# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1187

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1188

---

## [Save aggr query and use it again](https://discuss.elastic.co/t/save-aggr-query-and-use-it-again/287545)

<div class="topic-metadata">

**Author:** [@Alexey\_Nikolaev](https://discuss.elastic.co/u/Alexey_Nikolaev)\
**Replies:** 3\
**Last updated:** [October 26, 2021, 7:05am UTC](https://discuss.elastic.co/t/save-aggr-query-and-use-it-again/287545 "2021-10-26T07:05:00Z")

</div>

Hello. I have indexes one per month. Name format is cucm-{mm-yyyy}. I need to make aggregation query from all of this type of indexes and than use saved(if it's possible) aggr query in other queries. Is it possible ?

---

## [Rule with Jira Connector cannot find parent issue](https://discuss.elastic.co/t/rule-with-jira-connector-cannot-find-parent-issue/286609)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 2\
**Last updated:** [October 26, 2021, 6:12am UTC](https://discuss.elastic.co/t/rule-with-jira-connector-cannot-find-parent-issue/286609 "2021-10-26T06:12:57Z")

</div>

Hi, I have a couple of rules using a Jira connector and create subtasks in Jira. This works fine, but now, I cannot update the rules, because I get an error, that the parent issue cannot be found. The rules still crea…

---

## ["Split chart" for Timelion charts, is it possible?](https://discuss.elastic.co/t/split-chart-for-timelion-charts-is-it-possible/287596)

<div class="topic-metadata">

**Author:** [@viacheslav](https://discuss.elastic.co/u/viacheslav)\
**Replies:** 2\
**Last updated:** [October 26, 2021, 6:04am UTC](https://discuss.elastic.co/t/split-chart-for-timelion-charts-is-it-possible/287596 "2021-10-26T06:04:30Z")

</div>

I need to have the same "split charts" in timelion as basic aggregation charts. It will very powerful feature for me. I see a topic about it which was closed 2 year ago: Are you planning to implement a feature to ren…

---

## [\[Kibana/Vega\] "inveted" EMS vector maps in Vega](https://discuss.elastic.co/t/kibana-vega-inveted-ems-vector-maps-in-vega/285825)

<div class="topic-metadata">

**Author:** [@Kayak007](https://discuss.elastic.co/u/Kayak007)\
**Replies:** 6\
**Last updated:** [October 26, 2021, 5:54am UTC](https://discuss.elastic.co/t/kibana-vega-inveted-ems-vector-maps-in-vega/285825 "2021-10-26T05:54:49Z")

</div>

Hi, I'm trying to use EMS vector maps in Vega. I manage to retrieve the data and map it with the following bits of code: \[...\] {name:"franceDept" url:{ %type%:"emsfile" name:"France Departments" } …

---

## [Creating a map with Latitude and logitude fields - ERROR](https://discuss.elastic.co/t/creating-a-map-with-latitude-and-logitude-fields-error/287633)

<div class="topic-metadata">

**Author:** [@Robson\_Gomes](https://discuss.elastic.co/u/Robson_Gomes)\
**Replies:** 2\
**Last updated:** [October 26, 2021, 3:21am UTC](https://discuss.elastic.co/t/creating-a-map-with-latitude-and-logitude-fields-error/287633 "2021-10-26T03:21:13Z")

</div>

I'm trying to create a map with all my latitude and longitude fields but when I try to create a map on Elastic, they don't show nothing, someone could help me? my logstash conf: input { # I sent via http JSON files to…

---

## [VersionConflictEngineException throw after the upgrade From 5.0.0 to 5.6.16](https://discuss.elastic.co/t/versionconflictengineexception-throw-after-the-upgrade-from-5-0-0-to-5-6-16/287576)

<div class="topic-metadata">

**Author:** [@dalei2019](https://discuss.elastic.co/u/dalei2019)\
**Replies:** 2\
**Last updated:** [October 26, 2021, 3:11am UTC](https://discuss.elastic.co/t/versionconflictengineexception-throw-after-the-upgrade-from-5-0-0-to-5-6-16/287576 "2021-10-26T03:11:52Z")

