# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1316 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1317 --- ## [Kibana map and controls: filtering on a field common to two indices should filter away all points in second index](https://discuss.elastic.co/t/kibana-map-and-controls-filtering-on-a-field-common-to-two-indices-should-filter-away-all-points-in-second-index/278723)
**Author:** [@UMJames](https://discuss.elastic.co/u/UMJames)\ **Replies:** 3\ **Last updated:** [July 19, 2021, 4:06pm UTC](https://discuss.elastic.co/t/kibana-map-and-controls-filtering-on-a-field-common-to-two-indices-should-filter-away-all-points-in-second-index/278723 "2021-07-19T16:06:06Z")
I have two indices displayed on a map, "Individuals" and "Teams", and both have a common field: "Country". I have two Controls visualizations, one filtering by Country, acting on the "Individuals" index pattern, and the… --- ## [Fleet managed elastic agent enrolled as standalone via AzDo pipeline](https://discuss.elastic.co/t/fleet-managed-elastic-agent-enrolled-as-standalone-via-azdo-pipeline/278863)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 3\ **Last updated:** [July 19, 2021, 3:22pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-enrolled-as-standalone-via-azdo-pipeline/278863 "2021-07-19T15:22:50Z")
We are installing elastic agents onto WS2019 VMs via Azure DevOps pipelines. In the pipeline in one particular stage/task there is one powershell script that installs different packages on the server and Elastic Agent i… --- ## [Filebeat unable to parse logs with log4j format](https://discuss.elastic.co/t/filebeat-unable-to-parse-logs-with-log4j-format/278824)
**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-parse-logs-with-log4j-format/278824 "2021-07-19T15:24:19Z")
Currently we do run Tomcat server with log4j logging framework Filebeat unable to parse logs with log4j format Can any please suggest --- ## [Moving Kibana 7.13.3 development environment](https://discuss.elastic.co/t/moving-kibana-7-13-3-development-environment/278368)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 20\ **Last updated:** [July 19, 2021, 2:45pm UTC](https://discuss.elastic.co/t/moving-kibana-7-13-3-development-environment/278368 "2021-07-19T14:45:56Z")
Hello all, I hope you are doing well! I have a question about my kibana development environment. I have developed kibana from source on one workstation and copied it from there and pasted it on another work station. it … --- ## [Cannot read property map of undefined](https://discuss.elastic.co/t/cannot-read-property-map-of-undefined/279080)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 2:44pm UTC](https://discuss.elastic.co/t/cannot-read-property-map-of-undefined/279080 "2021-07-19T14:44:43Z")
Hi, I have elk stack version 7.11.1. I have 2 spaces. Chrome browser. Everything was working fine. Suddenly started getting the problem in custom space for dashboards, discover and many tabs. All this error happens … --- ## [Elastic Cloud can't connect to Kibana](https://discuss.elastic.co/t/elastic-cloud-cant-connect-to-kibana/278818)
**Author:** [@mi\_uber\_alles](https://discuss.elastic.co/u/mi_uber_alles)\ **Replies:** 4\ **Last updated:** [July 19, 2021, 2:42pm UTC](https://discuss.elastic.co/t/elastic-cloud-cant-connect-to-kibana/278818 "2021-07-19T14:42:54Z")
Hi All, I just started to use a trial version of the Elastic Cloud and created my first deployment. I also created a test VM to provide sample data through Metricbeat. Added the cloud.id and cloud.auth data to the confi… --- ## [Why wildcard not working? Filebeat 7.13.3](https://discuss.elastic.co/t/why-wildcard-not-working-filebeat-7-13-3/278693)
**Author:** [@Oleg\_Makar21e31](https://discuss.elastic.co/u/Oleg_Makar21e31)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:37pm UTC](https://discuss.elastic.co/t/why-wildcard-not-working-filebeat-7-13-3/278693 "2021-07-19T14:37:27Z")
Why wildcard doesnt working in filebeat? I read all logstash's article about PATH and GLOB (not working too even GLOB constructor is valid) and recursive\_glob.enabled: true and it doesnt working for me!!! Why???? Please… --- ## [KIbana Time series not getting updated when using Interval as "Auto"](https://discuss.elastic.co/t/kibana-time-series-not-getting-updated-when-using-interval-as-auto/279017)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:35pm UTC](https://discuss.elastic.co/t/kibana-time-series-not-getting-updated-when-using-interval-as-auto/279017 "2021-07-19T14:35:04Z")
