# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1359 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1360 --- ## [How to present table, based on multiline xml fields](https://discuss.elastic.co/t/how-to-present-table-based-on-multiline-xml-fields/276357)
**Author:** [@rubic](https://discuss.elastic.co/u/rubic)\ **Replies:** 0\ **Last updated:** [June 18, 2021, 9:16am UTC](https://discuss.elastic.co/t/how-to-present-table-based-on-multiline-xml-fields/276357 "2021-06-18T09:16:40Z")
Hi, I'm struggling with creating simple table in lens, which could present my data from ingested, multiline xml file. Basically I don't need to apply any aggregations. I'm wondering if there is any kind of solution? My… --- ## [Cloudwatch-output-plugin multiple metrics in same pipeline](https://discuss.elastic.co/t/cloudwatch-output-plugin-multiple-metrics-in-same-pipeline/276419)
**Author:** [@Ahmed\_ElHaw](https://discuss.elastic.co/u/Ahmed_ElHaw)\ **Replies:** 0\ **Last updated:** [June 18, 2021, 7:48pm UTC](https://discuss.elastic.co/t/cloudwatch-output-plugin-multiple-metrics-in-same-pipeline/276419 "2021-06-18T19:48:28Z")
I have managed to get my head around sending one metric to Cloudwatch using output plugin. Now while I understand it aggregates, I am using it to send 1 minute metrics and matching that on CloudWatch so I'm good. The qu… --- ## [Unable to allocate shards in ILM cold phase](https://discuss.elastic.co/t/unable-to-allocate-shards-in-ilm-cold-phase/273789)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 9\ **Last updated:** [June 18, 2021, 6:26pm UTC](https://discuss.elastic.co/t/unable-to-allocate-shards-in-ilm-cold-phase/273789 "2021-06-18T18:26:49Z")
hi, I have a 2 node cluster running 7.10.2. I have defined ILM policy to move index from hot-warm-cold phases. However the transition from warm to cold phase is not happening. I have not explicitly set any node roles. S… --- ## [High search latency after upgrading from es 6.8 to 7.12.1](https://discuss.elastic.co/t/high-search-latency-after-upgrading-from-es-6-8-to-7-12-1/276346)
**Author:** [@frank\_thyes](https://discuss.elastic.co/u/frank_thyes)\ **Replies:** 3\ **Last updated:** [June 18, 2021, 5:29pm UTC](https://discuss.elastic.co/t/high-search-latency-after-upgrading-from-es-6-8-to-7-12-1/276346 "2021-06-18T17:29:42Z")
Since we upgraded our elasticsearch cluster from version 6.8.0 to 7.12.1, consisting of 6 data nodes and 3 master nodes, the search latency is three times higher than on the previous version Are there any known issues? … --- ## [Metricbeat - Socket summary TCP established filtered by port](https://discuss.elastic.co/t/metricbeat-socket-summary-tcp-established-filtered-by-port/275902)
**Author:** [@IT\_Sniper](https://discuss.elastic.co/u/IT_Sniper)\ **Replies:** 8\ **Last updated:** [June 18, 2021, 4:41pm UTC](https://discuss.elastic.co/t/metricbeat-socket-summary-tcp-established-filtered-by-port/275902 "2021-06-18T16:41:30Z")
Hello everyone, I have a ELK stack server which receives metrics from several servers, but one of them has a specific application that listens on port TCP/8443. Im aware of the system module of Metricbeats, which suppor… --- ## [ElasticsearchStatusException\[Unable to parse response body\]; nested: ResponseException\[method \[POST\]](https://discuss.elastic.co/t/elasticsearchstatusexception-unable-to-parse-response-body-nested-responseexception-method-post/276321)
