# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1386

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1387

---

## [Kibana custom plugins packaging](https://discuss.elastic.co/t/kibana-custom-plugins-packaging/274761)

<div class="topic-metadata">

**Author:** [@pchakour](https://discuss.elastic.co/u/pchakour)\
**Replies:** 0\
**Last updated:** [June 2, 2021, 1:52pm UTC](https://discuss.elastic.co/t/kibana-custom-plugins-packaging/274761 "2021-06-02T13:52:03Z")

</div>

Hello :slight\_smile: I have a question about plugins packaging, hope someone can help me. I'm creating some custom plugins for Kibana and I want to create only one distribuable plugin to install all my plugins in once. …

---

## [Different version between Elasticsearch and Logstash](https://discuss.elastic.co/t/different-version-between-elasticsearch-and-logstash/274567)

<div class="topic-metadata">

**Author:** [@111475](https://discuss.elastic.co/u/111475)\
**Replies:** 5\
**Last updated:** [June 2, 2021, 1:51pm UTC](https://discuss.elastic.co/t/different-version-between-elasticsearch-and-logstash/274567 "2021-06-02T13:51:10Z")

</div>

Is it okay to run Logstash with version(7.13.0) different from our Elasticsearch version(7.10.2)?

---

## [Configuration file](https://discuss.elastic.co/t/configuration-file/274758)

<div class="topic-metadata">

**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\
**Replies:** 0\
**Last updated:** [June 2, 2021, 1:40pm UTC](https://discuss.elastic.co/t/configuration-file/274758 "2021-06-02T13:40:55Z")

</div>

Hello Expert, I am having csv file with more than 5 tables in it... i would like extract data from 2 of them. but column names are different and data structure is different..... and one more thing that i would like to a…

---

## [Kibana Navbar logo customization](https://discuss.elastic.co/t/kibana-navbar-logo-customization/274447)

<div class="topic-metadata">

**Author:** [@Long\_Nguyen](https://discuss.elastic.co/u/Long_Nguyen)\
**Replies:** 1\
**Last updated:** [June 2, 2021, 1:27pm UTC](https://discuss.elastic.co/t/kibana-navbar-logo-customization/274447 "2021-06-02T13:27:46Z")

</div>

I was trying to change the Navbar logo of Kibana using this guide Custom Logo Kibana 7.10.0 (guide) I'm wondering if my logo is larger, is there any way to modify the size of the flex box in order to show my logo more c…

---

## [Dynamic value in index mappings override dynamic value setted in dynamic template \[ES 7.6.2\]](https://discuss.elastic.co/t/dynamic-value-in-index-mappings-override-dynamic-value-setted-in-dynamic-template-es-7-6-2/274752)

<div class="topic-metadata">

**Author:** [@Saief](https://discuss.elastic.co/u/Saief)\
**Replies:** 0\
**Last updated:** [June 2, 2021, 12:46pm UTC](https://discuss.elastic.co/t/dynamic-value-in-index-mappings-override-dynamic-value-setted-in-dynamic-template-es-7-6-2/274752 "2021-06-02T12:46:13Z")

</div>

Hello, I created a dynamic template to avoid adding specific new fields that have object type ( that match a particular pattern ) in the index mapping ( without touching the \_source ). This is the body of my query : \> …

---

## [Kibana textbox instead of dropdown](https://discuss.elastic.co/t/kibana-textbox-instead-of-dropdown/274751)

<div class="topic-metadata">

**Author:** [@Adrian3](https://discuss.elastic.co/u/Adrian3)\
**Replies:** 1\
**Last updated:** [June 2, 2021, 12:44pm UTC](https://discuss.elastic.co/t/kibana-textbox-instead-of-dropdown/274751 "2021-06-02T12:44:31Z")

</div>

To create a new Kibana visualization I select "Controls" from the "New Visualization" section: Viewing the "Controls" section: An option does not appear to exist to add a "text field" , all field types are dropdo…

---

## [Http\_pollar input is not working with the certificate](https://discuss.elastic.co/t/http-pollar-input-is-not-working-with-the-certificate/274748)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 0\
**Last updated:** [June 2, 2021, 12:26pm UTC](https://discuss.elastic.co/t/http-pollar-input-is-not-working-with-the-certificate/274748 "2021-06-02T12:26:43Z")

</div>

Hi We are using http\_poller to query elastic in logstash input with the selfsigned certificate. but not receieving any result and not prompting any error in the logstash. tls is enabled at elastic. when i run the same qu…

---

## [How to connect multiple pipelines within the same Logstash instance running inside a docker container](https://discuss.elastic.co/t/how-to-connect-multiple-pipelines-within-the-same-logstash-instance-running-inside-a-docker-container/274446)