Im using Timeseries graph in Kibana 7.10.2 . When I select Interval as Auto , its not getting updated on time. When I set interval as 5m, Im able to see record, but not when selected as Auto. As you see in below image, … --- ## [How to hide columns from data table?](https://discuss.elastic.co/t/how-to-hide-columns-from-data-table/279077)
**Author:** [@creativeguitar](https://discuss.elastic.co/u/creativeguitar)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:22pm UTC](https://discuss.elastic.co/t/how-to-hide-columns-from-data-table/279077 "2021-07-19T14:22:08Z")
I applied a date range filter to my table and it created an ugly column that I would like to hide. If it is not possible to hide, I would be ok if i can at least get rid of the time part of the date and display somethin… --- ## [Format Datatable Column text](https://discuss.elastic.co/t/format-datatable-column-text/278596)
**Author:** [@matheuspavanetti](https://discuss.elastic.co/u/matheuspavanetti)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:00pm UTC](https://discuss.elastic.co/t/format-datatable-column-text/278596 "2021-07-19T14:00:51Z")
Hi Team, Currently, I'm building a dashboard which the data source field is a big text, When I open the field in the Discover session, it shows me the way I expect, formatted and aligned, But when I query this field f… --- ## [Horizontal Bar Chart - Axys Y Display Interval 0.01](https://discuss.elastic.co/t/horizontal-bar-chart-axys-y-display-interval-0-01/278068)
**Author:** [@Rafael\_Almeida1](https://discuss.elastic.co/u/Rafael_Almeida1)\ **Replies:** 3\ **Last updated:** [July 19, 2021, 1:57pm UTC](https://discuss.elastic.co/t/horizontal-bar-chart-axys-y-display-interval-0-01/278068 "2021-07-19T13:57:56Z")
Hi, I'm trying create a graph horizontal bar with money interval of $0.01. My Elastic Stack version is 7.11.2. The atual interval is just $0.2. How I can visually discern the difference between values? --- ## [How to group by multiple fields in kibana](https://discuss.elastic.co/t/how-to-group-by-multiple-fields-in-kibana/279003)
**Author:** [@advaitha001](https://discuss.elastic.co/u/advaitha001)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 1:16pm UTC](https://discuss.elastic.co/t/how-to-group-by-multiple-fields-in-kibana/279003 "2021-07-19T13:16:15Z")
Hello, We are new to Kibana, trying to achieve sum(max(column) group by field1(date),field2(string). We tried doing sum bucket, but we were able to only pick one of the fields. Please help us if there is any way to do… --- ## [How can I reindex the results of an aggregation into another index?](https://discuss.elastic.co/t/how-can-i-reindex-the-results-of-an-aggregation-into-another-index/278896)
**Author:** [@Vaishnavi\_Nandakumar](https://discuss.elastic.co/u/Vaishnavi_Nandakumar)\ **Replies:** 10\ **Last updated:** [July 19, 2021, 12:58pm UTC](https://discuss.elastic.co/t/how-can-i-reindex-the-results-of-an-aggregation-into-another-index/278896 "2021-07-19T12:58:58Z")
Hello, I'm using the 7.7.0 version of Elasticsearch. I have an aggregation query that works on the ingested data to produce the output but I am not able to re-index it. Data Context The given dataset has around 500,00… --- ## [How to clean & group url with paramater data](https://discuss.elastic.co/t/how-to-clean-group-url-with-paramater-data/277000)
**Author:** [@blukit](https://discuss.elastic.co/u/blukit)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 12:45pm UTC](https://discuss.elastic.co/t/how-to-clean-group-url-with-paramater-data/277000 "2021-07-19T12:45:45Z")
I have URL field on my log which i need to group/bucket: Unfortunately the it has some varying data on it, such as: https://172.18.10.41/api/v1.0/customer/inquiry/401301018517537 http://182.18.10.41/corp/rest/v1/01/cu… --- ## [How to run elassandra on windows](https://discuss.elastic.co/t/how-to-run-elassandra-on-windows/279058)
**Author:** [@Pramod\_Kumar3](https://discuss.elastic.co/u/Pramod_Kumar3)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 12:19pm UTC](https://discuss.elastic.co/t/how-to-run-elassandra-on-windows/279058 "2021-07-19T12:19:12Z")
I am try to run elassandra on windows by using Cassandra -e command, it's throwing invalid parameters : empty value. I believe the run command should be different. Can you please share the command to run on windows. T… --- ## [Return result of a custom field using query\_template](https://discuss.elastic.co/t/return-result-of-a-custom-field-using-query-template/279051)
