# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1272

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1273

---

## [Prefer IPv6 elasticsearch.hosts](https://discuss.elastic.co/t/prefer-ipv6-elasticsearch-hosts/281733)

<div class="topic-metadata">

**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\
**Replies:** 2\
**Last updated:** [August 20, 2021, 4:25pm UTC](https://discuss.elastic.co/t/prefer-ipv6-elasticsearch-hosts/281733 "2021-08-20T16:25:11Z")

</div>

The hosts in my elasticsearch.hosts resolve to IPv6 and IPv4 addresses. When tcpdumping, I see Kibana trying to connect using IPv4. How do I tell Kibana to connect using IPv6?

---

## [How can I sort metrics by lambda function name in Kibana?](https://discuss.elastic.co/t/how-can-i-sort-metrics-by-lambda-function-name-in-kibana/281897)

<div class="topic-metadata">

**Author:** [@zhaoyi0113](https://discuss.elastic.co/u/zhaoyi0113)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 3:56pm UTC](https://discuss.elastic.co/t/how-can-i-sort-metrics-by-lambda-function-name-in-kibana/281897 "2021-08-20T15:56:50Z")

</div>

I am using Kibana to view AWS metrics. In below diagram, it shows Throttles and ConcurrentExecution metrics from all lambdas in current region. There are 700 lambdas deployed and how can I order them by aws.dimensions.Fu…

---

## [Only show histogram when % is greater than a value](https://discuss.elastic.co/t/only-show-histogram-when-is-greater-than-a-value/281039)

<div class="topic-metadata">

**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 3:49pm UTC](https://discuss.elastic.co/t/only-show-histogram-when-is-greater-than-a-value/281039 "2021-08-20T15:49:39Z")

</div>

Hi, I have a histogram that show average total cpu usage over a number of hosts. This is broken down into 0-25%, 25-50%, 50-75%, 75-100% Is there a way to only show those hosts which have hit the 75-100% mark in the ti…

---

## [Tens of GB indexes deleted, no OS space reclaimed](https://discuss.elastic.co/t/tens-of-gb-indexes-deleted-no-os-space-reclaimed/281964)

<div class="topic-metadata">

**Author:** [@sz7443](https://discuss.elastic.co/u/sz7443)\
**Replies:** 4\
**Last updated:** [August 20, 2021, 3:48pm UTC](https://discuss.elastic.co/t/tens-of-gb-indexes-deleted-no-os-space-reclaimed/281964 "2021-08-20T15:48:00Z")

</div>

Hi, I have scouted locals forum for almost half a day but no relevant reply found. I am trying to introduce curator to our ES and I have deleted several 25GB indexes successfully. However, no OS space reclaimed after del…

---

## [Api downloading Excel file,need to process it using logstash and send data to Elasticsearch](https://discuss.elastic.co/t/api-downloading-excel-file-need-to-process-it-using-logstash-and-send-data-to-elasticsearch/282090)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 3:32pm UTC](https://discuss.elastic.co/t/api-downloading-excel-file-need-to-process-it-using-logstash-and-send-data-to-elasticsearch/282090 "2021-08-20T15:32:37Z")

</div>

Hi, I am using esign genie API which can download all folder reports as an Excel file. I need to fetch data in an excel file to elasticsearch. I checked the option for using logstash but excel needs to export to CSV. I…

---

## [Is it possible to create an application with kibana and using kibana for backend stuff like authentication and admin panel?](https://discuss.elastic.co/t/is-it-possible-to-create-an-application-with-kibana-and-using-kibana-for-backend-stuff-like-authentication-and-admin-panel/282089)

<div class="topic-metadata">

**Author:** [@houshmand1996](https://discuss.elastic.co/u/houshmand1996)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 3:26pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-an-application-with-kibana-and-using-kibana-for-backend-stuff-like-authentication-and-admin-panel/282089 "2021-08-20T15:26:19Z")

</div>

I want to use kibana as a backend framework for my application and use of it's features for admin panel is there a way to load up the application pages in first place and use of kibana as a admin panel and for management…

---

## [My multiline message shows only one line in Kibana Discover](https://discuss.elastic.co/t/my-multiline-message-shows-only-one-line-in-kibana-discover/281174)

<div class="topic-metadata">

**Author:** [@moonfair](https://discuss.elastic.co/u/moonfair)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 3:19pm UTC](https://discuss.elastic.co/t/my-multiline-message-shows-only-one-line-in-kibana-discover/281174 "2021-08-20T15:19:14Z")

</div>

I use filebeats multiline input to push a java exception log to elasticsearch. But when I look up them in my Kibana Discover view, they are just shown in a single line, which means it erased all LFs in my text. Can anyon…

