# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1360 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1361 --- ## [How to stop table row text truncation in Kibana?](https://discuss.elastic.co/t/how-to-stop-table-row-text-truncation-in-kibana/276327)
**Author:** [@rak](https://discuss.elastic.co/u/rak)\ **Replies:** 1\ **Last updated:** [June 18, 2021, 6:33am UTC](https://discuss.elastic.co/t/how-to-stop-table-row-text-truncation-in-kibana/276327 "2021-06-18T06:33:40Z")
I have made a data table in Kibana however long lines of text (stored as a keyword) are truncated and do not completely show (view image below). I have changed the table height setting within the advanced settings to 0 a… --- ## [Cannot make this work](https://discuss.elastic.co/t/cannot-make-this-work/276090)
**Author:** [@Peque](https://discuss.elastic.co/u/Peque)\ **Replies:** 4\ **Last updated:** [June 18, 2021, 5:13am UTC](https://discuss.elastic.co/t/cannot-make-this-work/276090 "2021-06-18T05:13:28Z")
Hi Group I struggling like H\*\*\* t omake this work I have created an ELK server on Ubuntu 20.04LTS - and would like to monitor both Normal Linux/Windows Server - and allso our PFsense Routers. I'm using the PFELK --\> G… --- ## [Ruby Code to split key value pair in Logstash 6.8.0](https://discuss.elastic.co/t/ruby-code-to-split-key-value-pair-in-logstash-6-8-0/275933)
**Author:** [@Santy](https://discuss.elastic.co/u/Santy)\ **Replies:** 4\ **Last updated:** [June 18, 2021, 5:13am UTC](https://discuss.elastic.co/t/ruby-code-to-split-key-value-pair-in-logstash-6-8-0/275933 "2021-06-18T05:13:16Z")
json { source =\> "message" } split { field =\> "data" } date { match =\> \["\[data\]\[currentDate\]", "yyyy-MM-dd HH:mm:ss"\] target =\> "@timestamp" } ruby { code =\> " event\['data'\].each {|k, v| … --- ## [Filebeat on windows 10 client not work](https://discuss.elastic.co/t/filebeat-on-windows-10-client-not-work/276332)
**Author:** [@dia](https://discuss.elastic.co/u/dia)\ **Replies:** 0\ **Last updated:** [June 18, 2021, 4:32am UTC](https://discuss.elastic.co/t/filebeat-on-windows-10-client-not-work/276332 "2021-06-18T04:32:32Z")
filebeat service is running, but I see nothing from it on elasticsearch filebeat index below is from Linux client and it is working fine.. curl -XGET "https://d4850cf616524f54b7ec7628ed283e2a.deyaa.lab:9243/\_cat/indice… --- ## [Elasticsearch build-in user changed password](https://discuss.elastic.co/t/elasticsearch-build-in-user-changed-password/276330)
**Author:** [@drewkrrb](https://discuss.elastic.co/u/drewkrrb)\ **Replies:** 5\ **Last updated:** [June 18, 2021, 3:44am UTC](https://discuss.elastic.co/t/elasticsearch-build-in-user-changed-password/276330 "2021-06-18T03:44:53Z")
Hi all Our Elasticsearch environment is deployed on our kubernetes platform using the official helm chart. We only have 2 elasticsearch pods. We are using xpack.security.enabled: true and setup the password for elastic… --- ## [Automate applying a pipeline to documents](https://discuss.elastic.co/t/automate-applying-a-pipeline-to-documents/276059)
**Author:** [@Spricer](https://discuss.elastic.co/u/Spricer)\ **Replies:** 7\ **Last updated:** [June 17, 2021, 2:41pm UTC](https://discuss.elastic.co/t/automate-applying-a-pipeline-to-documents/276059 "2021-06-17T14:41:25Z")
I created "mypipeline" pipeline with grok processor. I have syslog-ng-(xx) indexes created daily. If I apply in console: POST syslog-ng\*/\_update\_by\_query?pipeline=mypipeline I can see all my indexes get updated and s… --- ## [Connection logs in Azure from Azure Filebeat Module](https://discuss.elastic.co/t/connection-logs-in-azure-from-azure-filebeat-module/276306)
**Author:** [@Doodle](https://discuss.elastic.co/u/Doodle)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 7:31pm UTC](https://discuss.elastic.co/t/connection-logs-in-azure-from-azure-filebeat-module/276306 "2021-06-17T19:31:43Z")
Hello, I would want make a dashboard where I want to see all my connection logs from my Azure Filebeat module to Elastic. Sort of a granularity for my SaaS. Because right now I can only see the activity logs as a bulk, … --- ## [Payload content length greater than maximum allowed: 1048576](https://discuss.elastic.co/t/payload-content-length-greater-than-maximum-allowed-1048576/276303)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 1\ **Last updated:** [June 18, 2021, 2:46am UTC](https://discuss.elastic.co/t/payload-content-length-greater-than-maximum-allowed-1048576/276303 "2021-06-18T02:46:52Z")