**Author:** [@prashantreddy](https://discuss.elastic.co/u/prashantreddy)\ **Replies:** 2\ **Last updated:** [June 18, 2021, 3:22pm UTC](https://discuss.elastic.co/t/elasticsearchstatusexception-unable-to-parse-response-body-nested-responseexception-method-post/276321 "2021-06-18T15:22:42Z")
Hello, I am new to ES and I am getting below exception and our ES(7.12.1) instance is on kubernetes. ElasticsearchStatusException\[Unable to parse response body\]; nested: ResponseException\[method \[POST\], host \[http://es.… --- ## [Http\_endpoint only accepts JSON, even with a different content\_type](https://discuss.elastic.co/t/http-endpoint-only-accepts-json-even-with-a-different-content-type/276329)
**Author:** [@jhbigler](https://discuss.elastic.co/u/jhbigler)\ **Replies:** 2\ **Last updated:** [June 18, 2021, 3:14pm UTC](https://discuss.elastic.co/t/http-endpoint-only-accepts-json-even-with-a-different-content-type/276329 "2021-06-18T15:14:02Z")
We would like to use filebeat to accept data from Apache Nifi in the form of a POST request, run it through some processors and send it to Elasticsearch. The documentation on the http\_endpoint seems to suggest that the h… --- ## [Is static lookup supported in tsvb?](https://discuss.elastic.co/t/is-static-lookup-supported-in-tsvb/276400)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 2\ **Last updated:** [June 18, 2021, 3:10pm UTC](https://discuss.elastic.co/t/is-static-lookup-supported-in-tsvb/276400 "2021-06-18T15:10:18Z")
Hello, I'm using Kibana version 7.13.2, I'm formatting a field say currency using "Static Lookup", where I map currency value "EUR" to "Europe". I want to view the formatted field value in the TSVB table, but I'm n… --- ## [Kibana - Index pattern issue](https://discuss.elastic.co/t/kibana-index-pattern-issue/275604)
**Author:** [@seeds17](https://discuss.elastic.co/u/seeds17)\ **Replies:** 3\ **Last updated:** [June 18, 2021, 1:54pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-issue/275604 "2021-06-18T13:54:32Z")
After install mongodb filebeat to ELK (check logstah no error) Kibana \> idex patterns when click pattern new\* file , i can't find anything (blank). there's no fields. Pls advice? --- ## [Gauge ommiting value if value is large](https://discuss.elastic.co/t/gauge-ommiting-value-if-value-is-large/276393)
**Author:** [@Adrian3](https://discuss.elastic.co/u/Adrian3)\ **Replies:** 0\ **Last updated:** [June 18, 2021, 1:36pm UTC](https://discuss.elastic.co/t/gauge-ommiting-value-if-value-is-large/276393 "2021-06-18T13:36:36Z")
For example, for "stuff" gauge below if the value is 1'323'2323'232 instead of 0.11, the value 1'323'2323'232 is partially hidden behind the gauge. Is there a method to enable the value to be visible if the gauge val… --- ## [Documents are not displayed in a space other than the default space](https://discuss.elastic.co/t/documents-are-not-displayed-in-a-space-other-than-the-default-space/276388)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 1\ **Last updated:** [June 18, 2021, 1:35pm UTC](https://discuss.elastic.co/t/documents-are-not-displayed-in-a-space-other-than-the-default-space/276388 "2021-06-18T13:35:23Z")
Good afternoon! I am trying to find out why it happened and how to solve it, but I can not find the key. Let me tell you: I have created an additional space in kibana with the intention of creating a dashboard that cou… --- ## [Able to parse \[18/Jun/2021:15:42:25 +0530\] but still getting \_dateparsefailure in kibana](https://discuss.elastic.co/t/able-to-parse-18-jun-202142-25-0530-but-still-getting-dateparsefailure-in-kibana/276377)
**Author:** [@Saurabh\_Nigudkar](https://discuss.elastic.co/u/Saurabh_Nigudkar)\ **Replies:** 1\ **Last updated:** [June 18, 2021, 1:10pm UTC](https://discuss.elastic.co/t/able-to-parse-18-jun-202142-25-0530-but-still-getting-dateparsefailure-in-kibana/276377 "2021-06-18T13:10:29Z")
Below is my block which i have used every thing is getting parse even date is getting parse but getting \_dateparsefailure so unable to understand what is the exact issue match\_extended =\> { "message" =\> \[ { pattern … --- ## [Kibana need to restart after a period of inactivity](https://discuss.elastic.co/t/kibana-need-to-restart-after-a-period-of-inactivity/276020)