<div class="topic-metadata">

**Author:** [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\
**Replies:** 5\
**Last updated:** [June 2, 2021, 12:25pm UTC](https://discuss.elastic.co/t/how-to-connect-multiple-pipelines-within-the-same-logstash-instance-running-inside-a-docker-container/274446 "2021-06-02T12:25:21Z")

</div>

Currently we have a data stream in elasticsearch, lets call it app\_stream in which we are ingesting log messages from an application XMLTransformer through FileBeats(port=5044) installed on the server where the applicati…

---

## [Merge data on field bases](https://discuss.elastic.co/t/merge-data-on-field-bases/274745)

<div class="topic-metadata">

**Author:** [@Abdoul\_Kande](https://discuss.elastic.co/u/Abdoul_Kande)\
**Replies:** 1\
**Last updated:** [June 2, 2021, 12:12pm UTC](https://discuss.elastic.co/t/merge-data-on-field-bases/274745 "2021-06-02T12:12:25Z")

</div>

Hello, I would like to do the join of two indexes based on an id column. can i have an example ?

---

## [\_template vs \_index\_template](https://discuss.elastic.co/t/template-vs-index-template/274730)

<div class="topic-metadata">

**Author:** [@Jordi\_Cabre1](https://discuss.elastic.co/u/Jordi_Cabre1)\
**Replies:** 1\
**Last updated:** [June 2, 2021, 12:10pm UTC](https://discuss.elastic.co/t/template-vs-index-template/274730 "2021-06-02T12:10:09Z")

</div>

I've just realized that ES has a \_/\_template and a \_/\_index\_template. What are they for? I was using code: PutIndexTemplateRequest ngramTemplate = new PutIndexTemplateRequest("ngram-template") .patterns(Arrays.asList…

---

## [Query for email address within a text field](https://discuss.elastic.co/t/query-for-email-address-within-a-text-field/274742)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 0\
**Last updated:** [June 2, 2021, 11:39am UTC](https://discuss.elastic.co/t/query-for-email-address-within-a-text-field/274742 "2021-06-02T11:39:39Z")

</div>

Hello, I'm trying to query my index that contains text field with an email address. As of now, if query for a specific domain (eg gmail), like below and it gives me the results: GET index\*/\_search { "query": { "…

---

## [Security index is unavailable](https://discuss.elastic.co/t/security-index-is-unavailable/274731)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 2\
**Last updated:** [June 2, 2021, 10:42am UTC](https://discuss.elastic.co/t/security-index-is-unavailable/274731 "2021-06-02T10:42:51Z")

</div>

Hi there, I have installed a single node node on linux (role: monitoring node) (v. 7.8.1 // elastisearch + Kibana + redis) If in the elasticsearch.yml I give this: xpack.security.enabled: false then for example a cur…

---

## [Metricbeat in customized index](https://discuss.elastic.co/t/metricbeat-in-customized-index/274586)

<div class="topic-metadata">

**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\
**Replies:** 4\
**Last updated:** [June 2, 2021, 10:38am UTC](https://discuss.elastic.co/t/metricbeat-in-customized-index/274586 "2021-06-02T10:38:56Z")

</div>

Am planning to use metricbeat via logstash, if i do that will mapping can be done automatically orelse i have to grok it? can i push to customized index and use the default metricbeat index

---

## [Index Policies Error](https://discuss.elastic.co/t/index-policies-error/274722)

<div class="topic-metadata">

**Author:** [@Martin\_perez](https://discuss.elastic.co/u/Martin_perez)\
**Replies:** 4\
**Last updated:** [June 2, 2021, 10:31am UTC](https://discuss.elastic.co/t/index-policies-error/274722 "2021-06-02T10:31:43Z")

</div>

Hi, I have a problem with ILM, index life management, since I have followed the steps that appear in this guide Configure a lifecycle policy | Elasticsearch Guide \[master\] | Elastic My current index pattern is called fi…

---

## [FileBeat error](https://discuss.elastic.co/t/filebeat-error/274709)

<div class="topic-metadata">

**Author:** [@Michael\_Dylan\_McAloo](https://discuss.elastic.co/u/Michael_Dylan_McAloo)\
**Replies:** 1\
**Last updated:** [June 2, 2021, 10:06am UTC](https://discuss.elastic.co/t/filebeat-error/274709 "2021-06-02T10:06:08Z")

</div>

I'm using FileBeat for dissect a Snort Alert but I have this message error when I try it. Error message:

---

## [Supports Canvas Linechart the feature seriesAgg and Group this by Terms](https://discuss.elastic.co/t/supports-canvas-linechart-the-feature-seriesagg-and-group-this-by-terms/274650)

<div class="topic-metadata">

**Author:** [@miri](https://discuss.elastic.co/u/miri)\
**Replies:** 2\
**Last updated:** [June 2, 2021, 9:28am UTC](https://discuss.elastic.co/t/supports-canvas-linechart-the-feature-seriesagg-and-group-this-by-terms/274650 "2021-06-02T09:28:29Z")

