# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1410 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1411 --- ## [Can we send a query with ignorable field to Elasticsearch?](https://discuss.elastic.co/t/can-we-send-a-query-with-ignorable-field-to-elasticsearch/272975)
**Author:** [@Anonymous\_Soul](https://discuss.elastic.co/u/Anonymous_Soul)\ **Replies:** 4\ **Last updated:** [May 19, 2021, 2:18am UTC](https://discuss.elastic.co/t/can-we-send-a-query-with-ignorable-field-to-elasticsearch/272975 "2021-05-19T02:18:44Z")
Hi Team, Suppose we are a team with 100 other teams querying our cluster, either through Kibana or Elasticsearch APIs Can we identify those with a special field like a uniqueID specific to one team but those fields are… --- ## [How can transfer Fail2ban logs going to Kibana](https://discuss.elastic.co/t/how-can-transfer-fail2ban-logs-going-to-kibana/273252)
**Author:** [@ememman29](https://discuss.elastic.co/u/ememman29)\ **Replies:** 2\ **Last updated:** [May 19, 2021, 2:14am UTC](https://discuss.elastic.co/t/how-can-transfer-fail2ban-logs-going-to-kibana/273252 "2021-05-19T02:14:25Z")
Hello i have a problem on how i going to transfer my fail2ban logs going to kibana visualization i already installed the filebeat log shipper on my server where fail2ban is installed but the problem is only the message i… --- ## [Problem upgrading to 7.12.1](https://discuss.elastic.co/t/problem-upgrading-to-7-12-1/273353)
**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\ **Replies:** 4\ **Last updated:** [May 19, 2021, 2:14am UTC](https://discuss.elastic.co/t/problem-upgrading-to-7-12-1/273353 "2021-05-19T02:14:24Z")
Hi, I'm upgrading a single node, dev instance of elasticsearch running 6.4.2 to 7.12.1 as the first step in getting ready to upgrade our prod cluster. I was able to upgrade from 6.4.2 -\> 6.8.15 without issue but on upg… --- ## [Visualisation: Term, field not in list](https://discuss.elastic.co/t/visualisation-term-field-not-in-list/273116)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 4\ **Last updated:** [May 19, 2021, 1:43am UTC](https://discuss.elastic.co/t/visualisation-term-field-not-in-list/273116 "2021-05-19T01:43:09Z")
I am trying to make a standard time on x axis stacked bar chart but when I try and split the bar the on a term the field I want to use is not listed. here is a sample raw record (trimmed for brevity). Important fields… --- ## [Add read-only user for Kibana Canvas](https://discuss.elastic.co/t/add-read-only-user-for-kibana-canvas/273235)
**Author:** [@saintjohn](https://discuss.elastic.co/u/saintjohn)\ **Replies:** 3\ **Last updated:** [May 19, 2021, 1:40am UTC](https://discuss.elastic.co/t/add-read-only-user-for-kibana-canvas/273235 "2021-05-19T01:40:41Z")
Hi Experts, I'm trying to add an user which is granted only for read-only right to Kibana Canvas for security purpose. I'm using Kibana as well as Elastic Search v7.11.1 with Basic License. Based on the instruction, I… --- ## [ES Index Insert-Update Issues](https://discuss.elastic.co/t/es-index-insert-update-issues/272989)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 2\ **Last updated:** [May 19, 2021, 1:30am UTC](https://discuss.elastic.co/t/es-index-insert-update-issues/272989 "2021-05-19T01:30:05Z")
We have an index which updated every 5th minutes and at that 5th min the same index is updated six times for different sets of columns.We are using upsert to update and insert, if the value is not present. We also have \_… --- ## [Regarding the security of the ELK stack docker images](https://discuss.elastic.co/t/regarding-the-security-of-the-elk-stack-docker-images/272895)
**Author:** [@signum](https://discuss.elastic.co/u/signum)\ **Replies:** 2\ **Last updated:** [May 19, 2021, 1:14am UTC](https://discuss.elastic.co/t/regarding-the-security-of-the-elk-stack-docker-images/272895 "2021-05-19T01:14:06Z")
Hi, I am trying out the docker version of the ELK stack, and have noted that when I scan it using trivy / "docker scan", it is showing some OS related vulnerabilities for libraries such curl etc. Can I understand if thes… --- ## [Specifying endpoint for performing reading/writing operations](https://discuss.elastic.co/t/specifying-endpoint-for-performing-reading-writing-operations/273304)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 1\ **Last updated:** [May 19, 2021, 1:13am UTC](https://discuss.elastic.co/t/specifying-endpoint-for-performing-reading-writing-operations/273304 "2021-05-19T01:13:07Z")