Hi, I am working on log data(present on client machine) to monitor on Kibana server(present on differnt machine). I started with setup and installation of Filebeat on the client machine and enabled logstash elasticserac… --- ## [How to sort fields used as terms?](https://discuss.elastic.co/t/how-to-sort-fields-used-as-terms/276325)
**Author:** [@Lucas\_Boswell](https://discuss.elastic.co/u/Lucas_Boswell)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 11:42pm UTC](https://discuss.elastic.co/t/how-to-sort-fields-used-as-terms/276325 "2021-06-17T23:42:53Z")
Hello there, I am attempting to understand the sorting/bucket\_sort functionality a bit better. Below is a simple query that groups by a productId, gathers some additional info related to productId, and then calculates a… --- ## [Workaround for search query issue with Lucene multiple OR](https://discuss.elastic.co/t/workaround-for-search-query-issue-with-lucene-multiple-or/276323)
**Author:** [@zkirill](https://discuss.elastic.co/u/zkirill)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 11:24pm UTC](https://discuss.elastic.co/t/workaround-for-search-query-issue-with-lucene-multiple-or/276323 "2021-06-17T23:24:07Z")
In reference to the original post by @sikeeoh (Search Query with Lucene Query issue) We were able to find a workaround. I'm not sure if it accomplishes the same result but it seems to be working. "ten" OR ("teen" OR ("… --- ## [Logstash is losing connection to Elastic search](https://discuss.elastic.co/t/logstash-is-losing-connection-to-elastic-search/276319)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 10:26pm UTC](https://discuss.elastic.co/t/logstash-is-losing-connection-to-elastic-search/276319 "2021-06-17T22:26:35Z")
Hi, My logstash is disconnecting to elasticsearch after 20 mins, elasticsearch is running and no error. Here is the logs I have: \[WARN \]\[logstash.outputs.elasticsearch\] Marking url as dead. Last error: \[LogStash::Outp… --- ## [termsQuery no longer uses XContentWriters](https://discuss.elastic.co/t/termsquery-no-longer-uses-xcontentwriters/276316)
**Author:** [@Lars\_Benedetto](https://discuss.elastic.co/u/Lars_Benedetto)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 9:15pm UTC](https://discuss.elastic.co/t/termsquery-no-longer-uses-xcontentwriters/276316 "2021-06-17T21:15:39Z")
Between 7.9.3 and 7.12.1 it seems the way that arguments to termsQuery() are serialized have changed. In 7.9.3 it used my XContentBuilderExtension to convert my classes to strings that could be understood by elasticsearc… --- ## [Filebeat conditional hint default config](https://discuss.elastic.co/t/filebeat-conditional-hint-default-config/275668)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 8:29pm UTC](https://discuss.elastic.co/t/filebeat-conditional-hint-default-config/275668 "2021-06-17T20:29:16Z")
Hi, I have following use case: I am using hint based auto discover feature and I want to provide more than one default config based on for example kubernetes.namespace.name. Semantically: "If namespace = X apply defau… --- ## [Kibana - metric with top hits based on string](https://discuss.elastic.co/t/kibana-metric-with-top-hits-based-on-string/275738)
**Author:** [@kelvins](https://discuss.elastic.co/u/kelvins)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 8:08pm UTC](https://discuss.elastic.co/t/kibana-metric-with-top-hits-based-on-string/275738 "2021-06-17T20:08:01Z")
Hello - I have been hunting around, and I think I cannot actually do what it is I want to do, but am wanting to confirm my suspicions. The plan is to read the data from a log, to see the progress of users downloading fi… --- ## [Help changing y axis on kibana lenses](https://discuss.elastic.co/t/help-changing-y-axis-on-kibana-lenses/276196)
**Author:** [@Jason2073](https://discuss.elastic.co/u/Jason2073)\ **Replies:** 8\ **Last updated:** [June 17, 2021, 8:00pm UTC](https://discuss.elastic.co/t/help-changing-y-axis-on-kibana-lenses/276196 "2021-06-17T20:00:43Z")
I can't seem to use any variable other than Records, and meta fields for the Y axis of a line or area graph. I am struggling to find a guide on whats wrong or other people with a similar issue. Ideally I want the y ax… --- ## [How to dispay hostname and host ip on my elastic search output?](https://discuss.elastic.co/t/how-to-dispay-hostname-and-host-ip-on-my-elastic-search-output/275928)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 7:49pm UTC](https://discuss.elastic.co/t/how-to-dispay-hostname-and-host-ip-on-my-elastic-search-output/275928 "2021-06-17T19:49:14Z")