**Author:** [@martb](https://discuss.elastic.co/u/martb)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 11:41am UTC](https://discuss.elastic.co/t/return-result-of-a-custom-field-using-query-template/279051 "2021-07-19T11:41:17Z")
Hi, I've created a query\_template that gets the average number of alerts per day, but it's not returning the avg\_count result to logstash. I done this before when the field exists but not with a custom result i.e not a … --- ## [How to allow Users access Kibana on Elastic Cloud on Azure?](https://discuss.elastic.co/t/how-to-allow-users-access-kibana-on-elastic-cloud-on-azure/278381)
**Author:** [@idelix](https://discuss.elastic.co/u/idelix)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 11:41am UTC](https://discuss.elastic.co/t/how-to-allow-users-access-kibana-on-elastic-cloud-on-azure/278381 "2021-07-19T11:41:07Z")
I deployed: Elastic Cloud (Elasticsearch managed service) Elastic Cloud (Elasticsearch managed service) Now I need to allow users from my Azure tenant to access Kibana using their Azure AD credentials so to do something… --- ## [Execute script while in maintenance mode](https://discuss.elastic.co/t/execute-script-while-in-maintenance-mode/279050)
**Author:** [@crl](https://discuss.elastic.co/u/crl)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 11:19am UTC](https://discuss.elastic.co/t/execute-script-while-in-maintenance-mode/279050 "2021-07-19T11:19:11Z")
I have a cluster hosted in AWS that I have had to place in maintenance mode (stop routing requests) as the incoming requests prevent any work on the cluster in its current state. Some of the issues are caused by mapping… --- ## [Customized color for the gauge visualization](https://discuss.elastic.co/t/customized-color-for-the-gauge-visualization/278651)
**Author:** [@Rana\_M\_Zubair](https://discuss.elastic.co/u/Rana_M_Zubair)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 11:20am UTC](https://discuss.elastic.co/t/customized-color-for-the-gauge-visualization/278651 "2021-07-19T11:20:08Z")
Hi all, I am trying to create a gauge visualization of split group bucket type. In my case, I have the field that results in success or error count. I want the gauge for the success case count to be of the green color a… --- ## [Logstash log4j2.properties configuration for pipeline logs](https://discuss.elastic.co/t/logstash-log4j2-properties-configuration-for-pipeline-logs/278612)
**Author:** [@Kshema](https://discuss.elastic.co/u/Kshema)\ **Replies:** 3\ **Last updated:** [July 19, 2021, 11:11am UTC](https://discuss.elastic.co/t/logstash-log4j2-properties-configuration-for-pipeline-logs/278612 "2021-07-19T11:11:10Z")
In our application, logstash.yml is configured to produce separate log files for each pipeline with the help of below property pipeline.separate\_logs: true This configuration setup is creating the below mentioned logs: … --- ## [Failed to start elastic search](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983)
**Author:** [@Jedrick](https://discuss.elastic.co/u/Jedrick)\ **Replies:** 8\ **Last updated:** [July 19, 2021, 10:48am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983 "2021-07-19T10:48:42Z")
Hi, Good day. Can you help me with my problem with elastic search? Currently, i am building a Wazuh siem that uses elastic search functions. As I checked, Filebeat, kibana services are running. But the elasticsearch … --- ## [Kibana lens visualizations nested in dashboard unable to sort ascending/descending](https://discuss.elastic.co/t/kibana-lens-visualizations-nested-in-dashboard-unable-to-sort-ascending-descending/278998)
**Author:** [@technobrom](https://discuss.elastic.co/u/technobrom)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 10:03am UTC](https://discuss.elastic.co/t/kibana-lens-visualizations-nested-in-dashboard-unable-to-sort-ascending-descending/278998 "2021-07-19T10:03:09Z")
I'm currently using Kibana for work and have been creating visualizations using the new lens feature. I noticed that once I nest the new visualization in a dashboard, I am unable to sort the fields either ascending or de… --- ## [Prefix of special character on the id](https://discuss.elastic.co/t/prefix-of-special-character-on-the-id/278567)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 9:58am UTC](https://discuss.elastic.co/t/prefix-of-special-character-on-the-id/278567 "2021-07-19T09:58:49Z")