</div>

Is it possible to use in Canvas Linechart the Aggregation seriesAgg and Group this by Terms like available in normal TSVB Visualisation? Example: There are some servers sending status information to elasticsearch: …

---

## [Best way to backup Kibana Dashboards](https://discuss.elastic.co/t/best-way-to-backup-kibana-dashboards/274718)

<div class="topic-metadata">

**Author:** [@kibanaquery](https://discuss.elastic.co/u/kibanaquery)\
**Replies:** 2\
**Last updated:** [June 2, 2021, 9:27am UTC](https://discuss.elastic.co/t/best-way-to-backup-kibana-dashboards/274718 "2021-06-02T09:27:44Z")

</div>

Hi, Just wondered what the current suggestion is to back up Dashboards, the indices seem straightforward but they dont include Dashboards? I'm looking for an automated way to get them backed up rather than anything too…

---

## [Unable to bind Syslog port](https://discuss.elastic.co/t/unable-to-bind-syslog-port/274728)

<div class="topic-metadata">

**Author:** [@Sputnick](https://discuss.elastic.co/u/Sputnick)\
**Replies:** 0\
**Last updated:** [June 2, 2021, 9:23am UTC](https://discuss.elastic.co/t/unable-to-bind-syslog-port/274728 "2021-06-02T09:23:23Z")

</div>

Hello, I am on Ubuntu 20.04 running Logstash as a collector for syslog messages from the rest of my network. I have configured java with elevated privileges but Logstash is unable to bind UDP port 514. This is a simila…

---

## [Error in Kibana 7.12](https://discuss.elastic.co/t/error-in-kibana-7-12/274605)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 12\
**Last updated:** [June 2, 2021, 9:18am UTC](https://discuss.elastic.co/t/error-in-kibana-7-12/274605 "2021-06-02T09:18:22Z")

</div>

Hi all! I've a problem on kibana that is running on my local machine.I would like to create a simple dashboard with data but in order to obtian the single data value in time I use Altair and jupyter combination in order …

---

## [Kibana Saved objects](https://discuss.elastic.co/t/kibana-saved-objects/274717)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 1\
**Last updated:** [June 2, 2021, 8:53am UTC](https://discuss.elastic.co/t/kibana-saved-objects/274717 "2021-06-02T08:53:24Z")

</div>

Hi Currently Im using below to export dashbaords curl -X POST "localhost:5601/api/saved\_objects/\_export" -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d' { "type": "dashboard" }' \> /tmp/dashboard.ndjson 2\>…

---

## [Kibana visualise](https://discuss.elastic.co/t/kibana-visualise/274529)

<div class="topic-metadata">

**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\
**Replies:** 3\
**Last updated:** [June 2, 2021, 8:43am UTC](https://discuss.elastic.co/t/kibana-visualise/274529 "2021-06-02T08:43:34Z")

</div>

Hello, I am trying to create a visualization to represent the evolution of a field x in time so X axes timestamp and Y axes the field , but can't find how to represent it, for y axes there is only aggregations that ca…

---

## [Kibana Speedometer](https://discuss.elastic.co/t/kibana-speedometer/274317)

<div class="topic-metadata">

**Author:** [@Rachitha](https://discuss.elastic.co/u/Rachitha)\
**Replies:** 5\
**Last updated:** [June 2, 2021, 8:29am UTC](https://discuss.elastic.co/t/kibana-speedometer/274317 "2021-06-02T08:29:27Z")

</div>

Can we have a needle inside the Gauge pointing to the value? Is there any way to add the needle in the gauge. I am using the latest version now (i.e, Kibana 7.12.1)

---

## [Kibana & Cloudfront conversion tracking](https://discuss.elastic.co/t/kibana-cloudfront-conversion-tracking/274492)

<div class="topic-metadata">

**Author:** [@GCuccureddu](https://discuss.elastic.co/u/GCuccureddu)\
**Replies:** 2\
**Last updated:** [June 2, 2021, 7:47am UTC](https://discuss.elastic.co/t/kibana-cloudfront-conversion-tracking/274492 "2021-06-02T07:47:01Z")

</div>

Hi community, I am new to Kibana and my perspective is from business/marketing expertise. We are using AWS Cloudfront website data and I would like to understand if Kibana can bring insight to typical funnels (how peop…

---

## [Heatmap sorting working in Visualisation Editor but not in Dashboard](https://discuss.elastic.co/t/heatmap-sorting-working-in-visualisation-editor-but-not-in-dashboard/273814)

<div class="topic-metadata">

**Author:** [@mkostros](https://discuss.elastic.co/u/mkostros)\
**Replies:** 11\
**Last updated:** [June 2, 2021, 7:37am UTC](https://discuss.elastic.co/t/heatmap-sorting-working-in-visualisation-editor-but-not-in-dashboard/273814 "2021-06-02T07:37:25Z")

