) using following setting, so that by choosing any time rang, it shows the same tps value: But, in the kibana ver… --- ## [Showing tps in TSVB in kibana](https://discuss.elastic.co/t/showing-tps-in-tsvb-in-kibana/286926)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 5:19am UTC](https://discuss.elastic.co/t/showing-tps-in-tsvb-in-kibana/286926 "2021-11-01T05:19:27Z")
Hi all, I am using kibana version 7.13.1 TSVB visualize to show TPS (COUNT per Second). the output graph is as following in "Last 15 minutes" in the case of setting "Override index pattern" No and using auto interval (… --- ## [How to send what you want in filebeat](https://discuss.elastic.co/t/how-to-send-what-you-want-in-filebeat/288064)
**Author:** [@root\_linux](https://discuss.elastic.co/u/root_linux)\ **Replies:** 4\ **Last updated:** [November 1, 2021, 4:39am UTC](https://discuss.elastic.co/t/how-to-send-what-you-want-in-filebeat/288064 "2021-11-01T04:39:23Z")
How can I send only those lines which i want from filebeat to logstash [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1178) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1180)