</div>

Sorry, I known it is old version of ES . Our plan is upgrade old version of es cluster to 7.15.x . Now after first step, upgrade to 5.6 , concurrent index write use bulkRequest (transport client ) throw many VersionCon…

---

## [How can I establish the external links using Discover url link?](https://discuss.elastic.co/t/how-can-i-establish-the-external-links-using-discover-url-link/287244)

<div class="topic-metadata">

**Author:** [@philoskim](https://discuss.elastic.co/u/philoskim)\
**Replies:** 2\
**Last updated:** [October 26, 2021, 2:20am UTC](https://discuss.elastic.co/t/how-can-i-establish-the-external-links-using-discover-url-link/287244 "2021-10-26T02:20:31Z")

</div>

I made the following Discover table using Kibana 7.15. After that, I clicked the first row link of the msds-original column and encountered the following screen. What I expect here is that the address bar content…

---

## [Source Only Snapshot Fails for Old Version Indices after Upgrading Cluster](https://discuss.elastic.co/t/source-only-snapshot-fails-for-old-version-indices-after-upgrading-cluster/287541)

<div class="topic-metadata">

**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\
**Replies:** 1\
**Last updated:** [October 26, 2021, 1:55am UTC](https://discuss.elastic.co/t/source-only-snapshot-fails-for-old-version-indices-after-upgrading-cluster/287541 "2021-10-26T01:55:04Z")

</div>

Hello, I try to use snapshot on old indices, old indices is from es 6.5.1. I ugpraded to es 7.11.2 Since I want to reserve more spaces, I want to use \_source only snapshot on indices, but I got an error when I try to us…

---

## [Running 7.15 yarn kbn bootstrap got error: The Cypress App could not be downloaded](https://discuss.elastic.co/t/running-7-15-yarn-kbn-bootstrap-got-error-the-cypress-app-could-not-be-downloaded/287553)

<div class="topic-metadata">

**Author:** [@qinzehua](https://discuss.elastic.co/u/qinzehua)\
**Replies:** 2\
**Last updated:** [October 26, 2021, 1:47am UTC](https://discuss.elastic.co/t/running-7-15-yarn-kbn-bootstrap-got-error-the-cypress-app-could-not-be-downloaded/287553 "2021-10-26T01:47:51Z")

</div>

my branch is at 7.15, when i run yarn kbn bootstrap got error: Does your workplace require a proxy to be used to access the Internet? If so, you must configure the HTTP\_PROXY environment variable before downloading Cypr…

---

## [Conditional string message of a Watch](https://discuss.elastic.co/t/conditional-string-message-of-a-watch/287608)

<div class="topic-metadata">

**Author:** [@rowish](https://discuss.elastic.co/u/rowish)\
**Replies:** 0\
**Last updated:** [October 25, 2021, 5:03pm UTC](https://discuss.elastic.co/t/conditional-string-message-of-a-watch/287608 "2021-10-25T17:03:17Z")

</div>

I am wondering if there is possible to embed in a watch such a mechanism that will use a sort of variable to determine the string in the email message of the action based on the chain input data. Specifically, instead o…

---

## [How to restrict edit access to dashboards / visuals within a space](https://discuss.elastic.co/t/how-to-restrict-edit-access-to-dashboards-visuals-within-a-space/287556)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 5\
**Last updated:** [October 26, 2021, 12:36am UTC](https://discuss.elastic.co/t/how-to-restrict-edit-access-to-dashboards-visuals-within-a-space/287556 "2021-10-26T00:36:25Z")

</div>

Hello, I have created a set of visuals within dashboard within a space. I do not want anyone to change these dashboards / visuals in this space. The user can create or change dashboards / visuals in other spaces. Is …