</div>

Hello We want to create event dashboard, which would shown, how many log events came in Day of Week and Hour of day. We have created dynamic fields for DayOfWeek and HourOfDay (number format). Which are then used in he…

---

## [Error initializing beat: error loading config file: yaml: line 19: did not find expected key](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-yaml-line-19-did-not-find-expected-key/274706)

<div class="topic-metadata">

**Author:** [@adarshr4](https://discuss.elastic.co/u/adarshr4)\
**Replies:** 0\
**Last updated:** [June 2, 2021, 7:33am UTC](https://discuss.elastic.co/t/error-initializing-beat-error-loading-config-file-yaml-line-19-did-not-find-expected-key/274706 "2021-06-02T07:33:11Z")

</div>

hi all, when am trying to sudo metricbeat modules enable elasticsearch-xpack it will triggered the following alert. Error initializing beat: error loading config file: yaml: line 19: did not find expected key please re…

---

## [Can I register snapshot repo without path.repo property in elasticsearch.yml?](https://discuss.elastic.co/t/can-i-register-snapshot-repo-without-path-repo-property-in-elasticsearch-yml/274427)

<div class="topic-metadata">

**Author:** [@Prabaharan\_Kathiresa](https://discuss.elastic.co/u/Prabaharan_Kathiresa)\
**Replies:** 3\
**Last updated:** [June 2, 2021, 7:24am UTC](https://discuss.elastic.co/t/can-i-register-snapshot-repo-without-path-repo-property-in-elasticsearch-yml/274427 "2021-06-02T07:24:08Z")

</div>

Hi Team, We are using elasticsearch 6.8.5 version in production with 3 Master and 8 data nodes. There is no path.repo property present in the production. I can't update elasticsearch.yml and restart nodes in production. …

---

## [TSVB - visualizing the difference of two datasets](https://discuss.elastic.co/t/tsvb-visualizing-the-difference-of-two-datasets/273922)

<div class="topic-metadata">

**Author:** [@LL\_FED](https://discuss.elastic.co/u/LL_FED)\
**Replies:** 1\
**Last updated:** [June 2, 2021, 7:21am UTC](https://discuss.elastic.co/t/tsvb-visualizing-the-difference-of-two-datasets/273922 "2021-06-02T07:21:02Z")

</div>

Hello Elastic-Community, I get data like this: Document 1: Data.name: Total pieces, Data.value: 60, timestamp: 12:00 Document 2: Data.name: Good pieces, Data.value: 58, timestamp: 12:00 Now I want to visualize …

---

## [Unable to complete saved object migrations for the \[.kibana\] index. RequestAbortedError: The content length (823769731) is bigger than the maximum allowed string](https://discuss.elastic.co/t/unable-to-complete-saved-object-migrations-for-the-kibana-index-requestabortederror-the-content-length-823769731-is-bigger-than-the-maximum-allowed-string/274408)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 3\
**Last updated:** [June 2, 2021, 6:47am UTC](https://discuss.elastic.co/t/unable-to-complete-saved-object-migrations-for-the-kibana-index-requestabortederror-the-content-length-823769731-is-bigger-than-the-maximum-allowed-string/274408 "2021-06-02T06:47:34Z")

</div>

kibana | {"type":"log","@timestamp":"2021-05-29T18:16:24+00:00","tags":\["info","savedobjects-service"\],"pid":6,"message":"\[.kibana\_task\_manager\] Migration completed after 9330ms"} kibana | {"type":"lo…

---

## [Filebeat setting for removing harvested files from registry file?](https://discuss.elastic.co/t/filebeat-setting-for-removing-harvested-files-from-registry-file/274679)

<div class="topic-metadata">

**Author:** [@Resington\_R](https://discuss.elastic.co/u/Resington_R)\
**Replies:** 0\
**Last updated:** [June 1, 2021, 7:17pm UTC](https://discuss.elastic.co/t/filebeat-setting-for-removing-harvested-files-from-registry-file/274679 "2021-06-01T19:17:38Z")

</div>

I am a newbie, I am running Filebeat in my application server, to transfer log files to logstash server. My Application server creates new log files once in every 3 minutes 24x7 (i.e., 480 files per day). These files are…

---

## [ILM Issue](https://discuss.elastic.co/t/ilm-issue/274699)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 0\
**Last updated:** [June 2, 2021, 5:22am UTC](https://discuss.elastic.co/t/ilm-issue/274699 "2021-06-02T05:22:16Z")

</div>

Hi I have defined a lifecycle policy and applied to an index template according to the bellow page: But unfortunately got the bellow error: Where is the problem? Thanks in advanve

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1385)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1387)