Hi, Can help me please extract the host name from the message output (devname) in elasticsearch. In my current config on the host portion only ip is displayed. Current config: input { syslog { port =\> 5000 host =\> … --- ## [FATAL Error: \[config validation of \[xpack.security\].http\]: definition for this key is missing](https://discuss.elastic.co/t/fatal-error-config-validation-of-xpack-security-http-definition-for-this-key-is-missing/275887)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 7:37pm UTC](https://discuss.elastic.co/t/fatal-error-config-validation-of-xpack-security-http-definition-for-this-key-is-missing/275887 "2021-06-17T19:37:20Z")
Hi, I follow Set up basic security for the Elastic Stack plus secured HTTPS traffic | Elasticsearch Guide \[7.13\] | Elastic and am stuck at Set up basic security for the Elastic Stack plus secured HTTPS traffic | Elastic… --- ## [Azure Filebeat Module - 412 error](https://discuss.elastic.co/t/azure-filebeat-module-412-error/276305)
**Author:** [@Doodle](https://discuss.elastic.co/u/Doodle)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 7:28pm UTC](https://discuss.elastic.co/t/azure-filebeat-module-412-error/276305 "2021-06-17T19:28:03Z")
Hi, I recently used the filebeat module from Azure and it seems that I receive the logs extremely hard. They are delayed and when they finally come, they come in a bulk. Do you know why this is happening? As an analyst … --- ## [Visualizing Average with Removing Outliers](https://discuss.elastic.co/t/visualizing-average-with-removing-outliers/276184)
**Author:** [@JR42](https://discuss.elastic.co/u/JR42)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 7:09pm UTC](https://discuss.elastic.co/t/visualizing-average-with-removing-outliers/276184 "2021-06-17T19:09:24Z")
Hey all, looking to get some help on a topic that has had me stumped. I am currently charting the average compile times (which the compile time is a scripted field on the index pattern), bucketed by month using a date h… --- ## [Kibana essql query date diff](https://discuss.elastic.co/t/kibana-essql-query-date-diff/271483)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 21\ **Last updated:** [June 17, 2021, 3:07pm UTC](https://discuss.elastic.co/t/kibana-essql-query-date-diff/271483 "2021-06-17T15:07:43Z")
Hi, I have a series of such data in Kibana: "deviceID" "date" 35001 27-04-21 13:20:00 35002 27-04-21 15:21:00 35001 27-04-21 18:22:00 35002 27-04… --- ## [Elastic solution on multiple vlan network](https://discuss.elastic.co/t/elastic-solution-on-multiple-vlan-network/276283)
**Author:** [@Polo](https://discuss.elastic.co/u/Polo)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 3:05pm UTC](https://discuss.elastic.co/t/elastic-solution-on-multiple-vlan-network/276283 "2021-06-17T15:05:22Z")
Hi all, i would like to deploy elastic solution, search, beats... in a network with multiple vlan. My network is a aggregation of many customer newtwork, each on different vlan and only accessible via dedicated "jump ho… --- ## [Logstash ElasticSearch Output not using special characters (!)](https://discuss.elastic.co/t/logstash-elasticsearch-output-not-using-special-characters/276282)
**Author:** [@Mahdj](https://discuss.elastic.co/u/Mahdj)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 3:01pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-not-using-special-characters/276282 "2021-06-17T15:01:45Z")
Hello everyone, I have my logstash and want to connect to my ElasticSearch instance with OpenDistro installed. I've created an user logstash with password "logstash!" but logstash have an error saying "Got response cod… --- ## [Http output plugin is not working in logstash, Please help](https://discuss.elastic.co/t/http-output-plugin-is-not-working-in-logstash-please-help/275889)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 7\ **Last updated:** [June 17, 2021, 2:53pm UTC](https://discuss.elastic.co/t/http-output-plugin-is-not-working-in-logstash-please-help/275889 "2021-06-17T14:53:17Z")