I have inadvertently loaded some documents without sanitising the field that was meant to be the id. So some records now have an id that begins with the ascii 09 i.e. the tab character I can extract an individual recor… --- ## [Script query is not returning whole double value](https://discuss.elastic.co/t/script-query-is-not-returning-whole-double-value/278871)
**Author:** [@RamPrasadKM](https://discuss.elastic.co/u/RamPrasadKM)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:50am UTC](https://discuss.elastic.co/t/script-query-is-not-returning-whole-double-value/278871 "2021-07-19T09:50:26Z")
POST gs011\_carea\_area/\_search { "from": 0, "size": 0, "version": true, "aggregations": { "filters": { "filter": { "bool": { "must": \[ { "terms": { "id": \[ 76701 \], "boost": 1 } } \], "adjust\_pure\_negati… --- ## [Missing org.elasticsearch.test:logger-usage:7.10.2](https://discuss.elastic.co/t/missing-org-elasticsearch-test7-10-2/278893)
**Author:** [@p4paul](https://discuss.elastic.co/u/p4paul)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 9:48am UTC](https://discuss.elastic.co/t/missing-org-elasticsearch-test7-10-2/278893 "2021-07-19T09:48:13Z")
It seems a few Jars are missing in mavenCentral.... To start with: org.elasticsearch.test:logger-usage:7.10.2 I was trying to build a esplugin for Elastic 7.10.2 Error: Execution failed for task ':loggerUsageCheck'. … --- ## [Index in certain set of nodes](https://discuss.elastic.co/t/index-in-certain-set-of-nodes/278920)
**Author:** [@Roman\_Kagan](https://discuss.elastic.co/u/Roman_Kagan)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:45am UTC](https://discuss.elastic.co/t/index-in-certain-set-of-nodes/278920 "2021-07-19T09:45:34Z")
Hello: I have 5 nodes cluster - would it be possible to set the primary and replicas to be on certain nodes and not others. For example, I'd like to achieve that index-1 would be on node-a, node-b and node-c and NOT on… --- ## [TimeValue - number\_format\_exception - Java client](https://discuss.elastic.co/t/timevalue-number-format-exception-java-client/279015)
**Author:** [@Leuteris](https://discuss.elastic.co/u/Leuteris)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:36am UTC](https://discuss.elastic.co/t/timevalue-number-format-exception-java-client/279015 "2021-07-19T09:36:43Z")
I have a search request using PointInTimeBuilder: PointInTimeBuilder pointInTimeBuilder = new PointInTimeBuilder("id..."); pointInTimeBuilder.setKeepAlive(TimeValue.timeValueSeconds(66)); The keep\_alive value is 66 sec… --- ## [How to add http response header in Elasticsearch](https://discuss.elastic.co/t/how-to-add-http-response-header-in-elasticsearch/278981)
**Author:** [@yupengj](https://discuss.elastic.co/u/yupengj)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:12am UTC](https://discuss.elastic.co/t/how-to-add-http-response-header-in-elasticsearch/278981 "2021-07-19T09:12:23Z")
I encountered three security-related issues when using elasticserrch version 7.6.1. Thank you for your help. How does elasticserrch configure http response headers, such as X-Content-Type-Options, X-XSS-Protection, Con… --- ## [Useragent information](https://discuss.elastic.co/t/useragent-information/277786)
**Author:** [@111401](https://discuss.elastic.co/u/111401)\ **Replies:** 6\ **Last updated:** [July 19, 2021, 8:56am UTC](https://discuss.elastic.co/t/useragent-information/277786 "2021-07-19T08:56:04Z")
Hi, i had parsed netflow via filebeat 7.7.0 and send it to logstash 7.6.2 then elasticsearch 7.6.2, but i see the agent field is only about filebeat, not the client device information. "agent" =\> { "i… --- ## [Date type changed to text after upgrading from elastic and kiban 6.4.1 to 7.8.0](https://discuss.elastic.co/t/date-type-changed-to-text-after-upgrading-from-elastic-and-kiban-6-4-1-to-7-8-0/277803)
**Author:** [@karim.zahar](https://discuss.elastic.co/u/karim.zahar)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 8:07am UTC](https://discuss.elastic.co/t/date-type-changed-to-text-after-upgrading-from-elastic-and-kiban-6-4-1-to-7-8-0/277803 "2021-07-19T08:07:38Z")
hello, I have developed a java springboot batch that collect data from middleware logs and insert it to elastic index, the index is created by the batch with some fields that have date type (datein, dateout...). After … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1315) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1317)