---

## [ROC curve represented in Kibana](https://discuss.elastic.co/t/roc-curve-represented-in-kibana/281199)

<div class="topic-metadata">

**Author:** [@bponce](https://discuss.elastic.co/u/bponce)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 3:15pm UTC](https://discuss.elastic.co/t/roc-curve-represented-in-kibana/281199 "2021-08-20T15:15:25Z")

</div>

It's possible to represent a ROC curve in Kibana?. Points to be represented have the following structure: "ROC": { "x": \[ 0.0, 0.00002855674224684448, 0.00002855674224684448, . . 0.9908618424810097, 0.990861842…

---

## [Read Elastic snapshot data in azure blob storage](https://discuss.elastic.co/t/read-elastic-snapshot-data-in-azure-blob-storage/282082)

<div class="topic-metadata">

**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 1:36pm UTC](https://discuss.elastic.co/t/read-elastic-snapshot-data-in-azure-blob-storage/282082 "2021-08-20T13:36:21Z")

</div>

Hello Dear Elks, Hope you are doing good!! I have set a ILM policy to store logs to azure blob storage older than 30 days. Now how can I enable searching/reading logs in blob storage? I see the data in blob is not in r…

---

## [Problem witch search bar](https://discuss.elastic.co/t/problem-witch-search-bar/281405)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 2\
**Last updated:** [August 20, 2021, 3:08pm UTC](https://discuss.elastic.co/t/problem-witch-search-bar/281405 "2021-08-20T15:08:45Z")

</div>

I have problem with new role/user who have access to Dashboard's and Discover's, however is not able to search for this Dashboards/Discovers with top center serach bar in Kibana "Search Elastic". It works from admin user…

---

## [Sign kibana csr certificate](https://discuss.elastic.co/t/sign-kibana-csr-certificate/281537)

<div class="topic-metadata">

**Author:** [@naaviin](https://discuss.elastic.co/u/naaviin)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 2:51pm UTC](https://discuss.elastic.co/t/sign-kibana-csr-certificate/281537 "2021-08-20T14:51:35Z")

</div>

Hi friends , i have generated .key nd .csr file in kibana ./bin/elasticsearch-certutil csr -name kibana-server Please share me how to sign .csr file. I have my ca file with me. Please help

---

## [Second Y-axes](https://discuss.elastic.co/t/second-y-axes/281572)

<div class="topic-metadata">

**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 2:22pm UTC](https://discuss.elastic.co/t/second-y-axes/281572 "2021-08-20T14:22:28Z")

</div>

Hi everyone, I am looking to add metrics to my second y axis. I've already added a second y axis under the metrics and axes tab. How do I add the metrics I've added in my data tab the second y-axis created? Thank you!

---

## [Upgrading Kibana from 7.11 to 7.14](https://discuss.elastic.co/t/upgrading-kibana-from-7-11-to-7-14/281740)

<div class="topic-metadata">

**Author:** [@ankitachow](https://discuss.elastic.co/u/ankitachow)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 2:21pm UTC](https://discuss.elastic.co/t/upgrading-kibana-from-7-11-to-7-14/281740 "2021-08-20T14:21:16Z")

</div>

I'm trying to upgrade kibana from 7.11 to 7.14. It's on kubernetes. I have kibana deployed with 3 replicas. So after deploying, I can see that 1 pod is up & running whereas the other 2 shows below error. After deleting …

---

## [ES container in Docker changes the "temp" directory every time the container runs!](https://discuss.elastic.co/t/es-container-in-docker-changes-the-temp-directory-every-time-the-container-runs/281371)

<div class="topic-metadata">

**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\
**Replies:** 5\
**Last updated:** [August 20, 2021, 2:21pm UTC](https://discuss.elastic.co/t/es-container-in-docker-changes-the-temp-directory-every-time-the-container-runs/281371 "2021-08-20T14:21:06Z")

</div>

I am trying to develope a plugin, it must writes files on a click. After I searched, I found out that I can only write to "temp" folder, is that right? So, in windows, I was able to locate the "temp" folder and everythi…

---

## [Kibana failing after upgrade from 6.8.6 to 7.9.2 Failed to transform document \[object Object\]](https://discuss.elastic.co/t/kibana-failing-after-upgrade-from-6-8-6-to-7-9-2-failed-to-transform-document-object-object/281592)

<div class="topic-metadata">

**Author:** [@tylers](https://discuss.elastic.co/u/tylers)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 2:20pm UTC](https://discuss.elastic.co/t/kibana-failing-after-upgrade-from-6-8-6-to-7-9-2-failed-to-transform-document-object-object/281592 "2021-08-20T14:20:11Z")

</div>

Hello, I'm having an issue when upgrading from elasticsearch 6.8.6 to 7.9.2. We have a very large number of Saved Objects and when going through the upgrade we're not able to proceed with the transformation of the sav…