**Author:** [@BastianELK](https://discuss.elastic.co/u/BastianELK)\ **Replies:** 2\ **Last updated:** [June 18, 2021, 12:57pm UTC](https://discuss.elastic.co/t/kibana-need-to-restart-after-a-period-of-inactivity/276020 "2021-06-18T12:57:45Z")
Hi all, I have a problem on Kibana. I started Kibana as a service and everything works well. After a period of inactivity (so every morning), when I try to logged on Kibana, the application restart and I have to wait … --- ## [help me please ](https://discuss.elastic.co/t/help-me-please/276342)
**Author:** [@parai](https://discuss.elastic.co/u/parai)\ **Replies:** 1\ **Last updated:** [June 18, 2021, 12:54pm UTC](https://discuss.elastic.co/t/help-me-please/276342 "2021-06-18T12:54:50Z")
Good morning. I am using elasticsearch 7.10 and kibana 7.10. I'm having some issues with scattering column values in kibana. I am new to elk. The following contents were worked on kibana dev tool. Contents of the is… --- ## [Issues with Fleet Server (Elastic Agent Setup) in local Elasticsearch deployment with self signed certificates](https://discuss.elastic.co/t/issues-with-fleet-server-elastic-agent-setup-in-local-elasticsearch-deployment-with-self-signed-certificates/276151)
**Author:** [@SMT\_Mas](https://discuss.elastic.co/u/SMT_Mas)\ **Replies:** 1\ **Last updated:** [June 18, 2021, 12:52pm UTC](https://discuss.elastic.co/t/issues-with-fleet-server-elastic-agent-setup-in-local-elasticsearch-deployment-with-self-signed-certificates/276151 "2021-06-18T12:52:37Z")
Hello, I'm trying to install Elastic Agent with a local ELK Environment and have no luck because of Fleet Server issues. Server Info: ELK on version 7.13.1 with self-signed certificates running in Docker containers o… --- ## [Kibana Use Date Interval without using Date Histogram](https://discuss.elastic.co/t/kibana-use-date-interval-without-using-date-histogram/276286)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 3\ **Last updated:** [June 18, 2021, 12:40pm UTC](https://discuss.elastic.co/t/kibana-use-date-interval-without-using-date-histogram/276286 "2021-06-18T12:40:38Z")
Hi All, I'm trying to create a visualization, where I have a date field as the columns of a table. I want to have the columns be by week, but don't want to use a date histogram, and instead want to use the dates as inte… --- ## [Encountered a retryable error. Will Retry with exponential backoff code=\>403](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-403/276382)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 0\ **Last updated:** [June 18, 2021, 11:27am UTC](https://discuss.elastic.co/t/encountered-a-retryable-error-will-retry-with-exponential-backoff-code-403/276382 "2021-06-18T11:27:46Z")
Hello, we have recently swapped to use api keys and created api key for logstash monitoring. As written here: Configuring Security in Logstash | Logstash Reference \[7.9\] | Elastic POST /\_security/api\_key { "name": "… --- ## [Logstash Infinite Loop while indexing](https://discuss.elastic.co/t/logstash-infinite-loop-while-indexing/276380)