Assuming we are trying to perform a read and/or a write operation on an es cluster reachable at https://my-es-cluster Assuming this cluster is deployed on kubernetes and we have a way to directly reach a master service… --- ## [Kibana Watcher - Using it to calculate a percentage of two result values](https://discuss.elastic.co/t/kibana-watcher-using-it-to-calculate-a-percentage-of-two-result-values/273305)
**Author:** [@Zooka94](https://discuss.elastic.co/u/Zooka94)\ **Replies:** 0\ **Last updated:** [May 18, 2021, 2:45pm UTC](https://discuss.elastic.co/t/kibana-watcher-using-it-to-calculate-a-percentage-of-two-result-values/273305 "2021-05-18T14:45:19Z")
I am trying to use a watcher to parse email event data, we have a field that will state if the email delivery is successful/delayed/ failed. I want to know if it is possible to calculate the percentage of failed message… --- ## [A little confused about JAVA requirement to install ES 6.8.15 in a clean Ubuntu 18.04 server](https://discuss.elastic.co/t/a-little-confused-about-java-requirement-to-install-es-6-8-15-in-a-clean-ubuntu-18-04-server/273306)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 2\ **Last updated:** [May 19, 2021, 1:11am UTC](https://discuss.elastic.co/t/a-little-confused-about-java-requirement-to-install-es-6-8-15-in-a-clean-ubuntu-18-04-server/273306 "2021-05-19T01:11:45Z")
I'm about to install ES 6.8.15 on a CLEAN ubuntu 18.04 server. I know I need JAVA, the question is when i stood up a clean VM with Ubuntu 18.04, It DOES NOT have any JAVA installed at all. So I'm going to have to insta… --- ## [7.12 Kibana - pass URL in action to email/PagerDuty](https://discuss.elastic.co/t/7-12-kibana-pass-url-in-action-to-email-pagerduty/272514)
**Author:** [@tslattery](https://discuss.elastic.co/u/tslattery)\ **Replies:** 2\ **Last updated:** [May 18, 2021, 11:08pm UTC](https://discuss.elastic.co/t/7-12-kibana-pass-url-in-action-to-email-pagerduty/272514 "2021-05-18T23:08:34Z")
Is it possible to pass a URL in alert information from Kibana to an event management system (email or PagerDuty at this time)? Thanks! --- ## [Gauge vusualization](https://discuss.elastic.co/t/gauge-vusualization/272912)
**Author:** [@DivinLobo](https://discuss.elastic.co/u/DivinLobo)\ **Replies:** 3\ **Last updated:** [May 18, 2021, 10:12pm UTC](https://discuss.elastic.co/t/gauge-vusualization/272912 "2021-05-18T22:12:46Z")
I've recently started trying out Elasticsearch and Kibana and I am trying out the Gauge graph I am taking the average value of a field and set up the custom ranges like so. I would Like to Know if it is possible t… --- ## [Grok patterns with quotation marks](https://discuss.elastic.co/t/grok-patterns-with-quotation-marks/273003)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 17\ **Last updated:** [May 18, 2021, 10:01pm UTC](https://discuss.elastic.co/t/grok-patterns-with-quotation-marks/273003 "2021-05-18T22:01:48Z")
Good Evening, I'm trying to extrapolate some fields from the following log message: { "message": "Throw: Il prodotto estratto non è presente tra quelli del menu a tendina in fase di emissione della proposta", "level":… --- ## [ProblemChild Getting Started question](https://discuss.elastic.co/t/problemchild-getting-started-question/273338)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [May 18, 2021, 9:51pm UTC](https://discuss.elastic.co/t/problemchild-getting-started-question/273338 "2021-05-18T21:51:32Z")
Hello, Just read through ProblemChild: Detecting living-off-the-land attacks using the Elastic Stack | Elastic Blog which all seems super interesting. So.. Forgive me for my noobish questions.. But I was wondering how… --- ## [Showing image in markdown with api call](https://discuss.elastic.co/t/showing-image-in-markdown-with-api-call/272906)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 3\ **Last updated:** [May 18, 2021, 9:34pm UTC](https://discuss.elastic.co/t/showing-image-in-markdown-with-api-call/272906 "2021-05-18T21:34:41Z")