Hi, I am trying to send json message to kibana api using http plugin, I found the below error, Please help and appreciated. \[2021-06-14T14:45:26,361\]\[ERROR\]\[logstash.outputs.http \] \[HTTP Output Failure\] Encountered n… --- ## [Problem with "Last Value"](https://discuss.elastic.co/t/problem-with-last-value/276268)
**Author:** [@LL\_FED](https://discuss.elastic.co/u/LL_FED)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 2:25pm UTC](https://discuss.elastic.co/t/problem-with-last-value/276268 "2021-06-17T14:25:56Z")
Hi, for example: i want to show the last value of my Data: State in a metric aggregation. I receive the documents in Kibana like this: Doc 1: { "timestamp": ..., "state": 1 } Doc2: { "timestamp": ..., "room\_t… --- ## [Kibana KQL: how to search for fields with special characters (eg $)](https://discuss.elastic.co/t/kibana-kql-how-to-search-for-fields-with-special-characters-eg/274598)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 2:16pm UTC](https://discuss.elastic.co/t/kibana-kql-how-to-search-for-fields-with-special-characters-eg/274598 "2021-06-17T14:16:28Z")
I've a search to look for Account names ending with $ (as they are computer generated names). Below is my simple search in KQL, but it provides both type of accounts (i.e with and without $ at the end). Escaping $ brings… --- ## [Kibana not started after activated xpack.security](https://discuss.elastic.co/t/kibana-not-started-after-activated-xpack-security/275710)
**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\ **Replies:** 6\ **Last updated:** [June 17, 2021, 2:12pm UTC](https://discuss.elastic.co/t/kibana-not-started-after-activated-xpack-security/275710 "2021-06-17T14:12:52Z")
After activated xpack.security in elastic.yml kibana crash Logs: {"type":"log","@timestamp":"2021-06-11T21:28:44+03:00","tags":\["debug","plugins-discovery"\],"pid":7360,"message":"Successfully discovered plugin \\"consol… --- ## [Entities architecture with custom fields and Upsert script issue](https://discuss.elastic.co/t/entities-architecture-with-custom-fields-and-upsert-script-issue/276267)
**Author:** [@Spyros\_Giannopoulos](https://discuss.elastic.co/u/Spyros_Giannopoulos)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 2:08pm UTC](https://discuss.elastic.co/t/entities-architecture-with-custom-fields-and-upsert-script-issue/276267 "2021-06-17T14:08:15Z")
Hello, I'm building an application in ES that needs to contain information about lists of members. The members in a list have a name, surname, etc.. but also contain some custom fields which are different for each list.… --- ## [Logstash Helm deploy pattern error](https://discuss.elastic.co/t/logstash-helm-deploy-pattern-error/276276)
**Author:** [@emergrin](https://discuss.elastic.co/u/emergrin)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 2:04pm UTC](https://discuss.elastic.co/t/logstash-helm-deploy-pattern-error/276276 "2021-06-17T14:04:21Z")
Hi all, I have some problems with my value.yaml from my helm deploy of logstash 7.9 and I need some help. This it's an example of my file: logstashPipeline: logstash.conf: | input { beats { port =\> … --- ## [Logstash file input performance](https://discuss.elastic.co/t/logstash-file-input-performance/276050)
**Author:** [@seadub](https://discuss.elastic.co/u/seadub)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 2:03pm UTC](https://discuss.elastic.co/t/logstash-file-input-performance/276050 "2021-06-17T14:03:55Z")
Continuing the discussion from Tuning to handle extreme initial ingestion conditions (with logstash): @Christian\_Dahlqvist - I know I'm resurrecting an old thread here but I'd love to confirm a point you'd raised. I hop… --- ## [Filebeat with event-hub-kafka output, pulish fails: client has run out of available brokers to talk to](https://discuss.elastic.co/t/filebeat-with-event-hub-kafka-output-pulish-fails-client-has-run-out-of-available-brokers-to-talk-to/276263)
**Author:** [@Klaus\_zhong](https://discuss.elastic.co/u/Klaus_zhong)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 11:54am UTC](https://discuss.elastic.co/t/filebeat-with-event-hub-kafka-output-pulish-fails-client-has-run-out-of-available-brokers-to-talk-to/276263 "2021-06-17T11:54:34Z")
Description I am using Filebeat to stream my log file to azure event hub and with the configuration as kafka output, the connection to host ip can be established (read from the log below), but when it try to publish topi… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1359) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1361)