---

## [Unable to ship docker container logs using Filebeat](https://discuss.elastic.co/t/unable-to-ship-docker-container-logs-using-filebeat/287460)

<div class="topic-metadata">

**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\
**Replies:** 1\
**Last updated:** [October 26, 2021, 12:24am UTC](https://discuss.elastic.co/t/unable-to-ship-docker-container-logs-using-filebeat/287460 "2021-10-26T00:24:01Z")

</div>

I'm using Filebeat native version 7.10.0 to collect all the docker container logs located at /var/lib/docker/containers/container-id/.json . But unable to ship the logs. Below is my filebeat configuration file. Anyone p…

---

## [Sorting out TLS for ELK, using Helm Chart, in AKS](https://discuss.elastic.co/t/sorting-out-tls-for-elk-using-helm-chart-in-aks/286080)

<div class="topic-metadata">

**Author:** [@dcarlet](https://discuss.elastic.co/u/dcarlet)\
**Replies:** 3\
**Last updated:** [October 25, 2021, 11:24pm UTC](https://discuss.elastic.co/t/sorting-out-tls-for-elk-using-helm-chart-in-aks/286080 "2021-10-25T23:24:55Z")

</div>

So, I am trying to set up the following configuration: 3 node elastic cluster 1 node logstash 1 node kibana I am utilizing the Helm Charts (GitHub - elastic/helm-charts: You know, for Kubernetes); and specifically …

---

## [Is it possible to zoom and pan a visualization if you don't know the max/min of your scales?](https://discuss.elastic.co/t/is-it-possible-to-zoom-and-pan-a-visualization-if-you-dont-know-the-max-min-of-your-scales/287364)

<div class="topic-metadata">

**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 10:27pm UTC](https://discuss.elastic.co/t/is-it-possible-to-zoom-and-pan-a-visualization-if-you-dont-know-the-max-min-of-your-scales/287364 "2021-10-25T22:27:36Z")

</div>

Hello all, I have been working on adapting the "force directed graph" example to my data. But I have an issue where I have too many items that are returned and the nodes get forced out of the visible area. So I want to …

---

## [MadCap Flare and ElastiSearch 5.6](https://discuss.elastic.co/t/madcap-flare-and-elastisearch-5-6/287627)

<div class="topic-metadata">

**Author:** [@bob\_hopfner](https://discuss.elastic.co/u/bob_hopfner)\
**Replies:** 3\
**Last updated:** [October 25, 2021, 10:26pm UTC](https://discuss.elastic.co/t/madcap-flare-and-elastisearch-5-6/287627 "2021-10-25T22:26:31Z")

</div>

I am trying to get ElastiSearch (ver. 5.6) working with MadCap Flare (latest). We have done all the installation steps, the ES portal is populating with content from our site. When i publish to local host, it works and t…

---

## [How to add your images in Elastic Cloud](https://discuss.elastic.co/t/how-to-add-your-images-in-elastic-cloud/287537)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 10:22pm UTC](https://discuss.elastic.co/t/how-to-add-your-images-in-elastic-cloud/287537 "2021-10-25T22:22:26Z")

</div>

I had an on prem set up previously and now I have the elastic cloud trial license. I have custom images in my application for breadcrumbs. How and where am I supposed to place these images so that they load properly in m…

---

## [Xpack for production (100 data nodes)](https://discuss.elastic.co/t/xpack-for-production-100-data-nodes/287533)

<div class="topic-metadata">

**Author:** [@porscheme](https://discuss.elastic.co/u/porscheme)\
**Replies:** 3\
**Last updated:** [October 25, 2021, 9:54pm UTC](https://discuss.elastic.co/t/xpack-for-production-100-data-nodes/287533 "2021-10-25T21:54:26Z")

</div>

Azure Cloud ES version: 7.12 Data Nodes Count: 100 (deployed using helm chats) I read ES docs that explain how to enable xpack Few Questions: How I automate xpack?