**Author:** [@Adabi\_Raihan](https://discuss.elastic.co/u/Adabi_Raihan)\ **Replies:** 0\ **Last updated:** [June 18, 2021, 11:17am UTC](https://discuss.elastic.co/t/logstash-infinite-loop-while-indexing/276380 "2021-06-18T11:17:40Z")
Hi Everyone !, So what I'm going to do is indexing .log data with grok using logstash, but in the middle of indexing, it's suddenly stopped. I am already using --debug flag to see what's going on, and it keeps loop this… --- ## [Metricbeat elasticsearch-xpack not reliably sending data to monitoring cluster](https://discuss.elastic.co/t/metricbeat-elasticsearch-xpack-not-reliably-sending-data-to-monitoring-cluster/275842)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 14\ **Last updated:** [June 18, 2021, 10:51am UTC](https://discuss.elastic.co/t/metricbeat-elasticsearch-xpack-not-reliably-sending-data-to-monitoring-cluster/275842 "2021-06-18T10:51:47Z")
I've installed metricbeat to ship monitoring metrics from my elastic cluster to a separate cluster, but from what I can see, despite the period of collection being 10s, it's hardly ever sending any actual data: Does … --- ## [Elastic does not allocate indices equally](https://discuss.elastic.co/t/elastic-does-not-allocate-indices-equally/275903)
**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\ **Replies:** 6\ **Last updated:** [June 18, 2021, 9:30am UTC](https://discuss.elastic.co/t/elastic-does-not-allocate-indices-equally/275903 "2021-06-18T09:30:51Z")
Hello, I have an issue with Elastic allocation decider. Sometimes Elastic allocates new indices to nodes which are quite full for no reason. On the other nodes there is a plenty of space and it allocates indices on the … --- ## [Aggregation performance](https://discuss.elastic.co/t/aggregation-performance/276198)
**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\ **Replies:** 5\ **Last updated:** [June 18, 2021, 8:22am UTC](https://discuss.elastic.co/t/aggregation-performance/276198 "2021-06-18T08:22:45Z")
hello, Can anyone please advice how to improve a query performance? the bool filter takes 50ms. filter dates: last 7 days total search documents : 20075 total index documents : 79m searched indices: 1 … --- ## [Kibana Spaces & Export Objects](https://discuss.elastic.co/t/kibana-spaces-export-objects/276349)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [June 18, 2021, 8:53am UTC](https://discuss.elastic.co/t/kibana-spaces-export-objects/276349 "2021-06-18T08:53:46Z")
Hi there, as sysadmin I would like secure and therefore export Kibana related objects locally. I have 2 questions. Example: the cluster has 10 spaces. I can go to each space and manually say 'Export n objects'. But i… --- ## [\[Filebeat System\] Syslog dashboard ECS showing no results found](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs-showing-no-results-found/276103)
**Author:** [@ShabariNath](https://discuss.elastic.co/u/ShabariNath)\ **Replies:** 3\ **Last updated:** [June 18, 2021, 8:47am UTC](https://discuss.elastic.co/t/filebeat-system-syslog-dashboard-ecs-showing-no-results-found/276103 "2021-06-18T08:47:52Z")
\*\*filebeat.yml file \*\* \*\*###################### Filebeat Configuration Example #########################\*\* \*\*# This file is an example configuration file highlighting only the most common\*\* \*\*# options. The filebeat.re… --- ## [Not able to view json data in available fields for message json](https://discuss.elastic.co/t/not-able-to-view-json-data-in-available-fields-for-message-json/275932)