hi i am trying to show s3 images in Kibana markdown if i direct pass image URL like below , its showing image without any issue - !\[test\](imageurl) But i m using signed URL , for that i m passing API path in markdown … --- ## [Kibana Plugin Idea: Custom Alert Connector](https://discuss.elastic.co/t/kibana-plugin-idea-custom-alert-connector/272846)
**Author:** [@Thomas\_Vaudry-Read](https://discuss.elastic.co/u/Thomas_Vaudry-Read)\ **Replies:** 1\ **Last updated:** [May 18, 2021, 8:51pm UTC](https://discuss.elastic.co/t/kibana-plugin-idea-custom-alert-connector/272846 "2021-05-18T20:51:52Z")
Hi, I have been looking into alerting on Kibana, but only the internal connectors are available on the basic license. Is it possible to develop a custom connector for the alerting to action on a different endpoint? For… --- ## [How to fit data from unchangeable source into ECS?](https://discuss.elastic.co/t/how-to-fit-data-from-unchangeable-source-into-ecs/273126)
**Author:** [@TheGerd](https://discuss.elastic.co/u/TheGerd)\ **Replies:** 3\ **Last updated:** [May 18, 2021, 8:07pm UTC](https://discuss.elastic.co/t/how-to-fit-data-from-unchangeable-source-into-ecs/273126 "2021-05-18T20:07:27Z")
Hello. I am used to the very basic concepts of Elasticsearch but now facing an issue where I don't know how to proceed. I am indexing data in a fixed format and I am not able to change the format at the source. Now I wa… --- ## [Disabling controls in dashboard](https://discuss.elastic.co/t/disabling-controls-in-dashboard/273027)
**Author:** [@Alexandre.Bernier](https://discuss.elastic.co/u/Alexandre.Bernier)\ **Replies:** 4\ **Last updated:** [May 18, 2021, 5:15pm UTC](https://discuss.elastic.co/t/disabling-controls-in-dashboard/273027 "2021-05-18T17:15:23Z")
Hello there, I'm running the stack 7.10 and I would like to know if there is a way to disable a control in a dashboard? Since we can't pre-filter a control (issue #17301) to display a single value or exclude differents… --- ## [Grokparsefailure on logstash](https://discuss.elastic.co/t/grokparsefailure-on-logstash/273047)
**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\ **Replies:** 8\ **Last updated:** [May 18, 2021, 5:12pm UTC](https://discuss.elastic.co/t/grokparsefailure-on-logstash/273047 "2021-05-18T17:12:29Z")
Hi ES users, i'm trying to send a simple log using filebeat on to ES via logstash and i'm experiencing grokparsefailure errors on kibana. Can someone please assist on what type of grok filter needs to be used? Below is t… --- ## [Duplicate logstash-\*](https://discuss.elastic.co/t/duplicate-logstash/271474)
**Author:** [@Bency\_Mathew](https://discuss.elastic.co/u/Bency_Mathew)\ **Replies:** 2\ **Last updated:** [May 18, 2021, 4:27pm UTC](https://discuss.elastic.co/t/duplicate-logstash/271474 "2021-05-18T16:27:59Z")
f there are two pattern's with same name, say for example logstash- (deafult)\* logstash-\* field\_id shows up in logstash- (\* default ) FieldID shows up in logstash-\* (Once we delete the non-default index logstash-\* … --- ## [Notifications:banner](https://discuss.elastic.co/t/notifications-banner/273259)
**Author:** [@Bency\_Mathew](https://discuss.elastic.co/u/Bency_Mathew)\ **Replies:** 1\ **Last updated:** [May 18, 2021, 4:23pm UTC](https://discuss.elastic.co/t/notifications-banner/273259 "2021-05-18T16:23:09Z")
Adding notifications:banner to kibana.yml.j2 file fails notifications.banner: "Steps to raise a \[Wiki access request for Kibana \](Wiki URL) --- ## [Multi\_terms aggregation gives me an error](https://discuss.elastic.co/t/multi-terms-aggregation-gives-me-an-error/272328)
**Author:** [@pmsearcher](https://discuss.elastic.co/u/pmsearcher)\ **Replies:** 3\ **Last updated:** [May 18, 2021, 4:13pm UTC](https://discuss.elastic.co/t/multi-terms-aggregation-gives-me-an-error/272328 "2021-05-18T16:13:31Z")
Hello ! I'm trying to use ElasticSearch v. 7.11.1 on Windows 10. I don't know how to make multi\_terms aggregation work. This query: { "aggs": { "test\_agg": { "multi\_terms": { "terms": \[{ "… --- ## [Listen loop error: #\](https://discuss.elastic.co/t/listen-loop-error-ioerror-closed-stream/273314)