---

## [Building kibana from source code is not generating build/target forlder](https://discuss.elastic.co/t/building-kibana-from-source-code-is-not-generating-build-target-forlder/287337)

<div class="topic-metadata">

**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 9:50pm UTC](https://discuss.elastic.co/t/building-kibana-from-source-code-is-not-generating-build-target-forlder/287337 "2021-10-25T21:50:06Z")

</div>

I downloaded Kibana 7.12.0, and now I want to build it, but it is not generating a build folder. Any ideas?

---

## [Kibana shows data for future time say filter is set to Today and data should have been displayed till current time](https://discuss.elastic.co/t/kibana-shows-data-for-future-time-say-filter-is-set-to-today-and-data-should-have-been-displayed-till-current-time/287265)

<div class="topic-metadata">

**Author:** [@shalini\_v](https://discuss.elastic.co/u/shalini_v)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 9:48pm UTC](https://discuss.elastic.co/t/kibana-shows-data-for-future-time-say-filter-is-set-to-today-and-data-should-have-been-displayed-till-current-time/287265 "2021-10-25T21:48:22Z")

</div>

Kibana shows data for future time say filter is set to Today and data should have been displayed current time. I see there are data after current time.This should not happen in real time series data as event has not occ…

---

## [In a vega visualization is it possible to modify a signals value from mark's trigger?](https://discuss.elastic.co/t/in-a-vega-visualization-is-it-possible-to-modify-a-signals-value-from-marks-trigger/287239)

<div class="topic-metadata">

**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 9:31pm UTC](https://discuss.elastic.co/t/in-a-vega-visualization-is-it-possible-to-modify-a-signals-value-from-marks-trigger/287239 "2021-10-25T21:31:13Z")

</div>

Hello All, I am working with a force directed graph, and want to be able to zoom in and out on it, as a result I need to know the min/max value of x/y which are computed as part of the triggers on the mark, so I would l…

---

## [How to create a metric and change the format to day, hour, minute](https://discuss.elastic.co/t/how-to-create-a-metric-and-change-the-format-to-day-hour-minute/287206)

<div class="topic-metadata">

**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 9:29pm UTC](https://discuss.elastic.co/t/how-to-create-a-metric-and-change-the-format-to-day-hour-minute/287206 "2021-10-25T21:29:55Z")

</div>

How to create a metric and change the format to day, hour, minute example: I've already managed to put it in this format 0:0:0, however when it passes 24 hours, it's weird to see and if it's been days that it's unre…

---

## [Elastic Watcher - Problem in compare condition](https://discuss.elastic.co/t/elastic-watcher-problem-in-compare-condition/286582)

<div class="topic-metadata">

**Author:** [@Chiaaa](https://discuss.elastic.co/u/Chiaaa)\
**Replies:** 0\
**Last updated:** [October 13, 2021, 7:20am UTC](https://discuss.elastic.co/t/elastic-watcher-problem-in-compare-condition/286582 "2021-10-13T07:20:30Z")

</div>

Hi, I'm new to Elastic Word. I have to create a custom watcher that extracts -from an index - the Isin, Price and Currency fields of the last day (without aggregating them) and compares them with the average price of t…

---

## [Blank Timelion](https://discuss.elastic.co/t/blank-timelion/286579)

<div class="topic-metadata">

**Author:** [@ebosdev](https://discuss.elastic.co/u/ebosdev)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 9:09pm UTC](https://discuss.elastic.co/t/blank-timelion/286579 "2021-10-25T21:09:18Z")

</div>

Hello everyone, I am using Kibana 7.9.3 and I am currently facing an issue where the timelion is blank this is the query i am using .es(index=investigation\_master\_index,timefield=uco-observable:sentTime.@value, split=…

---

## [Hardware Requirement for Kibana Multiple Dashboard](https://discuss.elastic.co/t/hardware-requirement-for-kibana-multiple-dashboard/285971)