---

## [Highlighting issue when combine multiword phrase search with Intervals](https://discuss.elastic.co/t/highlighting-issue-when-combine-multiword-phrase-search-with-intervals/282085)

<div class="topic-metadata">

**Author:** [@Yury-Stanevitch](https://discuss.elastic.co/u/Yury-Stanevitch)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 1:53pm UTC](https://discuss.elastic.co/t/highlighting-issue-when-combine-multiword-phrase-search-with-intervals/282085 "2021-08-20T13:53:42Z")

</div>

Hello. I have query which works good from highlighting standpoint: POST index/\_search { "highlight": { "fields": { "attrText\*": { "number\_of\_fragments": 0, "type": "unified" } }, …

---

## [All Stack monitoring alert rules with error](https://discuss.elastic.co/t/all-stack-monitoring-alert-rules-with-error/281870)

<div class="topic-metadata">

**Author:** [@gbeltramelli](https://discuss.elastic.co/u/gbeltramelli)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 1:44pm UTC](https://discuss.elastic.co/t/all-stack-monitoring-alert-rules-with-error/281870 "2021-08-20T13:44:00Z")

</div>

Hello, I am new to elastic and sorry for my english!i have a problem, we are just implementing an ELK stack and all the default alerts of the stack monitoring are in Error with the following message An error occurred w…

---

## [High Level indicator based on various metrics](https://discuss.elastic.co/t/high-level-indicator-based-on-various-metrics/281826)

<div class="topic-metadata">

**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 1:27pm UTC](https://discuss.elastic.co/t/high-level-indicator-based-on-various-metrics/281826 "2021-08-20T13:27:28Z")

</div>

I have a chart showing cpu usage for various hosts, file attached. I am looking to get a more high lever indicator, e.g. if, in the time period given, all hosts are in the 0-25% range then that would show as Green. …

---

## [Not getting index with docker module](https://discuss.elastic.co/t/not-getting-index-with-docker-module/282075)

<div class="topic-metadata">

**Author:** [@Trung\_Dam1](https://discuss.elastic.co/u/Trung_Dam1)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 12:42pm UTC](https://discuss.elastic.co/t/not-getting-index-with-docker-module/282075 "2021-08-20T12:42:56Z")

</div>

Hi everyone, I am new to using elasticsearch I have a problem with metricbeat specifically with the docker module With the configuration as below I have renamed the index with the event.moudle field which will change …

---

## [Aggregate filter - Parsing Jenkins log](https://discuss.elastic.co/t/aggregate-filter-parsing-jenkins-log/281994)

<div class="topic-metadata">

**Author:** [@Uplift](https://discuss.elastic.co/u/Uplift)\
**Replies:** 4\
**Last updated:** [August 20, 2021, 12:57pm UTC](https://discuss.elastic.co/t/aggregate-filter-parsing-jenkins-log/281994 "2021-08-20T12:57:38Z")

</div>

Dear ELK community, I'm quite new to ELK stack and I'm trying to figure out what can I really achieve with Logstash. I'm trying to extract some information from Jenkins logs, and I found the aggregate filter plugin whi…

---

## [Using recursion for paging?](https://discuss.elastic.co/t/using-recursion-for-paging/282079)

<div class="topic-metadata">

**Author:** [@jasenj1](https://discuss.elastic.co/u/jasenj1)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 12:55pm UTC](https://discuss.elastic.co/t/using-recursion-for-paging/282079 "2021-08-20T12:55:10Z")

</div>

Given a web service that supports a typical paging construct of specifying the record to start from and a page size, is using the "pipeline" input and output to recursively call a config file a viable option? Or will it …

---

## [Monitoring java process running in remote server by Elasticsearch](https://discuss.elastic.co/t/monitoring-java-process-running-in-remote-server-by-elasticsearch/282068)

<div class="topic-metadata">

**Author:** [@buulq90](https://discuss.elastic.co/u/buulq90)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 10:55am UTC](https://discuss.elastic.co/t/monitoring-java-process-running-in-remote-server-by-elasticsearch/282068 "2021-08-20T10:55:23Z")

</div>

Hello all, I have the ELK stack with: AWS Elasticsearch & Logstash on EC2 instance. Currently, I want to monitor the java process in the other remote server which running many java process such as: java --proccess1 j…

---

## [One node one primary shard](https://discuss.elastic.co/t/one-node-one-primary-shard/282066)

<div class="topic-metadata">

**Author:** [@terrainc](https://discuss.elastic.co/u/terrainc)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 10:41am UTC](https://discuss.elastic.co/t/one-node-one-primary-shard/282066 "2021-08-20T10:41:56Z")