**Author:** [@Harshad\_Solanki](https://discuss.elastic.co/u/Harshad_Solanki)\ **Replies:** 13\ **Last updated:** [June 18, 2021, 8:43am UTC](https://discuss.elastic.co/t/not-able-to-view-json-data-in-available-fields-for-message-json/275932 "2021-06-18T08:43:32Z")
In my Kibana dashboard I have below json data "message": "{ "time": "2021-06-15T08:57:20+00:00", "remote\_addr": "1.2.3.4", "the\_real\_ip": "10..2.3.4", "remote\_user": "", "time\_local": "15/Jun/2021:08:57:20 +0000", "body… --- ## [LS not reading jdbc input for large dataset. Order By Clause is a Issue in Microsoft SQL](https://discuss.elastic.co/t/ls-not-reading-jdbc-input-for-large-dataset-order-by-clause-is-a-issue-in-microsoft-sql/276352)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 0\ **Last updated:** [June 18, 2021, 8:27am UTC](https://discuss.elastic.co/t/ls-not-reading-jdbc-input-for-large-dataset-order-by-clause-is-a-issue-in-microsoft-sql/276352 "2021-06-18T08:27:19Z")
Hi All I know this question has been asked earlier as well, but this issue is still there. But there was no clear statement on the solution, so i am asking again. input : jdbc-input-plugin jdbc driver: MSSQL Underne… --- ## [Transforms: do I need to filter source for time-series data?](https://discuss.elastic.co/t/transforms-do-i-need-to-filter-source-for-time-series-data/276057)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 9\ **Last updated:** [June 18, 2021, 8:18am UTC](https://discuss.elastic.co/t/transforms-do-i-need-to-filter-source-for-time-series-data/276057 "2021-06-18T08:18:42Z")
I'm doing a transformation of time-series/events data that does not change for the past. I've talked to an Elastic engineer Ben on Slack and it seems like I might have stumbled upon a bug. I'm using this index config a… --- ## [Es7.x querystring can't boost NOT query](https://discuss.elastic.co/t/es7-x-querystring-cant-boost-not-query/275653)
**Author:** [@laigood](https://discuss.elastic.co/u/laigood)\ **Replies:** 2\ **Last updated:** [June 18, 2021, 7:45am UTC](https://discuss.elastic.co/t/es7-x-querystring-cant-boost-not-query/275653 "2021-06-18T07:45:28Z")
I found that from es7.0,querystring query can't boost NOT query,like below code,the result score is 0,not 100 as expect.I alse check in es5.x and es6.x it work as expect.someone know why? PUT test/\_doc/1 { "test": "1"… --- ## [Space isolation](https://discuss.elastic.co/t/space-isolation/276340)
**Author:** [@Dheeraj\_Bhargav](https://discuss.elastic.co/u/Dheeraj_Bhargav)\ **Replies:** 1\ **Last updated:** [June 18, 2021, 7:42am UTC](https://discuss.elastic.co/t/space-isolation/276340 "2021-06-18T07:42:07Z")
Hello guys, I want to isolate my environment in kibana space, like i want a space for dev where only dev machines are monitoring and a space for prod for prod machines only. How can i do that. --- ## [Office 365 Module , Filebeat, Logstash, and Elastic Search](https://discuss.elastic.co/t/office-365-module-filebeat-logstash-and-elastic-search/276231)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 3\ **Last updated:** [June 18, 2021, 7:38am UTC](https://discuss.elastic.co/t/office-365-module-filebeat-logstash-and-elastic-search/276231 "2021-06-18T07:38:31Z")
Im current using the Office 365 module but Im having several issues. First, I use Logstash for processsing (mostly because I put data in daily indexes). All I do in Logstash is take the data and pass it to Elasticsearch… --- ## [How to make Logstash plugin to BCFIPS compliant?](https://discuss.elastic.co/t/how-to-make-logstash-plugin-to-bcfips-compliant/276338)
**Author:** [@sivatejaperam](https://discuss.elastic.co/u/sivatejaperam)\ **Replies:** 0\ **Last updated:** [June 18, 2021, 6:57am UTC](https://discuss.elastic.co/t/how-to-make-logstash-plugin-to-bcfips-compliant/276338 "2021-06-18T06:57:31Z")
I am trying to make my log stash input plugin to BCFIPS complaint. I have added bc-fips.jar in my plugin dependency list and also registered the fips provider using Security.addProvider(new BouncyCastleFipsProvider()); . … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1358) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1360)