<div class="topic-metadata">

**Author:** [@smart\_admin](https://discuss.elastic.co/u/smart_admin)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 9:04pm UTC](https://discuss.elastic.co/t/hardware-requirement-for-kibana-multiple-dashboard/285971 "2021-10-25T21:04:45Z")

</div>

I am working on multipe visulization dashboard On kibana.How much hardware requirement needed for Each visulization .Do we need to increase the hardware when we configure multiple logs filter on one Visulization . If ye…

---

## [Checking client cert subject in Logstash](https://discuss.elastic.co/t/checking-client-cert-subject-in-logstash/287625)

<div class="topic-metadata">

**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\
**Replies:** 0\
**Last updated:** [October 25, 2021, 8:49pm UTC](https://discuss.elastic.co/t/checking-client-cert-subject-in-logstash/287625 "2021-10-25T20:49:11Z")

</div>

I have Logstash set up receiving data from Filebeat on external servers, with SSL mutual authentication. I would like to add one more layer and only allow through when Filebeat's client certificate subject matches a str…

---

## [Customize the dashboards page](https://discuss.elastic.co/t/customize-the-dashboards-page/285835)

<div class="topic-metadata">

**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\
**Replies:** 2\
**Last updated:** [October 25, 2021, 8:41pm UTC](https://discuss.elastic.co/t/customize-the-dashboards-page/285835 "2021-10-25T20:41:17Z")

</div>

Hello, I'm looking to add a link after the word dashboards, I've tried this in \\src\\plugins\\dashboard\\target\\public\\dashboard.chunk.2.js tableListTitle: external\_kbnSharedDeps\_KbnI18n\_\["i18n"\].translate("dashboard.list…

---

## [Use Dynamic Values in array](https://discuss.elastic.co/t/use-dynamic-values-in-array/285978)

<div class="topic-metadata">

**Author:** [@varunbsgaur](https://discuss.elastic.co/u/varunbsgaur)\
**Replies:** 0\
**Last updated:** [October 6, 2021, 6:33am UTC](https://discuss.elastic.co/t/use-dynamic-values-in-array/285978 "2021-10-06T06:33:49Z")

</div>

Need to use dynamic values in script processor for better results , but its always giving error. Kindly help!!!! "processors": \[ { "split": { "field": "f1", "separator": "\_", "target\_field":"temp" }, "script":…

---

## [On controls panel the date filter controls is erroring out](https://discuss.elastic.co/t/on-controls-panel-the-date-filter-controls-is-erroring-out/285952)

<div class="topic-metadata">

**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 8:13pm UTC](https://discuss.elastic.co/t/on-controls-panel-the-date-filter-controls-is-erroring-out/285952 "2021-10-25T20:13:57Z")

</div>

As you can see with my image I have the 'month' filter on my controls filled in with some date. It keeps erroring out with \[esaggs\]\>. The 'month' field is the time field on my index pattern. When I check my dev tools …

---

## [Timelion : display sum of days on y axis](https://discuss.elastic.co/t/timelion-display-sum-of-days-on-y-axis/285908)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 8:09pm UTC](https://discuss.elastic.co/t/timelion-display-sum-of-days-on-y-axis/285908 "2021-10-25T20:09:51Z")

</div>

Hi, i create i scripted field "sejour" to calculate the duration between two dates. I want to use a Timelion visualization to calculate the sum of those days. for exemple in 04/09/2021 i want to get 6 days , i…

---

## [Data frame analytics on scripted fields ML possible?](https://discuss.elastic.co/t/data-frame-analytics-on-scripted-fields-ml-possible/285504)

<div class="topic-metadata">

**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\
**Replies:** 17\
**Last updated:** [October 25, 2021, 5:17pm UTC](https://discuss.elastic.co/t/data-frame-analytics-on-scripted-fields-ml-possible/285504 "2021-10-25T17:17:23Z")

</div>

I am currently playing around with Machine learning on Kibana and I successfully learned how to use Anomaly detection to use scripted fields by editing the JSON. Now I want to use data frame analytics specifically curre…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1186)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1188)