</div>

I have 6 nodes and 6 primary shards for each index plus replica. I want to be sure that each index primary shard got own node. How I understand, this can be controlled by allocation.balance "cluster.routing.allo…

---

## [Shards balance and homogeneity of their sizes](https://discuss.elastic.co/t/shards-balance-and-homogeneity-of-their-sizes/281661)

<div class="topic-metadata">

**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\
**Replies:** 7\
**Last updated:** [August 20, 2021, 10:29am UTC](https://discuss.elastic.co/t/shards-balance-and-homogeneity-of-their-sizes/281661 "2021-08-20T10:29:42Z")

</div>

I understood the need of a well balanced ES cluster, with indices made of enough shards (not too much but not too few), but I was wondering if the constancy of the size of shards was important ? Indeed, according the pu…

---

## [Does "retry\_on\_conflict" will handle updating the latest version number before retrying again?](https://discuss.elastic.co/t/does-retry-on-conflict-will-handle-updating-the-latest-version-number-before-retrying-again/281738)

<div class="topic-metadata">

**Author:** [@Vikram\_Golapelliwar](https://discuss.elastic.co/u/Vikram_Golapelliwar)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 9:41am UTC](https://discuss.elastic.co/t/does-retry-on-conflict-will-handle-updating-the-latest-version-number-before-retrying-again/281738 "2021-08-20T09:41:22Z")

</div>

Team, I have been trying to understand how setting retry\_on\_conflict will behave. It is little confusing in the documentation. As per my understanding, below lines suggest that the latest version update will be handle…

---

## [Config Logstash with https to Elasticsearch cluster](https://discuss.elastic.co/t/config-logstash-with-https-to-elasticsearch-cluster/282053)

<div class="topic-metadata">

**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 9:19am UTC](https://discuss.elastic.co/t/config-logstash-with-https-to-elasticsearch-cluster/282053 "2021-08-20T09:19:24Z")

</div>

Error Logs in Logstash Aug 20 14:28:50 elastic.sys logstash\[5101\]: \[2021-08-20T14:28:50,172\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Attempted to resurrect connection to dead ES instance, but got an error {:url=\>"h…

---

## [Pagination option is not visible in kibana after upgraded it to 7.9.4](https://discuss.elastic.co/t/pagination-option-is-not-visible-in-kibana-after-upgraded-it-to-7-9-4/281834)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 4\
**Last updated:** [August 20, 2021, 8:05am UTC](https://discuss.elastic.co/t/pagination-option-is-not-visible-in-kibana-after-upgraded-it-to-7-9-4/281834 "2021-08-20T08:05:30Z")

</div>

Hi Team, Recently i have upgraded my Elasticsearch & Kibana to 7.9.4 but after upgrade in kibana pagination option is not visible. For example if i have queried something in kibana and got total count 200 but out of 200…

---

## [NEST, number of transferred bytes when using compression](https://discuss.elastic.co/t/nest-number-of-transferred-bytes-when-using-compression/281991)

<div class="topic-metadata">

**Author:** [@MPeli](https://discuss.elastic.co/u/MPeli)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 7:56am UTC](https://discuss.elastic.co/t/nest-number-of-transferred-bytes-when-using-compression/281991 "2021-08-20T07:56:06Z")

</div>

Hi, I use the NEST library to index documents. Request are made using a BulkAsync function. I enabled an http compression (gzip). I wonder whether it is possible to find out how many bytes were transferred when making a…

---

## [Logstash not creating index in kibana](https://discuss.elastic.co/t/logstash-not-creating-index-in-kibana/280780)

<div class="topic-metadata">

**Author:** [@kiran80511](https://discuss.elastic.co/u/kiran80511)\
**Replies:** 25\
**Last updated:** [August 20, 2021, 7:27am UTC](https://discuss.elastic.co/t/logstash-not-creating-index-in-kibana/280780 "2021-08-20T07:27:08Z")

</div>

This is my logstash plain log file \[2021-06-18T08:21:45,675\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2021-06-18T08:21:45,686\]\[INFO \]\[logstash.runner …

---

## [Logstash http\_poller body calls the SQL API of elasticsearch error](https://discuss.elastic.co/t/logstash-http-poller-body-calls-the-sql-api-of-elasticsearch-error/282042)

<div class="topic-metadata">

**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\
**Replies:** 0\
**Last updated:** [August 20, 2021, 7:14am UTC](https://discuss.elastic.co/t/logstash-http-poller-body-calls-the-sql-api-of-elasticsearch-error/282042 "2021-08-20T07:14:48Z")

</div>

Hi I used logstash http\_ poller calls the SQL API of elasticsearch. SQL API \_sql?format=txt error. The following is some configuration information. input { http\_poller { urls =\> { item =\> { method =\> post url =\> …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1271)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1273)