**Author:** [@Carlos\_Velasquez](https://discuss.elastic.co/u/Carlos_Velasquez)\ **Replies:** 0\ **Last updated:** [May 18, 2021, 3:49pm UTC](https://discuss.elastic.co/t/listen-loop-error-ioerror-closed-stream/273314 "2021-05-18T15:49:51Z")
Hi, When I start the logstash (manual invocation), I receive the folowing error. the version i'm using is 7.12.1 and Centos 8 Operating System: CentOS Linux 8 CPE OS Name: cpe:/o:centos:centos:8 K… --- ## [Sorting a percentile aggregation](https://discuss.elastic.co/t/sorting-a-percentile-aggregation/273298)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 0\ **Last updated:** [May 18, 2021, 1:58pm UTC](https://discuss.elastic.co/t/sorting-a-percentile-aggregation/273298 "2021-05-18T13:58:33Z")
Is it possible to sort a percentile aggregation? The query is: "size": 0, "query": { "bool": { "must": \[ { "range": { "dttm": { "gte": "now-24h", "… --- ## [Elasticsearch won't start with Ansible service module](https://discuss.elastic.co/t/elasticsearch-wont-start-with-ansible-service-module/273297)
**Author:** [@Ferencz](https://discuss.elastic.co/u/Ferencz)\ **Replies:** 0\ **Last updated:** [May 18, 2021, 1:51pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-with-ansible-service-module/273297 "2021-05-18T13:51:48Z")
Hi all, I'm using Ansible to install Elasticsearch and when I want to start the Elasticsearch with service module it won't start but when I execute "service elasticsearch start" manually it is working normally. Ansible… --- ## [Having problem getting syslog to show on Elasticsearch](https://discuss.elastic.co/t/having-problem-getting-syslog-to-show-on-elasticsearch/273179)
**Author:** [@Praewpun](https://discuss.elastic.co/u/Praewpun)\ **Replies:** 4\ **Last updated:** [May 18, 2021, 1:41pm UTC](https://discuss.elastic.co/t/having-problem-getting-syslog-to-show-on-elasticsearch/273179 "2021-05-18T13:41:24Z")
Hi, I'm having problems trying to get syslog sent by external sources to logstash, then to elasticsearch (Kibana). I think the problem is that I don't understand what should the host and port should be specified. Here … --- ## [Unassigned\_shards":1](https://discuss.elastic.co/t/unassigned-shards-1/273083)
**Author:** [@jeyasingh\_t](https://discuss.elastic.co/u/jeyasingh_t)\ **Replies:** 3\ **Last updated:** [May 18, 2021, 1:40pm UTC](https://discuss.elastic.co/t/unassigned-shards-1/273083 "2021-05-18T13:40:01Z")
Hi, We use 6.8.1 with 3 cluster and got into this situation due to one of the hosts ran out of storage. I used the below command to address the read-only index. curl -X PUT 'http://xxxxxxxxxxxxx:9200/\_all/\_settings -H … --- ## [Applying global Time filter within a visualization to other dates](https://discuss.elastic.co/t/applying-global-time-filter-within-a-visualization-to-other-dates/273248)
**Author:** [@Thomas\_Pierrot](https://discuss.elastic.co/u/Thomas_Pierrot)\ **Replies:** 2\ **Last updated:** [May 18, 2021, 1:30pm UTC](https://discuss.elastic.co/t/applying-global-time-filter-within-a-visualization-to-other-dates/273248 "2021-05-18T13:30:53Z")
Hi, I'm creating a visualization and I need to filter some dates using the same time range selected in the time picker and I simply don't know how to do so. Basically, I'm creating a visualization based on an index th… --- ## [Grok hhtp](https://discuss.elastic.co/t/grok-hhtp/273292)
**Author:** [@delacoche28](https://discuss.elastic.co/u/delacoche28)\ **Replies:** 0\ **Last updated:** [May 18, 2021, 1:28pm UTC](https://discuss.elastic.co/t/grok-hhtp/273292 "2021-05-18T13:28:06Z")
hello with this log line: HTTP/1.0" 200 285 "-" "-" 30.853 I want to have a word to have paterns like : protocole : HTPP HTTP\_VERSION: 1.0 THX --- ## [Bad Top values on Data table](https://discuss.elastic.co/t/bad-top-values-on-data-table/273276)
**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\ **Replies:** 2\ **Last updated:** [May 18, 2021, 12:28pm UTC](https://discuss.elastic.co/t/bad-top-values-on-data-table/273276 "2021-05-18T12:28:37Z")
Hello, I'm on Kibana V7.12.0 I have inconsistent values on data table : Like you see, I have lot of Other value... But, I can understant why (the limits of 100 values). But you can see "RepMgr.exe" is on second posi… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1409) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1411)